everything-dev 1.53.1 → 2.0.0-rc.0

package/dist/cdn-deploy.cjs

@@ -0,0 +1,126 @@
+//#region src/cdn-deploy.ts
+const LOCAL_HOSTNAMES = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"::1",
+	"[::1]",
+	"0.0.0.0",
+	"local"
+]);
+/** Local/private destinations can never serve production bundles. */
+function isLocalOrigin(url) {
+	try {
+		const { hostname, protocol } = new URL(url);
+		if (protocol !== "http:" && protocol !== "https:") return true;
+		const host = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+		return LOCAL_HOSTNAMES.has(host) || host.endsWith(".localhost") || host.endsWith(".local") || /^127\.\d+\.\d+\.\d+$/.test(host) || /^10\.\d+\.\d+\.\d+$/.test(host) || /^192\.168\.\d+\.\d+$/.test(host) || /^172\.(1[6-9]|2\d|3[01])\.\d+\.\d+$/.test(host) || host.startsWith("169.254.") || host.includes(":") && (host.startsWith("fe80:") || host.startsWith("fc") || host.startsWith("fd"));
+	} catch {
+		return true;
+	}
+}
+/**
+* Deploy origin resolution (ADR 0020, as amended): the CDN origin comes from
+* the env or the authored `cdn.origin` (inherited via extends) — a hard
+* requirement when uploads are planned, because the host never serves
+* `/bundles` itself. The upload origin is the env, the `bos login` session's
+* siteUrl, or the runtime's own gateway. A session pinned to a local site is
+* a hard error (the origin can only ever be a squatter's port); an env-pinned
+* local origin is deliberate local testing and only warns. Config-only
+* publishes (`uploadsPlanned: false`) ship the committed config verbatim —
+* no origins are resolved and nothing is required.
+*/
+function resolveCdnDeployInputs(input) {
+	const envCdnOrigin = input.env.BOS_BUNDLE_CDN_ORIGIN?.replace(/\/$/, "");
+	const configCdnOrigin = input.bosConfig?.cdn?.origin?.replace(/\/$/, "");
+	const storageEnvOrigin = input.env.BOS_STORAGE_ORIGIN?.replace(/\/$/, "");
+	const sessionSite = input.session?.siteUrl?.replace(/\/$/, "");
+	const apiKey = input.env.BOS_STORAGE_API_KEY ?? input.session?.apiKey;
+	const uploadsPlanned = input.uploadsPlanned;
+	const storageOriginDefault = storageEnvOrigin ?? sessionSite ?? `https://${input.gateway}`;
+	if (!uploadsPlanned) return {
+		cdnOrigin: void 0,
+		storageOrigin: storageOriginDefault,
+		apiKey
+	};
+	let cdnOrigin;
+	let warning;
+	if (envCdnOrigin) {
+		cdnOrigin = envCdnOrigin;
+		if (isLocalOrigin(envCdnOrigin)) warning = `BOS_BUNDLE_CDN_ORIGIN is a local URL (${envCdnOrigin}) — deploying to a local stack, published bundle URLs will not resolve publicly.`;
+	} else if (configCdnOrigin) {
+		if (isLocalOrigin(configCdnOrigin)) return {
+			cdnOrigin,
+			storageOrigin: storageOriginDefault,
+			apiKey,
+			error: `the authored config sets cdn.origin to the local URL ${configCdnOrigin} — deploy bundle origins must be publicly reachable. Set BOS_BUNDLE_CDN_ORIGIN for a local deploy, or fix cdn.origin (inherited via extends).`
+		};
+		cdnOrigin = configCdnOrigin;
+	} else return {
+		cdnOrigin,
+		storageOrigin: storageOriginDefault,
+		apiKey,
+		error: "CDN deploy requires a bundle origin — set `cdn.origin` in bos.config.json (children inherit it from the base runtime via extends) or BOS_BUNDLE_CDN_ORIGIN in the environment."
+	};
+	let storageOrigin;
+	if (storageEnvOrigin) {
+		storageOrigin = storageEnvOrigin;
+		if (isLocalOrigin(storageEnvOrigin) && !warning) warning = `BOS_STORAGE_ORIGIN is a local URL (${storageEnvOrigin}) — uploading to a local stack.`;
+	} else if (sessionSite) {
+		if (isLocalOrigin(sessionSite)) return {
+			cdnOrigin,
+			storageOrigin: sessionSite,
+			apiKey,
+			error: `The CLI session pins uploads to ${sessionSite} — a local site can never receive production bundles. Re-run \`bos login\` against the production site, or set BOS_STORAGE_ORIGIN explicitly.`
+		};
+		storageOrigin = sessionSite;
+	} else storageOrigin = `https://${input.gateway}`;
+	if (!apiKey) return {
+		cdnOrigin,
+		storageOrigin,
+		apiKey,
+		warning,
+		error: "CDN deploy requires bundle-upload credentials — run `bos login --key` and add the printed key to GitHub secrets as BOS_STORAGE_API_KEY (or run `bos login` for interactive deploys)"
+	};
+	if (input.session?.accountId && input.session.accountId !== input.account) return {
+		cdnOrigin,
+		storageOrigin,
+		apiKey,
+		warning,
+		error: `The CLI session was created for ${input.session.accountId}, but the configured account is ${input.account}. Re-run bos login under the matching account.`
+	};
+	return {
+		cdnOrigin,
+		storageOrigin,
+		apiKey,
+		warning
+	};
+}
+/**
+* Pre-upload probe: the storage origin must actually be the platform API.
+* `/.well-known/mcp.json` is the cheapest unauthenticated platform
+* fingerprint — a random service squatting the port (or a stale session
+* pointing at the wrong server) fails here before megabytes move.
+*/
+async function probeStorageOrigin(storageOrigin, fetchImpl = fetch) {
+	const probeUrl = `${storageOrigin.replace(/\/$/, "")}/.well-known/mcp.json`;
+	let response;
+	try {
+		response = await fetchImpl(probeUrl, { headers: { accept: "application/json" } });
+	} catch (error) {
+		return `unreachable (${String(error instanceof Error ? error.message : error)})`;
+	}
+	if (!response.ok) return `GET /.well-known/mcp.json responded ${response.status}`;
+	let body;
+	try {
+		body = await response.json();
+	} catch {
+		return "did not return the platform MCP descriptor (non-JSON response)";
+	}
+	if (!body || typeof body !== "object") return "did not return the platform MCP descriptor";
+}
+
+//#endregion
+exports.isLocalOrigin = isLocalOrigin;
+exports.probeStorageOrigin = probeStorageOrigin;
+exports.resolveCdnDeployInputs = resolveCdnDeployInputs;
+//# sourceMappingURL=cdn-deploy.cjs.map

package/dist/cdn-deploy.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdn-deploy.cjs","names":[],"sources":["../src/cdn-deploy.ts"],"sourcesContent":["interface SessionCredentialLike {\n  apiKey?: string;\n  siteUrl?: string;\n  accountId?: string | null;\n}\n\nexport interface CdnDeployInputs {\n  cdnOrigin: string | undefined;\n  storageOrigin: string;\n  apiKey: string | undefined;\n  warning?: string;\n  error?: string;\n}\n\nconst LOCAL_HOSTNAMES = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\", \"0.0.0.0\", \"local\"]);\n\n/** Local/private destinations can never serve production bundles. */\nexport function isLocalOrigin(url: string): boolean {\n  try {\n    const { hostname, protocol } = new URL(url);\n    if (protocol !== \"http:\" && protocol !== \"https:\") return true;\n    const host = hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n    return (\n      LOCAL_HOSTNAMES.has(host) ||\n      host.endsWith(\".localhost\") ||\n      host.endsWith(\".local\") ||\n      /^127\\.\\d+\\.\\d+\\.\\d+$/.test(host) ||\n      /^10\\.\\d+\\.\\d+\\.\\d+$/.test(host) ||\n      /^192\\.168\\.\\d+\\.\\d+$/.test(host) ||\n      /^172\\.(1[6-9]|2\\d|3[01])\\.\\d+\\.\\d+$/.test(host) ||\n      host.startsWith(\"169.254.\") ||\n      (host.includes(\":\") &&\n        (host.startsWith(\"fe80:\") || host.startsWith(\"fc\") || host.startsWith(\"fd\")))\n    );\n  } catch {\n    return true;\n  }\n}\n\n/**\n * Deploy origin resolution (ADR 0020, as amended): the CDN origin comes from\n * the env or the authored `cdn.origin` (inherited via extends) — a hard\n * requirement when uploads are planned, because the host never serves\n * `/bundles` itself. The upload origin is the env, the `bos login` session's\n * siteUrl, or the runtime's own gateway. A session pinned to a local site is\n * a hard error (the origin can only ever be a squatter's port); an env-pinned\n * local origin is deliberate local testing and only warns. Config-only\n * publishes (`uploadsPlanned: false`) ship the committed config verbatim —\n * no origins are resolved and nothing is required.\n */\nexport function resolveCdnDeployInputs(input: {\n  env: Record<string, string | undefined>;\n  bosConfig: { cdn?: { origin?: string } } | null;\n  session: SessionCredentialLike | null;\n  account: string;\n  gateway: string;\n  uploadsPlanned: boolean;\n}): CdnDeployInputs {\n  const envCdnOrigin = input.env.BOS_BUNDLE_CDN_ORIGIN?.replace(/\\/$/, \"\");\n  const configCdnOrigin = input.bosConfig?.cdn?.origin?.replace(/\\/$/, \"\");\n  const storageEnvOrigin = input.env.BOS_STORAGE_ORIGIN?.replace(/\\/$/, \"\");\n  const sessionSite = input.session?.siteUrl?.replace(/\\/$/, \"\");\n  const apiKey = input.env.BOS_STORAGE_API_KEY ?? input.session?.apiKey;\n  const uploadsPlanned = input.uploadsPlanned;\n\n  const storageOriginDefault = storageEnvOrigin ?? sessionSite ?? `https://${input.gateway}`;\n\n  if (!uploadsPlanned) {\n    return { cdnOrigin: undefined, storageOrigin: storageOriginDefault, apiKey };\n  }\n\n  let cdnOrigin: string | undefined;\n  let warning: string | undefined;\n  if (envCdnOrigin) {\n    cdnOrigin = envCdnOrigin;\n    if (isLocalOrigin(envCdnOrigin)) {\n      warning = `BOS_BUNDLE_CDN_ORIGIN is a local URL (${envCdnOrigin}) — deploying to a local stack, published bundle URLs will not resolve publicly.`;\n    }\n  } else if (configCdnOrigin) {\n    if (isLocalOrigin(configCdnOrigin)) {\n      return {\n        cdnOrigin,\n        storageOrigin: storageOriginDefault,\n        apiKey,\n        error:\n          `the authored config sets cdn.origin to the local URL ${configCdnOrigin} — deploy bundle ` +\n          \"origins must be publicly reachable. Set BOS_BUNDLE_CDN_ORIGIN for a local deploy, \" +\n          \"or fix cdn.origin (inherited via extends).\",\n      };\n    }\n    cdnOrigin = configCdnOrigin;\n  } else {\n    return {\n      cdnOrigin,\n      storageOrigin: storageOriginDefault,\n      apiKey,\n      error:\n        \"CDN deploy requires a bundle origin — set `cdn.origin` in bos.config.json \" +\n        \"(children inherit it from the base runtime via extends) or BOS_BUNDLE_CDN_ORIGIN \" +\n        \"in the environment.\",\n    };\n  }\n\n  let storageOrigin: string;\n  if (storageEnvOrigin) {\n    storageOrigin = storageEnvOrigin;\n    if (isLocalOrigin(storageEnvOrigin) && !warning) {\n      warning = `BOS_STORAGE_ORIGIN is a local URL (${storageEnvOrigin}) — uploading to a local stack.`;\n    }\n  } else if (sessionSite) {\n    if (isLocalOrigin(sessionSite)) {\n      return {\n        cdnOrigin,\n        storageOrigin: sessionSite,\n        apiKey,\n        error:\n          `The CLI session pins uploads to ${sessionSite} — a local site can never receive ` +\n          \"production bundles. Re-run `bos login` against the production site, or set \" +\n          \"BOS_STORAGE_ORIGIN explicitly.\",\n      };\n    }\n    storageOrigin = sessionSite;\n  } else {\n    storageOrigin = `https://${input.gateway}`;\n  }\n\n  if (!apiKey) {\n    return {\n      cdnOrigin,\n      storageOrigin,\n      apiKey,\n      warning,\n      error:\n        \"CDN deploy requires bundle-upload credentials — run `bos login --key` and add the printed key \" +\n        \"to GitHub secrets as BOS_STORAGE_API_KEY (or run `bos login` for interactive deploys)\",\n    };\n  }\n  if (input.session?.accountId && input.session.accountId !== input.account) {\n    return {\n      cdnOrigin,\n      storageOrigin,\n      apiKey,\n      warning,\n      error: `The CLI session was created for ${input.session.accountId}, but the configured account is ${input.account}. Re-run bos login under the matching account.`,\n    };\n  }\n  return { cdnOrigin, storageOrigin, apiKey, warning };\n}\n\n/**\n * Pre-upload probe: the storage origin must actually be the platform API.\n * `/.well-known/mcp.json` is the cheapest unauthenticated platform\n * fingerprint — a random service squatting the port (or a stale session\n * pointing at the wrong server) fails here before megabytes move.\n */\nexport async function probeStorageOrigin(\n  storageOrigin: string,\n  fetchImpl: typeof fetch = fetch,\n): Promise<string | undefined> {\n  const probeUrl = `${storageOrigin.replace(/\\/$/, \"\")}/.well-known/mcp.json`;\n  let response: Response;\n  try {\n    response = await fetchImpl(probeUrl, { headers: { accept: \"application/json\" } });\n  } catch (error) {\n    return `unreachable (${String(error instanceof Error ? error.message : error)})`;\n  }\n  if (!response.ok) {\n    return `GET /.well-known/mcp.json responded ${response.status}`;\n  }\n  let body: unknown;\n  try {\n    body = await response.json();\n  } catch {\n    return \"did not return the platform MCP descriptor (non-JSON response)\";\n  }\n  if (!body || typeof body !== \"object\") {\n    return \"did not return the platform MCP descriptor\";\n  }\n  return undefined;\n}\n"],"mappings":";AAcA,MAAM,kCAAkB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;CAAS;CAAW;AAAO,CAAC;;AAG9F,SAAgB,cAAc,KAAsB;CAClD,IAAI;EACF,MAAM,EAAE,UAAU,aAAa,IAAI,IAAI,GAAG;EAC1C,IAAI,aAAa,WAAW,aAAa,UAAU,OAAO;EAC1D,MAAM,OAAO,SAAS,YAAY,CAAC,CAAC,QAAQ,YAAY,EAAE;EAC1D,OACE,gBAAgB,IAAI,IAAI,KACxB,KAAK,SAAS,YAAY,KAC1B,KAAK,SAAS,QAAQ,KACtB,uBAAuB,KAAK,IAAI,KAChC,sBAAsB,KAAK,IAAI,KAC/B,uBAAuB,KAAK,IAAI,KAChC,sCAAsC,KAAK,IAAI,KAC/C,KAAK,WAAW,UAAU,KACzB,KAAK,SAAS,GAAG,MACf,KAAK,WAAW,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,IAAI;CAEhF,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;;AAaA,SAAgB,uBAAuB,OAOnB;CAClB,MAAM,eAAe,MAAM,IAAI,uBAAuB,QAAQ,OAAO,EAAE;CACvE,MAAM,kBAAkB,MAAM,WAAW,KAAK,QAAQ,QAAQ,OAAO,EAAE;CACvE,MAAM,mBAAmB,MAAM,IAAI,oBAAoB,QAAQ,OAAO,EAAE;CACxE,MAAM,cAAc,MAAM,SAAS,SAAS,QAAQ,OAAO,EAAE;CAC7D,MAAM,SAAS,MAAM,IAAI,uBAAuB,MAAM,SAAS;CAC/D,MAAM,iBAAiB,MAAM;CAE7B,MAAM,uBAAuB,oBAAoB,eAAe,WAAW,MAAM;CAEjF,IAAI,CAAC,gBACH,OAAO;EAAE,WAAW;EAAW,eAAe;EAAsB;CAAO;CAG7E,IAAI;CACJ,IAAI;CACJ,IAAI,cAAc;EAChB,YAAY;EACZ,IAAI,cAAc,YAAY,GAC5B,UAAU,yCAAyC,aAAa;CAEpE,OAAO,IAAI,iBAAiB;EAC1B,IAAI,cAAc,eAAe,GAC/B,OAAO;GACL;GACA,eAAe;GACf;GACA,OACE,wDAAwD,gBAAgB;EAG5E;EAEF,YAAY;CACd,OACE,OAAO;EACL;EACA,eAAe;EACf;EACA,OACE;CAGJ;CAGF,IAAI;CACJ,IAAI,kBAAkB;EACpB,gBAAgB;EAChB,IAAI,cAAc,gBAAgB,KAAK,CAAC,SACtC,UAAU,sCAAsC,iBAAiB;CAErE,OAAO,IAAI,aAAa;EACtB,IAAI,cAAc,WAAW,GAC3B,OAAO;GACL;GACA,eAAe;GACf;GACA,OACE,mCAAmC,YAAY;EAGnD;EAEF,gBAAgB;CAClB,OACE,gBAAgB,WAAW,MAAM;CAGnC,IAAI,CAAC,QACH,OAAO;EACL;EACA;EACA;EACA;EACA,OACE;CAEJ;CAEF,IAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,cAAc,MAAM,SAChE,OAAO;EACL;EACA;EACA;EACA;EACA,OAAO,mCAAmC,MAAM,QAAQ,UAAU,kCAAkC,MAAM,QAAQ;CACpH;CAEF,OAAO;EAAE;EAAW;EAAe;EAAQ;CAAQ;AACrD;;;;;;;AAQA,eAAsB,mBACpB,eACA,YAA0B,OACG;CAC7B,MAAM,WAAW,GAAG,cAAc,QAAQ,OAAO,EAAE,EAAE;CACrD,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,UAAU,UAAU,EAAE,SAAS,EAAE,QAAQ,mBAAmB,EAAE,CAAC;CAClF,SAAS,OAAO;EACd,OAAO,gBAAgB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,KAAK,EAAE;CAChF;CACA,IAAI,CAAC,SAAS,IACZ,OAAO,uCAAuC,SAAS;CAEzD,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,SAAS,KAAK;CAC7B,QAAQ;EACN,OAAO;CACT;CACA,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B,OAAO;AAGX"}

package/dist/cdn-deploy.mjs

@@ -0,0 +1,124 @@
+//#region src/cdn-deploy.ts
+const LOCAL_HOSTNAMES = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"::1",
+	"[::1]",
+	"0.0.0.0",
+	"local"
+]);
+/** Local/private destinations can never serve production bundles. */
+function isLocalOrigin(url) {
+	try {
+		const { hostname, protocol } = new URL(url);
+		if (protocol !== "http:" && protocol !== "https:") return true;
+		const host = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+		return LOCAL_HOSTNAMES.has(host) || host.endsWith(".localhost") || host.endsWith(".local") || /^127\.\d+\.\d+\.\d+$/.test(host) || /^10\.\d+\.\d+\.\d+$/.test(host) || /^192\.168\.\d+\.\d+$/.test(host) || /^172\.(1[6-9]|2\d|3[01])\.\d+\.\d+$/.test(host) || host.startsWith("169.254.") || host.includes(":") && (host.startsWith("fe80:") || host.startsWith("fc") || host.startsWith("fd"));
+	} catch {
+		return true;
+	}
+}
+/**
+* Deploy origin resolution (ADR 0020, as amended): the CDN origin comes from
+* the env or the authored `cdn.origin` (inherited via extends) — a hard
+* requirement when uploads are planned, because the host never serves
+* `/bundles` itself. The upload origin is the env, the `bos login` session's
+* siteUrl, or the runtime's own gateway. A session pinned to a local site is
+* a hard error (the origin can only ever be a squatter's port); an env-pinned
+* local origin is deliberate local testing and only warns. Config-only
+* publishes (`uploadsPlanned: false`) ship the committed config verbatim —
+* no origins are resolved and nothing is required.
+*/
+function resolveCdnDeployInputs(input) {
+	const envCdnOrigin = input.env.BOS_BUNDLE_CDN_ORIGIN?.replace(/\/$/, "");
+	const configCdnOrigin = input.bosConfig?.cdn?.origin?.replace(/\/$/, "");
+	const storageEnvOrigin = input.env.BOS_STORAGE_ORIGIN?.replace(/\/$/, "");
+	const sessionSite = input.session?.siteUrl?.replace(/\/$/, "");
+	const apiKey = input.env.BOS_STORAGE_API_KEY ?? input.session?.apiKey;
+	const uploadsPlanned = input.uploadsPlanned;
+	const storageOriginDefault = storageEnvOrigin ?? sessionSite ?? `https://${input.gateway}`;
+	if (!uploadsPlanned) return {
+		cdnOrigin: void 0,
+		storageOrigin: storageOriginDefault,
+		apiKey
+	};
+	let cdnOrigin;
+	let warning;
+	if (envCdnOrigin) {
+		cdnOrigin = envCdnOrigin;
+		if (isLocalOrigin(envCdnOrigin)) warning = `BOS_BUNDLE_CDN_ORIGIN is a local URL (${envCdnOrigin}) — deploying to a local stack, published bundle URLs will not resolve publicly.`;
+	} else if (configCdnOrigin) {
+		if (isLocalOrigin(configCdnOrigin)) return {
+			cdnOrigin,
+			storageOrigin: storageOriginDefault,
+			apiKey,
+			error: `the authored config sets cdn.origin to the local URL ${configCdnOrigin} — deploy bundle origins must be publicly reachable. Set BOS_BUNDLE_CDN_ORIGIN for a local deploy, or fix cdn.origin (inherited via extends).`
+		};
+		cdnOrigin = configCdnOrigin;
+	} else return {
+		cdnOrigin,
+		storageOrigin: storageOriginDefault,
+		apiKey,
+		error: "CDN deploy requires a bundle origin — set `cdn.origin` in bos.config.json (children inherit it from the base runtime via extends) or BOS_BUNDLE_CDN_ORIGIN in the environment."
+	};
+	let storageOrigin;
+	if (storageEnvOrigin) {
+		storageOrigin = storageEnvOrigin;
+		if (isLocalOrigin(storageEnvOrigin) && !warning) warning = `BOS_STORAGE_ORIGIN is a local URL (${storageEnvOrigin}) — uploading to a local stack.`;
+	} else if (sessionSite) {
+		if (isLocalOrigin(sessionSite)) return {
+			cdnOrigin,
+			storageOrigin: sessionSite,
+			apiKey,
+			error: `The CLI session pins uploads to ${sessionSite} — a local site can never receive production bundles. Re-run \`bos login\` against the production site, or set BOS_STORAGE_ORIGIN explicitly.`
+		};
+		storageOrigin = sessionSite;
+	} else storageOrigin = `https://${input.gateway}`;
+	if (!apiKey) return {
+		cdnOrigin,
+		storageOrigin,
+		apiKey,
+		warning,
+		error: "CDN deploy requires bundle-upload credentials — run `bos login --key` and add the printed key to GitHub secrets as BOS_STORAGE_API_KEY (or run `bos login` for interactive deploys)"
+	};
+	if (input.session?.accountId && input.session.accountId !== input.account) return {
+		cdnOrigin,
+		storageOrigin,
+		apiKey,
+		warning,
+		error: `The CLI session was created for ${input.session.accountId}, but the configured account is ${input.account}. Re-run bos login under the matching account.`
+	};
+	return {
+		cdnOrigin,
+		storageOrigin,
+		apiKey,
+		warning
+	};
+}
+/**
+* Pre-upload probe: the storage origin must actually be the platform API.
+* `/.well-known/mcp.json` is the cheapest unauthenticated platform
+* fingerprint — a random service squatting the port (or a stale session
+* pointing at the wrong server) fails here before megabytes move.
+*/
+async function probeStorageOrigin(storageOrigin, fetchImpl = fetch) {
+	const probeUrl = `${storageOrigin.replace(/\/$/, "")}/.well-known/mcp.json`;
+	let response;
+	try {
+		response = await fetchImpl(probeUrl, { headers: { accept: "application/json" } });
+	} catch (error) {
+		return `unreachable (${String(error instanceof Error ? error.message : error)})`;
+	}
+	if (!response.ok) return `GET /.well-known/mcp.json responded ${response.status}`;
+	let body;
+	try {
+		body = await response.json();
+	} catch {
+		return "did not return the platform MCP descriptor (non-JSON response)";
+	}
+	if (!body || typeof body !== "object") return "did not return the platform MCP descriptor";
+}
+
+//#endregion
+export { isLocalOrigin, probeStorageOrigin, resolveCdnDeployInputs };
+//# sourceMappingURL=cdn-deploy.mjs.map

package/dist/cdn-deploy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdn-deploy.mjs","names":[],"sources":["../src/cdn-deploy.ts"],"sourcesContent":["interface SessionCredentialLike {\n  apiKey?: string;\n  siteUrl?: string;\n  accountId?: string | null;\n}\n\nexport interface CdnDeployInputs {\n  cdnOrigin: string | undefined;\n  storageOrigin: string;\n  apiKey: string | undefined;\n  warning?: string;\n  error?: string;\n}\n\nconst LOCAL_HOSTNAMES = new Set([\"localhost\", \"127.0.0.1\", \"::1\", \"[::1]\", \"0.0.0.0\", \"local\"]);\n\n/** Local/private destinations can never serve production bundles. */\nexport function isLocalOrigin(url: string): boolean {\n  try {\n    const { hostname, protocol } = new URL(url);\n    if (protocol !== \"http:\" && protocol !== \"https:\") return true;\n    const host = hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n    return (\n      LOCAL_HOSTNAMES.has(host) ||\n      host.endsWith(\".localhost\") ||\n      host.endsWith(\".local\") ||\n      /^127\\.\\d+\\.\\d+\\.\\d+$/.test(host) ||\n      /^10\\.\\d+\\.\\d+\\.\\d+$/.test(host) ||\n      /^192\\.168\\.\\d+\\.\\d+$/.test(host) ||\n      /^172\\.(1[6-9]|2\\d|3[01])\\.\\d+\\.\\d+$/.test(host) ||\n      host.startsWith(\"169.254.\") ||\n      (host.includes(\":\") &&\n        (host.startsWith(\"fe80:\") || host.startsWith(\"fc\") || host.startsWith(\"fd\")))\n    );\n  } catch {\n    return true;\n  }\n}\n\n/**\n * Deploy origin resolution (ADR 0020, as amended): the CDN origin comes from\n * the env or the authored `cdn.origin` (inherited via extends) — a hard\n * requirement when uploads are planned, because the host never serves\n * `/bundles` itself. The upload origin is the env, the `bos login` session's\n * siteUrl, or the runtime's own gateway. A session pinned to a local site is\n * a hard error (the origin can only ever be a squatter's port); an env-pinned\n * local origin is deliberate local testing and only warns. Config-only\n * publishes (`uploadsPlanned: false`) ship the committed config verbatim —\n * no origins are resolved and nothing is required.\n */\nexport function resolveCdnDeployInputs(input: {\n  env: Record<string, string | undefined>;\n  bosConfig: { cdn?: { origin?: string } } | null;\n  session: SessionCredentialLike | null;\n  account: string;\n  gateway: string;\n  uploadsPlanned: boolean;\n}): CdnDeployInputs {\n  const envCdnOrigin = input.env.BOS_BUNDLE_CDN_ORIGIN?.replace(/\\/$/, \"\");\n  const configCdnOrigin = input.bosConfig?.cdn?.origin?.replace(/\\/$/, \"\");\n  const storageEnvOrigin = input.env.BOS_STORAGE_ORIGIN?.replace(/\\/$/, \"\");\n  const sessionSite = input.session?.siteUrl?.replace(/\\/$/, \"\");\n  const apiKey = input.env.BOS_STORAGE_API_KEY ?? input.session?.apiKey;\n  const uploadsPlanned = input.uploadsPlanned;\n\n  const storageOriginDefault = storageEnvOrigin ?? sessionSite ?? `https://${input.gateway}`;\n\n  if (!uploadsPlanned) {\n    return { cdnOrigin: undefined, storageOrigin: storageOriginDefault, apiKey };\n  }\n\n  let cdnOrigin: string | undefined;\n  let warning: string | undefined;\n  if (envCdnOrigin) {\n    cdnOrigin = envCdnOrigin;\n    if (isLocalOrigin(envCdnOrigin)) {\n      warning = `BOS_BUNDLE_CDN_ORIGIN is a local URL (${envCdnOrigin}) — deploying to a local stack, published bundle URLs will not resolve publicly.`;\n    }\n  } else if (configCdnOrigin) {\n    if (isLocalOrigin(configCdnOrigin)) {\n      return {\n        cdnOrigin,\n        storageOrigin: storageOriginDefault,\n        apiKey,\n        error:\n          `the authored config sets cdn.origin to the local URL ${configCdnOrigin} — deploy bundle ` +\n          \"origins must be publicly reachable. Set BOS_BUNDLE_CDN_ORIGIN for a local deploy, \" +\n          \"or fix cdn.origin (inherited via extends).\",\n      };\n    }\n    cdnOrigin = configCdnOrigin;\n  } else {\n    return {\n      cdnOrigin,\n      storageOrigin: storageOriginDefault,\n      apiKey,\n      error:\n        \"CDN deploy requires a bundle origin — set `cdn.origin` in bos.config.json \" +\n        \"(children inherit it from the base runtime via extends) or BOS_BUNDLE_CDN_ORIGIN \" +\n        \"in the environment.\",\n    };\n  }\n\n  let storageOrigin: string;\n  if (storageEnvOrigin) {\n    storageOrigin = storageEnvOrigin;\n    if (isLocalOrigin(storageEnvOrigin) && !warning) {\n      warning = `BOS_STORAGE_ORIGIN is a local URL (${storageEnvOrigin}) — uploading to a local stack.`;\n    }\n  } else if (sessionSite) {\n    if (isLocalOrigin(sessionSite)) {\n      return {\n        cdnOrigin,\n        storageOrigin: sessionSite,\n        apiKey,\n        error:\n          `The CLI session pins uploads to ${sessionSite} — a local site can never receive ` +\n          \"production bundles. Re-run `bos login` against the production site, or set \" +\n          \"BOS_STORAGE_ORIGIN explicitly.\",\n      };\n    }\n    storageOrigin = sessionSite;\n  } else {\n    storageOrigin = `https://${input.gateway}`;\n  }\n\n  if (!apiKey) {\n    return {\n      cdnOrigin,\n      storageOrigin,\n      apiKey,\n      warning,\n      error:\n        \"CDN deploy requires bundle-upload credentials — run `bos login --key` and add the printed key \" +\n        \"to GitHub secrets as BOS_STORAGE_API_KEY (or run `bos login` for interactive deploys)\",\n    };\n  }\n  if (input.session?.accountId && input.session.accountId !== input.account) {\n    return {\n      cdnOrigin,\n      storageOrigin,\n      apiKey,\n      warning,\n      error: `The CLI session was created for ${input.session.accountId}, but the configured account is ${input.account}. Re-run bos login under the matching account.`,\n    };\n  }\n  return { cdnOrigin, storageOrigin, apiKey, warning };\n}\n\n/**\n * Pre-upload probe: the storage origin must actually be the platform API.\n * `/.well-known/mcp.json` is the cheapest unauthenticated platform\n * fingerprint — a random service squatting the port (or a stale session\n * pointing at the wrong server) fails here before megabytes move.\n */\nexport async function probeStorageOrigin(\n  storageOrigin: string,\n  fetchImpl: typeof fetch = fetch,\n): Promise<string | undefined> {\n  const probeUrl = `${storageOrigin.replace(/\\/$/, \"\")}/.well-known/mcp.json`;\n  let response: Response;\n  try {\n    response = await fetchImpl(probeUrl, { headers: { accept: \"application/json\" } });\n  } catch (error) {\n    return `unreachable (${String(error instanceof Error ? error.message : error)})`;\n  }\n  if (!response.ok) {\n    return `GET /.well-known/mcp.json responded ${response.status}`;\n  }\n  let body: unknown;\n  try {\n    body = await response.json();\n  } catch {\n    return \"did not return the platform MCP descriptor (non-JSON response)\";\n  }\n  if (!body || typeof body !== \"object\") {\n    return \"did not return the platform MCP descriptor\";\n  }\n  return undefined;\n}\n"],"mappings":";AAcA,MAAM,kCAAkB,IAAI,IAAI;CAAC;CAAa;CAAa;CAAO;CAAS;CAAW;AAAO,CAAC;;AAG9F,SAAgB,cAAc,KAAsB;CAClD,IAAI;EACF,MAAM,EAAE,UAAU,aAAa,IAAI,IAAI,GAAG;EAC1C,IAAI,aAAa,WAAW,aAAa,UAAU,OAAO;EAC1D,MAAM,OAAO,SAAS,YAAY,CAAC,CAAC,QAAQ,YAAY,EAAE;EAC1D,OACE,gBAAgB,IAAI,IAAI,KACxB,KAAK,SAAS,YAAY,KAC1B,KAAK,SAAS,QAAQ,KACtB,uBAAuB,KAAK,IAAI,KAChC,sBAAsB,KAAK,IAAI,KAC/B,uBAAuB,KAAK,IAAI,KAChC,sCAAsC,KAAK,IAAI,KAC/C,KAAK,WAAW,UAAU,KACzB,KAAK,SAAS,GAAG,MACf,KAAK,WAAW,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,IAAI;CAEhF,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;;AAaA,SAAgB,uBAAuB,OAOnB;CAClB,MAAM,eAAe,MAAM,IAAI,uBAAuB,QAAQ,OAAO,EAAE;CACvE,MAAM,kBAAkB,MAAM,WAAW,KAAK,QAAQ,QAAQ,OAAO,EAAE;CACvE,MAAM,mBAAmB,MAAM,IAAI,oBAAoB,QAAQ,OAAO,EAAE;CACxE,MAAM,cAAc,MAAM,SAAS,SAAS,QAAQ,OAAO,EAAE;CAC7D,MAAM,SAAS,MAAM,IAAI,uBAAuB,MAAM,SAAS;CAC/D,MAAM,iBAAiB,MAAM;CAE7B,MAAM,uBAAuB,oBAAoB,eAAe,WAAW,MAAM;CAEjF,IAAI,CAAC,gBACH,OAAO;EAAE,WAAW;EAAW,eAAe;EAAsB;CAAO;CAG7E,IAAI;CACJ,IAAI;CACJ,IAAI,cAAc;EAChB,YAAY;EACZ,IAAI,cAAc,YAAY,GAC5B,UAAU,yCAAyC,aAAa;CAEpE,OAAO,IAAI,iBAAiB;EAC1B,IAAI,cAAc,eAAe,GAC/B,OAAO;GACL;GACA,eAAe;GACf;GACA,OACE,wDAAwD,gBAAgB;EAG5E;EAEF,YAAY;CACd,OACE,OAAO;EACL;EACA,eAAe;EACf;EACA,OACE;CAGJ;CAGF,IAAI;CACJ,IAAI,kBAAkB;EACpB,gBAAgB;EAChB,IAAI,cAAc,gBAAgB,KAAK,CAAC,SACtC,UAAU,sCAAsC,iBAAiB;CAErE,OAAO,IAAI,aAAa;EACtB,IAAI,cAAc,WAAW,GAC3B,OAAO;GACL;GACA,eAAe;GACf;GACA,OACE,mCAAmC,YAAY;EAGnD;EAEF,gBAAgB;CAClB,OACE,gBAAgB,WAAW,MAAM;CAGnC,IAAI,CAAC,QACH,OAAO;EACL;EACA;EACA;EACA;EACA,OACE;CAEJ;CAEF,IAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,cAAc,MAAM,SAChE,OAAO;EACL;EACA;EACA;EACA;EACA,OAAO,mCAAmC,MAAM,QAAQ,UAAU,kCAAkC,MAAM,QAAQ;CACpH;CAEF,OAAO;EAAE;EAAW;EAAe;EAAQ;CAAQ;AACrD;;;;;;;AAQA,eAAsB,mBACpB,eACA,YAA0B,OACG;CAC7B,MAAM,WAAW,GAAG,cAAc,QAAQ,OAAO,EAAE,EAAE;CACrD,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,UAAU,UAAU,EAAE,SAAS,EAAE,QAAQ,mBAAmB,EAAE,CAAC;CAClF,SAAS,OAAO;EACd,OAAO,gBAAgB,OAAO,iBAAiB,QAAQ,MAAM,UAAU,KAAK,EAAE;CAChF;CACA,IAAI,CAAC,SAAS,IACZ,OAAO,uCAAuC,SAAS;CAEzD,IAAI;CACJ,IAAI;EACF,OAAO,MAAM,SAAS,KAAK;CAC7B,QAAQ;EACN,OAAO;CACT;CACA,IAAI,CAAC,QAAQ,OAAO,SAAS,UAC3B,OAAO;AAGX"}

package/dist/cli/db-doctor.cjs

@@ -1,4 +1,4 @@
-const require_db = require('../db.cjs');
+const require_core = require('../db/core.cjs');
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 let node_crypto = require("node:crypto");
@@ -9,7 +9,8 @@ function hashFile(raw) {
 }
 function readLocalMigrations(workspaceDir) {
 	const migrationsDir = (0, node_path.resolve)(workspaceDir, "src/db/migrations");
-	const journalPath = (0, node_path.join)((0, node_path.join)(migrationsDir, "meta"), "_journal.json");
+	const metaDir = (0, node_path.join)(migrationsDir, "meta");
+	const journalPath = (0, node_path.join)(metaDir, "_journal.json");
 	if (!(0, node_fs.existsSync)(journalPath)) return [];
 	return JSON.parse((0, node_fs.readFileSync)(journalPath, "utf8")).entries.map((entry) => {
 		const sqlPath = (0, node_path.join)(migrationsDir, `${entry.tag}.sql`);
@@ -27,20 +28,19 @@ function readLocalMigrations(workspaceDir) {
 		};
 	});
 }
-async function diagnosePlugin(info) {
+async function diagnosePlugin(binding) {
 	const { Pool } = await import("pg");
-	const slug = require_db.pluginMigrationSlug(info.key);
-	const storage = require_db.getMigrationStorage(slug);
-	const journalTable = storage.table;
-	const journalSchema = storage.schema;
+	const slug = binding.identity.slug;
+	const journalTable = binding.identity.journal.table;
+	const journalSchema = binding.identity.journal.schema;
 	const journalRef = `"${journalSchema}"."${journalTable}"`;
-	const localMigrations = info.workspaceDir ? readLocalMigrations(info.workspaceDir) : [];
-	const expectedTables = require_db.extractExpectedTables(localMigrations);
+	const localMigrations = binding.identity.workspaceDir ? readLocalMigrations(binding.identity.workspaceDir) : [];
+	const expectedTables = require_core.extractExpectedTables(localMigrations);
 	const localHashes = localMigrations.map((m) => m.hash).filter(Boolean);
 	const migrationHashes = localHashes;
 	const pool = new Pool({
-		connectionString: info.databaseUrl,
-		ssl: info.databaseUrl.includes("localhost") || info.databaseUrl.includes("127.0.0.1") ? false : { rejectUnauthorized: false },
+		connectionString: binding.url,
+		ssl: binding.url.includes("localhost") || binding.url.includes("127.0.0.1") ? false : { rejectUnauthorized: false },
 		max: 1,
 		connectionTimeoutMillis: 1e4
 	});
@@ -70,15 +70,15 @@ async function diagnosePlugin(info) {
 		else if (missingTables.length === 0) diagnosis = "healthy";
 		else if (missingTables.length === expectedTables.length) diagnosis = "drift-safe-repair";
 		else diagnosis = "drift-manual";
-		const masked = info.databaseUrl.replace(/\/\/[^:]+:[^@]+@/, "//***:***@");
+		const masked = binding.url.replace(/\/\/[^:]+:[^@]+@/, "//***:***@");
 		return {
-			plugin: info.key,
+			plugin: binding.key,
 			slug,
 			journalTable,
 			journalSchema,
-			dbSecret: info.databaseSecret,
+			dbSecret: binding.identity.secretName,
 			dbUrl: masked,
-			workspaceDir: info.workspaceDir,
+			workspaceDir: binding.identity.workspaceDir,
 			localMigrationCount: localMigrations.length,
 			appliedHashCount,
 			expectedTables,
@@ -88,13 +88,13 @@ async function diagnosePlugin(info) {
 		};
 	} catch (error) {
 		return {
-			plugin: info.key,
+			plugin: binding.key,
 			slug,
 			journalTable,
 			journalSchema,
-			dbSecret: info.databaseSecret,
-			dbUrl: info.databaseUrl.replace(/\/\/[^:]+:[^@]+@/, "//***:***@"),
-			workspaceDir: info.workspaceDir,
+			dbSecret: binding.identity.secretName,
+			dbUrl: binding.url.replace(/\/\/[^:]+:[^@]+@/, "//***:***@"),
+			workspaceDir: binding.identity.workspaceDir,
 			localMigrationCount: localMigrations.length,
 			appliedHashCount: 0,
 			expectedTables,

package/dist/cli/db-doctor.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"db-doctor.cjs","names":["pluginMigrationSlug","getMigrationStorage","extractExpectedTables"],"sources":["../../src/cli/db-doctor.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { extractExpectedTables, getMigrationStorage, pluginMigrationSlug } from \"../db\";\nimport type { PluginDbInfo } from \"./db-studio\";\n\nexport interface DoctorReport {\n  plugin: string;\n  slug: string;\n  journalTable: string;\n  journalSchema: string;\n  dbSecret: string;\n  dbUrl: string;\n  workspaceDir: string | undefined;\n  localMigrationCount: number;\n  appliedHashCount: number;\n  expectedTables: string[];\n  missingTables: string[];\n  migrationHashes: string[];\n  diagnosis: string;\n  error?: string;\n}\n\nfunction hashFile(raw: string): string {\n  return createHash(\"sha256\").update(raw).digest(\"hex\");\n}\n\ninterface LocalMigration {\n  tag: string;\n  hash: string;\n  sql: string[];\n}\n\nfunction readLocalMigrations(workspaceDir: string): LocalMigration[] {\n  const migrationsDir = resolve(workspaceDir, \"src/db/migrations\");\n  const metaDir = join(migrationsDir, \"meta\");\n  const journalPath = join(metaDir, \"_journal.json\");\n  if (!existsSync(journalPath)) return [];\n\n  const journal = JSON.parse(readFileSync(journalPath, \"utf8\")) as {\n    entries: { idx: number; tag: string }[];\n  };\n\n  return journal.entries.map((entry) => {\n    const sqlPath = join(migrationsDir, `${entry.tag}.sql`);\n    if (!existsSync(sqlPath)) {\n      return { tag: entry.tag, hash: \"\", sql: [] };\n    }\n    const raw = readFileSync(sqlPath, \"utf8\");\n    const sql = raw.split(\"--> statement-breakpoint\").map((s) => s.trim());\n    return { tag: entry.tag, hash: hashFile(raw), sql };\n  });\n}\n\nexport async function diagnosePlugin(info: PluginDbInfo): Promise<DoctorReport> {\n  const { Pool } = await import(\"pg\");\n\n  const slug = pluginMigrationSlug(info.key);\n  const storage = getMigrationStorage(slug);\n  const journalTable = storage.table;\n  const journalSchema = storage.schema;\n  const journalRef = `\"${journalSchema}\".\"${journalTable}\"`;\n\n  const localMigrations = info.workspaceDir ? readLocalMigrations(info.workspaceDir) : [];\n\n  const expectedTables = extractExpectedTables(localMigrations);\n  const localHashes = localMigrations.map((m) => m.hash).filter(Boolean);\n  const migrationHashes = localHashes;\n\n  const pool = new Pool({\n    connectionString: info.databaseUrl,\n    ssl:\n      info.databaseUrl.includes(\"localhost\") || info.databaseUrl.includes(\"127.0.0.1\")\n        ? false\n        : { rejectUnauthorized: false },\n    max: 1,\n    connectionTimeoutMillis: 10_000,\n  });\n\n  try {\n    const journalExists = await pool.query(`\n      SELECT EXISTS (\n        SELECT 1 FROM information_schema.tables\n        WHERE table_schema = '${journalSchema}' AND table_name = '${journalTable}'\n      ) AS exists\n    `);\n\n    let appliedHashCount = 0;\n    if (journalExists.rows[0]?.exists) {\n      const result = await pool.query(`SELECT hash FROM ${journalRef}`);\n      appliedHashCount = result.rows.length;\n    }\n\n    let missingTables: string[] = [];\n    if (expectedTables.length > 0) {\n      const tableResult = await pool.query(\n        `\n        SELECT table_name FROM information_schema.tables\n        WHERE table_schema = 'public'\n          AND table_name = ANY($1)\n      `,\n        [expectedTables],\n      );\n      const existing = new Set(tableResult.rows.map((r: any) => r.table_name));\n      missingTables = expectedTables.filter((t) => !existing.has(t));\n    }\n\n    let diagnosis: string;\n    if (localMigrations.length === 0) {\n      diagnosis = \"no-local-migrations\";\n    } else if (appliedHashCount === 0 && missingTables.length === 0 && localHashes.length > 0) {\n      // Journal is empty but all expected public tables exist.\n      diagnosis = \"untracked-existing-schema\";\n    } else if (appliedHashCount === 0 && localHashes.length > 0) {\n      diagnosis = \"unapplied\";\n    } else if (missingTables.length === 0) {\n      diagnosis = \"healthy\";\n    } else if (missingTables.length === expectedTables.length) {\n      diagnosis = \"drift-safe-repair\";\n    } else {\n      diagnosis = \"drift-manual\";\n    }\n\n    const masked = info.databaseUrl.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\");\n\n    return {\n      plugin: info.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: info.databaseSecret,\n      dbUrl: masked,\n      workspaceDir: info.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount,\n      expectedTables,\n      missingTables,\n      migrationHashes,\n      diagnosis,\n    };\n  } catch (error) {\n    return {\n      plugin: info.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: info.databaseSecret,\n      dbUrl: info.databaseUrl.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\"),\n      workspaceDir: info.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount: 0,\n      expectedTables,\n      missingTables: [],\n      migrationHashes: [],\n      diagnosis: \"error\",\n      error: error instanceof Error ? error.message : String(error),\n    };\n  } finally {\n    await pool.end().catch(() => {});\n  }\n}\n"],"mappings":";;;;;;AAuBA,SAAS,SAAS,KAAqB;CACrC,mCAAkB,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK;AACtD;AAQA,SAAS,oBAAoB,cAAwC;CACnE,MAAM,uCAAwB,cAAc,mBAAmB;CAE/D,MAAM,sDADe,eAAe,MACL,GAAG,eAAe;CACjD,IAAI,yBAAY,WAAW,GAAG,OAAO,CAAC;CAMtC,OAJgB,KAAK,gCAAmB,aAAa,MAAM,CAI9C,CAAC,CAAC,QAAQ,KAAK,UAAU;EACpC,MAAM,8BAAe,eAAe,GAAG,MAAM,IAAI,KAAK;EACtD,IAAI,yBAAY,OAAO,GACrB,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM;GAAI,KAAK,CAAC;EAAE;EAE7C,MAAM,gCAAmB,SAAS,MAAM;EACxC,MAAM,MAAM,IAAI,MAAM,0BAA0B,CAAC,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;EACrE,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM,SAAS,GAAG;GAAG;EAAI;CACpD,CAAC;AACH;AAEA,eAAsB,eAAe,MAA2C;CAC9E,MAAM,EAAE,SAAS,MAAM,OAAO;CAE9B,MAAM,OAAOA,+BAAoB,KAAK,GAAG;CACzC,MAAM,UAAUC,+BAAoB,IAAI;CACxC,MAAM,eAAe,QAAQ;CAC7B,MAAM,gBAAgB,QAAQ;CAC9B,MAAM,aAAa,IAAI,cAAc,KAAK,aAAa;CAEvD,MAAM,kBAAkB,KAAK,eAAe,oBAAoB,KAAK,YAAY,IAAI,CAAC;CAEtF,MAAM,iBAAiBC,iCAAsB,eAAe;CAC5D,MAAM,cAAc,gBAAgB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,OAAO;CACrE,MAAM,kBAAkB;CAExB,MAAM,OAAO,IAAI,KAAK;EACpB,kBAAkB,KAAK;EACvB,KACE,KAAK,YAAY,SAAS,WAAW,KAAK,KAAK,YAAY,SAAS,WAAW,IAC3E,QACA,EAAE,oBAAoB,MAAM;EAClC,KAAK;EACL,yBAAyB;CAC3B,CAAC;CAED,IAAI;EACF,MAAM,gBAAgB,MAAM,KAAK,MAAM;;;gCAGX,cAAc,sBAAsB,aAAa;;KAE5E;EAED,IAAI,mBAAmB;EACvB,IAAI,cAAc,KAAK,EAAE,EAAE,QAEzB,oBAAmB,MADE,KAAK,MAAM,oBAAoB,YAAY,EACvC,CAAC,KAAK;EAGjC,IAAI,gBAA0B,CAAC;EAC/B,IAAI,eAAe,SAAS,GAAG;GAC7B,MAAM,cAAc,MAAM,KAAK,MAC7B;;;;SAKA,CAAC,cAAc,CACjB;GACA,MAAM,WAAW,IAAI,IAAI,YAAY,KAAK,KAAK,MAAW,EAAE,UAAU,CAAC;GACvE,gBAAgB,eAAe,QAAQ,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;EAC/D;EAEA,IAAI;EACJ,IAAI,gBAAgB,WAAW,GAC7B,YAAY;OACP,IAAI,qBAAqB,KAAK,cAAc,WAAW,KAAK,YAAY,SAAS,GAEtF,YAAY;OACP,IAAI,qBAAqB,KAAK,YAAY,SAAS,GACxD,YAAY;OACP,IAAI,cAAc,WAAW,GAClC,YAAY;OACP,IAAI,cAAc,WAAW,eAAe,QACjD,YAAY;OAEZ,YAAY;EAGd,MAAM,SAAS,KAAK,YAAY,QAAQ,oBAAoB,YAAY;EAExE,OAAO;GACL,QAAQ,KAAK;GACb;GACA;GACA;GACA,UAAU,KAAK;GACf,OAAO;GACP,cAAc,KAAK;GACnB,qBAAqB,gBAAgB;GACrC;GACA;GACA;GACA;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO;GACL,QAAQ,KAAK;GACb;GACA;GACA;GACA,UAAU,KAAK;GACf,OAAO,KAAK,YAAY,QAAQ,oBAAoB,YAAY;GAChE,cAAc,KAAK;GACnB,qBAAqB,gBAAgB;GACrC,kBAAkB;GAClB;GACA,eAAe,CAAC;GAChB,iBAAiB,CAAC;GAClB,WAAW;GACX,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAC9D;CACF,UAAU;EACR,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;CACjC;AACF"}
+{"version":3,"file":"db-doctor.cjs","names":["createHash","resolve","join","existsSync","readFileSync","extractExpectedTables"],"sources":["../../src/cli/db-doctor.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport type { DatabaseBinding } from \"../db\";\nimport { extractExpectedTables } from \"../db\";\n\nexport interface DoctorReport {\n  plugin: string;\n  slug: string;\n  journalTable: string;\n  journalSchema: string;\n  dbSecret: string;\n  dbUrl: string;\n  workspaceDir: string | undefined;\n  localMigrationCount: number;\n  appliedHashCount: number;\n  expectedTables: string[];\n  missingTables: string[];\n  migrationHashes: string[];\n  diagnosis: string;\n  error?: string;\n}\n\nfunction hashFile(raw: string): string {\n  return createHash(\"sha256\").update(raw).digest(\"hex\");\n}\n\ninterface LocalMigration {\n  tag: string;\n  hash: string;\n  sql: string[];\n}\n\nfunction readLocalMigrations(workspaceDir: string): LocalMigration[] {\n  const migrationsDir = resolve(workspaceDir, \"src/db/migrations\");\n  const metaDir = join(migrationsDir, \"meta\");\n  const journalPath = join(metaDir, \"_journal.json\");\n  if (!existsSync(journalPath)) return [];\n\n  const journal = JSON.parse(readFileSync(journalPath, \"utf8\")) as {\n    entries: { idx: number; tag: string }[];\n  };\n\n  return journal.entries.map((entry) => {\n    const sqlPath = join(migrationsDir, `${entry.tag}.sql`);\n    if (!existsSync(sqlPath)) {\n      return { tag: entry.tag, hash: \"\", sql: [] };\n    }\n    const raw = readFileSync(sqlPath, \"utf8\");\n    const sql = raw.split(\"--> statement-breakpoint\").map((s) => s.trim());\n    return { tag: entry.tag, hash: hashFile(raw), sql };\n  });\n}\n\nexport async function diagnosePlugin(binding: DatabaseBinding): Promise<DoctorReport> {\n  const { Pool } = await import(\"pg\");\n\n  const slug = binding.identity.slug;\n  const journalTable = binding.identity.journal.table;\n  const journalSchema = binding.identity.journal.schema;\n  const journalRef = `\"${journalSchema}\".\"${journalTable}\"`;\n\n  const localMigrations = binding.identity.workspaceDir\n    ? readLocalMigrations(binding.identity.workspaceDir)\n    : [];\n\n  const expectedTables = extractExpectedTables(localMigrations);\n  const localHashes = localMigrations.map((m) => m.hash).filter(Boolean);\n  const migrationHashes = localHashes;\n\n  const pool = new Pool({\n    connectionString: binding.url,\n    ssl:\n      binding.url.includes(\"localhost\") || binding.url.includes(\"127.0.0.1\")\n        ? false\n        : { rejectUnauthorized: false },\n    max: 1,\n    connectionTimeoutMillis: 10_000,\n  });\n\n  try {\n    const journalExists = await pool.query(`\n      SELECT EXISTS (\n        SELECT 1 FROM information_schema.tables\n        WHERE table_schema = '${journalSchema}' AND table_name = '${journalTable}'\n      ) AS exists\n    `);\n\n    let appliedHashCount = 0;\n    if (journalExists.rows[0]?.exists) {\n      const result = await pool.query(`SELECT hash FROM ${journalRef}`);\n      appliedHashCount = result.rows.length;\n    }\n\n    let missingTables: string[] = [];\n    if (expectedTables.length > 0) {\n      const tableResult = await pool.query(\n        `\n        SELECT table_name FROM information_schema.tables\n        WHERE table_schema = 'public'\n          AND table_name = ANY($1)\n      `,\n        [expectedTables],\n      );\n      const existing = new Set(tableResult.rows.map((r: any) => r.table_name));\n      missingTables = expectedTables.filter((t) => !existing.has(t));\n    }\n\n    let diagnosis: string;\n    if (localMigrations.length === 0) {\n      diagnosis = \"no-local-migrations\";\n    } else if (appliedHashCount === 0 && missingTables.length === 0 && localHashes.length > 0) {\n      // Journal is empty but all expected public tables exist.\n      diagnosis = \"untracked-existing-schema\";\n    } else if (appliedHashCount === 0 && localHashes.length > 0) {\n      diagnosis = \"unapplied\";\n    } else if (missingTables.length === 0) {\n      diagnosis = \"healthy\";\n    } else if (missingTables.length === expectedTables.length) {\n      diagnosis = \"drift-safe-repair\";\n    } else {\n      diagnosis = \"drift-manual\";\n    }\n\n    const masked = binding.url.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\");\n\n    return {\n      plugin: binding.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: binding.identity.secretName,\n      dbUrl: masked,\n      workspaceDir: binding.identity.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount,\n      expectedTables,\n      missingTables,\n      migrationHashes,\n      diagnosis,\n    };\n  } catch (error) {\n    return {\n      plugin: binding.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: binding.identity.secretName,\n      dbUrl: binding.url.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\"),\n      workspaceDir: binding.identity.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount: 0,\n      expectedTables,\n      missingTables: [],\n      migrationHashes: [],\n      diagnosis: \"error\",\n      error: error instanceof Error ? error.message : String(error),\n    };\n  } finally {\n    await pool.end().catch(() => {});\n  }\n}\n"],"mappings":";;;;;;AAuBA,SAAS,SAAS,KAAqB;CACrC,WAAOA,wBAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK;AACtD;AAQA,SAAS,oBAAoB,cAAwC;CACnE,MAAM,oBAAgBC,mBAAQ,cAAc,mBAAmB;CAC/D,MAAM,cAAUC,gBAAK,eAAe,MAAM;CAC1C,MAAM,kBAAcA,gBAAK,SAAS,eAAe;CACjD,IAAI,KAACC,oBAAW,WAAW,GAAG,OAAO,CAAC;CAMtC,OAJgB,KAAK,UAAMC,sBAAa,aAAa,MAAM,CAI9C,CAAC,CAAC,QAAQ,KAAK,UAAU;EACpC,MAAM,cAAUF,gBAAK,eAAe,GAAG,MAAM,IAAI,KAAK;EACtD,IAAI,KAACC,oBAAW,OAAO,GACrB,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM;GAAI,KAAK,CAAC;EAAE;EAE7C,MAAM,UAAMC,sBAAa,SAAS,MAAM;EACxC,MAAM,MAAM,IAAI,MAAM,0BAA0B,CAAC,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;EACrE,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM,SAAS,GAAG;GAAG;EAAI;CACpD,CAAC;AACH;AAEA,eAAsB,eAAe,SAAiD;CACpF,MAAM,EAAE,SAAS,MAAM,OAAO;CAE9B,MAAM,OAAO,QAAQ,SAAS;CAC9B,MAAM,eAAe,QAAQ,SAAS,QAAQ;CAC9C,MAAM,gBAAgB,QAAQ,SAAS,QAAQ;CAC/C,MAAM,aAAa,IAAI,cAAc,KAAK,aAAa;CAEvD,MAAM,kBAAkB,QAAQ,SAAS,eACrC,oBAAoB,QAAQ,SAAS,YAAY,IACjD,CAAC;CAEL,MAAM,iBAAiBC,mCAAsB,eAAe;CAC5D,MAAM,cAAc,gBAAgB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,OAAO;CACrE,MAAM,kBAAkB;CAExB,MAAM,OAAO,IAAI,KAAK;EACpB,kBAAkB,QAAQ;EAC1B,KACE,QAAQ,IAAI,SAAS,WAAW,KAAK,QAAQ,IAAI,SAAS,WAAW,IACjE,QACA,EAAE,oBAAoB,MAAM;EAClC,KAAK;EACL,yBAAyB;CAC3B,CAAC;CAED,IAAI;EACF,MAAM,gBAAgB,MAAM,KAAK,MAAM;;;gCAGX,cAAc,sBAAsB,aAAa;;KAE5E;EAED,IAAI,mBAAmB;EACvB,IAAI,cAAc,KAAK,EAAE,EAAE,QAEzB,oBAAmB,MADE,KAAK,MAAM,oBAAoB,YAAY,EACvC,CAAC,KAAK;EAGjC,IAAI,gBAA0B,CAAC;EAC/B,IAAI,eAAe,SAAS,GAAG;GAC7B,MAAM,cAAc,MAAM,KAAK,MAC7B;;;;SAKA,CAAC,cAAc,CACjB;GACA,MAAM,WAAW,IAAI,IAAI,YAAY,KAAK,KAAK,MAAW,EAAE,UAAU,CAAC;GACvE,gBAAgB,eAAe,QAAQ,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;EAC/D;EAEA,IAAI;EACJ,IAAI,gBAAgB,WAAW,GAC7B,YAAY;OACP,IAAI,qBAAqB,KAAK,cAAc,WAAW,KAAK,YAAY,SAAS,GAEtF,YAAY;OACP,IAAI,qBAAqB,KAAK,YAAY,SAAS,GACxD,YAAY;OACP,IAAI,cAAc,WAAW,GAClC,YAAY;OACP,IAAI,cAAc,WAAW,eAAe,QACjD,YAAY;OAEZ,YAAY;EAGd,MAAM,SAAS,QAAQ,IAAI,QAAQ,oBAAoB,YAAY;EAEnE,OAAO;GACL,QAAQ,QAAQ;GAChB;GACA;GACA;GACA,UAAU,QAAQ,SAAS;GAC3B,OAAO;GACP,cAAc,QAAQ,SAAS;GAC/B,qBAAqB,gBAAgB;GACrC;GACA;GACA;GACA;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO;GACL,QAAQ,QAAQ;GAChB;GACA;GACA;GACA,UAAU,QAAQ,SAAS;GAC3B,OAAO,QAAQ,IAAI,QAAQ,oBAAoB,YAAY;GAC3D,cAAc,QAAQ,SAAS;GAC/B,qBAAqB,gBAAgB;GACrC,kBAAkB;GAClB;GACA,eAAe,CAAC;GAChB,iBAAiB,CAAC;GAClB,WAAW;GACX,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAC9D;CACF,UAAU;EACR,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;CACjC;AACF"}

package/dist/cli/db-doctor.mjs

@@ -1,4 +1,4 @@
-import { extractExpectedTables, getMigrationStorage, pluginMigrationSlug } from "../db.mjs";
+import { extractExpectedTables } from "../db/core.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
 import { createHash } from "node:crypto";
@@ -9,7 +9,8 @@ function hashFile(raw) {
 }
 function readLocalMigrations(workspaceDir) {
 	const migrationsDir = resolve(workspaceDir, "src/db/migrations");
-	const journalPath = join(join(migrationsDir, "meta"), "_journal.json");
+	const metaDir = join(migrationsDir, "meta");
+	const journalPath = join(metaDir, "_journal.json");
 	if (!existsSync(journalPath)) return [];
 	return JSON.parse(readFileSync(journalPath, "utf8")).entries.map((entry) => {
 		const sqlPath = join(migrationsDir, `${entry.tag}.sql`);
@@ -27,20 +28,19 @@ function readLocalMigrations(workspaceDir) {
 		};
 	});
 }
-async function diagnosePlugin(info) {
+async function diagnosePlugin(binding) {
 	const { Pool } = await import("pg");
-	const slug = pluginMigrationSlug(info.key);
-	const storage = getMigrationStorage(slug);
-	const journalTable = storage.table;
-	const journalSchema = storage.schema;
+	const slug = binding.identity.slug;
+	const journalTable = binding.identity.journal.table;
+	const journalSchema = binding.identity.journal.schema;
 	const journalRef = `"${journalSchema}"."${journalTable}"`;
-	const localMigrations = info.workspaceDir ? readLocalMigrations(info.workspaceDir) : [];
+	const localMigrations = binding.identity.workspaceDir ? readLocalMigrations(binding.identity.workspaceDir) : [];
 	const expectedTables = extractExpectedTables(localMigrations);
 	const localHashes = localMigrations.map((m) => m.hash).filter(Boolean);
 	const migrationHashes = localHashes;
 	const pool = new Pool({
-		connectionString: info.databaseUrl,
-		ssl: info.databaseUrl.includes("localhost") || info.databaseUrl.includes("127.0.0.1") ? false : { rejectUnauthorized: false },
+		connectionString: binding.url,
+		ssl: binding.url.includes("localhost") || binding.url.includes("127.0.0.1") ? false : { rejectUnauthorized: false },
 		max: 1,
 		connectionTimeoutMillis: 1e4
 	});
@@ -70,15 +70,15 @@ async function diagnosePlugin(info) {
 		else if (missingTables.length === 0) diagnosis = "healthy";
 		else if (missingTables.length === expectedTables.length) diagnosis = "drift-safe-repair";
 		else diagnosis = "drift-manual";
-		const masked = info.databaseUrl.replace(/\/\/[^:]+:[^@]+@/, "//***:***@");
+		const masked = binding.url.replace(/\/\/[^:]+:[^@]+@/, "//***:***@");
 		return {
-			plugin: info.key,
+			plugin: binding.key,
 			slug,
 			journalTable,
 			journalSchema,
-			dbSecret: info.databaseSecret,
+			dbSecret: binding.identity.secretName,
 			dbUrl: masked,
-			workspaceDir: info.workspaceDir,
+			workspaceDir: binding.identity.workspaceDir,
 			localMigrationCount: localMigrations.length,
 			appliedHashCount,
 			expectedTables,
@@ -88,13 +88,13 @@ async function diagnosePlugin(info) {
 		};
 	} catch (error) {
 		return {
-			plugin: info.key,
+			plugin: binding.key,
 			slug,
 			journalTable,
 			journalSchema,
-			dbSecret: info.databaseSecret,
-			dbUrl: info.databaseUrl.replace(/\/\/[^:]+:[^@]+@/, "//***:***@"),
-			workspaceDir: info.workspaceDir,
+			dbSecret: binding.identity.secretName,
+			dbUrl: binding.url.replace(/\/\/[^:]+:[^@]+@/, "//***:***@"),
+			workspaceDir: binding.identity.workspaceDir,
 			localMigrationCount: localMigrations.length,
 			appliedHashCount: 0,
 			expectedTables,

package/dist/cli/db-doctor.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"db-doctor.mjs","names":[],"sources":["../../src/cli/db-doctor.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { extractExpectedTables, getMigrationStorage, pluginMigrationSlug } from \"../db\";\nimport type { PluginDbInfo } from \"./db-studio\";\n\nexport interface DoctorReport {\n  plugin: string;\n  slug: string;\n  journalTable: string;\n  journalSchema: string;\n  dbSecret: string;\n  dbUrl: string;\n  workspaceDir: string | undefined;\n  localMigrationCount: number;\n  appliedHashCount: number;\n  expectedTables: string[];\n  missingTables: string[];\n  migrationHashes: string[];\n  diagnosis: string;\n  error?: string;\n}\n\nfunction hashFile(raw: string): string {\n  return createHash(\"sha256\").update(raw).digest(\"hex\");\n}\n\ninterface LocalMigration {\n  tag: string;\n  hash: string;\n  sql: string[];\n}\n\nfunction readLocalMigrations(workspaceDir: string): LocalMigration[] {\n  const migrationsDir = resolve(workspaceDir, \"src/db/migrations\");\n  const metaDir = join(migrationsDir, \"meta\");\n  const journalPath = join(metaDir, \"_journal.json\");\n  if (!existsSync(journalPath)) return [];\n\n  const journal = JSON.parse(readFileSync(journalPath, \"utf8\")) as {\n    entries: { idx: number; tag: string }[];\n  };\n\n  return journal.entries.map((entry) => {\n    const sqlPath = join(migrationsDir, `${entry.tag}.sql`);\n    if (!existsSync(sqlPath)) {\n      return { tag: entry.tag, hash: \"\", sql: [] };\n    }\n    const raw = readFileSync(sqlPath, \"utf8\");\n    const sql = raw.split(\"--> statement-breakpoint\").map((s) => s.trim());\n    return { tag: entry.tag, hash: hashFile(raw), sql };\n  });\n}\n\nexport async function diagnosePlugin(info: PluginDbInfo): Promise<DoctorReport> {\n  const { Pool } = await import(\"pg\");\n\n  const slug = pluginMigrationSlug(info.key);\n  const storage = getMigrationStorage(slug);\n  const journalTable = storage.table;\n  const journalSchema = storage.schema;\n  const journalRef = `\"${journalSchema}\".\"${journalTable}\"`;\n\n  const localMigrations = info.workspaceDir ? readLocalMigrations(info.workspaceDir) : [];\n\n  const expectedTables = extractExpectedTables(localMigrations);\n  const localHashes = localMigrations.map((m) => m.hash).filter(Boolean);\n  const migrationHashes = localHashes;\n\n  const pool = new Pool({\n    connectionString: info.databaseUrl,\n    ssl:\n      info.databaseUrl.includes(\"localhost\") || info.databaseUrl.includes(\"127.0.0.1\")\n        ? false\n        : { rejectUnauthorized: false },\n    max: 1,\n    connectionTimeoutMillis: 10_000,\n  });\n\n  try {\n    const journalExists = await pool.query(`\n      SELECT EXISTS (\n        SELECT 1 FROM information_schema.tables\n        WHERE table_schema = '${journalSchema}' AND table_name = '${journalTable}'\n      ) AS exists\n    `);\n\n    let appliedHashCount = 0;\n    if (journalExists.rows[0]?.exists) {\n      const result = await pool.query(`SELECT hash FROM ${journalRef}`);\n      appliedHashCount = result.rows.length;\n    }\n\n    let missingTables: string[] = [];\n    if (expectedTables.length > 0) {\n      const tableResult = await pool.query(\n        `\n        SELECT table_name FROM information_schema.tables\n        WHERE table_schema = 'public'\n          AND table_name = ANY($1)\n      `,\n        [expectedTables],\n      );\n      const existing = new Set(tableResult.rows.map((r: any) => r.table_name));\n      missingTables = expectedTables.filter((t) => !existing.has(t));\n    }\n\n    let diagnosis: string;\n    if (localMigrations.length === 0) {\n      diagnosis = \"no-local-migrations\";\n    } else if (appliedHashCount === 0 && missingTables.length === 0 && localHashes.length > 0) {\n      // Journal is empty but all expected public tables exist.\n      diagnosis = \"untracked-existing-schema\";\n    } else if (appliedHashCount === 0 && localHashes.length > 0) {\n      diagnosis = \"unapplied\";\n    } else if (missingTables.length === 0) {\n      diagnosis = \"healthy\";\n    } else if (missingTables.length === expectedTables.length) {\n      diagnosis = \"drift-safe-repair\";\n    } else {\n      diagnosis = \"drift-manual\";\n    }\n\n    const masked = info.databaseUrl.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\");\n\n    return {\n      plugin: info.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: info.databaseSecret,\n      dbUrl: masked,\n      workspaceDir: info.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount,\n      expectedTables,\n      missingTables,\n      migrationHashes,\n      diagnosis,\n    };\n  } catch (error) {\n    return {\n      plugin: info.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: info.databaseSecret,\n      dbUrl: info.databaseUrl.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\"),\n      workspaceDir: info.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount: 0,\n      expectedTables,\n      missingTables: [],\n      migrationHashes: [],\n      diagnosis: \"error\",\n      error: error instanceof Error ? error.message : String(error),\n    };\n  } finally {\n    await pool.end().catch(() => {});\n  }\n}\n"],"mappings":";;;;;;AAuBA,SAAS,SAAS,KAAqB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK;AACtD;AAQA,SAAS,oBAAoB,cAAwC;CACnE,MAAM,gBAAgB,QAAQ,cAAc,mBAAmB;CAE/D,MAAM,cAAc,KADJ,KAAK,eAAe,MACL,GAAG,eAAe;CACjD,IAAI,CAAC,WAAW,WAAW,GAAG,OAAO,CAAC;CAMtC,OAJgB,KAAK,MAAM,aAAa,aAAa,MAAM,CAI9C,CAAC,CAAC,QAAQ,KAAK,UAAU;EACpC,MAAM,UAAU,KAAK,eAAe,GAAG,MAAM,IAAI,KAAK;EACtD,IAAI,CAAC,WAAW,OAAO,GACrB,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM;GAAI,KAAK,CAAC;EAAE;EAE7C,MAAM,MAAM,aAAa,SAAS,MAAM;EACxC,MAAM,MAAM,IAAI,MAAM,0BAA0B,CAAC,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;EACrE,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM,SAAS,GAAG;GAAG;EAAI;CACpD,CAAC;AACH;AAEA,eAAsB,eAAe,MAA2C;CAC9E,MAAM,EAAE,SAAS,MAAM,OAAO;CAE9B,MAAM,OAAO,oBAAoB,KAAK,GAAG;CACzC,MAAM,UAAU,oBAAoB,IAAI;CACxC,MAAM,eAAe,QAAQ;CAC7B,MAAM,gBAAgB,QAAQ;CAC9B,MAAM,aAAa,IAAI,cAAc,KAAK,aAAa;CAEvD,MAAM,kBAAkB,KAAK,eAAe,oBAAoB,KAAK,YAAY,IAAI,CAAC;CAEtF,MAAM,iBAAiB,sBAAsB,eAAe;CAC5D,MAAM,cAAc,gBAAgB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,OAAO;CACrE,MAAM,kBAAkB;CAExB,MAAM,OAAO,IAAI,KAAK;EACpB,kBAAkB,KAAK;EACvB,KACE,KAAK,YAAY,SAAS,WAAW,KAAK,KAAK,YAAY,SAAS,WAAW,IAC3E,QACA,EAAE,oBAAoB,MAAM;EAClC,KAAK;EACL,yBAAyB;CAC3B,CAAC;CAED,IAAI;EACF,MAAM,gBAAgB,MAAM,KAAK,MAAM;;;gCAGX,cAAc,sBAAsB,aAAa;;KAE5E;EAED,IAAI,mBAAmB;EACvB,IAAI,cAAc,KAAK,EAAE,EAAE,QAEzB,oBAAmB,MADE,KAAK,MAAM,oBAAoB,YAAY,EACvC,CAAC,KAAK;EAGjC,IAAI,gBAA0B,CAAC;EAC/B,IAAI,eAAe,SAAS,GAAG;GAC7B,MAAM,cAAc,MAAM,KAAK,MAC7B;;;;SAKA,CAAC,cAAc,CACjB;GACA,MAAM,WAAW,IAAI,IAAI,YAAY,KAAK,KAAK,MAAW,EAAE,UAAU,CAAC;GACvE,gBAAgB,eAAe,QAAQ,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;EAC/D;EAEA,IAAI;EACJ,IAAI,gBAAgB,WAAW,GAC7B,YAAY;OACP,IAAI,qBAAqB,KAAK,cAAc,WAAW,KAAK,YAAY,SAAS,GAEtF,YAAY;OACP,IAAI,qBAAqB,KAAK,YAAY,SAAS,GACxD,YAAY;OACP,IAAI,cAAc,WAAW,GAClC,YAAY;OACP,IAAI,cAAc,WAAW,eAAe,QACjD,YAAY;OAEZ,YAAY;EAGd,MAAM,SAAS,KAAK,YAAY,QAAQ,oBAAoB,YAAY;EAExE,OAAO;GACL,QAAQ,KAAK;GACb;GACA;GACA;GACA,UAAU,KAAK;GACf,OAAO;GACP,cAAc,KAAK;GACnB,qBAAqB,gBAAgB;GACrC;GACA;GACA;GACA;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO;GACL,QAAQ,KAAK;GACb;GACA;GACA;GACA,UAAU,KAAK;GACf,OAAO,KAAK,YAAY,QAAQ,oBAAoB,YAAY;GAChE,cAAc,KAAK;GACnB,qBAAqB,gBAAgB;GACrC,kBAAkB;GAClB;GACA,eAAe,CAAC;GAChB,iBAAiB,CAAC;GAClB,WAAW;GACX,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAC9D;CACF,UAAU;EACR,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;CACjC;AACF"}
+{"version":3,"file":"db-doctor.mjs","names":[],"sources":["../../src/cli/db-doctor.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport type { DatabaseBinding } from \"../db\";\nimport { extractExpectedTables } from \"../db\";\n\nexport interface DoctorReport {\n  plugin: string;\n  slug: string;\n  journalTable: string;\n  journalSchema: string;\n  dbSecret: string;\n  dbUrl: string;\n  workspaceDir: string | undefined;\n  localMigrationCount: number;\n  appliedHashCount: number;\n  expectedTables: string[];\n  missingTables: string[];\n  migrationHashes: string[];\n  diagnosis: string;\n  error?: string;\n}\n\nfunction hashFile(raw: string): string {\n  return createHash(\"sha256\").update(raw).digest(\"hex\");\n}\n\ninterface LocalMigration {\n  tag: string;\n  hash: string;\n  sql: string[];\n}\n\nfunction readLocalMigrations(workspaceDir: string): LocalMigration[] {\n  const migrationsDir = resolve(workspaceDir, \"src/db/migrations\");\n  const metaDir = join(migrationsDir, \"meta\");\n  const journalPath = join(metaDir, \"_journal.json\");\n  if (!existsSync(journalPath)) return [];\n\n  const journal = JSON.parse(readFileSync(journalPath, \"utf8\")) as {\n    entries: { idx: number; tag: string }[];\n  };\n\n  return journal.entries.map((entry) => {\n    const sqlPath = join(migrationsDir, `${entry.tag}.sql`);\n    if (!existsSync(sqlPath)) {\n      return { tag: entry.tag, hash: \"\", sql: [] };\n    }\n    const raw = readFileSync(sqlPath, \"utf8\");\n    const sql = raw.split(\"--> statement-breakpoint\").map((s) => s.trim());\n    return { tag: entry.tag, hash: hashFile(raw), sql };\n  });\n}\n\nexport async function diagnosePlugin(binding: DatabaseBinding): Promise<DoctorReport> {\n  const { Pool } = await import(\"pg\");\n\n  const slug = binding.identity.slug;\n  const journalTable = binding.identity.journal.table;\n  const journalSchema = binding.identity.journal.schema;\n  const journalRef = `\"${journalSchema}\".\"${journalTable}\"`;\n\n  const localMigrations = binding.identity.workspaceDir\n    ? readLocalMigrations(binding.identity.workspaceDir)\n    : [];\n\n  const expectedTables = extractExpectedTables(localMigrations);\n  const localHashes = localMigrations.map((m) => m.hash).filter(Boolean);\n  const migrationHashes = localHashes;\n\n  const pool = new Pool({\n    connectionString: binding.url,\n    ssl:\n      binding.url.includes(\"localhost\") || binding.url.includes(\"127.0.0.1\")\n        ? false\n        : { rejectUnauthorized: false },\n    max: 1,\n    connectionTimeoutMillis: 10_000,\n  });\n\n  try {\n    const journalExists = await pool.query(`\n      SELECT EXISTS (\n        SELECT 1 FROM information_schema.tables\n        WHERE table_schema = '${journalSchema}' AND table_name = '${journalTable}'\n      ) AS exists\n    `);\n\n    let appliedHashCount = 0;\n    if (journalExists.rows[0]?.exists) {\n      const result = await pool.query(`SELECT hash FROM ${journalRef}`);\n      appliedHashCount = result.rows.length;\n    }\n\n    let missingTables: string[] = [];\n    if (expectedTables.length > 0) {\n      const tableResult = await pool.query(\n        `\n        SELECT table_name FROM information_schema.tables\n        WHERE table_schema = 'public'\n          AND table_name = ANY($1)\n      `,\n        [expectedTables],\n      );\n      const existing = new Set(tableResult.rows.map((r: any) => r.table_name));\n      missingTables = expectedTables.filter((t) => !existing.has(t));\n    }\n\n    let diagnosis: string;\n    if (localMigrations.length === 0) {\n      diagnosis = \"no-local-migrations\";\n    } else if (appliedHashCount === 0 && missingTables.length === 0 && localHashes.length > 0) {\n      // Journal is empty but all expected public tables exist.\n      diagnosis = \"untracked-existing-schema\";\n    } else if (appliedHashCount === 0 && localHashes.length > 0) {\n      diagnosis = \"unapplied\";\n    } else if (missingTables.length === 0) {\n      diagnosis = \"healthy\";\n    } else if (missingTables.length === expectedTables.length) {\n      diagnosis = \"drift-safe-repair\";\n    } else {\n      diagnosis = \"drift-manual\";\n    }\n\n    const masked = binding.url.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\");\n\n    return {\n      plugin: binding.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: binding.identity.secretName,\n      dbUrl: masked,\n      workspaceDir: binding.identity.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount,\n      expectedTables,\n      missingTables,\n      migrationHashes,\n      diagnosis,\n    };\n  } catch (error) {\n    return {\n      plugin: binding.key,\n      slug,\n      journalTable,\n      journalSchema,\n      dbSecret: binding.identity.secretName,\n      dbUrl: binding.url.replace(/\\/\\/[^:]+:[^@]+@/, \"//***:***@\"),\n      workspaceDir: binding.identity.workspaceDir,\n      localMigrationCount: localMigrations.length,\n      appliedHashCount: 0,\n      expectedTables,\n      missingTables: [],\n      migrationHashes: [],\n      diagnosis: \"error\",\n      error: error instanceof Error ? error.message : String(error),\n    };\n  } finally {\n    await pool.end().catch(() => {});\n  }\n}\n"],"mappings":";;;;;;AAuBA,SAAS,SAAS,KAAqB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK;AACtD;AAQA,SAAS,oBAAoB,cAAwC;CACnE,MAAM,gBAAgB,QAAQ,cAAc,mBAAmB;CAC/D,MAAM,UAAU,KAAK,eAAe,MAAM;CAC1C,MAAM,cAAc,KAAK,SAAS,eAAe;CACjD,IAAI,CAAC,WAAW,WAAW,GAAG,OAAO,CAAC;CAMtC,OAJgB,KAAK,MAAM,aAAa,aAAa,MAAM,CAI9C,CAAC,CAAC,QAAQ,KAAK,UAAU;EACpC,MAAM,UAAU,KAAK,eAAe,GAAG,MAAM,IAAI,KAAK;EACtD,IAAI,CAAC,WAAW,OAAO,GACrB,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM;GAAI,KAAK,CAAC;EAAE;EAE7C,MAAM,MAAM,aAAa,SAAS,MAAM;EACxC,MAAM,MAAM,IAAI,MAAM,0BAA0B,CAAC,CAAC,KAAK,MAAM,EAAE,KAAK,CAAC;EACrE,OAAO;GAAE,KAAK,MAAM;GAAK,MAAM,SAAS,GAAG;GAAG;EAAI;CACpD,CAAC;AACH;AAEA,eAAsB,eAAe,SAAiD;CACpF,MAAM,EAAE,SAAS,MAAM,OAAO;CAE9B,MAAM,OAAO,QAAQ,SAAS;CAC9B,MAAM,eAAe,QAAQ,SAAS,QAAQ;CAC9C,MAAM,gBAAgB,QAAQ,SAAS,QAAQ;CAC/C,MAAM,aAAa,IAAI,cAAc,KAAK,aAAa;CAEvD,MAAM,kBAAkB,QAAQ,SAAS,eACrC,oBAAoB,QAAQ,SAAS,YAAY,IACjD,CAAC;CAEL,MAAM,iBAAiB,sBAAsB,eAAe;CAC5D,MAAM,cAAc,gBAAgB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,OAAO;CACrE,MAAM,kBAAkB;CAExB,MAAM,OAAO,IAAI,KAAK;EACpB,kBAAkB,QAAQ;EAC1B,KACE,QAAQ,IAAI,SAAS,WAAW,KAAK,QAAQ,IAAI,SAAS,WAAW,IACjE,QACA,EAAE,oBAAoB,MAAM;EAClC,KAAK;EACL,yBAAyB;CAC3B,CAAC;CAED,IAAI;EACF,MAAM,gBAAgB,MAAM,KAAK,MAAM;;;gCAGX,cAAc,sBAAsB,aAAa;;KAE5E;EAED,IAAI,mBAAmB;EACvB,IAAI,cAAc,KAAK,EAAE,EAAE,QAEzB,oBAAmB,MADE,KAAK,MAAM,oBAAoB,YAAY,EACvC,CAAC,KAAK;EAGjC,IAAI,gBAA0B,CAAC;EAC/B,IAAI,eAAe,SAAS,GAAG;GAC7B,MAAM,cAAc,MAAM,KAAK,MAC7B;;;;SAKA,CAAC,cAAc,CACjB;GACA,MAAM,WAAW,IAAI,IAAI,YAAY,KAAK,KAAK,MAAW,EAAE,UAAU,CAAC;GACvE,gBAAgB,eAAe,QAAQ,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;EAC/D;EAEA,IAAI;EACJ,IAAI,gBAAgB,WAAW,GAC7B,YAAY;OACP,IAAI,qBAAqB,KAAK,cAAc,WAAW,KAAK,YAAY,SAAS,GAEtF,YAAY;OACP,IAAI,qBAAqB,KAAK,YAAY,SAAS,GACxD,YAAY;OACP,IAAI,cAAc,WAAW,GAClC,YAAY;OACP,IAAI,cAAc,WAAW,eAAe,QACjD,YAAY;OAEZ,YAAY;EAGd,MAAM,SAAS,QAAQ,IAAI,QAAQ,oBAAoB,YAAY;EAEnE,OAAO;GACL,QAAQ,QAAQ;GAChB;GACA;GACA;GACA,UAAU,QAAQ,SAAS;GAC3B,OAAO;GACP,cAAc,QAAQ,SAAS;GAC/B,qBAAqB,gBAAgB;GACrC;GACA;GACA;GACA;GACA;EACF;CACF,SAAS,OAAO;EACd,OAAO;GACL,QAAQ,QAAQ;GAChB;GACA;GACA;GACA,UAAU,QAAQ,SAAS;GAC3B,OAAO,QAAQ,IAAI,QAAQ,oBAAoB,YAAY;GAC3D,cAAc,QAAQ,SAAS;GAC/B,qBAAqB,gBAAgB;GACrC,kBAAkB;GAClB;GACA,eAAe,CAAC;GAChB,iBAAiB,CAAC;GAClB,WAAW;GACX,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAC9D;CACF,UAAU;EACR,MAAM,KAAK,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;CACjC;AACF"}

package/dist/cli/db-repair.cjs

@@ -1,11 +1,11 @@
 const require_db_doctor = require('./db-doctor.cjs');
 let node_fs = require("node:fs");
 let node_path = require("node:path");
-let node_child_process = require("node:child_process");
+let effect = require("effect");
 
 //#region src/cli/db-repair.ts
-async function repairPlugin(info, mode) {
-	const diagnosis = await require_db_doctor.diagnosePlugin(info);
+async function repairPlugin(binding, mode, drizzleKit) {
+	const diagnosis = await require_db_doctor.diagnosePlugin(binding);
 	if (diagnosis.diagnosis === "error") return {
 		status: "refused",
 		diagnosis,
@@ -51,17 +51,17 @@ async function repairPlugin(info, mode) {
 	const { Pool } = await import("pg");
 	const journalRef = `"${diagnosis.journalSchema}"."${diagnosis.journalTable}"`;
 	const pool = new Pool({
-		connectionString: info.databaseUrl,
-		ssl: info.databaseUrl.includes("localhost") || info.databaseUrl.includes("127.0.0.1") ? false : { rejectUnauthorized: false },
+		connectionString: binding.url,
+		ssl: binding.url.includes("localhost") || binding.url.includes("127.0.0.1") ? false : { rejectUnauthorized: false },
 		max: 1,
 		connectionTimeoutMillis: 1e4
 	});
 	try {
 		await pool.query(`DROP TABLE IF EXISTS ${journalRef}`);
-		if (info.workspaceDir) {
-			const configPath = (0, node_path.join)(info.workspaceDir, "drizzle.config.ts");
+		if (binding.identity.workspaceDir) {
+			const configPath = (0, node_path.join)(binding.identity.workspaceDir, "drizzle.config.ts");
 			if ((0, node_fs.existsSync)(configPath)) try {
-				await spawnDrizzleMigrate(info.workspaceDir, configPath);
+				await effect.Effect.runPromise(drizzleKit.migrate(binding));
 				return {
 					status: "repaired",
 					diagnosis,
@@ -71,7 +71,7 @@ async function repairPlugin(info, mode) {
 				return {
 					status: "repaired",
 					diagnosis,
-					message: `Migration history reset for ${diagnosis.plugin}. Automatic reapply failed: ${error instanceof Error ? error.message : String(error)}. Run \`bun run --cwd ${info.workspaceDir} db:migrate\` manually.`
+					message: `Migration history reset for ${diagnosis.plugin}. Automatic reapply failed: ${error instanceof Error ? error.message : String(error)}. Run \`pnpm --dir ${binding.identity.workspaceDir} run db:migrate\` manually.`
 				};
 			}
 		}
@@ -90,29 +90,6 @@ async function repairPlugin(info, mode) {
 		message: `Migration history reset for ${diagnosis.plugin}. No local drizzle.config.ts found — start the dev server to reapply migrations.`
 	};
 }
-function spawnDrizzleMigrate(cwd, configPath) {
-	return new Promise((resolvePromise, reject) => {
-		const child = (0, node_child_process.spawn)("npx", [
-			"drizzle-kit",
-			"migrate",
-			"--config",
-			configPath
-		], {
-			cwd,
-			stdio: "pipe",
-			shell: true
-		});
-		let stderr = "";
-		child.stderr?.on("data", (data) => {
-			stderr += data.toString();
-		});
-		child.on("error", (err) => reject(err));
-		child.on("exit", (code) => {
-			if (code === 0) resolvePromise();
-			else reject(/* @__PURE__ */ new Error(`drizzle-kit migrate exited with code ${code}: ${stderr}`));
-		});
-	});
-}
 
 //#endregion
 exports.repairPlugin = repairPlugin;