lambda-pool 0.1.0

package/dist/core/providers.d.ts

@@ -0,0 +1,29 @@
+import type { Engine } from "./url.ts";
+export type ProviderId = "aiven" | "neon" | "supabase" | "planetscale" | "rds" | "railway" | "render" | "vercel-postgres" | "unknown";
+export interface ProviderPreset {
+    id: ProviderId;
+    label: string;
+    /** Engines this preset is relevant to (informational). */
+    engines: Engine[];
+    /** Typical `max_connections` on entry/free plans (for the budget calc). */
+    typicalMaxConnections: number;
+    /** Safe per-instance pool size for a *direct* (un-pooled) connection. */
+    safeDirectPoolLimit: number;
+    /** Does the provider offer a transaction pooler (PgBouncer-style)? */
+    hasPooledEndpoint: boolean;
+    /** Whether the host string indicates the *pooled* endpoint specifically. */
+    isPooledHost?: (host: string) => boolean;
+    /** Short, actionable note shown in diagnostics. */
+    note: string;
+    /** Hostname matcher. */
+    matches: (host: string) => boolean;
+}
+/** All known presets (excluding the catch-all unknown). */
+export declare function listProviders(): ReadonlyArray<ProviderPreset>;
+/** Identify the provider from a hostname. Always returns a preset. */
+export declare function detectProvider(host: string): ProviderPreset;
+/** Look up a preset by id (returns the unknown preset if not found). */
+export declare function getProvider(id: ProviderId): ProviderPreset;
+/** Is this host the provider's pooled endpoint, when one exists? */
+export declare function isPooledEndpoint(host: string): boolean;
+//# sourceMappingURL=providers.d.ts.map

package/dist/core/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/core/providers.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,MAAM,UAAU,GAClB,OAAO,GACP,MAAM,GACN,UAAU,GACV,aAAa,GACb,KAAK,GACL,SAAS,GACT,QAAQ,GACR,iBAAiB,GACjB,SAAS,CAAC;AAEd,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2EAA2E;IAC3E,qBAAqB,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACpC;AAmGD,2DAA2D;AAC3D,wBAAgB,aAAa,IAAI,aAAa,CAAC,cAAc,CAAC,CAE7D;AAED,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAG3D;AAED,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,EAAE,EAAE,UAAU,GAAG,cAAc,CAE1D;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGtD"}

package/dist/core/providers.js

@@ -0,0 +1,121 @@
+// Provider presets and host-based auto-detection.
+//
+// Different managed providers have different connection realities. This module
+// is a pure, dependency-free registry: given a host, identify the provider and
+// surface its guidance (typical max_connections, whether a pooled endpoint
+// exists, the safe default pool size). No network calls — detection is purely
+// structural on the hostname.
+const PRESETS = [
+    {
+        id: "neon",
+        label: "Neon",
+        engines: ["postgres"],
+        typicalMaxConnections: 100,
+        safeDirectPoolLimit: 1,
+        hasPooledEndpoint: true,
+        isPooledHost: (h) => h.includes("-pooler."),
+        note: "Use the pooled endpoint (host contains '-pooler') for serverless; it multiplexes connections so a small pool is fine.",
+        matches: (h) => h.endsWith(".neon.tech"),
+    },
+    {
+        id: "supabase",
+        label: "Supabase",
+        engines: ["postgres"],
+        typicalMaxConnections: 60,
+        safeDirectPoolLimit: 1,
+        hasPooledEndpoint: true,
+        isPooledHost: (h) => h.includes("pooler.supabase"),
+        note: "Use the Supavisor pooler host (port 6543, 'pooler.supabase.com') in serverless rather than the direct 5432 host.",
+        matches: (h) => h.includes("supabase."),
+    },
+    {
+        id: "aiven",
+        label: "Aiven",
+        engines: ["mysql", "postgres"],
+        typicalMaxConnections: 20,
+        safeDirectPoolLimit: 1,
+        hasPooledEndpoint: false,
+        note: "Free/Hobbyist plans have a very small max_connections; keep the pool at 1 per warm instance and pass the CA via DATABASE_SSL_CA_BASE64.",
+        matches: (h) => h.endsWith(".aivencloud.com"),
+    },
+    {
+        id: "planetscale",
+        label: "PlanetScale",
+        engines: ["mysql"],
+        typicalMaxConnections: 1000,
+        safeDirectPoolLimit: 1,
+        hasPooledEndpoint: true,
+        note: "PlanetScale proxies connections already; a tiny pool per instance is correct and TLS is required.",
+        matches: (h) => h.includes("psdb.cloud") || h.endsWith(".planetscale.com"),
+    },
+    {
+        id: "vercel-postgres",
+        label: "Vercel Postgres",
+        engines: ["postgres"],
+        typicalMaxConnections: 100,
+        safeDirectPoolLimit: 1,
+        hasPooledEndpoint: true,
+        isPooledHost: (h) => h.includes("-pooler."),
+        note: "Backed by Neon; prefer the pooled host in serverless functions.",
+        matches: (h) => h.includes(".vercel-storage.com"),
+    },
+    {
+        id: "railway",
+        label: "Railway",
+        engines: ["mysql", "postgres"],
+        typicalMaxConnections: 100,
+        safeDirectPoolLimit: 2,
+        hasPooledEndpoint: false,
+        note: "No managed pooler; keep the per-instance pool small.",
+        matches: (h) => h.includes("railway.app") || h.includes("rlwy.net"),
+    },
+    {
+        id: "render",
+        label: "Render",
+        engines: ["postgres"],
+        typicalMaxConnections: 97,
+        safeDirectPoolLimit: 2,
+        hasPooledEndpoint: false,
+        note: "Free/starter Postgres has a modest cap; keep the per-instance pool small.",
+        matches: (h) => h.endsWith(".render.com"),
+    },
+    {
+        id: "rds",
+        label: "Amazon RDS / Aurora",
+        engines: ["mysql", "postgres"],
+        typicalMaxConnections: 30,
+        safeDirectPoolLimit: 1,
+        hasPooledEndpoint: true,
+        note: "max_connections scales with instance size; micro/small classes are tiny. Consider RDS Proxy for serverless fan-out.",
+        matches: (h) => h.includes(".rds.amazonaws.com"),
+    },
+];
+const UNKNOWN = {
+    id: "unknown",
+    label: "Unknown provider",
+    engines: ["mysql", "postgres"],
+    typicalMaxConnections: 100,
+    safeDirectPoolLimit: 1,
+    hasPooledEndpoint: false,
+    note: "Provider not recognized; defaulting to a conservative pool of 1 per instance.",
+    matches: () => true,
+};
+/** All known presets (excluding the catch-all unknown). */
+export function listProviders() {
+    return PRESETS;
+}
+/** Identify the provider from a hostname. Always returns a preset. */
+export function detectProvider(host) {
+    const h = host.toLowerCase();
+    return PRESETS.find((p) => p.matches(h)) ?? UNKNOWN;
+}
+/** Look up a preset by id (returns the unknown preset if not found). */
+export function getProvider(id) {
+    return PRESETS.find((p) => p.id === id) ?? UNKNOWN;
+}
+/** Is this host the provider's pooled endpoint, when one exists? */
+export function isPooledEndpoint(host) {
+    const preset = detectProvider(host);
+    return preset.hasPooledEndpoint && (preset.isPooledHost?.(host.toLowerCase()) ?? false);
+}
+//# sourceMappingURL=providers.js.map

package/dist/core/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/core/providers.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,8BAA8B;AAkC9B,MAAM,OAAO,GAAqB;IAChC;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,qBAAqB,EAAE,GAAG;QAC1B,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,IAAI;QACvB,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3C,IAAI,EAAE,uHAAuH;QAC7H,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;KACzC;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,qBAAqB,EAAE,EAAE;QACzB,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,IAAI;QACvB,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAClD,IAAI,EAAE,kHAAkH;QACxH,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KACxC;IACD;QACE,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,qBAAqB,EAAE,EAAE;QACzB,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,KAAK;QACxB,IAAI,EAAE,yIAAyI;QAC/I,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;KAC9C;IACD;QACE,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,qBAAqB,EAAE,IAAI;QAC3B,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,IAAI;QACvB,IAAI,EAAE,mGAAmG;QACzG,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KAC3E;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,qBAAqB,EAAE,GAAG;QAC1B,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,IAAI;QACvB,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC3C,IAAI,EAAE,iEAAiE;QACvE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;KAClD;IACD;QACE,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,qBAAqB,EAAE,GAAG;QAC1B,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,KAAK;QACxB,IAAI,EAAE,sDAAsD;QAC5D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;KACpE;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,qBAAqB,EAAE,EAAE;QACzB,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,KAAK;QACxB,IAAI,EAAE,2EAA2E;QACjF,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;KAC1C;IACD;QACE,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,qBAAqB;QAC5B,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC9B,qBAAqB,EAAE,EAAE;QACzB,mBAAmB,EAAE,CAAC;QACtB,iBAAiB,EAAE,IAAI;QACvB,IAAI,EAAE,qHAAqH;QAC3H,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KACjD;CACF,CAAC;AAEF,MAAM,OAAO,GAAmB;IAC9B,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;IAC9B,qBAAqB,EAAE,GAAG;IAC1B,mBAAmB,EAAE,CAAC;IACtB,iBAAiB,EAAE,KAAK;IACxB,IAAI,EAAE,+EAA+E;IACrF,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;CACpB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AACtD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,EAAc;IACxC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,OAAO,CAAC;AACrD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;AAC1F,CAAC"}

package/dist/core/redact.d.ts

@@ -0,0 +1,20 @@
+/** Default key substrings (case-insensitive) whose values get masked. */
+export declare const DEFAULT_SECRET_KEYS: readonly ["password", "passwd", "secret", "token", "apikey", "api_key", "authorization", "auth", "credential", "connectionstring", "connection_string", "dsn", "ssl_ca", "ca"];
+export interface RedactOptions {
+    /** Extra key substrings to treat as secret (merged with the defaults). */
+    keys?: string[];
+    /** Replacement string. Default "***". */
+    mask?: string;
+    /** Max recursion depth (guards against cycles/huge graphs). Default 8. */
+    maxDepth?: number;
+}
+/**
+ * Return a deep copy of `value` with secret-looking keys masked.
+ *
+ * - Object keys are matched case-insensitively against the secret-key list.
+ * - Arrays are walked element-wise.
+ * - Cycles and over-deep graphs are cut off at `maxDepth` (replaced with the
+ *   string "[Depth limit]") so this is always safe to call on arbitrary input.
+ */
+export declare function redact<T>(value: T, options?: RedactOptions): T;
+//# sourceMappingURL=redact.d.ts.map

package/dist/core/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/core/redact.ts"],"names":[],"mappings":"AAMA,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,gLAetB,CAAC;AAEX,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAOD;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,GAAE,aAAkB,GAAG,CAAC,CA2BlE"}

package/dist/core/redact.js

@@ -0,0 +1,63 @@
+// Structural redaction for logs and crash reports.
+//
+// `redactUrl` (core/url) masks a connection string; this masks *objects* —
+// config dumps, error `extra` bags, request context — by key name. Pure and
+// dependency-free. The default key set targets the usual credential leaks.
+/** Default key substrings (case-insensitive) whose values get masked. */
+export const DEFAULT_SECRET_KEYS = [
+    "password",
+    "passwd",
+    "secret",
+    "token",
+    "apikey",
+    "api_key",
+    "authorization",
+    "auth",
+    "credential",
+    "connectionstring",
+    "connection_string",
+    "dsn",
+    "ssl_ca",
+    "ca",
+];
+function isSecretKey(key, needles) {
+    const k = key.toLowerCase();
+    return needles.some((n) => k.includes(n));
+}
+/**
+ * Return a deep copy of `value` with secret-looking keys masked.
+ *
+ * - Object keys are matched case-insensitively against the secret-key list.
+ * - Arrays are walked element-wise.
+ * - Cycles and over-deep graphs are cut off at `maxDepth` (replaced with the
+ *   string "[Depth limit]") so this is always safe to call on arbitrary input.
+ */
+export function redact(value, options = {}) {
+    const needles = [
+        ...DEFAULT_SECRET_KEYS,
+        ...(options.keys ?? []).map((k) => k.toLowerCase()),
+    ];
+    const mask = options.mask ?? "***";
+    const maxDepth = options.maxDepth ?? 8;
+    const seen = new WeakSet();
+    function walk(v, depth) {
+        if (depth > maxDepth)
+            return "[Depth limit]";
+        if (v === null || typeof v !== "object")
+            return v;
+        if (seen.has(v))
+            return "[Circular]";
+        seen.add(v);
+        if (Array.isArray(v))
+            return v.map((item) => walk(item, depth + 1));
+        const out = {};
+        for (const [key, val] of Object.entries(v)) {
+            out[key] = isSecretKey(key, needles)
+                ? mask
+                : walk(val, depth + 1);
+        }
+        return out;
+    }
+    return walk(value, 0);
+}
+//# sourceMappingURL=redact.js.map

package/dist/core/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/core/redact.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAE3E,yEAAyE;AACzE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,eAAe;IACf,MAAM;IACN,YAAY;IACZ,kBAAkB;IAClB,mBAAmB;IACnB,KAAK;IACL,QAAQ;IACR,IAAI;CACI,CAAC;AAWX,SAAS,WAAW,CAAC,GAAW,EAAE,OAAiB;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAI,KAAQ,EAAE,UAAyB,EAAE;IAC7D,MAAM,OAAO,GAAG;QACd,GAAG,mBAAmB;QACtB,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;KACpD,CAAC;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IAEnC,SAAS,IAAI,CAAC,CAAU,EAAE,KAAa;QACrC,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO,eAAe,CAAC;QAC7C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAEpE,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC;gBAClC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAM,CAAC;AAC7B,CAAC"}

package/dist/core/result.d.ts

@@ -0,0 +1,16 @@
+export type Result<T, E = Error> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    error: E;
+};
+export declare function ok<T>(value: T): Result<T, never>;
+export declare function err<E>(error: E): Result<never, E>;
+/** Run a throwing function and capture the outcome as a Result. */
+export declare function attempt<T>(fn: () => T): Result<T, Error>;
+/** Unwrap a Result, throwing the error if it failed. */
+export declare function unwrap<T, E>(r: Result<T, E>): T;
+/** Unwrap a Result or return a fallback value. */
+export declare function unwrapOr<T, E>(r: Result<T, E>, fallback: T): T;
+//# sourceMappingURL=result.d.ts.map

package/dist/core/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/core/result.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,IAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AAE5B,wBAAgB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAEhD;AAED,wBAAgB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAEjD;AAED,mEAAmE;AACnE,wBAAgB,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAMxD;AAED,wDAAwD;AACxD,wBAAgB,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAG/C;AAED,kDAAkD;AAClD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAE9D"}

package/dist/core/result.js

@@ -0,0 +1,32 @@
+// A tiny Result/Either type for non-throwing APIs.
+//
+// Some callers (CLIs, request handlers, validators) prefer to branch on a value
+// rather than wrap everything in try/catch. This is the dependency-free
+// primitive the `safe*` helpers return. Single responsibility: model success or
+// failure, nothing else.
+export function ok(value) {
+    return { ok: true, value };
+}
+export function err(error) {
+    return { ok: false, error };
+}
+/** Run a throwing function and capture the outcome as a Result. */
+export function attempt(fn) {
+    try {
+        return ok(fn());
+    }
+    catch (e) {
+        return err(e instanceof Error ? e : new Error(String(e)));
+    }
+}
+/** Unwrap a Result, throwing the error if it failed. */
+export function unwrap(r) {
+    if (r.ok)
+        return r.value;
+    throw r.error instanceof Error ? r.error : new Error(String(r.error));
+}
+/** Unwrap a Result or return a fallback value. */
+export function unwrapOr(r, fallback) {
+    return r.ok ? r.value : fallback;
+}
+//# sourceMappingURL=result.js.map

package/dist/core/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/core/result.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,yBAAyB;AAMzB,MAAM,UAAU,EAAE,CAAI,KAAQ;IAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,GAAG,CAAI,KAAQ;IAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,OAAO,CAAI,EAAW;IACpC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,MAAM,CAAO,CAAe;IAC1C,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACzB,MAAM,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,QAAQ,CAAO,CAAe,EAAE,QAAW;IACzD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnC,CAAC"}

package/dist/core/retry.d.ts

@@ -0,0 +1,31 @@
+export interface RetryOptions {
+    /** Total attempts including the first. Default 3. */
+    attempts?: number;
+    /** Base delay in ms for the first backoff. Default 100. */
+    baseDelayMs?: number;
+    /** Upper bound on any single delay. Default 2000. */
+    maxDelayMs?: number;
+    /** Decide whether an error is worth retrying. Default: always. */
+    retryable?: (error: Error) => boolean;
+    /** Injectable sleep (tests pass a no-op); defaults to setTimeout. */
+    sleep?: (ms: number) => Promise<void>;
+    /** Injectable RNG in [0,1); defaults to Math.random. */
+    random?: () => number;
+}
+/**
+ * Compute the delay before attempt `n` (1-based: the delay *after* attempt n
+ * fails). Exponential growth `base * 2^(n-1)`, capped, then full jitter applied.
+ */
+export declare function backoffDelay(attempt: number, baseDelayMs: number, maxDelayMs: number, random?: () => number): number;
+/**
+ * Run `fn`, retrying transient failures with jittered exponential backoff.
+ * Re-throws the last error once attempts are exhausted or an error is deemed
+ * non-retryable.
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, options?: RetryOptions): Promise<T>;
+/**
+ * A reasonable default `retryable` predicate for DB connect errors: transient
+ * network / availability conditions, not auth or "database does not exist".
+ */
+export declare function isTransientDbError(error: Error): boolean;
+//# sourceMappingURL=retry.d.ts.map

package/dist/core/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/core/retry.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IACtC,qEAAqE;IACrE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAKD;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,MAAM,MAAoB,GACjC,MAAM,CAIR;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CAsBZ;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAoBxD"}

package/dist/core/retry.js

@@ -0,0 +1,67 @@
+// Exponential backoff with full jitter.
+//
+// Cold serverless starts and brief DB failovers cause transient connect errors.
+// A short, jittered retry turns most of those into a non-event. Pure scheduling
+// logic with an injectable sleep so it is fully unit-testable (no real waiting).
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Compute the delay before attempt `n` (1-based: the delay *after* attempt n
+ * fails). Exponential growth `base * 2^(n-1)`, capped, then full jitter applied.
+ */
+export function backoffDelay(attempt, baseDelayMs, maxDelayMs, random = Math.random) {
+    const exp = baseDelayMs * 2 ** (attempt - 1);
+    const capped = Math.min(exp, maxDelayMs);
+    return Math.floor(random() * capped); // full jitter: [0, capped)
+}
+/**
+ * Run `fn`, retrying transient failures with jittered exponential backoff.
+ * Re-throws the last error once attempts are exhausted or an error is deemed
+ * non-retryable.
+ */
+export async function withRetry(fn, options = {}) {
+    const attempts = Math.max(1, Math.floor(options.attempts ?? 3));
+    const baseDelayMs = options.baseDelayMs ?? 100;
+    const maxDelayMs = options.maxDelayMs ?? 2000;
+    const retryable = options.retryable ?? (() => true);
+    const sleep = options.sleep ?? defaultSleep;
+    const random = options.random ?? Math.random;
+    let lastError = new Error("lambda-pool: withRetry ran zero attempts");
+    for (let attempt = 1; attempt <= attempts; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (e) {
+            lastError = e instanceof Error ? e : new Error(String(e));
+            const isLast = attempt === attempts;
+            if (isLast || !retryable(lastError))
+                throw lastError;
+            await sleep(backoffDelay(attempt, baseDelayMs, maxDelayMs, random));
+        }
+    }
+    throw lastError;
+}
+/**
+ * A reasonable default `retryable` predicate for DB connect errors: transient
+ * network / availability conditions, not auth or "database does not exist".
+ */
+export function isTransientDbError(error) {
+    const msg = error.message.toLowerCase();
+    const code = error.code?.toUpperCase() ?? "";
+    const transientCodes = new Set([
+        "ECONNREFUSED",
+        "ECONNRESET",
+        "ETIMEDOUT",
+        "EPIPE",
+        "EAI_AGAIN",
+        "PROTOCOL_CONNECTION_LOST",
+        "ER_CON_COUNT_ERROR", // too many connections — may clear on retry
+        "57P03", // postgres: cannot_connect_now (starting up)
+    ]);
+    if (transientCodes.has(code))
+        return true;
+    return (msg.includes("timeout") ||
+        msg.includes("too many clients") ||
+        msg.includes("connection terminated") ||
+        msg.includes("server is starting up"));
+}
+//# sourceMappingURL=retry.js.map

package/dist/core/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/core/retry.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AAiBjF,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE,CAClC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,WAAmB,EACnB,UAAkB,EAClB,SAAuB,IAAI,CAAC,MAAM;IAElC,MAAM,GAAG,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,2BAA2B;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAoB,EACpB,UAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAE7C,IAAI,SAAS,GAAU,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAE7E,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,SAAS,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,CAAC;YACpC,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAAE,MAAM,SAAS,CAAC;YACrD,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAY;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACpE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,cAAc;QACd,YAAY;QACZ,WAAW;QACX,OAAO;QACP,WAAW;QACX,0BAA0B;QAC1B,oBAAoB,EAAE,4CAA4C;QAClE,OAAO,EAAE,6CAA6C;KACvD,CAAC,CAAC;IACH,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAChC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QACrC,GAAG,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CACtC,CAAC;AACJ,CAAC"}

package/dist/core/url.d.ts

@@ -0,0 +1,38 @@
+import { type Result } from "./result.ts";
+export type Engine = "mysql" | "postgres";
+export interface ParsedConnection {
+    engine: Engine;
+    protocol: string;
+    host: string;
+    port: number;
+    user: string;
+    /** Present only when the URI carried a password. */
+    password?: string;
+    database: string;
+    /** Query params (e.g. `sslmode`, `ssl-mode`, `connection_limit`). */
+    params: Record<string, string>;
+}
+/** Default port for an engine, used when the URI omits one. */
+export declare function defaultPort(engine: Engine): number;
+/**
+ * Parse a database connection URI into typed components.
+ *
+ * Throws a clear error for a malformed or unsupported URI rather than letting a
+ * cryptic driver error surface later at connect time.
+ */
+export declare function parseConnectionString(uri: string): ParsedConnection;
+/**
+ * Non-throwing variant of {@link parseConnectionString}. Returns a Result so
+ * callers can branch instead of using try/catch.
+ */
+export declare function safeParseConnectionString(uri: string): Result<ParsedConnection, Error>;
+/**
+ * Return the URI with the password replaced by `***`, safe for logs.
+ *
+ * Preserves everything else (host, port, db, params) so the redacted string is
+ * still useful for debugging "which database am I pointed at?".
+ */
+export declare function redactUrl(uri: string): string;
+/** True when the URI's query params request SSL/TLS in any common spelling. */
+export declare function urlRequestsSsl(uri: string): boolean;
+//# sourceMappingURL=url.d.ts.map

package/dist/core/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../src/core/url.ts"],"names":[],"mappings":"AAOA,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAKD,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAElD;AAUD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CA0BnE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAEjC;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAS7C;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQnD"}

package/dist/core/url.js

@@ -0,0 +1,88 @@
+// Connection-string parsing and redaction.
+//
+// Useful on its own: parse a `mysql://` / `postgres://` URI into typed parts,
+// and — importantly — produce a redacted form safe to put in logs, error
+// messages, and crash reports. Leaking a DB password into a log aggregator is a
+// classic incident; `redactUrl` makes "log the connection target" safe.
+import { attempt } from "./result.js";
+const POSTGRES_PROTOCOLS = new Set(["postgres:", "postgresql:"]);
+const MYSQL_PROTOCOLS = new Set(["mysql:", "mariadb:"]);
+/** Default port for an engine, used when the URI omits one. */
+export function defaultPort(engine) {
+    return engine === "postgres" ? 5432 : 3306;
+}
+function engineFromProtocol(protocol) {
+    if (POSTGRES_PROTOCOLS.has(protocol))
+        return "postgres";
+    if (MYSQL_PROTOCOLS.has(protocol))
+        return "mysql";
+    throw new Error(`lambda-pool: unsupported connection protocol "${protocol}" — expected mysql:// or postgres://`);
+}
+/**
+ * Parse a database connection URI into typed components.
+ *
+ * Throws a clear error for a malformed or unsupported URI rather than letting a
+ * cryptic driver error surface later at connect time.
+ */
+export function parseConnectionString(uri) {
+    let url;
+    try {
+        url = new URL(uri);
+    }
+    catch {
+        throw new Error("lambda-pool: connection string is not a valid URI.");
+    }
+    const engine = engineFromProtocol(url.protocol);
+    const params = {};
+    for (const [k, v] of url.searchParams)
+        params[k] = v;
+    const database = decodeURIComponent(url.pathname.replace(/^\//, ""));
+    return {
+        engine,
+        protocol: url.protocol,
+        host: url.hostname,
+        port: url.port ? Number(url.port) : defaultPort(engine),
+        user: decodeURIComponent(url.username),
+        ...(url.password
+            ? { password: decodeURIComponent(url.password) }
+            : {}),
+        database,
+        params,
+    };
+}
+/**
+ * Non-throwing variant of {@link parseConnectionString}. Returns a Result so
+ * callers can branch instead of using try/catch.
+ */
+export function safeParseConnectionString(uri) {
+    return attempt(() => parseConnectionString(uri));
+}
+/**
+ * Return the URI with the password replaced by `***`, safe for logs.
+ *
+ * Preserves everything else (host, port, db, params) so the redacted string is
+ * still useful for debugging "which database am I pointed at?".
+ */
+export function redactUrl(uri) {
+    let url;
+    try {
+        url = new URL(uri);
+    }
+    catch {
+        return "<invalid-connection-string>";
+    }
+    if (url.password)
+        url.password = "***";
+    return url.toString();
+}
+/** True when the URI's query params request SSL/TLS in any common spelling. */
+export function urlRequestsSsl(uri) {
+    const { params } = parseConnectionString(uri);
+    const sslmode = (params["sslmode"] ?? params["ssl-mode"] ?? "").toLowerCase();
+    if (["require", "required", "verify-ca", "verify-full"].includes(sslmode)) {
+        return true;
+    }
+    const ssl = (params["ssl"] ?? "").toLowerCase();
+    return ssl === "true" || ssl === "1";
+}
+//# sourceMappingURL=url.js.map

package/dist/core/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../src/core/url.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,wEAAwE;AAExE,OAAO,EAAE,OAAO,EAAe,MAAM,aAAa,CAAC;AAiBnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AACjE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAExD,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,UAAU,CAAC;IACxD,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAClD,MAAM,IAAI,KAAK,CACb,iDAAiD,QAAQ,sCAAsC,CAChG,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,YAAY;QAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IAErE,OAAO;QACL,MAAM;QACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,QAAQ;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;QACvD,IAAI,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,QAAQ;YACd,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAW;IAEX,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;IACvC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9E,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC;AACvC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export { type Result, ok, err, attempt, unwrap, unwrapOr, } from "./core/result.ts";
+export { type Env, type DecodedTls, resolvePoolLimit, decodeCaBase64, firstEnv, } from "./core/env.ts";
+export { type Engine, type ParsedConnection, parseConnectionString, safeParseConnectionString, redactUrl, urlRequestsSsl, defaultPort, } from "./core/url.ts";
+export { type ProviderId, type ProviderPreset, detectProvider, getProvider, listProviders, isPooledEndpoint, } from "./core/providers.ts";
+export { type BudgetInput, type BudgetResult, recommendPoolLimit, } from "./core/budget.ts";
+export { type RetryOptions, backoffDelay, withRetry, isTransientDbError, } from "./core/retry.ts";
+export { type PoolConfig, loadPoolConfig } from "./core/config.ts";
+export { type RedactOptions, DEFAULT_SECRET_KEYS, redact, } from "./core/redact.ts";
+export { type DsnParts, buildDsn } from "./core/dsn.ts";
+export { type Severity, type Diagnostic, type DiagnoseInput, type DiagnoseReport, diagnose, formatReport, } from "./application/diagnostics.ts";
+export { type InspectEnv, inspectEnv } from "./application/inspect.ts";
+export { type RecommendInput, type Recommendation, recommendForUrl, } from "./application/recommend.ts";
+export { type PreflightOptions, type PreflightResult, preflight, } from "./application/preflight.ts";
+export { buildMysqlPoolOptions, type MysqlPoolEnv, type MysqlPoolOptions, type BuildMysqlOptions, } from "./adapters/mysql.ts";
+export { buildPgPoolOptions, type PgPoolEnv, type PgPoolOptions, type BuildPgOptions, } from "./adapters/pg.ts";
+export { type Queryable, type HealthResult, type HealthOptions, checkHealth, isReachable, } from "./adapters/health.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,KAAK,MAAM,EACX,EAAE,EACF,GAAG,EACH,OAAO,EACP,MAAM,EACN,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,GAAG,EACR,KAAK,UAAU,EACf,gBAAgB,EAChB,cAAc,EACd,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,MAAM,EACX,KAAK,gBAAgB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,SAAS,EACT,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,cAAc,EACd,WAAW,EACX,aAAa,EACb,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,YAAY,EACjB,YAAY,EACZ,SAAS,EACT,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,KAAK,UAAU,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEnE,OAAO,EACL,KAAK,aAAa,EAClB,mBAAmB,EACnB,MAAM,GACP,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,KAAK,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,QAAQ,EACR,YAAY,GACb,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEvE,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,eAAe,GAChB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,SAAS,GACV,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,WAAW,EACX,WAAW,GACZ,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,35 @@
+// lambda-pool — serverless-safe connection-pool options for MySQL and Postgres.
+//
+// Clean-architecture layering (dependencies point inward only):
+//
+//   presentation/  cli, bin                 (process I/O)
+//        │  depends on
+//   adapters/      mysql, pg, health        (driver-facing option objects + ports)
+//        │  depends on
+//   application/   diagnostics, inspect     (use-cases composing the core)
+//        │  depends on
+//   core/          result, env, url,        (pure, zero-dep, no I/O)
+//                  providers, budget, retry
+//
+// Nothing in core imports outward; adapters/presentation never leak into core.
+// Subpaths are published per module so consumers can import the narrowest slice.
+// ---- core ----
+export { ok, err, attempt, unwrap, unwrapOr, } from "./core/result.js";
+export { resolvePoolLimit, decodeCaBase64, firstEnv, } from "./core/env.js";
+export { parseConnectionString, safeParseConnectionString, redactUrl, urlRequestsSsl, defaultPort, } from "./core/url.js";
+export { detectProvider, getProvider, listProviders, isPooledEndpoint, } from "./core/providers.js";
+export { recommendPoolLimit, } from "./core/budget.js";
+export { backoffDelay, withRetry, isTransientDbError, } from "./core/retry.js";
+export { loadPoolConfig } from "./core/config.js";
+export { DEFAULT_SECRET_KEYS, redact, } from "./core/redact.js";
+export { buildDsn } from "./core/dsn.js";
+// ---- application ----
+export { diagnose, formatReport, } from "./application/diagnostics.js";
+export { inspectEnv } from "./application/inspect.js";
+export { recommendForUrl, } from "./application/recommend.js";
+export { preflight, } from "./application/preflight.js";
+// ---- adapters ----
+export { buildMysqlPoolOptions, } from "./adapters/mysql.js";
+export { buildPgPoolOptions, } from "./adapters/pg.js";
+export { checkHealth, isReachable, } from "./adapters/health.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,gEAAgE;AAChE,EAAE;AACF,0DAA0D;AAC1D,uBAAuB;AACvB,mFAAmF;AACnF,uBAAuB;AACvB,2EAA2E;AAC3E,uBAAuB;AACvB,qEAAqE;AACrE,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AAEjF,iBAAiB;AACjB,OAAO,EAEL,EAAE,EACF,GAAG,EACH,OAAO,EACP,MAAM,EACN,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAGL,gBAAgB,EAChB,cAAc,EACd,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,qBAAqB,EACrB,yBAAyB,EACzB,SAAS,EACT,cAAc,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,cAAc,EACd,WAAW,EACX,aAAa,EACb,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAGL,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAEL,YAAY,EACZ,SAAS,EACT,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAmB,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEnE,OAAO,EAEL,mBAAmB,EACnB,MAAM,GACP,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAiB,QAAQ,EAAE,MAAM,eAAe,CAAC;AAExD,wBAAwB;AACxB,OAAO,EAKL,QAAQ,EACR,YAAY,GACb,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAmB,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEvE,OAAO,EAGL,eAAe,GAChB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAGL,SAAS,GACV,MAAM,4BAA4B,CAAC;AAEpC,qBAAqB;AACrB,OAAO,EACL,qBAAqB,GAItB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,kBAAkB,GAInB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAIL,WAAW,EACX,WAAW,GACZ,MAAM,sBAAsB,CAAC"}

package/dist/presentation/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map