memkin 0.4.0

package/dist/store/managed/managed-engine.d.ts

@@ -0,0 +1,35 @@
+import type { Config } from "../../core/config.js";
+import { Database } from "../database.js";
+import type { PgRuntimeProvider, RuntimePaths } from "./pg-runtime-provider.js";
+export interface ManagedSupervisor {
+    ensureUp(): Promise<void>;
+    /** Returns the current Postgres process state. */
+    status(): Promise<"running" | "stopped">;
+    /** Restarts Postgres if it is down; returns true if a restart was performed. */
+    restartIfDown(): Promise<boolean>;
+    /** Stops internal monitoring resources (does NOT stop the cluster). */
+    dispose(): void;
+}
+export interface ProvisionDeps {
+    home?: string;
+    provider: PgRuntimeProvider;
+    makeSupervisor: (rt: RuntimePaths, home: string) => ManagedSupervisor;
+}
+export interface ProvisionResult {
+    supervisor: ManagedSupervisor;
+    pgConfig: Config;
+}
+export declare function provisionManaged(config: Config, deps: ProvisionDeps): Promise<ProvisionResult>;
+export interface ForegroundProvisionDeps extends ProvisionDeps {
+    /** Override Database.create — used in tests to avoid a real Postgres connection. */
+    dbCreate?: typeof Database.create;
+}
+/**
+ * Full foreground provision: provision the managed Postgres cluster, then run a
+ * complete Database.create (schema + migrations) and close. This ensures all
+ * heavy work (download, initdb, start, bootstrapRoles, finalizeHba, schema,
+ * migrations) is complete BEFORE the daemon autostart is enabled, keeping the
+ * daemon's own ensureUp on a fast warm-path.
+ */
+export declare function provisionManagedForeground(config: Config, deps: ForegroundProvisionDeps): Promise<void>;
+//# sourceMappingURL=managed-engine.d.ts.map

package/dist/store/managed/managed-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-engine.d.ts","sourceRoot":"","sources":["../../../src/store/managed/managed-engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAEhF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,kDAAkD;IAClD,MAAM,IAAI,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACzC,gFAAgF;IAChF,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,uEAAuE;IACvE,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,cAAc,EAAE,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,KAAK,iBAAiB,CAAC;CACvE;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,eAAe,CAAC,CAmB1B;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;CACnC;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/store/managed/managed-engine.js

@@ -0,0 +1,40 @@
+import { homedir } from "node:os";
+import { Database } from "../database.js";
+import { withManagedLock } from "./managed-lock.js";
+import { managedConnUrl, managedPaths } from "./pg-paths.js";
+export async function provisionManaged(config, deps) {
+    const home = deps.home ?? homedir();
+    return withManagedLock(home, async () => {
+        const rt = await deps.provider.ensure();
+        const supervisor = deps.makeSupervisor(rt, home);
+        await supervisor.ensureUp();
+        const paths = managedPaths(home, rt.pgMajor);
+        const pgConfig = {
+            ...config,
+            store: {
+                ...(config.store ?? {}),
+                engine: "postgres",
+                database_url: managedConnUrl(paths),
+                pool_size: config.store?.pool_size,
+                data_dir: undefined,
+            },
+        };
+        return { supervisor, pgConfig };
+    });
+}
+/**
+ * Full foreground provision: provision the managed Postgres cluster, then run a
+ * complete Database.create (schema + migrations) and close. This ensures all
+ * heavy work (download, initdb, start, bootstrapRoles, finalizeHba, schema,
+ * migrations) is complete BEFORE the daemon autostart is enabled, keeping the
+ * daemon's own ensureUp on a fast warm-path.
+ */
+export async function provisionManagedForeground(config, deps) {
+    const { pgConfig } = await provisionManaged(config, deps);
+    const dbCreate = deps.dbCreate ?? Database.create.bind(Database);
+    const db = await dbCreate(pgConfig, {
+        embeddingDimensions: config.embedding?.dimensions,
+    });
+    await db.close();
+}
+//# sourceMappingURL=managed-engine.js.map

package/dist/store/managed/managed-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-engine.js","sourceRoot":"","sources":["../../../src/store/managed/managed-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAwB7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,IAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACpC,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAW;YACvB,GAAG,MAAM;YACT,KAAK,EAAE;gBACL,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,EAAE,UAAmB;gBAC3B,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC;gBACnC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS;gBAClC,QAAQ,EAAE,SAAS;aACpB;SACF,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAc,EACd,IAA6B;IAE7B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE;QAClC,mBAAmB,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU;KAClD,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/store/managed/managed-lock.d.ts

@@ -0,0 +1,2 @@
+export declare function withManagedLock<T>(home: string, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=managed-lock.d.ts.map

package/dist/store/managed/managed-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-lock.d.ts","sourceRoot":"","sources":["../../../src/store/managed/managed-lock.ts"],"names":[],"mappings":"AAsBA,wBAAsB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAgDvF"}

package/dist/store/managed/managed-lock.js

@@ -0,0 +1,68 @@
+import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+const LOCK_TIMEOUT_MS = 10_000;
+const RETRY_INTERVAL_MS = 25;
+function delay(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === "EPERM")
+            return true; // process exists, no permission to signal
+        if (e.code === "ESRCH")
+            return false; // no such process
+        return false;
+    }
+}
+export async function withManagedLock(home, fn) {
+    const lockDir = join(home, ".memkin");
+    const lockPath = join(lockDir, "managed-pg.lock");
+    const content = JSON.stringify({ pid: process.pid, ts: Date.now() });
+    const deadline = Date.now() + LOCK_TIMEOUT_MS;
+    while (true) {
+        mkdirSync(lockDir, { recursive: true });
+        try {
+            writeFileSync(lockPath, content, { flag: "wx" });
+            // Lock acquired
+            break;
+        }
+        catch (err) {
+            const e = err;
+            if (e.code !== "EEXIST")
+                throw e;
+            // Lock file exists — read it to decide what to do
+            let existing = {};
+            try {
+                existing = JSON.parse(readFileSync(lockPath, "utf8"));
+            }
+            catch {
+                // Unparseable lock → stale, remove and retry
+                rmSync(lockPath, { force: true });
+                continue;
+            }
+            const ownerPid = existing.pid;
+            if (typeof ownerPid !== "number" || !isProcessAlive(ownerPid)) {
+                // Dead owner or missing pid → stale, remove and retry
+                rmSync(lockPath, { force: true });
+                continue;
+            }
+            // Live owner → wait and retry (handles both cross-process and same-process serialization)
+            if (Date.now() >= deadline) {
+                throw new Error(`could not acquire managed-pg.lock (held by pid ${ownerPid})`);
+            }
+            await delay(RETRY_INTERVAL_MS);
+        }
+    }
+    try {
+        return await fn();
+    }
+    finally {
+        rmSync(lockPath, { force: true });
+    }
+}
+//# sourceMappingURL=managed-lock.js.map

package/dist/store/managed/managed-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-lock.js","sourceRoot":"","sources":["../../../src/store/managed/managed-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,0CAA0C;QAC/E,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC,CAAC,kBAAkB;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,IAAY,EAAE,EAAoB;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;IAE9C,OAAO,IAAI,EAAE,CAAC;QACZ,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAExC,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,gBAAgB;YAChB,MAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA4B,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAEjC,kDAAkD;YAClD,IAAI,QAAQ,GAAkC,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;gBAC7C,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC;YAC9B,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9D,sDAAsD;gBACtD,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClC,SAAS;YACX,CAAC;YAED,0FAA0F;YAC1F,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,QAAQ,GAAG,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/store/managed/new-install.d.ts

@@ -0,0 +1,12 @@
+/** True if ~/.memkin/data exists and is a non-empty PGLite data dir. */
+export declare function hasExistingPgliteData(home: string): boolean;
+/**
+ * Decide the default engine for a NEW install (no config yet).
+ * macOS + no existing PGLite data → managed (zero-config). Otherwise pglite (safe default,
+ * never silently abandons existing data; linux/win not yet supported by managed → SP2b).
+ */
+export declare function resolveDefaultEngineForNewInstall(opts: {
+    platform: NodeJS.Platform;
+    home: string;
+}): "managed" | "pglite";
+//# sourceMappingURL=new-install.d.ts.map

package/dist/store/managed/new-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"new-install.d.ts","sourceRoot":"","sources":["../../../src/store/managed/new-install.ts"],"names":[],"mappings":"AAGA,wEAAwE;AACxE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO3D;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,SAAS,GAAG,QAAQ,CAGvB"}

package/dist/store/managed/new-install.js

@@ -0,0 +1,23 @@
+import { existsSync, readdirSync } from "node:fs";
+import { join } from "node:path";
+/** True if ~/.memkin/data exists and is a non-empty PGLite data dir. */
+export function hasExistingPgliteData(home) {
+    const dir = join(home, ".memkin", "data");
+    try {
+        return existsSync(dir) && readdirSync(dir).length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Decide the default engine for a NEW install (no config yet).
+ * macOS + no existing PGLite data → managed (zero-config). Otherwise pglite (safe default,
+ * never silently abandons existing data; linux/win not yet supported by managed → SP2b).
+ */
+export function resolveDefaultEngineForNewInstall(opts) {
+    if (opts.platform === "darwin" && !hasExistingPgliteData(opts.home))
+        return "managed";
+    return "pglite";
+}
+//# sourceMappingURL=new-install.js.map

package/dist/store/managed/new-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"new-install.js","sourceRoot":"","sources":["../../../src/store/managed/new-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAGjD;IACC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/store/managed/pg-paths.d.ts

@@ -0,0 +1,28 @@
+export declare const MANAGED_FIXED_PORT = 54329;
+export interface ManagedPaths {
+    base: string;
+    runtimeRoot: string;
+    pgdata: string;
+    socketDir: string;
+    fixedPort: number;
+    statePath: string;
+}
+export interface ManagedState {
+    pgdata: string;
+    fixedPort: number;
+    socketDir: string;
+    runtimeRoot: string;
+    pgVersion: string;
+    pgCtlPath: string;
+    logPath: string;
+}
+export declare function managedPaths(home: string, pgMajor: string): ManagedPaths;
+/**
+ * Returns the path to managed-pg.json without requiring a pgMajor version.
+ * The state file path is version-independent (~/.memkin/managed-pg.json).
+ */
+export declare function managedStatePath(home: string): string;
+export declare function managedConnUrl(p: ManagedPaths): string;
+export declare function writeManagedState(p: ManagedPaths, s: ManagedState): void;
+export declare function readManagedState(p: ManagedPaths): ManagedState | null;
+//# sourceMappingURL=pg-paths.d.ts.map

package/dist/store/managed/pg-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-paths.d.ts","sourceRoot":"","sources":["../../../src/store/managed/pg-paths.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAExC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,CAUxE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAGD,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAGtD;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,IAAI,CAGxE;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,IAAI,CAOrE"}

package/dist/store/managed/pg-paths.js

@@ -0,0 +1,41 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export const MANAGED_FIXED_PORT = 54329;
+export function managedPaths(home, pgMajor) {
+    const base = join(home, ".memkin");
+    return {
+        base,
+        runtimeRoot: process.env.MEMKIN_PG_RUNTIME_DIR ?? join(base, "runtime", pgMajor),
+        pgdata: join(base, "pgdata"),
+        socketDir: join(base, "run"),
+        fixedPort: MANAGED_FIXED_PORT,
+        statePath: join(base, "managed-pg.json"),
+    };
+}
+/**
+ * Returns the path to managed-pg.json without requiring a pgMajor version.
+ * The state file path is version-independent (~/.memkin/managed-pg.json).
+ */
+export function managedStatePath(home) {
+    return join(home, ".memkin", "managed-pg.json");
+}
+// socketDir as host; node-postgres needs the port to find .s.PGSQL.<port> (P0-2)
+export function managedConnUrl(p) {
+    const host = encodeURIComponent(p.socketDir);
+    return `postgresql://memkin@/memkin?host=${host}&port=${p.fixedPort}`;
+}
+export function writeManagedState(p, s) {
+    mkdirSync(p.base, { recursive: true });
+    writeFileSync(p.statePath, JSON.stringify(s, null, 2), "utf8");
+}
+export function readManagedState(p) {
+    if (!existsSync(p.statePath))
+        return null;
+    try {
+        return JSON.parse(readFileSync(p.statePath, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=pg-paths.js.map

package/dist/store/managed/pg-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-paths.js","sourceRoot":"","sources":["../../../src/store/managed/pg-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAqBxC,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAe;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnC,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;QAChF,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QAC5B,SAAS,EAAE,kBAAkB;QAC7B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC;KACzC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAClD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,oCAAoC,IAAI,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAe,EAAE,CAAe;IAChE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAe;IAC9C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAiB,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/store/managed/pg-runtime-provider.d.ts

@@ -0,0 +1,47 @@
+export interface RuntimePaths {
+    root: string;
+    pgMajor: string;
+    bin: string;
+    postgres: string;
+    pgCtl: string;
+    initdb: string;
+    createdb: string;
+    pgIsReady: string;
+    libDir: string;
+    extensionDir: string;
+}
+export interface PgRuntimeProvider {
+    ensure(): Promise<RuntimePaths>;
+    verify(): Promise<RuntimePaths>;
+}
+export interface ProviderOptions {
+    home: string;
+    pgMajor: string;
+    runtimeDir?: string;
+}
+export declare const RUNTIME_MANIFEST: {
+    readonly version: "17.5-1";
+    readonly baseUrl: "https://github.com/AndreLYL/memkin/releases/download/pg-runtime-17.5-1";
+    readonly assets: {
+        readonly arm64: {
+            readonly file: "memkin-pg-darwin-arm64.tar.gz";
+            readonly sha256: "TODO_PIN_ARM64_SHA256";
+        };
+        readonly x64: {
+            readonly file: "memkin-pg-darwin-x64.tar.gz";
+            readonly sha256: "TODO_PIN_X64_SHA256";
+        };
+    };
+};
+export interface ProviderDownloadDeps {
+    /** Override manifest (for tests that need a pinned sha). Defaults to RUNTIME_MANIFEST. */
+    manifest?: typeof RUNTIME_MANIFEST;
+    /** Fetch a tarball at the given URL and return its bytes. Defaults to a real fetch. */
+    fetchTarball?: (url: string) => Promise<Buffer>;
+    /** Extract a tar.gz file at tarPath into destDir. Defaults to spawning `tar -xzf`. */
+    extract?: (tarPath: string, destDir: string) => Promise<void>;
+    /** Process architecture — defaults to process.arch. */
+    arch?: NodeJS.Architecture;
+}
+export declare function createPgRuntimeProvider(opts: ProviderOptions, deps?: ProviderDownloadDeps): PgRuntimeProvider;
+//# sourceMappingURL=pg-runtime-provider.d.ts.map

package/dist/store/managed/pg-runtime-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-runtime-provider.d.ts","sourceRoot":"","sources":["../../../src/store/managed/pg-runtime-provider.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAChC,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;CAcnB,CAAC;AAMX,MAAM,WAAW,oBAAoB;IACnC,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACnC,uFAAuF;IACvF,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,sFAAsF;IACtF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC;CAC5B;AAmJD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,eAAe,EACrB,IAAI,GAAE,oBAAyB,GAC9B,iBAAiB,CA6InB"}

package/dist/store/managed/pg-runtime-provider.js

@@ -0,0 +1,249 @@
+import { createHash } from "node:crypto";
+import { accessSync, constants, existsSync, mkdirSync, mkdtempSync, readdirSync, realpathSync, renameSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+import { managedPaths } from "./pg-paths.js";
+// ---------------------------------------------------------------------------
+// Pinned manifest — bump when republishing the runtime tarball
+// ---------------------------------------------------------------------------
+export const RUNTIME_MANIFEST = {
+    version: "17.5-1", // pinned; bump when republishing runtime
+    // TODO: confirm release URL once the GitHub release is published
+    baseUrl: "https://github.com/AndreLYL/memkin/releases/download/pg-runtime-17.5-1",
+    assets: {
+        arm64: {
+            file: "memkin-pg-darwin-arm64.tar.gz",
+            sha256: "TODO_PIN_ARM64_SHA256", // TODO: fill in after building the release asset
+        },
+        x64: {
+            file: "memkin-pg-darwin-x64.tar.gz",
+            sha256: "TODO_PIN_X64_SHA256", // TODO: fill in after building the release asset
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+const REQUIRED_BINARIES = ["postgres", "pg_ctl", "initdb", "createdb", "pg_isready"];
+const VECTOR_LIBS = ["vector.dylib", "vector.so"];
+const REQUIRED_EXTENSIONS = ["pg_trgm.control", "vector.control"];
+function buildRuntimePaths(root, pgMajor) {
+    const bin = join(root, "bin");
+    return {
+        root,
+        pgMajor,
+        bin,
+        postgres: join(bin, "postgres"),
+        pgCtl: join(bin, "pg_ctl"),
+        initdb: join(bin, "initdb"),
+        createdb: join(bin, "createdb"),
+        pgIsReady: join(bin, "pg_isready"),
+        libDir: join(root, "lib", "postgresql"),
+        extensionDir: join(root, "share", "postgresql", "extension"),
+    };
+}
+function isExecutable(p) {
+    try {
+        accessSync(p, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function validateRuntime(root, pgMajor) {
+    const paths = buildRuntimePaths(root, pgMajor);
+    // Check each required binary exists and is executable
+    for (const bin of REQUIRED_BINARIES) {
+        const p = join(paths.bin, bin);
+        if (!existsSync(p)) {
+            throw new Error(`managed Postgres runtime validation failed: missing binary '${bin}' in ${paths.bin} (runtime root: ${root})`);
+        }
+        if (!isExecutable(p)) {
+            throw new Error(`managed Postgres runtime validation failed: '${bin}' is not executable in ${paths.bin} (runtime root: ${root})`);
+        }
+    }
+    // Check at least one of vector.dylib / vector.so exists
+    const hasVectorLib = VECTOR_LIBS.some((lib) => existsSync(join(paths.libDir, lib)));
+    if (!hasVectorLib) {
+        throw new Error(`managed Postgres runtime validation failed: missing pgvector shared library (vector.dylib or vector.so) in ${paths.libDir} (runtime root: ${root})`);
+    }
+    // Check required extension control files
+    for (const ext of REQUIRED_EXTENSIONS) {
+        const p = join(paths.extensionDir, ext);
+        if (!existsSync(p)) {
+            throw new Error(`managed Postgres runtime validation failed: missing extension '${ext}' in ${paths.extensionDir} (runtime root: ${root})`);
+        }
+    }
+    return paths;
+}
+/**
+ * Recursively walk `dir` and throw if any symlink resolves outside `root`.
+ * This guards against path-traversal attacks in a downloaded tarball.
+ */
+function assertNoPathTraversal(root, dir) {
+    const realRoot = realpathSync(root);
+    function walk(current) {
+        const entries = readdirSync(current, { withFileTypes: true });
+        for (const entry of entries) {
+            const entryPath = join(current, entry.name);
+            if (entry.isSymbolicLink()) {
+                // Resolve the symlink target to an absolute path
+                let resolved;
+                try {
+                    resolved = realpathSync(entryPath);
+                }
+                catch {
+                    // Dangling symlink — reject
+                    throw new Error(`path-traversal guard: dangling symlink at ${entryPath} in extracted runtime`);
+                }
+                if (!resolved.startsWith(`${realRoot}/`) && resolved !== realRoot) {
+                    throw new Error(`path-traversal guard: symlink ${entryPath} points outside extraction dir (resolved to ${resolved})`);
+                }
+                // Don't recurse into symlinks — they've been validated above
+            }
+            else if (entry.isDirectory()) {
+                walk(entryPath);
+            }
+        }
+    }
+    walk(dir);
+}
+/**
+ * Default fetchTarball: real HTTP fetch returning a Buffer.
+ */
+async function defaultFetchTarball(url) {
+    const resp = await fetch(url);
+    if (!resp.ok) {
+        throw new Error(`failed to fetch runtime tarball from ${url}: ${resp.status} ${resp.statusText}`);
+    }
+    const ab = await resp.arrayBuffer();
+    return Buffer.from(ab);
+}
+/**
+ * Default extract: spawn `tar -xzf` with safe flags.
+ */
+async function defaultExtract(tarPath, destDir) {
+    const { spawn } = await import("node:child_process");
+    await new Promise((resolve, reject) => {
+        // --no-same-owner prevents ownership attacks; -C changes into destDir
+        const proc = spawn("tar", ["-xzf", tarPath, "-C", destDir, "--no-same-owner"], {
+            stdio: "inherit",
+        });
+        proc.on("close", (code) => {
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(`tar exited with code ${code}`));
+        });
+        proc.on("error", reject);
+    });
+}
+// ---------------------------------------------------------------------------
+// Factory
+// ---------------------------------------------------------------------------
+export function createPgRuntimeProvider(opts, deps = {}) {
+    const { manifest = RUNTIME_MANIFEST, fetchTarball = defaultFetchTarball, extract = defaultExtract, arch = process.arch, } = deps;
+    /** Resolve override dir (explicit runtimeDir > env var > already-present runtimeRoot). */
+    function resolveOverrideDir() {
+        const { home, pgMajor, runtimeDir } = opts;
+        const envOverride = process.env.MEMKIN_PG_RUNTIME_DIR;
+        const paths = managedPaths(home, pgMajor);
+        if (runtimeDir !== undefined)
+            return runtimeDir;
+        if (envOverride !== undefined)
+            return envOverride;
+        if (existsSync(paths.runtimeRoot))
+            return paths.runtimeRoot;
+        return undefined;
+    }
+    return {
+        /**
+         * verify() — checks an ALREADY-present runtime without downloading.
+         * Used by `memkin doctor` so it never triggers a 40-80 MB download as a side effect.
+         */
+        async verify() {
+            const { home, pgMajor } = opts;
+            const overrideDir = resolveOverrideDir();
+            if (overrideDir !== undefined) {
+                return validateRuntime(overrideDir, pgMajor);
+            }
+            const paths = managedPaths(home, pgMajor);
+            throw new Error(`managed Postgres runtime not provisioned at ${paths.runtimeRoot} — run \`memkin up\``);
+        },
+        /**
+         * ensure() — validates existing runtime OR downloads it on first-run.
+         * Used by `memkin up`.
+         */
+        async ensure() {
+            const { home, pgMajor } = opts;
+            const overrideDir = resolveOverrideDir();
+            if (overrideDir !== undefined) {
+                return validateRuntime(overrideDir, pgMajor);
+            }
+            // -----------------------------------------------------------------------
+            // Download path — no runtime present yet
+            // -----------------------------------------------------------------------
+            // 1. Pick asset by arch
+            let assetKey;
+            if (arch === "arm64") {
+                assetKey = "arm64";
+            }
+            else if (arch === "x64") {
+                assetKey = "x64";
+            }
+            else {
+                throw new Error(`The self-managed Postgres engine is currently macOS-only (arm64/x64); your platform (${process.platform}/${arch}) is not supported yet. ` +
+                    `Use the default PGLite backend instead — it works everywhere. ` +
+                    `Set \`store.engine: pglite\` in memkin.yaml (or remove \`store.engine\` to use the default).`);
+            }
+            const asset = manifest.assets[assetKey];
+            // 2. Guard against unpinned manifest shas before hitting the network
+            if (asset.sha256.startsWith("TODO_PIN_")) {
+                throw new Error(`managed Postgres runtime checksum not pinned — build/publish the runtime first (manifest.assets.${assetKey}.sha256 is still a placeholder)`);
+            }
+            // 3. Fetch
+            const url = `${manifest.baseUrl}/${asset.file}`;
+            const buf = await fetchTarball(url);
+            // 4. Verify sha256
+            const actual = createHash("sha256").update(buf).digest("hex");
+            if (actual !== asset.sha256) {
+                throw new Error(`managed Postgres runtime checksum mismatch for ${asset.file}:\n  expected: ${asset.sha256}\n  actual:   ${actual}\n(re-run with a fresh download or update the manifest)`);
+            }
+            // 5. Write buf to a temp file under the same filesystem (.memkin/tmp) to
+            //    keep the later atomic rename cross-device-safe.
+            const managedBase = managedPaths(home, pgMajor).base;
+            mkdirSync(managedBase, { recursive: true });
+            const tmpBase = join(managedBase, "tmp");
+            mkdirSync(tmpBase, { recursive: true });
+            const tarPath = join(tmpBase, asset.file);
+            writeFileSync(tarPath, buf);
+            // 6. mkdtemp extract dir under the same base
+            const tmpExtract = mkdtempSync(join(tmpBase, "extract-"));
+            try {
+                await extract(tarPath, tmpExtract);
+                // 7. Path-traversal / symlink guard
+                assertNoPathTraversal(tmpExtract, tmpExtract);
+                // 8. Validate the extracted structure
+                validateRuntime(tmpExtract, pgMajor);
+                // 9. Atomic move into place
+                const { runtimeRoot } = managedPaths(home, pgMajor);
+                mkdirSync(join(runtimeRoot, ".."), { recursive: true });
+                renameSync(tmpExtract, runtimeRoot);
+                // 10. Write manifest record
+                writeFileSync(join(runtimeRoot, "manifest.json"), JSON.stringify({ version: manifest.version, sha256: asset.sha256, arch: assetKey }, null, 2), "utf8");
+                return validateRuntime(runtimeRoot, pgMajor);
+            }
+            finally {
+                // Clean up tmp tarball (the extract dir is either moved or already gone)
+                try {
+                    const { unlinkSync } = await import("node:fs");
+                    unlinkSync(tarPath);
+                }
+                catch {
+                    // best-effort
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=pg-runtime-provider.js.map

package/dist/store/managed/pg-runtime-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-runtime-provider.js","sourceRoot":"","sources":["../../../src/store/managed/pg-runtime-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,EACT,WAAW,EACX,WAAW,EACX,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA0B7C,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,OAAO,EAAE,QAAQ,EAAE,yCAAyC;IAC5D,iEAAiE;IACjE,OAAO,EAAE,wEAAwE;IACjF,MAAM,EAAE;QACN,KAAK,EAAE;YACL,IAAI,EAAE,+BAA+B;YACrC,MAAM,EAAE,uBAAuB,EAAE,iDAAiD;SACnF;QACD,GAAG,EAAE;YACH,IAAI,EAAE,6BAA6B;YACnC,MAAM,EAAE,qBAAqB,EAAE,iDAAiD;SACjF;KACF;CACO,CAAC;AAiBX,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAU,CAAC;AAC9F,MAAM,WAAW,GAAG,CAAC,cAAc,EAAE,WAAW,CAAU,CAAC;AAC3D,MAAM,mBAAmB,GAAG,CAAC,iBAAiB,EAAE,gBAAgB,CAAU,CAAC;AAE3E,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO;QACL,IAAI;QACJ,OAAO;QACP,GAAG;QACH,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC3B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC;QACvC,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe;IACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/C,sDAAsD;IACtD,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,+DAA+D,GAAG,QAAQ,KAAK,CAAC,GAAG,mBAAmB,IAAI,GAAG,CAC9G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gDAAgD,GAAG,0BAA0B,KAAK,CAAC,GAAG,mBAAmB,IAAI,GAAG,CACjH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,8GAA8G,KAAK,CAAC,MAAM,mBAAmB,IAAI,GAAG,CACrJ,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,kEAAkE,GAAG,QAAQ,KAAK,CAAC,YAAY,mBAAmB,IAAI,GAAG,CAC1H,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,IAAY,EAAE,GAAW;IACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAEpC,SAAS,IAAI,CAAC,OAAe;QAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,iDAAiD;gBACjD,IAAI,QAAgB,CAAC;gBACrB,IAAI,CAAC;oBACH,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,4BAA4B;oBAC5B,MAAM,IAAI,KAAK,CACb,6CAA6C,SAAS,uBAAuB,CAC9E,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAClE,MAAM,IAAI,KAAK,CACb,iCAAiC,SAAS,+CAA+C,QAAQ,GAAG,CACrG,CAAC;gBACJ,CAAC;gBACD,6DAA6D;YAC/D,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,IAAI,CAAC,SAAS,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wCAAwC,GAAG,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,OAAe;IAC5D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,sEAAsE;QACtE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE;YAC7E,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,UAAU,uBAAuB,CACrC,IAAqB,EACrB,OAA6B,EAAE;IAE/B,MAAM,EACJ,QAAQ,GAAG,gBAAgB,EAC3B,YAAY,GAAG,mBAAmB,EAClC,OAAO,GAAG,cAAc,EACxB,IAAI,GAAG,OAAO,CAAC,IAA2B,GAC3C,GAAG,IAAI,CAAC;IAET,0FAA0F;IAC1F,SAAS,kBAAkB;QACzB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACtD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE1C,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAChD,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC;QAClD,IAAI,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC,WAAW,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL;;;WAGG;QACH,KAAK,CAAC,MAAM;YACV,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;YAC/B,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;YAEzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,WAAW,sBAAsB,CACvF,CAAC;QACJ,CAAC;QAED;;;WAGG;QACH,KAAK,CAAC,MAAM;YACV,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;YAC/B,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;YAEzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;YAED,0EAA0E;YAC1E,yCAAyC;YACzC,0EAA0E;YAE1E,wBAAwB;YACxB,IAAI,QAAyB,CAAC;YAC9B,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,QAAQ,GAAG,OAAO,CAAC;YACrB,CAAC;iBAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC1B,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CACb,wFAAwF,OAAO,CAAC,QAAQ,IAAI,IAAI,0BAA0B;oBACxI,gEAAgE;oBAChE,8FAA8F,CACjG,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAExC,qEAAqE;YACrE,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,mGAAmG,QAAQ,iCAAiC,CAC7I,CAAC;YACJ,CAAC;YAED,WAAW;YACX,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YAEpC,mBAAmB;YACnB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9D,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,kDAAkD,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,MAAM,iBAAiB,MAAM,yDAAyD,CAC3K,CAAC;YACJ,CAAC;YAED,yEAAyE;YACzE,qDAAqD;YACrD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;YACrD,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YACzC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAExC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE5B,6CAA6C;YAC7C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAE1D,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAEnC,oCAAoC;gBACpC,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBAE9C,sCAAsC;gBACtC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAErC,4BAA4B;gBAC5B,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACpD,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAEpC,4BAA4B;gBAC5B,aAAa,CACX,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EAClC,IAAI,CAAC,SAAS,CACZ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EACnE,IAAI,EACJ,CAAC,CACF,EACD,MAAM,CACP,CAAC;gBAEF,OAAO,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;oBAAS,CAAC;gBACT,yEAAyE;gBACzE,IAAI,CAAC;oBACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC/C,UAAU,CAAC,OAAO,CAAC,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/store/managed/pg-supervisor.d.ts

@@ -0,0 +1,30 @@
+import { type CommandRunner } from "../../daemon/autostart/runner.js";
+import { type ManagedPaths } from "./pg-paths.js";
+import type { RuntimePaths } from "./pg-runtime-provider.js";
+export interface PgSupervisorDeps {
+    runtime: RuntimePaths;
+    paths: ManagedPaths;
+    runner?: CommandRunner;
+    bootstrapUser?: string;
+}
+export interface WaitReadyOptions {
+    /** How often to poll pg_isready (default: 250 ms) */
+    pollIntervalMs?: number;
+    /** Total timeout before throwing (default: 15 000 ms) */
+    timeoutMs?: number;
+}
+export interface PgSupervisor {
+    ensureCluster(): Promise<void>;
+    start(): Promise<void>;
+    startWithStaleRecovery(): Promise<void>;
+    waitReady(opts?: WaitReadyOptions): Promise<void>;
+    bootstrapRoles(): Promise<void>;
+    finalizeHba(): Promise<void>;
+    ensureUp(): Promise<void>;
+    status(): Promise<"running" | "stopped">;
+    restartIfDown(waitReadyOpts?: WaitReadyOptions): Promise<boolean>;
+    stop(): Promise<void>;
+    dispose(): void;
+}
+export declare function createPgSupervisor(deps: PgSupervisorDeps): PgSupervisor;
+//# sourceMappingURL=pg-supervisor.d.ts.map