memkin 0.4.0

package/dist/store/managed/pg-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-supervisor.d.ts","sourceRoot":"","sources":["../../../src/store/managed/pg-supervisor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,aAAa,EAAc,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,KAAK,YAAY,EAAuC,MAAM,eAAe,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAS7D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACzC,aAAa,CAAC,aAAa,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,IAAI,IAAI,CAAC;CACjB;AAID,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAuWvE"}

package/dist/store/managed/pg-supervisor.js

@@ -0,0 +1,308 @@
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { userInfo } from "node:os";
+import { join } from "node:path";
+import { nodeRunner } from "../../daemon/autostart/runner.js";
+import { readManagedState, writeManagedState } from "./pg-paths.js";
+// ─── Managed block delimiters ────────────────────────────────────────────────
+const BLOCK_START = "# >>> memkin managed >>>";
+const BLOCK_END = "# <<< memkin managed <<<";
+// ─── Factory ──────────────────────────────────────────────────────────────────
+export function createPgSupervisor(deps) {
+    const { runtime, paths } = deps;
+    const runner = deps.runner ?? nodeRunner;
+    const bootstrapUser = deps.bootstrapUser ?? process.env.USER ?? userInfo().username;
+    // ── Private helpers ────────────────────────────────────────────────────────
+    /**
+     * Write (or replace) the memkin-managed block inside postgresql.conf.
+     * If the file already contains the managed block, it is replaced in-place.
+     * If the file does not exist yet, it is created with only the managed block.
+     * Non-managed content outside the block is preserved.
+     */
+    function writeManagedConf() {
+        const confPath = join(paths.pgdata, "postgresql.conf");
+        const managedBlock = [
+            BLOCK_START,
+            "# Auto-generated by memkin — do not edit manually between these markers.",
+            "listen_addresses = ''",
+            `unix_socket_directories = '${paths.socketDir}'`,
+            "unix_socket_permissions = 0700",
+            `port = ${paths.fixedPort}`,
+            BLOCK_END,
+        ].join("\n");
+        if (existsSync(confPath)) {
+            const existing = readFileSync(confPath, "utf8");
+            const startIdx = existing.indexOf(BLOCK_START);
+            const endIdx = existing.indexOf(BLOCK_END);
+            if (startIdx !== -1 && endIdx !== -1 && endIdx > startIdx) {
+                // Replace existing managed block
+                const before = existing.slice(0, startIdx);
+                const after = existing.slice(endIdx + BLOCK_END.length);
+                writeFileSync(confPath, `${before}${managedBlock}${after}`, "utf8");
+            }
+            else {
+                // Append managed block (no prior block found)
+                const separator = existing.endsWith("\n") ? "\n" : "\n\n";
+                writeFileSync(confPath, `${existing}${separator}${managedBlock}\n`, "utf8");
+            }
+        }
+        else {
+            // New file — write managed block only
+            writeFileSync(confPath, `${managedBlock}\n`, "utf8");
+        }
+    }
+    /**
+     * Write the temporary (phase-1) pg_hba.conf.
+     * Only allows the bootstrap OS user via local UNIX socket with trust auth.
+     * The final restrictive HBA is applied in a later task (Task 8).
+     */
+    function writeTempHba() {
+        const hbaPath = join(paths.pgdata, "pg_hba.conf");
+        const content = [
+            "# Temporary HBA — managed by memkin (phase 1). DO NOT EDIT.",
+            "# Final restrictive HBA is applied after bootstrap roles are created.",
+            `local all ${bootstrapUser} trust`,
+            "",
+        ].join("\n");
+        writeFileSync(hbaPath, content, "utf8");
+    }
+    /**
+     * Build a psql argv array for running a single SQL command.
+     * All connections go through the UNIX socket (host = socketDir).
+     */
+    function psqlArgs(db, sql, opts = {}) {
+        const psql = join(runtime.bin, "psql");
+        const argv = [
+            psql,
+            "-h",
+            paths.socketDir,
+            "-p",
+            String(paths.fixedPort),
+            "-U",
+            bootstrapUser,
+            "-d",
+            db,
+            "-v",
+            "ON_ERROR_STOP=1",
+        ];
+        if (opts.tuplesOnly) {
+            argv.push("-tAc", sql);
+        }
+        else {
+            argv.push("-c", sql);
+        }
+        return argv;
+    }
+    // ── Public API ─────────────────────────────────────────────────────────────
+    return {
+        async ensureCluster() {
+            const pgVersionFile = join(paths.pgdata, "PG_VERSION");
+            const clusterExists = existsSync(pgVersionFile);
+            if (!clusterExists) {
+                // Run initdb to initialise the cluster
+                const result = await runner.run([
+                    runtime.initdb,
+                    "-D",
+                    paths.pgdata,
+                    "-U",
+                    bootstrapUser,
+                    "--auth=trust",
+                    "--encoding=UTF8",
+                ]);
+                if (result.code !== 0) {
+                    throw new Error(`initdb failed (exit ${result.code}) for pgdata=${paths.pgdata}: ${result.stderr}`);
+                }
+                // In real usage initdb creates pgdata; for fake-runner paths ensure the
+                // directory exists so the conf-writes below succeed.
+                mkdirSync(paths.pgdata, { recursive: true });
+            }
+            // Always (re-)create the socket dir with mode 0700
+            mkdirSync(paths.socketDir, { recursive: true, mode: 0o700 });
+            // Write / replace the managed postgresql.conf block (idempotent)
+            writeManagedConf();
+            // Write the temporary pg_hba.conf ONLY when not yet bootstrapped.
+            // After bootstrap, the HBA has been finalized to the restrictive version.
+            // Re-writing the temp HBA would loosen security back to bootstrap-user-trust.
+            // Bootstrapped ⇔ managed-state file exists.
+            if (readManagedState(paths) === null) {
+                // The temp HBA (bootstrap-user trust) is only ever active before finalizeHba.
+                // Its containment relies on listen_addresses='' (no TCP) + the 0700 private socket dir —
+                // do NOT weaken either without revisiting this bootstrap-window exposure.
+                writeTempHba();
+            }
+        },
+        async start() {
+            const logPath = join(paths.pgdata, "postmaster.log");
+            const result = await runner.run([
+                runtime.pgCtl,
+                "start",
+                "-D",
+                paths.pgdata,
+                "-l",
+                logPath,
+                "-w",
+                "-o",
+                `-p ${paths.fixedPort}`,
+            ]);
+            if (result.code !== 0) {
+                throw new Error(`pg_ctl start failed (exit ${result.code}), log=${logPath}: ${result.stderr}`);
+            }
+        },
+        async waitReady(opts = {}) {
+            const pollIntervalMs = opts.pollIntervalMs ?? 250;
+            const timeoutMs = opts.timeoutMs ?? 15_000;
+            const deadline = Date.now() + timeoutMs;
+            while (Date.now() < deadline) {
+                const result = await runner.run([
+                    runtime.pgIsReady,
+                    "-h",
+                    paths.socketDir,
+                    "-p",
+                    String(paths.fixedPort),
+                ]);
+                if (result.code === 0)
+                    return;
+                await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+            }
+            throw new Error(`pg_isready timeout after ${timeoutMs}ms: Postgres did not become ready (socketDir=${paths.socketDir}, port=${paths.fixedPort})`);
+        },
+        async bootstrapRoles() {
+            // (a) Create memkin role — idempotent via DO block
+            const roleResult = await runner.run(psqlArgs("postgres", `DO $$ BEGIN IF NOT EXISTS (SELECT FROM pg_roles WHERE rolname='memkin') THEN CREATE ROLE memkin LOGIN; END IF; END $$;`));
+            if (roleResult.code !== 0) {
+                throw new Error(`psql CREATE ROLE failed (exit ${roleResult.code}): ${roleResult.stderr}`);
+            }
+            // (b) Check if the memkin database already exists
+            const dbCheckResult = await runner.run(psqlArgs("postgres", `SELECT 1 FROM pg_database WHERE datname='memkin'`, {
+                tuplesOnly: true,
+            }));
+            if (dbCheckResult.code !== 0) {
+                throw new Error(`psql db-existence check failed (exit ${dbCheckResult.code}): ${dbCheckResult.stderr}`);
+            }
+            // Only create the database if it does not exist yet
+            if (dbCheckResult.stdout.trim() === "") {
+                const createDbResult = await runner.run(psqlArgs("postgres", `CREATE DATABASE memkin OWNER memkin`));
+                if (createDbResult.code !== 0) {
+                    throw new Error(`psql CREATE DATABASE failed (exit ${createDbResult.code}): ${createDbResult.stderr}`);
+                }
+            }
+            // (c) Create extensions in the memkin database
+            const extResult = await runner.run(psqlArgs("memkin", `CREATE EXTENSION IF NOT EXISTS vector; CREATE EXTENSION IF NOT EXISTS pg_trgm;`));
+            if (extResult.code !== 0) {
+                throw new Error(`psql CREATE EXTENSION failed (exit ${extResult.code}): ${extResult.stderr}`);
+            }
+        },
+        async finalizeHba() {
+            const hbaPath = join(paths.pgdata, "pg_hba.conf");
+            const finalHba = [
+                "# memkin final HBA — managed",
+                "local   memkin   memkin   trust",
+                "local   all       all       reject",
+                "host    all       all       all     reject",
+                "",
+            ].join("\n");
+            writeFileSync(hbaPath, finalHba, "utf8");
+            const result = await runner.run([runtime.pgCtl, "reload", "-D", paths.pgdata]);
+            if (result.code !== 0) {
+                throw new Error(`pg_ctl reload failed (exit ${result.code}): ${result.stderr}`);
+            }
+        },
+        async status() {
+            const result = await runner.run([runtime.pgCtl, "status", "-D", paths.pgdata]);
+            return result.code === 0 ? "running" : "stopped";
+        },
+        async startWithStaleRecovery() {
+            const logPath = join(paths.pgdata, "postmaster.log");
+            const startArgv = [
+                runtime.pgCtl,
+                "start",
+                "-D",
+                paths.pgdata,
+                "-l",
+                logPath,
+                "-w",
+                "-o",
+                `-p ${paths.fixedPort}`,
+            ];
+            const first = await runner.run(startArgv);
+            if (first.code === 0)
+                return;
+            // Start failed — check for stale postmaster.pid
+            const pidFile = join(paths.pgdata, "postmaster.pid");
+            if (!existsSync(pidFile)) {
+                throw new Error(`pg_ctl start failed (exit ${first.code}), log=${logPath}: ${first.stderr}`);
+            }
+            // Read PID from first line
+            const pidLine = readFileSync(pidFile, "utf8").split("\n")[0].trim();
+            const pid = Number(pidLine);
+            // Check if process is actually alive
+            let alive = true;
+            if (!Number.isNaN(pid) && pid > 0) {
+                try {
+                    process.kill(pid, 0);
+                }
+                catch (err) {
+                    if (err.code === "ESRCH") {
+                        alive = false;
+                    }
+                    else {
+                        // EPERM means process exists but we can't signal it — treat as alive
+                        alive = true;
+                    }
+                }
+            }
+            if (!alive) {
+                // Remove stale pid file and retry
+                rmSync(pidFile, { force: true });
+                const retry = await runner.run(startArgv);
+                if (retry.code !== 0) {
+                    throw new Error(`pg_ctl start failed after stale pid removal (exit ${retry.code}), log=${logPath}: ${retry.stderr}`);
+                }
+                return;
+            }
+            // Process is still alive — original error stands
+            throw new Error(`pg_ctl start failed (exit ${first.code}), log=${logPath}: ${first.stderr}`);
+        },
+        async ensureUp() {
+            const bootstrapped = readManagedState(paths) !== null;
+            // Initialise cluster if needed; refresh conf; write temp HBA only if !bootstrapped
+            await this.ensureCluster();
+            const currentStatus = await this.status();
+            if (currentStatus !== "running") {
+                await this.startWithStaleRecovery();
+                await this.waitReady();
+            }
+            if (!bootstrapped) {
+                await this.bootstrapRoles();
+                await this.finalizeHba();
+                writeManagedState(paths, {
+                    pgdata: paths.pgdata,
+                    fixedPort: paths.fixedPort,
+                    socketDir: paths.socketDir,
+                    runtimeRoot: runtime.root,
+                    pgVersion: runtime.pgMajor,
+                    pgCtlPath: runtime.pgCtl,
+                    logPath: join(paths.pgdata, "postmaster.log"),
+                });
+            }
+        },
+        async restartIfDown(waitReadyOpts) {
+            const currentStatus = await this.status();
+            if (currentStatus === "running")
+                return false;
+            await this.startWithStaleRecovery();
+            await this.waitReady(waitReadyOpts);
+            return true;
+        },
+        async stop() {
+            // Tolerate "not running" — pg_ctl stop returns non-zero when already stopped.
+            await runner.run([runtime.pgCtl, "stop", "-D", paths.pgdata, "-m", "fast"]);
+        },
+        dispose() {
+            // No internal timer or monitor to clean up yet (recovery loop is a separate
+            // module added in a later task). Per spec §4d, dispose MUST NOT stop the
+            // cluster — it only stops internal monitoring resources owned by this object.
+            // This is intentionally a no-op.
+        },
+    };
+}
+//# sourceMappingURL=pg-supervisor.js.map

package/dist/store/managed/pg-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-supervisor.js","sourceRoot":"","sources":["../../../src/store/managed/pg-supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAsB,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAqB,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGvF,gFAAgF;AAEhF,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAC/C,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAgC7C,iFAAiF;AAEjF,MAAM,UAAU,kBAAkB,CAAC,IAAsB;IACvD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,MAAM,GAAkB,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACxD,MAAM,aAAa,GAAW,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC;IAE5F,8EAA8E;IAE9E;;;;;OAKG;IACH,SAAS,gBAAgB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG;YACnB,WAAW;YACX,0EAA0E;YAC1E,uBAAuB;YACvB,8BAA8B,KAAK,CAAC,SAAS,GAAG;YAChD,gCAAgC;YAChC,UAAU,KAAK,CAAC,SAAS,EAAE;YAC3B,SAAS;SACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAE3C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC1D,iCAAiC;gBACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBACxD,aAAa,CAAC,QAAQ,EAAE,GAAG,MAAM,GAAG,YAAY,GAAG,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC1D,aAAa,CAAC,QAAQ,EAAE,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,sCAAsC;YACtC,aAAa,CAAC,QAAQ,EAAE,GAAG,YAAY,IAAI,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,YAAY;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG;YACd,6DAA6D;YAC7D,uEAAuE;YACvE,aAAa,aAAa,QAAQ;YAClC,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,SAAS,QAAQ,CAAC,EAAU,EAAE,GAAW,EAAE,OAAiC,EAAE;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,IAAI;YACJ,KAAK,CAAC,SAAS;YACf,IAAI;YACJ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YACvB,IAAI;YACJ,aAAa;YACb,IAAI;YACJ,EAAE;YACF,IAAI;YACJ,iBAAiB;SAClB,CAAC;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAE9E,OAAO;QACL,KAAK,CAAC,aAAa;YACjB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YACvD,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;YAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,uCAAuC;gBACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC;oBAC9B,OAAO,CAAC,MAAM;oBACd,IAAI;oBACJ,KAAK,CAAC,MAAM;oBACZ,IAAI;oBACJ,aAAa;oBACb,cAAc;oBACd,iBAAiB;iBAClB,CAAC,CAAC;gBAEH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,IAAI,gBAAgB,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CACnF,CAAC;gBACJ,CAAC;gBAED,wEAAwE;gBACxE,qDAAqD;gBACrD,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,mDAAmD;YACnD,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAE7D,iEAAiE;YACjE,gBAAgB,EAAE,CAAC;YAEnB,kEAAkE;YAClE,0EAA0E;YAC1E,8EAA8E;YAC9E,4CAA4C;YAC5C,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrC,8EAA8E;gBAC9E,yFAAyF;gBACzF,0EAA0E;gBAC1E,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC;gBAC9B,OAAO,CAAC,KAAK;gBACb,OAAO;gBACP,IAAI;gBACJ,KAAK,CAAC,MAAM;gBACZ,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,IAAI;gBACJ,MAAM,KAAK,CAAC,SAAS,EAAE;aACxB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,IAAI,UAAU,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAC9E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,OAAyB,EAAE;YACzC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAExC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC;oBAC9B,OAAO,CAAC,SAAS;oBACjB,IAAI;oBACJ,KAAK,CAAC,SAAS;oBACf,IAAI;oBACJ,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;iBACxB,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;oBAAE,OAAO;gBAC9B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;YAC5E,CAAC;YAED,MAAM,IAAI,KAAK,CACb,4BAA4B,SAAS,gDAAgD,KAAK,CAAC,SAAS,UAAU,KAAK,CAAC,SAAS,GAAG,CACjI,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,mDAAmD;YACnD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CACjC,QAAQ,CACN,UAAU,EACV,wHAAwH,CACzH,CACF,CAAC;YACF,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,CAAC,IAAI,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7F,CAAC;YAED,kDAAkD;YAClD,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,GAAG,CACpC,QAAQ,CAAC,UAAU,EAAE,kDAAkD,EAAE;gBACvE,UAAU,EAAE,IAAI;aACjB,CAAC,CACH,CAAC;YACF,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,wCAAwC,aAAa,CAAC,IAAI,MAAM,aAAa,CAAC,MAAM,EAAE,CACvF,CAAC;YACJ,CAAC;YAED,oDAAoD;YACpD,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACvC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,GAAG,CACrC,QAAQ,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAC5D,CAAC;gBACF,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,qCAAqC,cAAc,CAAC,IAAI,MAAM,cAAc,CAAC,MAAM,EAAE,CACtF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,+CAA+C;YAC/C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAChC,QAAQ,CACN,QAAQ,EACR,gFAAgF,CACjF,CACF,CAAC;YACF,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,CAAC,IAAI,MAAM,SAAS,CAAC,MAAM,EAAE,CAC7E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,WAAW;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG;gBACf,8BAA8B;gBAC9B,iCAAiC;gBACjC,oCAAoC;gBACpC,4CAA4C;gBAC5C,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM;YACV,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,CAAC;QAED,KAAK,CAAC,sBAAsB;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG;gBAChB,OAAO,CAAC,KAAK;gBACb,OAAO;gBACP,IAAI;gBACJ,KAAK,CAAC,MAAM;gBACZ,IAAI;gBACJ,OAAO;gBACP,IAAI;gBACJ,IAAI;gBACJ,MAAM,KAAK,CAAC,SAAS,EAAE;aACxB,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO;YAE7B,gDAAgD;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,CAAC,IAAI,UAAU,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAC5E,CAAC;YACJ,CAAC;YAED,2BAA2B;YAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAE5B,qCAAqC;YACrC,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,KAAK,GAAG,KAAK,CAAC;oBAChB,CAAC;yBAAM,CAAC;wBACN,qEAAqE;wBACrE,KAAK,GAAG,IAAI,CAAC;oBACf,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,kCAAkC;gBAClC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CACb,qDAAqD,KAAK,CAAC,IAAI,UAAU,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CACpG,CAAC;gBACJ,CAAC;gBACD,OAAO;YACT,CAAC;YAED,iDAAiD;YACjD,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,CAAC,IAAI,UAAU,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;YAEtD,mFAAmF;YACnF,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAE3B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACzB,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzB,iBAAiB,CAAC,KAAK,EAAE;oBACvB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,SAAS,EAAE,OAAO,CAAC,OAAO;oBAC1B,SAAS,EAAE,OAAO,CAAC,KAAK;oBACxB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,aAAgC;YAClD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,IAAI,aAAa,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC9C,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,IAAI;YACR,8EAA8E;YAC9E,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO;YACL,4EAA4E;YAC5E,yEAAyE;YACzE,8EAA8E;YAC9E,iCAAiC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/store/managed/recovery-loop.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Recovery loop for managed Postgres.
+ *
+ * Design: self-rescheduling setTimeout (NOT setInterval).
+ *
+ * Single-flight is inherent: the next setTimeout is only registered AFTER the
+ * current `restartIfDown()` call resolves or rejects. This means two checks can
+ * never overlap — if the async check takes longer than the nominal interval the
+ * loop simply waits for it to finish before scheduling the next tick.
+ *
+ * Exponential backoff: on consecutive failures the delay doubles each time,
+ * capped at `maxIntervalMs`. A success resets both the counter and the delay.
+ *
+ * onFatal: fired exactly once when `consecutiveFailures === maxConsecutiveFailures`.
+ * The loop keeps running at the capped interval so Postgres can still recover.
+ */
+export interface RecoveryTarget {
+    restartIfDown(): Promise<boolean>;
+}
+export interface RecoveryLoopOptions {
+    /** Base check interval in ms. Default: 3000 */
+    intervalMs?: number;
+    /** Backoff ceiling in ms. Default: 30000 */
+    maxIntervalMs?: number;
+    /** Number of consecutive failures before onFatal is called. Default: 5 */
+    maxConsecutiveFailures?: number;
+    /** Called when restartIfDown() returns true (pg was restarted). */
+    onRestart?: (info: {
+        attempt: number;
+    }) => void;
+    /** Called on every failure with the current consecutive-failure count. */
+    onError?: (err: unknown, consecutiveFailures: number) => void;
+    /** Called exactly once when consecutiveFailures reaches the threshold. */
+    onFatal?: (consecutiveFailures: number) => void;
+}
+export interface RecoveryLoopHandle {
+    stop(): void;
+    readonly consecutiveFailures: number;
+}
+export declare function startRecoveryLoop(target: RecoveryTarget, opts?: RecoveryLoopOptions): RecoveryLoopHandle;
+//# sourceMappingURL=recovery-loop.d.ts.map

package/dist/store/managed/recovery-loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-loop.d.ts","sourceRoot":"","sources":["../../../src/store/managed/recovery-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,cAAc;IAC7B,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mEAAmE;IACnE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAChD,0EAA0E;IAC1E,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9D,0EAA0E;IAC1E,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,MAAM,KAAK,IAAI,CAAC;CACjD;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,IAAI,CAAC;IACb,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,mBAAwB,GAC7B,kBAAkB,CA2EpB"}

package/dist/store/managed/recovery-loop.js

@@ -0,0 +1,87 @@
+/**
+ * Recovery loop for managed Postgres.
+ *
+ * Design: self-rescheduling setTimeout (NOT setInterval).
+ *
+ * Single-flight is inherent: the next setTimeout is only registered AFTER the
+ * current `restartIfDown()` call resolves or rejects. This means two checks can
+ * never overlap — if the async check takes longer than the nominal interval the
+ * loop simply waits for it to finish before scheduling the next tick.
+ *
+ * Exponential backoff: on consecutive failures the delay doubles each time,
+ * capped at `maxIntervalMs`. A success resets both the counter and the delay.
+ *
+ * onFatal: fired exactly once when `consecutiveFailures === maxConsecutiveFailures`.
+ * The loop keeps running at the capped interval so Postgres can still recover.
+ */
+export function startRecoveryLoop(target, opts = {}) {
+    const intervalMs = opts.intervalMs ?? 3000;
+    const maxIntervalMs = opts.maxIntervalMs ?? 30_000;
+    const maxConsecutiveFailures = opts.maxConsecutiveFailures ?? 5;
+    let stopped = false;
+    let timer;
+    let consecutiveFailures = 0;
+    let fatalFired = false;
+    let restartAttempt = 0;
+    function currentDelay() {
+        if (consecutiveFailures === 0)
+            return intervalMs;
+        // 2^(consecutiveFailures-1) * intervalMs, capped
+        const backoff = intervalMs * 2 ** (consecutiveFailures - 1);
+        return Math.min(backoff, maxIntervalMs);
+    }
+    async function tick() {
+        if (stopped)
+            return;
+        try {
+            const restarted = await target.restartIfDown();
+            if (stopped)
+                return;
+            // Success path — reset state
+            consecutiveFailures = 0;
+            fatalFired = false;
+            if (restarted) {
+                restartAttempt++;
+                opts.onRestart?.({ attempt: restartAttempt });
+            }
+        }
+        catch (err) {
+            if (stopped)
+                return;
+            consecutiveFailures++;
+            opts.onError?.(err, consecutiveFailures);
+            if (consecutiveFailures === maxConsecutiveFailures && !fatalFired) {
+                fatalFired = true;
+                opts.onFatal?.(consecutiveFailures);
+            }
+        }
+        // Self-reschedule — only after the check completes (single-flight guarantee)
+        if (!stopped) {
+            timer = setTimeout(() => {
+                tick().catch(() => {
+                    // tick() never rejects (errors are caught inside), but silence any
+                    // unexpected leak to avoid unhandled-rejection warnings.
+                });
+            }, currentDelay());
+        }
+    }
+    // Kick off the first tick after one base interval
+    timer = setTimeout(() => {
+        tick().catch(() => {
+            /* see above */
+        });
+    }, intervalMs);
+    return {
+        stop() {
+            stopped = true;
+            if (timer !== undefined) {
+                clearTimeout(timer);
+                timer = undefined;
+            }
+        },
+        get consecutiveFailures() {
+            return consecutiveFailures;
+        },
+    };
+}
+//# sourceMappingURL=recovery-loop.js.map

package/dist/store/managed/recovery-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-loop.js","sourceRoot":"","sources":["../../../src/store/managed/recovery-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA0BH,MAAM,UAAU,iBAAiB,CAC/B,MAAsB,EACtB,OAA4B,EAAE;IAE9B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC;IACnD,MAAM,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC;IAEhE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAgD,CAAC;IACrD,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,SAAS,YAAY;QACnB,IAAI,mBAAmB,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACjD,iDAAiD;QACjD,MAAM,OAAO,GAAG,UAAU,GAAG,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,IAAI,OAAO;YAAE,OAAO;QAEpB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/C,IAAI,OAAO;gBAAE,OAAO;YAEpB,6BAA6B;YAC7B,mBAAmB,GAAG,CAAC,CAAC;YACxB,UAAU,GAAG,KAAK,CAAC;YAEnB,IAAI,SAAS,EAAE,CAAC;gBACd,cAAc,EAAE,CAAC;gBACjB,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,OAAO;YAEpB,mBAAmB,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YAEzC,IAAI,mBAAmB,KAAK,sBAAsB,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClE,UAAU,GAAG,IAAI,CAAC;gBAClB,IAAI,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;oBAChB,mEAAmE;oBACnE,yDAAyD;gBAC3D,CAAC,CAAC,CAAC;YACL,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QACtB,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAChB,eAAe;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,OAAO;QACL,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,GAAG,SAAS,CAAC;YACpB,CAAC;QACH,CAAC;QACD,IAAI,mBAAmB;YACrB,OAAO,mBAAmB,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/store/managed/stop-from-state.d.ts

@@ -0,0 +1,11 @@
+import type { CommandRunner } from "../../daemon/autostart/runner.js";
+/**
+ * Read the managed-pg.json state and stop the Postgres cluster using the
+ * pg_ctl path recorded in the state.
+ *
+ * - If no state file exists → returns false (nothing to stop).
+ * - If state exists → runs pg_ctl stop -m fast; tolerates non-zero exit
+ *   (already stopped) → returns true.
+ */
+export declare function stopManagedFromState(home: string, runner: CommandRunner): Promise<boolean>;
+//# sourceMappingURL=stop-from-state.d.ts.map

package/dist/store/managed/stop-from-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-from-state.d.ts","sourceRoot":"","sources":["../../../src/store/managed/stop-from-state.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAItE;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAchG"}

package/dist/store/managed/stop-from-state.js

@@ -0,0 +1,26 @@
+import { existsSync, readFileSync } from "node:fs";
+import { managedStatePath } from "./pg-paths.js";
+/**
+ * Read the managed-pg.json state and stop the Postgres cluster using the
+ * pg_ctl path recorded in the state.
+ *
+ * - If no state file exists → returns false (nothing to stop).
+ * - If state exists → runs pg_ctl stop -m fast; tolerates non-zero exit
+ *   (already stopped) → returns true.
+ */
+export async function stopManagedFromState(home, runner) {
+    const statePath = managedStatePath(home);
+    if (!existsSync(statePath))
+        return false;
+    let state;
+    try {
+        state = JSON.parse(readFileSync(statePath, "utf8"));
+    }
+    catch {
+        return false;
+    }
+    // Tolerate non-zero (already stopped is fine)
+    await runner.run([state.pgCtlPath, "stop", "-D", state.pgdata, "-m", "fast"]);
+    return true;
+}
+//# sourceMappingURL=stop-from-state.js.map

package/dist/store/managed/stop-from-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-from-state.js","sourceRoot":"","sources":["../../../src/store/managed/stop-from-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,MAAqB;IAC5E,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzC,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAiB,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8CAA8C;IAC9C,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/store/migrations/index.d.ts

@@ -0,0 +1,9 @@
+import type { SqlConn } from "../sql-executor.js";
+export interface Migration {
+    version: number;
+    name: string;
+    sql: string;
+}
+export declare const MIGRATIONS: Migration[];
+export declare function runMigrations(conn: SqlConn): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/store/migrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/store/migrations/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAwGD,eAAO,MAAM,UAAU,EAAE,SAAS,EAOjC,CAAC;AAEF,wBAAsB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBhE"}

package/dist/store/migrations/index.js

@@ -0,0 +1,121 @@
+// Migrations are inlined as string constants (not read from .sql files at runtime) so
+// they survive bundling: the tsc-built dist/, the `bun build --compile` single-file binary,
+// and `bun src/cli.ts` all behave identically with no filesystem asset to ship. Applied
+// migrations are immutable by definition, so there is no source-of-truth drift risk.
+//
+// Add new migrations here, in ascending version order. Never edit an already-released one.
+// Migration 001: lifecycle metadata + preference type promotion.
+// Adds halflife_days to pages (drives hot/warm/cold rotation), promotes the legacy
+// discovery-preference subtype to a first-class `preference` type, then backfills
+// halflife_days for existing signal pages by type.
+const M001_LIFECYCLE_COLUMNS = `
+ALTER TABLE pages ADD COLUMN IF NOT EXISTS halflife_days INTEGER;
+
+UPDATE pages SET type = 'preference' WHERE type = 'discovery-preference';
+
+UPDATE pages SET halflife_days = 90
+  WHERE type IN ('decision', 'task', 'preference') OR type LIKE 'discovery-%';
+UPDATE pages SET halflife_days = 365
+  WHERE type = 'knowledge';
+`;
+// Migration 002: backfill provenance/source_hash columns (signal fidelity) for databases
+// that ran migration 001 before schema.sql included them.
+const M002_PROVENANCE_COLUMNS = `
+ALTER TABLE links ADD COLUMN IF NOT EXISTS provenance JSONB;
+ALTER TABLE links ADD COLUMN IF NOT EXISTS source_hash TEXT;
+ALTER TABLE timeline_entries ADD COLUMN IF NOT EXISTS provenance JSONB;
+`;
+// Migration 003: lifecycle tier columns + indexes for pages and timeline_entries, and a
+// backfill of expires_at for existing hot pages that have a halflife.
+const M003_LIFECYCLE_TIER = `
+ALTER TABLE pages ADD COLUMN IF NOT EXISTS tier TEXT NOT NULL DEFAULT 'hot';
+ALTER TABLE pages ADD COLUMN IF NOT EXISTS expires_at TIMESTAMPTZ;
+ALTER TABLE pages ADD COLUMN IF NOT EXISTS consolidated_into INTEGER REFERENCES pages(id);
+
+CREATE INDEX IF NOT EXISTS idx_pages_tier ON pages (tier);
+CREATE INDEX IF NOT EXISTS idx_pages_expires_at ON pages (expires_at) WHERE expires_at IS NOT NULL;
+
+ALTER TABLE timeline_entries ADD COLUMN IF NOT EXISTS tier TEXT NOT NULL DEFAULT 'hot';
+ALTER TABLE timeline_entries ADD COLUMN IF NOT EXISTS expires_at TIMESTAMPTZ;
+
+UPDATE pages
+SET expires_at = created_at + (halflife_days * INTERVAL '1 day')
+WHERE tier = 'hot'
+  AND halflife_days IS NOT NULL
+  AND expires_at IS NULL;
+`;
+// Migration 004: relax identity_cache.display_name to nullable.
+// Semantics: display_name IS NULL AND resolved_at IS NOT NULL = permanent
+// resolution failure (e.g. Lark 4013/404). Used by the chat-name resolution
+// flow to distinguish "tried and failed" from "never tried".
+const M004_IDENTITY_CACHE_NULLABLE = `
+ALTER TABLE identity_cache ALTER COLUMN display_name DROP NOT NULL;
+`;
+// Migration 005: person_behavior table (Spec 8 §4.1) — the behavior layer of the
+// person communication profile. Behavior metrics (response latency, message length,
+// active hours, initiation, @-frequency) cannot be recomputed after extraction
+// (raw messages are dropped), so they are accumulated incrementally as mergeable
+// counters keyed by the OTHER person's canonical slug. hour_histogram defaults to a
+// length-24 zero array so upsert can add element-wise without a null check.
+const M005_PERSON_BEHAVIOR = `
+CREATE TABLE IF NOT EXISTS person_behavior (
+  person_slug        TEXT PRIMARY KEY,
+  msg_count          INTEGER NOT NULL DEFAULT 0,
+  sum_msg_chars      INTEGER NOT NULL DEFAULT 0,
+  initiated_count    INTEGER NOT NULL DEFAULT 0,
+  reply_count        INTEGER NOT NULL DEFAULT 0,
+  resp_latency_n     INTEGER NOT NULL DEFAULT 0,
+  resp_latency_sum_s BIGINT  NOT NULL DEFAULT 0,
+  hour_histogram     JSONB   NOT NULL DEFAULT '[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]',
+  at_count           INTEGER NOT NULL DEFAULT 0,
+  window_start       TIMESTAMPTZ,
+  updated_at         TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+`;
+// Migration 006: Chinese FTS fix. Replace the tsvector('simple') lexical machinery with
+// pg_trgm. Chinese has no whitespace, so to_tsvector('simple') collapsed each run into one
+// giant lexeme and to_tsquery matched only exact whole-run strings — Chinese FTS was broken.
+// pg_trgm GIN + ILIKE substring gives correct CJK recall with no re-extraction. CREATE
+// EXTENSION must precede any gin_trgm_ops index.
+const M006_TRGM_FTS = `
+CREATE EXTENSION IF NOT EXISTS pg_trgm;
+
+CREATE INDEX IF NOT EXISTS idx_pages_title_trgm ON pages USING gin (title gin_trgm_ops);
+CREATE INDEX IF NOT EXISTS idx_pages_compiled_truth_trgm ON pages USING gin (compiled_truth gin_trgm_ops);
+CREATE INDEX IF NOT EXISTS idx_chunks_chunk_text_trgm ON content_chunks USING gin (chunk_text gin_trgm_ops);
+
+DROP TRIGGER IF EXISTS trg_pages_search_vector ON pages;
+DROP TRIGGER IF EXISTS chunk_search_vector_trigger ON content_chunks;
+DROP FUNCTION IF EXISTS update_page_search_vector();
+DROP FUNCTION IF EXISTS update_chunk_search_vector();
+DROP INDEX IF EXISTS idx_pages_search_vector;
+DROP INDEX IF EXISTS idx_chunks_search_vector;
+ALTER TABLE pages DROP COLUMN IF EXISTS search_vector;
+ALTER TABLE content_chunks DROP COLUMN IF EXISTS search_vector;
+`;
+export const MIGRATIONS = [
+    { version: 1, name: "lifecycle_columns", sql: M001_LIFECYCLE_COLUMNS },
+    { version: 2, name: "provenance_columns", sql: M002_PROVENANCE_COLUMNS },
+    { version: 3, name: "lifecycle_tier", sql: M003_LIFECYCLE_TIER },
+    { version: 4, name: "identity_cache_nullable", sql: M004_IDENTITY_CACHE_NULLABLE },
+    { version: 5, name: "person_behavior", sql: M005_PERSON_BEHAVIOR },
+    { version: 6, name: "trgm_fts", sql: M006_TRGM_FTS },
+];
+export async function runMigrations(conn) {
+    await conn.exec(`
+    CREATE TABLE IF NOT EXISTS schema_migrations (
+      version    INTEGER PRIMARY KEY,
+      applied_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+    )
+  `);
+    const applied = await conn.query("SELECT version FROM schema_migrations");
+    const appliedVersions = new Set(applied.rows.map((r) => r.version));
+    for (const m of MIGRATIONS) {
+        if (appliedVersions.has(m.version))
+            continue;
+        // Run the migration SQL and record the version atomically so a mid-migration
+        // crash cannot leave the DB with applied schema but no version record.
+        await conn.exec(`BEGIN; ${m.sql}; INSERT INTO schema_migrations (version) VALUES (${m.version}); COMMIT;`);
+    }
+}
+//# sourceMappingURL=index.js.map