nextly 0.0.2-alpha.1 → 0.0.2-alpha.10

package/dist/{chunk-GZ6DCQKC.mjs → chunk-TVG3WU6C.mjs}

@@ -7,7 +7,7 @@ import {
   countRows,
   diffSnapshots,
   introspectLiveSnapshot
-} from "./chunk-SBACDPNX.mjs";
+} from "./chunk-JCQMC6HH.mjs";
 
 // src/domains/schema/pipeline/preview.ts
 async function previewDesiredSchema(args, deps = {}) {
@@ -25,14 +25,16 @@ async function previewDesiredSchema(args, deps = {}) {
     (c) => buildDesiredTableFromFields(
       c.tableName,
       c.fields,
-      dialect
+      dialect,
+      { hasStatus: c.status === true }
     )
   );
   const singleTables = Object.values(desired.singles).map(
     (s) => buildDesiredTableFromFields(
       s.tableName,
       s.fields,
-      dialect
+      dialect,
+      { hasStatus: s.status === true }
     )
   );
   const componentTables = Object.values(desired.components).map(

package/dist/{chunk-AK6Z23OX.mjs → chunk-UGB6MLR6.mjs}

@@ -5,16 +5,16 @@ import {
   countRows,
   diffSnapshots,
   introspectLiveSnapshot
-} from "./chunk-SBACDPNX.mjs";
+} from "./chunk-JCQMC6HH.mjs";
 import {
   ComponentSchemaService
-} from "./chunk-V4EQTOA4.mjs";
+} from "./chunk-4HUQNXVM.mjs";
 import {
   generateRuntimeSchema
-} from "./chunk-IZWPRDC3.mjs";
+} from "./chunk-2QSGNGOB.mjs";
 import {
   getDialectTables
-} from "./chunk-TS7GHTG2.mjs";
+} from "./chunk-A7GGVOIV.mjs";
 
 // src/domains/schema/pipeline/errors.ts
 import { UnsupportedDialectVersionError } from "@nextlyhq/adapter-drizzle/version-check";
@@ -285,9 +285,6 @@ var RealPreCleanupExecutor = class {
   }
 };
 
-// src/domains/schema/pipeline/pushschema-pipeline.ts
-import { dequal } from "dequal";
-
 // src/init/schema-snapshot-cache.ts
 var g = globalThis;
 function getCachedSnapshot() {
@@ -296,6 +293,27 @@ function getCachedSnapshot() {
 function setCachedSnapshot(snapshot) {
   g.__nextly_prevSchemaSnapshot = snapshot;
 }
+function keyOf(tableNames) {
+  return [...tableNames].sort().join(" ");
+}
+function bag() {
+  return globalThis;
+}
+function getLiveSnapshot(managedTableNames) {
+  return bag().__nextly_liveSnapshots?.get(keyOf(managedTableNames));
+}
+function setLiveSnapshot(managedTableNames, snapshot) {
+  const b = bag();
+  if (!b.__nextly_liveSnapshots) b.__nextly_liveSnapshots = /* @__PURE__ */ new Map();
+  b.__nextly_liveSnapshots.set(keyOf(managedTableNames), snapshot);
+}
+function clearLiveSnapshots() {
+  const b = bag();
+  if (b.__nextly_liveSnapshots) b.__nextly_liveSnapshots.clear();
+}
+
+// src/domains/schema/pipeline/pushschema-pipeline.ts
+import { dequal } from "dequal";
 
 // src/runtime/notifications/build-event.ts
 function buildNotificationEvent(args) {
@@ -323,6 +341,96 @@ function buildNotificationEvent(args) {
   };
 }
 
+// src/domains/schema/pipeline/ddl-emitter/identifiers.ts
+function quoteIdent(identifier) {
+  if (identifier.includes("\0")) {
+    throw new Error(
+      `Invalid identifier (contains NUL byte): ${JSON.stringify(identifier)}`
+    );
+  }
+  return `"${identifier.replace(/"/g, '""')}"`;
+}
+
+// src/domains/schema/pipeline/ddl-emitter/postgres.ts
+function columnTail(col) {
+  let s = col.type;
+  if (col.nullable === false) s += " NOT NULL";
+  if (col.default !== void 0) s += ` DEFAULT ${col.default}`;
+  return s;
+}
+function createTableColumn(col) {
+  if (col.name === "id") {
+    return `${quoteIdent(col.name)} ${col.type} PRIMARY KEY NOT NULL`;
+  }
+  return `${quoteIdent(col.name)} ${columnTail(col)}`;
+}
+function createTableCanonicalIndexes(spec) {
+  const colNames = new Set(spec.columns.map((c) => c.name));
+  const stmts = [];
+  if (colNames.has("slug")) {
+    stmts.push(
+      `CREATE UNIQUE INDEX ${quoteIdent(`idx_${spec.name}_slug`)} ON ${quoteIdent(spec.name)} USING btree (${quoteIdent("slug")})`
+    );
+  }
+  if (colNames.has("created_at")) {
+    stmts.push(
+      `CREATE INDEX ${quoteIdent(`idx_${spec.name}_created_at`)} ON ${quoteIdent(spec.name)} USING btree (${quoteIdent("created_at")} DESC)`
+    );
+  }
+  return stmts;
+}
+function emitPostgresDdl(op) {
+  switch (op.type) {
+    case "rename_table":
+    case "rename_column":
+    case "drop_column":
+    case "drop_table":
+      return [];
+    case "add_column":
+      return [
+        `ALTER TABLE ${quoteIdent(op.tableName)} ADD COLUMN ${quoteIdent(op.column.name)} ${columnTail(op.column)}`
+      ];
+    case "add_table": {
+      const cols = op.table.columns.map(createTableColumn);
+      const createTable = `CREATE TABLE ${quoteIdent(op.table.name)} (
+  ${cols.join(",\n  ")}
+)`;
+      return [createTable, ...createTableCanonicalIndexes(op.table)];
+    }
+    case "change_column_type":
+    case "change_column_nullable":
+    case "change_column_default":
+      throw new Error(
+        `emitPostgresDdl: op type "${op.type}" not yet implemented \u2014 canEmitWithoutDrizzleKit should not have routed it here`
+      );
+    default: {
+      const exhaustive = op;
+      throw new Error(
+        `emitPostgresDdl: unknown op ${JSON.stringify(exhaustive)}`
+      );
+    }
+  }
+}
+
+// src/domains/schema/pipeline/ddl-emitter/index.ts
+var FAST_PATH_OP_TYPES = /* @__PURE__ */ new Set([
+  "add_column",
+  "add_table"
+]);
+function canEmitWithoutDrizzleKit(ops, dialect) {
+  if (dialect !== "postgresql") return false;
+  if (ops.length === 0) return false;
+  return ops.every((op) => FAST_PATH_OP_TYPES.has(op.type));
+}
+function emitDdl(ops, dialect) {
+  if (dialect !== "postgresql") {
+    throw new Error(
+      `emitDdl: unsupported dialect "${dialect}" (fast path is PostgreSQL-only)`
+    );
+  }
+  return ops.flatMap((op) => emitPostgresDdl(op));
+}
+
 // src/domains/schema/pipeline/managed-tables.ts
 var MANAGED_TABLE_PREFIXES_REGEX = /^(dc_|single_|comp_)/;
 function isManagedTable(name) {
@@ -393,7 +501,7 @@ function isPreResolutionOp(op) {
 }
 
 // src/domains/schema/pipeline/sql-templates/identifier-quoting.ts
-function quoteIdent(name, dialect) {
+function quoteIdent2(name, dialect) {
   const q4 = dialect === "mysql" ? "`" : '"';
   if (name.includes(q4)) {
     throw new Error(
@@ -404,7 +512,7 @@ function quoteIdent(name, dialect) {
 }
 
 // src/domains/schema/pipeline/sql-templates/mysql.ts
-var q = (n) => quoteIdent(n, "mysql");
+var q = (n) => quoteIdent2(n, "mysql");
 function columnDef(c) {
   const nullable = c.nullable ? "" : " NOT NULL";
   const def = c.default !== void 0 ? ` DEFAULT ${c.default}` : "";
@@ -480,7 +588,7 @@ var MysqlUnsupportedOperationError = class extends Error {
 };
 
 // src/domains/schema/pipeline/sql-templates/postgres.ts
-var q2 = (n) => quoteIdent(n, "postgresql");
+var q2 = (n) => quoteIdent2(n, "postgresql");
 function columnDef2(c) {
   const nullable = c.nullable ? "" : " NOT NULL";
   const def = c.default !== void 0 ? ` DEFAULT ${c.default}` : "";
@@ -547,7 +655,7 @@ function generateChangeColumnDefault2(op) {
 }
 
 // src/domains/schema/pipeline/sql-templates/sqlite.ts
-var q3 = (n) => quoteIdent(n, "sqlite");
+var q3 = (n) => quoteIdent2(n, "sqlite");
 function columnDef3(c) {
   const nullable = c.nullable ? "" : " NOT NULL";
   const def = c.default !== void 0 ? ` DEFAULT ${c.default}` : "";
@@ -777,6 +885,29 @@ var DdlExecutionError = class extends Error {
     this.name = "DdlExecutionError";
   }
 };
+var ORPHAN_DROP_PATTERNS = [
+  {
+    kind: "SEQUENCE",
+    re: /^DROP\s+SEQUENCE\s+(?:IF\s+EXISTS\s+)?(?:["`]?\w+["`]?\.)?["`]?(\w+)["`]?/i
+  },
+  {
+    kind: "INDEX",
+    re: /^DROP\s+INDEX\s+(?:IF\s+EXISTS\s+)?(?:["`]?\w+["`]?\.)?["`]?(\w+)["`]?/i
+  }
+];
+function logApplyRoute(useFastPath, ops) {
+  if (process.env.DEBUG_SCHEMA !== "1") return;
+  if (useFastPath) {
+    console.debug(
+      `[nextly] schema apply: fast-path DDL emitter (${ops.length} op(s))`
+    );
+    return;
+  }
+  const nonAdditive = ops.filter((o) => o.type !== "add_column" && o.type !== "add_table").map((o) => o.type);
+  console.debug(
+    `[nextly] schema apply: drizzle-kit fallback (${ops.length} op(s); non-additive: ${nonAdditive.length === 0 ? "<none>" : nonAdditive.join(",")})`
+  );
+}
 function computeJournalSummaryFromOperations(operations) {
   let added = 0;
   let removed = 0;
@@ -864,11 +995,17 @@ var PushSchemaPipeline = class {
         ...Object.values(desired.singles).map((s) => s.tableName),
         ...Object.values(desired.components).map((c) => c.tableName)
       ];
-      const liveSnapshot = this.testHooks._introspectSnapshotOverride ? await this.testHooks._introspectSnapshotOverride(
-        db,
-        dialect,
-        managedTableNames
-      ) : await introspectLiveSnapshot(db, dialect, managedTableNames);
+      let liveSnapshot;
+      if (this.testHooks._introspectSnapshotOverride) {
+        liveSnapshot = await this.testHooks._introspectSnapshotOverride(
+          db,
+          dialect,
+          managedTableNames
+        );
+      } else {
+        const cached2 = getLiveSnapshot(managedTableNames);
+        liveSnapshot = cached2 !== void 0 ? cached2 : await introspectLiveSnapshot(db, dialect, managedTableNames);
+      }
       const desiredSnapshot = {
         tables: [
           ...Object.values(desired.collections).map(
@@ -910,9 +1047,17 @@ var PushSchemaPipeline = class {
         countRows: (table) => countRows(db, dialect, table),
         dialect
       });
-      const dispatchResult = candidates.length > 0 || classificationResult.level !== "safe" ? await this.deps.promptDispatcher.dispatch({
+      const dropsCoveredByCandidates = /* @__PURE__ */ new Set();
+      for (const c of candidates) {
+        dropsCoveredByCandidates.add(`${c.tableName}::${c.fromColumn}`);
+      }
+      const dispatchEvents = classificationResult.events.filter(
+        (e) => e.kind !== "destructive_drop" || !dropsCoveredByCandidates.has(`${e.tableName}::${e.columnName}`)
+      );
+      const needsPrompt = candidates.length > 0 || dispatchEvents.length > 0;
+      const dispatchResult = needsPrompt ? await this.deps.promptDispatcher.dispatch({
         candidates,
-        events: classificationResult.events,
+        events: dispatchEvents,
         classification: classificationResult.level,
         channel: promptChannel
       }) : {
@@ -928,11 +1073,43 @@ var PushSchemaPipeline = class {
         dispatchResult.resolutions,
         classificationResult.events
       );
-      const resolvedOps = applyResolutionsToOperations(
+      const resolvedOps = this.testHooks._resolvedOpsOverride ?? applyResolutionsToOperations(
         operations,
         toRenameResolutions(dispatchResult.confirmedRenames, candidates)
       );
       const drizzleSchema = this.testHooks._buildDrizzleSchemaOverride ? this.testHooks._buildDrizzleSchemaOverride(patchedDesired, dialect) : this.buildDrizzleSchema(patchedDesired, dialect);
+      const affectedTableNames = /* @__PURE__ */ new Set();
+      for (const op of resolvedOps) {
+        switch (op.type) {
+          case "add_table":
+            affectedTableNames.add(op.table.name);
+            break;
+          case "rename_table":
+            affectedTableNames.add(op.toName);
+            break;
+          case "drop_table":
+            break;
+          case "add_column":
+          case "drop_column":
+          case "rename_column":
+          case "change_column_type":
+          case "change_column_nullable":
+          case "change_column_default":
+            affectedTableNames.add(op.tableName);
+            break;
+          default: {
+            const _exhaustive = op;
+            void _exhaustive;
+          }
+        }
+      }
+      const scopedSchema = {};
+      for (const [tableName, tableObj] of Object.entries(drizzleSchema)) {
+        if (affectedTableNames.has(tableName)) {
+          scopedSchema[tableName] = tableObj;
+        }
+      }
+      const effectiveDrizzleSchema = Object.keys(scopedSchema).length > 0 ? scopedSchema : drizzleSchema;
       const kit = this.testHooks._kitOverride ? this.testHooks._kitOverride : await this.importDrizzleKit(dialect, databaseName);
       const isSqlite = dialect === "sqlite";
       const runApply = async (tx) => {
@@ -970,22 +1147,30 @@ var PushSchemaPipeline = class {
             err
           );
         }
-        const desiredTableNames = Object.keys(drizzleSchema);
-        let pushResult;
-        try {
-          pushResult = await withCapturedStdout(
-            () => kit.pushSchema(drizzleSchema, tx, desiredTableNames),
-            // eslint-disable-next-line turbo/no-undeclared-env-vars
-            process.env.DEBUG_SCHEMA === "1" ? { debug: (msg) => console.debug(msg) } : void 0
-          );
-        } catch (err) {
-          throw new PushSchemaError(
-            err instanceof Error ? err.message : String(err),
-            err
-          );
+        const desiredTableNames = Object.keys(effectiveDrizzleSchema);
+        const useFastPath = canEmitWithoutDrizzleKit(resolvedOps, dialect);
+        logApplyRoute(useFastPath, resolvedOps);
+        let emittedStatements;
+        if (useFastPath) {
+          emittedStatements = emitDdl(resolvedOps, dialect);
+        } else {
+          let pushResult;
+          try {
+            pushResult = await withCapturedStdout(
+              () => kit.pushSchema(effectiveDrizzleSchema, tx, desiredTableNames),
+              // eslint-disable-next-line turbo/no-undeclared-env-vars
+              process.env.DEBUG_SCHEMA === "1" ? { debug: (msg) => console.debug(msg) } : void 0
+            );
+          } catch (err) {
+            throw new PushSchemaError(
+              err instanceof Error ? err.message : String(err),
+              err
+            );
+          }
+          emittedStatements = pushResult.statementsToExecute;
         }
         const safe = this.filterUnsafeStatements(
-          pushResult.statementsToExecute,
+          emittedStatements,
           desiredTableNames
         );
         try {
@@ -1066,25 +1251,67 @@ var PushSchemaPipeline = class {
     }
   }
   filterUnsafeStatements(statements, desiredTableNames) {
-    const desiredSet = new Set(
-      desiredTableNames.map((t) => t.toLowerCase())
-    );
+    const desiredSet = new Set(desiredTableNames.map((t) => t.toLowerCase()));
     return statements.filter((stmt) => {
       const dropMatch = stmt.match(
         /^DROP\s+TABLE\s+(?:IF\s+EXISTS\s+)?(?:["`]?\w+["`]?\.)?["`]?(\w+)["`]?/i
       );
-      if (!dropMatch) return true;
-      const tableName = dropMatch[1] ?? "<unknown>";
-      const isInDesired = desiredSet.has(tableName.toLowerCase());
-      if (isInDesired) {
-        return true;
+      if (dropMatch) {
+        const tableName = dropMatch[1] ?? "<unknown>";
+        const isInDesired = desiredSet.has(tableName.toLowerCase());
+        if (isInDesired) {
+          return true;
+        }
+        console.warn(
+          `[Nextly schema] Blocked DROP TABLE "${tableName}" emitted by drizzle-kit pushSchema (table not in current desired schema). If this drop was intentional, route it through the pre-resolution executor with explicit user confirmation. (managed=${isManagedTable(tableName)})`
+        );
+        return false;
       }
-      console.warn(
-        `[Nextly schema] Blocked DROP TABLE "${tableName}" emitted by drizzle-kit pushSchema (table not in current desired schema). If this drop was intentional, route it through the pre-resolution executor with explicit user confirmation. (managed=${isManagedTable(tableName)})`
-      );
-      return false;
+      for (const { kind, re } of ORPHAN_DROP_PATTERNS) {
+        const m = stmt.match(re);
+        if (!m) continue;
+        const objectName = m[1] ?? "";
+        if (this.inferOwnerTableFromObjectName(objectName, desiredSet) !== null) {
+          return true;
+        }
+        console.warn(
+          `[Nextly schema] Blocked DROP ${kind} "${objectName}" emitted by drizzle-kit pushSchema (owner table not in current desired schema or name is non-conventional). If this drop was intentional, route it through the pre-resolution executor with explicit user confirmation, or drop it manually before re-running if the ${kind.toLowerCase()} name is custom.`
+        );
+        return false;
+      }
+      return true;
     });
   }
+  /**
+   * Infers the owner table of a sequence or index from its name using
+   * Postgres's default naming conventions:
+   *   - SERIAL / IDENTITY sequences: `<table>_<col>_seq`
+   *   - Indexes:                      `<table>_<col(s)>_idx | _key | _pkey | _unique`
+   *
+   * Strategy: walk underscore-delimited prefixes from longest to shortest
+   * and return the first candidate found in `desiredSet`. Longest-first
+   * ensures that multi-word table names like `email_templates` are
+   * preferred over the shorter prefix `email`.
+   *
+   * Examples:
+   *   accounts_id_seq          → "accounts"        (if in desiredSet)
+   *   email_templates_id_seq   → "email_templates" (if in desiredSet)
+   *   dc_posts_title_idx       → "dc_posts"        (if in desiredSet)
+   *   idx_completely_custom    → null              (no prefix matches)
+   *
+   * Returns the matched table name (lowercased) or `null` if no prefix
+   * in `desiredSet` was found. A `null` result means we can't identify
+   * the owner, and the caller should treat the statement as unsafe.
+   */
+  inferOwnerTableFromObjectName(objectName, desiredSet) {
+    const lower = objectName.toLowerCase();
+    const parts = lower.split("_");
+    for (let i = parts.length - 1; i > 0; i--) {
+      const candidate = parts.slice(0, i).join("_");
+      if (desiredSet.has(candidate)) return candidate;
+    }
+    return null;
+  }
   async runSqlitePragma(db, pragma) {
     const { sql: sqlTag } = await import("drizzle-orm");
     const dbTyped = db;
@@ -1455,6 +1682,8 @@ export {
   TTYRequiredError,
   PromptCancelledError,
   RealPreCleanupExecutor,
+  setLiveSnapshot,
+  clearLiveSnapshots,
   generateSQL,
   PushSchemaPipeline,
   noopPreRenameExecutor,

package/dist/{chunk-2Q2SX2CS.mjs → chunk-V5DUKEYT.mjs}

@@ -7,10 +7,10 @@ import {
 import {
   hasAnyPermission,
   hasPermission
-} from "./chunk-W5KKPZT5.mjs";
+} from "./chunk-L7BXB5H3.mjs";
 import {
   env
-} from "./chunk-UJ2IMJ4W.mjs";
+} from "./chunk-HREB7UR4.mjs";
 import {
   container
 } from "./chunk-D5HQBNUB.mjs";

package/dist/{chunk-UOP63Q54.mjs → chunk-WRGCEERR.mjs}

@@ -1,7 +1,7 @@
 import {
   CreatePermissionSchema,
   ServiceContainer
-} from "./chunk-NSEFNNU4.mjs";
+} from "./chunk-ILETUFUD.mjs";
 
 // src/database/seeders/permissions.ts
 var RESOURCES = ["users", "roles", "permissions"];

package/dist/{chunk-O3QHXMOX.mjs → chunk-XCT6CROA.mjs}

@@ -1,15 +1,15 @@
 import {
   routeAuthRequest
-} from "./chunk-A3WPLSDT.mjs";
+} from "./chunk-INTLFB63.mjs";
 import {
   POST
-} from "./chunk-YV4Y7SDL.mjs";
+} from "./chunk-TGBLNY5L.mjs";
 import {
   readJsonBody
 } from "./chunk-VQJQHVEV.mjs";
 import {
   POST as POST2
-} from "./chunk-LDKCUMHK.mjs";
+} from "./chunk-RQ3N4DIB.mjs";
 import {
   createJsonErrorResponse,
   isErrorResponse,
@@ -18,7 +18,7 @@ import {
   requireCollectionAccess,
   requirePermission,
   toNextlyAuthError
-} from "./chunk-2Q2SX2CS.mjs";
+} from "./chunk-V5DUKEYT.mjs";
 import {
   nextlyValidationFromZod
 } from "./chunk-GJNSJU4S.mjs";
@@ -45,12 +45,12 @@ import {
 import {
   ensureHmrListener,
   getCachedNextly
-} from "./chunk-P7NH2OSC.mjs";
+} from "./chunk-ZDNGCKSZ.mjs";
 import {
   getService,
   isServicesRegistered,
   registerServices
-} from "./chunk-X7TXCYYN.mjs";
+} from "./chunk-DQGQMP5F.mjs";
 import {
   readOrGenerateRequestId
 } from "./chunk-67GXH6PR.mjs";
@@ -61,20 +61,20 @@ import {
   ImageSizeService,
   ServiceDispatcher,
   parseWhereQuery
-} from "./chunk-NSEFNNU4.mjs";
+} from "./chunk-ILETUFUD.mjs";
 import {
   containsSuperAdminRole,
   hasSuperAdminExcluding,
   isSuperAdmin,
   listEffectivePermissions
-} from "./chunk-W5KKPZT5.mjs";
+} from "./chunk-L7BXB5H3.mjs";
 import {
   BaseService,
   withTimezoneFormatting
-} from "./chunk-2W3DVD7S.mjs";
+} from "./chunk-ERTNRSP3.mjs";
 import {
   getDialectTables
-} from "./chunk-TS7GHTG2.mjs";
+} from "./chunk-A7GGVOIV.mjs";
 import {
   nextlyMigrationJournalMysql,
   nextlyMigrationJournalPg,
@@ -82,7 +82,7 @@ import {
 } from "./chunk-H26B4FYG.mjs";
 import {
   env
-} from "./chunk-UJ2IMJ4W.mjs";
+} from "./chunk-HREB7UR4.mjs";
 import {
   getImageProcessor,
   getMediaStorage
@@ -2154,8 +2154,8 @@ function buildAuthRouterDeps(getService2) {
       }
     },
     createSuperAdmin: async (data) => {
-      const { seedPermissions } = await import("./permissions-3DZZQZMI.mjs");
-      const { seedSuperAdmin } = await import("./super-admin-G5ZK5F4T.mjs");
+      const { seedPermissions } = await import("./permissions-KH3WCGAR.mjs");
+      const { seedSuperAdmin } = await import("./super-admin-XZAU4VQM.mjs");
       const adapter = getService2("adapter");
       await seedPermissions(adapter, { silent: true });
       const result = await seedSuperAdmin(adapter, {
@@ -2180,7 +2180,7 @@ function buildAuthRouterDeps(getService2) {
       };
     },
     seedPermissions: async () => {
-      const { seedPermissions } = await import("./permissions-3DZZQZMI.mjs");
+      const { seedPermissions } = await import("./permissions-KH3WCGAR.mjs");
       const adapter = getService2("adapter");
       await seedPermissions(adapter, { silent: true });
     },
@@ -2336,10 +2336,8 @@ async function ensureServicesInitialized() {
       if (nextlyConfig.users) serviceConfig.users = nextlyConfig.users;
       if (nextlyConfig.admin) serviceConfig.admin = nextlyConfig.admin;
       if (nextlyConfig.auth) serviceConfig.auth = nextlyConfig.auth;
-      if (nextlyConfig.security)
-        serviceConfig.security = nextlyConfig.security;
-      if (nextlyConfig.apiKeys)
-        serviceConfig.apiKeys = nextlyConfig.apiKeys;
+      if (nextlyConfig.security) serviceConfig.security = nextlyConfig.security;
+      if (nextlyConfig.apiKeys) serviceConfig.apiKeys = nextlyConfig.apiKeys;
       if (nextlyConfig.db) {
         const dbConfig = nextlyConfig.db;
         if (dbConfig.schemasDir) serviceConfig.schemasDir = dbConfig.schemasDir;
@@ -2347,6 +2345,12 @@ async function ensureServicesInitialized() {
           serviceConfig.migrationsDir = dbConfig.migrationsDir;
       }
     }
+    if (process.env.NODE_ENV === "development" && // eslint-disable-next-line turbo/no-undeclared-env-vars
+    process.env.NEXTLY_DISABLE_INSTRUMENTATION_WARNING !== "1") {
+      console.warn(
+        "[nextly] Cold-boot triggered by an incoming request \u2014 no instrumentation.ts detected. Each Next.js worker will now independently run schema introspection and permission seeding against your database, multiplying connection load. Add an `instrumentation.ts` at your project root (see https://nextly.dev/docs/getting-started/instrumentation) to fold this into a single worker-warmup. Suppress with NEXTLY_DISABLE_INSTRUMENTATION_WARNING=1."
+      );
+    }
     await registerServices(serviceConfig);
     try {
       const emailTemplateService = getService("emailTemplateService");
@@ -2392,7 +2396,7 @@ async function ensureServicesInitialized() {
     } else {
       console.log("[Auth Handler] Services auto-initialized with defaults");
     }
-    const { runBootTimeApplyIfDev } = await import("./boot-apply-PQSYLDIN.mjs");
+    const { runBootTimeApplyIfDev } = await import("./boot-apply-OE3D3KNU.mjs");
     await runBootTimeApplyIfDev({ caller: "auth-handler" });
     ensureHmrListener();
   }