pipework 0.15.0 → 0.16.0

package/CHANGELOG.md

@@ -1,6 +1,15 @@
 # Changelog
 
-## 0.15.0
+## 0.16.0
+
+- **Fix: a queue registered by a module reached only through the schema glob now makes it into `pipework generate`'s output.** The CLI used to snapshot internal definitions (including registered queues) *before* the schema files were imported, so a `createQueue()` living in a glob-matched module — with no side-effect import in the config — was silently dropped from the migration, and consumers worked around it by importing the queue module from `pipework.config.ts`. Internal definitions are now collected after the schema-file imports. Breaking for API consumers: `generateForDatabase`'s `internalDefinitions` parameter is now a thunk (`() => Promise<Record<string, unknown>>`).
+- **Feature: a registered queue whose table is missing from the database is now a loud, actionable failure at startup and at test bootstrap — not a crash at first insert.** Startup validation (`pipework serve`/`dev`, `manifold.start()`) and the test harness's template provisioning both verify every `createQueue()`-registered table exists in the default database (`to_regclass` probe), and refuse with a message naming the table, the schema-glob rule, and the fix (`pipework generate`, then `pipework migrate`).
+- **Behavior change: a database whose `testUrl` resolves to the same connection string as its `url` is refused at config resolution in the test environment.** Identical values mean "tests" run against the real database: the test harness creates/drops databases and rolls back transactions on what it assumes is a dedicated instance, and RLS-inertness goes unnoticed — with zero signal from the framework. The refusal names both env vars and the fix (point the test var at a separate database); `testUrl` naming the *same env var* as `url` is reported as its own case. Applies to both the url/testUrl and appUrl/appTestUrl pairs.
+- **Fix: `pipework generate` surfaces the real config-load error instead of misreporting every failure as "No pipework.config.ts found".**
+- **Behavior change: a database with `rls` configured whose runtime role is SUPERUSER or BYPASSRLS now fails startup validation and test bootstrap.** RLS policies never apply to such a role, so the entire tenant-isolation policy set is silently inert — the framework now says so, naming the database, the role, the flag, and the fix (provision a non-bypassing application role; point the runtime connection at it). At startup the probed connection is `appUrl ?? url`; at test bootstrap it is the connection tests actually execute on — transaction isolation collapses every role onto the resolved `url`, database/container isolation resolves roles normally. Consumers whose test role is the compose superuser are refused until they provision a non-bypassing test role — deliberate: that is exactly the world where an RLS test suite proves nothing.
+- **Feature: `.env.local` and `.env.test.local` are loaded alongside `.env`/`.env.test`, with the `.local` (machine-local, never-committed) variant taking precedence** — the standard dotenv convention.
+- **Docs: the `env` config field is now a first-class section in REFERENCE.md** — every declaration shape (`string`/`number`/`boolean`/`string[]`), `required`/`default`/per-environment `defaults`/`sensitive`, typed `manifold.env` access, and a complete `createManifold` example. Previously it appeared only inside a type signature, leaving the feature undiscoverable while consumers accumulated ad-hoc `process.env` reads. The reference generator now renders multi-line JSDoc and `@example` blocks as fenced code instead of flattening them to one line.
+- **Behavior change: relative `migrations`/`schema` paths now resolve against the directory of `pipework.config.ts`, never against the process working directory.** Previously every consumer of these fields (`pipework generate`, `pipework migrate`'s safety gate, test template provisioning) resolved them against cwd — so `pnpm --filter <module> test` (which cd's into the module) failed at `beforeAll` with "No migration journal found", and the only workaround was hand-absolutizing the paths with `import.meta.url`. `ResolvedDatabase.migrations` is now absolute (resolved once, at config load), `ResolvedDatabase` carries the new `baseDir` field (the config file's directory), and schema globs are matched against `baseDir`. Already-absolute consumer paths are unchanged (`resolve(base, abs) === abs`). Breaking for API consumers: `generateForDatabase` loses its `cwd` parameter — the resolved config is the single source of path truth.
 
 - **Fix: the migration tracker now records WHICH migrations have been applied (tag membership), replacing the `max(created_at)` timestamp high-water mark that silently skipped any unapplied migration dated earlier than the newest applied one.** Two real production hits of the old model: (1) two manifolds sharing one physical database under the same tracker table name (both declared database key `app`) — the second manifold's entire journal predated the first's newest entry, so its migrations were silently skipped and its schema never materialized; (2) a migration merged from a branch with an earlier date than migrations already applied was silently skipped ("relation does not exist" at runtime, in CI). The tracker table gains a `tag` column (unique) and `applyMigrations` decides "already applied" by membership: tag recorded → skip (after verifying the recorded content hash still matches — see below), tag absent → apply, in journal order. Existing deployed tracker tables are upgraded in place on the next `migrate`: the `tag` column is added and each legacy row's identity is recovered by matching its recorded content hash against the journal's files; rows matching no current journal entry keep a NULL tag and never participate in membership.
 - **Fix: editing an already-applied migration file is now a loud error instead of silently ignored.** Membership verifies the recorded sha256 against the file: a tag recorded with a different hash aborts with an error naming the migration, the two hashes, and the fix (put schema changes in a NEW migration; if two manifolds share a database and collide on a tag, that is a schema-level collision no tracker can reconcile — separate databases or distinct `migrationTable` names).

package/REFERENCE.md

@@ -1,11 +1,12 @@
 # Pipework API Reference
 
 > Auto-generated from source JSDoc. Do not edit manually.
-> Generated: 2026-06-29
+> Generated: 2026-07-16
 
 ## Contents
 
 - [Core](#core)
+- [env — Environment Variables](#env-environment-variables)
 - [jobs — Background Jobs](#jobs-background-jobs)
 - [pipeline — Multi-Step Pipelines](#pipeline-multi-step-pipelines)
 - [state — State Machines](#state-state-machines)
@@ -33,6 +34,7 @@
 - [http — Server](#http-server)
 - [openapi — API Documentation](#openapi-api-documentation)
 - [test](#test)
+- [data](#data)
 - [trace](#trace)
 
 ## Core
@@ -41,7 +43,29 @@ Application instance and foundational types.
 
 ### `createManifold`
 
-Creates the Pipework application instance. This is the entry point for every Pipework app. Define in `pipework.config.ts` and export as default. /
+Creates the Pipework application instance. This is the entry point for every Pipework app.
+Define in `pipework.config.ts` and export as default.
+
+The `env` field declares the app's environment variables — the canonical
+home for runtime config (ports, service tokens, bucket names, flags) in
+place of scattered `process.env` reads. Each variable is read once at config
+load, validated and coerced to its declared type (loud error on a bad or
+missing-required value), and exposed typed on `manifold.env`.
+
+
+```typescript
+const manifold = createManifold({
+  databases: { app: { url: 'DATABASE_URL', testUrl: 'DATABASE_URL_TEST' } },
+  env: {
+    PORT: { type: 'number', defaults: { development: '3000', test: '0' } },
+    S3_BUCKET: { type: 'string', required: true },
+    API_TOKEN: { type: 'string', required: true, sensitive: true },
+  },
+})
+manifold.env.PORT       // number — from process.env.PORT, or the per-environment default
+manifold.env.S3_BUCKET  // string — startup fails loudly if unset
+export default manifold
+```
 
 ```typescript
 function createManifold<const TEnv extends EnvDefs = EnvDefs>( raw: Omit<BlueprintInput, 'env'> &
@@ -79,6 +103,114 @@ interface IsolationState
 interface ConnectionTracker
 ```
 
+## env — Environment Variables
+
+Declared environment variables — the canonical home for runtime config (ports, service tokens, bucket names, feature flags). Declare them under the `env` blueprint field; each is read once at config load, validated and coerced to its declared type (loud error on a bad or missing-required value), and exposed typed on `manifold.env` — in place of scattered ad-hoc `process.env` reads.
+
+### Types
+
+**`StringEnvVar`**
+
+A string environment variable — resolved verbatim.
+
+
+```typescript
+S3_BUCKET: { type: 'string', required: true }
+```
+
+```typescript
+interface StringEnvVar extends EnvVarBase
+```
+
+**`NumberEnvVar`**
+
+A number environment variable — parsed with a loud error on a non-numeric value.
+
+
+```typescript
+PORT: { type: 'number', default: 3000 }
+```
+
+```typescript
+interface NumberEnvVar extends EnvVarBase
+```
+
+**`BooleanEnvVar`**
+
+A boolean environment variable — accepts true/false/1/0, loud error otherwise.
+
+
+```typescript
+FEATURE_GRAPH: { type: 'boolean', default: false }
+```
+
+```typescript
+interface BooleanEnvVar extends EnvVarBase
+```
+
+**`StringArrayEnvVar`**
+
+A string-array environment variable — the raw value split on `separator`
+(default `,`), each element trimmed.
+
+
+```typescript
+CORS_ORIGINS: { type: 'string[]', separator: ',', default: [] }
+```
+
+```typescript
+interface StringArrayEnvVar extends EnvVarBase
+```
+
+**`EnvVarDef`**
+
+One declared environment variable: its type, whether it is required, its
+fallbacks, and whether the value is sensitive. Declared under the `env`
+blueprint field; resolved once at config load and exposed typed on
+`manifold.env` — the canonical replacement for ad-hoc `process.env` reads.
+
+```typescript
+type EnvVarDef = StringEnvVar | NumberEnvVar | BooleanEnvVar | StringArrayEnvVar
+```
+
+**`EnvDefs`**
+
+The `env` blueprint field: environment-variable declarations keyed by
+variable name. Passing this map to `createManifold` is what types
+`manifold.env`.
+
+
+```typescript
+export default createManifold({
+  databases: { app: { url: 'DATABASE_URL', testUrl: 'DATABASE_URL_TEST' } },
+  env: {
+    PORT: { type: 'number', defaults: { development: '3000', test: '0' } },
+    S3_BUCKET: { type: 'string', required: true },
+    API_TOKEN: { type: 'string', required: true, sensitive: true },
+    CORS_ORIGINS: { type: 'string[]', default: [] },
+  },
+})
+// manifold.env.PORT         → number
+// manifold.env.S3_BUCKET    → string
+// manifold.env.CORS_ORIGINS → string[]
+```
+
+```typescript
+type EnvDefs = Record<string, EnvVarDef>
+```
+
+**`ResolvedEnvType`** — The resolved runtime type of one declaration: 'string' → string, 'number' → number, 'boolean' → boolean, 'string[]' → string[].
+
+```typescript
+type ResolvedEnvType<T extends EnvVarDef> =
+```
+
+**`ResolveEnvDefs`** — Maps a declaration map to the shape of `manifold.env` — each key typed by its declared `type`.
+
+```typescript
+type ResolveEnvDefs<T extends EnvDefs> =
+```
+
 ## jobs — Background Jobs
 
 Background job queue namespace — Postgres-backed with SKIP LOCKED, LISTEN/NOTIFY, cron scheduling.
@@ -564,6 +696,18 @@ interface ValueColumnDef
 interface SerializableOptions
 ```
 
+**`ManagedConnection`** — A standalone pooled connection: the raw postgres.js client, its drizzle handle, and a `close()` that ends the pool.
+
+```typescript
+interface ManagedConnection
+```
+
+**`ConnectOptions`** — Options for `tap()` — pool size (default 1) and idle timeout in seconds.
+
+```typescript
+interface ConnectOptions
+```
+
 ## jsonb — JSONB Column Helpers
 
 JSONB query operators — typed helpers for PostgreSQL JSONB containment, key checks, and field extraction.
@@ -1022,6 +1166,19 @@ Generates an OpenAPI 3.1 document from route registrations — schemas derived f
 
 ## test
 
+## data
+
+### `tap`
+
+Opens a standalone managed connection outside the manifold's pools — the
+sanctioned door for contexts where `pipe()` structurally cannot resolve:
+`worker_threads`, detached monitors, one-off scripts. Callers own the
+lifecycle: always `await conn.close()`.
+
+```typescript
+function tap(url: string, options?: ConnectOptions): ManagedConnection
+```
+
 ## trace
 
 ### `__flowStep`

package/dist/REFERENCE.md

@@ -1,11 +1,12 @@
 # Pipework API Reference
 
 > Auto-generated from source JSDoc. Do not edit manually.
-> Generated: 2026-06-29
+> Generated: 2026-07-16
 
 ## Contents
 
 - [Core](#core)
+- [env — Environment Variables](#env-environment-variables)
 - [jobs — Background Jobs](#jobs-background-jobs)
 - [pipeline — Multi-Step Pipelines](#pipeline-multi-step-pipelines)
 - [state — State Machines](#state-state-machines)
@@ -33,6 +34,7 @@
 - [http — Server](#http-server)
 - [openapi — API Documentation](#openapi-api-documentation)
 - [test](#test)
+- [data](#data)
 - [trace](#trace)
 
 ## Core
@@ -41,7 +43,29 @@ Application instance and foundational types.
 
 ### `createManifold`
 
-Creates the Pipework application instance. This is the entry point for every Pipework app. Define in `pipework.config.ts` and export as default. /
+Creates the Pipework application instance. This is the entry point for every Pipework app.
+Define in `pipework.config.ts` and export as default.
+
+The `env` field declares the app's environment variables — the canonical
+home for runtime config (ports, service tokens, bucket names, flags) in
+place of scattered `process.env` reads. Each variable is read once at config
+load, validated and coerced to its declared type (loud error on a bad or
+missing-required value), and exposed typed on `manifold.env`.
+
+
+```typescript
+const manifold = createManifold({
+  databases: { app: { url: 'DATABASE_URL', testUrl: 'DATABASE_URL_TEST' } },
+  env: {
+    PORT: { type: 'number', defaults: { development: '3000', test: '0' } },
+    S3_BUCKET: { type: 'string', required: true },
+    API_TOKEN: { type: 'string', required: true, sensitive: true },
+  },
+})
+manifold.env.PORT       // number — from process.env.PORT, or the per-environment default
+manifold.env.S3_BUCKET  // string — startup fails loudly if unset
+export default manifold
+```
 
 ```typescript
 function createManifold<const TEnv extends EnvDefs = EnvDefs>( raw: Omit<BlueprintInput, 'env'> &
@@ -79,6 +103,114 @@ interface IsolationState
 interface ConnectionTracker
 ```
 
+## env — Environment Variables
+
+Declared environment variables — the canonical home for runtime config (ports, service tokens, bucket names, feature flags). Declare them under the `env` blueprint field; each is read once at config load, validated and coerced to its declared type (loud error on a bad or missing-required value), and exposed typed on `manifold.env` — in place of scattered ad-hoc `process.env` reads.
+
+### Types
+
+**`StringEnvVar`**
+
+A string environment variable — resolved verbatim.
+
+
+```typescript
+S3_BUCKET: { type: 'string', required: true }
+```
+
+```typescript
+interface StringEnvVar extends EnvVarBase
+```
+
+**`NumberEnvVar`**
+
+A number environment variable — parsed with a loud error on a non-numeric value.
+
+
+```typescript
+PORT: { type: 'number', default: 3000 }
+```
+
+```typescript
+interface NumberEnvVar extends EnvVarBase
+```
+
+**`BooleanEnvVar`**
+
+A boolean environment variable — accepts true/false/1/0, loud error otherwise.
+
+
+```typescript
+FEATURE_GRAPH: { type: 'boolean', default: false }
+```
+
+```typescript
+interface BooleanEnvVar extends EnvVarBase
+```
+
+**`StringArrayEnvVar`**
+
+A string-array environment variable — the raw value split on `separator`
+(default `,`), each element trimmed.
+
+
+```typescript
+CORS_ORIGINS: { type: 'string[]', separator: ',', default: [] }
+```
+
+```typescript
+interface StringArrayEnvVar extends EnvVarBase
+```
+
+**`EnvVarDef`**
+
+One declared environment variable: its type, whether it is required, its
+fallbacks, and whether the value is sensitive. Declared under the `env`
+blueprint field; resolved once at config load and exposed typed on
+`manifold.env` — the canonical replacement for ad-hoc `process.env` reads.
+
+```typescript
+type EnvVarDef = StringEnvVar | NumberEnvVar | BooleanEnvVar | StringArrayEnvVar
+```
+
+**`EnvDefs`**
+
+The `env` blueprint field: environment-variable declarations keyed by
+variable name. Passing this map to `createManifold` is what types
+`manifold.env`.
+
+
+```typescript
+export default createManifold({
+  databases: { app: { url: 'DATABASE_URL', testUrl: 'DATABASE_URL_TEST' } },
+  env: {
+    PORT: { type: 'number', defaults: { development: '3000', test: '0' } },
+    S3_BUCKET: { type: 'string', required: true },
+    API_TOKEN: { type: 'string', required: true, sensitive: true },
+    CORS_ORIGINS: { type: 'string[]', default: [] },
+  },
+})
+// manifold.env.PORT         → number
+// manifold.env.S3_BUCKET    → string
+// manifold.env.CORS_ORIGINS → string[]
+```
+
+```typescript
+type EnvDefs = Record<string, EnvVarDef>
+```
+
+**`ResolvedEnvType`** — The resolved runtime type of one declaration: 'string' → string, 'number' → number, 'boolean' → boolean, 'string[]' → string[].
+
+```typescript
+type ResolvedEnvType<T extends EnvVarDef> =
+```
+
+**`ResolveEnvDefs`** — Maps a declaration map to the shape of `manifold.env` — each key typed by its declared `type`.
+
+```typescript
+type ResolveEnvDefs<T extends EnvDefs> =
+```
+
 ## jobs — Background Jobs
 
 Background job queue namespace — Postgres-backed with SKIP LOCKED, LISTEN/NOTIFY, cron scheduling.
@@ -564,6 +696,18 @@ interface ValueColumnDef
 interface SerializableOptions
 ```
 
+**`ManagedConnection`** — A standalone pooled connection: the raw postgres.js client, its drizzle handle, and a `close()` that ends the pool.
+
+```typescript
+interface ManagedConnection
+```
+
+**`ConnectOptions`** — Options for `tap()` — pool size (default 1) and idle timeout in seconds.
+
+```typescript
+interface ConnectOptions
+```
+
 ## jsonb — JSONB Column Helpers
 
 JSONB query operators — typed helpers for PostgreSQL JSONB containment, key checks, and field extraction.
@@ -1022,6 +1166,19 @@ Generates an OpenAPI 3.1 document from route registrations — schemas derived f
 
 ## test
 
+## data
+
+### `tap`
+
+Opens a standalone managed connection outside the manifold's pools — the
+sanctioned door for contexts where `pipe()` structurally cannot resolve:
+`worker_threads`, detached monitors, one-off scripts. Callers own the
+lifecycle: always `await conn.close()`.
+
+```typescript
+function tap(url: string, options?: ConnectOptions): ManagedConnection
+```
+
 ## trace
 
 ### `__flowStep`

package/dist/cli/commands/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAA;IACtB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsD7E"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAA;IACtB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAsB,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0D7E"}

package/dist/cli/commands/generate.js

@@ -1,26 +1,28 @@
 import { info, success, warn, error as logError } from '../output.js';
 export async function generate(options) {
-    const { discoverInstance } = await import('../../core/config/discover.js');
+    const { discoverInstance, findConfig } = await import('../../core/config/discover.js');
     const { generateForDatabase } = await import('../../data/migrate/generate.js');
     const { loadInternalDefinitions } = await import('../../data/migrate/internal-definitions.js');
-    let instance;
-    try {
-        instance = await discoverInstance(options.cwd);
-    }
-    catch {
+    if (findConfig(options.cwd) === null) {
         logError('No pipework.config.ts found.\n\n' +
             '  Run `pipework init` to create one.\n');
         process.exit(1);
     }
+    // A config that exists but fails to load (missing env var, refused
+    // url/testUrl identity, …) must surface its real error, not be misreported
+    // as a missing config.
+    const instance = await discoverInstance(options.cwd);
     const defaultDbName = instance.config.defaultDatabaseName();
     try {
         if (options.db !== undefined) {
             const dbConfig = instance.config.database(options.db);
             info(`Generating migration for database: ${options.db}`);
-            const internal = await loadInternalDefinitions(instance.config.raw, {
+            // Passed as a thunk so queue registrations made by glob-imported schema
+            // modules (inside generateForDatabase) are visible when it runs.
+            const internal = () => loadInternalDefinitions(instance.config.raw, {
                 isDefaultDatabase: options.db === defaultDbName,
             });
-            const result = await generateForDatabase(dbConfig, options.cwd, options.name, internal);
+            const result = await generateForDatabase(dbConfig, options.name, internal);
             if (result.migrationFile === null) {
                 warn(`${options.db}: no schema changes detected`);
             }
@@ -34,10 +36,10 @@ export async function generate(options) {
             for (const [, dbConfig] of instance.config.databases()) {
                 if (dbConfig.schema === undefined)
                     continue;
-                const internal = await loadInternalDefinitions(instance.config.raw, {
+                const internal = () => loadInternalDefinitions(instance.config.raw, {
                     isDefaultDatabase: dbConfig.name === defaultDbName,
                 });
-                const result = await generateForDatabase(dbConfig, options.cwd, options.name, internal);
+                const result = await generateForDatabase(dbConfig, options.name, internal);
                 if (result.migrationFile === null) {
                     warn(`${dbConfig.name}: no schema changes detected`);
                 }

package/dist/cli/commands/generate.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,cAAc,CAAA;AAQrE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAA+B;IAC5D,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAA;IAC1E,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAA;IAC9E,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAA;IAE9F,IAAI,QAAQ,CAAA;IACZ,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CACN,kCAAkC;YAClC,wCAAwC,CACzC,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAA;IAE3D,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,sCAAsC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YACxD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClE,iBAAiB,EAAE,OAAO,CAAC,EAAE,KAAK,aAAa;aAChD,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YACvF,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC,GAAG,OAAO,CAAC,EAAE,8BAA8B,CAAC,CAAA;YACnD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,OAAO,CAAC,EAAE,eAAe,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,4CAA4C,CAAC,CAAA;YAClD,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;oBAAE,SAAQ;gBAC3C,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE;oBAClE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,KAAK,aAAa;iBACnD,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;gBACvF,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;oBAClC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,8BAA8B,CAAC,CAAA;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,eAAe,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;oBAC9D,SAAS,EAAE,CAAA;gBACb,CAAC;YACH,CAAC;YACD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,6CAA6C,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;IAChC,CAAC;AACH,CAAC"}
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/cli/commands/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,IAAI,QAAQ,EAAE,MAAM,cAAc,CAAA;AAQrE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAA+B;IAC5D,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAA;IACtF,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAA;IAC9E,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAA;IAE9F,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,QAAQ,CACN,kCAAkC;YAClC,wCAAwC,CACzC,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,uBAAuB;IACvB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAEpD,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAA;IAE3D,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC,sCAAsC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;YACxD,wEAAwE;YACxE,iEAAiE;YACjE,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClE,iBAAiB,EAAE,OAAO,CAAC,EAAE,KAAK,aAAa;aAChD,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC1E,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC,GAAG,OAAO,CAAC,EAAE,8BAA8B,CAAC,CAAA;YACnD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,OAAO,CAAC,EAAE,eAAe,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,4CAA4C,CAAC,CAAA;YAClD,IAAI,SAAS,GAAG,CAAC,CAAA;YACjB,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;gBACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;oBAAE,SAAQ;gBAC3C,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE;oBAClE,iBAAiB,EAAE,QAAQ,CAAC,IAAI,KAAK,aAAa;iBACnD,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;gBAC1E,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;oBAClC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,8BAA8B,CAAC,CAAA;gBACtD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,eAAe,MAAM,CAAC,aAAa,EAAE,CAAC,CAAA;oBAC9D,SAAS,EAAE,CAAA;gBACb,CAAC;YACH,CAAC;YACD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,6CAA6C,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAA;IAChC,CAAC;AACH,CAAC"}

package/dist/core/config/base-dir.d.ts

@@ -0,0 +1,6 @@
+export declare function setConfigBaseDir(dir: string): void;
+/** Read-and-clear. Undefined when no config import is in flight — directly-constructed configs resolve against process.cwd(). */
+export declare function consumeConfigBaseDir(): string | undefined;
+/** Cleared in the importer's finally: an ESM cache hit skips loadConfig, and the stale slot must not leak into a later directly-constructed loadConfig. */
+export declare function clearConfigBaseDir(): void;
+//# sourceMappingURL=base-dir.d.ts.map

package/dist/core/config/base-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-dir.d.ts","sourceRoot":"","sources":["../../../src/core/config/base-dir.ts"],"names":[],"mappings":"AASA,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,iIAAiI;AACjI,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAIzD;AAED,2JAA2J;AAC3J,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/core/config/base-dir.js

@@ -0,0 +1,21 @@
+// The directory relative `migrations`/`schema` paths resolve against (D1,
+// subseam audit 2026-07-16). Set from the config file's directory immediately
+// before the config module is imported; consumed exactly once by loadConfig.
+// A module-level slot rather than a parameter because the config file itself
+// calls createManifold() during its own import — there is no call chain to
+// thread the value through.
+let configBaseDir;
+export function setConfigBaseDir(dir) {
+    configBaseDir = dir;
+}
+/** Read-and-clear. Undefined when no config import is in flight — directly-constructed configs resolve against process.cwd(). */
+export function consumeConfigBaseDir() {
+    const dir = configBaseDir;
+    configBaseDir = undefined;
+    return dir;
+}
+/** Cleared in the importer's finally: an ESM cache hit skips loadConfig, and the stale slot must not leak into a later directly-constructed loadConfig. */
+export function clearConfigBaseDir() {
+    configBaseDir = undefined;
+}
+//# sourceMappingURL=base-dir.js.map

package/dist/core/config/base-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-dir.js","sourceRoot":"","sources":["../../../src/core/config/base-dir.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,4BAA4B;AAE5B,IAAI,aAAiC,CAAA;AAErC,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,aAAa,GAAG,GAAG,CAAA;AACrB,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,aAAa,CAAA;IACzB,aAAa,GAAG,SAAS,CAAA;IACzB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2JAA2J;AAC3J,MAAM,UAAU,kBAAkB;IAChC,aAAa,GAAG,SAAS,CAAA;AAC3B,CAAC"}

package/dist/core/config/discover.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/core/config/discover.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAK9C,wBAAgB,sBAAsB,IAAI,IAAI,CAsD7C;AAED,wBAAsB,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CA6BtE;AAMD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYtD"}
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../../src/core/config/discover.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAM9C,wBAAgB,sBAAsB,IAAI,IAAI,CAsD7C;AAED,wBAAsB,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CActE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYtD"}

package/dist/core/config/discover.js

@@ -1,8 +1,8 @@
 import { resolve, dirname } from 'node:path';
 import { existsSync } from 'node:fs';
-import { pathToFileURL } from 'node:url';
 import { register } from 'node:module';
 import { ConfigError } from './errors.js';
+import { importConfig } from './import-config.js';
 const CONFIG_FILENAME = 'pipework.config.ts';
 export function registerTsResolveHooks() {
     {
@@ -66,20 +66,7 @@ export async function discoverInstance(cwd) {
         throw new ConfigError(`No ${CONFIG_FILENAME} found in ${start} or any parent directory.`, `Create one with \`pipework init\`, or see the getting-started guide.`);
     }
     registerTsResolveHooks();
-    const configUrl = pathToFileURL(configPath).href;
-    const mod = await import(configUrl);
-    const exported = mod['default'] ?? mod;
-    if (!isManifold(exported)) {
-        throw new ConfigError(`${CONFIG_FILENAME} must export a Pipework instance as its default export.`, `Your config should look like:\n\n` +
-            `  import { createManifold } from 'pipework'\n\n` +
-            `  export default createManifold({\n` +
-            `    databases: { app: { url: 'DATABASE_URL' } },\n` +
-            `  })\n`);
-    }
-    return exported;
-}
-function isManifold(v) {
-    return typeof v === 'object' && v !== null && 'pool' in v && 'config' in v;
+    return importConfig(configPath);
 }
 export function findConfig(from) {
     let dir = resolve(from);

package/dist/core/config/discover.js.map

@@ -1 +1 @@
-{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/core/config/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAEzC,MAAM,eAAe,GAAG,oBAAoB,CAAA;AAE5C,MAAM,UAAU,sBAAsB;IACpC,CAAC;QACC,+EAA+E;QAC/E,qEAAqE;QACrE,8EAA8E;QAC9E,+EAA+E;QAC/E,+DAA+D;QAC/D,gFAAgF;QAChF,qEAAqE;QACrE,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA0CZ,CAAA;QACD,QAAQ,CAAC,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAY;IACjD,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAEpC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,MAAM,eAAe,aAAa,KAAK,2BAA2B,EAClE,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,sBAAsB,EAAE,CAAA;IAExB,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAA;IAChD,MAAM,GAAG,GAA4B,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAY,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAA;IAE/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,WAAW,CACnB,GAAG,eAAe,yDAAyD,EAC3E,mCAAmC;YACnC,iDAAiD;YACjD,qCAAqC;YACrC,oDAAoD;YACpD,QAAQ,CACT,CAAA;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACzB,OAAO,GAAG,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;QAC/C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3C,GAAG,GAAG,MAAM,CAAA;QACZ,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC1C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/core/config/discover.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,MAAM,eAAe,GAAG,oBAAoB,CAAA;AAE5C,MAAM,UAAU,sBAAsB;IACpC,CAAC;QACC,+EAA+E;QAC/E,qEAAqE;QACrE,8EAA8E;QAC9E,+EAA+E;QAC/E,+DAA+D;QAC/D,gFAAgF;QAChF,qEAAqE;QACrE,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA0CZ,CAAA;QACD,QAAQ,CAAC,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAY;IACjD,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IAClC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAEpC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CACnB,MAAM,eAAe,aAAa,KAAK,2BAA2B,EAClE,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,sBAAsB,EAAE,CAAA;IAExB,OAAO,YAAY,CAAC,UAAU,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACzB,OAAO,GAAG,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;QAC/C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3C,GAAG,GAAG,MAAM,CAAA;QACZ,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;IAC1C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,OAAO,IAAI,CAAA;AACb,CAAC"}