pipework 0.7.11 → 0.7.13

package/dist/data/migrate/check.js

@@ -0,0 +1,58 @@
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { analyzeSQL, formatHazards } from './safety.js';
+export function checkMigrations(migrationsFolder) {
+    const journalPath = join(migrationsFolder, 'meta', '_journal.json');
+    if (!existsSync(journalPath)) {
+        return { safe: true, hasDestructive: false, hasLocking: false, fileHazards: [] };
+    }
+    const journal = JSON.parse(readFileSync(journalPath, 'utf-8'));
+    const fileHazards = [];
+    let hasDestructive = false;
+    let hasLocking = false;
+    for (const entry of journal.entries) {
+        const sqlPath = join(migrationsFolder, `${entry.tag}.sql`);
+        if (!existsSync(sqlPath))
+            continue;
+        const sql = readFileSync(sqlPath, 'utf-8');
+        const hazards = analyzeSQL(sql);
+        if (hazards.length > 0) {
+            fileHazards.push({ file: `${entry.tag}.sql`, hazards });
+            if (hazards.some(h => h.severity === 'destructive'))
+                hasDestructive = true;
+            if (hazards.some(h => h.severity === 'locking'))
+                hasLocking = true;
+        }
+    }
+    return {
+        safe: !hasDestructive && !hasLocking,
+        hasDestructive,
+        hasLocking,
+        fileHazards,
+    };
+}
+export function formatCheckResult(result) {
+    if (result.safe)
+        return '';
+    const lines = [];
+    const dCount = result.fileHazards.reduce((n, f) => n + f.hazards.filter(h => h.severity === 'destructive').length, 0);
+    const lCount = result.fileHazards.reduce((n, f) => n + f.hazards.filter(h => h.severity === 'locking').length, 0);
+    const parts = [];
+    if (dCount > 0)
+        parts.push(`${dCount} destructive`);
+    if (lCount > 0)
+        parts.push(`${lCount} locking`);
+    lines.push(`Migration safety check: ${parts.join(' and ')} operation${dCount + lCount > 1 ? 's' : ''} detected.\n`);
+    for (const { file, hazards } of result.fileHazards) {
+        lines.push(formatHazards(hazards, file));
+    }
+    lines.push('');
+    if (dCount > 0) {
+        lines.push('Pass --allow-destructive to run destructive migrations.');
+    }
+    if (lCount > 0) {
+        lines.push('Pass --acknowledge-lock to run migrations that acquire heavy locks.');
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=check.js.map

package/dist/data/migrate/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/data/migrate/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAuC,MAAM,aAAa,CAAA;AAmB5F,MAAM,UAAU,eAAe,CAAC,gBAAwB;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,eAAe,CAAC,CAAA;IACnE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA;IAClF,CAAC;IAED,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;IACvE,MAAM,WAAW,GAAmD,EAAE,CAAA;IACtE,IAAI,cAAc,GAAG,KAAK,CAAA;IAC1B,IAAI,UAAU,GAAG,KAAK,CAAA;IAEtB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,CAAA;QAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAQ;QAElC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAE/B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;YACvD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC;gBAAE,cAAc,GAAG,IAAI,CAAA;YAC1E,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC;gBAAE,UAAU,GAAG,IAAI,CAAA;QACpE,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,CAAC,cAAc,IAAI,CAAC,UAAU;QACpC,cAAc;QACd,UAAU;QACV,WAAW;KACZ,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IAE1B,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACrH,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAEjH,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,cAAc,CAAC,CAAA;IACnD,IAAI,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,UAAU,CAAC,CAAA;IAC/C,KAAK,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;IAEnH,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAA;IACnF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/data/migrate/generate.d.ts

@@ -0,0 +1,9 @@
+import type { ResolvedDatabase } from '../../core/config/load.js';
+export interface GenerateResult {
+    database: string;
+    migrationFile: string | null;
+    snapshotFile: string;
+    statements: number;
+}
+export declare function generateForDatabase(dbConfig: ResolvedDatabase, cwd: string, migrationName?: string): Promise<GenerateResult>;
+//# sourceMappingURL=generate.d.ts.map

package/dist/data/migrate/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../src/data/migrate/generate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAMjE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB;AAwCD,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA6FlI"}

package/dist/data/migrate/generate.js

@@ -0,0 +1,152 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { randomUUID } from 'node:crypto';
+import { glob } from 'node:fs/promises';
+import { ConfigError } from '../../core/config/resolve.js';
+import { postProcessMigration } from './post-process.js';
+import { generateRlsStatements } from './rls-generate.js';
+import { definitions } from '../domain/index.js';
+const EMPTY_SNAPSHOT = {
+    id: '00000000-0000-0000-0000-000000000000',
+    prevId: '',
+    version: '7',
+    dialect: 'postgresql',
+    tables: {},
+    enums: {},
+    schemas: {},
+    views: {},
+    sequences: {},
+    roles: {},
+    policies: {},
+    _meta: { schemas: {}, tables: {}, columns: {} },
+};
+export async function generateForDatabase(dbConfig, cwd, migrationName) {
+    if (dbConfig.schema === undefined) {
+        throw new ConfigError(`Database "${dbConfig.name}" has no schema path configured.`, `Add a schema path to your database config:\n\n` +
+            `  databases: {\n` +
+            `    ${dbConfig.name}: {\n` +
+            `      url: '...',\n` +
+            `      schema: './src/db/schema.ts',  // <-- add this\n` +
+            `      migrations: '...',\n` +
+            `    },\n` +
+            `  }\n`);
+    }
+    if (dbConfig.migrations === undefined) {
+        throw new ConfigError(`Database "${dbConfig.name}" has no migrations path configured.`, `Add a migrations path to your database config:\n\n` +
+            `  databases: {\n` +
+            `    ${dbConfig.name}: {\n` +
+            `      url: '...',\n` +
+            `      schema: '...',\n` +
+            `      migrations: './migrations/${dbConfig.name}',  // <-- add this\n` +
+            `    },\n` +
+            `  }\n`);
+    }
+    const schemaFiles = await resolveSchemaFiles(dbConfig.schema, cwd);
+    if (schemaFiles.length === 0) {
+        const patterns = Array.isArray(dbConfig.schema) ? dbConfig.schema.join(', ') : dbConfig.schema;
+        throw new ConfigError(`No schema files found for database "${dbConfig.name}".`, `Pattern(s): ${patterns}\n\n  Check the "schema" path in your database config.`);
+    }
+    const migrationsDir = resolve(cwd, dbConfig.migrations);
+    const metaDir = join(migrationsDir, 'meta');
+    mkdirSync(metaDir, { recursive: true });
+    const { generateDrizzleJson, generateMigration } = await import('drizzle-kit/api');
+    const imports = {};
+    const cacheBust = Date.now();
+    for (const file of schemaFiles) {
+        const url = `${pathToFileURL(file).href}?t=${cacheBust}`;
+        const mod = await import(url);
+        for (const [key, value] of Object.entries(mod)) {
+            imports[key] = value;
+        }
+    }
+    const prevSnapshot = readPreviousSnapshot(metaDir);
+    const currentSnapshot = generateDrizzleJson(imports, prevSnapshot.id);
+    const statements = await generateMigration(prevSnapshot, currentSnapshot);
+    if (statements.length === 0) {
+        const snapshotFile = writeSnapshot(metaDir, currentSnapshot, readJournal(metaDir));
+        return {
+            database: dbConfig.name,
+            migrationFile: null,
+            snapshotFile,
+            statements: 0,
+        };
+    }
+    const journal = readJournal(metaDir);
+    const idx = journal.entries.length;
+    const tag = formatTag(idx, migrationName);
+    const joined = statements.join('\n');
+    const withRls = dbConfig.rls !== undefined
+        ? generateRlsStatements(joined, definitions(), dbConfig.rls.sessionVar)
+        : joined;
+    const sqlContent = postProcessMigration(withRls);
+    const migrationFile = join(migrationsDir, `${tag}.sql`);
+    writeFileSync(migrationFile, sqlContent, 'utf-8');
+    const snapshotFile = writeSnapshot(metaDir, currentSnapshot, journal, idx, tag);
+    return {
+        database: dbConfig.name,
+        migrationFile,
+        snapshotFile,
+        statements: statements.length,
+    };
+}
+function readPreviousSnapshot(metaDir) {
+    const journal = readJournal(metaDir);
+    if (journal.entries.length === 0)
+        return EMPTY_SNAPSHOT;
+    const lastEntry = journal.entries[journal.entries.length - 1];
+    const snapshotPath = join(metaDir, `${String(lastEntry.idx).padStart(4, '0')}_snapshot.json`);
+    if (!existsSync(snapshotPath))
+        return EMPTY_SNAPSHOT;
+    return JSON.parse(readFileSync(snapshotPath, 'utf-8'));
+}
+function readJournal(metaDir) {
+    const journalPath = join(metaDir, '_journal.json');
+    if (!existsSync(journalPath)) {
+        return { version: '7', dialect: 'postgresql', entries: [] };
+    }
+    return JSON.parse(readFileSync(journalPath, 'utf-8'));
+}
+function writeSnapshot(metaDir, snapshot, journal, idx, tag) {
+    const snapshotIdx = idx ?? journal.entries.length;
+    const snapshotFile = join(metaDir, `${String(snapshotIdx).padStart(4, '0')}_snapshot.json`);
+    snapshot.id = randomUUID();
+    writeFileSync(snapshotFile, JSON.stringify(snapshot, null, 2), 'utf-8');
+    if (idx !== undefined && tag !== undefined) {
+        journal.entries.push({
+            idx,
+            version: '7',
+            when: Date.now(),
+            tag,
+            breakpoints: true,
+        });
+        writeFileSync(join(metaDir, '_journal.json'), JSON.stringify(journal, null, 2), 'utf-8');
+    }
+    return snapshotFile;
+}
+function formatTag(idx, name) {
+    const prefix = String(idx).padStart(4, '0');
+    if (name !== undefined) {
+        const slug = name.toLowerCase().replace(/[^a-z0-9]+/g, '_').replace(/^_|_$/g, '');
+        return `${prefix}_${slug}`;
+    }
+    return prefix;
+}
+async function resolveSchemaFiles(schema, cwd) {
+    const patterns = Array.isArray(schema) ? schema : [schema];
+    const files = [];
+    for (const pattern of patterns) {
+        const abs = resolve(cwd, pattern);
+        if (!pattern.includes('*')) {
+            if (existsSync(abs))
+                files.push(abs);
+        }
+        else {
+            for await (const match of glob(pattern, { cwd })) {
+                files.push(resolve(cwd, match));
+            }
+        }
+    }
+    return [...new Set(files)].sort();
+}
+//# sourceMappingURL=generate.js.map

package/dist/data/migrate/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../../src/data/migrate/generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAgChD,MAAM,cAAc,GAAoB;IACtC,EAAE,EAAE,sCAAsC;IAC1C,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,GAAG;IACZ,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,EAAE;IACX,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,EAAE;IACb,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;IACZ,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;CAChD,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAA0B,EAAE,GAAW,EAAE,aAAsB;IACvG,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,WAAW,CACnB,aAAa,QAAQ,CAAC,IAAI,kCAAkC,EAC5D,gDAAgD;YAChD,kBAAkB;YAClB,OAAO,QAAQ,CAAC,IAAI,OAAO;YAC3B,qBAAqB;YACrB,wDAAwD;YACxD,4BAA4B;YAC5B,UAAU;YACV,OAAO,CACR,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,WAAW,CACnB,aAAa,QAAQ,CAAC,IAAI,sCAAsC,EAChE,oDAAoD;YACpD,kBAAkB;YAClB,OAAO,QAAQ,CAAC,IAAI,OAAO;YAC3B,qBAAqB;YACrB,wBAAwB;YACxB,mCAAmC,QAAQ,CAAC,IAAI,uBAAuB;YACvE,UAAU;YACV,OAAO,CACR,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAElE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAA;QAC9F,MAAM,IAAI,WAAW,CACnB,uCAAuC,QAAQ,CAAC,IAAI,IAAI,EACxD,eAAe,QAAQ,wDAAwD,CAChF,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;IAE3C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvC,MAAM,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAGhF,CAAA;IAED,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,SAAS,EAAE,CAAA;QACxD,MAAM,GAAG,GAA4B,MAAM,MAAM,CAAC,GAAG,CAAC,CAAA;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACtB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAClD,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;IACrE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAEzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;QAClF,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,aAAa,EAAE,IAAI;YACnB,YAAY;YACZ,UAAU,EAAE,CAAC;SACd,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;IAClC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAEzC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,KAAK,SAAS;QACxC,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;QACvE,CAAC,CAAC,MAAM,CAAA;IACV,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,GAAG,MAAM,CAAC,CAAA;IACvD,aAAa,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IAEjD,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAE/E,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,aAAa;QACb,YAAY;QACZ,UAAU,EAAE,UAAU,CAAC,MAAM;KAC9B,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAA;IAEvD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAE7F,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,cAAc,CAAA;IAEpD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAoB,CAAA;AAC3E,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAY,CAAA;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,QAAyB,EAAE,OAAgB,EAAE,GAAY,EAAE,GAAY;IAC7G,MAAM,WAAW,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAE3F,QAAQ,CAAC,EAAE,GAAG,UAAU,EAAE,CAAA;IAC1B,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAEvE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACnB,GAAG;YACH,OAAO,EAAE,GAAG;YACZ,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAChB,GAAG;YACH,WAAW,EAAE,IAAI;SAClB,CAAC,CAAA;QACF,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAC1F,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,IAAa;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QACjF,OAAO,GAAG,MAAM,IAAI,IAAI,EAAE,CAAA;IAC5B,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAyB,EAAE,GAAW;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACtC,CAAC;aAAM,CAAC;YACN,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AACnC,CAAC"}

package/dist/data/migrate/index.d.ts

@@ -0,0 +1,7 @@
+export { migrateAll, migrateOne, UnsafeMigrationError, type MigrateResult, type MigrateOptions } from './run.js';
+export { checkMigrations, formatCheckResult, type MigrationCheckResult, type MigrationHazard, type Severity } from './check.js';
+export { analyzeSQL } from './safety.js';
+export { generateForDatabase, type GenerateResult } from './generate.js';
+export { postProcessMigration } from './post-process.js';
+export { generateRlsStatements } from './rls-generate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/data/migrate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/migrate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,UAAU,CAAA;AAChH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,KAAK,eAAe,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/data/migrate/index.js

@@ -0,0 +1,7 @@
+export { migrateAll, migrateOne, UnsafeMigrationError } from './run.js';
+export { checkMigrations, formatCheckResult } from './check.js';
+export { analyzeSQL } from './safety.js';
+export { generateForDatabase } from './generate.js';
+export { postProcessMigration } from './post-process.js';
+export { generateRlsStatements } from './rls-generate.js';
+//# sourceMappingURL=index.js.map

package/dist/data/migrate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/data/migrate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAA2C,MAAM,UAAU,CAAA;AAChH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAkE,MAAM,YAAY,CAAA;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/data/migrate/post-process.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Transform unsafe drizzle-kit migration SQL into safe SQL.
+ *
+ * Two transforms are applied:
+ * 1. `CREATE INDEX` → `CREATE INDEX CONCURRENTLY` (with `-- pipework:no-transaction` pragma)
+ * 2. `ADD CONSTRAINT ... FOREIGN KEY` → appends `NOT VALID`, emits `VALIDATE CONSTRAINT`
+ */
+export declare function postProcessMigration(sql: string): string;
+//# sourceMappingURL=post-process.d.ts.map

package/dist/data/migrate/post-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-process.d.ts","sourceRoot":"","sources":["../../../src/data/migrate/post-process.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA4DxD"}

package/dist/data/migrate/post-process.js

@@ -0,0 +1,60 @@
+const CREATE_INDEX_RE = /\bCREATE\s+(UNIQUE\s+)?INDEX\b(?!\s+CONCURRENTLY)/i;
+const CONCURRENTLY_RE = /\bCONCURRENTLY\b/i;
+const FK_RE = /\bADD\s+CONSTRAINT\b[^;]*\bFOREIGN\s+KEY\b(?![^;]*\bNOT\s+VALID\b)/i;
+const ALTER_TABLE_NAME_RE = /\bALTER\s+TABLE\s+(?:ONLY\s+)?((?:"(?:[^"]+)"\.)*"(?:[^"]+)"|[^\s(]+(?:\.[^\s(]+)*)/i;
+const ADD_CONSTRAINT_NAME_RE = /\bADD\s+CONSTRAINT\s+("(?:[^"]+)"|[^\s(]+)/i;
+const NO_TRANSACTION_PRAGMA = '-- pipework:no-transaction';
+/**
+ * Transform unsafe drizzle-kit migration SQL into safe SQL.
+ *
+ * Two transforms are applied:
+ * 1. `CREATE INDEX` → `CREATE INDEX CONCURRENTLY` (with `-- pipework:no-transaction` pragma)
+ * 2. `ADD CONSTRAINT ... FOREIGN KEY` → appends `NOT VALID`, emits `VALIDATE CONSTRAINT`
+ */
+export function postProcessMigration(sql) {
+    const parts = sql.split(';');
+    const trailing = parts[parts.length - 1];
+    const rawStatements = parts.slice(0, -1);
+    const outputStatements = [];
+    let hasConcurrently = false;
+    for (const raw of rawStatements) {
+        const trimmed = raw.trim();
+        if (trimmed.length === 0 || trimmed.startsWith('--')) {
+            outputStatements.push(raw);
+            continue;
+        }
+        if (CREATE_INDEX_RE.test(trimmed)) {
+            const rewritten = raw.replace(/\b(CREATE\s+(?:UNIQUE\s+)?)(INDEX)\b/i, '$1$2 CONCURRENTLY');
+            outputStatements.push(rewritten);
+            hasConcurrently = true;
+            continue;
+        }
+        if (CONCURRENTLY_RE.test(trimmed)) {
+            hasConcurrently = true;
+        }
+        if (FK_RE.test(trimmed)) {
+            const tableMatch = ALTER_TABLE_NAME_RE.exec(trimmed);
+            const constraintMatch = ADD_CONSTRAINT_NAME_RE.exec(trimmed);
+            if (tableMatch !== null && constraintMatch !== null) {
+                const tableName = tableMatch[1];
+                const constraintName = constraintMatch[1];
+                const withNotValid = raw.replace(/\s*$/, ' NOT VALID');
+                outputStatements.push(withNotValid);
+                outputStatements.push(`\nALTER TABLE ${tableName} VALIDATE CONSTRAINT ${constraintName}`);
+                continue;
+            }
+        }
+        outputStatements.push(raw);
+    }
+    let result = outputStatements.join(';') + ';';
+    if (trailing !== undefined && trailing.trim().length > 0) {
+        result += trailing;
+    }
+    if (hasConcurrently) {
+        result = result.startsWith(NO_TRANSACTION_PRAGMA)
+            ? result
+            : `${NO_TRANSACTION_PRAGMA}\n${result}`;
+    }
+    return result;
+}
+//# sourceMappingURL=post-process.js.map

package/dist/data/migrate/post-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-process.js","sourceRoot":"","sources":["../../../src/data/migrate/post-process.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,oDAAoD,CAAA;AAC5E,MAAM,eAAe,GAAG,mBAAmB,CAAA;AAC3C,MAAM,KAAK,GAAG,qEAAqE,CAAA;AACnF,MAAM,mBAAmB,GAAG,sFAAsF,CAAA;AAClH,MAAM,sBAAsB,GAAG,6CAA6C,CAAA;AAE5E,MAAM,qBAAqB,GAAG,4BAA4B,CAAA;AAE1D;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACxC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAExC,MAAM,gBAAgB,GAAa,EAAE,CAAA;IACrC,IAAI,eAAe,GAAG,KAAK,CAAA;IAE3B,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,SAAQ;QACV,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAC3B,uCAAuC,EACvC,mBAAmB,CACpB,CAAA;YACD,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAChC,eAAe,GAAG,IAAI,CAAA;YACtB,SAAQ;QACV,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,eAAe,GAAG,IAAI,CAAA;QACxB,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAE5D,IAAI,UAAU,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,CAAA;gBAChC,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAE,CAAA;gBAE1C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;gBACtD,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBACnC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,SAAS,wBAAwB,cAAc,EAAE,CAAC,CAAA;gBACzF,SAAQ;YACV,CAAC;QACH,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAED,IAAI,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IAE7C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,QAAQ,CAAA;IACpB,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAC/C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,GAAG,qBAAqB,KAAK,MAAM,EAAE,CAAA;IAC3C,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/data/migrate/rls-generate.d.ts

@@ -0,0 +1,3 @@
+import type { DefinedTable } from '../domain/types.js';
+export declare function generateRlsStatements(migrationSql: string, definitions: ReadonlyMap<string, DefinedTable>, sessionVar: string): string;
+//# sourceMappingURL=rls-generate.d.ts.map

package/dist/data/migrate/rls-generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls-generate.d.ts","sourceRoot":"","sources":["../../../src/data/migrate/rls-generate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAMtD,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,EAC9C,UAAU,EAAE,MAAM,GACjB,MAAM,CA6BR"}

package/dist/data/migrate/rls-generate.js

@@ -0,0 +1,28 @@
+import { camelToSnake } from '../domain/naming.js';
+import { tenantIsolationPolicy } from '../../auth/tenant/rls.js';
+const CREATE_TABLE_RE = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"([^"]+)"|([a-z_][a-z0-9_]*))/gi;
+export function generateRlsStatements(migrationSql, definitions, sessionVar) {
+    const rlsBlocks = [];
+    let match;
+    while ((match = CREATE_TABLE_RE.exec(migrationSql)) !== null) {
+        const tableName = match[1] ?? match[2];
+        if (tableName === undefined)
+            continue;
+        const definition = definitions.get(tableName);
+        if (definition === undefined)
+            continue;
+        const tenantFieldKey = Object.keys(definition.$fields).find((key) => definition.$fields[key]._meta.tenant === true);
+        if (tenantFieldKey === undefined)
+            continue;
+        const columnName = camelToSnake(tenantFieldKey);
+        if (migrationSql.includes(`"${tableName}" ENABLE ROW LEVEL SECURITY`) ||
+            migrationSql.includes(`${tableName} ENABLE ROW LEVEL SECURITY`)) {
+            continue;
+        }
+        rlsBlocks.push(tenantIsolationPolicy(tableName, columnName, sessionVar));
+    }
+    if (rlsBlocks.length === 0)
+        return migrationSql;
+    return migrationSql + ';\n\n' + rlsBlocks.join(';\n\n');
+}
+//# sourceMappingURL=rls-generate.js.map

package/dist/data/migrate/rls-generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls-generate.js","sourceRoot":"","sources":["../../../src/data/migrate/rls-generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAEhE,MAAM,eAAe,GAAG,8EAA8E,CAAA;AAEtG,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,WAA8C,EAC9C,UAAkB;IAElB,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,IAAI,KAA6B,CAAA;IAEjC,OAAO,CAAC,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,SAAS,KAAK,SAAS;YAAE,SAAQ;QAErC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,UAAU,KAAK,SAAS;YAAE,SAAQ;QAEtC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CACzD,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CACxD,CAAA;QACD,IAAI,cAAc,KAAK,SAAS;YAAE,SAAQ;QAE1C,MAAM,UAAU,GAAG,YAAY,CAAC,cAAc,CAAC,CAAA;QAE/C,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,SAAS,6BAA6B,CAAC;YACjE,YAAY,CAAC,QAAQ,CAAC,GAAG,SAAS,4BAA4B,CAAC,EAAE,CAAC;YACpE,SAAQ;QACV,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IAE/C,OAAO,YAAY,GAAG,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACzD,CAAC"}

package/dist/data/migrate/run.d.ts

@@ -0,0 +1,21 @@
+import type { Manifold } from '../../core/pipework.js';
+import type { ResolvedDatabase } from '../../core/config/index.js';
+import { type MigrationCheckResult } from './check.js';
+export interface MigrateOptions {
+    allowDestructive?: boolean;
+    acknowledgeLock?: boolean;
+}
+export interface MigrateResult {
+    database: string;
+    migrationsRun: number;
+    extensions: string[];
+    safetyCheck: MigrationCheckResult;
+}
+export declare class UnsafeMigrationError extends Error {
+    readonly check: MigrationCheckResult;
+    readonly name = "UnsafeMigrationError";
+    constructor(check: MigrationCheckResult, message: string);
+}
+export declare function migrateAll(instance: Manifold, options?: MigrateOptions): Promise<MigrateResult[]>;
+export declare function migrateOne(instance: Manifold, dbConfig: ResolvedDatabase, options?: MigrateOptions): Promise<MigrateResult>;
+//# sourceMappingURL=run.d.ts.map

package/dist/data/migrate/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/data/migrate/run.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAElE,OAAO,EAAmB,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEvE,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,WAAW,EAAE,oBAAoB,CAAA;CAClC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aAG3B,KAAK,EAAE,oBAAoB;IAF7C,SAAkB,IAAI,0BAAyB;gBAE7B,KAAK,EAAE,oBAAoB,EAC3C,OAAO,EAAE,MAAM;CAIlB;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAU3G;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8CrI"}

package/dist/data/migrate/run.js

@@ -0,0 +1,66 @@
+import { migrate as drizzleMigrate } from 'drizzle-orm/postgres-js/migrator';
+import { sql } from 'drizzle-orm';
+import { quoteIdentifier } from '../db/identifiers.js';
+import { checkMigrations } from './check.js';
+export class UnsafeMigrationError extends Error {
+    check;
+    name = 'UnsafeMigrationError';
+    constructor(check, message) {
+        super(message);
+        this.check = check;
+    }
+}
+export async function migrateAll(instance, options = {}) {
+    const results = [];
+    for (const [, dbConfig] of instance.config.databases()) {
+        if (dbConfig.migrations === undefined)
+            continue;
+        const result = await migrateOne(instance, dbConfig, options);
+        results.push(result);
+    }
+    return results;
+}
+export async function migrateOne(instance, dbConfig, options = {}) {
+    const safetyCheck = dbConfig.migrations !== undefined
+        ? checkMigrations(dbConfig.migrations)
+        : { safe: true, hasDestructive: false, hasLocking: false, fileHazards: [] };
+    if (safetyCheck.hasDestructive && options.allowDestructive !== true) {
+        throw new UnsafeMigrationError(safetyCheck, `Migration for "${dbConfig.name}" contains destructive operations (DROP TABLE, DROP COLUMN, etc.). ` +
+            `Pass { allowDestructive: true } or use --allow-destructive on the CLI to proceed.`);
+    }
+    if (safetyCheck.hasLocking && options.acknowledgeLock !== true) {
+        throw new UnsafeMigrationError(safetyCheck, `Migration for "${dbConfig.name}" contains operations that acquire heavy locks. ` +
+            `Pass { acknowledgeLock: true } or use --acknowledge-lock on the CLI to proceed.`);
+    }
+    const conn = instance.pool.getOrCreate(dbConfig);
+    let extensionsCreated = [];
+    if (dbConfig.extensions.length > 0) {
+        for (const ext of dbConfig.extensions) {
+            await conn.drizzle.execute(sql.raw(`CREATE EXTENSION IF NOT EXISTS ${quoteIdentifier(ext, 'extension')}`));
+        }
+        extensionsCreated = [...dbConfig.extensions];
+    }
+    const beforeTables = await getMigrationCount(conn.drizzle, dbConfig.migrationTable);
+    await drizzleMigrate(conn.drizzle, {
+        migrationsFolder: dbConfig.migrations,
+        migrationsTable: dbConfig.migrationTable,
+    });
+    const afterTables = await getMigrationCount(conn.drizzle, dbConfig.migrationTable);
+    return {
+        database: dbConfig.name,
+        migrationsRun: afterTables - beforeTables,
+        extensions: extensionsCreated,
+        safetyCheck,
+    };
+}
+async function getMigrationCount(db, table) {
+    try {
+        const result = await db.execute(sql.raw(`SELECT count(*)::int as count FROM ${quoteIdentifier(table, 'migration table')}`));
+        const row = result[0];
+        return row?.count ?? 0;
+    }
+    catch {
+        return 0;
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/data/migrate/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/data/migrate/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAC5E,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAGjC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,eAAe,EAA6B,MAAM,YAAY,CAAA;AAcvE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAG3B;IAFA,IAAI,GAAG,sBAAsB,CAAA;IAC/C,YACkB,KAA2B,EAC3C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,UAAK,GAAL,KAAK,CAAsB;IAI7C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAE,UAA0B,EAAE;IAC/E,MAAM,OAAO,GAAoB,EAAE,CAAA;IAEnC,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACvD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;YAAE,SAAQ;QAC/C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC5D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAE,QAA0B,EAAE,UAA0B,EAAE;IAC3G,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,KAAK,SAAS;QACnD,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAA0B,CAAA;IAErG,IAAI,WAAW,CAAC,cAAc,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,kBAAkB,QAAQ,CAAC,IAAI,qEAAqE;YACpG,mFAAmF,CACpF,CAAA;IACH,CAAC;IAED,IAAI,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC/D,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,kBAAkB,QAAQ,CAAC,IAAI,kDAAkD;YACjF,iFAAiF,CAClF,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,iBAAiB,GAAa,EAAE,CAAA;IAEpC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,kCAAkC,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5G,CAAC;QACD,iBAAiB,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAEnF,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;QACjC,gBAAgB,EAAE,QAAQ,CAAC,UAAW;QACtC,eAAe,EAAE,QAAQ,CAAC,cAAc;KACzC,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAElF,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,aAAa,EAAE,WAAW,GAAG,YAAY;QACzC,UAAU,EAAE,iBAAiB;QAC7B,WAAW;KACZ,CAAA;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,EAAwC,EAAE,KAAa;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAc,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,sCAAsC,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAA;QACtI,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAkC,CAAA;QACtD,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC"}

package/dist/data/migrate/safety.d.ts

@@ -0,0 +1,10 @@
+export type Severity = 'destructive' | 'locking' | 'safe';
+export interface MigrationHazard {
+    severity: Severity;
+    operation: string;
+    statement: string;
+    suggestion: string;
+}
+export declare function analyzeSQL(sql: string): MigrationHazard[];
+export declare function formatHazards(hazards: MigrationHazard[], file: string): string;
+//# sourceMappingURL=safety.d.ts.map

package/dist/data/migrate/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../../src/data/migrate/safety.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,MAAM,CAAA;AAEzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AA8ED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAmBzD;AASD,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB9E"}

package/dist/data/migrate/safety.js

@@ -0,0 +1,115 @@
+const RULES = [
+    // ── Destructive (data loss / backward-incompatible) ───────────────────
+    {
+        pattern: /\bDROP\s+TABLE\b/i,
+        severity: 'destructive',
+        operation: 'DROP TABLE',
+        suggestion: 'Rename the table first, deploy, verify no access, then drop in a follow-up migration.',
+    },
+    {
+        pattern: /\bDROP\s+COLUMN\b/i,
+        severity: 'destructive',
+        operation: 'DROP COLUMN',
+        suggestion: 'Stop reading the column in application code first, then drop in a follow-up migration.',
+    },
+    {
+        pattern: /\bALTER\s+COLUMN\b[^;]*\bSET\s+NOT\s+NULL\b/i,
+        severity: 'destructive',
+        operation: 'SET NOT NULL',
+        suggestion: 'Add a CHECK constraint with NOT VALID, validate it separately, then convert to NOT NULL.',
+    },
+    {
+        pattern: /\bALTER\s+COLUMN\b[^;]*\bTYPE\b/i,
+        severity: 'destructive',
+        operation: 'ALTER COLUMN TYPE',
+        suggestion: 'Add a new column with the target type, backfill, swap reads, then drop the old column.',
+    },
+    {
+        pattern: /\bTRUNCATE\b/i,
+        severity: 'destructive',
+        operation: 'TRUNCATE',
+        suggestion: 'Use DELETE with a WHERE clause if you need to remove rows in a migration.',
+    },
+    // ── Locking (acquires heavy locks, risks downtime under load) ─────────
+    {
+        pattern: /\bCREATE\s+(?:UNIQUE\s+)?INDEX\b(?!\s+CONCURRENTLY)/i,
+        severity: 'locking',
+        operation: 'CREATE INDEX (non-concurrent)',
+        suggestion: 'Use CREATE INDEX CONCURRENTLY to avoid blocking writes.',
+        except: /\bCONCURRENTLY\b/i,
+    },
+    {
+        pattern: /\bRENAME\s+COLUMN\b/i,
+        severity: 'locking',
+        operation: 'RENAME COLUMN',
+        suggestion: 'Add a new column, backfill, migrate reads, then drop the old column.',
+    },
+    {
+        pattern: /\bRENAME\s+TABLE\b/i,
+        severity: 'locking',
+        operation: 'RENAME TABLE',
+        suggestion: 'Create a new table, migrate data, swap reads, then drop the old table.',
+    },
+    {
+        pattern: /\bRENAME\s+TO\b/i,
+        severity: 'locking',
+        operation: 'RENAME TO',
+        suggestion: 'Renames acquire AccessExclusive locks. Consider a multi-step migration instead.',
+        except: /\bRENAME\s+COLUMN\b|\bRENAME\s+TABLE\b/i,
+    },
+    {
+        pattern: /\bADD\s+CONSTRAINT\b[^;]*\bFOREIGN\s+KEY\b(?![^;]*\bNOT\s+VALID\b)/i,
+        severity: 'locking',
+        operation: 'ADD FOREIGN KEY (without NOT VALID)',
+        suggestion: 'Add the constraint with NOT VALID, then VALIDATE CONSTRAINT in a separate statement.',
+    },
+];
+export function analyzeSQL(sql) {
+    const statements = splitStatements(sql);
+    const hazards = [];
+    for (const stmt of statements) {
+        for (const rule of RULES) {
+            if (!rule.pattern.test(stmt))
+                continue;
+            if (rule.except !== undefined && rule.except.test(stmt))
+                continue;
+            hazards.push({
+                severity: rule.severity,
+                operation: rule.operation,
+                statement: stmt.trim().slice(0, 200),
+                suggestion: rule.suggestion,
+            });
+        }
+    }
+    return hazards;
+}
+function splitStatements(sql) {
+    return sql
+        .split(/;/)
+        .map(s => s.trim())
+        .filter(s => s.length > 0 && !s.startsWith('--'));
+}
+export function formatHazards(hazards, file) {
+    const destructive = hazards.filter(h => h.severity === 'destructive');
+    const locking = hazards.filter(h => h.severity === 'locking');
+    const lines = [];
+    lines.push(`  ${file}:`);
+    for (const h of destructive) {
+        lines.push(`    ✗ DESTRUCTIVE: ${h.operation}`);
+        lines.push(`      ${truncate(h.statement, 120)}`);
+        lines.push(`      → ${h.suggestion}`);
+    }
+    for (const h of locking) {
+        lines.push(`    ⚠ LOCKING: ${h.operation}`);
+        lines.push(`      ${truncate(h.statement, 120)}`);
+        lines.push(`      → ${h.suggestion}`);
+    }
+    return lines.join('\n');
+}
+function truncate(s, max) {
+    const oneLine = s.replace(/\s+/g, ' ');
+    if (oneLine.length <= max)
+        return oneLine;
+    return oneLine.slice(0, max - 3) + '...';
+}
+//# sourceMappingURL=safety.js.map

package/dist/data/migrate/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../../src/data/migrate/safety.ts"],"names":[],"mappings":"AAiBA,MAAM,KAAK,GAAW;IACpB,yEAAyE;IACzE;QACE,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,uFAAuF;KACpG;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,wFAAwF;KACrG;IACD;QACE,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,0FAA0F;KACvG;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,mBAAmB;QAC9B,UAAU,EAAE,wFAAwF;KACrG;IACD;QACE,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,2EAA2E;KACxF;IAED,yEAAyE;IACzE;QACE,OAAO,EAAE,sDAAsD;QAC/D,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,+BAA+B;QAC1C,UAAU,EAAE,yDAAyD;QACrE,MAAM,EAAE,mBAAmB;KAC5B;IACD;QACE,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,sEAAsE;KACnF;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,wEAAwE;KACrF;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,iFAAiF;QAC7F,MAAM,EAAE,yCAAyC;KAClD;IACD;QACE,OAAO,EAAE,qEAAqE;QAC9E,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,qCAAqC;QAChD,UAAU,EAAE,sFAAsF;KACnG;CACF,CAAA;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACtC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAEjE,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAA0B,EAAE,IAAY;IACpE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,CAAA;IAExB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;QAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACjD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;QAC3C,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACjD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtC,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,OAAO,CAAA;IACzC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAA;AAC1C,CAAC"}