pipework 0.8.7 → 0.8.8

package/dist/migrate/index.d.ts

@@ -0,0 +1,7 @@
+export { migrateAll, migrateOne, UnsafeMigrationError, type MigrateResult, type MigrateOptions } from './run.js';
+export { checkMigrations, formatCheckResult, type MigrationCheckResult, type MigrationHazard, type Severity } from './check.js';
+export { analyzeSQL } from './safety.js';
+export { generateForDatabase, type GenerateResult } from './generate.js';
+export { postProcessMigration } from './post-process.js';
+export { generateRlsStatements } from './rls-generate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/migrate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,UAAU,CAAA;AAChH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,KAAK,eAAe,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/migrate/index.js

@@ -0,0 +1,7 @@
+export { migrateAll, migrateOne, UnsafeMigrationError } from './run.js';
+export { checkMigrations, formatCheckResult } from './check.js';
+export { analyzeSQL } from './safety.js';
+export { generateForDatabase } from './generate.js';
+export { postProcessMigration } from './post-process.js';
+export { generateRlsStatements } from './rls-generate.js';
+//# sourceMappingURL=index.js.map

package/dist/migrate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/migrate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAA2C,MAAM,UAAU,CAAA;AAChH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAkE,MAAM,YAAY,CAAA;AAC/H,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/migrate/post-process.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Transform unsafe drizzle-kit migration SQL into safe SQL.
+ *
+ * Two transforms are applied:
+ * 1. `CREATE INDEX` → `CREATE INDEX CONCURRENTLY` (with `-- pipework:no-transaction` pragma)
+ * 2. `ADD CONSTRAINT ... FOREIGN KEY` → appends `NOT VALID`, emits `VALIDATE CONSTRAINT`
+ */
+export declare function postProcessMigration(sql: string): string;
+//# sourceMappingURL=post-process.d.ts.map

package/dist/migrate/post-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-process.d.ts","sourceRoot":"","sources":["../../src/migrate/post-process.ts"],"names":[],"mappings":"AAQA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA4DxD"}

package/dist/migrate/post-process.js

@@ -0,0 +1,60 @@
+const CREATE_INDEX_RE = /\bCREATE\s+(UNIQUE\s+)?INDEX\b(?!\s+CONCURRENTLY)/i;
+const CONCURRENTLY_RE = /\bCONCURRENTLY\b/i;
+const FK_RE = /\bADD\s+CONSTRAINT\b[^;]*\bFOREIGN\s+KEY\b(?![^;]*\bNOT\s+VALID\b)/i;
+const ALTER_TABLE_NAME_RE = /\bALTER\s+TABLE\s+(?:ONLY\s+)?((?:"(?:[^"]+)"\.)*"(?:[^"]+)"|[^\s(]+(?:\.[^\s(]+)*)/i;
+const ADD_CONSTRAINT_NAME_RE = /\bADD\s+CONSTRAINT\s+("(?:[^"]+)"|[^\s(]+)/i;
+const NO_TRANSACTION_PRAGMA = '-- pipework:no-transaction';
+/**
+ * Transform unsafe drizzle-kit migration SQL into safe SQL.
+ *
+ * Two transforms are applied:
+ * 1. `CREATE INDEX` → `CREATE INDEX CONCURRENTLY` (with `-- pipework:no-transaction` pragma)
+ * 2. `ADD CONSTRAINT ... FOREIGN KEY` → appends `NOT VALID`, emits `VALIDATE CONSTRAINT`
+ */
+export function postProcessMigration(sql) {
+    const parts = sql.split(';');
+    const trailing = parts[parts.length - 1];
+    const rawStatements = parts.slice(0, -1);
+    const outputStatements = [];
+    let hasConcurrently = false;
+    for (const raw of rawStatements) {
+        const trimmed = raw.trim();
+        if (trimmed.length === 0 || trimmed.startsWith('--')) {
+            outputStatements.push(raw);
+            continue;
+        }
+        if (CREATE_INDEX_RE.test(trimmed)) {
+            const rewritten = raw.replace(/\b(CREATE\s+(?:UNIQUE\s+)?)(INDEX)\b/i, '$1$2 CONCURRENTLY');
+            outputStatements.push(rewritten);
+            hasConcurrently = true;
+            continue;
+        }
+        if (CONCURRENTLY_RE.test(trimmed)) {
+            hasConcurrently = true;
+        }
+        if (FK_RE.test(trimmed)) {
+            const tableMatch = ALTER_TABLE_NAME_RE.exec(trimmed);
+            const constraintMatch = ADD_CONSTRAINT_NAME_RE.exec(trimmed);
+            if (tableMatch !== null && constraintMatch !== null) {
+                const tableName = tableMatch[1];
+                const constraintName = constraintMatch[1];
+                const withNotValid = raw.replace(/\s*$/, ' NOT VALID');
+                outputStatements.push(withNotValid);
+                outputStatements.push(`\nALTER TABLE ${tableName} VALIDATE CONSTRAINT ${constraintName}`);
+                continue;
+            }
+        }
+        outputStatements.push(raw);
+    }
+    let result = outputStatements.join(';') + ';';
+    if (trailing !== undefined && trailing.trim().length > 0) {
+        result += trailing;
+    }
+    if (hasConcurrently) {
+        result = result.startsWith(NO_TRANSACTION_PRAGMA)
+            ? result
+            : `${NO_TRANSACTION_PRAGMA}\n${result}`;
+    }
+    return result;
+}
+//# sourceMappingURL=post-process.js.map

package/dist/migrate/post-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-process.js","sourceRoot":"","sources":["../../src/migrate/post-process.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,oDAAoD,CAAA;AAC5E,MAAM,eAAe,GAAG,mBAAmB,CAAA;AAC3C,MAAM,KAAK,GAAG,qEAAqE,CAAA;AACnF,MAAM,mBAAmB,GAAG,sFAAsF,CAAA;AAClH,MAAM,sBAAsB,GAAG,6CAA6C,CAAA;AAE5E,MAAM,qBAAqB,GAAG,4BAA4B,CAAA;AAE1D;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACxC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAExC,MAAM,gBAAgB,GAAa,EAAE,CAAA;IACrC,IAAI,eAAe,GAAG,KAAK,CAAA;IAE3B,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1B,SAAQ;QACV,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAC3B,uCAAuC,EACvC,mBAAmB,CACpB,CAAA;YACD,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAChC,eAAe,GAAG,IAAI,CAAA;YACtB,SAAQ;QACV,CAAC;QAED,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,eAAe,GAAG,IAAI,CAAA;QACxB,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACpD,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAE5D,IAAI,UAAU,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBACpD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAE,CAAA;gBAChC,MAAM,cAAc,GAAG,eAAe,CAAC,CAAC,CAAE,CAAA;gBAE1C,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;gBACtD,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBACnC,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,SAAS,wBAAwB,cAAc,EAAE,CAAC,CAAA;gBACzF,SAAQ;YACV,CAAC;QACH,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC;IAED,IAAI,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IAE7C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,QAAQ,CAAA;IACpB,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAC/C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,GAAG,qBAAqB,KAAK,MAAM,EAAE,CAAA;IAC3C,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/migrate/rls-generate.d.ts

@@ -0,0 +1,3 @@
+import type { DefinedTable } from '../domain/types.js';
+export declare function generateRlsStatements(migrationSql: string, definitions: ReadonlyMap<string, DefinedTable>, sessionVar: string): string;
+//# sourceMappingURL=rls-generate.d.ts.map

package/dist/migrate/rls-generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls-generate.d.ts","sourceRoot":"","sources":["../../src/migrate/rls-generate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAMtD,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,EAC9C,UAAU,EAAE,MAAM,GACjB,MAAM,CA6BR"}

package/dist/migrate/rls-generate.js

@@ -0,0 +1,28 @@
+import { camelToSnake } from '../domain/naming.js';
+import { tenantIsolationPolicy } from '../tenant/rls.js';
+const CREATE_TABLE_RE = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"([^"]+)"|([a-z_][a-z0-9_]*))/gi;
+export function generateRlsStatements(migrationSql, definitions, sessionVar) {
+    const rlsBlocks = [];
+    let match;
+    while ((match = CREATE_TABLE_RE.exec(migrationSql)) !== null) {
+        const tableName = match[1] ?? match[2];
+        if (tableName === undefined)
+            continue;
+        const definition = definitions.get(tableName);
+        if (definition === undefined)
+            continue;
+        const tenantFieldKey = Object.keys(definition.$fields).find((key) => definition.$fields[key]._meta.tenant === true);
+        if (tenantFieldKey === undefined)
+            continue;
+        const columnName = camelToSnake(tenantFieldKey);
+        if (migrationSql.includes(`"${tableName}" ENABLE ROW LEVEL SECURITY`) ||
+            migrationSql.includes(`${tableName} ENABLE ROW LEVEL SECURITY`)) {
+            continue;
+        }
+        rlsBlocks.push(tenantIsolationPolicy(tableName, columnName, sessionVar));
+    }
+    if (rlsBlocks.length === 0)
+        return migrationSql;
+    return migrationSql + ';\n\n' + rlsBlocks.join(';\n\n');
+}
+//# sourceMappingURL=rls-generate.js.map

package/dist/migrate/rls-generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rls-generate.js","sourceRoot":"","sources":["../../src/migrate/rls-generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAExD,MAAM,eAAe,GAAG,8EAA8E,CAAA;AAEtG,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,WAA8C,EAC9C,UAAkB;IAElB,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,IAAI,KAA6B,CAAA;IAEjC,OAAO,CAAC,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,SAAS,KAAK,SAAS;YAAE,SAAQ;QAErC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,UAAU,KAAK,SAAS;YAAE,SAAQ;QAEtC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CACzD,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAE,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CACxD,CAAA;QACD,IAAI,cAAc,KAAK,SAAS;YAAE,SAAQ;QAE1C,MAAM,UAAU,GAAG,YAAY,CAAC,cAAc,CAAC,CAAA;QAE/C,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,SAAS,6BAA6B,CAAC;YACjE,YAAY,CAAC,QAAQ,CAAC,GAAG,SAAS,4BAA4B,CAAC,EAAE,CAAC;YACpE,SAAQ;QACV,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAA;IAE/C,OAAO,YAAY,GAAG,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACzD,CAAC"}

package/dist/migrate/run.d.ts

@@ -0,0 +1,21 @@
+import type { Manifold } from '../pipework.js';
+import type { ResolvedDatabase } from '../config/index.js';
+import { type MigrationCheckResult } from './check.js';
+export interface MigrateOptions {
+    allowDestructive?: boolean;
+    acknowledgeLock?: boolean;
+}
+export interface MigrateResult {
+    database: string;
+    migrationsRun: number;
+    extensions: string[];
+    safetyCheck: MigrationCheckResult;
+}
+export declare class UnsafeMigrationError extends Error {
+    readonly check: MigrationCheckResult;
+    readonly name = "UnsafeMigrationError";
+    constructor(check: MigrationCheckResult, message: string);
+}
+export declare function migrateAll(instance: Manifold, options?: MigrateOptions): Promise<MigrateResult[]>;
+export declare function migrateOne(instance: Manifold, dbConfig: ResolvedDatabase, options?: MigrateOptions): Promise<MigrateResult>;
+//# sourceMappingURL=run.d.ts.map

package/dist/migrate/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/migrate/run.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAE1D,OAAO,EAAmB,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAEvE,MAAM,WAAW,cAAc;IAC7B,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,WAAW,EAAE,oBAAoB,CAAA;CAClC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aAG3B,KAAK,EAAE,oBAAoB;IAF7C,SAAkB,IAAI,0BAAyB;gBAE7B,KAAK,EAAE,oBAAoB,EAC3C,OAAO,EAAE,MAAM;CAIlB;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAU3G;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8CrI"}

package/dist/migrate/run.js

@@ -0,0 +1,66 @@
+import { migrate as drizzleMigrate } from 'drizzle-orm/postgres-js/migrator';
+import { sql } from 'drizzle-orm';
+import { quoteIdentifier } from '../db/identifiers.js';
+import { checkMigrations } from './check.js';
+export class UnsafeMigrationError extends Error {
+    check;
+    name = 'UnsafeMigrationError';
+    constructor(check, message) {
+        super(message);
+        this.check = check;
+    }
+}
+export async function migrateAll(instance, options = {}) {
+    const results = [];
+    for (const [, dbConfig] of instance.config.databases()) {
+        if (dbConfig.migrations === undefined)
+            continue;
+        const result = await migrateOne(instance, dbConfig, options);
+        results.push(result);
+    }
+    return results;
+}
+export async function migrateOne(instance, dbConfig, options = {}) {
+    const safetyCheck = dbConfig.migrations !== undefined
+        ? checkMigrations(dbConfig.migrations)
+        : { safe: true, hasDestructive: false, hasLocking: false, fileHazards: [] };
+    if (safetyCheck.hasDestructive && options.allowDestructive !== true) {
+        throw new UnsafeMigrationError(safetyCheck, `Migration for "${dbConfig.name}" contains destructive operations (DROP TABLE, DROP COLUMN, etc.). ` +
+            `Pass { allowDestructive: true } or use --allow-destructive on the CLI to proceed.`);
+    }
+    if (safetyCheck.hasLocking && options.acknowledgeLock !== true) {
+        throw new UnsafeMigrationError(safetyCheck, `Migration for "${dbConfig.name}" contains operations that acquire heavy locks. ` +
+            `Pass { acknowledgeLock: true } or use --acknowledge-lock on the CLI to proceed.`);
+    }
+    const conn = instance.pool.getOrCreate(dbConfig);
+    let extensionsCreated = [];
+    if (dbConfig.extensions.length > 0) {
+        for (const ext of dbConfig.extensions) {
+            await conn.drizzle.execute(sql.raw(`CREATE EXTENSION IF NOT EXISTS ${quoteIdentifier(ext, 'extension')}`));
+        }
+        extensionsCreated = [...dbConfig.extensions];
+    }
+    const beforeTables = await getMigrationCount(conn.drizzle, dbConfig.migrationTable);
+    await drizzleMigrate(conn.drizzle, {
+        migrationsFolder: dbConfig.migrations,
+        migrationsTable: dbConfig.migrationTable,
+    });
+    const afterTables = await getMigrationCount(conn.drizzle, dbConfig.migrationTable);
+    return {
+        database: dbConfig.name,
+        migrationsRun: afterTables - beforeTables,
+        extensions: extensionsCreated,
+        safetyCheck,
+    };
+}
+async function getMigrationCount(db, table) {
+    try {
+        const result = await db.execute(sql.raw(`SELECT count(*)::int as count FROM ${quoteIdentifier(table, 'migration table')}`));
+        const row = result[0];
+        return row?.count ?? 0;
+    }
+    catch {
+        return 0;
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/migrate/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/migrate/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAC5E,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAGjC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,eAAe,EAA6B,MAAM,YAAY,CAAA;AAcvE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAG3B;IAFA,IAAI,GAAG,sBAAsB,CAAA;IAC/C,YACkB,KAA2B,EAC3C,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHE,UAAK,GAAL,KAAK,CAAsB;IAI7C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAE,UAA0B,EAAE;IAC/E,MAAM,OAAO,GAAoB,EAAE,CAAA;IAEnC,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;QACvD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;YAAE,SAAQ;QAC/C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC5D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAE,QAA0B,EAAE,UAA0B,EAAE;IAC3G,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,KAAK,SAAS;QACnD,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAA0B,CAAA;IAErG,IAAI,WAAW,CAAC,cAAc,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,kBAAkB,QAAQ,CAAC,IAAI,qEAAqE;YACpG,mFAAmF,CACpF,CAAA;IACH,CAAC;IAED,IAAI,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC/D,MAAM,IAAI,oBAAoB,CAC5B,WAAW,EACX,kBAAkB,QAAQ,CAAC,IAAI,kDAAkD;YACjF,iFAAiF,CAClF,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,iBAAiB,GAAa,EAAE,CAAA;IAEpC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,kCAAkC,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5G,CAAC;QACD,iBAAiB,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAEnF,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE;QACjC,gBAAgB,EAAE,QAAQ,CAAC,UAAW;QACtC,eAAe,EAAE,QAAQ,CAAC,cAAc;KACzC,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAElF,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,aAAa,EAAE,WAAW,GAAG,YAAY;QACzC,UAAU,EAAE,iBAAiB;QAC7B,WAAW;KACZ,CAAA;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,EAAwC,EAAE,KAAa;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAc,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,sCAAsC,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAA;QACtI,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAkC,CAAA;QACtD,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC"}

package/dist/migrate/safety.d.ts

@@ -0,0 +1,10 @@
+export type Severity = 'destructive' | 'locking' | 'safe';
+export interface MigrationHazard {
+    severity: Severity;
+    operation: string;
+    statement: string;
+    suggestion: string;
+}
+export declare function analyzeSQL(sql: string): MigrationHazard[];
+export declare function formatHazards(hazards: MigrationHazard[], file: string): string;
+//# sourceMappingURL=safety.d.ts.map

package/dist/migrate/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/migrate/safety.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,MAAM,CAAA;AAEzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AA8ED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAmBzD;AASD,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB9E"}

package/dist/migrate/safety.js

@@ -0,0 +1,115 @@
+const RULES = [
+    // ── Destructive (data loss / backward-incompatible) ───────────────────
+    {
+        pattern: /\bDROP\s+TABLE\b/i,
+        severity: 'destructive',
+        operation: 'DROP TABLE',
+        suggestion: 'Rename the table first, deploy, verify no access, then drop in a follow-up migration.',
+    },
+    {
+        pattern: /\bDROP\s+COLUMN\b/i,
+        severity: 'destructive',
+        operation: 'DROP COLUMN',
+        suggestion: 'Stop reading the column in application code first, then drop in a follow-up migration.',
+    },
+    {
+        pattern: /\bALTER\s+COLUMN\b[^;]*\bSET\s+NOT\s+NULL\b/i,
+        severity: 'destructive',
+        operation: 'SET NOT NULL',
+        suggestion: 'Add a CHECK constraint with NOT VALID, validate it separately, then convert to NOT NULL.',
+    },
+    {
+        pattern: /\bALTER\s+COLUMN\b[^;]*\bTYPE\b/i,
+        severity: 'destructive',
+        operation: 'ALTER COLUMN TYPE',
+        suggestion: 'Add a new column with the target type, backfill, swap reads, then drop the old column.',
+    },
+    {
+        pattern: /\bTRUNCATE\b/i,
+        severity: 'destructive',
+        operation: 'TRUNCATE',
+        suggestion: 'Use DELETE with a WHERE clause if you need to remove rows in a migration.',
+    },
+    // ── Locking (acquires heavy locks, risks downtime under load) ─────────
+    {
+        pattern: /\bCREATE\s+(?:UNIQUE\s+)?INDEX\b(?!\s+CONCURRENTLY)/i,
+        severity: 'locking',
+        operation: 'CREATE INDEX (non-concurrent)',
+        suggestion: 'Use CREATE INDEX CONCURRENTLY to avoid blocking writes.',
+        except: /\bCONCURRENTLY\b/i,
+    },
+    {
+        pattern: /\bRENAME\s+COLUMN\b/i,
+        severity: 'locking',
+        operation: 'RENAME COLUMN',
+        suggestion: 'Add a new column, backfill, migrate reads, then drop the old column.',
+    },
+    {
+        pattern: /\bRENAME\s+TABLE\b/i,
+        severity: 'locking',
+        operation: 'RENAME TABLE',
+        suggestion: 'Create a new table, migrate data, swap reads, then drop the old table.',
+    },
+    {
+        pattern: /\bRENAME\s+TO\b/i,
+        severity: 'locking',
+        operation: 'RENAME TO',
+        suggestion: 'Renames acquire AccessExclusive locks. Consider a multi-step migration instead.',
+        except: /\bRENAME\s+COLUMN\b|\bRENAME\s+TABLE\b/i,
+    },
+    {
+        pattern: /\bADD\s+CONSTRAINT\b[^;]*\bFOREIGN\s+KEY\b(?![^;]*\bNOT\s+VALID\b)/i,
+        severity: 'locking',
+        operation: 'ADD FOREIGN KEY (without NOT VALID)',
+        suggestion: 'Add the constraint with NOT VALID, then VALIDATE CONSTRAINT in a separate statement.',
+    },
+];
+export function analyzeSQL(sql) {
+    const statements = splitStatements(sql);
+    const hazards = [];
+    for (const stmt of statements) {
+        for (const rule of RULES) {
+            if (!rule.pattern.test(stmt))
+                continue;
+            if (rule.except !== undefined && rule.except.test(stmt))
+                continue;
+            hazards.push({
+                severity: rule.severity,
+                operation: rule.operation,
+                statement: stmt.trim().slice(0, 200),
+                suggestion: rule.suggestion,
+            });
+        }
+    }
+    return hazards;
+}
+function splitStatements(sql) {
+    return sql
+        .split(/;/)
+        .map(s => s.trim())
+        .filter(s => s.length > 0 && !s.startsWith('--'));
+}
+export function formatHazards(hazards, file) {
+    const destructive = hazards.filter(h => h.severity === 'destructive');
+    const locking = hazards.filter(h => h.severity === 'locking');
+    const lines = [];
+    lines.push(`  ${file}:`);
+    for (const h of destructive) {
+        lines.push(`    ✗ DESTRUCTIVE: ${h.operation}`);
+        lines.push(`      ${truncate(h.statement, 120)}`);
+        lines.push(`      → ${h.suggestion}`);
+    }
+    for (const h of locking) {
+        lines.push(`    ⚠ LOCKING: ${h.operation}`);
+        lines.push(`      ${truncate(h.statement, 120)}`);
+        lines.push(`      → ${h.suggestion}`);
+    }
+    return lines.join('\n');
+}
+function truncate(s, max) {
+    const oneLine = s.replace(/\s+/g, ' ');
+    if (oneLine.length <= max)
+        return oneLine;
+    return oneLine.slice(0, max - 3) + '...';
+}
+//# sourceMappingURL=safety.js.map

package/dist/migrate/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/migrate/safety.ts"],"names":[],"mappings":"AAiBA,MAAM,KAAK,GAAW;IACpB,yEAAyE;IACzE;QACE,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,uFAAuF;KACpG;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,wFAAwF;KACrG;IACD;QACE,OAAO,EAAE,8CAA8C;QACvD,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,0FAA0F;KACvG;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,mBAAmB;QAC9B,UAAU,EAAE,wFAAwF;KACrG;IACD;QACE,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,UAAU;QACrB,UAAU,EAAE,2EAA2E;KACxF;IAED,yEAAyE;IACzE;QACE,OAAO,EAAE,sDAAsD;QAC/D,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,+BAA+B;QAC1C,UAAU,EAAE,yDAAyD;QACrE,MAAM,EAAE,mBAAmB;KAC5B;IACD;QACE,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,sEAAsE;KACnF;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,wEAAwE;KACrF;IACD;QACE,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,iFAAiF;QAC7F,MAAM,EAAE,yCAAyC;KAClD;IACD;QACE,OAAO,EAAE,qEAAqE;QAC9E,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,qCAAqC;QAChD,UAAU,EAAE,sFAAsF;KACnG;CACF,CAAA;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACvC,MAAM,OAAO,GAAsB,EAAE,CAAA;IAErC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACtC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAEjE,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACpC,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAA0B,EAAE,IAAY;IACpE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,CAAA;IAExB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;QAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACjD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;QAC3C,KAAK,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QACjD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACtC,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,OAAO,CAAA;IACzC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAA;AAC1C,CAAC"}

package/dist/openapi/generate.d.ts

@@ -0,0 +1,13 @@
+import type { RouteRegistration } from '../http/types.js';
+export interface OpenAPIInfo {
+    title: string;
+    version: string;
+    description?: string;
+}
+export interface OpenAPIDocument {
+    openapi: '3.0.3';
+    info: OpenAPIInfo;
+    paths: Record<string, Record<string, unknown>>;
+}
+export declare function generateOpenAPI(info: OpenAPIInfo, routes: readonly RouteRegistration[]): OpenAPIDocument;
+//# sourceMappingURL=generate.d.ts.map

package/dist/openapi/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/openapi/generate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGzD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC/C;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,SAAS,iBAAiB,EAAE,GACnC,eAAe,CA8FjB"}

package/dist/openapi/generate.js

@@ -0,0 +1,84 @@
+import { toJsonSchema } from '../schema/json-schema.js';
+export function generateOpenAPI(info, routes) {
+    const paths = {};
+    for (const route of routes) {
+        const { method, path, handler } = route;
+        const meta = handler.meta;
+        const openApiPath = path.replace(/:(\w+)/g, '{$1}');
+        let pathItem = paths[openApiPath];
+        if (!pathItem) {
+            pathItem = {};
+            paths[openApiPath] = pathItem;
+        }
+        const operation = {};
+        const parameters = [];
+        if (meta.paramsSchema) {
+            const schema = toJsonSchema(meta.paramsSchema);
+            if ('properties' in schema) {
+                const props = schema['properties'];
+                for (const [name, propSchema] of Object.entries(props)) {
+                    parameters.push({
+                        name,
+                        in: 'path',
+                        required: true,
+                        schema: propSchema,
+                    });
+                }
+            }
+        }
+        if (meta.querySchema) {
+            const schema = toJsonSchema(meta.querySchema);
+            if ('properties' in schema) {
+                const props = schema['properties'];
+                const requiredFields = Array.isArray(schema['required']) ? schema['required'] : [];
+                for (const [name, propSchema] of Object.entries(props)) {
+                    parameters.push({
+                        name,
+                        in: 'query',
+                        required: requiredFields.includes(name),
+                        schema: propSchema,
+                    });
+                }
+            }
+        }
+        if (parameters.length > 0) {
+            operation['parameters'] = parameters;
+        }
+        if (meta.inputSchema) {
+            operation['requestBody'] = {
+                required: true,
+                content: {
+                    'application/json': {
+                        schema: toJsonSchema(meta.inputSchema),
+                    },
+                },
+            };
+        }
+        const responses = {};
+        if (meta.outputSchemas.size > 0) {
+            for (const [status, outputSchema] of meta.outputSchemas) {
+                responses[String(status)] = {
+                    description: status === 200 ? 'Successful response' : `${status} response`,
+                    content: {
+                        'application/json': {
+                            schema: toJsonSchema(outputSchema),
+                        },
+                    },
+                };
+            }
+        }
+        else {
+            responses['200'] = { description: 'Successful response' };
+        }
+        if (meta.requiresAuth) {
+            responses['401'] = { description: 'Unauthorized' };
+        }
+        if (meta.permission) {
+            responses['403'] = { description: 'Forbidden' };
+        }
+        operation['responses'] = responses;
+        pathItem[method.toLowerCase()] = operation;
+    }
+    return { openapi: '3.0.3', info, paths };
+}
+//# sourceMappingURL=generate.js.map

package/dist/openapi/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/openapi/generate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAcvD,MAAM,UAAU,eAAe,CAC7B,IAAiB,EACjB,MAAoC;IAEpC,MAAM,KAAK,GAA4C,EAAE,CAAA;IAEzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAEnD,IAAI,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;QACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,EAAE,CAAA;YACb,KAAK,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAA;QAC/B,CAAC;QAED,MAAM,SAAS,GAA4B,EAAE,CAAA;QAE7C,MAAM,UAAU,GAA8B,EAAE,CAAA;QAEhD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC9C,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAA4B,CAAA;gBAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvD,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI;wBACJ,EAAE,EAAE,MAAM;wBACV,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,UAAU;qBACnB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAC7C,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAA4B,CAAA;gBAC7D,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAa,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC9F,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvD,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI;wBACJ,EAAE,EAAE,OAAO;wBACX,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;wBACvC,MAAM,EAAE,UAAU;qBACnB,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,YAAY,CAAC,GAAG,UAAU,CAAA;QACtC,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,SAAS,CAAC,aAAa,CAAC,GAAG;gBACzB,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE;oBACP,kBAAkB,EAAE;wBAClB,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;qBACvC;iBACF;aACF,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAA4B,EAAE,CAAA;QAC7C,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG;oBAC1B,WAAW,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,MAAM,WAAW;oBAC1E,OAAO,EAAE;wBACP,kBAAkB,EAAE;4BAClB,MAAM,EAAE,YAAY,CAAC,YAAY,CAAC;yBACnC;qBACF;iBACF,CAAA;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAA;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,CAAA;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;QACjD,CAAC;QAED,SAAS,CAAC,WAAW,CAAC,GAAG,SAAS,CAAA;QAElC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,GAAG,SAAS,CAAA;IAC5C,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAC1C,CAAC"}

package/dist/openapi/index.d.ts

@@ -0,0 +1,3 @@
+export { generateOpenAPI } from './generate.js';
+export type { OpenAPIDocument, OpenAPIInfo } from './generate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/openapi/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA"}

package/dist/openapi/index.js

@@ -0,0 +1,2 @@
+export { generateOpenAPI } from './generate.js';
+//# sourceMappingURL=index.js.map

package/dist/openapi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/openapi/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA"}

package/dist/openapi/namespace.d.ts

@@ -0,0 +1,7 @@
+import { generateOpenAPI } from './generate.js';
+/** OpenAPI spec generation namespace. */
+export declare const openapi: {
+    /** Generates an OpenAPI 3.1 document from route registrations — schemas derived from fitting() input/output. */
+    generate: typeof generateOpenAPI;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/openapi/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../src/openapi/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,yCAAyC;AACzC,eAAO,MAAM,OAAO;IAClB,gHAAgH;;CAEjH,CAAA"}

package/dist/openapi/namespace.js

@@ -0,0 +1,7 @@
+import { generateOpenAPI } from './generate.js';
+/** OpenAPI spec generation namespace. */
+export const openapi = {
+    /** Generates an OpenAPI 3.1 document from route registrations — schemas derived from fitting() input/output. */
+    generate: generateOpenAPI,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/openapi/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../src/openapi/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE/C,yCAAyC;AACzC,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,gHAAgH;IAChH,QAAQ,EAAE,eAAe;CAC1B,CAAA"}

package/dist/pipeline/define.d.ts

@@ -0,0 +1,3 @@
+import type { PipelineConfig, Pipeline } from './types.js';
+export declare function definePipeline(config: PipelineConfig): Pipeline;
+//# sourceMappingURL=define.d.ts.map

package/dist/pipeline/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/pipeline/define.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAuC,MAAM,YAAY,CAAA;AAI/F,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA6C/D"}

package/dist/pipeline/define.js

@@ -0,0 +1,44 @@
+import { sql } from '../db/sql.js';
+import { executePipeline } from './execute.js';
+import { resumePipeline } from './resume.js';
+export function definePipeline(config) {
+    if (config.steps.length === 0) {
+        throw new Error(`[pipework] Pipeline "${config.name}" must have at least one step.`);
+    }
+    const stepNames = new Set();
+    for (const step of config.steps) {
+        if (stepNames.has(step.name)) {
+            throw new Error(`[pipework] Pipeline "${config.name}" has duplicate step name "${step.name}".`);
+        }
+        stepNames.add(step.name);
+    }
+    return {
+        async execute(db, input, context) {
+            return executePipeline(db, config, input, context);
+        },
+        async resume(db, runId, stepOutput) {
+            return resumePipeline(db, config, runId, stepOutput);
+        },
+        async getStatus(db, runId) {
+            const [row] = await db.execute(sql `
+        SELECT id, pipeline_name, status, current_step, input, started_at, completed_at, error
+        FROM pipework_pipeline_runs
+        WHERE id = ${runId}::uuid
+      `);
+            if (row === undefined)
+                return null;
+            return {
+                id: String(row['id']),
+                pipelineName: String(row['pipeline_name']),
+                status: String(row['status']),
+                currentStep: Number(row['current_step']),
+                input: row['input'],
+                startedAt: new Date(String(row['started_at'])),
+                completedAt: row['completed_at'] !== null ? new Date(String(row['completed_at'])) : null,
+                error: row['error'] ?? null,
+            };
+        },
+        definition: config,
+    };
+}
+//# sourceMappingURL=define.js.map

package/dist/pipeline/define.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/pipeline/define.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAElC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,gCAAgC,CAAC,CAAA;IACtF,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,8BAA8B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAA;QACjG,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,EAAM,EAAE,KAAc,EAAE,OAA+B;YACnE,OAAO,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QACpD,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAM,EAAE,KAAa,EAAE,UAAmB;YACrD,OAAO,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QACtD,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,EAAM,EAAE,KAAa;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;qBAGnB,KAAK;OACnB,CAAC,CAAA;YAEF,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAA;YAElC,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBAC1C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAA0B;gBACtD,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACxC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;gBACnB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC9C,WAAW,EAAE,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;gBACxF,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;aAC5B,CAAA;QACH,CAAC;QAED,UAAU,EAAE,MAAM;KACnB,CAAA;AACH,CAAC"}

package/dist/pipeline/errors.d.ts

@@ -0,0 +1,17 @@
+import { PipeworkError } from '../errors/base.js';
+export declare class PipelineStepError extends PipeworkError {
+    readonly code: "PIPELINE_STEP_FAILED";
+    readonly httpStatus: 500;
+    readonly pipelineName: string;
+    readonly stepName: string;
+    readonly stepIndex: number;
+    constructor(pipelineName: string, stepName: string, stepIndex: number, cause: unknown);
+}
+export declare class PipelineResumeError extends PipeworkError {
+    readonly code: "PIPELINE_RESUME_FAILED";
+    readonly httpStatus: 409;
+    readonly runId: string;
+    readonly reason: string;
+    constructor(runId: string, reason: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/pipeline/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/pipeline/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,qBAAa,iBAAkB,SAAQ,aAAa;IAClD,QAAQ,CAAC,IAAI,EAAG,sBAAsB,CAAS;IAC/C,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;gBAEd,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAUtF;AAED,qBAAa,mBAAoB,SAAQ,aAAa;IACpD,QAAQ,CAAC,IAAI,EAAG,wBAAwB,CAAS;IACjD,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;gBAEX,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAO1C"}