rightsize 0.1.0

package/dist/modules/keycloak.js

@@ -0,0 +1,67 @@
+import { GenericContainer } from "../core/generic-container.js";
+import { Wait } from "../core/wait.js";
+const HTTP_PORT = 8080;
+const MANAGEMENT_PORT = 9000;
+const STARTUP_TIMEOUT_MS = 120_000;
+/**
+ * A single-node Keycloak container started with `start-dev` (an
+ * in-memory/dev-mode boot — no external database wiring needed for tests).
+ *
+ * Two pins here are version-sensitive and were verified against 26.0.8
+ * specifically:
+ *
+ * - **Env var names**: 26.x renamed the bootstrap-admin variables to
+ *   `KC_BOOTSTRAP_ADMIN_USERNAME`/`KC_BOOTSTRAP_ADMIN_PASSWORD` (older
+ *   releases used `KEYCLOAK_ADMIN`/`KEYCLOAK_ADMIN_PASSWORD`, which 26.x
+ *   does not recognize). Confirmed by the boot log: `KC-SERVICES0077:
+ *   Created temporary admin user with username admin`.
+ * - **Health lives on the management port, not the app port.** 26.x splits
+ *   HTTP (8080) from a separate management interface (9000, confirmed by
+ *   the boot log: "Management interface listening on http://0.0.0.0:9000")
+ *   that serves `/health/ready`; `KC_HEALTH_ENABLED=true` is required for
+ *   that endpoint to exist at all.
+ *
+ * A four-JVM-adjacent Quarkus boot (Keycloak on Quarkus, with Infinispan +
+ * an embedded H2) fits comfortably in `withMemoryLimit(1024)` (measured
+ * ~55% utilization at rest) — set by default here.
+ */
+export class KeycloakContainer extends GenericContainer {
+    adminUsernameState = "admin";
+    adminPasswordState = "admin";
+    constructor(image = "quay.io/keycloak/keycloak:26.0") {
+        super(image);
+        this.withExposedPorts(HTTP_PORT, MANAGEMENT_PORT)
+            .withCommand("start-dev")
+            .withEnv("KC_BOOTSTRAP_ADMIN_USERNAME", this.adminUsernameState)
+            .withEnv("KC_BOOTSTRAP_ADMIN_PASSWORD", this.adminPasswordState)
+            .withEnv("KC_HEALTH_ENABLED", "true")
+            .withMemoryLimit(1024)
+            .waitingFor(Wait.forHttp("/health/ready").forPort(MANAGEMENT_PORT).withStartupTimeout(STARTUP_TIMEOUT_MS));
+    }
+    static async start(image = "quay.io/keycloak/keycloak:26.0") {
+        return (await new KeycloakContainer(image).start());
+    }
+    /** Overrides `KC_BOOTSTRAP_ADMIN_USERNAME` (default `admin`). */
+    withAdminUsername(username) {
+        this.adminUsernameState = username;
+        return this.withEnv("KC_BOOTSTRAP_ADMIN_USERNAME", username);
+    }
+    /** Overrides `KC_BOOTSTRAP_ADMIN_PASSWORD` (default `admin`). */
+    withAdminPassword(password) {
+        this.adminPasswordState = password;
+        return this.withEnv("KC_BOOTSTRAP_ADMIN_PASSWORD", password);
+    }
+    /** The configured bootstrap admin username (default `admin`). */
+    get adminUsername() {
+        return this.adminUsernameState;
+    }
+    /** The configured bootstrap admin password (default `admin`). */
+    get adminPassword() {
+        return this.adminPasswordState;
+    }
+    /** The auth server's base URL (the app HTTP port, 8080). */
+    get authServerUrl() {
+        return `http://${this.host}:${this.getMappedPort(HTTP_PORT)}`;
+    }
+}
+//# sourceMappingURL=keycloak.js.map

package/dist/modules/keycloak.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keycloak.js","sourceRoot":"","sources":["../../src/modules/keycloak.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,iBAAkB,SAAQ,gBAAgB;IAC7C,kBAAkB,GAAG,OAAO,CAAC;IAC7B,kBAAkB,GAAG,OAAO,CAAC;IAErC,YAAY,KAAK,GAAG,gCAAgC;QAClD,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,eAAe,CAAC;aAC9C,WAAW,CAAC,WAAW,CAAC;aACxB,OAAO,CAAC,6BAA6B,EAAE,IAAI,CAAC,kBAAkB,CAAC;aAC/D,OAAO,CAAC,6BAA6B,EAAE,IAAI,CAAC,kBAAkB,CAAC;aAC/D,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;aACpC,eAAe,CAAC,IAAI,CAAC;aACrB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,gCAAgC;QAClE,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAsB,CAAC;IAC3E,CAAC;IAED,iEAAiE;IACjE,iBAAiB,CAAC,QAAgB;QAChC,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAED,iEAAiE;IACjE,iBAAiB,CAAC,QAAgB;QAChC,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAED,iEAAiE;IACjE,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,iEAAiE;IACjE,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,4DAA4D;IAC5D,IAAI,aAAa;QACf,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;IAChE,CAAC;CACF"}

package/dist/modules/mariadb.d.ts

@@ -0,0 +1,56 @@
+import { GenericContainer } from "../core/generic-container.js";
+/**
+ * A single-node MariaDB container. Defaults to a `test`/`test`/`test`
+ * user/password/database trio (plus `MARIADB_ROOT_PASSWORD=test`), mirroring
+ * `MySQLContainer`'s builder shape; call `withUsername`/`withPassword`/
+ * `withDatabase` before `start()` to override any of them. MariaDB speaks
+ * the MySQL wire protocol, so `connectionString` uses the same `mysql://`
+ * scheme and any MySQL client (e.g. `mysql2`) works against it unmodified.
+ *
+ * ### Readiness — empirically pinned, following MySQL's precedent exactly
+ *
+ * Like MySQL 8.4, the official entrypoint boots mariadbd TWICE (a throwaway
+ * "temp server" for init scripts, then for real). The wait anchors on the
+ * real server's `Version:` line, which carries `port: 3306` and the
+ * `mariadb.org binary distribution` marker together, on the same line. The
+ * temp-server boot prints the same line shape but with `port: 0` (no port
+ * bound yet), so it can never false-match. Captured verbatim from a real
+ * `docker run mariadb:11.4` boot with this module's env:
+ *
+ * ```
+ * ...
+ * [Note] mariadbd: ready for connections.
+ * Version: '11.4.12-MariaDB-ubu2404'  socket: '...'  port: 0  mariadb.org binary distribution
+ * ...(init scripts run, temp server shuts down)...
+ * [Note] Server socket created on IP: '0.0.0.0', port: '3306'.
+ * [Note] Server socket created on IP: '::', port: '3306'.
+ * [Note] mariadbd: ready for connections.
+ * Version: '11.4.12-MariaDB-ubu2404'  socket: '...'  port: 3306  mariadb.org binary distribution
+ * ```
+ *
+ * `.*port: 3306.*mariadb\.org binary distribution.*` with `times=1` matches
+ * only the last line above — the temp server's equivalent line has `port: 0`
+ * instead of `port: 3306`, so it never satisfies the pattern.
+ */
+export declare class MariaDBContainer extends GenericContainer {
+    private usernameState;
+    private passwordState;
+    private databaseState;
+    constructor(image?: string);
+    static start(image?: string): Promise<MariaDBContainer>;
+    /** Overrides `MARIADB_USER` (default `test`). */
+    withUsername(username: string): this;
+    /** Overrides `MARIADB_PASSWORD` (default `test`). */
+    withPassword(password: string): this;
+    /** Overrides `MARIADB_DATABASE` (default `test`). */
+    withDatabase(database: string): this;
+    /** The configured database user (default `test`). */
+    get username(): string;
+    /** The configured database password (default `test`). */
+    get password(): string;
+    /** The configured database name (default `test`). */
+    get databaseName(): string;
+    /** A `mysql://` connection string (MariaDB speaks the MySQL wire protocol) for the running container's `databaseName`. */
+    get connectionString(): string;
+}
+//# sourceMappingURL=mariadb.d.ts.map

package/dist/modules/mariadb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mariadb.d.ts","sourceRoot":"","sources":["../../src/modules/mariadb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,qBAAa,gBAAiB,SAAQ,gBAAgB;IACpD,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,aAAa,CAAU;gBAEnB,KAAK,SAAiB;WAcZ,KAAK,CAAC,KAAK,SAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI9E,iDAAiD;IACjD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,qDAAqD;IACrD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,qDAAqD;IACrD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,qDAAqD;IACrD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,yDAAyD;IACzD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,qDAAqD;IACrD,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,0HAA0H;IAC1H,IAAI,gBAAgB,IAAI,MAAM,CAE7B;CACF"}

package/dist/modules/mariadb.js

@@ -0,0 +1,89 @@
+import { GenericContainer } from "../core/generic-container.js";
+import { Wait } from "../core/wait.js";
+const GUEST_PORT = 3306;
+/**
+ * A single-node MariaDB container. Defaults to a `test`/`test`/`test`
+ * user/password/database trio (plus `MARIADB_ROOT_PASSWORD=test`), mirroring
+ * `MySQLContainer`'s builder shape; call `withUsername`/`withPassword`/
+ * `withDatabase` before `start()` to override any of them. MariaDB speaks
+ * the MySQL wire protocol, so `connectionString` uses the same `mysql://`
+ * scheme and any MySQL client (e.g. `mysql2`) works against it unmodified.
+ *
+ * ### Readiness — empirically pinned, following MySQL's precedent exactly
+ *
+ * Like MySQL 8.4, the official entrypoint boots mariadbd TWICE (a throwaway
+ * "temp server" for init scripts, then for real). The wait anchors on the
+ * real server's `Version:` line, which carries `port: 3306` and the
+ * `mariadb.org binary distribution` marker together, on the same line. The
+ * temp-server boot prints the same line shape but with `port: 0` (no port
+ * bound yet), so it can never false-match. Captured verbatim from a real
+ * `docker run mariadb:11.4` boot with this module's env:
+ *
+ * ```
+ * ...
+ * [Note] mariadbd: ready for connections.
+ * Version: '11.4.12-MariaDB-ubu2404'  socket: '...'  port: 0  mariadb.org binary distribution
+ * ...(init scripts run, temp server shuts down)...
+ * [Note] Server socket created on IP: '0.0.0.0', port: '3306'.
+ * [Note] Server socket created on IP: '::', port: '3306'.
+ * [Note] mariadbd: ready for connections.
+ * Version: '11.4.12-MariaDB-ubu2404'  socket: '...'  port: 3306  mariadb.org binary distribution
+ * ```
+ *
+ * `.*port: 3306.*mariadb\.org binary distribution.*` with `times=1` matches
+ * only the last line above — the temp server's equivalent line has `port: 0`
+ * instead of `port: 3306`, so it never satisfies the pattern.
+ */
+export class MariaDBContainer extends GenericContainer {
+    usernameState = "test";
+    passwordState = "test";
+    databaseState = "test";
+    constructor(image = "mariadb:11.4") {
+        super(image);
+        this.withExposedPorts(GUEST_PORT)
+            .withEnv("MARIADB_USER", this.usernameState)
+            .withEnv("MARIADB_PASSWORD", this.passwordState)
+            .withEnv("MARIADB_DATABASE", this.databaseState)
+            .withEnv("MARIADB_ROOT_PASSWORD", "test")
+            // Anchored on the real server's line (see the class doc for the
+            // captured log excerpt).
+            .waitingFor(Wait.forLogMessage(".*port: 3306.*mariadb\\.org binary distribution.*", 1));
+        // No withMemoryLimit override, matching the MySQL precedent: MariaDB's
+        // InnoDB default footprint fits msb's default microVM RAM comfortably.
+    }
+    static async start(image = "mariadb:11.4") {
+        return (await new MariaDBContainer(image).start());
+    }
+    /** Overrides `MARIADB_USER` (default `test`). */
+    withUsername(username) {
+        this.usernameState = username;
+        return this.withEnv("MARIADB_USER", username);
+    }
+    /** Overrides `MARIADB_PASSWORD` (default `test`). */
+    withPassword(password) {
+        this.passwordState = password;
+        return this.withEnv("MARIADB_PASSWORD", password);
+    }
+    /** Overrides `MARIADB_DATABASE` (default `test`). */
+    withDatabase(database) {
+        this.databaseState = database;
+        return this.withEnv("MARIADB_DATABASE", database);
+    }
+    /** The configured database user (default `test`). */
+    get username() {
+        return this.usernameState;
+    }
+    /** The configured database password (default `test`). */
+    get password() {
+        return this.passwordState;
+    }
+    /** The configured database name (default `test`). */
+    get databaseName() {
+        return this.databaseState;
+    }
+    /** A `mysql://` connection string (MariaDB speaks the MySQL wire protocol) for the running container's `databaseName`. */
+    get connectionString() {
+        return `mysql://${this.usernameState}:${this.passwordState}@${this.host}:${this.getMappedPort(GUEST_PORT)}/${this.databaseState}`;
+    }
+}
+//# sourceMappingURL=mariadb.js.map

package/dist/modules/mariadb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mariadb.js","sourceRoot":"","sources":["../../src/modules/mariadb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,OAAO,gBAAiB,SAAQ,gBAAgB;IAC5C,aAAa,GAAG,MAAM,CAAC;IACvB,aAAa,GAAG,MAAM,CAAC;IACvB,aAAa,GAAG,MAAM,CAAC;IAE/B,YAAY,KAAK,GAAG,cAAc;QAChC,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;aAC9B,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC;aAC3C,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC;aAC/C,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC;aAC/C,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC;YACzC,gEAAgE;YAChE,yBAAyB;aACxB,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,mDAAmD,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,uEAAuE;QACvE,uEAAuE;IACzE,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc;QAChD,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAqB,CAAC;IACzE,CAAC;IAED,iDAAiD;IACjD,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,qDAAqD;IACrD,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,qDAAqD;IACrD,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,yDAAyD;IACzD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,qDAAqD;IACrD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,0HAA0H;IAC1H,IAAI,gBAAgB;QAClB,OAAO,WAAW,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;IACpI,CAAC;CACF"}

package/dist/modules/memcached.d.ts

@@ -0,0 +1,24 @@
+import { GenericContainer } from "../core/generic-container.js";
+import type { WaitStrategy, WaitTarget } from "../core/wait.js";
+/**
+ * Speaks the memcached text protocol instead of trusting a bare TCP
+ * connect: the docker userland proxy (and the msb port-publish emulation)
+ * accepts the host port before the guest's memcached process is actually
+ * listening, and memcached itself never logs anything on startup, so
+ * there is no log line to wait on either. Sending `version` and requiring
+ * a `VERSION` reply proves a real memcached is on the other end.
+ */
+export declare class MemcachedRespondsStrategy implements WaitStrategy {
+    private timeoutMs;
+    withStartupTimeout(ms: number): this;
+    private probe;
+    waitUntilReady(target: WaitTarget): Promise<void>;
+}
+/** A single-node Memcached container, ready-checked with a protocol-level `version` probe. */
+export declare class MemcachedContainer extends GenericContainer {
+    constructor(image?: string);
+    static start(image?: string): Promise<MemcachedContainer>;
+    /** The `host:port` address of the running container. */
+    get address(): string;
+}
+//# sourceMappingURL=memcached.d.ts.map

package/dist/modules/memcached.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memcached.d.ts","sourceRoot":"","sources":["../../src/modules/memcached.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAYhE;;;;;;;GAOG;AACH,qBAAa,yBAA0B,YAAW,YAAY;IAC5D,OAAO,CAAC,SAAS,CAAsB;IAEvC,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKpC,OAAO,CAAC,KAAK;IA0CP,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CA0BxD;AAED,8FAA8F;AAC9F,qBAAa,kBAAmB,SAAQ,gBAAgB;gBAC1C,KAAK,SAAyB;WAKpB,KAAK,CAAC,KAAK,SAAyB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIxF,wDAAwD;IACxD,IAAI,OAAO,IAAI,MAAM,CAEpB;CACF"}

package/dist/modules/memcached.js

@@ -0,0 +1,105 @@
+import * as net from "node:net";
+import { GenericContainer } from "../core/generic-container.js";
+import { ContainerLaunchError } from "../core/errors.js";
+const GUEST_PORT = 11211;
+const DEFAULT_TIMEOUT_MS = 60_000;
+const POLL_INTERVAL_MS = 250;
+const PROBE_TIMEOUT_MS = 1_000;
+const LOG_TAIL_LINES = 50;
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+/**
+ * Speaks the memcached text protocol instead of trusting a bare TCP
+ * connect: the docker userland proxy (and the msb port-publish emulation)
+ * accepts the host port before the guest's memcached process is actually
+ * listening, and memcached itself never logs anything on startup, so
+ * there is no log line to wait on either. Sending `version` and requiring
+ * a `VERSION` reply proves a real memcached is on the other end.
+ */
+export class MemcachedRespondsStrategy {
+    timeoutMs = DEFAULT_TIMEOUT_MS;
+    withStartupTimeout(ms) {
+        this.timeoutMs = ms;
+        return this;
+    }
+    probe(host, port) {
+        return new Promise((resolveProbe) => {
+            const socket = new net.Socket();
+            let settled = false;
+            const finish = (ready) => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                clearTimeout(hardTimer);
+                socket.removeAllListeners();
+                socket.destroy();
+                resolveProbe(ready);
+            };
+            // Defense in depth: socket.setTimeout() below is the primary bound,
+            // but a plain JS timer as a backstop costs nothing and closes a class
+            // of bug this codebase has hit before (see the connect/response
+            // timeout added to DockerClient.send()) — a socket-level timeout that,
+            // on at least one runtime, intermittently never fires for a connection
+            // that never completes, leaving nothing else to ever settle this
+            // promise. waitUntilReady's own polling loop can't rescue a probe()
+            // call that never resolves in the first place.
+            const hardTimer = setTimeout(() => finish(false), PROBE_TIMEOUT_MS + 500);
+            socket.setTimeout(PROBE_TIMEOUT_MS);
+            socket.once("timeout", () => finish(false));
+            socket.once("error", () => finish(false));
+            socket.connect(port, host, () => {
+                socket.write("version\r\n");
+            });
+            let buffered = "";
+            socket.on("data", (chunk) => {
+                buffered += chunk.toString("utf8");
+                const line = buffered.split("\r\n")[0] ?? "";
+                if (line.length > 0) {
+                    finish(line.startsWith("VERSION"));
+                }
+            });
+        });
+    }
+    async waitUntilReady(target) {
+        const guestPort = target.exposedGuestPorts[0];
+        if (guestPort === undefined) {
+            return;
+        }
+        const hostPort = target.mappedPort(guestPort);
+        const deadline = Date.now() + this.timeoutMs;
+        for (;;) {
+            if (await this.probe(target.host, hostPort)) {
+                return;
+            }
+            if (Date.now() >= deadline) {
+                let logs;
+                try {
+                    logs = await target.currentLogs();
+                }
+                catch {
+                    logs = "";
+                }
+                const tail = logs.split("\n").slice(-LOG_TAIL_LINES).join("\n");
+                throw new ContainerLaunchError(`Timed out waiting for ${target.describe()} to reply to a VERSION probe.\n${tail}`);
+            }
+            await sleep(POLL_INTERVAL_MS);
+        }
+    }
+}
+/** A single-node Memcached container, ready-checked with a protocol-level `version` probe. */
+export class MemcachedContainer extends GenericContainer {
+    constructor(image = "memcached:1.6-alpine") {
+        super(image);
+        this.withExposedPorts(GUEST_PORT).waitingFor(new MemcachedRespondsStrategy());
+    }
+    static async start(image = "memcached:1.6-alpine") {
+        return (await new MemcachedContainer(image).start());
+    }
+    /** The `host:port` address of the running container. */
+    get address() {
+        return `${this.host}:${this.getMappedPort(GUEST_PORT)}`;
+    }
+}
+//# sourceMappingURL=memcached.js.map

package/dist/modules/memcached.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memcached.js","sourceRoot":"","sources":["../../src/modules/memcached.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAGzD,MAAM,UAAU,GAAG,KAAK,CAAC;AACzB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,yBAAyB;IAC5B,SAAS,GAAG,kBAAkB,CAAC;IAEvC,kBAAkB,CAAC,EAAU;QAC3B,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,IAAY,EAAE,IAAY;QACtC,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;gBACtC,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC;YAEF,oEAAoE;YACpE,sEAAsE;YACtE,gEAAgE;YAChE,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,oEAAoE;YACpE,+CAA+C;YAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,GAAG,CAAC,CAAC;YAE1E,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC9B,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAClC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAkB;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7C,SAAS,CAAC;YACR,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,EAAE,CAAC;gBACZ,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChE,MAAM,IAAI,oBAAoB,CAC5B,yBAAyB,MAAM,CAAC,QAAQ,EAAE,kCAAkC,IAAI,EAAE,CACnF,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED,8FAA8F;AAC9F,MAAM,OAAO,kBAAmB,SAAQ,gBAAgB;IACtD,YAAY,KAAK,GAAG,sBAAsB;QACxC,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,sBAAsB;QACxD,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAuB,CAAC;IAC7E,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO;QACT,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;IAC1D,CAAC;CACF"}

package/dist/modules/mongodb.d.ts

@@ -0,0 +1,19 @@
+import { GenericContainer } from "../core/generic-container.js";
+/**
+ * A single-node MongoDB container running as a one-member replica set
+ * (required for transactions/change streams). `containerIsStarted`
+ * initiates the replica set and waits for a primary to be elected before
+ * `start()` returns, so `connectionString` is always usable immediately
+ * after the container boots.
+ */
+export declare class MongoDBContainer extends GenericContainer {
+    constructor(image?: string);
+    static start(image?: string): Promise<MongoDBContainer>;
+    protected containerIsStarted(): Promise<void>;
+    private pollUntil;
+    /** A `mongodb://` connection string for the running container's `test` database. */
+    get connectionString(): string;
+    /** Alias for `connectionString`; the container is always a (single-node) replica set. */
+    get replicaSetUrl(): string;
+}
+//# sourceMappingURL=mongodb.d.ts.map

package/dist/modules/mongodb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb.d.ts","sourceRoot":"","sources":["../../src/modules/mongodb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAWhE;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,gBAAgB;gBACxC,KAAK,SAAc;WAOT,KAAK,CAAC,KAAK,SAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;cAIlD,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;YAqB9C,SAAS;IAqBvB,oFAAoF;IACpF,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,yFAAyF;IACzF,IAAI,aAAa,IAAI,MAAM,CAE1B;CACF"}

package/dist/modules/mongodb.js

@@ -0,0 +1,69 @@
+import { GenericContainer } from "../core/generic-container.js";
+import { Wait } from "../core/wait.js";
+const GUEST_PORT = 27017;
+const REPLICA_SET_TIMEOUT_MS = 60_000;
+const POLL_INTERVAL_MS = 500;
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+/**
+ * A single-node MongoDB container running as a one-member replica set
+ * (required for transactions/change streams). `containerIsStarted`
+ * initiates the replica set and waits for a primary to be elected before
+ * `start()` returns, so `connectionString` is always usable immediately
+ * after the container boots.
+ */
+export class MongoDBContainer extends GenericContainer {
+    constructor(image = "mongo:8.0") {
+        super(image);
+        this.withExposedPorts(GUEST_PORT)
+            .withCommand("mongod", "--replSet", "docker-rs", "--bind_ip_all")
+            .waitingFor(Wait.forListeningPort());
+    }
+    static async start(image = "mongo:8.0") {
+        return (await new MongoDBContainer(image).start());
+    }
+    async containerIsStarted() {
+        await this.pollUntil("rs.initiate to succeed", async () => {
+            const result = await this.exec("mongosh", "--quiet", "--eval", "try { rs.status() } catch (e) { rs.initiate() }");
+            return result.exitCode === 0;
+        });
+        await this.pollUntil("a PRIMARY to be elected", async () => {
+            const result = await this.exec("mongosh", "--quiet", "--eval", "db.hello().isWritablePrimary");
+            return result.stdout.trim().endsWith("true");
+        });
+    }
+    // Bounded retry through the race between the proxy accepting the
+    // published port and mongod actually listening behind it: the same
+    // early-accept window the read-probe wait strategy handles for a plain
+    // TCP wait also affects the first exec against the guest, so
+    // rs.initiate/db.hello() need their own poll rather than a single shot.
+    async pollUntil(what, cond) {
+        const deadline = Date.now() + REPLICA_SET_TIMEOUT_MS;
+        for (;;) {
+            let ready = false;
+            try {
+                ready = await cond();
+            }
+            catch {
+                ready = false;
+            }
+            if (ready) {
+                return;
+            }
+            if (Date.now() >= deadline) {
+                throw new Error(`Mongo replica set on ${this.host}:${this.getMappedPort(GUEST_PORT)} did not reach '${what}' within ${REPLICA_SET_TIMEOUT_MS / 1000}s`);
+            }
+            await sleep(POLL_INTERVAL_MS);
+        }
+    }
+    /** A `mongodb://` connection string for the running container's `test` database. */
+    get connectionString() {
+        return `mongodb://${this.host}:${this.getMappedPort(GUEST_PORT)}/test?directConnection=true`;
+    }
+    /** Alias for `connectionString`; the container is always a (single-node) replica set. */
+    get replicaSetUrl() {
+        return this.connectionString;
+    }
+}
+//# sourceMappingURL=mongodb.js.map

package/dist/modules/mongodb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongodb.js","sourceRoot":"","sources":["../../src/modules/mongodb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,MAAM,UAAU,GAAG,KAAK,CAAC;AACzB,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gBAAiB,SAAQ,gBAAgB;IACpD,YAAY,KAAK,GAAG,WAAW;QAC7B,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;aAC9B,WAAW,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC;aAChE,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW;QAC7C,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAqB,CAAC;IACzE,CAAC;IAEkB,KAAK,CAAC,kBAAkB;QACzC,MAAM,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAC5B,SAAS,EACT,SAAS,EACT,QAAQ,EACR,iDAAiD,CAClD,CAAC;YACF,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAAC;YAC/F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,mEAAmE;IACnE,uEAAuE;IACvE,6DAA6D;IAC7D,wEAAwE;IAChE,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAA4B;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,CAAC;QACrD,SAAS,CAAC;YACR,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,mBAAmB,IAAI,YAAY,sBAAsB,GAAG,IAAI,GAAG,CACvI,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,IAAI,gBAAgB;QAClB,OAAO,aAAa,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,6BAA6B,CAAC;IAC/F,CAAC;IAED,yFAAyF;IACzF,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;CACF"}

package/dist/modules/mysql.d.ts

@@ -0,0 +1,61 @@
+import { GenericContainer } from "../core/generic-container.js";
+/**
+ * A single-node MySQL container. Defaults to a `test`/`test`/`test`
+ * user/password/database trio (plus `MYSQL_ROOT_PASSWORD=test`) so
+ * `connectionString` is usable with zero configuration; call
+ * `withUsername`/`withPassword`/`withDatabase` before `start()` to override
+ * any of them.
+ *
+ * ### Readiness — empirically pinned, not guessed
+ *
+ * The official entrypoint boots mysqld TWICE: once as a throwaway "temp
+ * server" to run init scripts, then for real. Both prints, plus the X
+ * Plugin's own "ready for connections" line, contain the substring `ready
+ * for connections`, and naively counting occurrences is a trap: the temp
+ * server's X Plugin binds `port: 33060` — whose digits start with `3306`,
+ * so an unanchored `port: 3306` regex false-matches it too. Captured
+ * verbatim from a real `docker run mysql:8.4` boot with this module's env
+ * (`MYSQL_USER=test`, `MYSQL_DATABASE=test`, `MYSQL_ROOT_PASSWORD=test`):
+ *
+ * ```
+ * ...
+ * [System] [MY-011323] [Server] X Plugin ready for connections. Socket: /var/run/mysqld/mysqlx.sock
+ * [System] [MY-010931] [Server] /usr/sbin/mysqld: ready for connections. Version: '8.4.10'  socket: '/var/run/mysqld/mysqld.sock'  port: 0  MySQL Community Server - GPL.
+ * ...(init scripts run, temp server shuts down)...
+ * [System] [MY-011323] [Server] X Plugin ready for connections. Bind-address: '::' port: 33060, socket: /var/run/mysqld/mysqlx.sock
+ * [System] [MY-010931] [Server] /usr/sbin/mysqld: ready for connections. Version: '8.4.10'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  MySQL Community Server - GPL.
+ * ```
+ *
+ * Four lines contain `ready for connections`; only the last is the real
+ * server bound to 3306. The temp server prints `port: 0` (no port yet) and
+ * the X Plugin lines print `33060`, whose `3306` prefix would satisfy an
+ * unanchored match — so `times=N` counting is fragile here (N would have to
+ * track exactly which of the 4 lines are "real", and a naive `times=2`
+ * fires on the temp server's own X-Plugin + mysqld pair, one full boot
+ * early). Instead this pins a regex anchored on the real server's `port:
+ * 3306` with a trailing non-digit-or-end boundary, so it cannot match
+ * `33060`, and `times=1` is then unambiguous (that exact line appears once,
+ * only after the real server is up).
+ */
+export declare class MySQLContainer extends GenericContainer {
+    private usernameState;
+    private passwordState;
+    private databaseState;
+    constructor(image?: string);
+    static start(image?: string): Promise<MySQLContainer>;
+    /** Overrides `MYSQL_USER` (default `test`). */
+    withUsername(username: string): this;
+    /** Overrides `MYSQL_PASSWORD` (default `test`). */
+    withPassword(password: string): this;
+    /** Overrides `MYSQL_DATABASE` (default `test`). */
+    withDatabase(database: string): this;
+    /** The configured database user (default `test`). */
+    get username(): string;
+    /** The configured database password (default `test`). */
+    get password(): string;
+    /** The configured database name (default `test`). */
+    get databaseName(): string;
+    /** A `mysql://` connection string for the running container's `databaseName`. */
+    get connectionString(): string;
+}
+//# sourceMappingURL=mysql.d.ts.map

package/dist/modules/mysql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql.d.ts","sourceRoot":"","sources":["../../src/modules/mysql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAKhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,qBAAa,cAAe,SAAQ,gBAAgB;IAClD,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,aAAa,CAAU;gBAEnB,KAAK,SAAc;WAuBT,KAAK,CAAC,KAAK,SAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAIzE,+CAA+C;IAC/C,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,mDAAmD;IACnD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,mDAAmD;IACnD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,qDAAqD;IACrD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,yDAAyD;IACzD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,qDAAqD;IACrD,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,iFAAiF;IACjF,IAAI,gBAAgB,IAAI,MAAM,CAE7B;CACF"}

package/dist/modules/mysql.js

@@ -0,0 +1,101 @@
+import { GenericContainer } from "../core/generic-container.js";
+import { Wait } from "../core/wait.js";
+const GUEST_PORT = 3306;
+/**
+ * A single-node MySQL container. Defaults to a `test`/`test`/`test`
+ * user/password/database trio (plus `MYSQL_ROOT_PASSWORD=test`) so
+ * `connectionString` is usable with zero configuration; call
+ * `withUsername`/`withPassword`/`withDatabase` before `start()` to override
+ * any of them.
+ *
+ * ### Readiness — empirically pinned, not guessed
+ *
+ * The official entrypoint boots mysqld TWICE: once as a throwaway "temp
+ * server" to run init scripts, then for real. Both prints, plus the X
+ * Plugin's own "ready for connections" line, contain the substring `ready
+ * for connections`, and naively counting occurrences is a trap: the temp
+ * server's X Plugin binds `port: 33060` — whose digits start with `3306`,
+ * so an unanchored `port: 3306` regex false-matches it too. Captured
+ * verbatim from a real `docker run mysql:8.4` boot with this module's env
+ * (`MYSQL_USER=test`, `MYSQL_DATABASE=test`, `MYSQL_ROOT_PASSWORD=test`):
+ *
+ * ```
+ * ...
+ * [System] [MY-011323] [Server] X Plugin ready for connections. Socket: /var/run/mysqld/mysqlx.sock
+ * [System] [MY-010931] [Server] /usr/sbin/mysqld: ready for connections. Version: '8.4.10'  socket: '/var/run/mysqld/mysqld.sock'  port: 0  MySQL Community Server - GPL.
+ * ...(init scripts run, temp server shuts down)...
+ * [System] [MY-011323] [Server] X Plugin ready for connections. Bind-address: '::' port: 33060, socket: /var/run/mysqld/mysqlx.sock
+ * [System] [MY-010931] [Server] /usr/sbin/mysqld: ready for connections. Version: '8.4.10'  socket: '/var/run/mysqld/mysqld.sock'  port: 3306  MySQL Community Server - GPL.
+ * ```
+ *
+ * Four lines contain `ready for connections`; only the last is the real
+ * server bound to 3306. The temp server prints `port: 0` (no port yet) and
+ * the X Plugin lines print `33060`, whose `3306` prefix would satisfy an
+ * unanchored match — so `times=N` counting is fragile here (N would have to
+ * track exactly which of the 4 lines are "real", and a naive `times=2`
+ * fires on the temp server's own X-Plugin + mysqld pair, one full boot
+ * early). Instead this pins a regex anchored on the real server's `port:
+ * 3306` with a trailing non-digit-or-end boundary, so it cannot match
+ * `33060`, and `times=1` is then unambiguous (that exact line appears once,
+ * only after the real server is up).
+ */
+export class MySQLContainer extends GenericContainer {
+    usernameState = "test";
+    passwordState = "test";
+    databaseState = "test";
+    constructor(image = "mysql:8.4") {
+        super(image);
+        this.withExposedPorts(GUEST_PORT)
+            .withEnv("MYSQL_USER", this.usernameState)
+            .withEnv("MYSQL_PASSWORD", this.passwordState)
+            .withEnv("MYSQL_DATABASE", this.databaseState)
+            .withEnv("MYSQL_ROOT_PASSWORD", "test")
+            // Anchored on the real server's line (see the class doc for the
+            // captured log excerpt and why an unanchored "port: 3306" or a naive
+            // times=2 both misfire on the temp-server boot).
+            // First boot initializes the datafiles and boots mysqld twice (the
+            // temp server for init scripts, then the real one). On a fast host
+            // that finishes well under 60s, but a loaded Windows CI runner's
+            // first boot overruns the 60s default — 120s absorbs the slow case
+            // without masking a real hang.
+            .waitingFor(Wait.forLogMessage(".*mysqld: ready for connections.*port: 3306($|[^0-9]).*", 1).withStartupTimeout(120_000));
+        // No withMemoryLimit override: unlike SpringCloudConfig's Paketo JVM
+        // image, MySQL 8.4's InnoDB default footprint fits msb's default ~450M
+        // microVM RAM, so no module-level memory floor is warranted here.
+    }
+    static async start(image = "mysql:8.4") {
+        return (await new MySQLContainer(image).start());
+    }
+    /** Overrides `MYSQL_USER` (default `test`). */
+    withUsername(username) {
+        this.usernameState = username;
+        return this.withEnv("MYSQL_USER", username);
+    }
+    /** Overrides `MYSQL_PASSWORD` (default `test`). */
+    withPassword(password) {
+        this.passwordState = password;
+        return this.withEnv("MYSQL_PASSWORD", password);
+    }
+    /** Overrides `MYSQL_DATABASE` (default `test`). */
+    withDatabase(database) {
+        this.databaseState = database;
+        return this.withEnv("MYSQL_DATABASE", database);
+    }
+    /** The configured database user (default `test`). */
+    get username() {
+        return this.usernameState;
+    }
+    /** The configured database password (default `test`). */
+    get password() {
+        return this.passwordState;
+    }
+    /** The configured database name (default `test`). */
+    get databaseName() {
+        return this.databaseState;
+    }
+    /** A `mysql://` connection string for the running container's `databaseName`. */
+    get connectionString() {
+        return `mysql://${this.usernameState}:${this.passwordState}@${this.host}:${this.getMappedPort(GUEST_PORT)}/${this.databaseState}`;
+    }
+}
+//# sourceMappingURL=mysql.js.map

package/dist/modules/mysql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mysql.js","sourceRoot":"","sources":["../../src/modules/mysql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,OAAO,cAAe,SAAQ,gBAAgB;IAC1C,aAAa,GAAG,MAAM,CAAC;IACvB,aAAa,GAAG,MAAM,CAAC;IACvB,aAAa,GAAG,MAAM,CAAC;IAE/B,YAAY,KAAK,GAAG,WAAW;QAC7B,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;aAC9B,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC;aACzC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC;aAC7C,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC;aAC7C,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;YACvC,gEAAgE;YAChE,qEAAqE;YACrE,iDAAiD;YACjD,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,mEAAmE;YACnE,+BAA+B;aAC9B,UAAU,CACT,IAAI,CAAC,aAAa,CAAC,yDAAyD,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAC7G,CAAC;QACJ,qEAAqE;QACrE,uEAAuE;QACvE,kEAAkE;IACpE,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW;QAC7C,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAmB,CAAC;IACrE,CAAC;IAED,+CAA+C;IAC/C,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,mDAAmD;IACnD,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,mDAAmD;IACnD,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,yDAAyD;IACzD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,qDAAqD;IACrD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,iFAAiF;IACjF,IAAI,gBAAgB;QAClB,OAAO,WAAW,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;IACpI,CAAC;CACF"}