Wait for initialized runtime databases

Author: chubes4

packages/cli/src/runtime-services.ts

@@ -172,6 +172,7 @@ async function provisionMysqlDockerService(service: WorkspaceRecipeRuntimeServic
     const { stdout } = await dependencies.execute("docker", ["port", container, "3306/tcp"], { signal, timeout: 10_000 })
     const port = parseLoopbackPort(stdout)
     await dependencies.waitForReady("127.0.0.1", port, 30_000, signal)
+    await waitForMysqlDatabase(container, engine, password, dependencies, 30_000, signal)
     throwIfAborted(signal)
     evidence.readiness = "ready"
     evidence.lifecycle = "provisioned"
@@ -186,6 +187,23 @@ async function provisionMysqlDockerService(service: WorkspaceRecipeRuntimeServic
   }
 }
 
+async function waitForMysqlDatabase(container: string, engine: keyof typeof MYSQL_IMAGES, password: string, dependencies: RuntimeServiceDependencies, timeoutMs: number, signal?: AbortSignal): Promise<void> {
+  const deadline = Date.now() + timeoutMs
+  const client = engine === "mariadb" ? "mariadb" : "mysql"
+  const args = ["exec", "--env", "MYSQL_PWD", container, client, "--protocol=TCP", "--host=127.0.0.1", "--user=runtime", "--database=runtime", "--execute=SELECT 1"]
+  while (Date.now() < deadline) {
+    throwIfAborted(signal)
+    try {
+      await dependencies.execute("docker", args, { env: { ...process.env, MYSQL_PWD: password }, signal, timeout: 5_000 })
+      return
+    } catch (error) {
+      if (signal?.aborted) throw error
+      await abortableDelay(100, signal)
+    }
+  }
+  throw new Error(`MySQL database readiness timed out after ${timeoutMs}ms`)
+}
+
 async function ensureDockerImage(image: string, dependencies: RuntimeServiceDependencies, signal?: AbortSignal): Promise<void> {
   try {
     await dependencies.execute("docker", ["image", "inspect", image], { signal, timeout: 10_000 })

tests/runtime-services.test.ts

@@ -109,6 +109,10 @@ assert.ok(runCall?.args.includes("127.0.0.1::3306"), "Docker publishes MySQL on
 assert.deepEqual(runCall?.args.slice(runCall.args.indexOf("--tmpfs"), runCall.args.indexOf("--tmpfs") + 2), ["--tmpfs", "/var/lib/mysql"])
 assert.equal(runCall?.args.includes("--volume") || runCall?.args.includes("--mount"), false, "Docker uses no persistent volume")
 assert.equal(runCall?.args.some((arg) => arg.includes(provisioned.env.DB_PASSWORD)), false, "credentials never enter Docker argv")
+const readinessCall = calls.find((call) => call.args[0] === "exec")
+assert.ok(readinessCall?.args.includes("mysql"), "MySQL readiness authenticates against the initialized database")
+assert.equal(readinessCall?.args.some((arg) => arg.includes(provisioned.env.DB_PASSWORD)), false, "readiness credentials never enter Docker argv")
+assert.equal(readinessCall?.env?.MYSQL_PWD, provisioned.env.DB_PASSWORD, "readiness credentials use the child environment")
 assert.equal(JSON.stringify(provisioned.evidence).includes(provisioned.env.DB_PASSWORD), false, "credentials never enter evidence")
 assert.equal(runCall?.env?.DOCKER_HOST, process.env.DOCKER_HOST, "Docker provider context is preserved")
 assert.equal(calls[0]?.args[0], "image", "the provider checks the image before starting the service")
@@ -155,7 +159,9 @@ const mariaDbDependencies: RuntimeServiceDependencies = {
 }
 const mariaDb = await provisionRuntimeServices([mariaDbService], { dependencies: mariaDbDependencies })
 const mariaDbRun = mariaDbCalls.find((call) => call.args[0] === "run")
+const mariaDbReadiness = mariaDbCalls.find((call) => call.args[0] === "exec")
 assert.ok(mariaDbRun?.args.includes("mariadb:11.4"))
+assert.ok(mariaDbReadiness?.args.includes("mariadb"), "MariaDB readiness uses the image client")
 assert.ok(mariaDbRun?.args.includes("MARIADB_ALLOW_EMPTY_ROOT_PASSWORD"))
 assert.equal(mariaDbRun?.env?.MARIADB_ALLOW_EMPTY_ROOT_PASSWORD, "yes")
 assert.equal(mariaDbRun?.env?.MYSQL_ALLOW_EMPTY_PASSWORD, undefined)