@codemarc/blt 1.6.5 → 1.7.0

package/README.md

@@ -13,6 +13,7 @@
 - **Init**: Clone repo script for BLT repositories
 - **WAI**: AI config templates (Claude + Codex: AGENTS.md, skills, rules, commands, settings, MCP, PLAN, IMPLEMENT) — bltwai.com
 - **Build**: Build schema from DDL files, build data from instance directory
+- **Data**: Read-only pull of live menu graph into versioned snapshots; apply to a dev database
 - **Deploy**: Deploy schema/data from SQL files, run a single SQL file
 - **Bucket**: Supabase storage — list buckets, list/upload/download files, get URLs
 - **Workflow**: List, show, delete, reload, and deploy GitHub Actions workflows (requires `gh`)
@@ -71,6 +72,7 @@ blt deploy schema
 | `blt init`    | Clone script for BLT repos                    |
 | `blt wai`     | Claude Code config (claude, agents, skills, rules, commands, settings, mcp) |
 | `blt build`   | Schema (DDL), data (instance)        |
+| `blt data`    | Pull / apply instance data snapshots |
 | `blt deploy`  | Schema, data, sql file               |
 | `blt workflow`| list, show, delete, reload, deploy   |
 | `blt bucket`  | names, list, upload, download, url, clear |
@@ -416,6 +418,66 @@ blt deploy sql ./migrations/001_init.sql
 
 ---
 
+## Data snapshots (`blt data`)
+
+Export **instance-shaped** rows from Postgres into portable **JSON**, **YAML**, or **TOON** ([Token-Oriented Object Notation](https://toonformat.dev)) payloads that mirror `data/schema/instances/<instance>/yaml/`: `table:` / `procedure:` / `function:` targets plus `{ row }[]`. TOON yields smaller prompts for LLM workflows; `blt data apply` accepts `.toon` snapshots the same as JSON/YAML.
+
+**Pulled assets (full pull):** `role_props`, `modules`, `settings` (one file per `kind`, e.g. `10-020-settings-02-location`), `payment_providers` (`10-020-settings-04-payment-providers`), `nodes`, `create_user` + `add_profile_role_by_email` (optional), `insert_tax`, menu graph (`insert_menu`, `insert_category`, `insert_item` split into `10-121-items-menu` + `10-125-items-NN-<tag>`, `insert_modifier_group` split into `10-135-groups-NN-<tag>`).
+
+Use snapshots to seed a disposable dev DB from production-shaped data **without writes on pull**.
+
+### Environment variables
+
+| Variable | Purpose |
+|----------|---------|
+| `BLT_DATA_PULL_URL` | **Recommended.** Read URL for `blt data pull`. Use a replica or READ ONLY role. |
+| `BLT_DATA_LOAD_URL` | Optional dev target for `blt data apply`. Falls back to `SUPABASE_CONNECTION_STRING`. |
+
+If `BLT_DATA_PULL_URL` is unset, pull falls back to `SUPABASE_CONNECTION_STRING` (still runs inside `BEGIN READ ONLY`).
+
+**Never** aim `blt data apply` at production. Replay runs `TRUNCATE … RESTART IDENTITY CASCADE` only on **function-mode** tables **listed in that snapshot’s manifest** (e.g. `groups`, `items`, `categories`, `menus`, and `taxes` when those assets are present), which also clears dependents such as `order_items` referencing `items`. Table / procedure assets use `INSERT` / `CALL` upserts and are not truncated globally.
+
+### Pull / apply flags and caveats
+
+| Flag | Purpose |
+|------|---------|
+| `--skip-users` | Omit `10-070-users` and `10-071-profile-roles-extra`. Use when pulling from prod to avoid staff PII in files. |
+| `--include-secrets` | Include `api_key`, `secret_key_encrypted`, `webhook_secret_encrypted` on `payment_providers` (default: secrets nulled). |
+
+- **`create_user` / PINs:** Pulled rows set `p_pin: null`; PINs are not recoverable from `auth.users`. To restore deterministic dev PINs after apply, re-run `blt build data <instance>` against the same DB from canonical instance YAML, or edit snapshot rows.
+- **`payment_providers`:** If the table is missing (older schema), pull writes an empty asset file.
+- **Item / group file names:** Splits follow content rules (`props.category` vs first `props.tags[]`), not byte-identical parity with hand-authored multi-file YAML (e.g. pizza menu + toppings in one file).
+
+### Commands
+
+```bash
+# Pull (read-only) — writes ./data-snapshots/<instance>/<utc-stamp>/manifest.json + per-asset files
+export BLT_DATA_PULL_URL="postgresql://readonly:...@...:5432/postgres"
+cd /path/to/blt-core-data
+blt data pull laf --format yaml
+blt data pull laf --format toon
+# Prod-safe: omit users / profile_roles junction
+blt data pull prod --skip-users
+
+# Replay onto dev (writes via insert_* SELECTs — dev only)
+export BLT_DATA_LOAD_URL="postgresql://...@localhost:5432/postgres"
+blt data apply ./data-snapshots/laf/2026-05-12T12-30-45Z
+
+# Inspect generated SQL without executing
+blt data apply ./data-snapshots/laf/2026-05-12T12-30-45Z --dry-run
+```
+
+Snapshots default under `data-snapshots/` from the **current working directory**. The **`data`** git repo ignores `data-snapshots/` so accidental commits of customer data are avoided.
+
+### Workflow vs `blt build data`
+
+| Path | Direction |
+|------|-----------|
+| `blt build data` + deploy | Git instance YAML → `dist/data.sql` → DB |
+| `blt data pull` → `blt data apply` | Live DB rows → snapshot files → DB (dev replay) |
+
+---
+
 ## Init Commands
 
 ### `blt init [options]`

package/dist/blt

@@ -13,6 +13,7 @@ import workflowCommand from "./commands/workflow";
 import waiCommand from "./commands/wai";
 import templateCommand from "./commands/template";
 import envCommand from "./commands/env";
+import dataCommand from "./commands/data";
 import { join, dirname } from "node:path";
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -39,6 +40,7 @@ workflowCommand(program);
 waiCommand(program);
 templateCommand(program);
 envCommand(program);
+dataCommand(program);
 // If no command is provided, show help
 const args = process.argv.slice(2);
 if (args.length === 0) {

package/dist/blt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blt.d.ts","sourceRoot":"","sources":["../src/blt.ts"],"names":[],"mappings":";AAwBA,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C"}
+{"version":3,"file":"blt.d.ts","sourceRoot":"","sources":["../src/blt.ts"],"names":[],"mappings":";AAyBA,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C"}

package/dist/blt.js.map

@@ -1 +1 @@
-{"version":3,"file":"blt.js","sourceRoot":"","sources":["../src/blt.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC9C,OAAO,YAAY,MAAM,kBAAkB,CAAC;AAC5C,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC9C,OAAO,YAAY,MAAM,kBAAkB,CAAC;AAC5C,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAC1C,OAAO,UAAU,MAAM,gBAAgB,CAAC;AACxC,OAAO,cAAc,MAAM,oBAAoB,CAAC;AAChD,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAC1C,OAAO,cAAc,MAAM,oBAAoB,CAAC;AAChD,OAAO,eAAe,MAAM,qBAAqB,CAAC;AAClD,OAAO,UAAU,MAAM,gBAAgB,CAAC;AACxC,OAAO,eAAe,MAAM,qBAAqB,CAAC;AAClD,OAAO,UAAU,MAAM,gBAAgB,CAAC;AAExC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAG,IAAI,EAAE,cAAc,CAAC,CAAC;AAE/D,MAAM,UAAU,iBAAiB;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO,WAAW,CAAC,OAAO,CAAC;AAC7B,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;KACjB,OAAO,CAAC,iBAAiB,EAAE,CAAC;KAC5B,WAAW,CAAC,cAAc,CAAC,CAAC;AAE5B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,UAAU,CAAC,OAAO,CAAC,CAAC;AAEtB,uCAAuC;AACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACtB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AACD,OAAO,CAAC,GAAG,EAAE,CAAC"}
+{"version":3,"file":"blt.js","sourceRoot":"","sources":["../src/blt.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC9C,OAAO,YAAY,MAAM,kBAAkB,CAAC;AAC5C,OAAO,aAAa,MAAM,mBAAmB,CAAC;AAC9C,OAAO,YAAY,MAAM,kBAAkB,CAAC;AAC5C,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAC1C,OAAO,UAAU,MAAM,gBAAgB,CAAC;AACxC,OAAO,cAAc,MAAM,oBAAoB,CAAC;AAChD,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAC1C,OAAO,cAAc,MAAM,oBAAoB,CAAC;AAChD,OAAO,eAAe,MAAM,qBAAqB,CAAC;AAClD,OAAO,UAAU,MAAM,gBAAgB,CAAC;AACxC,OAAO,eAAe,MAAM,qBAAqB,CAAC;AAClD,OAAO,UAAU,MAAM,gBAAgB,CAAC;AACxC,OAAO,WAAW,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAG,IAAI,EAAE,cAAc,CAAC,CAAC;AAE/D,MAAM,UAAU,iBAAiB;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,OAAO,WAAW,CAAC,OAAO,CAAC;AAC7B,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;KACjB,OAAO,CAAC,iBAAiB,EAAE,CAAC;KAC5B,WAAW,CAAC,cAAc,CAAC,CAAC;AAE5B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,WAAW,CAAC,OAAO,CAAC,CAAC;AAEvB,uCAAuC;AACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACtB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AACD,OAAO,CAAC,GAAG,EAAE,CAAC"}

package/dist/commands/data/apply.d.ts

@@ -0,0 +1,6 @@
+import type { Logger } from "@caporal/core";
+export type DataApplyOpts = {
+    dryRun: boolean;
+};
+export declare function dataApply(snapshotDir: string, opts: DataApplyOpts, logger: Logger): Promise<void>;
+//# sourceMappingURL=apply.d.ts.map

package/dist/commands/data/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/commands/data/apply.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAc5C,MAAM,MAAM,aAAa,GAAG;IAC3B,MAAM,EAAE,OAAO,CAAC;CAChB,CAAC;AAoNF,wBAAsB,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2NvG"}

package/dist/commands/data/apply.js

@@ -0,0 +1,363 @@
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import yaml from "js-yaml";
+import { decode } from "@toon-format/toon";
+import pg from "pg";
+import { fetchPublicTableColumnUdts, fetchPublicTableGeneratedStoredColumnNames, fetchPublicTableIdentityAlwaysColumns } from "../../lib/data-pull-extra-tables";
+import { getLoadConnectionString, runSqlContent } from "../../lib/database-runner";
+import { jsonToSql, processEnvVars } from "../../lib/yaml-converter";
+import { getApplyTruncateSqlForManifest, sortManifestAssetsForApply, } from "../../lib/data-pull-manifest";
+function readPayload(path, logger) {
+    const raw = readFileSync(path, "utf8");
+    if (path.endsWith(".toon")) {
+        try {
+            return decode(raw);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            logger.error(`Failed to parse TOON: ${path} — ${msg}`);
+            process.exit(1);
+        }
+    }
+    if (path.endsWith(".yaml") || path.endsWith(".yml")) {
+        try {
+            return yaml.load(raw);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            logger.error(`Failed to parse YAML: ${path} — ${msg}`);
+            process.exit(1);
+        }
+    }
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        const msg = e instanceof Error ? e.message : String(e);
+        logger.error(`Failed to parse JSON: ${path} — ${msg}`);
+        process.exit(1);
+    }
+}
+function prepareRows(rows) {
+    return rows.map((r) => ({
+        row: processEnvVars(r.row),
+    }));
+}
+function resolveSqlType(payload, asset) {
+    return payload.sqlType ?? asset.sqlType ?? "function";
+}
+/** Curated assets use bare names; extra-table dumps use `public.table`. */
+function publicTableFromSnapshotTarget(target) {
+    if (!target.startsWith("public."))
+        return undefined;
+    const rest = target.slice("public.".length);
+    return rest.length > 0 ? rest : undefined;
+}
+/** Map snapshot auth.users id → email from create_user asset (for settings FK repair). */
+function loadCreateUserAuthIdToEmail(snapshotDir, manifest, logger) {
+    const m = new Map();
+    const asset = manifest.assets.find((a) => a.function === "create_user");
+    if (!asset)
+        return m;
+    const payload = readPayload(join(snapshotDir, asset.file), logger);
+    for (const pr of payload.rows || []) {
+        const row = processEnvVars((pr.row ?? {}));
+        const email = row.p_email;
+        const aid = row.p_authid;
+        if (typeof email === "string" && typeof aid === "string" && aid.length > 0) {
+            m.set(aid, email);
+        }
+    }
+    return m;
+}
+/**
+ * When target DB already had auth.users for an email, create_user reuses that row's id while
+ * settings rows still carry source UUIDs — replace with a subselect by email so FK holds.
+ */
+function rewriteSettingsAuthidForApply(rows, authidToEmail) {
+    if (authidToEmail.size === 0)
+        return rows;
+    return rows.map(({ row }) => {
+        const authid = row.authid;
+        if (typeof authid !== "string")
+            return { row };
+        const email = authidToEmail.get(authid);
+        if (!email)
+            return { row };
+        return {
+            row: {
+                ...row,
+                authid: { __blt_auth_users_id_by_email: email },
+            },
+        };
+    });
+}
+/**
+ * `audit.changed_by` FK targets `users` (typically `auth.users` ids). Same cross-env issue as
+ * `settings.authid`: emit `(SELECT id FROM auth.users WHERE email = …)` when the snapshot has a
+ * matching `create_user` row; otherwise NULL so apply does not reference missing users.
+ */
+function rewriteAuditChangedByForApply(rows, authidToEmail) {
+    return rows.map(({ row }) => {
+        const changedBy = row.changed_by;
+        if (changedBy === null || changedBy === undefined)
+            return { row };
+        if (typeof changedBy !== "string")
+            return { row };
+        const email = authidToEmail.get(changedBy);
+        if (email) {
+            return {
+                row: {
+                    ...row,
+                    changed_by: { __blt_auth_users_id_by_email: email },
+                },
+            };
+        }
+        return { row: { ...row, changed_by: null } };
+    });
+}
+/**
+ * `pins.authid` FK to `users` (same ids as `auth.users`). Remap like `audit.changed_by`: subselect
+ * by email when we have a `create_user` row; otherwise NULL so apply does not reference missing users.
+ */
+function rewritePinsAuthidForApply(rows, authidToEmail) {
+    return rows.map(({ row }) => {
+        const authid = row.authid;
+        if (authid === null || authid === undefined)
+            return { row };
+        if (typeof authid !== "string")
+            return { row };
+        const email = authidToEmail.get(authid);
+        if (email) {
+            return {
+                row: {
+                    ...row,
+                    authid: { __blt_auth_users_id_by_email: email },
+                },
+            };
+        }
+        return { row: { ...row, authid: null } };
+    });
+}
+/** True when the nodes snapshot carries source UUIDs (required for `devices.node_id` FK). */
+function checkNodesSnapshotHasStableIds(snapshotDir, manifest, logger) {
+    const asset = manifest.assets.find((a) => a.function === "nodes");
+    if (!asset)
+        return false;
+    const filePath = join(snapshotDir, asset.file);
+    if (!existsSync(filePath))
+        return false;
+    const payload = readPayload(filePath, logger);
+    const first = payload.rows?.[0]?.row;
+    const id = first?.id;
+    return typeof id === "string" && id.length > 0;
+}
+/** Legacy pulls omitted `nodes.id`, so target inserts get new UUIDs while `devices` still hold source ids. */
+function nullDevicesNodeIdWhenNodesLackIds(rows) {
+    return rows.map(({ row }) => {
+        if (!Object.prototype.hasOwnProperty.call(row, "node_id"))
+            return { row };
+        return { row: { ...row, node_id: null } };
+    });
+}
+/** Snapshot row set includes any column that is GENERATED ALWAYS AS IDENTITY on the target. */
+function preparedTouchesIdentityAlwaysColumns(prepared, identityAlways) {
+    if (identityAlways.length === 0)
+        return false;
+    const idSet = new Set(identityAlways);
+    for (const pr of prepared) {
+        for (const k of Object.keys(pr.row)) {
+            if (idSet.has(k))
+                return true;
+        }
+    }
+    return false;
+}
+/** Remove stored-generated columns from rows — Postgres rejects explicit values for them on INSERT/UPSERT. */
+function stripGeneratedStoredColumnsFromPrepared(prepared, generatedCols) {
+    if (generatedCols.length === 0)
+        return prepared;
+    const drop = new Set(generatedCols);
+    return prepared.map(({ row }) => {
+        const next = { ...row };
+        for (const c of drop)
+            delete next[c];
+        return { row: next };
+    });
+}
+export async function dataApply(snapshotDir, opts, logger) {
+    const mf = join(snapshotDir, "manifest.json");
+    if (!existsSync(mf)) {
+        logger.error(`manifest.json not found under: ${snapshotDir}`);
+        process.exit(1);
+    }
+    let manifest;
+    try {
+        manifest = JSON.parse(readFileSync(mf, "utf8"));
+    }
+    catch (e) {
+        logger.error(`Invalid manifest.json: ${e instanceof Error ? e.message : String(e)}`);
+        process.exit(1);
+    }
+    const sqlParts = [
+        `-- BLT snapshot apply — instance ${manifest.instance} pulled ${manifest.pulledAt}`,
+        `SET search_path = public, auth, extensions;`,
+        ``,
+    ];
+    const orderedAssets = sortManifestAssetsForApply(manifest.assets);
+    const authidToEmail = loadCreateUserAuthIdToEmail(snapshotDir, manifest, logger);
+    const nodesSnapshotHasStableIds = checkNodesSnapshotHasStableIds(snapshotDir, manifest, logger);
+    if (!nodesSnapshotHasStableIds &&
+        orderedAssets.some((a) => a.function === "public.devices")) {
+        logger.warn("Snapshot `nodes` has no `id` column (legacy pull). Clearing `public.devices.node_id` for apply; re-pull with current CLI to keep device→node links.");
+    }
+    const truncateSql = getApplyTruncateSqlForManifest(orderedAssets);
+    if (truncateSql)
+        sqlParts.push(truncateSql);
+    const url = opts.dryRun ? "" : getLoadConnectionString();
+    let metaClient = null;
+    const udtCache = new Map();
+    const identityAlwaysCache = new Map();
+    const generatedStoredCache = new Map();
+    if (!opts.dryRun) {
+        metaClient = new pg.Client({ connectionString: url });
+        await metaClient.connect();
+    }
+    try {
+        for (const asset of orderedAssets) {
+            const filePath = join(snapshotDir, asset.file);
+            if (!existsSync(filePath)) {
+                logger.error(`Missing asset file referenced in manifest: ${filePath}`);
+                process.exit(1);
+            }
+            const payload = readPayload(filePath, logger);
+            if (payload.function !== asset.function) {
+                logger.error(`Target mismatch for ${asset.id}: manifest=${asset.function} file=${payload.function}`);
+                process.exit(1);
+            }
+            let prepared = prepareRows(payload.rows || []);
+            if (asset.function === "settings" && authidToEmail.size > 0) {
+                prepared = rewriteSettingsAuthidForApply(prepared, authidToEmail);
+            }
+            if (asset.function === "public.audit") {
+                prepared = rewriteAuditChangedByForApply(prepared, authidToEmail);
+            }
+            if (asset.function === "public.pins") {
+                prepared = rewritePinsAuthidForApply(prepared, authidToEmail);
+            }
+            if (asset.function === "public.devices" && !nodesSnapshotHasStableIds) {
+                prepared = nullDevicesNodeIdWhenNodesLackIds(prepared);
+            }
+            if (prepared.length === 0) {
+                sqlParts.push(`-- skip ${asset.id} (no rows)`);
+                continue;
+            }
+            const sqlType = resolveSqlType(payload, asset);
+            let columnUdts = payload.columnUdts && Object.keys(payload.columnUdts).length > 0
+                ? payload.columnUdts
+                : undefined;
+            if (sqlType === "table" &&
+                metaClient &&
+                (!columnUdts || Object.keys(columnUdts).length === 0)) {
+                const pubTable = publicTableFromSnapshotTarget(payload.function);
+                if (pubTable) {
+                    if (!udtCache.has(pubTable)) {
+                        udtCache.set(pubTable, await fetchPublicTableColumnUdts(metaClient, pubTable));
+                    }
+                    columnUdts = udtCache.get(pubTable);
+                }
+            }
+            const pubTable = sqlType === "table" ? publicTableFromSnapshotTarget(payload.function) : undefined;
+            if (metaClient && pubTable) {
+                if (!identityAlwaysCache.has(pubTable)) {
+                    identityAlwaysCache.set(pubTable, await fetchPublicTableIdentityAlwaysColumns(metaClient, pubTable));
+                }
+                if (!generatedStoredCache.has(pubTable)) {
+                    generatedStoredCache.set(pubTable, await fetchPublicTableGeneratedStoredColumnNames(metaClient, pubTable));
+                }
+            }
+            const identityAlwaysCols = pubTable ? (identityAlwaysCache.get(pubTable) ?? []) : [];
+            const generatedStoredCols = pubTable ? (generatedStoredCache.get(pubTable) ?? []) : [];
+            if (generatedStoredCols.length > 0) {
+                prepared = stripGeneratedStoredColumnsFromPrepared(prepared, generatedStoredCols);
+            }
+            const isPaymentProviders = payload.function === "payment_providers";
+            /** Older node snapshots upserted on `id` but DBs often have `UNIQUE (node_code)` — 23505 when codes collide. */
+            const nodesLegacyUpsert = payload.function === "nodes" &&
+                sqlType === "table" &&
+                (!payload.primaryKey?.length ||
+                    (payload.primaryKey.length === 1 && payload.primaryKey[0] === "id"));
+            const excludeFromConflictUpdateMerged = [
+                ...(payload.conflictUpdateExclude ?? []),
+                ...(isPaymentProviders ? ["id"] : []),
+                ...(nodesLegacyUpsert && !(payload.conflictUpdateExclude ?? []).includes("id") ? ["id"] : []),
+                ...identityAlwaysCols,
+                ...generatedStoredCols,
+            ];
+            const excludeForUpsert = excludeFromConflictUpdateMerged.length > 0 ? excludeFromConflictUpdateMerged : undefined;
+            let fragment;
+            if (payload.function === "payment_providers" && !payload.conflictWhere) {
+                const globalRows = prepared.filter((r) => r.row.location_id === null || r.row.location_id === undefined);
+                const scopedRows = prepared.filter((r) => r.row.location_id !== null && r.row.location_id !== undefined);
+                const chunks = [];
+                if (globalRows.length > 0) {
+                    chunks.push(jsonToSql(globalRows, "payment_providers", sqlType, {
+                        conflictColumns: ["provider_type"],
+                        conflictWhere: "location_id IS NULL",
+                        excludeFromConflictUpdate: excludeForUpsert,
+                        columnUdts,
+                        overridingSystemValue: preparedTouchesIdentityAlwaysColumns(globalRows, identityAlwaysCols),
+                    }));
+                }
+                if (scopedRows.length > 0) {
+                    chunks.push(jsonToSql(scopedRows, "payment_providers", sqlType, {
+                        conflictColumns: ["id"],
+                        excludeFromConflictUpdate: excludeForUpsert,
+                        columnUdts,
+                        overridingSystemValue: preparedTouchesIdentityAlwaysColumns(scopedRows, identityAlwaysCols),
+                    }));
+                }
+                fragment = chunks.join("\n\n");
+            }
+            else {
+                fragment = jsonToSql(prepared, payload.function, sqlType, {
+                    conflictColumns: nodesLegacyUpsert
+                        ? ["node_code"]
+                        : (payload.primaryKey ?? (isPaymentProviders ? ["provider_type"] : undefined)),
+                    excludeFromConflictUpdate: excludeForUpsert,
+                    conflictWhere: payload.conflictWhere,
+                    columnUdts,
+                    overridingSystemValue: preparedTouchesIdentityAlwaysColumns(prepared, identityAlwaysCols),
+                });
+            }
+            sqlParts.push(`-- ${payload.assetId} (${prepared.length} rows, ${sqlType})`);
+            sqlParts.push(fragment);
+            if (asset.function === "public.audit" && sqlType === "table") {
+                sqlParts.push([
+                    "-- Resync audit.id sequence after bulk restore (triggers use nextval; without this, duplicate audit_pkey)",
+                    "SELECT setval(",
+                    "  pg_get_serial_sequence('public.audit', 'id'),",
+                    "  COALESCE((SELECT MAX(id) FROM public.audit), 1)",
+                    ");",
+                ].join("\n"));
+            }
+            sqlParts.push(``);
+        }
+    }
+    finally {
+        if (metaClient) {
+            await metaClient.end();
+        }
+    }
+    const bundled = sqlParts.join("\n");
+    if (opts.dryRun) {
+        console.log(bundled);
+        return;
+    }
+    await runSqlContent(bundled, {
+        name: `snapshot:${manifest.instance}`,
+        path: snapshotDir,
+        version: "unknown",
+    }, url);
+}
+//# sourceMappingURL=apply.js.map

package/dist/commands/data/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../../src/commands/data/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,0BAA0B,EAAE,0CAA0C,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACjK,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,GAG1B,MAAM,8BAA8B,CAAC;AAoBtC,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAChD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACJ,OAAO,MAAM,CAAC,GAAG,CAAoB,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC3C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B;IACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvB,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAA4B;KACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB,EAAE,KAAoC;IACrF,OAAO,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,IAAI,UAAU,CAAC;AACvD,CAAC;AAED,2EAA2E;AAC3E,SAAS,6BAA6B,CAAC,MAAc;IACpD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,SAAS,2BAA2B,CACnC,WAAmB,EACnB,QAA0B,EAC1B,MAAc;IAEd,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACnE,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAA4B,CAA4B,CAAC;QACjG,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5E,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;GAGG;AACH,SAAS,6BAA6B,CACrC,IAAwC,EACxC,aAAkC;IAElC,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC3B,OAAO;YACN,GAAG,EAAE;gBACJ,GAAG,GAAG;gBACN,MAAM,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE;aAC/C;SACD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,6BAA6B,CACrC,IAAwC,EACxC,aAAkC;IAElC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAClE,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACX,OAAO;gBACN,GAAG,EAAE;oBACJ,GAAG,GAAG;oBACN,UAAU,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE;iBACnD;aACD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CACjC,IAAwC,EACxC,aAAkC;IAElC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACX,OAAO;gBACN,GAAG,EAAE;oBACJ,GAAG,GAAG;oBACN,MAAM,EAAE,EAAE,4BAA4B,EAAE,KAAK,EAAE;iBAC/C;aACD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,SAAS,8BAA8B,CACtC,WAAmB,EACnB,QAA0B,EAC1B,MAAc;IAEd,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAA0C,CAAC;IAC5E,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC;IACrB,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,8GAA8G;AAC9G,SAAS,iCAAiC,CACzC,IAAwC;IAExC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC1E,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,oCAAoC,CAC5C,QAA4C,EAC5C,cAAwB;IAExB,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC/B,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,SAAS,uCAAuC,CAC/C,QAA4C,EAC5C,aAAuB;IAEvB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QAC/B,MAAM,IAAI,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,WAAmB,EAAE,IAAmB,EAAE,MAAc;IACvF,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAqB,CAAC;IACrE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAa;QAC1B,oCAAoC,QAAQ,CAAC,QAAQ,WAAW,QAAQ,CAAC,QAAQ,EAAE;QACnF,6CAA6C;QAC7C,EAAE;KACF,CAAC;IAEF,MAAM,aAAa,GAAG,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAElE,MAAM,aAAa,GAAG,2BAA2B,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,yBAAyB,GAAG,8BAA8B,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChG,IACC,CAAC,yBAAyB;QAC1B,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC,EACzD,CAAC;QACF,MAAM,CAAC,IAAI,CACV,qJAAqJ,CACrJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,8BAA8B,CAAC,aAAa,CAAC,CAAC;IAClE,IAAI,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;IAEzD,IAAI,UAAU,GAAqB,IAAI,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC3D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAClB,UAAU,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC;QACJ,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,8CAA8C,QAAQ,EAAE,CAAC,CAAC;gBACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,CAAC,KAAK,CACX,uBAAuB,KAAK,CAAC,EAAE,cAAc,KAAK,CAAC,QAAQ,SAAS,OAAO,CAAC,QAAQ,EAAE,CACtF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YACD,IAAI,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC7D,QAAQ,GAAG,6BAA6B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACvC,QAAQ,GAAG,6BAA6B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBACtC,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBACvE,QAAQ,GAAG,iCAAiC,CAAC,QAAQ,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC/C,SAAS;YACV,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC/C,IAAI,UAAU,GACb,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC/D,CAAC,CAAC,OAAO,CAAC,UAAU;gBACpB,CAAC,CAAC,SAAS,CAAC;YACd,IACC,OAAO,KAAK,OAAO;gBACnB,UAAU;gBACV,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EACpD,CAAC;gBACF,MAAM,QAAQ,GAAG,6BAA6B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACjE,IAAI,QAAQ,EAAE,CAAC;oBACd,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC7B,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,0BAA0B,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;oBAChF,CAAC;oBACD,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACrC,CAAC;YACF,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,mBAAmB,CAAC,GAAG,CACtB,QAAQ,EACR,MAAM,qCAAqC,CAAC,UAAU,EAAE,QAAQ,CAAC,CACjE,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzC,oBAAoB,CAAC,GAAG,CACvB,QAAQ,EACR,MAAM,0CAA0C,CAAC,UAAU,EAAE,QAAQ,CAAC,CACtE,CAAC;gBACH,CAAC;YACF,CAAC;YACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,QAAQ,GAAG,uCAAuC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,QAAQ,KAAK,mBAAmB,CAAC;YACpE,gHAAgH;YAChH,MAAM,iBAAiB,GACtB,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC5B,OAAO,KAAK,OAAO;gBACnB,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM;oBAC3B,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACvE,MAAM,+BAA+B,GAAG;gBACvC,GAAG,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;gBACxC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7F,GAAG,kBAAkB;gBACrB,GAAG,mBAAmB;aACtB,CAAC;YACF,MAAM,gBAAgB,GACrB,+BAA+B,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;YAE1F,IAAI,QAAgB,CAAC;YACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAmB,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBACxE,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CACpE,CAAC;gBACF,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CACpE,CAAC;gBACF,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CACV,SAAS,CAAC,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE;wBACnD,eAAe,EAAE,CAAC,eAAe,CAAC;wBAClC,aAAa,EAAE,qBAAqB;wBACpC,yBAAyB,EAAE,gBAAgB;wBAC3C,UAAU;wBACV,qBAAqB,EAAE,oCAAoC,CAC1D,UAAU,EACV,kBAAkB,CAClB;qBACD,CAAC,CACF,CAAC;gBACH,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CACV,SAAS,CAAC,UAAU,EAAE,mBAAmB,EAAE,OAAO,EAAE;wBACnD,eAAe,EAAE,CAAC,IAAI,CAAC;wBACvB,yBAAyB,EAAE,gBAAgB;wBAC3C,UAAU;wBACV,qBAAqB,EAAE,oCAAoC,CAC1D,UAAU,EACV,kBAAkB,CAClB;qBACD,CAAC,CACF,CAAC;gBACH,CAAC;gBACD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACP,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE;oBACzD,eAAe,EAAE,iBAAiB;wBACjC,CAAC,CAAC,CAAC,WAAW,CAAC;wBACf,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAC/E,yBAAyB,EAAE,gBAAgB;oBAC3C,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,UAAU;oBACV,qBAAqB,EAAE,oCAAoC,CAAC,QAAQ,EAAE,kBAAkB,CAAC;iBACzF,CAAC,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,MAAM,UAAU,OAAO,GAAG,CAAC,CAAC;YAC7E,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CACZ;oBACC,2GAA2G;oBAC3G,gBAAgB;oBAChB,iDAAiD;oBACjD,mDAAmD;oBACnD,IAAI;iBACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;YAAS,CAAC;QACV,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC;QACxB,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO;IACR,CAAC;IAED,MAAM,aAAa,CAClB,OAAO,EACP;QACC,IAAI,EAAE,YAAY,QAAQ,CAAC,QAAQ,EAAE;QACrC,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,SAAS;KAClB,EACD,GAAG,CACH,CAAC;AACH,CAAC"}

package/dist/commands/data/helpers.d.ts

@@ -0,0 +1,5 @@
+/** Redact credentials from a Postgres URL for manifest logging. */
+export declare function redactedDbUrl(connectionString: string): string;
+/** ISO-ish UTC timestamp for snapshot folder names. */
+export declare function snapshotTimestamp(): string;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/commands/data/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../src/commands/data/helpers.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAS9D;AAED,uDAAuD;AACvD,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/commands/data/helpers.js

@@ -0,0 +1,19 @@
+/** Redact credentials from a Postgres URL for manifest logging. */
+export function redactedDbUrl(connectionString) {
+    try {
+        const u = new URL(connectionString);
+        if (u.password)
+            u.password = "***";
+        if (u.username)
+            u.username = "***";
+        return u.toString();
+    }
+    catch {
+        return "(unparseable-connection-string)";
+    }
+}
+/** ISO-ish UTC timestamp for snapshot folder names. */
+export function snapshotTimestamp() {
+    return new Date().toISOString().replace(/:/g, "-").replace(/\.\d{3}Z$/, "Z");
+}
+//# sourceMappingURL=helpers.js.map

package/dist/commands/data/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../../src/commands/data/helpers.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,gBAAwB;IACrD,IAAI,CAAC;QACJ,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,QAAQ;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;QACnC,IAAI,CAAC,CAAC,QAAQ;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC;QACnC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,iCAAiC,CAAC;IAC1C,CAAC;AACF,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,iBAAiB;IAChC,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC"}

package/dist/commands/data/pull.d.ts

@@ -0,0 +1,11 @@
+import type { Logger } from "@caporal/core";
+export type DataPullOpts = {
+    outBaseDir: string;
+    format: "json" | "yaml" | "toon";
+    includeUsers: boolean;
+    includeSecrets: boolean;
+    /** When true (default), dump every other `public` base table not covered by the curated manifest. */
+    includeExtraTables: boolean;
+};
+export declare function dataPull(instanceLabel: string, opts: DataPullOpts, logger: Logger): Promise<void>;
+//# sourceMappingURL=pull.d.ts.map

package/dist/commands/data/pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../../src/commands/data/pull.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAe5C,MAAM,MAAM,YAAY,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,qGAAqG;IACrG,kBAAkB,EAAE,OAAO,CAAC;CAC5B,CAAC;AA4CF,wBAAsB,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiEvG"}