@everystack/cli 0.4.60 → 0.4.64

package/src/cli/commands/db-plan.ts

@@ -43,31 +43,31 @@
 import fs from 'node:fs/promises';
 import { spawnSync } from 'node:child_process';
 import type { ModelDescriptor } from '@everystack/model';
-import { introspectContract, type QueryRunner, type AuthzContract } from '../authz-contract.js';
-import { classifyAdoption, renderAdoptionReport } from '../authz-adoption-class.js';
-import { introspectTableOwners, buildOwnershipReport, renderOwnershipReport } from '../authz-ownership.js';
-import { introspectSchema, type SchemaSnapshot } from '../schema-introspect.js';
-import { readStageStateTwice } from '../stage-read-consistency.js';
-import { FUNCTIONS_SQL, contractFunctionRow } from '../security-catalog.js';
-import { mintEdgePlan, planHash, buildPlanSummary } from '../edge-plan.js';
-import { verifyDescent } from '../git-descent.js';
-import { planBackfills, readBackfillLog } from '../backfill.js';
-import { readSqlDirIfPresent } from './db-sync.js';
-import { currentGitRef } from '../state-apply.js';
-import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source.js';
-import { borrowedSessionRunner, type SessionRunner } from '../session.js';
-import { resolveModelsPath } from '../models-path.js';
-import { resolveConfig, opsFunction } from '../config.js';
-import { resolveOperatorUrlViaStage } from '../direct-venue.js';
-import { lambdaQueryRunner, lambdaSessionRunner } from '../aws.js';
-import { loadModels } from './db-generate.js';
-import { loadDeclaredDerived } from '../declared-derived.js';
-import { governedRoleSet, ungovernedGrants } from '../authz-reconcile.js';
-import { readBaselineFile, checkAgainstBaseline, baselineRefusal } from '../authz-baseline.js';
-import { alterTypeStatementTargets, findAlterTypeDependents, renderAlterTypeRefusal } from '../alter-type-dependents.js';
-import { compileTableContract } from '../authz-compile.js';
-import { reportPipelineLastRun } from './pipeline-run.js';
-import { step, success, fail, info, warn, reserveStdoutForData } from '../output.js';
+import { introspectContract, type QueryRunner, type AuthzContract } from '../authz-contract';
+import { classifyAdoption, renderAdoptionReport } from '../authz-adoption-class';
+import { introspectTableOwners, buildOwnershipReport, renderOwnershipReport } from '../authz-ownership';
+import { introspectSchema, type SchemaSnapshot } from '../schema-introspect';
+import { readStageStateTwice } from '../stage-read-consistency';
+import { FUNCTIONS_SQL, contractFunctionRow } from '../security-catalog';
+import { mintEdgePlan, planHash, buildPlanSummary } from '../edge-plan';
+import { verifyDescent } from '../git-descent';
+import { planBackfills, readBackfillLog } from '../backfill';
+import { readSqlDirIfPresent } from './db-sync';
+import { currentGitRef } from '../state-apply';
+import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source';
+import { borrowedSessionRunner, type SessionRunner } from '../session';
+import { resolveModelsPath } from '../models-path';
+import { resolveConfig, opsFunction } from '../config';
+import { resolveOperatorUrlViaStage } from '../direct-venue';
+import { lambdaQueryRunner, lambdaSessionRunner } from '../aws';
+import { loadModels } from './db-generate';
+import { loadDeclaredDerived } from '../declared-derived';
+import { governedRoleSet, ungovernedGrants } from '../authz-reconcile';
+import { readBaselineFile, checkAgainstBaseline, baselineRefusal } from '../authz-baseline';
+import { alterTypeStatementTargets, findAlterTypeDependents, renderAlterTypeRefusal } from '../alter-type-dependents';
+import { compileTableContract } from '../authz-compile';
+import { reportPipelineLastRun } from './pipeline-run';
+import { step, success, fail, info, warn, reserveStdoutForData } from '../output';
 
 const DEFAULT_OUT = 'db.plan.json';
 

package/src/cli/commands/db-pull.ts

@@ -33,24 +33,24 @@
 
 import fs from 'node:fs/promises';
 import path from 'node:path';
-import { introspectSchema, MATVIEW_COLUMNS_SQL, matviewColumnsByIdentity, type ColumnRow, type ColumnSchema } from '../schema-introspect.js';
-import { fingerprintLive } from '../schema-fingerprint.js';
-import { ungovernedGrants, vestigialSequenceGrants, renderVestigialSequenceGrants, ALWAYS_GOVERNED, type GrantExemption } from '../authz-reconcile.js';
-import { buildStageBaseline, mergeBaseline, readBaselineFile, writeBaselineFile, BASELINE_FILE } from '../authz-baseline.js';
-import { introspectDerived, type DerivedCatalog } from '../derived-introspect.js';
-import { introspectContract, type TableContract, type AuthzContract } from '../authz-contract.js';
-import { introspectTableOwners, buildOwnershipReport, renderOwnershipReport, type TableOwner } from '../authz-ownership.js';
-import { FUNCTIONS_SQL, contractFunctionRow } from '../security-catalog.js';
-import { renderDerivedSource, renderDerivedFile, type DerivedRenderResult } from '../derived-render.js';
-import { renderModelSource, renderModelFiles, pullableTables, skippedInfrastructureTables, modelVarName, ABILITY_PRESETS } from '../model-render.js';
-import { deriveAbilities } from '../authz-derive.js';
-import type { QueryRunner } from '../authz-contract.js';
-import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source.js';
-import { borrowedSessionRunner, type SessionRunner } from '../session.js';
-import { resolveConfig, opsFunction } from '../config.js';
-import { invokeAction, lambdaQueryRunner, lambdaSessionRunner } from '../aws.js';
-import { fail } from '../output.js';
-import { opsAdviceLines } from '../ops-advice.js';
+import { introspectSchema, MATVIEW_COLUMNS_SQL, matviewColumnsByIdentity, type ColumnRow, type ColumnSchema } from '../schema-introspect';
+import { fingerprintLive } from '../schema-fingerprint';
+import { ungovernedGrants, vestigialSequenceGrants, renderVestigialSequenceGrants, ALWAYS_GOVERNED, type GrantExemption } from '../authz-reconcile';
+import { buildStageBaseline, mergeBaseline, readBaselineFile, writeBaselineFile, BASELINE_FILE } from '../authz-baseline';
+import { introspectDerived, type DerivedCatalog } from '../derived-introspect';
+import { introspectContract, type TableContract, type AuthzContract } from '../authz-contract';
+import { introspectTableOwners, buildOwnershipReport, renderOwnershipReport, type TableOwner } from '../authz-ownership';
+import { FUNCTIONS_SQL, contractFunctionRow } from '../security-catalog';
+import { renderDerivedSource, renderDerivedFile, type DerivedRenderResult } from '../derived-render';
+import { renderModelSource, renderModelFiles, pullableTables, skippedInfrastructureTables, modelVarName, ABILITY_PRESETS } from '../model-render';
+import { deriveAbilities } from '../authz-derive';
+import type { QueryRunner } from '../authz-contract';
+import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source';
+import { borrowedSessionRunner, type SessionRunner } from '../session';
+import { resolveConfig, opsFunction } from '../config';
+import { invokeAction, lambdaQueryRunner, lambdaSessionRunner } from '../aws';
+import { fail } from '../output';
+import { opsAdviceLines } from '../ops-advice';
 
 // Progress → stderr, so stdout carries only the rendered source (this command is codegen,
 // not a report — the shared output helpers write to stdout, which would corrupt a redirect).

package/src/cli/commands/db-reconcile.ts

@@ -29,10 +29,10 @@
  * runs it direct. A stage DRY-RUN (no `--apply`) reads through the `db:query` path.
  */
 
-import type { QueryRunner } from '../authz-contract.js';
-import type { SourceObject } from '../derived-source.js';
-import { introspectDerived } from '../derived-introspect.js';
-import { planReconcile, type ReconcilePlan, type ReconcileOptions } from '../derived-plan.js';
+import type { QueryRunner } from '../authz-contract';
+import type { SourceObject } from '../derived-source';
+import { introspectDerived } from '../derived-introspect';
+import { planReconcile, type ReconcilePlan, type ReconcileOptions } from '../derived-plan';
 import {
   renderReconcileSql,
   renderProvenanceUpsert,
@@ -49,16 +49,16 @@ import {
   builderOwnerMode,
   type OwnerApplyMode,
   ENSURE_RECONCILER_SQL,
-} from '../derived-apply.js';
-import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source.js';
-import { borrowedSessionRunner, type SessionRunner } from '../session.js';
-import { resolveOperatorUrlViaStage } from '../direct-venue.js';
-import { withMutationLease, MutationLeaseError } from '../mutation-lease.js';
-import { loadDeclaredDerived, retiredSqlDirAnywhere, retiredSqlDirFlagRefusal, type DeclaredDerived } from '../declared-derived.js';
-import { currentGitRef } from '../state-apply.js';
-import { resolveConfig, opsFunction } from '../config.js';
-import { invokeAction, lambdaQueryRunner, lambdaSessionRunner } from '../aws.js';
-import { step, success, fail, info, warn } from '../output.js';
+} from '../derived-apply';
+import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source';
+import { borrowedSessionRunner, type SessionRunner } from '../session';
+import { resolveOperatorUrlViaStage } from '../direct-venue';
+import { withMutationLease, MutationLeaseError } from '../mutation-lease';
+import { loadDeclaredDerived, retiredSqlDirAnywhere, retiredSqlDirFlagRefusal, type DeclaredDerived } from '../declared-derived';
+import { currentGitRef } from '../state-apply';
+import { resolveConfig, opsFunction } from '../config';
+import { invokeAction, lambdaQueryRunner, lambdaSessionRunner } from '../aws';
+import { step, success, fail, info, warn } from '../output';
 
 // ---------------------------------------------------------------------------
 // The testable core.

package/src/cli/commands/db-refresh.ts

@@ -23,13 +23,13 @@
  * they did not choose.
  */
 
-import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source.js';
-import { loadDeclaredDerived } from '../declared-derived.js';
-import { executeRefresh, matviewIdentities, type RefreshRun } from '../refresh-execute.js';
-import { resolveConfig, opsFunction } from '../config.js';
-import { resolveOperatorUrlViaStage } from '../direct-venue.js';
-import { invokeAction } from '../aws.js';
-import { step, success, fail, info } from '../output.js';
+import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source';
+import { loadDeclaredDerived } from '../declared-derived';
+import { executeRefresh, matviewIdentities, type RefreshRun } from '../refresh-execute';
+import { resolveConfig, opsFunction } from '../config';
+import { resolveOperatorUrlViaStage } from '../direct-venue';
+import { invokeAction } from '../aws';
+import { step, success, fail, info } from '../output';
 
 export async function dbRefreshCommand(flags: Record<string, string>): Promise<void> {
   // The declared matviews, in dependency order (a dependent matview reads its parents' fresh rows).

package/src/cli/commands/db-snapshot.ts

@@ -7,11 +7,11 @@
  * docs/plans/db-backup-restore.md.
  */
 
-import { resolveConfig, type CliConfig } from '../config.js';
-import { createRdsSnapshot, describeRdsSnapshots, type RdsSnapshotSummary } from '../aws.js';
-import { utcStamp } from '../backup.js';
-import { rdsSnapshotIdentifier } from '../rds-snapshot.js';
-import { step, success, fail, info } from '../output.js';
+import { resolveConfig, type CliConfig } from '../config';
+import { createRdsSnapshot, describeRdsSnapshots, type RdsSnapshotSummary } from '../aws';
+import { utcStamp } from '../backup';
+import { rdsSnapshotIdentifier } from '../rds-snapshot';
+import { step, success, fail, info } from '../output';
 
 /**
  * Resolve the RDS DB instance identifier: explicit `--instance` wins, else the deployed

package/src/cli/commands/db-swap.ts

@@ -22,32 +22,32 @@ import { Transform } from 'node:stream';
 import { pipeline } from 'node:stream/promises';
 import { Readable } from 'node:stream';
 import type { ModelDescriptor } from '@everystack/model';
-import { fingerprintModels } from '../schema-fingerprint.js';
-import { resolveModelsPath } from '../models-path.js';
-import { loadModels } from './db-generate.js';
-import { loadDeclaredDerived } from '../declared-derived.js';
-import type { SourceObject } from '../derived-source.js';
-import { pairedDerivedSchemas, renderPairedDerivedBuild, renderSwapSchemaUsage, swapSchemaRoles, expectedIncomingObjects, renderPairedProvenance } from '../swap-pair.js';
-import { introspectDerived } from '../derived-introspect.js';
-import { legacyFunctionIdentity } from '../pg-argtypes.js';
-import { createUrlRunner } from '../db-source.js';
-import { borrowedSessionRunner, type SessionRunner } from '../session.js';
-import type { QueryRunner } from '../authz-contract.js';
-import { executeSwap, type SwapVerdict } from '../swap-execute.js';
-import { startHeartbeat, humanElapsed } from '../swap-heartbeat.js';
-import { formatBytes } from '../bundle-weight.js';
-import { rewriteStatementLine, opensCopyData, closesCopyData } from '../schema-rewrite.js';
-import { resolveOperatorUrlViaStage } from '../direct-venue.js';
-import { withMutationLease, MutationLeaseError } from '../mutation-lease.js';
-import { resolveConfig, opsFunction, type CliConfig } from '../config.js';
-import { invokeAction, presignGet, createRdsSnapshot, describeRdsSnapshots } from '../aws.js';
-import { keyForArtifactId, metaKey, utcStamp } from '../backup.js';
-import { rdsSnapshotIdentifier } from '../rds-snapshot.js';
-import { pollTaskUntilStopped } from '../task-poll.js';
-import { decideSnapshotMode, confirmPhysicalSnapshot, interpretBackupPoll, type SnapshotModeRequest } from '../swap-snapshot.js';
-import { runStageBackup, stageBackupDeps } from '../stage-backup.js';
-import { pgEnvFromUrl, pgKeepaliveConninfo } from './db.js';
-import { step, success, fail, warn, info } from '../output.js';
+import { fingerprintModels } from '../schema-fingerprint';
+import { resolveModelsPath } from '../models-path';
+import { loadModels } from './db-generate';
+import { loadDeclaredDerived } from '../declared-derived';
+import type { SourceObject } from '../derived-source';
+import { pairedDerivedSchemas, renderPairedDerivedBuild, renderSwapSchemaUsage, swapSchemaRoles, expectedIncomingObjects, renderPairedProvenance } from '../swap-pair';
+import { introspectDerived } from '../derived-introspect';
+import { legacyFunctionIdentity } from '../pg-argtypes';
+import { createUrlRunner } from '../db-source';
+import { borrowedSessionRunner, type SessionRunner } from '../session';
+import type { QueryRunner } from '../authz-contract';
+import { executeSwap, type SwapVerdict } from '../swap-execute';
+import { startHeartbeat, humanElapsed } from '../swap-heartbeat';
+import { formatBytes } from '../bundle-weight';
+import { rewriteStatementLine, opensCopyData, closesCopyData } from '../schema-rewrite';
+import { resolveOperatorUrlViaStage } from '../direct-venue';
+import { withMutationLease, MutationLeaseError } from '../mutation-lease';
+import { resolveConfig, opsFunction, type CliConfig } from '../config';
+import { invokeAction, presignGet, createRdsSnapshot, describeRdsSnapshots } from '../aws';
+import { keyForArtifactId, metaKey, utcStamp } from '../backup';
+import { rdsSnapshotIdentifier } from '../rds-snapshot';
+import { pollTaskUntilStopped } from '../task-poll';
+import { decideSnapshotMode, confirmPhysicalSnapshot, interpretBackupPoll, type SnapshotModeRequest } from '../swap-snapshot';
+import { runStageBackup, stageBackupDeps } from '../stage-backup';
+import { pgEnvFromUrl, pgKeepaliveConninfo } from './db';
+import { step, success, fail, warn, info } from '../output';
 
 /** A COPY-aware line transform that rewrites the schema token on statement lines only. */
 function schemaRewriteStream(from: string, to: string): Transform {

package/src/cli/commands/db-sync.ts

@@ -30,12 +30,12 @@
 import fs from 'node:fs/promises';
 import path from 'node:path';
 import type { ModelDescriptor } from '@everystack/model';
-import { introspectContract, type QueryRunner } from '../authz-contract.js';
-import { introspectSchema } from '../schema-introspect.js';
-import { FUNCTIONS_SQL, contractFunctionRow } from '../security-catalog.js';
-import { generateMigrationSql, unmodeledTables } from '../migration-generate.js';
+import { introspectContract, type QueryRunner } from '../authz-contract';
+import { introspectSchema } from '../schema-introspect';
+import { FUNCTIONS_SQL, contractFunctionRow } from '../security-catalog';
+import { generateMigrationSql, unmodeledTables } from '../migration-generate';
 import type { SequenceDescriptor } from '@everystack/model';
-import type { SourceObject } from '../derived-source.js';
+import type { SourceObject } from '../derived-source';
 import {
   applyStateAndVerify,
   classifyGeneratedStatements,
@@ -43,19 +43,19 @@ import {
   currentGitRef,
   type ClassifiedStatements,
   type StateSyncOutcome,
-} from '../state-apply.js';
-import { fingerprintModels } from '../schema-fingerprint.js';
-import { compileDrizzleSource } from '../schema-source.js';
-import type { SourceFile } from '../derived-source.js';
-import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source.js';
-import { borrowedSessionRunner, type SessionRunner } from '../session.js';
-import { planBackfills, readBackfillLog } from '../backfill.js';
-import { resolveModelsPath } from '../models-path.js';
-import { executeReconcile, buildReconcileReport, type ReconcileRun } from './db-reconcile.js';
-import { loadModels } from './db-generate.js';
-import { loadDeclaredDerived, retiredSqlDirAnywhere, retiredSqlDirFlagRefusal, type DeclaredDerived } from '../declared-derived.js';
-import { reportPipelineLastRun } from './pipeline-run.js';
-import { step, success, fail, info, warn } from '../output.js';
+} from '../state-apply';
+import { fingerprintModels } from '../schema-fingerprint';
+import { compileDrizzleSource } from '../schema-source';
+import type { SourceFile } from '../derived-source';
+import { resolveDbSource, createUrlRunner, connectingVia, type DbSource } from '../db-source';
+import { borrowedSessionRunner, type SessionRunner } from '../session';
+import { planBackfills, readBackfillLog } from '../backfill';
+import { resolveModelsPath } from '../models-path';
+import { executeReconcile, buildReconcileReport, type ReconcileRun } from './db-reconcile';
+import { loadModels } from './db-generate';
+import { loadDeclaredDerived, retiredSqlDirAnywhere, retiredSqlDirFlagRefusal, type DeclaredDerived } from '../declared-derived';
+import { reportPipelineLastRun } from './pipeline-run';
+import { step, success, fail, info, warn } from '../output';
 
 const DEFAULT_SCHEMA_OUT = 'db/schema.generated.ts';