@happyvertical/smrt-cli 0.51.11 → 0.51.13

package/dist/{commands-D2o62iRL.js → commands-BQwEHPr9.js}

@@ -36,6 +36,8 @@ var SENSITIVE_QUERY_PARAMS = /* @__PURE__ */ new Set([
 	"password",
 	"token"
 ]);
+var CONNECTION_STRING_USERINFO_PATTERN = /([a-z][a-z0-9+.-]*:\/\/[^:\s/@]*:)[^\n]*@/gi;
+var SENSITIVE_QUERY_PARAM_PATTERN = /([?&](?:access_token|apikey|api_key|auth|auth_token|password|token)=)[^&\s]+/gi;
 function redactConnectionString(value) {
 	let redacted = value;
 	try {
@@ -44,9 +46,25 @@ function redactConnectionString(value) {
 		for (const key of [...url.searchParams.keys()]) if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) url.searchParams.set(key, "***");
 		redacted = url.toString();
 	} catch {
-		redacted = value.replace(/([a-z][a-z0-9+.-]*:\/\/[^:\s/@]+:)[^@\s]+(@)/gi, "$1***$2");
+		redacted = value.replace(CONNECTION_STRING_USERINFO_PATTERN, "$1***@");
 	}
-	return redacted.replace(/([?&](?:access_token|apikey|api_key|auth|auth_token|password|token)=)[^&\s]+/gi, "$1***");
+	return redacted.replace(SENSITIVE_QUERY_PARAM_PATTERN, "$1***");
+}
+/**
+* Redact connection-string credentials embedded anywhere inside arbitrary
+* text, rather than a standalone URL value.
+*
+* Command failure paths surface driver/error text (`error.message`,
+* `error.stack`, wrapped `originalError`/`sql` context) that can itself
+* contain the connection string a command was given — for example a
+* malformed-URL parse error, or a client library that echoes the DSN it
+* tried. `redactConnectionString` expects its whole input to parse as a URL;
+* this scrubs matches wherever they occur in a larger, unknown-shaped string
+* and never throws.
+*/
+function redactConnectionStringsInText(text) {
+	if (!text) return text;
+	return text.replace(CONNECTION_STRING_USERINFO_PATTERN, "$1***@").replace(SENSITIVE_QUERY_PARAM_PATTERN, "$1***");
 }
 /**
 * Quote a SQL identifier (table name, column name, etc.).
@@ -204,10 +222,10 @@ var configExportCommand = {
 			console.log("  };");
 			console.log("");
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to export configuration:");
-				if (error instanceof Error) console.error(`   ${error.message}`);
+				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -1402,10 +1420,10 @@ var dbDiffCommand = {
 			console.log("\n💡 Schema migrations are manifest-driven.");
 			console.log("   Update @smrt object definitions, then run smrt db:migrate.\n");
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to generate diff:");
-				if (error instanceof Error) console.error(`   ${error.message}`);
+				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -1609,7 +1627,11 @@ var dbHistoryCommand = {
 				failedAssessments = assessFailedMigrations(failedHistory, null);
 			}
 			const failedAssessmentsByName = new Map(failedAssessments.map((item) => [item.name, item]));
-			const annotatedHistory = history.map((m) => {
+			const annotatedHistory = history.map((row) => {
+				const m = {
+					...row,
+					error_message: row.error_message ? redactConnectionStringsInText(row.error_message) : row.error_message
+				};
 				if (m.status !== "failed") return {
 					...m,
 					classification: null,
@@ -1708,10 +1730,10 @@ var dbHistoryCommand = {
 			console.log("   smrt db:rollback   - Rollback migrations");
 			console.log();
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to get migration history:");
-				if (error instanceof Error) console.error(`   ${error.message}`);
+				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -1763,6 +1785,21 @@ function formatOrphanCountLine(count) {
 	const marker = count.nullable ? "" : " [NOT NULL]";
 	return `${count.childTable}.${count.childColumn} -> ${count.parentTable}.${count.parentColumn}: ${count.orphanCount} orphan(s)${marker}`;
 }
+/**
+* Scrub connection-string credentials from each skipped relationship's
+* `reason`. A `probe_failed` reason is the database driver's error text,
+* which can echo the DSN, so both the JSON and human outputs render this
+* redacted copy.
+*/
+function redactOrphanReport(report) {
+	return {
+		...report,
+		skipped: report.skipped.map((skip) => ({
+			...skip,
+			reason: redactConnectionStringsInText(skip.reason)
+		}))
+	};
+}
 /** Render the full report as console lines. */
 function formatOrphanReport(report, options = {}) {
 	const lines = [];
@@ -1842,7 +1879,7 @@ var dbOrphansCommand = {
 			});
 			await autoDiscoverAndLoad();
 			const manifestSchemas = ObjectRegistry.getAllSchemasAsDefinitions();
-			const report = await collectForeignKeyOrphanCounts(db, manifestSchemas, { engineHint: dbType });
+			const report = redactOrphanReport(await collectForeignKeyOrphanCounts(db, manifestSchemas, { engineHint: dbType }));
 			if (options.json) {
 				console.log(JSON.stringify(report, null, 2));
 				return;
@@ -1850,10 +1887,10 @@ var dbOrphansCommand = {
 			for (const line of formatOrphanReport(report, { verbose: options.verbose })) console.log(line);
 			console.log();
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to collect the orphan report:");
-				if (error instanceof Error) console.error(`   ${error.message}`);
+				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 		} finally {
@@ -2044,6 +2081,21 @@ function buildPrunePolicy(configured, options) {
 	}
 	return policy;
 }
+/**
+* Scrub connection-string credentials from per-task failures. The sweep
+* never throws for a task failure; it stores the driver's error text in
+* `tasks[].error`, which can echo the DSN, so both output forms render this
+* redacted copy.
+*/
+function redactSweepResult(result) {
+	return {
+		...result,
+		tasks: result.tasks.map((task) => task.error ? {
+			...task,
+			error: redactConnectionStringsInText(task.error)
+		} : task)
+	};
+}
 /** Render a completed sweep as an operator-readable table. */
 function formatSweepResult(result) {
 	const lines = [];
@@ -2124,7 +2176,7 @@ var dbPruneCommand = {
 			const { config: smrtConfig, importOptionalDependency, runRetentionSweep } = await import("@happyvertical/smrt-core");
 			const loaded = await loadRetentionTaskPackages((specifier) => importOptionalDependency(specifier, "Install it in the project to include its retention tasks."));
 			const policy = buildPrunePolicy(smrtConfig.toJSON().retention, options);
-			const result = await runRetentionSweep(db, policy);
+			const result = redactSweepResult(await runRetentionSweep(db, policy));
 			const unmatched = unmatchedSkipNames(options.skip, result);
 			if (options.json) console.log(JSON.stringify({
 				...result,
@@ -2141,7 +2193,7 @@ var dbPruneCommand = {
 			}
 			if (result.failed) process.exitCode = 1;
 		} catch (error) {
-			const message = error instanceof Error ? error.message : String(error);
+			const message = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
 			if (options.json) console.log(JSON.stringify({ error: message }));
 			else console.error(`\n❌ Retention sweep failed: ${message}\n`);
 			process.exitCode = 1;
@@ -2428,7 +2480,7 @@ var dbRollbackCommand = {
 					successCount++;
 				} catch (error) {
 					errorCount++;
-					const errorMsg = error instanceof Error ? error.message : String(error);
+					const errorMsg = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
 					if (!options.json) console.error(`  ✗ ${migration.name} failed: ${errorMsg}`);
 					results.push({
 						name: migration.name,
@@ -2436,7 +2488,7 @@ var dbRollbackCommand = {
 						error: errorMsg
 					});
 					stoppedBy = migration.name;
-					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${error.stack}\n`);
+					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactConnectionStringsInText(error.stack)}\n`);
 				}
 			}
 			if (options.json) console.log(JSON.stringify({
@@ -2459,10 +2511,10 @@ var dbRollbackCommand = {
 			}
 			if (errorCount > 0) process.exitCode = 1;
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Rollback failed:");
-				if (error instanceof Error) console.error(`   ${error.message}`);
+				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -2574,7 +2626,7 @@ async function runLiveSchemaParity(options = {}) {
 		return {
 			report: null,
 			database: null,
-			error: error instanceof Error ? error.message : String(error)
+			error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error))
 		};
 	} finally {
 		await closeDatabaseConnection(db);
@@ -3127,7 +3179,10 @@ var dbStatusCommand = {
 			const tracker = new MigrationTracker({ db });
 			await tracker.initialize();
 			const applied = await tracker.getAppliedMigrations();
-			const failed = await tracker.getHistory({ status: "failed" });
+			const failed = (await tracker.getHistory({ status: "failed" })).map((row) => row.error_message ? {
+				...row,
+				error_message: redactConnectionStringsInText(row.error_message)
+			} : row);
 			const { discovered, totalObjects } = await autoDiscoverAndLoad();
 			const schemaContract = await evaluateSchemaContract({
 				discovered,
@@ -3209,15 +3264,18 @@ var dbStatusCommand = {
 						engineHint: dbType
 					});
 				} catch (error) {
-					status.parityError = error instanceof Error ? error.message : String(error);
+					status.parityError = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
 				}
 			} else if (options.parity) status.parityError = "The configured database adapter cannot describe tables, so live-schema parity cannot be verified.";
 			try {
 				const orphanReport = await collectForeignKeyOrphanCounts(db, manifestSchemas, { engineHint: dbType });
 				status.orphanedForeignKeys = affectedOrphanCounts(orphanReport);
-				status.orphanProbeFailures = orphanReport.skipped.filter((skip) => skip.kind === "probe_failed");
+				status.orphanProbeFailures = orphanReport.skipped.filter((skip) => skip.kind === "probe_failed").map((skip) => ({
+					...skip,
+					reason: redactConnectionStringsInText(skip.reason)
+				}));
 			} catch (error) {
-				status.orphansError = error instanceof Error ? error.message : String(error);
+				status.orphansError = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
 			}
 			const failedAssessments = assessFailedMigrations(failed, typeof db.getTableSchema === "function" ? diff : null);
 			status.migrations.failed = {
@@ -3347,10 +3405,10 @@ var dbStatusCommand = {
 			console.log("   smrt db:diff      - Show schema differences");
 			console.log();
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to get migration status:");
-				if (error instanceof Error) console.error(`   ${error.message}`);
+				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -4433,12 +4491,12 @@ var exportCommand = {
 				if (showDrafts) console.log("   Mode: Including drafts");
 			}
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: error instanceof Error ? error.message : String(error) }));
+			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Export failed:");
 				if (error instanceof Error) {
-					console.error(`   ${error.message}`);
-					if (options.verbose) console.error(error.stack);
+					console.error(`   ${redactConnectionStringsInText(error.message)}`);
+					if (options.verbose && error.stack) console.error(redactConnectionStringsInText(error.stack));
 				}
 			}
 			process.exitCode = 1;
@@ -6840,7 +6898,7 @@ var dbDropFrameworkBaseTablesCommand = {
 			});
 			console.log(`\n✓ Dropped ${result.droppedTables.length} table(s) and ${result.droppedIndexes.length} companion index(es): ${result.droppedTables.map((table) => quoteIdentifier(table)).join(", ")}\n`);
 		} catch (error) {
-			console.error(`\n❌ Framework base-table remediation failed: ${error instanceof Error ? error.message : String(error)}\n`);
+			console.error(`\n❌ Framework base-table remediation failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -6890,7 +6948,7 @@ var dbMigrateAgentScheduleSlugsCommand = {
 			});
 			console.log(result.ran ? `✓ Backfilled ${result.updated} AgentSchedule slug(s); no schedules were run.\n` : "No schedule slug migration was needed.\n");
 		} catch (error) {
-			console.error(`\n❌ AgentSchedule slug migration failed: ${error instanceof Error ? error.message : String(error)}\n`);
+			console.error(`\n❌ AgentSchedule slug migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -6984,7 +7042,7 @@ var dbMigrateInt8Command = {
 			});
 			console.log(result.ran ? `\n✓ Widened ${result.widenedColumns.length} column(s) to BIGINT.\n` : "\nNo widening was applied; no legacy int4 columns remain.\n");
 		} catch (error) {
-			console.error(`\n❌ int8 migration failed: ${error instanceof Error ? error.message : String(error)}\n`);
+			console.error(`\n❌ int8 migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7037,7 +7095,7 @@ var dbMigrateNullEqualIndexesCommand = {
 			console.log(`Applied ${result.statements.length} index statements atomically.`);
 			console.log("Refresh/restart database connections in EVERY application process to clear cached index capability probes. Until then the existing upsert fallback remains correct.");
 		} catch (error) {
-			console.error(`NULL-equal conflict-index migration failed: ${error instanceof Error ? error.message : String(error)}`);
+			console.error(`NULL-equal conflict-index migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7369,7 +7427,7 @@ var dbMigrateUuidCommand = {
 				await convertPostgresUuidColumns(tx, declaredUuid, false);
 			});
 		} catch (error) {
-			console.error(`\n❌ uuid migration failed: ${error instanceof Error ? error.message : String(error)}\n`);
+			console.error(`\n❌ uuid migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -8991,7 +9049,7 @@ async function settleDeferredCompatibilityAfterMigrate(db, dbType, { verbose })
 		const { settled } = await ensureDeferredSystemTableCompatibility(db, dbType);
 		if (verbose) console.log(settled ? "Deferred system-table compatibility settled (_smrt_jobs, _smrt_job_events)\n" : "Deferred system-table compatibility pending (jobs tables not present)\n");
 	} catch (error) {
-		console.warn(`⚠️  Deferred system-table compatibility did not complete: ${error instanceof Error ? error.message : String(error)}`);
+		console.warn(`⚠️  Deferred system-table compatibility did not complete: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}`);
 		console.warn("   It will be retried the next time the framework starts.\n");
 	}
 }
@@ -9537,7 +9595,7 @@ export default testManifest;
 								await db.query(`DROP TABLE IF EXISTS ${quoteIdentifier(tableName)}${cascade}`);
 								console.log(`  ✓ Dropped ${tableName}`);
 							} catch (error) {
-								if (options.verbose) console.log(`  ⚠️  Could not drop ${tableName}: ${error}`);
+								if (options.verbose) console.log(`  ⚠️  Could not drop ${tableName}: ${redactConnectionStringsInText(String(error))}`);
 								throw new Error(`Refusing to continue after failing to drop ${tableName}; dependency or foreign-key constraints may still be active.`, { cause: error });
 							}
 						}
@@ -9555,8 +9613,8 @@ export default testManifest;
 				try {
 					await schemaManager.ensureTables(schemas);
 				} catch (error) {
-					console.error(`  ✗ Schema creation failed: ${error}`);
-					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${error.stack}\n`);
+					console.error(`  ✗ Schema creation failed: ${redactConnectionStringsInText(String(error))}`);
+					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactConnectionStringsInText(error.stack)}\n`);
 					throw new Error("Refusing to report database setup success after schema creation failed.", { cause: error });
 				}
 				let tablesCreated = 0;
@@ -9589,12 +9647,12 @@ export default testManifest;
 			} catch (error) {
 				console.error(formatSchemaCommandFailureHeader(error, "\n❌ Database setup failed:"));
 				if (error instanceof Error) {
-					console.error(`   ${error.message}`);
+					console.error(`   ${redactConnectionStringsInText(error.message)}`);
 					if (options.verbose && error.stack) {
 						console.error("\nStack trace:");
-						console.error(error.stack);
+						console.error(redactConnectionStringsInText(error.stack));
 					}
-				} else console.error(error);
+				} else console.error(redactConnectionStringsInText(String(error)));
 				process.exitCode = 1;
 				return;
 			} finally {
@@ -9626,7 +9684,7 @@ export default testManifest;
 				}
 			} catch (error) {
 				console.error("❌ Failed to clear cache:");
-				if (error instanceof Error) console.error(`   ${error.message}`);
+				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
 				process.exit(1);
 			}
 		}
@@ -9764,18 +9822,18 @@ export default testManifest;
 			} catch (error) {
 				if (options.json) console.log(JSON.stringify({
 					timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-					error: error instanceof Error ? error.message : String(error),
+					error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)),
 					duration: Date.now() - startTime
 				}, null, 2));
 				else {
 					console.error("\n❌ Validation failed:");
 					if (error instanceof Error) {
-						console.error(`   ${error.message}`);
+						console.error(`   ${redactConnectionStringsInText(error.message)}`);
 						if (options.verbose && error.stack) {
 							console.error("\nStack trace:");
-							console.error(error.stack);
+							console.error(redactConnectionStringsInText(error.stack));
 						}
-					} else console.error(error);
+					} else console.error(redactConnectionStringsInText(String(error)));
 				}
 				process.exit(1);
 			}
@@ -10018,7 +10076,7 @@ export default testManifest;
 							try {
 								beforeCount = await countOrphanRows(db, countSql);
 							} catch (error) {
-								console.log(`   ✗ ${item.tableName}.${item.column}: orphan-count probe failed, withholding this disposition: ${error instanceof Error ? error.message : String(error)}`);
+								console.log(`   ✗ ${item.tableName}.${item.column}: orphan-count probe failed, withholding this disposition: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}`);
 								continue;
 							}
 							if (!item.action.foreignKey) continue;
@@ -10306,10 +10364,10 @@ export default testManifest;
 						skippedCount += results.filter((result) => result.success && (result.skipped || result.applied === false || result.execution_time_ms === 0)).length;
 					} catch (error) {
 						errorCount++;
-						const errorMsg = error instanceof Error ? error.message : String(error);
+						const errorMsg = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
 						console.error(`  ✗ atomic schema migration failed: ${errorMsg}`);
-						if (error instanceof Error && getErrorContext(error)?.originalError) console.error(`     Cause: ${getErrorContext(error)?.originalError}`);
-						if (options.verbose && error instanceof Error && error.stack) console.error(`\n${error.stack}\n`);
+						if (error instanceof Error && getErrorContext(error)?.originalError) console.error(`     Cause: ${redactConnectionStringsInText(String(getErrorContext(error)?.originalError))}`);
+						if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactConnectionStringsInText(error.stack)}\n`);
 						console.error(deferredIndexMigrations > 0 ? "     Non-index changes in this batch were committed; concurrent index builds that did not finish are recorded failed and will be retried on the next db:migrate." : "     Rolled back all schema changes from this migration batch, including any successful steps shown above.");
 					}
 				}
@@ -10324,7 +10382,7 @@ export default testManifest;
 						const afterCount = await countOrphanRows(db, pending.countSql);
 						console.log(`   ✓ ${pending.tableName}.${pending.column}: nulled ${Math.max(pending.beforeCount - afterCount, 0)} orphan reference(s) (${afterCount} remaining)`);
 					} catch (error) {
-						console.log(`   ✓ ${pending.tableName}.${pending.column}: orphan references nulled and foreign key added (post-apply count unavailable: ${error instanceof Error ? error.message : String(error)})`);
+						console.log(`   ✓ ${pending.tableName}.${pending.column}: orphan references nulled and foreign key added (post-apply count unavailable: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))})`);
 					}
 					console.log();
 				}
@@ -10385,8 +10443,8 @@ export default testManifest;
 									} else if (repair.conflicts.length === 0) stiSkippedCount++;
 								} catch (error) {
 									const qualifiedName = resolution.currentQualifiedName;
-									const errorMsg = error instanceof Error ? error.message : String(error);
-									const originalError = getErrorContext(error)?.originalError;
+									const errorMsg = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
+									const originalError = getErrorContext(error)?.originalError ? redactConnectionStringsInText(String(getErrorContext(error)?.originalError)) : void 0;
 									console.error(`  ✗ ${tableName}: "${metaType}" → "${qualifiedName}" failed: ${originalError || errorMsg}`);
 									stiErrorCount++;
 								}
@@ -10440,17 +10498,17 @@ export default testManifest;
 			} catch (error) {
 				console.error(formatSchemaCommandFailureHeader(error, "\n❌ Migration failed:"));
 				if (error instanceof Error) {
-					console.error(`   ${error.message}`);
+					console.error(`   ${redactConnectionStringsInText(error.message)}`);
 					const ctx = getErrorContext(error);
 					if (ctx) {
-						if (ctx.originalError) console.error(`   Database error: ${ctx.originalError}`);
-						if (ctx.sql) console.error(`   Failed SQL: ${ctx.sql}`);
+						if (ctx.originalError) console.error(`   Database error: ${redactConnectionStringsInText(String(ctx.originalError))}`);
+						if (ctx.sql) console.error(`   Failed SQL: ${redactConnectionStringsInText(String(ctx.sql))}`);
 					}
 					if (options.verbose && error.stack) {
 						console.error("\nStack trace:");
-						console.error(error.stack);
+						console.error(redactConnectionStringsInText(error.stack));
 					}
-				} else console.error(error);
+				} else console.error(redactConnectionStringsInText(String(error)));
 				process.exitCode = 1;
 				return;
 			} finally {

package/dist/index.js

@@ -49,63 +49,63 @@ var _playgroundCommands = null;
 var _workbenchCommands = null;
 async function getGnodeCommands() {
 	if (!_gnodeCommands) {
-		const { gnodeCommands } = await import("./commands-D2o62iRL.js");
+		const { gnodeCommands } = await import("./commands-BQwEHPr9.js");
 		_gnodeCommands = gnodeCommands;
 	}
 	return _gnodeCommands;
 }
 async function getGitCommands() {
 	if (!_gitCommands) {
-		const { gitCommands } = await import("./commands-D2o62iRL.js");
+		const { gitCommands } = await import("./commands-BQwEHPr9.js");
 		_gitCommands = gitCommands;
 	}
 	return _gitCommands;
 }
 async function getGenerateCommands() {
 	if (!_generateCommands) {
-		const { generateCommands } = await import("./commands-D2o62iRL.js");
+		const { generateCommands } = await import("./commands-BQwEHPr9.js");
 		_generateCommands = generateCommands;
 	}
 	return _generateCommands;
 }
 async function getInitCommands() {
 	if (!_initCommands) {
-		const { initCommands } = await import("./commands-D2o62iRL.js");
+		const { initCommands } = await import("./commands-BQwEHPr9.js");
 		_initCommands = initCommands;
 	}
 	return _initCommands;
 }
 async function getUtilityCommands() {
 	if (!_utilityCommands) {
-		const { utilityCommands } = await import("./commands-D2o62iRL.js");
+		const { utilityCommands } = await import("./commands-BQwEHPr9.js");
 		_utilityCommands = utilityCommands;
 	}
 	return _utilityCommands;
 }
 async function getDispatchCommands() {
 	if (!_dispatchCommands) {
-		const { dispatchCommands } = await import("./commands-D2o62iRL.js");
+		const { dispatchCommands } = await import("./commands-BQwEHPr9.js");
 		_dispatchCommands = dispatchCommands;
 	}
 	return _dispatchCommands;
 }
 async function getDocsCommands() {
 	if (!_docsCommands) {
-		const { docsCommands } = await import("./commands-D2o62iRL.js");
+		const { docsCommands } = await import("./commands-BQwEHPr9.js");
 		_docsCommands = docsCommands;
 	}
 	return _docsCommands;
 }
 async function getPlaygroundCommands() {
 	if (!_playgroundCommands) {
-		const { playgroundCommands } = await import("./commands-D2o62iRL.js");
+		const { playgroundCommands } = await import("./commands-BQwEHPr9.js");
 		_playgroundCommands = playgroundCommands;
 	}
 	return _playgroundCommands;
 }
 async function getWorkbenchCommands() {
 	if (!_workbenchCommands) {
-		const { workbenchCommands } = await import("./commands-D2o62iRL.js");
+		const { workbenchCommands } = await import("./commands-BQwEHPr9.js");
 		_workbenchCommands = workbenchCommands;
 	}
 	return _workbenchCommands;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-cli",
-  "version": "0.51.11",
+  "version": "0.51.13",
   "description": "Developer CLI for SMRT framework - introspection, testing, and project management",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,17 +25,17 @@
     }
   },
   "dependencies": {
-    "@happyvertical/ai": "^0.89.11",
-    "@happyvertical/files": "^0.89.11",
-    "@happyvertical/logger": "^0.89.11",
-    "@happyvertical/smrt-agents": "0.51.11",
-    "@happyvertical/smrt-config": "0.51.11",
-    "@happyvertical/smrt-core": "0.51.11",
-    "@happyvertical/smrt-dev-mcp": "0.51.11",
-    "@happyvertical/smrt-playground": "0.51.11",
-    "@happyvertical/smrt-types": "0.51.11",
-    "@happyvertical/sql": "^0.89.11",
-    "@happyvertical/utils": "^0.89.11",
+    "@happyvertical/ai": "^0.89.12",
+    "@happyvertical/files": "^0.89.12",
+    "@happyvertical/logger": "^0.89.12",
+    "@happyvertical/smrt-agents": "0.51.13",
+    "@happyvertical/smrt-config": "0.51.13",
+    "@happyvertical/smrt-core": "0.51.13",
+    "@happyvertical/smrt-dev-mcp": "0.51.13",
+    "@happyvertical/smrt-playground": "0.51.13",
+    "@happyvertical/smrt-types": "0.51.13",
+    "@happyvertical/sql": "^0.89.12",
+    "@happyvertical/utils": "^0.89.12",
     "acorn": "^8.17.0",
     "fast-glob": "3.3.3",
     "tar": "^7.5.19"