@happyvertical/smrt-cli 0.54.4 → 0.55.1

package/dist/{commands-iFti-f80.js → commands-CboMy2vr.js}

@@ -1,4 +1,5 @@
 import { t as resolveManifestEntryPackageName } from "./index.js";
+import { a as redactDatabaseUrlsInText, i as quoteIdentifier, r as formatDatabaseDisplayUrl, t as closeDatabaseConnection } from "./db-command-utils-Cn8tjy7N.js";
 import { t as DEFAULT_CLI_CONFIG } from "./config-hqNo4lzH.js";
 import { addMcpAppsRuntime, assertMcpAppsPluginName, configureMcpAppsConsumerRegistry, mcpAppsCommands, scaffoldMcpAppsPackage, validateMcpAppsPackage } from "./mcp-apps-packaging-CixRnxz_.js";
 import { createRequire } from "node:module";
@@ -27,68 +28,6 @@ import { renderForeignKeyAddStatements } from "@happyvertical/smrt-core/schema";
 import { FRAMEWORK_BASE_TABLE_NAMES, backfillLegacyQualifiedNames, buildIntegerWidthTableStatements, collectIntegerWidthTargets, collectNullEqualIndexTargets, countLegacyQualifiedNameReferences, dropFrameworkBaseTables, migrateNullEqualIndexes, nullEqualIndexStatements, parsePostgresTimeoutMs, planFrameworkBaseTableDrop, preflightIntegerWidthWidening, preflightNullEqualIndexes, widenIntegerColumnsToBigInt } from "@happyvertical/smrt-core/migrations";
 import { buildArchitectureContext, buildKnowledgeIndex, buildReviewContext, checkKnowledgeFreshness, compactContextResult, diffKnowledgeIndex, renderFreshnessResult, renderKnowledgeIndexMarkdown } from "@happyvertical/smrt-dev-mcp/knowledge";
 import { RUNTIME_TOOLS } from "@happyvertical/smrt-dev-mcp/runtime";
-//#region src/commands/db-command-utils.ts
-var SENSITIVE_QUERY_PARAMS = /* @__PURE__ */ new Set([
-	"access_token",
-	"apikey",
-	"api_key",
-	"auth",
-	"auth_token",
-	"password",
-	"token"
-]);
-var CONNECTION_STRING_USERINFO_PATTERN = /([a-z][a-z0-9+.-]*:\/\/[^:\s/@]*:)[^\n]*@/gi;
-var SENSITIVE_QUERY_PARAM_PATTERN = /([?&](?:access_token|apikey|api_key|auth|auth_token|password|token)=)[^&\s]+/gi;
-function redactConnectionString(value) {
-	let redacted = value;
-	try {
-		const url = new URL(value);
-		if (url.password) url.password = "***";
-		for (const key of [...url.searchParams.keys()]) if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) url.searchParams.set(key, "***");
-		redacted = url.toString();
-	} catch {
-		redacted = value.replace(CONNECTION_STRING_USERINFO_PATTERN, "$1***@");
-	}
-	return redacted.replace(SENSITIVE_QUERY_PARAM_PATTERN, "$1***");
-}
-/**
-* Redact connection-string credentials embedded anywhere inside arbitrary
-* text, rather than a standalone URL value.
-*
-* Command failure paths surface driver/error text (`error.message`,
-* `error.stack`, wrapped `originalError`/`sql` context) that can itself
-* contain the connection string a command was given — for example a
-* malformed-URL parse error, or a client library that echoes the DSN it
-* tried. `redactConnectionString` expects its whole input to parse as a URL;
-* this scrubs matches wherever they occur in a larger, unknown-shaped string
-* and never throws.
-*/
-function redactConnectionStringsInText(text) {
-	if (!text) return text;
-	return text.replace(CONNECTION_STRING_USERINFO_PATTERN, "$1***@").replace(SENSITIVE_QUERY_PARAM_PATTERN, "$1***");
-}
-/**
-* Quote a SQL identifier (table name, column name, etc.).
-*
-* Uses double quotes, the ANSI SQL standard understood by SQLite, PostgreSQL,
-* and DuckDB, and escapes embedded double quotes by doubling them.
-*/
-function quoteIdentifier(name) {
-	return `"${name.replace(/"/g, "\"\"")}"`;
-}
-function formatDatabaseDisplayUrl(dbType, dbUrl) {
-	return redactConnectionString(/^[a-z][a-z0-9+.-]*:\/\//i.test(dbUrl) ? dbUrl : `${dbType}://${dbUrl}`);
-}
-async function closeDatabaseConnection(db) {
-	if (!db || typeof db !== "object") return;
-	const closeable = db;
-	const close = closeable.close ?? closeable.client?.end ?? closeable.client?.close;
-	if (typeof close !== "function") return;
-	try {
-		await close.call(closeable.close ? closeable : closeable.client);
-	} catch {}
-}
-//#endregion
 //#region src/commands/config-export.ts
 /**
 * config:export Command
@@ -223,10 +162,10 @@ var configExportCommand = {
 			console.log("  };");
 			console.log("");
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
+			if (options.json) console.log(JSON.stringify({ error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to export configuration:");
-				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
+				if (error instanceof Error) console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -1447,10 +1386,10 @@ var dbDiffCommand = {
 			console.log("\n💡 Schema migrations are manifest-driven.");
 			console.log("   Update @smrt object definitions, then run smrt db:migrate.\n");
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
+			if (options.json) console.log(JSON.stringify({ error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to generate diff:");
-				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
+				if (error instanceof Error) console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -1662,7 +1601,7 @@ var dbHistoryCommand = {
 			const annotatedHistory = history.map((row) => {
 				const m = {
 					...row,
-					error_message: row.error_message ? redactConnectionStringsInText(row.error_message) : row.error_message
+					error_message: row.error_message ? redactDatabaseUrlsInText(row.error_message) : row.error_message
 				};
 				if (m.status !== "failed") return {
 					...m,
@@ -1762,10 +1701,10 @@ var dbHistoryCommand = {
 			console.log("   smrt db:rollback   - Rollback migrations");
 			console.log();
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
+			if (options.json) console.log(JSON.stringify({ error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to get migration history:");
-				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
+				if (error instanceof Error) console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -1828,7 +1767,7 @@ function redactOrphanReport(report) {
 		...report,
 		skipped: report.skipped.map((skip) => ({
 			...skip,
-			reason: redactConnectionStringsInText(skip.reason)
+			reason: redactDatabaseUrlsInText(skip.reason)
 		}))
 	};
 }
@@ -1919,10 +1858,10 @@ var dbOrphansCommand = {
 			for (const line of formatOrphanReport(report, { verbose: options.verbose })) console.log(line);
 			console.log();
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
+			if (options.json) console.log(JSON.stringify({ error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to collect the orphan report:");
-				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
+				if (error instanceof Error) console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 		} finally {
@@ -2124,7 +2063,7 @@ function redactSweepResult(result) {
 		...result,
 		tasks: result.tasks.map((task) => task.error ? {
 			...task,
-			error: redactConnectionStringsInText(task.error)
+			error: redactDatabaseUrlsInText(task.error)
 		} : task)
 	};
 }
@@ -2225,7 +2164,7 @@ var dbPruneCommand = {
 			}
 			if (result.failed) process.exitCode = 1;
 		} catch (error) {
-			const message = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
+			const message = redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error));
 			if (options.json) console.log(JSON.stringify({ error: message }));
 			else console.error(`\n❌ Retention sweep failed: ${message}\n`);
 			process.exitCode = 1;
@@ -2512,7 +2451,7 @@ var dbRollbackCommand = {
 					successCount++;
 				} catch (error) {
 					errorCount++;
-					const errorMsg = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
+					const errorMsg = redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error));
 					if (!options.json) console.error(`  ✗ ${migration.name} failed: ${errorMsg}`);
 					results.push({
 						name: migration.name,
@@ -2520,7 +2459,7 @@ var dbRollbackCommand = {
 						error: errorMsg
 					});
 					stoppedBy = migration.name;
-					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactConnectionStringsInText(error.stack)}\n`);
+					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactDatabaseUrlsInText(error.stack)}\n`);
 				}
 			}
 			if (options.json) console.log(JSON.stringify({
@@ -2543,10 +2482,10 @@ var dbRollbackCommand = {
 			}
 			if (errorCount > 0) process.exitCode = 1;
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
+			if (options.json) console.log(JSON.stringify({ error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Rollback failed:");
-				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
+				if (error instanceof Error) console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -2658,7 +2597,7 @@ async function runLiveSchemaParity(options = {}) {
 		return {
 			report: null,
 			database: null,
-			error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error))
+			error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))
 		};
 	} finally {
 		await closeDatabaseConnection(db);
@@ -3311,7 +3250,7 @@ var dbStatusCommand = {
 			const applied = await tracker.getAppliedMigrations();
 			const failed = (await tracker.getHistory({ status: "failed" })).map((row) => row.error_message ? {
 				...row,
-				error_message: redactConnectionStringsInText(row.error_message)
+				error_message: redactDatabaseUrlsInText(row.error_message)
 			} : row);
 			const { discovered, totalObjects } = await autoDiscoverAndLoad();
 			const schemaContract = await evaluateSchemaContract({
@@ -3396,7 +3335,7 @@ var dbStatusCommand = {
 						engineHint: dbType
 					});
 				} catch (error) {
-					status.parityError = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
+					status.parityError = redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error));
 				}
 			} else if (options.parity) status.parityError = "The configured database adapter cannot describe tables, so live-schema parity cannot be verified.";
 			try {
@@ -3407,10 +3346,10 @@ var dbStatusCommand = {
 				status.orphanedForeignKeys = affectedOrphanCounts(orphanReport);
 				status.orphanProbeFailures = orphanReport.skipped.filter((skip) => skip.kind === "probe_failed").map((skip) => ({
 					...skip,
-					reason: redactConnectionStringsInText(skip.reason)
+					reason: redactDatabaseUrlsInText(skip.reason)
 				}));
 			} catch (error) {
-				status.orphansError = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
+				status.orphansError = redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error));
 			}
 			const failedAssessments = assessFailedMigrations(failed, typeof db.getTableSchema === "function" ? diff : null);
 			status.migrations.failed = {
@@ -3540,10 +3479,10 @@ var dbStatusCommand = {
 			console.log("   smrt db:diff      - Show schema differences");
 			console.log();
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
+			if (options.json) console.log(JSON.stringify({ error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Failed to get migration status:");
-				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
+				if (error instanceof Error) console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 			}
 			process.exitCode = 1;
 			return;
@@ -4628,12 +4567,12 @@ var exportCommand = {
 				if (showDrafts) console.log("   Mode: Including drafts");
 			}
 		} catch (error) {
-			if (options.json) console.log(JSON.stringify({ error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)) }));
+			if (options.json) console.log(JSON.stringify({ error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)) }));
 			else {
 				console.error("\n❌ Export failed:");
 				if (error instanceof Error) {
-					console.error(`   ${redactConnectionStringsInText(error.message)}`);
-					if (options.verbose && error.stack) console.error(redactConnectionStringsInText(error.stack));
+					console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
+					if (options.verbose && error.stack) console.error(redactDatabaseUrlsInText(error.stack));
 				}
 			}
 			process.exitCode = 1;
@@ -7069,7 +7008,7 @@ var dbDropFrameworkBaseTablesCommand = {
 			});
 			console.log(`\n✓ Dropped ${result.droppedTables.length} table(s) and ${result.droppedIndexes.length} companion index(es): ${result.droppedTables.map((table) => quoteIdentifier(table)).join(", ")}\n`);
 		} catch (error) {
-			console.error(`\n❌ Framework base-table remediation failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
+			console.error(`\n❌ Framework base-table remediation failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7112,7 +7051,7 @@ var dbMaterializeTenantHierarchyCommand = {
 			if (!config.database?.url || config.database.url === ":memory:") throw new Error("Database configuration required for db:materialize-tenant-hierarchy. Configure database.url in smrt.config.ts (or DATABASE_URL).");
 			const dbType = config.database.type || "sqlite";
 			const { getDatabase } = await import("@happyvertical/sql");
-			const { materializeTenantHierarchy, TenantHierarchyMaterializationError } = await import("./dist-D5GdZ8W6.js");
+			const { materializeTenantHierarchy, TenantHierarchyMaterializationError } = await import("./dist-m9bKxs6w.js");
 			db = await getDatabase({
 				type: dbType,
 				url: config.database.url
@@ -7142,7 +7081,7 @@ var dbMaterializeTenantHierarchyCommand = {
 			}
 			console.log(result.changes.length > 0 ? `\n✓ Materialized the hierarchy for ${result.changes.length} of ${result.total} tenant(s).\n` : `\nAll ${result.total} tenant(s) already carry the correct hierarchy; nothing to do.\n`);
 		} catch (error) {
-			console.error(`\n❌ Tenant hierarchy materialization failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
+			console.error(`\n❌ Tenant hierarchy materialization failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7192,7 +7131,7 @@ var dbMigrateAgentScheduleSlugsCommand = {
 			});
 			console.log(result.ran ? `✓ Backfilled ${result.updated} AgentSchedule slug(s); no schedules were run.\n` : "No schedule slug migration was needed.\n");
 		} catch (error) {
-			console.error(`\n❌ AgentSchedule slug migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
+			console.error(`\n❌ AgentSchedule slug migration failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7286,7 +7225,7 @@ var dbMigrateInt8Command = {
 			});
 			console.log(result.ran ? `\n✓ Widened ${result.widenedColumns.length} column(s) to BIGINT.\n` : "\nNo widening was applied; no legacy int4 columns remain.\n");
 		} catch (error) {
-			console.error(`\n❌ int8 migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
+			console.error(`\n❌ int8 migration failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7321,7 +7260,7 @@ var dbMigrateLedgerAccountsCommand = {
 			if (dbType !== "postgres") throw new Error("db:migrate-ledger-accounts currently supports PostgreSQL only; no changes were made. See the smrt-ledgers README for SQLite.");
 			await autoDiscoverAndLoad();
 			const { getDatabase } = await import("@happyvertical/sql");
-			const { migrateLedgerAccountsTable, planLedgerAccountsTableMove } = await import("./dist-DIGbZpp6.js");
+			const { migrateLedgerAccountsTable, planLedgerAccountsTableMove } = await import("./dist-F98s-wG1.js");
 			db = await getDatabase({
 				type: dbType,
 				url: config.database.url
@@ -7345,7 +7284,7 @@ var dbMigrateLedgerAccountsCommand = {
 			console.log(`✓ Moved ${result.moved} ledger account(s) to ledger_accounts; ${result.remainingLegacyRows} row(s) remain in accounts.`);
 			if (result.detachedForeignKeys.length > 0) console.log(`✓ Detached ${result.detachedForeignKeys.join(", ")} from accounts. Run db:migrate to add them against ledger_accounts.\n`);
 		} catch (error) {
-			console.error(`\n❌ Ledger accounts table move failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
+			console.error(`\n❌ Ledger accounts table move failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7398,7 +7337,7 @@ var dbMigrateNullEqualIndexesCommand = {
 			console.log(`Applied ${result.statements.length} index statements atomically.`);
 			console.log("Refresh/restart database connections in EVERY application process to clear cached index capability probes. Until then the existing upsert fallback remains correct.");
 		} catch (error) {
-			console.error(`NULL-equal conflict-index migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}`);
+			console.error(`NULL-equal conflict-index migration failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -7730,7 +7669,7 @@ var dbMigrateUuidCommand = {
 				await convertPostgresUuidColumns(tx, declaredUuid, false);
 			});
 		} catch (error) {
-			console.error(`\n❌ uuid migration failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
+			console.error(`\n❌ uuid migration failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -8431,7 +8370,7 @@ async function runLegacyQualifiedNameReport(options = {}) {
 	} catch (error) {
 		return {
 			report: null,
-			error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error))
+			error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))
 		};
 	} finally {
 		await closeDatabaseConnection(db);
@@ -8514,7 +8453,7 @@ var dbMigrateQualifiedNamesCommand = {
 			if (result.skippedDuplicates.length > 0) process.exitCode = 1;
 			console.log(result.recorded ? `\n✓ Recorded ${result.backfillName}.\n` : "\nNot recorded: references remain.\n");
 		} catch (error) {
-			console.error(`\n❌ Qualified-name backfill failed: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}\n`);
+			console.error(`\n❌ Qualified-name backfill failed: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}\n`);
 			process.exitCode = 1;
 		} finally {
 			await closeDatabaseConnection(db);
@@ -9485,7 +9424,7 @@ async function settleDeferredCompatibilityAfterMigrate(db, dbType, { verbose })
 		const { settled } = await ensureDeferredSystemTableCompatibility(db, dbType);
 		if (verbose) console.log(settled ? "Deferred system-table compatibility settled (_smrt_jobs, _smrt_job_events)\n" : "Deferred system-table compatibility pending (jobs tables not present)\n");
 	} catch (error) {
-		console.warn(`⚠️  Deferred system-table compatibility did not complete: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}`);
+		console.warn(`⚠️  Deferred system-table compatibility did not complete: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}`);
 		console.warn("   It will be retried the next time the framework starts.\n");
 	}
 }
@@ -10042,7 +9981,7 @@ export default testManifest;
 								await db.query(`DROP TABLE IF EXISTS ${quoteIdentifier(tableName)}${cascade}`);
 								console.log(`  ✓ Dropped ${tableName}`);
 							} catch (error) {
-								if (options.verbose) console.log(`  ⚠️  Could not drop ${tableName}: ${redactConnectionStringsInText(String(error))}`);
+								if (options.verbose) console.log(`  ⚠️  Could not drop ${tableName}: ${redactDatabaseUrlsInText(String(error))}`);
 								throw new Error(`Refusing to continue after failing to drop ${tableName}; dependency or foreign-key constraints may still be active.`, { cause: error });
 							}
 						}
@@ -10060,8 +9999,8 @@ export default testManifest;
 				try {
 					await schemaManager.ensureTables(schemas);
 				} catch (error) {
-					console.error(`  ✗ Schema creation failed: ${redactConnectionStringsInText(String(error))}`);
-					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactConnectionStringsInText(error.stack)}\n`);
+					console.error(`  ✗ Schema creation failed: ${redactDatabaseUrlsInText(String(error))}`);
+					if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactDatabaseUrlsInText(error.stack)}\n`);
 					throw new Error("Refusing to report database setup success after schema creation failed.", { cause: error });
 				}
 				let tablesCreated = 0;
@@ -10094,12 +10033,12 @@ export default testManifest;
 			} catch (error) {
 				console.error(formatSchemaCommandFailureHeader(error, "\n❌ Database setup failed:"));
 				if (error instanceof Error) {
-					console.error(`   ${redactConnectionStringsInText(error.message)}`);
+					console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 					if (options.verbose && error.stack) {
 						console.error("\nStack trace:");
-						console.error(redactConnectionStringsInText(error.stack));
+						console.error(redactDatabaseUrlsInText(error.stack));
 					}
-				} else console.error(redactConnectionStringsInText(String(error)));
+				} else console.error(redactDatabaseUrlsInText(String(error)));
 				process.exitCode = 1;
 				return;
 			} finally {
@@ -10131,7 +10070,7 @@ export default testManifest;
 				}
 			} catch (error) {
 				console.error("❌ Failed to clear cache:");
-				if (error instanceof Error) console.error(`   ${redactConnectionStringsInText(error.message)}`);
+				if (error instanceof Error) console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 				process.exit(1);
 			}
 		}
@@ -10269,18 +10208,18 @@ export default testManifest;
 			} catch (error) {
 				if (options.json) console.log(JSON.stringify({
 					timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-					error: redactConnectionStringsInText(error instanceof Error ? error.message : String(error)),
+					error: redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error)),
 					duration: Date.now() - startTime
 				}, null, 2));
 				else {
 					console.error("\n❌ Validation failed:");
 					if (error instanceof Error) {
-						console.error(`   ${redactConnectionStringsInText(error.message)}`);
+						console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 						if (options.verbose && error.stack) {
 							console.error("\nStack trace:");
-							console.error(redactConnectionStringsInText(error.stack));
+							console.error(redactDatabaseUrlsInText(error.stack));
 						}
-					} else console.error(redactConnectionStringsInText(String(error)));
+					} else console.error(redactDatabaseUrlsInText(String(error)));
 				}
 				process.exit(1);
 			}
@@ -10535,7 +10474,7 @@ export default testManifest;
 							try {
 								beforeCount = await countOrphanRows(db, countSql);
 							} catch (error) {
-								console.log(`   ✗ ${item.tableName}.${item.column}: orphan-count probe failed, withholding this disposition: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))}`);
+								console.log(`   ✗ ${item.tableName}.${item.column}: orphan-count probe failed, withholding this disposition: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))}`);
 								continue;
 							}
 							if (!item.action.foreignKey) continue;
@@ -10829,10 +10768,10 @@ export default testManifest;
 						skippedCount += results.filter((result) => result.success && (result.skipped || result.applied === false || result.execution_time_ms === 0)).length;
 					} catch (error) {
 						errorCount++;
-						const errorMsg = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
+						const errorMsg = redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error));
 						console.error(`  ✗ atomic schema migration failed: ${errorMsg}`);
-						if (error instanceof Error && getErrorContext(error)?.originalError) console.error(`     Cause: ${redactConnectionStringsInText(String(getErrorContext(error)?.originalError))}`);
-						if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactConnectionStringsInText(error.stack)}\n`);
+						if (error instanceof Error && getErrorContext(error)?.originalError) console.error(`     Cause: ${redactDatabaseUrlsInText(String(getErrorContext(error)?.originalError))}`);
+						if (options.verbose && error instanceof Error && error.stack) console.error(`\n${redactDatabaseUrlsInText(error.stack)}\n`);
 						console.error(deferredIndexMigrations > 0 ? "     Non-index changes in this batch were committed; concurrent index builds that did not finish are recorded failed and will be retried on the next db:migrate." : "     Rolled back all schema changes from this migration batch, including any successful steps shown above.");
 					}
 				}
@@ -10847,7 +10786,7 @@ export default testManifest;
 						const afterCount = await countOrphanRows(db, pending.countSql);
 						console.log(`   ✓ ${pending.tableName}.${pending.column}: nulled ${Math.max(pending.beforeCount - afterCount, 0)} orphan reference(s) (${afterCount} remaining)`);
 					} catch (error) {
-						console.log(`   ✓ ${pending.tableName}.${pending.column}: orphan references nulled and foreign key added (post-apply count unavailable: ${redactConnectionStringsInText(error instanceof Error ? error.message : String(error))})`);
+						console.log(`   ✓ ${pending.tableName}.${pending.column}: orphan references nulled and foreign key added (post-apply count unavailable: ${redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error))})`);
 					}
 					console.log();
 				}
@@ -10908,8 +10847,8 @@ export default testManifest;
 									} else if (repair.conflicts.length === 0) stiSkippedCount++;
 								} catch (error) {
 									const qualifiedName = resolution.currentQualifiedName;
-									const errorMsg = redactConnectionStringsInText(error instanceof Error ? error.message : String(error));
-									const originalError = getErrorContext(error)?.originalError ? redactConnectionStringsInText(String(getErrorContext(error)?.originalError)) : void 0;
+									const errorMsg = redactDatabaseUrlsInText(error instanceof Error ? error.message : String(error));
+									const originalError = getErrorContext(error)?.originalError ? redactDatabaseUrlsInText(String(getErrorContext(error)?.originalError)) : void 0;
 									console.error(`  ✗ ${tableName}: "${metaType}" → "${qualifiedName}" failed: ${originalError || errorMsg}`);
 									stiErrorCount++;
 								}
@@ -10963,17 +10902,17 @@ export default testManifest;
 			} catch (error) {
 				console.error(formatSchemaCommandFailureHeader(error, "\n❌ Migration failed:"));
 				if (error instanceof Error) {
-					console.error(`   ${redactConnectionStringsInText(error.message)}`);
+					console.error(`   ${redactDatabaseUrlsInText(error.message)}`);
 					const ctx = getErrorContext(error);
 					if (ctx) {
-						if (ctx.originalError) console.error(`   Database error: ${redactConnectionStringsInText(String(ctx.originalError))}`);
-						if (ctx.sql) console.error(`   Failed SQL: ${redactConnectionStringsInText(String(ctx.sql))}`);
+						if (ctx.originalError) console.error(`   Database error: ${redactDatabaseUrlsInText(String(ctx.originalError))}`);
+						if (ctx.sql) console.error(`   Failed SQL: ${redactDatabaseUrlsInText(String(ctx.sql))}`);
 					}
 					if (options.verbose && error.stack) {
 						console.error("\nStack trace:");
-						console.error(redactConnectionStringsInText(error.stack));
+						console.error(redactDatabaseUrlsInText(error.stack));
 					}
-				} else console.error(redactConnectionStringsInText(String(error)));
+				} else console.error(redactDatabaseUrlsInText(String(error)));
 				process.exitCode = 1;
 				return;
 			} finally {

package/dist/db-command-utils-Cn8tjy7N.js

@@ -0,0 +1,40 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { redactDatabaseUrl, redactDatabaseUrlsInText } from "@happyvertical/smrt-core/utils/database-url";
+//#region src/commands/db-command-utils.ts
+var db_command_utils_exports = /* @__PURE__ */ __exportAll({
+	closeDatabaseConnection: () => closeDatabaseConnection,
+	formatDatabaseDisplayUrl: () => formatDatabaseDisplayUrl,
+	quoteIdentifier: () => quoteIdentifier,
+	redactDatabaseUrl: () => redactDatabaseUrl,
+	redactDatabaseUrlsInText: () => redactDatabaseUrlsInText
+});
+/**
+* Quote a SQL identifier (table name, column name, etc.).
+*
+* Uses double quotes, the ANSI SQL standard understood by SQLite, PostgreSQL,
+* and DuckDB, and escapes embedded double quotes by doubling them.
+*/
+function quoteIdentifier(name) {
+	return `"${name.replace(/"/g, "\"\"")}"`;
+}
+/**
+* Render the configured database for command output: scheme, username, host,
+* port and database at most — never the password or query string (#3527).
+* A bare local path (`./data/dev.db`, `:memory:`) is shown as
+* `<dbType>://<path>`.
+*/
+function formatDatabaseDisplayUrl(dbType, dbUrl) {
+	const redacted = redactDatabaseUrl(dbUrl);
+	return /^[a-z][a-z0-9+.-]*:/i.test(redacted) || redacted !== dbUrl ? redacted : `${dbType}://${redacted}`;
+}
+async function closeDatabaseConnection(db) {
+	if (!db || typeof db !== "object") return;
+	const closeable = db;
+	const close = closeable.close ?? closeable.client?.end ?? closeable.client?.close;
+	if (typeof close !== "function") return;
+	try {
+		await close.call(closeable.close ? closeable : closeable.client);
+	} catch {}
+}
+//#endregion
+export { redactDatabaseUrlsInText as a, quoteIdentifier as i, db_command_utils_exports as n, formatDatabaseDisplayUrl as r, closeDatabaseConnection as t };

package/dist/dist-CkONQFUR.js

@@ -0,0 +1,20 @@
+import "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import "./ApiKey-CVmlf3V6-BAeHuH48.js";
+import "./ApiKeyCollection-CiiDNFdD-CMGF3_ul.js";
+import "./AuditLogCollection-WDHL-_AF-G2UOSM3H.js";
+import "./NostrIdentityCollection-CctlECpX-fkAPnK02.js";
+import "./OidcIdentity-BjRu3n1g-CzvSN6Wz.js";
+import "./OidcIdentityCollection-B4jYh36_-6UWtXCwi.js";
+import "./ProfileAssetCollection-HeMtjBc0-Cz4MOeSB.js";
+import { a as ProfileCollection } from "./ProfileCollection-Bt6IJK49-CFyOiVFz.js";
+import "./ProfileLinkCollection-u1hhzKTm-CAfIjZ4f.js";
+import "./ProfileMetadataCollection-BIYKy4Y3-CqcaAHAJ.js";
+import "./ProfileMetafieldCollection-Buz7gzag-BNRo6e4x.js";
+import "./ProfileRelationshipCollection-C4g_QLI4-DeJzJ_hF.js";
+import "./ProfileRelationshipTermCollection-C9J7mC7P-ChIFqjCg.js";
+import "./ProfileRelationshipType-U7IwF6Wf-DNavf24e.js";
+import "./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js";
+import "./oidcProvisioningPrimitives-CYood-2M-DKUWB1oI.js";
+import "./resolveIdentity-CvGDegU6-BePPF1Iv.js";
+import "./dist-m9bKxs6w.js";
+export { ProfileCollection };