@happyvertical/smrt-cli 0.57.13 → 0.57.14

package/dist/{ProfileAssetCollection-CRMcjLJ--_OAFKSvo.js → ProfileAssetCollection-CRMcjLJ--DI5GHTCT.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-CJsW8uvQ.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { a as getOwnedAssetsFromCollection, o as removeOwnedAssetFromCollection, t as addOwnedAssetFromCollection } from "./dist-B0V2uy4g.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DICoECF7.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
+import { a as getOwnedAssetsFromCollection, o as removeOwnedAssetFromCollection, t as addOwnedAssetFromCollection } from "./dist-NpXtLFZF.js";
 import { SmrtJunction, SmrtObject, crossPackageRef, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileAssetCollection-CRMcjLJ-.js
 var ProfileAssetCollection_CRMcjLJ__exports = /* @__PURE__ */ __exportAll({
@@ -84,7 +84,7 @@ var ProfileAssetCollection = class extends SmrtJunction {
 	profileCollectionPromise = null;
 	async getProfileCollection() {
 		if (!this.profileCollectionPromise) {
-			const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-CU227vYB.js").then((n) => n.o).then((n) => n.r);
+			const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-8JNduJAI.js").then((n) => n.r).then((n) => n.r);
 			this.profileCollectionPromise = ProfileCollection.create({ db: this.db });
 		}
 		return this.profileCollectionPromise;
@@ -107,4 +107,4 @@ ProfileAssetCollection = __decorateClass([smrt({
 	cli: false
 })], ProfileAssetCollection);
 //#endregion
-export { ProfileAssetCollection as n, ProfileAssetCollection_CRMcjLJ__exports as r, ProfileAsset as t };
+export { ProfileAssetCollection_CRMcjLJ__exports as t };

package/dist/{ProfileCollection-C4INKh7Y-CU227vYB.js → ProfileCollection-C4INKh7Y-8JNduJAI.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { d as getTenantId, i as tenantId, m as withSystemContext, n as resolvePrompt, o as queryGlobal, r as TenantScoped, s as queryWithGlobals, t as definePrompt } from "./dist-CJsW8uvQ.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { a as getOwnedAssetsFromCollection, i as assertValidOwnedAssetSortOrder, n as assertAssetLinkable, o as removeOwnedAssetFromCollection, r as assertValidOwnedAssetRelationship, s as resolveOwnedAssetsById, t as addOwnedAssetFromCollection } from "./dist-B0V2uy4g.js";
+import { d as getTenantId, i as tenantId, m as withSystemContext, n as resolvePrompt, o as queryGlobal, r as TenantScoped, s as queryWithGlobals, t as definePrompt } from "./dist-DICoECF7.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
+import { a as getOwnedAssetsFromCollection, i as assertValidOwnedAssetSortOrder, n as assertAssetLinkable, o as removeOwnedAssetFromCollection, r as assertValidOwnedAssetRelationship, s as resolveOwnedAssetsById, t as addOwnedAssetFromCollection } from "./dist-NpXtLFZF.js";
 import { RuntimeError, SmrtCollection, SmrtObject, ValidationError, field, foreignKey, isAbortedTransactionError, oneToMany, smrt } from "@happyvertical/smrt-core";
 import { BackfillTableUnavailableError, BackfillTracker } from "@happyvertical/smrt-core/migrations";
 //#region ../profiles/dist/chunks/ProfileCollection-C4INKh7Y.js
@@ -435,7 +435,7 @@ var Profile = class extends SmrtObject {
 	async getTypeSlug() {
 		const tenantId2 = this.tenantId || getTenantId();
 		if (this.typeId && tenantId2) {
-			const { ProfileTypeCollection } = await import("./ProfileTypeCollection-B7kwi1mU-D0bZODrI.js").then((n) => n.n).then((n) => n.n);
+			const { ProfileTypeCollection } = await import("./ProfileTypeCollection-B7kwi1mU-D0H5HsjK.js").then((n) => n.n).then((n) => n.n);
 			return (await (await ProfileTypeCollection.create(this.options)).getAvailableById(this.typeId, tenantId2))?.slug ?? "";
 		}
 		return (await this.loadRelated("typeId"))?.slug || "";
@@ -458,8 +458,8 @@ var Profile = class extends SmrtObject {
 	* @param value - The value to set
 	*/
 	async addMetadata(metafieldSlug, value) {
-		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-CXMtAfAB.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-B4hKF9kz.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-BBILArHK.js").then((n) => n.t).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-D89TA8sp.js").then((n) => n.t).then((n) => n.n);
 		const metafield = await this.resolveMetafield(await ProfileMetafieldCollection.create(this.options), metafieldSlug);
 		if (!metafield) throw new Error(`Metafield '${metafieldSlug}' not found`);
 		await metafield.validateValue(value);
@@ -492,7 +492,7 @@ var Profile = class extends SmrtObject {
 	* @returns Object with metafield slugs as keys
 	*/
 	async getMetadata() {
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-B4hKF9kz.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-D89TA8sp.js").then((n) => n.t).then((n) => n.n);
 		return await (await ProfileMetadataCollection.create(this.options)).getMetadataObject(this.id);
 	}
 	/**
@@ -509,8 +509,8 @@ var Profile = class extends SmrtObject {
 	* @param metafieldSlug - The slug of the metafield to remove
 	*/
 	async removeMetadata(metafieldSlug) {
-		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-CXMtAfAB.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-B4hKF9kz.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-BBILArHK.js").then((n) => n.t).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-D89TA8sp.js").then((n) => n.t).then((n) => n.n);
 		const metafield = await this.resolveMetafield(await ProfileMetafieldCollection.create(this.options), metafieldSlug);
 		if (!metafield) throw new Error(`Metafield '${metafieldSlug}' not found`);
 		const existing = await (await ProfileMetadataCollection.create(this.options)).list({
@@ -535,7 +535,7 @@ var Profile = class extends SmrtObject {
 		return candidates.find((candidate) => ownerTenantId && candidate.tenantId === ownerTenantId) ?? candidates.find((candidate) => !candidate.tenantId) ?? null;
 	}
 	async getProfileLinkCollection() {
-		const { ProfileLinkCollection } = await import("./ProfileLinkCollection-DFfZRsgv-De18fH8M.js").then((n) => n.i).then((n) => n.r);
+		const { ProfileLinkCollection } = await import("./ProfileLinkCollection-DFfZRsgv-Btq4mGnI.js").then((n) => n.t).then((n) => n.r);
 		return ProfileLinkCollection.create({ db: this.db });
 	}
 	/** This profile's web links in display order. */
@@ -552,7 +552,7 @@ var Profile = class extends SmrtObject {
 		return (await this.getProfileLinkCollection()).replaceForProfile(this.id, links);
 	}
 	async getProfileAssetCollection() {
-		const { ProfileAssetCollection } = await import("./ProfileAssetCollection-CRMcjLJ--_OAFKSvo.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileAssetCollection } = await import("./ProfileAssetCollection-CRMcjLJ--DI5GHTCT.js").then((n) => n.t).then((n) => n.n);
 		return ProfileAssetCollection.create({ db: this.db });
 	}
 	async getAssets(relationship) {
@@ -583,9 +583,9 @@ var Profile = class extends SmrtObject {
 	* @param contextProfile - Optional context profile for tertiary relationships
 	*/
 	async addRelationship(toProfile, relationshipSlug, contextProfile) {
-		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-CLezW4sK.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileRelationshipType } = await import("./ProfileRelationshipType-U7IwF6Wf-DNavf24e.js").then((n) => n.n).then((n) => n.n);
+		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-CvN_J6A_.js").then((n) => n.t).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-CBO-ZFG5.js").then((n) => n.t).then((n) => n.n);
+		const { ProfileRelationshipType } = await import("./ProfileRelationshipType-U7IwF6Wf--nNtaEKl.js").then((n) => n.n).then((n) => n.n);
 		const relationshipType = await (await ProfileRelationshipTypeCollection.create(this.options)).getBySlug(relationshipSlug);
 		if (!relationshipType) throw new Error(`Relationship type '${relationshipSlug}' not found`);
 		const relationshipCollection = await ProfileRelationshipCollection.create(this.options);
@@ -609,8 +609,8 @@ var Profile = class extends SmrtObject {
 	* @returns Array of ProfileRelationship instances
 	*/
 	async getRelationships(options) {
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-CLezW4sK.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-CBO-ZFG5.js").then((n) => n.t).then((n) => n.n);
+		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-CvN_J6A_.js").then((n) => n.t).then((n) => n.n);
 		const relationshipCollection = await ProfileRelationshipCollection.create(this.options);
 		const direction = options?.direction || "all";
 		let typeId;
@@ -653,8 +653,8 @@ var Profile = class extends SmrtObject {
 	* @param relationshipSlug - The type of relationship to remove
 	*/
 	async removeRelationship(toProfile, relationshipSlug) {
-		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-CLezW4sK.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-CvN_J6A_.js").then((n) => n.t).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-CBO-ZFG5.js").then((n) => n.t).then((n) => n.n);
 		const relationshipType = await (await ProfileRelationshipTypeCollection.create(this.options)).getBySlug(relationshipSlug);
 		if (!relationshipType) throw new Error(`Relationship type '${relationshipSlug}' not found`);
 		const relationshipCollection = await ProfileRelationshipCollection.create(this.options);
@@ -747,7 +747,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of API keys
 	*/
 	async getApiKeys() {
-		const { ApiKeyCollection } = await import("./ApiKeyCollection-CiiDNFdD-CMGF3_ul.js").then((n) => n.n).then((n) => n.n);
+		const { ApiKeyCollection } = await import("./ApiKeyCollection-CiiDNFdD-DGZkMNy8.js").then((n) => n.t).then((n) => n.n);
 		return await (await ApiKeyCollection.create(this.options)).findByProfile(this.id);
 	}
 	/**
@@ -756,7 +756,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of active API keys
 	*/
 	async getActiveApiKeys() {
-		const { ApiKeyCollection } = await import("./ApiKeyCollection-CiiDNFdD-CMGF3_ul.js").then((n) => n.n).then((n) => n.n);
+		const { ApiKeyCollection } = await import("./ApiKeyCollection-CiiDNFdD-DGZkMNy8.js").then((n) => n.t).then((n) => n.n);
 		return await (await ApiKeyCollection.create(this.options)).findActiveByProfile(this.id);
 	}
 	/**
@@ -766,7 +766,7 @@ var Profile = class extends SmrtObject {
 	* @returns The generated key (plaintext) and ApiKey record
 	*/
 	async generateApiKey(options) {
-		const { ApiKey } = await import("./ApiKey-CVmlf3V6-BAeHuH48.js").then((n) => n.n).then((n) => n.n);
+		const { ApiKey } = await import("./ApiKey-CVmlf3V6-CpkKlftW.js").then((n) => n.n).then((n) => n.n);
 		return await ApiKey.generate(this, {
 			...options,
 			db: this.options?.db
@@ -778,7 +778,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of OIDC identity records
 	*/
 	async getOidcIdentities() {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-CiymEMsR.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DRzTBrqP.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(this.options)).findByProfile(this.id);
 	}
 	/**
@@ -791,7 +791,7 @@ var Profile = class extends SmrtObject {
 	* type, but refuses to create or rebind authority.
 	*/
 	async linkOidcIdentity(oidcData) {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-CiymEMsR.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-DRzTBrqP.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(this.options)).linkToProfile(this, oidcData);
 	}
 	/**
@@ -800,7 +800,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of Nostr identity records
 	*/
 	async getNostrIdentities() {
-		const { NostrIdentityCollection } = await import("./NostrIdentityCollection-CctlECpX-fkAPnK02.js").then((n) => n.n).then((n) => n.n);
+		const { NostrIdentityCollection } = await import("./NostrIdentityCollection-CctlECpX-COd5JbK9.js").then((n) => n.t).then((n) => n.n);
 		return await (await NostrIdentityCollection.create(this.options)).findByProfile(this.id);
 	}
 	/**
@@ -810,7 +810,7 @@ var Profile = class extends SmrtObject {
 	* @returns The linked Nostr identity record
 	*/
 	async linkNostrIdentity(nostrData) {
-		const { NostrIdentityCollection } = await import("./NostrIdentityCollection-CctlECpX-fkAPnK02.js").then((n) => n.n).then((n) => n.n);
+		const { NostrIdentityCollection } = await import("./NostrIdentityCollection-CctlECpX-COd5JbK9.js").then((n) => n.t).then((n) => n.n);
 		return await (await NostrIdentityCollection.create(this.options)).linkToProfile(this, nostrData);
 	}
 	/**
@@ -820,7 +820,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of audit log entries
 	*/
 	async getAuditLogs(limit = 50) {
-		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-C8L1gl7q.js").then((n) => n.r).then((n) => n.n);
+		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-CfRYWGys.js").then((n) => n.t).then((n) => n.n);
 		return await (await AuditLogCollection.create(this.options)).getRecentActivity(this.id, limit);
 	}
 	/**
@@ -830,7 +830,7 @@ var Profile = class extends SmrtObject {
 	* @returns The created audit log entry
 	*/
 	async recordAction(options) {
-		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-C8L1gl7q.js").then((n) => n.r).then((n) => n.n);
+		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-CfRYWGys.js").then((n) => n.t).then((n) => n.n);
 		return await (await AuditLogCollection.create(this.options)).record({
 			profile: this,
 			...options
@@ -1194,4 +1194,4 @@ function readRequiredString(row, key) {
 	return value;
 }
 //#endregion
-export { ProfileCollection as a, coordinateOidcProvisioning as c, promptMessageOptions as d, saveOidcRaceArbiter as f, Profile as i, isOidcProvisioningRaceConflict as l, OidcProfileEmailReservation as n, ProfileCollection_C4INKh7Y_exports as o, smrtProfilesGenerateBioPrompt as p, OidcProfileEmailReservationCollection as r, ProfileType as s, CanonicalPersonProfileError as t, normalizeIdentityEmail as u };
+export { coordinateOidcProvisioning as a, saveOidcRaceArbiter as c, ProfileType as i, ProfileCollection as n, isOidcProvisioningRaceConflict as o, ProfileCollection_C4INKh7Y_exports as r, normalizeIdentityEmail as s, Profile as t };

package/dist/{ProfileLinkCollection-DFfZRsgv-De18fH8M.js → ProfileLinkCollection-DFfZRsgv-Btq4mGnI.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-CJsW8uvQ.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DICoECF7.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, isEmbeddedDatabase, smrt, withEmbeddedWriteTransaction } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileLinkCollection-DFfZRsgv.js
 var ProfileLinkCollection_DFfZRsgv_exports = /* @__PURE__ */ __exportAll({
@@ -203,7 +203,7 @@ var ProfileLinkCollection = class ProfileLinkCollection extends SmrtCollection {
 	/** The profile's tenant; throws when the profile is not visible here. */
 	async requireProfileTenant(profileId) {
 		if (!profileId) throw new Error("A profile link needs a profile");
-		const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-CU227vYB.js").then((n) => n.o).then((n) => n.r);
+		const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-8JNduJAI.js").then((n) => n.r).then((n) => n.r);
 		const profile = await (await ProfileCollection.create({ db: this.db })).get({ id: profileId });
 		if (!profile) throw new Error(`Profile '${profileId}' not found`);
 		return profile.tenantId ?? null;
@@ -238,4 +238,4 @@ function normalizeInputs(links) {
 	return out;
 }
 //#endregion
-export { isProfileLinkPlatform as a, ProfileLinkCollection_DFfZRsgv_exports as i, ProfileLink as n, normalizeProfileLinkUrl as o, ProfileLinkCollection as r, PROFILE_LINK_PLATFORMS as t };
+export { ProfileLinkCollection_DFfZRsgv_exports as t };

package/dist/{ProfileMetadataCollection-BIYKy4Y3-B4hKF9kz.js → ProfileMetadataCollection-BIYKy4Y3-D89TA8sp.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-CJsW8uvQ.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DICoECF7.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileMetadataCollection-BIYKy4Y3.js
 var ProfileMetadataCollection_BIYKy4Y3_exports = /* @__PURE__ */ __exportAll({
@@ -113,4 +113,4 @@ var ProfileMetadataCollection = class extends SmrtCollection {
 	}
 };
 //#endregion
-export { ProfileMetadataCollection as n, ProfileMetadataCollection_BIYKy4Y3_exports as r, ProfileMetadata as t };
+export { ProfileMetadataCollection_BIYKy4Y3_exports as t };

package/dist/{ProfileMetafieldCollection-Buz7gzag-CXMtAfAB.js → ProfileMetafieldCollection-Buz7gzag-BBILArHK.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-CJsW8uvQ.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DICoECF7.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
 import { SmrtCollection, SmrtObject, field, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileMetafieldCollection-Buz7gzag.js
 var ProfileMetafieldCollection_Buz7gzag_exports = /* @__PURE__ */ __exportAll({
@@ -150,4 +150,4 @@ var ProfileMetafieldCollection = class extends SmrtCollection {
 	}
 };
 //#endregion
-export { ProfileMetafieldCollection as n, ProfileMetafieldCollection_Buz7gzag_exports as r, ProfileMetafield as t };
+export { ProfileMetafieldCollection_Buz7gzag_exports as t };

package/dist/{ProfileRelationshipCollection-C4g_QLI4-CLezW4sK.js → ProfileRelationshipCollection-C4g_QLI4-CBO-ZFG5.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-CJsW8uvQ.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import { i as tenantId, r as TenantScoped } from "./dist-DICoECF7.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
 import { SmrtCollection, SmrtObject, foreignKey, oneToMany, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileRelationshipCollection-C4g_QLI4.js
 var ProfileRelationshipCollection_C4g_QLI4_exports = /* @__PURE__ */ __exportAll({
@@ -54,7 +54,7 @@ var ProfileRelationship = class extends SmrtObject {
 	async addTerm(startedAt, endedAt) {
 		if (!this.id) throw new Error("ProfileRelationship.addTerm requires a persisted relationship (missing id)");
 		const relationshipId = this.id;
-		const { ProfileRelationshipTermCollection } = await import("./ProfileRelationshipTermCollection-C9J7mC7P-ChIFqjCg.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipTermCollection } = await import("./ProfileRelationshipTermCollection-C9J7mC7P-B1qRgesq.js").then((n) => n.t).then((n) => n.n);
 		await (await (await ProfileRelationshipTermCollection.create(this.options)).create({
 			relationshipId,
 			startedAt,
@@ -76,7 +76,7 @@ var ProfileRelationship = class extends SmrtObject {
 	* @returns Array of ProfileRelationshipTerm instances
 	*/
 	async getTerms() {
-		const { ProfileRelationshipTermCollection } = await import("./ProfileRelationshipTermCollection-C9J7mC7P-ChIFqjCg.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipTermCollection } = await import("./ProfileRelationshipTermCollection-C9J7mC7P-B1qRgesq.js").then((n) => n.t).then((n) => n.n);
 		return await (await ProfileRelationshipTermCollection.create(this.options)).getByRelationship(this.id);
 	}
 	/**
@@ -85,7 +85,7 @@ var ProfileRelationship = class extends SmrtObject {
 	* @returns Current term or null if none active
 	*/
 	async getActiveTerm() {
-		const { ProfileRelationshipTermCollection } = await import("./ProfileRelationshipTermCollection-C9J7mC7P-ChIFqjCg.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipTermCollection } = await import("./ProfileRelationshipTermCollection-C9J7mC7P-B1qRgesq.js").then((n) => n.t).then((n) => n.n);
 		return await (await ProfileRelationshipTermCollection.create(this.options)).getActiveTerm(this.id);
 	}
 };
@@ -166,4 +166,4 @@ var ProfileRelationshipCollection = class extends SmrtCollection {
 	}
 };
 //#endregion
-export { ProfileRelationshipCollection as n, ProfileRelationshipCollection_C4g_QLI4_exports as r, ProfileRelationship as t };
+export { ProfileRelationshipCollection_C4g_QLI4_exports as t };

package/dist/{ProfileRelationshipTermCollection-C9J7mC7P-ChIFqjCg.js → ProfileRelationshipTermCollection-C9J7mC7P-B1qRgesq.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileRelationshipTermCollection-C9J7mC7P.js
 var ProfileRelationshipTermCollection_C9J7mC7P_exports = /* @__PURE__ */ __exportAll({
@@ -112,4 +112,4 @@ var ProfileRelationshipTermCollection = class extends SmrtCollection {
 	}
 };
 //#endregion
-export { ProfileRelationshipTermCollection as n, ProfileRelationshipTermCollection_C9J7mC7P_exports as r, ProfileRelationshipTerm as t };
+export { ProfileRelationshipTermCollection_C9J7mC7P_exports as t };

package/dist/{ProfileRelationshipType-U7IwF6Wf-DNavf24e.js → ProfileRelationshipType-U7IwF6Wf--nNtaEKl.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
 import { SmrtObject, field, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileRelationshipType-U7IwF6Wf.js
 var ProfileRelationshipType_U7IwF6Wf_exports = /* @__PURE__ */ __exportAll({

package/dist/{ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js → ProfileRelationshipTypeCollection-_n22WqTb-CvN_J6A_.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { t as ProfileRelationshipType } from "./ProfileRelationshipType-U7IwF6Wf-DNavf24e.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
+import { t as ProfileRelationshipType } from "./ProfileRelationshipType-U7IwF6Wf--nNtaEKl.js";
 import { SmrtCollection } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileRelationshipTypeCollection-_n22WqTb.js
 var ProfileRelationshipTypeCollection__n22WqTb_exports = /* @__PURE__ */ __exportAll({
@@ -54,4 +54,4 @@ var ProfileRelationshipTypeCollection = class extends SmrtCollection {
 	}
 };
 //#endregion
-export { ProfileRelationshipTypeCollection__n22WqTb_exports as n, ProfileRelationshipTypeCollection as t };
+export { ProfileRelationshipTypeCollection__n22WqTb_exports as t };

package/dist/{ProfileTypeCollection-B7kwi1mU-D0bZODrI.js → ProfileTypeCollection-B7kwi1mU-D0H5HsjK.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { l as withTenantGlobalRead, p as isSystemContext } from "./dist-CJsW8uvQ.js";
-import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { s as ProfileType } from "./ProfileCollection-C4INKh7Y-CU227vYB.js";
+import { l as withTenantGlobalRead, p as isSystemContext } from "./dist-DICoECF7.js";
+import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-Crl0np5c.js";
+import { i as ProfileType } from "./ProfileCollection-C4INKh7Y-8JNduJAI.js";
 import { SmrtCollection } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileTypeCollection-B7kwi1mU.js
 var ProfileTypeCollection_B7kwi1mU_exports = /* @__PURE__ */ __exportAll({

package/dist/commands/users-provision-owner.d.ts

@@ -0,0 +1,10 @@
+import type { Readable } from 'node:stream';
+import type { CLICommand } from '../cli-generator.js';
+/** Read one UTF-8 password, allowing one conventional final newline. */
+export declare function readOperatorPassword(stream: Readable): Promise<string>;
+/**
+ * Deliberate operator command, never generated from a decorated model. It has
+ * no password argument or environment-variable fallback.
+ */
+export declare const usersProvisionOwnerCommand: CLICommand;
+//# sourceMappingURL=users-provision-owner.d.ts.map

package/dist/commands/users-provision-owner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users-provision-owner.d.ts","sourceRoot":"","sources":["../../src/commands/users-provision-owner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAOtD,wEAAwE;AACxE,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAc5E;AAED;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,UAsFxC,CAAC"}

package/dist/commands/utilities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utilities.d.ts","sourceRoot":"","sources":["../../src/commands/utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwBH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAsJtD,wBAAgB,uBAAuB,CAAC,OAAO,SAAgB,GAAG,MAAM,CAIvE;AA4LD,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAEtF;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GAAG,SAAS,EAC1B,KAAK,EAAE,OAAO,GACb,uBAAuB,CA2DzB;AAED,wBAAgB,gCAAgC,CAC9C,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC9C,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtC,IAAI,CAcN;AAED;;;GAGG;AACH,UAAU,iBAAiB;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAmBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,iBAAiB,GAC7B,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GAAG,0BAA0B,CA+C7B;AA2BD,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,GAAG,aAAa,GAAG,UAAU,CAAC;IAChD,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,8DAA8D;IAC9D,SAAS,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AA4CD;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAsDzC;AAgBD,mEAAmE;AACnE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,kBAAkB,GAAG,SAAS,GACrC,MAAM,EAAE,CAoCV;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CA8iGtD,CAAC"}
+{"version":3,"file":"utilities.d.ts","sourceRoot":"","sources":["../../src/commands/utilities.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAwBH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAuJtD,wBAAgB,uBAAuB,CAAC,OAAO,SAAgB,GAAG,MAAM,CAIvE;AA4LD,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,OAAO,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAEtF;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GAAG,SAAS,EAC1B,KAAK,EAAE,OAAO,GACb,uBAAuB,CA2DzB;AAED,wBAAgB,gCAAgC,CAC9C,eAAe,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC9C,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,GACtC,IAAI,CAcN;AAED;;;GAGG;AACH,UAAU,iBAAiB;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;CACjB;AAmBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,iBAAiB,GAC7B,MAAM,GAAG,IAAI,CAUf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GAAG,0BAA0B,CA+C7B;AA2BD,yDAAyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,GAAG,aAAa,GAAG,UAAU,CAAC;IAChD,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,8DAA8D;IAC9D,SAAS,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AA4CD;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAsDzC;AAgBD,mEAAmE;AACnE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,kBAAkB,GAAG,SAAS,GACrC,MAAM,EAAE,CAoCV;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CA+iGtD,CAAC"}

package/dist/{commands-BgDKO9Gk.js → commands-DEfGxqVh.js}

@@ -5,7 +5,7 @@ import { t as DEFAULT_CLI_CONFIG } from "./config-CdJRSMRi.js";
 import { addMcpAppsRuntime, assertMcpAppsPluginName, configureMcpAppsConsumerRegistry, mcpAppsCommands, scaffoldMcpAppsPackage, validateMcpAppsPackage } from "./mcp-apps-packaging-CixRnxz_.js";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
-import { createReadStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { constants, createReadStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import * as path from "node:path";
 import { basename, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -15,7 +15,7 @@ import { execFile, execFileSync, execSync, spawn, spawnSync } from "node:child_p
 import { homedir, tmpdir } from "node:os";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { extract } from "tar";
-import { access, cp, mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { access, cp, mkdir, open, readFile, rm, writeFile } from "node:fs/promises";
 import { createLogger } from "@happyvertical/logger";
 import glob from "fast-glob";
 import { getPackageConfig, loadConfig, toAIClientOptions, tryResolveConfiguredAIProvider } from "@happyvertical/smrt-config";
@@ -8404,7 +8404,7 @@ var dbMaterializeTenantHierarchyCommand = {
 			if (!config.database?.url || config.database.url === ":memory:") throw new Error("Database configuration required for db:materialize-tenant-hierarchy. Configure database.url in smrt.config.ts (or DATABASE_URL).");
 			const dbType = config.database.type || "sqlite";
 			const { getDatabase } = await import("@happyvertical/sql");
-			const { materializeTenantHierarchy, TenantHierarchyMaterializationError } = await import("./dist-BjVKGAtb.js");
+			const { materializeTenantHierarchy, TenantHierarchyMaterializationError } = await import("./dist-CztDzx06.js");
 			db = await getDatabase({
 				type: dbType,
 				url: config.database.url
@@ -8613,7 +8613,7 @@ var dbMigrateLedgerAccountsCommand = {
 			if (dbType !== "postgres") throw new Error("db:migrate-ledger-accounts currently supports PostgreSQL only; no changes were made. See the smrt-ledgers README for SQLite.");
 			await autoDiscoverAndLoad();
 			const { getDatabase } = await import("@happyvertical/sql");
-			const { migrateLedgerAccountsTable, planLedgerAccountsTableMove } = await import("./dist-UirXccvN.js");
+			const { migrateLedgerAccountsTable, planLedgerAccountsTableMove } = await import("./dist-DOpRHzSU.js");
 			db = await getDatabase({
 				type: dbType,
 				url: config.database.url
@@ -10680,6 +10680,115 @@ async function repairStiDiscriminatorRows(options) {
 	return result;
 }
 //#endregion
+//#region src/commands/users-provision-owner.ts
+var FAILURE = "Owner provisioning refused. Check the operator input and private database configuration.";
+var MAX_SECRET_BYTES = 4096;
+/** Read one UTF-8 password, allowing one conventional final newline. */
+async function readOperatorPassword(stream) {
+	const chunks = [];
+	let size = 0;
+	for await (const chunk of stream) {
+		const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+		size += bytes.length;
+		if (size > MAX_SECRET_BYTES) throw new Error(FAILURE);
+		chunks.push(bytes);
+	}
+	const password = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks)).replace(/\r?\n$/, "");
+	if (!password || /[\r\n\0]/.test(password)) throw new Error(FAILURE);
+	return password;
+}
+/**
+* Deliberate operator command, never generated from a decorated model. It has
+* no password argument or environment-variable fallback.
+*/
+var usersProvisionOwnerCommand = {
+	name: "users:provision-owner",
+	description: "Provision a PostgreSQL deployment owner using a private file or stdin.",
+	args: [],
+	options: {
+		"tenant-id": {
+			type: "string",
+			description: "Stable tenant UUID."
+		},
+		"tenant-name": {
+			type: "string",
+			description: "Exact tenant display name."
+		},
+		"user-id": {
+			type: "string",
+			description: "Stable owner User UUID."
+		},
+		email: {
+			type: "string",
+			description: "Owner email identity."
+		},
+		username: {
+			type: "string",
+			description: "Owner username identity."
+		},
+		"password-file": {
+			type: "string",
+			description: "Private password file (0400/0600)."
+		},
+		"password-stdin": {
+			type: "boolean",
+			description: "Read password from redirected stdin."
+		}
+	},
+	handler: async (args, options) => {
+		let db;
+		try {
+			const allowed = new Set(Object.keys(usersProvisionOwnerCommand.options ?? {}));
+			if (args.length || Object.keys(options).some((key) => !allowed.has(key))) throw new Error(FAILURE);
+			const file = options["password-file"];
+			const stdin = options["password-stdin"] === true;
+			if ((typeof file === "string" && !!file) === stdin || !file && !stdin) throw new Error(FAILURE);
+			let password;
+			if (stdin) {
+				if (process.stdin.isTTY) throw new Error(FAILURE);
+				password = await readOperatorPassword(process.stdin);
+			} else {
+				if (typeof file !== "string") throw new Error(FAILURE);
+				const handle = await open(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+				try {
+					const stat = await handle.stat();
+					if (!stat.isFile() || (stat.mode & 63) !== 0 || stat.size > MAX_SECRET_BYTES) throw new Error(FAILURE);
+					password = await readOperatorPassword(createReadStream("", {
+						fd: handle.fd,
+						autoClose: false
+					}));
+				} finally {
+					await handle.close();
+				}
+			}
+			const { getPackageConfig } = await import("@happyvertical/smrt-config");
+			const { DEFAULT_CLI_CONFIG } = await import("./config-CdJRSMRi.js").then((n) => n.n);
+			const config = getPackageConfig("cli", DEFAULT_CLI_CONFIG);
+			if (config.database?.type !== "postgres" || !config.database.url) throw new Error(FAILURE);
+			const { getDatabase } = await import("@happyvertical/sql");
+			const { provisionPasswordOwner } = await import("./operator-BD6K8-ID.js");
+			db = await getDatabase({
+				type: "postgres",
+				url: config.database.url
+			});
+			const result = await provisionPasswordOwner(db, {
+				tenantId: options["tenant-id"],
+				tenantName: options["tenant-name"],
+				userId: options["user-id"],
+				email: options.email,
+				username: options.username,
+				password
+			});
+			console.log(`Owner provisioning ${result.status}.`);
+		} catch {
+			console.error(FAILURE);
+			process.exitCode = 1;
+		} finally {
+			await closeDatabaseConnection(db);
+		}
+	}
+};
+//#endregion
 //#region src/commands/utilities.ts
 /**
 * Utility CLI Commands
@@ -12591,6 +12700,7 @@ export default testManifest;
 	"db:upgrade-commerce-money": dbUpgradeCommerceMoneyCommand,
 	"db:migrate-qualified-names": dbMigrateQualifiedNamesCommand,
 	"db:materialize-tenant-hierarchy": dbMaterializeTenantHierarchyCommand,
+	"users:provision-owner": usersProvisionOwnerCommand,
 	"db:drop-framework-base-tables": dbDropFrameworkBaseTablesCommand,
 	"db:orphans": dbOrphansCommand,
 	"db:prune": dbPruneCommand,