@playcademy/sandbox 0.6.1-beta.5 → 0.6.1-beta.7

package/dist/server.js

@@ -310,7 +310,7 @@ var init_timeback2 = __esm(() => {
 });
 
 // ../constants/src/cloudflare.ts
-var WORKER_NAMING, MAX_WORKER_NAME_LENGTH = 63, SECRETS_PREFIX = "secrets_", CLOUDFLARE_COMPATIBILITY_DATE = "2025-10-11";
+var WORKER_NAMING, MAX_WORKER_NAME_LENGTH = 63, SECRETS_PREFIX = "secrets_", CLOUDFLARE_COMPATIBILITY_DATE = "2025-10-11", D1_TIME_TRAVEL_RETENTION_DAYS = 30;
 var init_cloudflare = __esm(() => {
   WORKER_NAMING = {
     STAGING_PREFIX: "staging-",
@@ -1083,7 +1083,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.6.1-beta.5",
+    version: "0.6.1-beta.7",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -1152,6 +1152,16 @@ var init_package = __esm(() => {
 });
 
 // ../api-core/src/errors/domain.error.ts
+function deployErrorCode(error) {
+  if (!(error instanceof DomainError)) {
+    return null;
+  }
+  const details = error.details;
+  if (typeof details !== "object" || details === null || !("code" in details)) {
+    return null;
+  }
+  return typeof details.code === "string" ? details.code : null;
+}
 var DomainError, BadRequestError, UnauthorizedError, AccessDeniedError, NotFoundError, ConflictError, AlreadyExistsError, ValidationError, RateLimitError, InternalError, ServiceUnavailableError, TimeoutError;
 var init_domain_error = __esm(() => {
   DomainError = class DomainError extends Error {
@@ -1234,6 +1244,158 @@ var init_domain_error = __esm(() => {
   };
 });
 
+// ../types/src/game.ts
+var DEPLOY_ERROR_CODES, REFUSAL_CODES, DEPLOY_REFUSAL_CODES, DELETED_ACCOUNT_LABEL = "(deleted account)";
+var init_game2 = __esm(() => {
+  DEPLOY_ERROR_CODES = {
+    deployIdPayloadMismatch: "deploy-id-payload-mismatch",
+    stateConflict: "deployment-state-conflict",
+    stateDrift: "deployment-state-drift",
+    destructiveSchema: "destructive-schema-changes",
+    upgradeRequired: "deploy-upgrade-required",
+    checksumMismatch: "migration-checksum-mismatch",
+    journalDivergence: "migration-journal-divergence",
+    outOfOrder: "migration-out-of-order",
+    migrationFailed: "migration-failed",
+    strategyMismatch: "strategy-mismatch",
+    pushFailed: "push-failed",
+    pruneUnmanagedSecrets: "secrets-prune-unmanaged",
+    baselineLedgerNotEmpty: "baseline-ledger-not-empty",
+    baselineDatabaseEmpty: "baseline-database-empty",
+    baselineAlreadyAdopted: "baseline-already-adopted",
+    baselineClaimRejected: "baseline-claim-rejected",
+    restoreUnsupported: "restore-unsupported",
+    restoreIncomplete: "restore-incomplete",
+    restoreBlockedByDeploy: "restore-blocked-by-deploy",
+    restoreExpired: "restore-expired"
+  };
+  REFUSAL_CODES = [
+    DEPLOY_ERROR_CODES.deployIdPayloadMismatch,
+    DEPLOY_ERROR_CODES.stateConflict,
+    DEPLOY_ERROR_CODES.stateDrift,
+    DEPLOY_ERROR_CODES.destructiveSchema,
+    DEPLOY_ERROR_CODES.upgradeRequired,
+    DEPLOY_ERROR_CODES.checksumMismatch,
+    DEPLOY_ERROR_CODES.journalDivergence,
+    DEPLOY_ERROR_CODES.outOfOrder,
+    DEPLOY_ERROR_CODES.strategyMismatch,
+    DEPLOY_ERROR_CODES.pruneUnmanagedSecrets,
+    DEPLOY_ERROR_CODES.baselineLedgerNotEmpty,
+    DEPLOY_ERROR_CODES.baselineDatabaseEmpty,
+    DEPLOY_ERROR_CODES.baselineAlreadyAdopted,
+    DEPLOY_ERROR_CODES.baselineClaimRejected
+  ];
+  DEPLOY_REFUSAL_CODES = new Set(REFUSAL_CODES);
+});
+
+// ../api-core/src/errors/deploy.error.ts
+var DeployIdConflictError, DeploymentStateConflictError, DeploymentStateDriftError, LegacySchemaUpgradeRequiredError, DestructiveSchemaError, MigrationChecksumMismatchError, MigrationJournalDivergenceError, MigrationOrderError, SecretsPruneUnmanagedError, BaselineLedgerNotEmptyError, BaselineDatabaseEmptyError, BaselineAlreadyAdoptedError, BaselineClaimRejectedError, MigrationExecutionError, PushExecutionError;
+var init_deploy_error = __esm(() => {
+  init_game2();
+  init_domain_error();
+  DeployIdConflictError = class DeployIdConflictError extends ConflictError {
+    constructor(deployId, existingJobId) {
+      super(`Deploy '${deployId}' was already created with a different payload — ` + "generate a fresh deployId for a new deploy", { code: DEPLOY_ERROR_CODES.deployIdPayloadMismatch, deployId, existingJobId });
+      this.name = "DeployIdConflictError";
+    }
+  };
+  DeploymentStateConflictError = class DeploymentStateConflictError extends ConflictError {
+    constructor(payload) {
+      super("Deployment state conflict: the schema baseline changed since this deploy was " + "prepared — refetch the deployment state, re-diff, and retry", { code: DEPLOY_ERROR_CODES.stateConflict, ...payload });
+      this.name = "DeploymentStateConflictError";
+    }
+  };
+  DeploymentStateDriftError = class DeploymentStateDriftError extends ConflictError {
+    constructor(payload) {
+      super("Deployment state drift: the live database schema does not match the recorded " + "fingerprint (out-of-band change or partial prior apply) — repair the " + "database state before deploying", { code: DEPLOY_ERROR_CODES.stateDrift, ...payload });
+      this.name = "DeploymentStateDriftError";
+    }
+  };
+  LegacySchemaUpgradeRequiredError = class LegacySchemaUpgradeRequiredError extends ValidationError {
+    constructor() {
+      super("This game's database state is server-managed; the legacy schema payload is no " + "longer accepted — update the Playcademy CLI and redeploy", { code: DEPLOY_ERROR_CODES.upgradeRequired });
+      this.name = "LegacySchemaUpgradeRequiredError";
+    }
+  };
+  DestructiveSchemaError = class DestructiveSchemaError extends ValidationError {
+    constructor(statements) {
+      super(`Push contains ${statements.length} destructive statement(s) that can drop data — ` + "review them and re-run with --accept-data-loss to proceed", { code: DEPLOY_ERROR_CODES.destructiveSchema, statements });
+      this.name = "DestructiveSchemaError";
+    }
+  };
+  MigrationChecksumMismatchError = class MigrationChecksumMismatchError extends ConflictError {
+    constructor(mismatches) {
+      const tags = mismatches.map((mismatch) => mismatch.tag).join(", ");
+      super(`Applied migration(s) ${tags} no longer match their recorded checksums.`, {
+        code: DEPLOY_ERROR_CODES.checksumMismatch,
+        mismatches
+      });
+      this.name = "MigrationChecksumMismatchError";
+    }
+  };
+  MigrationJournalDivergenceError = class MigrationJournalDivergenceError extends ConflictError {
+    constructor(tags) {
+      super(`The database ledger records applied migration(s) missing from the deploy's ` + `journal: ${tags.join(", ")}. Restore the missing migration files (or resolve ` + "the ledger) before deploying", { code: DEPLOY_ERROR_CODES.journalDivergence, tags });
+      this.name = "MigrationJournalDivergenceError";
+    }
+  };
+  MigrationOrderError = class MigrationOrderError extends ValidationError {
+    constructor(tags) {
+      super(`Out-of-order migration(s): ${tags.join(", ")} are ordered before migrations that ` + "already applied. This usually means a branch merged with older-numbered " + "migrations — regenerate them after the applied ones and redeploy", { code: DEPLOY_ERROR_CODES.outOfOrder, tags });
+      this.name = "MigrationOrderError";
+    }
+  };
+  SecretsPruneUnmanagedError = class SecretsPruneUnmanagedError extends ValidationError {
+    constructor(keys) {
+      super(`Cannot prune secret(s) not managed by the platform: ${keys.join(", ")}. ` + "Only keys the platform previously pushed can be pruned", { code: DEPLOY_ERROR_CODES.pruneUnmanagedSecrets, keys });
+      this.name = "SecretsPruneUnmanagedError";
+    }
+  };
+  BaselineLedgerNotEmptyError = class BaselineLedgerNotEmptyError extends ConflictError {
+    constructor(tags) {
+      super(`Cannot baseline: the migration ledger already records ${tags.length} applied ` + "migration(s) — this database is already server-managed. Just deploy", { code: DEPLOY_ERROR_CODES.baselineLedgerNotEmpty, tags });
+      this.name = "BaselineLedgerNotEmptyError";
+    }
+  };
+  BaselineDatabaseEmptyError = class BaselineDatabaseEmptyError extends ValidationError {
+    constructor() {
+      super("Cannot baseline an empty database — there is no applied history to claim. " + "An empty database needs no baseline: deploy directly and the full " + "journal (or schema) applies fresh.", { code: DEPLOY_ERROR_CODES.baselineDatabaseEmpty });
+      this.name = "BaselineDatabaseEmptyError";
+    }
+  };
+  BaselineAlreadyAdoptedError = class BaselineAlreadyAdoptedError extends ConflictError {
+    constructor(baselineSource) {
+      super("Cannot baseline: deployment state already records a schema baseline" + `${baselineSource ? ` (source: ${baselineSource})` : ""} — ` + "use realign/resolve to repair drift instead", { code: DEPLOY_ERROR_CODES.baselineAlreadyAdopted, baselineSource });
+      this.name = "BaselineAlreadyAdoptedError";
+    }
+  };
+  BaselineClaimRejectedError = class BaselineClaimRejectedError extends ConflictError {
+    constructor(details) {
+      const [first] = details.contradictions;
+      super(first ? `Cannot baseline: the claim contradicts the live database — ${first.tag} ${first.detail ?? ""}` : "Cannot baseline: the claim includes migrations that cannot be verified against the live database — " + "pass --allow-unverified to record them anyway", { code: DEPLOY_ERROR_CODES.baselineClaimRejected, ...details });
+      this.name = "BaselineClaimRejectedError";
+    }
+  };
+  MigrationExecutionError = class MigrationExecutionError extends ValidationError {
+    tag;
+    offset;
+    constructor(input) {
+      super(`Migration '${input.tag}' failed and rolled back: ${input.d1Message}. ` + "Fix the migration SQL and redeploy — the deploy resumes from this migration", { code: DEPLOY_ERROR_CODES.migrationFailed, ...input });
+      this.name = "MigrationExecutionError";
+      this.tag = input.tag;
+      this.offset = input.offset;
+    }
+  };
+  PushExecutionError = class PushExecutionError extends ValidationError {
+    offset;
+    constructor(input) {
+      super(`Push schema changes failed and rolled back: ${input.d1Message}. ` + "Fix the schema and redeploy — nothing was applied", { code: DEPLOY_ERROR_CODES.pushFailed, ...input });
+      this.name = "PushExecutionError";
+      this.offset = input.offset;
+    }
+  };
+});
+
 // ../api-core/src/errors/api.error.ts
 var STATUS_MAP, ApiError;
 var init_api_error = __esm(() => {
@@ -1333,6 +1495,7 @@ var init_api_error = __esm(() => {
 // ../api-core/src/errors/index.ts
 var init_errors = __esm(() => {
   init_domain_error();
+  init_deploy_error();
   init_api_error();
 });
 
@@ -5687,7 +5850,16 @@ var init_schema = __esm(() => {
     ltiTestMode: exports_external.boolean().default(false),
     platformServiceJwt: platformServiceJwtConfigSchema.optional(),
     uploadBucket: exports_external.string().optional(),
-    queueIngressSecret: exports_external.string().optional()
+    queueIngressSecret: exports_external.string().optional(),
+    secretsManifestPepper: exports_external.string().optional()
+  }).superRefine((config2, ctx) => {
+    if (config2.isLocal && !config2.baseUrl) {
+      ctx.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["baseUrl"],
+        message: "baseUrl is required when isLocal is true"
+      });
+    }
   });
 });
 
@@ -11208,7 +11380,7 @@ var init_table4 = __esm(() => {
 });
 
 // ../data/src/domains/game/table.ts
-var gamePlatformEnum, gameTypeEnum, gameVisibilityEnum, games, gameMemberRoleEnum, gameMembers, gameMembersRelations, gameDashboardUserRoleEnum, gameDashboardUsers, gameDashboardUsersRelations, deploymentProviderEnum, deploymentTargetEnum, deployJobStatusEnum, gameDeployments, gameDeployJobs, customHostnameStatusEnum, customHostnameSslStatusEnum, customHostnameEnvironmentEnum, gameCustomHostnames;
+var gamePlatformEnum, gameTypeEnum, gameVisibilityEnum, games, gameMemberRoleEnum, gameMembers, gameMembersRelations, gameDashboardUserRoleEnum, gameDashboardUsers, gameDashboardUsersRelations, deploymentProviderEnum, deploymentTargetEnum, deployJobStatusEnum, gameDeployments, gameDeployJobs, gameDeployEvents, gameDeploymentState, customHostnameStatusEnum, customHostnameSslStatusEnum, customHostnameEnvironmentEnum, gameCustomHostnames;
 var init_table5 = __esm(() => {
   init_drizzle_orm();
   init_pg_core();
@@ -11297,15 +11469,20 @@ var init_table5 = __esm(() => {
     target: deploymentTargetEnum("target").notNull().default("game"),
     url: text("url").notNull(),
     codeHash: text("code_hash"),
+    schemaHash: text("schema_hash"),
+    schemaFingerprint: text("schema_fingerprint"),
+    timeTravelBookmark: text("time_travel_bookmark"),
+    bookmarkCapturedAt: timestamp("bookmark_captured_at", { withTimezone: true }),
     isActive: boolean("is_active").notNull().default(false),
     resources: jsonb("resources").$type(),
     deployedAt: timestamp("deployed_at", { withTimezone: true }).notNull().defaultNow()
-  });
+  }, (table3) => [index("game_deployments_game_target_idx").on(table3.gameId, table3.target)]);
   gameDeployJobs = pgTable("game_deploy_jobs", {
     id: uuid("id").primaryKey().defaultRandom(),
     gameId: uuid("game_id").notNull().references(() => games.id, { onDelete: "cascade" }),
-    userId: text("user_id").notNull().references(() => users.id, { onDelete: "cascade" }),
+    userId: text("user_id").references(() => users.id, { onDelete: "set null" }),
     status: deployJobStatusEnum("status").notNull().default("pending"),
+    deployId: text("deploy_id"),
     request: jsonb("request").$type().notNull(),
     events: jsonb("events").$type().notNull().default([]),
     error: text("error"),
@@ -11319,6 +11496,27 @@ var init_table5 = __esm(() => {
     createdAt: timestamp("created_at", { mode: "date", withTimezone: true }).notNull().defaultNow(),
     startedAt: timestamp("started_at", { mode: "date", withTimezone: true }),
     completedAt: timestamp("completed_at", { mode: "date", withTimezone: true })
+  }, (table3) => [uniqueIndex("game_deploy_jobs_game_deploy_id_idx").on(table3.gameId, table3.deployId)]);
+  gameDeployEvents = pgTable("game_deploy_events", {
+    id: uuid("id").primaryKey().defaultRandom(),
+    gameId: uuid("game_id").notNull().references(() => games.id, { onDelete: "cascade" }),
+    userId: text("user_id").references(() => users.id, { onDelete: "set null" }),
+    kind: text("kind").$type().notNull(),
+    payload: jsonb("payload").$type().notNull(),
+    createdAt: timestamp("created_at", { mode: "date", withTimezone: true }).notNull().defaultNow()
+  }, (table3) => [index("game_deploy_events_game_idx").on(table3.gameId, table3.createdAt)]);
+  gameDeploymentState = pgTable("game_deployment_state", {
+    id: uuid("id").primaryKey().defaultRandom(),
+    gameId: uuid("game_id").notNull().unique().references(() => games.id, { onDelete: "cascade" }),
+    schemaHash: text("schema_hash"),
+    schemaSnapshot: jsonb("schema_snapshot"),
+    schemaFingerprint: text("schema_fingerprint"),
+    secretsManifest: jsonb("secrets_manifest").$type(),
+    integrationsHash: text("integrations_hash"),
+    buildHash: text("build_hash"),
+    compatibilityDate: text("compatibility_date"),
+    baselineSource: text("baseline_source").$type(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
   });
   customHostnameStatusEnum = pgEnum("custom_hostname_status", [
     "pending",
@@ -11481,7 +11679,9 @@ __export(exports_tables_index, {
   gameMembers: () => gameMembers,
   gameMemberRoleEnum: () => gameMemberRoleEnum,
   gameDeployments: () => gameDeployments,
+  gameDeploymentState: () => gameDeploymentState,
   gameDeployJobs: () => gameDeployJobs,
+  gameDeployEvents: () => gameDeployEvents,
   gameDashboardUsersRelations: () => gameDashboardUsersRelations,
   gameDashboardUsers: () => gameDashboardUsers,
   gameDashboardUserRoleEnum: () => gameDashboardUserRoleEnum,
@@ -22496,7 +22696,112 @@ var init_zip = __esm(() => {
   import_jszip = __toESM(require_lib3(), 1);
 });
 
+// ../utils/src/stages.ts
+function isPreviewStage(stage) {
+  return PREVIEW_STAGE_PATTERN.test(stage);
+}
+var PREVIEW_STAGE_PATTERN;
+var init_stages = __esm(() => {
+  PREVIEW_STAGE_PATTERN = /^pr-\d+$/;
+});
+
+// ../api-core/src/utils/deployment.util.ts
+function deployJobInstant() {
+  return sql`COALESCE(${gameDeployJobs.completedAt}, ${gameDeployJobs.createdAt})`;
+}
+async function findLastSuccessfulDeploy(db2, gameId) {
+  const job = await db2.query.gameDeployJobs.findFirst({
+    where: and(eq(gameDeployJobs.gameId, gameId), eq(gameDeployJobs.status, "succeeded")),
+    orderBy: desc(deployJobInstant()),
+    columns: { userId: true, createdAt: true, completedAt: true }
+  });
+  if (!job) {
+    return null;
+  }
+  return { userId: job.userId, at: job.completedAt ?? job.createdAt };
+}
+async function findLastSuccessfulDeployWithEmail(db2, gameId) {
+  const lastDeploy = await findLastSuccessfulDeploy(db2, gameId);
+  if (!lastDeploy) {
+    return null;
+  }
+  const deployer = lastDeploy.userId ? await db2.query.users.findFirst({
+    where: eq(users.id, lastDeploy.userId),
+    columns: { email: true }
+  }) : null;
+  return { ...lastDeploy, email: deployer?.email ?? null };
+}
+function getGameDeploymentId(gameSlug, sstStage) {
+  if (sstStage === "production") {
+    return gameSlug;
+  }
+  if (sstStage === "dev" || isPreviewStage(sstStage)) {
+    return `${WORKER_NAMING.STAGING_PREFIX}${gameSlug}`;
+  }
+  return `${WORKER_NAMING.LOCAL_PREFIX}${sstStage}-${gameSlug}`;
+}
+function getDashboardDeploymentId(gameSlug, sstStage) {
+  return `${getGameDeploymentId(gameSlug, sstStage)}${DASHBOARD_WORKER_SUFFIX}`;
+}
+function getGameWorkerApiKeyName(slug) {
+  return `${GAME_WORKER_KEY_PREFIX}${slug}`.substring(0, 32);
+}
+function getDashboardWorkerApiKeyName(slug) {
+  return `${DASHBOARD_WORKER_KEY_PREFIX}${slug}`;
+}
+function toBindingName(queueKey) {
+  return `${queueKey.replace(/-/g, "_").toUpperCase()}_QUEUE`;
+}
+function isSchemaAdopted(state) {
+  if (!state) {
+    return false;
+  }
+  return state.schemaHash !== null || state.schemaFingerprint !== null || state.schemaSnapshot !== null;
+}
+function isPushAdopted(state) {
+  return Boolean(state?.schemaHash);
+}
+function isMigrateManaged(state) {
+  return Boolean(state?.schemaFingerprint) && !state?.schemaHash;
+}
+function generateDeploymentHash(code) {
+  return sha256Hex(code);
+}
+function computeDeployPayloadFingerprint(payload) {
+  return sha256Hex(canonicalJson(payload));
+}
+function canonicalJson(value) {
+  if (value === null || typeof value !== "object") {
+    return JSON.stringify(value) ?? "null";
+  }
+  if (Array.isArray(value)) {
+    return `[${value.map((item) => canonicalJson(item)).join(",")}]`;
+  }
+  const entries = Object.entries(value).filter(([, entryValue]) => entryValue !== undefined).toSorted(([a], [b]) => compareKeys(a, b)).map(([key, entryValue]) => `${JSON.stringify(key)}:${canonicalJson(entryValue)}`);
+  return `{${entries.join(",")}}`;
+}
+function compareKeys(a, b) {
+  if (a < b) {
+    return -1;
+  }
+  if (a > b) {
+    return 1;
+  }
+  return 0;
+}
+var GAME_WORKER_KEY_PREFIX = "game-worker-", DASHBOARD_WORKER_KEY_PREFIX = "dash-worker-";
+var init_deployment_util = __esm(() => {
+  init_drizzle_orm();
+  init_src();
+  init_tables_index();
+  init_stages();
+});
+
 // ../api-core/src/services/deploy-job.service.ts
+function isEventDetails(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 class DeployJobService {
   deps;
   constructor(deps) {
@@ -22509,6 +22814,9 @@ class DeployJobService {
     if (leaseLost) {
       return "lease_lost";
     }
+    if (DEPLOY_REFUSAL_CODES.has(deployErrorCode(error) ?? "")) {
+      return "refused";
+    }
     if (error instanceof DomainError) {
       return "domain_error";
     }
@@ -22588,13 +22896,28 @@ class DeployJobService {
     const bucketName = this.getUploadBucket();
     this.deps.storage.deleteObject(bucketName, codeUploadToken).catch(catchAttrs("deploy_job.temp_cleanup"));
   }
-  sanitizeRequestForPersistence(request) {
-    const sanitized = { ...request };
+  async sanitizeRequestForPersistence(request) {
+    const sanitized = {
+      ...request
+    };
     delete sanitized._headers;
     delete sanitized.code;
     delete sanitized.codeUploadToken;
+    const codeFingerprint = await this.computeCodeFingerprint(request);
+    if (codeFingerprint) {
+      sanitized.codeFingerprint = codeFingerprint;
+    }
     return sanitized;
   }
+  async computeCodeFingerprint(request) {
+    if (request.codeUploadToken) {
+      return `upload:${request.codeUploadToken}`;
+    }
+    if (request.code) {
+      return `sha256:${await generateDeploymentHash(request.code)}`;
+    }
+    return;
+  }
   getLeaseExpiry() {
     return new Date(Date.now() + DEPLOY_JOB_LEASE_MS);
   }
@@ -22627,8 +22950,36 @@ class DeployJobService {
       heartbeatAt: null
     }).where(and(eq(gameDeployJobs.id, jobId), eq(gameDeployJobs.leaseId, leaseId)));
   }
+  async findByDeployId(gameId, deployId) {
+    const job = await this.deps.db.query.gameDeployJobs.findFirst({
+      where: and(eq(gameDeployJobs.gameId, gameId), eq(gameDeployJobs.deployId, deployId))
+    });
+    return job ?? null;
+  }
+  async resolveIdempotentReplay(existing, request) {
+    const [incoming, stored] = await Promise.all([
+      this.sanitizeRequestForPersistence(request).then(computeDeployPayloadFingerprint),
+      computeDeployPayloadFingerprint(existing.request)
+    ]);
+    if (incoming !== stored) {
+      setAttribute("app.deploy_job.idempotency", "payload_mismatch");
+      throw new DeployIdConflictError(request.deployId, existing.id);
+    }
+    setAttributes({
+      "app.deploy_job.idempotency": "replayed",
+      "app.deploy_job.id": existing.id,
+      "app.deploy_job.status": existing.status
+    });
+    return this.toResponse(existing);
+  }
   async create(slug, request, user) {
     const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    if (request.deployId) {
+      const existing = await this.findByDeployId(game2.id, request.deployId);
+      if (existing) {
+        return this.resolveIdempotentReplay(existing, request);
+      }
+    }
     const jobId = crypto.randomUUID();
     let codeSource = "none";
     if (request.code) {
@@ -22644,7 +22995,7 @@ class DeployJobService {
       request.code = await this.loadUploadedCode(request.codeUploadToken, game2.id);
     }
     setAttribute("app.deploy_job.code_bundle_size", request.code?.length ?? 0);
-    const sanitizedRequest = this.sanitizeRequestForPersistence(request);
+    const sanitizedRequest = await this.sanitizeRequestForPersistence(request);
     if (request.code) {
       await this.storeCodeBundle(jobId, request.code);
     }
@@ -22654,6 +23005,7 @@ class DeployJobService {
         id: jobId,
         gameId: game2.id,
         userId: user.id,
+        deployId: request.deployId ?? null,
         request: sanitizedRequest,
         events: [
           {
@@ -22665,6 +23017,12 @@ class DeployJobService {
       }).returning();
     } catch (error) {
       await this.deleteCodeBundle(jobId);
+      if (request.deployId) {
+        const winner = await this.findByDeployId(game2.id, request.deployId);
+        if (winner) {
+          return this.resolveIdempotentReplay(winner, request);
+        }
+      }
       throw error;
     }
     if (!job) {
@@ -22779,7 +23137,11 @@ class DeployJobService {
       "app.deploy_job.error_status": errorClassification?.errorStatus
     });
     if (!effectiveLeaseLost) {
-      await this.addStatusEvent(jobId, "Deployment failed", { error: message });
+      const structuredDetails = error instanceof DomainError && isEventDetails(error.details) ? error.details : undefined;
+      await this.addStatusEvent(jobId, "Deployment failed", {
+        error: message,
+        ...structuredDetails
+      });
       const failed = await this.markFailed(jobId, leaseId, message, errorClassification);
       if (!failed) {
         await this.clearLease(jobId, leaseId);
@@ -22792,18 +23154,21 @@ class DeployJobService {
         displayName: game2.displayName,
         error: message,
         target,
-        developer: { id: user.id, email: user.email }
+        developer: { id: user.id, email: user.email },
+        errorCode: deployErrorCode(error)
       });
     }
     await this.deleteCodeBundle(jobId);
   }
   async loadJobActors(job, jobId, leaseId, onMissing) {
-    const game2 = await this.deps.db.query.games.findFirst({
-      where: eq(games.id, job.gameId)
-    });
-    const user = await this.deps.db.query.users.findFirst({
-      where: eq(users.id, job.userId)
-    });
+    const [game2, user] = await Promise.all([
+      this.deps.db.query.games.findFirst({
+        where: eq(games.id, job.gameId)
+      }),
+      job.userId ? this.deps.db.query.users.findFirst({
+        where: eq(users.id, job.userId)
+      }) : undefined
+    ]);
     if (!game2 || !user) {
       const message = !game2 ? "Deploy job game no longer exists" : "Deploy job user no longer exists";
       onMissing();
@@ -22889,7 +23254,8 @@ class DeployJobService {
       for await (const step of this.deps.runDeploy(game2.slug, request, user, uploadDeps, extractZipToDirectory)) {
         assertLease();
         if (step.type === "status" && "message" in step.data && typeof step.data.message === "string") {
-          await this.addStatusEvent(jobId, step.data.message);
+          const details = "details" in step.data && isEventDetails(step.data.details) ? step.data.details : undefined;
+          await this.addStatusEvent(jobId, step.data.message, details);
         }
       }
       assertLease();
@@ -22947,8 +23313,10 @@ var init_deploy_job_service = __esm(() => {
   init_helpers_index();
   init_tables_index();
   init_spans();
+  init_game2();
   init_zip();
   init_errors();
+  init_deployment_util();
   STATUS_MAP2 = {
     BAD_REQUEST: 400,
     UNAUTHORIZED: 401,
@@ -22970,8 +23338,153 @@ var init_deploy_job_service = __esm(() => {
   DEPLOY_JOB_LEASE_MS = 2 * 60 * 1000;
   DEPLOY_JOB_HEARTBEAT_MS = 30 * 1000;
 });
+// ../cloudflare/src/utils/schema.ts
+function normalizeSqlForChecksum(sql4) {
+  const unified = sql4.replace(/\r\n/g, `
+`).replace(/\r/g, `
+`);
+  const stripped = stripSqlComments(unified);
+  return stripped.split(`
+`).map((line3) => line3.replace(/\s+$/, "")).filter((line3) => line3 !== "").join(`
+`);
+}
+function stripSqlComments(sql4) {
+  let output = "";
+  let i2 = 0;
+  while (i2 < sql4.length) {
+    const char3 = sql4[i2];
+    const next = sql4[i2 + 1];
+    if (char3 === "-" && next === "-") {
+      i2 = skipLineComment(sql4, i2);
+    } else if (char3 === "/" && next === "*") {
+      output += " ";
+      i2 = skipBlockComment(sql4, i2);
+    } else if (char3 === "'" || char3 === '"' || char3 === "`") {
+      const quoted = copyQuoted(sql4, i2, char3);
+      output += quoted.text;
+      i2 = quoted.end;
+    } else if (char3 === "[") {
+      const bracketed = copyBracketed(sql4, i2);
+      output += bracketed.text;
+      i2 = bracketed.end;
+    } else {
+      output += char3;
+      i2++;
+    }
+  }
+  return output;
+}
+function skipLineComment(sql4, start2) {
+  let i2 = start2 + 2;
+  while (i2 < sql4.length && sql4[i2] !== `
+`) {
+    i2++;
+  }
+  return i2;
+}
+function skipBlockComment(sql4, start2) {
+  let i2 = start2 + 2;
+  while (i2 < sql4.length && !(sql4[i2] === "*" && sql4[i2 + 1] === "/")) {
+    i2++;
+  }
+  return i2 + 2;
+}
+function copyQuoted(sql4, start2, quote) {
+  let text3 = quote;
+  let i2 = start2 + 1;
+  while (i2 < sql4.length) {
+    text3 += sql4[i2];
+    if (sql4[i2] !== quote) {
+      i2++;
+    } else if (sql4[i2 + 1] === quote) {
+      text3 += quote;
+      i2 += 2;
+    } else {
+      i2++;
+      break;
+    }
+  }
+  return { text: text3, end: i2 };
+}
+function copyBracketed(sql4, start2) {
+  let text3 = "[";
+  let i2 = start2 + 1;
+  while (i2 < sql4.length) {
+    text3 += sql4[i2];
+    i2++;
+    if (sql4[i2 - 1] === "]") {
+      break;
+    }
+  }
+  return { text: text3, end: i2 };
+}
+function findOversizedStatement(statements) {
+  for (const [index2, statement] of statements.entries()) {
+    const byteLength = Buffer.byteLength(statement, "utf8");
+    if (byteLength > D1_MAX_STATEMENT_BYTES) {
+      return { index: index2, byteLength };
+    }
+  }
+  return null;
+}
+var MIGRATION_LEDGER_TABLE = "_playcademy_migrations", MIGRATION_CHECKSUM_ALGO = "sha256-v1", D1_MAX_STATEMENT_BYTES;
+var init_schema3 = __esm(() => {
+  D1_MAX_STATEMENT_BYTES = 100 * 1024;
+});
+
 // ../cloudflare/src/core/namespaces/d1.ts
-var init_d1 = () => {};
+function parseD1ErrorOffset(message) {
+  const match = message.match(/at offset (\d+)/);
+  return match ? Number(match[1]) : null;
+}
+var MIGRATION_LEDGER_DDL, D1StatementTooLargeError, D1BatchError, D1MigrationError;
+var init_d1 = __esm(() => {
+  init_schema3();
+  MIGRATION_LEDGER_DDL = `CREATE TABLE IF NOT EXISTS ${MIGRATION_LEDGER_TABLE} (
+    id               INTEGER PRIMARY KEY AUTOINCREMENT,
+    tag              TEXT NOT NULL UNIQUE,
+    checksum         TEXT NOT NULL,
+    checksum_algo    TEXT NOT NULL DEFAULT 'sha256-v1',
+    deploy_id        TEXT NOT NULL,
+    applied_by       TEXT,
+    applied_at       TEXT NOT NULL,
+    source           TEXT NOT NULL DEFAULT 'deploy',
+    statements_total INTEGER
+)`;
+  D1StatementTooLargeError = class D1StatementTooLargeError extends Error {
+    name = "D1StatementTooLargeError";
+    statementIndex;
+    byteLength;
+    constructor(tag, statementIndex, byteLength) {
+      super(`Migration '${tag}' statement ${statementIndex} is ${byteLength} bytes — ` + `over D1's ${D1_MAX_STATEMENT_BYTES / 1024} KB per-statement limit. ` + "Split the statement or reduce its size.");
+      this.statementIndex = statementIndex;
+      this.byteLength = byteLength;
+    }
+  };
+  D1BatchError = class D1BatchError extends Error {
+    name = "D1BatchError";
+    d1Message;
+    offset;
+    constructor(d1Message, cause) {
+      super(`Failed to execute batch: ${d1Message}`, { cause });
+      this.d1Message = d1Message;
+      this.offset = parseD1ErrorOffset(d1Message);
+    }
+  };
+  D1MigrationError = class D1MigrationError extends Error {
+    name = "D1MigrationError";
+    tag;
+    d1Message;
+    offset;
+    constructor(tag, d1Message, cause) {
+      super(`Migration '${tag}' failed and rolled back: ${d1Message}`, { cause });
+      this.tag = tag;
+      this.d1Message = d1Message;
+      this.offset = parseD1ErrorOffset(d1Message);
+    }
+  };
+});
+
 // ../cloudflare/src/core/namespaces/kv.ts
 var init_kv = () => {};
 
@@ -22988,6 +23501,160 @@ var init_assets = __esm(() => {
   init_mime();
 });
 
+// ../cloudflare/src/utils/journal.ts
+function findOutOfOrderTags(orderedTags, applied) {
+  let lastAppliedIndex = -1;
+  orderedTags.forEach((tag, index2) => {
+    if (applied.has(tag)) {
+      lastAppliedIndex = index2;
+    }
+  });
+  return orderedTags.filter((tag, index2) => index2 < lastAppliedIndex && !applied.has(tag));
+}
+
+// ../cloudflare/src/utils/sql.ts
+function detectDestructiveStatements(statements) {
+  return statements.filter((statement) => {
+    const scannable = blankStringLiterals(normalizeSqlForChecksum(statement));
+    return DESTRUCTIVE_SQL_PATTERNS.some((pattern) => pattern.test(scannable));
+  });
+}
+function splitSqlStatements(sql4) {
+  const statements = [];
+  let current = "";
+  let i2 = 0;
+  while (i2 < sql4.length) {
+    const char3 = sql4[i2];
+    const next = sql4[i2 + 1];
+    if (char3 === ";") {
+      statements.push(current);
+      current = "";
+      i2++;
+    } else if (char3 === "-" && next === "-") {
+      const end = scanLineCommentEnd(sql4, i2);
+      current += sql4.slice(i2, end);
+      i2 = end;
+    } else if (char3 === "/" && next === "*") {
+      const end = scanBlockCommentEnd(sql4, i2);
+      current += sql4.slice(i2, end);
+      i2 = end;
+    } else if (char3 === "'" || char3 === '"' || char3 === "`") {
+      const end = scanQuoteEnd(sql4, i2, char3);
+      current += sql4.slice(i2, end);
+      i2 = end;
+    } else if (char3 === "[") {
+      const end = scanBracketEnd(sql4, i2);
+      current += sql4.slice(i2, end);
+      i2 = end;
+    } else {
+      current += char3;
+      i2++;
+    }
+  }
+  statements.push(current);
+  return statements.map((statement) => statement.trim()).filter((statement) => normalizeSqlForChecksum(statement).trim() !== "");
+}
+function blankStringLiterals(sql4) {
+  let output = "";
+  let i2 = 0;
+  while (i2 < sql4.length) {
+    const char3 = sql4[i2];
+    if (char3 === "'") {
+      output += "''";
+      i2 = scanQuoteEnd(sql4, i2, char3);
+    } else if (char3 === '"' || char3 === "`") {
+      const end = scanQuoteEnd(sql4, i2, char3);
+      output += sql4.slice(i2, end);
+      i2 = end;
+    } else if (char3 === "[") {
+      const end = scanBracketEnd(sql4, i2);
+      output += sql4.slice(i2, end);
+      i2 = end;
+    } else {
+      output += char3;
+      i2++;
+    }
+  }
+  return output;
+}
+function scanLineCommentEnd(sql4, start2) {
+  let i2 = start2 + 2;
+  while (i2 < sql4.length && sql4[i2] !== `
+`) {
+    i2++;
+  }
+  return i2;
+}
+function scanBlockCommentEnd(sql4, start2) {
+  let i2 = start2 + 2;
+  while (i2 < sql4.length && !(sql4[i2] === "*" && sql4[i2 + 1] === "/")) {
+    i2++;
+  }
+  return Math.min(i2 + 2, sql4.length);
+}
+function scanQuoteEnd(sql4, start2, quote) {
+  let i2 = start2 + 1;
+  while (i2 < sql4.length) {
+    if (sql4[i2] !== quote) {
+      i2++;
+    } else if (sql4[i2 + 1] === quote) {
+      i2 += 2;
+    } else {
+      return i2 + 1;
+    }
+  }
+  return i2;
+}
+function scanBracketEnd(sql4, start2) {
+  let i2 = start2 + 1;
+  while (i2 < sql4.length) {
+    if (sql4[i2] === "]") {
+      return i2 + 1;
+    }
+    i2++;
+  }
+  return i2;
+}
+function isAlreadyExistsSqlError(message) {
+  return /already exists|duplicate column/i.test(message);
+}
+function readIdentifier(groups) {
+  return groups.find((group) => group !== undefined) ?? "";
+}
+function extractCreatedObjects(statements) {
+  const tables = [];
+  const columns2 = [];
+  for (const statement of statements) {
+    const scannable = blankStringLiterals(normalizeSqlForChecksum(statement));
+    for (const match of scannable.matchAll(CREATE_TABLE_RE)) {
+      const name2 = readIdentifier(match.slice(1, 5));
+      if (name2 && !name2.startsWith("__new_")) {
+        tables.push(name2);
+      }
+    }
+    for (const match of scannable.matchAll(ADD_COLUMN_RE)) {
+      const table8 = readIdentifier(match.slice(1, 5));
+      const column2 = readIdentifier(match.slice(5, 9));
+      if (table8 && column2 && !table8.startsWith("__new_")) {
+        columns2.push({ table: table8, column: column2 });
+      }
+    }
+  }
+  return { tables, columns: columns2 };
+}
+var DESTRUCTIVE_SQL_PATTERNS, IDENTIFIER_SOURCE, CREATE_TABLE_RE, ADD_COLUMN_RE;
+var init_sql3 = __esm(() => {
+  init_schema3();
+  DESTRUCTIVE_SQL_PATTERNS = [
+    /\bDROP\s+TABLE\b/i,
+    /\bALTER\s+TABLE\b[\s\S]*\bDROP\b/i,
+    /\bCREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?["'`[]?__new_/i
+  ];
+  IDENTIFIER_SOURCE = String.raw`(?:"([^"]+)"|\`([^\`]+)\`|\[([^\]]+)\]|([A-Za-z_][\w$]*))`;
+  CREATE_TABLE_RE = new RegExp(String.raw`\bCREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?${IDENTIFIER_SOURCE}`, "gi");
+  ADD_COLUMN_RE = new RegExp(String.raw`\bALTER\s+TABLE\s+${IDENTIFIER_SOURCE}\s+ADD\s+(?:COLUMN\s+)?${IDENTIFIER_SOURCE}`, "gi");
+});
+
 // ../../node_modules/.bun/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/deps/streamsearch/sbmh.js
 var require_sbmh = __commonJS((exports, module2) => {
   var { EventEmitter } = __require("node:events");
@@ -24917,6 +25584,8 @@ var init_multipart = __esm(() => {
 var init_utils5 = __esm(() => {
   init_hostname();
   init_assets();
+  init_schema3();
+  init_sql3();
   init_multipart();
 });
 
@@ -25071,6 +25740,14 @@ var init_core = __esm(() => {
   init_client();
 });
 
+// ../cloudflare/src/index.ts
+var init_src4 = __esm(() => {
+  init_core();
+  init_namespaces();
+  init_utils5();
+  init_utils5();
+});
+
 // ../cloudflare/src/playcademy/constants.ts
 var CUSTOM_DOMAINS_KV_NAME = "cademy-custom-domains", QUEUE_NAME_PREFIX = "playcademy", GAME_WORKER_DOMAIN_PRODUCTION, GAME_WORKER_DOMAIN_STAGING;
 var init_constants2 = __esm(() => {
@@ -27519,68 +28196,390 @@ var init_playcademy = __esm(() => {
 });
 
 // ../utils/src/tunnel.ts
-async function getTunnelUrl() {
-  let response;
+function servicePort(service) {
+  if (!service) {
+    return null;
+  }
   try {
-    response = await fetch(`${METRICS_BASE}/config`);
+    const url = new URL(service);
+    return url.port || (url.protocol === "https:" ? "443" : "80");
   } catch {
-    throw new Error("Local tunnel is not running. Start it with `bun dev` or `bun scripts/infra/tunnel.ts`.");
+    return null;
   }
-  if (!response.ok) {
-    throw new Error(`Tunnel metrics endpoint returned ${response.status}`);
+}
+async function readTunnelIngress(port) {
+  try {
+    const response = await fetch(`http://127.0.0.1:${port}/config`, {
+      signal: AbortSignal.timeout(1000)
+    });
+    if (!response.ok) {
+      return null;
+    }
+    const data = await response.json();
+    return data.config?.ingress ?? [];
+  } catch {
+    return null;
+  }
+}
+function matchingHostname(rules, expectedPort) {
+  for (const rule of rules ?? []) {
+    if (rule.hostname && servicePort(rule.service) === expectedPort) {
+      return rule.hostname;
+    }
+  }
+  return null;
+}
+async function getTunnelUrl(platformBaseUrl) {
+  const expectedPort = servicePort(platformBaseUrl);
+  if (!expectedPort) {
+    throw new Error(`Cannot resolve a tunnel for unparseable platform URL '${platformBaseUrl}'`);
+  }
+  const cachedPort = matchedPorts.get(expectedPort);
+  if (cachedPort !== undefined) {
+    const hostname = matchingHostname(await readTunnelIngress(cachedPort), expectedPort);
+    if (hostname) {
+      return `https://${hostname}`;
+    }
+    matchedPorts.delete(expectedPort);
+  }
+  const ports = Array.from({ length: TUNNEL_METRICS_PORT_RANGE }, (_, offset) => TUNNEL_METRICS_PORT + offset);
+  const results = await Promise.all(ports.map(async (port) => ({ port, rules: await readTunnelIngress(port) })));
+  for (const { port, rules } of results) {
+    const hostname = matchingHostname(rules, expectedPort);
+    if (hostname) {
+      matchedPorts.set(expectedPort, port);
+      return `https://${hostname}`;
+    }
   }
-  const data = await response.json();
-  const hostname = data.config.ingress.find((r) => r.hostname)?.hostname;
-  if (!hostname) {
-    throw new Error("Tunnel is running but no hostname found in ingress config");
+  const foreign = results.flatMap(({ rules }) => (rules ?? []).filter((rule) => rule.hostname).map((rule) => `${rule.hostname} -> ${rule.service}`));
+  if (foreign.length > 0) {
+    throw new Error(`A local tunnel is running, but none route to the platform at ${platformBaseUrl} (found: ${foreign.join(", ")}). ${TUNNEL_START_HINT}`);
   }
-  return `https://${hostname}`;
+  throw new Error(`Local tunnel is not running. ${TUNNEL_START_HINT}`);
 }
-var TUNNEL_METRICS_PORT = 20241, METRICS_BASE;
+var TUNNEL_METRICS_PORT = 20241, TUNNEL_METRICS_PORT_RANGE = 10, TUNNEL_START_HINT = "Start this platform's tunnel with `bun dev` or `bun run tunnel`.", matchedPorts;
 var init_tunnel = __esm(() => {
-  METRICS_BASE = `http://127.0.0.1:${TUNNEL_METRICS_PORT}`;
-});
-
-// ../utils/src/stages.ts
-function isPreviewStage(stage) {
-  return PREVIEW_STAGE_PATTERN.test(stage);
+  matchedPorts = new Map;
+});
+
+// ../api-core/src/utils/baseline-validation.util.ts
+function assertBaselineClaimValid(args2) {
+  const validation = validateBaselineClaim(args2);
+  const blocked = validation.contradictions.length > 0 || validation.unverified.length > 0 && !args2.allowUnverified;
+  if (blocked) {
+    addEvent("deployment_state.baseline_claim_rejected", {
+      "app.game.id": args2.gameId,
+      "app.deployment_state.baseline_claim_source": args2.source,
+      "app.deployment_state.baseline_contradictions": validation.contradictions.length,
+      "app.deployment_state.baseline_unverified": validation.unverified.length,
+      "app.deployment_state.baseline_suggested_tag": validation.suggestedTag ?? "none"
+    });
+    throw new BaselineClaimRejectedError({
+      contradictions: validation.contradictions,
+      unverified: validation.unverified,
+      suggestedTag: validation.suggestedTag,
+      claimedTag: args2.claimedTag
+    });
+  }
+  if (validation.unverified.length > 0) {
+    addEvent("deployment_state.baseline_unverified_overridden", {
+      "app.game.id": args2.gameId,
+      "app.user.id": args2.userId,
+      "app.deployment_state.baseline_overridden_tags": validation.unverified.map((entry) => entry.tag).join(",")
+    });
+  }
+}
+function validateBaselineClaim(args2) {
+  const { claimedTag, evidence, tables, indexes: indexes2, views, lastDeployAt } = args2;
+  const claimedIndex = evidence.findIndex((entry) => entry.tag === claimedTag);
+  const verdicts = [];
+  const unverified = [];
+  evidence.forEach((entry, index2) => {
+    if (claimedIndex === -1 || index2 > claimedIndex) {
+      verdicts.push(judgeBeyond(entry, tables, indexes2, views));
+      return;
+    }
+    const judged = judgeClaimed(entry, tables, lastDeployAt);
+    verdicts.push(judged.verdict);
+    if (judged.unverifiable) {
+      unverified.push(judged.verdict);
+    }
+  });
+  return {
+    verdicts,
+    contradictions: verdicts.filter((verdict) => verdict.verdict === "contradicted"),
+    unverified,
+    suggestedTag: suggestTag(evidence, tables)
+  };
 }
-var PREVIEW_STAGE_PATTERN;
-var init_stages = __esm(() => {
-  PREVIEW_STAGE_PATTERN = /^pr-\d+$/;
+function judgeClaimed(entry, tables, lastDeployAt) {
+  if (!hasSignal(entry)) {
+    const generated = new Date(entry.generatedAt);
+    if (lastDeployAt && generated > lastDeployAt) {
+      return {
+        verdict: {
+          tag: entry.tag,
+          verdict: "no-signal",
+          detail: `no schema footprint to verify, and it was generated after the last deploy (${lastDeployAt.toISOString()})`
+        },
+        unverifiable: true
+      };
+    }
+    return { verdict: { tag: entry.tag, verdict: "no-signal" }, unverifiable: false };
+  }
+  for (const table8 of entry.createsTables) {
+    const columns2 = tables.get(table8.name);
+    if (!columns2) {
+      return {
+        verdict: {
+          tag: entry.tag,
+          verdict: "contradicted",
+          detail: `creates table \`${table8.name}\`, which is not in the live database`
+        },
+        unverifiable: false
+      };
+    }
+    const missing = table8.columns.filter((column2) => !columns2.includes(column2));
+    if (missing.length > 0) {
+      return {
+        verdict: {
+          tag: entry.tag,
+          verdict: "contradicted",
+          detail: `table \`${table8.name}\` exists but is missing column(s) ${missing.map((column2) => `\`${column2}\``).join(", ")} this migration defines`
+        },
+        unverifiable: false
+      };
+    }
+  }
+  for (const added of entry.addsColumns) {
+    const columns2 = tables.get(added.table);
+    if (columns2 && !columns2.includes(added.column)) {
+      return {
+        verdict: {
+          tag: entry.tag,
+          verdict: "contradicted",
+          detail: `adds column \`${added.column}\` to \`${added.table}\`, which the live table does not have`
+        },
+        unverifiable: false
+      };
+    }
+  }
+  return { verdict: { tag: entry.tag, verdict: "verified" }, unverifiable: false };
+}
+function judgeBeyond(entry, tables, indexes2, views) {
+  for (const table8 of entry.createsTables) {
+    if (tables.has(table8.name)) {
+      return {
+        tag: entry.tag,
+        verdict: "contradicted",
+        detail: `is beyond the claim, but the table it creates (\`${table8.name}\`) already exists in the live database — the claim looks too old`
+      };
+    }
+  }
+  for (const added of entry.addsColumns) {
+    const columns2 = tables.get(added.table);
+    if (columns2?.includes(added.column)) {
+      return {
+        tag: entry.tag,
+        verdict: "contradicted",
+        detail: `is beyond the claim, but the column it adds (\`${added.table}.${added.column}\`) already exists — the claim looks too old`
+      };
+    }
+  }
+  for (const index2 of entry.createsIndexes) {
+    if (indexes2.has(index2)) {
+      return {
+        tag: entry.tag,
+        verdict: "contradicted",
+        detail: `is beyond the claim, but the index it creates (\`${index2}\`) already exists — the claim looks too old`
+      };
+    }
+  }
+  for (const view2 of entry.createsViews) {
+    if (views.has(view2)) {
+      return {
+        tag: entry.tag,
+        verdict: "contradicted",
+        detail: `is beyond the claim, but the view it creates (\`${view2}\`) already exists — the claim looks too old`
+      };
+    }
+  }
+  return { tag: entry.tag, verdict: "verified" };
+}
+function suggestTag(evidence, tables) {
+  let presentPrefix = 0;
+  while (presentPrefix < evidence.length && evidence[presentPrefix].createsTables.every((table8) => tables.has(table8.name))) {
+    presentPrefix++;
+  }
+  let absentFrom = evidence.length;
+  while (absentFrom > 0 && evidence[absentFrom - 1].createsTables.every((table8) => !tables.has(table8.name))) {
+    absentFrom--;
+  }
+  const candidate = presentPrefix - 1;
+  return candidate >= 0 && candidate >= absentFrom - 1 ? evidence[candidate].tag : null;
+}
+function hasSignal(entry) {
+  return entry.createsTables.length > 0 || entry.addsColumns.length > 0 || entry.createsIndexes.length > 0 || entry.createsViews.length > 0;
+}
+var init_baseline_validation_util = __esm(() => {
+  init_spans();
+  init_errors();
 });
 
-// ../api-core/src/utils/deployment.util.ts
-function getGameDeploymentId(gameSlug, sstStage) {
-  if (sstStage === "production") {
-    return gameSlug;
+// ../api-core/src/utils/baseline.util.ts
+function sliceJournalToTag(journal, lastAppliedMigrationTag) {
+  const index2 = journal.findIndex((entry) => entry.tag === lastAppliedMigrationTag);
+  return index2 === -1 ? null : journal.slice(0, index2 + 1);
+}
+function evaluateBaselineGuardrails(input) {
+  if (input.ledgerTags.length > 0) {
+    return "ledger-not-empty";
   }
-  if (sstStage === "dev" || isPreviewStage(sstStage)) {
-    return `${WORKER_NAMING.STAGING_PREFIX}${gameSlug}`;
+  if (input.liveTables.length === 0) {
+    return "database-empty";
   }
-  return `${WORKER_NAMING.LOCAL_PREFIX}${sstStage}-${gameSlug}`;
+  return "ok";
 }
-function getDashboardDeploymentId(gameSlug, sstStage) {
-  return `${getGameDeploymentId(gameSlug, sstStage)}${DASHBOARD_WORKER_SUFFIX}`;
+
+// ../api-core/src/utils/migration.util.ts
+function planMigrations(journal, ledger) {
+  const ledgerByTag = new Map(ledger.map((row) => [row.tag, row]));
+  const journalTags = new Set(journal.map((entry) => entry.tag));
+  const pendingTags = [];
+  const checksumMismatches = [];
+  for (const entry of journal) {
+    const applied = ledgerByTag.get(entry.tag);
+    if (!applied) {
+      pendingTags.push(entry.tag);
+    } else {
+      const comparable = applied.checksumAlgo === MIGRATION_CHECKSUM_ALGO;
+      if (comparable && applied.checksum !== entry.checksum) {
+        checksumMismatches.push({
+          tag: entry.tag,
+          ledgerChecksum: applied.checksum,
+          journalChecksum: entry.checksum
+        });
+      }
+    }
+  }
+  const outOfOrderTags = findOutOfOrderTags(journal.map((entry) => entry.tag), new Set(ledgerByTag.keys()));
+  const missingFromJournalTags = ledger.filter((row) => !journalTags.has(row.tag)).map((row) => row.tag);
+  return { pendingTags, checksumMismatches, outOfOrderTags, missingFromJournalTags };
 }
-function getGameWorkerApiKeyName(slug) {
-  return `${GAME_WORKER_KEY_PREFIX}${slug}`.substring(0, 32);
+function assessMigrationAlreadyApplied(statements, liveTables) {
+  const created = extractCreatedObjects(statements);
+  const present = [];
+  const missing = [];
+  for (const table8 of created.tables) {
+    (liveTables.has(table8) ? present : missing).push(`table ${table8}`);
+  }
+  for (const added of created.columns) {
+    const live = Boolean(liveTables.get(added.table)?.includes(added.column));
+    (live ? present : missing).push(`column ${added.table}.${added.column}`);
+  }
+  if (present.length === 0) {
+    return { verdict: "no-signal", present, missing };
+  }
+  return {
+    verdict: missing.length === 0 ? "all-present" : "partial",
+    present,
+    missing
+  };
 }
-function getDashboardWorkerApiKeyName(slug) {
-  return `${DASHBOARD_WORKER_KEY_PREFIX}${slug}`;
+function parseMigrationFailure(events) {
+  if (!events) {
+    return null;
+  }
+  for (let i2 = events.length - 1;i2 >= 0; i2--) {
+    const event = events[i2];
+    const failure = event ? parseFailureEvent(event) : null;
+    if (failure) {
+      return failure;
+    }
+  }
+  return null;
 }
-function toBindingName(queueKey) {
-  return `${queueKey.replace(/-/g, "_").toUpperCase()}_QUEUE`;
+function parseFailureEvent(event) {
+  const details = event.details;
+  if (!details) {
+    return null;
+  }
+  const { code, tag, statementIndex, error, d1Message } = details;
+  if (code !== DEPLOY_ERROR_CODES.migrationFailed || typeof tag !== "string") {
+    return null;
+  }
+  return {
+    tag,
+    error: failureMessage(error, d1Message),
+    statementIndex: typeof statementIndex === "number" ? statementIndex : null,
+    at: event.createdAt
+  };
 }
-function generateDeploymentHash(code) {
-  return sha256Hex(code);
+function failureMessage(error, d1Message) {
+  if (typeof error === "string") {
+    return error;
+  }
+  if (typeof d1Message === "string") {
+    return d1Message;
+  }
+  return "Migration failed";
 }
-var GAME_WORKER_KEY_PREFIX = "game-worker-", DASHBOARD_WORKER_KEY_PREFIX = "dash-worker-";
-var init_deployment_util = __esm(() => {
-  init_src();
-  init_stages();
+var init_migration_util = __esm(() => {
+  init_src4();
+  init_errors();
 });
 
+// ../api-core/src/utils/secrets-manifest.util.ts
+async function deriveSecretsManifestPepper(platformSecret) {
+  const encoder = new TextEncoder;
+  const keyMaterial = await crypto.subtle.importKey("raw", encoder.encode(platformSecret), "HKDF", false, ["deriveBits"]);
+  const bits = await crypto.subtle.deriveBits({
+    name: "HKDF",
+    hash: "SHA-256",
+    salt: new Uint8Array(32),
+    info: encoder.encode(SECRETS_MANIFEST_HKDF_INFO)
+  }, keyMaterial, 256);
+  return new Uint8Array(bits);
+}
+async function computeSecretDigest(pepper, input) {
+  const key = await crypto.subtle.importKey("raw", new Uint8Array(pepper), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const message = JSON.stringify([input.gameId, input.key, input.value]);
+  const signature = await crypto.subtle.sign("HMAC", key, new TextEncoder().encode(message));
+  return [...new Uint8Array(signature)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+function computeSecretsDiff(input) {
+  const { localDigests, manifest, remoteKeys } = input;
+  const added = [];
+  const changed = [];
+  const unchanged = [];
+  for (const [key, digest] of Object.entries(localDigests)) {
+    const recorded = manifest[key];
+    if (recorded === undefined) {
+      added.push(key);
+    } else if (recorded === digest) {
+      unchanged.push(key);
+    } else {
+      changed.push(key);
+    }
+  }
+  const localKeys = new Set(Object.keys(localDigests));
+  const managedKeys = new Set(Object.keys(manifest));
+  const remoteOnlyManaged = [...managedKeys].filter((key) => !localKeys.has(key));
+  const remoteOnlyUnmanaged = remoteKeys.filter((key) => !managedKeys.has(key) && !localKeys.has(key));
+  return {
+    added: added.toSorted(),
+    changed: changed.toSorted(),
+    unchanged: unchanged.toSorted(),
+    remoteOnlyManaged: remoteOnlyManaged.toSorted(),
+    remoteOnlyUnmanaged: remoteOnlyUnmanaged.toSorted()
+  };
+}
+function findUnmanagedPruneKeys(pruneSecrets, manifest) {
+  const managed = new Set(Object.keys(manifest ?? {}));
+  return pruneSecrets.filter((key) => !managed.has(key));
+}
+var SECRETS_MANIFEST_HKDF_INFO = "playcademy:secrets-manifest:v1";
+
 // ../api-core/src/utils/worker-keys.util.ts
 async function sweepDashboardWorkerKeys(deleteApiKeysByName, slug) {
   try {
@@ -27598,6 +28597,9 @@ var init_worker_keys_util = __esm(() => {
 });
 
 // ../api-core/src/services/deploy.service.ts
+function hasBinding(binding) {
+  return binding === true || Array.isArray(binding) && binding.length > 0;
+}
 function readDashboardTheme(config2) {
   const theme = config2?.dashboard?.theme;
   return {
@@ -27665,7 +28667,7 @@ class DeployService {
       data: { message: hasBackend ? "Deploying backend code" : "Deploying to platform" }
     };
     const keepAssets = hasBackend && !hasFrontend;
-    const deploymentOptions = this.mapGameBindingsToOptions(deploymentId, request.bindings, request.schema);
+    const deploymentOptions = this.mapGameBindingsToOptions(deploymentId, request.bindings);
     const bindings = deploymentOptions?.bindings;
     setAttributes({
       "app.deploy.has_d1": Boolean(bindings?.d1?.length),
@@ -27674,13 +28676,49 @@ class DeployService {
       "app.deploy.queue_count": bindings?.queues?.length ?? 0,
       "app.deploy.dead_letter_queue_count": DeployService.countDeadLetterQueues(bindings)
     });
-    const activeDeployment = await db2.query.gameDeployments.findFirst({
-      where: activeDeploymentWhere(game2.id, "game"),
-      columns: { resources: true }
-    });
-    if (deploymentOptions?.bindings?.d1?.length) {
+    const [activeDeployment, deploymentState] = await Promise.all([
+      db2.query.gameDeployments.findFirst({
+        where: activeDeploymentWhere(game2.id, "game"),
+        columns: { resources: true }
+      }),
+      db2.query.gameDeploymentState.findFirst({
+        where: eq(gameDeploymentState.gameId, game2.id)
+      })
+    ]);
+    if (request.pruneSecrets?.length) {
+      const unmanaged = findUnmanagedPruneKeys(request.pruneSecrets, deploymentState?.secretsManifest);
+      if (unmanaged.length > 0) {
+        throw new SecretsPruneUnmanagedError(unmanaged);
+      }
+    }
+    let state = deploymentState;
+    if (request.baseline) {
+      if (isSchemaAdopted(state)) {
+        addEvent("deploy.baseline_skipped", {
+          "app.deploy.baseline_source": state?.baselineSource ?? "unknown"
+        });
+      } else {
+        state = yield* this.adoptClientBaseline({
+          game: game2,
+          request,
+          user,
+          deploymentId,
+          baseline: request.baseline,
+          existingResources: activeDeployment?.resources ?? undefined
+        });
+      }
+    }
+    if (deploymentOptions?.bindings?.d1?.length && !isSchemaAdopted(state)) {
       await this.cleanupOrphanD1Databases(cf, deploymentOptions.bindings.d1, slug, game2.id);
     }
+    const databaseOutcome = yield* this.executeDatabaseStep({
+      game: game2,
+      request,
+      user,
+      deploymentId,
+      state,
+      existingResources: activeDeployment?.resources ?? undefined
+    });
     const result = await this.deployToCloudflare({
       deploymentId,
       code: request.code,
@@ -27688,6 +28726,7 @@ class DeployService {
       tempDir,
       options: {
         ...deploymentOptions,
+        ...databaseOutcome.legacySchema && { schema: databaseOutcome.legacySchema },
         compatibilityDate: request.compatibilityDate ?? CLOUDFLARE_COMPATIBILITY_DATE,
         compatibilityFlags: request.compatibilityFlags,
         existingResources: activeDeployment?.resources ?? undefined,
@@ -27703,8 +28742,12 @@ class DeployService {
       result,
       request,
       user,
-      flags: flags2
+      flags: flags2,
+      database: databaseOutcome
     });
+    if (request.pruneSecrets?.length) {
+      yield* this.pruneManagedSecretsStep(game2.id, result.deploymentId, request.pruneSecrets);
+    }
     yield { type: "complete", data: updatedGame };
   }
   async* deployDashboard(context2) {
@@ -27831,7 +28874,10 @@ class DeployService {
       "app.deploy.code_size": request.code?.length ?? 0,
       "app.deploy.compatibility_date": request.compatibilityDate ?? CLOUDFLARE_COMPATIBILITY_DATE,
       "app.deploy.compatibility_flag_count": request.compatibilityFlags?.length ?? 0,
-      "app.deploy.has_schema": Boolean(request.schema)
+      "app.deploy.has_schema": Boolean(request.schema),
+      "app.deploy.has_database_payload": Boolean(request.database),
+      "app.deploy.has_baseline": Boolean(request.baseline),
+      "app.deploy.prune_secret_count": request.pruneSecrets?.length ?? 0
     });
     if (!hasBackend && !hasFrontend && !hasMetadata) {
       throw new ValidationError("Must provide at least one of: uploadToken (frontend), code (backend), or metadata");
@@ -27868,18 +28914,18 @@ class DeployService {
     }
     return "metadata_only";
   }
-  mapGameBindingsToOptions(deploymentId, bindings, schema2) {
-    if (!bindings && !schema2) {
+  mapGameBindingsToOptions(deploymentId, bindings) {
+    if (!bindings) {
       return;
     }
     const workerBindings = {};
-    if (bindings?.database) {
+    if (hasBinding(bindings.database)) {
       workerBindings.d1 = [deploymentId];
     }
-    if (bindings?.keyValue) {
+    if (hasBinding(bindings.keyValue)) {
       workerBindings.kv = [deploymentId];
     }
-    if (bindings?.bucket) {
+    if (hasBinding(bindings.bucket)) {
       workerBindings.r2 = [deploymentId];
     }
     if (bindings?.queues) {
@@ -27908,10 +28954,7 @@ class DeployService {
       });
     }
     const hasBindings = workerBindings.d1?.length || workerBindings.kv?.length || workerBindings.r2?.length || workerBindings.queues?.length;
-    return {
-      ...hasBindings && { bindings: workerBindings },
-      ...schema2 && { schema: schema2 }
-    };
+    return hasBindings ? { bindings: workerBindings } : undefined;
   }
   static countDeadLetterQueues(bindings) {
     return bindings?.queues?.filter((queue) => Boolean(queue.deadLetterQueue)).length ?? 0;
@@ -27935,6 +28978,473 @@ class DeployService {
       }
     }
   }
+  async* executeDatabaseStep(context2) {
+    const { game: game2, request, user, deploymentId, state } = context2;
+    if (request.schema) {
+      if (isSchemaAdopted(state)) {
+        throw new LegacySchemaUpgradeRequiredError;
+      }
+      const legacyDbId = context2.existingResources?.d1?.find((db2) => db2.name === deploymentId)?.id;
+      if (legacyDbId) {
+        const ledger = await this.getCloudflare().d1.readMigrationLedger(legacyDbId);
+        if (ledger.length > 0) {
+          throw new LegacySchemaUpgradeRequiredError;
+        }
+      }
+      setAttribute("app.deploy.db_mode", "legacy");
+      return { ...NO_DATABASE_WORK, legacySchema: request.schema };
+    }
+    const database = request.database;
+    if (!database) {
+      return NO_DATABASE_WORK;
+    }
+    if (!hasBinding(request.bindings?.database)) {
+      throw new ValidationError("The database payload requires a database binding");
+    }
+    if (!request.deployId) {
+      throw new ValidationError("deployId is required when a database payload is present");
+    }
+    setAttribute("app.deploy.db_mode", database.mode);
+    const cf = this.getCloudflare();
+    const persistedId = context2.existingResources?.d1?.find((db2) => db2.name === deploymentId)?.id;
+    const databaseId = persistedId ?? await cf.d1.create(deploymentId);
+    if (database.mode === "migrate") {
+      return yield* this.runMigrateMode({
+        game: game2,
+        user,
+        deployId: request.deployId,
+        databaseId,
+        migrations: database.migrations,
+        state
+      });
+    }
+    return yield* this.runPushMode({ game: game2, databaseId, payload: database, state });
+  }
+  async* runMigrateMode(args2) {
+    const { game: game2, user, deployId, databaseId, migrations, state } = args2;
+    const cf = this.getCloudflare();
+    yield { type: "status", data: { message: "Preparing database migrations" } };
+    await this.assertNoSchemaDrift(databaseId, state);
+    await cf.d1.ensureMigrationLedger(databaseId);
+    const ledger = await cf.d1.readMigrationLedger(databaseId);
+    const plan = planMigrations(migrations.map((migration) => ({ tag: migration.tag, checksum: migration.checksum })), ledger.map((row) => ({
+      tag: row.tag,
+      checksum: row.checksum,
+      checksumAlgo: row.checksum_algo
+    })));
+    setAttributes({
+      "app.deploy.migrations_total": migrations.length,
+      "app.deploy.migrations_applied_before": ledger.length,
+      "app.deploy.migrations_pending": plan.pendingTags.length
+    });
+    if (plan.checksumMismatches.length > 0) {
+      throw new MigrationChecksumMismatchError(plan.checksumMismatches);
+    }
+    if (plan.missingFromJournalTags.length > 0) {
+      throw new MigrationJournalDivergenceError(plan.missingFromJournalTags);
+    }
+    if (plan.outOfOrderTags.length > 0) {
+      throw new MigrationOrderError(plan.outOfOrderTags);
+    }
+    if (plan.pendingTags.length === 0) {
+      yield { type: "status", data: { message: "Database schema is up to date" } };
+      if (ledger.length > 0 && !state?.schemaFingerprint) {
+        const fingerprint2 = await cf.d1.fingerprintSchema(databaseId);
+        await this.persistDeploymentState(game2.id, {
+          schemaFingerprint: fingerprint2.fingerprint
+        });
+        return {
+          ...NO_DATABASE_WORK,
+          schemaFingerprint: fingerprint2.fingerprint
+        };
+      }
+      return {
+        ...NO_DATABASE_WORK,
+        schemaFingerprint: state?.schemaFingerprint ?? null
+      };
+    }
+    const capture = yield* this.captureBookmarkStep(databaseId);
+    const migrationsByTag = new Map(migrations.map((migration) => [migration.tag, migration]));
+    let appliedCount = 0;
+    for (const tag of plan.pendingTags) {
+      const migration = migrationsByTag.get(tag);
+      const count = migration.statements.length;
+      yield {
+        type: "status",
+        data: { message: `Applying ${tag} (${count} statement${count === 1 ? "" : "s"})` }
+      };
+      const startedAt = Date.now();
+      try {
+        await withSpan("deploy.apply_migration", () => cf.d1.applyMigration(databaseId, {
+          tag,
+          statements: migration.statements,
+          checksum: migration.checksum,
+          deployId,
+          appliedBy: user.id
+        }));
+      } catch (error) {
+        if (appliedCount > 0) {
+          await this.recordAppliedPrefixFingerprint(game2.id, databaseId);
+        }
+        throw await this.toMigrationStepError(databaseId, error, migration);
+      }
+      appliedCount++;
+      const seconds = ((Date.now() - startedAt) / 1000).toFixed(1);
+      yield { type: "status", data: { message: `Applied ${tag} (${seconds}s)` } };
+    }
+    setAttribute("app.deploy.migrations_applied", plan.pendingTags.length);
+    const fingerprint = await cf.d1.fingerprintSchema(databaseId);
+    await this.persistDeploymentState(game2.id, {
+      schemaFingerprint: fingerprint.fingerprint,
+      schemaHash: null,
+      schemaSnapshot: null
+    });
+    return {
+      schemaHash: null,
+      schemaFingerprint: fingerprint.fingerprint,
+      timeTravelBookmark: capture?.bookmark ?? null,
+      bookmarkCapturedAt: capture?.capturedAt ?? null
+    };
+  }
+  async* runPushMode(args2) {
+    const { game: game2, databaseId, payload, state } = args2;
+    const cf = this.getCloudflare();
+    yield { type: "status", data: { message: "Verifying database schema state" } };
+    if (typeof payload.baselineHash !== "string" && payload.baselineHash !== null) {
+      throw new ValidationError("Push deploys require baselineHash (null on first deploy)");
+    }
+    if (isMigrateManaged(state)) {
+      const ledger = await cf.d1.readMigrationLedger(databaseId);
+      throw new ValidationError(`This database is migrate-managed (${ledger.length} applied ` + "migration(s)) and does not accept push-mode SQL.", { code: DEPLOY_ERROR_CODES.strategyMismatch });
+    }
+    const storedHash = state?.schemaHash ?? null;
+    if (payload.baselineHash !== storedHash) {
+      throw await this.buildStateConflictError(game2.id, payload.baselineHash);
+    }
+    const statements = splitSqlStatements(payload.sql);
+    const oversized = findOversizedStatement(statements);
+    if (oversized) {
+      throw new ValidationError(`Push statement ${oversized.index} is ${oversized.byteLength} bytes — over ` + `D1's ${D1_MAX_STATEMENT_BYTES / 1024} KB per-statement limit. Split the ` + "statement or reduce its size.", {
+        code: DEPLOY_ERROR_CODES.pushFailed,
+        statementIndex: oversized.index,
+        offset: null
+      });
+    }
+    const destructive = detectDestructiveStatements(statements);
+    setAttributes({
+      "app.deploy.push_statement_count": statements.length,
+      "app.deploy.push_destructive_count": destructive.length,
+      "app.deploy.push_accept_data_loss": Boolean(payload.acceptDataLoss)
+    });
+    if (destructive.length > 0 && !payload.acceptDataLoss) {
+      throw new DestructiveSchemaError(destructive);
+    }
+    await this.assertNoSchemaDrift(databaseId, state);
+    const reserved = await this.persistPushDeploymentState(game2.id, payload.baselineHash, {
+      schemaFingerprint: PUSH_RESERVATION_FINGERPRINT,
+      schemaHash: payload.nextHash,
+      schemaSnapshot: payload.nextSnapshot
+    });
+    if (!reserved) {
+      throw await this.buildStateConflictError(game2.id, payload.baselineHash);
+    }
+    let capture = null;
+    if (statements.length > 0) {
+      capture = yield* this.captureBookmarkStep(databaseId);
+      yield {
+        type: "status",
+        data: {
+          message: `Applying database schema changes (${statements.length} statements)`
+        }
+      };
+      try {
+        await cf.d1.batch(databaseId, [
+          { sql: "PRAGMA defer_foreign_keys = on" },
+          ...statements.map((statement) => ({ sql: statement })),
+          { sql: "PRAGMA defer_foreign_keys = off" }
+        ]);
+      } catch (error) {
+        await this.persistPushDeploymentState(game2.id, payload.nextHash, {
+          schemaFingerprint: state?.schemaFingerprint ?? null,
+          schemaHash: state?.schemaHash ?? null,
+          schemaSnapshot: state?.schemaSnapshot ?? null
+        });
+        throw this.toPushStepError(error);
+      }
+    }
+    const fingerprint = await cf.d1.fingerprintSchema(databaseId);
+    await this.persistDeploymentState(game2.id, {
+      schemaFingerprint: fingerprint.fingerprint
+    });
+    return {
+      schemaHash: payload.nextHash,
+      schemaFingerprint: fingerprint.fingerprint,
+      timeTravelBookmark: capture?.bookmark ?? null,
+      bookmarkCapturedAt: capture?.capturedAt ?? null
+    };
+  }
+  async* captureBookmarkStep(databaseId) {
+    const cf = this.getCloudflare();
+    const bookmark = await cf.d1.captureBookmark(databaseId);
+    const capturedAt = new Date;
+    setAttribute("app.deploy.db_bookmark_captured", bookmark.captured);
+    if (!bookmark.captured) {
+      yield {
+        type: "status",
+        data: { message: `Time Travel bookmark unavailable (${bookmark.error})` }
+      };
+      return null;
+    }
+    yield {
+      type: "status",
+      data: {
+        message: "Captured Time Travel bookmark",
+        details: { bookmark: bookmark.bookmark }
+      }
+    };
+    return { bookmark: bookmark.bookmark, capturedAt };
+  }
+  async toMigrationStepError(databaseId, error, migration) {
+    if (error instanceof D1StatementTooLargeError) {
+      return new ValidationError(error.message, {
+        code: DEPLOY_ERROR_CODES.migrationFailed,
+        tag: migration.tag,
+        statementIndex: error.statementIndex,
+        offset: null,
+        d1Message: error.message
+      });
+    }
+    if (error instanceof D1MigrationError) {
+      addEvent("deploy.migration_failed", {
+        "app.d1.migration_tag": migration.tag,
+        "app.error.message": error.d1Message,
+        ...error.offset !== null && { "app.d1.error_offset": error.offset }
+      });
+      const alreadyApplied = isAlreadyExistsSqlError(error.d1Message) ? await this.assessAlreadyApplied(databaseId, migration.statements) : null;
+      return new MigrationExecutionError({
+        tag: migration.tag,
+        d1Message: error.d1Message,
+        offset: error.offset,
+        ...alreadyApplied ? { alreadyApplied } : {}
+      });
+    }
+    return error;
+  }
+  async assessAlreadyApplied(databaseId, statements) {
+    try {
+      const cf = this.getCloudflare();
+      const live = await cf.d1.fingerprintSchema(databaseId);
+      const tables = await cf.d1.readTableColumns(databaseId, live.tables);
+      const assessment = assessMigrationAlreadyApplied(statements, tables);
+      addEvent("deploy.already_applied_assessment", {
+        "app.deploy.already_applied_verdict": assessment.verdict,
+        "app.deploy.already_applied_present": assessment.present.length,
+        "app.deploy.already_applied_missing": assessment.missing.length
+      });
+      return assessment.verdict === "no-signal" ? null : assessment;
+    } catch (assessError) {
+      addEvent("deploy.already_applied_check_failed", {
+        "app.error.message": errorMessage(assessError)
+      });
+      return null;
+    }
+  }
+  toPushStepError(error) {
+    if (error instanceof D1BatchError) {
+      addEvent("deploy.push_failed", {
+        "app.error.message": error.d1Message,
+        ...error.offset !== null && { "app.d1.error_offset": error.offset }
+      });
+      return new PushExecutionError({ d1Message: error.d1Message, offset: error.offset });
+    }
+    return error;
+  }
+  async assertNoSchemaDrift(databaseId, state) {
+    if (!state?.schemaFingerprint) {
+      return;
+    }
+    const live = await this.getCloudflare().d1.fingerprintSchema(databaseId);
+    if (live.fingerprint !== state.schemaFingerprint) {
+      addEvent("deploy.state_drift", {
+        "app.deploy.expected_fingerprint": state.schemaFingerprint,
+        "app.deploy.actual_fingerprint": live.fingerprint
+      });
+      throw new DeploymentStateDriftError({
+        expectedFingerprint: state.schemaFingerprint,
+        actualFingerprint: live.fingerprint
+      });
+    }
+  }
+  async buildStateConflictError(gameId, claimedHash) {
+    const [row, lastDeploy] = await Promise.all([
+      this.deps.db.query.gameDeploymentState.findFirst({
+        where: eq(gameDeploymentState.gameId, gameId),
+        columns: { schemaHash: true }
+      }),
+      findLastSuccessfulDeployWithEmail(this.deps.db, gameId)
+    ]);
+    const currentHash = row?.schemaHash ?? null;
+    addEvent("deploy.state_conflict", {
+      "app.deploy.baseline_hash": claimedHash ?? "null",
+      "app.deploy.current_hash": currentHash ?? "null"
+    });
+    return new DeploymentStateConflictError({
+      currentHash,
+      lastDeployAt: lastDeploy?.at.toISOString() ?? null,
+      lastDeployBy: lastDeploy?.email ?? lastDeploy?.userId ?? null
+    });
+  }
+  async recordAppliedPrefixFingerprint(gameId, databaseId) {
+    try {
+      const fingerprint = await this.getCloudflare().d1.fingerprintSchema(databaseId);
+      await this.persistDeploymentState(gameId, {
+        schemaFingerprint: fingerprint.fingerprint
+      });
+    } catch (error) {
+      addEvent("deploy.fingerprint_persist_failed", {
+        "exception.type": errorType(error),
+        "app.error.message": errorMessage(error)
+      });
+    }
+  }
+  async persistDeploymentState(gameId, patch) {
+    const set = {
+      ...patch,
+      updatedAt: new Date
+    };
+    await this.deps.db.insert(gameDeploymentState).values({ gameId, baselineSource: "deploy", ...set }).onConflictDoUpdate({ target: gameDeploymentState.gameId, set });
+  }
+  async persistArtifactHashes(gameId, patch) {
+    const set = {
+      ...patch.buildHash !== undefined && { buildHash: patch.buildHash },
+      ...patch.integrationsHash !== undefined && {
+        integrationsHash: patch.integrationsHash
+      }
+    };
+    if (Object.keys(set).length === 0) {
+      return;
+    }
+    await this.deps.db.insert(gameDeploymentState).values({ gameId, ...set, updatedAt: new Date }).onConflictDoUpdate({
+      target: gameDeploymentState.gameId,
+      set: { ...set, updatedAt: new Date }
+    });
+  }
+  async persistPushDeploymentState(gameId, baselineHash, patch) {
+    const set = { ...patch, updatedAt: new Date };
+    if (baselineHash === null) {
+      const claimed2 = await this.deps.db.insert(gameDeploymentState).values({ gameId, baselineSource: "deploy", ...set }).onConflictDoUpdate({
+        target: gameDeploymentState.gameId,
+        set,
+        setWhere: isNull(gameDeploymentState.schemaHash)
+      }).returning({ gameId: gameDeploymentState.gameId });
+      return claimed2.length > 0;
+    }
+    const claimed = await this.deps.db.update(gameDeploymentState).set(set).where(and(eq(gameDeploymentState.gameId, gameId), eq(gameDeploymentState.schemaHash, baselineHash))).returning({ gameId: gameDeploymentState.gameId });
+    return claimed.length > 0;
+  }
+  async* adoptClientBaseline(context2) {
+    const { game: game2, request, user, deploymentId, baseline } = context2;
+    const cf = this.getCloudflare();
+    const persistedId = context2.existingResources?.d1?.find((db2) => db2.name === deploymentId)?.id;
+    const databaseId = persistedId ?? (hasBinding(request.bindings?.database) ? await cf.d1.create(deploymentId) : null);
+    if (baseline.lastAppliedMigrationTag && !databaseId) {
+      throw new ValidationError("Baseline claims applied migrations, but the deploy has no database binding");
+    }
+    const live = databaseId ? await cf.d1.fingerprintSchema(databaseId) : null;
+    let recordedRows = 0;
+    if (databaseId && baseline.lastAppliedMigrationTag) {
+      if (live.tables.length === 0) {
+        throw new BaselineDatabaseEmptyError;
+      }
+      const slice = sliceJournalToTag(baseline.journal ?? [], baseline.lastAppliedMigrationTag);
+      if (!slice) {
+        throw new ValidationError(`Baseline lastAppliedMigrationTag '${baseline.lastAppliedMigrationTag}' ` + "is not in the submitted journal");
+      }
+      if (baseline.evidence?.length) {
+        const [tables, lastDeploy] = await Promise.all([
+          cf.d1.readTableColumns(databaseId, live.tables),
+          findLastSuccessfulDeploy(this.deps.db, game2.id)
+        ]);
+        assertBaselineClaimValid({
+          claimedTag: baseline.lastAppliedMigrationTag,
+          evidence: baseline.evidence,
+          tables,
+          indexes: new Set(live.indexes),
+          views: new Set(live.views),
+          lastDeployAt: lastDeploy?.at ?? null,
+          allowUnverified: false,
+          source: "seed",
+          gameId: game2.id,
+          userId: user.id
+        });
+      }
+      await cf.d1.ensureMigrationLedger(databaseId);
+      const ledger = await cf.d1.readMigrationLedger(databaseId);
+      const plan = planMigrations(slice, ledger.map((row) => ({
+        tag: row.tag,
+        checksum: row.checksum,
+        checksumAlgo: row.checksum_algo
+      })));
+      if (plan.checksumMismatches.length > 0) {
+        throw new MigrationChecksumMismatchError(plan.checksumMismatches);
+      }
+      if (plan.missingFromJournalTags.length > 0) {
+        throw new MigrationJournalDivergenceError(plan.missingFromJournalTags);
+      }
+      if (plan.outOfOrderTags.length > 0) {
+        throw new MigrationOrderError(plan.outOfOrderTags);
+      }
+      const checksumByTag = new Map(slice.map((entry) => [entry.tag, entry.checksum]));
+      const rows = plan.pendingTags.map((tag) => ({
+        tag,
+        checksum: checksumByTag.get(tag)
+      }));
+      if (rows.length > 0) {
+        await cf.d1.recordLedgerRows(databaseId, {
+          rows,
+          deployId: `baseline:${request.deployId ?? crypto.randomUUID()}`,
+          appliedBy: user.id,
+          source: "baseline"
+        });
+      }
+      recordedRows = rows.length;
+    }
+    const fingerprint = live?.fingerprint ?? null;
+    const set = {
+      ...baseline.schemaHash !== undefined && { schemaHash: baseline.schemaHash },
+      ...baseline.schemaSnapshot !== undefined && {
+        schemaSnapshot: baseline.schemaSnapshot
+      },
+      ...baseline.integrationsHash !== undefined && {
+        integrationsHash: baseline.integrationsHash
+      },
+      ...baseline.buildHash !== undefined && { buildHash: baseline.buildHash },
+      ...fingerprint !== null && { schemaFingerprint: fingerprint },
+      baselineSource: "client-baseline",
+      updatedAt: new Date
+    };
+    await this.deps.db.insert(gameDeploymentState).values({ gameId: game2.id, ...set }).onConflictDoUpdate({ target: gameDeploymentState.gameId, set });
+    setAttributes({
+      "app.deploy.baseline_adopted": true,
+      "app.deploy.baseline_ledger_rows": recordedRows,
+      "app.deploy.baseline_has_snapshot": baseline.schemaSnapshot !== undefined
+    });
+    yield {
+      type: "status",
+      data: {
+        message: "Adopted deployment state from client baseline",
+        details: {
+          ledgerRows: recordedRows,
+          ...baseline.lastAppliedMigrationTag && {
+            lastAppliedMigrationTag: baseline.lastAppliedMigrationTag
+          }
+        }
+      }
+    };
+    return this.deps.db.query.gameDeploymentState.findFirst({
+      where: eq(gameDeploymentState.gameId, game2.id)
+    });
+  }
   async applyGameMetadata(gameId, request, hasFrontend, hasMetadata, deploymentUrl) {
     const updates = { updatedAt: new Date };
     if (hasFrontend) {
@@ -27960,7 +29470,8 @@ class DeployService {
     result,
     request,
     user,
-    flags: flags2
+    flags: flags2,
+    database
   }) {
     const { hasBackend, hasFrontend, hasMetadata } = flags2;
     const db2 = this.deps.db;
@@ -27970,9 +29481,17 @@ class DeployService {
       deploymentId: result.deploymentId,
       url: result.url,
       codeHash,
+      schemaHash: database.schemaHash,
+      schemaFingerprint: database.schemaFingerprint,
+      timeTravelBookmark: database.timeTravelBookmark,
+      bookmarkCapturedAt: database.bookmarkCapturedAt,
       resources: result.resources,
       target: "game"
     });
+    await this.persistArtifactHashes(game2.id, {
+      buildHash: hasFrontend ? request.buildHash : undefined,
+      integrationsHash: request.integrationsHash
+    });
     if (hasBackend) {
       await withSpan("deploy.configure_worker_secrets", async () => {
         await this.ensureWorkerApiKeyOnWorker(user, DeployService.gameWorkerKeySpec(slug), result.deploymentId);
@@ -28109,6 +29628,29 @@ class DeployService {
     const cf = this.getCloudflare();
     await cf.setSecrets(deploymentId, { QUEUE_INGRESS_SECRET: secret });
   }
+  async* pruneManagedSecretsStep(gameId, deploymentId, pruneSecrets) {
+    const cf = this.getCloudflare();
+    const keys = [...new Set(pruneSecrets)];
+    yield {
+      type: "status",
+      data: {
+        message: `Pruning ${keys.length} managed secret(s)`,
+        details: { keys }
+      }
+    };
+    await withSpan("deploy.prune_secrets", async () => {
+      const existing = await cf.listSecrets(deploymentId);
+      for (const key of keys) {
+        const prefixedKey = `${SECRETS_PREFIX}${key}`;
+        if (existing.includes(prefixedKey)) {
+          await cf.deleteSecret(deploymentId, prefixedKey);
+        }
+      }
+      const pruned = keys.reduce((expr, key) => sql`${expr} - ${key}::text`, sql`coalesce(${gameDeploymentState.secretsManifest}, '{}'::jsonb)`);
+      await this.deps.db.update(gameDeploymentState).set({ secretsManifest: pruned, updatedAt: new Date }).where(eq(gameDeploymentState.gameId, gameId));
+    });
+    setAttribute("app.deploy.pruned_secret_count", keys.length);
+  }
   async ensureDashboardSessionSecret(deploymentId, existingSecrets, hasPriorDeployment) {
     if (existingSecrets === null && hasPriorDeployment) {
       setAttribute("app.deploy.session_secret_outcome", "check_failed_kept");
@@ -28182,13 +29724,13 @@ class DeployService {
       return this.deps.config.baseUrl;
     }
     try {
-      return await getTunnelUrl();
-    } catch {
+      return await getTunnelUrl(this.deps.config.baseUrl);
+    } catch (error) {
       setAttributes({
         "app.deploy.tunnel_available": false,
         "app.deploy.failure_kind": "local_tunnel_unavailable"
       });
-      throw new ValidationError("Local tunnel is not running. Ensure cloudflared is installed (`brew install cloudflared`) and the tunnel DevCommand started successfully.");
+      throw new ValidationError(errorMessage(error));
     }
   }
   async deployToCloudflare(args2) {
@@ -28213,6 +29755,10 @@ class DeployService {
         target: record.target,
         url: record.url,
         codeHash: record.codeHash,
+        schemaHash: record.schemaHash ?? null,
+        schemaFingerprint: record.schemaFingerprint ?? null,
+        timeTravelBookmark: record.timeTravelBookmark ?? null,
+        bookmarkCapturedAt: record.bookmarkCapturedAt ?? null,
         resources: record.resources,
         isActive: true
       });
@@ -28222,8 +29768,10 @@ class DeployService {
     await this.deps.alerts.notifyDeploymentFailure(failure).catch(catchAttrs("alerts.delivery", { "app.alerts.type": "deployment_failure" }));
   }
 }
+var PUSH_RESERVATION_FINGERPRINT = "reserved:push-in-flight", NO_DATABASE_WORK;
 var init_deploy_service = __esm(() => {
   init_drizzle_orm();
+  init_src4();
   init_playcademy();
   init_src();
   init_helpers_index();
@@ -28231,9 +29779,17 @@ var init_deploy_service = __esm(() => {
   init_spans();
   init_tunnel();
   init_errors();
+  init_baseline_validation_util();
   init_dashboard_util();
   init_deployment_util();
+  init_migration_util();
   init_worker_keys_util();
+  NO_DATABASE_WORK = {
+    schemaHash: null,
+    schemaFingerprint: null,
+    timeTravelBookmark: null,
+    bookmarkCapturedAt: null
+  };
 });
 
 // ../api-core/src/services/developer.service.ts
@@ -29687,7 +31243,7 @@ function createGameServices(deps) {
     }
   };
 }
-var init_game2 = __esm(() => {
+var init_game3 = __esm(() => {
   init_dashboard_service();
   init_deploy_job_service();
   init_deploy_service();
@@ -29886,16 +31442,37 @@ class AlertsService {
     await this.sendAlert(discord, embed.build());
   }
   async notifyDeploymentFailure(failure) {
-    const discord = this.recordAlert("deployment_failure");
+    const refused = DEPLOY_REFUSAL_CODES.has(failure.errorCode ?? "");
+    const discord = this.recordAlert(refused ? "deployment_blocked" : "deployment_failure");
     if (!discord) {
       return;
     }
-    const [title, subject] = failure.target === "dashboard" ? ["❌ Dashboard Deployment Failed", "Dashboard deployment"] : ["❌ Deployment Failed", "Deployment"];
-    const embed = new DiscordEmbedBuilder().setTitle(title).setDescription(`${subject} failed for **${failure.displayName || failure.slug}** (**${this.getEnvironment()}**).`).setColor(DiscordColors.RED).addField("Slug", failure.slug, true);
+    const [noun, subject] = failure.target === "dashboard" ? ["Dashboard Deployment", "Dashboard deployment"] : ["Deployment", "Deployment"];
+    const title = refused ? `\uD83D\uDEA7 ${noun} Blocked` : `❌ ${noun} Failed`;
+    const verb = refused ? "was blocked" : "failed";
+    const embed = new DiscordEmbedBuilder().setTitle(title).setDescription(`${subject} ${verb} for **${failure.displayName || failure.slug}** (**${this.getEnvironment()}**).`).setColor(refused ? DiscordColors.YELLOW : DiscordColors.RED).addField("Slug", failure.slug, true);
     if (failure.developer) {
       embed.addField("Developer", failure.developer.email || failure.developer.id, true);
     }
-    embed.addField("Error", failure.error, false).setFooter("Playcademy Developer Platform").setTimestamp();
+    embed.addField(refused ? "Reason" : "Error", failure.error, false);
+    if (refused) {
+      embed.addField("Next step", "The developer received repair guidance in their terminal", false);
+    }
+    embed.setFooter("Playcademy Developer Platform").setTimestamp();
+    await this.sendAlert(discord, embed.build());
+  }
+  async notifyDeployBlocked(blocked) {
+    const discord = this.recordAlert("deployment_blocked");
+    if (!discord) {
+      return;
+    }
+    const embed = new DiscordEmbedBuilder().setTitle("\uD83D\uDEA7 Deployment Blocked").setDescription(`Deployment was blocked for **${blocked.displayName || blocked.slug}** (**${this.getEnvironment()}**).`).setColor(DiscordColors.YELLOW).addField("Slug", blocked.slug, true);
+    if (blocked.developer) {
+      embed.addField("Developer", blocked.developer.email || blocked.developer.id, true);
+    }
+    embed.addField("Reason", blocked.reason, false);
+    embed.addField("Next step", "The developer received repair guidance in their terminal", false);
+    embed.setFooter("Playcademy Developer Platform").setTimestamp();
     await this.sendAlert(discord, embed.build());
   }
   async notifyGameDeletion(game2) {
@@ -29956,6 +31533,7 @@ var DISCORD_FIELD_LIMIT = 1024;
 var init_alerts_service = __esm(() => {
   init_discord();
   init_spans();
+  init_game2();
 });
 
 // ../api-core/src/services/kv-backup.service.ts
@@ -30388,6 +31966,15 @@ class DatabaseService {
   constructor(deps) {
     this.deps = deps;
   }
+  static remapD1Resource(resources, d1ResourceName, databaseId) {
+    return {
+      resources: {
+        ...resources,
+        d1: resources.d1?.map((dbResource) => dbResource.name === d1ResourceName ? { ...dbResource, id: databaseId } : dbResource)
+      },
+      timeTravelBookmark: null
+    };
+  }
   getD1() {
     const d1 = this.deps.cloudflare?.d1;
     if (!d1) {
@@ -30406,11 +31993,7 @@ class DatabaseService {
     try {
       await this.deps.cloudflare.updateD1Binding(dashboardDeployment.deploymentId, databaseId);
       if (dashboardDeployment.resources?.d1?.length) {
-        const updatedResources = {
-          ...dashboardDeployment.resources,
-          d1: dashboardDeployment.resources.d1.map((dbResource) => dbResource.name === d1ResourceName ? { ...dbResource, id: databaseId } : dbResource)
-        };
-        await this.deps.db.update(gameDeployments).set({ resources: updatedResources }).where(eq(gameDeployments.id, dashboardDeployment.id));
+        await this.deps.db.update(gameDeployments).set(DatabaseService.remapD1Resource(dashboardDeployment.resources, d1ResourceName, databaseId)).where(eq(gameDeployments.id, dashboardDeployment.id));
       }
       setAttribute("app.database.dashboard_binding", "updated");
     } catch (error) {
@@ -30421,20 +32004,36 @@ class DatabaseService {
       });
     }
   }
-  async reset(slug, user, schema2) {
+  async reset(slug, user, request = {}) {
+    const { schema: schema2, database } = request;
     setAttributes({
       "app.database.operation": "reset",
+      "app.database.mode": database?.mode ?? (schema2 ? "legacy" : "none"),
       "app.database.schema_size": schema2?.sql.length,
       "app.database.schema_version": schema2?.hash
     });
     const d1 = this.getD1();
     const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const state = await this.deps.db.query.gameDeploymentState.findFirst({
+      where: eq(gameDeploymentState.gameId, game2.id)
+    });
+    if (isSchemaAdopted(state) && !database) {
+      if (schema2) {
+        throw new LegacySchemaUpgradeRequiredError;
+      }
+      throw new ValidationError("This game's database state is server-managed: resetting it requires " + "the mode-aware rebuild payload so the recorded state matches the " + "new database. Run the reset through the Playcademy CLI.");
+    }
     const deploymentId = getGameDeploymentId(slug, this.deps.config.sstStage);
+    let resetDatabaseId = null;
     try {
       const databaseId = await d1.reset(deploymentId);
+      resetDatabaseId = databaseId;
       setAttribute("app.database.id", databaseId);
       let schemaPushed = false;
-      if (schema2?.sql) {
+      if (database) {
+        await this.rebuildDatabase(databaseId, database, game2.id, user);
+        schemaPushed = true;
+      } else if (schema2?.sql) {
         await d1.executeSchema(databaseId, schema2);
         schemaPushed = true;
       }
@@ -30450,11 +32049,7 @@ class DatabaseService {
       });
       setAttribute("app.database.active_deployment_found", Boolean(activeDeployment));
       if (activeDeployment?.resources?.d1?.length) {
-        const updatedResources = {
-          ...activeDeployment.resources,
-          d1: activeDeployment.resources.d1.map((dbResource) => dbResource.name === deploymentId ? { ...dbResource, id: databaseId } : dbResource)
-        };
-        await this.deps.db.update(gameDeployments).set({ resources: updatedResources }).where(eq(gameDeployments.id, activeDeployment.id));
+        await this.deps.db.update(gameDeployments).set(DatabaseService.remapD1Resource(activeDeployment.resources, deploymentId, databaseId)).where(eq(gameDeployments.id, activeDeployment.id));
       }
       await this.syncDashboardD1Binding(game2.id, deploymentId, databaseId);
       setAttributes({
@@ -30468,18 +32063,81 @@ class DatabaseService {
         schemaPushed
       };
     } catch (error) {
+      if (database && resetDatabaseId) {
+        await this.recordLiveFingerprint(game2.id, resetDatabaseId);
+      }
       this.deps.alerts.notifyDatabaseResetFailure({
         slug,
         displayName: game2.displayName,
         error: errorMessage(error),
         developer: { id: user.id, email: user.email }
       }).catch(catchAttrs("alerts.delivery", { "app.alerts.type": "database_reset" }));
+      if (error instanceof DomainError) {
+        throw error;
+      }
       throw new ValidationError(`Database reset failed: ${errorMessage(error)}`);
     }
   }
+  async rebuildDatabase(databaseId, payload, gameId, user) {
+    const d1 = this.getD1();
+    if (payload.mode === "migrate") {
+      const deployId = `reset:${crypto.randomUUID()}`;
+      await d1.ensureMigrationLedger(databaseId);
+      for (const migration of payload.migrations) {
+        await d1.applyMigration(databaseId, {
+          tag: migration.tag,
+          statements: migration.statements,
+          checksum: migration.checksum,
+          deployId,
+          appliedBy: user.id
+        });
+      }
+      setAttribute("app.database.migrations_replayed", payload.migrations.length);
+      const fingerprint2 = await d1.fingerprintSchema(databaseId);
+      await this.persistDeploymentState(gameId, {
+        schemaFingerprint: fingerprint2.fingerprint,
+        schemaHash: null,
+        schemaSnapshot: null
+      });
+      return;
+    }
+    const statements = splitSqlStatements(payload.sql);
+    if (statements.length > 0) {
+      await d1.batch(databaseId, [
+        { sql: "PRAGMA defer_foreign_keys = on" },
+        ...statements.map((statement) => ({ sql: statement })),
+        { sql: "PRAGMA defer_foreign_keys = off" }
+      ]);
+    }
+    setAttribute("app.database.push_statement_count", statements.length);
+    const fingerprint = await d1.fingerprintSchema(databaseId);
+    await this.persistDeploymentState(gameId, {
+      schemaFingerprint: fingerprint.fingerprint,
+      schemaHash: payload.nextHash,
+      schemaSnapshot: payload.nextSnapshot
+    });
+  }
+  async persistDeploymentState(gameId, patch) {
+    const set = { ...patch, updatedAt: new Date };
+    await this.deps.db.insert(gameDeploymentState).values({ gameId, baselineSource: "deploy", ...set }).onConflictDoUpdate({ target: gameDeploymentState.gameId, set });
+  }
+  async recordLiveFingerprint(gameId, databaseId) {
+    try {
+      const fingerprint = await this.getD1().fingerprintSchema(databaseId);
+      await this.persistDeploymentState(gameId, {
+        schemaFingerprint: fingerprint.fingerprint
+      });
+    } catch (error) {
+      addEvent("database.fingerprint_persist_failed", {
+        "exception.type": errorType(error),
+        "app.error.message": errorMessage(error)
+      });
+    }
+  }
 }
 var init_database_service = __esm(() => {
   init_drizzle_orm();
+  init_src4();
   init_helpers_index();
   init_tables_index();
   init_spans();
@@ -30487,6 +32145,527 @@ var init_database_service = __esm(() => {
   init_deployment_util();
 });
 
+// ../api-core/src/utils/secrets.util.ts
+async function listUserSecretKeys(cloudflare2, deploymentId) {
+  try {
+    const allKeys = await cloudflare2.listSecrets(deploymentId);
+    return allKeys.filter((key) => key.startsWith(SECRETS_PREFIX)).map((key) => key.slice(SECRETS_PREFIX.length));
+  } catch (error) {
+    const message = errorMessage(error);
+    if (message.includes("not found") || message.includes("10007")) {
+      return null;
+    }
+    throw error;
+  }
+}
+var init_secrets_util = __esm(() => {
+  init_src();
+});
+
+// ../api-core/src/services/deployment-state.service.ts
+function historyEventEntry(event) {
+  const base = { at: event.createdAt.toISOString(), by: event.email ?? DELETED_ACCOUNT_LABEL };
+  if (event.kind === "restore" && "restoredTo" in event.payload) {
+    return [{ kind: "restore", ...base, restoredTo: event.payload.restoredTo }];
+  }
+  if (event.kind === "blocked" && "code" in event.payload) {
+    return [
+      { kind: "blocked", ...base, code: event.payload.code, reason: event.payload.reason }
+    ];
+  }
+  return [];
+}
+function databaseIdFromResources(resources, deploymentId) {
+  const database = resources?.d1?.find((db2) => db2.name === deploymentId) ?? resources?.d1?.[0];
+  return database?.id ?? null;
+}
+function restorePointCapturedAt(row) {
+  return row.bookmarkCapturedAt ?? row.deployedAt;
+}
+
+class DeploymentStateService {
+  deps;
+  constructor(deps) {
+    this.deps = deps;
+  }
+  async partitionSecretKeys(slug, manifest) {
+    const managedKeys = Object.keys(manifest ?? {});
+    if (!this.deps.cloudflare) {
+      addEvent("deployment_state.secret_keys_unavailable", {
+        "app.error.message": "Cloudflare provider not configured"
+      });
+      return { managedKeys, unmanagedKeys: null };
+    }
+    const deploymentId = getGameDeploymentId(slug, this.deps.config.sstStage);
+    const remoteKeys = await listUserSecretKeys(this.deps.cloudflare, deploymentId);
+    if (remoteKeys === null) {
+      return { managedKeys, unmanagedKeys: [] };
+    }
+    const managed = new Set(managedKeys);
+    return {
+      managedKeys,
+      unmanagedKeys: remoteKeys.filter((key) => !managed.has(key))
+    };
+  }
+  async readAppliedMigrations(slug, resources) {
+    if (!this.deps.cloudflare || !resources?.d1?.length) {
+      return null;
+    }
+    const deploymentId = getGameDeploymentId(slug, this.deps.config.sstStage);
+    const databaseId = databaseIdFromResources(resources, deploymentId);
+    if (!databaseId) {
+      return null;
+    }
+    const ledger = await this.deps.cloudflare.d1.readMigrationLedger(databaseId);
+    setAttributes({ "app.deployment_state.applied_migrations": ledger.length });
+    return ledger.map((row) => ({
+      tag: row.tag,
+      checksum: row.checksum,
+      checksumAlgo: row.checksum_algo
+    }));
+  }
+  async get(slug, user, options = {}) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const [state, gameDeployment, dashboardDeployment, lastSucceededJob, lastFailedJob] = await Promise.all([
+      this.deps.db.query.gameDeploymentState.findFirst({
+        where: eq(gameDeploymentState.gameId, game2.id)
+      }),
+      this.deps.db.query.gameDeployments.findFirst({
+        where: activeDeploymentWhere(game2.id, "game"),
+        columns: { codeHash: true, url: true, deployedAt: true, resources: true }
+      }),
+      this.deps.db.query.gameDeployments.findFirst({
+        where: activeDeploymentWhere(game2.id, "dashboard"),
+        columns: { url: true, deployedAt: true }
+      }),
+      findLastSuccessfulDeployWithEmail(this.deps.db, game2.id),
+      this.deps.db.query.gameDeployJobs.findFirst({
+        where: and(eq(gameDeployJobs.gameId, game2.id), eq(gameDeployJobs.status, "failed")),
+        orderBy: desc(deployJobInstant()),
+        columns: { events: true }
+      })
+    ]);
+    const [secrets, appliedMigrations] = await Promise.all([
+      this.partitionSecretKeys(slug, state?.secretsManifest ?? null),
+      this.readAppliedMigrations(slug, gameDeployment?.resources ?? null)
+    ]);
+    setAttributes({
+      "app.deployment_state.seeded": Boolean(state),
+      "app.deployment_state.game_deployed": Boolean(gameDeployment),
+      "app.deployment_state.dashboard_deployed": Boolean(dashboardDeployment)
+    });
+    return {
+      gameId: game2.id,
+      seeded: Boolean(state),
+      game: gameDeployment ? {
+        codeHash: gameDeployment.codeHash,
+        buildHash: state?.buildHash ?? null,
+        url: gameDeployment.url,
+        deployedAt: gameDeployment.deployedAt.toISOString()
+      } : null,
+      dashboard: dashboardDeployment ? {
+        url: dashboardDeployment.url,
+        deployedAt: dashboardDeployment.deployedAt.toISOString()
+      } : null,
+      database: {
+        appliedMigrations,
+        lastFailure: parseMigrationFailure(lastFailedJob?.events ?? null),
+        schemaHash: state?.schemaHash ?? null,
+        schemaFingerprint: state?.schemaFingerprint ?? null,
+        ...options.includeSchemaSnapshot && {
+          schemaSnapshot: state?.schemaSnapshot ?? null
+        }
+      },
+      secrets,
+      integrationsHash: state?.integrationsHash ?? null,
+      compatibilityDate: state?.compatibilityDate ?? null,
+      lastDeploy: lastSucceededJob ? {
+        at: lastSucceededJob.at.toISOString(),
+        by: lastSucceededJob.email ?? DELETED_ACCOUNT_LABEL
+      } : null
+    };
+  }
+  requireCloudflare() {
+    if (!this.deps.cloudflare) {
+      throw new ValidationError("Deployment-state operations are not available in this environment");
+    }
+    return this.deps.cloudflare;
+  }
+  async resolveDatabaseId(slug, gameId) {
+    const databaseId = await this.findDatabaseId(slug, gameId);
+    if (!databaseId) {
+      throw new ValidationError("Game has no deployed database — deploy with a database binding first");
+    }
+    return databaseId;
+  }
+  findSchemaHashState(gameId) {
+    return this.deps.db.query.gameDeploymentState.findFirst({
+      where: eq(gameDeploymentState.gameId, gameId),
+      columns: { schemaHash: true }
+    });
+  }
+  async findDatabaseId(slug, gameId) {
+    const deployment = await this.deps.db.query.gameDeployments.findFirst({
+      where: activeDeploymentWhere(gameId, "game"),
+      columns: { resources: true }
+    });
+    return databaseIdFromResources(deployment?.resources, getGameDeploymentId(slug, this.deps.config.sstStage));
+  }
+  async baseline(slug, input, user) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const cf = this.requireCloudflare();
+    const state = await this.deps.db.query.gameDeploymentState.findFirst({
+      where: eq(gameDeploymentState.gameId, game2.id)
+    });
+    const schemaAdopted = isSchemaAdopted(state);
+    const migrateOnlyClaim = Boolean(input.lastAppliedMigrationTag) && input.schemaHash === undefined && input.schemaSnapshot === undefined;
+    if (schemaAdopted && !migrateOnlyClaim) {
+      throw new BaselineAlreadyAdoptedError(state?.baselineSource ?? null);
+    }
+    const databaseId = await this.resolveDatabaseId(slug, game2.id);
+    const [ledger, live] = await Promise.all([
+      cf.d1.readMigrationLedger(databaseId),
+      cf.d1.fingerprintSchema(databaseId)
+    ]);
+    const verdict = evaluateBaselineGuardrails({
+      ledgerTags: ledger.map((row) => row.tag),
+      liveTables: live.tables
+    });
+    if (verdict === "ledger-not-empty") {
+      throw new BaselineLedgerNotEmptyError(ledger.map((row) => row.tag));
+    }
+    if (verdict === "database-empty") {
+      throw new BaselineDatabaseEmptyError;
+    }
+    if (schemaAdopted && state?.schemaFingerprint && live.fingerprint !== state.schemaFingerprint) {
+      throw new DeploymentStateDriftError({
+        expectedFingerprint: state.schemaFingerprint,
+        actualFingerprint: live.fingerprint
+      });
+    }
+    if (input.lastAppliedMigrationTag && input.evidence?.length) {
+      const [tables, lastDeploy] = await Promise.all([
+        cf.d1.readTableColumns(databaseId, live.tables),
+        findLastSuccessfulDeploy(this.deps.db, game2.id)
+      ]);
+      assertBaselineClaimValid({
+        claimedTag: input.lastAppliedMigrationTag,
+        evidence: input.evidence,
+        tables,
+        indexes: new Set(live.indexes),
+        views: new Set(live.views),
+        lastDeployAt: lastDeploy?.at ?? null,
+        allowUnverified: Boolean(input.allowUnverified),
+        source: "manual",
+        gameId: game2.id,
+        userId: user.id
+      });
+    }
+    let recordedTags = [];
+    if (input.lastAppliedMigrationTag) {
+      const slice = sliceJournalToTag(input.journal ?? [], input.lastAppliedMigrationTag);
+      if (!slice) {
+        throw new ValidationError(`lastAppliedMigrationTag '${input.lastAppliedMigrationTag}' is not in the ` + "submitted journal");
+      }
+      await cf.d1.ensureMigrationLedger(databaseId);
+      await cf.d1.recordLedgerRows(databaseId, {
+        rows: slice,
+        deployId: `baseline:${crypto.randomUUID()}`,
+        appliedBy: user.id,
+        source: "baseline"
+      });
+      recordedTags = slice.map((entry) => entry.tag);
+    }
+    const graduating = migrateOnlyClaim && isPushAdopted(state);
+    const set = {
+      ...graduating ? { schemaHash: null, schemaSnapshot: null } : {
+        ...input.schemaHash !== undefined && { schemaHash: input.schemaHash },
+        ...input.schemaSnapshot !== undefined && {
+          schemaSnapshot: input.schemaSnapshot
+        }
+      },
+      schemaFingerprint: live.fingerprint,
+      baselineSource: "manual-baseline",
+      updatedAt: new Date
+    };
+    await this.persistDeploymentState(game2.id, set);
+    addEvent("deployment_state.baseline_recorded", {
+      "app.game.id": game2.id,
+      "app.deployment_state.baseline_source": "manual-baseline",
+      "app.deployment_state.baseline_ledger_rows": recordedTags.length,
+      "app.deployment_state.baseline_has_snapshot": input.schemaSnapshot !== undefined,
+      "app.deployment_state.baseline_graduated_from_push": graduating
+    });
+    return this.get(slug, user);
+  }
+  async realignMigration(slug, tag, checksum, user) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const cf = this.requireCloudflare();
+    const databaseId = await this.resolveDatabaseId(slug, game2.id);
+    const ledger = await cf.d1.readMigrationLedger(databaseId);
+    if (!ledger.some((row) => row.tag === tag)) {
+      throw new NotFoundError("Applied migration", tag);
+    }
+    const updated = await cf.d1.updateLedgerChecksum(databaseId, { tag, checksum });
+    if (!updated) {
+      throw new NotFoundError("Applied migration", tag);
+    }
+    addEvent("deployment_state.migration_realigned", {
+      "app.game.id": game2.id,
+      "app.d1.migration_tag": tag,
+      "app.user.id": user.id
+    });
+    return { tag, checksum, checksumAlgo: MIGRATION_CHECKSUM_ALGO };
+  }
+  async persistDeploymentState(gameId, set) {
+    await this.deps.db.insert(gameDeploymentState).values({ gameId, ...set }).onConflictDoUpdate({ target: gameDeploymentState.gameId, set });
+  }
+  async updateDeploymentState(gameId, set) {
+    const updated = await this.deps.db.update(gameDeploymentState).set(set).where(eq(gameDeploymentState.gameId, gameId)).returning({ gameId: gameDeploymentState.gameId });
+    return updated.length > 0;
+  }
+  async resolveMigration(slug, tag, input, user) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const cf = this.requireCloudflare();
+    const databaseId = await this.resolveDatabaseId(slug, game2.id);
+    const [ledger, live] = await Promise.all([
+      cf.d1.readMigrationLedger(databaseId),
+      cf.d1.fingerprintSchema(databaseId)
+    ]);
+    const exists2 = ledger.some((row) => row.tag === tag);
+    if (input.resolution === "applied") {
+      if (!input.checksum) {
+        throw new ValidationError("Resolving a migration as 'applied' requires its checksum");
+      }
+      if (exists2) {
+        throw new AlreadyExistsError(`Migration '${tag}' is already recorded as applied`);
+      }
+      await cf.d1.ensureMigrationLedger(databaseId);
+      await cf.d1.recordLedgerRows(databaseId, {
+        rows: [{ tag, checksum: input.checksum }],
+        deployId: `resolve:${crypto.randomUUID()}`,
+        appliedBy: user.id,
+        source: "resolve"
+      });
+    } else {
+      if (!exists2) {
+        throw new NotFoundError("Migration ledger row", tag);
+      }
+      await cf.d1.deleteLedgerRow(databaseId, tag);
+    }
+    const fingerprintRecorded = await this.updateDeploymentState(game2.id, {
+      schemaFingerprint: live.fingerprint,
+      updatedAt: new Date
+    });
+    addEvent("deployment_state.migration_resolved", {
+      "app.game.id": game2.id,
+      "app.d1.migration_tag": tag,
+      "app.deployment_state.resolution": input.resolution,
+      "app.deployment_state.fingerprint_rerecorded": fingerprintRecorded,
+      "app.user.id": user.id
+    });
+    return {
+      tag,
+      resolution: input.resolution,
+      schemaFingerprint: live.fingerprint,
+      fingerprintRecorded
+    };
+  }
+  async history(slug, user, options = {}) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const limit = options.limit ?? 20;
+    const [jobs, events] = await Promise.all([
+      this.deps.db.select({
+        status: gameDeployJobs.status,
+        createdAt: gameDeployJobs.createdAt,
+        completedAt: gameDeployJobs.completedAt,
+        deployId: gameDeployJobs.deployId,
+        error: gameDeployJobs.error,
+        email: users.email
+      }).from(gameDeployJobs).leftJoin(users, eq(gameDeployJobs.userId, users.id)).where(eq(gameDeployJobs.gameId, game2.id)).orderBy(desc(deployJobInstant())).limit(limit),
+      this.deps.db.select({
+        kind: gameDeployEvents.kind,
+        payload: gameDeployEvents.payload,
+        createdAt: gameDeployEvents.createdAt,
+        email: users.email
+      }).from(gameDeployEvents).leftJoin(users, eq(gameDeployEvents.userId, users.id)).where(eq(gameDeployEvents.gameId, game2.id)).orderBy(desc(gameDeployEvents.createdAt)).limit(limit)
+    ]);
+    setAttributes({
+      "app.deployment_state.history_jobs": jobs.length,
+      "app.deployment_state.history_events": events.length
+    });
+    const deploys = jobs.map((job) => ({
+      kind: "deploy",
+      status: job.status,
+      at: (job.completedAt ?? job.createdAt).toISOString(),
+      completedAt: job.completedAt?.toISOString() ?? null,
+      by: job.email ?? DELETED_ACCOUNT_LABEL,
+      deployId: job.deployId,
+      error: job.error
+    }));
+    const merged = [...deploys, ...events.flatMap(historyEventEntry)].toSorted((a, b) => a.at < b.at ? 1 : -1).slice(0, limit);
+    return { deploys: merged };
+  }
+  async restorePoints(slug, user) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const retentionCutoff = new Date(Date.now() - D1_TIME_TRAVEL_RETENTION_DAYS * 24 * 60 * 60 * 1000);
+    const [currentDatabaseId, rows, state] = await Promise.all([
+      this.findDatabaseId(slug, game2.id),
+      this.deps.db.query.gameDeployments.findMany({
+        where: and(eq(gameDeployments.gameId, game2.id), eq(gameDeployments.target, "game"), isNotNull(gameDeployments.timeTravelBookmark), gte(gameDeployments.deployedAt, retentionCutoff)),
+        orderBy: desc(gameDeployments.deployedAt),
+        limit: 100,
+        columns: {
+          id: true,
+          deployedAt: true,
+          bookmarkCapturedAt: true,
+          isActive: true,
+          resources: true
+        }
+      }),
+      this.findSchemaHashState(game2.id)
+    ]);
+    if (isPushAdopted(state)) {
+      return { restorePoints: [], restoreUnsupported: true };
+    }
+    if (!currentDatabaseId) {
+      return { restorePoints: [], restoreUnsupported: false };
+    }
+    const deploymentId = getGameDeploymentId(slug, this.deps.config.sstStage);
+    const restorable = rows.filter((row) => databaseIdFromResources(row.resources, deploymentId) === currentDatabaseId && restorePointCapturedAt(row) >= retentionCutoff).slice(0, 20);
+    setAttributes({ "app.deployment_state.restore_points": restorable.length });
+    return {
+      restorePoints: restorable.map((row) => ({
+        id: row.id,
+        capturedAt: restorePointCapturedAt(row).toISOString(),
+        active: row.isActive
+      })),
+      restoreUnsupported: false
+    };
+  }
+  async restoreToBookmark(slug, input, user) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const cf = this.requireCloudflare();
+    const [row, state, currentDatabaseId, runningJob] = await Promise.all([
+      this.deps.db.query.gameDeployments.findFirst({
+        where: and(eq(gameDeployments.id, input.restorePointId), eq(gameDeployments.gameId, game2.id), eq(gameDeployments.target, "game")),
+        columns: {
+          id: true,
+          timeTravelBookmark: true,
+          deployedAt: true,
+          bookmarkCapturedAt: true,
+          resources: true
+        }
+      }),
+      this.findSchemaHashState(game2.id),
+      this.findDatabaseId(slug, game2.id),
+      this.deps.db.query.gameDeployJobs.findFirst({
+        where: and(eq(gameDeployJobs.gameId, game2.id), or(eq(gameDeployJobs.status, "pending"), and(eq(gameDeployJobs.status, "running"), gt(gameDeployJobs.leaseExpiresAt, new Date)))),
+        columns: { id: true }
+      })
+    ]);
+    if (!row?.timeTravelBookmark) {
+      throw new NotFoundError("Bookmark", input.restorePointId);
+    }
+    if (isPushAdopted(state)) {
+      throw new ValidationError("Restore is not supported for push-mode projects: rewinding the " + "database would leave future push deploys diffing against the " + "wrong schema.", { code: DEPLOY_ERROR_CODES.restoreUnsupported });
+    }
+    if (!currentDatabaseId) {
+      throw new ValidationError("Game has no deployed database — deploy with a database binding first");
+    }
+    const databaseId = currentDatabaseId;
+    const deploymentId = getGameDeploymentId(slug, this.deps.config.sstStage);
+    if (databaseIdFromResources(row.resources, deploymentId) !== databaseId) {
+      throw new ValidationError("This bookmark was captured on a previous database (a reset replaced " + "it since) and can no longer be restored");
+    }
+    const retentionCutoff = new Date(Date.now() - D1_TIME_TRAVEL_RETENTION_DAYS * 24 * 60 * 60 * 1000);
+    if (restorePointCapturedAt(row) < retentionCutoff) {
+      throw new ValidationError(`This bookmark is older than Time Travel's ${D1_TIME_TRAVEL_RETENTION_DAYS}-day ` + "retention window and can no longer be restored.", { code: DEPLOY_ERROR_CODES.restoreExpired });
+    }
+    if (runningJob) {
+      throw new ValidationError("A deploy is currently running for this game. Wait for it to finish, " + "then restore.", { code: DEPLOY_ERROR_CODES.restoreBlockedByDeploy });
+    }
+    const restored = await cf.d1.restoreBookmark(databaseId, row.timeTravelBookmark);
+    const restoredTo = restorePointCapturedAt(row).toISOString();
+    let live;
+    let fingerprintRecorded;
+    try {
+      live = await cf.d1.fingerprintSchema(databaseId);
+      fingerprintRecorded = await this.updateDeploymentState(game2.id, {
+        schemaFingerprint: live.fingerprint,
+        updatedAt: new Date
+      });
+      await this.deps.db.insert(gameDeployEvents).values({
+        gameId: game2.id,
+        userId: user.id,
+        kind: "restore",
+        payload: { restoredTo, previousBookmark: restored.previousBookmark }
+      });
+    } catch (error) {
+      throw new ValidationError("The database WAS restored, but re-recording its schema " + `fingerprint failed (${errorMessage(error)}). Run the same ` + "restore again to complete it.", { code: DEPLOY_ERROR_CODES.restoreIncomplete });
+    }
+    addEvent("deployment_state.bookmark_restored", {
+      "app.game.id": game2.id,
+      "app.deployment_state.restore_point": row.id,
+      "app.deployment_state.fingerprint_rerecorded": fingerprintRecorded,
+      "app.user.id": user.id
+    });
+    return {
+      restorePointId: row.id,
+      restoredTo,
+      schemaFingerprint: live.fingerprint,
+      fingerprintRecorded,
+      previousBookmark: restored.previousBookmark
+    };
+  }
+  async reportDeployBlocked(slug, user, report) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const recent = await this.deps.db.query.gameDeployEvents.findMany({
+      where: and(eq(gameDeployEvents.gameId, game2.id), eq(gameDeployEvents.kind, "blocked"), gt(gameDeployEvents.createdAt, new Date(Date.now() - BLOCKED_ALERT_DEDUP_MS))),
+      orderBy: desc(gameDeployEvents.createdAt),
+      limit: 10,
+      columns: { payload: true }
+    });
+    const duplicate = recent.some((event) => ("code" in event.payload) && event.payload.code === report.code);
+    await this.deps.db.insert(gameDeployEvents).values({
+      gameId: game2.id,
+      userId: user.id,
+      kind: "blocked",
+      payload: { code: report.code, reason: report.reason }
+    });
+    addEvent("deployment_state.deploy_blocked", {
+      "app.game.id": game2.id,
+      "app.deploy.blocked_code": report.code,
+      "app.user.id": user.id,
+      "app.alerts.deduped": duplicate
+    });
+    if (!duplicate) {
+      await this.deps.alerts.notifyDeployBlocked({
+        slug,
+        displayName: game2.displayName,
+        reason: report.reason,
+        developer: { id: user.id, email: user.email ?? null }
+      });
+    }
+  }
+}
+var BLOCKED_ALERT_DEDUP_MS;
+var init_deployment_state_service = __esm(() => {
+  init_drizzle_orm();
+  init_src4();
+  init_src();
+  init_helpers_index();
+  init_tables_index();
+  init_spans();
+  init_game2();
+  init_errors();
+  init_baseline_validation_util();
+  init_deployment_util();
+  init_migration_util();
+  init_secrets_util();
+  BLOCKED_ALERT_DEDUP_MS = 10 * 60 * 1000;
+});
+
 // ../api-core/src/services/domain.service.ts
 class DomainService {
   deps;
@@ -30853,6 +33032,7 @@ var init_kv_service = __esm(() => {
 // ../api-core/src/services/secrets.service.ts
 class SecretsService {
   deps;
+  pepperPromise = null;
   constructor(deps) {
     this.deps = deps;
   }
@@ -30865,36 +33045,69 @@ class SecretsService {
   getGameDeploymentId(slug) {
     return getGameDeploymentId(slug, this.deps.config.sstStage);
   }
-  async listKeys(slug, user) {
-    await this.deps.validateDeveloperAccessBySlug(user, slug);
-    const cf = this.getCloudflare();
-    const deploymentId = this.getGameDeploymentId(slug);
-    try {
-      const allKeys = await cf.listSecrets(deploymentId);
-      const userKeys = allKeys.filter((k) => k.startsWith(SECRETS_PREFIX)).map((k) => k.slice(SECRETS_PREFIX.length));
-      setAttributes({
-        "app.secrets.operation": "list",
-        "app.secrets.count": userKeys.length,
-        "app.secrets.game_deployed": true
-      });
-      return userKeys;
-    } catch (error) {
-      const message = errorMessage(error);
-      if (message.includes("not found") || message.includes("10007")) {
+  getPepper() {
+    const pepperSecret = this.deps.config.secretsManifestPepper;
+    if (!pepperSecret) {
+      throw new ValidationError("Secrets manifest is not configured (missing manifest pepper secret)");
+    }
+    this.pepperPromise ??= deriveSecretsManifestPepper(pepperSecret);
+    return this.pepperPromise;
+  }
+  async computeManifestEntries(gameId, secrets) {
+    const pepper = await this.getPepper();
+    const entries = {};
+    for (const [key, value] of Object.entries(secrets)) {
+      entries[key] = await computeSecretDigest(pepper, { gameId, key, value });
+    }
+    return entries;
+  }
+  async readManifest(gameId) {
+    const state = await this.deps.db.query.gameDeploymentState.findFirst({
+      where: eq(gameDeploymentState.gameId, gameId),
+      columns: { secretsManifest: true }
+    });
+    return state?.secretsManifest ?? {};
+  }
+  async upsertManifestEntries(gameId, entries) {
+    const merged = sql`coalesce(${gameDeploymentState.secretsManifest}, '{}'::jsonb) || ${JSON.stringify(entries)}::jsonb`;
+    await this.deps.db.insert(gameDeploymentState).values({ gameId, secretsManifest: entries, updatedAt: new Date }).onConflictDoUpdate({
+      target: gameDeploymentState.gameId,
+      set: { secretsManifest: merged, updatedAt: new Date }
+    });
+  }
+  async removeManifestKey(gameId, key) {
+    await this.deps.db.update(gameDeploymentState).set({
+      secretsManifest: sql`coalesce(${gameDeploymentState.secretsManifest}, '{}'::jsonb) - ${key}::text`,
+      updatedAt: new Date
+    }).where(eq(gameDeploymentState.gameId, gameId));
+  }
+  assertNoReservedKeys(keys, operation) {
+    for (const key of keys) {
+      if (INTERNAL_SECRET_KEYS.includes(key)) {
         setAttributes({
-          "app.secrets.operation": "list",
-          "app.secrets.count": 0,
-          "app.secrets.game_deployed": false
+          "app.secrets.operation": operation,
+          "app.secrets.reserved_key_rejected": true
         });
-        return [];
+        throw new ValidationError(operation === "set" ? `Cannot set reserved secret "${key}"` : `Reserved secret "${key}" cannot be managed — remove it locally`);
       }
-      throw error;
     }
   }
-  async setSecrets(slug, newSecrets, user) {
+  async listKeys(slug, user) {
     await this.deps.validateDeveloperAccessBySlug(user, slug);
     const cf = this.getCloudflare();
     const deploymentId = this.getGameDeploymentId(slug);
+    const userKeys = await listUserSecretKeys(cf, deploymentId);
+    setAttributes({
+      "app.secrets.operation": "list",
+      "app.secrets.count": userKeys?.length ?? 0,
+      "app.secrets.game_deployed": userKeys !== null
+    });
+    return userKeys ?? [];
+  }
+  async setSecrets(slug, newSecrets, user) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const cf = this.getCloudflare();
+    const deploymentId = this.getGameDeploymentId(slug);
     const secretKeys = Object.keys(newSecrets);
     if (secretKeys.length === 0) {
       throw new ValidationError("At least one secret must be provided");
@@ -30903,14 +33116,9 @@ class SecretsService {
       if (typeof value !== "string") {
         throw new ValidationError(`Secret value for "${key}" must be a string`);
       }
-      if (INTERNAL_SECRET_KEYS.includes(key)) {
-        setAttributes({
-          "app.secrets.operation": "set",
-          "app.secrets.reserved_key_rejected": true
-        });
-        throw new ValidationError(`Cannot set reserved secret "${key}"`);
-      }
     }
+    this.assertNoReservedKeys(secretKeys, "set");
+    const manifestEntries = await this.computeManifestEntries(game2.id, newSecrets);
     try {
       const prefixedSecrets = {};
       for (const [key, value] of Object.entries(newSecrets)) {
@@ -30923,8 +33131,6 @@ class SecretsService {
         "app.secrets.game_deployed": true,
         "app.secrets.reserved_key_rejected": false
       });
-      const allKeys = await cf.listSecrets(deploymentId);
-      return allKeys.filter((k) => k.startsWith(SECRETS_PREFIX)).map((k) => k.slice(SECRETS_PREFIX.length));
     } catch (error) {
       const message = errorMessage(error);
       if (message.includes("not found") || message.includes("10007")) {
@@ -30936,6 +33142,9 @@ class SecretsService {
       }
       throw error;
     }
+    await this.upsertManifestEntries(game2.id, manifestEntries);
+    const allKeys = await cf.listSecrets(deploymentId);
+    return allKeys.filter((k) => k.startsWith(SECRETS_PREFIX)).map((k) => k.slice(SECRETS_PREFIX.length));
   }
   async deleteSecret(slug, key, user) {
     if (INTERNAL_SECRET_KEYS.includes(key)) {
@@ -30945,19 +33154,25 @@ class SecretsService {
       });
       throw new ValidationError(`Cannot delete reserved secret "${key}"`);
     }
-    await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
     const cf = this.getCloudflare();
     const deploymentId = this.getGameDeploymentId(slug);
+    const manifest = await this.readManifest(game2.id);
+    const managed = key in manifest;
     try {
       const prefixedKey = `${SECRETS_PREFIX}${key}`;
       const existingKeys = await cf.listSecrets(deploymentId);
-      if (!existingKeys.includes(prefixedKey)) {
+      const onWorker = existingKeys.includes(prefixedKey);
+      if (!onWorker && !managed) {
         throw new NotFoundError("Secret", key);
       }
-      await cf.deleteSecret(deploymentId, prefixedKey);
+      if (onWorker) {
+        await cf.deleteSecret(deploymentId, prefixedKey);
+      }
       setAttributes({
         "app.secrets.operation": "delete",
         "app.secrets.game_deployed": true,
+        "app.secrets.managed": managed,
         "app.secrets.reserved_key_rejected": false
       });
     } catch (error) {
@@ -30974,14 +33189,45 @@ class SecretsService {
       }
       throw error;
     }
+    if (managed) {
+      await this.removeManifestKey(game2.id, key);
+    }
+  }
+  async diff(slug, localSecrets, user) {
+    const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
+    const deploymentId = this.getGameDeploymentId(slug);
+    this.assertNoReservedKeys(Object.keys(localSecrets), "diff");
+    const [manifest, remoteKeys, localDigests] = await Promise.all([
+      this.readManifest(game2.id),
+      this.deps.cloudflare ? listUserSecretKeys(this.deps.cloudflare, deploymentId) : null,
+      this.computeManifestEntries(game2.id, localSecrets)
+    ]);
+    const verdicts = computeSecretsDiff({
+      localDigests,
+      manifest,
+      remoteKeys: remoteKeys ?? []
+    });
+    setAttributes({
+      "app.secrets.operation": "diff",
+      "app.secrets.game_deployed": remoteKeys !== null,
+      "app.secrets.diff_added": verdicts.added.length,
+      "app.secrets.diff_changed": verdicts.changed.length,
+      "app.secrets.diff_unchanged": verdicts.unchanged.length,
+      "app.secrets.diff_remote_only_managed": verdicts.remoteOnlyManaged.length,
+      "app.secrets.diff_remote_only_unmanaged": verdicts.remoteOnlyUnmanaged.length
+    });
+    return verdicts;
   }
 }
 var INTERNAL_SECRET_KEYS;
 var init_secrets_service = __esm(() => {
+  init_drizzle_orm();
   init_src();
+  init_tables_index();
   init_spans();
   init_errors();
   init_deployment_util();
+  init_secrets_util();
   INTERNAL_SECRET_KEYS = ["PLAYCADEMY_API_KEY", "GAME_ID", "PLAYCADEMY_BASE_URL"];
 });
 // ../edge-play/src/game/setup.ts
@@ -31519,7 +33765,10 @@ var init_emoji = __esm(() => {
 });
 
 // ../data/src/domains/game/schemas.ts
-var HttpUrlSchema, GameEmojiSchema, GameMetadataRecordSchema, InsertGameSchema, UpdateGameSchema, InsertGameDeploymentSchema, InsertGameDeployJobSchema, UpsertGameMetadataSchema, PatchGameMetadataSchema, AddGameMemberSchema, UpdateGameMemberRoleSchema, AddGameDashboardUserSchema, VerifyGameDashboardLoginSchema, AcceptGameDashboardInviteSchema, AcceptGameDashboardResetSchema, ALLOWED_UPLOAD_EXTENSIONS, InitiateUploadSchema, AddCustomHostnameSchema, SetSecretsRequestSchema, SeedRequestSchema, SchemaInfoSchema, DatabaseResetRequestSchema, VerifyTokenSchema, KVSeedRequestSchema, DeployRequestSchema;
+function requestsBinding(binding) {
+  return binding === true || Array.isArray(binding) && binding.length > 0;
+}
+var HttpUrlSchema, GameEmojiSchema, GameMetadataRecordSchema, InsertGameSchema, UpdateGameSchema, InsertGameDeploymentSchema, InsertGameDeployJobSchema, InsertGameDeploymentStateSchema, UpsertGameMetadataSchema, PatchGameMetadataSchema, AddGameMemberSchema, UpdateGameMemberRoleSchema, AddGameDashboardUserSchema, VerifyGameDashboardLoginSchema, AcceptGameDashboardInviteSchema, AcceptGameDashboardResetSchema, ALLOWED_UPLOAD_EXTENSIONS, InitiateUploadSchema, AddCustomHostnameSchema, SetSecretsRequestSchema, SecretsDiffRequestSchema, SeedRequestSchema, SchemaInfoSchema, VerifyTokenSchema, KVSeedRequestSchema, DeployMigrationSchema, DeployDatabaseSchema, DatabaseResetDatabaseSchema, DatabaseResetRequestSchema, BaselineEvidenceSchema, DeployBaselineSchema, DeploymentStateBaselineSchema, MigrationRealignSchema, MigrationResolveSchema, DatabaseRestoreSchema, DeployBlockedReportSchema, DeployRequestSchema;
 var init_schemas2 = __esm(() => {
   init_drizzle_zod();
   init_esm();
@@ -31598,6 +33847,9 @@ var init_schemas2 = __esm(() => {
   InsertGameDeployJobSchema = createInsertSchema(gameDeployJobs, {
     status: exports_external.enum(deployJobStatusEnum.enumValues)
   });
+  InsertGameDeploymentStateSchema = createInsertSchema(gameDeploymentState, {
+    secretsManifest: exports_external.record(exports_external.string(), exports_external.string()).nullable().optional()
+  });
   UpsertGameMetadataSchema = exports_external.object({
     displayName: exports_external.string().min(1),
     platform: exports_external.enum(gamePlatformEnum.enumValues),
@@ -31655,6 +33907,9 @@ var init_schemas2 = __esm(() => {
     hostname: exports_external.string().min(1).max(255)
   });
   SetSecretsRequestSchema = exports_external.record(exports_external.string().min(1), exports_external.string());
+  SecretsDiffRequestSchema = exports_external.object({
+    secrets: exports_external.record(exports_external.string().min(1), exports_external.string())
+  });
   SeedRequestSchema = exports_external.object({
     code: exports_external.string().min(1, "Seed code is required"),
     secrets: exports_external.record(exports_external.string(), exports_external.string()).optional()
@@ -31663,9 +33918,6 @@ var init_schemas2 = __esm(() => {
     sql: exports_external.string(),
     hash: exports_external.string()
   });
-  DatabaseResetRequestSchema = exports_external.object({
-    schema: SchemaInfoSchema.optional()
-  });
   VerifyTokenSchema = exports_external.object({
     token: exports_external.string().min(1, "Token is required")
   });
@@ -31677,8 +33929,119 @@ var init_schemas2 = __esm(() => {
       metadata: exports_external.record(exports_external.unknown()).optional()
     }))
   });
+  DeployMigrationSchema = exports_external.object({
+    tag: exports_external.string().min(1),
+    statements: exports_external.array(exports_external.string().min(1)).min(1),
+    checksum: exports_external.string().min(1)
+  });
+  DeployDatabaseSchema = exports_external.discriminatedUnion("mode", [
+    exports_external.object({
+      mode: exports_external.literal("push"),
+      sql: exports_external.string(),
+      baselineHash: exports_external.string().nullable(),
+      nextSnapshot: exports_external.record(exports_external.string(), exports_external.unknown()),
+      nextHash: exports_external.string().min(1),
+      acceptDataLoss: exports_external.boolean().optional()
+    }),
+    exports_external.object({
+      mode: exports_external.literal("migrate"),
+      migrations: exports_external.array(DeployMigrationSchema)
+    })
+  ]);
+  DatabaseResetDatabaseSchema = exports_external.discriminatedUnion("mode", [
+    exports_external.object({
+      mode: exports_external.literal("push"),
+      sql: exports_external.string(),
+      nextSnapshot: exports_external.record(exports_external.string(), exports_external.unknown()),
+      nextHash: exports_external.string().min(1)
+    }),
+    exports_external.object({
+      mode: exports_external.literal("migrate"),
+      migrations: exports_external.array(DeployMigrationSchema)
+    })
+  ]);
+  DatabaseResetRequestSchema = exports_external.object({
+    schema: SchemaInfoSchema.optional(),
+    database: DatabaseResetDatabaseSchema.optional()
+  }).refine((data) => !(data.schema && data.database), {
+    message: "Send either the database payload or the legacy schema field, not both",
+    path: ["database"]
+  });
+  BaselineEvidenceSchema = exports_external.array(exports_external.object({
+    tag: exports_external.string().min(1),
+    generatedAt: exports_external.string().min(1),
+    createsTables: exports_external.array(exports_external.object({
+      name: exports_external.string().min(1),
+      columns: exports_external.array(exports_external.string())
+    })),
+    addsColumns: exports_external.array(exports_external.object({
+      table: exports_external.string().min(1),
+      column: exports_external.string().min(1)
+    })),
+    createsIndexes: exports_external.array(exports_external.string()),
+    createsViews: exports_external.array(exports_external.string())
+  })).optional();
+  DeployBaselineSchema = exports_external.object({
+    lastAppliedMigrationTag: exports_external.string().min(1).optional(),
+    journal: exports_external.array(exports_external.object({
+      tag: exports_external.string().min(1),
+      checksum: exports_external.string().min(1)
+    })).optional(),
+    evidence: BaselineEvidenceSchema,
+    schemaSnapshot: exports_external.unknown().optional(),
+    schemaHash: exports_external.string().min(1).optional(),
+    integrationsHash: exports_external.string().min(1).optional(),
+    buildHash: exports_external.string().min(1).optional()
+  }).refine((data) => !data.lastAppliedMigrationTag === !data.journal, {
+    message: "lastAppliedMigrationTag and journal must be provided together",
+    path: ["journal"]
+  }).refine((data) => data.schemaSnapshot === undefined === !data.schemaHash, {
+    message: "schemaSnapshot and schemaHash must be provided together",
+    path: ["schemaHash"]
+  }).refine((data) => Boolean(data.lastAppliedMigrationTag || data.schemaHash || data.integrationsHash || data.buildHash), {
+    message: "A baseline must claim something — migration history, a schema snapshot, or artifact hashes",
+    path: ["lastAppliedMigrationTag"]
+  });
+  DeploymentStateBaselineSchema = exports_external.object({
+    lastAppliedMigrationTag: exports_external.string().min(1).optional(),
+    journal: exports_external.array(exports_external.object({
+      tag: exports_external.string().min(1),
+      checksum: exports_external.string().min(1)
+    })).optional(),
+    schemaSnapshot: exports_external.unknown().optional(),
+    schemaHash: exports_external.string().min(1).optional(),
+    evidence: BaselineEvidenceSchema,
+    allowUnverified: exports_external.boolean().optional()
+  }).refine((data) => !data.lastAppliedMigrationTag === !data.journal, {
+    message: "lastAppliedMigrationTag and journal must be provided together",
+    path: ["journal"]
+  }).refine((data) => data.schemaSnapshot === undefined === !data.schemaHash, {
+    message: "schemaSnapshot and schemaHash must be provided together",
+    path: ["schemaHash"]
+  }).refine((data) => Boolean(data.lastAppliedMigrationTag) || Boolean(data.schemaHash), {
+    message: "A baseline needs a migration claim, a schema snapshot, or both",
+    path: ["lastAppliedMigrationTag"]
+  });
+  MigrationRealignSchema = exports_external.object({
+    checksum: exports_external.string().min(1)
+  });
+  MigrationResolveSchema = exports_external.object({
+    resolution: exports_external.enum(["applied", "rolled-back"]),
+    checksum: exports_external.string().min(1).optional()
+  }).refine((data) => data.resolution !== "applied" || Boolean(data.checksum), {
+    message: "Resolving a migration as 'applied' requires its checksum",
+    path: ["checksum"]
+  });
+  DatabaseRestoreSchema = exports_external.object({
+    restorePointId: exports_external.string().uuid()
+  });
+  DeployBlockedReportSchema = exports_external.object({
+    code: exports_external.string().regex(/^blocked:[a-z-]+$/).max(64),
+    reason: exports_external.string().min(1).max(2000)
+  });
   DeployRequestSchema = exports_external.object({
     target: exports_external.enum(deploymentTargetEnum.enumValues).optional().default("game"),
+    deployId: exports_external.string().min(1).optional(),
     uploadToken: exports_external.string().optional(),
     code: exports_external.string().optional(),
     codeUploadToken: exports_external.string().optional(),
@@ -31705,6 +34068,11 @@ var init_schemas2 = __esm(() => {
       sql: exports_external.string(),
       hash: exports_external.string()
     }).optional(),
+    database: DeployDatabaseSchema.optional(),
+    baseline: DeployBaselineSchema.optional(),
+    buildHash: exports_external.string().min(1).optional(),
+    integrationsHash: exports_external.string().min(1).optional(),
+    pruneSecrets: exports_external.array(exports_external.string().min(1)).optional(),
     metadata: exports_external.object({
       displayName: exports_external.string().optional(),
       description: exports_external.string().optional(),
@@ -31714,9 +34082,24 @@ var init_schemas2 = __esm(() => {
   }).refine((data) => !(data.code && data.codeUploadToken), {
     message: "Specify either code or codeUploadToken, not both",
     path: ["codeUploadToken"]
-  }).refine((data) => !(data.target === "dashboard" && (data.schema || data.bindings)), {
-    message: "Dashboard deployments cannot include schema or bindings — they attach to the game deployment’s existing resources",
+  }).refine((data) => !(data.target === "dashboard" && (data.schema || data.bindings || data.database)), {
+    message: "Dashboard deployments cannot include schema, database, or bindings — they attach to the game deployment’s existing resources",
     path: ["target"]
+  }).refine((data) => !(data.target === "dashboard" && (data.baseline || data.pruneSecrets)), {
+    message: "Dashboard deployments cannot adopt a baseline or prune secrets",
+    path: ["target"]
+  }).refine((data) => !(data.database && !data.deployId), {
+    message: "deployId is required when a database payload is present",
+    path: ["deployId"]
+  }).refine((data) => !(data.database && data.schema), {
+    message: "Send either the database payload or the legacy schema field, not both",
+    path: ["database"]
+  }).refine((data) => !(data.baseline && data.schema), {
+    message: "The legacy schema field cannot ride a baseline-adopting deploy",
+    path: ["baseline"]
+  }).refine((data) => !(data.database && !requestsBinding(data.bindings?.database)), {
+    message: "The database payload requires a database binding",
+    path: ["database"]
   });
 });
 
@@ -75454,7 +77837,7 @@ var init_pure = __esm(() => {
 });
 
 // ../utils/src/index.ts
-var init_src4 = __esm(() => {
+var init_src5 = __esm(() => {
   init_pure();
 });
 
@@ -77411,7 +79794,7 @@ var init_dist5 = __esm(async () => {
   init_spans();
   init_src();
   init_spans();
-  init_src4();
+  init_src5();
   init_src();
   init_spans();
   init_spans();
@@ -77990,7 +80373,7 @@ function selectTimebackMetricDiscrepancyQueueItems(candidates, options) {
 }
 var DATE_INPUT_RE;
 var init_timeback_discrepancy_queue_util = __esm(() => {
-  init_src4();
+  init_src5();
   init_timeback_util();
   DATE_INPUT_RE = /^\d{4}-\d{2}-\d{2}$/;
 });
@@ -80509,7 +82892,7 @@ var init_timeback_admin_service = __esm(async () => {
   init_constants3();
   init_types2();
   init_utils6();
-  init_src4();
+  init_src5();
   init_timeback3();
   init_errors();
   init_timeback_admin_metrics_util();
@@ -82965,8 +85348,15 @@ function createPlatformServices(deps) {
     validateDeveloperAccess
   });
   const kv = new KVService({ db: db2, cloudflare: cloudflare2, validateDeveloperAccessBySlug });
-  const secrets = new SecretsService({ config: config4, cloudflare: cloudflare2, validateDeveloperAccessBySlug });
+  const secrets = new SecretsService({ db: db2, config: config4, cloudflare: cloudflare2, validateDeveloperAccessBySlug });
   const domain3 = new DomainService({ db: db2, cloudflare: cloudflare2, corsKvs, validateDeveloperAccessBySlug });
+  const deploymentState = new DeploymentStateService({
+    db: db2,
+    config: config4,
+    cloudflare: cloudflare2,
+    alerts,
+    validateDeveloperAccessBySlug
+  });
   const database = new DatabaseService({
     db: db2,
     config: config4,
@@ -83005,6 +85395,7 @@ function createPlatformServices(deps) {
     kv,
     secrets,
     domain: domain3,
+    deploymentState,
     database,
     seed,
     timeback: timeback2,
@@ -83015,6 +85406,7 @@ function createPlatformServices(deps) {
 var init_platform2 = __esm(async () => {
   init_bucket_service();
   init_database_service();
+  init_deployment_state_service();
   init_domain_service();
   init_kv_service();
   init_secrets_service();
@@ -83747,7 +86139,7 @@ function createServices(ctx) {
   };
 }
 var init_factory = __esm(async () => {
-  init_game2();
+  init_game3();
   init_infra2();
   init_player();
   init_standalone();
@@ -84054,6 +86446,7 @@ function buildConfig(options) {
     gameDomain: "localhost",
     uploadBucket: "sandbox-uploads",
     ltiTestMode: true,
+    secretsManifestPepper: "sandbox-secrets-manifest-pepper",
     ...options.config
   });
 }
@@ -100995,7 +103388,7 @@ var __create2, __defProp2, __getOwnPropDesc, __getOwnPropNames2, __getProtoOf2,
         __defProp2(to, key, { get: () => from[key], enumerable: !(desc2 = __getOwnPropDesc(from, key)) || desc2.enumerable });
   }
   return to;
-}, __toESM5 = (mod, isNodeMode, target) => (target = mod != null ? __create2(__getProtoOf2(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp2(target, "default", { value: mod, enumerable: true }) : target, mod)), __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value), ANSI_BACKGROUND_OFFSET, wrapAnsi16, wrapAnsi256, wrapAnsi16m, styles2, modifierNames, foregroundColorNames, backgroundColorNames, colorNames, ansiStyles, ansi_styles_default, init_ansi_styles, env, flagForceColor, supportsColor, supports_color_default, init_supports_color, init_utilities, stdoutColor, stderrColor, GENERATOR, STYLER, IS_EMPTY, levelMapping, styles22, applyOptions, chalkFactory, getModelAnsi, usedModels, proto, createStyler, createBuilder, applyStyle, chalk, chalkStderr, source_default, init_source, require_old, require_fs, require_path, require_balanced_match, require_brace_expansion, require_minimatch, require_inherits_browser2, require_inherits2, require_common3, require_sync, require_wrappy, require_once, require_inflight, require_glob, require_readline, require_src3, require_utils4, require_lodash, require_hanji, originUUID, snapshotVersion, mapValues, mapKeys, mapEntries, customMapEntries, init_global2, util3, objectUtil2, ZodParsedType2, getParsedType4, init_util4, ZodIssueCode4, ZodError5, init_ZodError2, errorMap2, en_default4, init_en4, overrideErrorMap2, init_errors9, makeIssue2, ParseStatus2, INVALID3, DIRTY2, OK2, isAborted2, isDirty2, isValid2, isAsync2, init_parseUtil2, init_typeAliases2, errorUtil2, init_errorUtil2, ParseInputLazyPath2, handleResult2, ZodType4, cuidRegex2, cuid2Regex2, ulidRegex2, uuidRegex2, nanoidRegex2, jwtRegex2, durationRegex2, emailRegex2, _emojiRegex2, emojiRegex2, ipv4Regex2, ipv4CidrRegex2, ipv6Regex2, ipv6CidrRegex2, base64Regex2, base64urlRegex2, dateRegexSource2, dateRegex2, ZodString4, ZodNumber4, ZodBigInt4, ZodBoolean4, ZodDate4, ZodSymbol4, ZodUndefined4, ZodNull4, ZodAny4, ZodUnknown4, ZodNever4, ZodVoid4, ZodArray4, ZodObject4, ZodUnion4, getDiscriminator2, ZodDiscriminatedUnion4, ZodIntersection4, ZodTuple4, ZodRecord4, ZodMap4, ZodSet4, ZodFunction3, ZodLazy4, ZodLiteral4, ZodEnum4, ZodNativeEnum2, ZodPromise4, ZodEffects2, ZodOptional4, ZodNullable4, ZodDefault4, ZodCatch4, ZodNaN4, BRAND2, ZodBranded2, ZodPipeline2, ZodReadonly4, late2, ZodFirstPartyTypeKind3, stringType2, numberType2, nanType2, bigIntType2, booleanType2, dateType2, symbolType2, undefinedType2, nullType2, anyType2, unknownType2, neverType2, voidType2, arrayType2, objectType2, strictObjectType2, unionType2, discriminatedUnionType2, intersectionType2, tupleType2, recordType2, mapType2, setType2, functionType2, lazyType2, literalType2, enumType2, nativeEnumType2, promiseType2, effectsType2, optionalType2, nullableType2, preprocessType2, pipelineType2, coerce2, init_types5, init_external4, init_v32, init_esm2, enumSchema, enumSchemaV1, indexColumn, index2, fk, sequenceSchema, roleSchema, sequenceSquashed, column2, checkConstraint, columnSquashed, compositePK, uniqueConstraint, policy, policySquashed, viewWithOption, matViewWithOption, mergedViewWithOption, view2, table8, schemaHash, kitInternals, gelSchemaExternal, gelSchemaInternal, tableSquashed, gelSchemaSquashed, gelSchema, dryGel, init_gelSchema, index22, fk2, column22, tableV3, compositePK2, uniqueConstraint2, checkConstraint2, tableV4, table22, viewMeta, view22, kitInternals2, dialect2, schemaHash2, schemaInternalV3, schemaInternalV4, schemaInternalV5, schemaInternal, schemaV3, schemaV4, schemaV5, schema2, tableSquashedV4, tableSquashed2, viewSquashed, schemaSquashed, schemaSquashedV4, MySqlSquasher, squashMysqlScheme, mysqlSchema, mysqlSchemaV5, mysqlSchemaSquashed, backwardCompatibleMysqlSchema, dryMySql, init_mysqlSchema, indexV2, columnV2, tableV2, enumSchemaV12, enumSchema2, pgSchemaV2, references, columnV1, tableV1, pgSchemaV1, indexColumn2, index3, indexV4, indexV5, indexV6, fk3, sequenceSchema2, roleSchema2, sequenceSquashed2, columnV7, column3, checkConstraint3, columnSquashed2, tableV32, compositePK3, uniqueConstraint3, policy2, policySquashed2, viewWithOption2, matViewWithOption2, mergedViewWithOption2, view3, tableV42, tableV5, tableV6, tableV7, table32, schemaHash3, kitInternals3, pgSchemaInternalV3, pgSchemaInternalV4, pgSchemaInternalV5, pgSchemaInternalV6, pgSchemaExternal, pgSchemaInternalV7, pgSchemaInternal, tableSquashed3, tableSquashedV42, pgSchemaSquashedV4, pgSchemaSquashedV6, pgSchemaSquashed, pgSchemaV3, pgSchemaV4, pgSchemaV5, pgSchemaV6, pgSchemaV7, pgSchema, backwardCompatiblePgSchema, PgSquasher, squashPgScheme, dryPg, init_pgSchema, index4, column4, compositePK4, uniqueConstraint4, table42, viewMeta2, kitInternals4, dialect22, schemaHash4, schemaInternal2, schema22, tableSquashed4, schemaSquashed2, SingleStoreSquasher, squashSingleStoreScheme, singlestoreSchema, singlestoreSchemaSquashed, backwardCompatibleSingleStoreSchema, drySingleStore, init_singlestoreSchema, index5, fk4, compositePK5, column5, tableV33, uniqueConstraint5, checkConstraint4, table52, view4, dialect3, schemaHash5, schemaInternalV32, schemaInternalV42, schemaInternalV52, kitInternals5, latestVersion, schemaInternal3, schemaV32, schemaV42, schemaV52, schema3, tableSquashed5, schemaSquashed3, SQLiteSquasher, squashSqliteScheme, drySQLite, sqliteSchemaV5, sqliteSchema, SQLiteSchemaSquashed, backwardCompatibleSqliteSchema, init_sqliteSchema, copy, prepareMigrationMeta, schemaRenameKey, tableRenameKey, columnRenameKey, init_utils7, import_hanji, warning, error88, isRenamePromptItem, ResolveColumnSelect, tableKey, ResolveSelectNamed, ResolveSelect, ResolveSchemasSelect, Spinner2, ProgressView, init_views, glob, init_serializer, fillPgSnapshot, init_migrationPreparator, require_heap, require_heap2, require_difflib, require_difflib2, require_util2, require_styles, require_has_flag2, require_supports_colors, require_trap, require_zalgo, require_america, require_zebra, require_rainbow, require_random, require_colors, require_safe, require_colorize, require_lib4, import_json_diff, mapArraysDiff, findAlternationsInTable, alternationsInColumn, init_jsonDiffer, parseType, Convertor, PgCreateRoleConvertor, PgDropRoleConvertor, PgRenameRoleConvertor, PgAlterRoleConvertor, PgCreatePolicyConvertor, PgDropPolicyConvertor, PgRenamePolicyConvertor, PgAlterPolicyConvertor, PgCreateIndPolicyConvertor, PgDropIndPolicyConvertor, PgRenameIndPolicyConvertor, PgAlterIndPolicyConvertor, PgEnableRlsConvertor, PgDisableRlsConvertor, PgCreateTableConvertor, MySqlCreateTableConvertor, SingleStoreCreateTableConvertor, SQLiteCreateTableConvertor, PgCreateViewConvertor, MySqlCreateViewConvertor, SqliteCreateViewConvertor, PgDropViewConvertor, MySqlDropViewConvertor, SqliteDropViewConvertor, MySqlAlterViewConvertor, PgRenameViewConvertor, MySqlRenameViewConvertor, PgAlterViewSchemaConvertor, PgAlterViewAddWithOptionConvertor, PgAlterViewDropWithOptionConvertor, PgAlterViewAlterTablespaceConvertor, PgAlterViewAlterUsingConvertor, PgAlterTableAlterColumnSetGenerated, PgAlterTableAlterColumnDropGenerated, PgAlterTableAlterColumnAlterGenerated, PgAlterTableAddUniqueConstraintConvertor, PgAlterTableDropUniqueConstraintConvertor, PgAlterTableAddCheckConstraintConvertor, PgAlterTableDeleteCheckConstraintConvertor, MySQLAlterTableAddUniqueConstraintConvertor, MySQLAlterTableDropUniqueConstraintConvertor, MySqlAlterTableAddCheckConstraintConvertor, SingleStoreAlterTableAddUniqueConstraintConvertor, SingleStoreAlterTableDropUniqueConstraintConvertor, MySqlAlterTableDeleteCheckConstraintConvertor, CreatePgSequenceConvertor, DropPgSequenceConvertor, RenamePgSequenceConvertor, MovePgSequenceConvertor, AlterPgSequenceConvertor, CreateTypeEnumConvertor, DropTypeEnumConvertor, AlterTypeAddValueConvertor, AlterTypeSetSchemaConvertor, AlterRenameTypeConvertor, AlterTypeDropValueConvertor, PgDropTableConvertor, MySQLDropTableConvertor, SingleStoreDropTableConvertor, SQLiteDropTableConvertor, PgRenameTableConvertor, SqliteRenameTableConvertor, MySqlRenameTableConvertor, SingleStoreRenameTableConvertor, PgAlterTableRenameColumnConvertor, MySqlAlterTableRenameColumnConvertor, SingleStoreAlterTableRenameColumnConvertor, SQLiteAlterTableRenameColumnConvertor, PgAlterTableDropColumnConvertor, MySqlAlterTableDropColumnConvertor, SingleStoreAlterTableDropColumnConvertor, SQLiteAlterTableDropColumnConvertor, PgAlterTableAddColumnConvertor, MySqlAlterTableAddColumnConvertor, SingleStoreAlterTableAddColumnConvertor, SQLiteAlterTableAddColumnConvertor, PgAlterTableAlterColumnSetTypeConvertor, PgAlterTableAlterColumnSetDefaultConvertor, PgAlterTableAlterColumnDropDefaultConvertor, PgAlterTableAlterColumnDropGeneratedConvertor, PgAlterTableAlterColumnSetExpressionConvertor, PgAlterTableAlterColumnAlterrGeneratedConvertor, SqliteAlterTableAlterColumnDropGeneratedConvertor, SqliteAlterTableAlterColumnSetExpressionConvertor, SqliteAlterTableAlterColumnAlterGeneratedConvertor, MySqlAlterTableAlterColumnAlterrGeneratedConvertor, MySqlAlterTableAddPk, MySqlAlterTableDropPk, LibSQLModifyColumn, MySqlModifyColumn, SingleStoreAlterTableAlterColumnAlterrGeneratedConvertor, SingleStoreAlterTableAddPk, SingleStoreAlterTableDropPk, SingleStoreModifyColumn, PgAlterTableCreateCompositePrimaryKeyConvertor, PgAlterTableDeleteCompositePrimaryKeyConvertor, PgAlterTableAlterCompositePrimaryKeyConvertor, MySqlAlterTableCreateCompositePrimaryKeyConvertor, MySqlAlterTableDeleteCompositePrimaryKeyConvertor, MySqlAlterTableAlterCompositePrimaryKeyConvertor, PgAlterTableAlterColumnSetPrimaryKeyConvertor, PgAlterTableAlterColumnDropPrimaryKeyConvertor, PgAlterTableAlterColumnSetNotNullConvertor, PgAlterTableAlterColumnDropNotNullConvertor, PgCreateForeignKeyConvertor, LibSQLCreateForeignKeyConvertor, MySqlCreateForeignKeyConvertor, PgAlterForeignKeyConvertor, PgDeleteForeignKeyConvertor, MySqlDeleteForeignKeyConvertor, CreatePgIndexConvertor, CreateMySqlIndexConvertor, CreateSingleStoreIndexConvertor, CreateSqliteIndexConvertor, PgDropIndexConvertor, PgCreateSchemaConvertor, PgRenameSchemaConvertor, PgDropSchemaConvertor, PgAlterTableSetSchemaConvertor, PgAlterTableSetNewSchemaConvertor, PgAlterTableRemoveFromSchemaConvertor, SqliteDropIndexConvertor, MySqlDropIndexConvertor, SingleStoreDropIndexConvertor, SQLiteRecreateTableConvertor, LibSQLRecreateTableConvertor, SingleStoreRecreateTableConvertor, convertors, init_sqlgenerator, _moveDataStatements, getOldTableName, getNewTableName, logSuggestionsAndReturn, init_sqlitePushUtils, preparePgCreateTableJson, prepareMySqlCreateTableJson, prepareSingleStoreCreateTableJson, prepareSQLiteCreateTable, prepareDropTableJson, prepareRenameTableJson, prepareCreateEnumJson, prepareAddValuesToEnumJson, prepareDropEnumValues, prepareDropEnumJson, prepareMoveEnumJson, prepareRenameEnumJson, prepareCreateSequenceJson, prepareAlterSequenceJson, prepareDropSequenceJson, prepareMoveSequenceJson, prepareRenameSequenceJson, prepareCreateRoleJson, prepareAlterRoleJson, prepareDropRoleJson, prepareRenameRoleJson, prepareCreateSchemasJson, prepareRenameSchemasJson, prepareDeleteSchemasJson, prepareRenameColumns, _prepareDropColumns, _prepareAddColumns, _prepareSqliteAddColumns, prepareAlterColumnsMysql, preparePgAlterColumns, prepareSqliteAlterColumns, prepareRenamePolicyJsons, prepareRenameIndPolicyJsons, prepareCreatePolicyJsons, prepareCreateIndPolicyJsons, prepareDropPolicyJsons, prepareDropIndPolicyJsons, prepareAlterPolicyJson, prepareAlterIndPolicyJson, preparePgCreateIndexesJson, prepareCreateIndexesJson, prepareCreateReferencesJson, prepareLibSQLCreateReferencesJson, prepareDropReferencesJson, prepareLibSQLDropReferencesJson, prepareAlterReferencesJson, prepareDropIndexesJson, prepareAddCompositePrimaryKeySqlite, prepareDeleteCompositePrimaryKeySqlite, prepareAlterCompositePrimaryKeySqlite, prepareAddCompositePrimaryKeyPg, prepareDeleteCompositePrimaryKeyPg, prepareAlterCompositePrimaryKeyPg, prepareAddUniqueConstraintPg, prepareDeleteUniqueConstraintPg, prepareAddCheckConstraint, prepareDeleteCheckConstraint, prepareAddCompositePrimaryKeyMySql, prepareDeleteCompositePrimaryKeyMySql, prepareAlterCompositePrimaryKeyMySql, preparePgCreateViewJson, prepareMySqlCreateViewJson, prepareSqliteCreateViewJson, prepareDropViewJson, prepareRenameViewJson, preparePgAlterViewAlterSchemaJson, preparePgAlterViewAddWithOptionJson, preparePgAlterViewDropWithOptionJson, preparePgAlterViewAlterTablespaceJson, preparePgAlterViewAlterUsingJson, prepareMySqlAlterView, init_jsonStatements, prepareLibSQLRecreateTable, prepareSQLiteRecreateTable, libSQLCombineStatements, sqliteCombineStatements, prepareSingleStoreRecreateTable, singleStoreCombineStatements, init_statementCombiner, snapshotsDiffer_exports, makeChanged, makeSelfOrChanged, makePatched, makeSelfOrPatched, columnSchema, alteredColumnSchema, enumSchema3, changedEnumSchema, tableScheme, alteredTableScheme, alteredViewCommon, alteredPgViewSchema, alteredMySqlViewSchema, diffResultScheme, diffResultSchemeMysql, diffResultSchemeSingleStore, diffResultSchemeSQLite, schemaChangeFor, nameChangeFor, nameSchemaChangeFor, columnChangeFor, applyPgSnapshotsDiff, applyMysqlSnapshotsDiff, applySingleStoreSnapshotsDiff, applySqliteSnapshotsDiff, applyLibSQLSnapshotsDiff, init_snapshotsDiffer, init_words, dialects, dialect4, commonSquashedSchema, commonSchema, init_schemaValidator, sqliteDriversLiterals, postgresqlDriversLiterals, prefixes, prefix, casingTypes, casingType, sqliteDriver, postgresDriver, driver2, configMigrations, configCommonSchema, casing, introspectParams, configIntrospectCliSchema, configGenerateSchema, configPushSchema, init_common2, withStyle, init_outputs, import_hanji2, schemasResolver, tablesResolver, viewsResolver, mySqlViewsResolver, sqliteViewsResolver, sequencesResolver, roleResolver, policyResolver, indPolicyResolver, enumsResolver, columnsResolver, promptColumnsConflicts, promptNamedConflict, promptNamedWithSchemasConflict, promptSchemasConflict, BREAKPOINT, init_migrate, posixClasses, braceEscape, regexpEscape, rangesToString, parseClass, init_brace_expressions, escape, init_escape, unescape, init_unescape, import_brace_expansion, minimatch, starDotExtRE, starDotExtTest, starDotExtTestDot, starDotExtTestNocase, starDotExtTestNocaseDot, starDotStarRE, starDotStarTest, starDotStarTestDot, dotStarRE, dotStarTest, starRE, starTest, starTestDot, qmarksRE, qmarksTestNocase, qmarksTestNocaseDot, qmarksTestDot, qmarksTest, qmarksTestNoExt, qmarksTestNoExtDot, defaultPlatform, path, sep2, GLOBSTAR, plTypes, qmark, star, twoStarDot, twoStarNoDot, charSet, reSpecials, addPatternStartSet, filter, ext, defaults, braceExpand, MAX_PATTERN_LENGTH, assertValidPattern, makeRe, match2, globUnescape, globMagic, regExpEscape, Minimatch, init_mjs, entityKind2, hasOwnEntityKind2, init_entity2, _a3, Column2, init_column2, _a22, ColumnBuilder2, init_column_builder2, TableName2, init_table_utils2, _a32, ForeignKeyBuilder2, _a4, ForeignKey2, init_foreign_keys2, init_tracing_utils2, _a5, UniqueConstraintBuilder, _a6, UniqueOnConstraintBuilder, _a7, UniqueConstraint, init_unique_constraint2, init_array2, _a8, _b, PgColumnBuilder2, _a9, _b2, PgColumn2, _a10, _b3, ExtraConfigColumn2, _a11, IndexedColumn2, _a12, _b4, PgArrayBuilder2, _a13, _b5, _PgArray, PgArray2, init_common22, _a14, _b6, PgEnumObjectColumnBuilder2, _a15, _b7, PgEnumObjectColumn2, isPgEnumSym2, _a16, _b8, PgEnumColumnBuilder2, _a17, _b9, PgEnumColumn2, init_enum2, _a18, Subquery2, _a19, _b10, WithSubquery2, init_subquery2, version4, init_version2, otel2, rawTracer2, tracer2, init_tracing2, ViewBaseConfig2, init_view_common3, Schema2, Columns2, ExtraConfigColumns2, OriginalName2, BaseName2, IsAlias2, ExtraConfigBuilder2, IsDrizzleTable2, _a20, _b11, _c, _d, _e3, _f, _g, _h, _i, _j, Table2, init_table8, _a21, FakePrimitiveParam, _a222, StringChunk2, _a23, _SQL, SQL2, _a24, Name2, noopDecoder2, noopEncoder2, noopMapper2, _a25, Param2, _a26, Placeholder2, IsDrizzleView2, _a27, _b12, _c2, View3, init_sql3, _a28, ColumnAliasProxyHandler2, _a29, TableAliasProxyHandler2, _a30, RelationTableAliasProxyHandler, init_alias3, _a31, _b13, DrizzleError2, DrizzleQueryError, _a322, _b14, TransactionRollbackError2, init_errors22, _a33, ConsoleLogWriter2, _a34, DefaultLogger2, _a35, NoopLogger2, init_logger3, init_operations, _a36, _b15, QueryPromise2, init_query_promise2, textDecoder, init_utils22, _a37, _b16, PgIntColumnBaseBuilder2, init_int_common2, _a38, _b17, PgBigInt53Builder2, _a39, _b18, PgBigInt532, _a40, _b19, PgBigInt64Builder2, _a41, _b20, PgBigInt642, init_bigint2, _a42, _b21, PgBigSerial53Builder2, _a43, _b22, PgBigSerial532, _a44, _b23, PgBigSerial64Builder2, _a45, _b24, PgBigSerial642, init_bigserial2, _a46, _b25, PgBooleanBuilder2, _a47, _b26, PgBoolean2, init_boolean2, _a48, _b27, PgCharBuilder2, _a49, _b28, PgChar2, init_char2, _a50, _b29, PgCidrBuilder2, _a51, _b30, PgCidr2, init_cidr2, _a52, _b31, PgCustomColumnBuilder2, _a53, _b32, PgCustomColumn2, init_custom2, _a54, _b33, PgDateColumnBaseBuilder2, init_date_common2, _a55, _b34, PgDateBuilder2, _a56, _b35, PgDate2, _a57, _b36, PgDateStringBuilder2, _a58, _b37, PgDateString2, init_date2, _a59, _b38, PgDoublePrecisionBuilder2, _a60, _b39, PgDoublePrecision2, init_double_precision2, _a61, _b40, PgInetBuilder2, _a62, _b41, PgInet2, init_inet2, _a63, _b42, PgIntegerBuilder2, _a64, _b43, PgInteger2, init_integer2, _a65, _b44, PgIntervalBuilder2, _a66, _b45, PgInterval2, init_interval2, _a67, _b46, PgJsonBuilder2, _a68, _b47, PgJson2, init_json2, _a69, _b48, PgJsonbBuilder2, _a70, _b49, PgJsonb2, init_jsonb2, _a71, _b50, PgLineBuilder2, _a72, _b51, PgLineTuple2, _a73, _b52, PgLineABCBuilder2, _a74, _b53, PgLineABC2, init_line2, _a75, _b54, PgMacaddrBuilder2, _a76, _b55, PgMacaddr2, init_macaddr2, _a77, _b56, PgMacaddr8Builder2, _a78, _b57, PgMacaddr82, init_macaddr82, _a79, _b58, PgNumericBuilder2, _a80, _b59, PgNumeric2, _a81, _b60, PgNumericNumberBuilder2, _a82, _b61, PgNumericNumber2, _a83, _b62, PgNumericBigIntBuilder2, _a84, _b63, PgNumericBigInt2, init_numeric2, _a85, _b64, PgPointTupleBuilder2, _a86, _b65, PgPointTuple2, _a87, _b66, PgPointObjectBuilder2, _a88, _b67, PgPointObject2, init_point2, init_utils32, _a89, _b68, PgGeometryBuilder2, _a90, _b69, PgGeometry2, _a91, _b70, PgGeometryObjectBuilder2, _a92, _b71, PgGeometryObject2, init_geometry2, _a93, _b72, PgRealBuilder2, _a94, _b73, PgReal2, init_real2, _a95, _b74, PgSerialBuilder2, _a96, _b75, PgSerial2, init_serial2, _a97, _b76, PgSmallIntBuilder2, _a98, _b77, PgSmallInt2, init_smallint2, _a99, _b78, PgSmallSerialBuilder2, _a100, _b79, PgSmallSerial2, init_smallserial2, _a101, _b80, PgTextBuilder2, _a102, _b81, PgText2, init_text2, _a103, _b82, PgTimeBuilder2, _a104, _b83, PgTime2, init_time2, _a105, _b84, PgTimestampBuilder2, _a106, _b85, PgTimestamp2, _a107, _b86, PgTimestampStringBuilder2, _a108, _b87, PgTimestampString2, init_timestamp2, _a109, _b88, PgUUIDBuilder2, _a110, _b89, PgUUID2, init_uuid3, _a111, _b90, PgVarcharBuilder2, _a112, _b91, PgVarchar2, init_varchar2, _a113, _b92, PgBinaryVectorBuilder2, _a114, _b93, PgBinaryVector2, init_bit2, _a115, _b94, PgHalfVectorBuilder2, _a116, _b95, PgHalfVector2, init_halfvec2, _a117, _b96, PgSparseVectorBuilder2, _a118, _b97, PgSparseVector2, init_sparsevec2, _a119, _b98, PgVectorBuilder2, _a120, _b99, PgVector2, init_vector3, init_all2, InlineForeignKeys2, EnableRLS2, _a121, _b100, _c3, _d2, _e22, _f2, PgTable2, pgTable2, init_table22, _a122, PrimaryKeyBuilder2, _a123, PrimaryKey2, init_primary_keys2, eq2, ne4, gt3, gte2, lt4, lte2, init_conditions2, init_select3, init_expressions2, _a124, Relation2, _a125, Relations2, _a126, _b101, _One, One2, _a127, _b102, _Many, Many2, init_relations2, init_aggregate2, init_vector22, init_functions2, init_sql22, dist_exports, init_dist9, init_alias22, _a128, CheckBuilder, _a129, Check, init_checks6, init_columns2, _a130, _SelectionProxyHandler, SelectionProxyHandler2, init_selection_proxy2, _a131, IndexBuilderOn2, _a132, IndexBuilder2, _a133, Index2, init_indexes2, _a134, PgPolicy, init_policies2, PgViewConfig2, init_view_common22, _a135, CasingCache2, init_casing2, _a136, _b103, PgViewBase2, init_view_base2, _a137, PgDialect2, init_dialect2, _a138, TypedQueryBuilder2, init_query_builder3, _a139, PgSelectBuilder2, _a140, _b104, PgSelectQueryBuilderBase2, _a141, _b105, PgSelectBase2, getPgSetOperators2, union22, unionAll2, intersect2, intersectAll2, except2, exceptAll2, init_select22, _a142, QueryBuilder2, init_query_builder22, _a143, DefaultViewBuilderCore, _a144, _b106, ViewBuilder, _a145, _b107, ManualViewBuilder, _a146, MaterializedViewBuilderCore, _a147, _b108, MaterializedViewBuilder, _a148, _b109, ManualMaterializedViewBuilder, _a149, _b110, _c4, PgView2, PgMaterializedViewConfig2, _a150, _b111, _c5, PgMaterializedView, init_view2, init_utils42, _a151, _b112, PgDeleteBase2, init_delete2, _a152, PgInsertBuilder2, _a153, _b113, PgInsertBase2, init_insert2, _a154, _b114, PgRefreshMaterializedView2, init_refresh_materialized_view2, init_select_types, _a155, PgUpdateBuilder2, _a156, _b115, PgUpdateBase2, init_update2, init_query_builders2, _a157, _b116, _c6, _PgCountBuilder, PgCountBuilder2, init_count2, _a158, RelationalQueryBuilder2, _a159, _b117, PgRelationalQuery2, init_query2, _a160, _b118, PgRaw2, init_raw2, _a161, PgDatabase2, init_db2, _a162, PgRole, init_roles2, _a163, PgSequence, init_sequence2, _a164, PgSchema5, init_schema3, _a165, Cache, _a166, _b119, NoopCache, init_cache, _a167, PgPreparedQuery2, _a168, PgSession2, _a169, _b120, PgTransaction2, init_session3, init_subquery22, init_utils52, init_pg_core2, vectorOps, init_vector32, sqlToStr, init_utils62, indexName, generatePgSnapshot, trimChar, fromDatabase, defaultForColumn, getColumnsInfoQuery, init_pgSerializer, import_hanji4, Select, init_selector_ui, init_alias32, _a170, CheckBuilder2, _a171, Check2, init_checks22, _a172, ForeignKeyBuilder22, _a173, ForeignKey22, init_foreign_keys22, _a174, UniqueConstraintBuilder2, _a175, UniqueOnConstraintBuilder2, _a176, UniqueConstraint2, init_unique_constraint22, _a177, _b121, SQLiteColumnBuilder, _a178, _b122, SQLiteColumn, init_common3, _a179, _b123, SQLiteBigIntBuilder, _a180, _b124, SQLiteBigInt, _a181, _b125, SQLiteBlobJsonBuilder, _a182, _b126, SQLiteBlobJson, _a183, _b127, SQLiteBlobBufferBuilder, _a184, _b128, SQLiteBlobBuffer, init_blob, _a185, _b129, SQLiteCustomColumnBuilder, _a186, _b130, SQLiteCustomColumn, init_custom22, _a187, _b131, SQLiteBaseIntegerBuilder, _a188, _b132, SQLiteBaseInteger, _a189, _b133, SQLiteIntegerBuilder, _a190, _b134, SQLiteInteger, _a191, _b135, SQLiteTimestampBuilder, _a192, _b136, SQLiteTimestamp, _a193, _b137, SQLiteBooleanBuilder, _a194, _b138, SQLiteBoolean, init_integer22, _a195, _b139, SQLiteNumericBuilder, _a196, _b140, SQLiteNumeric, _a197, _b141, SQLiteNumericNumberBuilder, _a198, _b142, SQLiteNumericNumber, _a199, _b143, SQLiteNumericBigIntBuilder, _a200, _b144, SQLiteNumericBigInt, init_numeric22, _a201, _b145, SQLiteRealBuilder, _a202, _b146, SQLiteReal, init_real22, _a203, _b147, SQLiteTextBuilder, _a204, _b148, SQLiteText, _a205, _b149, SQLiteTextJsonBuilder, _a206, _b150, SQLiteTextJson, init_text22, init_columns22, init_all22, InlineForeignKeys22, _a207, _b151, _c7, _d3, _e32, SQLiteTable, sqliteTable, init_table32, _a208, IndexBuilderOn22, _a209, IndexBuilder22, _a210, Index4, init_indexes22, _a211, PrimaryKeyBuilder22, _a212, PrimaryKey22, init_primary_keys22, init_utils72, _a213, _b152, SQLiteDeleteBase, init_delete22, _a214, _b153, SQLiteViewBase, init_view_base22, _a215, SQLiteDialect, _a216, _b154, SQLiteSyncDialect, _a217, _b155, SQLiteAsyncDialect, init_dialect22, _a218, SQLiteSelectBuilder, _a219, _b156, SQLiteSelectQueryBuilderBase, _a220, _b157, SQLiteSelectBase, getSQLiteSetOperators, union32, unionAll22, intersect22, except22, init_select32, _a221, QueryBuilder22, init_query_builder32, _a2222, SQLiteInsertBuilder, _a223, _b158, SQLiteInsertBase, init_insert22, init_select_types2, _a224, SQLiteUpdateBuilder, _a225, _b159, SQLiteUpdateBase, init_update22, init_query_builders22, _a226, _b160, _c8, _SQLiteCountBuilder, SQLiteCountBuilder, init_count22, _a227, RelationalQueryBuilder22, _a228, _b161, SQLiteRelationalQuery, _a229, _b162, SQLiteSyncRelationalQuery, init_query22, _a230, _b163, SQLiteRaw, init_raw22, _a231, BaseSQLiteDatabase, init_db22, _a232, _b164, ExecuteResultSync, _a233, SQLitePreparedQuery, _a234, SQLiteSession, _a235, _b165, SQLiteTransaction, init_session22, init_subquery3, _a236, ViewBuilderCore, _a237, _b166, ViewBuilder2, _a238, _b167, ManualViewBuilder2, _a239, _b168, SQLiteView2, init_view22, init_sqlite_core, generateSqliteSnapshot, fromDatabase2, init_sqliteSerializer, getTablesFilterByExtensions, init_getTablesFilterByExtensions, init_alias4, _a240, CheckBuilder3, _a241, Check3, init_checks32, _a242, ForeignKeyBuilder3, _a243, ForeignKey3, init_foreign_keys3, _a244, UniqueConstraintBuilder3, _a245, UniqueOnConstraintBuilder3, _a246, UniqueConstraint3, init_unique_constraint3, _a247, _b169, MySqlColumnBuilder, _a248, _b170, MySqlColumn, _a249, _b171, MySqlColumnBuilderWithAutoIncrement, _a250, _b172, MySqlColumnWithAutoIncrement, init_common4, _a251, _b173, MySqlBigInt53Builder, _a252, _b174, MySqlBigInt53, _a253, _b175, MySqlBigInt64Builder, _a254, _b176, MySqlBigInt64, init_bigint22, _a255, _b177, MySqlBinaryBuilder, _a256, _b178, MySqlBinary, init_binary, _a257, _b179, MySqlBooleanBuilder, _a258, _b180, MySqlBoolean, init_boolean22, _a259, _b181, MySqlCharBuilder, _a260, _b182, MySqlChar, init_char22, _a261, _b183, MySqlCustomColumnBuilder, _a262, _b184, MySqlCustomColumn, init_custom3, _a263, _b185, MySqlDateBuilder, _a264, _b186, MySqlDate, _a265, _b187, MySqlDateStringBuilder, _a266, _b188, MySqlDateString, init_date22, _a267, _b189, MySqlDateTimeBuilder, _a268, _b190, MySqlDateTime, _a269, _b191, MySqlDateTimeStringBuilder, _a270, _b192, MySqlDateTimeString, init_datetime, _a271, _b193, MySqlDecimalBuilder, _a272, _b194, MySqlDecimal, _a273, _b195, MySqlDecimalNumberBuilder, _a274, _b196, MySqlDecimalNumber, _a275, _b197, MySqlDecimalBigIntBuilder, _a276, _b198, MySqlDecimalBigInt, init_decimal, _a277, _b199, MySqlDoubleBuilder, _a278, _b200, MySqlDouble, init_double, _a279, _b201, MySqlEnumColumnBuilder, _a280, _b202, MySqlEnumColumn, _a281, _b203, MySqlEnumObjectColumnBuilder, _a282, _b204, MySqlEnumObjectColumn, init_enum22, _a283, _b205, MySqlFloatBuilder, _a284, _b206, MySqlFloat, init_float, _a285, _b207, MySqlIntBuilder, _a286, _b208, MySqlInt, init_int, _a287, _b209, MySqlJsonBuilder, _a288, _b210, MySqlJson, init_json22, _a289, _b211, MySqlMediumIntBuilder, _a290, _b212, MySqlMediumInt, init_mediumint, _a291, _b213, MySqlRealBuilder, _a292, _b214, MySqlReal, init_real3, _a293, _b215, MySqlSerialBuilder, _a294, _b216, MySqlSerial, init_serial22, _a295, _b217, MySqlSmallIntBuilder, _a296, _b218, MySqlSmallInt, init_smallint22, _a297, _b219, MySqlTextBuilder, _a298, _b220, MySqlText, init_text3, _a299, _b221, MySqlTimeBuilder, _a300, _b222, MySqlTime, init_time22, _a301, _b223, MySqlDateColumnBaseBuilder, _a302, _b224, MySqlDateBaseColumn, init_date_common22, _a303, _b225, MySqlTimestampBuilder, _a304, _b226, MySqlTimestamp, _a305, _b227, MySqlTimestampStringBuilder, _a306, _b228, MySqlTimestampString, init_timestamp22, _a307, _b229, MySqlTinyIntBuilder, _a308, _b230, MySqlTinyInt, init_tinyint, _a309, _b231, MySqlVarBinaryBuilder, _a310, _b232, MySqlVarBinary, init_varbinary, _a311, _b233, MySqlVarCharBuilder, _a312, _b234, MySqlVarChar, init_varchar22, _a313, _b235, MySqlYearBuilder, _a314, _b236, MySqlYear, init_year, init_columns3, _a315, _b237, _c9, _MySqlCountBuilder, MySqlCountBuilder, init_count3, _a316, IndexBuilderOn3, _a317, IndexBuilder3, _a318, Index5, init_indexes3, init_all3, InlineForeignKeys3, _a319, _b238, _c10, _d4, _e4, MySqlTable, mysqlTable, init_table42, _a320, PrimaryKeyBuilder3, _a321, PrimaryKey3, init_primary_keys3, MySqlViewConfig, init_view_common32, init_utils8, _a3222, _b239, MySqlDeleteBase, init_delete3, _a323, _b240, MySqlViewBase, init_view_base3, _a324, MySqlDialect, init_dialect3, _a325, MySqlSelectBuilder, _a326, _b241, MySqlSelectQueryBuilderBase, _a327, _b242, MySqlSelectBase, getMySqlSetOperators, union4, unionAll3, intersect3, intersectAll22, except3, exceptAll22, init_select4, _a328, QueryBuilder3, init_query_builder4, _a329, MySqlInsertBuilder, _a330, _b243, MySqlInsertBase, init_insert3, init_select_types3, _a331, MySqlUpdateBuilder, _a332, _b244, MySqlUpdateBase, init_update3, init_query_builders3, _a333, RelationalQueryBuilder3, _a334, _b245, MySqlRelationalQuery, init_query3, _a335, MySqlDatabase, init_db3, _a336, ViewBuilderCore2, _a337, _b246, ViewBuilder3, _a338, _b247, ManualViewBuilder3, _a339, _b248, _c11, MySqlView2, init_view3, _a340, MySqlSchema5, init_schema22, _a341, MySqlPreparedQuery, _a342, MySqlSession, _a343, _b249, MySqlTransaction, init_session32, init_subquery4, init_mysql_core, handleEnumType, generateMySqlSnapshot, fromDatabase3, init_mysqlSerializer, cliConfigGenerate, pushParams, pullParams, configCheck, cliConfigCheck, init_cli, gelCredentials, init_gel, libSQLCredentials, init_libsql, mysqlCredentials, init_mysql, postgresCredentials, init_postgres, singlestoreCredentials, init_singlestore, sqliteCredentials, init_sqlite, credentials, studioCliParams, studioConfig, init_studio, es5_exports, _3, es5_default, init_es5, import_hanji7, assertES5, safeRegister, migrateConfig, init_utils9, prepareFromExports, init_pgImports, init_alias5, _a344, UniqueConstraintBuilder4, _a345, UniqueOnConstraintBuilder4, _a346, UniqueConstraint4, init_unique_constraint4, _a347, _b250, SingleStoreColumnBuilder, _a348, _b251, SingleStoreColumn, _a349, _b252, SingleStoreColumnBuilderWithAutoIncrement, _a350, _b253, SingleStoreColumnWithAutoIncrement, init_common5, _a351, _b254, SingleStoreBigInt53Builder, _a352, _b255, SingleStoreBigInt53, _a353, _b256, SingleStoreBigInt64Builder, _a354, _b257, SingleStoreBigInt64, init_bigint3, _a355, _b258, SingleStoreBinaryBuilder, _a356, _b259, SingleStoreBinary, init_binary2, _a357, _b260, SingleStoreBooleanBuilder, _a358, _b261, SingleStoreBoolean, init_boolean3, _a359, _b262, SingleStoreCharBuilder, _a360, _b263, SingleStoreChar, init_char3, _a361, _b264, SingleStoreCustomColumnBuilder, _a362, _b265, SingleStoreCustomColumn, init_custom4, _a363, _b266, SingleStoreDateBuilder, _a364, _b267, SingleStoreDate, _a365, _b268, SingleStoreDateStringBuilder, _a366, _b269, SingleStoreDateString, init_date3, _a367, _b270, SingleStoreDateTimeBuilder, _a368, _b271, SingleStoreDateTime, _a369, _b272, SingleStoreDateTimeStringBuilder, _a370, _b273, SingleStoreDateTimeString, init_datetime2, _a371, _b274, SingleStoreDecimalBuilder, _a372, _b275, SingleStoreDecimal, _a373, _b276, SingleStoreDecimalNumberBuilder, _a374, _b277, SingleStoreDecimalNumber, _a375, _b278, SingleStoreDecimalBigIntBuilder, _a376, _b279, SingleStoreDecimalBigInt, init_decimal2, _a377, _b280, SingleStoreDoubleBuilder, _a378, _b281, SingleStoreDouble, init_double2, _a379, _b282, SingleStoreEnumColumnBuilder, _a380, _b283, SingleStoreEnumColumn, init_enum3, _a381, _b284, SingleStoreFloatBuilder, _a382, _b285, SingleStoreFloat, init_float2, _a383, _b286, SingleStoreIntBuilder, _a384, _b287, SingleStoreInt, init_int2, _a385, _b288, SingleStoreJsonBuilder, _a386, _b289, SingleStoreJson, init_json3, _a387, _b290, SingleStoreMediumIntBuilder, _a388, _b291, SingleStoreMediumInt, init_mediumint2, _a389, _b292, SingleStoreRealBuilder, _a390, _b293, SingleStoreReal, init_real4, _a391, _b294, SingleStoreSerialBuilder, _a392, _b295, SingleStoreSerial, init_serial3, _a393, _b296, SingleStoreSmallIntBuilder, _a394, _b297, SingleStoreSmallInt, init_smallint3, _a395, _b298, SingleStoreTextBuilder, _a396, _b299, SingleStoreText, init_text4, _a397, _b300, SingleStoreTimeBuilder, _a398, _b301, SingleStoreTime, init_time3, _a399, _b302, SingleStoreDateColumnBaseBuilder, _a400, _b303, SingleStoreDateBaseColumn, init_date_common3, _a401, _b304, SingleStoreTimestampBuilder, _a402, _b305, SingleStoreTimestamp, _a403, _b306, SingleStoreTimestampStringBuilder, _a404, _b307, SingleStoreTimestampString, init_timestamp3, _a405, _b308, SingleStoreTinyIntBuilder, _a406, _b309, SingleStoreTinyInt, init_tinyint2, _a407, _b310, SingleStoreVarBinaryBuilder, _a408, _b311, SingleStoreVarBinary, init_varbinary2, _a409, _b312, SingleStoreVarCharBuilder, _a410, _b313, SingleStoreVarChar, init_varchar3, _a411, _b314, SingleStoreVectorBuilder, _a412, _b315, SingleStoreVector, init_vector4, _a413, _b316, SingleStoreYearBuilder, _a414, _b317, SingleStoreYear, init_year2, init_columns4, _a415, _b318, _c12, _SingleStoreCountBuilder, SingleStoreCountBuilder, init_count4, _a416, IndexBuilderOn4, _a417, IndexBuilder4, _a418, Index6, init_indexes4, init_all4, _a419, _b319, _c13, _d5, SingleStoreTable, init_table52, _a420, PrimaryKeyBuilder4, _a421, PrimaryKey4, init_primary_keys4, init_utils10, _a422, _b320, SingleStoreDeleteBase, init_delete4, _a423, SingleStoreInsertBuilder, _a424, _b321, SingleStoreInsertBase, init_insert4, _a425, SingleStoreDialect, init_dialect4, _a426, SingleStoreSelectBuilder, _a427, _b322, SingleStoreSelectQueryBuilderBase, _a428, _b323, SingleStoreSelectBase, getSingleStoreSetOperators, union5, unionAll4, intersect4, except4, minus, init_select5, _a429, QueryBuilder4, init_query_builder5, init_select_types4, _a430, SingleStoreUpdateBuilder, _a431, _b324, SingleStoreUpdateBase, init_update4, init_query_builders4, _a432, SingleStoreDatabase, init_db4, _a433, SingleStoreSchema5, init_schema32, _a434, SingleStorePreparedQuery, _a435, SingleStoreSession, _a436, _b325, SingleStoreTransaction, init_session4, init_subquery5, init_singlestore_core, dialect5, generateSingleStoreSnapshot, fromDatabase4, init_singlestoreSerializer, sqliteImports_exports, prepareFromExports2, prepareFromSqliteImports, init_sqliteImports, mysqlImports_exports, prepareFromExports3, prepareFromMySqlImports, init_mysqlImports, mysqlPushUtils_exports, import_hanji8, filterStatements, logSuggestionsAndReturn2, init_mysqlPushUtils, mysqlIntrospect_exports, import_hanji9, mysqlPushIntrospect, init_mysqlIntrospect, singlestoreImports_exports, prepareFromExports4, prepareFromSingleStoreImports, init_singlestoreImports, singlestorePushUtils_exports, import_hanji10, filterStatements2, logSuggestionsAndReturn3, init_singlestorePushUtils, singlestoreIntrospect_exports, import_hanji11, singlestorePushIntrospect, init_singlestoreIntrospect, import_hanji3, pgPushIntrospect = async (db2, filters, schemaFilters, entities, tsSchema) => {
+}, __toESM5 = (mod, isNodeMode, target) => (target = mod != null ? __create2(__getProtoOf2(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp2(target, "default", { value: mod, enumerable: true }) : target, mod)), __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value), ANSI_BACKGROUND_OFFSET, wrapAnsi16, wrapAnsi256, wrapAnsi16m, styles2, modifierNames, foregroundColorNames, backgroundColorNames, colorNames, ansiStyles, ansi_styles_default, init_ansi_styles, env, flagForceColor, supportsColor, supports_color_default, init_supports_color, init_utilities, stdoutColor, stderrColor, GENERATOR, STYLER, IS_EMPTY, levelMapping, styles22, applyOptions, chalkFactory, getModelAnsi, usedModels, proto, createStyler, createBuilder, applyStyle, chalk, chalkStderr, source_default, init_source, require_old, require_fs, require_path, require_balanced_match, require_brace_expansion, require_minimatch, require_inherits_browser2, require_inherits2, require_common3, require_sync, require_wrappy, require_once, require_inflight, require_glob, require_readline, require_src3, require_utils4, require_lodash, require_hanji, originUUID, snapshotVersion, mapValues, mapKeys, mapEntries, customMapEntries, init_global2, util3, objectUtil2, ZodParsedType2, getParsedType4, init_util4, ZodIssueCode4, ZodError5, init_ZodError2, errorMap2, en_default4, init_en4, overrideErrorMap2, init_errors9, makeIssue2, ParseStatus2, INVALID3, DIRTY2, OK2, isAborted2, isDirty2, isValid2, isAsync2, init_parseUtil2, init_typeAliases2, errorUtil2, init_errorUtil2, ParseInputLazyPath2, handleResult2, ZodType4, cuidRegex2, cuid2Regex2, ulidRegex2, uuidRegex2, nanoidRegex2, jwtRegex2, durationRegex2, emailRegex2, _emojiRegex2, emojiRegex2, ipv4Regex2, ipv4CidrRegex2, ipv6Regex2, ipv6CidrRegex2, base64Regex2, base64urlRegex2, dateRegexSource2, dateRegex2, ZodString4, ZodNumber4, ZodBigInt4, ZodBoolean4, ZodDate4, ZodSymbol4, ZodUndefined4, ZodNull4, ZodAny4, ZodUnknown4, ZodNever4, ZodVoid4, ZodArray4, ZodObject4, ZodUnion4, getDiscriminator2, ZodDiscriminatedUnion4, ZodIntersection4, ZodTuple4, ZodRecord4, ZodMap4, ZodSet4, ZodFunction3, ZodLazy4, ZodLiteral4, ZodEnum4, ZodNativeEnum2, ZodPromise4, ZodEffects2, ZodOptional4, ZodNullable4, ZodDefault4, ZodCatch4, ZodNaN4, BRAND2, ZodBranded2, ZodPipeline2, ZodReadonly4, late2, ZodFirstPartyTypeKind3, stringType2, numberType2, nanType2, bigIntType2, booleanType2, dateType2, symbolType2, undefinedType2, nullType2, anyType2, unknownType2, neverType2, voidType2, arrayType2, objectType2, strictObjectType2, unionType2, discriminatedUnionType2, intersectionType2, tupleType2, recordType2, mapType2, setType2, functionType2, lazyType2, literalType2, enumType2, nativeEnumType2, promiseType2, effectsType2, optionalType2, nullableType2, preprocessType2, pipelineType2, coerce2, init_types5, init_external4, init_v32, init_esm2, enumSchema, enumSchemaV1, indexColumn, index2, fk, sequenceSchema, roleSchema, sequenceSquashed, column2, checkConstraint, columnSquashed, compositePK, uniqueConstraint, policy, policySquashed, viewWithOption, matViewWithOption, mergedViewWithOption, view2, table8, schemaHash, kitInternals, gelSchemaExternal, gelSchemaInternal, tableSquashed, gelSchemaSquashed, gelSchema, dryGel, init_gelSchema, index22, fk2, column22, tableV3, compositePK2, uniqueConstraint2, checkConstraint2, tableV4, table22, viewMeta, view22, kitInternals2, dialect2, schemaHash2, schemaInternalV3, schemaInternalV4, schemaInternalV5, schemaInternal, schemaV3, schemaV4, schemaV5, schema2, tableSquashedV4, tableSquashed2, viewSquashed, schemaSquashed, schemaSquashedV4, MySqlSquasher, squashMysqlScheme, mysqlSchema, mysqlSchemaV5, mysqlSchemaSquashed, backwardCompatibleMysqlSchema, dryMySql, init_mysqlSchema, indexV2, columnV2, tableV2, enumSchemaV12, enumSchema2, pgSchemaV2, references, columnV1, tableV1, pgSchemaV1, indexColumn2, index3, indexV4, indexV5, indexV6, fk3, sequenceSchema2, roleSchema2, sequenceSquashed2, columnV7, column3, checkConstraint3, columnSquashed2, tableV32, compositePK3, uniqueConstraint3, policy2, policySquashed2, viewWithOption2, matViewWithOption2, mergedViewWithOption2, view3, tableV42, tableV5, tableV6, tableV7, table32, schemaHash3, kitInternals3, pgSchemaInternalV3, pgSchemaInternalV4, pgSchemaInternalV5, pgSchemaInternalV6, pgSchemaExternal, pgSchemaInternalV7, pgSchemaInternal, tableSquashed3, tableSquashedV42, pgSchemaSquashedV4, pgSchemaSquashedV6, pgSchemaSquashed, pgSchemaV3, pgSchemaV4, pgSchemaV5, pgSchemaV6, pgSchemaV7, pgSchema, backwardCompatiblePgSchema, PgSquasher, squashPgScheme, dryPg, init_pgSchema, index4, column4, compositePK4, uniqueConstraint4, table42, viewMeta2, kitInternals4, dialect22, schemaHash4, schemaInternal2, schema22, tableSquashed4, schemaSquashed2, SingleStoreSquasher, squashSingleStoreScheme, singlestoreSchema, singlestoreSchemaSquashed, backwardCompatibleSingleStoreSchema, drySingleStore, init_singlestoreSchema, index5, fk4, compositePK5, column5, tableV33, uniqueConstraint5, checkConstraint4, table52, view4, dialect3, schemaHash5, schemaInternalV32, schemaInternalV42, schemaInternalV52, kitInternals5, latestVersion, schemaInternal3, schemaV32, schemaV42, schemaV52, schema3, tableSquashed5, schemaSquashed3, SQLiteSquasher, squashSqliteScheme, drySQLite, sqliteSchemaV5, sqliteSchema, SQLiteSchemaSquashed, backwardCompatibleSqliteSchema, init_sqliteSchema, copy, prepareMigrationMeta, schemaRenameKey, tableRenameKey, columnRenameKey, init_utils7, import_hanji, warning, error88, isRenamePromptItem, ResolveColumnSelect, tableKey, ResolveSelectNamed, ResolveSelect, ResolveSchemasSelect, Spinner2, ProgressView, init_views, glob, init_serializer, fillPgSnapshot, init_migrationPreparator, require_heap, require_heap2, require_difflib, require_difflib2, require_util2, require_styles, require_has_flag2, require_supports_colors, require_trap, require_zalgo, require_america, require_zebra, require_rainbow, require_random, require_colors, require_safe, require_colorize, require_lib4, import_json_diff, mapArraysDiff, findAlternationsInTable, alternationsInColumn, init_jsonDiffer, parseType, Convertor, PgCreateRoleConvertor, PgDropRoleConvertor, PgRenameRoleConvertor, PgAlterRoleConvertor, PgCreatePolicyConvertor, PgDropPolicyConvertor, PgRenamePolicyConvertor, PgAlterPolicyConvertor, PgCreateIndPolicyConvertor, PgDropIndPolicyConvertor, PgRenameIndPolicyConvertor, PgAlterIndPolicyConvertor, PgEnableRlsConvertor, PgDisableRlsConvertor, PgCreateTableConvertor, MySqlCreateTableConvertor, SingleStoreCreateTableConvertor, SQLiteCreateTableConvertor, PgCreateViewConvertor, MySqlCreateViewConvertor, SqliteCreateViewConvertor, PgDropViewConvertor, MySqlDropViewConvertor, SqliteDropViewConvertor, MySqlAlterViewConvertor, PgRenameViewConvertor, MySqlRenameViewConvertor, PgAlterViewSchemaConvertor, PgAlterViewAddWithOptionConvertor, PgAlterViewDropWithOptionConvertor, PgAlterViewAlterTablespaceConvertor, PgAlterViewAlterUsingConvertor, PgAlterTableAlterColumnSetGenerated, PgAlterTableAlterColumnDropGenerated, PgAlterTableAlterColumnAlterGenerated, PgAlterTableAddUniqueConstraintConvertor, PgAlterTableDropUniqueConstraintConvertor, PgAlterTableAddCheckConstraintConvertor, PgAlterTableDeleteCheckConstraintConvertor, MySQLAlterTableAddUniqueConstraintConvertor, MySQLAlterTableDropUniqueConstraintConvertor, MySqlAlterTableAddCheckConstraintConvertor, SingleStoreAlterTableAddUniqueConstraintConvertor, SingleStoreAlterTableDropUniqueConstraintConvertor, MySqlAlterTableDeleteCheckConstraintConvertor, CreatePgSequenceConvertor, DropPgSequenceConvertor, RenamePgSequenceConvertor, MovePgSequenceConvertor, AlterPgSequenceConvertor, CreateTypeEnumConvertor, DropTypeEnumConvertor, AlterTypeAddValueConvertor, AlterTypeSetSchemaConvertor, AlterRenameTypeConvertor, AlterTypeDropValueConvertor, PgDropTableConvertor, MySQLDropTableConvertor, SingleStoreDropTableConvertor, SQLiteDropTableConvertor, PgRenameTableConvertor, SqliteRenameTableConvertor, MySqlRenameTableConvertor, SingleStoreRenameTableConvertor, PgAlterTableRenameColumnConvertor, MySqlAlterTableRenameColumnConvertor, SingleStoreAlterTableRenameColumnConvertor, SQLiteAlterTableRenameColumnConvertor, PgAlterTableDropColumnConvertor, MySqlAlterTableDropColumnConvertor, SingleStoreAlterTableDropColumnConvertor, SQLiteAlterTableDropColumnConvertor, PgAlterTableAddColumnConvertor, MySqlAlterTableAddColumnConvertor, SingleStoreAlterTableAddColumnConvertor, SQLiteAlterTableAddColumnConvertor, PgAlterTableAlterColumnSetTypeConvertor, PgAlterTableAlterColumnSetDefaultConvertor, PgAlterTableAlterColumnDropDefaultConvertor, PgAlterTableAlterColumnDropGeneratedConvertor, PgAlterTableAlterColumnSetExpressionConvertor, PgAlterTableAlterColumnAlterrGeneratedConvertor, SqliteAlterTableAlterColumnDropGeneratedConvertor, SqliteAlterTableAlterColumnSetExpressionConvertor, SqliteAlterTableAlterColumnAlterGeneratedConvertor, MySqlAlterTableAlterColumnAlterrGeneratedConvertor, MySqlAlterTableAddPk, MySqlAlterTableDropPk, LibSQLModifyColumn, MySqlModifyColumn, SingleStoreAlterTableAlterColumnAlterrGeneratedConvertor, SingleStoreAlterTableAddPk, SingleStoreAlterTableDropPk, SingleStoreModifyColumn, PgAlterTableCreateCompositePrimaryKeyConvertor, PgAlterTableDeleteCompositePrimaryKeyConvertor, PgAlterTableAlterCompositePrimaryKeyConvertor, MySqlAlterTableCreateCompositePrimaryKeyConvertor, MySqlAlterTableDeleteCompositePrimaryKeyConvertor, MySqlAlterTableAlterCompositePrimaryKeyConvertor, PgAlterTableAlterColumnSetPrimaryKeyConvertor, PgAlterTableAlterColumnDropPrimaryKeyConvertor, PgAlterTableAlterColumnSetNotNullConvertor, PgAlterTableAlterColumnDropNotNullConvertor, PgCreateForeignKeyConvertor, LibSQLCreateForeignKeyConvertor, MySqlCreateForeignKeyConvertor, PgAlterForeignKeyConvertor, PgDeleteForeignKeyConvertor, MySqlDeleteForeignKeyConvertor, CreatePgIndexConvertor, CreateMySqlIndexConvertor, CreateSingleStoreIndexConvertor, CreateSqliteIndexConvertor, PgDropIndexConvertor, PgCreateSchemaConvertor, PgRenameSchemaConvertor, PgDropSchemaConvertor, PgAlterTableSetSchemaConvertor, PgAlterTableSetNewSchemaConvertor, PgAlterTableRemoveFromSchemaConvertor, SqliteDropIndexConvertor, MySqlDropIndexConvertor, SingleStoreDropIndexConvertor, SQLiteRecreateTableConvertor, LibSQLRecreateTableConvertor, SingleStoreRecreateTableConvertor, convertors, init_sqlgenerator, _moveDataStatements, getOldTableName, getNewTableName, logSuggestionsAndReturn, init_sqlitePushUtils, preparePgCreateTableJson, prepareMySqlCreateTableJson, prepareSingleStoreCreateTableJson, prepareSQLiteCreateTable, prepareDropTableJson, prepareRenameTableJson, prepareCreateEnumJson, prepareAddValuesToEnumJson, prepareDropEnumValues, prepareDropEnumJson, prepareMoveEnumJson, prepareRenameEnumJson, prepareCreateSequenceJson, prepareAlterSequenceJson, prepareDropSequenceJson, prepareMoveSequenceJson, prepareRenameSequenceJson, prepareCreateRoleJson, prepareAlterRoleJson, prepareDropRoleJson, prepareRenameRoleJson, prepareCreateSchemasJson, prepareRenameSchemasJson, prepareDeleteSchemasJson, prepareRenameColumns, _prepareDropColumns, _prepareAddColumns, _prepareSqliteAddColumns, prepareAlterColumnsMysql, preparePgAlterColumns, prepareSqliteAlterColumns, prepareRenamePolicyJsons, prepareRenameIndPolicyJsons, prepareCreatePolicyJsons, prepareCreateIndPolicyJsons, prepareDropPolicyJsons, prepareDropIndPolicyJsons, prepareAlterPolicyJson, prepareAlterIndPolicyJson, preparePgCreateIndexesJson, prepareCreateIndexesJson, prepareCreateReferencesJson, prepareLibSQLCreateReferencesJson, prepareDropReferencesJson, prepareLibSQLDropReferencesJson, prepareAlterReferencesJson, prepareDropIndexesJson, prepareAddCompositePrimaryKeySqlite, prepareDeleteCompositePrimaryKeySqlite, prepareAlterCompositePrimaryKeySqlite, prepareAddCompositePrimaryKeyPg, prepareDeleteCompositePrimaryKeyPg, prepareAlterCompositePrimaryKeyPg, prepareAddUniqueConstraintPg, prepareDeleteUniqueConstraintPg, prepareAddCheckConstraint, prepareDeleteCheckConstraint, prepareAddCompositePrimaryKeyMySql, prepareDeleteCompositePrimaryKeyMySql, prepareAlterCompositePrimaryKeyMySql, preparePgCreateViewJson, prepareMySqlCreateViewJson, prepareSqliteCreateViewJson, prepareDropViewJson, prepareRenameViewJson, preparePgAlterViewAlterSchemaJson, preparePgAlterViewAddWithOptionJson, preparePgAlterViewDropWithOptionJson, preparePgAlterViewAlterTablespaceJson, preparePgAlterViewAlterUsingJson, prepareMySqlAlterView, init_jsonStatements, prepareLibSQLRecreateTable, prepareSQLiteRecreateTable, libSQLCombineStatements, sqliteCombineStatements, prepareSingleStoreRecreateTable, singleStoreCombineStatements, init_statementCombiner, snapshotsDiffer_exports, makeChanged, makeSelfOrChanged, makePatched, makeSelfOrPatched, columnSchema, alteredColumnSchema, enumSchema3, changedEnumSchema, tableScheme, alteredTableScheme, alteredViewCommon, alteredPgViewSchema, alteredMySqlViewSchema, diffResultScheme, diffResultSchemeMysql, diffResultSchemeSingleStore, diffResultSchemeSQLite, schemaChangeFor, nameChangeFor, nameSchemaChangeFor, columnChangeFor, applyPgSnapshotsDiff, applyMysqlSnapshotsDiff, applySingleStoreSnapshotsDiff, applySqliteSnapshotsDiff, applyLibSQLSnapshotsDiff, init_snapshotsDiffer, init_words, dialects, dialect4, commonSquashedSchema, commonSchema, init_schemaValidator, sqliteDriversLiterals, postgresqlDriversLiterals, prefixes, prefix, casingTypes, casingType, sqliteDriver, postgresDriver, driver2, configMigrations, configCommonSchema, casing, introspectParams, configIntrospectCliSchema, configGenerateSchema, configPushSchema, init_common2, withStyle, init_outputs, import_hanji2, schemasResolver, tablesResolver, viewsResolver, mySqlViewsResolver, sqliteViewsResolver, sequencesResolver, roleResolver, policyResolver, indPolicyResolver, enumsResolver, columnsResolver, promptColumnsConflicts, promptNamedConflict, promptNamedWithSchemasConflict, promptSchemasConflict, BREAKPOINT, init_migrate, posixClasses, braceEscape, regexpEscape, rangesToString, parseClass, init_brace_expressions, escape, init_escape, unescape, init_unescape, import_brace_expansion, minimatch, starDotExtRE, starDotExtTest, starDotExtTestDot, starDotExtTestNocase, starDotExtTestNocaseDot, starDotStarRE, starDotStarTest, starDotStarTestDot, dotStarRE, dotStarTest, starRE, starTest, starTestDot, qmarksRE, qmarksTestNocase, qmarksTestNocaseDot, qmarksTestDot, qmarksTest, qmarksTestNoExt, qmarksTestNoExtDot, defaultPlatform, path, sep2, GLOBSTAR, plTypes, qmark, star, twoStarDot, twoStarNoDot, charSet, reSpecials, addPatternStartSet, filter, ext, defaults, braceExpand, MAX_PATTERN_LENGTH, assertValidPattern, makeRe, match2, globUnescape, globMagic, regExpEscape, Minimatch, init_mjs, entityKind2, hasOwnEntityKind2, init_entity2, _a3, Column2, init_column2, _a22, ColumnBuilder2, init_column_builder2, TableName2, init_table_utils2, _a32, ForeignKeyBuilder2, _a4, ForeignKey2, init_foreign_keys2, init_tracing_utils2, _a5, UniqueConstraintBuilder, _a6, UniqueOnConstraintBuilder, _a7, UniqueConstraint, init_unique_constraint2, init_array2, _a8, _b, PgColumnBuilder2, _a9, _b2, PgColumn2, _a10, _b3, ExtraConfigColumn2, _a11, IndexedColumn2, _a12, _b4, PgArrayBuilder2, _a13, _b5, _PgArray, PgArray2, init_common22, _a14, _b6, PgEnumObjectColumnBuilder2, _a15, _b7, PgEnumObjectColumn2, isPgEnumSym2, _a16, _b8, PgEnumColumnBuilder2, _a17, _b9, PgEnumColumn2, init_enum2, _a18, Subquery2, _a19, _b10, WithSubquery2, init_subquery2, version4, init_version2, otel2, rawTracer2, tracer2, init_tracing2, ViewBaseConfig2, init_view_common3, Schema2, Columns2, ExtraConfigColumns2, OriginalName2, BaseName2, IsAlias2, ExtraConfigBuilder2, IsDrizzleTable2, _a20, _b11, _c, _d, _e3, _f, _g, _h, _i, _j, Table2, init_table8, _a21, FakePrimitiveParam, _a222, StringChunk2, _a23, _SQL, SQL2, _a24, Name2, noopDecoder2, noopEncoder2, noopMapper2, _a25, Param2, _a26, Placeholder2, IsDrizzleView2, _a27, _b12, _c2, View3, init_sql4, _a28, ColumnAliasProxyHandler2, _a29, TableAliasProxyHandler2, _a30, RelationTableAliasProxyHandler, init_alias3, _a31, _b13, DrizzleError2, DrizzleQueryError, _a322, _b14, TransactionRollbackError2, init_errors22, _a33, ConsoleLogWriter2, _a34, DefaultLogger2, _a35, NoopLogger2, init_logger3, init_operations, _a36, _b15, QueryPromise2, init_query_promise2, textDecoder, init_utils22, _a37, _b16, PgIntColumnBaseBuilder2, init_int_common2, _a38, _b17, PgBigInt53Builder2, _a39, _b18, PgBigInt532, _a40, _b19, PgBigInt64Builder2, _a41, _b20, PgBigInt642, init_bigint2, _a42, _b21, PgBigSerial53Builder2, _a43, _b22, PgBigSerial532, _a44, _b23, PgBigSerial64Builder2, _a45, _b24, PgBigSerial642, init_bigserial2, _a46, _b25, PgBooleanBuilder2, _a47, _b26, PgBoolean2, init_boolean2, _a48, _b27, PgCharBuilder2, _a49, _b28, PgChar2, init_char2, _a50, _b29, PgCidrBuilder2, _a51, _b30, PgCidr2, init_cidr2, _a52, _b31, PgCustomColumnBuilder2, _a53, _b32, PgCustomColumn2, init_custom2, _a54, _b33, PgDateColumnBaseBuilder2, init_date_common2, _a55, _b34, PgDateBuilder2, _a56, _b35, PgDate2, _a57, _b36, PgDateStringBuilder2, _a58, _b37, PgDateString2, init_date2, _a59, _b38, PgDoublePrecisionBuilder2, _a60, _b39, PgDoublePrecision2, init_double_precision2, _a61, _b40, PgInetBuilder2, _a62, _b41, PgInet2, init_inet2, _a63, _b42, PgIntegerBuilder2, _a64, _b43, PgInteger2, init_integer2, _a65, _b44, PgIntervalBuilder2, _a66, _b45, PgInterval2, init_interval2, _a67, _b46, PgJsonBuilder2, _a68, _b47, PgJson2, init_json2, _a69, _b48, PgJsonbBuilder2, _a70, _b49, PgJsonb2, init_jsonb2, _a71, _b50, PgLineBuilder2, _a72, _b51, PgLineTuple2, _a73, _b52, PgLineABCBuilder2, _a74, _b53, PgLineABC2, init_line2, _a75, _b54, PgMacaddrBuilder2, _a76, _b55, PgMacaddr2, init_macaddr2, _a77, _b56, PgMacaddr8Builder2, _a78, _b57, PgMacaddr82, init_macaddr82, _a79, _b58, PgNumericBuilder2, _a80, _b59, PgNumeric2, _a81, _b60, PgNumericNumberBuilder2, _a82, _b61, PgNumericNumber2, _a83, _b62, PgNumericBigIntBuilder2, _a84, _b63, PgNumericBigInt2, init_numeric2, _a85, _b64, PgPointTupleBuilder2, _a86, _b65, PgPointTuple2, _a87, _b66, PgPointObjectBuilder2, _a88, _b67, PgPointObject2, init_point2, init_utils32, _a89, _b68, PgGeometryBuilder2, _a90, _b69, PgGeometry2, _a91, _b70, PgGeometryObjectBuilder2, _a92, _b71, PgGeometryObject2, init_geometry2, _a93, _b72, PgRealBuilder2, _a94, _b73, PgReal2, init_real2, _a95, _b74, PgSerialBuilder2, _a96, _b75, PgSerial2, init_serial2, _a97, _b76, PgSmallIntBuilder2, _a98, _b77, PgSmallInt2, init_smallint2, _a99, _b78, PgSmallSerialBuilder2, _a100, _b79, PgSmallSerial2, init_smallserial2, _a101, _b80, PgTextBuilder2, _a102, _b81, PgText2, init_text2, _a103, _b82, PgTimeBuilder2, _a104, _b83, PgTime2, init_time2, _a105, _b84, PgTimestampBuilder2, _a106, _b85, PgTimestamp2, _a107, _b86, PgTimestampStringBuilder2, _a108, _b87, PgTimestampString2, init_timestamp2, _a109, _b88, PgUUIDBuilder2, _a110, _b89, PgUUID2, init_uuid3, _a111, _b90, PgVarcharBuilder2, _a112, _b91, PgVarchar2, init_varchar2, _a113, _b92, PgBinaryVectorBuilder2, _a114, _b93, PgBinaryVector2, init_bit2, _a115, _b94, PgHalfVectorBuilder2, _a116, _b95, PgHalfVector2, init_halfvec2, _a117, _b96, PgSparseVectorBuilder2, _a118, _b97, PgSparseVector2, init_sparsevec2, _a119, _b98, PgVectorBuilder2, _a120, _b99, PgVector2, init_vector3, init_all2, InlineForeignKeys2, EnableRLS2, _a121, _b100, _c3, _d2, _e22, _f2, PgTable2, pgTable2, init_table22, _a122, PrimaryKeyBuilder2, _a123, PrimaryKey2, init_primary_keys2, eq2, ne4, gt3, gte2, lt4, lte2, init_conditions2, init_select3, init_expressions2, _a124, Relation2, _a125, Relations2, _a126, _b101, _One, One2, _a127, _b102, _Many, Many2, init_relations2, init_aggregate2, init_vector22, init_functions2, init_sql22, dist_exports, init_dist9, init_alias22, _a128, CheckBuilder, _a129, Check, init_checks6, init_columns2, _a130, _SelectionProxyHandler, SelectionProxyHandler2, init_selection_proxy2, _a131, IndexBuilderOn2, _a132, IndexBuilder2, _a133, Index2, init_indexes2, _a134, PgPolicy, init_policies2, PgViewConfig2, init_view_common22, _a135, CasingCache2, init_casing2, _a136, _b103, PgViewBase2, init_view_base2, _a137, PgDialect2, init_dialect2, _a138, TypedQueryBuilder2, init_query_builder3, _a139, PgSelectBuilder2, _a140, _b104, PgSelectQueryBuilderBase2, _a141, _b105, PgSelectBase2, getPgSetOperators2, union22, unionAll2, intersect2, intersectAll2, except2, exceptAll2, init_select22, _a142, QueryBuilder2, init_query_builder22, _a143, DefaultViewBuilderCore, _a144, _b106, ViewBuilder, _a145, _b107, ManualViewBuilder, _a146, MaterializedViewBuilderCore, _a147, _b108, MaterializedViewBuilder, _a148, _b109, ManualMaterializedViewBuilder, _a149, _b110, _c4, PgView2, PgMaterializedViewConfig2, _a150, _b111, _c5, PgMaterializedView, init_view2, init_utils42, _a151, _b112, PgDeleteBase2, init_delete2, _a152, PgInsertBuilder2, _a153, _b113, PgInsertBase2, init_insert2, _a154, _b114, PgRefreshMaterializedView2, init_refresh_materialized_view2, init_select_types, _a155, PgUpdateBuilder2, _a156, _b115, PgUpdateBase2, init_update2, init_query_builders2, _a157, _b116, _c6, _PgCountBuilder, PgCountBuilder2, init_count2, _a158, RelationalQueryBuilder2, _a159, _b117, PgRelationalQuery2, init_query2, _a160, _b118, PgRaw2, init_raw2, _a161, PgDatabase2, init_db2, _a162, PgRole, init_roles2, _a163, PgSequence, init_sequence2, _a164, PgSchema5, init_schema4, _a165, Cache, _a166, _b119, NoopCache, init_cache, _a167, PgPreparedQuery2, _a168, PgSession2, _a169, _b120, PgTransaction2, init_session3, init_subquery22, init_utils52, init_pg_core2, vectorOps, init_vector32, sqlToStr, init_utils62, indexName, generatePgSnapshot, trimChar, fromDatabase, defaultForColumn, getColumnsInfoQuery, init_pgSerializer, import_hanji4, Select, init_selector_ui, init_alias32, _a170, CheckBuilder2, _a171, Check2, init_checks22, _a172, ForeignKeyBuilder22, _a173, ForeignKey22, init_foreign_keys22, _a174, UniqueConstraintBuilder2, _a175, UniqueOnConstraintBuilder2, _a176, UniqueConstraint2, init_unique_constraint22, _a177, _b121, SQLiteColumnBuilder, _a178, _b122, SQLiteColumn, init_common3, _a179, _b123, SQLiteBigIntBuilder, _a180, _b124, SQLiteBigInt, _a181, _b125, SQLiteBlobJsonBuilder, _a182, _b126, SQLiteBlobJson, _a183, _b127, SQLiteBlobBufferBuilder, _a184, _b128, SQLiteBlobBuffer, init_blob, _a185, _b129, SQLiteCustomColumnBuilder, _a186, _b130, SQLiteCustomColumn, init_custom22, _a187, _b131, SQLiteBaseIntegerBuilder, _a188, _b132, SQLiteBaseInteger, _a189, _b133, SQLiteIntegerBuilder, _a190, _b134, SQLiteInteger, _a191, _b135, SQLiteTimestampBuilder, _a192, _b136, SQLiteTimestamp, _a193, _b137, SQLiteBooleanBuilder, _a194, _b138, SQLiteBoolean, init_integer22, _a195, _b139, SQLiteNumericBuilder, _a196, _b140, SQLiteNumeric, _a197, _b141, SQLiteNumericNumberBuilder, _a198, _b142, SQLiteNumericNumber, _a199, _b143, SQLiteNumericBigIntBuilder, _a200, _b144, SQLiteNumericBigInt, init_numeric22, _a201, _b145, SQLiteRealBuilder, _a202, _b146, SQLiteReal, init_real22, _a203, _b147, SQLiteTextBuilder, _a204, _b148, SQLiteText, _a205, _b149, SQLiteTextJsonBuilder, _a206, _b150, SQLiteTextJson, init_text22, init_columns22, init_all22, InlineForeignKeys22, _a207, _b151, _c7, _d3, _e32, SQLiteTable, sqliteTable, init_table32, _a208, IndexBuilderOn22, _a209, IndexBuilder22, _a210, Index4, init_indexes22, _a211, PrimaryKeyBuilder22, _a212, PrimaryKey22, init_primary_keys22, init_utils72, _a213, _b152, SQLiteDeleteBase, init_delete22, _a214, _b153, SQLiteViewBase, init_view_base22, _a215, SQLiteDialect, _a216, _b154, SQLiteSyncDialect, _a217, _b155, SQLiteAsyncDialect, init_dialect22, _a218, SQLiteSelectBuilder, _a219, _b156, SQLiteSelectQueryBuilderBase, _a220, _b157, SQLiteSelectBase, getSQLiteSetOperators, union32, unionAll22, intersect22, except22, init_select32, _a221, QueryBuilder22, init_query_builder32, _a2222, SQLiteInsertBuilder, _a223, _b158, SQLiteInsertBase, init_insert22, init_select_types2, _a224, SQLiteUpdateBuilder, _a225, _b159, SQLiteUpdateBase, init_update22, init_query_builders22, _a226, _b160, _c8, _SQLiteCountBuilder, SQLiteCountBuilder, init_count22, _a227, RelationalQueryBuilder22, _a228, _b161, SQLiteRelationalQuery, _a229, _b162, SQLiteSyncRelationalQuery, init_query22, _a230, _b163, SQLiteRaw, init_raw22, _a231, BaseSQLiteDatabase, init_db22, _a232, _b164, ExecuteResultSync, _a233, SQLitePreparedQuery, _a234, SQLiteSession, _a235, _b165, SQLiteTransaction, init_session22, init_subquery3, _a236, ViewBuilderCore, _a237, _b166, ViewBuilder2, _a238, _b167, ManualViewBuilder2, _a239, _b168, SQLiteView2, init_view22, init_sqlite_core, generateSqliteSnapshot, fromDatabase2, init_sqliteSerializer, getTablesFilterByExtensions, init_getTablesFilterByExtensions, init_alias4, _a240, CheckBuilder3, _a241, Check3, init_checks32, _a242, ForeignKeyBuilder3, _a243, ForeignKey3, init_foreign_keys3, _a244, UniqueConstraintBuilder3, _a245, UniqueOnConstraintBuilder3, _a246, UniqueConstraint3, init_unique_constraint3, _a247, _b169, MySqlColumnBuilder, _a248, _b170, MySqlColumn, _a249, _b171, MySqlColumnBuilderWithAutoIncrement, _a250, _b172, MySqlColumnWithAutoIncrement, init_common4, _a251, _b173, MySqlBigInt53Builder, _a252, _b174, MySqlBigInt53, _a253, _b175, MySqlBigInt64Builder, _a254, _b176, MySqlBigInt64, init_bigint22, _a255, _b177, MySqlBinaryBuilder, _a256, _b178, MySqlBinary, init_binary, _a257, _b179, MySqlBooleanBuilder, _a258, _b180, MySqlBoolean, init_boolean22, _a259, _b181, MySqlCharBuilder, _a260, _b182, MySqlChar, init_char22, _a261, _b183, MySqlCustomColumnBuilder, _a262, _b184, MySqlCustomColumn, init_custom3, _a263, _b185, MySqlDateBuilder, _a264, _b186, MySqlDate, _a265, _b187, MySqlDateStringBuilder, _a266, _b188, MySqlDateString, init_date22, _a267, _b189, MySqlDateTimeBuilder, _a268, _b190, MySqlDateTime, _a269, _b191, MySqlDateTimeStringBuilder, _a270, _b192, MySqlDateTimeString, init_datetime, _a271, _b193, MySqlDecimalBuilder, _a272, _b194, MySqlDecimal, _a273, _b195, MySqlDecimalNumberBuilder, _a274, _b196, MySqlDecimalNumber, _a275, _b197, MySqlDecimalBigIntBuilder, _a276, _b198, MySqlDecimalBigInt, init_decimal, _a277, _b199, MySqlDoubleBuilder, _a278, _b200, MySqlDouble, init_double, _a279, _b201, MySqlEnumColumnBuilder, _a280, _b202, MySqlEnumColumn, _a281, _b203, MySqlEnumObjectColumnBuilder, _a282, _b204, MySqlEnumObjectColumn, init_enum22, _a283, _b205, MySqlFloatBuilder, _a284, _b206, MySqlFloat, init_float, _a285, _b207, MySqlIntBuilder, _a286, _b208, MySqlInt, init_int, _a287, _b209, MySqlJsonBuilder, _a288, _b210, MySqlJson, init_json22, _a289, _b211, MySqlMediumIntBuilder, _a290, _b212, MySqlMediumInt, init_mediumint, _a291, _b213, MySqlRealBuilder, _a292, _b214, MySqlReal, init_real3, _a293, _b215, MySqlSerialBuilder, _a294, _b216, MySqlSerial, init_serial22, _a295, _b217, MySqlSmallIntBuilder, _a296, _b218, MySqlSmallInt, init_smallint22, _a297, _b219, MySqlTextBuilder, _a298, _b220, MySqlText, init_text3, _a299, _b221, MySqlTimeBuilder, _a300, _b222, MySqlTime, init_time22, _a301, _b223, MySqlDateColumnBaseBuilder, _a302, _b224, MySqlDateBaseColumn, init_date_common22, _a303, _b225, MySqlTimestampBuilder, _a304, _b226, MySqlTimestamp, _a305, _b227, MySqlTimestampStringBuilder, _a306, _b228, MySqlTimestampString, init_timestamp22, _a307, _b229, MySqlTinyIntBuilder, _a308, _b230, MySqlTinyInt, init_tinyint, _a309, _b231, MySqlVarBinaryBuilder, _a310, _b232, MySqlVarBinary, init_varbinary, _a311, _b233, MySqlVarCharBuilder, _a312, _b234, MySqlVarChar, init_varchar22, _a313, _b235, MySqlYearBuilder, _a314, _b236, MySqlYear, init_year, init_columns3, _a315, _b237, _c9, _MySqlCountBuilder, MySqlCountBuilder, init_count3, _a316, IndexBuilderOn3, _a317, IndexBuilder3, _a318, Index5, init_indexes3, init_all3, InlineForeignKeys3, _a319, _b238, _c10, _d4, _e4, MySqlTable, mysqlTable, init_table42, _a320, PrimaryKeyBuilder3, _a321, PrimaryKey3, init_primary_keys3, MySqlViewConfig, init_view_common32, init_utils8, _a3222, _b239, MySqlDeleteBase, init_delete3, _a323, _b240, MySqlViewBase, init_view_base3, _a324, MySqlDialect, init_dialect3, _a325, MySqlSelectBuilder, _a326, _b241, MySqlSelectQueryBuilderBase, _a327, _b242, MySqlSelectBase, getMySqlSetOperators, union4, unionAll3, intersect3, intersectAll22, except3, exceptAll22, init_select4, _a328, QueryBuilder3, init_query_builder4, _a329, MySqlInsertBuilder, _a330, _b243, MySqlInsertBase, init_insert3, init_select_types3, _a331, MySqlUpdateBuilder, _a332, _b244, MySqlUpdateBase, init_update3, init_query_builders3, _a333, RelationalQueryBuilder3, _a334, _b245, MySqlRelationalQuery, init_query3, _a335, MySqlDatabase, init_db3, _a336, ViewBuilderCore2, _a337, _b246, ViewBuilder3, _a338, _b247, ManualViewBuilder3, _a339, _b248, _c11, MySqlView2, init_view3, _a340, MySqlSchema5, init_schema22, _a341, MySqlPreparedQuery, _a342, MySqlSession, _a343, _b249, MySqlTransaction, init_session32, init_subquery4, init_mysql_core, handleEnumType, generateMySqlSnapshot, fromDatabase3, init_mysqlSerializer, cliConfigGenerate, pushParams, pullParams, configCheck, cliConfigCheck, init_cli, gelCredentials, init_gel, libSQLCredentials, init_libsql, mysqlCredentials, init_mysql, postgresCredentials, init_postgres, singlestoreCredentials, init_singlestore, sqliteCredentials, init_sqlite, credentials, studioCliParams, studioConfig, init_studio, es5_exports, _3, es5_default, init_es5, import_hanji7, assertES5, safeRegister, migrateConfig, init_utils9, prepareFromExports, init_pgImports, init_alias5, _a344, UniqueConstraintBuilder4, _a345, UniqueOnConstraintBuilder4, _a346, UniqueConstraint4, init_unique_constraint4, _a347, _b250, SingleStoreColumnBuilder, _a348, _b251, SingleStoreColumn, _a349, _b252, SingleStoreColumnBuilderWithAutoIncrement, _a350, _b253, SingleStoreColumnWithAutoIncrement, init_common5, _a351, _b254, SingleStoreBigInt53Builder, _a352, _b255, SingleStoreBigInt53, _a353, _b256, SingleStoreBigInt64Builder, _a354, _b257, SingleStoreBigInt64, init_bigint3, _a355, _b258, SingleStoreBinaryBuilder, _a356, _b259, SingleStoreBinary, init_binary2, _a357, _b260, SingleStoreBooleanBuilder, _a358, _b261, SingleStoreBoolean, init_boolean3, _a359, _b262, SingleStoreCharBuilder, _a360, _b263, SingleStoreChar, init_char3, _a361, _b264, SingleStoreCustomColumnBuilder, _a362, _b265, SingleStoreCustomColumn, init_custom4, _a363, _b266, SingleStoreDateBuilder, _a364, _b267, SingleStoreDate, _a365, _b268, SingleStoreDateStringBuilder, _a366, _b269, SingleStoreDateString, init_date3, _a367, _b270, SingleStoreDateTimeBuilder, _a368, _b271, SingleStoreDateTime, _a369, _b272, SingleStoreDateTimeStringBuilder, _a370, _b273, SingleStoreDateTimeString, init_datetime2, _a371, _b274, SingleStoreDecimalBuilder, _a372, _b275, SingleStoreDecimal, _a373, _b276, SingleStoreDecimalNumberBuilder, _a374, _b277, SingleStoreDecimalNumber, _a375, _b278, SingleStoreDecimalBigIntBuilder, _a376, _b279, SingleStoreDecimalBigInt, init_decimal2, _a377, _b280, SingleStoreDoubleBuilder, _a378, _b281, SingleStoreDouble, init_double2, _a379, _b282, SingleStoreEnumColumnBuilder, _a380, _b283, SingleStoreEnumColumn, init_enum3, _a381, _b284, SingleStoreFloatBuilder, _a382, _b285, SingleStoreFloat, init_float2, _a383, _b286, SingleStoreIntBuilder, _a384, _b287, SingleStoreInt, init_int2, _a385, _b288, SingleStoreJsonBuilder, _a386, _b289, SingleStoreJson, init_json3, _a387, _b290, SingleStoreMediumIntBuilder, _a388, _b291, SingleStoreMediumInt, init_mediumint2, _a389, _b292, SingleStoreRealBuilder, _a390, _b293, SingleStoreReal, init_real4, _a391, _b294, SingleStoreSerialBuilder, _a392, _b295, SingleStoreSerial, init_serial3, _a393, _b296, SingleStoreSmallIntBuilder, _a394, _b297, SingleStoreSmallInt, init_smallint3, _a395, _b298, SingleStoreTextBuilder, _a396, _b299, SingleStoreText, init_text4, _a397, _b300, SingleStoreTimeBuilder, _a398, _b301, SingleStoreTime, init_time3, _a399, _b302, SingleStoreDateColumnBaseBuilder, _a400, _b303, SingleStoreDateBaseColumn, init_date_common3, _a401, _b304, SingleStoreTimestampBuilder, _a402, _b305, SingleStoreTimestamp, _a403, _b306, SingleStoreTimestampStringBuilder, _a404, _b307, SingleStoreTimestampString, init_timestamp3, _a405, _b308, SingleStoreTinyIntBuilder, _a406, _b309, SingleStoreTinyInt, init_tinyint2, _a407, _b310, SingleStoreVarBinaryBuilder, _a408, _b311, SingleStoreVarBinary, init_varbinary2, _a409, _b312, SingleStoreVarCharBuilder, _a410, _b313, SingleStoreVarChar, init_varchar3, _a411, _b314, SingleStoreVectorBuilder, _a412, _b315, SingleStoreVector, init_vector4, _a413, _b316, SingleStoreYearBuilder, _a414, _b317, SingleStoreYear, init_year2, init_columns4, _a415, _b318, _c12, _SingleStoreCountBuilder, SingleStoreCountBuilder, init_count4, _a416, IndexBuilderOn4, _a417, IndexBuilder4, _a418, Index6, init_indexes4, init_all4, _a419, _b319, _c13, _d5, SingleStoreTable, init_table52, _a420, PrimaryKeyBuilder4, _a421, PrimaryKey4, init_primary_keys4, init_utils10, _a422, _b320, SingleStoreDeleteBase, init_delete4, _a423, SingleStoreInsertBuilder, _a424, _b321, SingleStoreInsertBase, init_insert4, _a425, SingleStoreDialect, init_dialect4, _a426, SingleStoreSelectBuilder, _a427, _b322, SingleStoreSelectQueryBuilderBase, _a428, _b323, SingleStoreSelectBase, getSingleStoreSetOperators, union5, unionAll4, intersect4, except4, minus, init_select5, _a429, QueryBuilder4, init_query_builder5, init_select_types4, _a430, SingleStoreUpdateBuilder, _a431, _b324, SingleStoreUpdateBase, init_update4, init_query_builders4, _a432, SingleStoreDatabase, init_db4, _a433, SingleStoreSchema5, init_schema32, _a434, SingleStorePreparedQuery, _a435, SingleStoreSession, _a436, _b325, SingleStoreTransaction, init_session4, init_subquery5, init_singlestore_core, dialect5, generateSingleStoreSnapshot, fromDatabase4, init_singlestoreSerializer, sqliteImports_exports, prepareFromExports2, prepareFromSqliteImports, init_sqliteImports, mysqlImports_exports, prepareFromExports3, prepareFromMySqlImports, init_mysqlImports, mysqlPushUtils_exports, import_hanji8, filterStatements, logSuggestionsAndReturn2, init_mysqlPushUtils, mysqlIntrospect_exports, import_hanji9, mysqlPushIntrospect, init_mysqlIntrospect, singlestoreImports_exports, prepareFromExports4, prepareFromSingleStoreImports, init_singlestoreImports, singlestorePushUtils_exports, import_hanji10, filterStatements2, logSuggestionsAndReturn3, init_singlestorePushUtils, singlestoreIntrospect_exports, import_hanji11, singlestorePushIntrospect, init_singlestoreIntrospect, import_hanji3, pgPushIntrospect = async (db2, filters, schemaFilters, entities, tsSchema) => {
   const matchers = filters.map((it3) => {
     return new Minimatch(it3);
   });
@@ -121421,7 +123814,7 @@ globstar while`, file3, fr, pattern, pr2, swallowee);
       });
     }
   });
-  init_sql3 = __esm2({
+  init_sql4 = __esm2({
     "../drizzle-orm/dist/sql/sql.js"() {
       init_entity2();
       init_enum2();
@@ -121774,7 +124167,7 @@ globstar while`, file3, fr, pattern, pr2, swallowee);
     "../drizzle-orm/dist/alias.js"() {
       init_column2();
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_table8();
       init_view_common3();
       _a28 = entityKind2;
@@ -121948,7 +124341,7 @@ params: ${params}`);
     "../drizzle-orm/dist/utils.js"() {
       init_column2();
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_view_common3();
@@ -122207,7 +124600,7 @@ params: ${params}`);
   init_date_common2 = __esm2({
     "../drizzle-orm/dist/pg-core/columns/date.common.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_common22();
       PgDateColumnBaseBuilder2 = class extends (_b33 = PgColumnBuilder2, _a54 = entityKind2, _b33) {
         defaultNow() {
@@ -122992,7 +125385,7 @@ params: ${params}`);
   init_uuid3 = __esm2({
     "../drizzle-orm/dist/pg-core/columns/uuid.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_common22();
       PgUUIDBuilder2 = class extends (_b88 = PgColumnBuilder2, _a109 = entityKind2, _b88) {
         constructor(name22) {
@@ -123263,7 +125656,7 @@ params: ${params}`);
       init_column2();
       init_entity2();
       init_table8();
-      init_sql3();
+      init_sql4();
       eq2 = (left, right) => {
         return sql4`${left} = ${bindIfParam2(right, left)}`;
       };
@@ -123286,7 +125679,7 @@ params: ${params}`);
   });
   init_select3 = __esm2({
     "../drizzle-orm/dist/sql/expressions/select.js"() {
-      init_sql3();
+      init_sql4();
     }
   });
   init_expressions2 = __esm2({
@@ -123302,7 +125695,7 @@ params: ${params}`);
       init_entity2();
       init_primary_keys2();
       init_expressions2();
-      init_sql3();
+      init_sql4();
       _a124 = entityKind2;
       Relation2 = class {
         constructor(sourceTable, referencedTable, relationName) {
@@ -123356,12 +125749,12 @@ params: ${params}`);
     "../drizzle-orm/dist/sql/functions/aggregate.js"() {
       init_column2();
       init_entity2();
-      init_sql3();
+      init_sql4();
     }
   });
   init_vector22 = __esm2({
     "../drizzle-orm/dist/sql/functions/vector.js"() {
-      init_sql3();
+      init_sql4();
     }
   });
   init_functions2 = __esm2({
@@ -123374,7 +125767,7 @@ params: ${params}`);
     "../drizzle-orm/dist/sql/index.js"() {
       init_expressions2();
       init_functions2();
-      init_sql3();
+      init_sql4();
     }
   });
   dist_exports = {};
@@ -123591,7 +125984,7 @@ params: ${params}`);
       init_alias3();
       init_column2();
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_view_common3();
       _a130 = entityKind2;
@@ -123650,7 +126043,7 @@ params: ${params}`);
   });
   init_indexes2 = __esm2({
     "../drizzle-orm/dist/pg-core/indexes.js"() {
-      init_sql3();
+      init_sql4();
       init_entity2();
       init_columns2();
       _a131 = entityKind2;
@@ -123813,7 +126206,7 @@ params: ${params}`);
   init_view_base2 = __esm2({
     "../drizzle-orm/dist/pg-core/view-base.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       PgViewBase2 = class extends (_b103 = View3, _a136 = entityKind2, _b103) {
       };
       __publicField(PgViewBase2, _a136, "PgViewBase");
@@ -123830,7 +126223,7 @@ params: ${params}`);
       init_table22();
       init_relations2();
       init_sql22();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_utils22();
@@ -124414,7 +126807,7 @@ params: ${params}`);
       init_query_builder3();
       init_query_promise2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_tracing2();
@@ -125035,7 +127428,7 @@ params: ${params}`);
     "../drizzle-orm/dist/pg-core/utils.js"() {
       init_entity2();
       init_table22();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_view_common3();
@@ -125123,7 +127516,7 @@ params: ${params}`);
       init_entity2();
       init_query_promise2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_table8();
       init_tracing2();
       init_utils22();
@@ -125317,7 +127710,7 @@ params: ${params}`);
       init_table22();
       init_query_promise2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_utils22();
@@ -125491,7 +127884,7 @@ params: ${params}`);
   init_count2 = __esm2({
     "../drizzle-orm/dist/pg-core/query-builders/count.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       _PgCountBuilder = class _PgCountBuilder2 extends (_c6 = SQL2, _b116 = entityKind2, _a157 = Symbol.toStringTag, _c6) {
         constructor(params) {
           super(_PgCountBuilder2.buildEmbeddedCount(params.source, params.filters).queryChunks);
@@ -125659,7 +128052,7 @@ params: ${params}`);
       init_entity2();
       init_query_builders2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_count2();
       init_query2();
@@ -125831,10 +128224,10 @@ params: ${params}`);
       __publicField(PgSequence, _a163, "PgSequence");
     }
   });
-  init_schema3 = __esm2({
+  init_schema4 = __esm2({
     "../drizzle-orm/dist/pg-core/schema.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_enum2();
       init_sequence2();
       init_table22();
@@ -126050,7 +128443,7 @@ params: ${params}`);
       init_primary_keys2();
       init_query_builders2();
       init_roles2();
-      init_schema3();
+      init_schema4();
       init_sequence2();
       init_session3();
       init_subquery22();
@@ -127858,7 +130251,7 @@ ORDER BY
   init_integer22 = __esm2({
     "../drizzle-orm/dist/sqlite-core/columns/integer.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_utils22();
       init_common3();
       SQLiteBaseIntegerBuilder = class extends (_b131 = SQLiteColumnBuilder, _a187 = entityKind2, _b131) {
@@ -128221,7 +130614,7 @@ ORDER BY
   init_utils72 = __esm2({
     "../drizzle-orm/dist/sqlite-core/utils.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_view_common3();
@@ -128315,7 +130708,7 @@ ORDER BY
   init_view_base22 = __esm2({
     "../drizzle-orm/dist/sqlite-core/view-base.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       SQLiteViewBase = class extends (_b153 = View3, _a214 = entityKind2, _b153) {
       };
       __publicField(SQLiteViewBase, _a214, "SQLiteViewBase");
@@ -128330,7 +130723,7 @@ ORDER BY
       init_errors22();
       init_relations2();
       init_sql22();
-      init_sql3();
+      init_sql4();
       init_columns22();
       init_table32();
       init_subquery2();
@@ -128910,7 +131303,7 @@ ORDER BY
       init_query_builder3();
       init_query_promise2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_utils22();
@@ -129273,7 +131666,7 @@ ORDER BY
     "../drizzle-orm/dist/sqlite-core/query-builders/insert.js"() {
       init_entity2();
       init_query_promise2();
-      init_sql3();
+      init_sql4();
       init_table32();
       init_table8();
       init_utils22();
@@ -129520,7 +131913,7 @@ ORDER BY
   init_count22 = __esm2({
     "../drizzle-orm/dist/sqlite-core/query-builders/count.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       _SQLiteCountBuilder = class _SQLiteCountBuilder2 extends (_c8 = SQL2, _b160 = entityKind2, _a226 = Symbol.toStringTag, _c8) {
         constructor(params) {
           super(_SQLiteCountBuilder2.buildEmbeddedCount(params.source, params.filters).queryChunks);
@@ -129689,7 +132082,7 @@ ORDER BY
     "../drizzle-orm/dist/sqlite-core/db.js"() {
       init_entity2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_query_builders22();
       init_subquery2();
       init_count22();
@@ -131660,7 +134053,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
   init_date_common22 = __esm2({
     "../drizzle-orm/dist/mysql-core/columns/date.common.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_common4();
       MySqlDateColumnBaseBuilder = class extends (_b223 = MySqlColumnBuilder, _a301 = entityKind2, _b223) {
         defaultNow() {
@@ -131886,7 +134279,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
   init_count3 = __esm2({
     "../drizzle-orm/dist/mysql-core/query-builders/count.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       _MySqlCountBuilder = class _MySqlCountBuilder2 extends (_c9 = SQL2, _b237 = entityKind2, _a315 = Symbol.toStringTag, _c9) {
         constructor(params) {
           super(_MySqlCountBuilder2.buildEmbeddedCount(params.source, params.filters).queryChunks);
@@ -132148,7 +134541,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
   init_view_base3 = __esm2({
     "../drizzle-orm/dist/mysql-core/view-base.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       MySqlViewBase = class extends (_b240 = View3, _a323 = entityKind2, _b240) {
       };
       __publicField(MySqlViewBase, _a323, "MySqlViewBase");
@@ -132163,7 +134556,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
       init_errors22();
       init_relations2();
       init_expressions2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_utils22();
@@ -132929,7 +135322,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
       init_query_builder3();
       init_query_promise2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_utils22();
@@ -133330,7 +135723,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
     "../drizzle-orm/dist/mysql-core/query-builders/insert.js"() {
       init_entity2();
       init_query_promise2();
-      init_sql3();
+      init_sql4();
       init_table8();
       init_utils22();
       init_utils8();
@@ -133610,7 +136003,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
     "../drizzle-orm/dist/mysql-core/db.js"() {
       init_entity2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_count3();
       init_query_builders3();
@@ -133839,7 +136232,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
       init_cache();
       init_entity2();
       init_errors22();
-      init_sql3();
+      init_sql4();
       init_db3();
       _a341 = entityKind2;
       MySqlPreparedQuery = class {
@@ -135862,7 +138255,7 @@ AND
   init_date_common3 = __esm2({
     "../drizzle-orm/dist/singlestore-core/columns/date.common.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_common5();
       SingleStoreDateColumnBaseBuilder = class extends (_b302 = SingleStoreColumnBuilder, _a399 = entityKind2, _b302) {
         defaultNow() {
@@ -135887,7 +138280,7 @@ AND
   init_timestamp3 = __esm2({
     "../drizzle-orm/dist/singlestore-core/columns/timestamp.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_utils22();
       init_date_common3();
       SingleStoreTimestampBuilder = class extends (_b304 = SingleStoreDateColumnBaseBuilder, _a401 = entityKind2, _b304) {
@@ -136122,7 +138515,7 @@ AND
   init_count4 = __esm2({
     "../drizzle-orm/dist/singlestore-core/query-builders/count.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       _SingleStoreCountBuilder = class _SingleStoreCountBuilder2 extends (_c12 = SQL2, _b318 = entityKind2, _a415 = Symbol.toStringTag, _c12) {
         constructor(params) {
           super(_SingleStoreCountBuilder2.buildEmbeddedCount(params.source, params.filters).queryChunks);
@@ -136292,7 +138685,7 @@ AND
   init_utils10 = __esm2({
     "../drizzle-orm/dist/singlestore-core/utils.js"() {
       init_entity2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_indexes4();
@@ -136370,7 +138763,7 @@ AND
     "../drizzle-orm/dist/singlestore-core/query-builders/insert.js"() {
       init_entity2();
       init_query_promise2();
-      init_sql3();
+      init_sql4();
       init_table8();
       init_utils22();
       init_utils10();
@@ -136467,7 +138860,7 @@ AND
       init_errors22();
       init_relations2();
       init_expressions2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_utils22();
@@ -136998,7 +139391,7 @@ AND
       init_query_builder3();
       init_query_promise2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_table8();
       init_utils22();
@@ -137456,7 +139849,7 @@ AND
     "../drizzle-orm/dist/singlestore-core/db.js"() {
       init_entity2();
       init_selection_proxy2();
-      init_sql3();
+      init_sql4();
       init_subquery2();
       init_count4();
       init_query_builders4();
@@ -137570,7 +139963,7 @@ AND
       init_cache();
       init_entity2();
       init_errors22();
-      init_sql3();
+      init_sql4();
       init_db4();
       _a434 = entityKind2;
       SingleStorePreparedQuery = class {
@@ -139845,7 +142238,7 @@ function requireUserId(userId) {
   return userId;
 }
 var init_params_util = __esm(() => {
-  init_src4();
+  init_src5();
   init_errors();
 });
 
@@ -139898,6 +142291,7 @@ var init_utils11 = __esm(() => {
   init_lti_util();
   init_lti_provisioning();
   init_params_util();
+  init_secrets_util();
   init_timeback_util();
   init_validation_util();
 });
@@ -140085,7 +142479,7 @@ var init_database_controller = __esm(() => {
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
     }
-    return ctx.services.database.reset(slug2, ctx.user, body2.schema);
+    return ctx.services.database.reset(slug2, ctx.user, body2);
   });
   database = defineControllerNames("database", {
     reset
@@ -140138,6 +142532,85 @@ var init_deploy_controller = __esm(() => {
   });
 });
 
+// ../api-core/src/controllers/deployment-state.controller.ts
+var get, baseline, realignMigration, resolveMigration, history, restorePoints, restore, reportBlocked, deploymentState;
+var init_deployment_state_controller = __esm(() => {
+  init_schemas_index();
+  init_errors();
+  init_utils11();
+  get = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    const include = ctx.url.searchParams.getAll("include").flatMap((value) => value.split(",")).filter(Boolean);
+    const unsupported = include.filter((value) => value !== "schemaSnapshot");
+    if (unsupported.length > 0) {
+      throw ApiError.badRequest(`Unsupported include value(s): ${unsupported.join(", ")}`);
+    }
+    return ctx.services.deploymentState.get(slug2, ctx.user, {
+      includeSchemaSnapshot: include.includes("schemaSnapshot")
+    });
+  });
+  baseline = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    const body2 = await parseRequestBody(ctx.request, DeploymentStateBaselineSchema);
+    return ctx.services.deploymentState.baseline(slug2, body2, ctx.user);
+  });
+  realignMigration = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    const tag = ctx.params.tag;
+    if (!tag) {
+      throw ApiError.badRequest("Missing migration tag");
+    }
+    const body2 = await parseRequestBody(ctx.request, MigrationRealignSchema);
+    return ctx.services.deploymentState.realignMigration(slug2, tag, body2.checksum, ctx.user);
+  });
+  resolveMigration = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    const tag = ctx.params.tag;
+    if (!tag) {
+      throw ApiError.badRequest("Missing migration tag");
+    }
+    const body2 = await parseRequestBody(ctx.request, MigrationResolveSchema);
+    return ctx.services.deploymentState.resolveMigration(slug2, tag, body2, ctx.user);
+  });
+  history = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    const limitParam = ctx.url.searchParams.get("limit");
+    let limit;
+    if (limitParam !== null) {
+      limit = Number(limitParam);
+      if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
+        throw ApiError.badRequest("limit must be an integer between 1 and 100");
+      }
+    }
+    return ctx.services.deploymentState.history(slug2, ctx.user, { limit });
+  });
+  restorePoints = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    return ctx.services.deploymentState.restorePoints(slug2, ctx.user);
+  });
+  restore = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    const body2 = await parseRequestBody(ctx.request, DatabaseRestoreSchema);
+    return ctx.services.deploymentState.restoreToBookmark(slug2, body2, ctx.user);
+  });
+  reportBlocked = requireDeveloper(async (ctx) => {
+    const slug2 = requireSlug(ctx.params.slug);
+    const body2 = await parseRequestBody(ctx.request, DeployBlockedReportSchema);
+    await ctx.services.deploymentState.reportDeployBlocked(slug2, ctx.user, body2);
+    return { recorded: true };
+  });
+  deploymentState = defineControllerNames("deploymentState", {
+    get,
+    baseline,
+    realignMigration,
+    resolveMigration,
+    history,
+    restorePoints,
+    restore,
+    reportBlocked
+  });
+});
+
 // ../api-core/src/controllers/developer.controller.ts
 var apply, getStatus, developer;
 var init_developer_controller = __esm(() => {
@@ -140604,7 +143077,7 @@ var init_lti_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/secrets.controller.ts
-var listKeys2, setSecrets, deleteSecret, secrets;
+var listKeys2, setSecrets, deleteSecret, diff, secrets;
 var init_secrets_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -140650,10 +143123,19 @@ var init_secrets_controller = __esm(() => {
     await ctx.services.secrets.deleteSecret(slug2, key, ctx.user);
     return { success: true };
   });
+  diff = requireDeveloper(async (ctx) => {
+    const slug2 = ctx.params.slug;
+    if (!slug2) {
+      throw ApiError.badRequest("Missing game slug");
+    }
+    const body2 = await parseRequestBody(ctx.request, SecretsDiffRequestSchema);
+    return ctx.services.secrets.diff(slug2, body2.secrets, ctx.user);
+  });
   secrets = defineControllerNames("secrets", {
     listKeys: listKeys2,
     setSecrets,
-    deleteSecret
+    deleteSecret,
+    diff
   });
 });
 
@@ -140713,7 +143195,7 @@ var init_session_controller = __esm(() => {
     let baseUrl;
     if (ctx.config.isLocal) {
       try {
-        baseUrl = await getTunnelUrl();
+        baseUrl = await getTunnelUrl(ctx.config.baseUrl);
       } catch {}
     }
     return { token, exp, baseUrl };
@@ -140728,7 +143210,7 @@ var populateStudent, getUser, getUserEnrollments, getUserById, setupIntegration,
 var init_timeback_controller = __esm(() => {
   init_esm();
   init_schemas_index();
-  init_src4();
+  init_src5();
   init_timeback3();
   init_errors();
   init_utils11();
@@ -141495,6 +143977,7 @@ var init_controllers = __esm(() => {
   init_dashboard_controller();
   init_database_controller();
   init_deploy_controller();
+  init_deployment_state_controller();
   init_developer_controller();
   init_domain_controller();
   init_game_member_controller();
@@ -142029,6 +144512,23 @@ var init_deploy = __esm(async () => {
   });
 });
 
+// src/routes/platform/games/deployment-state.ts
+var gameDeploymentStateRouter;
+var init_deployment_state = __esm(async () => {
+  init_dist7();
+  init_controllers();
+  await init_api3();
+  gameDeploymentStateRouter = new Hono2;
+  gameDeploymentStateRouter.get("/:slug/deployment-state", handle2(deploymentState.get));
+  gameDeploymentStateRouter.post("/:slug/deployment-state/baseline", handle2(deploymentState.baseline));
+  gameDeploymentStateRouter.post("/:slug/deployment-state/migrations/:tag/realign", handle2(deploymentState.realignMigration));
+  gameDeploymentStateRouter.post("/:slug/deployment-state/migrations/:tag/resolve", handle2(deploymentState.resolveMigration));
+  gameDeploymentStateRouter.get("/:slug/deployments", handle2(deploymentState.history));
+  gameDeploymentStateRouter.post("/:slug/deployments/blocked", handle2(deploymentState.reportBlocked));
+  gameDeploymentStateRouter.get("/:slug/database/restore-points", handle2(deploymentState.restorePoints));
+  gameDeploymentStateRouter.post("/:slug/database/restore", handle2(deploymentState.restore));
+});
+
 // src/routes/platform/games/domains.ts
 var gameDomainsRouter;
 var init_domains2 = __esm(async () => {
@@ -142074,6 +144574,7 @@ var init_secrets = __esm(async () => {
   gameSecretsRouter = new Hono2;
   gameSecretsRouter.get("/:slug/secrets", handle2(secrets.listKeys));
   gameSecretsRouter.post("/:slug/secrets", handle2(secrets.setSecrets));
+  gameSecretsRouter.post("/:slug/secrets/diff", handle2(secrets.diff));
   gameSecretsRouter.delete("/:slug/secrets/:key", handle2(secrets.deleteSecret));
 });
 
@@ -142276,6 +144777,7 @@ var init_games2 = __esm(async () => {
   await __promiseAll([
     init_crud(),
     init_deploy(),
+    init_deployment_state(),
     init_domains2(),
     init_logs(),
     init_scores(),
@@ -142290,6 +144792,7 @@ var init_games2 = __esm(async () => {
   gamesRouter.route("/", gameVerifyRouter);
   gamesRouter.route("/", gameUploadsRouter);
   gamesRouter.route("/", gameDeployRouter);
+  gamesRouter.route("/", gameDeploymentStateRouter);
   gamesRouter.route("/", gameDomainsRouter);
   gamesRouter.route("/", gameLogsRouter);
   gamesRouter.route("/", gameScoresRouter);