@runa-ai/runa-cli 0.10.0 → 0.10.2

package/dist/commands/build/machine.d.ts

@@ -35,7 +35,7 @@ interface BuildMachineInput {
     repoRoot?: string;
 }
 export declare const buildMachine: import("xstate").StateMachine<BuildContext, BuildEvent, {
-    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/clean.js").CleanOutput, import("./actors/clean.js").CleanInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/build.js").BuildOutput, import("./actors/build.js").BuildInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/validate.js").ValidateOutput, import("./actors/validate.js").ValidateInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/manifest.js").ManifestOutput, import("./actors/manifest.js").ManifestInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup.js").DepsInstallOutput, import("./actors/setup.js").SetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup.js").EnvCheckOutput, import("./actors/setup.js").SetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup.js").SupabaseStartOutput, import("./actors/setup.js").SetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/db-sync.js").DbSyncOutput, import("./actors/db-sync.js").DbSyncInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/static-checks.js").StaticChecksOutput, import("./actors/static-checks.js").StaticChecksInput, import("xstate").EventObject>> | undefined;
+    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/clean.js").CleanOutput, import("./actors/clean.js").CleanInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/build.js").BuildOutput, import("./actors/build.js").BuildInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/manifest.js").ManifestOutput, import("./actors/manifest.js").ManifestInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/validate.js").ValidateOutput, import("./actors/validate.js").ValidateInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup.js").DepsInstallOutput, import("./actors/setup.js").SetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup.js").EnvCheckOutput, import("./actors/setup.js").SetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup.js").SupabaseStartOutput, import("./actors/setup.js").SetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/db-sync.js").DbSyncOutput, import("./actors/db-sync.js").DbSyncInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/static-checks.js").StaticChecksOutput, import("./actors/static-checks.js").StaticChecksInput, import("xstate").EventObject>> | undefined;
 }, {
     src: "fresh";
     logic: import("xstate").PromiseActorLogic<import("./actors/clean.js").CleanOutput, import("./actors/clean.js").CleanInput, import("xstate").EventObject>;
@@ -44,14 +44,14 @@ export declare const buildMachine: import("xstate").StateMachine<BuildContext, B
     src: "build";
     logic: import("xstate").PromiseActorLogic<import("./actors/build.js").BuildOutput, import("./actors/build.js").BuildInput, import("xstate").EventObject>;
     id: string | undefined;
-} | {
-    src: "validate";
-    logic: import("xstate").PromiseActorLogic<import("./actors/validate.js").ValidateOutput, import("./actors/validate.js").ValidateInput, import("xstate").EventObject>;
-    id: string | undefined;
 } | {
     src: "manifest";
     logic: import("xstate").PromiseActorLogic<import("./actors/manifest.js").ManifestOutput, import("./actors/manifest.js").ManifestInput, import("xstate").EventObject>;
     id: string | undefined;
+} | {
+    src: "validate";
+    logic: import("xstate").PromiseActorLogic<import("./actors/validate.js").ValidateOutput, import("./actors/validate.js").ValidateInput, import("xstate").EventObject>;
+    id: string | undefined;
 } | {
     src: "clean";
     logic: import("xstate").PromiseActorLogic<import("./actors/clean.js").CleanOutput, import("./actors/clean.js").CleanInput, import("xstate").EventObject>;
@@ -106,7 +106,7 @@ export declare const buildMachine: import("xstate").StateMachine<BuildContext, B
 } | {
     type: "isDryRun";
     params: unknown;
-}, never, "fresh" | "done" | "failed" | "build" | "dryRun" | "validate" | "manifest" | "clean" | "dbSync" | "preClean" | "staticAnalysis" | "idle" | {
+}, never, "fresh" | "done" | "failed" | "build" | "manifest" | "dryRun" | "validate" | "clean" | "dbSync" | "preClean" | "staticAnalysis" | "idle" | {
     setup: "done" | "depsInstall" | "envCheck" | "supabaseStart";
 }, string, BuildMachineInput, {
     success: boolean;

package/dist/commands/ci/commands/ci-prod-types.d.ts

@@ -5,8 +5,8 @@ import { z } from 'zod';
  */
 export declare const CiProdApplyActionOptionsSchema: z.ZodObject<{
     mode: z.ZodOptional<z.ZodEnum<{
-        local: "local";
         "github-actions": "github-actions";
+        local: "local";
     }>>;
     output: z.ZodOptional<z.ZodEnum<{
         json: "json";

package/dist/commands/ci/machine/contract.d.ts

@@ -27,15 +27,15 @@ export declare const CiModeSchema: z.ZodEnum<{
 }>;
 export type CiMode = z.infer<typeof CiModeSchema>;
 export declare const CiExecutionEnvSchema: z.ZodEnum<{
-    local: "local";
     "github-actions": "github-actions";
+    local: "local";
 }>;
 export type CiExecutionEnv = z.infer<typeof CiExecutionEnvSchema>;
 export declare const CiPhaseSchema: z.ZodEnum<{
     all: "all";
     test: "test";
-    blocking: "blocking";
     observability: "observability";
+    blocking: "blocking";
 }>;
 export type CiPhase = z.infer<typeof CiPhaseSchema>;
 export declare const CiDbModeSchema: z.ZodEnum<{
@@ -100,8 +100,8 @@ export declare const CiInputSchema: z.ZodObject<{
     check: z.ZodOptional<z.ZodBoolean>;
     keepDb: z.ZodOptional<z.ZodBoolean>;
     executionMode: z.ZodOptional<z.ZodEnum<{
-        local: "local";
         "github-actions": "github-actions";
+        local: "local";
     }>>;
     output: z.ZodOptional<z.ZodEnum<{
         json: "json";
@@ -111,8 +111,8 @@ export declare const CiInputSchema: z.ZodObject<{
     phase: z.ZodOptional<z.ZodEnum<{
         all: "all";
         test: "test";
-        blocking: "blocking";
         observability: "observability";
+        blocking: "blocking";
     }>>;
     dbMode: z.ZodOptional<z.ZodEnum<{
         auto: "auto";
@@ -148,14 +148,14 @@ export declare const SetupResultSchema: z.ZodObject<{
         "ci-pr-local": "ci-pr-local";
     }>;
     executionEnv: z.ZodEnum<{
-        local: "local";
         "github-actions": "github-actions";
+        local: "local";
     }>;
     phase: z.ZodEnum<{
         all: "all";
         test: "test";
-        blocking: "blocking";
         observability: "observability";
+        blocking: "blocking";
     }>;
     repoKind: z.ZodEnum<{
         unknown: "unknown";
@@ -296,9 +296,9 @@ export declare const StepSummarySchema: z.ZodObject<{
         db: "db";
         test: "test";
         build: "build";
-        setup: "setup";
-        github: "github";
         observability: "observability";
+        github: "github";
+        setup: "setup";
         finalize: "finalize";
     }>>;
     parentStep: z.ZodOptional<z.ZodString>;
@@ -369,9 +369,9 @@ export declare const CiOutputSchema: z.ZodObject<{
             db: "db";
             test: "test";
             build: "build";
-            setup: "setup";
-            github: "github";
             observability: "observability";
+            github: "github";
+            setup: "setup";
             finalize: "finalize";
         }>>;
         parentStep: z.ZodOptional<z.ZodString>;

package/dist/commands/ci/machine/machine.d.ts

@@ -219,10 +219,10 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
     layer?: string | undefined;
     check?: boolean | undefined;
     keepDb?: boolean | undefined;
-    executionMode?: "local" | "github-actions" | undefined;
+    executionMode?: "github-actions" | "local" | undefined;
     output?: "json" | "human" | undefined;
     config?: string | undefined;
-    phase?: "all" | "test" | "blocking" | "observability" | undefined;
+    phase?: "all" | "test" | "observability" | "blocking" | undefined;
     dbMode?: "auto" | "local" | undefined;
     branchName?: string | undefined;
     skipStaticChecks?: boolean | undefined;
@@ -249,7 +249,7 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
         error?: string | undefined;
         reason?: string | undefined;
         title?: string | undefined;
-        phase?: "db" | "test" | "build" | "setup" | "github" | "observability" | "finalize" | undefined;
+        phase?: "db" | "test" | "build" | "observability" | "github" | "setup" | "finalize" | undefined;
         parentStep?: string | undefined;
         optional?: boolean | undefined;
         startedAt?: string | undefined;

package/dist/commands/ci/utils/ci-summary.d.ts

@@ -31,8 +31,8 @@ export type CiStepStatus = z.output<typeof CiStepStatusSchema>;
 export declare const CiSummarySchema: z.ZodObject<{
     version: z.ZodString;
     mode: z.ZodEnum<{
-        local: "local";
         "github-actions": "github-actions";
+        local: "local";
     }>;
     command: z.ZodEnum<{
         "ci pr": "ci pr";
@@ -100,9 +100,9 @@ export declare const CiSummarySchema: z.ZodObject<{
             db: "db";
             test: "test";
             build: "build";
-            setup: "setup";
-            github: "github";
             observability: "observability";
+            github: "github";
+            setup: "setup";
             finalize: "finalize";
         }>>;
         parentStep: z.ZodOptional<z.ZodString>;

package/dist/commands/db/apply/contract.d.ts

@@ -32,9 +32,9 @@ export declare const DbApplyPlannerReuseReasonSchema: z.ZodEnum<{
 export type DbApplyPlannerReuseReason = z.infer<typeof DbApplyPlannerReuseReasonSchema>;
 export declare const DbApplyInputSchema: z.ZodObject<{
     env: z.ZodDefault<z.ZodEnum<{
-        local: "local";
         preview: "preview";
         production: "production";
+        local: "local";
     }>>;
     databaseUrl: z.ZodOptional<z.ZodString>;
     verbose: z.ZodDefault<z.ZodBoolean>;

package/dist/commands/db/apply/helpers/pg-schema-diff-helpers.d.ts

@@ -42,8 +42,14 @@ export interface MissingExtensionDetection {
  * and map them to the required PostgreSQL extensions.
  */
 export declare function detectMissingExtensionType(errorOutput: string): MissingExtensionDetection;
+/**
+ * Detect the actual extension management SQL file in the project.
+ * Falls back to the default path if no extension file is found.
+ */
+export declare function detectExtensionFilePath(): string;
 /**
  * Format actionable hint for missing extension type errors.
+ * Auto-detects the actual extension file path in the project.
  */
 export declare function formatExtensionErrorHint(detection: MissingExtensionDetection): string;
 export interface PartitionPrivilegeDetection {

package/dist/commands/db/apply/helpers/planner-artifact.d.ts

@@ -4,9 +4,9 @@ import { type DbApplyInput, type DbApplyOutput, type DbApplyPlanner } from '../c
 export declare const DbPlanArtifactSchema: z.ZodObject<{
     version: z.ZodLiteral<"1">;
     environment: z.ZodEnum<{
-        local: "local";
         preview: "preview";
         production: "production";
+        local: "local";
     }>;
     mode: z.ZodLiteral<"check">;
     previewProfile: z.ZodEnum<{

package/dist/commands/db/commands/db-preview-profile.d.ts

@@ -2,9 +2,9 @@ import { z } from 'zod';
 import { type DbApplyOutput, type DbPreviewProfile } from '../apply/contract.js';
 export declare const DEFAULT_DB_PREVIEW_PROFILE: DbPreviewProfile;
 export declare const DbPreviewEnvironmentSchema: z.ZodEnum<{
-    local: "local";
     preview: "preview";
     production: "production";
+    local: "local";
 }>;
 export declare const LEGACY_DB_APPLY_CHECK_REMOVAL_TARGET = "the next major CLI release";
 export declare function parseDbPreviewProfile(value: string): DbPreviewProfile;

package/dist/commands/db/commands/db-sync/production-precheck.d.ts

@@ -1,11 +1,3 @@
-/**
- * AI HINT: Production apply precheck orchestration
- *
- * Purpose: Run full production precheck pipeline: local risk checks + plan boundary reconciliation.
- * Collects findings, applies strict mode, logs results, and throws on blockers.
- *
- * Used by: db-sync.ts (maybeRunProductionApplyPrecheck)
- */
 import { type createCLILogger } from '@runa-ai/runa';
 import type { DbApplyOutput } from '../../apply/contract.js';
 import type { RunaDbEnv } from '../../utils/db-target.js';

package/dist/commands/db/preflight/contract.d.ts

@@ -8,9 +8,9 @@
 import { z } from 'zod';
 export declare const DbPreflightInputSchema: z.ZodObject<{
     env: z.ZodDefault<z.ZodEnum<{
-        local: "local";
         preview: "preview";
         production: "production";
+        local: "local";
     }>>;
     databaseUrl: z.ZodOptional<z.ZodString>;
     verbose: z.ZodDefault<z.ZodBoolean>;

package/dist/commands/db/sync/contract.d.ts

@@ -18,9 +18,9 @@ import type { BoundaryGuidanceWarning, LocalBlindSpotBlocker, RuntimeContradicti
  * Environment type for db sync
  */
 export declare const DbSyncEnvSchema: z.ZodEnum<{
-    local: "local";
     preview: "preview";
     production: "production";
+    local: "local";
 }>;
 export type DbSyncEnv = z.infer<typeof DbSyncEnvSchema>;
 /**
@@ -28,9 +28,9 @@ export type DbSyncEnv = z.infer<typeof DbSyncEnvSchema>;
  */
 export declare const DbSyncInputSchema: z.ZodObject<{
     env: z.ZodDefault<z.ZodEnum<{
-        local: "local";
         preview: "preview";
         production: "production";
+        local: "local";
     }>>;
     check: z.ZodDefault<z.ZodBoolean>;
     force: z.ZodDefault<z.ZodBoolean>;
@@ -104,9 +104,9 @@ export declare const StepContextSchema: z.ZodObject<{
     databaseUrl: z.ZodString;
     dbPackagePath: z.ZodString;
     env: z.ZodEnum<{
-        local: "local";
         preview: "preview";
         production: "production";
+        local: "local";
     }>;
     check: z.ZodBoolean;
     force: z.ZodBoolean;
@@ -142,9 +142,9 @@ export type { RuntimeContradictionIssue, RuntimeWarningIssue, SchemaGuardrailRep
  */
 export declare const DbSyncOutputSchema: z.ZodObject<{
     env: z.ZodEnum<{
-        local: "local";
         preview: "preview";
         production: "production";
+        local: "local";
     }>;
     check: z.ZodBoolean;
     reconciled: z.ZodBoolean;
@@ -235,9 +235,9 @@ export type DbSyncOutput = z.infer<typeof DbSyncOutputSchema>;
  */
 export declare const DbSyncMachineInputSchema: z.ZodObject<{
     env: z.ZodOptional<z.ZodEnum<{
-        local: "local";
         preview: "preview";
         production: "production";
+        local: "local";
     }>>;
     check: z.ZodOptional<z.ZodBoolean>;
     force: z.ZodOptional<z.ZodBoolean>;

package/dist/commands/db/sync/machine.d.ts

@@ -108,7 +108,7 @@ export declare const dbSyncMachine: import("xstate").StateMachine<DbSyncContext,
     logic: import("xstate").PromiseActorLogic<actors.ReportOutput, actors.ReportInput, import("xstate").EventObject>;
     id: string | undefined;
 }, never, never, never, "done" | "failed" | "sync" | "setup" | "idle" | "snapshot" | "reconcile" | "report" | "preflight", string, {
-    env?: "local" | "preview" | "production" | undefined;
+    env?: "preview" | "production" | "local" | undefined;
     check?: boolean | undefined;
     force?: boolean | undefined;
     autoApprove?: boolean | undefined;
@@ -126,7 +126,7 @@ export declare const dbSyncMachine: import("xstate").StateMachine<DbSyncContext,
     snapshotTimeoutMs?: number | undefined;
     syncTimeoutMs?: number | undefined;
 }, {
-    env: "local" | "preview" | "production";
+    env: "preview" | "production" | "local";
     check: boolean;
     reconciled: boolean;
     preflightPassed: boolean;

package/dist/commands/db/sync/schema-guardrail-graph-guidance.d.ts

@@ -4,12 +4,29 @@
  * Purpose: Generate guidance warnings for schema boundary violations,
  * security definer issues, trigger ownership, and managed schema access
  */
-import type { SchemaGuardrailReport, SchemaGraphFunctionClaim, SchemaGraphFileNode, SchemaGraphSchemaNode } from './schema-guardrail-types.js';
+import type { BoundaryGuidanceWarning, SchemaGuardrailReport, SchemaGraphFunctionClaim, SchemaGraphFileNode, SchemaGraphSchemaNode, SchemaGraphTableNode, LoadedSqlSources } from './schema-guardrail-types.js';
 declare function buildBoundaryGuidanceWarnings(params: {
     fileNodes: SchemaGraphFileNode[];
     schemaNodes: SchemaGraphSchemaNode[];
     functionClaims: SchemaGraphFunctionClaim[];
     ownerFileByTable: Map<string, string>;
 }): SchemaGuardrailReport['boundaryGuidanceWarnings'];
+/**
+ * Detect trigger dispatch coverage gaps.
+ *
+ * When a trigger calls a dispatch function (e.g., check_org_id_matches_parent)
+ * with literal arguments (e.g., 'parent_table'), and the function body has
+ * CASE/WHEN branches that don't cover those arguments, report a warning.
+ */
+export declare function buildTriggerDispatchGapWarnings(params: {
+    tableNodes: Map<string, SchemaGraphTableNode>;
+    sources: LoadedSqlSources;
+}): BoundaryGuidanceWarning[];
+/**
+ * Detect index names that appear in both declarative and idempotent layers.
+ * This is typically redundant — declarative indexes are pg-schema-diff managed,
+ * and idempotent IF NOT EXISTS copies create silent redundancy.
+ */
+export declare function buildCrossLayerDuplicateIndexWarnings(sources: LoadedSqlSources): BoundaryGuidanceWarning[];
 export { buildBoundaryGuidanceWarnings };
 //# sourceMappingURL=schema-guardrail-graph-guidance.d.ts.map

package/dist/commands/db/sync/schema-guardrail-graph-metadata.d.ts

@@ -4,17 +4,11 @@
  * Purpose: Function ownership hashing, allowlist checking, and
  * defined function/boundary metadata extraction
  */
-import { type DuplicateFunctionOwnershipFinding } from '../utils/duplicate-function-ownership.js';
+import { isAllowlistedDuplicateFunction } from '../utils/duplicate-function-ownership-allowlist.js';
 import { type SqlFile } from '../utils/declarative-dependency-sql-utils.js';
 import { type DefinedFunctionMetadata, type ManagedBoundaryMetadata } from './schema-guardrail-graph-types.js';
-import type { SchemaGuardrailConfig } from './schema-guardrail-types.js';
 declare function normalizeFunctionStatementForHash(statement: string): string;
 declare function buildFunctionBodyHashMap(files: SqlFile[], layer: 'declarative' | 'idempotent'): Map<string, string>;
-declare function isAllowlistedDuplicateFunction(params: {
-    finding: DuplicateFunctionOwnershipFinding;
-    allowlist: SchemaGuardrailConfig['allowedDuplicateFunctions'];
-    bodyHashes: Map<string, string>;
-}): boolean;
 /**
  * Collect qualified object references from SQL function bodies
  */

package/dist/commands/db/sync/schema-guardrail-graph-nodes.d.ts

@@ -5,7 +5,7 @@
  * Includes: Trigger extraction, declarative file parsing,
  * table/FK/dependency/file node construction
  */
-import { type SqlFile } from '../utils/declarative-dependency-sql-utils.js';
+import type { SqlFile } from '../utils/declarative-dependency-sql-utils.js';
 import { type DeclarativeFileRecord, type DefinedFunctionMetadata, type ManagedBoundaryMetadata, type IdempotentTouchMetadata } from './schema-guardrail-graph-types.js';
 import type { SchemaGuardrailConfig, SchemaGraphFileDependencyEdge, SchemaGraphFileNode, SchemaGraphFunctionClaim, SchemaGraphPolicyClaim, SchemaGraphPolicyRef, SchemaGraphTableNode, SchemaGraphTriggerRef, SchemaGuardrailReport } from './schema-guardrail-types.js';
 declare function parseCreateTriggerStatement(statement: string): {

package/dist/commands/db/sync/schema-guardrail-graph-sql-helpers.d.ts

@@ -4,7 +4,7 @@
  * Purpose: SQL string sanitization, pattern matching, and metadata extraction
  * for idempotent file analysis
  */
-import { type SqlFile } from '../utils/declarative-dependency-sql-utils.js';
+import type { SqlFile } from '../utils/declarative-dependency-sql-utils.js';
 import type { IdempotentTouchMetadata } from './schema-guardrail-graph-types.js';
 declare function normalizeSqlIdentifier(value: string): string;
 declare function consumeSingleQuotedLiteral(params: {

package/dist/commands/db/sync/schema-guardrail-types.d.ts

@@ -3,8 +3,8 @@ export type SchemaManagedBlockKind = 'file-header' | 'table-header';
 export type SchemaGuardrailMode = 'check' | 'sync';
 export type SchemaGraphFileLayer = 'declarative' | 'idempotent';
 export type SchemaGraphFileAuthoringRole = 'declarative-owner' | 'operational';
-export type BoundaryGuidanceWarningKind = 'schema' | 'function' | 'policy' | 'security_definer' | 'trigger_function' | 'managed_boundary';
-export type LocalBlindSpotBlockerKind = 'cross-schema-rls' | 'dynamic-sql' | 'extension-placement';
+export type BoundaryGuidanceWarningKind = 'schema' | 'function' | 'policy' | 'security_definer' | 'trigger_function' | 'trigger_dispatch_gap' | 'managed_boundary';
+export type LocalBlindSpotBlockerKind = 'cross-schema-rls' | 'dynamic-sql' | 'dynamic-sql-infra' | 'extension-placement';
 export type SchemaGuardrailPhaseId = 'load_sources' | 'build_static_graph' | 'validate_ownership' | 'compare_generated_headers' | 'refresh_generated_headers' | 'handoff_db_sync' | 'runtime_reconcile' | 'publish_report';
 export type SchemaGuardrailFailureCode = 'source_load_failed' | 'duplicate_table_owner' | 'duplicate_function_owner' | 'policy_ownership_conflict' | 'raw_cross_schema_rls_blocked' | 'dynamic_sql_blocked' | 'extension_placement_blocked' | 'stale_generated_header' | 'generated_header_validation_failed' | 'generated_header_rewrite_failed' | 'static_graph_build_failed' | 'critical_runtime_graph_contradiction' | 'sync_apply_failed';
 export interface SchemaGraphFileNode {
@@ -58,6 +58,8 @@ export interface SchemaGraphTriggerRef {
     timing: 'BEFORE' | 'AFTER' | 'INSTEAD OF';
     event: string;
     functionName?: string;
+    /** Literal string arguments passed to the trigger function (e.g., 'parent_table') */
+    functionArgs?: string[];
 }
 export interface SchemaGraphTableNode {
     schema: string;

package/dist/commands/db/utils/changed-files-detector.d.ts

@@ -0,0 +1,21 @@
+/**
+ * AI HINT: Changed Files Detector for Precheck Scope Separation
+ *
+ * Purpose: Detect which SQL files have been modified in the current branch
+ * to separate "current-change blockers" from "repo-wide baseline blockers".
+ *
+ * Uses git diff against the merge-base of the current branch and main.
+ */
+/**
+ * Get list of SQL files changed in the current branch compared to the default branch.
+ * Falls back to staged + unstaged changes if merge-base detection fails.
+ *
+ * Returns relative paths from the repository root.
+ */
+export declare function getChangedSqlFiles(): string[];
+/**
+ * Classify a blocker message as "from changed files" or "baseline".
+ * Extracts file path from blocker message and checks against changed files set.
+ */
+export declare function classifyBlockerScope(blockerMessage: string, changedFiles: Set<string>): 'current-change' | 'baseline';
+//# sourceMappingURL=changed-files-detector.d.ts.map

package/dist/commands/db/utils/duplicate-function-ownership-allowlist.d.ts

@@ -0,0 +1,13 @@
+import type { DuplicateFunctionOwnershipFinding } from './duplicate-function-ownership.js';
+import type { SchemaGuardrailConfig } from '../sync/schema-guardrail-types.js';
+export declare function isAllowlistedDuplicateFunction(params: {
+    finding: DuplicateFunctionOwnershipFinding;
+    allowlist: SchemaGuardrailConfig['allowedDuplicateFunctions'];
+    bodyHashes?: Map<string, string>;
+}): boolean;
+export declare function filterAllowlistedDuplicateFunctions(params: {
+    findings: DuplicateFunctionOwnershipFinding[];
+    allowlist: SchemaGuardrailConfig['allowedDuplicateFunctions'];
+    bodyHashes?: Map<string, string>;
+}): DuplicateFunctionOwnershipFinding[];
+//# sourceMappingURL=duplicate-function-ownership-allowlist.d.ts.map

package/dist/commands/db/utils/schema-sync.d.ts

@@ -99,4 +99,16 @@ export declare function diffSchema(params: {
  * // Returns: ['public.area_metrics', 'public.floor_metrics', ...]
  */
 export declare function extractTablesFromIdempotentSql(idempotentDir: string, projectRoot?: string): string[];
+/**
+ * Extract glob patterns for dynamically-created tables from idempotent SQL.
+ *
+ * Detects patterns like:
+ *   EXECUTE format('CREATE TABLE %I.%I', schema_var, prefix || suffix)
+ *   EXECUTE format('CREATE TABLE IF NOT EXISTS %s.%s', ...)
+ *   EXECUTE 'CREATE TABLE ' || schema || '.' || table_prefix || ...
+ *
+ * Returns glob patterns (e.g., "analytics._arc_*") suitable for
+ * buildTablePatternMatcher in table-source-classifier.
+ */
+export declare function extractDynamicTablePatternsFromIdempotentSql(idempotentDir: string, projectRoot?: string): string[];
 //# sourceMappingURL=schema-sync.d.ts.map

package/dist/commands/db/utils/sql-boundary-parser.d.ts

@@ -2,6 +2,19 @@ export type ParsedSqlStatement = {
     statement: string;
     line: number;
 };
+/**
+ * Detect `-- runa:allow-dynamic-sql` annotation in SQL file content.
+ * When present, dynamic SQL patterns (EXECUTE, FUNCTION DDL in idempotent)
+ * are treated as intentional rather than risky.
+ *
+ * Supports optional role: `-- runa:allow-dynamic-sql reason: partition-helper`
+ */
+export declare const ALLOW_DYNAMIC_SQL_ANNOTATION: RegExp;
+/**
+ * Extract the reason/role from a `-- runa:allow-dynamic-sql reason: ...` annotation.
+ * Returns the reason string if present, undefined otherwise.
+ */
+export declare function extractDynamicSqlRole(content: string): string | undefined;
 export declare function splitSqlStatements(content: string): ParsedSqlStatement[];
 export declare function isNonDdlMaintenanceStatement(statement: string): boolean;
 export declare function isNonSchemaOperation(statement: string): boolean;

package/dist/commands/db/utils/sql-file-collector.d.ts

@@ -3,6 +3,8 @@
  *
  * Uses queue + index traversal to avoid O(n^2) behavior from shift().
  * Unreadable directories are ignored so callers can keep precheck resilient.
+ * Directories in IGNORED_DIRECTORY_NAMES are skipped to avoid false positives
+ * from legacy/archived SQL files.
  */
 export declare function collectSqlFilesRecursively(baseDir: string): Generator<string>;
 //# sourceMappingURL=sql-file-collector.d.ts.map

package/dist/commands/upgrade.d.ts

@@ -33,6 +33,42 @@
  *   runa upgrade --templates-version <version>  # Override templates version
  *   runa upgrade --fresh      # Clear templates cache before fetching
  */
+import { type ConflictResolutionRule, type ConflictResolutionStrategy } from '@runa-ai/runa';
 import { Command } from 'commander';
+interface UpgradeOptions {
+    preview?: boolean;
+    force?: boolean;
+    keepLocal?: boolean;
+    yes?: boolean;
+    verify?: boolean;
+    packages?: boolean;
+    /** Keep backup after successful upgrade (for manual rollback) */
+    backup?: boolean;
+    /** Rollback to a specific transaction ID */
+    rollback?: string;
+    /** Rollback to the latest backup */
+    rollbackLatest?: boolean;
+    /** List available backups */
+    listBackups?: boolean;
+    /** Only sync specific categories */
+    only?: string;
+    /** Templates version override */
+    templatesVersion?: string;
+    /** Clear templates cache */
+    fresh?: boolean;
+}
+interface UpgradeConflictResolutionConfig {
+    defaultStrategy: ConflictResolutionStrategy;
+    rules: ConflictResolutionRule[];
+}
+export declare function findFilesWithMergeMarkers(targetDir: string): string[];
+export declare function assertNoExistingMergeMarkers(targetDir: string): void;
+export declare function loadUpgradeConflictResolutionConfig(cwd?: string): UpgradeConflictResolutionConfig;
+export declare function resolveTemplatesVersionForUpgrade(params: {
+    cwd: string;
+    options: UpgradeOptions;
+    shouldUpdatePackages: boolean;
+}): Promise<string | undefined>;
 export declare const upgradeCommand: Command;
+export {};
 //# sourceMappingURL=upgrade.d.ts.map

package/dist/constants/versions.d.ts

@@ -30,4 +30,13 @@ export declare const TEMPLATES_PACKAGE_NAME = "@r06-dev/runa-templates";
  * GitHub Packages registry URL.
  */
 export declare const GITHUB_PACKAGES_REGISTRY = "https://npm.pkg.github.com";
+/**
+ * Source repository that controls template access.
+ * Users who can run template operations must be able to access this repository.
+ */
+export declare const TEMPLATES_SOURCE_REPOSITORY = "r06-dev/runa";
+/**
+ * GitHub API endpoint used to verify template source repository access.
+ */
+export declare const TEMPLATES_SOURCE_REPOSITORY_API_URL = "https://api.github.com/repos/r06-dev/runa";
 //# sourceMappingURL=versions.d.ts.map