@runa-ai/runa-cli 0.5.26

package/dist/commands/db/sync/machine.d.ts

@@ -0,0 +1,159 @@
+/**
+ * AI HINT: DB Sync State Machine
+ *
+ * Purpose: Orchestrate database schema synchronization workflow
+ * Flow: setup → reconcile → preflight → snapshot → sync → report → done
+ *
+ * User Journey:
+ * 1. Setup: Resolve database URL and paths
+ * 2. Reconcile: Pre-push cleanup (optional, with --reconcile)
+ * 3. Preflight: Schema consistency checks (unless --force)
+ * 4. Snapshot: Create auto-snapshot (optional, with --auto-snapshot)
+ * 5. Sync: Apply schema via Supabase Declarative Schemas
+ * 6. Report: Write GitHub step summary, export JSON
+ * 7. Done: Exit with success/failure
+ *
+ * E2E Test Mapping (CLI observable behavior):
+ * - setup → expect(log).toContain('Resolving database...')
+ * - preflight → expect(log).toContain('Preflight checks')
+ * - sync → expect(log).toContain('Schema applied')
+ * - done → expect(exitCode).toBe(0)
+ * - failed → expect(exitCode).toBe(1)
+ */
+import { type SnapshotFrom } from 'xstate';
+import * as actors from './actors.js';
+import type { DbSyncMachineInput, StepContext } from './contract.js';
+interface DbSyncContext {
+    input: DbSyncMachineInput;
+    startTime: number;
+    stepCtx: StepContext | null;
+    reconciled: boolean;
+    preflightPassed: boolean;
+    snapshotCreated: boolean;
+    applied: boolean;
+    stepsCompleted: string[];
+    reportWritten: boolean;
+    error: string | null;
+}
+export declare const dbSyncMachine: import("xstate").StateMachine<DbSyncContext, {
+    type: "START";
+} | {
+    type: "SKIP_RECONCILE";
+} | {
+    type: "error.platform";
+    error: Error;
+}, {
+    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<{
+        created: boolean;
+        path?: string | undefined;
+        skipped?: boolean | undefined;
+        reason?: string | undefined;
+    }, actors.SnapshotInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<{
+        applied: boolean;
+        stepsCompleted: string[];
+        error?: string | undefined;
+    }, actors.SyncInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<{
+        passed: boolean;
+        warnings?: string[] | undefined;
+        error?: string | undefined;
+    }, actors.PreflightInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<{
+        passed: boolean;
+        databaseUrl?: string | undefined;
+        dbPackagePath?: string | undefined;
+        error?: string | undefined;
+    }, actors.ReconcileInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<actors.SetupOutput, actors.SetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<actors.ReportOutput, actors.ReportInput, import("xstate").EventObject>> | undefined;
+}, {
+    src: "snapshot";
+    logic: import("xstate").PromiseActorLogic<{
+        created: boolean;
+        path?: string | undefined;
+        skipped?: boolean | undefined;
+        reason?: string | undefined;
+    }, actors.SnapshotInput, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "syncSchema";
+    logic: import("xstate").PromiseActorLogic<{
+        applied: boolean;
+        stepsCompleted: string[];
+        error?: string | undefined;
+    }, actors.SyncInput, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "preflight";
+    logic: import("xstate").PromiseActorLogic<{
+        passed: boolean;
+        warnings?: string[] | undefined;
+        error?: string | undefined;
+    }, actors.PreflightInput, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "reconcile";
+    logic: import("xstate").PromiseActorLogic<{
+        passed: boolean;
+        databaseUrl?: string | undefined;
+        dbPackagePath?: string | undefined;
+        error?: string | undefined;
+    }, actors.ReconcileInput, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "setupContext";
+    logic: import("xstate").PromiseActorLogic<actors.SetupOutput, actors.SetupInput, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
+    src: "writeReport";
+    logic: import("xstate").PromiseActorLogic<actors.ReportOutput, actors.ReportInput, import("xstate").EventObject>;
+    id: string | undefined;
+}, never, never, never, "failed" | "done" | "sync" | "setup" | "idle" | "snapshot" | "preflight" | "reconcile" | "report", string, {
+    env?: "local" | "preview" | "production" | undefined;
+    check?: boolean | undefined;
+    force?: boolean | undefined;
+    autoApprove?: boolean | undefined;
+    verbose?: boolean | undefined;
+    skipCodegen?: boolean | undefined;
+    targetDir?: string | undefined;
+    fromProduction?: boolean | undefined;
+    autoSnapshot?: boolean | undefined;
+    reportJson?: string | undefined;
+    reconcile?: boolean | undefined;
+}, {
+    env: "local" | "preview" | "production";
+    check: boolean;
+    reconciled: boolean;
+    preflightPassed: boolean;
+    snapshotCreated: boolean;
+    applied: boolean;
+    stepsCompleted: string[];
+    exitCode: 0 | 1;
+    reportJsonPath?: string | undefined;
+    error?: string | undefined;
+}, import("xstate").EventObject, import("xstate").MetaObject, {
+    id: "dbSync";
+    states: {
+        readonly idle: {};
+        readonly setup: {};
+        readonly reconcile: {};
+        readonly preflight: {};
+        readonly snapshot: {};
+        readonly sync: {};
+        readonly report: {};
+        readonly done: {};
+        readonly failed: {};
+    };
+}>;
+export type DbSyncMachine = typeof dbSyncMachine;
+export type DbSyncSnapshot = SnapshotFrom<typeof dbSyncMachine>;
+/**
+ * Get current state name from snapshot.
+ */
+export declare function getDbSyncStateName(snapshot: DbSyncSnapshot): string;
+/**
+ * Check if machine is in a final state.
+ */
+export declare function isDbSyncComplete(snapshot: DbSyncSnapshot): boolean;
+/**
+ * Get error message from snapshot.
+ */
+export declare function getDbSyncError(snapshot: DbSyncSnapshot): string | null;
+export {};
+//# sourceMappingURL=machine.d.ts.map

package/dist/commands/db/sync/machine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/sync/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAS,MAAM,QAAQ,CAAC;AAE1D,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EACV,kBAAkB,EAKlB,WAAW,EAEZ,MAAM,eAAe,CAAC;AAmHvB,UAAU,aAAa;IAErB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAGlB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAG5B,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IAGvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AA+BD,eAAO,MAAM,aAAa;UAxBd,OAAO;;UACP,gBAAgB;;UAChB,gBAAgB;WAAS,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0TxC,CAAC;AAMH,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC;AACjD,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,aAAa,CAAC,CAAC;AAMhE;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAEnE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAElE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,IAAI,CAEtE"}

package/dist/commands/db/types.d.ts

@@ -0,0 +1,107 @@
+/**
+ * AI HINT: Type definitions for runa db command
+ *
+ * Purpose: Centralized type definitions for database management
+ * Design: Strong typing with type guards for runtime safety
+ */
+/**
+ * Database configuration
+ */
+export interface DatabaseConfig {
+    url: string;
+    host: string;
+    port: number;
+    user: string;
+    password: string;
+    database: string;
+}
+/**
+ * Seed configuration
+ */
+export interface SeedConfig {
+    paths: string[];
+    environment: 'local' | 'preview' | 'production';
+    autoApprove?: boolean;
+}
+/**
+ * Schema validation result
+ */
+export interface SchemaValidationResult {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+    filePath: string;
+}
+/**
+ * Risk detection level
+ */
+export type RiskLevel = 'high' | 'medium' | 'low' | 'info';
+/**
+ * Risk detection result
+ */
+export interface RiskResult {
+    level: RiskLevel;
+    message: string;
+    file: string;
+    line?: number;
+}
+/**
+ * Script execution options
+ */
+export interface ScriptExecutionOptions {
+    cwd?: string;
+    env?: Record<string, string | undefined>;
+    stdio?: 'inherit' | 'pipe';
+    timeout?: number;
+}
+/**
+ * Script location configuration
+ */
+export interface ScriptLocation {
+    relativePath: string;
+    description: string;
+    required: boolean;
+}
+/**
+ * Database command options
+ */
+export interface DbCommandOptions {
+    autoApprove?: boolean;
+    skipSquawk?: boolean;
+    base?: string;
+    db?: string;
+    schemas?: string;
+    check?: boolean;
+    plan?: boolean;
+    force?: boolean;
+    verbose?: boolean;
+    /** CI optimization: skip TypeScript + Zod generation during db sync */
+    skipCodegen?: boolean;
+    json?: boolean;
+    sql?: boolean;
+    format?: string;
+    reportJson?: string;
+    autoSnapshot?: boolean;
+    fromProduction?: boolean | string;
+    reconcile?: boolean;
+    bootstrap?: boolean;
+    skip?: boolean;
+}
+/**
+ * Seed validation result
+ */
+export interface SeedValidationResult {
+    valid: boolean;
+    missingFiles: string[];
+    invalidFiles: string[];
+}
+/**
+ * Re-export common types and guards from utils
+ */
+export type { ExecaError } from '../../utils/type-guards.js';
+export { isExecaError, isSpinner } from '../../utils/type-guards.js';
+/**
+ * Type guard for valid risk level
+ */
+export declare function isRiskLevel(level: unknown): level is RiskLevel;
+//# sourceMappingURL=types.d.ts.map

package/dist/commands/db/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/commands/db/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;IAChD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,cAAc,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAElC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAMrE;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,SAAS,CAE9D"}

package/dist/commands/db/utils/db-target.d.ts

@@ -0,0 +1,53 @@
+/**
+ * AI HINT: Unified database URL resolution
+ *
+ * Purpose: Single source of truth for resolving database URLs across all environments
+ * Design: Priority-based resolution with CLIError for missing URLs
+ *
+ * This is the CANONICAL function for resolving database URLs in the CLI.
+ * All other URL resolution should delegate to this function.
+ *
+ * PRD Naming Convention:
+ * - DATABASE_URL: drizzle_app (App runtime, DML only)
+ * - DATABASE_URL_ADMIN: postgres (Migrations, Drizzle Kit)
+ * - GH_DATABASE_URL: drizzle_app (CI: Production app)
+ * - GH_DATABASE_URL_ADMIN: postgres (CI: Production migrations)
+ */
+export type RunaDbEnv = 'local' | 'preview' | 'main' | 'production';
+/**
+ * Resolve database URL for a given environment (DDL operations).
+ *
+ * This function prioritizes ADMIN URLs for DDL/migration operations.
+ * For runtime (DML) operations, use DATABASE_URL directly.
+ *
+ * ## Priority Order (DDL operations)
+ *
+ * ### Local environment:
+ * 1. DATABASE_URL_ADMIN (explicit admin override only)
+ * 2. Default Supabase local URL
+ * Note: DATABASE_URL is NEVER used for local to prevent production URL leakage
+ *       when dotenvx decrypts .env.production into process.env
+ *
+ * ### Preview environment:
+ * 1. DATABASE_URL_ADMIN (postgres role, DDL capable)
+ * 2. DATABASE_URL (fallback)
+ *
+ * ### Production/Main environment (CI):
+ * 1. GH_DATABASE_URL_ADMIN (postgres role, DDL capable)
+ * 2. GH_DATABASE_URL (fallback)
+ *
+ * @param environment - Target environment
+ * @returns Database URL string
+ * @throws CLIError if no URL found for preview/production
+ */
+export declare function resolveDatabaseUrl(environment: RunaDbEnv): string;
+/**
+ * Try to resolve database URL without throwing.
+ *
+ * Useful for optional checks where missing URL is acceptable.
+ *
+ * @param environment - Target environment
+ * @returns Database URL string or undefined if not found
+ */
+export declare function tryResolveDatabaseUrl(environment: RunaDbEnv): string | undefined;
+//# sourceMappingURL=db-target.d.ts.map

package/dist/commands/db/utils/db-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-target.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/db-target.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,CAAC;AAyBpE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,SAAS,GAAG,MAAM,CAoDjE;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAUhF"}

package/dist/commands/db/utils/db-url-builder.d.ts

@@ -0,0 +1,34 @@
+/**
+ * AI HINT: Database URL builder utility
+ *
+ * Purpose: Build database connection URLs and provide URL parsing utilities
+ * Design: Delegates URL resolution to db-target.ts (single source of truth)
+ *
+ * NOTE: For URL resolution, prefer importing directly from db-target.ts:
+ *   import { resolveDatabaseUrl, type RunaDbEnv } from '../utils/db-target.js';
+ *
+ * This file provides:
+ * - getLocalDbUrl(): Convenience alias for resolveDatabaseUrl('local')
+ * - buildConnectionString(): Build URL from config object
+ * - parseDatabaseUrl(): Parse URL into config object
+ */
+import type { DatabaseConfig } from '../types.js';
+export { type RunaDbEnv, resolveDatabaseUrl, tryResolveDatabaseUrl } from './db-target.js';
+/**
+ * Get local database URL
+ *
+ * Convenience function that delegates to resolveDatabaseUrl('local').
+ * Provided for backward compatibility and semantic clarity.
+ *
+ * @returns Local database URL (never throws)
+ */
+export declare function getLocalDbUrl(): string;
+/**
+ * Build connection string from config
+ */
+export declare function buildConnectionString(config: Partial<DatabaseConfig>): string;
+/**
+ * Parse database URL into components
+ */
+export declare function parseDatabaseUrl(url: string): DatabaseConfig | null;
+//# sourceMappingURL=db-url-builder.d.ts.map

package/dist/commands/db/utils/db-url-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-url-builder.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/db-url-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD,OAAO,EAAE,KAAK,SAAS,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAE3F;;;;;;;GAOG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAQ7E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAcnE"}

package/dist/commands/db/utils/error-handlers.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Handle risk detection error
+ */
+export declare const handleRiskError: (error: unknown, context?: string) => never;
+/**
+ * Handle schema validation error
+ */
+export declare const handleValidationError: (error: unknown, context?: string) => never;
+/**
+ * Handle seed operation error
+ */
+export declare const handleSeedError: (error: unknown, context?: string) => never;
+/**
+ * Format database error for display
+ */
+export declare function formatDatabaseError(error: unknown, context: string): string;
+//# sourceMappingURL=error-handlers.d.ts.map

package/dist/commands/db/utils/error-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handlers.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/error-handlers.ts"],"names":[],"mappings":"AA2FA;;GAEG;AACH,eAAO,MAAM,eAAe,UApCjB,OAAO,YAAY,MAAM,KAAK,KAkDvC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,qBAAqB,UAvDvB,OAAO,YAAY,MAAM,KAAK,KAiEvC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,eAAe,UAtEjB,OAAO,YAAY,MAAM,KAAK,KA+EvC,CAAC;AAEH;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAc3E"}

package/dist/commands/db/utils/preflight-check.d.ts

@@ -0,0 +1,20 @@
+/**
+ * AI HINT: Database ENVIRONMENT Preflight Checks
+ *
+ * Purpose: Validate local environment before db operations (db sync, db apply)
+ * Design: Check Supabase running, database URLs, package structure, and orphan objects
+ *
+ * NOTE: This is DIFFERENT from `runa db preflight` command which checks DATA QUALITY
+ *   - preflight-check.ts: Environment validation (Supabase status, env vars, orphan detection)
+ *   - preflight/index.ts: Data quality validation (updated_at >= created_at constraint)
+ */
+export interface PreflightCheckResult {
+    passed: boolean;
+    warnings: string[];
+    errors: string[];
+}
+/**
+ * Run all preflight checks
+ */
+export declare function runPreflightChecks(env: string): Promise<PreflightCheckResult>;
+//# sourceMappingURL=preflight-check.d.ts.map

package/dist/commands/db/utils/preflight-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight-check.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/preflight-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAgBH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAspBD;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAenF"}

package/dist/commands/db/utils/psql.d.ts

@@ -0,0 +1,17 @@
+export interface PsqlConnectionParams {
+    host: string;
+    port: string;
+    user: string;
+    database: string;
+    password?: string;
+}
+export declare function psqlQuery(params: {
+    databaseUrl: string;
+    sql: string;
+    mode: 'scalar' | 'table';
+}): Promise<string>;
+export declare function psqlExec(params: {
+    databaseUrl: string;
+    sql: string;
+}): Promise<void>;
+//# sourceMappingURL=psql.d.ts.map

package/dist/commands/db/utils/psql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"psql.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/psql.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAsCD,wBAAsB,SAAS,CAAC,MAAM,EAAE;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBlB;AAED,wBAAsB,QAAQ,CAAC,MAAM,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1F"}

package/dist/commands/db/utils/schema-detector.d.ts

@@ -0,0 +1,32 @@
+/**
+ * AI HINT: Dynamic Schema Detection (from SQL files)
+ *
+ * Purpose: Detect application schemas from declarative SQL files
+ * Used by: db/apply, db/preflight, db/sync
+ * Design: Scan CREATE SCHEMA statements and exclude Supabase-managed schemas
+ */
+/**
+ * Supabase/PostgreSQL managed schemas (NEVER include in pg-schema-diff)
+ */
+export declare const EXCLUDED_SCHEMAS: Set<string>;
+/**
+ * Detect application schemas from declarative SQL files
+ * Scans for CREATE SCHEMA statements and excludes Supabase-managed ones
+ *
+ * @param schemasDir Path to supabase/schemas/declarative directory
+ * @param verbose Whether to log detected schemas
+ * @returns Sorted array of schema names (always includes 'public')
+ */
+export declare function detectAppSchemas(schemasDir: string, verbose: boolean): string[];
+/**
+ * Format schemas for SQL IN clause
+ *
+ * @param schemas Array of schema names
+ * @returns Formatted string for SQL: "'public', 'accounts', 'repos'"
+ *
+ * Note: Escapes single quotes for SQL injection defense.
+ * While schema names from detectAppSchemas() are already safe (regex \w+),
+ * this provides defense-in-depth for future code paths.
+ */
+export declare function formatSchemasForSql(schemas: string[]): string;
+//# sourceMappingURL=schema-detector.d.ts.map

package/dist/commands/db/utils/schema-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-detector.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/schema-detector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;GAEG;AACH,eAAO,MAAM,gBAAgB,aAsB3B,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,CAoC/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAE7D"}

package/dist/commands/db/utils/schema-sync.d.ts

@@ -0,0 +1,59 @@
+export interface EnumDefinition {
+    name: string;
+    values: string[];
+}
+export interface SyncDiff {
+    expectedTables: Set<string>;
+    expectedEnums: Map<string, EnumDefinition>;
+    dbTables: Set<string>;
+    dbEnums: Map<string, EnumDefinition>;
+    missingTables: string[];
+    orphanTables: string[];
+    missingEnums: string[];
+    extraEnums: string[];
+    enumValueMismatches: Array<{
+        name: string;
+        dbValues: string[];
+        schemaValues: string[];
+        added: string[];
+        removed: string[];
+    }>;
+}
+/**
+ * Extract tables and enums from Drizzle schema
+ *
+ * SECURITY: This function validates the schema path before loading to prevent
+ * arbitrary code execution via JITI. The path is validated to:
+ * 1. Not contain path traversal characters (.., \0)
+ * 2. Be within the project root directory
+ * 3. Exist as a file before loading
+ *
+ * @param dbPackagePath - Relative path to the database package from project root
+ * @param projectRoot - Optional project root directory (defaults to process.cwd())
+ */
+export declare function extractSchemaTablesAndEnums(dbPackagePath: string, projectRoot?: string): Promise<{
+    expectedTables: Set<string>;
+    expectedEnums: Map<string, EnumDefinition>;
+}>;
+/**
+ * Fetch tables and enums from database dynamically
+ *
+ * @param databaseUrl - Database connection URL
+ * @param options - Optional configuration
+ * @param options.schemaDir - Schema directory for detecting managed schemas (defaults to auto-detect)
+ * @param options.additionalSystemSchemas - Additional system schemas to exclude
+ */
+export declare function fetchDbTablesAndEnums(databaseUrl: string, options?: {
+    schemaDir?: string;
+    additionalSystemSchemas?: string[];
+}): Promise<{
+    dbTables: Set<string>;
+    dbEnums: Map<string, EnumDefinition>;
+}>;
+export declare function diffSchema(params: {
+    expectedTables: Set<string>;
+    expectedEnums: Map<string, EnumDefinition>;
+    dbTables: Set<string>;
+    dbEnums: Map<string, EnumDefinition>;
+}): SyncDiff;
+//# sourceMappingURL=schema-sync.d.ts.map

package/dist/commands/db/utils/schema-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-sync.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/schema-sync.ts"],"names":[],"mappings":"AA6FA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3C,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAErC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,mBAAmB,EAAE,KAAK,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC,CAAC;CACJ;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAC/C,aAAa,EAAE,MAAM,EACrB,WAAW,GAAE,MAAsB,GAClC,OAAO,CAAC;IACT,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C,CAAC,CAoCD;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IACR,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC,GACA,OAAO,CAAC;IACT,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACtC,CAAC,CAmDD;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE;IACjC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3C,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CACtC,GAAG,QAAQ,CAuCX"}

package/dist/commands/db/utils/script-runner.d.ts

@@ -0,0 +1,34 @@
+/**
+ * AI HINT: Bash script runner utility for database operations
+ *
+ * Purpose: Execute bash scripts (validate, risks, apply) with proper error handling
+ * Design: Dynamic script resolution (no hardcoded paths)
+ *
+ * Key Features:
+ * - Works in both runa-repo (workspace) and pj-repo (npm installed)
+ * - Uses workspace-detector for smart path resolution
+ * - Falls back gracefully to conventions
+ */
+import { SCRIPT_LOCATIONS } from '../constants.js';
+import type { ScriptExecutionOptions } from '../types.js';
+/**
+ * Find script path using smart detection
+ *
+ * Resolution priority:
+ * 1. Direct path (for project-local scripts like supabase/)
+ * 2. SDK scripts (workspace or installed)
+ * 3. Conventional fallbacks
+ */
+export declare function findScriptPath(scriptKey: keyof typeof SCRIPT_LOCATIONS): Promise<string | null>;
+/**
+ * Run Supabase bash script with proper error handling
+ */
+export declare function runSupabaseScript(scriptKey: keyof typeof SCRIPT_LOCATIONS, args?: string[], options?: ScriptExecutionOptions): Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+/**
+ * Handle script execution error with formatted output
+ */
+export declare function handleScriptError(error: unknown, _scriptName: string): never;
+//# sourceMappingURL=script-runner.d.ts.map

package/dist/commands/db/utils/script-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-runner.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/script-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,OAAO,gBAAgB,GACvC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA0BxB;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,OAAO,gBAAgB,EACxC,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAoC7C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,KAAK,CAgB5E"}

package/dist/commands/db/utils/seed-manager.d.ts

@@ -0,0 +1,23 @@
+/**
+ * AI HINT: Seed data management utility
+ *
+ * Purpose: Parse, apply, and validate seed data files
+ * Design: Config.toml parsing + psql execution
+ */
+/**
+ * Parse seed paths from config.toml
+ */
+export declare function parseSeedPaths(configPath: string): string[];
+/**
+ * Apply single seed file to database
+ */
+export declare function applySeedFile(seedPath: string, dbUrl: string): Promise<void>;
+/**
+ * Apply all seed files from config
+ */
+export declare function applySeeds(configPath?: string): Promise<void>;
+/**
+ * Validate SQL file content for safety
+ */
+export declare function validateSqlContent(content: string): boolean;
+//# sourceMappingURL=seed-manager.d.ts.map

package/dist/commands/db/utils/seed-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-manager.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/seed-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAgC3D;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUlF;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAcnE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAU3D"}