@runa-ai/runa-cli 0.5.40 → 0.5.42

package/dist/index.js

@@ -4,11 +4,11 @@ import * as path10 from 'path';
 import path10__default, { join, dirname, resolve, relative, basename, sep, isAbsolute, normalize } from 'path';
 import { fileURLToPath } from 'url';
 import { execSync, spawnSync, execFileSync, exec, spawn } from 'child_process';
-import * as fs6 from 'fs';
-import fs6__default, { existsSync, readFileSync, readdirSync, mkdtempSync, writeFileSync, mkdirSync, copyFileSync, createWriteStream, statSync, rmSync, realpathSync, promises, lstatSync, accessSync, constants, chmodSync, unlinkSync } from 'fs';
+import * as fs5 from 'fs';
+import fs5__default, { existsSync, readFileSync, readdirSync, mkdtempSync, writeFileSync, mkdirSync, copyFileSync, createWriteStream, statSync, rmSync, realpathSync, promises, lstatSync, accessSync, constants, chmodSync, unlinkSync } from 'fs';
 import { createCLILogger, cacheClear, CacheClearOutputSchema, CLIError, cachePrune, CachePruneOutputSchema, cacheStats, CacheStatsOutputSchema, cacheList, CacheListOutputSchema, cacheInvalidate, CacheInvalidateOutputSchema, syncFromProduction, dbGenerateDiagram, DbDiagramGenerateOutputSchema, createDbSnapshot, syncDatabase, emitDbPushFailureCapsule, emitDbAnnotations, writeDbPushStepSummary, exportDbReportJson, DbSyncOutputSchema, databasePaths, detectRequiredServices, formatDetectionResults, dbStart, DbLifecycleStartOutputSchema, dbStop, DbLifecycleStopOutputSchema, dbReset, DbLifecycleResetOutputSchema, dbValidateSchemas, DbSchemaValidateOutputSchema, DbSchemaRisksOutputSchema, dbDetectSchemaRisks, dbApplySchemas, DbSchemaApplyOutputSchema, dbGenerateTypes, DbSchemaGenerateOutputSchema, extractSchemaFilter, dbSeedInit, DbSeedInitOutputSchema, dbSeedValidate, DbSeedValidateOutputSchema, dbSeedGenerate, DbSeedGenerateOutputSchema, dbVerifySeeds, DbSeedVerifyOutputSchema, DbSnapshotCreateOutputSchema, restoreDbSnapshot, DbSnapshotRestoreOutputSchema, listDbSnapshots, DbSnapshotListOutputSchema, dbGeneratePgTapTests, DbTestGenOutputSchema, dbUpdateGoldenRecord, DbTestUpdateGoldenOutputSchema, repairRunaConfig, detectExistingInitConfig, initProject, validateInitResult, linkCliGlobally, LinkCliOutputSchema, unlinkCliGlobally, UnlinkCliOutputSchema, checkRepoStatus, CheckRepoStatusOutputSchema, enableTelemetry, disableTelemetry, getTelemetryStatus, uploadTelemetry, TelemetryUploadOutputSchema, runTest, TestRunOutputSchema, runTestService, TestServiceOutputSchema, runTestIntegration, TestIntegrationOutputSchema, runTestStatic, TestStaticOutputSchema, generateOwaspTop10Tests, TestOwaspGenerateOutputSchema, updateGoldenRecord, generateE2ETests, generateSecurityTests, generateUnitTests, generateApiTests, generateComponentTests, generateE2EScaffold, validateConfig, ValidateConfigOutputSchema, deploySchemaToProduction, WorkflowNotifyOutputSchema, devopsSync, workflowSync, validateInfrastructure, emitWorkflowValidateFailureCapsule, emitWorkflowAnnotations, writeWorkflowValidateStepSummary, exportWorkflowReportJson, WorkflowValidateInfrastructureOutputSchema, createSuccessEnvelopeSchema, CLI_CONTRACT_VERSION, runChecks, RunCheckOutputSchema, formatDuration as formatDuration$1, GITHUB_API, loadRunaConfig, getClassificationForProfile, loadRunaConfigOrThrow, recordSchemaAudit, RecordSchemaAuditOutputSchema, createBackup, CreateBackupOutputSchema, listBackups, ListBackupsOutputSchema, getBackupMetadata, restoreBackup, RestoreBackupOutputSchema, deleteBackup, DeleteBackupOutputSchema, detectSchemaNames, SUPABASE_SYSTEM_SCHEMAS, dbSeedApply, writeDbSeedStepSummary, DbSeedApplyOutputSchema, emitDbSeedFailureCapsule, syncEnvironment, EnvSyncOutputSchema, detectDatabasePackage, findProjectRoot as findProjectRoot$1, TelemetryEnableOutputSchema, TelemetryDisableOutputSchema, TelemetryStatusOutputSchema, workflowNotify, DevOpsSyncOutputSchema, WorkflowSyncOutputSchema, formatCLIError, DATABASE_PACKAGE_CANDIDATES, getStatusIcon as getStatusIcon$1, findWorkspaceRoot as findWorkspaceRoot$1, checkExtensionConfig, UpgradeTransaction, readRunaVersion, syncTemplates, SyncOutputSchema, ErrorEnvelopeSchema, preCheckSync, findConflictFiles, TestUnitGenOutputSchema, TestE2EGenerateOutputSchema, TestSecurityGenOutputSchema, TestApiGenOutputSchema, TestComponentGenOutputSchema } from '@runa-ai/runa';
 import { z } from 'zod';
-import fs10, { mkdir, writeFile, appendFile, readFile, rm, stat, realpath, cp, readdir, lstat } from 'fs/promises';
+import fs9, { mkdir, writeFile, appendFile, readFile, rm, stat, realpath, cp, readdir, lstat } from 'fs/promises';
 import { promisify } from 'util';
 import { glob } from 'glob';
 import { Project, Node, SyntaxKind } from 'ts-morph';
@@ -925,7 +925,7 @@ var CLI_VERSION, HAS_ADMIN_COMMAND;
 var init_version = __esm({
   "src/version.ts"() {
     init_esm_shims();
-    CLI_VERSION = "0.5.40";
+    CLI_VERSION = "0.5.42";
     HAS_ADMIN_COMMAND = false;
   }
 });
@@ -1323,7 +1323,7 @@ var init_dependency_analyzer = __esm({
       async analyze(options) {
         const packageJsonPath = path10__default.join(options.rootDir, "package.json");
         try {
-          await fs10.access(packageJsonPath);
+          await fs9.access(packageJsonPath);
         } catch {
           return [];
         }
@@ -1356,7 +1356,7 @@ var init_dependency_analyzer = __esm({
       }
       async checkTyposquatting(packageJsonPath) {
         try {
-          const content = await fs10.readFile(packageJsonPath, "utf-8");
+          const content = await fs9.readFile(packageJsonPath, "utf-8");
           const packageJson = JSON.parse(content);
           const allDeps = {
             ...packageJson.dependencies || {},
@@ -1534,7 +1534,7 @@ function createPolicyFromMatch(match, content, filePath) {
   };
 }
 async function parseSqlFileForPolicies(filePath) {
-  const content = await fs10.readFile(filePath, "utf-8");
+  const content = await fs9.readFile(filePath, "utf-8");
   const matches = findPolicyMatches(content);
   return matches.map((match) => createPolicyFromMatch(match, content, filePath));
 }
@@ -2019,11 +2019,11 @@ function scanLineForSecrets(line, lineNumber, filePath) {
   return findings;
 }
 async function scanFileForSecrets(filePath) {
-  const stats = await fs10.stat(filePath);
+  const stats = await fs9.stat(filePath);
   if (stats.size > MAX_FILE_SIZE) {
     return [];
   }
-  const content = await fs10.readFile(filePath, "utf-8");
+  const content = await fs9.readFile(filePath, "utf-8");
   const lines = content.split("\n");
   const findings = [];
   for (let i = 0; i < lines.length; i++) {
@@ -3088,7 +3088,7 @@ var init_path_validation = __esm({
 async function loadConfig(configPath, rootDir) {
   const fullPath = resolvePathWithinBoundary(configPath, rootDir);
   try {
-    const content = await fs10.readFile(fullPath, "utf-8");
+    const content = await fs9.readFile(fullPath, "utf-8");
     if (fullPath.endsWith(".yml") || fullPath.endsWith(".yaml")) {
       return yaml.load(content, { schema: yaml.JSON_SCHEMA });
     }
@@ -3103,7 +3103,7 @@ async function loadConfig(configPath, rootDir) {
 async function loadIgnores(ignorePath, rootDir) {
   const fullPath = resolvePathWithinBoundary(ignorePath, rootDir);
   try {
-    const content = await fs10.readFile(fullPath, "utf-8");
+    const content = await fs9.readFile(fullPath, "utf-8");
     let parsed;
     if (fullPath.endsWith(".yml") || fullPath.endsWith(".yaml")) {
       parsed = yaml.load(content, { schema: yaml.JSON_SCHEMA });
@@ -3178,7 +3178,7 @@ function createAnnotationPatterns() {
 async function parseInlineAnnotations(filePath) {
   const annotations = [];
   try {
-    const content = await fs10.readFile(filePath, "utf-8");
+    const content = await fs9.readFile(filePath, "utf-8");
     const lines = content.split("\n");
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
@@ -7220,7 +7220,7 @@ function printSummary(logger16, output3) {
   }
 }
 function findRepoRoot(startDir) {
-  const { existsSync: existsSync50, readFileSync: readFileSync27 } = __require("fs");
+  const { existsSync: existsSync50, readFileSync: readFileSync28 } = __require("fs");
   const { join: join22, dirname: dirname5 } = __require("path");
   let current = startDir;
   while (current !== dirname5(current)) {
@@ -7230,7 +7230,7 @@ function findRepoRoot(startDir) {
     const pkgPath = join22(current, "package.json");
     if (existsSync50(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync27(pkgPath, "utf-8"));
+        const pkg = JSON.parse(readFileSync28(pkgPath, "utf-8"));
         if (pkg.workspaces) {
           return current;
         }
@@ -7527,8 +7527,8 @@ function readPortFromScripts(appDir) {
   const pkgPath = path10__default.join(appDir, "package.json");
   if (!existsSync(pkgPath)) return 3e3;
   try {
-    const { readFileSync: readFileSync27 } = __require("fs");
-    const raw = readFileSync27(pkgPath, "utf-8");
+    const { readFileSync: readFileSync28 } = __require("fs");
+    const raw = readFileSync28(pkgPath, "utf-8");
     const parsed = JSON.parse(raw);
     const scripts = parsed.scripts;
     for (const key of ["start:ci", "start", "dev"]) {
@@ -7546,8 +7546,8 @@ function findWebAppUnderApps(repoRoot) {
   const appsDir = path10__default.join(repoRoot, "apps");
   if (!existsSync(appsDir)) return null;
   try {
-    const { readdirSync: readdirSync10 } = __require("fs");
-    const entries = readdirSync10(appsDir, { withFileTypes: true });
+    const { readdirSync: readdirSync11 } = __require("fs");
+    const entries = readdirSync11(appsDir, { withFileTypes: true });
     const priority = ["web", "dashboard", "app", "frontend", "client"];
     for (const name of priority) {
       const candidate = path10__default.join(appsDir, name);
@@ -9559,8 +9559,8 @@ async function detectRisks(repoRoot, tmpDir) {
   } catch (error) {
     let logContent = "";
     try {
-      const { readFileSync: readFileSync27 } = await import('fs');
-      logContent = readFileSync27(logFile, "utf-8");
+      const { readFileSync: readFileSync28 } = await import('fs');
+      logContent = readFileSync28(logFile, "utf-8");
     } catch {
     }
     const isInitialDeployment = logContent.includes("No common ancestor") || logContent.includes("INITIAL DEPLOYMENT");
@@ -9688,8 +9688,8 @@ async function applyProductionSchema(repoRoot, tmpDir, productionDbUrlAdmin, pro
   const totalMs = Date.now() - startTime;
   let logContent = "";
   try {
-    const { readFileSync: readFileSync27 } = await import('fs');
-    logContent = readFileSync27(logPath, "utf-8");
+    const { readFileSync: readFileSync28 } = await import('fs');
+    logContent = readFileSync28(logPath, "utf-8");
   } catch {
   }
   const parsed = parseApplyLog(logContent);
@@ -11398,98 +11398,32 @@ init_esm_shims();
 
 // src/commands/ci/machine/actors/db/schema-stats.ts
 init_esm_shims();
-var EXCLUDED_SCHEMAS_FOR_LOCAL = ["pg_catalog", "information_schema"];
-var IDENT_PATTERN = `(?:"([^"]+)"|(\\w+))`;
-var SCHEMA_TABLE_PATTERN = `${IDENT_PATTERN}\\.${IDENT_PATTERN}`;
-function extractIdentifier(quotedGroup, unquotedGroup) {
-  const raw = quotedGroup ?? unquotedGroup ?? "";
-  return raw.toLowerCase();
-}
-async function getLocalSchemaStats(repoRoot) {
-  const schemasDir = path10__default.join(repoRoot, "supabase", "schemas", "declarative");
-  const schemas = {};
-  const total = { tables: 0, functions: 0, policies: 0, indexes: 0, triggers: 0 };
-  try {
-    const files = await fs10.readdir(schemasDir);
-    const sqlFiles = files.filter((f) => f.endsWith(".sql")).sort();
-    for (const file of sqlFiles) {
-      const filePath = path10__default.join(schemasDir, file);
-      const content = await fs10.readFile(filePath, "utf-8");
-      parseLocalSqlFile(content, schemas, total);
-    }
-  } catch (error) {
-    console.warn(`[schema-stats] Could not read SQL files: ${error}`);
-  }
-  return { schemas, total };
-}
-function ensureSchema(schemas, schemaName, excluded) {
-  if (!schemas[schemaName] && !excluded.includes(schemaName)) {
-    schemas[schemaName] = { tables: 0, functions: 0, policies: 0, indexes: 0, triggers: 0 };
-  }
-}
-function parseLocalSqlFile(content, schemas, total) {
-  const cleanContent = content.replace(/--.*$/gm, "").replace(/\/\*[\s\S]*?\*\//g, "");
-  const tableRegex = new RegExp(
-    `CREATE\\s+TABLE\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?${SCHEMA_TABLE_PATTERN}`,
-    "gi"
-  );
-  for (const match of cleanContent.matchAll(tableRegex)) {
-    const schemaName = extractIdentifier(match[1], match[2]);
-    ensureSchema(schemas, schemaName, EXCLUDED_SCHEMAS_FOR_LOCAL);
-    if (schemas[schemaName]) {
-      schemas[schemaName].tables++;
-      total.tables++;
-    }
-  }
-  const functionRegex = new RegExp(
-    `CREATE\\s+(?:OR\\s+REPLACE\\s+)?FUNCTION\\s+${SCHEMA_TABLE_PATTERN}`,
-    "gi"
-  );
-  for (const match of cleanContent.matchAll(functionRegex)) {
-    const schemaName = extractIdentifier(match[1], match[2]);
-    ensureSchema(schemas, schemaName, EXCLUDED_SCHEMAS_FOR_LOCAL);
-    if (schemas[schemaName]) {
-      schemas[schemaName].functions++;
-      total.functions++;
-    }
-  }
-  const policyRegex = new RegExp(
-    `CREATE\\s+POLICY\\s+(?:"[^"]+"|'[^']+'|\\S+)\\s+ON\\s+${SCHEMA_TABLE_PATTERN}`,
-    "gi"
-  );
-  for (const match of cleanContent.matchAll(policyRegex)) {
-    const schemaName = extractIdentifier(match[1], match[2]);
-    ensureSchema(schemas, schemaName, EXCLUDED_SCHEMAS_FOR_LOCAL);
-    if (schemas[schemaName]) {
-      schemas[schemaName].policies++;
-      total.policies++;
-    }
-  }
-  const indexRegex = new RegExp(
-    `CREATE\\s+(?:UNIQUE\\s+)?INDEX\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?(?:CONCURRENTLY\\s+)?${IDENT_PATTERN}\\s+ON\\s+${SCHEMA_TABLE_PATTERN}`,
-    "gi"
-  );
-  for (const match of cleanContent.matchAll(indexRegex)) {
-    const schemaName = extractIdentifier(match[3], match[4]);
-    ensureSchema(schemas, schemaName, EXCLUDED_SCHEMAS_FOR_LOCAL);
-    if (schemas[schemaName]) {
-      schemas[schemaName].indexes++;
-      total.indexes++;
-    }
-  }
-  const triggerRegex = new RegExp(
-    `CREATE\\s+TRIGGER\\s+${IDENT_PATTERN}[\\s\\S]*?ON\\s+${SCHEMA_TABLE_PATTERN}`,
-    "gi"
-  );
-  for (const match of cleanContent.matchAll(triggerRegex)) {
-    const schemaName = extractIdentifier(match[3], match[4]);
-    ensureSchema(schemas, schemaName, EXCLUDED_SCHEMAS_FOR_LOCAL);
-    if (schemas[schemaName]) {
-      schemas[schemaName].triggers++;
-      total.triggers++;
-    }
-  }
-}
+var EXCLUDED_SCHEMAS2 = [
+  // PostgreSQL system schemas
+  "pg_catalog",
+  "pg_toast",
+  "information_schema",
+  // Supabase managed schemas (vary by Supabase version)
+  "auth",
+  "storage",
+  "realtime",
+  "_realtime",
+  // Supabase realtime internal schema
+  "supabase_functions",
+  "supabase_migrations",
+  "vault",
+  "pgsodium",
+  "pgsodium_masks",
+  "graphql",
+  "graphql_public",
+  "extensions",
+  // PostgREST
+  "net",
+  // Cron
+  "cron",
+  // pgTAP test schema (test-only, should not exist in production)
+  "tests"
+];
 function processQueryResult(result, schemas, total, field) {
   for (const row of result) {
     const schemaName = row.schemaname;
@@ -11564,16 +11498,53 @@ async function executeSchemaQueries(sql, schemaList, schemas, total) {
   `;
   processQueryResult(triggersResult, schemas, total, "triggers");
 }
-async function getDbSchemaStats(databaseUrl, targetSchemas) {
+async function getDetailedIndexList(sql, schemaList) {
+  const result = await sql`
+    SELECT
+      n.nspname as schema,
+      i.relname as name,
+      t.relname as table,
+      idx.indisunique as is_unique,
+      idx.indpred IS NOT NULL as is_partial,
+      CASE
+        WHEN idx.indpred IS NOT NULL
+        THEN pg_get_expr(idx.indpred, idx.indrelid, true)
+        ELSE NULL
+      END as where_clause
+    FROM pg_index idx
+    JOIN pg_class i ON i.oid = idx.indexrelid
+    JOIN pg_class t ON t.oid = idx.indrelid
+    JOIN pg_namespace n ON n.oid = i.relnamespace
+    WHERE n.nspname IN (${sql.unsafe(schemaList)})
+      AND NOT EXISTS (
+        SELECT 1 FROM pg_constraint c
+        WHERE c.conindid = idx.indexrelid
+      )
+    ORDER BY n.nspname, t.relname, i.relname
+  `;
+  return result.map((row) => ({
+    schema: row.schema,
+    name: row.name,
+    table: row.table,
+    isUnique: row.is_unique,
+    isPartial: row.is_partial,
+    whereClause: row.where_clause || void 0
+  }));
+}
+async function getUserSchemas(sql) {
+  const excludeList = EXCLUDED_SCHEMAS2.map((s) => `'${s}'`).join(", ");
+  const result = await sql`
+    SELECT nspname
+    FROM pg_namespace
+    WHERE nspname NOT IN (${sql.unsafe(excludeList)})
+      AND nspname NOT LIKE 'pg_%'
+    ORDER BY nspname
+  `;
+  return result.map((row) => row.nspname);
+}
+async function getDbSchemaStats(databaseUrl) {
   const schemas = {};
   const total = { tables: 0, functions: 0, policies: 0, indexes: 0, triggers: 0 };
-  if (targetSchemas.length === 0) {
-    return { schemas, total };
-  }
-  for (const schemaName of targetSchemas) {
-    schemas[schemaName] = { tables: 0, functions: 0, policies: 0, indexes: 0, triggers: 0 };
-  }
-  const schemaList = targetSchemas.map((s) => `'${s}'`).join(", ");
   let sql = null;
   const isRemoteSupabase = databaseUrl.includes(".supabase.co");
   try {
@@ -11584,7 +11555,17 @@ async function getDbSchemaStats(databaseUrl, targetSchemas) {
       // Supabase production requires SSL; local Docker does not
       ...isRemoteSupabase && { ssl: "require" }
     });
+    const userSchemas = await getUserSchemas(sql);
+    if (userSchemas.length === 0) {
+      return { schemas, total };
+    }
+    for (const schemaName of userSchemas) {
+      schemas[schemaName] = { tables: 0, functions: 0, policies: 0, indexes: 0, triggers: 0 };
+    }
+    const schemaList = userSchemas.map((s) => `'${s}'`).join(", ");
     await executeSchemaQueries(sql, schemaList, schemas, total);
+    const indexList = await getDetailedIndexList(sql, schemaList);
+    return { schemas, total, indexList };
   } catch (error) {
     console.warn(`[schema-stats] Could not query database: ${error}`);
   } finally {
@@ -11637,39 +11618,73 @@ function hasDisplayedStatsDiff(a, b) {
 function getActiveSchemas(stats) {
   return Object.entries(stats.schemas).filter(([_, s]) => s.tables > 0 || s.functions > 0 || s.policies > 0).map(([name]) => name).sort();
 }
+function compareIndexLists(reference, target) {
+  const refIndexes = reference.indexList || [];
+  const targetIndexes = target.indexList || [];
+  const refKeys = new Set(refIndexes.map((i) => `${i.schema}.${i.name}`));
+  const targetKeys = new Set(targetIndexes.map((i) => `${i.schema}.${i.name}`));
+  const missing = refIndexes.filter((i) => !targetKeys.has(`${i.schema}.${i.name}`));
+  const extra = targetIndexes.filter((i) => !refKeys.has(`${i.schema}.${i.name}`));
+  return { missing, extra };
+}
+function formatIndexInfo(index) {
+  const qualifiedName = `${index.schema}.${index.name}`;
+  const tags = [];
+  if (index.isUnique) tags.push("unique");
+  if (index.isPartial) tags.push("partial");
+  const tagStr = tags.length > 0 ? ` (${tags.join(", ")})` : "";
+  return `${qualifiedName}${tagStr}`;
+}
+function hasIndexDiff(diff) {
+  return diff.missing.length > 0 || diff.extra.length > 0;
+}
 
 // src/commands/ci/machine/actors/db/collect-schema-stats.ts
+function emptyStats() {
+  return {
+    schemas: {},
+    total: { tables: 0, functions: 0, policies: 0, indexes: 0, triggers: 0 }
+  };
+}
 var collectSchemaStatsActor = fromPromise(
   async ({ input: input3 }) => {
-    const { repoRoot, ciDbUrl, queryProduction } = input3;
-    console.log("[schema-stats] Collecting schema statistics...");
-    console.log("[schema-stats] Parsing local SQL files...");
-    const local = await getLocalSchemaStats(repoRoot);
-    const targetSchemas = Object.keys(local.schemas);
-    console.log(
-      `[schema-stats] Local: ${local.total.tables}T ${local.total.functions}F ${local.total.policies}P (schemas: ${targetSchemas.join(", ")})`
-    );
-    let ci = local;
+    const { localDbUrl, ciDbUrl, queryProduction } = input3;
+    console.log("[schema-stats] Collecting schema statistics (DB query mode)...");
+    let local = emptyStats();
+    if (localDbUrl) {
+      console.log("[schema-stats] Querying local database...");
+      try {
+        local = await getDbSchemaStats(localDbUrl);
+        const schemas = Object.keys(local.schemas);
+        console.log(
+          `[schema-stats] Local: ${local.total.tables}T ${local.total.functions}F ${local.total.policies}P (schemas: ${schemas.join(", ")})`
+        );
+      } catch (error) {
+        console.warn(`[schema-stats] Failed to query local database: ${error}`);
+      }
+    } else {
+      console.log("[schema-stats] No local database URL, skipping local stats");
+    }
+    let ci = emptyStats();
     if (ciDbUrl) {
       console.log("[schema-stats] Querying CI database...");
       try {
-        ci = await getDbSchemaStats(ciDbUrl, targetSchemas);
+        ci = await getDbSchemaStats(ciDbUrl);
         console.log(
           `[schema-stats] CI: ${ci.total.tables}T ${ci.total.functions}F ${ci.total.policies}P`
         );
       } catch (error) {
         console.warn(`[schema-stats] Failed to query CI database: ${error}`);
-        ci = local;
       }
     } else {
-      console.log("[schema-stats] No CI database URL, using local stats for CI");
+      console.log("[schema-stats] No CI database URL, skipping CI stats");
     }
     let production = null;
     const productionUrl = process.env.GH_DATABASE_URL_ADMIN || process.env.GH_DATABASE_URL;
     if (queryProduction && productionUrl) {
       console.log("[schema-stats] Querying production database...");
       try {
-        production = await getDbSchemaStats(productionUrl, targetSchemas);
+        production = await getDbSchemaStats(productionUrl);
         console.log(
           `[schema-stats] Production: ${production.total.tables}T ${production.total.functions}F ${production.total.policies}P`
         );
@@ -11902,11 +11917,11 @@ function getIdempotentRoleNames(repoRoot) {
   const idempotentDir = path10__default.join(repoRoot, "supabase", "schemas", "idempotent");
   const roles = [];
   try {
-    const fs15 = __require("fs");
-    if (!fs15.existsSync(idempotentDir)) return [];
-    const files = fs15.readdirSync(idempotentDir).filter((f) => f.endsWith(".sql"));
+    const fs14 = __require("fs");
+    if (!fs14.existsSync(idempotentDir)) return [];
+    const files = fs14.readdirSync(idempotentDir).filter((f) => f.endsWith(".sql"));
     for (const file of files) {
-      const content = fs15.readFileSync(path10__default.join(idempotentDir, file), "utf-8");
+      const content = fs14.readFileSync(path10__default.join(idempotentDir, file), "utf-8");
       const roleMatches = content.matchAll(/CREATE\s+ROLE\s+(\w+)\s+WITH/gi);
       for (const match of roleMatches) {
         if (match[1]) roles.push(match[1].toLowerCase());
@@ -12016,8 +12031,8 @@ function isCommandSuccess(exitCode, fullOutput) {
 }
 async function writeLogFile(logFile, content) {
   try {
-    const fs15 = await import('fs/promises');
-    await fs15.writeFile(logFile, content);
+    const fs14 = await import('fs/promises');
+    await fs14.writeFile(logFile, content);
     console.log(`[DEBUG] productionPreviewActor: wrote log to ${logFile}`);
   } catch {
   }
@@ -12308,11 +12323,11 @@ function getIdempotentRoleNames2(repoRoot) {
   const idempotentDir = path10__default.join(repoRoot, "supabase", "schemas", "idempotent");
   const roles = [];
   try {
-    const fs15 = __require("fs");
-    if (!fs15.existsSync(idempotentDir)) return [];
-    const files = fs15.readdirSync(idempotentDir).filter((f) => f.endsWith(".sql"));
+    const fs14 = __require("fs");
+    if (!fs14.existsSync(idempotentDir)) return [];
+    const files = fs14.readdirSync(idempotentDir).filter((f) => f.endsWith(".sql"));
     for (const file of files) {
-      const content = fs15.readFileSync(path10__default.join(idempotentDir, file), "utf-8");
+      const content = fs14.readFileSync(path10__default.join(idempotentDir, file), "utf-8");
       const roleMatches = content.matchAll(/CREATE\s+ROLE\s+(\w+)\s+WITH/gi);
       for (const match of roleMatches) {
         if (match[1]) roles.push(match[1].toLowerCase());
@@ -13755,7 +13770,7 @@ function formatSkippedLayers(layerSkipReasons, originalSelectedLayers) {
 
 // src/commands/ci/machine/formatters/sections/schema-matrix.ts
 init_esm_shims();
-function emptyStats() {
+function emptyStats2() {
   return { tables: 0, functions: 0, policies: 0, indexes: 0, triggers: 0 };
 }
 function formatLocalCell(stats) {
@@ -13802,8 +13817,8 @@ function getSortedActiveSchemas(schemaStats) {
 function generateSchemaTableRows(schemaStats, sortedSchemas, hasProduction) {
   const lines = [];
   for (const schemaName of sortedSchemas) {
-    const localStats = schemaStats.local.schemas[schemaName] ?? emptyStats();
-    const ciStats = schemaStats.ci.schemas[schemaName] ?? emptyStats();
+    const localStats = schemaStats.local.schemas[schemaName] ?? emptyStats2();
+    const ciStats = schemaStats.ci.schemas[schemaName] ?? emptyStats2();
     const prodStats = schemaStats.production?.schemas[schemaName] ?? null;
     const localCell = formatLocalCell(localStats);
     const ciCell = formatCiCellWithDiff(ciStats, localStats);
@@ -13827,6 +13842,28 @@ function generateSchemaMatrixSummary(localTotal, ciTotal, prodTotal) {
   }
   return parts.join(" ");
 }
+function generateIndexDiffSection(schemaStats) {
+  if (!schemaStats.production) return [];
+  const diff = compareIndexLists(schemaStats.local, schemaStats.production);
+  if (!hasIndexDiff(diff)) return [];
+  const lines = [];
+  if (diff.missing.length > 0) {
+    lines.push("");
+    lines.push("> \u26A0\uFE0F **\u672C\u756A\u306B\u4E0D\u8DB3\u3057\u3066\u3044\u308B\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9:**");
+    for (const idx of diff.missing) {
+      const whereInfo = idx.whereClause ? ` WHERE ${idx.whereClause}` : "";
+      lines.push(`> - \`${formatIndexInfo(idx)}\` on \`${idx.table}\`${whereInfo}`);
+    }
+  }
+  if (diff.extra.length > 0) {
+    lines.push("");
+    lines.push("> \u{1F4DD} **\u672C\u756A\u306B\u4F59\u5206\u306A\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9:**");
+    for (const idx of diff.extra) {
+      lines.push(`> - \`${formatIndexInfo(idx)}\` on \`${idx.table}\``);
+    }
+  }
+  return lines;
+}
 function formatSchemaMatrix(schemaStats, gitDiff) {
   if (!schemaStats) {
     return ["### \u30B9\u30AD\u30FC\u30DE\u72B6\u6CC1", "", "_\u30B9\u30AD\u30FC\u30DE\u7D71\u8A08\u60C5\u5831\u304C\u5229\u7528\u3067\u304D\u307E\u305B\u3093_", ""];
@@ -13846,6 +13883,7 @@ function formatSchemaMatrix(schemaStats, gitDiff) {
   const prodTotalCell = production ? formatProdTotalCellWithDiff(production.total, local.total) : null;
   const totalRow = hasProduction ? `| **Total** | ${localTotalCell} | ${ciTotalCell} | ${prodTotalCell ?? "n/a"} |` : `| **Total** | ${localTotalCell} | ${ciTotalCell} |`;
   const summary = generateSchemaMatrixSummary(local.total, ci.total, production?.total ?? null);
+  const indexDiffSection = generateIndexDiffSection(schemaStats);
   return [
     header,
     "",
@@ -13854,6 +13892,7 @@ function formatSchemaMatrix(schemaStats, gitDiff) {
     totalRow,
     "",
     summary,
+    ...indexDiffSection,
     "",
     "<sub>T=\u30C6\u30FC\u30D6\u30EB F=\u95A2\u6570 P=\u30DD\u30EA\u30B7\u30FC I=\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9 Tr=\u30C8\u30EA\u30AC\u30FC</sub>",
     ""
@@ -13951,7 +13990,7 @@ function generatePreviewDetails(prodPreview) {
     ""
   ];
 }
-function generateProductionPreviewSection(prodPreview, schemaDrift) {
+function generateProductionPreviewSection(prodPreview, schemaDrift, schemaStats) {
   if (!prodPreview?.executed) {
     if (schemaDrift?.gitDiff?.filesChanged?.length) {
       return [
@@ -13978,18 +14017,37 @@ function generateProductionPreviewSection(prodPreview, schemaDrift) {
     }
     return lines;
   }
+  if (schemaStats?.local && schemaStats?.production) {
+    const indexDiff = compareIndexLists(schemaStats.local, schemaStats.production);
+    if (hasIndexDiff(indexDiff)) {
+      const missingCount = indexDiff.missing.length;
+      const extraCount = indexDiff.extra.length;
+      const diffParts = [];
+      if (missingCount > 0) diffParts.push(`${missingCount}\u4EF6\u4E0D\u8DB3`);
+      if (extraCount > 0) diffParts.push(`${extraCount}\u4EF6\u4F59\u5206`);
+      return [
+        `> \u26A0\uFE0F **\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9\u5DEE\u5206\u691C\u51FA** (${diffParts.join(", ")})`,
+        ">",
+        "> pg-schema-diff \u3067\u306F\u691C\u51FA\u3055\u308C\u307E\u305B\u3093\u3067\u3057\u305F\u304C\u3001\u30A4\u30F3\u30C7\u30C3\u30AF\u30B9\u306E\u5DEE\u5206\u304C\u3042\u308A\u307E\u3059\u3002",
+        "> \u30B9\u30AD\u30FC\u30DE\u30DE\u30C8\u30EA\u30C3\u30AF\u30B9\u306E\u8A73\u7D30\u3092\u78BA\u8A8D\u3057\u3066\u304F\u3060\u3055\u3044\u3002",
+        ""
+      ];
+    }
+  }
   return ["**\u672C\u756A\u30D7\u30EC\u30D3\u30E5\u30FC**: \u2705 \u672C\u756A\u306B\u9069\u7528\u3059\u308B\u30B9\u30AD\u30FC\u30DE\u5909\u66F4\u306F\u3042\u308A\u307E\u305B\u3093", ""];
 }
-function generateDeploySection(exitCode, layerResults, gitBranchName, productionPreview, schemaDrift, env2) {
+function generateDeploySection(exitCode, layerResults, gitBranchName, productionPreview, schemaDrift, schemaStats, env2) {
   if (!checkIfDeployable(exitCode, layerResults)) return [];
   const deployWorkflowUrl = env2.repository ? `${env2.serverUrl}/${env2.repository}/actions/workflows/deploy-db.yml` : null;
-  const hasSchemaChanges = productionPreview?.hasChanges === true;
+  const hasPgSchemaDiffChanges = productionPreview?.hasChanges === true;
+  const hasIndexChanges = schemaStats?.local && schemaStats?.production ? hasIndexDiff(compareIndexLists(schemaStats.local, schemaStats.production)) : false;
+  const hasSchemaChanges = hasPgSchemaDiffChanges || hasIndexChanges;
   const headerEmoji = hasSchemaChanges ? "\u{1F6A8}" : "\u{1F680}";
   const headerText = hasSchemaChanges ? "\u672C\u756A\u30C7\u30D7\u30ED\u30A4 (\u30B9\u30AD\u30FC\u30DE\u5909\u66F4\u3042\u308A!)" : "\u672C\u756A\u30C7\u30D7\u30ED\u30A4";
   const lines = ["---", "", `### ${headerEmoji} ${headerText}`, ""];
   if (exitCode !== 0)
     lines.push("> **\u6CE8**: Layer 4 (E2E) \u306F\u5931\u6557\u3057\u307E\u3057\u305F\u304C\u3001\u30B9\u30AD\u30FC\u30DE\u5909\u66F4\u306F\u30C7\u30D7\u30ED\u30A4\u53EF\u80FD\u3067\u3059\u3002", "");
-  lines.push(...generateProductionPreviewSection(productionPreview, schemaDrift));
+  lines.push(...generateProductionPreviewSection(productionPreview, schemaDrift, schemaStats));
   if (deployWorkflowUrl) {
     const buttonText = hasSchemaChanges ? "\u26A1 \u30B9\u30AD\u30FC\u30DE\u5909\u66F4\u3092\u672C\u756A\u306B\u30C7\u30D7\u30ED\u30A4" : "\u25B6\uFE0F \u672C\u756A\u306B\u30C7\u30D7\u30ED\u30A4";
     lines.push(
@@ -14034,6 +14092,7 @@ function generateIntermediateCommentBody(input3) {
       gitBranchName,
       productionPreview,
       schemaDrift,
+      input3.schemaStats ?? null,
       env2
     ),
     "<sub>\u{1F916} RUNA CI \u751F\u6210 (\u4E2D\u9593\u66F4\u65B0)</sub>"
@@ -14064,6 +14123,7 @@ function generateCommentBody(input3) {
       gitBranchName,
       input3.productionPreview,
       schemaDrift,
+      input3.schemaStats ?? null,
       env2
     ),
     "<sub>\u{1F916} RUNA CI \u751F\u6210</sub>"
@@ -15108,7 +15168,8 @@ ${generateProgressCommentBody(progressInput)}`;
       invoke: {
         src: "collectSchemaStats",
         input: ({ context }) => ({
-          repoRoot: assertRepoRoot(context),
+          // In CI mode, local and CI both use the Docker Supabase
+          localDbUrl: context.supabase?.databaseUrlRaw ?? null,
           ciDbUrl: context.supabase?.databaseUrlRaw ?? null,
           // Query production only in ci-pr modes
           queryProduction: context.mode !== "ci-local"
@@ -16735,8 +16796,8 @@ function getGitHubEventAction() {
   const eventPath = process.env.GITHUB_EVENT_PATH;
   if (!eventPath) return void 0;
   try {
-    const fs15 = __require("fs");
-    const eventPayload = JSON.parse(fs15.readFileSync(eventPath, "utf-8"));
+    const fs14 = __require("fs");
+    const eventPayload = JSON.parse(fs14.readFileSync(eventPath, "utf-8"));
     return eventPayload.action;
   } catch {
     return void 0;
@@ -19853,6 +19914,32 @@ function diffSchema(params) {
     enumValueMismatches
   };
 }
+function extractTablesFromIdempotentSql(idempotentDir, projectRoot = process.cwd()) {
+  const fullPath = path10__default.resolve(projectRoot, idempotentDir);
+  if (!existsSync(fullPath)) {
+    return [];
+  }
+  const tables = [];
+  const createTablePattern = /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"?([a-zA-Z_][a-zA-Z0-9_]*)"?\.)?(?:"?([a-zA-Z_][a-zA-Z0-9_]*)"?)/gi;
+  try {
+    const files = readdirSync(fullPath).filter((f) => f.endsWith(".sql"));
+    for (const file of files) {
+      const filePath = path10__default.join(fullPath, file);
+      const content = readFileSync(filePath, "utf-8");
+      const contentWithoutComments = content.replace(/--.*$/gm, "").replace(/\/\*[\s\S]*?\*\//g, "");
+      for (const match of contentWithoutComments.matchAll(createTablePattern)) {
+        const schema = match[1] || "public";
+        const tableName = match[2];
+        if (tableName) {
+          tables.push(`${schema}.${tableName}`);
+        }
+      }
+    }
+  } catch {
+    return [];
+  }
+  return [...new Set(tables)].sort();
+}
 
 // src/commands/db/commands/db-cleanup.ts
 function quoteIdentifier(identifier) {
@@ -19966,18 +20053,30 @@ async function runCleanupAction(env2, options) {
     const databaseUrl = resolveDatabaseUrl(runaEnv);
     const { expectedTables, expectedEnums } = await extractSchemaTablesAndEnums(dbPackagePath);
     const { dbTables, dbEnums } = await fetchDbTablesAndEnums(databaseUrl);
-    let excludeFromOrphanDetection;
+    let excludeFromOrphanDetection = [];
+    let idempotentSqlDir = "supabase/schemas/idempotent";
     try {
       const config = loadRunaConfig2();
-      excludeFromOrphanDetection = config.database?.pgSchemaDiff?.excludeFromOrphanDetection;
+      if (config.database?.pgSchemaDiff?.excludeFromOrphanDetection) {
+        excludeFromOrphanDetection = [...config.database.pgSchemaDiff.excludeFromOrphanDetection];
+      }
+      if (config.database?.pgSchemaDiff?.idempotentSqlDir) {
+        idempotentSqlDir = config.database.pgSchemaDiff.idempotentSqlDir;
+      }
     } catch {
     }
+    const idempotentTables = extractTablesFromIdempotentSql(idempotentSqlDir);
+    if (idempotentTables.length > 0) {
+      excludeFromOrphanDetection = [
+        .../* @__PURE__ */ new Set([...excludeFromOrphanDetection, ...idempotentTables])
+      ];
+    }
     const diff = diffSchema({
       expectedTables,
       expectedEnums,
       dbTables,
       dbEnums,
-      excludeFromOrphanDetection
+      excludeFromOrphanDetection: excludeFromOrphanDetection.length > 0 ? excludeFromOrphanDetection : void 0
     });
     if (diff.orphanTables.length === 0 && diff.extraEnums.length === 0) {
       logger16.success("\u2705 No orphan tables/enums to cleanup");
@@ -21105,6 +21204,10 @@ function logOrphanDetails(diff, result, logger16) {
   logger16.info("    2. Cleanup orphans: runa db cleanup local --force");
   logger16.info("    3. Auto-cleanup before sync: runa db sync --reconcile");
   logger16.info("");
+  logger16.info("  If these tables are managed by idempotent SQL (e.g., partitions, PostGIS):");
+  logger16.info("    \u2022 Add to runa.config.ts: database.pgSchemaDiff.excludeFromOrphanDetection");
+  logger16.info("    \u2022 Or set idempotentSqlDir to auto-detect CREATE TABLE statements");
+  logger16.info("");
 }
 async function runOrphanCheck(env2, dbPackagePath, result, logger16, step) {
   if (env2 !== "local" || !dbPackagePath) return;
@@ -21115,18 +21218,30 @@ async function runOrphanCheck(env2, dbPackagePath, result, logger16, step) {
     const { dbTables, dbEnums } = await fetchDbTablesAndEnums(databaseUrl, {
       schemaDir: path10__default.join(dbPackagePath, "src", "schema")
     });
-    let excludeFromOrphanDetection;
+    let excludeFromOrphanDetection = [];
+    let idempotentSqlDir = "supabase/schemas/idempotent";
     try {
       const config = loadRunaConfig2();
-      excludeFromOrphanDetection = config.database?.pgSchemaDiff?.excludeFromOrphanDetection;
+      if (config.database?.pgSchemaDiff?.excludeFromOrphanDetection) {
+        excludeFromOrphanDetection = [...config.database.pgSchemaDiff.excludeFromOrphanDetection];
+      }
+      if (config.database?.pgSchemaDiff?.idempotentSqlDir) {
+        idempotentSqlDir = config.database.pgSchemaDiff.idempotentSqlDir;
+      }
     } catch {
     }
+    const idempotentTables = extractTablesFromIdempotentSql(idempotentSqlDir);
+    if (idempotentTables.length > 0) {
+      excludeFromOrphanDetection = [
+        .../* @__PURE__ */ new Set([...excludeFromOrphanDetection, ...idempotentTables])
+      ];
+    }
     const diff = diffSchema({
       expectedTables,
       expectedEnums,
       dbTables,
       dbEnums,
-      excludeFromOrphanDetection
+      excludeFromOrphanDetection: excludeFromOrphanDetection.length > 0 ? excludeFromOrphanDetection : void 0
     });
     const hasOrphans = diff.orphanTables.length > 0 || diff.extraEnums.length > 0;
     if (hasOrphans) {
@@ -21323,12 +21438,24 @@ var reconcile = fromPromise(
         ctx.dbPackagePath
       );
       const { dbTables, dbEnums } = await fetchDbTablesAndEnums(ctx.databaseUrl);
-      let excludeFromOrphanDetection;
+      let excludeFromOrphanDetection = [];
+      let idempotentSqlDir = "supabase/schemas/idempotent";
       try {
         const config = loadRunaConfig2();
-        excludeFromOrphanDetection = config.database?.pgSchemaDiff?.excludeFromOrphanDetection;
+        if (config.database?.pgSchemaDiff?.excludeFromOrphanDetection) {
+          excludeFromOrphanDetection = [...config.database.pgSchemaDiff.excludeFromOrphanDetection];
+        }
+        if (config.database?.pgSchemaDiff?.idempotentSqlDir) {
+          idempotentSqlDir = config.database.pgSchemaDiff.idempotentSqlDir;
+        }
       } catch {
       }
+      const idempotentTables = extractTablesFromIdempotentSql(idempotentSqlDir);
+      if (idempotentTables.length > 0) {
+        excludeFromOrphanDetection = [
+          .../* @__PURE__ */ new Set([...excludeFromOrphanDetection, ...idempotentTables])
+        ];
+      }
       const diff = diffSchema({
         expectedTables,
         expectedEnums,
@@ -24720,6 +24847,10 @@ Enum value mismatches (${diff.enumValueMismatches.length}):`);
     "  \u2022 If you only see orphan empty tables / unused enums: runa db cleanup <env> --empty-only --force"
   );
   logger16.info("  \u2022 Then re-run: runa db sync <env> --force");
+  logger16.info("");
+  logger16.info("  If orphan tables are managed by idempotent SQL (e.g., partitions, PostGIS):");
+  logger16.info("    \u2022 Add to runa.config.ts: database.pgSchemaDiff.excludeFromOrphanDetection");
+  logger16.info("    \u2022 Or set idempotentSqlDir to auto-detect CREATE TABLE statements");
 }
 async function runSyncAction(env2, options) {
   const logger16 = createCLILogger("db:sync");
@@ -24731,18 +24862,30 @@ async function runSyncAction(env2, options) {
     const databaseUrl = resolveDatabaseUrl(runaEnv);
     const { expectedTables, expectedEnums } = await extractSchemaTablesAndEnums(dbPackagePath);
     const { dbTables, dbEnums } = await fetchDbTablesAndEnums(databaseUrl);
-    let excludeFromOrphanDetection;
+    let excludeFromOrphanDetection = [];
+    let idempotentSqlDir = "supabase/schemas/idempotent";
     try {
       const config = loadRunaConfig2();
-      excludeFromOrphanDetection = config.database?.pgSchemaDiff?.excludeFromOrphanDetection;
+      if (config.database?.pgSchemaDiff?.excludeFromOrphanDetection) {
+        excludeFromOrphanDetection = [...config.database.pgSchemaDiff.excludeFromOrphanDetection];
+      }
+      if (config.database?.pgSchemaDiff?.idempotentSqlDir) {
+        idempotentSqlDir = config.database.pgSchemaDiff.idempotentSqlDir;
+      }
     } catch {
     }
+    const idempotentTables = extractTablesFromIdempotentSql(idempotentSqlDir);
+    if (idempotentTables.length > 0) {
+      excludeFromOrphanDetection = [
+        .../* @__PURE__ */ new Set([...excludeFromOrphanDetection, ...idempotentTables])
+      ];
+    }
     const diff = diffSchema({
       expectedTables,
       expectedEnums,
       dbTables,
       dbEnums,
-      excludeFromOrphanDetection
+      excludeFromOrphanDetection: excludeFromOrphanDetection.length > 0 ? excludeFromOrphanDetection : void 0
     });
     if (options.json) {
       process.stdout.write(
@@ -26713,18 +26856,42 @@ function parseVercelUrl(url) {
   if (!match) return null;
   return { team: match[1], project: match[2] };
 }
+function isValidGitHubOwner(name) {
+  if (!name || name.length > 39) return false;
+  if (!/^[a-zA-Z0-9-]+$/.test(name)) return false;
+  if (name.startsWith("-") || name.endsWith("-")) return false;
+  return true;
+}
+function isValidGitHubRepo(name) {
+  if (!name || name.length > 100) return false;
+  if (!/^[a-zA-Z0-9._-]+$/.test(name)) return false;
+  if (name.startsWith(".") && name !== ".github") return false;
+  if (/\.\./.test(name)) return false;
+  return true;
+}
 function parseGitHubUrl(url) {
   const cleanUrl = url.trim().replace(/^https?:\/\//, "").replace(/\.git$/, "").replace(/\/$/, "");
-  const githubMatch = cleanUrl.match(/^github\.com\/([a-zA-Z0-9_-]+)\/([a-zA-Z0-9._-]+)/);
+  const githubMatch = cleanUrl.match(/^github\.com\/([^/]+)\/([^/]+)/);
   if (githubMatch) {
-    const repo = githubMatch[2].split("/")[0];
-    return { owner: githubMatch[1], repo };
+    const owner = githubMatch[1];
+    const repo = githubMatch[2];
+    if (isValidGitHubOwner(owner) && isValidGitHubRepo(repo)) {
+      return { owner, repo };
+    }
+  }
+  const sshMatch = url.trim().match(/^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?$/);
+  if (sshMatch) {
+    const owner = sshMatch[1];
+    const repo = sshMatch[2];
+    if (isValidGitHubOwner(owner) && isValidGitHubRepo(repo)) {
+      return { owner, repo };
+    }
   }
   const parts = cleanUrl.split("/");
-  if (parts.length >= 2 && !cleanUrl.includes(".")) {
+  if (parts.length === 2 && !cleanUrl.includes(".")) {
     const owner = parts[0];
     const repo = parts[1];
-    if (/^[a-zA-Z0-9_-]+$/.test(owner) && /^[a-zA-Z0-9._-]+$/.test(repo)) {
+    if (isValidGitHubOwner(owner) && isValidGitHubRepo(repo)) {
       return { owner, repo };
     }
   }
@@ -27197,7 +27364,8 @@ async function setVercelEnvVar(linkedDir, key, value, overwrite, logger16) {
         proc.stderr?.on("data", (data) => {
           stderr += data.toString();
         });
-        proc.stdin?.write(value);
+        proc.stdin?.write(`${value}
+`);
         proc.stdin?.end();
         proc.on("close", (code) => {
           if (code === 0) {
@@ -29660,7 +29828,7 @@ init_esm_shims();
 
 // src/constants/versions.ts
 init_esm_shims();
-var COMPATIBLE_TEMPLATES_VERSION = "0.5.40";
+var COMPATIBLE_TEMPLATES_VERSION = "0.5.42";
 var TEMPLATES_PACKAGE_NAME = "@r06-dev/runa-templates";
 var GITHUB_PACKAGES_REGISTRY = "https://npm.pkg.github.com";
 
@@ -29713,7 +29881,7 @@ function getCacheDir(version) {
 function isCached(version) {
   const cacheDir = getCacheDir(version);
   const templatesDir = path10__default.join(cacheDir, "templates");
-  return fs6__default.existsSync(templatesDir);
+  return fs5__default.existsSync(templatesDir);
 }
 var scopedAuthToken = null;
 var tokenWasAutoDetected = false;
@@ -29849,7 +30017,7 @@ async function verifyNoSymlinks(dir, baseDir) {
 }
 async function copyToCache(tempDir, cacheDir) {
   const sourceTemplates = path10__default.join(tempDir, "node_modules", TEMPLATES_PACKAGE_NAME, "templates");
-  if (!fs6__default.existsSync(sourceTemplates)) {
+  if (!fs5__default.existsSync(sourceTemplates)) {
     throw new CLIError("Templates directory not found in package.", "TEMPLATES_DIR_NOT_FOUND", [
       `Expected: ${sourceTemplates}`,
       "The templates package may be corrupted.",
@@ -29893,7 +30061,7 @@ async function fetchTemplates(options = {}) {
   }
   const authToken = await getAuthToken();
   try {
-    if (fresh && fs6__default.existsSync(cacheDir)) {
+    if (fresh && fs5__default.existsSync(cacheDir)) {
       await rm(cacheDir, { recursive: true, force: true });
     }
     const tempDir = path10__default.join(os.tmpdir(), `runa-templates-${Date.now()}`);
@@ -29925,15 +30093,15 @@ async function fetchTemplates(options = {}) {
 var MAX_WORKSPACE_TRAVERSAL_DEPTH = 10;
 function isLegitimateWorkspaceRoot(workspaceRoot) {
   const pnpmWorkspaceFile = path10__default.join(workspaceRoot, "pnpm-workspace.yaml");
-  if (!fs6__default.existsSync(pnpmWorkspaceFile)) {
+  if (!fs5__default.existsSync(pnpmWorkspaceFile)) {
     return false;
   }
   const rootPackageFile = path10__default.join(workspaceRoot, "package.json");
-  if (!fs6__default.existsSync(rootPackageFile)) {
+  if (!fs5__default.existsSync(rootPackageFile)) {
     return false;
   }
   try {
-    const rootPkg = JSON.parse(fs6__default.readFileSync(rootPackageFile, "utf-8"));
+    const rootPkg = JSON.parse(fs5__default.readFileSync(rootPackageFile, "utf-8"));
     const hasWorkspaces = Array.isArray(rootPkg.workspaces) && rootPkg.workspaces.length > 0;
     const hasExpectedName = rootPkg.name === "runa" || rootPkg.name === "@r06-dev/runa";
     return hasWorkspaces || hasExpectedName;
@@ -29958,11 +30126,11 @@ function resolveWorkspaceTemplates() {
       depth++;
       continue;
     }
-    if (fs6__default.existsSync(normalizedTemplatesPath)) {
+    if (fs5__default.existsSync(normalizedTemplatesPath)) {
       const markerFile = path10__default.join(current, "packages", "runa-templates", "package.json");
-      if (fs6__default.existsSync(markerFile)) {
+      if (fs5__default.existsSync(markerFile)) {
         try {
-          const pkg = JSON.parse(fs6__default.readFileSync(markerFile, "utf-8"));
+          const pkg = JSON.parse(fs5__default.readFileSync(markerFile, "utf-8"));
           if (pkg.name === "@r06-dev/runa-templates") {
             return normalizedTemplatesPath;
           }
@@ -29984,9 +30152,9 @@ function checkZodVersion(_logger) {
     path10__default.join(process.env.HOME ?? "", "node_modules", "zod", "package.json")
   ];
   for (const zodPath of zodPaths) {
-    if (!fs6__default.existsSync(zodPath)) continue;
+    if (!fs5__default.existsSync(zodPath)) continue;
     try {
-      const raw = fs6__default.readFileSync(zodPath, "utf-8");
+      const raw = fs5__default.readFileSync(zodPath, "utf-8");
       const pkg = JSON.parse(raw);
       const version = pkg.version ?? "";
       if (version.startsWith("3.")) {
@@ -30524,15 +30692,15 @@ function emptyResult(filePath) {
   };
 }
 function ensureDirectoryExists(dirPath) {
-  if (!fs6.existsSync(dirPath)) {
-    fs6.mkdirSync(dirPath, { recursive: true });
+  if (!fs5.existsSync(dirPath)) {
+    fs5.mkdirSync(dirPath, { recursive: true });
   }
 }
 function getGeneratorVersion() {
   try {
     const pkgPath = path10.resolve(__dirname$1, "../../../package.json");
-    if (fs6.existsSync(pkgPath)) {
-      const pkg = JSON.parse(fs6.readFileSync(pkgPath, "utf-8"));
+    if (fs5.existsSync(pkgPath)) {
+      const pkg = JSON.parse(fs5.readFileSync(pkgPath, "utf-8"));
       return pkg.version ?? "unknown";
     }
   } catch {
@@ -30549,21 +30717,21 @@ function detectPlatform(repoRoot) {
       path10.join(repoRoot, "apps", "web", pattern),
       path10.join(repoRoot, "apps", "dashboard", pattern)
     ];
-    if (paths.some((p) => fs6.existsSync(p))) {
+    if (paths.some((p) => fs5.existsSync(p))) {
       return "nextjs";
     }
   }
   const appJsonPath = path10.join(repoRoot, "app.json");
-  if (fs6.existsSync(appJsonPath)) {
+  if (fs5.existsSync(appJsonPath)) {
     try {
-      const appJson = JSON.parse(fs6.readFileSync(appJsonPath, "utf-8"));
+      const appJson = JSON.parse(fs5.readFileSync(appJsonPath, "utf-8"));
       if (appJson.expo) {
         return "expo";
       }
     } catch {
     }
   }
-  if (fs6.existsSync(path10.join(repoRoot, "expo.json"))) {
+  if (fs5.existsSync(path10.join(repoRoot, "expo.json"))) {
     return "expo";
   }
   const electronPatterns = [
@@ -30572,7 +30740,7 @@ function detectPlatform(repoRoot) {
     "electron.vite.config.ts",
     "electron.vite.config.js"
   ];
-  if (electronPatterns.some((p) => fs6.existsSync(path10.join(repoRoot, p)))) {
+  if (electronPatterns.some((p) => fs5.existsSync(path10.join(repoRoot, p)))) {
     return "electron";
   }
   return "unknown";
@@ -30580,14 +30748,14 @@ function detectPlatform(repoRoot) {
 function findPossibleHonoDirs(repoRoot) {
   const possibleDirs = [];
   const appsDir = path10.join(repoRoot, "apps");
-  if (fs6.existsSync(appsDir)) {
+  if (fs5.existsSync(appsDir)) {
     try {
-      const apps = fs6.readdirSync(appsDir, { withFileTypes: true });
+      const apps = fs5.readdirSync(appsDir, { withFileTypes: true });
       for (const app of apps) {
         if (app.isDirectory()) {
           const routesDir = path10.join(appsDir, app.name, "routes");
-          if (fs6.existsSync(routesDir)) {
-            const files = fs6.readdirSync(routesDir);
+          if (fs5.existsSync(routesDir)) {
+            const files = fs5.readdirSync(routesDir);
             const hasRouteFiles = files.some(
               (f) => f.endsWith(".ts") && !f.endsWith(".test.ts") && !f.endsWith(".spec.ts")
             );
@@ -30601,14 +30769,14 @@ function findPossibleHonoDirs(repoRoot) {
     }
   }
   const packagesDir = path10.join(repoRoot, "packages");
-  if (fs6.existsSync(packagesDir)) {
+  if (fs5.existsSync(packagesDir)) {
     try {
-      const packages = fs6.readdirSync(packagesDir, { withFileTypes: true });
+      const packages = fs5.readdirSync(packagesDir, { withFileTypes: true });
       for (const pkg of packages) {
         if (pkg.isDirectory()) {
           const routesDir = path10.join(packagesDir, pkg.name, "routes");
-          if (fs6.existsSync(routesDir)) {
-            const files = fs6.readdirSync(routesDir);
+          if (fs5.existsSync(routesDir)) {
+            const files = fs5.readdirSync(routesDir);
             const hasRouteFiles = files.some(
               (f) => f.endsWith(".ts") && !f.endsWith(".test.ts") && !f.endsWith(".spec.ts")
             );
@@ -30698,7 +30866,7 @@ function buildDefinitionMap(definitions) {
 function buildEnhancedMachines(e2eManifest, definitionMap, machineDefinitions) {
   const enhanced = {};
   const normalizedIdToCanonical = /* @__PURE__ */ new Map();
-  const isMachineFile = (path64) => path64.includes("machine.ts") || path64.includes("machines/") || path64.includes(".machine.ts") || path64.includes("/machine/");
+  const isMachineFile = (path63) => path63.includes("machine.ts") || path63.includes("machines/") || path63.includes(".machine.ts") || path63.includes("/machine/");
   const addMachine = (id, sourceFile, entryBuilder) => {
     const normalizedId = normalizeToCanonicalId(id).toLowerCase();
     const existingCanonical = normalizedIdToCanonical.get(normalizedId);
@@ -30840,7 +31008,7 @@ async function generateManifestFiles(manifestDir, repoRoot, verbose, resolveSche
   const manifestsDir = path10.join(absoluteManifestDir, "manifests");
   ensureDirectoryExists(manifestsDir);
   const tsPath = path10.join(generatedDir, "selectors.ts");
-  await fs6.promises.writeFile(tsPath, generateSelectorTypeScript(e2eManifest), "utf-8");
+  await fs5.promises.writeFile(tsPath, generateSelectorTypeScript(e2eManifest), "utf-8");
   const unifiedRegistry = getUnifiedRegistry();
   const machineLinks = buildMachineLinks();
   const { apiContracts, schemasResolved } = await analyzeHonoRoutes(
@@ -30869,7 +31037,7 @@ async function generateManifestFiles(manifestDir, repoRoot, verbose, resolveSche
     apiContracts
   };
   const manifestPath = path10.join(manifestsDir, "manifest.json");
-  await fs6.promises.writeFile(manifestPath, JSON.stringify(unifiedManifest, null, 2), "utf-8");
+  await fs5.promises.writeFile(manifestPath, JSON.stringify(unifiedManifest, null, 2), "utf-8");
   const machinesWithoutE2EMeta = machineDefinitions.filter(
     (def) => !def.hasE2EMeta && typeof def.id === "string"
   ).map((def) => ({ id: def.id, sourceFile: def.sourceFile }));
@@ -30933,7 +31101,7 @@ function registerExistingInjections(machineIds, attrs, sourceFile) {
   }
 }
 async function preprocessFile(filePath, repoRoot, options) {
-  let code = await fs6.promises.readFile(filePath, "utf-8");
+  let code = await fs5.promises.readFile(filePath, "utf-8");
   const relativePath = path10.relative(repoRoot, filePath);
   collectRouteInfo(relativePath, code, options.verbose);
   const hasMarker = code.includes(CLI_INJECTION_MARKER);
@@ -31035,7 +31203,7 @@ async function handleChangedFile(result, check, repoRoot, verbose, state2) {
   });
   state2.totalInjections += result.injectedCount;
   if (check) return;
-  await fs6.promises.writeFile(result.filePath, result.transformedCode, "utf-8");
+  await fs5.promises.writeFile(result.filePath, result.transformedCode, "utf-8");
   state2.filesToFormat.push(result.filePath);
   if (verbose) {
     const relativePath = path10.relative(repoRoot, result.filePath);
@@ -31058,7 +31226,7 @@ async function categorizeFiles(files) {
   const withJsxOnly = [];
   for (const filePath of files) {
     try {
-      const code = await fs6.promises.readFile(filePath, "utf-8");
+      const code = await fs5.promises.readFile(filePath, "utf-8");
       if (mightContainMachineHooks(code)) {
         withMachineHooks.push(filePath);
       } else if (mightContainJsx(code)) {
@@ -31087,7 +31255,7 @@ async function processFiles(options) {
   const processOpts = { verbose, force: options.force ?? false };
   for (const filePath of withMachineDefinitions) {
     try {
-      const code = await fs6.promises.readFile(filePath, "utf-8");
+      const code = await fs5.promises.readFile(filePath, "utf-8");
       const relativePath = path10.relative(repoRoot, filePath);
       collectRouteInfo(relativePath, code, verbose);
     } catch {
@@ -32816,8 +32984,8 @@ function formatLineDiff(diff) {
 
 // src/commands/template-check/actors/compare.ts
 function compareBothFiles(runaRelPath, templateRelPath, runaAbsPath, templateAbsPath, category, includeDiff) {
-  const runaContent = fs6.readFileSync(runaAbsPath, "utf-8");
-  const templateContent = fs6.readFileSync(templateAbsPath, "utf-8");
+  const runaContent = fs5.readFileSync(runaAbsPath, "utf-8");
+  const templateContent = fs5.readFileSync(templateAbsPath, "utf-8");
   const comparison = compareFiles(runaContent, templateContent);
   let status;
   if (comparison.identical) {
@@ -33238,6 +33406,39 @@ var PATH_MAPPING_RULES = [
     category: "other"
   },
   // ============================================================
+  // .CODEX DIRECTORY (mirrors .claude policies for Codex)
+  // ============================================================
+  {
+    runa: ".codex/README.md",
+    template: "_codex/README.md",
+    category: "config"
+  },
+  {
+    runa: ".codex/AGENTS.md",
+    template: "_codex/AGENTS.md",
+    category: "config"
+  },
+  {
+    runa: ".codex/CODEX.md",
+    template: "_codex/CODEX.md",
+    category: "config"
+  },
+  {
+    runa: ".codex/config.toml",
+    template: "_codex/config.toml",
+    category: "config"
+  },
+  {
+    runa: ".codex/rules/devops.md",
+    template: "_codex/rules/devops.md",
+    category: "rules"
+  },
+  {
+    runa: ".codex/rules/permissions.toml",
+    template: "_codex/rules/permissions.toml",
+    category: "rules"
+  },
+  // ============================================================
   // ROOT DOCUMENTATION (LOWEST PRIORITY)
   // ============================================================
   {
@@ -33261,9 +33462,9 @@ var PATH_MAPPING_RULES = [
     category: "prompts"
   }
 ];
-function getCategoryForPath(path64) {
+function getCategoryForPath(path63) {
   for (const rule of PATH_MAPPING_RULES) {
-    if (matchGlobPattern(path64, rule.runa) || matchGlobPattern(path64, rule.template)) {
+    if (matchGlobPattern(path63, rule.runa) || matchGlobPattern(path63, rule.template)) {
       return rule.category;
     }
   }
@@ -33283,17 +33484,17 @@ function applyReverseRename(normalized, rule, isTemplate) {
   }
   return normalized;
 }
-function generateComparisonKey(path64, isTemplate) {
-  let normalized = isTemplate ? normalizeTemplatePath(path64) : path64;
+function generateComparisonKey(path63, isTemplate) {
+  let normalized = isTemplate ? normalizeTemplatePath(path63) : path63;
   for (const rule of PATH_MAPPING_RULES) {
     normalized = applyReverseRename(normalized, rule, isTemplate);
   }
   return normalized;
 }
-function matchGlobPattern(path64, pattern) {
+function matchGlobPattern(path63, pattern) {
   const regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "<<DOUBLE_STAR>>").replace(/\*/g, "([^/]*)").replace(/<<DOUBLE_STAR>>/g, "(.*)");
   const regex = new RegExp(`^${regexPattern}$`);
-  const match = path64.match(regex);
+  const match = path63.match(regex);
   if (match) {
     const subPath = match[1] ?? "";
     return { matched: true, subPath };
@@ -33357,7 +33558,7 @@ async function globFiles(baseDir, pattern) {
   return results;
 }
 function addFileResult(entryPath, fullPattern, results) {
-  const stats = fs6.statSync(entryPath);
+  const stats = fs5.statSync(entryPath);
   results.push({
     absolutePath: entryPath,
     size: stats.size,
@@ -33404,16 +33605,16 @@ async function matchBraceExpansion(ctx, entries, pattern, isLastPart) {
 }
 async function matchLiteral(ctx, pattern, isLastPart) {
   const entryPath = path10.join(ctx.currentDir, pattern);
-  if (!fs6.existsSync(entryPath)) return;
-  const stats = fs6.statSync(entryPath);
+  if (!fs5.existsSync(entryPath)) return;
+  const stats = fs5.statSync(entryPath);
   await processEntry(ctx, entryPath, stats.isFile(), stats.isDirectory(), isLastPart);
 }
 async function walkAndMatch(ctx) {
   if (ctx.partIndex >= ctx.patternParts.length) return;
-  if (!fs6.existsSync(ctx.currentDir)) return;
+  if (!fs5.existsSync(ctx.currentDir)) return;
   const currentPattern = ctx.patternParts[ctx.partIndex];
   const isLastPart = ctx.partIndex === ctx.patternParts.length - 1;
-  const entries = fs6.readdirSync(ctx.currentDir, { withFileTypes: true });
+  const entries = fs5.readdirSync(ctx.currentDir, { withFileTypes: true });
   if (currentPattern === "**") {
     await matchDoubleWildcard(ctx, entries);
   } else if (currentPattern.includes("*")) {
@@ -33928,7 +34129,7 @@ function printActionsNeeded(logger16, actions) {
   );
 }
 function findRepoRoot3(startDir) {
-  const { existsSync: existsSync50, readFileSync: readFileSync27 } = __require("fs");
+  const { existsSync: existsSync50, readFileSync: readFileSync28 } = __require("fs");
   const { join: join22, dirname: dirname5 } = __require("path");
   let current = startDir;
   while (current !== dirname5(current)) {
@@ -33938,7 +34139,7 @@ function findRepoRoot3(startDir) {
     const pkgPath = join22(current, "package.json");
     if (existsSync50(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync27(pkgPath, "utf-8"));
+        const pkg = JSON.parse(readFileSync28(pkgPath, "utf-8"));
         if (pkg.workspaces) {
           return current;
         }
@@ -35240,8 +35441,8 @@ async function runVerification(logger16) {
   return allPassed;
 }
 async function findWorkspacesWithSdkPackages(rootDir, packageNames) {
-  const fs15 = await import('fs/promises');
-  const path64 = await import('path');
+  const fs14 = await import('fs/promises');
+  const path63 = await import('path');
   const { glob: glob8 } = await import('glob');
   const result = [];
   const packageJsonPaths = await glob8("**/package.json", {
@@ -35250,9 +35451,9 @@ async function findWorkspacesWithSdkPackages(rootDir, packageNames) {
     // Exclude root
   });
   for (const relPath of packageJsonPaths) {
-    const fullPath = path64.join(rootDir, relPath);
+    const fullPath = path63.join(rootDir, relPath);
     try {
-      const content = await fs15.readFile(fullPath, "utf-8");
+      const content = await fs14.readFile(fullPath, "utf-8");
       const pkg = JSON.parse(content);
       let hasAnySdkPackage = false;
       for (const pkgName of packageNames) {
@@ -35263,7 +35464,7 @@ async function findWorkspacesWithSdkPackages(rootDir, packageNames) {
       }
       if (hasAnySdkPackage) {
         result.push({
-          dir: path64.dirname(fullPath),
+          dir: path63.dirname(fullPath),
           packages: packageNames
           // All packages, not just found ones
         });
@@ -35906,7 +36107,7 @@ var SchemaWatcher = class {
       persistent: true,
       ignoreInitial: true
     });
-    this.watcher.on("add", (path64) => this.handleFileEvent("add", path64)).on("change", (path64) => this.handleFileEvent("change", path64)).on("unlink", (path64) => this.handleFileEvent("unlink", path64)).on("error", (error) => this.handleError(error));
+    this.watcher.on("add", (path63) => this.handleFileEvent("add", path63)).on("change", (path63) => this.handleFileEvent("change", path63)).on("unlink", (path63) => this.handleFileEvent("unlink", path63)).on("error", (error) => this.handleError(error));
     this.logger.success("\u2705 Schema watcher started");
     this.logger.info(chalk.dim("  Press Ctrl+C to stop\n"));
   }
@@ -35927,23 +36128,23 @@ var SchemaWatcher = class {
   /**
    * Handle file system events with debouncing
    */
-  handleFileEvent(type, path64) {
-    const existingTimer = this.debounceTimers.get(path64);
+  handleFileEvent(type, path63) {
+    const existingTimer = this.debounceTimers.get(path63);
     if (existingTimer) {
       clearTimeout(existingTimer);
     }
     const timer = setTimeout(() => {
-      this.processFileEvent({ type, path: path64, timestamp: /* @__PURE__ */ new Date() });
-      this.debounceTimers.delete(path64);
+      this.processFileEvent({ type, path: path63, timestamp: /* @__PURE__ */ new Date() });
+      this.debounceTimers.delete(path63);
     }, this.options.debounceMs);
-    this.debounceTimers.set(path64, timer);
+    this.debounceTimers.set(path63, timer);
   }
   /**
    * Process file system event
    */
   async processFileEvent(event) {
-    const { type, path: path64 } = event;
-    const fileName = path64.split("/").pop() || path64;
+    const { type, path: path63 } = event;
+    const fileName = path63.split("/").pop() || path63;
     switch (type) {
       case "add":
         this.logger.info(chalk.green(`\u2795 Added: ${fileName}`));
@@ -35956,19 +36157,19 @@ var SchemaWatcher = class {
         return;
     }
     if (this.options.autoValidate) {
-      await this.validateFile(path64);
+      await this.validateFile(path63);
     }
   }
   /**
    * Validate schema file
    */
-  async validateFile(path64) {
+  async validateFile(path63) {
     try {
       this.logger.info(chalk.dim("  Validating..."));
-      const validationResult = await validateSchemaFile(path64);
+      const validationResult = await validateSchemaFile(path63);
       if (validationResult.isValid) {
         this.logger.success(chalk.green("  \u2713 Validation passed"));
-        const risks = await detectSchemaRisks(path64);
+        const risks = await detectSchemaRisks(path63);
         if (risks.length > 0) {
           this.logger.warn(`  \u26A0\uFE0F  ${risks.length} risk(s) detected`);
           for (const risk of risks) {
@@ -35983,7 +36184,7 @@ var SchemaWatcher = class {
         if (this.options.notifyOnError) {
           await notifyDesktop({
             title: "Schema Validation Failed",
-            message: `${validationResult.errors.length} error(s) in ${path64.split("/").pop()}`,
+            message: `${validationResult.errors.length} error(s) in ${path63.split("/").pop()}`,
             type: "error"
           });
         }
@@ -36202,7 +36403,7 @@ var TestWatcher = class {
       persistent: true,
       ignoreInitial: true
     });
-    this.watcher.on("add", (path64) => this.handleFileEvent("add", path64)).on("change", (path64) => this.handleFileEvent("change", path64)).on("unlink", (path64) => this.handleFileEvent("unlink", path64)).on("error", (error) => this.handleError(error));
+    this.watcher.on("add", (path63) => this.handleFileEvent("add", path63)).on("change", (path63) => this.handleFileEvent("change", path63)).on("unlink", (path63) => this.handleFileEvent("unlink", path63)).on("error", (error) => this.handleError(error));
     this.logger.success("\u2705 Test watcher started");
     this.logger.info(chalk.dim("  Press Ctrl+C to stop\n"));
   }
@@ -36223,26 +36424,26 @@ var TestWatcher = class {
   /**
    * Handle file system events with debouncing
    */
-  handleFileEvent(type, path64) {
-    const existingTimer = this.debounceTimers.get(path64);
+  handleFileEvent(type, path63) {
+    const existingTimer = this.debounceTimers.get(path63);
     if (existingTimer) {
       clearTimeout(existingTimer);
     }
     const timer = setTimeout(() => {
-      this.processFileEvent(type, path64);
-      this.debounceTimers.delete(path64);
+      this.processFileEvent(type, path63);
+      this.debounceTimers.delete(path63);
     }, this.options.debounceMs);
-    this.debounceTimers.set(path64, timer);
+    this.debounceTimers.set(path63, timer);
   }
   /**
    * Process file system event
    */
-  async processFileEvent(type, path64) {
+  async processFileEvent(type, path63) {
     if (this.isRunning) {
       this.logger.warn(chalk.yellow("\u23F3 Tests already running, skipping..."));
       return;
     }
-    const fileName = path64.split("/").pop() || path64;
+    const fileName = path63.split("/").pop() || path63;
     switch (type) {
       case "add":
         this.logger.info(chalk.green(`\u2795 Test added: ${fileName}`));
@@ -36255,7 +36456,7 @@ var TestWatcher = class {
         return;
     }
     if (this.options.autoRun) {
-      await this.runTests(path64);
+      await this.runTests(path63);
     }
   }
   /**