@runa-ai/runa-cli 0.5.52 → 0.5.53

package/dist/commands/build/machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../src/commands/build/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAS,MAAM,QAAQ,CAAC;AAe1D,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAe,MAAM,YAAY,CAAC;AAmPpF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAIL,UAAU;cAAY,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6nB9C,CAAC;AAMH,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC;AAC/C,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,YAAY,CAAC,CAAC;AAM9D;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAa5D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAE3D;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAE/D"}
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../src/commands/build/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAS,MAAM,QAAQ,CAAC;AAoB1D,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAe,MAAM,YAAY,CAAC;AAmPpF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAIL,UAAU;cAAY,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6nB9C,CAAC;AAMH,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC;AAC/C,MAAM,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,YAAY,CAAC,CAAC;AAM9D;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAE5D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAE3D;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAE/D"}

package/dist/commands/ci/machine/commands/ci-local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-local.d.ts","sourceRoot":"","sources":["../../../../../src/commands/ci/machine/commands/ci-local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgNpC,eAAO,MAAM,qBAAqB,SAe9B,CAAC"}
+{"version":3,"file":"ci-local.d.ts","sourceRoot":"","sources":["../../../../../src/commands/ci/machine/commands/ci-local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkNpC,eAAO,MAAM,qBAAqB,SAe9B,CAAC"}

package/dist/commands/ci/machine/commands/ci-pr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-pr.d.ts","sourceRoot":"","sources":["../../../../../src/commands/ci/machine/commands/ci-pr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmbpC,eAAO,MAAM,kBAAkB,SAmBN,CAAC"}
+{"version":3,"file":"ci-pr.d.ts","sourceRoot":"","sources":["../../../../../src/commands/ci/machine/commands/ci-pr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqbpC,eAAO,MAAM,kBAAkB,SAmBN,CAAC"}

package/dist/commands/ci/machine/commands/runtime-env.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Capture process environment as a plain string map.
+ *
+ * Filters out undefined values so callers can pass the result directly
+ * to command actor env inputs without widening types.
+ */
+export declare function captureRuntimeEnv(source?: NodeJS.ProcessEnv): Record<string, string>;
+//# sourceMappingURL=runtime-env.d.ts.map

package/dist/commands/ci/machine/commands/runtime-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-env.d.ts","sourceRoot":"","sources":["../../../../../src/commands/ci/machine/commands/runtime-env.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQjG"}

package/dist/commands/ci/machine/contract.d.ts

@@ -80,6 +80,7 @@ export declare const CiInputSchema: z.ZodObject<{
     verbose: z.ZodOptional<z.ZodBoolean>;
     productionDatabaseUrl: z.ZodOptional<z.ZodString>;
     databaseUrl: z.ZodOptional<z.ZodString>;
+    runtimeEnv: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     githubRef: z.ZodOptional<z.ZodString>;
     githubEventAction: z.ZodOptional<z.ZodString>;
     githubSha: z.ZodOptional<z.ZodString>;

package/dist/commands/ci/machine/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../../src/commands/ci/machine/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,YAAY;;;EAAsC,CAAC;AAChE,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,eAAO,MAAM,oBAAoB;;;EAAsC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,aAAa;;;EAA0B,CAAC;AACrD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,cAAc;;;EAA4B,CAAC;AACxD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,cAAc;;;;EAA6C,CAAC;AACzE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;;EAAqD,CAAC;AACnF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;EAA+D,CAAC;AAC9F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAM5D;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsFV,CAAC;AAEjB,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAMpD;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;iBAU5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAU9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;iBAY5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAM9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;iBAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;iBAY7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqBhB,CAAC;AAEZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAMtD;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM1E;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;iBAM1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;iBAI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;iBAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../../src/commands/ci/machine/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,YAAY;;;EAAsC,CAAC;AAChE,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD,eAAO,MAAM,oBAAoB;;;EAAsC,CAAC;AACxE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,aAAa;;;EAA0B,CAAC;AACrD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,cAAc;;;EAA4B,CAAC;AACxD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,cAAc;;;;EAA6C,CAAC;AACzE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,gBAAgB;;;;;EAAqD,CAAC;AACnF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,iBAAiB;;;;;;EAA+D,CAAC;AAC9F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAM5D;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwFV,CAAC;AAEjB,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAMpD;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;iBAU5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAU9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;iBAY5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAM9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;iBAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;iBAY7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqBhB,CAAC;AAEZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAMtD;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAKnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAM1E;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;iBAM1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;iBAI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;iBAK5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/commands/ci/machine/helpers.d.ts

@@ -90,6 +90,19 @@ export declare function getSupabaseUrlWithFallback(context: CiContext): string;
  * @returns Supabase anon key (from context or local default)
  */
 export declare function getSupabaseAnonKeyWithFallback(context: CiContext): string;
+export interface RuntimeEnvOptions {
+    enablePublicE2EFlag?: boolean;
+    enableServerE2EFlag?: boolean;
+    baseUrl?: string;
+}
+/**
+ * Build actor runtime env from captured input.
+ *
+ * The machine never reads process.env directly. Command entry points
+ * capture environment into CiInput.runtimeEnv and helpers compose
+ * per-state overrides here.
+ */
+export declare function buildRuntimeEnv(context: CiContext, options?: RuntimeEnvOptions): Record<string, string>;
 /**
  * Compute exit code based on layer results and classification.
  *

package/dist/commands/ci/machine/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/commands/ci/machine/helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAM5C,sCAAsC;AACtC,eAAO,MAAM,WAAW,oBAAqB,CAAC;AAE9C,6BAA6B;AAC7B,eAAO,MAAM,SAAS,IAAI,CAAC;AAM3B;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAOtF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAE7D;AAMD,+BAA+B;AAC/B,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEjF;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAC/B,MAAM,EACN;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,YAAY,GACvB,YAAY,CAEd;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC,GACD,YAAY,CAuBd;AAMD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAGnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAGrE;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAEzE;AAMD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,GACjE,CAAC,GAAG,CAAC,GAAG,CAAC,CAyBX"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/commands/ci/machine/helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAM5C,sCAAsC;AACtC,eAAO,MAAM,WAAW,oBAAqB,CAAC;AAE9C,6BAA6B;AAC7B,eAAO,MAAM,SAAS,IAAI,CAAC;AAM3B;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAOtF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAE7D;AAMD,+BAA+B;AAC/B,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEjF;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAC/B,MAAM,EACN;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CACF,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,YAAY,EACzB,UAAU,EAAE,YAAY,GACvB,YAAY,CAEd;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,KAAK,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC,GACD,YAAY,CAuBd;AAMD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAGnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAGrE;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAEzE;AAED,MAAM,WAAW,iBAAiB;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,EAClB,OAAO,GAAE,iBAAsB,GAC9B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBxB;AAMD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,GACjE,CAAC,GAAG,CAAC,GAAG,CAAC,CAyBX"}

package/dist/commands/ci/machine/machine.d.ts

@@ -184,6 +184,7 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
     verbose?: boolean | undefined;
     productionDatabaseUrl?: string | undefined;
     databaseUrl?: string | undefined;
+    runtimeEnv?: Record<string, string> | undefined;
     githubRef?: string | undefined;
     githubEventAction?: string | undefined;
     githubSha?: string | undefined;

package/dist/commands/ci/machine/machine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../../src/commands/ci/machine/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAS,MAAM,QAAQ,CAAC;AA8C1D,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAqB,MAAM,YAAY,CAAC;AAexE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAymCpB,CAAC;AAMH,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC;AACzC,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;AAMxD;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAYzD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAExD;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAE5D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAE3D"}
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../../../src/commands/ci/machine/machine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAU,KAAK,YAAY,EAAS,MAAM,QAAQ,CAAC;AAkD1D,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAqB,MAAM,YAAY,CAAC;AAexE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAslCpB,CAAC;AAMH,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC;AACzC,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,SAAS,CAAC,CAAC;AAMxD;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAExD;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAE5D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAE3D"}

package/dist/commands/db/utils/schema-detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-detector.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/schema-detector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;GAEG;AACH,eAAO,MAAM,gBAAgB,aAsB3B,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,CAoC/E;AAQD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAW7D"}
+{"version":3,"file":"schema-detector.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/schema-detector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH;;GAEG;AACH,eAAO,MAAM,gBAAgB,aAsB3B,CAAC;AA0GH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,CAmC/E;AAQD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAW7D"}

package/dist/commands/db/utils/sql-table-extractor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sql-table-extractor.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/sql-table-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAKV,UAAU,EACX,MAAM,yBAAyB,CAAC;AAghBjC,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sBAAsB;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAyHD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAkBvB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAKvB"}
+{"version":3,"file":"sql-table-extractor.d.ts","sourceRoot":"","sources":["../../../../src/commands/db/utils/sql-table-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,OAAO,KAAK,EAKV,UAAU,EACX,MAAM,yBAAyB,CAAC;AAm1BjC,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sBAAsB;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AA0HD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAkBvB;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,UAAU,EAAE,CAAC,CAKvB"}

package/dist/index.js

@@ -1161,7 +1161,7 @@ var CLI_VERSION, HAS_ADMIN_COMMAND;
 var init_version = __esm({
   "src/version.ts"() {
     init_esm_shims();
-    CLI_VERSION = "0.5.52";
+    CLI_VERSION = "0.5.53";
     HAS_ADMIN_COMMAND = false;
   }
 });
@@ -5351,6 +5351,87 @@ var BuildOutputSchema = z.object({
 // src/commands/build/machine.ts
 init_esm_shims();
 
+// src/internal/machines/index.ts
+init_esm_shims();
+
+// src/internal/machines/machine-runner.ts
+init_esm_shims();
+function getOutputOrThrow(snapshot2) {
+  const s = snapshot2;
+  if (s.output === void 0) {
+    throw new CLIError("Machine completed without output", "MACHINE_NO_OUTPUT", [
+      "Ensure the machine defines an `output:` function."
+    ]);
+  }
+  return s.output;
+}
+async function runMachine(params) {
+  const timeoutMs = params.timeoutMs ?? 10 * 60 * 1e3;
+  return new Promise((resolve12, reject) => {
+    const actor = createActor(params.machine, { input: params.input });
+    const timer = setTimeout(() => {
+      try {
+        actor.stop?.();
+      } catch {
+      }
+      reject(
+        new CLIError("Machine execution timed out", "MACHINE_TIMEOUT", [
+          `Timeout: ${timeoutMs}ms`,
+          "Consider increasing timeoutMs for long-running operations."
+        ])
+      );
+    }, timeoutMs);
+    const sub = actor.subscribe((snapshot2) => {
+      try {
+        params.onSnapshot?.(snapshot2);
+        const stateName = params.helpers.getStateName(snapshot2);
+        params.onTransition?.(stateName);
+        if (params.helpers.isComplete(snapshot2)) {
+          clearTimeout(timer);
+          sub.unsubscribe();
+          const out = getOutputOrThrow(snapshot2);
+          resolve12(out);
+        }
+      } catch (err) {
+        clearTimeout(timer);
+        sub.unsubscribe();
+        reject(err);
+      }
+    });
+    try {
+      actor.start();
+      actor.send({ type: "START" });
+    } catch (err) {
+      clearTimeout(timer);
+      sub.unsubscribe();
+      reject(err);
+    }
+  });
+}
+
+// src/internal/machines/snapshot-helpers.ts
+init_esm_shims();
+function getSnapshotStateName(snapshot2) {
+  if (typeof snapshot2.value === "string") {
+    return snapshot2.value;
+  }
+  if (!snapshot2.value || typeof snapshot2.value !== "object") {
+    return "unknown";
+  }
+  const entries = Object.entries(snapshot2.value);
+  if (entries.length === 0) {
+    return "unknown";
+  }
+  const [parent, child] = entries[0];
+  if (typeof child === "string") {
+    return `${parent}.${child}`;
+  }
+  return parent;
+}
+function isSnapshotComplete(snapshot2) {
+  return snapshot2.status === "done";
+}
+
 // src/commands/build/actors/index.ts
 init_esm_shims();
 
@@ -7350,20 +7431,10 @@ var buildMachine = setup({
   output: ({ context }) => createOutput(context)
 });
 function getStateName(snapshot2) {
-  if (typeof snapshot2.value === "string") {
-    return snapshot2.value;
-  }
-  const topLevel = Object.keys(snapshot2.value)[0];
-  if (topLevel && typeof snapshot2.value === "object") {
-    const nested = snapshot2.value[topLevel];
-    if (nested && typeof nested === "string") {
-      return `${topLevel}.${nested}`;
-    }
-  }
-  return topLevel ?? "unknown";
+  return getSnapshotStateName(snapshot2);
 }
 function isComplete(snapshot2) {
-  return snapshot2.status === "done";
+  return isSnapshotComplete(snapshot2);
 }
 
 // src/commands/build/commands/build.ts
@@ -9741,6 +9812,89 @@ var EXCLUDED_SCHEMAS = /* @__PURE__ */ new Set([
   "pgbouncer",
   "cron"
 ]);
+function stripSqlCommentsPreserveStrings(content) {
+  let result = "";
+  let i = 0;
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let inDollarQuote = false;
+  let dollarTag = "";
+  while (i < content.length) {
+    const char = content[i] ?? "";
+    const next = content[i + 1] ?? "";
+    if (!inSingleQuote && !inDoubleQuote && !inDollarQuote && char === "-" && next === "-") {
+      while (i < content.length && content[i] !== "\n") {
+        result += " ";
+        i++;
+      }
+      continue;
+    }
+    if (!inSingleQuote && !inDoubleQuote && !inDollarQuote && char === "/" && next === "*") {
+      result += " ";
+      result += " ";
+      i += 2;
+      while (i < content.length) {
+        const blockChar = content[i] ?? "";
+        const blockNext = content[i + 1] ?? "";
+        if (blockChar === "*" && blockNext === "/") {
+          result += " ";
+          result += " ";
+          i += 2;
+          break;
+        }
+        result += blockChar === "\n" ? "\n" : " ";
+        i++;
+      }
+      continue;
+    }
+    if (!inSingleQuote && !inDoubleQuote && char === "$") {
+      if (inDollarQuote) {
+        const closeTag = `$${dollarTag}$`;
+        if (content.slice(i).startsWith(closeTag)) {
+          result += closeTag;
+          i += closeTag.length;
+          inDollarQuote = false;
+          dollarTag = "";
+          continue;
+        }
+      } else {
+        const tagMatch = content.slice(i).match(/^\$([a-zA-Z_][a-zA-Z0-9_]*)?\$/);
+        if (tagMatch) {
+          inDollarQuote = true;
+          dollarTag = tagMatch[1] ?? "";
+          result += tagMatch[0];
+          i += tagMatch[0].length;
+          continue;
+        }
+      }
+    }
+    if (!inDoubleQuote && !inDollarQuote && char === "'") {
+      if (inSingleQuote && next === "'") {
+        result += "''";
+        i += 2;
+        continue;
+      }
+      inSingleQuote = !inSingleQuote;
+      result += char;
+      i++;
+      continue;
+    }
+    if (!inSingleQuote && !inDollarQuote && char === '"') {
+      if (inDoubleQuote && next === '"') {
+        result += '""';
+        i += 2;
+        continue;
+      }
+      inDoubleQuote = !inDoubleQuote;
+      result += char;
+      i++;
+      continue;
+    }
+    result += char;
+    i++;
+  }
+  return result;
+}
 function detectAppSchemas(schemasDir, verbose) {
   const schemas = /* @__PURE__ */ new Set(["public"]);
   if (!existsSync(schemasDir)) {
@@ -9749,12 +9903,13 @@ function detectAppSchemas(schemasDir, verbose) {
   const files = readdirSync(schemasDir).filter((f) => f.endsWith(".sql"));
   for (const file of files) {
     const content = readFileSync(join(schemasDir, file), "utf-8");
-    const contentWithoutComments = content.replace(/--[^\n]*/g, "").replace(/\/\*[\s\S]*?\*\//g, "");
+    const contentWithoutComments = stripSqlCommentsPreserveStrings(content);
     const matches = contentWithoutComments.matchAll(
-      /^\s*CREATE\s+SCHEMA\s+(?:IF\s+NOT\s+EXISTS\s+)?(\w+)/gim
+      /^\s*CREATE\s+SCHEMA\s+(?:IF\s+NOT\s+EXISTS\s+)?(?:"((?:[^"]|"")*)"|([a-zA-Z_][a-zA-Z0-9_]*))/gim
     );
     for (const match of Array.from(matches)) {
-      const schemaName = match[1].toLowerCase();
+      const schemaNameRaw = (match[1] ?? match[2] ?? "").replace(/""/g, '"');
+      const schemaName = schemaNameRaw.toLowerCase();
       if (!EXCLUDED_SCHEMAS.has(schemaName)) {
         schemas.add(schemaName);
       }
@@ -15067,6 +15222,24 @@ function getSupabaseUrlWithFallback(context) {
 function getSupabaseAnonKeyWithFallback(context) {
   return context.supabase?.anonKey || DEFAULT_LOCAL_ANON_KEY;
 }
+function buildRuntimeEnv(context, options = {}) {
+  const env2 = {
+    ...context.input.runtimeEnv ?? {},
+    DATABASE_URL: getDatabaseUrlForRuntime(context),
+    NEXT_PUBLIC_SUPABASE_URL: getSupabaseUrlWithFallback(context),
+    NEXT_PUBLIC_SUPABASE_ANON_KEY: getSupabaseAnonKeyWithFallback(context)
+  };
+  if (options.enablePublicE2EFlag) {
+    env2.NEXT_PUBLIC_E2E_TEST = "true";
+  }
+  if (options.enableServerE2EFlag) {
+    env2.E2E_TEST = "true";
+  }
+  if (options.baseUrl) {
+    env2.BASE_URL = options.baseUrl;
+  }
+  return env2;
+}
 function computeExitCodeFromLayerResults(layerResults) {
   const classification = getClassificationForProfile("runa-strict");
   const classificationMap = new Map(classification.map((c) => [c.layer, c.level]));
@@ -15555,7 +15728,7 @@ ${generateProgressCommentBody(progressInput)}`;
           tmpDir: assertTmpDir(context),
           // Execute if GH_DATABASE_URL_ADMIN is set (dry-run will determine if changes exist)
           // PRD: GH_DATABASE_URL_ADMIN = postgres role (DDL capable)
-          shouldExecute: !!(process.env.GH_DATABASE_URL_ADMIN || process.env.GH_DATABASE_URL)
+          shouldExecute: Boolean(context.input.productionDatabaseUrl?.trim())
         }),
         onDone: {
           target: "collectSchemaStats",
@@ -15747,14 +15920,10 @@ ${generateProgressCommentBody(progressInput)}`;
         input: ({ context }) => ({
           repoRoot: assertRepoRoot(context),
           tmpDir: assertTmpDir(context),
-          env: {
-            ...process.env,
-            DATABASE_URL: getDatabaseUrlForRuntime(context),
-            NEXT_PUBLIC_SUPABASE_URL: getSupabaseUrlWithFallback(context),
-            NEXT_PUBLIC_SUPABASE_ANON_KEY: getSupabaseAnonKeyWithFallback(context),
-            // CRITICAL: Required for XState Test Plugin to inject data-state attributes
-            NEXT_PUBLIC_E2E_TEST: "true"
-          },
+          env: buildRuntimeEnv(context, {
+            // Required for XState Test Plugin to inject data-state attributes.
+            enablePublicE2EFlag: true
+          }),
           isCI: context.input.isCI ?? false,
           skipPlaywright: shouldSkipPlaywrightInstall(context)
         }),
@@ -15805,16 +15974,11 @@ ${generateProgressCommentBody(progressInput)}`;
           tmpDir: assertTmpDir(context),
           appDir: context.app?.appDir ?? assertRepoRoot(context),
           port: context.app?.port ?? 3e3,
-          env: {
-            ...process.env,
-            DATABASE_URL: getDatabaseUrlForRuntime(context),
-            NEXT_PUBLIC_SUPABASE_URL: getSupabaseUrlWithFallback(context),
-            NEXT_PUBLIC_SUPABASE_ANON_KEY: getSupabaseAnonKeyWithFallback(context),
-            // CRITICAL: Required for middleware to bypass auth in E2E tests
-            // E2E_TEST is server-only (proxy.ts), NEXT_PUBLIC_E2E_TEST is for build-time (xstate-test-plugin)
-            E2E_TEST: "true",
-            NEXT_PUBLIC_E2E_TEST: "true"
-          }
+          env: buildRuntimeEnv(context, {
+            // E2E_TEST is server-only (proxy.ts), NEXT_PUBLIC_E2E_TEST is for build-time.
+            enableServerE2EFlag: true,
+            enablePublicE2EFlag: true
+          })
         }),
         onDone: [
           {
@@ -15919,12 +16083,7 @@ ${generateProgressCommentBody(progressInput)}`;
           // ci-local: all selected layers, ci-pr: only core layers (1,2,3)
           layers: getLayersForCorePhase(context.selectedLayers, context.mode),
           baseUrl: context.baseUrl ?? `http://localhost:${context.app?.port ?? 3e3}`,
-          env: {
-            ...process.env,
-            DATABASE_URL: getDatabaseUrlForRuntime(context),
-            NEXT_PUBLIC_SUPABASE_URL: getSupabaseUrlWithFallback(context),
-            NEXT_PUBLIC_SUPABASE_ANON_KEY: getSupabaseAnonKeyWithFallback(context)
-          },
+          env: buildRuntimeEnv(context),
           failFast: true
         }),
         onDone: [
@@ -16078,15 +16237,10 @@ ${generateCommentBody(commentInput)}`;
                     tmpDir: assertTmpDir(context),
                     layers: [E2E_LAYER],
                     baseUrl: e2eBaseUrl,
-                    env: {
-                      ...process.env,
-                      DATABASE_URL: getDatabaseUrlForRuntime(context),
-                      NEXT_PUBLIC_SUPABASE_URL: getSupabaseUrlWithFallback(context),
-                      NEXT_PUBLIC_SUPABASE_ANON_KEY: getSupabaseAnonKeyWithFallback(context),
-                      // CRITICAL: Set BASE_URL for Playwright config and test fixtures
-                      // This ensures cookies are set on the same domain Playwright uses
-                      BASE_URL: e2eBaseUrl
-                    },
+                    env: buildRuntimeEnv(context, {
+                      // Ensures cookies are set on the same domain Playwright uses.
+                      baseUrl: e2eBaseUrl
+                    }),
                     failFast: false
                     // Don't fail-fast for E2E (warning-only)
                   };
@@ -16280,19 +16434,10 @@ ${generateCommentBody(commentInput)}`;
   output: ({ context }) => createOutput3(context)
 });
 function getStateName3(snapshot2) {
-  const value = snapshot2.value;
-  if (typeof value === "string") return value;
-  const keys = Object.keys(value);
-  if (keys.length > 0) {
-    const parent = keys[0];
-    const child = value[parent];
-    if (typeof child === "string") return `${parent}.${child}`;
-    return parent;
-  }
-  return "unknown";
+  return getSnapshotStateName(snapshot2);
 }
 function isComplete3(snapshot2) {
-  return snapshot2.status === "done";
+  return isSnapshotComplete(snapshot2);
 }
 
 // src/commands/ci/machine/commands/machine-runner.ts
@@ -16541,6 +16686,18 @@ async function flushAndExit(exitCode) {
   process.exit(exitCode);
 }
 
+// src/commands/ci/machine/commands/runtime-env.ts
+init_esm_shims();
+function captureRuntimeEnv(source = process.env) {
+  const captured = {};
+  for (const [key, value] of Object.entries(source)) {
+    if (value !== void 0) {
+      captured[key] = value;
+    }
+  }
+  return captured;
+}
+
 // src/commands/ci/machine/commands/ci-local.ts
 var isGitHubActionsMode = false;
 var currentGroup = null;
@@ -16662,7 +16819,8 @@ function buildMachineInput(options) {
     dbMode: void 0,
     // PRD: GH_DATABASE_URL_ADMIN = postgres role (DDL capable, for pg_dump)
     productionDatabaseUrl: process.env.GH_DATABASE_URL_ADMIN || process.env.GH_DATABASE_URL,
-    databaseUrl: process.env.DATABASE_URL
+    databaseUrl: process.env.DATABASE_URL,
+    runtimeEnv: captureRuntimeEnv()
   };
 }
 function handleCiError(error, logger16) {
@@ -16728,6 +16886,8 @@ z.object({
   productionDatabaseUrl: z.string().optional(),
   /** Local database URL */
   databaseUrl: z.string().optional(),
+  /** Sanitized process.env captured at entry point */
+  runtimeEnv: z.record(z.string(), z.string()).optional(),
   // === GitHub Actions Environment ===
   /** GitHub ref (e.g., refs/pull/123/merge) */
   githubRef: z.string().optional(),
@@ -17179,6 +17339,7 @@ function optionsToMachineInput(options) {
     databaseUrl: process.env.DATABASE_URL,
     // PRD: GH_DATABASE_URL_ADMIN = postgres role (DDL capable, for pg-schema-diff dry-run)
     productionDatabaseUrl: process.env.GH_DATABASE_URL_ADMIN || process.env.GH_DATABASE_URL,
+    runtimeEnv: captureRuntimeEnv(),
     githubRef: process.env.GITHUB_REF,
     // FIX: Read action from GITHUB_EVENT_PATH JSON, not non-existent GITHUB_EVENT_ACTION env var
     githubEventAction: getGitHubEventAction(),
@@ -17425,21 +17586,35 @@ async function getSqlParserUtils() {
   await isAstParserAvailable();
   return sqlParserUtils;
 }
+var SQL_IDENTIFIER = String.raw`(?:"(?:[^"]|"")*"|[a-zA-Z_][a-zA-Z0-9_]*)`;
 var SQL_PATTERNS = {
   // CREATE TABLE [IF NOT EXISTS] schema.table_name (
-  createTable: /CREATE\s+TABLE\s+(?:IF\s+NOT\s+EXISTS\s+)?(\w+)\.(\w+)\s*\(/gi,
+  createTable: new RegExp(
+    `CREATE\\s+TABLE\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?(${SQL_IDENTIFIER})\\.(${SQL_IDENTIFIER})\\s*\\(`,
+    "gi"
+  ),
   // PRIMARY KEY (columns)
   primaryKey: /PRIMARY\s+KEY\s*\(([^)]+)\)/gi,
   // FOREIGN KEY (column) REFERENCES schema.table(column) [ON DELETE|UPDATE ...]
-  foreignKey: /FOREIGN\s+KEY\s*\((\w+)\)\s*REFERENCES\s+(\w+)\.(\w+)\s*\((\w+)\)(?:\s+ON\s+DELETE\s+(\w+(?:\s+\w+)?))?(?:\s+ON\s+UPDATE\s+(\w+(?:\s+\w+)?))?/gi,
+  foreignKey: new RegExp(
+    `FOREIGN\\s+KEY\\s*\\((${SQL_IDENTIFIER})\\)\\s*REFERENCES\\s+(${SQL_IDENTIFIER})\\.(${SQL_IDENTIFIER})\\s*\\((${SQL_IDENTIFIER})\\)(?:\\s+ON\\s+DELETE\\s+(\\w+(?:\\s+\\w+)?))?(?:\\s+ON\\s+UPDATE\\s+(\\w+(?:\\s+\\w+)?))?`,
+    "gi"
+  ),
   // REFERENCES schema.table(column) - inline column constraint
-  inlineReference: /(\w+)\s+\w+[^,]*REFERENCES\s+(\w+)\.(\w+)\s*\((\w+)\)/gi,
+  inlineReference: new RegExp(
+    `(${SQL_IDENTIFIER})\\s+\\w+[\\w\\s()]*REFERENCES\\s+(${SQL_IDENTIFIER})\\.(${SQL_IDENTIFIER})\\s*\\((${SQL_IDENTIFIER})\\)`,
+    "gi"
+  ),
   // CREATE [UNIQUE] INDEX name ON schema.table (columns)
-  createIndex: /CREATE\s+(UNIQUE\s+)?INDEX\s+(?:IF\s+NOT\s+EXISTS\s+)?(\w+)\s+ON\s+(\w+)\.(\w+)\s*\(([^)]+)\)/gi,
+  createIndex: new RegExp(
+    `CREATE\\s+(UNIQUE\\s+)?INDEX\\s+(?:IF\\s+NOT\\s+EXISTS\\s+)?(${SQL_IDENTIFIER})\\s+ON\\s+(${SQL_IDENTIFIER})\\.(${SQL_IDENTIFIER})\\s*\\(([^)]+)\\)`,
+    "gi"
+  ),
   // ALTER TABLE ... ENABLE ROW LEVEL SECURITY
-  enableRls: /ALTER\s+TABLE\s+(\w+)\.(\w+)\s+ENABLE\s+ROW\s+LEVEL\s+SECURITY/gi,
-  // CREATE POLICY name ON schema.table FOR command USING (...) [WITH CHECK (...)]
-  createPolicy: /CREATE\s+POLICY\s+"?(\w+)"?\s+ON\s+(\w+)\.(\w+)\s+(?:AS\s+\w+\s+)?FOR\s+(\w+)\s+(?:TO\s+\w+\s+)?(?:USING\s*\(([^)]+)\))?(?:\s+WITH\s+CHECK\s*\(([^)]+)\))?/gi
+  enableRls: new RegExp(
+    `ALTER\\s+TABLE\\s+(${SQL_IDENTIFIER})\\.(${SQL_IDENTIFIER})\\s+ENABLE\\s+ROW\\s+LEVEL\\s+SECURITY`,
+    "gi"
+  )
 };
 function snakeToCamel2(str) {
   return str.replace(/_([a-z])/g, (_, c) => c.toUpperCase());
@@ -17474,6 +17649,96 @@ function extractTableBody(content, startPos) {
 function normalizeType(type) {
   return type.trim().replace(/\s+/g, " ").toLowerCase().replace("character varying", "varchar").replace("timestamp with time zone", "timestamptz").replace("timestamp without time zone", "timestamp");
 }
+function unquoteIdentifier(identifier) {
+  const trimmed = identifier.trim();
+  if (trimmed.startsWith('"') && trimmed.endsWith('"')) {
+    return trimmed.slice(1, -1).replace(/""/g, '"');
+  }
+  return trimmed;
+}
+function stripSqlCommentsPreserveStrings2(content) {
+  let result = "";
+  let i = 0;
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let inDollarQuote = false;
+  let dollarTag = "";
+  while (i < content.length) {
+    const char = content[i] ?? "";
+    const next = content[i + 1] ?? "";
+    if (!inSingleQuote && !inDoubleQuote && !inDollarQuote && char === "-" && next === "-") {
+      while (i < content.length && content[i] !== "\n") {
+        result += " ";
+        i++;
+      }
+      continue;
+    }
+    if (!inSingleQuote && !inDoubleQuote && !inDollarQuote && char === "/" && next === "*") {
+      result += " ";
+      result += " ";
+      i += 2;
+      while (i < content.length) {
+        const blockChar = content[i] ?? "";
+        const blockNext = content[i + 1] ?? "";
+        if (blockChar === "*" && blockNext === "/") {
+          result += " ";
+          result += " ";
+          i += 2;
+          break;
+        }
+        result += blockChar === "\n" ? "\n" : " ";
+        i++;
+      }
+      continue;
+    }
+    if (!inSingleQuote && !inDoubleQuote && char === "$") {
+      if (inDollarQuote) {
+        const closeTag = `$${dollarTag}$`;
+        if (content.slice(i).startsWith(closeTag)) {
+          result += closeTag;
+          i += closeTag.length;
+          inDollarQuote = false;
+          dollarTag = "";
+          continue;
+        }
+      } else {
+        const tagMatch = content.slice(i).match(/^\$([a-zA-Z_][a-zA-Z0-9_]*)?\$/);
+        if (tagMatch) {
+          inDollarQuote = true;
+          dollarTag = tagMatch[1] ?? "";
+          result += tagMatch[0];
+          i += tagMatch[0].length;
+          continue;
+        }
+      }
+    }
+    if (!inDoubleQuote && !inDollarQuote && char === "'") {
+      if (inSingleQuote && next === "'") {
+        result += "''";
+        i += 2;
+        continue;
+      }
+      inSingleQuote = !inSingleQuote;
+      result += char;
+      i++;
+      continue;
+    }
+    if (!inSingleQuote && !inDollarQuote && char === '"') {
+      if (inDoubleQuote && next === '"') {
+        result += '""';
+        i += 2;
+        continue;
+      }
+      inDoubleQuote = !inDoubleQuote;
+      result += char;
+      i++;
+      continue;
+    }
+    result += char;
+    i++;
+  }
+  return result;
+}
 function parseIndexColumns(rawColumns) {
   return rawColumns.split(",").map((col) => {
     const trimmed = col.trim();
@@ -17510,8 +17775,8 @@ function findTablesRegex(ctx) {
   const tables = [];
   const regex = new RegExp(SQL_PATTERNS.createTable.source, "gi");
   for (const match of ctx.content.matchAll(regex)) {
-    const schema = match[1] ?? "";
-    const name = match[2] ?? "";
+    const schema = unquoteIdentifier(match[1] ?? "");
+    const name = unquoteIdentifier(match[2] ?? "");
     if (!schema || !name) continue;
     const lineNumber = getLineNumber(ctx.content, match.index ?? 0);
     const tableBody = extractTableBody(ctx.content, match.index ?? 0);
@@ -17533,10 +17798,10 @@ function parseColumnsRegex(tableBody) {
     const trimmed = line.trim();
     if (shouldSkipColumnLine(trimmed)) continue;
     const columnMatch = trimmed.match(
-      /^(\w+)\s+([\w\s()]+?)(?:\s+(NOT\s+NULL|NULL))?(?:\s+DEFAULT\s+[^,]+)?(?:\s+REFERENCES)?(?:,|$)/i
+      /^((?:"(?:[^"]|"")*"|[a-zA-Z_][a-zA-Z0-9_]*))\s+([\w\s()]+?)(?:\s+(NOT\s+NULL|NULL))?(?:\s+DEFAULT\s+[^,]+)?(?:\s+REFERENCES)?(?:,|$)/i
     );
     if (columnMatch) {
-      const name = columnMatch[1] ?? "";
+      const name = unquoteIdentifier(columnMatch[1] ?? "");
       if (!name || seen.has(name) || isReservedKeyword(name)) continue;
       seen.add(name);
       const rawType = columnMatch[2] ?? "";
@@ -17558,7 +17823,7 @@ function parsePrimaryKeyRegex(tableBody) {
   const regex = new RegExp(SQL_PATTERNS.primaryKey.source, "gi");
   const match = regex.exec(tableBody);
   if (match) {
-    return match[1]?.split(",").map((col) => col.trim());
+    return match[1]?.split(",").map((col) => unquoteIdentifier(col.trim())).filter(Boolean) ?? [];
   }
   return [];
 }
@@ -17566,12 +17831,12 @@ function parseExplicitForeignKeys(tableBody) {
   const fks = [];
   const fkRegex = new RegExp(SQL_PATTERNS.foreignKey.source, "gi");
   for (const match of tableBody.matchAll(fkRegex)) {
-    const column = match[1] ?? "";
-    const refTable = match[4] ?? "";
+    const column = unquoteIdentifier(match[1] ?? "");
+    const refTable = unquoteIdentifier(match[4] ?? "");
     if (!column || !refTable) continue;
     fks.push({
       column,
-      referencesTable: `${match[2] ?? ""}.${match[3] ?? ""}`,
+      referencesTable: `${unquoteIdentifier(match[2] ?? "")}.${unquoteIdentifier(match[3] ?? "")}`,
       referencesColumn: refTable,
       onDelete: normalizeOnAction(match[5]),
       onUpdate: normalizeOnAction(match[6])
@@ -17583,13 +17848,13 @@ function parseInlineForeignKeys(tableBody, existingColumns) {
   const fks = [];
   const inlineRegex = new RegExp(SQL_PATTERNS.inlineReference.source, "gi");
   for (const match of tableBody.matchAll(inlineRegex)) {
-    const inlineCol = match[1] ?? "";
+    const inlineCol = unquoteIdentifier(match[1] ?? "");
     if (existingColumns.has(inlineCol)) continue;
-    const inlineRefCol = match[4] ?? "";
+    const inlineRefCol = unquoteIdentifier(match[4] ?? "");
     if (!inlineCol || !inlineRefCol) continue;
     fks.push({
       column: inlineCol,
-      referencesTable: `${match[2] ?? ""}.${match[3] ?? ""}`,
+      referencesTable: `${unquoteIdentifier(match[2] ?? "")}.${unquoteIdentifier(match[3] ?? "")}`,
       referencesColumn: inlineRefCol
     });
   }
@@ -17605,8 +17870,10 @@ function parseIndexesRegex(content, schema, tableName) {
   const indexes = [];
   const regex = new RegExp(SQL_PATTERNS.createIndex.source, "gi");
   for (const match of content.matchAll(regex)) {
-    if (match[3] === schema && match[4] === tableName) {
-      const indexName = match[2] ?? "";
+    const indexSchema = unquoteIdentifier(match[3] ?? "");
+    const indexTable = unquoteIdentifier(match[4] ?? "");
+    if (indexSchema === schema && indexTable === tableName) {
+      const indexName = unquoteIdentifier(match[2] ?? "");
       if (!indexName) continue;
       const rawColumns = match[5] ?? "";
       indexes.push({
@@ -17621,26 +17888,200 @@ function parseIndexesRegex(content, schema, tableName) {
 function hasRlsEnabledRegex(content, schema, tableName) {
   const regex = new RegExp(SQL_PATTERNS.enableRls.source, "gi");
   for (const match of content.matchAll(regex)) {
-    if (match[1] === schema && match[2] === tableName) {
+    const matchSchema = unquoteIdentifier(match[1] ?? "");
+    const matchTable = unquoteIdentifier(match[2] ?? "");
+    if (matchSchema === schema && matchTable === tableName) {
       return true;
     }
   }
   return false;
 }
+function extractCreatePolicyStatements(content) {
+  const statements = [];
+  const startRegex = /\bCREATE\s+POLICY\b/gi;
+  let match;
+  while ((match = startRegex.exec(content)) !== null) {
+    const startIndex = match.index ?? 0;
+    const endIndex = findSqlStatementEndForPolicy(content, startIndex);
+    statements.push(content.slice(startIndex, endIndex).trim());
+  }
+  return statements;
+}
+function findSqlStatementEndForPolicy(content, startIndex) {
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let inDollarQuote = false;
+  let dollarTag = "";
+  for (let i = startIndex; i < content.length; i++) {
+    const char = content[i] ?? "";
+    const next = content[i + 1] ?? "";
+    if (!inSingleQuote && !inDoubleQuote && !inDollarQuote) {
+      if (char === "-" && next === "-") {
+        const newlineIndex = content.indexOf("\n", i);
+        if (newlineIndex === -1) return content.length;
+        i = newlineIndex;
+        continue;
+      }
+      if (char === "/" && next === "*") {
+        const closeIndex = content.indexOf("*/", i + 2);
+        if (closeIndex === -1) return content.length;
+        i = closeIndex + 1;
+        continue;
+      }
+    }
+    if (!inSingleQuote && !inDoubleQuote && char === "$") {
+      if (inDollarQuote) {
+        const closeTag = `$${dollarTag}$`;
+        if (content.slice(i).startsWith(closeTag)) {
+          i += closeTag.length - 1;
+          inDollarQuote = false;
+          dollarTag = "";
+          continue;
+        }
+      } else {
+        const tagMatch = content.slice(i).match(/^\$([a-zA-Z_][a-zA-Z0-9_]*)?\$/);
+        if (tagMatch) {
+          inDollarQuote = true;
+          dollarTag = tagMatch[1] ?? "";
+          i += tagMatch[0].length - 1;
+          continue;
+        }
+      }
+    }
+    if (!inDoubleQuote && !inDollarQuote && char === "'") {
+      if (inSingleQuote) {
+        if (next === "'") {
+          i++;
+          continue;
+        }
+        inSingleQuote = false;
+      } else {
+        inSingleQuote = true;
+      }
+      continue;
+    }
+    if (!inSingleQuote && !inDollarQuote && char === '"') {
+      if (inDoubleQuote) {
+        if (next === '"') {
+          i++;
+          continue;
+        }
+        inDoubleQuote = false;
+      } else {
+        inDoubleQuote = true;
+      }
+      continue;
+    }
+    if (!inSingleQuote && !inDoubleQuote && !inDollarQuote && char === ";") {
+      return i + 1;
+    }
+  }
+  return content.length;
+}
+function extractBalancedClause(statement, startIndex) {
+  const openParenIndex = statement.indexOf("(", startIndex);
+  if (openParenIndex === -1) return void 0;
+  let depth = 0;
+  let clauseStart = -1;
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let inDollarQuote = false;
+  let dollarTag = "";
+  for (let i = openParenIndex; i < statement.length; i++) {
+    const char = statement[i] ?? "";
+    const next = statement[i + 1] ?? "";
+    if (!inSingleQuote && !inDoubleQuote && !inDollarQuote) {
+      if (char === "-" && next === "-") {
+        const newlineIndex = statement.indexOf("\n", i);
+        if (newlineIndex === -1) break;
+        i = newlineIndex;
+        continue;
+      }
+      if (char === "/" && next === "*") {
+        const closeIndex = statement.indexOf("*/", i + 2);
+        if (closeIndex === -1) break;
+        i = closeIndex + 1;
+        continue;
+      }
+    }
+    if (!inSingleQuote && !inDoubleQuote && char === "$") {
+      if (inDollarQuote) {
+        const closeTag = `$${dollarTag}$`;
+        if (statement.slice(i).startsWith(closeTag)) {
+          i += closeTag.length - 1;
+          inDollarQuote = false;
+          dollarTag = "";
+          continue;
+        }
+      } else {
+        const tagMatch = statement.slice(i).match(/^\$([a-zA-Z_][a-zA-Z0-9_]*)?\$/);
+        if (tagMatch) {
+          inDollarQuote = true;
+          dollarTag = tagMatch[1] ?? "";
+          i += tagMatch[0].length - 1;
+          continue;
+        }
+      }
+    }
+    if (!inDoubleQuote && !inDollarQuote && char === "'") {
+      if (inSingleQuote) {
+        if (next === "'") {
+          i++;
+          continue;
+        }
+        inSingleQuote = false;
+      } else {
+        inSingleQuote = true;
+      }
+      continue;
+    }
+    if (!inSingleQuote && !inDollarQuote && char === '"') {
+      if (inDoubleQuote) {
+        if (next === '"') {
+          i++;
+          continue;
+        }
+        inDoubleQuote = false;
+      } else {
+        inDoubleQuote = true;
+      }
+      continue;
+    }
+    if (inSingleQuote || inDoubleQuote || inDollarQuote) continue;
+    if (char === "(") {
+      if (depth === 0) clauseStart = i + 1;
+      depth++;
+    } else if (char === ")") {
+      depth--;
+      if (depth === 0 && clauseStart !== -1) {
+        return statement.slice(clauseStart, i).trim();
+      }
+    }
+  }
+  return void 0;
+}
 function parsePoliciesRegex(content, schema, tableName) {
   const policies = [];
-  const regex = new RegExp(SQL_PATTERNS.createPolicy.source, "gi");
-  for (const match of content.matchAll(regex)) {
-    const policyName = match[1] ?? "";
-    if (!policyName) continue;
-    if (match[2] === schema && match[3] === tableName) {
-      policies.push({
-        name: policyName,
-        command: match[4]?.toUpperCase(),
-        using: match[5] || void 0,
-        withCheck: match[6] || void 0
-      });
-    }
+  const statements = extractCreatePolicyStatements(content);
+  const headerRegex = new RegExp(
+    `^\\s*CREATE\\s+POLICY\\s+(?:"((?:[^"]|"")*)"|([a-zA-Z_][a-zA-Z0-9_]*))\\s+ON\\s+(${SQL_IDENTIFIER})\\.(${SQL_IDENTIFIER})(?:\\s+AS\\s+\\w+)?(?:\\s+FOR\\s+(\\w+))?`,
+    "i"
+  );
+  for (const statement of statements) {
+    const match = statement.match(headerRegex);
+    if (!match) continue;
+    const policyName = unquoteIdentifier(match[1] ?? match[2] ?? "");
+    const policySchema = unquoteIdentifier(match[3] ?? "");
+    const policyTable = unquoteIdentifier(match[4] ?? "");
+    if (!policyName || policySchema !== schema || policyTable !== tableName) continue;
+    const usingIndex = statement.search(/\bUSING\s*\(/i);
+    const withCheckIndex = statement.search(/\bWITH\s+CHECK\s*\(/i);
+    policies.push({
+      name: policyName,
+      command: (match[5] || "ALL").toUpperCase(),
+      using: usingIndex !== -1 ? extractBalancedClause(statement, usingIndex) : void 0,
+      withCheck: withCheckIndex !== -1 ? extractBalancedClause(statement, withCheckIndex) : void 0
+    });
   }
   return policies;
 }
@@ -17741,7 +18182,8 @@ function buildTableEntryRegex(table, content, filePath, opts) {
   };
 }
 function processTablesFromFileRegex(filePath, opts, seen) {
-  const content = readFileSync(filePath, "utf-8");
+  const rawContent = readFileSync(filePath, "utf-8");
+  const content = stripSqlCommentsPreserveStrings2(rawContent);
   const ctx = { content, lines: content.split("\n") };
   const tables = findTablesRegex(ctx);
   const entries = [];
@@ -20938,64 +21380,6 @@ var diffVisualCommand = new Command("diff-visual").description("Visualize schema
 // src/commands/db/commands/db-drizzle.ts
 init_esm_shims();
 
-// src/internal/machines/index.ts
-init_esm_shims();
-
-// src/internal/machines/machine-runner.ts
-init_esm_shims();
-function getOutputOrThrow(snapshot2) {
-  const s = snapshot2;
-  if (s.output === void 0) {
-    throw new CLIError("Machine completed without output", "MACHINE_NO_OUTPUT", [
-      "Ensure the machine defines an `output:` function."
-    ]);
-  }
-  return s.output;
-}
-async function runMachine(params) {
-  const timeoutMs = params.timeoutMs ?? 10 * 60 * 1e3;
-  return new Promise((resolve12, reject) => {
-    const actor = createActor(params.machine, { input: params.input });
-    const timer = setTimeout(() => {
-      try {
-        actor.stop?.();
-      } catch {
-      }
-      reject(
-        new CLIError("Machine execution timed out", "MACHINE_TIMEOUT", [
-          `Timeout: ${timeoutMs}ms`,
-          "Consider increasing timeoutMs for long-running operations."
-        ])
-      );
-    }, timeoutMs);
-    const sub = actor.subscribe((snapshot2) => {
-      try {
-        params.onSnapshot?.(snapshot2);
-        const stateName = params.helpers.getStateName(snapshot2);
-        params.onTransition?.(stateName);
-        if (params.helpers.isComplete(snapshot2)) {
-          clearTimeout(timer);
-          sub.unsubscribe();
-          const out = getOutputOrThrow(snapshot2);
-          resolve12(out);
-        }
-      } catch (err) {
-        clearTimeout(timer);
-        sub.unsubscribe();
-        reject(err);
-      }
-    });
-    try {
-      actor.start();
-      actor.send({ type: "START" });
-    } catch (err) {
-      clearTimeout(timer);
-      sub.unsubscribe();
-      reject(err);
-    }
-  });
-}
-
 // src/utils/execution-plan.ts
 init_esm_shims();
 function getChangeIcon(type) {
@@ -21266,6 +21650,10 @@ var RISK_PATTERNS = [
 function normalizeContent(content) {
   return content.replace(/--[^\n]*/g, " ").replace(/\/\*[\s\S]*?\*\//g, " ").replace(/\s+/g, " ").trim();
 }
+function stripSqlCommentsPreserveLines(content) {
+  const lineMasked = content.replace(/--[^\n]*/g, (match) => " ".repeat(match.length));
+  return lineMasked.replace(/\/\*[\s\S]*?\*\//g, (match) => match.replace(/[^\n]/g, " "));
+}
 function maskWrapperFunctions(content) {
   const wrapperPattern = /CREATE\s+(?:OR\s+REPLACE\s+)?FUNCTION\s+(?:public\.)?runa_auth_\w+\s*\([^)]*\)[^$]*(\$[a-zA-Z_]*\$)[\s\S]*?\1;?/gi;
   return content.replace(wrapperPattern, "/* WRAPPER_FUNCTION_MASKED */");
@@ -21280,6 +21668,9 @@ function findLineNumber(originalContent, matchText) {
   const beforeMatch = originalContent.substring(0, match.index);
   return beforeMatch.split("\n").length;
 }
+function lineNumberFromIndex(content, index) {
+  return content.substring(0, Math.max(0, index)).split("\n").length;
+}
 function detectRisksFromContent(normalizedContent, originalContent) {
   const risks = [];
   const seenDescriptions = /* @__PURE__ */ new Set();
@@ -21302,18 +21693,18 @@ function detectRisksFromContent(normalizedContent, originalContent) {
   }
   return risks;
 }
-function detectForeignKeyRisks(lines) {
+function detectForeignKeyRisks(originalContent) {
   const risks = [];
-  const fkPattern = /REFERENCES\s+[\w."]+\s*\(/i;
-  for (let i = 0; i < lines.length; i++) {
-    if (fkPattern.test(lines[i])) {
-      risks.push({
-        level: "low",
-        description: "Foreign key columns should have indexes",
-        mitigation: "Add index on foreign key column for better performance",
-        line: i + 1
-      });
-    }
+  const fkPattern = /REFERENCES\s+[\w."]+\s*\(/gi;
+  const contentWithoutComments = stripSqlCommentsPreserveLines(originalContent);
+  let match;
+  while ((match = fkPattern.exec(contentWithoutComments)) !== null) {
+    risks.push({
+      level: "low",
+      description: "Foreign key columns should have indexes",
+      mitigation: "Add index on foreign key column for better performance",
+      line: lineNumberFromIndex(originalContent, match.index ?? 0)
+    });
   }
   return risks;
 }
@@ -21325,9 +21716,8 @@ async function detectSchemaRisks(filePath) {
     const content = await readFile(filePath, "utf-8");
     const maskedContent = maskWrapperFunctions(content);
     const normalizedContent = normalizeContent(maskedContent);
-    const lines = content.split("\n");
     const contentRisks = detectRisksFromContent(normalizedContent, content);
-    const fkRisks = detectForeignKeyRisks(lines);
+    const fkRisks = detectForeignKeyRisks(content);
     return [...contentRisks, ...fkRisks];
   } catch (_error) {
     return [];

package/dist/internal/machines/index.d.ts

@@ -6,5 +6,6 @@
  * - Keep command handlers thin and consistent.
  */
 export { runMachine } from './machine-runner.js';
+export { getSnapshotError, getSnapshotStateName, isSnapshotComplete } from './snapshot-helpers.js';
 export type { StateE2EMeta } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/internal/machines/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/machines/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/machines/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACnG,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/internal/machines/snapshot-helpers.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Shared snapshot helpers for CLI XState machines.
+ */
+type SnapshotWithValue = {
+    value: unknown;
+};
+type SnapshotWithStatus = {
+    status: string;
+};
+type SnapshotWithError = {
+    context: {
+        error: string | null;
+    };
+};
+/**
+ * Convert snapshot value to a stable state name.
+ *
+ * Supports flat states ("idle") and compound states ({ setup: "depsInstall" }).
+ */
+export declare function getSnapshotStateName(snapshot: SnapshotWithValue): string;
+/**
+ * Check if a snapshot has reached final status.
+ */
+export declare function isSnapshotComplete(snapshot: SnapshotWithStatus): boolean;
+/**
+ * Extract normalized machine error from snapshot context.
+ */
+export declare function getSnapshotError(snapshot: SnapshotWithError): string | null;
+export {};
+//# sourceMappingURL=snapshot-helpers.d.ts.map

package/dist/internal/machines/snapshot-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-helpers.d.ts","sourceRoot":"","sources":["../../../src/internal/machines/snapshot-helpers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,KAAK,iBAAiB,GAAG;IACvB,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC;CACH,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,CAmBxE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAExE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAE3E"}

package/dist/validators/risk-detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"risk-detector.d.ts","sourceRoot":"","sources":["../../src/validators/risk-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAoOD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAwB/E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG;IACpD,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,GAAG,EAAE,UAAU,EAAE,CAAC;CACnB,CAMA"}
+{"version":3,"file":"risk-detector.d.ts","sourceRoot":"","sources":["../../src/validators/risk-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAuPD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAuB/E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG;IACpD,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,GAAG,EAAE,UAAU,EAAE,CAAC;CACnB,CAMA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runa-ai/runa-cli",
-  "version": "0.5.52",
+  "version": "0.5.53",
   "private": false,
   "description": "AI-powered DevOps CLI",
   "type": "module",
@@ -53,8 +53,8 @@
     "typescript": "5.9.3",
     "xstate": "5.25.0",
     "zod": "4.3.5",
-    "@runa-ai/runa": "0.5.44",
-    "@runa-ai/runa-xstate-test-plugin": "0.5.35"
+    "@runa-ai/runa-xstate-test-plugin": "0.5.35",
+    "@runa-ai/runa": "0.5.44"
   },
   "engines": {
     "node": ">=20.0.0"