@runa-ai/runa-cli 0.5.71 → 0.6.0

package/dist/commands/ci/machine/formatters/sections/format-helpers.d.ts

@@ -5,6 +5,7 @@
  * Pattern: Pure functions - input → formatted string
  */
 import type { LayerResult } from '../../types.js';
+import type { GitHubEnv } from '../github-comment-types.js';
 import { BLOCKING_LAYERS } from '../github-comment-types.js';
 /**
  * Format duration in human-readable format.
@@ -54,6 +55,10 @@ export { BLOCKING_LAYERS };
  * Returns true if layers 0-3 are all 'passed' or 'skipped'.
  */
 export declare function checkBlockingLayersPassed(layerResults: Record<number, LayerResult>): boolean;
+/**
+ * Get GitHub environment from process.env.
+ */
+export declare function getGitHubEnv(): GitHubEnv;
 /**
  * Format skipped layers section for PR comment.
  *

package/dist/commands/ci/machine/formatters/sections/index.d.ts

@@ -3,8 +3,8 @@
  *
  * Purpose: Export all section generators for GitHub PR comments
  */
-export { generateCommentBody, getGitHubEnv } from './final-comment.js';
-export { BLOCKING_LAYERS, checkBlockingLayersPassed, formatDuration, formatGitDiffDetails, formatLayerResults, formatSingleLayer, formatSqlDetails, getStatusIcon, } from './format-helpers.js';
+export { generateCommentBody } from './final-comment.js';
+export { BLOCKING_LAYERS, checkBlockingLayersPassed, formatDuration, formatGitDiffDetails, formatLayerResults, formatSingleLayer, formatSqlDetails, getGitHubEnv, getStatusIcon, } from './format-helpers.js';
 export { generateProgressCommentBody } from './progress-comment.js';
 export { formatSchemaMatrix } from './schema-matrix.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/commands/ci/machine/machine-execution-helpers.d.ts

@@ -0,0 +1,40 @@
+import type { InstallPgTapInput } from './actors/db/pgtap-install.js';
+import type { SetupRolesInput } from './actors/db/setup-roles.js';
+import type { RunLayersInput, RunLayersOutput } from './actors/test/run-layers.js';
+import type { CiContext, LayerResult } from './types.js';
+export declare function createInstallPgTapInput(context: CiContext): InstallPgTapInput;
+export declare function createSetupRolesInput(context: CiContext): SetupRolesInput;
+export declare function mergeSetupRolesSupabase(context: CiContext, appDatabaseUrl?: string): {
+    appDatabaseUrl: string | undefined;
+    supabaseUrl: string;
+    anonKey: string;
+    databaseUrlRaw: string;
+};
+export declare function createStaticChecksInput(context: CiContext): {
+    repoRoot: string;
+    tmpDir: string;
+};
+export declare function createBuildAndPlaywrightInput(context: CiContext): {
+    repoRoot: string;
+    tmpDir: string;
+    env: Record<string, string>;
+    isCI: boolean;
+    skipPlaywright: boolean;
+};
+export declare function createAppStartInput(context: CiContext): {
+    repoRoot: string;
+    tmpDir: string;
+    appDir: string;
+    port: number;
+    env: Record<string, string>;
+};
+export declare function createCapabilitiesInput(context: CiContext): {
+    repoRoot: string;
+    tmpDir: string;
+    databaseUrlApp: string;
+    baseUrl: string;
+    selectedLayers: number[];
+};
+export declare function createRunCoreTestsInput(context: CiContext): RunLayersInput;
+export declare function deriveCoreLayerResults(output: RunLayersOutput): Record<number, LayerResult>;
+//# sourceMappingURL=machine-execution-helpers.d.ts.map

package/dist/commands/ci/machine/machine-state-helpers.d.ts

@@ -0,0 +1,14 @@
+import type { LayerContentResult } from '../commands/ci-layer-content.js';
+import type { UpsertCommentInput } from './actors/finalize/github.js';
+import type { WriteSummaryInput } from './actors/finalize/summary.js';
+import type { RunLayersInput } from './actors/test/run-layers.js';
+import type { CiContext } from './types.js';
+export declare const CI_COMMENT_MARKER = "<!-- runa-ci-report -->";
+export declare function filterRunnableLayers(selectedLayers: number[], layerContent: LayerContentResult | null | undefined): number[];
+export declare function extractLayerSkipReasons(layerContent: LayerContentResult | null | undefined): Record<number, string>;
+export declare function createInitialCommentRequest(context: CiContext): UpsertCommentInput;
+export declare function createIntermediateCommentRequest(context: CiContext): UpsertCommentInput;
+export declare function createFinalCommentRequest(context: CiContext): UpsertCommentInput;
+export declare function createWriteSummaryRequest(context: CiContext): WriteSummaryInput;
+export declare function createE2ERunLayersInput(context: CiContext): RunLayersInput;
+//# sourceMappingURL=machine-state-helpers.d.ts.map

package/dist/commands/ci/machine/machine.d.ts

@@ -46,7 +46,7 @@
 import { type SnapshotFrom } from 'xstate';
 import type { CiContext, CiEvent } from './types.js';
 export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent, {
-    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").StaticChecksOutput, import("./index.js").StaticChecksInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").CapabilitiesOutput, import("./index.js").CapabilitiesInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").AppStartOutput, import("./index.js").AppStartInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").SyncSchemaOutput, import("./index.js").SyncSchemaInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").ApplySeedsOutput, import("./index.js").ApplySeedsInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").ProductionPreviewOutput, import("./index.js").ProductionPreviewInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").PlaywrightInstallOutput, import("./index.js").PlaywrightInstallInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup/local.js").LocalSetupOutput, import("./actors/setup/local.js").LocalSetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup/pr-local.js").PrLocalSetupOutput, import("./actors/setup/pr-local.js").PrLocalSetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").ResetDbOutput, import("./index.js").ResetDbInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").PullProductionOutput, import("./index.js").PullProductionInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").CollectSchemaStatsOutput, import("./index.js").CollectSchemaStatsInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").SetupRolesOutput, import("./index.js").SetupRolesInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").InstallPgTapOutput, import("./index.js").InstallPgTapInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").AppBuildOutput, import("./index.js").AppBuildInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").BuildAndPlaywrightOutput, import("./index.js").BuildAndPlaywrightInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").RunLayersOutput, import("./index.js").RunLayersInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").WriteSummaryOutput, import("./index.js").WriteSummaryInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").UpsertCommentOutput, import("./index.js").UpsertCommentInput, import("xstate").EventObject>> | undefined;
+    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").StaticChecksOutput, import("./index.js").StaticChecksInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").CapabilitiesOutput, import("./index.js").CapabilitiesInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").AppStartOutput, import("./index.js").AppStartInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").PlaywrightInstallOutput, import("./index.js").PlaywrightInstallInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").SyncSchemaOutput, import("./index.js").SyncSchemaInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").ApplySeedsOutput, import("./index.js").ApplySeedsInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").ProductionPreviewOutput, import("./index.js").ProductionPreviewInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup/local.js").LocalSetupOutput, import("./actors/setup/local.js").LocalSetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./actors/setup/pr-local.js").PrLocalSetupOutput, import("./actors/setup/pr-local.js").PrLocalSetupInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").ResetDbOutput, import("./index.js").ResetDbInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").PullProductionOutput, import("./index.js").PullProductionInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").CollectSchemaStatsOutput, import("./index.js").CollectSchemaStatsInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").SetupRolesOutput, import("./index.js").SetupRolesInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").InstallPgTapOutput, import("./index.js").InstallPgTapInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").AppBuildOutput, import("./index.js").AppBuildInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").BuildAndPlaywrightOutput, import("./index.js").BuildAndPlaywrightInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").RunLayersOutput, import("./index.js").RunLayersInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").WriteSummaryOutput, import("./index.js").WriteSummaryInput, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<import("./index.js").UpsertCommentOutput, import("./index.js").UpsertCommentInput, import("xstate").EventObject>> | undefined;
 }, {
     src: "staticChecks";
     logic: import("xstate").PromiseActorLogic<import("./index.js").StaticChecksOutput, import("./index.js").StaticChecksInput, import("xstate").EventObject>;
@@ -59,6 +59,10 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
     src: "appStart";
     logic: import("xstate").PromiseActorLogic<import("./index.js").AppStartOutput, import("./index.js").AppStartInput, import("xstate").EventObject>;
     id: string | undefined;
+} | {
+    src: "playwrightInstall";
+    logic: import("xstate").PromiseActorLogic<import("./index.js").PlaywrightInstallOutput, import("./index.js").PlaywrightInstallInput, import("xstate").EventObject>;
+    id: string | undefined;
 } | {
     src: "syncSchema";
     logic: import("xstate").PromiseActorLogic<import("./index.js").SyncSchemaOutput, import("./index.js").SyncSchemaInput, import("xstate").EventObject>;
@@ -71,10 +75,6 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
     src: "productionPreview";
     logic: import("xstate").PromiseActorLogic<import("./index.js").ProductionPreviewOutput, import("./index.js").ProductionPreviewInput, import("xstate").EventObject>;
     id: string | undefined;
-} | {
-    src: "playwrightInstall";
-    logic: import("xstate").PromiseActorLogic<import("./index.js").PlaywrightInstallOutput, import("./index.js").PlaywrightInstallInput, import("xstate").EventObject>;
-    id: string | undefined;
 } | {
     src: "localSetup";
     logic: import("xstate").PromiseActorLogic<import("./actors/setup/local.js").LocalSetupOutput, import("./actors/setup/local.js").LocalSetupInput, import("xstate").EventObject>;
@@ -168,14 +168,14 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
 } | {
     type: "allTestsPassed";
     params: unknown;
-}, never, "failed" | "done" | "staticChecks" | "idle" | "capabilities" | "appStart" | "syncSchema" | "applySeeds" | "productionPreview" | "pullProduction" | "collectSchemaStats" | "setupRoles" | "installPgTap" | "buildAndPlaywright" | "initialComment" | "dbReset" | "decidePath" | "runCoreTests" | "coreTestsFailed" | "coreTestsComplete" | {
+}, never, "done" | "failed" | "staticChecks" | "idle" | "capabilities" | "appStart" | "syncSchema" | "applySeeds" | "productionPreview" | "pullProduction" | "collectSchemaStats" | "setupRoles" | "installPgTap" | "buildAndPlaywright" | "initialComment" | "dbReset" | "decidePath" | "runCoreTests" | "coreTestsFailed" | "coreTestsComplete" | {
     setup: "local" | "resolving" | "prLocal" | "complete";
 } | {
     finalize: "writeSummary" | "complete" | "postComment";
 } | {
     e2ePhase: {
         intermediateComment: "done" | "checking" | "posting";
-        e2eTests: "running" | "done";
+        e2eTests: "done" | "running";
     };
 }, string, {
     [x: string]: unknown;
@@ -204,7 +204,7 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
     output?: "json" | "human" | undefined;
     config?: string | undefined;
     phase?: "all" | "test" | undefined;
-    dbMode?: "local" | "auto" | undefined;
+    dbMode?: "auto" | "local" | undefined;
     branchName?: string | undefined;
     skipStaticChecks?: boolean | undefined;
     skipBuild?: boolean | undefined;
@@ -217,16 +217,16 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
     layers?: number[] | undefined;
 }, {
     mode: "ci-local" | "ci-pr-local";
-    status: "timeout" | "success" | "failure" | "cancelled";
+    status: "success" | "timeout" | "failure" | "cancelled";
     repoKind: "unknown" | "monorepo" | "pj-repo";
     steps: Record<string, {
-        status: "timeout" | "passed" | "failed" | "skipped";
+        status: "timeout" | "skipped" | "failed" | "passed";
         exitCode?: number | undefined;
         logPath?: string | undefined;
         error?: string | undefined;
     }>;
     layers: Record<number, {
-        status: "timeout" | "passed" | "failed" | "skipped" | "killed";
+        status: "killed" | "timeout" | "skipped" | "failed" | "passed";
         exitCode: number;
         passed?: number | undefined;
         total?: number | undefined;
@@ -234,7 +234,7 @@ export declare const ciMachine: import("xstate").StateMachine<CiContext, CiEvent
         flaky?: number | undefined;
         logPath?: string | undefined;
         description?: string | undefined;
-        level?: "blocking" | "warning" | "reportOnly" | undefined;
+        level?: "warning" | "blocking" | "reportOnly" | undefined;
     }>;
     durationMs: number;
     exitCode: 0 | 1 | 2;

package/dist/commands/ci/machine/types.d.ts

@@ -221,11 +221,6 @@ export declare function createInitialContext(input: CiInput): CiContext;
  * Create output from context.
  */
 export declare function createOutput(context: CiContext): CiOutput;
-/**
- * Extract error message from unknown error value.
- * Generic helper for try-catch blocks in actors.
- */
-export declare function getErrorMessage(error: unknown): string;
 /**
  * Extract error message from XState onError event.
  * Used in onError handlers throughout the machine.

package/dist/commands/ci/utils/ci-summary.d.ts

@@ -7,25 +7,25 @@
  */
 import { z } from 'zod';
 export declare const CiLayerStatusSchema: z.ZodEnum<{
+    killed: "killed";
     timeout: "timeout";
-    passed: "passed";
-    failed: "failed";
     skipped: "skipped";
-    killed: "killed";
+    failed: "failed";
+    passed: "passed";
 }>;
 export type CiLayerStatus = z.output<typeof CiLayerStatusSchema>;
 export declare const LayerBlockingLevelSchema: z.ZodEnum<{
-    blocking: "blocking";
     warning: "warning";
+    blocking: "blocking";
     reportOnly: "reportOnly";
 }>;
 export type LayerBlockingLevel = z.output<typeof LayerBlockingLevelSchema>;
 export declare const CiStepStatusSchema: z.ZodEnum<{
+    killed: "killed";
     timeout: "timeout";
-    passed: "passed";
-    failed: "failed";
     skipped: "skipped";
-    killed: "killed";
+    failed: "failed";
+    passed: "passed";
 }>;
 export type CiStepStatus = z.output<typeof CiStepStatusSchema>;
 export declare const CiSummarySchema: z.ZodObject<{
@@ -39,8 +39,8 @@ export declare const CiSummarySchema: z.ZodObject<{
         "ci prod-apply": "ci prod-apply";
     }>;
     status: z.ZodEnum<{
-        timeout: "timeout";
         success: "success";
+        timeout: "timeout";
         failure: "failure";
         cancelled: "cancelled";
     }>;
@@ -55,22 +55,22 @@ export declare const CiSummarySchema: z.ZodObject<{
     detected: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     steps: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         status: z.ZodEnum<{
+            killed: "killed";
             timeout: "timeout";
-            passed: "passed";
-            failed: "failed";
             skipped: "skipped";
-            killed: "killed";
+            failed: "failed";
+            passed: "passed";
         }>;
         exitCode: z.ZodOptional<z.ZodNumber>;
         logPath: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>>;
     layers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         status: z.ZodEnum<{
+            killed: "killed";
             timeout: "timeout";
-            passed: "passed";
-            failed: "failed";
             skipped: "skipped";
-            killed: "killed";
+            failed: "failed";
+            passed: "passed";
         }>;
         exitCode: z.ZodNumber;
         logPath: z.ZodOptional<z.ZodString>;
@@ -78,8 +78,8 @@ export declare const CiSummarySchema: z.ZodObject<{
         passed: z.ZodOptional<z.ZodNumber>;
         total: z.ZodOptional<z.ZodNumber>;
         level: z.ZodOptional<z.ZodEnum<{
-            blocking: "blocking";
             warning: "warning";
+            blocking: "blocking";
             reportOnly: "reportOnly";
         }>>;
     }, z.core.$strict>>>;

package/dist/commands/ci/utils/execa-helpers.d.ts

@@ -14,5 +14,6 @@ export declare function runLogged(params: {
     command: string;
     args: string[];
     logFile: string;
+    timeoutMs?: number;
 }): ResultPromise;
 //# sourceMappingURL=execa-helpers.d.ts.map

package/dist/commands/db/apply/actors/idempotent-actors.d.ts

@@ -0,0 +1,34 @@
+import type { DbApplyInput } from '../contract.js';
+import { type ApplyResult } from './shared.js';
+/**
+ * Classify whether a psql error is deferrable (missing dependency) or not.
+ * Non-deferrable errors (syntax, permission) fail immediately in 1st pass.
+ */
+export declare function isDeferrableError(stderr: string): boolean;
+/**
+ * Apply idempotent schemas (extensions, RBAC, cleanup) and set role passwords.
+ *
+ * @param pass - 'pre' = 1st pass (graceful skip on error), 'post' = 2nd pass (strict)
+ */
+export declare const applyIdempotentSchemas: import("xstate").PromiseActorLogic<ApplyResult, {
+    input: DbApplyInput;
+    targetDir: string;
+    pass: "pre" | "post";
+}, import("xstate").EventObject>;
+export interface IdempotentPreviewResult {
+    files: string[];
+    riskSummary: {
+        high: number;
+        medium: number;
+        low: number;
+    };
+}
+/**
+ * Preview idempotent schema files and their risks in check mode.
+ * Does NOT apply anything — only lists files and runs risk detection.
+ */
+export declare const previewIdempotentSchemas: import("xstate").PromiseActorLogic<IdempotentPreviewResult, {
+    input: DbApplyInput;
+    targetDir: string;
+}, import("xstate").EventObject>;
+//# sourceMappingURL=idempotent-actors.d.ts.map

package/dist/commands/db/apply/actors/lock-actors.d.ts

@@ -0,0 +1,16 @@
+import type { DbApplyInput } from '../contract.js';
+/**
+ * Acquire advisory lock to protect the entire migration lifecycle.
+ */
+export declare const acquireLock: import("xstate").PromiseActorLogic<{
+    acquired: boolean;
+}, {
+    input: DbApplyInput;
+}, import("xstate").EventObject>;
+/**
+ * Release advisory lock after the migration lifecycle completes.
+ */
+export declare const releaseLock: import("xstate").PromiseActorLogic<void, {
+    input: DbApplyInput;
+}, import("xstate").EventObject>;
+//# sourceMappingURL=lock-actors.d.ts.map

package/dist/commands/db/apply/actors/pg-schema-diff-actors.d.ts

@@ -0,0 +1,31 @@
+import type { DbApplyInput } from '../contract.js';
+import { type PgSchemaDiffResult } from '../helpers/fresh-db-handler.js';
+export type { PgSchemaDiffResult } from '../helpers/fresh-db-handler.js';
+/**
+ * Apply schema changes using pg-schema-diff (or direct psql for fresh DB).
+ *
+ * Extension Support:
+ * If pgSchemaDiff.shadowDbExtensions is configured in runa.config.ts,
+ * creates a shadow database with those extensions installed for type resolution.
+ * This enables pg-schema-diff to recognize extension-defined types like
+ * PostGIS geometry or pgvector vector.
+ *
+ * @see https://github.com/stripe/pg-schema-diff/pull/194
+ */
+export declare const applyPgSchemaDiff: import("xstate").PromiseActorLogic<PgSchemaDiffResult, {
+    input: DbApplyInput;
+    targetDir: string;
+}, import("xstate").EventObject>;
+/**
+ * Validate that expected partitions (from idempotent/*.sql) exist in the database.
+ *
+ * Non-blocking: failures are logged as warnings, never cause the pipeline to fail.
+ * This runs after the 2nd idempotent pass so all partitions should exist.
+ */
+export declare const validatePartitions: import("xstate").PromiseActorLogic<{
+    warnings: string[];
+}, {
+    input: DbApplyInput;
+    targetDir: string;
+}, import("xstate").EventObject>;
+//# sourceMappingURL=pg-schema-diff-actors.d.ts.map

package/dist/commands/db/apply/actors/seed-actors.d.ts

@@ -0,0 +1,11 @@
+import type { DbApplyInput } from '../contract.js';
+/**
+ * Apply seeds.
+ */
+export declare const applySeeds: import("xstate").PromiseActorLogic<{
+    applied: boolean;
+}, {
+    input: DbApplyInput;
+    targetDir: string;
+}, import("xstate").EventObject>;
+//# sourceMappingURL=seed-actors.d.ts.map

package/dist/commands/db/apply/actors/shared.d.ts

@@ -0,0 +1,9 @@
+import type { DbApplyInput } from '../contract.js';
+export declare const logger: import("@runa-ai/runa").CLILogger;
+export interface ApplyResult {
+    filesApplied: number;
+    filesSkipped: number;
+    rolePasswordsSet: number;
+}
+export declare function getDbUrl(input: DbApplyInput): string;
+//# sourceMappingURL=shared.d.ts.map

package/dist/commands/db/apply/actors.d.ts

@@ -1,70 +1,21 @@
-import type { DbApplyInput } from './contract.js';
-export interface ApplyResult {
-    filesApplied: number;
-    filesSkipped: number;
-    rolePasswordsSet: number;
-}
-export interface PgSchemaDiffResult {
-    sql: string;
-    hazards: string[];
-    applied: boolean;
-    /** Number of retry attempts made (for metrics) */
-    retryAttempts?: number;
-    /** Total time spent waiting between retries (ms) */
-    retryWaitMs?: number;
-    /** Number of pre-apply data compatibility violations detected */
-    dataViolations?: number;
-    /** Warning when SSOT enforcement had issues (schemas applied but cleanup incomplete) */
-    ssotWarning?: string;
-}
 /**
- * Apply idempotent schemas (extensions, RBAC, cleanup) and set role passwords.
+ * AI HINT: db apply Actors (Barrel Re-export)
  *
- * Flow:
- * 1. Apply idempotent/*.sql files (includes 15_rbac_roles.sql for ROLE creation)
- * 2. Set passwords for drizzle_app/drizzle_service if env vars present
+ * Purpose: Re-export all actors from split modules for backward compatibility.
+ * Consumers use `import * as actors from './actors.js'` (namespace import).
  *
- * @param pass - 'pre' = 1st pass (graceful skip on error), 'post' = 2nd pass (strict)
+ * Split modules:
+ * - actors/shared.ts: Shared utilities (logger, ApplyResult, helpers)
+ * - actors/lock-actors.ts: Advisory lock actors (acquireLock, releaseLock)
+ * - actors/idempotent-actors.ts: Idempotent schema actors + isDeferrableError
+ * - actors/pg-schema-diff-actors.ts: pg-schema-diff actors + partition validation
+ * - actors/seed-actors.ts: Seed application actor
  */
-export declare const applyIdempotentSchemas: import("xstate").PromiseActorLogic<ApplyResult, {
-    input: DbApplyInput;
-    targetDir: string;
-    pass: "pre" | "post";
-}, import("xstate").EventObject>;
-/**
- * Apply schema changes using pg-schema-diff (or direct psql for fresh DB).
- *
- * Extension Support:
- * If pgSchemaDiff.shadowDbExtensions is configured in runa.config.ts,
- * creates a shadow database with those extensions installed for type resolution.
- * This enables pg-schema-diff to recognize extension-defined types like
- * PostGIS geometry or pgvector vector.
- *
- * @see https://github.com/stripe/pg-schema-diff/pull/194
- */
-export declare const applyPgSchemaDiff: import("xstate").PromiseActorLogic<PgSchemaDiffResult, {
-    input: DbApplyInput;
-    targetDir: string;
-}, import("xstate").EventObject>;
-/**
- * Validate that expected partitions (from idempotent/*.sql) exist in the database.
- *
- * Non-blocking: failures are logged as warnings, never cause the pipeline to fail.
- * This runs after the 2nd idempotent pass so all partitions should exist.
- */
-export declare const validatePartitions: import("xstate").PromiseActorLogic<{
-    warnings: string[];
-}, {
-    input: DbApplyInput;
-    targetDir: string;
-}, import("xstate").EventObject>;
-/**
- * Apply seeds.
- */
-export declare const applySeeds: import("xstate").PromiseActorLogic<{
-    applied: boolean;
-}, {
-    input: DbApplyInput;
-    targetDir: string;
-}, import("xstate").EventObject>;
+export type { ApplyResult } from './actors/shared.js';
+export { acquireLock, releaseLock } from './actors/lock-actors.js';
+export { isDeferrableError, applyIdempotentSchemas, previewIdempotentSchemas, } from './actors/idempotent-actors.js';
+export type { IdempotentPreviewResult } from './actors/idempotent-actors.js';
+export { applyPgSchemaDiff, validatePartitions, } from './actors/pg-schema-diff-actors.js';
+export type { PgSchemaDiffResult } from './actors/pg-schema-diff-actors.js';
+export { applySeeds } from './actors/seed-actors.js';
 //# sourceMappingURL=actors.d.ts.map

package/dist/commands/db/apply/contract.d.ts

@@ -49,10 +49,17 @@ export declare const DbApplyOutputSchema: z.ZodObject<{
     seedsApplied: z.ZodBoolean;
     error: z.ZodOptional<z.ZodString>;
     planSql: z.ZodOptional<z.ZodString>;
+    filteredPlanSql: z.ZodOptional<z.ZodString>;
     checkOnly: z.ZodOptional<z.ZodBoolean>;
     dataViolations: z.ZodOptional<z.ZodNumber>;
     ssotWarning: z.ZodOptional<z.ZodString>;
     partitionWarnings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    idempotentFiles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    idempotentRisks: z.ZodOptional<z.ZodObject<{
+        high: z.ZodNumber;
+        medium: z.ZodNumber;
+        low: z.ZodNumber;
+    }, z.core.$strip>>;
     metrics: z.ZodOptional<z.ZodObject<{
         totalMs: z.ZodNumber;
         idempotentMs: z.ZodOptional<z.ZodNumber>;
@@ -60,6 +67,6 @@ export declare const DbApplyOutputSchema: z.ZodObject<{
         seedMs: z.ZodOptional<z.ZodNumber>;
         retryAttempts: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export type DbApplyOutput = z.infer<typeof DbApplyOutputSchema>;
 //# sourceMappingURL=contract.d.ts.map

package/dist/commands/db/apply/helpers/data-compatibility-checker.d.ts

@@ -13,7 +13,7 @@
  * Performance: All queries use LIMIT 100000 subquery cap + 10s timeout.
  */
 import type { ValidatedPlan } from './plan-validator.js';
-export type DataViolationType = 'not_null' | 'type_cast' | 'check_constraint' | 'unique_constraint';
+export type DataViolationType = 'not_null' | 'type_cast' | 'check_constraint' | 'unique_constraint' | 'query_error' | 'timeout';
 export interface DataViolation {
     statementIndex: number;
     sql: string;
@@ -30,6 +30,8 @@ export interface DataCompatibilityResult {
     checkedStatements: number;
     skippedStatements: number;
     errors: string[];
+    /** Number of validation queries that failed (query errors + timeouts) */
+    queryErrorCount: number;
 }
 /**
  * Parse SET NOT NULL from ALTER TABLE statement.
@@ -101,8 +103,5 @@ export declare function checkDataCompatibility(dbUrl: string, plan: ValidatedPla
     verbose?: boolean;
     timeout?: number;
 }): DataCompatibilityResult;
-/**
- * Display data compatibility results to the user.
- */
 export declare function displayDataCompatibilityResults(result: DataCompatibilityResult, verbose: boolean): void;
 //# sourceMappingURL=data-compatibility-checker.d.ts.map

package/dist/commands/db/apply/helpers/data-integrity-verifier.d.ts

@@ -0,0 +1,37 @@
+/**
+ * AI HINT: Data Integrity Verifier
+ *
+ * Purpose: Pre/post-apply data integrity checks for schema migrations.
+ * Detects unexpected data loss by comparing row count estimates before and after apply.
+ *
+ * Layers:
+ * 1. Pre-apply backup (production only) — pg_dump idempotent-managed tables
+ * 2. Pre-apply row estimate capture (pg_class.reltuples)
+ * 3. Post-apply row estimate comparison
+ *    - Full loss (N→0): CRITICAL error (unless --allow-data-loss)
+ *    - >50% reduction: WARNING log
+ *
+ * Safety: Non-fatal backup failures log warnings but never block apply.
+ */
+/**
+ * Backup idempotent-managed table data before applying schema changes.
+ * Non-fatal: backup failure logs a warning but does NOT block apply.
+ * Only runs for production deployments.
+ */
+export declare function backupIdempotentTables(dbUrl: string, protectedTables: string[], verbose: boolean): {
+    backupPath: string | null;
+};
+/**
+ * Get estimated row counts for all app tables using pg_class.reltuples.
+ * Fast (no sequential scan) and sufficient for integrity checks.
+ */
+export declare function getTableRowEstimates(dbUrl: string, schemasDir: string, verbose: boolean): Map<string, number>;
+/**
+ * Verify data integrity after schema apply.
+ * Compares pre-apply and post-apply row estimates.
+ *
+ * - Full data loss (N→0 where N>0): CRITICAL error (throws)
+ * - >50% reduction: WARNING log (informational)
+ */
+export declare function verifyDataIntegrity(dbUrl: string, schemasDir: string, preApplyCounts: Map<string, number>, verbose: boolean, allowDataLoss?: boolean): void;
+//# sourceMappingURL=data-integrity-verifier.d.ts.map

package/dist/commands/db/apply/helpers/fresh-db-handler.d.ts

@@ -0,0 +1,34 @@
+/**
+ * AI HINT: Fresh DB Detection and Direct Schema Application
+ *
+ * Purpose: Detect if a database is fresh (no app tables) and apply schemas directly
+ * via psql instead of pg-schema-diff for faster initial setup.
+ *
+ * Flow:
+ * 1. checkFreshDb() — detect if DB has app tables (whitelist/fallback strategies)
+ * 2. handleFreshDbCase() — if fresh, apply declarative/*.sql directly + SSOT cleanup
+ *
+ * Safety: Fail-safe — if all detection fails, assumes existing DB (uses pg-schema-diff).
+ */
+import type { DbApplyInput } from '../contract.js';
+export interface PgSchemaDiffResult {
+    sql: string;
+    hazards: string[];
+    applied: boolean;
+    filteredPlanSql?: string;
+    retryAttempts?: number;
+    retryWaitMs?: number;
+    dataViolations?: number;
+    ssotWarning?: string;
+}
+/**
+ * Check if DB has app tables.
+ * Returns true if existing DB (has tables), false if fresh DB.
+ */
+export declare function hasAppTables(dbUrl: string, schemasDir?: string, customSql?: string, verbose?: boolean): boolean;
+/**
+ * Handle fresh DB case - apply schemas directly, then use pg-schema-diff for SSOT cleanup.
+ * Returns null if the DB is NOT fresh (existing DB — caller should use pg-schema-diff).
+ */
+export declare function handleFreshDbCase(input: DbApplyInput, dbUrl: string, targetDir: string, pgSchemaDiffDir?: string): PgSchemaDiffResult | null;
+//# sourceMappingURL=fresh-db-handler.d.ts.map