@runa-ai/runa-cli 0.6.0 → 0.7.1

package/dist/{dev-A7RW6XQV.js → dev-5YXNPTCJ.js}

@@ -1,22 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
+import { generateTablesManifest, writeEnvLocalBridge } from './chunk-FHG3ILE4.js';
 import { startAppBackground, waitForAppReady, detectApp } from './chunk-HD74F6W2.js';
-import { writeEnvLocalBridge } from './chunk-M47WJJVS.js';
-import { supabaseStartActor, envCheckActor, depsInstallActor, detectDatabase } from './chunk-HPYJPB5Y.js';
-import { init_local_supabase, detectLocalSupabasePorts } from './chunk-VM3IWOT5.js';
+import './chunk-7B5C6U2K.js';
+import { manifestActor, supabaseStartActor, envCheckActor, depsInstallActor, detectManifestTask, detectDatabase } from './chunk-2APB25TT.js';
+import { findRepoRoot } from './chunk-3WDV32GA.js';
+import './chunk-6FAU4IGR.js';
+import { createMachineStateChangeLogger } from './chunk-5FT3F36G.js';
+import './chunk-II7VYQEM.js';
+import { init_local_supabase, buildLocalDatabaseUrl, detectLocalSupabasePorts } from './chunk-VM3IWOT5.js';
 import { secureExeca } from './chunk-RZLYEO4U.js';
-import { emitJsonSuccess } from './chunk-UU55OH7P.js';
-import './chunk-RRGQCUKT.js';
-import './chunk-JT5SUTWE.js';
+import { emitJsonSuccess } from './chunk-KE6QJBZG.js';
+import './chunk-WJXC4MVY.js';
 import './chunk-HKUWEGUX.js';
+import './chunk-5NKWR4FF.js';
+import './chunk-JMJP4A47.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { createCLILogger, CLIError } from '@runa-ai/runa';
 import { Command } from 'commander';
 import { fromPromise, setup, assign, createActor } from 'xstate';
-import { existsSync, rmSync, readFileSync, unlinkSync } from 'fs';
-import path4 from 'path';
 import { z } from 'zod';
 import net from 'net';
+import { existsSync, rmSync, readFileSync, unlinkSync } from 'fs';
+import path3 from 'path';
 import { mkdir } from 'fs/promises';
 
 createRequire(import.meta.url);
@@ -67,6 +73,31 @@ init_esm_shims();
 // src/commands/dev/actors/index.ts
 init_esm_shims();
 
+// src/commands/dev/actors/tables-manifest.ts
+init_esm_shims();
+init_local_supabase();
+var tablesManifestActor = fromPromise(
+  async ({ input }) => {
+    const startTime = Date.now();
+    try {
+      await generateTablesManifest(input.repoRoot, {
+        databaseUrl: buildLocalDatabaseUrl(input.repoRoot)
+      });
+      return {
+        passed: true,
+        durationMs: Date.now() - startTime
+      };
+    } catch (error) {
+      const errorMessage = error instanceof Error ? error.message : String(error);
+      return {
+        passed: false,
+        durationMs: Date.now() - startTime,
+        error: `Tables manifest refresh failed: ${errorMessage}`
+      };
+    }
+  }
+);
+
 // src/commands/dev/actors/process-check.ts
 init_esm_shims();
 
@@ -303,7 +334,7 @@ async function recoverPortConflict(port, portError) {
 }
 var processCheckActor = fromPromise(
   async ({ input }) => {
-    const pidFile = path4.join(input.repoRoot, input.tmpDir, "app.pid");
+    const pidFile = path3.join(input.repoRoot, input.tmpDir, "app.pid");
     let staleProcessRecovered = false;
     await handlePidFile(pidFile, input.replace);
     if (!input.skipApp) {
@@ -322,9 +353,9 @@ init_esm_shims();
 var appStartActor = fromPromise(
   async ({ input }) => {
     const { repoRoot, appDir, port, tmpDir, stream, bundler } = input;
-    const fullTmpDir = path4.join(repoRoot, tmpDir);
+    const fullTmpDir = path3.join(repoRoot, tmpDir);
     await mkdir(fullTmpDir, { recursive: true });
-    const nextDir = path4.join(appDir, ".next");
+    const nextDir = path3.join(appDir, ".next");
     if (existsSync(nextDir)) {
       rmSync(nextDir, { recursive: true, force: true });
       console.log("[runa dev] Cleaned .next cache for fresh start");
@@ -367,9 +398,23 @@ function shouldSkipDb({ context }) {
 function shouldSkipApp({ context }) {
   return context.input.skipApp;
 }
+function shouldSkipManifest({ context }) {
+  return context.input.skipApp || !context.hasManifestTask;
+}
+function shouldSkipTablesManifest({ context }) {
+  return context.input.skipApp || context.input.skipDb || !context.hasDatabase || !context.supabaseStarted;
+}
+function phaseFailed({
+  event
+}) {
+  return event?.output?.passed === false;
+}
 var guards = {
   shouldSkipDb,
-  shouldSkipApp
+  shouldSkipApp,
+  shouldSkipManifest,
+  shouldSkipTablesManifest,
+  phaseFailed
 };
 
 // src/commands/dev/types.ts
@@ -423,6 +468,26 @@ var e2eMeta = {
     assertions: ["expect(log).toContain('Starting app')", "expect(ctx.appPid).toBeGreaterThan(0)"],
     nextStates: ["running", "failed"]
   },
+  manifest: {
+    description: "Refresh manifest.json before starting the dev app",
+    severity: "blocking",
+    observables: {
+      log: "Refreshing manifest",
+      fs: ".runa/manifests/manifest.json updated"
+    },
+    assertions: ["expect(log).toContain('Refreshing manifest')"],
+    nextStates: ["appStart", "failed"]
+  },
+  tablesManifest: {
+    description: "Refresh tables.json from the local database before starting the dev app",
+    severity: "blocking",
+    observables: {
+      log: "Refreshing tables manifest",
+      fs: ".runa/manifests/tables.json updated"
+    },
+    assertions: ["expect(log).toContain('Refreshing tables manifest')"],
+    nextStates: ["manifest", "failed"]
+  },
   running: {
     description: "Dev server running until STOP signal",
     severity: "non-critical",
@@ -477,12 +542,17 @@ var devMachine = setup({
     depsInstall: depsInstallActor,
     envCheck: envCheckActor,
     supabaseStart: supabaseStartActor,
+    tablesManifest: tablesManifestActor,
+    manifest: manifestActor,
     appStart: appStartActor,
     shutdown: shutdownActor
   },
   guards: {
     shouldSkipDb: guards.shouldSkipDb,
-    shouldSkipApp: guards.shouldSkipApp
+    shouldSkipApp: guards.shouldSkipApp,
+    shouldSkipTablesManifest: guards.shouldSkipTablesManifest,
+    shouldSkipManifest: guards.shouldSkipManifest,
+    phaseFailed: guards.phaseFailed
   }
 }).createMachine({
   id: "dev",
@@ -495,6 +565,7 @@ var devMachine = setup({
       repoRoot,
       tmpDir: ".runa/tmp/dev",
       hasDatabase: detectDatabase(repoRoot),
+      hasManifestTask: detectManifestTask(repoRoot),
       appPid: null,
       supabaseStarted: false,
       staleProcessRecovered: false,
@@ -600,7 +671,66 @@ var devMachine = setup({
           type: "final"
         }
       },
-      onDone: [{ guard: "shouldSkipApp", target: "running" }, { target: "appStart" }]
+      onDone: [{ guard: "shouldSkipApp", target: "running" }, { target: "tablesManifest" }]
+    },
+    // ============================================================
+    // Tables Manifest Refresh Phase
+    // ============================================================
+    tablesManifest: {
+      meta: { e2e: e2eMeta.tablesManifest },
+      always: [{ guard: "shouldSkipTablesManifest", target: "manifest" }],
+      invoke: {
+        src: "tablesManifest",
+        input: ({ context }) => ({
+          repoRoot: context.repoRoot
+        }),
+        onDone: [
+          {
+            guard: "phaseFailed",
+            target: "failed",
+            actions: assign({
+              error: ({ event }) => event.output.error ?? "Tables manifest refresh failed during dev startup"
+            })
+          },
+          { target: "manifest" }
+        ],
+        onError: {
+          target: "failed",
+          actions: assign({
+            error: ({ event }) => `Tables manifest refresh failed: ${event.error instanceof Error ? event.error.message : String(event.error)}`
+          })
+        }
+      }
+    },
+    // ============================================================
+    // Manifest Refresh Phase
+    // ============================================================
+    manifest: {
+      meta: { e2e: e2eMeta.manifest },
+      always: [{ guard: "shouldSkipManifest", target: "appStart" }],
+      invoke: {
+        src: "manifest",
+        input: ({ context }) => ({
+          repoRoot: context.repoRoot,
+          tmpDir: context.tmpDir
+        }),
+        onDone: [
+          {
+            guard: "phaseFailed",
+            target: "failed",
+            actions: assign({
+              error: ({ event }) => event.output.error ?? "Manifest refresh failed during dev startup"
+            })
+          },
+          { target: "appStart" }
+        ],
+        onError: {
+          target: "failed",
+          actions: assign({
+            error: ({ event }) => `Manifest refresh failed: ${event.error instanceof Error ? event.error.message : String(event.error)}`
+          })
+        }
+      }
     },
     // ============================================================
     // App Start Phase
@@ -711,13 +841,21 @@ var stateLogHandlers = {
   "setup.supabaseStart": (logger) => {
     logger.info("  Starting Supabase...");
   },
+  tablesManifest: (logger) => {
+    logger.section("Phase 1: Tables");
+    logger.info("Refreshing tables manifest...");
+  },
+  manifest: (logger) => {
+    logger.section("Phase 2: Manifest");
+    logger.info("Refreshing manifest artifacts...");
+  },
   appStart: (logger) => {
-    logger.section("Phase 1: App Start");
+    logger.section("Phase 3: App Start");
     logger.info("Starting Next.js dev server...");
   },
-  running: (logger, context) => {
+  running: (logger, _context, extra) => {
     logger.section("Development Server Running");
-    logger.success(`App running at http://localhost:${context?.port ?? 3e3}`);
+    logger.success(`App running at http://localhost:${extra?.port ?? 3e3}`);
     logger.info("");
     logger.info("Press Ctrl+C to stop");
   },
@@ -727,16 +865,14 @@ var stateLogHandlers = {
     logger.info("Stopping dev server...");
   }
 };
-function handleStateChange(snapshot, prevState, logger, port) {
-  const state = getStateName(snapshot);
-  if (state === prevState) return;
-  const handler = stateLogHandlers[state] ?? stateLogHandlers[state.split(".")[0]];
-  if (handler) {
-    handler(logger, { port });
-  }
-  if (prevState === "processCheck" && state.startsWith("setup") && snapshot.context.staleProcessRecovered) {
-    logger.success("  Stale process recovered. Port is now available.");
-  }
+var handleStateChange = createMachineStateChangeLogger({
+  getState: getStateName,
+  getContext: (snapshot) => snapshot.context,
+  handlers: stateLogHandlers,
+  useParentState: true
+});
+function shouldLogStaleRecovery(state, prevState, snapshot) {
+  return prevState === "processCheck" && state.startsWith("setup") && snapshot.context.staleProcessRecovered;
 }
 function printSummary(logger, output) {
   if (output.success) {
@@ -769,7 +905,7 @@ function tryWritePortBridge(snapshot, previousState, currentState, logger) {
       detectLocalSupabasePorts(snapshot.context.repoRoot)
     );
     logPortBridgeResult(logger, bridgeResult);
-  } catch {
+  } catch (error) {
   }
 }
 function resolveOutputIfComplete(snapshot, resolve) {
@@ -779,26 +915,6 @@ function resolveOutputIfComplete(snapshot, resolve) {
     resolve(output);
   }
 }
-function findRepoRoot(startDir) {
-  let current = startDir;
-  while (current !== path4.dirname(current)) {
-    if (existsSync(path4.join(current, "turbo.json"))) {
-      return current;
-    }
-    const pkgPath = path4.join(current, "package.json");
-    if (existsSync(pkgPath)) {
-      try {
-        const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
-        if (pkg.workspaces) {
-          return current;
-        }
-      } catch {
-      }
-    }
-    current = path4.dirname(current);
-  }
-  return startDir;
-}
 async function runDevMachine(input, logger) {
   const repoRoot = input.targetDir ?? findRepoRoot(process.cwd());
   return new Promise((resolve, reject) => {
@@ -809,7 +925,10 @@ async function runDevMachine(input, logger) {
     actor.subscribe((snapshot) => {
       const currentState = getStateName(snapshot);
       if (currentState !== previousState) {
-        handleStateChange(snapshot, previousState, logger, input.port);
+        handleStateChange(snapshot, previousState, logger, { port: input.port ?? 3e3 });
+        if (shouldLogStaleRecovery(currentState, previousState, snapshot)) {
+          logger.success("  Stale process recovered. Port is now available.");
+        }
         tryWritePortBridge(snapshot, previousState, currentState, logger);
         previousState = currentState;
       }

package/dist/doctor-MZLOA53G.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+import { createRequire } from 'module';
+import { runCheckCommand } from './chunk-QM53IQHM.js';
+import './chunk-644FVGIQ.js';
+import './chunk-DRSUEMAK.js';
+import './chunk-KE6QJBZG.js';
+import './chunk-WJXC4MVY.js';
+import './chunk-HKUWEGUX.js';
+import './chunk-JMJP4A47.js';
+import { init_esm_shims } from './chunk-VRXHCR5K.js';
+import { CLIError } from '@runa-ai/runa/cli-runtime';
+import { Command } from 'commander';
+
+createRequire(import.meta.url);
+
+// src/commands/doctor.ts
+init_esm_shims();
+var DOCTOR_DEPRECATION_NOTICE = "`runa doctor` is deprecated. Use `runa check` instead.";
+var doctorCommand = new Command("doctor").description("Run diagnostic checks (deprecated alias for `runa check`)").option(
+  "-s, --scope <scope>",
+  "Check scope: all | build | ci | deploy | testing | layer1 | layer2 | layer3 | layer4",
+  "all"
+).option("--fix", "Attempt to auto-fix issues").option("-v, --verbose", "Show detailed output with fix hints").option("--dry-run", "Show what would be checked without running").option("--cwd <path>", "Working directory (default: current directory)").action(async (options, command) => {
+  try {
+    await runCheckCommand(options, {
+      command,
+      loggerName: "doctor",
+      deprecationNotice: DOCTOR_DEPRECATION_NOTICE
+    });
+  } catch (error) {
+    if (error instanceof CLIError) {
+      throw error;
+    }
+    const err = error instanceof Error ? error : new Error(String(error));
+    throw new CLIError(
+      `Doctor check failed: ${err.message}`,
+      "DOCTOR_ERROR",
+      ["Check error details above", "Try: runa check --verbose"],
+      err
+    );
+  }
+});
+
+export { doctorCommand };

package/dist/{env-B47Z4747.js → env-GMB3THRG.js}

@@ -1,20 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
+import { tryResolveDatabaseUrl } from './chunk-AKZAN4BC.js';
 import { registerCleanup } from './chunk-TYIAD6SB.js';
 import { isNonInteractiveEnabled } from './chunk-6Y3LAUGL.js';
-import { tryResolveDatabaseUrl } from './chunk-KWX3JHCY.js';
 import './chunk-NPSRD26F.js';
-import { loadEnvFiles } from './chunk-MNPMZERI.js';
-import './chunk-JMJP4A47.js';
+import { loadEnvFiles } from './chunk-644FVGIQ.js';
 import { getVercelRootDirectory } from './chunk-MXRWBNIY.js';
 import { syncRunaConfigWithVercel } from './chunk-6AALH2ED.js';
+import './chunk-DRSUEMAK.js';
 import './chunk-II7VYQEM.js';
 import { init_local_supabase, getLocalSupabaseEnvValues, getLocalValueDescriptions } from './chunk-VM3IWOT5.js';
-import './chunk-DRSUEMAK.js';
-import { emitJsonSuccess } from './chunk-UU55OH7P.js';
-import './chunk-RRGQCUKT.js';
-import './chunk-JT5SUTWE.js';
+import { emitJsonSuccess } from './chunk-KE6QJBZG.js';
+import './chunk-WJXC4MVY.js';
 import './chunk-HKUWEGUX.js';
+import './chunk-JMJP4A47.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { Command } from 'commander';
 import { existsSync, rmSync, readFileSync, mkdtempSync, writeFileSync, chmodSync, realpathSync, unlinkSync } from 'fs';

package/dist/{env-files-K2C7O7L5.js → env-files-2UIUYLLR.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-export { loadEnvFiles } from './chunk-MNPMZERI.js';
-import './chunk-JMJP4A47.js';
+export { loadEnvFiles } from './chunk-644FVGIQ.js';
 import './chunk-DRSUEMAK.js';
+import './chunk-JMJP4A47.js';
 import './chunk-VRXHCR5K.js';
 
 createRequire(import.meta.url);

package/dist/{error-handler-4EYSDOSE.js → error-handler-HEXBRNVV.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'module';
 import './chunk-ZZOXM6Q4.js';
 import { ERROR_CATALOG } from './chunk-JQXOVCOP.js';
-import { ErrorEnvelopeSchema, CLI_CONTRACT_VERSION } from './chunk-JT5SUTWE.js';
+import { ErrorEnvelopeSchema, CLI_CONTRACT_VERSION, writeJsonEnvelope } from './chunk-WJXC4MVY.js';
 import { getOutputFormatFromEnv } from './chunk-HKUWEGUX.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { formatCLIError, CLIError, createCLILogger } from '@runa-ai/runa/cli-runtime';
@@ -398,7 +398,7 @@ function outputJsonError(formatted, allSuggestions) {
   const parsed = ErrorEnvelopeSchema.parse(payload);
   process.env.RUNA_JSON_EMITTING = "true";
   try {
-    process.stdout.write(`${JSON.stringify(parsed)}
+    writeJsonEnvelope(`${JSON.stringify(parsed)}
 `);
   } finally {
     process.env.RUNA_JSON_EMITTING = "false";

package/dist/{hotfix-CULKKMGS.js → hotfix-NDTPY2T4.js}

@@ -2,13 +2,13 @@
 import { createRequire } from 'module';
 import './chunk-ZZOXM6Q4.js';
 import { createError } from './chunk-JQXOVCOP.js';
-import { tryResolveDatabaseUrl } from './chunk-KWX3JHCY.js';
+import { tryResolveDatabaseUrl } from './chunk-AKZAN4BC.js';
 import './chunk-NPSRD26F.js';
-import { loadEnvFiles } from './chunk-MNPMZERI.js';
-import './chunk-JMJP4A47.js';
+import { loadEnvFiles } from './chunk-644FVGIQ.js';
+import { isPathContained } from './chunk-DRSUEMAK.js';
 import './chunk-II7VYQEM.js';
 import './chunk-VM3IWOT5.js';
-import { isPathContained } from './chunk-DRSUEMAK.js';
+import './chunk-JMJP4A47.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { Command } from 'commander';
 import { CLIError, createCLILogger, createDbSnapshot } from '@runa-ai/runa';

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
 import { getRequestedCommandNameFromArgv } from './chunk-UWWSAPDR.js';
-import { CLI_VERSION } from './chunk-GOGRLQNP.js';
+import { CLI_VERSION } from './chunk-AFY3TX4I.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { realpathSync } from 'fs';
 import { fileURLToPath } from 'url';
@@ -36,7 +36,7 @@ async function getProgram(options) {
   };
   const nextKey = getProgramCacheKey(resolvedOptions);
   if (!programInstance || programCacheKey !== nextKey) {
-    const { createProgram } = await import('./cli-GFRZCJQR.js');
+    const { createProgram } = await import('./cli-UZA4RBNQ.js');
     programInstance = await createProgram(resolvedOptions);
     programCacheKey = nextKey;
   }
@@ -60,7 +60,7 @@ async function runCliFromProcessArgv() {
     return;
   }
   const { setupSignalHandlers } = await import('./signal-handler-DO3OANW5.js');
-  const { executeProgram } = await import('./cli-GFRZCJQR.js');
+  const { executeProgram } = await import('./cli-UZA4RBNQ.js');
   setupSignalHandlers();
   const options = getProgramLoadOptions(argv);
   const program = await getProgram(options);
@@ -68,7 +68,7 @@ async function runCliFromProcessArgv() {
 }
 if (isDirectlyExecuted()) {
   runCliFromProcessArgv().catch(async (error) => {
-    const { handleCLIError } = await import('./error-handler-4EYSDOSE.js');
+    const { handleCLIError } = await import('./error-handler-HEXBRNVV.js');
     handleCLIError(error);
   });
 }

package/dist/{init-ELK5QCWR.js → init-U4VCRHTD.js}

@@ -1,14 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { getVercelRootDirectory } from './chunk-MXRWBNIY.js';
 import { diagnoseInitFailure } from './chunk-AAIE4F2U.js';
-import { fetchTemplates } from './chunk-XJBQINSA.js';
+import { getVercelRootDirectory } from './chunk-MXRWBNIY.js';
+import { fetchTemplates } from './chunk-CCW3PLQY.js';
 import { syncRunaConfigWithVercel } from './chunk-6AALH2ED.js';
-import './chunk-RZLYEO4U.js';
 import './chunk-DRSUEMAK.js';
-import { emitJsonSuccess } from './chunk-UU55OH7P.js';
-import './chunk-RRGQCUKT.js';
-import './chunk-JT5SUTWE.js';
+import './chunk-RZLYEO4U.js';
+import { emitJsonSuccess } from './chunk-KE6QJBZG.js';
+import './chunk-WJXC4MVY.js';
 import './chunk-HKUWEGUX.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import fs from 'fs';

package/dist/{inject-test-attrs-Y5UD5P7Q.js → inject-test-attrs-P44BVTQS.js}

@@ -1,11 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { injectTestAttrsAction } from './chunk-P7U52PBY.js';
-export { processFiles } from './chunk-P7U52PBY.js';
+import { DEFAULT_INCLUDE_PATTERNS, DEFAULT_EXCLUDE_PATTERNS, injectTestAttrsAction } from './chunk-Z4Z5DNW4.js';
+export { processFiles } from './chunk-Z4Z5DNW4.js';
 import './chunk-DRSUEMAK.js';
-import './chunk-UU55OH7P.js';
-import './chunk-RRGQCUKT.js';
-import './chunk-JT5SUTWE.js';
+import './chunk-KE6QJBZG.js';
+import './chunk-WJXC4MVY.js';
 import './chunk-HKUWEGUX.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { Command } from 'commander';
@@ -17,19 +16,7 @@ init_esm_shims();
 
 // src/commands/inject-test-attrs/commands/inject-test-attrs.ts
 init_esm_shims();
-var injectTestAttrsCommand = new Command("inject-test-attrs").description("Inject XState test attributes into source files (git-managed)").option("--check", "Check if files need injection without modifying (CI mode)").option("--force", "Force re-injection even if marker exists").option("--verbose", "Show detailed output").option("--include <patterns...>", "Glob patterns to include", [
-  "apps/**/*.tsx",
-  "apps/**/*.ts",
-  "packages/**/*.tsx",
-  "packages/**/*.ts"
-]).option("--exclude <patterns...>", "Glob patterns to exclude", [
-  "**/node_modules/**",
-  "**/.next/**",
-  "**/dist/**",
-  "**/*.test.*",
-  "**/*.spec.*",
-  "**/*.stories.*"
-]).option("--no-manifest", "Skip E2E selector manifest generation").option("--manifest-dir <dir>", "Output directory for manifest files", ".runa").option("--strict-detect", "Fail when fallback machine detection is used (for deterministic CI)").action(async (rawOptions) => {
+var injectTestAttrsCommand = new Command("inject-test-attrs").description("Inject XState test attributes into source files (git-managed)").option("--check", "Check if files need injection without modifying (CI mode)").option("--force", "Force re-injection even if marker exists").option("--verbose", "Show detailed output").option("--include <patterns...>", "Glob patterns to include", [...DEFAULT_INCLUDE_PATTERNS]).option("--exclude <patterns...>", "Glob patterns to exclude", [...DEFAULT_EXCLUDE_PATTERNS]).option("--no-manifest", "Skip E2E selector manifest generation").option("--manifest-dir <dir>", "Output directory for manifest files", ".runa").option("--strict-detect", "Fail when fallback machine detection is used (for deterministic CI)").action(async (rawOptions) => {
   await injectTestAttrsAction(rawOptions, injectTestAttrsCommand);
 });
 

package/dist/{link-C43JRZWY.js → link-VSNDVZZD.js}

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { emitJsonSuccess } from './chunk-UU55OH7P.js';
-import './chunk-RRGQCUKT.js';
-import './chunk-JT5SUTWE.js';
+import { emitJsonSuccess } from './chunk-KE6QJBZG.js';
+import './chunk-WJXC4MVY.js';
 import './chunk-HKUWEGUX.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { createCLILogger, CLIError } from '@runa-ai/runa/cli-runtime';

package/dist/manifest-TMFLESHW.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import { createRequire } from 'module';
+import { DEFAULT_INCLUDE_PATTERNS, DEFAULT_EXCLUDE_PATTERNS, injectTestAttrsAction } from './chunk-Z4Z5DNW4.js';
+import './chunk-DRSUEMAK.js';
+import './chunk-KE6QJBZG.js';
+import './chunk-WJXC4MVY.js';
+import './chunk-HKUWEGUX.js';
+import { init_esm_shims } from './chunk-VRXHCR5K.js';
+import { Command } from 'commander';
+
+createRequire(import.meta.url);
+
+// src/commands/manifest/index.ts
+init_esm_shims();
+var manifestCommand = new Command("manifest").description("Generate E2E manifest (manifest.json) - alias for inject-test-attrs").option("--check", "Check if manifest needs regeneration (CI mode)").option("--force", "Force regeneration even if up-to-date").option("--verbose", "Show detailed output").option("--include <patterns...>", "Glob patterns to include", [...DEFAULT_INCLUDE_PATTERNS]).option("--exclude <patterns...>", "Glob patterns to exclude", [...DEFAULT_EXCLUDE_PATTERNS]).option("--no-manifest", "Skip manifest file generation (attributes only)").option("--manifest-dir <dir>", "Output directory for manifest files", ".runa").option("--strict-detect", "Fail when fallback machine detection is used (for deterministic CI)").action(async (options) => {
+  await injectTestAttrsAction(options, manifestCommand);
+});
+
+export { manifestCommand };

package/dist/{risk-detector-BXUY2WKS.js → risk-detector-4U6ZJ2G5.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-export { categorizeRisks, detectSchemaRisks } from './chunk-22CS6EMA.js';
+export { categorizeRisks, detectSchemaRisks } from './chunk-H2AHNI75.js';
 import './chunk-VRXHCR5K.js';
 
 createRequire(import.meta.url);

package/dist/{risk-detector-core-O7I7SPR7.js → risk-detector-core-TK4OAI3N.js}

@@ -38,7 +38,7 @@ var SCAN_ABORT_REASON_CODE = "SCHEMA_SCAN_TOO_LARGE";
 var plpgsqlModulePromise = null;
 async function loadPlpgsqlRiskDetectorModule() {
   if (!plpgsqlModulePromise) {
-    plpgsqlModulePromise = import('./risk-detector-plpgsql-SGMVKYJP.js').catch((error) => {
+    plpgsqlModulePromise = import('./risk-detector-plpgsql-HWKS4OLR.js').catch((error) => {
       plpgsqlModulePromise = null;
       throw error;
     });
@@ -98,7 +98,7 @@ async function detectSchemaRisks(filePath) {
     const contentLineStarts = buildLineStarts(content);
     const contentRisks = detectRisksFromContent(searchableContent, content, contentLineStarts);
     const { detectPlpgsqlDynamicExecutionRisks } = await loadPlpgsqlRiskDetectorModule();
-    const plpgsqlRisks = detectPlpgsqlDynamicExecutionRisks(content);
+    const plpgsqlRisks = detectPlpgsqlDynamicExecutionRisks(maskedContent);
     const fkRisks = detectForeignKeyRisks(searchableContent, content, contentLineStarts);
     const risks = deduplicateSchemaRisksBySeverity([...contentRisks, ...plpgsqlRisks, ...fkRisks]);
     return risks;