@voltro/cli 0.32.0 → 0.34.0

package/dist/dbCommand-ifOMafuG.js

@@ -1,1311 +0,0 @@
-import { i as e, n as t, r as n, s as r, t as i } from "./seedRunner-Bqxgp7HZ.js";
-import { n as a } from "./appModuleLoader-C9r9mxZt.js";
-import { n as o } from "./frameworkTableAssembly-BwIrO5nv.js";
-import { b as s } from "./fileConventions-Cof68_BL.js";
-import { a as c, n as l, t as u } from "./cliArgs-qdZSElM3.js";
-import { basename as d, join as f, relative as p, resolve as m } from "node:path";
-import { pathToFileURL as h } from "node:url";
-import { Effect as g } from "effect";
-import { createLogger as _ } from "@voltro/logger";
-import { promises as v, writeSync as y } from "node:fs";
-import { InMemoryDataStore as ee } from "@voltro/runtime";
-import { SqlClient as b } from "@effect/sql";
-import { actorsTable as te, frameworkTables as x, isMigrationDefinition as S, quoteIdent as ne, registerCoreTables as re } from "@voltro/database";
-import { createHash as ie } from "node:crypto";
-import { DEFAULT_CDC_CHANNEL as ae, applyPlan as oe, applySchema as C, assessRollingDeployGate as se, declaredSnapshot as ce, destructiveScope as le, detectReactiveTriggerDrift as ue, fingerprintSchema as w, ignoreTablesFromEnv as T, introspectSchema as de, pendingFileMigrationIds as fe, planMigrations as E, reactiveTriggerRepairSql as pe, rollbackFileBasedMigration as me, rollingDeployUnsafeOps as he, runFileBasedMigrations as ge, shortFingerprint as D, squashMigrationPlans as _e, unblockLossy as ve } from "@voltro/database/sql";
-//#region src/cliError.ts
-var O = class extends Error {
-	isCliError = !0;
-	code;
-	constructor(e, t = 1) {
-		super(e), this.name = "CliError", this.code = t;
-	}
-}, ye = (e) => typeof e == "object" && !!e && e.isCliError === !0, be = (e) => typeof e != "string", xe = (e, t, n, r) => {
-	let i = [], a = new Map(t.map((e) => [e.name, e])), o = new Map(n.map((e) => [e.name, e])), s = new Set(e.leaveUnset ?? []);
-	r > 0 && i.push({
-		kind: "target-not-empty",
-		detail: `'${e.into}' already holds ${r} row(s) — adopt MOVES rows into a table, it does not merge into one`,
-		fatal: !0
-	});
-	let c = [], l = /* @__PURE__ */ new Set();
-	for (let [t, n] of Object.entries(e.map)) {
-		if (!o.has(t)) {
-			i.push({
-				kind: "unknown-target-column",
-				detail: `'${e.into}' has no column '${t}'`,
-				fatal: !0
-			});
-			continue;
-		}
-		if (be(n)) {
-			c.push({
-				target: t,
-				source: n.expr,
-				raw: !0
-			});
-			continue;
-		}
-		if (!a.has(n)) {
-			i.push({
-				kind: "unknown-source-column",
-				detail: `'${e.from}' has no column '${n}' (mapped to '${t}')`,
-				fatal: !0
-			});
-			continue;
-		}
-		l.add(n), c.push({
-			target: t,
-			source: n,
-			raw: !1
-		});
-	}
-	for (let t of n) t.name in e.map || s.has(t.name) || t.nullable || t.hasDefault || i.push({
-		kind: "required-target-unmapped",
-		detail: `'${e.into}.${t.name}' is NOT NULL with no default and nothing maps to it`,
-		fatal: !0
-	});
-	for (let n of t) l.has(n.name) || i.push({
-		kind: "source-column-unmapped",
-		detail: `'${e.from}.${n.name}' is not carried across — its values are lost when the table is dropped`,
-		fatal: !1
-	});
-	let u = t.find((e) => e.idPrefix !== void 0), d = n.find((e) => e.idPrefix !== void 0), f = u !== void 0 && d !== void 0 && u.idPrefix !== d.idPrefix;
-	return f && i.push({
-		kind: "id-prefix-differs",
-		detail: `id prefix '${u.idPrefix}' → '${d.idPrefix}': every row gets a NEW id, so every reference to '${e.from}' elsewhere must be rewritten from the translation table — including ids inside JSON columns`,
-		fatal: !1
-	}), {
-		problems: i,
-		assignments: c.sort((e, t) => e.target.localeCompare(t.target)),
-		remintIds: f,
-		fatal: i.some((e) => e.fatal)
-	};
-}, Se = (e, t) => [
-	`back up '${e.from}' to a restorable dump`,
-	`copy rows: INSERT INTO ${e.into} (${t.assignments.map((e) => e.target).join(", ")}) SELECT … FROM ${e.from}`,
-	...t.remintIds ? ["record old id → new id in a translation table", `rewrite every reference to '${e.from}', JSON columns included`] : [],
-	"verify: row counts match and a sample round-trips",
-	`drop '${e.from}' — LAST, and only after the verify`
-], Ce = (e, t, n) => {
-	let r = [`adopt · ${e.from} (${n} row(s)) → ${e.into}`, ""];
-	for (let e of t.assignments) r.push(`  ${e.target.padEnd(24)} ← ${e.raw ? `${e.source}   (raw)` : e.source}`);
-	t.problems.length > 0 && r.push("");
-	for (let e of t.problems) r.push(`  ${e.fatal ? "✗" : "⚠"} ${e.detail}`);
-	if (r.push(""), t.fatal) return r.push("  REFUSED — fix the problems above. Nothing was written."), r;
-	r.push("  would run, in this order:");
-	for (let [n, i] of Se(e, t).entries()) r.push(`    ${n + 1}. ${i}`);
-	return r;
-}, we = (e) => e === "mysql" || e === "mariadb" ? (e) => `\`${e}\`` : e === "mssql" ? (e) => `[${e}]` : (e) => `"${e}"`, Te = (e) => `${e}__adopt_snapshot`, Ee = (e, t, n, r, i) => {
-	let a = we(n), o = Te(e.from), s = t.assignments.map((e) => e.target), c = t.assignments.map((e) => e.raw ? e.source : a(e.source));
-	return i !== void 0 && (s.unshift(r), c.unshift(i)), {
-		snapshot: n === "mssql" ? `SELECT * INTO ${a(o)} FROM ${a(e.from)}` : `CREATE TABLE ${a(o)} AS SELECT * FROM ${a(e.from)}`,
-		copy: `INSERT INTO ${a(e.into)} (${s.map(a).join(", ")}) SELECT ${c.join(", ")} FROM ${a(e.from)}`,
-		translations: i === void 0 ? [] : [`CREATE TABLE ${a(`${o}__ids`)} (old_id TEXT, new_id TEXT)`],
-		verifySource: `SELECT COUNT(*) AS n FROM ${a(e.from)}`,
-		verifyTarget: `SELECT COUNT(*) AS n FROM ${a(e.into)}`,
-		drop: `DROP TABLE ${a(e.from)}`,
-		dropSnapshot: `DROP TABLE ${a(o)}`
-	};
-}, De = (e) => {
-	let t = e[0];
-	if (t === void 0) return 0;
-	let n = t.n ?? t.N ?? Object.values(t)[0];
-	return Number(n ?? 0);
-}, Oe = async (e, t, n, r, i, a, o = {}) => {
-	if (t.fatal) throw Error("adopt: the plan was refused — nothing was run");
-	let s = Ee(e, t, n, r, i), c = Te(e.from), l = De(await a(s.verifySource));
-	await a(s.snapshot);
-	for (let e of s.translations) await a(e);
-	await a(s.copy);
-	let u = De(await a(s.verifyTarget));
-	return u === l ? o.keepSource === !0 ? {
-		copied: u,
-		sourceRows: l,
-		verified: !0,
-		snapshotTable: c,
-		sourceDropped: !1
-	} : (await a(s.drop), {
-		copied: u,
-		sourceRows: l,
-		verified: !0,
-		snapshotTable: c,
-		sourceDropped: !0
-	}) : {
-		copied: u,
-		sourceRows: l,
-		verified: !1,
-		snapshotTable: c,
-		sourceDropped: !1
-	};
-}, k = [
-	"token",
-	"secret",
-	"password",
-	"apikey",
-	"api_key",
-	"credential",
-	"privatekey",
-	"private_key"
-], ke = [
-	{
-		table: "_voltro_audit_log",
-		column: "subject"
-	},
-	{
-		table: "_voltro_audit_log",
-		column: "actor"
-	},
-	{
-		table: "_voltro_audit_log",
-		column: "scope"
-	},
-	{
-		table: "_voltro_audit_log",
-		column: "metadata"
-	},
-	{
-		table: "_voltro_audit_log",
-		column: "input"
-	},
-	{
-		table: "_voltro_audit_log",
-		column: "outcome"
-	},
-	{
-		table: "_voltro_audit_log",
-		column: "subjectId"
-	},
-	{
-		table: "_voltro_row_history",
-		column: "data"
-	},
-	{
-		table: "_voltro_row_history",
-		column: "actor"
-	},
-	{
-		table: "_voltro_row_history",
-		column: "scope"
-	},
-	{
-		table: "_voltro_row_history",
-		column: "subjectId"
-	}
-], Ae = (e, t) => {
-	switch (t) {
-		case "postgres": return `LOWER(CAST(${e} AS text))`;
-		case "mysql":
-		case "mariadb": return `LOWER(CAST(${e} AS CHAR))`;
-		case "mssql": return `LOWER(CAST(${e} AS NVARCHAR(MAX)))`;
-		case "sqlite":
-		case "turso": return `LOWER(CAST(${e} AS TEXT))`;
-	}
-}, je = (e, t, n = k) => n.map((n) => `${Ae(e, t)} LIKE '%${n}%'`).join("\n     OR "), A = async (e, t) => {
-	let n = await g.runPromise(e.unsafe(t));
-	return Number(Object.values(n[0] ?? { n: 0 })[0] ?? 0);
-}, Me = async (e, t, n, r) => {
-	let i = [];
-	for (let a of n) {
-		let n = r(a.table), o;
-		try {
-			o = await A(e, `SELECT COUNT(*) AS n FROM ${n}`);
-		} catch {
-			i.push({
-				table: a.table,
-				column: a.column,
-				scanned: void 0,
-				hits: void 0,
-				unavailable: "table"
-			});
-			continue;
-		}
-		try {
-			let s = await A(e, `SELECT COUNT(*) AS n FROM ${n}\n   WHERE ${je(r(a.column), t)}`), c = [];
-			if (s > 0) for (let i of k) try {
-				let o = await A(e, `SELECT COUNT(*) AS n FROM ${n}\n   WHERE ${je(r(a.column), t, [i])}`);
-				o > 0 && c.push({
-					needle: i,
-					rows: o
-				});
-			} catch {}
-			i.push({
-				table: a.table,
-				column: a.column,
-				scanned: o,
-				hits: s,
-				matchedNeedles: c
-			});
-		} catch {
-			i.push({
-				table: a.table,
-				column: a.column,
-				scanned: o,
-				hits: void 0,
-				unavailable: "column"
-			});
-		}
-	}
-	return i;
-}, Ne = (e, t) => {
-	let n = k.length, r = [`credential scan · dialect ${t}`, ""], i = /* @__PURE__ */ new Set();
-	for (let t of e) {
-		if (t.unavailable === "column") {
-			r.push(`  ·  ${t.table}.${t.column} — column is not present on this deployment (${t.scanned} row(s) exist but this column was not scanned)`);
-			continue;
-		}
-		if (t.scanned === void 0) {
-			i.has(t.table) || (i.add(t.table), r.push(`  ·  ${t.table} — table not present (nothing scanned)`));
-			continue;
-		}
-		if (t.scanned === 0) {
-			r.push(`  ·  ${t.table} — table is EMPTY (0 rows scanned; this is not a clean bill of health)`);
-			continue;
-		}
-		let e = (t.hits ?? 0) > 0 ? "✗" : "✓";
-		r.push(`  ${e}  ${t.table}.${t.column} — ${t.hits} of ${t.scanned} row(s) match a credential-shaped key`), (t.matchedNeedles?.length ?? 0) > 0 && r.push(`         matched (rows per needle, may overlap): ${t.matchedNeedles.map((e) => `${e.needle} (${e.rows})`).join(", ")}`);
-	}
-	let a = e.reduce((e, t) => e + (t.hits ?? 0), 0);
-	return r.push(""), a > 0 ? r.push(`  ${a} row(s) carry something credential-shaped.`, "  Purge them AND rotate the credentials — assume anything written to a log", "  table has been read. Then stop putting the credential on the Subject:", "  `connectionCredentials(...)` keeps it in the framework vault.") : e.every((e) => e.scanned === void 0 || e.scanned === 0 || e.unavailable !== void 0) ? r.push("  NOTHING WAS SCANNED. This run proves nothing about your data.") : r.push("  No credential-shaped keys found in the rows that exist."), r.push("", `  These are NAME heuristics (${n} of them), not proof. A credential in a`, "  column whose key is not credential-shaped — `keyValue`, `pat`, `authz` —", "  is invisible here. A clean run means \"no credential-SHAPED key found\",", "  which is not the same as \"no credential\".", "", "  Run this on EVERY environment. A dev database is not a sample of production."), r.join("\n");
-}, Pe = (e) => e.some((e) => (e.hits ?? 0) > 0) ? 1 : e.every((e) => e.unavailable !== void 0 || e.scanned === void 0 || e.scanned === 0) ? 2 : 0, j = /\.migration\.ts$/, M = async (e, t) => {
-	let n = [];
-	for (let r of e) {
-		let e;
-		try {
-			e = await import(h(r).href);
-		} catch (e) {
-			t.warn("migration: failed to import", { file: r }, e);
-			continue;
-		}
-		let i = (e.default && S(e.default) ? e.default : void 0) ?? Object.values(e).find(S);
-		if (!i) {
-			t.warn("migration: no defineMigration export", { file: r });
-			continue;
-		}
-		i.id !== d(r).replace(/\.migration\.ts$/, "") && t.warn("migration: id does not match filename — id wins for ordering, but rename the file for clarity", {
-			file: r,
-			idInFile: i.id,
-			idFromFile: d(r).replace(/\.migration\.ts$/, "")
-		});
-		let a = await v.readFile(r, "utf8").catch(() => ""), o = ie("sha256").update(a).digest("hex").slice(0, 16);
-		n.push({
-			file: r,
-			definition: i,
-			hash: o
-		});
-	}
-	return [...n].sort((e, t) => e.definition.id < t.definition.id ? -1 : 1);
-}, N = (e) => {
-	let t = (process.env.DB_DIALECT ?? "postgres").toLowerCase(), n = t === "memory" ? "postgres" : t;
-	return g.runPromise(C(x, n).pipe(g.provide(e)));
-}, P = (e) => g.runPromise(g.gen(function* () {
-	let e = yield* (yield* b.SqlClient)`SELECT id, status, hash, "appliedAt" FROM "_voltro_migrations"`.pipe(g.orElseSucceed(() => []));
-	return new Map(e.map((e) => [e.id, e]));
-}).pipe(g.provide(e))), F = (e, t) => g.runPromise(g.gen(function* () {
-	yield* (yield* b.SqlClient)`
-        INSERT INTO "_voltro_migrations"
-          (id, name, hash, status, "appliedAt", "durationMs", "errorMessage", "errorStack")
-        VALUES
-          (${t.id}, ${t.name}, ${t.hash}, ${t.status}, ${t.appliedAt}, ${t.durationMs}, ${t.errorMessage}, ${t.errorStack})
-        ON CONFLICT (id) DO UPDATE SET
-          name          = EXCLUDED.name,
-          hash          = EXCLUDED.hash,
-          status        = EXCLUDED.status,
-          "appliedAt"   = EXCLUDED."appliedAt",
-          "durationMs"  = EXCLUDED."durationMs",
-          "errorMessage"= EXCLUDED."errorMessage",
-          "errorStack"  = EXCLUDED."errorStack",
-          "updatedAt"   = now()
-      `;
-}).pipe(g.provide(e))), Fe = async (e, t, n) => {
-	if (e.length === 0) return {
-		applied: [],
-		failed: null,
-		skipped: []
-	};
-	await N(t);
-	let r = await P(t), i = [], a = [], o = null;
-	for (let s of e) {
-		let e = r.get(s.definition.id);
-		if (e && e.status === "applied") {
-			e.hash !== s.hash && n.warn("migration: applied migration has a different hash on disk", {
-				id: s.definition.id,
-				appliedHash: e.hash,
-				fileHash: s.hash
-			}), a.push({
-				migrationId: s.definition.id,
-				status: "skipped",
-				durationMs: 0,
-				steps: []
-			});
-			continue;
-		}
-		n.info("migration: applying", {
-			id: s.definition.id,
-			name: s.definition.name
-		});
-		let c = Date.now(), l = [];
-		await F(t, {
-			id: s.definition.id,
-			name: s.definition.name,
-			hash: s.hash,
-			status: "running",
-			appliedAt: null,
-			durationMs: null,
-			errorMessage: null,
-			errorStack: null
-		});
-		let u = !1;
-		for (let e of s.definition.steps) {
-			let n = Date.now();
-			try {
-				await g.runPromise(e.apply.pipe(g.provide(t))), l.push({
-					stepName: e.name,
-					status: "applied",
-					durationMs: Date.now() - n
-				});
-			} catch (r) {
-				let a = r, d = {
-					stepName: e.name,
-					status: "failed",
-					durationMs: Date.now() - n,
-					error: {
-						message: a.message,
-						...a.stack ? { stack: a.stack } : {}
-					}
-				};
-				l.push(d), u = !0;
-				let f = {
-					migrationId: s.definition.id,
-					status: "failed",
-					durationMs: Date.now() - c,
-					steps: l,
-					error: {
-						stepName: e.name,
-						message: a.message,
-						...a.stack ? { stack: a.stack } : {}
-					}
-				};
-				o = f, i.push(f), await F(t, {
-					id: s.definition.id,
-					name: s.definition.name,
-					hash: s.hash,
-					status: "failed",
-					appliedAt: null,
-					durationMs: Date.now() - c,
-					errorMessage: a.message,
-					errorStack: a.stack ?? null
-				});
-				break;
-			}
-		}
-		if (u) break;
-		i.push({
-			migrationId: s.definition.id,
-			status: "applied",
-			durationMs: Date.now() - c,
-			steps: l
-		}), await F(t, {
-			id: s.definition.id,
-			name: s.definition.name,
-			hash: s.hash,
-			status: "applied",
-			appliedAt: /* @__PURE__ */ new Date(),
-			durationMs: Date.now() - c,
-			errorMessage: null,
-			errorStack: null
-		}), n.info("migration: applied", {
-			id: s.definition.id,
-			durationMs: Date.now() - c,
-			stepCount: l.length
-		});
-	}
-	return {
-		applied: i.filter((e) => e.status === "applied"),
-		failed: o,
-		skipped: a
-	};
-}, Ie = async (e, t, n, r = {}) => {
-	await N(t);
-	let i = await P(t), a = e.filter((e) => i.get(e.definition.id)?.status === "applied");
-	if (a.length === 0) return n.info("migration: nothing to roll back"), {
-		applied: [],
-		failed: null,
-		skipped: []
-	};
-	let o = [];
-	for (let e = a.length - 1; e >= 0; e--) {
-		let t = a[e];
-		if (o.push(t), !r.to && o.length === 1 || r.to && t.definition.id === r.to) break;
-	}
-	let s = [], c = null;
-	for (let e of o) {
-		n.info("migration: rolling back", { id: e.definition.id });
-		let r = Date.now(), i = [], a = !1;
-		for (let n = e.definition.steps.length - 1; n >= 0; n--) {
-			let o = e.definition.steps[n], s = Date.now();
-			try {
-				await g.runPromise(o.undo.pipe(g.provide(t))), i.push({
-					stepName: o.name,
-					status: "applied",
-					durationMs: Date.now() - s
-				});
-			} catch (t) {
-				let n = t;
-				i.push({
-					stepName: o.name,
-					status: "failed",
-					durationMs: Date.now() - s,
-					error: {
-						message: n.message,
-						...n.stack ? { stack: n.stack } : {}
-					}
-				}), a = !0, c = {
-					migrationId: e.definition.id,
-					status: "failed",
-					durationMs: Date.now() - r,
-					steps: i,
-					error: {
-						stepName: o.name,
-						message: n.message,
-						...n.stack ? { stack: n.stack } : {}
-					}
-				};
-				break;
-			}
-		}
-		if (a) break;
-		s.push({
-			migrationId: e.definition.id,
-			status: "applied",
-			durationMs: Date.now() - r,
-			steps: i
-		}), await F(t, {
-			id: e.definition.id,
-			name: e.definition.name,
-			hash: e.hash,
-			status: "reverted",
-			appliedAt: null,
-			durationMs: Date.now() - r,
-			errorMessage: null,
-			errorStack: null
-		}), n.info("migration: rolled back", { id: e.definition.id });
-	}
-	return {
-		applied: s,
-		failed: c,
-		skipped: []
-	};
-}, I = async (e, t) => {
-	await N(t);
-	let n = await P(t);
-	return e.map((e) => {
-		let t = n.get(e.definition.id);
-		return t ? {
-			id: e.definition.id,
-			name: e.definition.name,
-			status: t.status === "running" ? "failed" : t.status,
-			appliedAt: t.appliedAt,
-			hashMatches: t.hash === e.hash
-		} : {
-			id: e.definition.id,
-			name: e.definition.name,
-			status: "pending",
-			appliedAt: null,
-			hashMatches: !0
-		};
-	});
-}, L = (e) => {
-	if (!e.failed) return "";
-	let t = e.failed, n = [
-		`✗ Migration failed: ${t.migrationId} / step '${t.error?.stepName ?? "?"}'`,
-		`  Reason: ${t.error?.message ?? "unknown"}`,
-		"",
-		"Next steps:",
-		"  voltro db status                          # full migration timeline",
-		"  voltro db rollback                        # revert to last good state",
-		"  voltro db migrate                         # retry after fixing the cause",
-		""
-	];
-	return e.applied.length > 0 && n.unshift("", `(${e.applied.length} migration(s) applied successfully before the failure.)`), n.join("\n");
-}, R = _({ scope: "voltro:db" }), Le = /* @__PURE__ */ new Set([
-	"node_modules",
-	"dist",
-	"build",
-	".turbo",
-	".vite",
-	".next",
-	".git"
-]), z = async (e, t) => {
-	let n = [], r = async (e) => {
-		let i = await v.readdir(e, { withFileTypes: !0 }).catch(() => []);
-		for (let a of i) {
-			if (Le.has(a.name)) continue;
-			let i = f(e, a.name);
-			a.isDirectory() ? await r(i) : a.isFile() && t.test(a.name) && n.push(i);
-		}
-	};
-	return await r(e), n;
-}, B = (e) => m(e.find((e) => !e.startsWith("-")) ?? process.cwd()), V = () => {
-	let e = process.env.DB_MAX_CONNECTIONS ?? process.env.PG_MAX_CONNECTIONS, t = e !== void 0 && e !== "" ? Number(e) : NaN, n = Number.isInteger(t) && t > 0 ? { maxConnections: t } : {}, r = process.env.DB_SCHEMA, i = r && r.length > 0 ? { schema: r } : {}, a = process.env.DB_DIRECT_URL ?? process.env.DB_MIGRATE_URL ?? process.env.DB_URL ?? process.env.DB_PRIMARY_URL;
-	return a ? {
-		url: a,
-		...n,
-		...i
-	} : {
-		host: process.env.DB_HOST ?? process.env.PG_HOST ?? "localhost",
-		port: Number(process.env.DB_PORT ?? process.env.PG_PORT ?? 5432),
-		username: process.env.DB_USER ?? process.env.PG_USER ?? "app",
-		password: process.env.DB_PASSWORD ?? process.env.PG_PASSWORD ?? "app",
-		database: process.env.DB_DATABASE ?? process.env.PG_DATABASE ?? "app",
-		...n,
-		...i
-	};
-}, H = (e) => {
-	let t = e;
-	if (typeof t != "object" || !t) return !1;
-	if (t.code === "ERR_OUT_OF_RANGE" || t.cause?.code === "ERR_OUT_OF_RANGE") return !0;
-	let n = `${t.message ?? ""} ${t.cause?.message ?? ""} ${t.stack ?? ""}`;
-	return /ERR_OUT_OF_RANGE|out of range/i.test(n) && /pg-protocol|parseDataRow|buffer-reader|BufferReader/i.test(n);
-}, U = "Live-DB introspection got a corrupt / misaligned response from the database. This happens when `voltro db plan` / `apply` / `drift` / `migrate` runs through a connection POOLER (Supabase Supavisor / PgBouncer) on a LARGE schema — the pooler mis-frames a big catalog response. The introspection already batches by table to keep responses small; if a batch still trips it:\n  1. Lower the batch: set `VOLTRO_INTROSPECT_BATCH` to a smaller number of tables (default 20 — try 5 or 1). This keeps `db plan` on the normal pooler, no direct connection needed.\n  2. Or use a DIRECT (non-pooler) connection: set `DB_DIRECT_URL` (or `DB_MIGRATE_URL`) to the direct database URL — the runtime keeps `DB_URL`, so only the migration path is affected. (Supabase: direct = `db.<project-ref>.supabase.co` [IPv6-only on newer projects]; pooler = `aws-0-<region>.pooler.supabase.com`.)", W = () => {
-	let e = (process.env.DB_DIALECT ?? "postgres").toLowerCase();
-	if (e === "memory") throw new O("voltro db: subcommands require a real dialect, not DB_DIALECT=memory.");
-	return e;
-}, G = (e) => ne(e, W()), K = (e) => e === "mysql" || e === "mariadb" ? "table_schema = DATABASE()" : e === "mssql" ? "table_schema = SCHEMA_NAME()" : "table_schema = 'public'", q = async () => (await r(W())).makeSqlLayer(V()), Re = async (e) => {
-	let t = B(e), n = e.includes("--dry-run"), r = await M(await z(t, j), R);
-	if (r.length === 0) return R.info("no migrations found", { root: t }), 0;
-	if (n) {
-		let e = /* @__PURE__ */ new Set();
-		try {
-			let t = await I(r, await q());
-			e = new Set(t.filter((e) => e.status === "applied").map((e) => e.id));
-		} catch {
-			R.warn("migrate --dry-run: could not read the migration ledger — showing ALL as pending");
-		}
-		let t = r.filter((t) => !e.has(t.definition.id));
-		if (t.length === 0) return R.info("migrate --dry-run: nothing pending — every migration is applied"), 0;
-		R.info(`migrate --dry-run: ${t.length} pending (nothing applied)`);
-		for (let e of t) console.log(`  pending  ${e.definition.id}`);
-		return 0;
-	}
-	let i = await Fe(r, await q(), R);
-	return i.failed ? (process.stderr.write(L(i) + "\n"), 1) : (R.info("migrate complete", {
-		applied: i.applied.length,
-		skipped: i.skipped.length
-	}), 0);
-}, ze = async (e) => {
-	let t = B(e), n = l(e, "--to"), r = await M(await z(t, j), R);
-	if (r.length === 0) return R.info("no migrations found", { root: t }), 0;
-	let i = await Ie(r, await q(), R, n ? { to: n } : {});
-	return i.failed ? (process.stderr.write(L(i) + "\n"), 1) : (R.info("rollback complete", { reverted: i.applied.length }), 0);
-}, Be = async (e) => {
-	let t = await M(await z(B(e), j), R);
-	if (t.length === 0) return console.log("no migrations found"), 0;
-	let n = await I(t, await q());
-	for (let e of n) {
-		let t = e.status === "applied" ? "✓" : e.status === "failed" ? "✗" : e.status === "reverted" ? "↩" : "·", n = e.hashMatches ? "" : " (hash drift!)", r = e.appliedAt ? ` @ ${e.appliedAt.toISOString()}` : "";
-		console.log(`  ${t} ${e.id}  [${e.status}]  ${e.name}${r}${n}`);
-	}
-	return 0;
-}, Ve = async (e) => {
-	let t = (l(e, "--store") ?? process.env.DB_DIALECT ?? "postgres").toLowerCase();
-	if (t === "memory") return R.warn("voltro db seed: using in-memory store (explicit opt-in via --store memory / DB_DIALECT=memory)"), R.warn("  rows written by this run will NOT persist beyond the process. set DB_DIALECT=postgres or unset to seed the real DB."), {
-		store: new ee(),
-		dispose: async () => {},
-		dialectId: "memory"
-	};
-	let n = await r(t);
-	R.info(`voltro db seed: target store=${n.id} — rows will persist`);
-	let i = await n.makeStore({
-		sqlLayer: n.makeSqlLayer(V()),
-		changeStrategy: "inline"
-	}), a = i;
-	return {
-		store: i,
-		dispose: async () => {
-			typeof a.close == "function" && await a.close(5e3);
-		},
-		dialectId: n.id
-	};
-}, He = async (r) => {
-	let a = B(r), o = l(r, "--id"), s = l(r, "--lifecycle"), c = await t(await z(a, i), R);
-	if (c.length === 0) return R.info("no seeds found", { root: a }), 0;
-	let { store: u, dispose: d, dialectId: f } = await Ve(r);
-	try {
-		return o ? +((await e(c, o, u, R)).status === "failed") : +((await n((s ? c.filter((e) => e.definition.lifecycle === s) : c.filter((e) => e.definition.lifecycle === "boot")).map((e) => ({
-			...e,
-			definition: {
-				...e.definition,
-				lifecycle: "boot"
-			}
-		})), u, R, { force: !0 })).filter((e) => e.status === "failed").length > 0);
-	} finally {
-		await d().catch((e) => {
-			R.warn("voltro db seed: store dispose failed", { error: String(e) });
-		});
-	}
-}, Ue = (e) => typeof e == "object" && !!e && "tableName" in e && "fields" in e && typeof e.tableName == "string", We = async (e) => {
-	let t = await z(e, s), n = [];
-	for (let r of t) {
-		let t;
-		try {
-			t = await import(h(r).href);
-		} catch (t) {
-			R.warn("db: failed to import schema file", {
-				file: p(e, r),
-				error: String(t)
-			});
-			continue;
-		}
-		for (let e of Object.values(t)) Ue(e) && n.push(e);
-	}
-	return n;
-}, Ge = (e) => {
-	let t = new Map(e.map((e) => [e.tableName, e]));
-	t.has("actors") || t.set("actors", te);
-	let n = t.get("actors"), r = t.get("tenants");
-	return re({
-		actors: () => n,
-		...r === void 0 ? {} : { tenants: () => r }
-	}), [...t.values()];
-}, Ke = (e) => {
-	let t = /* @__PURE__ */ new Map();
-	for (let n of e) {
-		let e = n.tableName;
-		e !== void 0 && !t.has(e) && t.set(e, n);
-	}
-	return [...t.values()];
-}, qe = (e) => {
-	let t = le(process.env.VOLTRO_DESTRUCTIVE_OK);
-	if (t === void 0 || !e.operations.filter((e) => e.blocked).every((e) => e.classification === "lossy")) return {
-		plan: e,
-		acknowledged: !1
-	};
-	let n = ve(e, t);
-	return {
-		plan: n,
-		acknowledged: !n.operations.some((e) => e.blocked)
-	};
-}, J = async (e, t) => g.runPromise(t.pipe(g.provide(e))), Y = async (e) => {
-	try {
-		return await J(e, b.SqlClient.pipe(g.flatMap(de)));
-	} catch (e) {
-		let t = String(e?.message ?? e);
-		if (H(e) || /connection error/i.test(t)) {
-			let n = /* @__PURE__ */ Error(`${U}\n\nOriginal error: ${t}`);
-			throw n.cause = e, n;
-		}
-		throw e;
-	}
-}, Je = {
-	safe: "\x1B[32m✓\x1B[0m",
-	"needs-default": "\x1B[32m⊕\x1B[0m",
-	"needs-backfill": "\x1B[33m⊕\x1B[0m",
-	"needs-rename-annotation": "\x1B[33m⟲\x1B[0m",
-	lossy: "\x1B[31m✗\x1B[0m",
-	"online-required": "\x1B[36m◷\x1B[0m",
-	"multi-step": "\x1B[35m⇉\x1B[0m"
-}, Ye = (e) => {
-	let t = e.op, n;
-	switch (t.kind) {
-		case "create-table":
-			n = `CREATE TABLE ${t.table} (${t.columns.length} cols)`;
-			break;
-		case "drop-table":
-			n = `DROP TABLE ${t.table}`;
-			break;
-		case "add-column":
-			n = `ALTER TABLE ${t.table} ADD COLUMN ${t.column.name} ${t.column.type}${t.column.nullable ? "" : " NOT NULL"}`;
-			break;
-		case "drop-column":
-			n = `ALTER TABLE ${t.table} DROP COLUMN ${t.column}`;
-			break;
-		case "rename-column":
-			n = `ALTER TABLE ${t.table} RENAME COLUMN ${t.from} TO ${t.to}`;
-			break;
-		case "alter-column-nullability":
-			n = `ALTER TABLE ${t.table} ALTER COLUMN ${t.column} ${t.toNullable ? "DROP NOT NULL" : "SET NOT NULL"}`;
-			break;
-		case "alter-column-type":
-			n = `ALTER TABLE ${t.table} ALTER COLUMN ${t.column} TYPE ${t.to}`;
-			break;
-		case "alter-column-default":
-			n = `ALTER TABLE ${t.table} ALTER COLUMN ${t.column} ${t.hasDefault ? `SET DEFAULT ${JSON.stringify(t.defaultValue)}` : "DROP DEFAULT"}`;
-			break;
-		case "add-index":
-			n = `CREATE INDEX ${t.index.name} ON ${t.table} (${t.index.columns.join(", ")})`;
-			break;
-		case "drop-index":
-			n = `DROP INDEX ${t.index}`;
-			break;
-		case "rename-index":
-			n = `ALTER INDEX ${t.from} RENAME TO ${t.to}`;
-			break;
-		case "rename-table":
-			n = `ALTER TABLE ${t.from} RENAME TO ${t.to}`;
-			break;
-		case "add-unique":
-			n = `ALTER TABLE ${t.table} ADD UNIQUE (${t.column})`;
-			break;
-		case "drop-unique":
-			n = `ALTER TABLE ${t.table} DROP UNIQUE (${t.column})`;
-			break;
-		case "add-unique-composite":
-			n = `ALTER TABLE ${t.table} ADD CONSTRAINT ${t.name} UNIQUE (${t.fields.join(", ")})`;
-			break;
-		case "drop-unique-composite":
-			n = `ALTER TABLE ${t.table} DROP CONSTRAINT ${t.name}`;
-			break;
-		case "add-foreign-key":
-			n = `ALTER TABLE ${t.table} ADD FK ${t.column} → ${t.targetTable}.${t.targetColumn}`;
-			break;
-		case "drop-foreign-key":
-			n = `ALTER TABLE ${t.table} DROP FK ${t.column}`;
-			break;
-		case "add-check":
-			n = `ALTER TABLE ${t.table} ADD CHECK (${t.column} IN (${t.values.join(", ")}))`;
-			break;
-		case "drop-check":
-			n = `ALTER TABLE ${t.table} DROP CHECK ${t.column}`;
-			break;
-	}
-	let r = Je[e.classification], i = e.reason ? `  # ${e.reason}` : "", a = e.blocked ? `\n    ! ${e.blocked.fix}` : "";
-	return `  ${r} ${n}${i}${a}`;
-}, Xe = async (e, t) => {
-	let n = e.operations.filter((e) => e.classification === "needs-default" && e.op.kind === "add-column");
-	if (n.length === 0) return;
-	let r = [];
-	for (let e of n) {
-		let n = e.op, i = n.table, a = n.column?.name;
-		if (i === void 0 || a === void 0) continue;
-		let o = 0;
-		try {
-			let e = await J(t, b.SqlClient.pipe(g.flatMap((e) => e.unsafe(`SELECT COUNT(*) AS n FROM ${ne(i, W())}`))));
-			o = Number(Object.values(e[0] ?? { n: 0 })[0] ?? 0);
-		} catch {
-			continue;
-		}
-		o !== 0 && r.push(`  ${o.toLocaleString("en-US")} existing row(s) in ${i} will get the default for ${a}`);
-	}
-	if (r.length !== 0) {
-		console.log("\n  existing rows that a default will fill:");
-		for (let e of r) console.log(e);
-		console.log("  (the shape is correct either way — this is the VALUE a state diff cannot know)");
-	}
-}, X = async (e, t) => {
-	if (W() !== "postgres") return;
-	let n = ae, r;
-	try {
-		r = await J(t, b.SqlClient.pipe(g.flatMap((t) => ue(t, e, n))));
-	} catch {
-		return;
-	}
-	let i = pe({
-		tables: e,
-		dialect: "postgres",
-		missing: r.missing,
-		stale: r.stale,
-		channel: n
-	});
-	if (i.length === 0) return;
-	R.info(`db apply: installing change triggers on ${r.missing.length} table(s)` + (r.stale.length > 0 ? `, removing ${r.stale.length} stale one(s)` : ""));
-	let a = 0;
-	for (let e of i) await J(t, b.SqlClient.pipe(g.flatMap((t) => t.unsafe(e)))), a += 1;
-	R.info(`db apply: change triggers converged (${a} statement(s))`, {
-		installed: r.missing.length,
-		removed: r.stale.length
-	});
-}, Z = (e) => {
-	let t = e.summary, n = e.operations.length;
-	if (console.log(`\nschema diff: ${n} operation${n === 1 ? "" : "s"}, ${t.blocked} blocked\n`), n === 0) {
-		console.log("  (schema is up to date)\n");
-		return;
-	}
-	for (let t of e.operations) console.log(Ye(t));
-	console.log(), console.log(`  safe: ${t.safe}   needs-default: ${t.needsDefault}   needs-backfill: ${t.needsBackfill}`), console.log(`  rename: ${t.needsRenameAnnotation}   lossy: ${t.lossy}   blocked: ${t.blocked}`), console.log(`  fingerprint: ${e.fromFingerprint.slice(0, 16)} → ${e.toFingerprint.slice(0, 16)}\n`), Ze(e);
-}, Ze = (e) => {
-	let t = he(e.operations);
-	if (t.length !== 0) {
-		console.log(`  ⚠ ${t.length} operation(s) UNSAFE under a rolling deploy`), console.log("    (old + new instances overlap → old code breaks against the new schema):");
-		for (let e of t) console.log(`      • ${e.op.op.kind}: ${e.reason}`), console.log(`        → ${e.remedy}`);
-		console.log("    Deploy with a maintenance window / scale-to-zero, or split into"), console.log("    expand → deploy → contract. See docs: deployment/production-hardening.\n");
-	}
-}, Qe = (e, t) => {
-	let n = se({
-		enabled: process.env.VOLTRO_ROLLING_DEPLOY === "1",
-		forced: t.includes("--force"),
-		unsafeCount: he(e.operations).length
-	});
-	return n.refuse ? (R.error(`db apply: ${n.message}`), !0) : (n.warnForced && R.warn(`db apply: ${n.message}`), !1);
-}, $e = (e) => {
-	let t = l(e, "--online-after") ?? process.env.VOLTRO_ONLINE_THRESHOLD;
-	if (t === void 0) return;
-	let n = Number(t);
-	if (!Number.isInteger(n) || n < 0) throw Error(`--online-after / VOLTRO_ONLINE_THRESHOLD must be a non-negative integer, got "${t}"`);
-	return n;
-}, Q = async (e) => {
-	let t = await We(e);
-	if (t.length === 0) return;
-	let n = await o({ root: e });
-	return Ge(Ke([
-		...t,
-		...x,
-		...n
-	]));
-}, et = async (e) => {
-	let t = $e(e), n = B(e), r = await Q(n);
-	if (r === void 0) return R.warn("db plan: no schema files found", {
-		root: n,
-		hint: "looked for *.entity.ts / *.schema.ts / schema.ts"
-	}), 1;
-	let i = l(e, "--against");
-	if (i) {
-		let n = i, a = l(e, "--token") ?? process.env.VOLTRO_INSPECT_TOKEN, o = { accept: "application/json" };
-		a && (o.authorization = `Bearer ${a}`);
-		try {
-			let e = n.endsWith("/_voltro/inspect/migrations") ? n : `${n.replace(/\/+$/, "")}/_voltro/inspect/migrations`, i = await fetch(e, { headers: o });
-			if (!i.ok) return R.error(`db plan --against: remote returned ${i.status}`, { url: e }), 1;
-			let a = (await i.json()).drift?.liveSnapshot;
-			if (!a) return R.error("db plan --against: remote inspect payload missing drift.liveSnapshot", { url: e }), 1;
-			let s = E({
-				declared: r,
-				live: a,
-				dialect: W(),
-				...T(),
-				...t === void 0 ? {} : { onlineAfter: t }
-			});
-			return console.log(`\n[--against ${e}] — diff vs remote live schema:\n`), Z(s), s.summary.blocked > 0 ? 2 : 0;
-		} catch (e) {
-			return R.error(`db plan --against: ${e.message}`), 1;
-		}
-	}
-	let a = E({
-		declared: r,
-		live: await Y(await q()),
-		dialect: W(),
-		...T(),
-		...t === void 0 ? {} : { onlineAfter: t }
-	});
-	return e.includes("--json") ? (y(1, `${JSON.stringify(a, null, 2)}\n`), a.summary.blocked > 0 ? 2 : 0) : (Z(a), a.summary.blocked > 0 ? 2 : 0);
-}, tt = async (e, t, n) => {
-	let r;
-	try {
-		let t = await v.readFile(m(e), "utf8");
-		r = JSON.parse(t);
-	} catch (t) {
-		return R.error(`db apply --plan: cannot read/parse plan file '${e}': ${t.message}`), 1;
-	}
-	if (!Array.isArray(r?.operations) || typeof r?.fromFingerprint != "string" || typeof r?.toFingerprint != "string") return R.error(`db apply --plan: '${e}' is not a valid plan file (expected the output of \`voltro db plan --json\`).`), 1;
-	let i = await Q(n);
-	if (i === void 0) return R.warn("db apply --plan: no schema files found", { root: n }), 1;
-	let a = await q();
-	await J(a, C(x, W()));
-	let o = await J(a, b.SqlClient.pipe(g.flatMap((e) => fe(e, n)))).catch(() => []);
-	if (o.length > 0) return R.error(`db apply --plan: refusing — ${o.length} pending file-based migration(s).`), console.error(`  ${o.join("\n  ")}`), console.error(""), console.error("  These perform the changes a state diff cannot infer, so they change the shape"), console.error("  this plan was computed against. Apply them and regenerate the plan:"), console.error(""), console.error("    voltro db files ."), console.error("    voltro db plan --json > plan.json"), console.error("    voltro db apply --plan plan.json"), 1;
-	let s = E({
-		declared: i,
-		live: await Y(a),
-		dialect: W(),
-		...T()
-	});
-	if (s.fromFingerprint !== r.fromFingerprint) return R.error("db apply --plan: refusing — the live schema has drifted since this plan was generated."), console.error(`  plan.from=${r.fromFingerprint.slice(0, 16)}  live=${s.fromFingerprint.slice(0, 16)}`), console.error("  Regenerate against the current live schema: `voltro db plan --json > plan.json`"), 2;
-	if (s.toFingerprint !== r.toFingerprint) return R.error("db apply --plan: refusing — the declared schema differs from what this plan targets."), console.error(`  plan.to=${r.toFingerprint.slice(0, 16)}  declared=${s.toFingerprint.slice(0, 16)}`), console.error("  The schema files changed since the plan was generated. Regenerate the plan."), 2;
-	let c = qe(s), u = c.plan;
-	if (u.summary.blocked > 0 && !c.acknowledged) return Z(u), R.error(`db apply --plan: refusing — ${s.summary.blocked} blocked operation(s). See the fix hints above.`), process.env.VOLTRO_DESTRUCTIVE_OK !== void 0 && (R.error("  VOLTRO_DESTRUCTIVE_OK is set but did not cover this plan — it only relaxes"), R.error("  `lossy` operations, and only the tables it names. Anything else stays refused.")), 2;
-	if (c.acknowledged && R.warn("db apply --plan: proceeding with acknowledged lossy operation(s) (VOLTRO_DESTRUCTIVE_OK)"), Qe(u, t)) return 2;
-	if (u.operations.length === 0) return R.info("db apply --plan: schema is up to date — no DDL to apply (change triggers are reconciled separately below)"), await X(i, a), 0;
-	Z(u);
-	let d = (process.env.NODE_ENV ?? "dev").toLowerCase(), f = l(t, "--note"), p = await J(a, b.SqlClient.pipe(g.flatMap((e) => oe(e, u, {
-		declared: i,
-		appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:plan",
-		environment: d === "production" ? "prod" : d === "staging" ? "staging" : "dev",
-		source: "file",
-		...f ? { notes: f } : {},
-		replan: () => g.promise(() => Y(a)).pipe(g.map((e) => E({
-			declared: i,
-			live: e,
-			dialect: W(),
-			...T()
-		})))
-	}))));
-	return R.info(`db apply --plan: applied ${p.appliedOps} op(s) in ${p.durationMs}ms`, {
-		id: p.id,
-		fingerprint: p.fingerprint.slice(0, 16)
-	}), await X(i, a), 0;
-}, nt = async (e) => {
-	let t = B(e), n = $e(e), r = l(e, "--plan");
-	if (r) return tt(r, e, t);
-	if ((process.env.NODE_ENV ?? "").toLowerCase() === "production") return R.error("voltro db apply: refusing — auto-apply on prod is not allowed."), console.error("In production, schema changes go through `voltro db plan --json > plan.json`"), console.error("then `voltro db apply --plan plan.json` as an explicit step in your deploy pipeline."), 3;
-	let i = await Q(t);
-	if (i === void 0) return R.warn("db apply: no schema files found", { root: t }), 1;
-	let a = await q(), o = await dt(t, a);
-	if ("failed" in o) return R.error("db apply: a file-based migration FAILED — the schema diff was NOT run"), console.error(o.failed), console.error("Fix the migration and re-run. `voltro db files` runs them alone."), 1;
-	await J(a, C(x, W()));
-	let s = E({
-		declared: i,
-		live: await Y(a),
-		dialect: W(),
-		...T(),
-		...n === void 0 ? {} : { onlineAfter: n }
-	});
-	Z(s), await Xe(s, a);
-	let c = qe(s), u = c.plan;
-	if (u.summary.blocked > 0 && !c.acknowledged) return R.error(`db apply: refusing — ${u.summary.blocked} blocked operation(s). See the fix hints above.`), process.env.VOLTRO_DESTRUCTIVE_OK !== void 0 && (R.error("  VOLTRO_DESTRUCTIVE_OK is set but did not cover this plan — it only relaxes"), R.error("  `lossy` operations, and only the tables it names. Anything else stays refused.")), 2;
-	if (c.acknowledged && R.warn(`db apply: proceeding with ${s.summary.blocked} acknowledged lossy operation(s) (VOLTRO_DESTRUCTIVE_OK)`), Qe(u, e)) return 2;
-	if (u.operations.length === 0) return R.info("db apply: schema is up to date — no DDL to apply (change triggers are reconciled separately below)"), await st(a), l(e, "--note") !== void 0 && (R.warn("db apply: --note was ignored — an empty plan writes no history row to attach it to."), console.error("To record that the CURRENT live schema is the accepted baseline, use `voltro db drift --accept`.")), await X(i, a), 0;
-	let d = l(e, "--note"), f = await J(a, b.SqlClient.pipe(g.flatMap((e) => oe(e, u, {
-		declared: i,
-		appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:user",
-		environment: (process.env.NODE_ENV ?? "dev").toLowerCase() === "staging" ? "staging" : "dev",
-		source: "auto-diff",
-		...d ? { notes: d } : {},
-		replan: () => g.promise(() => Y(a)).pipe(g.map((e) => E({
-			declared: i,
-			live: e,
-			dialect: W(),
-			...T(),
-			...n === void 0 ? {} : { onlineAfter: n }
-		})))
-	}))));
-	return R.info(`db apply: applied ${f.appliedOps} op(s) in ${f.durationMs}ms`, {
-		id: f.id,
-		fingerprint: f.fingerprint.slice(0, 16)
-	}), await X(i, a), 0;
-}, rt = async (e) => {
-	let t = Math.max(1, Number(l(e, "--limit") ?? "20")), n = await J(await q(), b.SqlClient.pipe(g.flatMap((e) => e`
-        SELECT ${e("id")}, ${e("fingerprint")}, ${e("operations")},
-               ${e("appliedBy")}, ${e("environment")}, ${e("source")},
-               ${e("durationMs")}, ${e("notes")}, ${e("appliedAt")}
-        FROM ${e("_voltro_migration_plans")}
-        ORDER BY ${e("appliedAt")} DESC
-        LIMIT ${t}
-      `)));
-	if (n.length === 0) return R.info("db plans: no planner-based migrations applied yet"), console.log("Run `voltro db apply` after a schema change to start a plan history."), 0;
-	console.log(`\n${n.length} plan${n.length === 1 ? "" : "s"} (newest first):\n`);
-	for (let e of n) {
-		let t = 0;
-		try {
-			t = JSON.parse(ct(e.operations)).length;
-		} catch {}
-		console.log(`  ${e.id}  fp=${D(e.fingerprint)}  env=${e.environment}  src=${e.source}  ${t} op(s)  ${e.durationMs}ms  ${$(e.appliedAt)}  by=${e.appliedBy}`), e.notes && console.log(`    [2mnote: ${e.notes}[0m`);
-	}
-	return console.log(), 0;
-}, it = async (e) => {
-	let t = e[0];
-	if (!t) return console.error("voltro db restore-snapshot <plan-id>"), console.error("  Renames soft-dropped columns/tables from a plan back to their original names."), console.error("  Requires the plan to have been applied with VOLTRO_SOFT_DROP=1."), 2;
-	let n = await q(), r = await J(n, b.SqlClient.pipe(g.flatMap((e) => e`SELECT ${e("id")}, ${e("operations")}
-                   FROM ${e("_voltro_migration_plans")} WHERE ${e("id")} = ${t}`)));
-	if (r.length === 0) return console.error(`restore-snapshot: plan '${t}' not found`), 1;
-	let i;
-	try {
-		i = JSON.parse(ct(r[0].operations));
-	} catch {
-		return console.error(`restore-snapshot: plan '${t}' has corrupted operations JSON`), 1;
-	}
-	let a = [];
-	for (let e of i) e.op?.kind === "drop-column" && e.op.table && e.op.column && a.push({
-		table: e.op.table,
-		column: e.op.column
-	});
-	let o = [];
-	for (let e of i) e.op?.kind === "drop-table" && e.op.table && o.push({ table: e.op.table });
-	if (a.length === 0 && o.length === 0) return console.log(`restore-snapshot: plan '${t}' has no drop-column / drop-table ops to restore`), 0;
-	let s = 0;
-	for (let e of a) {
-		let t = await J(n, b.SqlClient.pipe(g.flatMap((t) => t`
-          SELECT column_name FROM information_schema.columns
-          WHERE ${t.unsafe(K(W()))}
-            AND table_name   = ${e.table}
-            AND column_name LIKE ${e.column + "__dropped_%"}
-          ORDER BY column_name DESC LIMIT 1
-        `)));
-		if (t.length === 0) {
-			console.warn(`restore-snapshot: no snapshot found for ${e.table}.${e.column} — was the plan applied with VOLTRO_SOFT_DROP=1?`);
-			continue;
-		}
-		let r = t[0].column_name;
-		await J(n, b.SqlClient.pipe(g.flatMap((t) => t.unsafe(`ALTER TABLE ${G(e.table)} RENAME COLUMN ${G(r)} TO ${G(e.column)}`)))), s++, console.log(`  ↩ restored ${e.table}.${e.column} (from ${r})`);
-	}
-	let c = 0;
-	for (let e of o) {
-		let t = await J(n, b.SqlClient.pipe(g.flatMap((t) => t`
-          SELECT table_name FROM information_schema.tables
-          WHERE ${t.unsafe(K(W()))}
-            AND table_name LIKE ${e.table + "__dropped_%"}
-          ORDER BY table_name DESC LIMIT 1
-        `)));
-		if (t.length === 0) {
-			console.warn(`restore-snapshot: no snapshot found for table ${e.table} — was the plan applied with VOLTRO_SOFT_DROP=1?`);
-			continue;
-		}
-		let r = t[0].table_name;
-		await J(n, b.SqlClient.pipe(g.flatMap((t) => t.unsafe(`ALTER TABLE ${G(r)} RENAME TO ${G(e.table)}`)))), c++, console.log(`  ↩ restored table ${e.table} (from ${r})`);
-	}
-	return console.log(`\n✓ restored ${s} column(s) + ${c} table(s) from plan '${t}'\n`), 0;
-}, at = async (e) => {
-	let t = l(e, "--before");
-	if (!t) return console.error("voltro db gc-snapshots --before <date> [--dry-run]"), console.error("  Permanently drops soft-dropped columns/tables (<name>__dropped_<ts>) older than <date>."), console.error("  <date> is ISO — e.g. 2026-01-01 or 2026-01-01T00:00:00Z. NOT reversible."), 2;
-	let n = t.replace(/[^0-9]/g, "");
-	if (n.length < 8) return console.error(`gc-snapshots: --before must be at least a full date (YYYY-MM-DD), got "${t}"`), 2;
-	let r = (n + "00000000000000").slice(0, 14), i = e.includes("--dry-run"), a = await q(), o = await J(a, b.SqlClient.pipe(g.flatMap((e) => e`
-        SELECT table_name, column_name FROM information_schema.columns
-        WHERE ${e.unsafe(K(W()))} AND column_name LIKE ${"%__dropped_%"}
-      `))), s = await J(a, b.SqlClient.pipe(g.flatMap((e) => e`
-        SELECT table_name FROM information_schema.tables
-        WHERE ${e.unsafe(K(W()))} AND table_name LIKE ${"%__dropped_%"}
-      `))), c = (e) => {
-		let t = /__dropped_(\d{14})$/.exec(e);
-		return t ? t[1] : null;
-	}, u = 0;
-	for (let e of o) {
-		let t = c(e.column_name);
-		t === null || t >= r || (console.log(`  ${i ? "[dry-run] would drop column" : "dropping column"} ${e.table_name}.${e.column_name}`), i || await J(a, b.SqlClient.pipe(g.flatMap((t) => t.unsafe(`ALTER TABLE ${G(e.table_name)} DROP COLUMN ${G(e.column_name)}`)))), u++);
-	}
-	for (let e of s) {
-		let t = c(e.table_name);
-		t === null || t >= r || (console.log(`  ${i ? "[dry-run] would drop table" : "dropping table"} ${e.table_name}`), i || await J(a, b.SqlClient.pipe(g.flatMap((t) => t.unsafe(`DROP TABLE ${G(e.table_name)}`)))), u++);
-	}
-	return console.log(`\n${i ? `[dry-run] ${u} snapshot(s) would be dropped` : `✓ dropped ${u} snapshot(s)`} (older than ${r}).\n`), 0;
-}, ot = async (e) => {
-	let t = l(e, "--before");
-	if (!t) return console.error("voltro db squash --before <iso-date> [--note \"<text>\"]"), 2;
-	let n = t;
-	if (Number.isNaN(new Date(n).getTime())) return console.error(`voltro db squash: --before '${n}' is not a valid ISO date`), 2;
-	let r = l(e, "--note"), i = B(e), a = await Q(i);
-	if (a === void 0) return R.warn("db squash: no schema files found", { root: i }), 1;
-	let o = w(ce(a)), s = await q();
-	try {
-		let e = await J(s, _e({
-			before: n,
-			fingerprint: o,
-			appliedBy: process.env.USER ?? "cli",
-			environment: process.env.NODE_ENV === "production" ? "prod" : "dev",
-			...r === void 0 ? {} : { note: r }
-		}));
-		return console.log(`\n✓ squashed ${e.squashedCount} migration plan(s)\n  snapshot id: ${e.snapshotId}\n  fingerprint: ${D(e.snapshotFingerprint)}\n`), 0;
-	} catch (e) {
-		return console.error(`squash refused: ${e.message}`), 1;
-	}
-}, st = async (e) => {
-	try {
-		let t = w(await Y(e));
-		await J(e, b.SqlClient.pipe(g.flatMap((e) => e`
-          UPDATE ${e("_voltro_migration_plans")}
-          SET ${e("liveFingerprint")} = ${t}
-          WHERE ${e("id")} = (
-            SELECT ${e("id")} FROM (
-              SELECT ${e("id")} FROM ${e("_voltro_migration_plans")}
-              ORDER BY ${e("appliedAt")} DESC LIMIT 1
-            ) AS ${e("newest")}
-          )
-            AND ${e("liveFingerprint")} IS NULL
-        `)));
-	} catch {}
-}, ct = (e) => typeof e == "string" ? e : e == null ? "" : JSON.stringify(e), $ = (e) => e instanceof Date ? e.toISOString() : String(e ?? ""), lt = (e) => e === void 0 ? {
-	accept: !1,
-	reason: "no-declared-schema"
-} : e > 0 ? {
-	accept: !1,
-	reason: "pending"
-} : {
-	accept: !0,
-	reason: "converged"
-}, ut = async (e) => {
-	let t = e.includes("--accept"), n = await q(), r = await J(n, b.SqlClient.pipe(g.flatMap((e) => e`
-        SELECT * FROM ${e("_voltro_migration_plans")}
-        ORDER BY ${e("appliedAt")} DESC
-        LIMIT 1
-      `))), i = await Y(n), a = w(i);
-	if (r.length === 0) return R.info("db drift: no _voltro_migration_plans rows yet"), console.log(`live user-schema fingerprint: ${D(a)}`), console.log("No baseline to compare against. Run `voltro db apply` to lock in the current state."), 0;
-	let o = r[0];
-	if (o.liveFingerprint === null || o.liveFingerprint === void 0) return R.warn("db drift: no drift baseline recorded yet — cannot compare"), console.log(), console.log(`  last applied:  ${o.id}  at ${$(o.appliedAt)}`), console.log(`  live now:      ${D(a)}`), console.log(), console.log("That row was written before the framework recorded a live-schema baseline,"), console.log("and the value it does carry is the DECLARED snapshot's hash — not comparable"), console.log("with a live one. Run `voltro db apply` once to establish the baseline (a no-op"), console.log("apply backfills it too); use `voltro db plan` meanwhile, which compares declared"), console.log("against live directly."), console.log(), console.log("Exit code 3 — NOT 0. \"Did not compare\" is not \"clean\", and a gate on the exit"), console.log("code has to be able to tell them apart."), 3;
-	if (o.liveFingerprint === a) return R.info(`db drift: live matches last applied (${D(a)})`), 0;
-	let s = await (async () => {
-		try {
-			let t = await Q(B(e));
-			return t === void 0 ? void 0 : E({
-				declared: t,
-				live: i,
-				dialect: W(),
-				...T()
-			}).operations;
-		} catch {
-			return;
-		}
-	})();
-	if (t) {
-		let e = lt(s?.length);
-		if (e.reason === "no-declared-schema") return R.error("db drift --accept: no schema files found — cannot verify the live schema is current."), 1;
-		if (!e.accept && s !== void 0) {
-			R.error(`db drift --accept: refusing — ${s.length} operation(s) still pending against your declared schema.`), console.log();
-			for (let e of s.slice(0, 10)) console.log(`  - ${e.op.kind} ${"table" in e.op ? `[${e.op.table}]` : ""}`);
-			return s.length > 10 && console.log(`  … and ${s.length - 10} more`), console.log(), console.log("`--accept` records the CURRENT live schema as the applied baseline. It is for a"), console.log("change that already landed out of band and left the schema correct — not for one"), console.log("that has not landed. Run `voltro db apply` instead; it writes a real baseline."), 4;
-		}
-		return await J(n, b.SqlClient.pipe(g.flatMap((e) => e`
-          UPDATE ${e("_voltro_migration_plans")}
-          SET ${e("liveFingerprint")} = ${a}
-          WHERE ${e("id")} = (
-            SELECT ${e("id")} FROM (
-              SELECT ${e("id")} FROM ${e("_voltro_migration_plans")}
-              ORDER BY ${e("appliedAt")} DESC LIMIT 1
-            ) AS ${e("newest")}
-          )
-        `))), R.info(`db drift: accepted the live schema as the baseline (${D(a)})`), console.log(), console.log("`voltro db plan` reports 0 operations against this schema, so the live state already"), console.log("matches your declaration — only the ledger did not know. It does now."), console.log(), console.log("No history entry was invented: the latest row's baseline was updated in place,"), console.log("because no migration ran."), 0;
-	}
-	return R.error("db drift: live schema DIVERGED from last applied state"), console.log(), console.log(`  baseline:      ${D(o.liveFingerprint)}  at ${$(o.appliedAt)}  (${o.id})`), console.log(`  live now:      ${D(a)}`), console.log(), console.log("Something changed the live schema after the last apply. This command can see"), console.log("THAT it changed, not what or who — the fingerprints are hashes, not a diff."), console.log(), s === void 0 ? (console.log("No schema files found here, so the declared side could not be compared."), console.log("Run `voltro db plan` from your project root for the actual difference."), 4) : s.length === 0 ? (console.log("Your DECLARED schema is already satisfied — `voltro db plan` reports 0 operations"), console.log("against this database. So the live schema is not wrong, only unrecorded: something"), console.log("applied a change without going through the planner (a hand-run ALTER, a DBA"), console.log("window, a restored dump), or it touched a table your code does not declare."), console.log(), console.log("If that was deliberate and the schema is right, record it:"), console.log(), console.log("    voltro db drift --accept"), console.log(), console.log("It updates the latest ledger row's baseline to the live schema and invents no"), console.log("history entry. Drift then measures from here."), 4) : (console.log(`\`voltro db plan\` reports ${s.length} operation(s) still pending against your`), console.log("declared schema, so this is not merely an unrecorded change — run it for the diff,"), console.log("then `voltro db apply`, which writes a fresh baseline of its own."), 4);
-}, dt = async (e, t) => {
-	let n = (process.env.NODE_ENV ?? "").toLowerCase() === "production" ? "prod" : (process.env.NODE_ENV ?? "").toLowerCase() === "staging" ? "staging" : "dev";
-	try {
-		let r = await J(t, b.SqlClient.pipe(g.flatMap((t) => ge(t, {
-			projectRoot: e,
-			env: n,
-			appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:user"
-		}))));
-		return r.applied.length > 0 && R.info(`db apply: applied ${r.applied.length} pending file-based migration(s) first`, { applied: r.applied.map((e) => `${e.id} (${e.durationMs}ms)`) }), { applied: r.applied.length };
-	} catch (e) {
-		return { failed: e };
-	}
-}, ft = async (e) => {
-	let t = B(e), n = await q(), r = (process.env.NODE_ENV ?? "").toLowerCase() === "production" ? "prod" : (process.env.NODE_ENV ?? "").toLowerCase() === "staging" ? "staging" : "dev";
-	await J(n, C(x, W()));
-	let i = await J(n, b.SqlClient.pipe(g.flatMap((e) => ge(e, {
-		projectRoot: t,
-		env: r,
-		appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:user"
-	}))));
-	return i.applied.length === 0 ? (R.info(`db files: no pending file-based migrations (${i.skipped.length} already applied)`), 0) : (R.info(`db files: applied ${i.applied.length} migration(s)`, {
-		applied: i.applied.map((e) => `${e.id} (${e.durationMs}ms)`),
-		skipped: i.skipped.length
-	}), 0);
-}, pt = async (e) => {
-	let t = B(e), n = e.find((e) => !e.startsWith("--"));
-	if (!n) return R.error("voltro db rollback-file <migration-id>"), 2;
-	if ((process.env.NODE_ENV ?? "").toLowerCase() === "production") return R.error("voltro db rollback-file: refusing on prod — schema rollback runs as an explicit deploy step."), 3;
-	let r = await J(await q(), b.SqlClient.pipe(g.flatMap((e) => me(e, {
-		projectRoot: t,
-		id: n
-	}))));
-	return R.info(`db rollback-file: rolled back ${r.id} in ${r.durationMs}ms`), 0;
-}, mt = () => {
-	let e = /* @__PURE__ */ new Date();
-	return [
-		e.getUTCFullYear(),
-		String(e.getUTCMonth() + 1).padStart(2, "0"),
-		String(e.getUTCDate()).padStart(2, "0"),
-		String(e.getUTCHours()).padStart(2, "0"),
-		String(e.getUTCMinutes()).padStart(2, "0"),
-		String(e.getUTCSeconds()).padStart(2, "0")
-	].join("");
-}, ht = (e) => e.trim().toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "") || "migration", gt = (e, t) => `import { defineMigration, SqlClient } from '@voltro/database'
-import { Effect } from 'effect'
-
-// A hand-written migration. Reach for this when the DECLARATIVE differ can't
-// express the change — a data backfill, a value re-encode, a table rename that
-// must preserve rows. For plain schema shape changes (add a column/table/index)
-// you usually DON'T need this: edit the entity + run \`voltro db apply\`, which
-// diffs your declared schema against the live DB automatically.
-//
-// \`voltro db migrate\` applies every pending *.migration.ts in timestamp order
-// and records each in \`_voltro_migrations\`; \`voltro db rollback\` runs \`undo\`.
-export default defineMigration({
-  id: '${e}',
-  name: '${t}',
-  steps: ({ step }) => [
-    step('${t}', {
-      // Forward migration. Runs inside a transaction; the SqlClient is provided.
-      apply: Effect.gen(function* () {
-        const sql = yield* SqlClient.SqlClient
-        // TODO: your change, e.g.
-        // yield* sql\`ALTER TABLE widgets ADD COLUMN archived boolean NOT NULL DEFAULT false\`
-      }),
-      // The inverse — what \`voltro db rollback\` runs to undo the step. Keep it
-      // an exact reverse so a rollback restores the prior state.
-      undo: Effect.gen(function* () {
-        const sql = yield* SqlClient.SqlClient
-        // TODO: reverse the apply above, e.g.
-        // yield* sql\`ALTER TABLE widgets DROP COLUMN archived\`
-      }),
-    }),
-  ],
-})
-`, _t = {
-	plan: et,
-	apply: nt,
-	plans: rt,
-	drift: ut,
-	files: ft,
-	"rollback-file": pt,
-	migrate: Re,
-	rollback: ze,
-	status: Be,
-	seed: He,
-	generate: async (e) => {
-		let { value: t, rest: n } = c(e, "--root"), { value: r, rest: i } = c(n, "--name"), a = t ? m(t) : process.cwd(), o = ht(r ?? u(i) ?? "migration"), s = `${mt()}_${o}`, l = f(a, "migrations"), d = f(l, `${s}.migration.ts`);
-		return await v.mkdir(l, { recursive: !0 }), await v.writeFile(d, gt(s, o), "utf8"), R.info(`created ${p(a, d)}`), console.error("Fill in the apply/undo steps, then run `voltro db migrate` (rollback with `voltro db rollback`)."), console.error("For a plain schema shape change you may not need this — `voltro db apply` diffs declared vs live."), 0;
-	},
-	squash: ot,
-	"restore-snapshot": it,
-	"gc-snapshots": at,
-	adopt: async (e) => {
-		let t = (t) => {
-			let n = e.indexOf(`--${t}`);
-			return n === -1 ? void 0 : e[n + 1];
-		}, n = t("from"), r = t("into"), i = t("map");
-		if (n === void 0 || r === void 0 || i === void 0) return console.error("voltro db adopt --from <table> --into <table> --map <file.ts> [--apply] [--keep-source]"), console.error("  Dry run unless --apply. The map file default-exports { map, leaveUnset? }."), 1;
-		let o = (await a(m(process.cwd(), i))).default;
-		if (o?.map === void 0) return console.error(`voltro db adopt: ${i} must default-export { map: { <targetColumn>: <source> } }`), 1;
-		let s = {
-			from: n,
-			into: r,
-			map: o.map,
-			...o.leaveUnset ? { leaveUnset: o.leaveUnset } : {}
-		}, c = W(), l = await q(), u = await J(l, b.SqlClient.pipe(g.flatMap(de))), d = (e) => u.tables.find((t) => t.name === e)?.columns.map((e) => ({
-			name: e.name,
-			nullable: e.nullable,
-			hasDefault: e.defaultValue !== void 0 && e.defaultValue !== null
-		})), f = d(n), p = d(r);
-		if (f === void 0) return console.error(`voltro db adopt: '${n}' does not exist in the database`), 1;
-		if (p === void 0) return console.error(`voltro db adopt: '${r}' does not exist in the database — boot once so the plugin's table is created`), 1;
-		let h = async (e) => await J(l, b.SqlClient.pipe(g.flatMap((t) => t.unsafe(e)))), _ = async (e) => Number(Object.values((await h(`SELECT COUNT(*) AS n FROM "${e}"`))[0] ?? { n: 0 })[0] ?? 0), v = xe(s, f, p, await _(r));
-		for (let e of Ce(s, v, await _(n))) console.log(e);
-		if (v.fatal) return 1;
-		if (!e.includes("--apply")) return console.log(""), console.log("  (dry run — nothing written. Re-run with --apply.)"), 0;
-		let y = await Oe(s, v, c, "id", void 0, h, { keepSource: e.includes("--keep-source") });
-		return console.log(""), console.log(`  copied ${y.copied}/${y.sourceRows} row(s)`), console.log(`  snapshot: ${y.snapshotTable}  — restore from here, then drop it yourself`), y.verified ? (console.log(y.sourceDropped ? `  dropped ${n}` : `  ${n} left in place (--keep-source)`), 0) : (console.error("  ✗ counts DIFFER — the source was NOT dropped. Compare the two tables before doing anything else."), 1);
-	},
-	"scan-credentials": async (e) => {
-		let t = W(), n = [];
-		for (let t = 0; t < e.length; t += 1) {
-			if (e[t] !== "--table") continue;
-			let r = e[t + 1];
-			if (r === void 0) throw new O("voltro db scan-credentials: --table needs a value");
-			let [i, a = "subject"] = r.split(":");
-			n.push({
-				table: i,
-				column: a
-			});
-		}
-		let r = [...ke, ...n], i = await J(await q(), b.SqlClient.pipe(g.flatMap((e) => g.promise(() => Me(e, t, r, G)))));
-		return console.log(Ne(i, t)), Pe(i);
-	}
-}, vt = async (e) => {
-	let [t, ...n] = e;
-	if (!t) {
-		console.error("voltro db <subcommand> [args]"), console.error("subcommands:");
-		for (let e of Object.keys(_t)) console.error(`  ${e}`);
-		return 1;
-	}
-	let r = _t[t];
-	if (!r) return console.error(`voltro db: unknown subcommand '${t}'`), 2;
-	(process.env.DB_DIRECT_URL !== void 0 || process.env.DB_MIGRATE_URL !== void 0) && R.info("using a DIRECT (non-pooler) connection for the db-command path (DB_DIRECT_URL/DB_MIGRATE_URL set)");
-	let i = (e) => {
-		H(e) ? R.error(U) : console.error(e), process.exit(1);
-	};
-	process.on("uncaughtException", i);
-	try {
-		return await r(n);
-	} finally {
-		process.off("uncaughtException", i);
-	}
-};
-//#endregion
-export { Ge as a, O as c, lt as i, ye as l, V as n, H as o, We as r, vt as s, U as t };