@voltro/cli 0.36.0 → 0.38.0

package/dist/{dbCommand-O8HA63s2.js → dbCommand-C4UW8cVN.js}

@@ -1,24 +1,26 @@
-import { n as e, r as t } from "./nodeEnvironment-cGFAj1J8.js";
-import { t as n } from "./cliError-BmdYnghb.js";
-import { n as r } from "./appModuleLoader-C9r9mxZt.js";
-import { a as i, i as a, n as o, t as s } from "./cliArgs-D4p8n7EE.js";
-import { r as c } from "./dialectDriver-CgXnDfec.js";
-import { a as l } from "./connectionConfig-UFlIEiys.js";
-import { i as u, n as d, r as f, s as p, t as m } from "./seedRunner-ZmLSqNe2.js";
-import { n as h, s as g, y as _ } from "./frameworkTableAssembly-oMPBKqlE.js";
-import { b as v, x as y } from "./fileConventions-Cof68_BL.js";
-import { basename as b, join as x, relative as S, resolve as C } from "node:path";
-import { promises as w, writeSync as ee } from "node:fs";
-import { pathToFileURL as T } from "node:url";
-import { createLogger as te } from "@voltro/logger";
-import { Effect as E } from "effect";
-import { SqlClient as D } from "@effect/sql";
-import { DEFAULT_CDC_CHANNEL as ne, applyPlan as re, applySchema as O, assessRollingDeployGate as k, branchRehearsalExitCode as ie, declaredSnapshot as A, destructiveScope as ae, fingerprintSchema as oe, formatBranchRehearsal as se, ignoreTablesFromEnv as j, introspectSchema as ce, pendingFileMigrationIds as le, planMigrations as M, recordUpToDate as ue, rehearseMigrationOnBranch as de, rollbackFileBasedMigration as fe, rollingDeployUnsafeOps as pe, runFileBasedMigrations as me, shortFingerprint as N, squashMigrationPlans as he, unblockLossy as ge } from "@voltro/database/sql";
-import { actorsTable as _e, branchNamespaceName as ve, frameworkTables as P, isEncrypted as F, isMigrationDefinition as ye, makeNamespaceBranchExecutor as be, provisionBranch as xe, quoteIdent as Se, registerCoreTables as Ce, resolveBranchMechanism as we, teardownBranch as Te } from "@voltro/database";
-import { InMemoryDataStore as Ee, makeFieldCipher as De } from "@voltro/runtime";
-import { createHash as Oe } from "node:crypto";
+import { t as e } from "./subcommandNames-CKG5Dz3a.js";
+import { n as t, r as n } from "./nodeEnvironment-cGFAj1J8.js";
+import { t as r } from "./cliError-BmdYnghb.js";
+import { n as i } from "./appModuleLoader-C9r9mxZt.js";
+import { a, i as o, n as s, t as c } from "./cliArgs-D4p8n7EE.js";
+import { r as l } from "./dialectDriver-CgXnDfec.js";
+import { a as u } from "./connectionConfig-UFlIEiys.js";
+import { i as d, n as f, r as p, s as m, t as h } from "./seedRunner-ZmLSqNe2.js";
+import { n as g, s as _, y as v } from "./frameworkTableAssembly-oMPBKqlE.js";
+import { b as y, x as b } from "./fileConventions-Cof68_BL.js";
+import { n as ee, t as x } from "./inspectGateHint-BF6608UT.js";
+import { basename as te, join as S, relative as C, resolve as w } from "node:path";
+import { promises as T, writeSync as ne } from "node:fs";
+import { pathToFileURL as E } from "node:url";
+import { createLogger as D } from "@voltro/logger";
+import { Effect as O } from "effect";
+import { SqlClient as k } from "@effect/sql";
+import { DEFAULT_CDC_CHANNEL as A, applyPlan as re, applySchema as ie, assessRollingDeployGate as ae, branchRehearsalExitCode as oe, declaredSnapshot as se, destructiveScope as ce, fingerprintSchema as le, formatBranchRehearsal as ue, ignoreTablesFromEnv as j, introspectSchema as de, pendingFileMigrationIds as fe, planMigrations as M, recordUpToDate as pe, rehearseMigrationOnBranch as me, rollbackFileBasedMigration as he, rollingDeployUnsafeOps as ge, runFileBasedMigrations as _e, shortFingerprint as N, squashMigrationPlans as ve, unblockLossy as ye } from "@voltro/database/sql";
+import { actorsTable as be, branchNamespaceName as xe, frameworkTables as Se, isEncrypted as P, isMigrationDefinition as Ce, makeNamespaceBranchExecutor as we, provisionBranch as Te, quoteIdent as Ee, registerCoreTables as De, resolveBranchMechanism as Oe, teardownBranch as ke } from "@voltro/database";
+import { InMemoryDataStore as Ae, makeFieldCipher as je } from "@voltro/runtime";
+import { createHash as Me } from "node:crypto";
 //#region src/adoptPlan.ts
-var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
+var Ne = (e) => typeof e != "string", Pe = (e, t, n, r) => {
 	let i = [], a = new Map(t.map((e) => [e.name, e])), o = new Map(n.map((e) => [e.name, e])), s = new Set(e.leaveUnset ?? []);
 	r > 0 && i.push({
 		kind: "target-not-empty",
@@ -35,7 +37,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			});
 			continue;
 		}
-		if (ke(n)) {
+		if (Ne(n)) {
 			c.push({
 				target: t,
 				source: n.expr,
@@ -78,23 +80,23 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		remintIds: f,
 		fatal: i.some((e) => e.fatal)
 	};
-}, je = (e, t) => [
+}, Fe = (e, t) => [
 	`back up '${e.from}' to a restorable dump`,
 	`copy rows: INSERT INTO ${e.into} (${t.assignments.map((e) => e.target).join(", ")}) SELECT … FROM ${e.from}`,
 	...t.remintIds ? ["record old id → new id in a translation table", `rewrite every reference to '${e.from}', JSON columns included`] : [],
 	"verify: row counts match and a sample round-trips",
 	`drop '${e.from}' — LAST, and only after the verify`
-], Me = (e, t, n) => {
+], Ie = (e, t, n) => {
 	let r = [`adopt · ${e.from} (${n} row(s)) → ${e.into}`, ""];
 	for (let e of t.assignments) r.push(`  ${e.target.padEnd(24)} ← ${e.raw ? `${e.source}   (raw)` : e.source}`);
 	t.problems.length > 0 && r.push("");
 	for (let e of t.problems) r.push(`  ${e.fatal ? "✗" : "⚠"} ${e.detail}`);
 	if (r.push(""), t.fatal) return r.push("  REFUSED — fix the problems above. Nothing was written."), r;
 	r.push("  would run, in this order:");
-	for (let [n, i] of je(e, t).entries()) r.push(`    ${n + 1}. ${i}`);
+	for (let [n, i] of Fe(e, t).entries()) r.push(`    ${n + 1}. ${i}`);
 	return r;
-}, Ne = (e) => e === "mysql" || e === "mariadb" ? (e) => `\`${e}\`` : e === "mssql" ? (e) => `[${e}]` : (e) => `"${e}"`, Pe = (e) => `${e}__adopt_snapshot`, Fe = (e, t, n, r, i) => {
-	let a = Ne(n), o = Pe(e.from), s = t.assignments.map((e) => e.target), c = t.assignments.map((e) => e.raw ? e.source : a(e.source));
+}, Le = (e) => e === "mysql" || e === "mariadb" ? (e) => `\`${e}\`` : e === "mssql" ? (e) => `[${e}]` : (e) => `"${e}"`, Re = (e) => `${e}__adopt_snapshot`, ze = (e, t, n, r, i) => {
+	let a = Le(n), o = Re(e.from), s = t.assignments.map((e) => e.target), c = t.assignments.map((e) => e.raw ? e.source : a(e.source));
 	return i !== void 0 && (s.unshift(r), c.unshift(i)), {
 		snapshot: n === "mssql" ? `SELECT * INTO ${a(o)} FROM ${a(e.from)}` : `CREATE TABLE ${a(o)} AS SELECT * FROM ${a(e.from)}`,
 		copy: `INSERT INTO ${a(e.into)} (${s.map(a).join(", ")}) SELECT ${c.join(", ")} FROM ${a(e.from)}`,
@@ -104,18 +106,18 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		drop: `DROP TABLE ${a(e.from)}`,
 		dropSnapshot: `DROP TABLE ${a(o)}`
 	};
-}, Ie = (e) => {
+}, Be = (e) => {
 	let t = e[0];
 	if (t === void 0) return 0;
 	let n = t.n ?? t.N ?? Object.values(t)[0];
 	return Number(n ?? 0);
-}, Le = async (e, t, n, r, i, a, o = {}) => {
+}, Ve = async (e, t, n, r, i, a, o = {}) => {
 	if (t.fatal) throw Error("adopt: the plan was refused — nothing was run");
-	let s = Fe(e, t, n, r, i), c = Pe(e.from), l = Ie(await a(s.verifySource));
+	let s = ze(e, t, n, r, i), c = Re(e.from), l = Be(await a(s.verifySource));
 	await a(s.snapshot);
 	for (let e of s.translations) await a(e);
 	await a(s.copy);
-	let u = Ie(await a(s.verifyTarget));
+	let u = Be(await a(s.verifyTarget));
 	return u === l ? o.keepSource === !0 ? {
 		copied: u,
 		sourceRows: l,
@@ -135,7 +137,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		snapshotTable: c,
 		sourceDropped: !1
 	};
-}, I = [
+}, F = [
 	"token",
 	"secret",
 	"password",
@@ -144,7 +146,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	"credential",
 	"privatekey",
 	"private_key"
-], Re = [
+], He = [
 	{
 		table: "_voltro_audit_log",
 		column: "subject"
@@ -189,7 +191,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		table: "_voltro_row_history",
 		column: "subjectId"
 	}
-], ze = (e, t) => {
+], Ue = (e, t) => {
 	switch (t) {
 		case "postgres": return `LOWER(CAST(${e} AS text))`;
 		case "mysql":
@@ -198,17 +200,17 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		case "sqlite":
 		case "turso": return `LOWER(CAST(${e} AS TEXT))`;
 	}
-}, Be = (e, t, n = I) => n.map((n) => `${ze(e, t)} LIKE '%${n}%'`).join("\n     OR "), Ve = ["_omitted", "__redacted"], He = (e, t) => {
+}, We = (e, t, n = F) => n.map((n) => `${Ue(e, t)} LIKE '%${n}%'`).join("\n     OR "), Ge = ["_omitted", "__redacted"], Ke = (e, t) => {
 	let n = e.toLowerCase();
 	return t.some((e) => n.includes(e));
-}, Ue = (e, t = []) => {
+}, qe = (e, t = []) => {
 	if (Array.isArray(e)) {
-		for (let n of e) Ue(n, t);
+		for (let n of e) qe(n, t);
 		return t;
 	}
-	if (typeof e == "object" && e) for (let [n, r] of Object.entries(e)) t.push(n), Ue(r, t);
+	if (typeof e == "object" && e) for (let [n, r] of Object.entries(e)) t.push(n), qe(r, t);
 	return t;
-}, We = (e) => Array.isArray(e) ? e.map(We) : typeof e == "object" && e ? Object.fromEntries(Object.entries(e).map(([e, t]) => [e, Ve.includes(e) ? null : We(t)])) : e, Ge = (e, t = I) => {
+}, Je = (e) => Array.isArray(e) ? e.map(Je) : typeof e == "object" && e ? Object.fromEntries(Object.entries(e).map(([e, t]) => [e, Ge.includes(e) ? null : Je(t)])) : e, Ye = (e, t = F) => {
 	let n;
 	try {
 		n = JSON.parse(e);
@@ -220,33 +222,33 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		};
 	}
 	return {
-		asKey: Ue(n).some((e) => He(e, t)),
-		redactionMarkerOnly: !He(JSON.stringify(We(n)) ?? "", t),
+		asKey: qe(n).some((e) => Ke(e, t)),
+		redactionMarkerOnly: !Ke(JSON.stringify(Je(n)) ?? "", t),
 		undecidable: !1
 	};
-}, Ke = (e) => ({
+}, Xe = (e) => ({
 	examined: e.length,
 	asKey: e.filter((e) => e.asKey).length,
 	redactionMarkerOnly: e.filter((e) => e.redactionMarkerOnly && !e.asKey).length,
 	undecidable: e.filter((e) => e.undecidable).length
-}), L = (e) => {
+}), I = (e) => {
 	let t = e.classification;
 	return t === void 0 || e.hits === void 0 || e.hits === 0 ? !1 : t.examined === e.hits && t.undecidable === 0 && t.asKey === 0 && t.redactionMarkerOnly === e.hits;
-}, qe = (e, t, n, r) => {
-	let i = `WHERE ${Be(t, n)}`, a = ze(t, n).replace(/^LOWER\((.*)\)$/s, "$1");
+}, Ze = (e, t, n, r) => {
+	let i = `WHERE ${We(t, n)}`, a = Ue(t, n).replace(/^LOWER\((.*)\)$/s, "$1");
 	return n === "mssql" ? `SELECT TOP (${r}) ${a} AS v FROM ${e}\n   ${i}` : `SELECT ${a} AS v FROM ${e}\n   ${i}\n   LIMIT ${r}`;
-}, Je = async (e, t, n, r, i) => (await E.runPromise(e.unsafe(qe(t, n, r, i)))).map((e) => {
+}, Qe = async (e, t, n, r, i) => (await O.runPromise(e.unsafe(Ze(t, n, r, i)))).map((e) => {
 	let t = Object.values(e)[0];
 	return typeof t == "string" ? t : JSON.stringify(t ?? null);
-}), Ye = async (e, t) => {
-	let n = await E.runPromise(e.unsafe(t));
+}), L = async (e, t) => {
+	let n = await O.runPromise(e.unsafe(t));
 	return Number(Object.values(n[0] ?? { n: 0 })[0] ?? 0);
-}, Xe = async (e, t, n, r) => {
+}, $e = async (e, t, n, r) => {
 	let i = [];
 	for (let a of n) {
 		let n = r(a.table), o;
 		try {
-			o = await Ye(e, `SELECT COUNT(*) AS n FROM ${n}`);
+			o = await L(e, `SELECT COUNT(*) AS n FROM ${n}`);
 		} catch {
 			i.push({
 				table: a.table,
@@ -258,9 +260,9 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			continue;
 		}
 		try {
-			let s = await Ye(e, `SELECT COUNT(*) AS n FROM ${n}\n   WHERE ${Be(r(a.column), t)}`), c = [];
-			if (s > 0) for (let i of I) try {
-				let o = await Ye(e, `SELECT COUNT(*) AS n FROM ${n}\n   WHERE ${Be(r(a.column), t, [i])}`);
+			let s = await L(e, `SELECT COUNT(*) AS n FROM ${n}\n   WHERE ${We(r(a.column), t)}`), c = [];
+			if (s > 0) for (let i of F) try {
+				let o = await L(e, `SELECT COUNT(*) AS n FROM ${n}\n   WHERE ${We(r(a.column), t, [i])}`);
 				o > 0 && c.push({
 					needle: i,
 					rows: o
@@ -268,7 +270,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			} catch {}
 			let l;
 			if (s > 0) try {
-				l = Ke((await Je(e, n, r(a.column), t, 500)).map((e) => Ge(e)));
+				l = Xe((await Qe(e, n, r(a.column), t, 500)).map((e) => Ye(e)));
 			} catch {}
 			i.push({
 				table: a.table,
@@ -289,8 +291,8 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		}
 	}
 	return i;
-}, Ze = (e, t) => {
-	let n = I.length, r = [`credential scan · dialect ${t}`, ""], i = /* @__PURE__ */ new Set();
+}, et = (e, t) => {
+	let n = F.length, r = [`credential scan · dialect ${t}`, ""], i = /* @__PURE__ */ new Set();
 	for (let t of e) {
 		if (t.unavailable === "column") {
 			r.push(`  ·  ${t.table}.${t.column} — column is not present on this deployment (${t.scanned} row(s) exist but this column was not scanned)`);
@@ -304,34 +306,34 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			r.push(`  ·  ${t.table} — table is EMPTY (0 rows scanned; this is not a clean bill of health)`);
 			continue;
 		}
-		let e = L(t), n = (t.hits ?? 0) === 0 ? "✓" : e ? "~" : "✗";
+		let e = I(t), n = (t.hits ?? 0) === 0 ? "✓" : e ? "~" : "✗";
 		r.push(`  ${n}  ${t.table}.${t.column} — ${t.hits} of ${t.scanned} row(s) contain a credential-shaped NAME (anywhere in the value)`), (t.matchedNeedles?.length ?? 0) > 0 && r.push(`         matched (rows per needle, may overlap): ${t.matchedNeedles.map((e) => `${e.needle} (${e.rows})`).join(", ")}`);
 		let a = t.classification;
-		a !== void 0 && (r.push(`         examined ${a.examined} of ${t.hits} matched row(s)${a.examined < (t.hits ?? 0) ? " (capped at 500)" : ""}: ${a.asKey} as a JSON KEY, ${a.redactionMarkerOnly} only inside a redaction marker${a.undecidable > 0 ? `, ${a.undecidable} not parseable as JSON` : ""}`), e && r.push(`         EXPLAINED — every match is \`${Ve.join("` / `")}\`, the framework's own`, "         record that a `.sensitive()` column was left OUT. Nothing to purge, nothing to rotate."));
+		a !== void 0 && (r.push(`         examined ${a.examined} of ${t.hits} matched row(s)${a.examined < (t.hits ?? 0) ? " (capped at 500)" : ""}: ${a.asKey} as a JSON KEY, ${a.redactionMarkerOnly} only inside a redaction marker${a.undecidable > 0 ? `, ${a.undecidable} not parseable as JSON` : ""}`), e && r.push(`         EXPLAINED — every match is \`${Ge.join("` / `")}\`, the framework's own`, "         record that a `.sensitive()` column was left OUT. Nothing to purge, nothing to rotate."));
 	}
-	let a = e.reduce((e, t) => e + (L(t) ? 0 : t.hits ?? 0), 0), o = e.reduce((e, t) => e + (L(t) ? t.hits ?? 0 : 0), 0);
+	let a = e.reduce((e, t) => e + (I(t) ? 0 : t.hits ?? 0), 0), o = e.reduce((e, t) => e + (I(t) ? t.hits ?? 0 : 0), 0);
 	return r.push(""), o > 0 && r.push(`  ${o} row(s) matched only the framework's own redaction markers and are NOT findings.`), a > 0 ? r.push(`  ${a} row(s) carry something credential-shaped.`, "  Purge them AND rotate the credentials — assume anything written to a log", "  table has been read. Then stop putting the credential on the Subject:", "  `connectionCredentials(...)` keeps it in the framework vault.") : e.every((e) => e.scanned === void 0 || e.scanned === 0 || e.unavailable !== void 0) ? r.push("  NOTHING WAS SCANNED. This run proves nothing about your data.") : r.push("  No credential-shaped keys found in the rows that exist."), r.push("", `  These are NAME heuristics (${n} of them), not proof. A credential in a`, "  column whose key is not credential-shaped — `keyValue`, `pat`, `authz` —", "  is invisible here. A clean run means \"no credential-shaped NAME found\",", "  which is not the same as \"no credential\".", "", "  Run this on EVERY environment. A dev database is not a sample of production."), r.join("\n");
-}, Qe = (e) => e.some((e) => (e.hits ?? 0) > 0 && !L(e)) ? 1 : e.every((e) => e.unavailable !== void 0 || e.scanned === void 0 || e.scanned === 0) ? 2 : 0, $e = /\.migration\.ts$/, R = async (e, t) => {
+}, tt = (e) => e.some((e) => (e.hits ?? 0) > 0 && !I(e)) ? 1 : e.every((e) => e.unavailable !== void 0 || e.scanned === void 0 || e.scanned === 0) ? 2 : 0, R = /\.migration\.ts$/, nt = async (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e;
 		try {
-			e = await import(T(r).href);
+			e = await import(E(r).href);
 		} catch (e) {
 			t.warn("migration: failed to import", { file: r }, e);
 			continue;
 		}
-		let i = (e.default && ye(e.default) ? e.default : void 0) ?? Object.values(e).find(ye);
+		let i = (e.default && Ce(e.default) ? e.default : void 0) ?? Object.values(e).find(Ce);
 		if (!i) {
 			t.warn("migration: no defineMigration export", { file: r });
 			continue;
 		}
-		i.id !== b(r).replace(/\.migration\.ts$/, "") && t.warn("migration: id does not match filename — id wins for ordering, but rename the file for clarity", {
+		i.id !== te(r).replace(/\.migration\.ts$/, "") && t.warn("migration: id does not match filename — id wins for ordering, but rename the file for clarity", {
 			file: r,
 			idInFile: i.id,
-			idFromFile: b(r).replace(/\.migration\.ts$/, "")
+			idFromFile: te(r).replace(/\.migration\.ts$/, "")
 		});
-		let a = await w.readFile(r, "utf8").catch(() => ""), o = Oe("sha256").update(a).digest("hex").slice(0, 16);
+		let a = await T.readFile(r, "utf8").catch(() => ""), o = Me("sha256").update(a).digest("hex").slice(0, 16);
 		n.push({
 			file: r,
 			definition: i,
@@ -339,14 +341,14 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		});
 	}
 	return [...n].sort((e, t) => e.definition.id < t.definition.id ? -1 : 1);
-}, et = async (e) => {
-	let t = (process.env.DB_DIALECT ?? "postgres").toLowerCase(), n = t === "memory" ? "postgres" : t, r = n, i = t === "memory" ? void 0 : await c(n).then((e) => e.retryFilter, () => void 0);
-	return E.runPromise(O(P, r, void 0, i === void 0 ? {} : { retryFilter: i }).pipe(E.provide(e)));
-}, tt = (e) => E.runPromise(E.gen(function* () {
-	let e = yield* (yield* D.SqlClient)`SELECT id, status, hash, "appliedAt" FROM "_voltro_migrations"`.pipe(E.orElseSucceed(() => []));
+}, rt = async (e) => {
+	let t = (process.env.DB_DIALECT ?? "postgres").toLowerCase(), n = t === "memory" ? "postgres" : t, r = n, i = t === "memory" ? void 0 : await l(n).then((e) => e.retryFilter, () => void 0);
+	return O.runPromise(ie(Se, r, void 0, i === void 0 ? {} : { retryFilter: i }).pipe(O.provide(e)));
+}, it = (e) => O.runPromise(O.gen(function* () {
+	let e = yield* (yield* k.SqlClient)`SELECT id, status, hash, "appliedAt" FROM "_voltro_migrations"`.pipe(O.orElseSucceed(() => []));
 	return new Map(e.map((e) => [e.id, e]));
-}).pipe(E.provide(e))), z = (e, t) => E.runPromise(E.gen(function* () {
-	yield* (yield* D.SqlClient)`
+}).pipe(O.provide(e))), z = (e, t) => O.runPromise(O.gen(function* () {
+	yield* (yield* k.SqlClient)`
         INSERT INTO "_voltro_migrations"
           (id, name, hash, status, "appliedAt", "durationMs", "errorMessage", "errorStack")
         VALUES
@@ -361,14 +363,14 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
           "errorStack"  = EXCLUDED."errorStack",
           "updatedAt"   = now()
       `;
-}).pipe(E.provide(e))), nt = async (e, t, n) => {
+}).pipe(O.provide(e))), at = async (e, t, n) => {
 	if (e.length === 0) return {
 		applied: [],
 		failed: null,
 		skipped: []
 	};
-	await et(t);
-	let r = await tt(t), i = [], a = [], o = null;
+	await rt(t);
+	let r = await it(t), i = [], a = [], o = null;
 	for (let s of e) {
 		let e = r.get(s.definition.id);
 		if (e && e.status === "applied") {
@@ -403,7 +405,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		for (let e of s.definition.steps) {
 			let n = Date.now();
 			try {
-				await E.runPromise(e.apply.pipe(E.provide(t))), l.push({
+				await O.runPromise(e.apply.pipe(O.provide(t))), l.push({
 					stepName: e.name,
 					status: "applied",
 					durationMs: Date.now() - n
@@ -469,9 +471,9 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		failed: o,
 		skipped: a
 	};
-}, rt = async (e, t, n, r = {}) => {
-	await et(t);
-	let i = await tt(t), a = e.filter((e) => i.get(e.definition.id)?.status === "applied");
+}, ot = async (e, t, n, r = {}) => {
+	await rt(t);
+	let i = await it(t), a = e.filter((e) => i.get(e.definition.id)?.status === "applied");
 	if (a.length === 0) return n.info("migration: nothing to roll back"), {
 		applied: [],
 		failed: null,
@@ -489,7 +491,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		for (let n = e.definition.steps.length - 1; n >= 0; n--) {
 			let o = e.definition.steps[n], s = Date.now();
 			try {
-				await E.runPromise(o.undo.pipe(E.provide(t))), i.push({
+				await O.runPromise(o.undo.pipe(O.provide(t))), i.push({
 					stepName: o.name,
 					status: "applied",
 					durationMs: Date.now() - s
@@ -540,9 +542,9 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		failed: c,
 		skipped: []
 	};
-}, it = async (e, t) => {
-	await et(t);
-	let n = await tt(t);
+}, st = async (e, t) => {
+	await rt(t);
+	let n = await it(t);
 	return e.map((e) => {
 		let t = n.get(e.definition.id);
 		return t ? {
@@ -559,7 +561,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			hashMatches: !0
 		};
 	});
-}, at = (e) => {
+}, ct = (e) => {
 	if (!e.failed) return "";
 	let t = e.failed, n = [
 		`✗ Migration failed: ${t.migrationId} / step '${t.error?.stepName ?? "?"}'`,
@@ -572,22 +574,22 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		""
 	];
 	return e.applied.length > 0 && n.unshift("", `(${e.applied.length} migration(s) applied successfully before the failure.)`), n.join("\n");
-}, ot = (e) => {
+}, lt = (e) => {
 	let t = e.split(".");
 	if (t.length !== 2 || !t[0] || !t[1]) throw Error(`voltro db encrypt-column: expected <table>.<column>, got "${e}"`);
 	return {
 		table: t[0],
 		column: t[1]
 	};
-}, st = (e) => 49 + 4 * Math.ceil(e / 3), ct = (e, t) => {
-	let n = st(e);
+}, ut = (e) => 49 + 4 * Math.ceil(e / 3), dt = (e, t) => {
+	let n = ut(e);
 	return {
 		longestPlaintextBytes: e,
 		longestCiphertext: n,
 		declaredMaxLength: t,
 		fits: t === void 0 || n <= t
 	};
-}, lt = (e, t) => `${e.table}.${e.column} is too narrow: its longest value is ${t.longestPlaintextBytes} byte(s), which encrypts to ${t.longestCiphertext} characters, and the column is declared as ${t.declaredMaxLength}. Widen it first (\`.maxLength(${t.longestCiphertext})\` or more, then \`voltro db apply\`) and run this again. Nothing was written.`, ut = (e, t) => {
+}, ft = (e, t) => `${e.table}.${e.column} is too narrow: its longest value is ${t.longestPlaintextBytes} byte(s), which encrypts to ${t.longestCiphertext} characters, and the column is declared as ${t.declaredMaxLength}. Widen it first (\`.maxLength(${t.longestCiphertext})\` or more, then \`voltro db apply\`) and run this again. Nothing was written.`, pt = (e, t) => {
 	let n = t ? "would encrypt" : "encrypted";
 	return [
 		`  ${e.table}.${e.column}`,
@@ -596,10 +598,10 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		`    null / empty       ${e.empty}`,
 		`    ${n.padEnd(18)} ${e.encrypted}`
 	].join("\n");
-}, dt = (e, t, n) => {
+}, mt = (e, t, n) => {
 	if (e == null) return;
 	let r = typeof e == "string" ? e : String(e);
-	if (r === "" || F(r)) return;
+	if (r === "" || P(r)) return;
 	let i = t.encrypt(r), a;
 	try {
 		a = t.decrypt(i);
@@ -608,13 +610,13 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	}
 	if (a !== r) throw Error(`${n.table}.${n.column}: round-trip mismatch — the cipher did not return what it was given. Nothing was written.`);
 	return i;
-}, ft = (e) => Buffer.byteLength(e, "utf8"), pt = (e, t) => {
+}, ht = (e) => Buffer.byteLength(e, "utf8"), gt = (e, t) => {
 	if (e !== void 0) try {
 		return t.decrypt(e), !0;
 	} catch {
 		return !1;
 	}
-}, mt = (e, t) => `${e.table}.${e.column} already holds values encrypted with a DIFFERENT key than ${t} — the active key cannot decrypt them. Continuing would encrypt the remaining rows under a second key, and the column would then be readable with neither key alone. Nothing was written. Point ${t} at the key the existing rows were written with.`, ht = (e) => [
+}, _t = (e, t) => `${e.table}.${e.column} already holds values encrypted with a DIFFERENT key than ${t} — the active key cannot decrypt them. Continuing would encrypt the remaining rows under a second key, and the column would then be readable with neither key alone. Nothing was written. Point ${t} at the key the existing rows were written with.`, vt = (e) => [
 	"",
 	"  NEXT — this converted the rows that exist. New writes are still plaintext",
 	"  until the column carries the modifier:",
@@ -624,7 +626,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	"  Order does not matter: a read returns a non-ciphertext value unchanged, so",
 	"  the column may hold a mix while you deploy. Run this again afterwards to",
 	"  catch anything written in between — it skips what is already encrypted."
-].join("\n"), B = te({ scope: "voltro:db" }), gt = /* @__PURE__ */ new Set([
+].join("\n"), B = D({ scope: "voltro:db" }), yt = /* @__PURE__ */ new Set([
 	"node_modules",
 	"dist",
 	"build",
@@ -634,15 +636,15 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	".git"
 ]), V = async (e, t) => {
 	let n = [], r = async (e) => {
-		let i = await w.readdir(e, { withFileTypes: !0 }).catch(() => []);
+		let i = await T.readdir(e, { withFileTypes: !0 }).catch(() => []);
 		for (let a of i) {
-			if (gt.has(a.name)) continue;
-			let i = x(e, a.name);
+			if (yt.has(a.name)) continue;
+			let i = S(e, a.name);
 			a.isDirectory() ? await r(i) : a.isFile() && t.test(a.name) && n.push(i);
 		}
 	};
 	return await r(e), n;
-}, _t = [
+}, bt = [
 	"--against",
 	"--batch",
 	"--before",
@@ -661,23 +663,23 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	"--store",
 	"--to",
 	"--token"
-], H = (e) => C(s(e, _t) ?? process.cwd()), U = () => l("migration"), vt = (e) => {
+], H = (e) => w(c(e, bt) ?? process.cwd()), U = () => u("migration"), xt = (e) => {
 	let t = e;
 	if (typeof t != "object" || !t) return !1;
 	if (t.code === "ERR_OUT_OF_RANGE" || t.cause?.code === "ERR_OUT_OF_RANGE") return !0;
 	let n = `${t.message ?? ""} ${t.cause?.message ?? ""} ${t.stack ?? ""}`;
 	return /ERR_OUT_OF_RANGE|out of range/i.test(n) && /pg-protocol|parseDataRow|buffer-reader|BufferReader/i.test(n);
-}, yt = "Live-DB introspection got a corrupt / misaligned response from the database. This happens when `voltro db plan` / `apply` / `drift` / `migrate` runs through a connection POOLER (Supabase Supavisor / PgBouncer) on a LARGE schema — the pooler mis-frames a big catalog response. The introspection already batches by table to keep responses small; if a batch still trips it:\n  1. Lower the batch: set `VOLTRO_INTROSPECT_BATCH` to a smaller number of tables (default 20 — try 5 or 1). This keeps `db plan` on the normal pooler, no direct connection needed.\n  2. Or use a DIRECT (non-pooler) connection: set `DB_DIRECT_URL` (or `DB_MIGRATE_URL`) to the direct database URL — the runtime keeps `DB_URL`, so only the migration path is affected. (Supabase: direct = `db.<project-ref>.supabase.co` [IPv6-only on newer projects]; pooler = `aws-0-<region>.pooler.supabase.com`.)", W = () => {
+}, St = "Live-DB introspection got a corrupt / misaligned response from the database. This happens when `voltro db plan` / `apply` / `drift` / `migrate` runs through a connection POOLER (Supabase Supavisor / PgBouncer) on a LARGE schema — the pooler mis-frames a big catalog response. The introspection already batches by table to keep responses small; if a batch still trips it:\n  1. Lower the batch: set `VOLTRO_INTROSPECT_BATCH` to a smaller number of tables (default 20 — try 5 or 1). This keeps `db plan` on the normal pooler, no direct connection needed.\n  2. Or use a DIRECT (non-pooler) connection: set `DB_DIRECT_URL` (or `DB_MIGRATE_URL`) to the direct database URL — the runtime keeps `DB_URL`, so only the migration path is affected. (Supabase: direct = `db.<project-ref>.supabase.co` [IPv6-only on newer projects]; pooler = `aws-0-<region>.pooler.supabase.com`.)", W = () => {
 	let e = (process.env.DB_DIALECT ?? "postgres").toLowerCase();
-	if (e === "memory") throw new n("voltro db: subcommands require a real dialect, not DB_DIALECT=memory.");
+	if (e === "memory") throw new r("voltro db: subcommands require a real dialect, not DB_DIALECT=memory.");
 	return e;
-}, G = (e) => Se(e, W()), K = (e) => e === "mysql" || e === "mariadb" ? "table_schema = DATABASE()" : e === "mssql" ? "table_schema = SCHEMA_NAME()" : "table_schema = 'public'", q = async () => (await c(W())).makeSqlLayer(U()), bt = async (e) => {
-	let t = H(e), n = e.includes("--dry-run"), r = await R(await V(t, $e), B);
+}, G = (e) => Ee(e, W()), K = (e) => e === "mysql" || e === "mariadb" ? "table_schema = DATABASE()" : e === "mssql" ? "table_schema = SCHEMA_NAME()" : "table_schema = 'public'", q = async () => (await l(W())).makeSqlLayer(U()), Ct = async (e) => {
+	let t = H(e), n = e.includes("--dry-run"), r = await nt(await V(t, R), B);
 	if (r.length === 0) return B.info("no migrations found", { root: t }), 0;
 	if (n) {
 		let e = /* @__PURE__ */ new Set();
 		try {
-			let t = await it(r, await q());
+			let t = await st(r, await q());
 			e = new Set(t.filter((e) => e.status === "applied").map((e) => e.id));
 		} catch {
 			B.warn("migrate --dry-run: could not read the migration ledger — showing ALL as pending");
@@ -688,33 +690,33 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		for (let e of t) console.log(`  pending  ${e.definition.id}`);
 		return 0;
 	}
-	let i = await nt(r, await q(), B);
-	return i.failed ? (process.stderr.write(at(i) + "\n"), 1) : (B.info("migrate complete", {
+	let i = await at(r, await q(), B);
+	return i.failed ? (process.stderr.write(ct(i) + "\n"), 1) : (B.info("migrate complete", {
 		applied: i.applied.length,
 		skipped: i.skipped.length
 	}), 0);
-}, xt = async (e) => {
-	let t = H(e), n = o(e, "--to"), r = await R(await V(t, $e), B);
+}, wt = async (e) => {
+	let t = H(e), n = s(e, "--to"), r = await nt(await V(t, R), B);
 	if (r.length === 0) return B.info("no migrations found", { root: t }), 0;
-	let i = await rt(r, await q(), B, n ? { to: n } : {});
-	return i.failed ? (process.stderr.write(at(i) + "\n"), 1) : (B.info("rollback complete", { reverted: i.applied.length }), 0);
-}, St = async (e) => {
-	let t = await R(await V(H(e), $e), B);
+	let i = await ot(r, await q(), B, n ? { to: n } : {});
+	return i.failed ? (process.stderr.write(ct(i) + "\n"), 1) : (B.info("rollback complete", { reverted: i.applied.length }), 0);
+}, Tt = async (e) => {
+	let t = await nt(await V(H(e), R), B);
 	if (t.length === 0) return console.log("no migrations found"), 0;
-	let n = await it(t, await q());
+	let n = await st(t, await q());
 	for (let e of n) {
 		let t = e.status === "applied" ? "✓" : e.status === "failed" ? "✗" : e.status === "reverted" ? "↩" : "·", n = e.hashMatches ? "" : " (hash drift!)", r = e.appliedAt ? ` @ ${e.appliedAt.toISOString()}` : "";
 		console.log(`  ${t} ${e.id}  [${e.status}]  ${e.name}${r}${n}`);
 	}
 	return 0;
-}, Ct = async (e) => {
-	let t = (o(e, "--store") ?? process.env.DB_DIALECT ?? "postgres").toLowerCase();
+}, Et = async (e) => {
+	let t = (s(e, "--store") ?? process.env.DB_DIALECT ?? "postgres").toLowerCase();
 	if (t === "memory") return B.warn("voltro db seed: using in-memory store (explicit opt-in via --store memory / DB_DIALECT=memory)"), B.warn("  rows written by this run will NOT persist beyond the process. set DB_DIALECT=postgres or unset to seed the real DB."), {
-		store: new Ee(),
+		store: new Ae(),
 		dispose: async () => {},
 		dialectId: "memory"
 	};
-	let n = await c(t);
+	let n = await l(t);
 	B.info(`voltro db seed: target store=${n.id} — rows will persist`);
 	let r = await n.makeStore({
 		sqlLayer: n.makeSqlLayer(U()),
@@ -727,12 +729,12 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		},
 		dialectId: n.id
 	};
-}, wt = async (e) => {
-	let t = H(e), n = o(e, "--id"), r = o(e, "--lifecycle"), i = await d(await V(t, y), B);
+}, Dt = async (e) => {
+	let t = H(e), n = s(e, "--id"), r = s(e, "--lifecycle"), i = await f(await V(t, b), B);
 	if (i.length === 0) return B.info("no seeds found", { root: t }), 0;
-	let { store: a, dispose: s, dialectId: c } = await Ct(e);
+	let { store: a, dispose: o, dialectId: c } = await Et(e);
 	try {
-		return n ? +((await u(i, n, a, B)).status === "failed") : +((await f((r ? i.filter((e) => e.definition.lifecycle === r) : i.filter((e) => e.definition.lifecycle === "boot")).map((e) => ({
+		return n ? +((await d(i, n, a, B)).status === "failed") : +((await p((r ? i.filter((e) => e.definition.lifecycle === r) : i.filter((e) => e.definition.lifecycle === "boot")).map((e) => ({
 			...e,
 			definition: {
 				...e.definition,
@@ -740,64 +742,64 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			}
 		})), a, B, { force: !0 })).filter((e) => e.status === "failed").length > 0);
 	} finally {
-		await s().catch((e) => {
+		await o().catch((e) => {
 			B.warn("voltro db seed: store dispose failed", { error: String(e) });
 		});
 	}
-}, Tt = (e) => typeof e == "object" && !!e && "tableName" in e && "fields" in e && typeof e.tableName == "string", Et = async (e) => {
-	let t = await V(e, v), n = [];
+}, Ot = (e) => typeof e == "object" && !!e && "tableName" in e && "fields" in e && typeof e.tableName == "string", kt = async (e) => {
+	let t = await V(e, y), n = [];
 	for (let r of t) {
 		let t;
 		try {
-			t = await import(T(r).href);
+			t = await import(E(r).href);
 		} catch (t) {
 			B.warn("db: failed to import schema file", {
-				file: S(e, r),
+				file: C(e, r),
 				error: String(t)
 			});
 			continue;
 		}
-		for (let e of Object.values(t)) Tt(e) && n.push(e);
+		for (let e of Object.values(t)) Ot(e) && n.push(e);
 	}
 	return n;
-}, Dt = (e) => {
+}, At = (e) => {
 	let t = new Map(e.map((e) => [e.tableName, e]));
-	t.has("actors") || t.set("actors", _e);
+	t.has("actors") || t.set("actors", be);
 	let n = t.get("actors"), r = t.get("tenants");
-	return Ce({
+	return De({
 		actors: () => n,
 		...r === void 0 ? {} : { tenants: () => r }
 	}), [...t.values()];
-}, Ot = (e) => {
+}, jt = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = n.tableName;
 		e !== void 0 && !t.has(e) && t.set(e, n);
 	}
 	return [...t.values()];
-}, kt = (e) => {
-	let t = ae(process.env.VOLTRO_DESTRUCTIVE_OK);
+}, Mt = (e) => {
+	let t = ce(process.env.VOLTRO_DESTRUCTIVE_OK);
 	if (t === void 0 || !e.operations.filter((e) => e.blocked).every((e) => e.classification === "lossy")) return {
 		plan: e,
 		acknowledged: !1
 	};
-	let n = ge(e, t);
+	let n = ye(e, t);
 	return {
 		plan: n,
 		acknowledged: !n.operations.some((e) => e.blocked)
 	};
-}, J = async (e, t) => E.runPromise(t.pipe(E.provide(e))), Y = async (e) => {
+}, J = async (e, t) => O.runPromise(t.pipe(O.provide(e))), Y = async (e) => {
 	try {
-		return await J(e, D.SqlClient.pipe(E.flatMap(ce)));
+		return await J(e, k.SqlClient.pipe(O.flatMap(de)));
 	} catch (e) {
 		let t = String(e?.message ?? e);
-		if (vt(e) || /connection error/i.test(t)) {
-			let n = /* @__PURE__ */ Error(`${yt}\n\nOriginal error: ${t}`);
+		if (xt(e) || /connection error/i.test(t)) {
+			let n = /* @__PURE__ */ Error(`${St}\n\nOriginal error: ${t}`);
 			throw n.cause = e, n;
 		}
 		throw e;
 	}
-}, At = {
+}, Nt = {
 	safe: "\x1B[32m✓\x1B[0m",
 	"needs-default": "\x1B[32m⊕\x1B[0m",
 	"needs-backfill": "\x1B[33m⊕\x1B[0m",
@@ -805,7 +807,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	lossy: "\x1B[31m✗\x1B[0m",
 	"online-required": "\x1B[36m◷\x1B[0m",
 	"multi-step": "\x1B[35m⇉\x1B[0m"
-}, jt = (e) => {
+}, Pt = (e) => {
 	let t = e.op, n;
 	switch (t.kind) {
 		case "create-table":
@@ -869,9 +871,9 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			n = `ALTER TABLE ${t.table} DROP CHECK ${t.column}`;
 			break;
 	}
-	let r = At[e.classification], i = e.reason ? `  # ${e.reason}` : "", a = e.blocked ? `\n    ! ${e.blocked.fix}` : "";
+	let r = Nt[e.classification], i = e.reason ? `  # ${e.reason}` : "", a = e.blocked ? `\n    ! ${e.blocked.fix}` : "";
 	return `  ${r} ${n}${i}${a}`;
-}, Mt = async (e, t) => {
+}, Ft = async (e, t) => {
 	let n = e.operations.filter((e) => e.classification === "needs-default" && e.op.kind === "add-column");
 	if (n.length === 0) return;
 	let r = [];
@@ -880,7 +882,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		if (i === void 0 || a === void 0) continue;
 		let o = 0;
 		try {
-			let e = await J(t, D.SqlClient.pipe(E.flatMap((e) => e.unsafe(`SELECT COUNT(*) AS n FROM ${Se(i, W())}`))));
+			let e = await J(t, k.SqlClient.pipe(O.flatMap((e) => e.unsafe(`SELECT COUNT(*) AS n FROM ${Ee(i, W())}`))));
 			o = Number(Object.values(e[0] ?? { n: 0 })[0] ?? 0);
 		} catch {
 			continue;
@@ -892,11 +894,11 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		for (let e of r) console.log(e);
 		console.log("  (the shape is correct either way — this is the VALUE a state diff cannot know)");
 	}
-}, Nt = async (e, t) => {
+}, It = async (e, t) => {
 	if (W() !== "postgres") return;
-	let n = ne, r;
+	let n = A, r;
 	try {
-		r = await J(t, D.SqlClient.pipe(E.flatMap((t) => p(t, e, n))));
+		r = await J(t, k.SqlClient.pipe(O.flatMap((t) => m(t, e, n))));
 	} catch {
 		return;
 	}
@@ -904,7 +906,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	if (a.length === 0) return;
 	B.info(i.missing.length + i.stale.length > 0 ? `db apply: installing change triggers on ${i.missing.length} table(s)` + (i.stale.length > 0 ? `, removing ${i.stale.length} stale one(s)` : "") + (i.functionOutdated ? ", replacing an outdated notify function" : "") : "db apply: replacing an outdated change-notify function (no table drift)");
 	let o = 0;
-	for (let e of a) await J(t, D.SqlClient.pipe(E.flatMap((t) => t.unsafe(e)))), o += 1;
+	for (let e of a) await J(t, k.SqlClient.pipe(O.flatMap((t) => t.unsafe(e)))), o += 1;
 	B.info(`db apply: change triggers converged (${o} statement(s))`, {
 		installed: i.missing.length,
 		removed: i.stale.length,
@@ -916,81 +918,81 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		console.log("  (schema is up to date)\n");
 		return;
 	}
-	for (let t of e.operations) console.log(jt(t));
-	console.log(), console.log(`  safe: ${t.safe}   needs-default: ${t.needsDefault}   needs-backfill: ${t.needsBackfill}`), console.log(`  rename: ${t.needsRenameAnnotation}   lossy: ${t.lossy}   blocked: ${t.blocked}`), console.log(`  fingerprint: ${e.fromFingerprint.slice(0, 16)} → ${e.toFingerprint.slice(0, 16)}\n`), Pt(e);
-}, Pt = (e) => {
-	let t = pe(e.operations);
+	for (let t of e.operations) console.log(Pt(t));
+	console.log(), console.log(`  safe: ${t.safe}   needs-default: ${t.needsDefault}   needs-backfill: ${t.needsBackfill}`), console.log(`  rename: ${t.needsRenameAnnotation}   lossy: ${t.lossy}   blocked: ${t.blocked}`), console.log(`  fingerprint: ${e.fromFingerprint.slice(0, 16)} → ${e.toFingerprint.slice(0, 16)}\n`), Lt(e);
+}, Lt = (e) => {
+	let t = ge(e.operations);
 	if (t.length !== 0) {
 		console.log(`  ⚠ ${t.length} operation(s) UNSAFE under a rolling deploy`), console.log("    (old + new instances overlap → old code breaks against the new schema):");
 		for (let e of t) console.log(`      • ${e.op.op.kind}: ${e.reason}`), console.log(`        → ${e.remedy}`);
 		console.log("    Deploy with a maintenance window / scale-to-zero, or split into"), console.log("    expand → deploy → contract. See docs: deployment/production-hardening.\n");
 	}
-}, Ft = (e, t) => {
-	let n = k({
+}, Rt = (e, t) => {
+	let n = ae({
 		enabled: process.env.VOLTRO_ROLLING_DEPLOY === "1",
 		forced: t.includes("--force"),
-		unsafeCount: pe(e.operations).length
+		unsafeCount: ge(e.operations).length
 	});
 	return n.refuse ? (B.error(`db apply: ${n.message}`), !0) : (n.warnForced && B.warn(`db apply: ${n.message}`), !1);
-}, It = (e) => {
-	let t = o(e, "--online-after") ?? process.env.VOLTRO_ONLINE_THRESHOLD;
+}, zt = (e) => {
+	let t = s(e, "--online-after") ?? process.env.VOLTRO_ONLINE_THRESHOLD;
 	if (t === void 0) return;
 	let n = Number(t);
 	if (!Number.isInteger(n) || n < 0) throw Error(`--online-after / VOLTRO_ONLINE_THRESHOLD must be a non-negative integer, got "${t}"`);
 	return n;
 }, Z = async (e) => {
-	let t = await Et(e);
+	let t = await kt(e);
 	if (t.length === 0) return;
-	let n = await h({ root: e });
-	return Dt(Ot([
+	let n = await g({ root: e });
+	return At(jt([
 		...t,
-		...P,
+		...Se,
 		...n
 	]));
 }, Q = async (e, t, n) => {
 	let r;
 	try {
-		await J(n, _(await g(e), (e, t) => {
+		await J(n, v(await _(e), (e, t) => {
 			B.info(`db apply: ${e}`, t ?? {});
 		}));
 	} catch (e) {
 		r = e;
 	}
-	return await Nt(t, n), r === void 0 ? 0 : (B.error("db apply: a plugin migration FAILED — the schema was applied, the plugin steps were not", { error: r instanceof Error ? r.message : String(r) }), 1);
-}, Lt = async (e, t) => {
-	let n = { close: async () => {} }, r = await V(e, y);
+	return await It(t, n), r === void 0 ? 0 : (B.error("db apply: a plugin migration FAILED — the schema was applied, the plugin steps were not", { error: r instanceof Error ? r.message : String(r) }), 1);
+}, Bt = async (e, t) => {
+	let n = { close: async () => {} }, r = await V(e, b);
 	if (r.length === 0) return n;
-	let i = await d(r, B), a = i.filter((e) => e.definition.lifecycle === "onSchemaChange");
+	let i = await f(r, B), a = i.filter((e) => e.definition.lifecycle === "onSchemaChange");
 	if (a.length === 0) return n;
-	let { store: o, dispose: s } = await Ct(t), c = m(i, o, B.child("seeds"));
+	let { store: o, dispose: s } = await Et(t), c = h(i, o, B.child("seeds"));
 	return B.info(`db apply: ${a.length} onSchemaChange seed(s) armed for this apply`, { ids: a.map((e) => e.definition.id) }), { close: async () => {
 		c(), await s().catch((e) => {
 			B.warn("db apply: seed store dispose failed", { error: String(e) });
 		});
 	} };
-}, Rt = async (e) => {
-	let t = It(e), n = H(e), r = await Z(n);
+}, Vt = async (e) => {
+	let t = zt(e), n = H(e), r = await Z(n);
 	if (r === void 0) return B.warn("db plan: no schema files found", {
 		root: n,
 		hint: "looked for *.entity.ts / *.schema.ts / schema.ts"
 	}), 1;
-	let i = o(e, "--against");
+	let i = s(e, "--against");
 	if (i) {
-		let n = i, a = o(e, "--token") ?? process.env.VOLTRO_INSPECT_TOKEN, s = { accept: "application/json" };
-		a && (s.authorization = `Bearer ${a}`);
+		let n = i, a = s(e, "--token") ?? process.env.VOLTRO_INSPECT_TOKEN, o = { accept: "application/json" };
+		a && (o.authorization = `Bearer ${a}`);
 		try {
-			let e = n.endsWith("/_voltro/inspect/migrations") ? n : `${n.replace(/\/+$/, "")}/_voltro/inspect/migrations`, i = await fetch(e, { headers: s });
-			if (!i.ok) return B.error(`db plan --against: remote returned ${i.status}`, { url: e }), 1;
+			let e = n.endsWith("/_voltro/inspect/migrations") ? n : `${n.replace(/\/+$/, "")}/_voltro/inspect/migrations`, i = await fetch(e, { headers: o });
+			if (!i.ok) return B.error(`db plan --against: remote returned ${i.status}`, { url: e }), ee(i.status) && console.error(`  ${x(i.status)}`), 1;
 			let a = (await i.json()).drift?.liveSnapshot;
 			if (!a) return B.error("db plan --against: remote inspect payload missing drift.liveSnapshot", { url: e }), 1;
-			let o = M({
+			let s = M({
 				declared: r,
 				live: a,
 				dialect: W(),
 				...j(),
 				...t === void 0 ? {} : { onlineAfter: t }
 			});
-			return console.log(`\n[--against ${e}] — diff vs remote live schema:\n`), X(o), o.summary.blocked > 0 ? 2 : 0;
+			return console.log(`\n[--against ${e}] — diff vs remote live schema:\n`), X(s), s.summary.blocked > 0 ? 2 : 0;
 		} catch (e) {
 			return B.error(`db plan --against: ${e.message}`), 1;
 		}
@@ -1002,11 +1004,11 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		...j(),
 		...t === void 0 ? {} : { onlineAfter: t }
 	});
-	return e.includes("--json") ? (ee(1, `${JSON.stringify(a, null, 2)}\n`), a.summary.blocked > 0 ? 2 : 0) : (X(a), a.summary.blocked > 0 ? 2 : 0);
-}, $ = t, zt = async (e, t, n) => {
+	return e.includes("--json") ? (ne(1, `${JSON.stringify(a, null, 2)}\n`), a.summary.blocked > 0 ? 2 : 0) : (X(a), a.summary.blocked > 0 ? 2 : 0);
+}, $ = n, Ht = async (e, t, n) => {
 	let r;
 	try {
-		let t = await w.readFile(C(e), "utf8");
+		let t = await T.readFile(w(e), "utf8");
 		r = JSON.parse(t);
 	} catch (t) {
 		return B.error(`db apply --plan: cannot read/parse plan file '${e}': ${t.message}`), 1;
@@ -1014,8 +1016,8 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	if (!Array.isArray(r?.operations) || typeof r?.fromFingerprint != "string" || typeof r?.toFingerprint != "string") return B.error(`db apply --plan: '${e}' is not a valid plan file (expected the output of \`voltro db plan --json\`).`), 1;
 	let i = await Z(n);
 	if (i === void 0) return B.warn("db apply --plan: no schema files found", { root: n }), 1;
-	let a = await q(), s = await J(a, D.SqlClient.pipe(E.flatMap((e) => le(e, n)))).catch(() => []);
-	if (s.length > 0) return B.error(`db apply --plan: refusing — ${s.length} pending file-based migration(s).`), console.error(`  ${s.join("\n  ")}`), console.error(""), console.error("  These perform the changes a state diff cannot infer, so they change the shape"), console.error("  this plan was computed against. Apply them and regenerate the plan:"), console.error(""), console.error("    voltro db files ."), console.error("    voltro db plan --json > plan.json"), console.error("    voltro db apply --plan plan.json"), 1;
+	let a = await q(), o = await J(a, k.SqlClient.pipe(O.flatMap((e) => fe(e, n)))).catch(() => []);
+	if (o.length > 0) return B.error(`db apply --plan: refusing — ${o.length} pending file-based migration(s).`), console.error(`  ${o.join("\n  ")}`), console.error(""), console.error("  These perform the changes a state diff cannot infer, so they change the shape"), console.error("  this plan was computed against. Apply them and regenerate the plan:"), console.error(""), console.error("    voltro db files ."), console.error("    voltro db plan --json > plan.json"), console.error("    voltro db apply --plan plan.json"), 1;
 	let c = M({
 		declared: i,
 		live: await Y(a),
@@ -1024,11 +1026,11 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	});
 	if (c.fromFingerprint !== r.fromFingerprint) return B.error("db apply --plan: refusing — the live schema has drifted since this plan was generated."), console.error(`  plan.from=${r.fromFingerprint.slice(0, 16)}  live=${c.fromFingerprint.slice(0, 16)}`), console.error("  Regenerate against the current live schema: `voltro db plan --json > plan.json`"), 2;
 	if (c.toFingerprint !== r.toFingerprint) return B.error("db apply --plan: refusing — the declared schema differs from what this plan targets."), console.error(`  plan.to=${r.toFingerprint.slice(0, 16)}  declared=${c.toFingerprint.slice(0, 16)}`), console.error("  The schema files changed since the plan was generated. Regenerate the plan."), 2;
-	let l = kt(c), u = l.plan;
+	let l = Mt(c), u = l.plan;
 	if (u.summary.blocked > 0 && !l.acknowledged) return X(u), B.error(`db apply --plan: refusing — ${c.summary.blocked} blocked operation(s). See the fix hints above.`), process.env.VOLTRO_DESTRUCTIVE_OK !== void 0 && (B.error("  VOLTRO_DESTRUCTIVE_OK is set but did not cover this plan — it only relaxes"), B.error("  `lossy` operations, and only the tables it names. Anything else stays refused.")), 2;
-	if (l.acknowledged && B.warn("db apply --plan: proceeding with acknowledged lossy operation(s) (VOLTRO_DESTRUCTIVE_OK)"), Ft(u, t)) return 2;
+	if (l.acknowledged && B.warn("db apply --plan: proceeding with acknowledged lossy operation(s) (VOLTRO_DESTRUCTIVE_OK)"), Rt(u, t)) return 2;
 	if (u.operations.length === 0) {
-		let e = await J(a, D.SqlClient.pipe(E.flatMap((e) => ue(e, u, {
+		let e = await J(a, k.SqlClient.pipe(O.flatMap((e) => pe(e, u, {
 			appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:plan",
 			environment: $(),
 			source: "file"
@@ -1036,13 +1038,13 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		return B.info(e === "recorded" ? `db apply --plan: schema is up to date — no DDL to apply, recorded fingerprint=${u.toFingerprint.slice(0, 16)} (change triggers are reconciled separately below)` : "db apply --plan: schema is up to date — no DDL to apply (change triggers are reconciled separately below)"), Q(n, i, a);
 	}
 	X(u);
-	let d = o(t, "--note"), f = await J(a, D.SqlClient.pipe(E.flatMap((e) => re(e, u, {
+	let d = s(t, "--note"), f = await J(a, k.SqlClient.pipe(O.flatMap((e) => re(e, u, {
 		declared: i,
 		appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:plan",
 		environment: $(),
 		source: "file",
 		...d ? { notes: d } : {},
-		replan: () => E.promise(() => Y(a)).pipe(E.map((e) => M({
+		replan: () => O.promise(() => Y(a)).pipe(O.map((e) => M({
 			declared: i,
 			live: e,
 			dialect: W(),
@@ -1053,48 +1055,48 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		id: f.id,
 		fingerprint: f.fingerprint.slice(0, 16)
 	}), Q(n, i, a);
-}, Bt = async (e) => {
-	let t = H(e), n = await Lt(t, e);
+}, Ut = async (e) => {
+	let t = H(e), n = await Bt(t, e);
 	try {
-		return await Vt(e, t);
+		return await Wt(e, t);
 	} finally {
 		await n.close();
 	}
-}, Vt = async (t, n) => {
-	let r = It(t), i = o(t, "--plan");
-	if (i) return zt(i, t, n);
-	if ((process.env.NODE_ENV ?? "").toLowerCase() === "production") return B.error(`voltro db apply: refusing — auto-apply on prod is not allowed.${e()}`), console.error("In production, schema changes go through `voltro db plan --json > plan.json`"), console.error("then `voltro db apply --plan plan.json` as an explicit step in your deploy pipeline."), 3;
+}, Wt = async (e, n) => {
+	let r = zt(e), i = s(e, "--plan");
+	if (i) return Ht(i, e, n);
+	if ((process.env.NODE_ENV ?? "").toLowerCase() === "production") return B.error(`voltro db apply: refusing — auto-apply on prod is not allowed.${t()}`), console.error("In production, schema changes go through `voltro db plan --json > plan.json`"), console.error("then `voltro db apply --plan plan.json` as an explicit step in your deploy pipeline."), 3;
 	let a = await Z(n);
 	if (a === void 0) return B.warn("db apply: no schema files found", { root: n }), 1;
-	let s = await q(), c = await rn(n, s);
+	let o = await q(), c = await sn(n, o);
 	if ("failed" in c) return B.error("db apply: a file-based migration FAILED — the schema diff was NOT run"), console.error(c.failed), console.error("Fix the migration and re-run. `voltro db files` runs them alone."), 1;
 	let l = M({
 		declared: a,
-		live: await Y(s),
+		live: await Y(o),
 		dialect: W(),
 		...j(),
 		...r === void 0 ? {} : { onlineAfter: r }
 	});
-	X(l), await Mt(l, s);
-	let u = kt(l), d = u.plan;
+	X(l), await Ft(l, o);
+	let u = Mt(l), d = u.plan;
 	if (d.summary.blocked > 0 && !u.acknowledged) return B.error(`db apply: refusing — ${d.summary.blocked} blocked operation(s). See the fix hints above.`), process.env.VOLTRO_DESTRUCTIVE_OK !== void 0 && (B.error("  VOLTRO_DESTRUCTIVE_OK is set but did not cover this plan — it only relaxes"), B.error("  `lossy` operations, and only the tables it names. Anything else stays refused.")), 2;
-	if (u.acknowledged && B.warn(`db apply: proceeding with ${l.summary.blocked} acknowledged lossy operation(s) (VOLTRO_DESTRUCTIVE_OK)`), Ft(d, t)) return 2;
+	if (u.acknowledged && B.warn(`db apply: proceeding with ${l.summary.blocked} acknowledged lossy operation(s) (VOLTRO_DESTRUCTIVE_OK)`), Rt(d, e)) return 2;
 	if (d.operations.length === 0) {
 		B.info("db apply: schema is up to date — no DDL to apply (change triggers are reconciled separately below)");
-		let e = await J(s, D.SqlClient.pipe(E.flatMap((e) => ue(e, d, {
+		let t = await J(o, k.SqlClient.pipe(O.flatMap((e) => pe(e, d, {
 			appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:apply",
 			environment: $(),
 			source: "auto-diff"
 		}))));
-		return e === "recorded" && B.info(`db apply: recorded fingerprint=${d.toFingerprint.slice(0, 16)} (0 operations)`), await Qt(s), o(t, "--note") !== void 0 && e !== "recorded" && (B.warn("db apply: --note was ignored — this schema is already the latest recorded one, so there is no new history row to attach it to."), console.error("To record that the CURRENT live schema is the accepted baseline, use `voltro db drift --accept`.")), Q(n, a, s);
+		return t === "recorded" && B.info(`db apply: recorded fingerprint=${d.toFingerprint.slice(0, 16)} (0 operations)`), await tn(o), s(e, "--note") !== void 0 && t !== "recorded" && (B.warn("db apply: --note was ignored — this schema is already the latest recorded one, so there is no new history row to attach it to."), console.error("To record that the CURRENT live schema is the accepted baseline, use `voltro db drift --accept`.")), Q(n, a, o);
 	}
-	let f = o(t, "--note"), p = await J(s, D.SqlClient.pipe(E.flatMap((e) => re(e, d, {
+	let f = s(e, "--note"), p = await J(o, k.SqlClient.pipe(O.flatMap((e) => re(e, d, {
 		declared: a,
 		appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:user",
 		environment: $(),
 		source: "auto-diff",
 		...f ? { notes: f } : {},
-		replan: () => E.promise(() => Y(s)).pipe(E.map((e) => M({
+		replan: () => O.promise(() => Y(o)).pipe(O.map((e) => M({
 			declared: a,
 			live: e,
 			dialect: W(),
@@ -1105,8 +1107,8 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	return B.info(`db apply: applied ${p.appliedOps} op(s) in ${p.durationMs}ms`, {
 		id: p.id,
 		fingerprint: p.fingerprint.slice(0, 16)
-	}), Q(n, a, s);
-}, Ht = (e) => {
+	}), Q(n, a, o);
+}, Gt = (e) => {
 	let t = [];
 	for (let n of e.tables) for (let e of n.columns) {
 		let r = e.references;
@@ -1119,7 +1121,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		});
 	}
 	return t;
-}, Ut = (e) => {
+}, Kt = (e) => {
 	let t = [];
 	for (let n of e.tables) for (let e of n.indexes) e.expression !== !0 && e.name !== `${n.name}_pkey` && e.columns.length !== 0 && t.push({
 		table: n.name,
@@ -1128,7 +1130,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		name: e.name
 	});
 	return t;
-}, Wt = (e, t) => {
+}, qt = (e, t) => {
 	let n = (e) => JSON.stringify(e.op), r = new Set(e.operations.map(n)), i = new Set(t.operations.map(n)), a = [...t.operations.filter((e) => !r.has(n(e))), ...e.operations.filter((e) => !i.has(n(e)))];
 	return {
 		...t,
@@ -1138,88 +1140,88 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			blocked: 0
 		}
 	};
-}, Gt = (e) => {
+}, Jt = (e) => {
 	if (e === void 0) return "empty";
 	if (e === "empty" || e === "copy") return e;
-	throw e === "fresh" ? new n("voltro db branch: --seed fresh is not implemented — the branch lifecycle has no executor step that runs boot seeds, so the branch would come up EMPTY while this reported it as seeded. Use --seed copy (the parent's rows) or --seed empty (schema only).") : new n(`voltro db branch: --seed must be one of empty|copy, got "${e}"`);
-}, Kt = (e) => {
+	throw e === "fresh" ? new r("voltro db branch: --seed fresh is not implemented — the branch lifecycle has no executor step that runs boot seeds, so the branch would come up EMPTY while this reported it as seeded. Use --seed copy (the parent's rows) or --seed empty (schema only).") : new r(`voltro db branch: --seed must be one of empty|copy, got "${e}"`);
+}, Yt = (e) => {
 	if (e !== void 0) {
 		if (e === "namespace" || e === "neon-cow") return e;
-		throw new n(`voltro db branch: --prefer must be one of namespace|neon-cow, got "${e}"`);
+		throw new r(`voltro db branch: --prefer must be one of namespace|neon-cow, got "${e}"`);
 	}
-}, qt = async (e) => {
-	let t = H(e), r = Gt(o(e, "--seed")), i = Kt(o(e, "--prefer")), a = e.includes("--keep"), s = e.includes("--json"), l = It(e), u = W();
+}, Xt = async (e) => {
+	let t = H(e), n = Jt(s(e, "--seed")), i = Yt(s(e, "--prefer")), a = e.includes("--keep"), o = e.includes("--json"), c = zt(e), u = W();
 	if (u !== "postgres") return B.error(`voltro db branch: not supported on '${u}'.`), console.error("  The branch PLAN is dialect-agnostic; the shipped namespace EXECUTOR is Postgres-only"), console.error("  (CREATE SCHEMA / CREATE TABLE … LIKE … INCLUDING ALL / \"-quoted identifiers)."), console.error("  MySQL, MariaDB, SQLite and SQL Server need their own BranchExecutor — see"), console.error("  makeNamespaceBranchExecutor in @voltro/database."), 1;
 	let d = await Z(t);
 	if (d === void 0) return B.warn("db branch: no schema files found", {
 		root: t,
 		hint: "looked for *.entity.ts / *.schema.ts / schema.ts"
 	}), 1;
-	let f = U(), p = we({
-		seed: r,
+	let f = U(), p = Oe({
+		seed: n,
 		...f.url === void 0 ? {} : { dbUrl: f.url },
 		...i === void 0 ? {} : { prefer: i }
 	});
-	if (p === "neon-cow") return B.error("voltro db branch: this connection resolves to the Neon copy-on-write mechanism, which the CLI cannot execute."), console.error("  A Neon CoW branch is a single call to Neon's branch REST API and needs a Neon API token;"), console.error("  the framework ships the PLAN, and the cloud control plane executes it."), console.error("  Re-run with `--prefer namespace` to rehearse on a schema-per-branch copy instead"), console.error(`  (portable, no vendor API — it copies ${r === "copy" ? "every row" : "the schema only"}).`), 1;
-	let m = f.schema ?? "public", h = o(e, "--name") ?? b(t), g = o(e, "--pr"), _ = g === void 0 ? 0 : Number(g);
-	if (!Number.isInteger(_) || _ < 0) throw new n(`voltro db branch: --pr must be a non-negative integer, got "${String(g)}"`);
-	let v = ve(h, _), y = await c(u), x = y.makeSqlLayer(f), S = y.makeSqlLayer({
+	if (p === "neon-cow") return B.error("voltro db branch: this connection resolves to the Neon copy-on-write mechanism, which the CLI cannot execute."), console.error("  A Neon CoW branch is a single call to Neon's branch REST API and needs a Neon API token;"), console.error("  the framework ships the PLAN, and the cloud control plane executes it."), console.error("  Re-run with `--prefer namespace` to rehearse on a schema-per-branch copy instead"), console.error(`  (portable, no vendor API — it copies ${n === "copy" ? "every row" : "the schema only"}).`), 1;
+	let m = f.schema ?? "public", h = s(e, "--name") ?? te(t), g = s(e, "--pr"), _ = g === void 0 ? 0 : Number(g);
+	if (!Number.isInteger(_) || _ < 0) throw new r(`voltro db branch: --pr must be a non-negative integer, got "${String(g)}"`);
+	let v = xe(h, _), y = await l(u), b = y.makeSqlLayer(f), ee = y.makeSqlLayer({
 		...f,
 		schema: v
-	}), C = await Y(x), w = M({
+	}), x = await Y(b), S = M({
 		declared: d,
-		live: C,
+		live: x,
 		dialect: u,
 		...j(),
-		...l === void 0 ? {} : { onlineAfter: l }
-	}), T = C.tables.map((e) => e.name), te = Ht(C), ne = Ut(C), O = be({ run: (e) => J(x, D.SqlClient.pipe(E.flatMap((t) => t.unsafe(e)), E.asVoid)) }), k = async () => M({
+		...c === void 0 ? {} : { onlineAfter: c }
+	}), C = x.tables.map((e) => e.name), w = Gt(x), T = Kt(x), E = we({ run: (e) => J(b, k.SqlClient.pipe(O.flatMap((t) => t.unsafe(e)), O.asVoid)) }), D = async () => M({
 		declared: d,
-		live: await Y(S),
+		live: await Y(ee),
 		dialect: u,
 		...j(),
-		...l === void 0 ? {} : { onlineAfter: l }
-	}), A = await de({
+		...c === void 0 ? {} : { onlineAfter: c }
+	}), A = await me({
 		branchId: v,
 		mechanism: p,
-		branchedTables: T.length,
-		replayedForeignKeys: te.length,
+		branchedTables: C.length,
+		replayedForeignKeys: w.length,
 		keep: a,
 		log: (e) => {
-			s || B.info(`db branch: ${e}`);
+			o || B.info(`db branch: ${e}`);
 		},
 		provision: async () => {
-			await xe({
+			await Te({
 				appSlug: h,
 				prNumber: _,
-				seed: r,
-				tableNames: T,
+				seed: n,
+				tableNames: C,
 				parentNamespace: m,
-				foreignKeys: te,
-				indexNames: ne,
+				foreignKeys: w,
+				indexNames: T,
 				prefer: "namespace",
 				...f.url === void 0 ? {} : { dbUrl: f.url }
-			}, O);
+			}, E);
 		},
-		fidelityPlan: async () => Wt(w, await k()),
-		plan: k,
+		fidelityPlan: async () => qt(S, await D()),
+		plan: D,
 		apply: async (e) => {
-			await J(S, D.SqlClient.pipe(E.flatMap((t) => re(t, e, {
+			await J(ee, k.SqlClient.pipe(O.flatMap((t) => re(t, e, {
 				declared: d,
 				appliedBy: "cli:db-branch",
 				environment: $(),
 				source: "auto-diff",
 				notes: `migration rehearsal on branch ${v}`,
-				replan: () => E.promise(k)
+				replan: () => O.promise(D)
 			}))));
 		},
-		replan: async () => await k(),
+		replan: async () => await D(),
 		teardown: async () => {
-			await Te(v, "namespace", O);
+			await ke(v, "namespace", E);
 		}
 	});
-	return s ? ee(1, `${JSON.stringify(A, null, 2)}\n`) : console.log(`\n${se(A)}\n`), ie(A);
-}, Jt = async (e) => {
-	let t = Math.max(1, Number(o(e, "--limit") ?? "20")), n = await J(await q(), D.SqlClient.pipe(E.flatMap((e) => e`
+	return o ? ne(1, `${JSON.stringify(A, null, 2)}\n`) : console.log(`\n${ue(A)}\n`), oe(A);
+}, Zt = async (e) => {
+	let t = Math.max(1, Number(s(e, "--limit") ?? "20")), n = await J(await q(), k.SqlClient.pipe(O.flatMap((e) => e`
         SELECT ${e("id")}, ${e("fingerprint")}, ${e("operations")},
                ${e("appliedBy")}, ${e("environment")}, ${e("source")},
                ${e("durationMs")}, ${e("notes")}, ${e("appliedAt")}
@@ -1232,20 +1234,20 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	for (let e of n) {
 		let t = 0;
 		try {
-			t = JSON.parse($t(e.operations)).length;
+			t = JSON.parse(nn(e.operations)).length;
 		} catch {}
-		console.log(`  ${e.id}  fp=${N(e.fingerprint)}  env=${e.environment}  src=${e.source}  ${t} op(s)  ${e.durationMs}ms  ${en(e.appliedAt)}  by=${e.appliedBy}`), e.notes && console.log(`    [2mnote: ${e.notes}[0m`);
+		console.log(`  ${e.id}  fp=${N(e.fingerprint)}  env=${e.environment}  src=${e.source}  ${t} op(s)  ${e.durationMs}ms  ${rn(e.appliedAt)}  by=${e.appliedBy}`), e.notes && console.log(`    [2mnote: ${e.notes}[0m`);
 	}
 	return console.log(), 0;
-}, Yt = async (e) => {
+}, Qt = async (e) => {
 	let t = e[0];
 	if (!t) return console.error("voltro db restore-snapshot <plan-id>"), console.error("  Renames soft-dropped columns/tables from a plan back to their original names."), console.error("  Requires the plan to have been applied with VOLTRO_SOFT_DROP=1."), 2;
-	let n = await q(), r = await J(n, D.SqlClient.pipe(E.flatMap((e) => e`SELECT ${e("id")}, ${e("operations")}
+	let n = await q(), r = await J(n, k.SqlClient.pipe(O.flatMap((e) => e`SELECT ${e("id")}, ${e("operations")}
                    FROM ${e("_voltro_migration_plans")} WHERE ${e("id")} = ${t}`)));
 	if (r.length === 0) return console.error(`restore-snapshot: plan '${t}' not found`), 1;
 	let i;
 	try {
-		i = JSON.parse($t(r[0].operations));
+		i = JSON.parse(nn(r[0].operations));
 	} catch {
 		return console.error(`restore-snapshot: plan '${t}' has corrupted operations JSON`), 1;
 	}
@@ -1259,7 +1261,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	if (a.length === 0 && o.length === 0) return console.log(`restore-snapshot: plan '${t}' has no drop-column / drop-table ops to restore`), 0;
 	let s = 0;
 	for (let e of a) {
-		let t = await J(n, D.SqlClient.pipe(E.flatMap((t) => t`
+		let t = await J(n, k.SqlClient.pipe(O.flatMap((t) => t`
           SELECT column_name FROM information_schema.columns
           WHERE ${t.unsafe(K(W()))}
             AND table_name   = ${e.table}
@@ -1271,11 +1273,11 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			continue;
 		}
 		let r = t[0].column_name;
-		await J(n, D.SqlClient.pipe(E.flatMap((t) => t.unsafe(`ALTER TABLE ${G(e.table)} RENAME COLUMN ${G(r)} TO ${G(e.column)}`)))), s++, console.log(`  ↩ restored ${e.table}.${e.column} (from ${r})`);
+		await J(n, k.SqlClient.pipe(O.flatMap((t) => t.unsafe(`ALTER TABLE ${G(e.table)} RENAME COLUMN ${G(r)} TO ${G(e.column)}`)))), s++, console.log(`  ↩ restored ${e.table}.${e.column} (from ${r})`);
 	}
 	let c = 0;
 	for (let e of o) {
-		let t = await J(n, D.SqlClient.pipe(E.flatMap((t) => t`
+		let t = await J(n, k.SqlClient.pipe(O.flatMap((t) => t`
           SELECT table_name FROM information_schema.tables
           WHERE ${t.unsafe(K(W()))}
             AND table_name LIKE ${e.table + "__dropped_%"}
@@ -1286,45 +1288,45 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 			continue;
 		}
 		let r = t[0].table_name;
-		await J(n, D.SqlClient.pipe(E.flatMap((t) => t.unsafe(`ALTER TABLE ${G(r)} RENAME TO ${G(e.table)}`)))), c++, console.log(`  ↩ restored table ${e.table} (from ${r})`);
+		await J(n, k.SqlClient.pipe(O.flatMap((t) => t.unsafe(`ALTER TABLE ${G(r)} RENAME TO ${G(e.table)}`)))), c++, console.log(`  ↩ restored table ${e.table} (from ${r})`);
 	}
 	return console.log(`\n✓ restored ${s} column(s) + ${c} table(s) from plan '${t}'\n`), 0;
-}, Xt = async (e) => {
-	let t = o(e, "--before");
+}, $t = async (e) => {
+	let t = s(e, "--before");
 	if (!t) return console.error("voltro db gc-snapshots --before <date> [--dry-run]"), console.error("  Permanently drops soft-dropped columns/tables (<name>__dropped_<ts>) older than <date>."), console.error("  <date> is ISO — e.g. 2026-01-01 or 2026-01-01T00:00:00Z. NOT reversible."), 2;
 	let n = t.replace(/[^0-9]/g, "");
 	if (n.length < 8) return console.error(`gc-snapshots: --before must be at least a full date (YYYY-MM-DD), got "${t}"`), 2;
-	let r = (n + "00000000000000").slice(0, 14), i = e.includes("--dry-run"), a = await q(), s = await J(a, D.SqlClient.pipe(E.flatMap((e) => e`
+	let r = (n + "00000000000000").slice(0, 14), i = e.includes("--dry-run"), a = await q(), o = await J(a, k.SqlClient.pipe(O.flatMap((e) => e`
         SELECT table_name, column_name FROM information_schema.columns
         WHERE ${e.unsafe(K(W()))} AND column_name LIKE ${"%__dropped_%"}
-      `))), c = await J(a, D.SqlClient.pipe(E.flatMap((e) => e`
+      `))), c = await J(a, k.SqlClient.pipe(O.flatMap((e) => e`
         SELECT table_name FROM information_schema.tables
         WHERE ${e.unsafe(K(W()))} AND table_name LIKE ${"%__dropped_%"}
       `))), l = (e) => {
 		let t = /__dropped_(\d{14})$/.exec(e);
 		return t ? t[1] : null;
 	}, u = 0;
-	for (let e of s) {
+	for (let e of o) {
 		let t = l(e.column_name);
-		t === null || t >= r || (console.log(`  ${i ? "[dry-run] would drop column" : "dropping column"} ${e.table_name}.${e.column_name}`), i || await J(a, D.SqlClient.pipe(E.flatMap((t) => t.unsafe(`ALTER TABLE ${G(e.table_name)} DROP COLUMN ${G(e.column_name)}`)))), u++);
+		t === null || t >= r || (console.log(`  ${i ? "[dry-run] would drop column" : "dropping column"} ${e.table_name}.${e.column_name}`), i || await J(a, k.SqlClient.pipe(O.flatMap((t) => t.unsafe(`ALTER TABLE ${G(e.table_name)} DROP COLUMN ${G(e.column_name)}`)))), u++);
 	}
 	for (let e of c) {
 		let t = l(e.table_name);
-		t === null || t >= r || (console.log(`  ${i ? "[dry-run] would drop table" : "dropping table"} ${e.table_name}`), i || await J(a, D.SqlClient.pipe(E.flatMap((t) => t.unsafe(`DROP TABLE ${G(e.table_name)}`)))), u++);
+		t === null || t >= r || (console.log(`  ${i ? "[dry-run] would drop table" : "dropping table"} ${e.table_name}`), i || await J(a, k.SqlClient.pipe(O.flatMap((t) => t.unsafe(`DROP TABLE ${G(e.table_name)}`)))), u++);
 	}
 	return console.log(`\n${i ? `[dry-run] ${u} snapshot(s) would be dropped` : `✓ dropped ${u} snapshot(s)`} (older than ${r}).\n`), 0;
-}, Zt = async (e) => {
-	let t = o(e, "--before");
+}, en = async (e) => {
+	let t = s(e, "--before");
 	if (!t) return console.error("voltro db squash --before <iso-date> [--note \"<text>\"]"), 2;
 	let n = t;
 	if (Number.isNaN(new Date(n).getTime())) return console.error(`voltro db squash: --before '${n}' is not a valid ISO date`), 2;
-	let r = o(e, "--note"), i = H(e), a = await Z(i);
+	let r = s(e, "--note"), i = H(e), a = await Z(i);
 	if (a === void 0) return B.warn("db squash: no schema files found", { root: i }), 1;
-	let s = oe(A(a)), c = await q();
+	let o = le(se(a)), c = await q();
 	try {
-		let e = await J(c, he({
+		let e = await J(c, ve({
 			before: n,
-			fingerprint: s,
+			fingerprint: o,
 			appliedBy: process.env.USER ?? "cli",
 			environment: $(),
 			...r === void 0 ? {} : { note: r }
@@ -1333,10 +1335,10 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	} catch (e) {
 		return console.error(`squash refused: ${e.message}`), 1;
 	}
-}, Qt = async (e) => {
+}, tn = async (e) => {
 	try {
-		let t = oe(await Y(e));
-		await J(e, D.SqlClient.pipe(E.flatMap((e) => e`
+		let t = le(await Y(e));
+		await J(e, k.SqlClient.pipe(O.flatMap((e) => e`
           UPDATE ${e("_voltro_migration_plans")}
           SET ${e("liveFingerprint")} = ${t}
           WHERE ${e("id")} = (
@@ -1348,7 +1350,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
             AND ${e("liveFingerprint")} IS NULL
         `)));
 	} catch {}
-}, $t = (e) => typeof e == "string" ? e : e == null ? "" : JSON.stringify(e), en = (e) => e instanceof Date ? e.toISOString() : String(e ?? ""), tn = (e) => e === void 0 ? {
+}, nn = (e) => typeof e == "string" ? e : e == null ? "" : JSON.stringify(e), rn = (e) => e instanceof Date ? e.toISOString() : String(e ?? ""), an = (e) => e === void 0 ? {
 	accept: !1,
 	reason: "no-declared-schema"
 } : e > 0 ? {
@@ -1357,15 +1359,15 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 } : {
 	accept: !0,
 	reason: "converged"
-}, nn = async (e) => {
-	let t = e.includes("--accept"), n = await q(), r = await J(n, D.SqlClient.pipe(E.flatMap((e) => e`
+}, on = async (e) => {
+	let t = e.includes("--accept"), n = await q(), r = await J(n, k.SqlClient.pipe(O.flatMap((e) => e`
         SELECT * FROM ${e("_voltro_migration_plans")}
         ORDER BY ${e("appliedAt")} DESC
         LIMIT 1
-      `))), i = await Y(n), a = oe(i);
+      `))), i = await Y(n), a = le(i);
 	if (r.length === 0) return B.info("db drift: no _voltro_migration_plans rows yet"), console.log(`live user-schema fingerprint: ${N(a)}`), console.log("No baseline to compare against. Run `voltro db apply` to lock in the current state."), 0;
 	let o = r[0];
-	if (o.liveFingerprint === null || o.liveFingerprint === void 0) return B.warn("db drift: no drift baseline recorded yet — cannot compare"), console.log(), console.log(`  last applied:  ${o.id}  at ${en(o.appliedAt)}`), console.log(`  live now:      ${N(a)}`), console.log(), console.log("That row was written before the framework recorded a live-schema baseline,"), console.log("and the value it does carry is the DECLARED snapshot's hash — not comparable"), console.log("with a live one. Run `voltro db apply` once to establish the baseline (a no-op"), console.log("apply backfills it too); use `voltro db plan` meanwhile, which compares declared"), console.log("against live directly."), console.log(), console.log("Exit code 3 — NOT 0. \"Did not compare\" is not \"clean\", and a gate on the exit"), console.log("code has to be able to tell them apart."), 3;
+	if (o.liveFingerprint === null || o.liveFingerprint === void 0) return B.warn("db drift: no drift baseline recorded yet — cannot compare"), console.log(), console.log(`  last applied:  ${o.id}  at ${rn(o.appliedAt)}`), console.log(`  live now:      ${N(a)}`), console.log(), console.log("That row was written before the framework recorded a live-schema baseline,"), console.log("and the value it does carry is the DECLARED snapshot's hash — not comparable"), console.log("with a live one. Run `voltro db apply` once to establish the baseline (a no-op"), console.log("apply backfills it too); use `voltro db plan` meanwhile, which compares declared"), console.log("against live directly."), console.log(), console.log("Exit code 3 — NOT 0. \"Did not compare\" is not \"clean\", and a gate on the exit"), console.log("code has to be able to tell them apart."), 3;
 	if (o.liveFingerprint === a) return B.info(`db drift: live matches last applied (${N(a)})`), 0;
 	let s = await (async () => {
 		try {
@@ -1381,14 +1383,14 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		}
 	})();
 	if (t) {
-		let e = tn(s?.length);
+		let e = an(s?.length);
 		if (e.reason === "no-declared-schema") return B.error("db drift --accept: no schema files found — cannot verify the live schema is current."), 1;
 		if (!e.accept && s !== void 0) {
 			B.error(`db drift --accept: refusing — ${s.length} operation(s) still pending against your declared schema.`), console.log();
 			for (let e of s.slice(0, 10)) console.log(`  - ${e.op.kind} ${"table" in e.op ? `[${e.op.table}]` : ""}`);
 			return s.length > 10 && console.log(`  … and ${s.length - 10} more`), console.log(), console.log("`--accept` records the CURRENT live schema as the applied baseline. It is for a"), console.log("change that already landed out of band and left the schema correct — not for one"), console.log("that has not landed. Run `voltro db apply` instead; it writes a real baseline."), 4;
 		}
-		return await J(n, D.SqlClient.pipe(E.flatMap((e) => e`
+		return await J(n, k.SqlClient.pipe(O.flatMap((e) => e`
           UPDATE ${e("_voltro_migration_plans")}
           SET ${e("liveFingerprint")} = ${a}
           WHERE ${e("id")} = (
@@ -1399,11 +1401,11 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
           )
         `))), B.info(`db drift: accepted the live schema as the baseline (${N(a)})`), console.log(), console.log("`voltro db plan` reports 0 operations against this schema, so the live state already"), console.log("matches your declaration — only the ledger did not know. It does now."), console.log(), console.log("No history entry was invented: the latest row's baseline was updated in place,"), console.log("because no migration ran."), 0;
 	}
-	return B.error("db drift: live schema DIVERGED from last applied state"), console.log(), console.log(`  baseline:      ${N(o.liveFingerprint)}  at ${en(o.appliedAt)}  (${o.id})`), console.log(`  live now:      ${N(a)}`), console.log(), console.log("Something changed the live schema after the last apply. This command can see"), console.log("THAT it changed, not what or who — the fingerprints are hashes, not a diff."), console.log(), s === void 0 ? (console.log("No schema files found here, so the declared side could not be compared."), console.log("Run `voltro db plan` from your project root for the actual difference."), 4) : s.length === 0 ? (console.log("Your DECLARED schema is already satisfied — `voltro db plan` reports 0 operations"), console.log("against this database. So the live schema is not wrong, only unrecorded: something"), console.log("applied a change without going through the planner (a hand-run ALTER, a DBA"), console.log("window, a restored dump), or it touched a table your code does not declare."), console.log(), console.log("If that was deliberate and the schema is right, record it:"), console.log(), console.log("    voltro db drift --accept"), console.log(), console.log("It updates the latest ledger row's baseline to the live schema and invents no"), console.log("history entry. Drift then measures from here."), 4) : (console.log(`\`voltro db plan\` reports ${s.length} operation(s) still pending against your`), console.log("declared schema, so this is not merely an unrecorded change — run it for the diff,"), console.log("then `voltro db apply`, which writes a fresh baseline of its own."), 4);
-}, rn = async (e, t) => {
+	return B.error("db drift: live schema DIVERGED from last applied state"), console.log(), console.log(`  baseline:      ${N(o.liveFingerprint)}  at ${rn(o.appliedAt)}  (${o.id})`), console.log(`  live now:      ${N(a)}`), console.log(), console.log("Something changed the live schema after the last apply. This command can see"), console.log("THAT it changed, not what or who — the fingerprints are hashes, not a diff."), console.log(), s === void 0 ? (console.log("No schema files found here, so the declared side could not be compared."), console.log("Run `voltro db plan` from your project root for the actual difference."), 4) : s.length === 0 ? (console.log("Your DECLARED schema is already satisfied — `voltro db plan` reports 0 operations"), console.log("against this database. So the live schema is not wrong, only unrecorded: something"), console.log("applied a change without going through the planner (a hand-run ALTER, a DBA"), console.log("window, a restored dump), or it touched a table your code does not declare."), console.log(), console.log("If that was deliberate and the schema is right, record it:"), console.log(), console.log("    voltro db drift --accept"), console.log(), console.log("It updates the latest ledger row's baseline to the live schema and invents no"), console.log("history entry. Drift then measures from here."), 4) : (console.log(`\`voltro db plan\` reports ${s.length} operation(s) still pending against your`), console.log("declared schema, so this is not merely an unrecorded change — run it for the diff,"), console.log("then `voltro db apply`, which writes a fresh baseline of its own."), 4);
+}, sn = async (e, t) => {
 	let n = $();
 	try {
-		let r = await J(t, D.SqlClient.pipe(E.flatMap((t) => me(t, {
+		let r = await J(t, k.SqlClient.pipe(O.flatMap((t) => _e(t, {
 			projectRoot: e,
 			env: n,
 			appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:user"
@@ -1412,10 +1414,10 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 	} catch (e) {
 		return { failed: e };
 	}
-}, an = async (e) => {
+}, cn = async (e) => {
 	let t = H(e), n = await q(), r = $();
-	await J(n, O(P, W(), void 0, { retryFilter: (await c(W())).retryFilter }));
-	let i = await J(n, D.SqlClient.pipe(E.flatMap((e) => me(e, {
+	await J(n, ie(Se, W(), void 0, { retryFilter: (await l(W())).retryFilter }));
+	let i = await J(n, k.SqlClient.pipe(O.flatMap((e) => _e(e, {
 		projectRoot: t,
 		env: r,
 		appliedBy: process.env.USER ? `cli:${process.env.USER}` : "cli:user"
@@ -1424,16 +1426,16 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		applied: i.applied.map((e) => `${e.id} (${e.durationMs}ms)`),
 		skipped: i.skipped.length
 	}), 0);
-}, on = async (t) => {
-	let n = H(t), r = s(t, _t);
+}, ln = async (e) => {
+	let n = H(e), r = c(e, bt);
 	if (!r) return B.error("voltro db rollback-file <migration-id>"), 2;
-	if ((process.env.NODE_ENV ?? "").toLowerCase() === "production") return B.error("voltro db rollback-file: refusing on prod — schema rollback runs as an explicit deploy step." + e()), 3;
-	let i = await J(await q(), D.SqlClient.pipe(E.flatMap((e) => fe(e, {
+	if ((process.env.NODE_ENV ?? "").toLowerCase() === "production") return B.error("voltro db rollback-file: refusing on prod — schema rollback runs as an explicit deploy step." + t()), 3;
+	let i = await J(await q(), k.SqlClient.pipe(O.flatMap((e) => he(e, {
 		projectRoot: n,
 		id: r
 	}))));
 	return B.info(`db rollback-file: rolled back ${i.id} in ${i.durationMs}ms`), 0;
-}, sn = () => {
+}, un = () => {
 	let e = /* @__PURE__ */ new Date();
 	return [
 		e.getUTCFullYear(),
@@ -1443,7 +1445,7 @@ var ke = (e) => typeof e != "string", Ae = (e, t, n, r) => {
 		String(e.getUTCMinutes()).padStart(2, "0"),
 		String(e.getUTCSeconds()).padStart(2, "0")
 	].join("");
-}, cn = (e) => e.trim().toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "") || "migration", ln = (e, t) => `import { defineMigration, SqlClient } from '@voltro/database'
+}, dn = (e) => e.trim().toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "") || "migration", fn = (e, t) => `import { defineMigration, SqlClient } from '@voltro/database'
 import { Effect } from 'effect'
 
 // A hand-written migration. Reach for this when the DECLARATIVE differ can't
@@ -1475,100 +1477,100 @@ export default defineMigration({
     }),
   ],
 })
-`, un = {
-	plan: Rt,
-	apply: Bt,
-	branch: qt,
-	plans: Jt,
-	drift: nn,
-	files: an,
-	"rollback-file": on,
-	migrate: bt,
-	rollback: xt,
-	status: St,
-	seed: wt,
+`, pn = {
+	plan: Vt,
+	apply: Ut,
+	branch: Xt,
+	plans: Zt,
+	drift: on,
+	files: cn,
+	"rollback-file": ln,
+	migrate: Ct,
+	rollback: wt,
+	status: Tt,
+	seed: Dt,
 	generate: async (e) => {
-		let { value: t, rest: n } = i(e, "--root"), { value: r, rest: a } = i(n, "--name"), o = t ? C(t) : process.cwd(), c = cn(r ?? s(a, []) ?? "migration"), l = `${sn()}_${c}`, u = x(o, "migrations"), d = x(u, `${l}.migration.ts`);
-		return await w.mkdir(u, { recursive: !0 }), await w.writeFile(d, ln(l, c), "utf8"), B.info(`created ${S(o, d)}`), console.error("Fill in the apply/undo steps, then run `voltro db migrate` (rollback with `voltro db rollback`)."), console.error("For a plain schema shape change you may not need this — `voltro db apply` diffs declared vs live."), 0;
+		let { value: t, rest: n } = a(e, "--root"), { value: r, rest: i } = a(n, "--name"), o = t ? w(t) : process.cwd(), s = dn(r ?? c(i, []) ?? "migration"), l = `${un()}_${s}`, u = S(o, "migrations"), d = S(u, `${l}.migration.ts`);
+		return await T.mkdir(u, { recursive: !0 }), await T.writeFile(d, fn(l, s), "utf8"), B.info(`created ${C(o, d)}`), console.error("Fill in the apply/undo steps, then run `voltro db migrate` (rollback with `voltro db rollback`)."), console.error("For a plain schema shape change you may not need this — `voltro db apply` diffs declared vs live."), 0;
 	},
-	squash: Zt,
-	"restore-snapshot": Yt,
-	"gc-snapshots": Xt,
+	squash: en,
+	"restore-snapshot": Qt,
+	"gc-snapshots": $t,
 	adopt: async (e) => {
 		let t = (t) => {
 			let n = e.indexOf(`--${t}`);
 			return n === -1 ? void 0 : e[n + 1];
-		}, n = t("from"), i = t("into"), a = t("map");
-		if (n === void 0 || i === void 0 || a === void 0) return console.error("voltro db adopt --from <table> --into <table> --map <file.ts> [--apply] [--keep-source]"), console.error("  Dry run unless --apply. The map file default-exports { map, leaveUnset? }."), 1;
-		let o = (await r(C(process.cwd(), a))).default;
+		}, n = t("from"), r = t("into"), a = t("map");
+		if (n === void 0 || r === void 0 || a === void 0) return console.error("voltro db adopt --from <table> --into <table> --map <file.ts> [--apply] [--keep-source]"), console.error("  Dry run unless --apply. The map file default-exports { map, leaveUnset? }."), 1;
+		let o = (await i(w(process.cwd(), a))).default;
 		if (o?.map === void 0) return console.error(`voltro db adopt: ${a} must default-export { map: { <targetColumn>: <source> } }`), 1;
 		let s = {
 			from: n,
-			into: i,
+			into: r,
 			map: o.map,
 			...o.leaveUnset ? { leaveUnset: o.leaveUnset } : {}
-		}, c = W(), l = await q(), u = await J(l, D.SqlClient.pipe(E.flatMap(ce))), d = (e) => u.tables.find((t) => t.name === e)?.columns.map((e) => ({
+		}, c = W(), l = await q(), u = await J(l, k.SqlClient.pipe(O.flatMap(de))), d = (e) => u.tables.find((t) => t.name === e)?.columns.map((e) => ({
 			name: e.name,
 			nullable: e.nullable,
 			hasDefault: e.defaultValue !== void 0 && e.defaultValue !== null
-		})), f = d(n), p = d(i);
+		})), f = d(n), p = d(r);
 		if (f === void 0) return console.error(`voltro db adopt: '${n}' does not exist in the database`), 1;
-		if (p === void 0) return console.error(`voltro db adopt: '${i}' does not exist in the database — boot once so the plugin's table is created`), 1;
-		let m = async (e) => await J(l, D.SqlClient.pipe(E.flatMap((t) => t.unsafe(e)))), h = async (e) => Number(Object.values((await m(`SELECT COUNT(*) AS n FROM "${e}"`))[0] ?? { n: 0 })[0] ?? 0), g = Ae(s, f, p, await h(i));
-		for (let e of Me(s, g, await h(n))) console.log(e);
+		if (p === void 0) return console.error(`voltro db adopt: '${r}' does not exist in the database — boot once so the plugin's table is created`), 1;
+		let m = async (e) => await J(l, k.SqlClient.pipe(O.flatMap((t) => t.unsafe(e)))), h = async (e) => Number(Object.values((await m(`SELECT COUNT(*) AS n FROM "${e}"`))[0] ?? { n: 0 })[0] ?? 0), g = Pe(s, f, p, await h(r));
+		for (let e of Ie(s, g, await h(n))) console.log(e);
 		if (g.fatal) return 1;
 		if (!e.includes("--apply")) return console.log(""), console.log("  (dry run — nothing written. Re-run with --apply.)"), 0;
-		let _ = await Le(s, g, c, "id", void 0, m, { keepSource: e.includes("--keep-source") });
+		let _ = await Ve(s, g, c, "id", void 0, m, { keepSource: e.includes("--keep-source") });
 		return console.log(""), console.log(`  copied ${_.copied}/${_.sourceRows} row(s)`), console.log(`  snapshot: ${_.snapshotTable}  — restore from here, then drop it yourself`), _.verified ? (console.log(_.sourceDropped ? `  dropped ${n}` : `  ${n} left in place (--keep-source)`), 0) : (console.error("  ✗ counts DIFFER — the source was NOT dropped. Compare the two tables before doing anything else."), 1);
 	},
 	"scan-credentials": async (e) => {
-		let t = W(), r = [];
+		let t = W(), n = [];
 		for (let t = 0; t < e.length; t += 1) {
 			if (e[t] !== "--table") continue;
 			let i = e[t + 1];
-			if (i === void 0) throw new n("voltro db scan-credentials: --table needs a value");
+			if (i === void 0) throw new r("voltro db scan-credentials: --table needs a value");
 			let [a, o = "subject"] = i.split(":");
-			r.push({
+			n.push({
 				table: a,
 				column: o
 			});
 		}
-		let i = [...Re, ...r], a = await J(await q(), D.SqlClient.pipe(E.flatMap((e) => E.promise(() => Xe(e, t, i, G)))));
-		return console.log(Ze(a, t)), Qe(a);
+		let i = [...He, ...n], a = await J(await q(), k.SqlClient.pipe(O.flatMap((e) => O.promise(() => $e(e, t, i, G)))));
+		return console.log(et(a, t)), tt(a);
 	},
 	"encrypt-column": async (e) => {
-		let t = W(), r = e.includes("--dry-run"), i = e.includes("--yes"), o = (t) => {
+		let t = W(), n = e.includes("--dry-run"), i = e.includes("--yes"), a = (t) => {
 			let n = e.indexOf(t);
 			return n >= 0 ? e[n + 1] : void 0;
-		}, s = Math.max(1, Number(o("--batch") ?? 500)), c = o("--key-env") ?? "FIELD_ENCRYPTION_KEY", l = process.env[c];
-		if (!l) throw new n(`voltro db encrypt-column: ${c} is not set. It must be the SAME key your app runs with (\`governancePlugin({ fieldEncryption: { key } })\`) — encrypting with a different one produces rows the app cannot read. Use --key-env to name a different variable.`);
-		let u = De(l), d = a(e, _t).filter((e) => e.includes(".")).map(ot);
-		if (d.length === 0) throw new n("voltro db encrypt-column: name at least one <table>.<column>");
+		}, s = Math.max(1, Number(a("--batch") ?? 500)), c = a("--key-env") ?? "FIELD_ENCRYPTION_KEY", l = process.env[c];
+		if (!l) throw new r(`voltro db encrypt-column: ${c} is not set. It must be the SAME key your app runs with (\`governancePlugin({ fieldEncryption: { key } })\`) — encrypting with a different one produces rows the app cannot read. Use --key-env to name a different variable.`);
+		let u = je(l), d = o(e, bt).filter((e) => e.includes(".")).map(lt);
+		if (d.length === 0) throw new r("voltro db encrypt-column: name at least one <table>.<column>");
 		let f = await q(), p = [];
 		for (let e of d) {
-			let a = G(e.table), o = G(e.column), l = await J(f, D.SqlClient.pipe(E.flatMap((r) => E.promise(async () => {
-				let i = await E.runPromise(r.unsafe(`SELECT character_maximum_length AS n FROM information_schema.columns\n   WHERE ${K(t)} AND table_name = '${e.table}' AND column_name = '${e.column}'`));
-				if (i.length === 0) throw new n(`voltro db encrypt-column: ${e.table}.${e.column} does not exist on this database`);
+			let a = G(e.table), o = G(e.column), l = await J(f, k.SqlClient.pipe(O.flatMap((n) => O.promise(async () => {
+				let i = await O.runPromise(n.unsafe(`SELECT character_maximum_length AS n FROM information_schema.columns\n   WHERE ${K(t)} AND table_name = '${e.table}' AND column_name = '${e.column}'`));
+				if (i.length === 0) throw new r(`voltro db encrypt-column: ${e.table}.${e.column} does not exist on this database`);
 				let a = Object.values(i[0])[0];
 				return a == null ? void 0 : Number(a);
-			})))), d = await J(f, D.SqlClient.pipe(E.flatMap((e) => E.promise(async () => await E.runPromise(e.unsafe(`SELECT ${G("id")} AS id, ${o} AS v FROM ${a}`)))))), m = 0;
-			for (let e of d) typeof e.v != "string" || F(e.v) || (m = Math.max(m, ft(e.v)));
-			let h = ct(m, l);
-			if (!h.fits) return console.error(`  ✗ ${lt(e, h)}`), 1;
-			if (pt(d.map((e) => e.v).find((e) => typeof e == "string" && F(e)), u) === !1) return console.error(`  ✗ ${mt(e, c)}`), 1;
-			let g = d.filter((t) => dt(t.v, u, e) !== void 0).length;
-			if (!r && !i) return console.error(`  ✗ ${e.table}.${e.column}: ${g} row(s) would be rewritten in place. Re-run with --yes, or --dry-run to see the counts without writing.`), 1;
+			})))), d = await J(f, k.SqlClient.pipe(O.flatMap((e) => O.promise(async () => await O.runPromise(e.unsafe(`SELECT ${G("id")} AS id, ${o} AS v FROM ${a}`)))))), m = 0;
+			for (let e of d) typeof e.v != "string" || P(e.v) || (m = Math.max(m, ht(e.v)));
+			let h = dt(m, l);
+			if (!h.fits) return console.error(`  ✗ ${ft(e, h)}`), 1;
+			if (gt(d.map((e) => e.v).find((e) => typeof e == "string" && P(e)), u) === !1) return console.error(`  ✗ ${_t(e, c)}`), 1;
+			let g = d.filter((t) => mt(t.v, u, e) !== void 0).length;
+			if (!n && !i) return console.error(`  ✗ ${e.table}.${e.column}: ${g} row(s) would be rewritten in place. Re-run with --yes, or --dry-run to see the counts without writing.`), 1;
 			let _ = 0, v = 0, y = 0, b = [];
 			for (let t of d) {
 				if (t.v === null || t.v === void 0 || t.v === "") {
 					v += 1;
 					continue;
 				}
-				if (typeof t.v == "string" && F(t.v)) {
+				if (typeof t.v == "string" && P(t.v)) {
 					_ += 1;
 					continue;
 				}
-				let n = dt(t.v, u, e);
+				let n = mt(t.v, u, e);
 				if (n === void 0) {
 					v += 1;
 					continue;
@@ -1578,10 +1580,10 @@ export default defineMigration({
 					value: n
 				}), y += 1;
 			}
-			if (!r && b.length > 0) for (let t = 0; t < b.length; t += s) {
+			if (!n && b.length > 0) for (let t = 0; t < b.length; t += s) {
 				let n = b.slice(t, t + s);
-				await J(f, D.SqlClient.pipe(E.flatMap((t) => E.promise(async () => {
-					for (let r of n) await E.runPromise(t`UPDATE ${t(e.table)} SET ${t(e.column)} = ${r.value} WHERE ${t("id")} = ${r.id}`);
+				await J(f, k.SqlClient.pipe(O.flatMap((t) => O.promise(async () => {
+					for (let r of n) await O.runPromise(t`UPDATE ${t(e.table)} SET ${t(e.column)} = ${r.value} WHERE ${t("id")} = ${r.id}`);
 				})))), B.info(`encrypt-column ${e.table}.${e.column}: ${Math.min(t + n.length, b.length)}/${b.length}`);
 			}
 			p.push({
@@ -1593,29 +1595,29 @@ export default defineMigration({
 				encrypted: y
 			});
 		}
-		console.log(`field encryption · dialect ${t}${r ? " · DRY RUN, nothing written" : ""}`), console.log("");
-		for (let e of p) console.log(ut(e, r));
-		return r || console.log(ht(d)), 0;
+		console.log(`field encryption · dialect ${t}${n ? " · DRY RUN, nothing written" : ""}`), console.log("");
+		for (let e of p) console.log(pt(e, n));
+		return n || console.log(vt(d)), 0;
 	}
-}, dn = async (e) => {
-	let [t, ...n] = e;
-	if (!t) {
+}, mn = (e) => Object.prototype.hasOwnProperty.call(pn, e), hn = async (t) => {
+	let [n, ...r] = t;
+	if (!n) {
 		console.error("voltro db <subcommand> [args]"), console.error("subcommands:");
-		for (let e of Object.keys(un)) console.error(`  ${e}`);
+		for (let e of Object.keys(pn)) console.error(`  ${e}`);
 		return 1;
 	}
-	let r = un[t];
-	if (!r) return console.error(`voltro db: unknown subcommand '${t}'`), 2;
+	if (!mn(n)) return console.error(`voltro db: unknown subcommand '${n}'`), console.error(`  known: ${e.join(", ")}`), 2;
+	let i = pn[n];
 	(process.env.DB_DIRECT_URL !== void 0 || process.env.DB_MIGRATE_URL !== void 0) && B.info("using a DIRECT (non-pooler) connection for the db-command path (DB_DIRECT_URL/DB_MIGRATE_URL set)");
-	let i = (e) => {
-		vt(e) ? B.error(yt) : console.error(e), process.exit(1);
+	let a = (e) => {
+		xt(e) ? B.error(St) : console.error(e), process.exit(1);
 	};
-	process.on("uncaughtException", i);
+	process.on("uncaughtException", a);
 	try {
-		return await r(n);
+		return await i(r);
 	} finally {
-		process.off("uncaughtException", i);
+		process.off("uncaughtException", a);
 	}
 };
 //#endregion
-export { Dt as a, tn as i, U as n, vt as o, Et as r, dn as s, yt as t };
+export { At as a, an as i, U as n, xt as o, kt as r, hn as s, St as t };