@voltro/cli 0.47.0 → 0.48.0

package/dist/{dataCommand-Dl11q14e.js → dataCommand-hIaq2iKY.js}

@@ -1,19 +1,19 @@
 import { t as e } from "./cliError-BmdYnghb.js";
-import { c as t, i as n, o as r, z as i } from "./dev-RjB7eE_B.js";
+import { c as t, i as n, o as r, z as i } from "./dev-lvnVq5RD.js";
 import { n as a, t as o } from "./cliArgs-D4p8n7EE.js";
 import { r as s } from "./dialectDriver-czCHYpeH.js";
 import { t as c } from "./dataProfile-Cm0YVKSy.js";
 import { o as l, t as u } from "./inspectFetch-EMuhTG_9.js";
-import { r as d } from "./dbCommand-jbrmzwW_.js";
+import { r as d } from "./dbCommand-ZGNItjoJ.js";
 import { resolve as f } from "node:path";
 import { createLogger as p } from "@voltro/logger";
-import { connectionIdentity as m, normaliseTarget as h, sameDatabase as g, streamTable as _ } from "@voltro/database";
-import { Effect as v, Stream as y } from "effect";
-import { SqlClient as b } from "@effect/sql";
-import { declaredSnapshot as x, fingerprintSchema as ee, introspectSchema as te } from "@voltro/database/sql";
-import { STORAGE_REFS_TABLE as ne, resolveStorageProvider as S } from "@voltro/plugin-storage";
-import { createHash as re } from "node:crypto";
-import { asImportError as ie, assessLiveImport as ae, backupArtifactName as C, backupCommand as oe, classificationFromSnapshot as se, decryptStream as w, encryptStream as ce, packBundle as le, peekBundle as T, previewMasking as ue, restoreCommand as de, runExport as E, runImport as D, runNativeStep as O, storageAssetSink as fe, storageAssetSource as pe, storageBlobSink as me, storageBlobSource as he, unpackBundle as ge, unpackBundleToDir as k } from "@voltro/data-transfer";
+import { IMPORT_RUNS_TABLE as m, connectionIdentity as h, normaliseTarget as g, sameDatabase as _, streamTable as v } from "@voltro/database";
+import { Effect as y, Stream as b } from "effect";
+import { SqlClient as x } from "@effect/sql";
+import { declaredSnapshot as ee, fingerprintSchema as te, introspectSchema as ne } from "@voltro/database/sql";
+import { STORAGE_REFS_TABLE as re, resolveStorageProvider as S } from "@voltro/plugin-storage";
+import { createHash as ie } from "node:crypto";
+import { asImportError as ae, assessLiveImport as oe, backupArtifactName as C, backupCommand as se, classificationFromSnapshot as ce, decryptStream as w, encryptStream as le, packBundle as ue, peekBundle as T, previewMasking as de, restoreCommand as E, runExport as D, runImport as O, runNativeStep as k, storageAssetSink as fe, storageAssetSource as pe, storageBlobSink as me, storageBlobSource as he, unpackBundle as ge, unpackBundleToDir as A } from "@voltro/data-transfer";
 import { request as _e } from "node:http";
 import { request as ve } from "node:https";
 //#region src/longRequest.ts
@@ -25,7 +25,7 @@ var ye = /* @__PURE__ */ new Set([
 	"ENOTFOUND",
 	"ECONNRESET",
 	"EAI_AGAIN"
-]), A = class extends Error {
+]), j = class extends Error {
 	url;
 	cause;
 	constructor(e, t) {
@@ -38,13 +38,13 @@ var ye = /* @__PURE__ */ new Set([
 		})();
 		super(`the instance at ${n} is not answering (${t.code ?? "connect failed"}).`), this.url = e, this.cause = t, this.name = "InstanceUnreachable";
 	}
-}, j = class extends Error {
+}, M = class extends Error {
 	elapsedMs;
 	url;
 	constructor(e, t) {
 		super(`no response after ${Math.round(e / 1e3)}s`), this.elapsedMs = e, this.url = t, this.name = "LongRequestTimeout";
 	}
-}, M = async (e, t, n, r) => {
+}, N = async (e, t, n, r) => {
 	let i = new URL(e), a = i.protocol === "https:" ? ve : _e, o = Date.now();
 	return await new Promise((s, c) => {
 		let l = a({
@@ -63,8 +63,8 @@ var ye = /* @__PURE__ */ new Set([
 			})), e.on("error", c);
 		});
 		if (r?.timeoutMs !== void 0 && r.timeoutMs > 0 && l.setTimeout(r.timeoutMs, () => {
-			l.destroy(new j(Date.now() - o, e));
-		}), l.on("error", (t) => c(ye.has(t.code ?? "") ? new A(e, t) : t)), typeof t == "string" || Buffer.isBuffer(t)) {
+			l.destroy(new M(Date.now() - o, e));
+		}), l.on("error", (t) => c(ye.has(t.code ?? "") ? new j(e, t) : t)), typeof t == "string" || Buffer.isBuffer(t)) {
 			l.end(t);
 			return;
 		}
@@ -99,7 +99,7 @@ var ye = /* @__PURE__ */ new Set([
 		i += a.byteLength, yield s;
 	}
 	yield* a(!0);
-}, we = (e) => re("sha256").update(Buffer.from(e)).digest("hex"), Te = async (e) => {
+}, we = (e) => ie("sha256").update(Buffer.from(e)).digest("hex"), Te = async (e) => {
 	let t = 0, n = 0, r = {
 		status: 0,
 		body: {}
@@ -130,13 +130,13 @@ var ye = /* @__PURE__ */ new Set([
 		bytes: t,
 		resumedFrom: e.alreadyHeld
 	};
-}, N = "voltro-backup-stamp.json", Ee = (e) => ({
+}, P = "voltro-backup-stamp.json", Ee = (e) => ({
 	stampVersion: 1,
 	dialect: e.dialect,
 	schemaFingerprint: e.schemaFingerprint,
 	voltroVersion: e.voltroVersion,
 	createdAt: e.createdAt
-}), P = (e) => {
+}), De = (e) => {
 	let t;
 	try {
 		t = JSON.parse(e);
@@ -154,10 +154,10 @@ var ye = /* @__PURE__ */ new Set([
 		voltroVersion: n.voltroVersion,
 		createdAt: n.createdAt
 	};
-}, De = (e) => {
+}, Oe = (e) => {
 	let { stamp: t, currentDialect: n, currentFingerprint: r } = e;
 	if (t === null) return {
-		warn: `no ${N} beside the dump — an older/handmade backup. Cannot verify dialect or schema version; make sure this dump is a ${n} dump.`,
+		warn: `no ${P} beside the dump — an older/handmade backup. Cannot verify dialect or schema version; make sure this dump is a ${n} dump.`,
 		info: []
 	};
 	let i = [`backup produced by @voltro/cli ${t.voltroVersion} at ${t.createdAt}`, `schema fingerprint: ${t.schemaFingerprint ?? "<none recorded>"}`];
@@ -175,7 +175,7 @@ var ye = /* @__PURE__ */ new Set([
 	} catch {
 		return e.trim();
 	}
-}, Oe = (e) => {
+}, ke = (e) => {
 	let t = e.flagUrl ?? e.envUrl;
 	if (t === void 0 || t.trim() === "") return {
 		ok: !1,
@@ -189,7 +189,7 @@ var ye = /* @__PURE__ */ new Set([
 		ok: !0,
 		url: t
 	};
-}, ke = (e) => {
+}, Ae = (e) => {
 	let { stampFingerprint: t, restoredFingerprint: n, restoredTableCount: r } = e;
 	return r === 0 ? {
 		pass: !1,
@@ -204,7 +204,7 @@ var ye = /* @__PURE__ */ new Set([
 		pass: !0,
 		lines: [`PASS — restored ${r} table(s); schema fingerprint matches the backup stamp (${n.slice(0, 12)}).`]
 	};
-}, I = p({ scope: "voltro:data" }), Ae = async () => {
+}, I = p({ scope: "voltro:data" }), je = async () => {
 	try {
 		let { createRequire: e } = await import("node:module"), { join: t } = await import("node:path"), { readFileSync: n } = await import("node:fs"), r = e(t(process.cwd(), "package.json")).resolve("@voltro/cli/package.json");
 		return JSON.parse(n(r, "utf8")).version ?? "unknown";
@@ -213,7 +213,7 @@ var ye = /* @__PURE__ */ new Set([
 	}
 }, L = async (e) => {
 	try {
-		return ee(await U(e));
+		return te(await W(e));
 	} catch {
 		return null;
 	}
@@ -221,7 +221,7 @@ var ye = /* @__PURE__ */ new Set([
 	if (e.event !== "done") return;
 	let t = e.total === void 0 ? "" : ` / ${e.total}`;
 	I.info(`${e.phase} [${e.index + 1}/${e.tableCount}] ${e.table}`, { rows: `${e.rowsDone}${t}` });
-}, je = async (e) => {
+}, Me = async (e) => {
 	let t = (e) => e?.meta?.databaseId;
 	if (e) {
 		let n = await u({
@@ -241,21 +241,21 @@ var ye = /* @__PURE__ */ new Set([
 		};
 	}
 	return null;
-}, Me = async (e) => {
-	let t = e.includes("--allow-live"), n = t ? null : await je(z(e, "--api-url")), i = m({
-		dialect: V(),
+}, z = async (e) => {
+	let t = e.includes("--allow-live"), n = t ? null : await Me(B(e, "--api-url")), i = h({
+		dialect: H(),
 		...r()
-	}), a = h({
-		dialect: V(),
+	}), a = g({
+		dialect: H(),
 		...r()
-	}), { refuse: o, message: s } = ae({
+	}), { refuse: o, message: s } = oe({
 		liveInstance: n?.label ?? null,
 		allowLive: t,
-		sameTarget: g(i, n?.databaseId),
+		sameTarget: _(i, n?.databaseId),
 		...a === void 0 ? {} : { targetLabel: `${a.host}:${a.port}/${a.database}` }
 	});
 	return !o || (I.error(s ?? "refusing: live instance detected"), !1);
-}, z = a, Ne = [
+}, B = a, Ne = [
 	"--api-url",
 	"--bundle-key",
 	"--compression",
@@ -263,6 +263,7 @@ var ye = /* @__PURE__ */ new Set([
 	"--drill-url",
 	"--chunk-size",
 	"--exclude",
+	"--limit",
 	"--mode",
 	"--no-atomic",
 	"--on-conflict",
@@ -273,49 +274,58 @@ var ye = /* @__PURE__ */ new Set([
 	"--timeout",
 	"--tenant",
 	"--token"
-], B = (e) => o(e, Ne), V = () => {
+], V = (e) => o(e, Ne), H = () => {
 	let t = (process.env.DB_DIALECT ?? "postgres").toLowerCase();
 	if (t === "memory") throw new e("voltro data: requires a real dialect, not DB_DIALECT=memory.");
 	return t;
-}, H = async (e, t) => {
+}, U = async (e, t) => {
 	let n = (await s(e)).makeSqlLayer(t);
-	return v.runPromise(b.SqlClient.pipe(v.flatMap(te), v.provide(n)));
-}, U = (e) => H(e, r()), Pe = () => {
+	return y.runPromise(x.SqlClient.pipe(y.flatMap(ne), y.provide(n)));
+}, W = (e) => U(e, r()), Pe = () => {
 	let e = r(), t = [];
 	return e.url && t.push(F(e.url)), (e.host || e.database) && t.push(`${(e.host ?? "localhost").toLowerCase()}:${e.port ?? "(default)"}/${e.database ?? ""}`), t;
-}, W = async () => {
+}, G = async () => {
 	let r = process.cwd(), i = await t(r);
 	if (!i) throw new e("voltro data: no app.config.ts found in the current directory.");
-	let a = await n(i, void 0), o = V();
+	let a = await n(i, void 0), o = H();
 	return {
 		store: a,
-		snapshot: await U(o),
+		snapshot: await W(o),
 		dialect: o
 	};
-}, G = (e) => _(e, {
-	table: ne,
+}, K = (e) => v(e, {
+	table: re,
 	chunkSize: 500
-}).pipe(y.map((e) => ({
+}).pipe(b.map((e) => ({
 	key: String(e.key),
 	contentType: String(e.contentType ?? "application/octet-stream"),
 	size: Number(e.size ?? 0)
-}))), K = (e) => !!e && e.endsWith(".vbundle"), q = (e) => z(e, "--passphrase") ?? process.env.VOLTRO_BUNDLE_KEY, Fe = (e) => e.includes("--encrypt") || z(e, "--passphrase") !== void 0 || process.env.VOLTRO_BUNDLE_KEY !== void 0, Ie = async (e, t) => {
+}))), q = (e) => !!e && e.endsWith(".vbundle"), J = (e) => B(e, "--passphrase") ?? process.env.VOLTRO_BUNDLE_KEY, Fe = (e) => e.includes("--encrypt") || B(e, "--passphrase") !== void 0 || process.env.VOLTRO_BUNDLE_KEY !== void 0, Ie = async (e, t) => {
 	let { createWriteStream: n } = await import("node:fs"), { pipeline: r } = await import("node:stream/promises"), { Readable: i } = await import("node:stream");
 	await r(i.from(e), n(t));
-}, J = (e) => ({ async *[Symbol.asyncIterator]() {
+}, Y = (e) => ({ async *[Symbol.asyncIterator]() {
 	let { createReadStream: t } = await import("node:fs");
 	for await (let n of t(e)) yield n instanceof Uint8Array ? n : new Uint8Array(n);
-} }), Y = (e) => (e ?? "").split(",").map((e) => e.trim()).filter(Boolean), Le = (t, n) => {
-	let r = z(t, "--tenant"), i = z(t, "--tables"), a = z(t, "--exclude");
+} }), Le = async (e, t) => {
+	if (t !== void 0 || e === void 0) return null;
+	try {
+		let { resolve: t, join: n } = await import("node:path"), r = await import("node:fs/promises"), i = t(process.cwd(), e), a = q(e) ? (await T(Y(i), ["manifest.json"])).get("manifest.json") : await r.readFile(n(i, "manifest.json"));
+		if (a === void 0) return null;
+		let o = (JSON.parse(Buffer.from(a).toString("utf8")).tables ?? []).map((e) => e.name).filter((e) => typeof e == "string");
+		return o.length > 0 ? o : null;
+	} catch {
+		return null;
+	}
+}, X = (e) => (e ?? "").split(",").map((e) => e.trim()).filter(Boolean), Re = (t, n) => {
+	let r = B(t, "--tenant"), i = B(t, "--tables"), a = B(t, "--exclude");
 	if (a !== void 0) {
 		if (i !== void 0) throw new e("voltro data export: --exclude and --tables are two ways to say the same thing; use one.");
 		if (r !== void 0) throw new e("voltro data export: --exclude does not apply to --tenant, whose table set is derived from the tenant closure.");
-		let t = Y(a), o = new Set(n), s = t.filter((e) => !o.has(e));
+		let t = X(a), o = new Set(n), s = t.filter((e) => !o.has(e));
 		if (s.length > 0) throw new e(`voltro data export: --exclude names ${s.length} table(s) that do not exist: ${s.join(", ")}. An exclusion that excludes nothing would leave the run looking like it worked.`);
-		let c = new Set(t);
 		return {
-			kind: "tables",
-			tables: n.filter((e) => !c.has(e))
+			kind: "all",
+			exclude: t
 		};
 	}
 	return r ? {
@@ -323,15 +333,15 @@ var ye = /* @__PURE__ */ new Set([
 		tenantId: r
 	} : i ? {
 		kind: "tables",
-		tables: Y(i)
+		tables: X(i)
 	} : { kind: "all" };
-}, Re = async () => {
+}, ze = async () => {
 	let e = await d(process.cwd());
-	return se(x(e));
-}, ze = "voltro/tenant", Be = async () => {
-	let e = (await d(process.cwd())).filter((e) => (e.appliedMixins ?? []).some((e) => e.id === ze)).map((e) => e.tableName);
+	return ce(ee(e));
+}, Be = "voltro/tenant", Ve = async () => {
+	let e = (await d(process.cwd())).filter((e) => (e.appliedMixins ?? []).some((e) => e.id === Be)).map((e) => e.tableName);
 	return e.length > 0 ? e : void 0;
-}, Ve = (e) => {
+}, He = (e) => {
 	for (let t of e.tables) if (t.samples.length !== 0) {
 		console.log(`\n  ${t.table}`);
 		for (let e of t.samples) console.log(`    ${e.column}  [${e.action}]  ${JSON.stringify(e.before)} → ${JSON.stringify(e.after)}`);
@@ -344,8 +354,8 @@ var ye = /* @__PURE__ */ new Set([
 		console.log("\n  ✗ unclassified (would BLOCK a real export — add .sensitive()/.safe() or a policy override):");
 		for (let t of e.unclassified) console.log(`    ${t}`);
 	} else console.log("\n  ✓ every exported column is classified — safe to run.");
-}, He = async (t) => {
-	let { resolve: n, join: r } = await import("node:path"), i = await import("node:fs/promises"), a = z(t.args, "--chunk-size"), o = a === void 0 ? Se : Math.round(Number(a) * 1024 * 1024);
+}, Ue = async (t) => {
+	let { resolve: n, join: r } = await import("node:path"), i = await import("node:fs/promises"), a = B(t.args, "--chunk-size"), o = a === void 0 ? Se : Math.round(Number(a) * 1024 * 1024);
 	if (!Number.isFinite(o) || o <= 0) throw new e(`--chunk-size expects a positive number of megabytes, got '${String(a)}'`);
 	let s = t.stream[Symbol.asyncIterator](), c = [], l = 0, u = !1;
 	for (; l <= o;) {
@@ -360,11 +370,11 @@ var ye = /* @__PURE__ */ new Set([
 		kind: "small",
 		body: Buffer.concat(c)
 	};
-	let d = n(process.cwd(), t.bundleDir), f = we(K(t.bundleDir) ? await i.readFile(d) : await i.readFile(r(d, "manifest.json"))), p = `up-${f.slice(0, 32)}`, m = await M(t.url, Buffer.alloc(0), {
+	let d = n(process.cwd(), t.bundleDir), f = we(q(t.bundleDir) ? await i.readFile(d) : await i.readFile(r(d, "manifest.json"))), p = `up-${f.slice(0, 32)}`, m = await N(t.url, Buffer.alloc(0), {
 		...t.headers,
 		"x-import-upload-id": p,
 		"x-import-probe": "1"
-	}, Z(t.args)), h = m.status === 200 ? Number(JSON.parse(m.body.toString("utf8")).bytes ?? 0) : 0;
+	}, Q(t.args)), h = m.status === 200 ? Number(JSON.parse(m.body.toString("utf8")).bytes ?? 0) : 0;
 	h > 0 && t.log.info("api import: resuming a chunked upload the instance already holds", { bytes: h });
 	let g = (async function* () {
 		for (let e of c) yield e;
@@ -387,7 +397,7 @@ var ye = /* @__PURE__ */ new Set([
 			t.log.info("api import: upload done — the instance is importing now. This request stays open until it finishes, which on a full bundle is minutes, and nothing more is printed until then. It is not a hang; the instance logs the import itself.");
 		},
 		target: { send: async (e, n) => {
-			let r = await M(t.url, e, n, Z(t.args)), i = {};
+			let r = await N(t.url, e, n, Q(t.args)), i = {};
 			try {
 				i = JSON.parse(r.body.toString("utf8") || "{}");
 			} catch {}
@@ -409,68 +419,70 @@ var ye = /* @__PURE__ */ new Set([
 			body: Buffer.from(JSON.stringify(v.body))
 		}
 	};
-}, Ue = (e) => `--mode replace with --no-atomic against a ${e ? "RUNNING instance" : "live database"}: the target is empty between the delete and the load, and anything the application writes in that window can collide with a row from the bundle — or survive the import as a row the bundle never carried. Drop --no-atomic to run the whole load in one transaction (concurrent writers then wait instead of racing), or stop the traffic for the duration.`, X = (e, t) => e.includes("--no-atomic") ? !1 : e.includes("--atomic") || t === "replace", We = (e, t, n) => {
+}, We = (e) => `--mode replace with --no-atomic against a ${e ? "RUNNING instance" : "live database"}: the target is empty between the delete and the load, and anything the application writes in that window can collide with a row from the bundle — or survive the import as a row the bundle never carried. Drop --no-atomic to run the whole load in one transaction (concurrent writers then wait instead of racing), or stop the traffic for the duration.`, Z = (e, t) => e.includes("--no-atomic") ? !1 : e.includes("--atomic") || t === "replace", Ge = (e, t, n) => {
 	if (t !== "replace" || e.includes("--no-rollback")) return;
-	let r = z(e, "--rollback-dir");
+	let r = B(e, "--rollback-dir");
 	return r === void 0 ? i(n) : f(r);
-}, Ge = (e, t, n) => {
-	let r = We(e, t, n);
+}, Ke = (e, t, n) => {
+	let r = Ge(e, t, n);
 	return {
 		...r === void 0 ? {} : { rollbackDir: r },
 		recordInterruption: !0,
 		via: "direct"
 	};
-}, Z = (t) => {
-	let n = z(t, "--timeout");
+}, Q = (t) => {
+	let n = B(t, "--timeout");
 	if (n === void 0) return {};
 	let r = Number(n);
 	if (!Number.isFinite(r) || r <= 0) throw new e(`--timeout expects a positive number of seconds, got '${n}'`);
 	return { timeoutMs: Math.round(r * 1e3) };
-}, Ke = async (e) => {
-	let t = z(e, "--target") === "api", n = z(e, "--bundle-key"), r = B(e);
+}, qe = async (e) => {
+	let t = B(e, "--target") === "api", n = B(e, "--bundle-key"), r = V(e);
 	if (!r && !(t && n)) return I.error("usage: voltro data export <outDir> [--target direct|api] [--api-url <url>] [--token <secret>] [--timeout <seconds>] [--profile <name>] [--tenant <id>] [--tables a,b] [--exclude a,b] [--bundle-key <storage-key>] [--assets] [--compression zstd|gzip|none] [--consistency live|snapshot] [--dry-run]"), 1;
 	if (t) {
-		let t = z(e, "--api-url");
+		let t = B(e, "--api-url");
 		if (!t) return I.error("--target api requires --api-url <url> (the running instance)"), 1;
-		let i = z(e, "--token") ?? process.env.VOLTRO_DATA_TRANSFER_SECRET;
+		let i = B(e, "--token") ?? process.env.VOLTRO_DATA_TRANSFER_SECRET;
 		if (!i) return I.error("--target api requires --token <secret> (or VOLTRO_DATA_TRANSFER_SECRET) matching the instance secret"), 1;
-		if (z(e, "--exclude") !== void 0) return I.error("--exclude is a direct-target flag: it expands against the live table list, which --target api does not expose. Use --tables with the explicit set."), 1;
-		let a = z(e, "--tables"), o = {
-			...z(e, "--profile") ? { profile: z(e, "--profile") } : {},
-			...z(e, "--tenant") ? { tenant: z(e, "--tenant") } : {},
+		let a = B(e, "--tables"), o = B(e, "--exclude");
+		if (o !== void 0 && a !== void 0) return I.error("voltro data export: --exclude and --tables are two ways to say the same thing; use one."), 1;
+		let s = {
+			...B(e, "--profile") ? { profile: B(e, "--profile") } : {},
+			...B(e, "--tenant") ? { tenant: B(e, "--tenant") } : {},
 			...a ? { tables: a.split(",").map((e) => e.trim()).filter(Boolean) } : {},
-			...z(e, "--consistency") === "snapshot" ? { consistency: "snapshot" } : {},
-			...z(e, "--compression") ? { compression: z(e, "--compression") } : {},
+			...o ? { exclude: o.split(",").map((e) => e.trim()).filter(Boolean) } : {},
+			...B(e, "--consistency") === "snapshot" ? { consistency: "snapshot" } : {},
+			...B(e, "--compression") ? { compression: B(e, "--compression") } : {},
 			...e.includes("--assets") ? { assets: !0 } : {},
 			...n ? { bundleKey: n } : {}
-		}, s;
+		}, c;
 		try {
-			s = await M(`${t.replace(/\/+$/, "")}/_voltro/admin/export`, JSON.stringify(o), {
+			c = await N(`${t.replace(/\/+$/, "")}/_voltro/admin/export`, JSON.stringify(s), {
 				"content-type": "application/json",
 				authorization: `Bearer ${i}`
-			}, Z(e));
+			}, Q(e));
 		} catch (e) {
-			if (e instanceof j) return I.error(`api export: the instance did not answer within ${Math.round(e.elapsedMs / 1e3)}s. That is a client-side deadline, not a server failure — the response arrives only when the export does. Nothing was written locally; re-run, or pass --timeout <seconds> (the default is to wait).`), 1;
-			if (e instanceof A) return I.error(`api export: ${be(e)}`), 1;
+			if (e instanceof M) return I.error(`api export: the instance did not answer within ${Math.round(e.elapsedMs / 1e3)}s. That is a client-side deadline, not a server failure — the response arrives only when the export does. Nothing was written locally; re-run, or pass --timeout <seconds> (the default is to wait).`), 1;
+			if (e instanceof j) return I.error(`api export: ${be(e)}`), 1;
 			throw e;
 		}
-		if (s.status < 200 || s.status >= 300) return I.error(`api export failed: HTTP ${s.status} — ${s.body.toString("utf8")}`), 1;
+		if (c.status < 200 || c.status >= 300) return I.error(`api export failed: HTTP ${c.status} — ${c.body.toString("utf8")}`), 1;
 		if (n) return I.info("api export complete (pushed to storage)", {
 			via: t,
-			...JSON.parse(s.body.toString("utf8"))
+			...JSON.parse(c.body.toString("utf8"))
 		}), 0;
-		let { resolve: c } = await import("node:path"), l = new Uint8Array(s.body);
-		return await k((async function* () {
-			yield l;
-		})(), c(process.cwd(), r)), I.info("api export complete (downloaded from the running instance)", {
+		let { resolve: l } = await import("node:path"), u = new Uint8Array(c.body);
+		return await A((async function* () {
+			yield u;
+		})(), l(process.cwd(), r)), I.info("api export complete (downloaded from the running instance)", {
 			outDir: r,
-			tables: s.headers["x-export-tables"],
-			rows: s.headers["x-export-rows"],
-			masked: s.headers["x-export-masked"]
+			tables: c.headers["x-export-tables"],
+			rows: c.headers["x-export-rows"],
+			masked: c.headers["x-export-masked"]
 		}), 0;
 	}
 	if (!r) return I.error("a <outDir> is required for a direct export"), 1;
-	let i = z(e, "--profile"), a = i ? await c(i, { allowPath: !0 }) : {}, { store: o, snapshot: s, dialect: l } = await W(), u = e.includes("--assets") || a.assets === !0, d = u ? S({}) : void 0, f = z(e, "--compression") ?? a.compression, p = z(e, "--consistency") === "snapshot" ? "snapshot" : a.consistency ?? "live", m = a.masking, h = a.subset, g = a.scope ?? Le(e, s.tables.map((e) => e.name)), _ = m ? await Re() : void 0, y = g.kind === "tenant" ? await Be() : void 0, b = y ? { tenantTables: y } : {};
+	let i = B(e, "--profile"), a = i ? await c(i, { allowPath: !0 }) : {}, { store: o, snapshot: s, dialect: l } = await G(), u = e.includes("--assets") || a.assets === !0, d = u ? S({}) : void 0, f = B(e, "--compression") ?? a.compression, p = B(e, "--consistency") === "snapshot" ? "snapshot" : a.consistency ?? "live", m = a.masking, h = a.subset, g = a.scope ?? Re(e, s.tables.map((e) => e.name)), _ = m ? await ze() : void 0, v = g.kind === "tenant" ? await Ve() : void 0, b = v ? { tenantTables: v } : {};
 	if (e.includes("--dry-run")) {
 		let e = g.kind === "tables" && g.tables ? [...g.tables] : s.tables.map((e) => e.name);
 		if (I.info("export DRY RUN — nothing was written", {
@@ -482,7 +494,7 @@ var ye = /* @__PURE__ */ new Set([
 			assets: u,
 			masking: m ? "profile policy applies" : "none"
 		}), I.info(`would export: ${e.join(", ")}`), !m) return 0;
-		let t = await v.runPromise(ue({
+		let t = await y.runPromise(de({
 			store: o,
 			snapshot: s,
 			masking: m,
@@ -492,12 +504,12 @@ var ye = /* @__PURE__ */ new Set([
 				...b
 			}
 		}));
-		return Ve(t), +(t.unclassified.length > 0);
+		return He(t), +(t.unclassified.length > 0);
 	}
-	if (K(r)) {
+	if (q(r)) {
 		let t = await import("node:os"), n = await import("node:fs/promises"), { resolve: i, join: a } = await import("node:path"), c = await n.mkdtemp(a(t.tmpdir(), "voltro-export-"));
 		try {
-			let t = await v.runPromise(E({
+			let t = await y.runPromise(D({
 				store: o,
 				snapshot: s,
 				dialect: l,
@@ -511,14 +523,14 @@ var ye = /* @__PURE__ */ new Set([
 				...m ? { masking: m } : {},
 				..._ ? { classification: _ } : {},
 				onProgress: R
-			})), n = le({
+			})), n = ue({
 				dir: c,
-				...d ? { blobs: he(d, () => G(o)) } : {}
+				...d ? { blobs: he(d, () => K(o)) } : {}
 			}), a = Fe(e);
 			if (a) {
-				let t = q(e);
+				let t = J(e);
 				if (!t) return I.error("--encrypt requires --passphrase <p> or VOLTRO_BUNDLE_KEY (a dedicated key, NOT the transfer secret)"), 1;
-				n = ce(n, t);
+				n = le(n, t);
 			}
 			return await Ie(n, i(process.cwd(), r)), I.info("export complete (single file)", {
 				file: r,
@@ -534,7 +546,7 @@ var ye = /* @__PURE__ */ new Set([
 			});
 		}
 	}
-	let x = await v.runPromise(E({
+	let x = await y.runPromise(D({
 		store: o,
 		snapshot: s,
 		dialect: l,
@@ -547,7 +559,7 @@ var ye = /* @__PURE__ */ new Set([
 		...f ? { compression: f } : {},
 		...m ? { masking: m } : {},
 		..._ ? { classification: _ } : {},
-		...d ? { assets: pe(d, () => G(o)) } : {},
+		...d ? { assets: pe(d, () => K(o)) } : {},
 		onProgress: R
 	}));
 	return I.info("export complete", {
@@ -558,13 +570,13 @@ var ye = /* @__PURE__ */ new Set([
 		compression: x.compression,
 		...x.masking ? { maskedColumns: x.masking.transformed.length } : {}
 	}), 0;
-}, qe = () => "dry run checked: schema fit, cross-dialect portability, mode legality, the table selection. It did NOT read per-table checksums (those stream during the load) and cannot see conflicts that depend on the target's current rows.", Je = (e) => {
-	let t = z(e, "--tables");
+}, Je = () => "dry run checked: schema fit, cross-dialect portability, mode legality, the table selection. It did NOT read per-table checksums (those stream during the load) and cannot see conflicts that depend on the target's current rows.", Ye = (e) => {
+	let t = B(e, "--tables");
 	return {
 		...t ? { tables: t.split(",").map((e) => e.trim()).filter(Boolean) } : {},
 		...e.includes("--dry-run") ? { dryRun: !0 } : {}
 	};
-}, Q = (e) => ({
+}, Xe = (e) => ({
 	tables: e.tablesWritten,
 	rows: e.rowsWritten,
 	carried: e.manifest.tables.reduce((e, t) => e + t.rowCount, 0),
@@ -572,9 +584,9 @@ var ye = /* @__PURE__ */ new Set([
 		skippedTables: e.tablesSkipped,
 		skippedRows: e.rowsSkipped
 	} : {}
-}), Ye = (e, t) => {
+}), Ze = (e, t) => {
 	if (e.includes("--dry-run")) {
-		I.info("import DRY RUN — nothing was written", t), I.info(qe());
+		I.info("import DRY RUN — nothing was written", t), I.info(Je());
 		return;
 	}
 	if (t.rows === 0 && typeof t.skippedRows == "number" && t.skippedRows !== 0) {
@@ -582,8 +594,8 @@ var ye = /* @__PURE__ */ new Set([
 		return;
 	}
 	I.info("import complete", t);
-}, Xe = Symbol("refused"), Ze = (e) => {
-	let t = ie(e) ?? e;
+}, Qe = Symbol("refused"), $e = (e) => {
+	let t = ae(e) ?? e;
 	if (t?._tag !== "RowsRefusedError" || !Array.isArray(t.rows)) return !1;
 	let n = t.rows, r = n.filter((e) => !e.derived), i = Number(t.totalCount ?? n.length), a = Number(t.primaryCount ?? r.length);
 	I.error(`import refused ${i} row(s), of which ${a} are the actual failures — the rest could not land because a row they reference did not.`);
@@ -593,7 +605,7 @@ var ye = /* @__PURE__ */ new Set([
 	n.length < i && I.error(`  (the list above is capped at ${n.length} of ${i} — the counts by table are complete)`);
 	let s = i - a;
 	return s > 0 && I.error(`  … and ${s} row(s) behind them. Fix the ${a} above and re-run; they resolve with their parents.`), !0;
-}, Qe = (e) => {
+}, et = (e) => {
 	let t = typeof e == "string" ? e : e.toString("utf8"), n = t;
 	try {
 		let e = JSON.parse(t), r = e.error ?? e.message;
@@ -633,22 +645,22 @@ var ye = /* @__PURE__ */ new Set([
 			return;
 		}
 	}
-}, $e = async (e) => {
-	let t = z(e, "--target") === "api", n = z(e, "--bundle-key"), i = B(e);
+}, tt = async (e) => {
+	let t = B(e, "--target") === "api", n = B(e, "--bundle-key"), i = V(e);
 	if (!i && !(t && n)) return I.error("usage: voltro data import <bundleDir> [--target direct|api] [--api-url <url>] [--token <secret>] [--timeout <seconds>] [--bundle-key <storage-key>] [--tables a,b] [--mode upsert|append|replace] [--on-conflict skip|fail] [--atomic] [--assets] [--no-verify] [--force] [--allow-live] [--dry-run]  (--force: import despite schema drift AND cross-dialect warnings; --dry-run: report what would move, write nothing)"), 1;
-	let a = z(e, "--mode") ?? "upsert", o = z(e, "--on-conflict") ?? "skip";
+	let a = B(e, "--mode") ?? "upsert", o = B(e, "--on-conflict") ?? "skip";
 	if (t) {
-		let t = z(e, "--api-url");
+		let t = B(e, "--api-url");
 		if (!t) return I.error("--target api requires --api-url <url> (the running instance)"), 1;
-		let r = z(e, "--token") ?? process.env.VOLTRO_DATA_TRANSFER_SECRET;
+		let r = B(e, "--token") ?? process.env.VOLTRO_DATA_TRANSFER_SECRET;
 		if (!r) return I.error("--target api requires --token <secret> (or VOLTRO_DATA_TRANSFER_SECRET) matching the instance secret"), 1;
-		let s = z(e, "--tables"), c = z(e, "--rollback-key");
+		let s = B(e, "--tables"), c = B(e, "--rollback-key");
 		a === "replace" && c === void 0 && I.warn("api replace: no rollback capture — this run empties the target first and nothing was asked to be kept.\n  Pass --rollback-key <storage-key> and the INSTANCE stores the target's current rows in its own\n  object storage before deleting them, which is the one place that survives the pod going away.");
 		let l = {
 			authorization: `Bearer ${r}`,
 			"x-import-mode": a,
 			"x-import-on-conflict": o,
-			...X(e, a) ? { "x-import-atomic": "1" } : {},
+			...Z(e, a) ? { "x-import-atomic": "1" } : {},
 			...e.includes("--no-atomic") ? { "x-import-atomic": "0" } : {},
 			...c === void 0 ? {} : { "x-import-rollback-key": c },
 			...e.includes("--force") ? { "x-import-force": "1" } : {},
@@ -656,14 +668,26 @@ var ye = /* @__PURE__ */ new Set([
 			...s ? { "x-import-tables": s } : {}
 		}, { resolve: u } = await import("node:path"), d;
 		if (n) l["content-type"] = "application/json", d = JSON.stringify({ bundleKey: n });
-		else if (K(i)) {
-			let t = J(u(process.cwd(), i)), n = q(e);
+		else if (q(i)) {
+			let t = Y(u(process.cwd(), i)), n = J(e);
 			n && (t = w(t, n)), l["content-type"] = "application/octet-stream", d = t;
-		} else await (await import("node:fs/promises")).access(u(process.cwd(), i, "assets", "index.ndjson")).then(() => !0, () => !1) && I.warn("this directory bundle has assets; --target api uploads DATA ONLY. Pack a single-file `.vbundle` (voltro data export <name>.vbundle --assets) to transfer assets over the API."), l["content-type"] = "application/octet-stream", d = le({ dir: u(process.cwd(), i) });
-		a === "replace" && !X(e, a) && I.warn(Ue(!0));
+		} else await (await import("node:fs/promises")).access(u(process.cwd(), i, "assets", "index.ndjson")).then(() => !0, () => !1) && I.warn("this directory bundle has assets; --target api uploads DATA ONLY. Pack a single-file `.vbundle` (voltro data export <name>.vbundle --assets) to transfer assets over the API."), l["content-type"] = "application/octet-stream", d = ue({ dir: u(process.cwd(), i) });
+		if (a === "replace") {
+			let r = await Le(i, n);
+			{
+				let i = r === null ? { bundleKey: n } : { tables: r }, a = await N(`${t.replace(/\/+$/, "")}/_voltro/admin/import`, JSON.stringify(i), {
+					...l,
+					"content-type": "application/json",
+					"x-import-preflight": "1"
+				}, Q(e)).catch(() => null), o = a !== null && a.status === 200 ? JSON.parse(a.body.toString("utf8")) : null;
+				o === null ? I.warn("api replace: the instance did not answer the preflight (an older build does not have it). The run still works; the decision will only be visible in the pod log.") : o.staged === !0 ? I.info(`api replace: the instance WILL stage — ${o.stagedTables ?? 0} table(s) load into copies and the\n  target keeps its rows until one short swap at the end. Interrupting the load leaves the target intact.`) : I.warn(`api replace: the instance will NOT stage — it empties the target first and refills it, so an
+  interrupted run leaves the target empty.\n  Reason: ${o.reason ?? "not stated"}`);
+			}
+		}
+		a === "replace" && !Z(e, a) && I.warn(We(!0));
 		let f = `${t.replace(/\/+$/, "")}/_voltro/admin/import`, p;
 		try {
-			let t = typeof d == "string" ? null : await He({
+			let t = typeof d == "string" ? null : await Ue({
 				stream: d,
 				url: f,
 				headers: l,
@@ -671,51 +695,53 @@ var ye = /* @__PURE__ */ new Set([
 				args: e,
 				log: I
 			});
-			(t === null || t.kind === "small") && I.info("api import: uploading the bundle — this request stays open until the instance has imported it"), p = t === null ? await M(f, d, l, Z(e)) : t.kind === "sent" ? t.res : await M(f, t.body, l, Z(e));
+			(t === null || t.kind === "small") && I.info("api import: uploading the bundle — this request stays open until the instance has imported it"), p = t === null ? await N(f, d, l, Q(e)) : t.kind === "sent" ? t.res : await N(f, t.body, l, Q(e));
 		} catch (e) {
-			if (e instanceof j) return I.error(`api import: ${xe(e, a)}`), 1;
-			if (e instanceof A) return I.error(`api import: ${be(e)}`), 1;
+			if (e instanceof M) return I.error(`api import: ${xe(e, a)}`), 1;
+			if (e instanceof j) return I.error(`api import: ${be(e)}`), 1;
 			throw e;
 		}
-		if (p.status < 200 || p.status >= 300) return Ze(Qe(p.body)) || I.error(`api import failed: HTTP ${p.status} — ${p.body.toString("utf8")}`), 1;
+		if (p.status < 200 || p.status >= 300) return $e(et(p.body)) || I.error(`api import failed: HTTP ${p.status} — ${p.body.toString("utf8")}`), 1;
 		let m = JSON.parse(p.body.toString("utf8"));
 		return e.includes("--dry-run") ? (I.info("api import DRY RUN — nothing was written", {
 			via: t,
 			...m
-		}), I.info(qe()), 0) : (I.info("api import complete (imported by the running instance)", {
+		}), I.info(Je()), 0) : (I.info("api import complete (imported by the running instance)", {
 			via: t,
 			...m
 		}), 0);
 	}
 	if (!i) return I.error("a <bundleDir> is required for a direct import"), 1;
-	if (!await Me(e)) return 1;
-	a === "replace" && e.includes("--allow-live") && !X(e, a) && I.warn(Ue(!1));
-	let { store: s, snapshot: c } = await W(), l = e.includes("--force"), u = (e) => I.warn(e), d = e.includes("--assets") ? S({}) : void 0, f = V() === "postgres" ? (await import("@voltro/sql-postgres")).makePgCopySession(r()) : void 0;
-	if (K(i)) {
+	if (!await z(e)) return 1;
+	a === "replace" && e.includes("--allow-live") && !Z(e, a) && I.warn(We(!1));
+	let { store: s, snapshot: c } = await G();
+	c.tables.some((e) => e.name === m) || I.warn(`this target has no \`${m}\` table, so this import will not be recorded.\n  The import itself is unaffected. \`voltro db apply\` creates it.`), c.tables.some((e) => e.name === m) || I.warn(`this target has no \`${m}\` table, so this import will not be recorded.\n  The import itself is unaffected. \`voltro db apply\` creates it.`);
+	let l = e.includes("--force"), u = (e) => I.warn(e), d = e.includes("--assets") ? S({}) : void 0, f = H() === "postgres" ? (await import("@voltro/sql-postgres")).makePgCopySession(r()) : void 0;
+	if (q(i)) {
 		let t = await import("node:os"), n = await import("node:fs/promises"), { resolve: r, join: p } = await import("node:path"), m = await n.mkdtemp(p(t.tmpdir(), "voltro-import-"));
 		try {
-			let t = J(r(process.cwd(), i)), n = q(e);
+			let t = Y(r(process.cwd(), i)), n = J(e);
 			return n && (t = w(t, n)), await ge(t, {
 				dir: m,
 				blobs: me(d ?? S({}))
-			}), Ye(e, {
+			}), Ze(e, {
 				file: i,
-				...Q(await v.runPromise(D({
+				...Xe(await y.runPromise(O({
 					store: s,
 					bundleDir: m,
 					mode: a,
 					onConflict: o,
-					atomic: X(e, a),
-					...Ge(e, a, i),
+					atomic: Z(e, a),
+					...Ke(e, a, i),
 					verify: !e.includes("--no-verify"),
-					targetDialect: V(),
+					targetDialect: H(),
 					allowIncompatible: l,
 					targetSnapshot: c,
 					force: l,
 					onWarn: u,
 					onProgress: R,
 					assetsAlreadyRestored: !0,
-					...Je(e),
+					...Ye(e),
 					...f ? { copyLoader: f } : {}
 				})))
 			}), 0;
@@ -726,33 +752,33 @@ var ye = /* @__PURE__ */ new Set([
 			});
 		}
 	}
-	let p = await v.runPromise(D({
-		...Ge(e, a, i),
+	let p = await y.runPromise(O({
+		...Ke(e, a, i),
 		store: s,
 		bundleDir: i,
 		mode: a,
 		onConflict: o,
-		atomic: X(e, a),
+		atomic: Z(e, a),
 		verify: !e.includes("--no-verify"),
-		targetDialect: V(),
+		targetDialect: H(),
 		allowIncompatible: l,
 		targetSnapshot: c,
 		force: l,
 		onWarn: u,
 		onProgress: R,
-		...Je(e),
+		...Ye(e),
 		...d ? { assets: fe(d) } : {},
 		...f ? { copyLoader: f } : {}
 	})).catch((e) => {
-		if (Ze(e)) return Xe;
+		if ($e(e)) return Qe;
 		throw e;
 	}).finally(() => f?.close());
-	return typeof p == "symbol" ? 1 : (Ye(e, {
+	return typeof p == "symbol" ? 1 : (Ze(e, {
 		bundleDir: i,
-		...Q(p),
+		...Xe(p),
 		assets: p.manifest.assets.count
 	}), 0);
-}, et = () => {
+}, nt = () => {
 	let e = r();
 	return {
 		...e.url ? { url: e.url } : {},
@@ -762,60 +788,60 @@ var ye = /* @__PURE__ */ new Set([
 		...e.password ? { password: e.password } : {},
 		...e.database ? { database: e.database } : {}
 	};
-}, tt = async (e) => {
-	let t = B(e);
+}, rt = async (e) => {
+	let t = V(e);
 	if (!t) return I.error("usage: voltro data backup <outDir>  (native pg_dump/mysqldump/… + consistent artifact)"), 1;
-	let n = V(), { mkdir: r, writeFile: i } = await import("node:fs/promises"), { join: a } = await import("node:path");
+	let n = H(), { mkdir: r, writeFile: i } = await import("node:fs/promises"), { join: a } = await import("node:path");
 	await r(t, { recursive: !0 });
 	let o = a(t, C(n));
-	await v.runPromise(O(oe(n, et(), o)));
+	await y.runPromise(k(se(n, nt(), o)));
 	let s = Ee({
 		dialect: n,
 		schemaFingerprint: await L(n),
-		voltroVersion: await Ae(),
+		voltroVersion: await je(),
 		createdAt: (/* @__PURE__ */ new Date()).toISOString()
 	});
-	return await i(a(t, N), `${JSON.stringify(s, null, 2)}\n`, "utf8"), I.info("native backup complete", {
+	return await i(a(t, P), `${JSON.stringify(s, null, 2)}\n`, "utf8"), I.info("native backup complete", {
 		dialect: n,
 		artifact: o,
-		stamp: N,
+		stamp: P,
 		schemaFingerprint: s.schemaFingerprint ?? "<none>",
 		assets: "NOT included — use `voltro data export --assets` for rows + blobs"
 	}), 0;
-}, nt = async (e, t) => {
-	let n = V(), { join: r } = await import("node:path"), { readFile: i } = await import("node:fs/promises"), a = r(e, C(n)), o = Oe({
-		flagUrl: z(t, "--drill-url"),
+}, it = async (e, t) => {
+	let n = H(), { join: r } = await import("node:path"), { readFile: i } = await import("node:fs/promises"), a = r(e, C(n)), o = ke({
+		flagUrl: B(t, "--drill-url"),
 		envUrl: process.env.DRILL_DB_URL,
 		liveKeys: Pe()
 	});
 	if (!o.ok) return I.error(`restore --drill: ${o.error}`), 1;
-	let s = await i(r(e, N), "utf8").then(P, () => null);
+	let s = await i(r(e, P), "utf8").then(De, () => null);
 	if (s && s.dialect !== n) return I.error(`restore --drill: backup is a ${s.dialect} dump but DB_DIALECT is ${n} — cross-dialect restore is never valid.`), 1;
 	I.info("restore drill: restoring into throwaway DB", {
 		dialect: n,
 		target: F(o.url)
-	}), await v.runPromise(O(de(n, { url: o.url }, a)));
+	}), await y.runPromise(k(E(n, { url: o.url }, a)));
 	let c = null, l = 0;
 	try {
-		let e = await H(n, { url: o.url });
-		c = ee(e), l = e.tables.length;
+		let e = await U(n, { url: o.url });
+		c = te(e), l = e.tables.length;
 	} catch (e) {
 		return I.error(`restore --drill: could not introspect the restored DB — ${String(e)}`), 1;
 	}
-	let u = ke({
+	let u = Ae({
 		stampFingerprint: s?.schemaFingerprint ?? null,
 		restoredFingerprint: c,
 		restoredTableCount: l
 	});
 	for (let e of u.lines) u.pass ? I.info(`restore drill: ${e}`) : I.error(`restore drill: ${e}`);
 	return +!u.pass;
-}, rt = async (e) => {
-	let t = B(e);
+}, at = async (e) => {
+	let t = V(e);
 	if (!t) return I.error("usage: voltro data restore <backupDir> [--allow-live] [--api-url <url>] [--force] [--drill [--drill-url <url>]]  (native pg_restore/mysql/…)"), 1;
-	if (e.includes("--drill")) return nt(t, e);
-	if (!await Me(e)) return 1;
-	let n = V(), { join: r } = await import("node:path"), { readFile: i } = await import("node:fs/promises"), a = r(t, C(n)), o = De({
-		stamp: await i(r(t, N), "utf8").then(P, () => null),
+	if (e.includes("--drill")) return it(t, e);
+	if (!await z(e)) return 1;
+	let n = H(), { join: r } = await import("node:path"), { readFile: i } = await import("node:fs/promises"), a = r(t, C(n)), o = Oe({
+		stamp: await i(r(t, P), "utf8").then(De, () => null),
 		currentDialect: n,
 		currentFingerprint: await L(n)
 	});
@@ -824,12 +850,12 @@ var ye = /* @__PURE__ */ new Set([
 		if (!e.includes("--force")) return I.error(`restore refused: ${o.refuse} (pass --force to override)`), 1;
 		I.warn(`restore proceeding despite: ${o.refuse} (--force)`);
 	}
-	return await v.runPromise(O(de(n, et(), a))), I.info("native restore complete", {
+	return await y.runPromise(k(E(n, nt(), a))), I.info("native restore complete", {
 		dialect: n,
 		artifact: a
 	}), 0;
-}, it = async (e) => {
-	let t = B(e);
+}, ot = async (e) => {
+	let t = V(e);
 	if (!t) return I.error("usage: voltro data inspect <file.vbundle|dir> [--json] [--passphrase <p>]"), 1;
 	let { resolve: n, join: r } = await import("node:path"), i = await import("node:fs/promises"), a = n(process.cwd(), t);
 	if ((await i.stat(a).catch(() => void 0))?.isDirectory()) {
@@ -841,8 +867,8 @@ var ye = /* @__PURE__ */ new Set([
 		let s = await i.readFile(n, "utf8").catch(() => void 0);
 		return s === void 0 ? (I.error(`'${t}' is a directory but holds no manifest.json — is it an unpacked bundle? (a bundle exported with --target api is always unpacked into a directory, even when the path ends in .vbundle)`), 1) : (console.log(s), 0);
 	}
-	let o = q(e), s = () => {
-		let e = J(a);
+	let o = J(e), s = () => {
+		let e = Y(a);
 		return o ? w(e, o) : e;
 	};
 	if (e.includes("--json")) {
@@ -853,8 +879,8 @@ var ye = /* @__PURE__ */ new Set([
 	if (c) return console.log(c.toString("utf8")), 0;
 	let l = (await T(s(), ["manifest.json"])).get("manifest.json");
 	return l ? (console.log(l.toString("utf8")), 0) : (I.error("bundle has no README.md or manifest.json"), 1);
-}, at = async (e) => {
-	let { REPLACE_IN_PROGRESS_TABLE: t } = await import("@voltro/database"), { interruptedReplaceAtBoot: n } = await import("./interruptedReplace-DNJ7MKph.js"), { store: r } = await W(), i = await n(r);
+}, st = async (e) => {
+	let { REPLACE_IN_PROGRESS_TABLE: t } = await import("@voltro/database"), { interruptedReplaceAtBoot: n } = await import("./interruptedReplace-DNJ7MKph.js"), { store: r } = await G(), i = await n(r);
 	if (i === void 0) return I.info("no interrupted replace is recorded — nothing to clear"), 0;
 	if (!e.includes("--yes")) return I.error(`${i}\n\n  Re-run with --yes to clear it.`), 1;
 	let a = await r.query({
@@ -867,16 +893,59 @@ var ye = /* @__PURE__ */ new Set([
 	});
 	for (let e of a) await r.delete(t, String(e.id));
 	return I.info(`cleared ${a.length} interrupted-replace marker(s) — the next boot will start`), 0;
-}, ot = async (e) => {
-	let { STAGING_PREFIX: t, dropStagingSql: n, execStatements: r } = await import("@voltro/data-transfer"), { store: i } = await W(), a = V();
+}, ct = async (e) => {
+	let { STAGING_PREFIX: t, dropStagingSql: n, execStatements: r } = await import("@voltro/data-transfer"), { store: i } = await G(), a = H();
 	if (a !== "postgres" && a !== "mysql" && a !== "mariadb" && a !== "sqlite" && a !== "mssql") return I.error(`this store has no staging tables to clear (dialect: ${a})`), 1;
 	let { introspectSchema: o } = await import("@voltro/database/sql"), s = (await i.run((await import("@effect/sql")).SqlClient.SqlClient.pipe((await import("effect")).Effect.flatMap(o)))).tables.map((e) => e.name).filter((e) => e.startsWith(t));
 	return s.length === 0 ? (I.info("no staging tables are present — nothing to clear"), 0) : e.includes("--yes") ? (await r(i, s.map((e) => n(e.slice(t.length), a))), I.info(`dropped ${s.length} staging table(s)`), 0) : (I.error(`${s.length} staging table(s) from an earlier \`--mode replace\`:\n` + s.map((e) => `    ${e}`).join("\n") + "\n\n  Each holds a copy of what a run was loading. Nothing else removes them.\n  Make sure no import is running right now — this cannot tell a leftover from one in flight.\n  Re-run with --yes to drop them."), 1);
-}, st = async (e) => {
-	let t = B(e), n = B(e.filter((e) => e !== t));
+}, lt = async (e) => {
+	let { describeImportRun: t, IMPORT_RUNS_TABLE: n } = await import("@voltro/database"), r = Number(B(e, "--limit") ?? "20"), i = Number.isFinite(r) ? Math.max(1, Math.min(200, Math.trunc(r))) : 20;
+	if (B(e, "--target") === "api") {
+		let t = B(e, "--api-url");
+		if (!t) return I.error("--target api requires --api-url <url> (the running instance)"), 1;
+		let n = B(e, "--token") ?? process.env.VOLTRO_DATA_TRANSFER_SECRET;
+		if (!n) return I.error("--target api requires --token <secret> (or VOLTRO_DATA_TRANSFER_SECRET)"), 1;
+		let r = await fetch(`${t.replace(/\/+$/, "")}/_voltro/admin/imports?limit=${i}`, { headers: { authorization: `Bearer ${n}` } }), a = await r.text();
+		if (r.status !== 200) return I.error(`api imports: ${r.status} ${a}`), 1;
+		let o = JSON.parse(a);
+		if (e.includes("--json")) return console.log(a), 0;
+		let s = o.runs ?? [];
+		if (s.length === 0) return I.info("no imports recorded on this instance"), 0;
+		(o.running ?? 0) > 0 && I.info(`${o.running} import(s) IN FLIGHT — re-run this to watch the counters move`);
+		for (let e of s) I.info(`  ${e.line ?? ""}`);
+		return 0;
+	}
+	let { store: a } = await G(), o;
+	try {
+		o = await a.query({
+			table: n,
+			order: [{
+				column: "startedAt",
+				direction: "desc"
+			}],
+			predicate: void 0,
+			projection: void 0,
+			skip: 0,
+			take: i
+		});
+	} catch {
+		return I.error(`this target has no \`${n}\` table, so no import has been recorded here.\n  Run \`voltro db apply\`; imports themselves are unaffected by its absence.`), 1;
+	}
+	if (o.length === 0) return I.info("no imports recorded against this target"), 0;
+	for (let e of o) {
+		let n = e;
+		I.info(`  ${t({
+			...e,
+			startedAt: new Date(n.startedAt),
+			finishedAt: n.finishedAt === null ? null : new Date(n.finishedAt)
+		})}`);
+	}
+	return 0;
+}, ut = async (e) => {
+	let t = V(e), n = V(e.filter((e) => e !== t));
 	if (!t || !n) return I.error("usage: voltro data unpack <file.vbundle> <dir> [--passphrase <p>]"), 1;
-	let { resolve: r } = await import("node:path"), i = J(r(process.cwd(), t)), a = q(e);
-	return a && (i = w(i, a)), await k(i, r(process.cwd(), n)), I.info("unpack complete", {
+	let { resolve: r } = await import("node:path"), i = Y(r(process.cwd(), t)), a = J(e);
+	return a && (i = w(i, a)), await A(i, r(process.cwd(), n)), I.info("unpack complete", {
 		file: t,
 		dir: n
 	}), 0;
@@ -885,6 +954,7 @@ var ye = /* @__PURE__ */ new Set([
 		common: [
 			"--target",
 			"--tables",
+			"--exclude",
 			"--profile",
 			"--tenant",
 			"--assets",
@@ -893,7 +963,6 @@ var ye = /* @__PURE__ */ new Set([
 			"--json"
 		],
 		directOnly: [
-			"--exclude",
 			"--passphrase",
 			"--dry-run",
 			"--encrypt"
@@ -906,6 +975,14 @@ var ye = /* @__PURE__ */ new Set([
 		]
 	},
 	"clear-staging": { common: ["--yes"] },
+	imports: {
+		common: [
+			"--target",
+			"--limit",
+			"--json"
+		],
+		apiOnly: ["--api-url", "--token"]
+	},
 	"clear-replace-marker": { common: ["--yes"] },
 	import: {
 		common: [
@@ -947,13 +1024,13 @@ var ye = /* @__PURE__ */ new Set([
 		"--drill-url",
 		"--api-url"
 	] }
-}, ct = (e) => e.split("=")[0], lt = (e, t) => {
+}, dt = (e) => e.split("=")[0], ft = (e, t) => {
 	let n = $[e];
 	if (!n) return;
-	let r = z(t, "--target") === "api" ? "api" : "direct", i = /* @__PURE__ */ new Set([...n.common, ...r === "api" ? n.apiOnly ?? [] : n.directOnly ?? []]), a = new Set(r === "api" ? n.directOnly ?? [] : n.apiOnly ?? []);
+	let r = B(t, "--target") === "api" ? "api" : "direct", i = /* @__PURE__ */ new Set([...n.common, ...r === "api" ? n.apiOnly ?? [] : n.directOnly ?? []]), a = new Set(r === "api" ? n.directOnly ?? [] : n.apiOnly ?? []);
 	for (let n of t) {
 		if (!n.startsWith("--")) continue;
-		let t = ct(n);
+		let t = dt(n);
 		if (i.has(t)) continue;
 		if (a.has(t)) return `voltro data ${e}: ${t} is not read with --target ${r} (it is a --target ${r === "api" ? "direct" : "api"} flag). Remove it, or change --target.`;
 		let o = Object.entries($).filter(([n, r]) => n !== e && [
@@ -963,13 +1040,13 @@ var ye = /* @__PURE__ */ new Set([
 		].includes(t)).map(([e]) => e);
 		return o.length > 0 ? `voltro data ${e}: ${t} is not a \`${e}\` flag (it belongs to \`voltro data ${o.join("` / `")}\`). Remove it.` : `voltro data ${e}: unknown flag ${t}. Run \`voltro data --help\` for the flags this command reads.`;
 	}
-}, ut = async (e) => {
+}, pt = async (e) => {
 	let [t, ...n] = e;
 	if (t !== void 0 && $[t] !== void 0) {
-		let e = lt(t, n);
+		let e = ft(t, n);
 		if (e) return I.error(e), 2;
 	}
-	return t === "export" ? Ke(n) : t === "import" ? $e(n) : t === "unpack" ? st(n) : t === "inspect" ? it(n) : t === "backup" ? tt(n) : t === "restore" ? rt(n) : t === "clear-replace-marker" ? at(n) : t === "clear-staging" ? ot(n) : (I.error("usage: voltro data <export|import|unpack|inspect|backup|restore|clear-replace-marker|clear-staging> … (logical: export/import; native: backup/restore)"), t ? 2 : 1);
+	return t === "export" ? qe(n) : t === "import" ? tt(n) : t === "unpack" ? ut(n) : t === "inspect" ? ot(n) : t === "backup" ? rt(n) : t === "restore" ? at(n) : t === "clear-replace-marker" ? st(n) : t === "clear-staging" ? ct(n) : t === "imports" ? lt(n) : (I.error("usage: voltro data <export|import|imports|unpack|inspect|backup|restore|clear-replace-marker|clear-staging> … (logical: export/import; native: backup/restore; `imports` reads the history, incl. a run in flight)"), t ? 2 : 1);
 };
 //#endregion
-export { ut as runDataCommand };
+export { pt as runDataCommand };