@voltro/data-transfer 0.22.1 → 0.23.0

package/dist/index.js

@@ -5,13 +5,13 @@ import { createCipheriv as h, createDecipheriv as g, createHash as _, createHmac
 import { STORAGE_REFS_TABLE as x, fromNodeReadable as S, getObjectStream as C, putObjectStream as ee, toNodeReadable as te } from "@voltro/plugin-storage";
 import * as w from "node:zlib";
 import { PassThrough as T, Readable as ne } from "node:stream";
-import { copyFile as re, createReadStream as E, createWriteStream as ie } from "node:fs";
-import { mkdir as ae, readdir as oe, stat as se } from "node:fs/promises";
-import { dirname as ce, join as D, resolve as le, sep as ue } from "node:path";
-import { promisify as de } from "node:util";
-import { spawn as fe } from "node:child_process";
+import { copyFile as re, createReadStream as E, createWriteStream as ie, existsSync as ae } from "node:fs";
+import { mkdir as oe, readdir as se, stat as ce } from "node:fs/promises";
+import { delimiter as le, dirname as ue, join as D, resolve as de, sep as fe } from "node:path";
+import { promisify as pe } from "node:util";
+import { spawn as me } from "node:child_process";
 //#region src/consistency.ts
-var pe = (e) => {
+var he = (e) => {
 	switch (e) {
 		case "postgres": return ["SET TRANSACTION ISOLATION LEVEL REPEATABLE READ"];
 		case "mysql":
@@ -21,7 +21,7 @@ var pe = (e) => {
 		case "turso": return [];
 		default: return [];
 	}
-}, me = {
+}, ge = {
 	email: { fake: "email" },
 	fullName: { fake: "fullName" },
 	firstName: { fake: "firstName" },
@@ -48,12 +48,12 @@ var pe = (e) => {
 		t[n.name] = e;
 	}
 	return t;
-}, he = (e, t, n, r) => {
+}, _e = (e, t, n, r) => {
 	let i = r.columns?.[`${e}.${t}`];
 	if (i) return i;
 	if (n?.sensitive) {
 		let e = n.sensitive.class;
-		return r.classes?.[e] ?? me[e] ?? "redact";
+		return r.classes?.[e] ?? ge[e] ?? "redact";
 	}
 	return n?.safe ? r.onSafe ?? "keep" : n?.columnType === "id" || n?.columnType === "reference" ? "keep" : r.onUnclassified ?? "error";
 }, k = (e, t) => v("sha256", e).update(t == null ? "∅" : String(t)).digest(), A = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), j = [
@@ -69,7 +69,7 @@ var pe = (e) => {
 	"Guido",
 	"Margaret",
 	"Bjarne"
-], ge = [
+], ve = [
 	"Lovelace",
 	"Turing",
 	"Hopper",
@@ -82,7 +82,7 @@ var pe = (e) => {
 	"Rossum",
 	"Hamilton",
 	"Stroustrup"
-], _e = [
+], ye = [
 	"Maple",
 	"Oak",
 	"Cedar",
@@ -91,7 +91,7 @@ var pe = (e) => {
 	"Birch",
 	"Willow",
 	"Ash"
-], ve = [
+], be = [
 	"Initech",
 	"Hooli",
 	"Umbrella",
@@ -100,23 +100,23 @@ var pe = (e) => {
 	"Soylent",
 	"Stark",
 	"Wayne"
-], M = (e, t, n) => e[A(t, n) % e.length], ye = (e, t, n) => {
+], M = (e, t, n) => e[A(t, n) % e.length], xe = (e, t, n) => {
 	let r = k(n, `${e}:${String(t)}`), i = A(r, 1) % 1e4;
 	switch (e) {
-		case "email": return `${M(j, r, 0).toLowerCase()}.${M(ge, r, 2).toLowerCase()}${i}@example.com`;
-		case "fullName": return `${M(j, r, 0)} ${M(ge, r, 1)}`;
+		case "email": return `${M(j, r, 0).toLowerCase()}.${M(ve, r, 2).toLowerCase()}${i}@example.com`;
+		case "fullName": return `${M(j, r, 0)} ${M(ve, r, 1)}`;
 		case "firstName": return M(j, r, 0);
-		case "lastName": return M(ge, r, 1);
+		case "lastName": return M(ve, r, 1);
 		case "username": return `${M(j, r, 0).toLowerCase()}${i}`;
 		case "phone": return `+1${String(A(r, 0) % 1e10).padStart(10, "0")}`;
-		case "address": return `${A(r, 0) % 9899 + 100} ${M(_e, r, 1)} St`;
-		case "company": return M(ve, r, 0);
+		case "address": return `${A(r, 0) % 9899 + 100} ${M(ye, r, 1)} St`;
+		case "company": return M(be, r, 0);
 		case "url": return `https://example.com/${r.toString("hex").slice(0, 12)}`;
 		case "ip": return `${A(r, 0) % 256}.${A(r, 1) % 256}.${A(r, 2) % 256}.${A(r, 3) % 254 + 1}`;
-		case "creditCard": return be(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
+		case "creditCard": return Se(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
 		default: return `${e}_${r.toString("hex").slice(0, 8)}`;
 	}
-}, be = (e) => {
+}, Se = (e) => {
 	let t = e.slice(0, 15).split("").map(Number), n = 0;
 	t.forEach((e, t) => {
 		let r = e;
@@ -124,26 +124,26 @@ var pe = (e) => {
 	});
 	let r = (10 - n % 10) % 10;
 	return e.slice(0, 15) + String(r);
-}, xe = 864e5, Se = (e, t) => {
+}, Ce = 864e5, we = (e, t) => {
 	let n = e instanceof Date ? e.getTime() : Date.parse(String(e));
 	if (Number.isNaN(n)) return e;
-	let r = A(k(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * xe);
+	let r = A(k(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Ce);
 	return e instanceof Date ? i : i.toISOString();
-}, Ce = (e, t) => {
+}, Te = (e, t) => {
 	if (t.value === null || t.value === void 0) return null;
 	if (e === "error") throw Error(`masking: unresolved 'error' action for ${t.table}.${t.column}`);
-	return e === "keep" ? t.value : e === "null" ? null : e === "redact" ? t.columnType === "text" || typeof t.value == "string" ? "[redacted]" : null : e === "hash" ? k(t.seed, t.value).toString("hex").slice(0, 16) : e === "dateShift" ? Se(t.value, t.seed) : typeof e == "object" && "fake" in e ? ye(e.fake, t.value, t.seed) : typeof e == "object" && "custom" in e ? e.custom(t) : t.value;
+	return e === "keep" ? t.value : e === "null" ? null : e === "redact" ? t.columnType === "text" || typeof t.value == "string" ? "[redacted]" : null : e === "hash" ? k(t.seed, t.value).toString("hex").slice(0, 16) : e === "dateShift" ? we(t.value, t.seed) : typeof e == "object" && "fake" in e ? xe(e.fake, t.value, t.seed) : typeof e == "object" && "custom" in e ? e.custom(t) : t.value;
 }, N = (e, t, n) => {
 	let r = {}, i = [];
 	for (let a of e) for (let e of a.columns) {
-		let o = `${a.name}.${e.name}`, s = he(a.name, e.name, t[a.name]?.[e.name], n);
+		let o = `${a.name}.${e.name}`, s = _e(a.name, e.name, t[a.name]?.[e.name], n);
 		s === "error" ? i.push(o) : r[o] = s;
 	}
 	return {
 		actions: r,
 		unclassified: i
 	};
-}, we = [
+}, Ee = [
 	{
 		name: "email",
 		re: /[\w.+-]+@[\w-]+\.[\w.-]+/
@@ -160,7 +160,7 @@ var pe = (e) => {
 		name: "creditCard",
 		re: /\b(?:\d[ -]?){13,16}\b/
 	}
-], Te = (e, t, n) => {
+], De = (e, t, n) => {
 	let r = [], i = /* @__PURE__ */ new Set();
 	for (let [a, o] of Object.entries(n)) {
 		if (!a.startsWith(`${t}.`) || o !== "keep") continue;
@@ -168,7 +168,7 @@ var pe = (e) => {
 		for (let a of e) {
 			let e = a[n];
 			if (typeof e != "string" || e.length === 0) continue;
-			let o = we.find((t) => t.re.test(e));
+			let o = Ee.find((t) => t.re.test(e));
 			if (o && !i.has(n)) {
 				i.add(n), r.push({
 					table: t,
@@ -183,7 +183,7 @@ var pe = (e) => {
 	return r;
 }, P = (e, t, n, r, i) => {
 	let a = {};
-	for (let [o, s] of Object.entries(e)) a[o] = Ce(n[`${t}.${o}`] ?? "keep", {
+	for (let [o, s] of Object.entries(e)) a[o] = Te(n[`${t}.${o}`] ?? "keep", {
 		value: s,
 		table: t,
 		column: o,
@@ -194,35 +194,40 @@ var pe = (e) => {
 }, F = class extends s.TaggedError()("BundleError", {
 	reason: s.String,
 	path: s.optional(s.String)
-}) {}, Ee = class extends s.TaggedError()("CodecError", {
+}) {}, Oe = class extends s.TaggedError()("CodecError", {
 	table: s.String,
 	reason: s.String
 }) {}, I = class extends s.TaggedError()("IntegrityError", {
 	what: s.String,
 	expected: s.String,
 	actual: s.String
-}) {}, De = class extends t.TaggedError("CompressionError") {}, Oe = class extends s.TaggedError()("ScopeError", { reason: s.String }) {}, ke = class extends s.TaggedError()("DanglingReferenceError", {
+}) {}, ke = class extends t.TaggedError("CompressionError") {}, Ae = class extends s.TaggedError()("ScopeError", { reason: s.String }) {}, je = class extends s.TaggedError()("DanglingReferenceError", {
 	rows: s.Array(s.Struct({
 		table: s.String,
 		id: s.String,
 		reason: s.String
 	})),
 	totalCount: s.Number
-}) {}, Ae = class extends s.TaggedError()("SchemaDriftError", {
+}) {}, Me = class extends s.TaggedError()("SchemaDriftError", {
 	bundleFingerprint: s.String,
 	targetFingerprint: s.String,
 	diff: s.Array(s.String)
-}) {}, L = class extends t.TaggedError("NativeToolError") {}, je = class extends s.TaggedError()("MaskingError", { unclassified: s.Array(s.String) }) {}, Me = class extends s.TaggedError()("ImportModeError", {
+}) {}, L = class extends t.TaggedError("NativeToolError") {
+	get message() {
+		let e = this.stderr?.trim();
+		return `${this.tool}: ${this.reason}${e ? `\n${e}` : ""}`;
+	}
+}, Ne = class extends s.TaggedError()("MaskingError", { unclassified: s.Array(s.String) }) {}, Pe = class extends s.TaggedError()("ImportModeError", {
 	mode: s.String,
 	reason: s.String
-}) {}, Ne = class extends s.TaggedError()("CrossDialectError", {
+}) {}, Fe = class extends s.TaggedError()("CrossDialectError", {
 	sourceDialect: s.String,
 	targetDialect: s.String,
 	blocking: s.Array(s.String)
-}) {}, R = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", Pe = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
+}) {}, R = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", Ie = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
 	col: e.name,
 	refTable: e.references.table
-})), Fe = (e, t, r) => n.gen(function* () {
+})), Le = (e, t, r) => n.gen(function* () {
 	let i = r.maxDepth ?? 12, a = new Set(r.pinned ?? []), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), l = /* @__PURE__ */ new Map(), d = (e) => {
 		let t = s.get(e) ?? /* @__PURE__ */ new Set();
 		return s.set(e, t), t;
@@ -240,7 +245,7 @@ var pe = (e) => {
 			for (let t of n) m(t.refTable, e[t.col]);
 		};
 	}, g = (r, i) => {
-		let a = h(r, R(t, r), Pe(t, r));
+		let a = h(r, R(t, r), Ie(t, r));
 		return c.runForEach(p(e, {
 			table: r,
 			pk: R(t, r),
@@ -275,13 +280,13 @@ var pe = (e) => {
 		}
 	}
 	return o;
-}), Ie = (e, t) => ({
+}), Re = (e, t) => ({
 	tables: [...e.keys()],
 	predicateFor: (n) => {
 		let r = e.get(n);
 		return r ? u(R(t, n), [...r]) : void 0;
 	}
-}), z = "tenantId", Le = (e, t, r) => n.gen(function* () {
+}), z = "tenantId", ze = (e, t, r) => n.gen(function* () {
 	let i = t.tables.map((e) => e.name), a = new Map(t.tables.map((e) => [e.name, e]));
 	if (e.kind === "all") return {
 		tables: i,
@@ -295,10 +300,10 @@ var pe = (e) => {
 		};
 	}
 	let o = e.tenantId;
-	if (o === void 0 || o === "") return yield* n.fail(new Oe({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
+	if (o === void 0 || o === "") return yield* n.fail(new Ae({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
 	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === z) ?? !1);
-	if (s.length === 0) return yield* n.fail(new Oe({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${z}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
-	let c = yield* Fe(r.store, t, {
+	if (s.length === 0) return yield* n.fail(new Ae({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${z}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
+	let c = yield* Le(r.store, t, {
 		seeds: Object.fromEntries(s.map((e) => [e, l(z, o)])),
 		pinned: s,
 		children: { roots: s }
@@ -307,13 +312,13 @@ var pe = (e) => {
 		tables: [...s, ...d],
 		predicateFor: (e) => f.has(e) ? l(z, o) : c.has(e) ? u(R(t, e), [...c.get(e)]) : void 0
 	};
-}), Re = (e, t) => ({
+}), Be = (e, t) => ({
 	list: t,
 	open: (t) => C(e, t)
-}), ze = (e) => ({
+}), Ve = (e) => ({
 	write: (t, n, r) => ee(e, t, n, r),
 	has: (t) => e.head(t).pipe(n.map((e) => e !== null))
-}), Be = (e, t) => n.tryPromise({
+}), He = (e, t) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), r = await import("node:fs/promises"), { createHash: i, randomUUID: a } = await import("node:crypto"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = await import("node:path"), l = c.join(t, `.tmp-${a()}`), u = i("sha256"), d = 0, f = new s({ transform(e, t, n) {
 			u.update(e), d += e.length, n(null, e);
@@ -335,7 +340,7 @@ var pe = (e) => {
 		reason: `asset write failed: ${String(e?.message ?? e)}`,
 		path: t
 	})
-}), Ve = (e, t, r) => n.gen(function* () {
+}), Ue = (e, t, r) => n.gen(function* () {
 	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), l = o("sha256"), u = S("bundle", () => a(s)).pipe(c.tap((e) => n.sync(() => l.update(e))));
 	yield* e.write(r.key, u, {
 		contentType: r.contentType,
@@ -347,7 +352,7 @@ var pe = (e) => {
 		expected: r.sha256,
 		actual: d
 	}));
-}), He = () => typeof w.createZstdCompress == "function", Ue = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : He() ? "zstd" : "gzip", We = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", Ge = (e) => e === "zstd" ? w.createZstdCompress() : e === "gzip" ? w.createGzip() : new T(), Ke = (e) => e === "zstd" ? w.createZstdDecompress() : e === "gzip" ? w.createGunzip() : new T(), qe = 1, Je = s.Struct({
+}), We = () => typeof w.createZstdCompress == "function", Ge = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : We() ? "zstd" : "gzip", Ke = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", qe = (e) => e === "zstd" ? w.createZstdCompress() : e === "gzip" ? w.createGzip() : new T(), Je = (e) => e === "zstd" ? w.createZstdDecompress() : e === "gzip" ? w.createGunzip() : new T(), Ye = 1, Xe = s.Struct({
 	name: s.String,
 	file: s.String,
 	rowCount: s.Number,
@@ -357,11 +362,11 @@ var pe = (e) => {
 		value: s.String
 	}),
 	primaryKey: s.String
-}), Ye = s.Struct({
+}), Ze = s.Struct({
 	kind: s.Literal("all", "tenant", "tables"),
 	tenantId: s.optional(s.String),
 	tables: s.optional(s.Array(s.String))
-}), Xe = s.Struct({
+}), Qe = s.Struct({
 	count: s.Number,
 	totalBytes: s.Number,
 	index: s.optional(s.String)
@@ -372,23 +377,23 @@ s.Struct({
 	size: s.Number,
 	contentType: s.String
 });
-var Ze = s.Struct({
+var $e = s.Struct({
 	formatVersion: s.Number,
 	createdAt: s.String,
 	source: s.Struct({
 		dialect: s.String,
 		schemaFingerprint: s.String
 	}),
-	scope: Ye,
+	scope: Ze,
 	consistency: s.Literal("live", "snapshot"),
 	compression: s.Literal("zstd", "gzip", "none"),
-	tables: s.Array(Je),
-	assets: Xe,
+	tables: s.Array(Xe),
+	assets: Qe,
 	masking: s.optional(s.Struct({
 		policyId: s.optional(s.String),
 		transformed: s.Array(s.String)
 	}))
-}), Qe = s.encodeSync(s.parseJson(Ze)), $e = s.decodeUnknownSync(s.parseJson(Ze)), B = "manifest.json", et = "README.md", V = "data", H = "assets", U = "assets/index.ndjson", tt = ".ledger.json", nt = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", rt = (e, t) => {
+}), et = s.encodeSync(s.parseJson($e)), tt = s.decodeUnknownSync(s.parseJson($e)), B = "manifest.json", nt = "README.md", V = "data", H = "assets", U = "assets/index.ndjson", rt = ".ledger.json", it = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", at = (e, t) => {
 	let n = e.tables.reduce((e, t) => e + t.rowCount, 0), r = e.masking ? `✅ **Masked at the source** — ${e.masking.transformed.length} column(s) transformed${e.masking.policyId ? ` (policy \`${e.masking.policyId}\`)` : ""}. Personal data was replaced with realistic, referentially-consistent fakes before any byte was written.` : "⚠️ **NOT masked — this bundle contains REAL data (PII included).** Treat it as production data: do not copy it into a lower environment or share it without review. To produce a safe copy, re-export under a masking profile (`--profile`).", i = e.masking && e.masking.transformed.length > 0 ? `\n\nMasked columns: ${e.masking.transformed.map((e) => `\`${e}\``).join(", ")}.` : "", a = e.assets.count > 0 ? `${e.assets.count} object(s), ${e.assets.totalBytes} bytes` : "none", o = e.tables.map((e) => `| \`${e.name}\` | ${e.rowCount} |`).join("\n");
 	return `# Voltro data export
 
@@ -402,7 +407,7 @@ The machine-readable manifest is \`manifest.json\`; this file is a human summary
 | **Format version** | ${e.formatVersion} |
 | **Consistency** | ${e.consistency} |
 | **Compression** | ${e.compression} |
-| **Scope** | ${nt(e.scope)} |
+| **Scope** | ${it(e.scope)} |
 | **Tables** | ${e.tables.length} |
 | **Rows (total)** | ${n} |
 | **Assets** | ${a} |
@@ -427,26 +432,26 @@ voltro data import <this-directory>
 voltro data import <this-directory> --target api --api-url <url> --token <secret>
 \`\`\`
 `;
-}, it = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), at = a.exponential({
+}, ot = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), st = a.exponential({
 	start: .01,
 	factor: 2,
 	count: 16
-}), ot = i.histogram("voltro_data_transfer_table_seconds", at, "Per-table export/import duration in seconds, tagged by phase."), W = (e, t) => {
+}), ct = i.histogram("voltro_data_transfer_table_seconds", st, "Per-table export/import duration in seconds, tagged by phase."), W = (e, t) => {
 	if (e) try {
 		e(t);
 	} catch {}
-}, st = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(ot.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), it.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
+}, lt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(ct.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), ot.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
 	table: t,
 	index: r,
 	tableCount: a,
 	phase: e
-} })), ct = () => ({
+} })), ut = () => ({
 	tables: {},
 	assets: {}
 }), G = (e) => n.tryPromise(async () => {
 	let t = await (await import("node:fs/promises")).readFile(e, "utf8");
 	return JSON.parse(t);
-}).pipe(n.orElseSucceed(ct)), K = (e, t) => n.tryPromise({
+}).pipe(n.orElseSucceed(ut)), K = (e, t) => n.tryPromise({
 	try: async () => {
 		let n = await import("node:fs/promises"), { randomUUID: r } = await import("node:crypto"), i = `${e}.tmp-${r()}`;
 		await n.writeFile(i, JSON.stringify(t)), await n.rename(i, e);
@@ -455,11 +460,11 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		reason: `ledger write failed: ${String(t?.message ?? t)}`,
 		path: e
 	})
-}), lt = (e, t) => t in e.tables, ut = (e, t) => t in e.assets, dt = /* @__PURE__ */ new Set([
+}), dt = (e, t) => t in e.tables, ft = (e, t) => t in e.assets, pt = /* @__PURE__ */ new Set([
 	"json",
 	"array",
 	"vector"
-]), ft = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", pt = (e) => Buffer.from(e).toString("base64"), mt = (e) => new Uint8Array(Buffer.from(e, "base64")), ht = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), gt = (e, t) => e == null ? null : t !== void 0 && dt.has(t) ? e : t === "bytes" ? pt(e) : t === "timestamp" || t === "date" ? ht(e) : typeof e == "bigint" ? {
+]), mt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", ht = (e) => Buffer.from(e).toString("base64"), gt = (e) => new Uint8Array(Buffer.from(e, "base64")), _t = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), vt = (e, t) => e == null ? null : t !== void 0 && pt.has(t) ? e : t === "bytes" ? ht(e) : t === "timestamp" || t === "date" ? _t(e) : typeof e == "bigint" ? {
 	$v: "bigint",
 	d: e.toString()
 } : typeof e == "number" && !Number.isFinite(e) ? {
@@ -470,26 +475,26 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	d: e.toISOString()
 } : e instanceof Uint8Array ? {
 	$v: "bytes",
-	d: pt(e)
-} : e, _t = (e) => {
+	d: ht(e)
+} : e, yt = (e) => {
 	switch (e.$v) {
 		case "bigint": return BigInt(e.d);
 		case "number": return Number(e.d);
 		case "date": return new Date(e.d);
-		case "bytes": return mt(e.d);
+		case "bytes": return gt(e.d);
 		default: return e;
 	}
-}, vt = (e, t) => e == null ? null : t !== void 0 && dt.has(t) ? e : ft(e) ? _t(e) : t === "bytes" ? mt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, yt = (e, t) => {
+}, bt = (e, t) => e == null ? null : t !== void 0 && pt.has(t) ? e : mt(e) ? yt(e) : t === "bytes" ? gt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, xt = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = gt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = vt(i, t[r]);
 	return n;
-}, bt = (e, t) => {
+}, St = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = vt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = bt(i, t[r]);
 	return n;
-}, xt = new TextEncoder(), St = (e, t) => e.pipe(c.map((e) => xt.encode(`${JSON.stringify(yt(e, t))}\n`))), Ct = (e, t, r) => e.pipe(c.decodeText(), c.splitLines, c.filter((e) => e.trim().length > 0), c.mapEffect((e) => n.try({
-	try: () => bt(JSON.parse(e), r),
-	catch: (e) => new Ee({
+}, Ct = new TextEncoder(), wt = (e, t) => e.pipe(c.map((e) => Ct.encode(`${JSON.stringify(xt(e, t))}\n`))), Tt = (e, t, r) => e.pipe(c.decodeText(), c.splitLines, c.filter((e) => e.trim().length > 0), c.mapEffect((e) => n.try({
+	try: () => St(JSON.parse(e), r),
+	catch: (e) => new Oe({
 		table: t,
 		reason: String(e?.message ?? e)
 	})
@@ -513,11 +518,11 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	};
 	for (let t of e) n.has(t) && s(t);
 	return i;
-}, wt = (e, t) => {
+}, Et = (e, t) => {
 	let n = e.tables.find((e) => e.name === t), r = {};
 	for (let e of n?.columns ?? []) r[e.name] = e.type;
 	return r;
-}, Tt = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", Et = (e, t, r) => n.tryPromise({
+}, Dt = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", Ot = (e, t, r) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), i = await import("node:fs/promises"), { createHash: a, randomUUID: o } = await import("node:crypto"), { pipeline: s } = await import("node:stream/promises"), { Readable: l, Transform: u } = await import("node:stream"), d = a("sha256"), f = 0, p = new u({ transform(e, t, n) {
 			d.update(e);
@@ -526,7 +531,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			n(null, e);
 		} }), m = l.fromWeb(c.toReadableStream(e)), h = `${t}.tmp-${o()}`;
 		try {
-			await s(m, p, Ge(r), n(h)), await i.rename(h, t);
+			await s(m, p, qe(r), n(h)), await i.rename(h, t);
 		} catch (e) {
 			throw await i.rm(h, { force: !0 }).catch(() => {}), e;
 		}
@@ -539,7 +544,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		reason: `write table failed: ${String(e?.message ?? e)}`,
 		path: t
 	})
-}), Dt = (e, t) => n.tryPromise({
+}), kt = (e, t) => n.tryPromise({
 	try: async () => {
 		await (await import("node:fs/promises")).appendFile(e, `${t}\n`);
 	},
@@ -547,11 +552,11 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		reason: `append failed: ${String(t?.message ?? t)}`,
 		path: e
 	})
-}), Ot = (e, t) => n.gen(function* () {
+}), At = (e, t) => n.gen(function* () {
 	let n = [], r = t.ordered.length;
 	for (let i = 0; i < t.ordered.length; i++) {
-		let a = t.ordered[i], o = wt(t.snapshot, a), s = Tt(t.snapshot, a), l = `${V}/${a}.ndjson${We(t.compression)}`;
-		if (lt(t.ledger, a)) {
+		let a = t.ordered[i], o = Et(t.snapshot, a), s = Dt(t.snapshot, a), l = `${V}/${a}.ndjson${Ke(t.compression)}`;
+		if (dt(t.ledger, a)) {
 			let e = t.ledger.tables[a];
 			W(t.onProgress, {
 				phase: "export",
@@ -585,7 +590,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			chunkSize: t.chunkSize,
 			retry: t.retry,
 			...u === void 0 ? {} : { where: u }
-		}), f = t.mask ? d.pipe(c.map((e) => P(e, a, t.mask.actions, t.mask.seed, o))) : d, { rowCount: m, checksum: h } = yield* st("export", a, i, r, (e) => e.rowCount, Et(St(f, o), t.bundleFile(l), t.compression));
+		}), f = t.mask ? d.pipe(c.map((e) => P(e, a, t.mask.actions, t.mask.seed, o))) : d, { rowCount: m, checksum: h } = yield* lt("export", a, i, r, (e) => e.rowCount, Ot(wt(f, o), t.bundleFile(l), t.compression));
 		t.ledger.tables[a] = {
 			rowCount: m,
 			checksum: h
@@ -607,20 +612,20 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return n;
-}), kt = (e) => ({
+}), jt = (e) => ({
 	_tag: "RawSqlFragment",
 	strings: [e],
 	values: []
-}), At = (t, i, a) => n.tryPromise({
+}), Mt = (t, i, a) => n.tryPromise({
 	try: () => t.transactional(async (t) => {
-		if (t.raw) for (let e of pe(i)) await t.raw(kt(e));
+		if (t.raw) for (let e of he(i)) await t.raw(jt(e));
 		let o = await n.runPromiseExit(a(t));
 		if (r.isFailure(o)) throw Error(e.pretty(o.cause));
 		return o.value;
 	}),
 	catch: (e) => e instanceof F ? e : new F({ reason: `snapshot export failed: ${String(e?.message ?? e)}` })
-}), jt = (e) => n.gen(function* () {
-	let t = e.scope ?? { kind: "all" }, r = Ue(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, s = o.exponential("50 millis").pipe(o.jittered, o.intersect(o.recurs(a))), l = yield* n.promise(() => import("node:path")), u = (t) => l.join(e.outDir, t);
+}), Nt = (e) => n.gen(function* () {
+	let t = e.scope ?? { kind: "all" }, r = Ge(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, s = o.exponential("50 millis").pipe(o.jittered, o.intersect(o.recurs(a))), l = yield* n.promise(() => import("node:path")), u = (t) => l.join(e.outDir, t);
 	yield* n.tryPromise({
 		try: async () => {
 			let t = await import("node:fs/promises");
@@ -631,7 +636,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			path: e.outDir
 		})
 	});
-	let d = u(tt), f = yield* G(d), p = e.subset ? Ie(yield* Fe(e.store, e.snapshot, e.subset), e.snapshot) : yield* Le(t, e.snapshot, {
+	let d = u(rt), f = yield* G(d), p = e.subset ? Re(yield* Le(e.store, e.snapshot, e.subset), e.snapshot) : yield* ze(t, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
 	}), h = q(p.tables, e.snapshot), g = e.consistency ?? "live", _, v;
@@ -643,7 +648,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				type: e.type
 			}))
 		})), t, e.masking);
-		if (r.unclassified.length > 0) return yield* n.fail(new je({ unclassified: r.unclassified }));
+		if (r.unclassified.length > 0) return yield* n.fail(new Ne({ unclassified: r.unclassified }));
 		v = {
 			actions: r.actions,
 			seed: e.masking.seed
@@ -666,17 +671,17 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		bundleFile: u,
 		...v ? { mask: v } : {},
 		...e.onProgress ? { onProgress: e.onProgress } : {}
-	}, b = g === "snapshot" ? yield* At(e.store, e.dialect, (e) => Ot(e, y)) : yield* Ot(e.store, y), x = 0, S = 0;
+	}, b = g === "snapshot" ? yield* Mt(e.store, e.dialect, (e) => At(e, y)) : yield* At(e.store, y), x = 0, S = 0;
 	if (e.assets) {
 		let t = u(U);
-		yield* c.runForEach(e.assets.list(), (r) => r.key in f.assets ? n.void : e.assets.open(r.key).pipe(n.flatMap((e) => Be(e, u(H))), n.flatMap((e) => {
+		yield* c.runForEach(e.assets.list(), (r) => r.key in f.assets ? n.void : e.assets.open(r.key).pipe(n.flatMap((e) => He(e, u(H))), n.flatMap((e) => {
 			let i = {
 				key: r.key,
 				sha256: e.sha256,
 				size: e.size,
 				contentType: e.contentType
 			};
-			return x++, S += e.size, f.assets[r.key] = !0, Dt(t, JSON.stringify(i)).pipe(n.andThen(K(d, f)));
+			return x++, S += e.size, f.assets[r.key] = !0, kt(t, JSON.stringify(i)).pipe(n.andThen(K(d, f)));
 		}))).pipe(n.mapError((e) => e instanceof F ? e : new F({ reason: `asset export failed: ${String(e)}` })));
 	}
 	let C = {
@@ -702,7 +707,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	};
 	return yield* n.tryPromise({
 		try: async () => {
-			await (await import("node:fs/promises")).writeFile(u(B), Qe(C));
+			await (await import("node:fs/promises")).writeFile(u(B), et(C));
 		},
 		catch: (e) => new F({
 			reason: `manifest write failed: ${String(e?.message ?? e)}`,
@@ -711,14 +716,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	}), yield* n.tryPromise({
 		try: async () => {
 			let e = await import("node:fs/promises"), t = await import("node:os");
-			await e.writeFile(u(et), rt(C, { hostname: t.hostname() }));
+			await e.writeFile(u(nt), at(C, { hostname: t.hostname() }));
 		},
 		catch: (e) => new F({
 			reason: `readme write failed: ${String(e?.message ?? e)}`,
-			path: et
+			path: nt
 		})
 	}), C;
-}), Mt = (e) => {
+}), Pt = (e) => {
 	switch (e) {
 		case "id":
 		case "text":
@@ -737,12 +742,12 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "raw": return "raw";
 		default: return "string";
 	}
-}, Nt = {
+}, Ft = {
 	vector: /* @__PURE__ */ new Set(["postgres"]),
 	array: /* @__PURE__ */ new Set(["postgres"]),
 	interval: /* @__PURE__ */ new Set(["postgres"])
-}, Pt = (e, t, n, r) => {
-	let i = Mt(n);
+}, It = (e, t, n, r) => {
+	let i = Pt(n);
 	if (i === "raw") return {
 		table: e,
 		column: t,
@@ -750,7 +755,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `raw() is verbatim source-dialect SQL — it cannot be assumed valid on ${r}`
 	};
-	let a = Nt[i];
+	let a = Ft[i];
 	return !a || a.has(r) ? null : i === "array" || i === "interval" ? {
 		table: e,
 		column: t,
@@ -764,20 +769,20 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `${i} columns require a ${[...a].join("/")} target; ${r} has no compatible column type`
 	};
-}, Ft = (e, t, n) => {
+}, Lt = (e, t, n) => {
 	if (t === n) return [];
 	let r = [];
 	for (let t of e) for (let [e, i] of Object.entries(t.columnTypes)) {
-		let a = Pt(t.name, e, i, n);
+		let a = It(t.name, e, i, n);
 		a && r.push(a);
 	}
 	return r;
-}, It = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, Lt = (e, t) => new Map((e.tables.find((e) => e.name === t)?.columns ?? []).map((e) => [e.name, e.type])), Rt = (e, t) => {
+}, Rt = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, zt = (e, t) => new Map((e.tables.find((e) => e.name === t)?.columns ?? []).map((e) => [e.name, e.type])), Bt = (e, t) => {
 	let n = [], r = new Set(e.tables.map((e) => e.name)), i = new Set(t.tables.map((e) => e.name));
 	for (let e of [...r].filter((e) => !i.has(e)).sort()) n.push(`table '${e}' is in the bundle but MISSING from the target`);
 	for (let e of [...i].filter((e) => !r.has(e)).sort()) n.push(`table '${e}' is in the target but NOT in the bundle (import leaves it untouched)`);
 	for (let a of [...r].filter((e) => i.has(e)).sort()) {
-		let r = Lt(e, a), i = Lt(t, a);
+		let r = zt(e, a), i = zt(t, a);
 		for (let [e] of r) i.has(e) || n.push(`${a}.${e}: in the bundle, MISSING from the target`);
 		for (let [e] of i) r.has(e) || n.push(`${a}.${e}: in the target, not in the bundle`);
 		for (let [e, t] of r) {
@@ -786,7 +791,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	}
 	return n.length > 30 ? [...n.slice(0, 30), `… and ${n.length - 30} more difference(s)`] : n.length > 0 ? n : ["the schema shape differs (indexes, nullability, or defaults) — the specific change is below the table/column granularity shown here"];
-}, zt = (e, t, n) => {
+}, Vt = (e, t, n) => {
 	let r = m(t);
 	return r === e ? {
 		drifted: !1,
@@ -797,19 +802,19 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		drifted: !0,
 		bundleFingerprint: e,
 		targetFingerprint: r,
-		diff: n ? Rt(n, t) : ["the target schema fingerprint does not match the bundle (no source schema available to itemise the diff — the manifest records only the fingerprint)"]
+		diff: n ? Bt(n, t) : ["the target schema fingerprint does not match the bundle (no source schema available to itemise the diff — the manifest records only the fingerprint)"]
 	};
-}, Bt = (e) => n.tryPromise({
+}, Ht = (e) => n.tryPromise({
 	try: async () => {
 		let t = await import("node:fs/promises"), n = await import("node:path");
-		return $e(await t.readFile(n.join(e, B), "utf8"));
+		return tt(await t.readFile(n.join(e, B), "utf8"));
 	},
 	catch: (e) => new F({
 		reason: `manifest read/parse failed: ${String(e?.message ?? e)}`,
 		path: B
 	})
-}), Vt = (t) => n.gen(function* () {
-	let i = yield* n.promise(() => import("node:path")), a = yield* Bt(t.bundleDir);
+}), Ut = (t) => n.gen(function* () {
+	let i = yield* n.promise(() => import("node:path")), a = yield* Ht(t.bundleDir);
 	if (a.formatVersion !== 1) return yield* n.fail(new F({ reason: `unsupported bundle formatVersion ${a.formatVersion} (expected 1)` }));
 	if (t.targetSnapshot) {
 		let e = { tables: a.tables.map((e) => ({
@@ -822,9 +827,9 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				unique: !1,
 				hasDefault: !1
 			}))
-		})) }, r = zt(a.source.schemaFingerprint, t.targetSnapshot, e);
+		})) }, r = Vt(a.source.schemaFingerprint, t.targetSnapshot, e);
 		if (r.drifted) {
-			if (!t.force) return yield* n.fail(new Ae({
+			if (!t.force) return yield* n.fail(new Me({
 				bundleFingerprint: r.bundleFingerprint,
 				targetFingerprint: r.targetFingerprint,
 				diff: r.diff
@@ -833,15 +838,15 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	}
 	if (t.targetDialect && t.targetDialect !== a.source.dialect) {
-		let e = Ft(a.tables, a.source.dialect, t.targetDialect).filter((e) => e.severity === "block");
-		if (e.length > 0 && !t.allowIncompatible) return yield* n.fail(new Ne({
+		let e = Lt(a.tables, a.source.dialect, t.targetDialect).filter((e) => e.severity === "block");
+		if (e.length > 0 && !t.allowIncompatible) return yield* n.fail(new Fe({
 			sourceDialect: a.source.dialect,
 			targetDialect: t.targetDialect,
-			blocking: e.map(It)
+			blocking: e.map(Rt)
 		}));
 	}
 	let o = t.verify ?? !0, s = t.mode ?? "upsert", l = t.onConflict ?? "skip", u = t.ledgerPath ?? i.join(t.bundleDir, ".import..ledger.json"), f = yield* G(u);
-	if (s === "replace" && a.scope.kind !== "all") return yield* n.fail(new Me({
+	if (s === "replace" && a.scope.kind !== "all") return yield* n.fail(new Pe({
 		mode: s,
 		reason: `replace refuses a partial bundle (scope='${a.scope.kind}') — truncating would delete rows not in the bundle. Use --mode upsert, or re-export with full scope.`
 	}));
@@ -870,7 +875,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			r = t;
 		}
 		for (let t of i) (yield* m(() => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] }), t)) || (r = [...r, t]);
-		if (r.length > 0) return yield* n.fail(new ke({
+		if (r.length > 0) return yield* n.fail(new je({
 			rows: r.slice(0, 20).map((e) => ({
 				table: e.entry.name,
 				id: String(e.row[e.entry.primaryKey]),
@@ -912,8 +917,8 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				total: d.rowCount
 			});
 			let v = l.length, y = n.gen(function* () {
-				let { createHash: t } = yield* n.promise(() => import("node:crypto")), r = t("sha256"), i = 0, o = S("bundle", () => E(g).pipe(Ke(a.compression))).pipe(c.tap((e) => n.sync(() => r.update(e))));
-				return yield* c.runForEach(Ct(o, d.name, d.columnTypes), (t) => {
+				let { createHash: t } = yield* n.promise(() => import("node:crypto")), r = t("sha256"), i = 0, o = S("bundle", () => E(g).pipe(Je(a.compression))).pipe(c.tap((e) => n.sync(() => r.update(e))));
+				return yield* c.runForEach(Tt(o, d.name, d.columnTypes), (t) => {
 					i++;
 					let r = {
 						entry: d,
@@ -927,7 +932,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					rowCount: i,
 					checksum: r.digest("hex")
 				};
-			}), { rowCount: b, checksum: x } = yield* st("import", d.name, s, _, (e) => e.rowCount, y);
+			}), { rowCount: b, checksum: x } = yield* lt("import", d.name, s, _, (e) => e.rowCount, y);
 			if (o) {
 				if (x !== d.checksum) return yield* n.fail(new I({
 					what: `table ${d.name} checksum`,
@@ -975,19 +980,19 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		catch: (e) => new F({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
 	}) : yield* _(t.store, !0), t.assets && a.assets.index && !t.assetsAlreadyRestored) {
 		let e = t.assets, r = i.join(t.bundleDir, H), o = i.join(t.bundleDir, a.assets.index ?? "assets/index.ndjson"), s = S("bundle", () => E(o)).pipe(c.decodeText(), c.splitLines, c.filter((e) => e.trim().length > 0), c.map((e) => JSON.parse(e)));
-		yield* c.runForEach(s, (t) => t.key in f.assets ? n.void : Ve(e, r, t).pipe(n.andThen(n.sync(() => {
+		yield* c.runForEach(s, (t) => t.key in f.assets ? n.void : Ue(e, r, t).pipe(n.andThen(n.sync(() => {
 			f.assets[t.key] = !0;
 		})), n.andThen(K(u, f))));
 	}
 	return a;
-}), Ht = (e) => e, Ut = (e) => e.allowLive || e.liveInstance === null ? { refuse: !1 } : {
+}), Wt = (e) => e, Gt = (e) => e.allowLive || e.liveInstance === null ? { refuse: !1 } : {
 	refuse: !0,
 	message: `refusing to write into a target with a LIVE instance (${e.liveInstance}). A direct import is an uncoordinated concurrent writer — readers see partial state, the reactive layer either storms or goes stale, and rows race with live writes. Re-run with --allow-live to override, or use a live-safe strategy (shadow-swap for replace, or the api target).`
-}, J = Buffer.from("VBUNDLE2"), Wt = 0, Gt = 1, Kt = 2, qt = 32, Jt = async (e) => {
+}, J = Buffer.from("VBUNDLE2"), Kt = 0, qt = 1, Jt = 2, Yt = 32, Xt = async (e) => {
 	let t = [], n = async (r) => {
 		let i;
 		try {
-			i = await oe(D(e, r), { withFileTypes: !0 });
+			i = await se(D(e, r), { withFileTypes: !0 });
 		} catch {
 			return;
 		}
@@ -997,21 +1002,21 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	};
 	return await n(""), t.sort();
-}, Yt = (e, t) => {
+}, Zt = (e, t) => {
 	let n = Buffer.from(e, "utf8"), r = Buffer.alloc(5 + n.length + 8);
-	return r.writeUInt8(Gt, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
-}, Xt = (e, t, n) => {
+	return r.writeUInt8(qt, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
+}, Qt = (e, t, n) => {
 	let r = Buffer.from(e, "utf8"), i = Buffer.from(t, "utf8"), a = Buffer.alloc(5 + r.length + 2 + i.length + 8), o = 0;
-	return a.writeUInt8(Kt, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
+	return a.writeUInt8(Jt, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
 };
-async function* Zt(e) {
+async function* $t(e) {
 	yield new Uint8Array(J);
-	for (let t of await Jt(e.dir)) {
-		let n = D(e.dir, t), r = await se(n);
-		if (yield new Uint8Array(Yt(t, r.size)), r.size > 0) for await (let e of E(n)) yield new Uint8Array(e);
+	for (let t of await Xt(e.dir)) {
+		let n = D(e.dir, t), r = await ce(n);
+		if (yield new Uint8Array(Zt(t, r.size)), r.size > 0) for await (let e of E(n)) yield new Uint8Array(e);
 	}
 	if (e.blobs) for await (let t of e.blobs.list()) {
-		yield new Uint8Array(Xt(t.key, t.contentType, t.size));
+		yield new Uint8Array(Qt(t.key, t.contentType, t.size));
 		let n = _("sha256"), r = 0;
 		for await (let i of e.blobs.open(t.key)) {
 			let e = Buffer.from(i);
@@ -1020,11 +1025,11 @@ async function* Zt(e) {
 		if (r !== t.size) throw Error(`blob '${t.key}' size mismatch: header ${t.size}, streamed ${r}`);
 		yield new Uint8Array(n.digest());
 	}
-	yield new Uint8Array(Buffer.from([Wt]));
+	yield new Uint8Array(Buffer.from([Kt]));
 }
-var Qt = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), $t = (e) => new Promise((t) => e.end(t)), en = async (e, t) => {
-	let n = le(t.dir);
-	await ae(n, { recursive: !0 });
+var en = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), tn = (e) => new Promise((t) => e.end(t)), nn = async (e, t) => {
+	let n = de(t.dir);
+	await oe(n, { recursive: !0 });
 	let r = Buffer.alloc(0), i = e[Symbol.asyncIterator](), a = !1, o = async () => {
 		let { value: e, done: t } = await i.next();
 		return t ? (a = !0, !1) : (r = r.length === 0 ? Buffer.from(e) : Buffer.concat([r, Buffer.from(e)]), !0);
@@ -1039,24 +1044,24 @@ var Qt = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), $t
 		for (;;) {
 			await s(1);
 			let e = c(1).readUInt8(0);
-			if (e === Wt) return;
-			if (e === Gt) {
+			if (e === Kt) return;
+			if (e === qt) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
 				let t = c(e).toString("utf8");
 				await s(8);
-				let i = c(8).readBigUInt64BE(0), a = le(n, t);
-				if (a !== n && !a.startsWith(n + ue)) throw Error(`archive path '${t}' escapes the destination`);
-				await ae(ce(a), { recursive: !0 });
+				let i = c(8).readBigUInt64BE(0), a = de(n, t);
+				if (a !== n && !a.startsWith(n + fe)) throw Error(`archive path '${t}' escapes the destination`);
+				await oe(ue(a), { recursive: !0 });
 				let o = ie(a);
 				for (; i > 0n;) {
 					r.length === 0 && await s(1);
 					let e = i < BigInt(r.length) ? Number(i) : r.length;
-					await Qt(o, c(e)), i -= BigInt(e);
+					await en(o, c(e)), i -= BigInt(e);
 				}
-				await $t(o);
-			} else if (e === Kt) {
+				await tn(o);
+			} else if (e === Jt) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
@@ -1073,17 +1078,17 @@ var Qt = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), $t
 				for (; p > 0n;) {
 					r.length === 0 && await s(1);
 					let e = p < BigInt(r.length) ? Number(p) : r.length, t = c(e);
-					u.update(t), l || await Qt(d, t), p -= BigInt(e);
+					u.update(t), l || await en(d, t), p -= BigInt(e);
 				}
-				l ? d.destroy() : await $t(d), await f, await s(qt);
-				let m = c(qt);
+				l ? d.destroy() : await tn(d), await f, await s(Yt);
+				let m = c(Yt);
 				if (!u.digest().equals(m)) throw Error(`blob '${n}' failed integrity (sha mismatch)`);
 			} else throw Error(`unknown bundle entry kind ${e}`);
 		}
 	} finally {
 		a || await Promise.resolve(i.return?.()).catch(() => void 0);
 	}
-}, tn = async (e, t) => {
+}, rn = async (e, t) => {
 	let n = new Set(t), r = /* @__PURE__ */ new Map(), i = Buffer.alloc(0), a = e[Symbol.asyncIterator](), o = async () => {
 		let { value: e, done: t } = await a.next();
 		return t ? !1 : (i = i.length === 0 ? Buffer.from(e) : Buffer.concat([i, Buffer.from(e)]), !0);
@@ -1105,8 +1110,8 @@ var Qt = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), $t
 	if (!await s(J.length) || !c(J.length).equals(J)) throw Error("not a bundle archive (bad magic)");
 	for (; await s(1);) {
 		let e = c(1).readUInt8(0);
-		if (e === Wt || e === Kt) break;
-		if (e !== Gt) throw Error(`unknown bundle entry kind ${e}`);
+		if (e === Kt || e === Jt) break;
+		if (e !== qt) throw Error(`unknown bundle entry kind ${e}`);
 		if (!await s(4)) break;
 		let t = c(4).readUInt32BE(0);
 		if (!await s(t)) break;
@@ -1116,16 +1121,16 @@ var Qt = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), $t
 		if (a === null || n.has(i) && (r.set(i, a), n.delete(i), n.size === 0)) break;
 	}
 	return r;
-}, nn = (e, t) => en(e, {
+}, an = (e, t) => nn(e, {
 	dir: t,
-	blobs: rn(t)
-}), rn = (e) => {
+	blobs: on(t)
+}), on = (e) => {
 	let t = /* @__PURE__ */ new Set();
 	return {
 		has: async (e) => t.has(e),
 		write: async (n, r, i) => {
 			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = D(e, "assets");
-			await ae(c, { recursive: !0 });
+			await oe(c, { recursive: !0 });
 			let l = _("sha256"), u = 0, d = new s({ transform(e, t, n) {
 				l.update(e), u += e.length, n(null, e);
 			} }), f = D(c, `.tmp-${Date.now()}-${t.size}`);
@@ -1139,23 +1144,23 @@ var Qt = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), $t
 			})}\n`), t.add(n);
 		}
 	};
-}, an = de(b), on = Buffer.from("VENC1\0\0\0"), sn = 32, cn = 16, ln = 7, Y = 16, X = 256 * 1024, Z = {
+}, sn = pe(b), cn = Buffer.from("VENC1\0\0\0"), ln = 32, un = 16, dn = 7, Y = 16, X = 256 * 1024, Z = {
 	N: 32768,
 	r: 8,
 	p: 1
-}, un = 128 * 1024 * 1024, Q = 43, dn = (e, t, n) => {
+}, fn = 128 * 1024 * 1024, Q = 43, pn = (e, t, n) => {
 	let r = Buffer.alloc(12);
-	return e.copy(r, 0, 0, ln), r.writeUInt32BE(t >>> 0, ln), r.writeUInt8(+!!n, 11), r;
+	return e.copy(r, 0, 0, dn), r.writeUInt32BE(t >>> 0, dn), r.writeUInt8(+!!n, 11), r;
 };
-async function* fn(e, t) {
+async function* mn(e, t) {
 	if (!t) throw Error("encryptStream: a non-empty passphrase is required");
-	let n = y(cn), r = y(ln), i = await an(t, n, sn, {
+	let n = y(un), r = y(dn), i = await sn(t, n, ln, {
 		...Z,
-		maxmem: un
+		maxmem: fn
 	}), a = Buffer.alloc(Q);
-	on.copy(a, 0), a.writeUInt32BE(Z.N, 8), a.writeUInt32BE(Z.r, 12), a.writeUInt32BE(Z.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
+	cn.copy(a, 0), a.writeUInt32BE(Z.N, 8), a.writeUInt32BE(Z.r, 12), a.writeUInt32BE(Z.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
 	let o = 0, s = (e, t) => {
-		let n = h("aes-256-gcm", i, dn(r, o, t));
+		let n = h("aes-256-gcm", i, pn(r, o, t));
 		o === 0 && n.setAAD(a);
 		let s = Buffer.concat([n.update(e), n.final()]), c = n.getAuthTag();
 		o++;
@@ -1165,7 +1170,7 @@ async function* fn(e, t) {
 	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > X;) yield s(c.subarray(0, X), !1), c = c.subarray(X);
 	yield s(c, !0);
 }
-async function* pn(e, t) {
+async function* hn(e, t) {
 	if (!t) throw Error("decryptStream: a non-empty passphrase is required");
 	let n = e[Symbol.asyncIterator](), r = Buffer.alloc(0), i = !1, a = async () => {
 		let { value: e, done: t } = await n.next();
@@ -1176,12 +1181,12 @@ async function* pn(e, t) {
 	};
 	if (!await o(Q)) throw Error("encrypted bundle truncated (no header)");
 	let s = r.subarray(0, Q);
-	if (!s.subarray(0, 8).equals(on)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
-	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Q)), p = await an(t, d, sn, {
+	if (!s.subarray(0, 8).equals(cn)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
+	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Q)), p = await sn(t, d, ln, {
 		N: c,
 		r: l,
 		p: u,
-		maxmem: un
+		maxmem: fn
 	});
 	r = r.subarray(Q);
 	let m = 0, h = !1;
@@ -1196,7 +1201,7 @@ async function* pn(e, t) {
 		if (!await o(5 + t)) throw Error("encrypted bundle truncated (frame body)");
 		let n = r.subarray(5, 5 + t - Y), i = r.subarray(5 + t - Y, 5 + t);
 		r = r.subarray(5 + t);
-		let a = g("aes-256-gcm", p, dn(f, m, e));
+		let a = g("aes-256-gcm", p, pn(f, m, e));
 		m === 0 && a.setAAD(s), a.setAuthTag(i);
 		let c = Buffer.concat([a.update(n), a.final()]);
 		m++, e && (h = !0), c.length > 0 && (yield new Uint8Array(c));
@@ -1204,7 +1209,7 @@ async function* pn(e, t) {
 }
 //#endregion
 //#region src/blobStorage.ts
-var mn = (e, t) => ({
+var gn = (e, t) => ({
 	list: () => {
 		let e = t();
 		return { async *[Symbol.asyncIterator]() {
@@ -1220,14 +1225,14 @@ var mn = (e, t) => ({
 		let r = await te((await n.runPromise(C(e, t))).stream);
 		for await (let e of r) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 	} })
-}), hn = (e, t) => mn(e, () => p(t, {
+}), _n = (e, t) => gn(e, () => p(t, {
 	table: x,
 	chunkSize: 500
 }).pipe(c.map((e) => ({
 	key: String(e.key),
 	contentType: String(e.contentType ?? "application/octet-stream"),
 	size: Number(e.size ?? 0)
-})))), gn = (e) => ({
+})))), vn = (e) => ({
 	has: (t) => n.runPromise(e.head(t).pipe(n.map((e) => e !== null))),
 	write: async (t, r, i) => {
 		let a = S("storage", () => ne.from(r));
@@ -1236,7 +1241,10 @@ var mn = (e, t) => ({
 			totalSize: i.size
 		}));
 	}
-}), _n = (e) => {
+}), yn = (e, t) => {
+	let n = t === "dump" ? "mariadb-dump" : "mariadb", r = t === "dump" ? "mysqldump" : "mysql";
+	return e === "mariadb" && bn(n) ? n : r;
+}, bn = (e) => (process.env.PATH ?? "").split(le).filter((e) => e !== "").some((t) => ae(D(t, e))), xn = (e) => {
 	switch (e) {
 		case "postgres": return "db.dump";
 		case "mysql":
@@ -1246,7 +1254,7 @@ var mn = (e, t) => ({
 		case "mssql": return "db.bacpac";
 		default: return "db.dump";
 	}
-}, vn = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
+}, Sn = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
 	if (e.host || e.database) return {
 		host: e.host ?? "localhost",
 		port: e.port ?? 3306,
@@ -1262,7 +1270,7 @@ var mn = (e, t) => ({
 		password: decodeURIComponent(t.password) || "",
 		database: t.pathname.replace(/^\//, "") || ""
 	};
-}, yn = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, bn = (e, t, n) => {
+}, Cn = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, wn = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -1306,31 +1314,31 @@ var mn = (e, t) => ({
 		}
 		case "mysql":
 		case "mariadb": {
-			let e = $(t);
+			let r = $(t);
 			return {
 				kind: "spawn",
-				tool: "mysqldump",
+				tool: yn(e, "dump"),
 				args: [
 					"--single-transaction",
 					"--routines",
 					"--triggers",
 					"--no-tablespaces",
 					"-h",
-					e.host,
+					r.host,
 					"-P",
-					String(e.port),
+					String(r.port),
 					"-u",
-					e.username,
-					e.database
+					r.username,
+					r.database
 				],
-				env: { MYSQL_PWD: e.password },
+				env: { MYSQL_PWD: r.password },
 				stdoutFile: n
 			};
 		}
 		case "sqlite":
 		case "turso": return {
 			kind: "copy",
-			from: vn(t),
+			from: Sn(t),
 			to: n
 		};
 		case "mssql": return {
@@ -1338,7 +1346,7 @@ var mn = (e, t) => ({
 			tool: "sqlpackage",
 			args: [
 				"/Action:Export",
-				`/SourceConnectionString:${yn($({
+				`/SourceConnectionString:${Cn($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -1351,7 +1359,7 @@ var mn = (e, t) => ({
 			reason: `no native backup for dialect '${e}'`
 		});
 	}
-}, xn = (e, t, n) => {
+}, Tn = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -1393,20 +1401,20 @@ var mn = (e, t) => ({
 		}
 		case "mysql":
 		case "mariadb": {
-			let e = $(t);
+			let r = $(t);
 			return {
 				kind: "spawn",
-				tool: "mysql",
+				tool: yn(e, "client"),
 				args: [
 					"-h",
-					e.host,
+					r.host,
 					"-P",
-					String(e.port),
+					String(r.port),
 					"-u",
-					e.username,
-					e.database
+					r.username,
+					r.database
 				],
-				env: { MYSQL_PWD: e.password },
+				env: { MYSQL_PWD: r.password },
 				stdinFile: n
 			};
 		}
@@ -1414,14 +1422,14 @@ var mn = (e, t) => ({
 		case "turso": return {
 			kind: "copy",
 			from: n,
-			to: vn(t)
+			to: Sn(t)
 		};
 		case "mssql": return {
 			kind: "spawn",
 			tool: "sqlpackage",
 			args: [
 				"/Action:Import",
-				`/TargetConnectionString:${yn($({
+				`/TargetConnectionString:${Cn($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -1434,13 +1442,13 @@ var mn = (e, t) => ({
 			reason: `no native restore for dialect '${e}'`
 		});
 	}
-}, Sn = (e) => e.kind === "copy" ? n.async((t) => {
+}, En = (e) => e.kind === "copy" ? n.async((t) => {
 	re(e.from, e.to, (r) => t(r ? n.fail(new L({
 		tool: "copy",
 		reason: `copy ${e.from} → ${e.to}: ${r.message}`
 	})) : n.void));
 }) : n.async((t) => {
-	let r = fe(e.tool, [...e.args], {
+	let r = me(e.tool, [...e.args], {
 		env: {
 			...process.env,
 			...e.env
@@ -1461,8 +1469,8 @@ var mn = (e, t) => ({
 		reason: `exited with code ${r}`,
 		stderr: i.slice(-2e3)
 	}))));
-}), Cn = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), wn = (e) => n.gen(function* () {
-	let t = yield* Le(e.scope ?? { kind: "all" }, e.snapshot, {
+}), Dn = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), On = (e) => n.gen(function* () {
+	let t = yield* ze(e.scope ?? { kind: "all" }, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
 	}), r = q(t.tables, e.snapshot), i = e.classification ?? O(e.snapshot), a = e.sampleSize ?? 20, o = N(r.map((t) => ({
@@ -1478,14 +1486,14 @@ var mn = (e, t) => ({
 			chunkSize: a,
 			...r === void 0 ? {} : { where: r }
 		}).pipe(c.take(a), c.runCollect, n.map((e) => [...e])), d = u.map((t) => P(t, i, o.actions, e.masking.seed));
-		l.push(...Te(d, i, o.actions));
+		l.push(...De(d, i, o.actions));
 		let f = u[0], m = d[0], h = [];
 		if (f && m) for (let [e, t] of Object.entries(o.actions)) {
 			if (!e.startsWith(`${i}.`) || t === "keep") continue;
 			let n = e.slice(i.length + 1);
 			h.push({
 				column: n,
-				action: Cn(t),
+				action: Dn(t),
 				before: f[n],
 				after: m[n]
 			});
@@ -1500,6 +1508,70 @@ var mn = (e, t) => ({
 		leaks: l,
 		unclassified: o.unclassified
 	};
-});
+}), kn = (e, t) => {
+	let n = new Map(t.map((e) => [e.name, e])), r = [], i = {};
+	for (let t of e) {
+		let e = n.get(t.name);
+		if (e === void 0) {
+			r.push({
+				verdict: "refuse",
+				table: t.name,
+				detail: `the bundle carries '${t.name}' and the target schema has no such table — nowhere to put ${t.name}'s rows`
+			});
+			continue;
+		}
+		let a = new Map(e.columns.map((e) => [e.name, e])), o = new Map(t.columns.map((e) => [e.name, e])), s = [];
+		for (let e of t.columns) {
+			let n = a.get(e.name);
+			if (n === void 0) {
+				s.push(e.name), r.push({
+					verdict: "value-dropped",
+					table: t.name,
+					column: e.name,
+					detail: `'${t.name}.${e.name}' is in the bundle and not in the schema — its values are DISCARDED`
+				});
+				continue;
+			}
+			n.type !== e.type && r.push({
+				verdict: "refuse",
+				table: t.name,
+				column: e.name,
+				detail: `'${t.name}.${e.name}' changed type (${e.type} → ${n.type}) — the bundle's values would be written through a codec that no longer matches them`
+			});
+		}
+		for (let n of e.columns) if (!o.has(n.name)) {
+			if (n.nullable || n.hasDefault) {
+				r.push({
+					verdict: "filled-by-default",
+					table: t.name,
+					column: n.name,
+					detail: `'${t.name}.${n.name}' is in the schema and not in the bundle — every imported row gets ${n.hasDefault ? "its default" : "NULL"}`
+				});
+				continue;
+			}
+			r.push({
+				verdict: "refuse",
+				table: t.name,
+				column: n.name,
+				detail: `'${t.name}.${n.name}' is NOT NULL with no default and the bundle has no value for it`
+			});
+		}
+		s.length > 0 && (i[t.name] = s);
+	}
+	return {
+		findings: r,
+		skipColumns: i,
+		refuse: r.some((e) => e.verdict === "refuse")
+	};
+}, An = (e) => {
+	if (e.findings.length === 0) return ["  schema matches the bundle"];
+	let t = {
+		safe: "✓",
+		"value-dropped": "⊖",
+		"filled-by-default": "⊕",
+		refuse: "✗"
+	}, n = e.findings.map((e) => `  ${t[e.verdict]} ${e.detail}`), r = (t) => e.findings.filter((e) => e.verdict === t).length;
+	return n.push(""), n.push(`  discarded: ${r("value-dropped")}   defaulted: ${r("filled-by-default")}   refused: ${r("refuse")}`), e.refuse && (n.push(""), n.push("  REFUSED — no row was written. These are the differences that would make"), n.push("  imported rows WRONG rather than merely incomplete.")), n;
+};
 //#endregion
-export { H as ASSETS_DIR, U as ASSET_INDEX_FILE, F as BundleError, Ee as CodecError, De as CompressionError, Ne as CrossDialectError, V as DATA_DIR, me as DEFAULT_CLASS_ACTIONS, ke as DanglingReferenceError, qe as FORMAT_VERSION, Me as ImportModeError, I as IntegrityError, tt as LEDGER_FILE, B as MANIFEST_FILE, je as MaskingError, L as NativeToolError, Ae as SchemaDriftError, Oe as ScopeError, Ce as applyAction, Ut as assessLiveImport, ut as assetDone, _n as backupArtifactName, bn as backupCommand, Mt as canonicalType, Ft as checkPortability, zt as checkSchemaDrift, O as classificationFromSnapshot, We as compressionExt, Fe as computeSubsetIds, $e as decodeManifest, bt as decodeRow, vt as decodeValue, pn as decryptStream, Ht as defineDataProfile, Rt as diffSnapshots, rn as dirBlobSink, ct as emptyLedger, Qe as encodeManifest, yt as encodeRow, gt as encodeValue, fn as encryptStream, It as formatIssue, He as hasZstd, Ge as makeCompressor, Ke as makeDecompressor, P as maskRow, Ct as ndjsonToRows, Zt as packBundle, tn as peekBundle, Ue as pickCompression, N as planMasking, wn as previewMasking, G as readLedger, he as resolveAction, Le as resolveScope, Ve as restoreAssetFromCas, xn as restoreCommand, St as rowsToNdjson, jt as runExport, Vt as runImport, Sn as runNativeStep, Te as scanForLeaks, ze as storageAssetSink, Re as storageAssetSource, gn as storageBlobSink, mn as storageBlobSource, hn as storageRefsBlobSource, Ie as subsetToScope, lt as tableDone, q as topoSortTables, en as unpackBundle, nn as unpackBundleToDir, Be as writeAssetToCas, K as writeLedger };
+export { H as ASSETS_DIR, U as ASSET_INDEX_FILE, F as BundleError, Oe as CodecError, ke as CompressionError, Fe as CrossDialectError, V as DATA_DIR, ge as DEFAULT_CLASS_ACTIONS, je as DanglingReferenceError, Ye as FORMAT_VERSION, Pe as ImportModeError, I as IntegrityError, rt as LEDGER_FILE, B as MANIFEST_FILE, Ne as MaskingError, L as NativeToolError, Me as SchemaDriftError, Ae as ScopeError, Te as applyAction, Gt as assessLiveImport, ft as assetDone, xn as backupArtifactName, wn as backupCommand, Pt as canonicalType, Lt as checkPortability, Vt as checkSchemaDrift, O as classificationFromSnapshot, kn as classifyImportDrift, Ke as compressionExt, Le as computeSubsetIds, tt as decodeManifest, St as decodeRow, bt as decodeValue, hn as decryptStream, Wt as defineDataProfile, Bt as diffSnapshots, on as dirBlobSink, ut as emptyLedger, et as encodeManifest, xt as encodeRow, vt as encodeValue, mn as encryptStream, An as formatImportDrift, Rt as formatIssue, We as hasZstd, qe as makeCompressor, Je as makeDecompressor, P as maskRow, Tt as ndjsonToRows, $t as packBundle, rn as peekBundle, Ge as pickCompression, N as planMasking, On as previewMasking, G as readLedger, _e as resolveAction, ze as resolveScope, Ue as restoreAssetFromCas, Tn as restoreCommand, wt as rowsToNdjson, Nt as runExport, Ut as runImport, En as runNativeStep, De as scanForLeaks, Ve as storageAssetSink, Be as storageAssetSource, vn as storageBlobSink, gn as storageBlobSource, _n as storageRefsBlobSource, Re as subsetToScope, dt as tableDone, q as topoSortTables, nn as unpackBundle, an as unpackBundleToDir, He as writeAssetToCas, K as writeLedger };