@voltro/data-transfer 0.43.2 → 0.44.0

package/CHANGELOG.md

@@ -39,6 +39,40 @@ _Changes staged for the next release accumulate here (rolled up from
 
 ---
 
+## [0.44.0] — 2026-08-19
+
+### ⚠ BREAKING
+
+- **@voltro/data-transfer, @voltro/cli** — `runImport` returns an `ImportOutcome` instead of the bundle's `Manifest`, and `--mode replace` runs as ONE transaction by default.
+
+  **Why the return type changed.** The summary line counted the rows the BUNDLE carries, not the rows the run wrote. Those differ most exactly where it matters: a bundle directory carries its own resume ledger, so a copied directory imports nothing — correctly, with a warning naming the file to delete — and the run then printed `import complete … rows: 242950` over a target it had not touched. The warning was one line above, which is one line too far for anyone piping the output through `tail -1`. The outcome carries `rowsWritten`, `rowsSkipped` and `fullyResumed`, the CLI reports written-vs-carried, and a fully-skipped run says so on its LAST line.
+
+  Migration: `runImport(...)` now resolves to `{ manifest, tablesWritten, rowsWritten, tablesSkipped, rowsSkipped, fullyResumed }`. Read `.manifest` where you read the manifest before.
+
+  **Why replace is atomic now.** The all-or-nothing guarantee was written for the emptying step, and read — reasonably — as covering the run. A replace that died partway through the LOAD left the target emptied of its old rows and holding part of the new ones, measured on a live instance over sixteen minutes. There is no useful state for a replace to stop in, so it is a default rather than a flag you have to know about. It also closes the window that produced that failure: with the tables emptied and the load uncommitted, a concurrent writer in the application waits instead of inserting a row the bundle is about to insert too.
+
+  `--no-atomic` (CLI) / `atomic: false` (API) opts out. The trade is stated where it bites: every write to those tables waits for the load, and on postgres the bulk `COPY` loader cannot join a transaction it does not own — an atomic run now says that once rather than being quietly slower.
+
+  Two smaller things from the same report: `--mode replace` against a running instance warns about the empty-target window when it is NOT atomic, and the `--target api` upload reports progress per chunk plus a line explaining that the final request stays open for the whole import — sixteen minutes of silence is indistinguishable from a hang, and one operator killed a run that had finished.
+
+  **`voltro update` carries you across this** — codemod `0.44.0/01_import-outcome`.
+
+### Fixed
+
+- **@voltro/sql-mysql, @voltro/sql-postgres, @voltro/sql-sqlite, @voltro/sql-mssql, @voltro/data-transfer** — A write and its write-recorders now succeed or fail together on every SQL dialect, and the data importer's retry is idempotent.
+
+  A recorder (a versioning trail, an audit log) runs on the caller's connection and is ALLOWED to fail — a recorder that throws must take the write down with it, that is its contract. Outside a caller transaction the two were not one unit: the row's statement committed on its own, and the recorder's INSERT ran afterwards as a second autocommit statement. So a recorder that threw left a COMMITTED row behind a write that reported failure. Measured directly: `insert` throws, the row is in the table, and a second attempt at the same row is `ER_DUP_ENTRY` on PRIMARY.
+
+  Anything that retries a failed write then meets its own row. The data importer retries by design — it holds a row whose write failed and tries again once the remaining tables have streamed — so a `--mode replace` that had just emptied a table failed on a duplicate key IN that table. From outside, that is the impossible-looking thing: an import that emptied a table and then failed because something was already in it. Reproduced verbatim, including the table name and `[ER_DUP_ENTRY/1062]`, by putting the old retry back.
+
+  Both ends are closed, and they are independent on purpose:
+
+  - **The cause.** A table that HAS recorders writes inside a transaction now, so the row and the trail commit together or not at all — on mysql, mariadb, postgres, sqlite and mssql, verified by one suite that asks all five the same question. A table with no recorders — the default — takes the direct path unchanged; `recordsTable` is a Map-size check first, so it costs one comparison. - **The defence.** The importer's retry upserts instead of inserting in `replace` mode. That covers every OTHER way a write can land while reporting failure: a driver timeout on a write the server applied, a connection lost after the commit, a concurrent writer inserting the same key. It is sound precisely because the table was emptied by this same run — there is nothing in it that is not ours.
+
+  The test that pinned the divergence went red when the fix landed, exactly as its own note said it would, and is inverted with that note kept.
+
+---
+
 ## [0.43.2] — 2026-08-18
 
 ### Fixed

package/dist/index.d.ts

@@ -570,6 +570,10 @@ export declare interface ImportOptions {
      * `replace`. Trade-offs: one long-held write transaction (writes to those
      * tables block for the load; readers are unaffected on MVCC dialects), and
      * resume is not per-table (a crash rolls the whole thing back → re-run).
+     *
+     * DEFAULTS TO TRUE FOR `replace`, and to false otherwise. Omit it to get that
+     * rule; pass `false` to opt out deliberately. See where it is resolved in
+     * `runImport` for why replace cannot sensibly run without it.
      */
     readonly atomic?: boolean;
     /** The streaming import path (`unpackBundle` with a storage {@link AssetSink})
@@ -648,6 +652,33 @@ export declare interface ImportOptions {
     readonly savepointBatchSize?: number;
 }
 
+/**
+ * What a run actually did — as opposed to what the bundle contains.
+ *
+ * The two are not the same, and reporting the bundle's numbers as the run's is a
+ * lie of the same family this package keeps finding: a re-run of a bundle
+ * directory whose ledger says every table is applied writes NOTHING and used to
+ * be summarised as `import complete … rows: 242950`. The warning that explained
+ * it was one line further up, which is one line too far for anyone who pipes the
+ * output through `tail`.
+ *
+ * `rowsWritten` counts rows this run streamed into the target. `rowsSkipped`
+ * counts rows in tables an earlier run of THIS bundle directory had already
+ * applied. A dry run reports zero written and nothing skipped: it examined
+ * everything and wrote nothing.
+ */
+export declare interface ImportOutcome {
+    /** The bundle's own contract — what it CARRIES. */
+    readonly manifest: Manifest;
+    readonly tablesWritten: number;
+    readonly rowsWritten: number;
+    /** Tables an earlier run of this bundle directory already applied. */
+    readonly tablesSkipped: number;
+    readonly rowsSkipped: number;
+    /** True when nothing was written because everything was already applied. */
+    readonly fullyResumed: boolean;
+}
+
 /** An integrity check failed — a table's content checksum or row count did not
  *  match the manifest, or an asset's bytes did not hash to its recorded id. */
 export declare class IntegrityError extends IntegrityError_base {
@@ -1115,7 +1146,7 @@ export declare const rowsToNdjson: <E, R>(rows: Stream.Stream<Row, E, R>, column
 
 export declare const runExport: (opts: ExportOptions) => Effect.Effect<Manifest, ExportError>;
 
-export declare const runImport: (opts: ImportOptions) => Effect.Effect<Manifest, ImportError>;
+export declare const runImport: (opts: ImportOptions) => Effect.Effect<ImportOutcome, ImportError>;
 
 /** Execute a {@link NativeStep} — spawn the tool (wiring stdin/stdout files) or
  *  copy the file. Maps a missing binary / non-zero exit to {@link NativeToolError}. */

package/dist/index.js

@@ -2,16 +2,16 @@ import { Cause as e, Data as t, Effect as n, Exit as r, Metric as i, MetricBound
 import { classifyConstraintViolation as l, eq as u, extractDbCause as d, inSet as f, isNotNull as p, or as m, streamTable as h } from "@voltro/database";
 import { fingerprintSchema as g } from "@voltro/database/sql";
 import { createCipheriv as _, createDecipheriv as v, createHash as y, createHmac as b, randomBytes as x, scrypt as S } from "node:crypto";
-import { STORAGE_REFS_TABLE as C, fromNodeReadable as w, getObjectStream as T, putObjectStream as ee, toNodeReadable as te } from "@voltro/plugin-storage";
-import * as E from "node:zlib";
-import { PassThrough as D, Readable as ne } from "node:stream";
-import { copyFile as re, createReadStream as O, createWriteStream as ie, existsSync as ae, unlinkSync as oe } from "node:fs";
-import { mkdir as se, readdir as ce, stat as le } from "node:fs/promises";
-import { basename as ue, delimiter as de, dirname as fe, join as k, resolve as pe, sep as me } from "node:path";
-import { promisify as he } from "node:util";
-import { spawn as ge } from "node:child_process";
+import { STORAGE_REFS_TABLE as C, fromNodeReadable as w, getObjectStream as T, putObjectStream as E, toNodeReadable as D } from "@voltro/plugin-storage";
+import * as O from "node:zlib";
+import { PassThrough as k, Readable as A } from "node:stream";
+import { copyFile as ee, createReadStream as j, createWriteStream as te, existsSync as ne, unlinkSync as re } from "node:fs";
+import { mkdir as ie, readdir as ae, stat as oe } from "node:fs/promises";
+import { basename as se, delimiter as ce, dirname as le, join as M, resolve as ue, sep as de } from "node:path";
+import { promisify as fe } from "node:util";
+import { spawn as pe } from "node:child_process";
 //#region src/consistency.ts
-var _e = (e) => {
+var me = (e) => {
 	switch (e) {
 		case "postgres": return ["SET TRANSACTION ISOLATION LEVEL REPEATABLE READ"];
 		case "mysql":
@@ -21,7 +21,7 @@ var _e = (e) => {
 		case "turso": return [];
 		default: return [];
 	}
-}, ve = {
+}, he = {
 	email: { fake: "email" },
 	fullName: { fake: "fullName" },
 	firstName: { fake: "firstName" },
@@ -36,7 +36,7 @@ var _e = (e) => {
 	date: "dateShift",
 	secret: "null",
 	freeText: "redact"
-}, A = (e) => {
+}, N = (e) => {
 	let t = {};
 	for (let n of e.tables) {
 		let e = {};
@@ -48,15 +48,15 @@ var _e = (e) => {
 		t[n.name] = e;
 	}
 	return t;
-}, ye = (e, t, n, r) => {
+}, ge = (e, t, n, r) => {
 	let i = r.columns?.[`${e}.${t}`];
 	if (i) return i;
 	if (n?.sensitive) {
 		let e = n.sensitive.class;
-		return r.classes?.[e] ?? ve[e] ?? "redact";
+		return r.classes?.[e] ?? he[e] ?? "redact";
 	}
 	return n?.safe ? r.onSafe ?? "keep" : n?.columnType === "id" || n?.columnType === "reference" ? "keep" : r.onUnclassified ?? "error";
-}, j = (e, t) => b("sha256", e).update(t == null ? "∅" : String(t)).digest(), M = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), N = [
+}, P = (e, t) => b("sha256", e).update(t == null ? "∅" : String(t)).digest(), F = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), I = [
 	"Ada",
 	"Alan",
 	"Grace",
@@ -69,7 +69,7 @@ var _e = (e) => {
 	"Guido",
 	"Margaret",
 	"Bjarne"
-], P = [
+], _e = [
 	"Lovelace",
 	"Turing",
 	"Hopper",
@@ -82,7 +82,7 @@ var _e = (e) => {
 	"Rossum",
 	"Hamilton",
 	"Stroustrup"
-], be = [
+], ve = [
 	"Maple",
 	"Oak",
 	"Cedar",
@@ -91,7 +91,7 @@ var _e = (e) => {
 	"Birch",
 	"Willow",
 	"Ash"
-], xe = [
+], ye = [
 	"Initech",
 	"Hooli",
 	"Umbrella",
@@ -100,23 +100,23 @@ var _e = (e) => {
 	"Soylent",
 	"Stark",
 	"Wayne"
-], F = (e, t, n) => e[M(t, n) % e.length], Se = (e, t, n) => {
-	let r = j(n, `${e}:${String(t)}`), i = M(r, 1) % 1e4;
+], L = (e, t, n) => e[F(t, n) % e.length], be = (e, t, n) => {
+	let r = P(n, `${e}:${String(t)}`), i = F(r, 1) % 1e4;
 	switch (e) {
-		case "email": return `${F(N, r, 0).toLowerCase()}.${F(P, r, 2).toLowerCase()}${i}@example.com`;
-		case "fullName": return `${F(N, r, 0)} ${F(P, r, 1)}`;
-		case "firstName": return F(N, r, 0);
-		case "lastName": return F(P, r, 1);
-		case "username": return `${F(N, r, 0).toLowerCase()}${i}`;
-		case "phone": return `+1${String(M(r, 0) % 1e10).padStart(10, "0")}`;
-		case "address": return `${M(r, 0) % 9899 + 100} ${F(be, r, 1)} St`;
-		case "company": return F(xe, r, 0);
+		case "email": return `${L(I, r, 0).toLowerCase()}.${L(_e, r, 2).toLowerCase()}${i}@example.com`;
+		case "fullName": return `${L(I, r, 0)} ${L(_e, r, 1)}`;
+		case "firstName": return L(I, r, 0);
+		case "lastName": return L(_e, r, 1);
+		case "username": return `${L(I, r, 0).toLowerCase()}${i}`;
+		case "phone": return `+1${String(F(r, 0) % 1e10).padStart(10, "0")}`;
+		case "address": return `${F(r, 0) % 9899 + 100} ${L(ve, r, 1)} St`;
+		case "company": return L(ye, r, 0);
 		case "url": return `https://example.com/${r.toString("hex").slice(0, 12)}`;
-		case "ip": return `${M(r, 0) % 256}.${M(r, 1) % 256}.${M(r, 2) % 256}.${M(r, 3) % 254 + 1}`;
-		case "creditCard": return Ce(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
+		case "ip": return `${F(r, 0) % 256}.${F(r, 1) % 256}.${F(r, 2) % 256}.${F(r, 3) % 254 + 1}`;
+		case "creditCard": return xe(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
 		default: return `${e}_${r.toString("hex").slice(0, 8)}`;
 	}
-}, Ce = (e) => {
+}, xe = (e) => {
 	let t = e.slice(0, 15).split("").map(Number), n = 0;
 	t.forEach((e, t) => {
 		let r = e;
@@ -124,31 +124,31 @@ var _e = (e) => {
 	});
 	let r = (10 - n % 10) % 10;
 	return e.slice(0, 15) + String(r);
-}, we = 864e5, Te = (e, t) => {
+}, Se = 864e5, Ce = (e, t) => {
 	let n = e instanceof Date ? e.getTime() : Date.parse(String(e));
 	if (Number.isNaN(n)) return e;
-	let r = M(j(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * we);
+	let r = F(P(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Se);
 	return e instanceof Date ? i : i.toISOString();
-}, Ee = (e, t) => {
+}, we = (e, t) => {
 	if (t.value === null || t.value === void 0) return null;
 	if (e === "error") throw Error(`masking: unresolved 'error' action for ${t.table}.${t.column}`);
 	if (e === "keep") return t.value;
 	if (e === "null") return null;
 	if (e === "redact") return t.columnType === "text" || typeof t.value == "string" ? "[redacted]" : null;
-	if (e === "hash") return j(t.seed, t.value).toString("hex").slice(0, 16);
-	if (e === "dateShift") return Te(t.value, t.seed);
-	if (typeof e == "object" && "fake" in e) return Se(e.fake, t.value, t.seed);
+	if (e === "hash") return P(t.seed, t.value).toString("hex").slice(0, 16);
+	if (e === "dateShift") return Ce(t.value, t.seed);
+	if (typeof e == "object" && "fake" in e) return be(e.fake, t.value, t.seed);
 	if (typeof e == "object" && "custom" in e) return e.custom(t);
 	throw Error(`masking: '${t.table}.${t.column}' resolved to an action this build does not understand (${JSON.stringify(e)}). Refusing to copy the value through. Valid actions: 'keep' | 'null' | 'redact' | 'hash' | 'dateShift' | { fake: '<class>' } | { custom: fn }.`);
-}, De = (e) => typeof e == "string" ? e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error" : typeof e != "object" || !e ? !1 : "fake" in e ? typeof e.fake == "string" : "custom" in e && typeof e.custom == "function", I = (e, t, n) => {
+}, Te = (e) => typeof e == "string" ? e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error" : typeof e != "object" || !e ? !1 : "fake" in e ? typeof e.fake == "string" : "custom" in e && typeof e.custom == "function", Ee = (e, t, n) => {
 	let r = {}, i = [], a = [];
 	for (let o of e) for (let e of o.columns) {
-		let s = `${o.name}.${e.name}`, c = ye(o.name, e.name, t[o.name]?.[e.name], n);
+		let s = `${o.name}.${e.name}`, c = ge(o.name, e.name, t[o.name]?.[e.name], n);
 		if (c === "error") {
 			i.push(s);
 			continue;
 		}
-		if (!De(c)) {
+		if (!Te(c)) {
 			a.push({
 				column: s,
 				action: c
@@ -162,7 +162,7 @@ var _e = (e) => {
 		unclassified: i,
 		invalid: a
 	};
-}, Oe = [
+}, De = [
 	{
 		name: "email",
 		re: /[\w.+-]+@[\w-]+\.[\w.-]+/
@@ -179,7 +179,7 @@ var _e = (e) => {
 		name: "creditCard",
 		re: /\b(?:\d[ -]?){13,16}\b/
 	}
-], ke = (e, t, n) => {
+], Oe = (e, t, n) => {
 	let r = [], i = /* @__PURE__ */ new Set();
 	for (let [a, o] of Object.entries(n)) {
 		if (!a.startsWith(`${t}.`) || o !== "keep") continue;
@@ -187,7 +187,7 @@ var _e = (e) => {
 		for (let a of e) {
 			let e = a[n];
 			if (typeof e != "string" || e.length === 0) continue;
-			let o = Oe.find((t) => t.re.test(e));
+			let o = De.find((t) => t.re.test(e));
 			if (o && !i.has(n)) {
 				i.add(n), r.push({
 					table: t,
@@ -200,9 +200,9 @@ var _e = (e) => {
 		}
 	}
 	return r;
-}, L = (e, t, n, r, i) => {
+}, ke = (e, t, n, r, i) => {
 	let a = {};
-	for (let [o, s] of Object.entries(e)) a[o] = Ee(n[`${t}.${o}`] ?? "keep", {
+	for (let [o, s] of Object.entries(e)) a[o] = we(n[`${t}.${o}`] ?? "keep", {
 		value: s,
 		table: t,
 		column: o,
@@ -342,14 +342,14 @@ var _e = (e) => {
 	list: t,
 	open: (t) => T(e, t)
 }), He = (e) => ({
-	write: (t, n, r) => ee(e, t, n, r),
+	write: (t, n, r) => E(e, t, n, r),
 	has: (t) => e.head(t).pipe(n.map((e) => e !== null))
 }), Ue = (e, t) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), r = await import("node:fs/promises"), { createHash: i, randomUUID: a } = await import("node:crypto"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = await import("node:path"), l = c.join(t, `.tmp-${a()}`), u = i("sha256"), d = 0, f = new s({ transform(e, t, n) {
 			u.update(e), d += e.length, n(null, e);
 		} });
-		await o(await te(e.stream), f, n(l));
+		await o(await D(e.stream), f, n(l));
 		let p = u.digest("hex"), m = c.join(t, p);
 		try {
 			await r.access(m), await r.rm(l, { force: !0 });
@@ -378,7 +378,7 @@ var _e = (e) => {
 		expected: r.sha256,
 		actual: d
 	}));
-}), Ge = () => typeof E.createZstdCompress == "function", Ke = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : Ge() ? "zstd" : "gzip", qe = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", Je = (e) => e === "zstd" ? E.createZstdCompress() : e === "gzip" ? E.createGzip() : new D(), Ye = (e) => e === "zstd" ? E.createZstdDecompress() : e === "gzip" ? E.createGunzip() : new D(), Xe = 1, Ze = s.Struct({
+}), Ge = () => typeof O.createZstdCompress == "function", Ke = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : Ge() ? "zstd" : "gzip", qe = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", Je = (e) => e === "zstd" ? O.createZstdCompress() : e === "gzip" ? O.createGzip() : new k(), Ye = (e) => e === "zstd" ? O.createZstdDecompress() : e === "gzip" ? O.createGunzip() : new k(), Xe = 1, Ze = s.Struct({
 	name: s.String,
 	file: s.String,
 	rowCount: s.Number,
@@ -646,7 +646,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			chunkSize: t.chunkSize,
 			retry: t.retry,
 			...f === void 0 ? {} : { where: f }
-		}), m = Nt(t.snapshot, o), g = m.length === 0 ? p : p.pipe(c.map((e) => Pt(e, m))), _ = t.mask ? g.pipe(c.map((e) => L(e, o, t.mask.actions, t.mask.seed, s))) : g, { rowCount: v, checksum: y } = yield* ft("export", o, a, i, (e) => e.rowCount, It(Ot(_, s), t.bundleFile(d), t.compression));
+		}), m = Nt(t.snapshot, o), g = m.length === 0 ? p : p.pipe(c.map((e) => Pt(e, m))), _ = t.mask ? g.pipe(c.map((e) => ke(e, o, t.mask.actions, t.mask.seed, s))) : g, { rowCount: v, checksum: y } = yield* ft("export", o, a, i, (e) => e.rowCount, It(Ot(_, s), t.bundleFile(d), t.compression));
 		t.ledger.tables[o] = {
 			rowCount: v,
 			checksum: y
@@ -674,7 +674,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	values: []
 }), Bt = (t, i, a) => n.tryPromise({
 	try: () => t.transactional(async (t) => {
-		if (t.raw) for (let e of _e(i)) await t.raw(zt(e));
+		if (t.raw) for (let e of me(i)) await t.raw(zt(e));
 		let o = await n.runPromiseExit(a(t));
 		if (r.isFailure(o)) throw Error(e.pretty(o.cause));
 		return o.value;
@@ -697,7 +697,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
 	}), m = At(p.tables, e.snapshot), h = e.consistency ?? "live", _, v;
 	if (e.masking) {
-		let t = e.classification ?? A(e.snapshot), r = I(m.map((t) => ({
+		let t = e.classification ?? N(e.snapshot), r = Ee(m.map((t) => ({
 			name: t,
 			columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 				name: e.name,
@@ -962,7 +962,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			blocking: e.map(Jt)
 		}));
 	}
-	let l = t.verify ?? !0, u = t.mode ?? "upsert", d = t.onConflict ?? "skip", f = t.ledgerPath ?? i.join(t.bundleDir, ".import..ledger.json"), m = yield* mt(f);
+	let l = t.verify ?? !0, u = t.mode ?? "upsert", d = t.atomic ?? u === "replace", f = t.onConflict ?? "skip", m = t.ledgerPath ?? i.join(t.bundleDir, ".import..ledger.json"), h = yield* mt(m);
 	if (u === "replace" && s.scope.kind !== "all") return yield* n.fail(new Fe({
 		mode: u,
 		reason: `replace refuses a partial bundle (scope='${s.scope.kind}') — truncating would delete rows not in the bundle. Use --mode upsert, or re-export with full scope.`
@@ -998,31 +998,38 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			reason: Ut(i)
 		}));
 	}
-	if (t.dryRun === !0) return s;
-	let h = /* @__PURE__ */ new Map();
+	if (t.dryRun === !0) return {
+		manifest: s,
+		tablesWritten: 0,
+		rowsWritten: 0,
+		tablesSkipped: 0,
+		rowsSkipped: 0,
+		fullyResumed: !1
+	};
+	let g = /* @__PURE__ */ new Map();
 	for (let e of t.targetSnapshot?.tables ?? []) {
 		let t = e.columns.filter((e) => e.generatedAs !== void 0).map((e) => e.name);
-		t.length > 0 && h.set(e.name, t);
+		t.length > 0 && g.set(e.name, t);
 	}
-	let g = (e, t) => {
-		let n = h.get(e);
+	let _ = (e, t) => {
+		let n = g.get(e);
 		if (n === void 0) return t;
 		let r;
 		for (let e of n) e in t && (r ??= { ...t }, delete r[e]);
 		return r ?? t;
-	}, _ = (e, t, n) => {
-		let r = t.name, i = t.primaryKey, a = g(r, n);
-		return u === "append" ? d === "fail" ? e.insert(r, a) : e.insertIgnore(r, a, { conflictColumns: [i] }) : u === "replace" ? e.insert(r, a) : e.upsert(r, a, { conflictColumns: [i] });
-	}, v = (e, t) => e.savepoint ? e.savepoint(t) : t(), y = (e, t, r = !0) => n.tryPromise({
+	}, v = (e, t, n, r = !1) => {
+		let i = t.name, a = t.primaryKey, o = _(i, n);
+		return u === "append" ? f === "fail" ? e.insert(i, o) : e.insertIgnore(i, o, { conflictColumns: [a] }) : u === "replace" ? r ? e.upsert(i, o, { conflictColumns: [a] }) : e.insert(i, o) : e.upsert(i, o, { conflictColumns: [a] });
+	}, y = (e, t) => e.savepoint ? e.savepoint(t) : t(), b = (e, t, r = !0) => n.tryPromise({
 		try: e,
 		catch: (e) => Zt(e)
-	}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e), !1)))), b = (e) => {
+	}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e), !1)))), x = (e) => {
 		let t = Object.entries(e.entry.columnTypes).filter(([t, n]) => n === "reference" && e.row[t] !== null && e.row[t] !== void 0).map(([e]) => e);
 		if (t.length !== 0) return {
 			...e.row,
 			...Object.fromEntries(t.map((e) => [e, null]))
 		};
-	}, x = (e) => {
+	}, S = (e) => {
 		let t = new Set(e.map((e) => String(e.row[e.entry.primaryKey]))), n = (e) => Object.entries(e.entry.columnTypes).some(([n, r]) => {
 			if (r !== "reference") return !1;
 			let i = e.row[n];
@@ -1038,22 +1045,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			primaryCount: r.filter((e) => !e.derived).length,
 			totalCount: e.length
 		});
-	}, S = (e, t) => n.gen(function* () {
+	}, C = (e, t) => n.gen(function* () {
 		let r = t, i = [], a = !0;
 		for (; r.length > 0 && a;) {
 			a = !1;
 			let t = [];
-			for (let n of r) (yield* y(() => v(e, () => _(e, n.entry, n.row)), n)) ? a = !0 : t.push(n);
+			for (let n of r) (yield* b(() => y(e, () => v(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
 			if (!a && t.length > 0) for (let n = t.length - 1; n >= 0; n--) {
-				let r = t[n], o = b(r);
-				o !== void 0 && (yield* y(() => v(e, () => _(e, r.entry, o)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
+				let r = t[n], o = x(r);
+				o !== void 0 && (yield* b(() => y(e, () => v(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
 			}
 			r = t;
 		}
-		for (let t of i) (yield* y(() => v(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
-		if (r.length > 0) return yield* n.fail(x(r));
-	}), C = (e, r) => n.gen(function* () {
-		if (u === "replace" && !(r && m.truncated)) {
+		for (let t of i) (yield* b(() => y(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
+		if (r.length > 0) return yield* n.fail(S(r));
+	}), T = !1, E = 0, D = 0, O = 0, k = 0, A = (e, r) => n.gen(function* () {
+		if (u === "replace" && !(r && h.truncated)) {
 			let t = [...s.tables].reverse().map((e) => e.name), i = !r, a = e.emptyTables ? () => e.emptyTables(t) : i ? async () => {
 				for (let t of [...s.tables].reverse()) await e.deleteMany(t.name, { where: p(t.primaryKey) });
 			} : () => e.transactional(async (e) => {
@@ -1062,53 +1069,54 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			yield* n.tryPromise({
 				try: a,
 				catch: (e) => new R({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${Qt(e)}` })
-			}), r && (m.truncated = !0, yield* q(f, m));
+			}), r && (h.truncated = !0, yield* q(m, h));
 		}
-		let a = [], o = [], d = [], h = s.tables.length;
+		let a = [], o = [], f = [], g = s.tables.length;
 		for (let p = 0; p < s.tables.length; p++) {
-			let g = s.tables[p];
-			if (r && g.name in m.tables) {
-				d.push(g.name), K(t.onProgress, {
+			let _ = s.tables[p];
+			if (r && _.name in h.tables) {
+				f.push(_.name), k++, O += h.tables[_.name].rowCount, K(t.onProgress, {
 					phase: "import",
-					table: g.name,
+					table: _.name,
 					index: p,
-					tableCount: h,
+					tableCount: g,
 					event: "done",
-					rowsDone: m.tables[g.name].rowCount,
-					total: g.rowCount
+					rowsDone: h.tables[_.name].rowCount,
+					total: _.rowCount
 				});
 				continue;
 			}
-			let y = i.join(t.bundleDir, g.file);
+			let b = i.join(t.bundleDir, _.file);
 			K(t.onProgress, {
 				phase: "import",
-				table: g.name,
+				table: _.name,
 				index: p,
-				tableCount: h,
+				tableCount: g,
 				event: "start",
 				rowsDone: 0,
-				total: g.rowCount
+				total: _.rowCount
 			});
-			let b = a.length, x = n.gen(function* () {
-				let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, l = w("bundle", () => O(y).pipe(Ye(s.compression))).pipe(c.tap((e) => n.sync(() => i.update(e)))), d = async (t) => {
+			let x = a.length, S = n.gen(function* () {
+				let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, l = w("bundle", () => j(b).pipe(Ye(s.compression))).pipe(c.tap((e) => n.sync(() => i.update(e)))), f = async (t) => {
 					let n = {
-						entry: g,
+						entry: _,
 						row: t,
 						reason: ""
 					};
 					try {
-						await v(e, () => _(e, g, t));
+						await y(e, () => v(e, _, t));
 					} catch (e) {
 						n.reason = Zt(e), a.push(n);
 					}
-				}, f = yield* n.promise(async () => {
+				}, p = yield* n.promise(async () => {
 					let n = t.copyLoader;
-					if (!n || n.dialect !== "postgres" || t.atomic) return !1;
+					if (!n || n.dialect !== "postgres") return !1;
+					if (d) return T || (T = !0, t.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
 					if (u === "replace") return !0;
 					if (u !== "upsert") return !1;
 					try {
 						return (await e.query({
-							table: g.name,
+							table: _.name,
 							predicate: void 0,
 							order: [],
 							take: 1,
@@ -1118,104 +1126,111 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					} catch {
 						return !1;
 					}
-				}), p = Object.keys(g.columnTypes), m = Math.max(1, t.copyBatchSize ?? 5e3), h = [], b = async () => {
-					if (h.length === 0) return;
-					let e = h;
-					h = [];
+				}), m = Object.keys(_.columnTypes), h = Math.max(1, t.copyBatchSize ?? 5e3), g = [], x = async () => {
+					if (g.length === 0) return;
+					let e = g;
+					g = [];
 					try {
 						await t.copyLoader.copyInto({
-							table: g.name,
-							columns: p,
-							columnTypes: g.columnTypes,
+							table: _.name,
+							columns: m,
+							columnTypes: _.columnTypes,
 							rows: e
 						});
 					} catch (n) {
-						f = !1, t.onWarn?.(`bulk COPY into ${g.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
-						for (let t of e) await d(t);
+						p = !1, t.onWarn?.(`bulk COPY into ${_.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
+						for (let t of e) await f(t);
 					}
-				}, x = Math.max(1, t.savepointBatchSize ?? 200), S = typeof e.savepoint == "function", C = [], T = async () => {
-					if (C.length === 0) return;
-					let t = C;
-					C = [];
+				}, S = Math.max(1, t.savepointBatchSize ?? 200), C = typeof e.savepoint == "function", E = [], D = async () => {
+					if (E.length === 0) return;
+					let t = E;
+					E = [];
 					try {
 						await e.savepoint(async () => {
-							for (let n of t) await _(e, g, n);
+							for (let n of t) await v(e, _, n);
 						});
 					} catch {
-						for (let e of t) await d(e);
+						for (let e of t) await f(e);
 					}
 				};
-				return yield* c.runForEach(kt(l, g.name, g.columnTypes), (e) => n.promise(async () => {
-					if (o++, f) {
-						h.push(e), h.length >= m && await b();
+				return yield* c.runForEach(kt(l, _.name, _.columnTypes), (e) => n.promise(async () => {
+					if (o++, p) {
+						g.push(e), g.length >= h && await x();
 						return;
 					}
-					if (S) {
-						C.push(e), C.length >= x && await T();
+					if (C) {
+						E.push(e), E.length >= S && await D();
 						return;
 					}
-					await d(e);
-				})), yield* n.promise(T), yield* n.promise(b), {
+					await f(e);
+				})), yield* n.promise(D), yield* n.promise(x), {
 					rowCount: o,
 					checksum: i.digest("hex")
 				};
-			}), { rowCount: S, checksum: C } = yield* ft("import", g.name, p, h, (e) => e.rowCount, x);
+			}), { rowCount: C, checksum: A } = yield* ft("import", _.name, p, g, (e) => e.rowCount, S);
 			if (l) {
-				if (C !== g.checksum) return yield* n.fail(new z({
-					what: `table ${g.name} checksum`,
-					expected: g.checksum,
-					actual: C
+				if (A !== _.checksum) return yield* n.fail(new z({
+					what: `table ${_.name} checksum`,
+					expected: _.checksum,
+					actual: A
 				}));
-				if (S !== g.rowCount) return yield* n.fail(new z({
-					what: `table ${g.name} rowCount`,
-					expected: String(g.rowCount),
-					actual: String(S)
+				if (C !== _.rowCount) return yield* n.fail(new z({
+					what: `table ${_.name} rowCount`,
+					expected: String(_.rowCount),
+					actual: String(C)
 				}));
 			}
 			K(t.onProgress, {
 				phase: "import",
-				table: g.name,
+				table: _.name,
 				index: p,
-				tableCount: h,
+				tableCount: g,
 				event: "done",
-				rowsDone: S,
-				total: g.rowCount
-			}), r && (a.length > b ? o.push({
-				name: g.name,
-				rowCount: S
-			}) : (m.tables[g.name] = {
-				rowCount: S,
-				checksum: g.checksum
-			}, yield* q(f, m)));
+				rowsDone: C,
+				total: _.rowCount
+			}), D++, E += C, r && (a.length > x ? o.push({
+				name: _.name,
+				rowCount: C
+			}) : (h.tables[_.name] = {
+				rowCount: C,
+				checksum: _.checksum
+			}, yield* q(m, h)));
 		}
-		if (a.length > 0 && (yield* S(e, a)), r && o.length > 0) {
+		if (a.length > 0 && (yield* C(e, a)), r && o.length > 0) {
 			for (let e of o) {
 				let t = s.tables.find((t) => t.name === e.name);
-				m.tables[e.name] = {
+				h.tables[e.name] = {
 					rowCount: e.rowCount,
 					checksum: t.checksum
 				};
 			}
-			yield* q(f, m);
+			yield* q(m, h);
 		}
-		if (d.length > 0) {
-			let e = d.length === s.tables.length;
-			t.onWarn?.(`resume: ${d.length} of ${s.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${e ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${d.join(", ")}. Delete ${f} to force a full re-import.`);
+		if (f.length > 0) {
+			let e = f.length === s.tables.length;
+			t.onWarn?.(`resume: ${f.length} of ${s.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${e ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${f.join(", ")}. Delete ${m} to force a full re-import.`);
 		}
 	});
-	if (t.atomic ? yield* n.tryPromise({
+	if (d ? yield* n.tryPromise({
 		try: () => t.store.transactional(async (t) => {
-			let i = await n.runPromiseExit(C(t, !1));
+			let i = await n.runPromiseExit(A(t, !1));
 			if (r.isFailure(i)) throw Error(e.pretty(i.cause));
 		}),
 		catch: (e) => new R({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
-	}) : yield* C(t.store, !0), t.assets && s.assets.index && !t.assetsAlreadyRestored) {
-		let e = t.assets, r = i.join(t.bundleDir, G), a = i.join(t.bundleDir, s.assets.index ?? "assets/index.ndjson"), o = w("bundle", () => O(a)).pipe(c.decodeText(), c.splitLines, c.filter((e) => e.trim().length > 0), c.map((e) => JSON.parse(e)));
-		yield* c.runForEach(o, (t) => t.key in m.assets ? n.void : We(e, r, t).pipe(n.andThen(n.sync(() => {
-			m.assets[t.key] = !0;
-		})), n.andThen(q(f, m))));
+	}) : yield* A(t.store, !0), t.assets && s.assets.index && !t.assetsAlreadyRestored) {
+		let e = t.assets, r = i.join(t.bundleDir, G), a = i.join(t.bundleDir, s.assets.index ?? "assets/index.ndjson"), o = w("bundle", () => j(a)).pipe(c.decodeText(), c.splitLines, c.filter((e) => e.trim().length > 0), c.map((e) => JSON.parse(e)));
+		yield* c.runForEach(o, (t) => t.key in h.assets ? n.void : We(e, r, t).pipe(n.andThen(n.sync(() => {
+			h.assets[t.key] = !0;
+		})), n.andThen(q(m, h))));
 	}
-	return s;
+	return {
+		manifest: s,
+		tablesWritten: D,
+		rowsWritten: E,
+		tablesSkipped: k,
+		rowsSkipped: O,
+		fullyResumed: D === 0 && k > 0
+	};
 }), sn = (e) => e, cn = (e) => {
 	if (e.allowLive || e.liveInstance === null || e.sameTarget === "different") return { refuse: !1 };
 	let t = e.targetLabel === void 0 ? "" : ` Target: ${e.targetLabel}.`, n = e.sameTarget === "same" ? " That instance is connected to the SAME database." : " We could not confirm which database that instance is connected to, so this is refused on the conservative reading — an older instance, or one whose connection could not be parsed, reports nothing to compare.";
@@ -1227,7 +1242,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	let t = [], n = async (r) => {
 		let i;
 		try {
-			i = await ce(k(e, r), { withFileTypes: !0 });
+			i = await ae(M(e, r), { withFileTypes: !0 });
 		} catch {
 			return;
 		}
@@ -1247,8 +1262,8 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 async function* gn(e) {
 	yield new Uint8Array(Y);
 	for (let t of await pn(e.dir)) {
-		let n = k(e.dir, t), r = await le(n);
-		if (yield new Uint8Array(mn(t, r.size)), r.size > 0) for await (let e of O(n)) yield new Uint8Array(e);
+		let n = M(e.dir, t), r = await oe(n);
+		if (yield new Uint8Array(mn(t, r.size)), r.size > 0) for await (let e of j(n)) yield new Uint8Array(e);
 	}
 	if (e.blobs) for await (let t of e.blobs.list()) {
 		yield new Uint8Array(hn(t.key, t.contentType, t.size));
@@ -1263,8 +1278,8 @@ async function* gn(e) {
 	yield new Uint8Array(Buffer.from([ln]));
 }
 var _n = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vn = (e) => new Promise((t) => e.end(t)), yn = async (e, t) => {
-	let n = pe(t.dir);
-	await se(n, { recursive: !0 });
+	let n = ue(t.dir);
+	await ie(n, { recursive: !0 });
 	let r = Buffer.alloc(0), i = e[Symbol.asyncIterator](), a = !1, o = async () => {
 		let { value: e, done: t } = await i.next();
 		return t ? (a = !0, !1) : (r = r.length === 0 ? Buffer.from(e) : Buffer.concat([r, Buffer.from(e)]), !0);
@@ -1286,10 +1301,10 @@ var _n = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vn
 				await s(e);
 				let t = c(e).toString("utf8");
 				await s(8);
-				let i = c(8).readBigUInt64BE(0), a = pe(n, t);
-				if (a !== n && !a.startsWith(n + me)) throw Error(`archive path '${t}' escapes the destination`);
-				await se(fe(a), { recursive: !0 });
-				let o = ie(a);
+				let i = c(8).readBigUInt64BE(0), a = ue(n, t);
+				if (a !== n && !a.startsWith(n + de)) throw Error(`archive path '${t}' escapes the destination`);
+				await ie(le(a), { recursive: !0 });
+				let o = te(a);
 				for (; i > 0n;) {
 					r.length === 0 && await s(1);
 					let e = i < BigInt(r.length) ? Number(i) : r.length;
@@ -1306,7 +1321,7 @@ var _n = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vn
 				await s(i);
 				let a = c(i).toString("utf8");
 				await s(8);
-				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = y("sha256"), d = new D(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
+				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = y("sha256"), d = new k(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
 					contentType: a,
 					size: Number(o)
 				}), p = o;
@@ -1364,14 +1379,14 @@ var _n = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vn
 	return {
 		has: async (e) => t.has(e),
 		write: async (n, r, i) => {
-			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = k(e, "assets");
-			await se(c, { recursive: !0 });
+			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = M(e, "assets");
+			await ie(c, { recursive: !0 });
 			let l = y("sha256"), u = 0, d = new s({ transform(e, t, n) {
 				l.update(e), u += e.length, n(null, e);
-			} }), f = k(c, `.tmp-${Date.now()}-${t.size}`);
-			await o(r, d, ie(f));
+			} }), f = M(c, `.tmp-${Date.now()}-${t.size}`);
+			await o(r, d, te(f));
 			let p = l.digest("hex");
-			await a.rename(f, k(c, p)), await a.appendFile(k(c, "index.ndjson"), `${JSON.stringify({
+			await a.rename(f, M(c, p)), await a.appendFile(M(c, "index.ndjson"), `${JSON.stringify({
 				key: n,
 				sha256: p,
 				size: u,
@@ -1379,7 +1394,7 @@ var _n = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vn
 			})}\n`), t.add(n);
 		}
 	};
-}, Cn = he(S), wn = Buffer.from("VENC1\0\0\0"), Tn = 32, En = 16, Dn = 7, X = 16, On = 262144, Z = {
+}, Cn = fe(S), wn = Buffer.from("VENC1\0\0\0"), Tn = 32, En = 16, Dn = 7, X = 16, On = 262144, Z = {
 	N: 32768,
 	r: 8,
 	p: 1
@@ -1457,7 +1472,7 @@ var Nn = (e, t) => ({
 		} };
 	},
 	open: (t) => ({ async *[Symbol.asyncIterator]() {
-		let r = await n.runPromise(T(e, t)), i = await te(r.stream);
+		let r = await n.runPromise(T(e, t)), i = await D(r.stream);
 		for await (let e of i) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 	} })
 }), Pn = (e, t) => Nn(e, () => h(t, {
@@ -1470,8 +1485,8 @@ var Nn = (e, t) => ({
 })))), Fn = (e) => ({
 	has: (t) => n.runPromise(e.head(t).pipe(n.map((e) => e !== null))),
 	write: async (t, r, i) => {
-		let a = w("storage", () => ne.from(r));
-		await n.runPromise(ee(e, t, a, {
+		let a = w("storage", () => A.from(r));
+		await n.runPromise(E(e, t, a, {
 			contentType: i.contentType,
 			totalSize: i.size
 		}));
@@ -1479,7 +1494,7 @@ var Nn = (e, t) => ({
 }), In = (e, t) => {
 	let n = t === "dump" ? "mariadb-dump" : "mariadb", r = t === "dump" ? "mysqldump" : "mysql";
 	return e === "mariadb" && Ln(n) ? n : r;
-}, Ln = (e) => (process.env.PATH ?? "").split(de).filter((e) => e !== "").some((t) => ae(k(t, e))), Rn = (e) => {
+}, Ln = (e) => (process.env.PATH ?? "").split(ce).filter((e) => e !== "").some((t) => ne(M(t, e))), Rn = (e) => {
 	switch (e) {
 		case "postgres": return "db.dump";
 		case "mysql":
@@ -1680,12 +1695,12 @@ var Nn = (e, t) => ({
 		});
 	}
 }, Un = (e) => e.kind === "copy" ? n.async((t) => {
-	re(e.from, e.to, (r) => t(r ? n.fail(new V({
+	ee(e.from, e.to, (r) => t(r ? n.fail(new V({
 		tool: "copy",
 		reason: `copy ${e.from} → ${e.to}: ${r.message}`
 	})) : n.void));
 }) : n.async((t) => {
-	let r = ge(e.tool, [...e.args], {
+	let r = pe(e.tool, [...e.args], {
 		env: {
 			...process.env,
 			...e.env
@@ -1698,10 +1713,10 @@ var Nn = (e, t) => ({
 	}), i = "";
 	r.stderr?.on("data", (e) => {
 		i += String(e);
-	}), e.stdoutFile && r.stdout && r.stdout.pipe(ie(e.stdoutFile)), e.stdinFile && r.stdin && O(e.stdinFile).pipe(r.stdin);
+	}), e.stdoutFile && r.stdout && r.stdout.pipe(te(e.stdoutFile)), e.stdinFile && r.stdin && j(e.stdinFile).pipe(r.stdin);
 	let a = () => {
 		if (e.stdoutFile !== void 0) try {
-			oe(e.stdoutFile);
+			re(e.stdoutFile);
 		} catch {}
 	};
 	r.on("error", (r) => {
@@ -1716,7 +1731,7 @@ var Nn = (e, t) => ({
 		}
 		a(), t(n.fail(new V({
 			tool: e.tool,
-			reason: `exited with code ${r}` + (e.stdoutFile === void 0 ? "" : ` — the partial ${ue(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
+			reason: `exited with code ${r}` + (e.stdoutFile === void 0 ? "" : ` — the partial ${se(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
 			stderr: i.slice(-2e3)
 		})));
 	});
@@ -1724,7 +1739,7 @@ var Nn = (e, t) => ({
 	let t = yield* Be(e.scope ?? { kind: "all" }, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), r = At(t.tables, e.snapshot), i = e.classification ?? A(e.snapshot), a = e.sampleSize ?? 20, o = I(r.map((t) => ({
+	}), r = At(t.tables, e.snapshot), i = e.classification ?? N(e.snapshot), a = e.sampleSize ?? 20, o = Ee(r.map((t) => ({
 		name: t,
 		columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 			name: e.name,
@@ -1736,8 +1751,8 @@ var Nn = (e, t) => ({
 			table: i,
 			chunkSize: a,
 			...r === void 0 ? {} : { where: r }
-		}).pipe(c.take(a), c.runCollect, n.map((e) => [...e])), d = u.map((t) => L(t, i, o.actions, e.masking.seed));
-		l.push(...ke(d, i, o.actions));
+		}).pipe(c.take(a), c.runCollect, n.map((e) => [...e])), d = u.map((t) => ke(t, i, o.actions, e.masking.seed));
+		l.push(...Oe(d, i, o.actions));
 		let f = u[0], p = d[0], m = [];
 		if (f && p) for (let [e, t] of Object.entries(o.actions)) {
 			if (!e.startsWith(`${i}.`) || t === "keep") continue;
@@ -1825,4 +1840,4 @@ var Nn = (e, t) => ({
 	return n.push(""), n.push(`  discarded: ${r("value-dropped")}   defaulted: ${r("filled-by-default")}   refused: ${r("refuse")}`), e.refuse && (n.push(""), n.push("  REFUSED — no row was written. These are the differences that would make"), n.push("  imported rows WRONG rather than merely incomplete.")), n;
 };
 //#endregion
-export { G as ASSETS_DIR, at as ASSET_INDEX_FILE, R as BundleError, Ae as CodecError, je as CompressionError, Ie as CrossDialectError, it as DATA_DIR, ve as DEFAULT_CLASS_ACTIONS, Xe as FORMAT_VERSION, Fe as ImportModeError, z as IntegrityError, ot as LEDGER_FILE, W as MANIFEST_FILE, Pe as MaskingError, V as NativeToolError, Me as RowsRefusedError, rn as SAVEPOINT_BATCH_SIZE, Ne as SchemaDriftError, B as ScopeError, Ee as applyAction, cn as assessLiveImport, gt as assetDone, Rn as backupArtifactName, Vn as backupCommand, Wt as canonicalType, qt as checkPortability, nn as checkSchemaDrift, A as classificationFromSnapshot, Kn as classifyImportDrift, qe as compressionExt, Re as computeSubsetIds, nt as decodeManifest, Et as decodeRow, wt as decodeValue, Mn as decryptStream, sn as defineDataProfile, tn as diffSnapshots, Sn as dirBlobSink, pt as emptyLedger, tt as encodeManifest, Tt as encodeRow, St as encodeValue, jn as encryptStream, qn as formatImportDrift, Jt as formatIssue, Ge as hasZstd, Je as makeCompressor, Ye as makeDecompressor, L as maskRow, kt as ndjsonToRows, Ut as outsideReferenceRefusal, Ht as outsideReferencesInto, gn as packBundle, bn as peekBundle, Ke as pickCompression, I as planMasking, Gn as previewMasking, mt as readLedger, ye as resolveAction, Be as resolveScope, We as restoreAssetFromCas, Hn as restoreCommand, Ot as rowsToNdjson, Vt as runExport, on as runImport, Un as runNativeStep, ke as scanForLeaks, He as storageAssetSink, Ve as storageAssetSource, Fn as storageBlobSink, Nn as storageBlobSource, Pn as storageRefsBlobSource, ze as subsetToScope, ht as tableDone, At as topoSortTables, yn as unpackBundle, xn as unpackBundleToDir, Ue as writeAssetToCas, q as writeLedger };
+export { G as ASSETS_DIR, at as ASSET_INDEX_FILE, R as BundleError, Ae as CodecError, je as CompressionError, Ie as CrossDialectError, it as DATA_DIR, he as DEFAULT_CLASS_ACTIONS, Xe as FORMAT_VERSION, Fe as ImportModeError, z as IntegrityError, ot as LEDGER_FILE, W as MANIFEST_FILE, Pe as MaskingError, V as NativeToolError, Me as RowsRefusedError, rn as SAVEPOINT_BATCH_SIZE, Ne as SchemaDriftError, B as ScopeError, we as applyAction, cn as assessLiveImport, gt as assetDone, Rn as backupArtifactName, Vn as backupCommand, Wt as canonicalType, qt as checkPortability, nn as checkSchemaDrift, N as classificationFromSnapshot, Kn as classifyImportDrift, qe as compressionExt, Re as computeSubsetIds, nt as decodeManifest, Et as decodeRow, wt as decodeValue, Mn as decryptStream, sn as defineDataProfile, tn as diffSnapshots, Sn as dirBlobSink, pt as emptyLedger, tt as encodeManifest, Tt as encodeRow, St as encodeValue, jn as encryptStream, qn as formatImportDrift, Jt as formatIssue, Ge as hasZstd, Je as makeCompressor, Ye as makeDecompressor, ke as maskRow, kt as ndjsonToRows, Ut as outsideReferenceRefusal, Ht as outsideReferencesInto, gn as packBundle, bn as peekBundle, Ke as pickCompression, Ee as planMasking, Gn as previewMasking, mt as readLedger, ge as resolveAction, Be as resolveScope, We as restoreAssetFromCas, Hn as restoreCommand, Ot as rowsToNdjson, Vt as runExport, on as runImport, Un as runNativeStep, Oe as scanForLeaks, He as storageAssetSink, Ve as storageAssetSource, Fn as storageBlobSink, Nn as storageBlobSource, Pn as storageRefsBlobSource, ze as subsetToScope, ht as tableDone, At as topoSortTables, yn as unpackBundle, xn as unpackBundleToDir, Ue as writeAssetToCas, q as writeLedger };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/data-transfer",
-  "version": "0.43.2",
+  "version": "0.44.0",
   "description": "Portable export/import for a Voltro app's data + assets — typed-NDJSON row codec, content-addressed assets, framed compression, a resumable chunk ledger, and FK-ordered idempotent import. Dialect-agnostic; the resilient backbone under `voltro data export|import` and native backups.",
   "keywords": [
     "voltro",
@@ -33,8 +33,8 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@voltro/database": "0.43.2",
-    "@voltro/plugin-storage": "0.43.2"
+    "@voltro/database": "0.44.0",
+    "@voltro/plugin-storage": "0.44.0"
   },
   "peerDependencies": {
     "effect": "^3.22.0"