@voltro/data-transfer 0.44.1 → 0.46.0

package/dist/index.js

@@ -1,17 +1,18 @@
-import { Cause as e, Data as t, Effect as n, Exit as r, Metric as i, MetricBoundaries as a, Schedule as o, Schema as s, Stream as c } from "effect";
-import { classifyConstraintViolation as l, eq as u, extractDbCause as d, inSet as f, isNotNull as p, or as m, streamTable as h } from "@voltro/database";
-import { fingerprintSchema as g } from "@voltro/database/sql";
-import { createCipheriv as _, createDecipheriv as v, createHash as y, createHmac as b, randomBytes as x, scrypt as S } from "node:crypto";
-import { STORAGE_REFS_TABLE as C, fromNodeReadable as w, getObjectStream as T, putObjectStream as E, toNodeReadable as D } from "@voltro/plugin-storage";
-import * as O from "node:zlib";
-import { PassThrough as k, Readable as ee } from "node:stream";
-import { copyFile as A, createReadStream as j, createWriteStream as M, existsSync as te, unlinkSync as ne } from "node:fs";
-import { mkdir as re, readdir as ie, stat as ae } from "node:fs/promises";
-import { basename as oe, delimiter as se, dirname as ce, join as N, resolve as le, sep as ue } from "node:path";
-import { promisify as de } from "node:util";
-import { spawn as fe } from "node:child_process";
+import { Cause as e, Data as t, Effect as n, Exit as r, Metric as i, MetricBoundaries as a, Runtime as o, Schedule as s, Schema as c, Stream as l } from "effect";
+import { REPLACE_IN_PROGRESS_TABLE as u, classifyConstraintViolation as d, derivedRowId as f, eq as p, extractDbCause as m, getTable as h, inSet as g, isNotNull as _, or as v, recordsTable as y, registerTable as b, streamTable as x, unregisterTable as S } from "@voltro/database";
+import { fingerprintSchema as C } from "@voltro/database/sql";
+import { createCipheriv as w, createDecipheriv as T, createHash as E, createHmac as ee, randomBytes as te, scrypt as ne } from "node:crypto";
+import { STORAGE_REFS_TABLE as re, fromNodeReadable as ie, getObjectStream as D, putObjectStream as O, toNodeReadable as k } from "@voltro/plugin-storage";
+import * as A from "node:zlib";
+import { PassThrough as j, Readable as ae } from "node:stream";
+import { copyFile as oe, createReadStream as se, createWriteStream as M, existsSync as ce, unlinkSync as le } from "node:fs";
+import { SqlClient as N } from "@effect/sql";
+import { mkdir as ue, readdir as de, stat as P } from "node:fs/promises";
+import { basename as fe, delimiter as pe, dirname as me, join as F, resolve as he, sep as ge } from "node:path";
+import { promisify as _e } from "node:util";
+import { spawn as ve } from "node:child_process";
 //#region src/consistency.ts
-var pe = (e) => {
+var ye = (e) => {
 	switch (e) {
 		case "postgres": return ["SET TRANSACTION ISOLATION LEVEL REPEATABLE READ"];
 		case "mysql":
@@ -21,7 +22,7 @@ var pe = (e) => {
 		case "turso": return [];
 		default: return [];
 	}
-}, me = {
+}, be = {
 	email: { fake: "email" },
 	fullName: { fake: "fullName" },
 	firstName: { fake: "firstName" },
@@ -36,7 +37,7 @@ var pe = (e) => {
 	date: "dateShift",
 	secret: "null",
 	freeText: "redact"
-}, he = (e) => {
+}, xe = (e) => {
 	let t = {};
 	for (let n of e.tables) {
 		let e = {};
@@ -48,15 +49,15 @@ var pe = (e) => {
 		t[n.name] = e;
 	}
 	return t;
-}, ge = (e, t, n, r) => {
+}, Se = (e, t, n, r) => {
 	let i = r.columns?.[`${e}.${t}`];
 	if (i) return i;
 	if (n?.sensitive) {
 		let e = n.sensitive.class;
-		return r.classes?.[e] ?? me[e] ?? "redact";
+		return r.classes?.[e] ?? be[e] ?? "redact";
 	}
 	return n?.safe ? r.onSafe ?? "keep" : n?.columnType === "id" || n?.columnType === "reference" ? "keep" : r.onUnclassified ?? "error";
-}, _e = (e, t) => b("sha256", e).update(t == null ? "∅" : String(t)).digest(), P = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), F = [
+}, Ce = (e, t) => ee("sha256", e).update(t == null ? "∅" : String(t)).digest(), I = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), L = [
 	"Ada",
 	"Alan",
 	"Grace",
@@ -69,7 +70,7 @@ var pe = (e) => {
 	"Guido",
 	"Margaret",
 	"Bjarne"
-], ve = [
+], we = [
 	"Lovelace",
 	"Turing",
 	"Hopper",
@@ -82,7 +83,7 @@ var pe = (e) => {
 	"Rossum",
 	"Hamilton",
 	"Stroustrup"
-], ye = [
+], Te = [
 	"Maple",
 	"Oak",
 	"Cedar",
@@ -91,7 +92,7 @@ var pe = (e) => {
 	"Birch",
 	"Willow",
 	"Ash"
-], be = [
+], Ee = [
 	"Initech",
 	"Hooli",
 	"Umbrella",
@@ -100,23 +101,23 @@ var pe = (e) => {
 	"Soylent",
 	"Stark",
 	"Wayne"
-], I = (e, t, n) => e[P(t, n) % e.length], xe = (e, t, n) => {
-	let r = _e(n, `${e}:${String(t)}`), i = P(r, 1) % 1e4;
+], R = (e, t, n) => e[I(t, n) % e.length], De = (e, t, n) => {
+	let r = Ce(n, `${e}:${String(t)}`), i = I(r, 1) % 1e4;
 	switch (e) {
-		case "email": return `${I(F, r, 0).toLowerCase()}.${I(ve, r, 2).toLowerCase()}${i}@example.com`;
-		case "fullName": return `${I(F, r, 0)} ${I(ve, r, 1)}`;
-		case "firstName": return I(F, r, 0);
-		case "lastName": return I(ve, r, 1);
-		case "username": return `${I(F, r, 0).toLowerCase()}${i}`;
-		case "phone": return `+1${String(P(r, 0) % 1e10).padStart(10, "0")}`;
-		case "address": return `${P(r, 0) % 9899 + 100} ${I(ye, r, 1)} St`;
-		case "company": return I(be, r, 0);
+		case "email": return `${R(L, r, 0).toLowerCase()}.${R(we, r, 2).toLowerCase()}${i}@example.com`;
+		case "fullName": return `${R(L, r, 0)} ${R(we, r, 1)}`;
+		case "firstName": return R(L, r, 0);
+		case "lastName": return R(we, r, 1);
+		case "username": return `${R(L, r, 0).toLowerCase()}${i}`;
+		case "phone": return `+1${String(I(r, 0) % 1e10).padStart(10, "0")}`;
+		case "address": return `${I(r, 0) % 9899 + 100} ${R(Te, r, 1)} St`;
+		case "company": return R(Ee, r, 0);
 		case "url": return `https://example.com/${r.toString("hex").slice(0, 12)}`;
-		case "ip": return `${P(r, 0) % 256}.${P(r, 1) % 256}.${P(r, 2) % 256}.${P(r, 3) % 254 + 1}`;
-		case "creditCard": return Se(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
+		case "ip": return `${I(r, 0) % 256}.${I(r, 1) % 256}.${I(r, 2) % 256}.${I(r, 3) % 254 + 1}`;
+		case "creditCard": return Oe(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
 		default: return `${e}_${r.toString("hex").slice(0, 8)}`;
 	}
-}, Se = (e) => {
+}, Oe = (e) => {
 	let t = e.slice(0, 15).split("").map(Number), n = 0;
 	t.forEach((e, t) => {
 		let r = e;
@@ -124,31 +125,31 @@ var pe = (e) => {
 	});
 	let r = (10 - n % 10) % 10;
 	return e.slice(0, 15) + String(r);
-}, Ce = 864e5, we = (e, t) => {
+}, ke = 864e5, Ae = (e, t) => {
 	let n = e instanceof Date ? e.getTime() : Date.parse(String(e));
 	if (Number.isNaN(n)) return e;
-	let r = P(_e(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Ce);
+	let r = I(Ce(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * ke);
 	return e instanceof Date ? i : i.toISOString();
-}, Te = (e, t) => {
+}, je = (e, t) => {
 	if (t.value === null || t.value === void 0) return null;
 	if (e === "error") throw Error(`masking: unresolved 'error' action for ${t.table}.${t.column}`);
 	if (e === "keep") return t.value;
 	if (e === "null") return null;
 	if (e === "redact") return t.columnType === "text" || typeof t.value == "string" ? "[redacted]" : null;
-	if (e === "hash") return _e(t.seed, t.value).toString("hex").slice(0, 16);
-	if (e === "dateShift") return we(t.value, t.seed);
-	if (typeof e == "object" && "fake" in e) return xe(e.fake, t.value, t.seed);
+	if (e === "hash") return Ce(t.seed, t.value).toString("hex").slice(0, 16);
+	if (e === "dateShift") return Ae(t.value, t.seed);
+	if (typeof e == "object" && "fake" in e) return De(e.fake, t.value, t.seed);
 	if (typeof e == "object" && "custom" in e) return e.custom(t);
 	throw Error(`masking: '${t.table}.${t.column}' resolved to an action this build does not understand (${JSON.stringify(e)}). Refusing to copy the value through. Valid actions: 'keep' | 'null' | 'redact' | 'hash' | 'dateShift' | { fake: '<class>' } | { custom: fn }.`);
-}, Ee = (e) => typeof e == "string" ? e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error" : typeof e != "object" || !e ? !1 : "fake" in e ? typeof e.fake == "string" : "custom" in e && typeof e.custom == "function", De = (e, t, n) => {
+}, Me = (e) => typeof e == "string" ? e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error" : typeof e != "object" || !e ? !1 : "fake" in e ? typeof e.fake == "string" : "custom" in e && typeof e.custom == "function", Ne = (e, t, n) => {
 	let r = {}, i = [], a = [];
 	for (let o of e) for (let e of o.columns) {
-		let s = `${o.name}.${e.name}`, c = ge(o.name, e.name, t[o.name]?.[e.name], n);
+		let s = `${o.name}.${e.name}`, c = Se(o.name, e.name, t[o.name]?.[e.name], n);
 		if (c === "error") {
 			i.push(s);
 			continue;
 		}
-		if (!Ee(c)) {
+		if (!Me(c)) {
 			a.push({
 				column: s,
 				action: c
@@ -162,7 +163,7 @@ var pe = (e) => {
 		unclassified: i,
 		invalid: a
 	};
-}, Oe = [
+}, Pe = [
 	{
 		name: "email",
 		re: /[\w.+-]+@[\w-]+\.[\w.-]+/
@@ -179,7 +180,7 @@ var pe = (e) => {
 		name: "creditCard",
 		re: /\b(?:\d[ -]?){13,16}\b/
 	}
-], ke = (e, t, n) => {
+], Fe = (e, t, n) => {
 	let r = [], i = /* @__PURE__ */ new Set();
 	for (let [a, o] of Object.entries(n)) {
 		if (!a.startsWith(`${t}.`) || o !== "keep") continue;
@@ -187,7 +188,7 @@ var pe = (e) => {
 		for (let a of e) {
 			let e = a[n];
 			if (typeof e != "string" || e.length === 0) continue;
-			let o = Oe.find((t) => t.re.test(e));
+			let o = Pe.find((t) => t.re.test(e));
 			if (o && !i.has(n)) {
 				i.add(n), r.push({
 					table: t,
@@ -200,9 +201,9 @@ var pe = (e) => {
 		}
 	}
 	return r;
-}, Ae = (e, t, n, r, i) => {
+}, Ie = (e, t, n, r, i) => {
 	let a = {};
-	for (let [o, s] of Object.entries(e)) a[o] = Te(n[`${t}.${o}`] ?? "keep", {
+	for (let [o, s] of Object.entries(e)) a[o] = je(n[`${t}.${o}`] ?? "keep", {
 		value: s,
 		table: t,
 		column: o,
@@ -210,61 +211,77 @@ var pe = (e) => {
 		...i?.[o] ? { columnType: i[o] } : {}
 	});
 	return a;
-}, L = class extends s.TaggedError()("BundleError", {
-	reason: s.String,
-	path: s.optional(s.String)
-}) {}, je = class extends s.TaggedError()("CodecError", {
-	table: s.String,
-	reason: s.String
-}) {}, R = class extends s.TaggedError()("IntegrityError", {
-	what: s.String,
-	expected: s.String,
-	actual: s.String
-}) {}, Me = class extends t.TaggedError("CompressionError") {}, z = class extends s.TaggedError()("ScopeError", { reason: s.String }) {}, Ne = class extends s.TaggedError()("RowsRefusedError", {
-	rows: s.Array(s.Struct({
-		table: s.String,
-		id: s.String,
-		reason: s.String,
-		derived: s.Boolean
+}, Le = /* @__PURE__ */ new Map([
+	["_voltro_migration_plans", "the schema fingerprint THIS deployment applied — a foreign row makes the next boot refuse"],
+	["_voltro_migrations", "which file-based migrations ran HERE — a foreign row marks unrun migrations as done"],
+	["_voltro_seeds", "which seeds ran HERE — a foreign row suppresses seeding the target still needs"],
+	["_voltro_cdc_offsets", "binlog/WAL positions of the SOURCE server — meaningless and unsafe against another one"],
+	["_voltro_schedule_claims", "live leases held by THIS deployment's replicas — a foreign row hands out a lease nobody holds"],
+	["_voltro_replace_in_progress", "the marker a destructive import HERE left behind — a foreign row refuses a boot over a healthy database"],
+	["_voltro_wakeups", "pending wakeups addressed to THIS deployment's runners"],
+	["_voltro_workflow_watermarks", "how far a consumer has read THIS deployment's event journal — a foreign position skips events"],
+	["_voltro_workflow_pending", "starts waiting to be drained HERE — a foreign row makes the target RUN a workflow somebody queued elsewhere"],
+	["_voltro_workflow_admissions", "the in-flight accounting a concurrency gate decides on — a foreign row makes the target refuse or admit wrongly"],
+	["_voltro_workflow_pauses", "which workflows an operator paused HERE — a foreign row silently pauses them in the target"]
+]), z = (e) => Le.has(e), Re = (e) => Le.get(e), ze = (e, t) => {
+	if (e.length === 0) return;
+	let n = e.map((e) => `    ${e} — ${Re(e) ?? "describes this deployment"}`);
+	return `${t} ${e.length} table(s) that describe a deployment rather than its data:\n${n.join("\n")}\n  A row from another environment is not stale there, it is a false statement about this one.`;
+}, B = class extends c.TaggedError()("BundleError", {
+	reason: c.String,
+	path: c.optional(c.String)
+}) {}, Be = class extends c.TaggedError()("CodecError", {
+	table: c.String,
+	reason: c.String
+}) {}, Ve = class extends c.TaggedError()("IntegrityError", {
+	what: c.String,
+	expected: c.String,
+	actual: c.String
+}) {}, He = class extends t.TaggedError("CompressionError") {}, V = class extends c.TaggedError()("ScopeError", { reason: c.String }) {}, Ue = class extends c.TaggedError()("RowsRefusedError", {
+	rows: c.Array(c.Struct({
+		table: c.String,
+		id: c.String,
+		reason: c.String,
+		derived: c.Boolean
 	})),
-	primaryCount: s.Number,
-	totalCount: s.Number,
-	byTable: s.Array(s.Struct({
-		table: s.String,
-		refused: s.Number,
-		primary: s.Number
+	primaryCount: c.Number,
+	totalCount: c.Number,
+	byTable: c.Array(c.Struct({
+		table: c.String,
+		refused: c.Number,
+		primary: c.Number
 	}))
-}) {}, Pe = class extends s.TaggedError()("SchemaDriftError", {
-	bundleFingerprint: s.String,
-	targetFingerprint: s.String,
-	diff: s.Array(s.String)
-}) {}, B = class extends t.TaggedError("NativeToolError") {
+}) {}, We = class extends c.TaggedError()("SchemaDriftError", {
+	bundleFingerprint: c.String,
+	targetFingerprint: c.String,
+	diff: c.Array(c.String)
+}) {}, H = class extends t.TaggedError("NativeToolError") {
 	get message() {
 		let e = this.stderr?.trim();
 		return `${this.tool}: ${this.reason}${e ? `\n${e}` : ""}`;
 	}
-}, Fe = class extends s.TaggedError()("MaskingError", {
-	unclassified: s.Array(s.String),
-	invalidActions: s.optional(s.Array(s.String))
-}) {}, Ie = class extends s.TaggedError()("ImportModeError", {
-	mode: s.String,
-	reason: s.String
-}) {}, Le = class extends s.TaggedError()("CrossDialectError", {
-	sourceDialect: s.String,
-	targetDialect: s.String,
-	blocking: s.Array(s.String)
-}) {}, V = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", Re = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
+}, Ge = class extends c.TaggedError()("MaskingError", {
+	unclassified: c.Array(c.String),
+	invalidActions: c.optional(c.Array(c.String))
+}) {}, Ke = class extends c.TaggedError()("ImportModeError", {
+	mode: c.String,
+	reason: c.String
+}) {}, qe = class extends c.TaggedError()("CrossDialectError", {
+	sourceDialect: c.String,
+	targetDialect: c.String,
+	blocking: c.Array(c.String)
+}) {}, U = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", Je = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
 	col: e.name,
 	refTable: e.references.table
-})), ze = (e, t, r) => n.gen(function* () {
-	let i = r.maxDepth ?? 12, a = new Set(r.pinned ?? []), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), l = /* @__PURE__ */ new Map(), u = (e) => {
+})), Ye = (e, t, r) => n.gen(function* () {
+	let i = r.maxDepth ?? 12, a = new Set(r.pinned ?? []), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = /* @__PURE__ */ new Map(), u = (e) => {
 		let t = s.get(e) ?? /* @__PURE__ */ new Set();
 		return s.set(e, t), t;
 	}, d = (e, t) => {
 		if (t == null || a.has(e) || s.get(e)?.has(t)) return;
-		let n = l.get(e) ?? /* @__PURE__ */ new Set();
-		n.add(t), l.set(e, n);
-	}, p = (e, t, n) => {
+		let n = c.get(e) ?? /* @__PURE__ */ new Set();
+		n.add(t), c.set(e, n);
+	}, f = (e, t, n) => {
 		let r = u(e), i = a.has(e) ? void 0 : o.get(e) ?? (() => {
 			let t = /* @__PURE__ */ new Set();
 			return o.set(e, t), t;
@@ -273,25 +290,25 @@ var pe = (e) => {
 			r.add(e[t]), i?.add(e[t]);
 			for (let t of n) d(t.refTable, e[t.col]);
 		};
-	}, g = (r, i) => {
-		let a = p(r, V(t, r), Re(t, r));
-		return c.runForEach(h(e, {
+	}, p = (r, i) => {
+		let a = f(r, U(t, r), Je(t, r));
+		return l.runForEach(x(e, {
 			table: r,
-			pk: V(t, r),
+			pk: U(t, r),
 			...i === void 0 ? {} : { where: i }
 		}), (e) => n.sync(() => a(e)));
-	}, _ = n.gen(function* () {
-		for (let e = 0; e < i && l.size > 0; e++) {
-			let e = [...l.entries()];
-			l.clear();
+	}, m = n.gen(function* () {
+		for (let e = 0; e < i && c.size > 0; e++) {
+			let e = [...c.entries()];
+			c.clear();
 			for (let [n, r] of e) {
 				let e = [...r].filter((e) => !s.get(n)?.has(e));
-				e.length !== 0 && (yield* g(n, f(V(t, n), e)));
+				e.length !== 0 && (yield* p(n, g(U(t, n), e)));
 			}
 		}
 	});
-	for (let [e, t] of Object.entries(r.seeds)) yield* g(e, t);
-	if (yield* _, r.children) {
+	for (let [e, t] of Object.entries(r.seeds)) yield* p(e, t);
+	if (yield* m, r.children) {
 		let e = new Set(r.children === !0 ? [...s.keys()] : r.children.roots.filter((e) => s.has(e)));
 		for (let n = 0; n < i; n++) {
 			let n = !1, r = [];
@@ -301,29 +318,29 @@ var pe = (e) => {
 					refTable: e.references?.table
 				})).filter((t) => !!t.refTable && e.has(t.refTable) && (s.get(t.refTable)?.size ?? 0) > 0);
 				if (a.length === 0) continue;
-				let o = s.get(t)?.size ?? 0, c = a.map((e) => f(e.col, [...s.get(e.refTable)]));
-				yield* g(t, c.length === 1 ? c[0] : m(...c)), (s.get(t)?.size ?? 0) > o && !e.has(t) && r.push(t), (s.get(t)?.size ?? 0) > o && (n = !0);
+				let o = s.get(t)?.size ?? 0, c = a.map((e) => g(e.col, [...s.get(e.refTable)]));
+				yield* p(t, c.length === 1 ? c[0] : v(...c)), (s.get(t)?.size ?? 0) > o && !e.has(t) && r.push(t), (s.get(t)?.size ?? 0) > o && (n = !0);
 			}
 			for (let t of r) e.add(t);
-			if (yield* _, !n) break;
+			if (yield* m, !n) break;
 		}
 	}
 	return o;
-}), Be = (e, t) => ({
+}), Xe = (e, t) => ({
 	tables: [...e.keys()],
 	predicateFor: (n) => {
 		let r = e.get(n);
-		return r ? f(V(t, n), [...r]) : void 0;
+		return r ? g(U(t, n), [...r]) : void 0;
 	}
-}), H = "tenantId", Ve = (e, t, r) => n.gen(function* () {
+}), Ze = "tenantId", Qe = (e, t, r) => n.gen(function* () {
 	let i = t.tables.map((e) => e.name), a = new Map(t.tables.map((e) => [e.name, e]));
 	if (e.kind === "all") return {
-		tables: i,
+		tables: i.filter((e) => !z(e)),
 		predicateFor: () => void 0
 	};
 	if (e.kind === "tables") {
 		let t = e.tables ?? [], r = new Set(i), a = t.filter((e) => !r.has(e));
-		if (a.length > 0) return yield* n.fail(new z({ reason: `scope { kind: 'tables' } names ${a.length} table(s) that are not in the schema: ${a.join(", ")}. Refusing to write a bundle that silently omits them. Known tables: ${i.length}.` }));
+		if (a.length > 0) return yield* n.fail(new V({ reason: `scope { kind: 'tables' } names ${a.length} table(s) that are not in the schema: ${a.join(", ")}. Refusing to write a bundle that silently omits them. Known tables: ${i.length}.` }));
 		let o = new Set(t);
 		return {
 			tables: i.filter((e) => o.has(e)),
@@ -331,30 +348,30 @@ var pe = (e) => {
 		};
 	}
 	let o = e.tenantId;
-	if (o === void 0 || o === "") return yield* n.fail(new z({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
-	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === H) ?? !1);
-	if (s.length === 0) return yield* n.fail(new z({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${H}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
-	let c = yield* ze(r.store, t, {
-		seeds: Object.fromEntries(s.map((e) => [e, u(H, o)])),
+	if (o === void 0 || o === "") return yield* n.fail(new V({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
+	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === Ze) ?? !1);
+	if (s.length === 0) return yield* n.fail(new V({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${Ze}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
+	let c = yield* Ye(r.store, t, {
+		seeds: Object.fromEntries(s.map((e) => [e, p(Ze, o)])),
 		pinned: s,
 		children: { roots: s }
-	}), l = [...c.entries()].filter(([, e]) => e.size > 0).map(([e]) => e), d = new Set(s);
+	}), l = [...c.entries()].filter(([, e]) => e.size > 0).map(([e]) => e), u = new Set(s);
 	return {
 		tables: [...s, ...l],
-		predicateFor: (e) => d.has(e) ? u(H, o) : c.has(e) ? f(V(t, e), [...c.get(e)]) : void 0
+		predicateFor: (e) => u.has(e) ? p(Ze, o) : c.has(e) ? g(U(t, e), [...c.get(e)]) : void 0
 	};
-}), He = (e, t) => ({
+}), $e = (e, t) => ({
 	list: t,
-	open: (t) => T(e, t)
-}), Ue = (e) => ({
-	write: (t, n, r) => E(e, t, n, r),
+	open: (t) => D(e, t)
+}), et = (e) => ({
+	write: (t, n, r) => O(e, t, n, r),
 	has: (t) => e.head(t).pipe(n.map((e) => e !== null))
-}), We = (e, t) => n.tryPromise({
+}), tt = (e, t) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), r = await import("node:fs/promises"), { createHash: i, randomUUID: a } = await import("node:crypto"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = await import("node:path"), l = c.join(t, `.tmp-${a()}`), u = i("sha256"), d = 0, f = new s({ transform(e, t, n) {
 			u.update(e), d += e.length, n(null, e);
 		} });
-		await o(await D(e.stream), f, n(l));
+		await o(await k(e.stream), f, n(l));
 		let p = u.digest("hex"), m = c.join(t, p);
 		try {
 			await r.access(m), await r.rm(l, { force: !0 });
@@ -367,64 +384,64 @@ var pe = (e) => {
 			contentType: e.contentType
 		};
 	},
-	catch: (e) => new L({
+	catch: (e) => new B({
 		reason: `asset write failed: ${String(e?.message ?? e)}`,
 		path: t
 	})
-}), Ge = (e, t, r) => n.gen(function* () {
-	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), l = o("sha256"), u = w("bundle", () => a(s)).pipe(c.tap((e) => n.sync(() => l.update(e))));
+}), nt = (e, t, r) => n.gen(function* () {
+	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), c = o("sha256"), u = ie("bundle", () => a(s)).pipe(l.tap((e) => n.sync(() => c.update(e))));
 	yield* e.write(r.key, u, {
 		contentType: r.contentType,
 		totalSize: r.size
 	});
-	let d = l.digest("hex");
-	if (d !== r.sha256) return yield* n.fail(new R({
+	let d = c.digest("hex");
+	if (d !== r.sha256) return yield* n.fail(new Ve({
 		what: `asset ${r.key}`,
 		expected: r.sha256,
 		actual: d
 	}));
-}), Ke = () => typeof O.createZstdCompress == "function", qe = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : Ke() ? "zstd" : "gzip", Je = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", Ye = (e) => e === "zstd" ? O.createZstdCompress() : e === "gzip" ? O.createGzip() : new k(), Xe = (e) => e === "zstd" ? O.createZstdDecompress() : e === "gzip" ? O.createGunzip() : new k(), Ze = 1, Qe = s.Struct({
-	name: s.String,
-	file: s.String,
-	rowCount: s.Number,
-	checksum: s.String,
-	columnTypes: s.Record({
-		key: s.String,
-		value: s.String
+}), rt = () => typeof A.createZstdCompress == "function", it = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : rt() ? "zstd" : "gzip", at = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", ot = (e) => e === "zstd" ? A.createZstdCompress() : e === "gzip" ? A.createGzip() : new j(), st = (e) => e === "zstd" ? A.createZstdDecompress() : e === "gzip" ? A.createGunzip() : new j(), ct = 1, lt = c.Struct({
+	name: c.String,
+	file: c.String,
+	rowCount: c.Number,
+	checksum: c.String,
+	columnTypes: c.Record({
+		key: c.String,
+		value: c.String
 	}),
-	primaryKey: s.String
-}), $e = s.Struct({
-	kind: s.Literal("all", "tenant", "tables"),
-	tenantId: s.optional(s.String),
-	tables: s.optional(s.Array(s.String))
-}), et = s.Struct({
-	count: s.Number,
-	totalBytes: s.Number,
-	index: s.optional(s.String)
+	primaryKey: c.String
+}), ut = c.Struct({
+	kind: c.Literal("all", "tenant", "tables"),
+	tenantId: c.optional(c.String),
+	tables: c.optional(c.Array(c.String))
+}), dt = c.Struct({
+	count: c.Number,
+	totalBytes: c.Number,
+	index: c.optional(c.String)
 });
-s.Struct({
-	key: s.String,
-	sha256: s.String,
-	size: s.Number,
-	contentType: s.String
+c.Struct({
+	key: c.String,
+	sha256: c.String,
+	size: c.Number,
+	contentType: c.String
 });
-var tt = s.Struct({
-	formatVersion: s.Number,
-	createdAt: s.String,
-	source: s.Struct({
-		dialect: s.String,
-		schemaFingerprint: s.String
+var ft = c.Struct({
+	formatVersion: c.Number,
+	createdAt: c.String,
+	source: c.Struct({
+		dialect: c.String,
+		schemaFingerprint: c.String
 	}),
-	scope: $e,
-	consistency: s.Literal("live", "snapshot"),
-	compression: s.Literal("zstd", "gzip", "none"),
-	tables: s.Array(Qe),
-	assets: et,
-	masking: s.optional(s.Struct({
-		policyId: s.optional(s.String),
-		transformed: s.Array(s.String)
+	scope: ut,
+	consistency: c.Literal("live", "snapshot"),
+	compression: c.Literal("zstd", "gzip", "none"),
+	tables: c.Array(lt),
+	assets: dt,
+	masking: c.optional(c.Struct({
+		policyId: c.optional(c.String),
+		transformed: c.Array(c.String)
 	}))
-}), nt = s.encodeSync(s.parseJson(tt)), rt = s.decodeUnknownSync(s.parseJson(tt)), U = "manifest.json", it = "README.md", at = "data", W = "assets", ot = "assets/index.ndjson", st = ".ledger.json", ct = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", lt = (e, t) => {
+}), pt = c.encodeSync(c.parseJson(ft)), mt = c.decodeUnknownSync(c.parseJson(ft)), W = "manifest.json", ht = "README.md", gt = "data", _t = "assets", vt = "assets/index.ndjson", yt = ".ledger.json", bt = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", xt = (e, t) => {
 	let n = e.tables.reduce((e, t) => e + t.rowCount, 0), r = e.masking ? `✅ **Masked at the source** — ${e.masking.transformed.length} column(s) transformed${e.masking.policyId ? ` (policy \`${e.masking.policyId}\`)` : ""}. Personal data was replaced with realistic, referentially-consistent fakes before any byte was written.` : "⚠️ **NOT masked — this bundle contains REAL data (PII included).** Treat it as production data: do not copy it into a lower environment or share it without review. To produce a safe copy, re-export under a masking profile (`--profile`).", i = e.masking && e.masking.transformed.length > 0 ? `\n\nMasked columns: ${e.masking.transformed.map((e) => `\`${e}\``).join(", ")}.` : "", a = e.assets.count > 0 ? `${e.assets.count} object(s), ${e.assets.totalBytes} bytes` : "none", o = e.tables.map((e) => `| \`${e.name}\` | ${e.rowCount} |`).join("\n");
 	return `# Voltro data export
 
@@ -438,7 +455,7 @@ The machine-readable manifest is \`manifest.json\`; this file is a human summary
 | **Format version** | ${e.formatVersion} |
 | **Consistency** | ${e.consistency} |
 | **Compression** | ${e.compression} |
-| **Scope** | ${ct(e.scope)} |
+| **Scope** | ${bt(e.scope)} |
 | **Tables** | ${e.tables.length} |
 | **Rows (total)** | ${n} |
 | **Assets** | ${a} |
@@ -463,39 +480,39 @@ voltro data import <this-directory>
 voltro data import <this-directory> --target api --api-url <url> --token <secret>
 \`\`\`
 `;
-}, ut = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), dt = a.exponential({
+}, St = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), Ct = a.exponential({
 	start: .01,
 	factor: 2,
 	count: 16
-}), ft = i.histogram("voltro_data_transfer_table_seconds", dt, "Per-table export/import duration in seconds, tagged by phase."), G = (e, t) => {
+}), wt = i.histogram("voltro_data_transfer_table_seconds", Ct, "Per-table export/import duration in seconds, tagged by phase."), G = (e, t) => {
 	if (e) try {
 		e(t);
 	} catch {}
-}, pt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(ft.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), ut.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
+}, Tt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(wt.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), St.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
 	table: t,
 	index: r,
 	tableCount: a,
 	phase: e
-} })), mt = () => ({
+} })), Et = () => ({
 	tables: {},
 	assets: {}
-}), ht = (e) => n.tryPromise(async () => {
+}), Dt = (e) => n.tryPromise(async () => {
 	let t = await (await import("node:fs/promises")).readFile(e, "utf8");
 	return JSON.parse(t);
-}).pipe(n.orElseSucceed(mt)), K = (e, t) => n.tryPromise({
+}).pipe(n.orElseSucceed(Et)), K = (e, t) => n.tryPromise({
 	try: async () => {
 		let n = await import("node:fs/promises"), { randomUUID: r } = await import("node:crypto"), i = `${e}.tmp-${r()}`;
 		await n.writeFile(i, JSON.stringify(t)), await n.rename(i, e);
 	},
-	catch: (t) => new L({
+	catch: (t) => new B({
 		reason: `ledger write failed: ${String(t?.message ?? t)}`,
 		path: e
 	})
-}), gt = (e, t) => t in e.tables, _t = (e, t) => t in e.assets, vt = /* @__PURE__ */ new Set([
+}), Ot = (e, t) => t in e.tables, kt = (e, t) => t in e.assets, At = /* @__PURE__ */ new Set([
 	"json",
 	"array",
 	"vector"
-]), yt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", bt = (e) => Buffer.from(e).toString("base64"), xt = (e) => new Uint8Array(Buffer.from(e, "base64")), St = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), Ct = (e, t) => e == null ? null : t !== void 0 && vt.has(t) ? e : t === "bytes" ? bt(e) : t === "timestamp" || t === "date" ? St(e) : typeof e == "bigint" ? {
+]), jt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", Mt = (e) => Buffer.from(e).toString("base64"), Nt = (e) => new Uint8Array(Buffer.from(e, "base64")), Pt = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), Ft = (e, t) => e == null ? null : t !== void 0 && At.has(t) ? e : t === "bytes" ? Mt(e) : t === "timestamp" || t === "date" ? Pt(e) : typeof e == "bigint" ? {
 	$v: "bigint",
 	d: e.toString()
 } : typeof e == "number" && !Number.isFinite(e) ? {
@@ -506,30 +523,30 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	d: e.toISOString()
 } : e instanceof Uint8Array ? {
 	$v: "bytes",
-	d: bt(e)
-} : e, wt = (e) => {
+	d: Mt(e)
+} : e, It = (e) => {
 	switch (e.$v) {
 		case "bigint": return BigInt(e.d);
 		case "number": return Number(e.d);
 		case "date": return new Date(e.d);
-		case "bytes": return xt(e.d);
+		case "bytes": return Nt(e.d);
 		default: return e;
 	}
-}, Tt = (e, t) => e == null ? null : t !== void 0 && vt.has(t) ? e : yt(e) ? wt(e) : t === "bytes" ? xt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, Et = (e, t) => {
+}, Lt = (e, t) => e == null ? null : t !== void 0 && At.has(t) ? e : jt(e) ? It(e) : t === "bytes" ? Nt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, Rt = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = Ct(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = Ft(i, t[r]);
 	return n;
-}, Dt = (e, t) => {
+}, zt = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = Tt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = Lt(i, t[r]);
 	return n;
-}, Ot = new TextEncoder(), kt = (e, t) => e.pipe(c.map((e) => Ot.encode(`${JSON.stringify(Et(e, t))}\n`))), At = (e, t, r) => e.pipe(c.decodeText(), c.splitLines, c.filter((e) => e.trim().length > 0), c.mapEffect((e) => n.try({
-	try: () => Dt(JSON.parse(e), r),
-	catch: (e) => new je({
+}, Bt = new TextEncoder(), Vt = (e, t) => e.pipe(l.map((e) => Bt.encode(`${JSON.stringify(Rt(e, t))}\n`))), Ht = (e, t, r) => e.pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.mapEffect((e) => n.try({
+	try: () => zt(JSON.parse(e), r),
+	catch: (e) => new Be({
 		table: t,
 		reason: String(e?.message ?? e)
 	})
-}))), jt = (e, t) => {
+}))), Ut = (e, t) => {
 	let n = new Set(e), r = /* @__PURE__ */ new Map();
 	for (let e of t.tables) {
 		if (!n.has(e.name)) continue;
@@ -555,42 +572,42 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	let r = typeof t?.message == "string" ? t.message.trim() : "";
 	if (r === "" ? t?.cause !== void 0 && t.cause !== null && n.push(q(t.cause)) : n.push(r), n.length === 0) {
 		let t = String(e ?? "").trim();
-		return t === "" || t === "[object Object]" ? Mt(e) : t;
+		return t === "" || t === "[object Object]" ? Wt(e) : t;
 	}
 	return n.join(": ");
-}, Mt = (e) => {
+}, Wt = (e) => {
 	try {
 		let t = JSON.stringify(e);
 		return t === void 0 || t === "{}" ? "unknown error (no message, cause or tag)" : t;
 	} catch {
 		return "unknown error (not serialisable)";
 	}
-}, Nt = (e, t) => {
+}, Gt = (e, t) => {
 	let n = e.tables.find((e) => e.name === t), r = {};
 	for (let e of n?.columns ?? []) e.generatedAs === void 0 && (r[e.name] = e.type);
 	return r;
-}, Pt = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), Ft = (e, t) => {
+}, Kt = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), qt = (e, t) => {
 	if (t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, It = (e, t) => {
+}, Jt = (e, t) => {
 	let n = e.tables.find((e) => e.name === t);
 	if (n === void 0) return { refusal: `${t}: not in the schema snapshot, so its primary key is unknown.` };
 	let r = n.columns.find((e) => e.type === "id");
 	if (r !== void 0) return { column: r.name };
 	let i = n.indexes.find((e) => e.name === `${t}_pkey`)?.columns ?? n.primaryKey ?? [];
 	return i.length === 1 ? { column: i[0] } : i.length > 1 ? { refusal: `${t}: composite primary key (${i.join(", ")}). Keyset export orders by ONE column; ordering by the first alone would split equal values across pages and drop or duplicate rows. Exclude this table from the scope, or give it a single-column key.` } : { refusal: `${t}: no primary key, so there is no stable order to paginate by. A keyset export would return rows in an order the database may change between pages. Exclude this table from the scope.` };
-}, Lt = (e, t, r) => n.tryPromise({
+}, Yt = (e, t, r) => n.tryPromise({
 	try: async () => {
-		let { createWriteStream: n } = await import("node:fs"), i = await import("node:fs/promises"), { createHash: a, randomUUID: o } = await import("node:crypto"), { pipeline: s } = await import("node:stream/promises"), { Readable: l, Transform: u } = await import("node:stream"), d = a("sha256"), f = 0, p = new u({ transform(e, t, n) {
+		let { createWriteStream: n } = await import("node:fs"), i = await import("node:fs/promises"), { createHash: a, randomUUID: o } = await import("node:crypto"), { pipeline: s } = await import("node:stream/promises"), { Readable: c, Transform: u } = await import("node:stream"), d = a("sha256"), f = 0, p = new u({ transform(e, t, n) {
 			d.update(e);
 			let r = e;
 			for (let e = 0; e < r.length; e++) r[e] === 10 && f++;
 			n(null, e);
-		} }), m = l.fromWeb(c.toReadableStream(e)), h = `${t}.tmp-${o()}`;
+		} }), m = c.fromWeb(l.toReadableStream(e)), h = `${t}.tmp-${o()}`;
 		try {
-			await s(m, p, Ye(r), n(h)), await i.rename(h, t);
+			await s(m, p, ot(r), n(h)), await i.rename(h, t);
 		} catch (e) {
 			throw await i.rm(h, { force: !0 }).catch(() => {}), e;
 		}
@@ -599,25 +616,25 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			checksum: d.digest("hex")
 		};
 	},
-	catch: (e) => new L({
+	catch: (e) => new B({
 		reason: `write table failed: ${q(e)}`,
 		path: t
 	})
-}), Rt = (e, t) => n.tryPromise({
+}), Xt = (e, t) => n.tryPromise({
 	try: async () => {
 		await (await import("node:fs/promises")).appendFile(e, `${t}\n`);
 	},
-	catch: (t) => new L({
+	catch: (t) => new B({
 		reason: `append failed: ${q(t)}`,
 		path: e
 	})
-}), zt = (e, t) => n.gen(function* () {
+}), Zt = (e, t) => n.gen(function* () {
 	let r = [], i = t.ordered.length;
 	for (let a = 0; a < t.ordered.length; a++) {
-		let o = t.ordered[a], s = Nt(t.snapshot, o), l = It(t.snapshot, o);
-		if ("refusal" in l) return yield* n.fail(new z({ reason: `export: ${l.refusal}` }));
-		let u = l.column, d = `${at}/${o}.ndjson${Je(t.compression)}`;
-		if (gt(t.ledger, o)) {
+		let o = t.ordered[a], s = Gt(t.snapshot, o), c = Jt(t.snapshot, o);
+		if ("refusal" in c) return yield* n.fail(new V({ reason: `export: ${c.refusal}` }));
+		let u = c.column, d = `${gt}/${o}.ndjson${at(t.compression)}`;
+		if (Ot(t.ledger, o)) {
 			let e = t.ledger.tables[o];
 			G(t.onProgress, {
 				phase: "export",
@@ -645,149 +662,149 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			event: "start",
 			rowsDone: 0
 		});
-		let f = t.resolved.predicateFor(o), p = h(e, {
+		let f = t.resolved.predicateFor(o), p = x(e, {
 			table: o,
 			pk: u,
 			chunkSize: t.chunkSize,
 			retry: t.retry,
 			...f === void 0 ? {} : { where: f }
-		}), m = Pt(t.snapshot, o), g = m.length === 0 ? p : p.pipe(c.map((e) => Ft(e, m))), _ = t.mask ? g.pipe(c.map((e) => Ae(e, o, t.mask.actions, t.mask.seed, s))) : g, { rowCount: v, checksum: y } = yield* pt("export", o, a, i, (e) => e.rowCount, Lt(kt(_, s), t.bundleFile(d), t.compression));
+		}), m = Kt(t.snapshot, o), h = m.length === 0 ? p : p.pipe(l.map((e) => qt(e, m))), g = t.mask ? h.pipe(l.map((e) => Ie(e, o, t.mask.actions, t.mask.seed, s))) : h, { rowCount: _, checksum: v } = yield* Tt("export", o, a, i, (e) => e.rowCount, Yt(Vt(g, s), t.bundleFile(d), t.compression));
 		t.ledger.tables[o] = {
-			rowCount: v,
-			checksum: y
+			rowCount: _,
+			checksum: v
 		}, yield* K(t.ledgerPath, t.ledger), G(t.onProgress, {
 			phase: "export",
 			table: o,
 			index: a,
 			tableCount: i,
 			event: "done",
-			rowsDone: v,
-			total: v
+			rowsDone: _,
+			total: _
 		}), r.push({
 			name: o,
 			file: d,
-			rowCount: v,
-			checksum: y,
+			rowCount: _,
+			checksum: v,
 			columnTypes: s,
 			primaryKey: u
 		});
 	}
 	return r;
-}), Bt = (e) => ({
+}), Qt = (e) => ({
 	_tag: "RawSqlFragment",
 	strings: [e],
 	values: []
-}), Vt = (t, i, a) => n.tryPromise({
+}), $t = (t, i, a) => n.tryPromise({
 	try: () => t.transactional(async (t) => {
-		if (t.raw) for (let e of pe(i)) await t.raw(Bt(e));
+		if (t.raw) for (let e of ye(i)) await t.raw(Qt(e));
 		let o = await n.runPromiseExit(a(t));
 		if (r.isFailure(o)) throw Error(e.pretty(o.cause));
 		return o.value;
 	}),
-	catch: (e) => e instanceof L ? e : new L({ reason: `snapshot export failed: ${q(e)}` })
-}), Ht = (e) => n.gen(function* () {
-	let t = e.scope ?? { kind: "all" }, r = qe(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, s = o.exponential("50 millis").pipe(o.jittered, o.intersect(o.recurs(a))), l = yield* n.promise(() => import("node:path")), u = (t) => l.join(e.outDir, t);
+	catch: (e) => e instanceof B ? e : new B({ reason: `snapshot export failed: ${q(e)}` })
+}), en = (e) => n.gen(function* () {
+	let t = e.scope ?? { kind: "all" }, r = it(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, o = s.exponential("50 millis").pipe(s.jittered, s.intersect(s.recurs(a))), c = yield* n.promise(() => import("node:path")), u = (t) => c.join(e.outDir, t);
 	yield* n.tryPromise({
 		try: async () => {
 			let t = await import("node:fs/promises");
-			await t.mkdir(u(at), { recursive: !0 }), e.assets && await t.mkdir(u(W), { recursive: !0 });
+			await t.mkdir(u(gt), { recursive: !0 }), e.assets && await t.mkdir(u(_t), { recursive: !0 });
 		},
-		catch: (t) => new L({
+		catch: (t) => new B({
 			reason: `mkdir failed: ${q(t)}`,
 			path: e.outDir
 		})
 	});
-	let d = u(st), f = yield* ht(d), p = e.subset ? Be(yield* ze(e.store, e.snapshot, e.subset), e.snapshot) : yield* Ve(t, e.snapshot, {
+	let d = u(yt), f = yield* Dt(d), p = e.subset ? Xe(yield* Ye(e.store, e.snapshot, e.subset), e.snapshot) : yield* Qe(t, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), m = jt(p.tables, e.snapshot), h = e.consistency ?? "live", _, v;
+	}), m = Ut(p.tables, e.snapshot), h = e.consistency ?? "live", g, _;
 	if (e.masking) {
-		let t = e.classification ?? he(e.snapshot), r = De(m.map((t) => ({
+		let t = e.classification ?? xe(e.snapshot), r = Ne(m.map((t) => ({
 			name: t,
 			columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 				name: e.name,
 				type: e.type
 			}))
 		})), t, e.masking);
-		if (r.unclassified.length > 0 || r.invalid.length > 0) return yield* n.fail(new Fe({
+		if (r.unclassified.length > 0 || r.invalid.length > 0) return yield* n.fail(new Ge({
 			unclassified: r.unclassified,
 			...r.invalid.length > 0 ? { invalidActions: r.invalid.map((e) => `${e.column}: ${JSON.stringify(e.action)}`) } : {}
 		}));
-		v = {
+		_ = {
 			actions: r.actions,
 			seed: e.masking.seed
 		};
 		let i = Object.entries(r.actions).filter(([, e]) => e !== "keep").map(([e]) => e);
-		_ = {
+		g = {
 			...e.masking.id ? { policyId: e.masking.id } : {},
 			transformed: i
 		};
 	}
-	let y = {
+	let v = {
 		snapshot: e.snapshot,
 		ordered: m,
 		resolved: p,
 		compression: r,
 		chunkSize: i,
-		retry: s,
+		retry: o,
 		ledger: f,
 		ledgerPath: d,
 		bundleFile: u,
-		...v ? { mask: v } : {},
+		..._ ? { mask: _ } : {},
 		...e.onProgress ? { onProgress: e.onProgress } : {}
-	}, b = h === "snapshot" ? yield* Vt(e.store, e.dialect, (e) => zt(e, y)) : yield* zt(e.store, y), x = 0, S = 0;
+	}, y = h === "snapshot" ? yield* $t(e.store, e.dialect, (e) => Zt(e, v)) : yield* Zt(e.store, v), b = 0, x = 0;
 	if (e.assets) {
-		let t = u(ot);
-		yield* c.runForEach(e.assets.list(), (r) => r.key in f.assets ? n.void : e.assets.open(r.key).pipe(n.flatMap((e) => We(e, u(W))), n.flatMap((e) => {
+		let t = u(vt);
+		yield* l.runForEach(e.assets.list(), (r) => r.key in f.assets ? n.void : e.assets.open(r.key).pipe(n.flatMap((e) => tt(e, u(_t))), n.flatMap((e) => {
 			let i = {
 				key: r.key,
 				sha256: e.sha256,
 				size: e.size,
 				contentType: e.contentType
 			};
-			return x++, S += e.size, f.assets[r.key] = !0, Rt(t, JSON.stringify(i)).pipe(n.andThen(K(d, f)));
-		}))).pipe(n.mapError((e) => e instanceof L ? e : new L({ reason: `asset export failed: ${String(e)}` })));
+			return b++, x += e.size, f.assets[r.key] = !0, Xt(t, JSON.stringify(i)).pipe(n.andThen(K(d, f)));
+		}))).pipe(n.mapError((e) => e instanceof B ? e : new B({ reason: `asset export failed: ${String(e)}` })));
 	}
-	let C = {
+	let S = {
 		formatVersion: 1,
 		createdAt: e.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
 		source: {
 			dialect: e.dialect,
-			schemaFingerprint: g(e.snapshot)
+			schemaFingerprint: C(e.snapshot)
 		},
 		scope: t,
 		consistency: h,
 		compression: r,
-		tables: b,
-		assets: x > 0 ? {
-			count: x,
-			totalBytes: S,
-			index: ot
+		tables: y,
+		assets: b > 0 ? {
+			count: b,
+			totalBytes: x,
+			index: vt
 		} : {
 			count: 0,
 			totalBytes: 0
 		},
-		..._ ? { masking: _ } : {}
+		...g ? { masking: g } : {}
 	};
 	return yield* n.tryPromise({
 		try: async () => {
-			await (await import("node:fs/promises")).writeFile(u(U), nt(C));
+			await (await import("node:fs/promises")).writeFile(u(W), pt(S));
 		},
-		catch: (e) => new L({
+		catch: (e) => new B({
 			reason: `manifest write failed: ${q(e)}`,
-			path: U
+			path: W
 		})
 	}), yield* n.tryPromise({
 		try: async () => {
 			let e = await import("node:fs/promises"), t = await import("node:os");
-			await e.writeFile(u(it), lt(C, { hostname: t.hostname() }));
+			await e.writeFile(u(ht), xt(S, { hostname: t.hostname() }));
 		},
-		catch: (e) => new L({
+		catch: (e) => new B({
 			reason: `readme write failed: ${q(e)}`,
-			path: it
+			path: ht
 		})
-	}), C;
-}), Ut = (e, t) => {
+	}), S;
+}), tn = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) if (!n.has(t.name)) for (let e of t.columns) {
 		let i = e.references?.table;
@@ -798,7 +815,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return r;
-}, Wt = (e) => {
+}, nn = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) t.set(n.from, [...t.get(n.from) ?? [], n]);
 	let n = [...t.entries()].map(([e, t]) => {
@@ -806,7 +823,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		return `  ${e} (${n} row${n === 1 ? "" : "s"}): ${r}`;
 	});
 	return `replace cannot empty this target: ${t.size} table(s) OUTSIDE the bundle hold rows that reference tables INSIDE it. Emptying the bundle's tables would leave those rows pointing at nothing, and the bundle cannot restore them.\n${n.join("\n")}\nNothing has been deleted. Either re-export with a scope that includes those tables, or use --mode upsert if those rows are meant to survive.`;
-}, Gt = (e) => {
+}, rn = (e) => {
 	switch (e) {
 		case "id":
 		case "text":
@@ -825,12 +842,12 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "raw": return "raw";
 		default: return "string";
 	}
-}, Kt = {
+}, an = {
 	vector: /* @__PURE__ */ new Set(["postgres"]),
 	array: /* @__PURE__ */ new Set(["postgres"]),
 	interval: /* @__PURE__ */ new Set(["postgres"])
-}, qt = (e, t, n, r) => {
-	let i = Gt(n);
+}, on = (e, t, n, r) => {
+	let i = rn(n);
 	if (i === "raw") return {
 		table: e,
 		column: t,
@@ -838,7 +855,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `raw() is verbatim source-dialect SQL — it cannot be assumed valid on ${r}`
 	};
-	let a = Kt[i];
+	let a = an[i];
 	return !a || a.has(r) ? null : i === "array" || i === "interval" ? {
 		table: e,
 		column: t,
@@ -852,15 +869,15 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `${i} columns require a ${[...a].join("/")} target; ${r} has no compatible column type`
 	};
-}, Jt = (e, t, n) => {
+}, sn = (e, t, n) => {
 	if (t === n) return [];
 	let r = [];
 	for (let t of e) for (let [e, i] of Object.entries(t.columnTypes)) {
-		let a = qt(t.name, e, i, n);
+		let a = on(t.name, e, i, n);
 		a && r.push(a);
 	}
 	return r;
-}, Yt = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, Xt = (e) => {
+}, cn = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, ln = (e) => {
 	let t = e.constraint ?? e.column, n = t === void 0 ? "" : ` ${t}`;
 	switch (e.kind) {
 		case "foreignKey": return `foreign key${n}: the referenced row does not exist (import it first, or check the bundle's table order)`;
@@ -869,37 +886,164 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "notNull": return `not-null constraint${n}: the column requires a value`;
 		case "check": return `check constraint${n}: the row does not satisfy it`;
 	}
-}, Zt = (e) => {
+}, un = (e) => {
 	let t = [e.dbCode, e.dbErrno ?? e.dbNumber].filter((e) => e !== void 0).map(String);
 	return t.length > 0 ? t.join("/") : void 0;
-}, J = "Failed to execute statement", Qt = (e) => {
+}, dn = "Failed to execute statement", fn = (e) => {
 	let t = (e.split("\n", 1)[0] ?? "").trim();
 	for (; t.startsWith("(FiberFailure)");) t = t.slice(14).trim();
-	return t === `SqlError: ${J}` ? J : t;
-}, $t = (e) => {
+	return t === `SqlError: ${dn}` ? dn : t;
+}, pn = (e) => {
 	let t = String(e?.stack ?? e), n = t.length <= 1200 ? t : `${t.slice(0, 1200)}…`, r = (e, t) => ({
 		reason: e.length <= 300 ? e : `${e.slice(0, 300)}…`,
 		unclassified: t,
 		raw: n
-	}), i = d(e), a = l(i), o = Zt(i), s = o === void 0 ? "" : ` [${o}]`;
-	if (a !== void 0) return r(`${Xt(a)}${s}`, !1);
-	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, u = e?.message, f = Qt(typeof u == "string" && u.length > 0 ? u : String(e)), p = c !== void 0 && c !== f && !c.startsWith("SqlError:") ? c : f, m = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, h = m !== void 0 && /[←‖]/.test(m) ? ` (via ${m})` : "";
-	return r(p === J || p.length === 0 ? `the database refused the write and the driver gave no detail${s}${h}` : `${p}${s}`, p === J || p.length === 0);
-}, en = (e) => $t(e).reason, tn = (e) => {
-	let t = d(e), n = l(t);
+	}), i = m(e), a = d(i), o = un(i), s = o === void 0 ? "" : ` [${o}]`;
+	if (a !== void 0) return r(`${ln(a)}${s}`, !1);
+	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, l = e?.message, u = fn(typeof l == "string" && l.length > 0 ? l : String(e)), f = c !== void 0 && c !== u && !c.startsWith("SqlError:") ? c : u, p = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, h = p !== void 0 && /[←‖]/.test(p) ? ` (via ${p})` : "";
+	return r(f === dn || f.length === 0 ? `the database refused the write and the driver gave no detail${s}${h}` : `${f}${s}`, f === dn || f.length === 0);
+}, mn = (e) => pn(e).reason, hn = (e) => {
+	let t = m(e), n = d(t);
 	if (n?.kind === "foreignKeyInUse") {
-		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = Zt(t);
+		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = un(t);
 		return `foreign key${r}: rows elsewhere still reference this table${i === void 0 ? "" : ` [${i}]`}`;
 	}
-	return en(e);
-}, nn = (e, t) => e.tables.find((e) => e.name === t), rn = (e, t) => new Map((nn(e, t)?.columns ?? []).map((e) => [e.name, e])), an = (e, t) => {
+	return mn(e);
+}, gn = "_voltro_staging_", J = (e) => `${gn}${e}`, _n = (e) => typeof e.run == "function", vn = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
+  process that dies mid-load depends on the database rolling it back. The rollback capture
+  written before the first delete is what covers that case.`, yn = /^[a-zA-Z_][a-zA-Z0-9_]*$/, Y = (e, t) => {
+	if (!yn.test(e)) throw Error(`refusing to build SQL for the table name ${JSON.stringify(e)}: it is outside the identifier class the framework allows. A name from a bundle manifest reaches this concatenation, so it is checked here rather than assumed to still be what the declaration validated.`);
+	return t === "mysql" || t === "mariadb" ? `\`${e}\`` : t === "mssql" ? `[${e}]` : `"${e}"`;
+}, bn = (e, t) => {
+	let n = Y(e, t), r = Y(J(e), t);
+	switch (t) {
+		case "postgres": return `CREATE TABLE ${r} (LIKE ${n})`;
+		case "mysql":
+		case "mariadb": return `CREATE TABLE ${r} LIKE ${n}`;
+		case "sqlite": return `CREATE TABLE ${r} AS SELECT * FROM ${n} WHERE 0`;
+		case "mssql": return `SELECT * INTO ${r} FROM ${n} WHERE 1 = 0`;
+	}
+}, xn = (e, t) => {
+	let n = Y(J(e), t);
+	return t === "mssql" ? `IF OBJECT_ID('${J(e)}', 'U') IS NOT NULL DROP TABLE ${n}` : `DROP TABLE IF EXISTS ${n}`;
+}, Sn = (e, t) => {
+	let n = t === "mysql" || t === "mariadb", r = [];
+	n && r.push("SET FOREIGN_KEY_CHECKS = 0");
+	for (let n of [...e].reverse()) r.push(`DELETE FROM ${Y(n.name, t)}`);
+	for (let n of e) {
+		if (n.columns.length === 0) throw Error(`refusing to build a swap for '${n.name}' with no columns: an empty list would have to mean \`SELECT *\`, which is the shape that fails on a generated column.`);
+		let e = n.columns.map((e) => Y(e, t)).join(", ");
+		r.push(`INSERT INTO ${Y(n.name, t)} (${e}) SELECT ${e} FROM ${Y(J(n.name), t)}`);
+	}
+	return n && r.push("SET FOREIGN_KEY_CHECKS = 1"), r;
+}, Cn = (e, t) => {
+	let n = [], r = () => {
+		for (let e of n) t.unregisterTable(e);
+	};
+	try {
+		for (let r of e) {
+			let e = t.getTable(r);
+			if (e === void 0) continue;
+			let i = J(r);
+			t.registerTable({
+				...e,
+				tableName: i,
+				isReactive: !1
+			}), n.push(i);
+		}
+	} catch (e) {
+		throw r(), e;
+	}
+	return {
+		staged: n,
+		undo: r
+	};
+}, wn = (e, t) => {
+	let n = new Set(t), r = [];
+	for (let t of e.tables) {
+		if (!n.has(t.name)) continue;
+		let e = t.primaryKey?.[0] ?? "id";
+		for (let i of t.columns) {
+			let a = i.references;
+			a === void 0 || !n.has(a.table) || r.push({
+				from: t.name,
+				column: i.name,
+				to: a.table,
+				toColumn: a.column,
+				primaryKey: e
+			});
+		}
+	}
+	return r;
+}, Tn = (e, t) => {
+	let n = Y(J(e.from), t), r = Y(J(e.to), t), i = Y(e.column, t), a = Y(e.toColumn, t);
+	return `SELECT ${Y(e.primaryKey, t)} AS pk, ${i} AS value FROM ${n} c WHERE ${i} IS NOT NULL AND NOT EXISTS (SELECT 1 FROM ${r} p WHERE p.${a} = c.${i})`;
+}, En = (e) => {
+	if (e.length === 0) return;
+	let t = e.slice(0, 20), n = t.map((e) => `    ${e.table}.${e.primaryKey}: ${e.column} = ${JSON.stringify(e.value)} — no such row in ${e.references}`);
+	return `the swap could not run: ${e.length} row(s) in the bundle reference a row the bundle does not carry.\n${n.join("\n")}\n` + (e.length > t.length ? `    … and ${e.length - t.length} more\n` : "") + "  The target is UNCHANGED — the swap runs in one transaction and none of it committed.\n  Every offending row is listed above rather than only the first, so this can be fixed in one pass.";
+}, Dn = async (e, t) => {
+	t.length !== 0 && await e.run(N.SqlClient.pipe(n.flatMap((e) => n.forEach(t, (t) => e.unsafe(t), { discard: !0 }))));
+}, On = async (e, t, r) => {
+	let i = Sn(t, r);
+	i.length !== 0 && await e.run(N.SqlClient.pipe(n.flatMap((e) => e.withTransaction(n.forEach(i, (t) => e.unsafe(t), { discard: !0 })))));
+}, kn = async (e, t, r) => {
+	let i = [];
+	for (let a of t) {
+		let t = await e.run(N.SqlClient.pipe(n.flatMap((e) => e.unsafe(Tn(a, r)))));
+		for (let e of t) i.push({
+			table: a.from,
+			primaryKey: String(e.pk ?? ""),
+			column: a.column,
+			value: e.value,
+			references: a.to
+		});
+	}
+	return i;
+}, An = (e, t) => {
+	let n = new Map(t.map((e, t) => [e, t]));
+	return e.filter((e) => {
+		if (e.from === e.to) return !1;
+		let t = n.get(e.from), r = n.get(e.to);
+		return t === void 0 || r === void 0 ? !1 : r > t;
+	});
+}, jn = (e) => e === "mysql" || e === "mariadb", Mn = (e) => n.gen(function* () {
+	if (e.mode !== "replace" || e.dir === void 0 || e.tables.length === 0) return;
+	if (e.snapshot === void 0) return yield* n.fail(new B({
+		reason: "rollback capture needs the TARGET's schema, and this run has none.\n  `--mode replace` empties the target first, so a run without a capture can leave it\n  emptied and unfilled if the process does not survive to roll back. Pass the target\n  snapshot, or `--no-rollback` to accept that risk deliberately.",
+		path: e.dir
+	}));
+	let t = {
+		...e.snapshot,
+		tables: e.snapshot.tables.filter((t) => e.tables.includes(t.name))
+	};
+	if (t.tables.length === 0) return;
+	e.onWarn?.(`capturing the target's current rows before emptying it → ${e.dir}\n  This is what a failed replace is restored FROM. It is written before the first delete,
+  so it survives a run whose process does not.`);
+	let r = yield* en({
+		store: e.store,
+		snapshot: t,
+		dialect: e.dialect ?? "unknown",
+		outDir: e.dir,
+		scope: { kind: "all" },
+		compression: "none"
+	}).pipe(n.mapError((t) => new B({
+		reason: `rollback capture failed, so the import did not start and the target is untouched: ${t.reason ?? String(t)}\n  Fix the capture, or re-run with \`--no-rollback\` to proceed without one.`,
+		path: e.dir
+	})));
+	return {
+		dir: e.dir,
+		rows: r.tables.reduce((e, t) => e + t.rowCount, 0),
+		tables: r.tables.length
+	};
+}), Nn = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`, Pn = (e, t) => e.tables.find((e) => e.name === t), Fn = (e, t) => new Map((Pn(e, t)?.columns ?? []).map((e) => [e.name, e])), In = (e, t) => {
 	let n = [];
 	for (let r of [...e.tables].sort((e, t) => e.name.localeCompare(t.name))) {
-		if (nn(t, r.name) === void 0) {
+		if (Pn(t, r.name) === void 0) {
 			n.push(`table '${r.name}' is in the bundle but MISSING from the target — its rows have nowhere to go`);
 			continue;
 		}
-		let e = rn(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
+		let e = Fn(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
 		for (let [t, a] of i) {
 			let i = e.get(t);
 			if (i === void 0) {
@@ -911,43 +1055,62 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		for (let [t, a] of e) i.has(t) || !a.nullable && !a.hasDefault && n.push(`${r.name}.${t}: the target requires it (NOT NULL, no default) and the bundle carries no value — every row of this table would fail`);
 	}
 	return n.length > 30 ? [...n.slice(0, 30), `… and ${n.length - 30} more difference(s)`] : n;
-}, on = (e, t, n) => {
-	let r = g(t);
+}, Ln = (e, t, n) => {
+	let r = C(t);
 	if (r === e || n === void 0) return {
 		drifted: !1,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: []
 	};
-	let i = an(n, t);
+	let i = In(n, t);
 	return {
 		drifted: i.length > 0,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: i
 	};
-}, sn = 200, cn = (e) => n.tryPromise({
+}, Rn = 200, zn = /* @__PURE__ */ new Set([
+	"BundleError",
+	"CodecError",
+	"IntegrityError",
+	"CrossDialectError",
+	"ImportModeError",
+	"RowsRefusedError",
+	"SchemaDriftError",
+	"StorageError"
+]), Bn = (t) => {
+	let n = o.isFiberFailure(t) ? [...e.failures(t[o.FiberFailureCauseId]), ...e.defects(t[o.FiberFailureCauseId])] : [t];
+	for (let e of n) {
+		let t = e?._tag;
+		if (typeof t == "string" && zn.has(t)) return e;
+		if (o.isFiberFailure(e)) {
+			let t = Bn(e);
+			if (t) return t;
+		}
+	}
+}, Vn = (t) => [...e.failures(t)][0] ?? Error(e.pretty(t)), Hn = (e) => n.tryPromise({
 	try: async () => {
 		let t = await import("node:fs/promises"), n = await import("node:path");
-		return rt(await t.readFile(n.join(e, U), "utf8"));
+		return mt(await t.readFile(n.join(e, W), "utf8"));
 	},
-	catch: (e) => new L({
+	catch: (e) => new B({
 		reason: `manifest read/parse failed: ${String(e?.message ?? e)}`,
-		path: U
+		path: W
 	})
-}), ln = (t) => n.gen(function* () {
-	let i = yield* n.promise(() => import("node:path")), a = yield* cn(t.bundleDir);
-	if (a.formatVersion !== 1) return yield* n.fail(new L({ reason: `unsupported bundle formatVersion ${a.formatVersion} (expected 1)` }));
-	if (t.tables !== void 0) {
-		let e = new Set(a.tables.map((e) => e.name)), r = t.tables.filter((t) => !e.has(t));
-		if (r.length > 0) return yield* n.fail(new L({ reason: `--tables names ${r.length} table(s) this bundle does not carry: ${r.join(", ")}. The bundle carries: ${[...e].sort().join(", ")}.` }));
+}), Un = (e) => n.gen(function* () {
+	let t = yield* n.promise(() => import("node:path")), i = yield* Hn(e.bundleDir);
+	if (i.formatVersion !== 1) return yield* n.fail(new B({ reason: `unsupported bundle formatVersion ${i.formatVersion} (expected 1)` }));
+	if (e.tables !== void 0) {
+		let t = new Set(i.tables.map((e) => e.name)), r = e.tables.filter((e) => !t.has(e));
+		if (r.length > 0) return yield* n.fail(new B({ reason: `--tables names ${r.length} table(s) this bundle does not carry: ${r.join(", ")}. The bundle carries: ${[...t].sort().join(", ")}.` }));
 	}
-	let o = t.tables === void 0 ? void 0 : new Set(t.tables), s = o === void 0 ? a : {
-		...a,
-		tables: a.tables.filter((e) => o.has(e.name))
+	let a = e.tables === void 0 ? void 0 : new Set(e.tables), o = a === void 0 ? i : {
+		...i,
+		tables: i.tables.filter((e) => a.has(e.name))
 	};
-	if (t.targetSnapshot) {
-		let e = { tables: s.tables.map((e) => ({
+	if (e.targetSnapshot) {
+		let t = { tables: o.tables.map((e) => ({
 			name: e.name,
 			indexes: [],
 			columns: Object.entries(e.columnTypes).map(([e, t]) => ({
@@ -957,94 +1120,94 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				unique: !1,
 				hasDefault: !1
 			}))
-		})) }, r = on(s.source.schemaFingerprint, t.targetSnapshot, e);
+		})) }, r = Ln(o.source.schemaFingerprint, e.targetSnapshot, t);
 		if (r.drifted) {
-			if (!t.force) return yield* n.fail(new Pe({
+			if (!e.force) return yield* n.fail(new We({
 				bundleFingerprint: r.bundleFingerprint,
 				targetFingerprint: r.targetFingerprint,
 				diff: r.diff
 			}));
-			t.onWarn?.(`schema drift: the target schema (fingerprint ${r.targetFingerprint.slice(0, 16)}) differs from the bundle's source (${r.bundleFingerprint.slice(0, 16)}); importing anyway (--force). ${r.diff.join("; ")}`);
+			e.onWarn?.(`schema drift: the target schema (fingerprint ${r.targetFingerprint.slice(0, 16)}) differs from the bundle's source (${r.bundleFingerprint.slice(0, 16)}); importing anyway (--force). ${r.diff.join("; ")}`);
 		}
 	}
-	if (t.targetDialect && t.targetDialect !== s.source.dialect) {
-		let e = Jt(s.tables, s.source.dialect, t.targetDialect).filter((e) => e.severity === "block");
-		if (e.length > 0 && !t.allowIncompatible) return yield* n.fail(new Le({
-			sourceDialect: s.source.dialect,
-			targetDialect: t.targetDialect,
-			blocking: e.map(Yt)
+	if (e.targetDialect && e.targetDialect !== o.source.dialect) {
+		let t = sn(o.tables, o.source.dialect, e.targetDialect).filter((e) => e.severity === "block");
+		if (t.length > 0 && !e.allowIncompatible) return yield* n.fail(new qe({
+			sourceDialect: o.source.dialect,
+			targetDialect: e.targetDialect,
+			blocking: t.map(cn)
 		}));
 	}
-	let l = t.verify ?? !0, u = t.mode ?? "upsert", d = t.atomic ?? u === "replace", f = t.onConflict ?? "skip", m = t.ledgerPath ?? i.join(t.bundleDir, ".import..ledger.json"), h = yield* ht(m);
-	if (u === "replace" && s.scope.kind !== "all") return yield* n.fail(new Ie({
-		mode: u,
-		reason: `replace refuses a partial bundle (scope='${s.scope.kind}') — truncating would delete rows not in the bundle. Use --mode upsert, or re-export with full scope.`
+	let s = e.verify ?? !0, c = e.mode ?? "upsert", d = e.atomic ?? c === "replace", p = e.onConflict ?? "skip", m = e.ledgerPath ?? t.join(e.bundleDir, ".import..ledger.json"), g = yield* Dt(m);
+	if (c === "replace" && o.scope.kind !== "all") return yield* n.fail(new Ke({
+		mode: c,
+		reason: `replace refuses a partial bundle (scope='${o.scope.kind}') — truncating would delete rows not in the bundle. Use --mode upsert, or re-export with full scope.`
 	}));
-	if (u === "replace") {
-		let e = s.tables.map((e) => e.name), r = t.store.incomingForeignKeys ? yield* n.tryPromise({
-			try: () => t.store.incomingForeignKeys(e),
-			catch: (e) => new L({ reason: `foreign-key pre-flight failed: ${tn(e)}` })
-		}) : t.targetSnapshot === void 0 ? [] : Ut(t.targetSnapshot, e), i = [], a = /* @__PURE__ */ new Map();
-		for (let e of r) {
-			if (!a.has(e.from)) {
+	if (c === "replace") {
+		let t = o.tables.map((e) => e.name), r = e.store.incomingForeignKeys ? yield* n.tryPromise({
+			try: () => e.store.incomingForeignKeys(t),
+			catch: (e) => new B({ reason: `foreign-key pre-flight failed: ${hn(e)}` })
+		}) : e.targetSnapshot === void 0 ? [] : tn(e.targetSnapshot, t), i = [], a = /* @__PURE__ */ new Map();
+		for (let t of r) {
+			if (!a.has(t.from)) {
 				let r = yield* n.tryPromise({
-					try: () => t.store.query({
-						table: e.from,
+					try: () => e.store.query({
+						table: t.from,
 						predicate: void 0,
 						order: [],
 						take: void 0,
 						skip: void 0,
 						projection: []
 					}),
-					catch: () => new L({ reason: `unreadable: ${e.from}` })
+					catch: () => new B({ reason: `unreadable: ${t.from}` })
 				}).pipe(n.map((e) => e.length), n.orElseSucceed(() => 0));
-				a.set(e.from, r);
+				a.set(t.from, r);
 			}
-			let r = a.get(e.from) ?? 0;
+			let r = a.get(t.from) ?? 0;
 			r > 0 && i.push({
-				...e,
+				...t,
 				rowCount: r
 			});
 		}
-		if (i.length > 0) return yield* n.fail(new Ie({
-			mode: u,
-			reason: Wt(i)
+		if (i.length > 0) return yield* n.fail(new Ke({
+			mode: c,
+			reason: nn(i)
 		}));
 	}
-	if (t.dryRun === !0) return {
-		manifest: s,
+	if (e.dryRun === !0) return {
+		manifest: o,
 		tablesWritten: 0,
 		rowsWritten: 0,
 		tablesSkipped: 0,
 		rowsSkipped: 0,
 		fullyResumed: !1
 	};
-	let g = /* @__PURE__ */ new Map();
-	for (let e of t.targetSnapshot?.tables ?? []) {
-		let t = e.columns.filter((e) => e.generatedAs !== void 0).map((e) => e.name);
-		t.length > 0 && g.set(e.name, t);
+	let v = /* @__PURE__ */ new Map();
+	for (let t of e.targetSnapshot?.tables ?? []) {
+		let e = t.columns.filter((e) => e.generatedAs !== void 0).map((e) => e.name);
+		e.length > 0 && v.set(t.name, e);
 	}
-	let _ = (e, t) => {
-		let n = g.get(e);
+	let x = (e, t) => {
+		let n = v.get(e);
 		if (n === void 0) return t;
 		let r;
 		for (let e of n) e in t && (r ??= { ...t }, delete r[e]);
 		return r ?? t;
-	}, v = (e, t, n, r = !1) => {
-		let i = t.name, a = t.primaryKey, o = _(i, n);
-		return u === "append" ? f === "fail" ? e.insert(i, o) : e.insertIgnore(i, o, { conflictColumns: [a] }) : u === "replace" ? r ? e.upsert(i, o, { conflictColumns: [a] }) : e.insert(i, o) : e.upsert(i, o, { conflictColumns: [a] });
-	}, y = (e, t) => e.savepoint ? e.savepoint(t) : t(), b = 0, x = (e, n, r) => {
-		r.unclassified && (b++, !(b > 3) && t.onWarn?.(`row refused with no driver detail — table '${e.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (b === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
-	}, S = (e, t, r = !0) => n.tryPromise({
+	}, C = (e, t, n, r = !1) => {
+		let i = j ? J(t.name) : t.name, a = t.primaryKey, o = x(t.name, n);
+		return c === "append" ? p === "fail" ? e.insert(i, o) : e.insertIgnore(i, o, { conflictColumns: [a] }) : c === "replace" ? r ? e.upsert(i, o, { conflictColumns: [a] }) : e.insert(i, o) : e.upsert(i, o, { conflictColumns: [a] });
+	}, w = (e, t) => e.savepoint ? e.savepoint(t) : t(), T = 0, E = (t, n, r) => {
+		r.unclassified && (T++, !(T > 3) && e.onWarn?.(`row refused with no driver detail — table '${t.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (T === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
+	}, ee = (e, t, r = !0) => n.tryPromise({
 		try: e,
-		catch: (e) => $t(e)
-	}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, x(t.entry, t.row, e)), !1)))), C = (e) => {
+		catch: (e) => pn(e)
+	}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, E(t.entry, t.row, e)), !1)))), te = (e) => {
 		let t = Object.entries(e.entry.columnTypes).filter(([t, n]) => n === "reference" && e.row[t] !== null && e.row[t] !== void 0).map(([e]) => e);
 		if (t.length !== 0) return {
 			...e.row,
 			...Object.fromEntries(t.map((e) => [e, null]))
 		};
-	}, T = (e) => {
+	}, ne = (e) => {
 		let t = new Set(e.map((e) => String(e.row[e.entry.primaryKey]))), n = (e) => Object.entries(e.entry.columnTypes).some(([n, r]) => {
 			if (r !== "reference") return !1;
 			let i = e.row[n];
@@ -1062,7 +1225,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			};
 			t.refused++, e.derived || t.primary++, a.set(e.table, t);
 		}
-		return new Ne({
+		return new Ue({
 			rows: i.slice(0, 20),
 			primaryCount: r.filter((e) => !e.derived).length,
 			totalCount: e.length,
@@ -1072,79 +1235,113 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				primary: t.primary
 			})).sort((e, t) => t.refused - e.refused || e.table.localeCompare(t.table)).slice(0, 100)
 		});
-	}, E = (e, t) => n.gen(function* () {
+	}, re = (e, t) => n.gen(function* () {
 		let r = t, i = [], a = !0;
 		for (; r.length > 0 && a;) {
 			a = !1;
 			let t = [];
-			for (let n of r) (yield* S(() => y(e, () => v(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
+			for (let n of r) (yield* ee(() => w(e, () => C(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
 			if (!a && t.length > 0) for (let n = t.length - 1; n >= 0; n--) {
-				let r = t[n], o = C(r);
-				o !== void 0 && (yield* S(() => y(e, () => v(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
+				let r = t[n], o = te(r);
+				o !== void 0 && (yield* ee(() => w(e, () => C(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
 			}
 			r = t;
 		}
-		for (let t of i) (yield* S(() => y(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
-		if (r.length > 0) return yield* n.fail(T(r));
-	}), D = !1, O = 0, k = 0, ee = 0, A = 0, M = (e, r) => n.gen(function* () {
-		if (u === "replace" && !(r && h.truncated)) {
-			let t = [...s.tables].reverse().map((e) => e.name), i = !r, a = e.emptyTables ? () => e.emptyTables(t) : i ? async () => {
-				for (let t of [...s.tables].reverse()) await e.deleteMany(t.name, { where: p(t.primaryKey) });
-			} : () => e.transactional(async (e) => {
-				for (let t of [...s.tables].reverse()) await e.deleteMany(t.name, { where: p(t.primaryKey) });
+		for (let t of i) (yield* ee(() => w(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
+		if (r.length > 0) return yield* n.fail(ne(r));
+	}), D = (() => {
+		let t = e.targetDialect;
+		return t === "postgres" || t === "mysql" || t === "mariadb" || t === "sqlite" || t === "mssql" ? t : void 0;
+	})(), O = (() => {
+		let t = e.targetSnapshot;
+		if (t === void 0) return [];
+		let n = new Map(t.tables.map((e) => [e.name, e])), r = [];
+		for (let e of o.tables) {
+			if (z(e.name)) continue;
+			let t = n.get(e.name);
+			if (t === void 0) return [];
+			let i = t.columns.filter((e) => e.generatedAs === void 0).map((e) => e.name);
+			if (i.length === 0) return [];
+			r.push({
+				name: e.name,
+				columns: i
+			});
+		}
+		return r;
+	})(), k = O.filter((e) => y(e.name)).map((e) => e.name), A = D === void 0 || jn(D) ? [] : An(e.targetSnapshot === void 0 ? [] : wn(e.targetSnapshot, O.map((e) => e.name)), O.map((e) => e.name)), j = c === "replace" && D !== void 0 && O.length > 0 && k.length === 0 && A.length === 0 && _n(e.store), ae = !1, oe = 0, M = 0, ce = 0, le = 0, N = (r, i) => n.gen(function* () {
+		if (c === "replace" && !j && !(i && g.truncated)) {
+			e.recordInterruption === !0 && (yield* n.tryPromise({
+				try: () => r.insert(u, {
+					id: f("repl", ue),
+					startedAt: de,
+					tables: String(o.tables.length),
+					capture: P?.dir ?? null,
+					via: e.via ?? "direct"
+				}),
+				catch: (e) => new B({ reason: `could not record that this replace started: ${String(e?.message ?? e)}\n  The marker is what makes an interrupted run visible instead of silent, so the run does
+  not proceed without it.` })
+			}));
+			let t = [...o.tables].reverse().map((e) => e.name).filter((e) => !z(e)), a = !i, s = r.emptyTables ? () => r.emptyTables(t) : a ? async () => {
+				for (let e of [...o.tables].reverse()) await r.deleteMany(e.name, { where: _(e.primaryKey) });
+			} : () => r.transactional(async (e) => {
+				for (let t of [...o.tables].reverse()) await e.deleteMany(t.name, { where: _(t.primaryKey) });
 			});
 			yield* n.tryPromise({
-				try: a,
-				catch: (e) => new L({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${tn(e)}` })
-			}), r && (h.truncated = !0, yield* K(m, h));
+				try: s,
+				catch: (e) => new B({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${hn(e)}` })
+			}), i && (g.truncated = !0, yield* K(m, g));
 		}
-		let a = [], o = [], f = [], g = s.tables.length;
-		for (let p = 0; p < s.tables.length; p++) {
-			let _ = s.tables[p];
-			if (r && _.name in h.tables) {
-				f.push(_.name), A++, ee += h.tables[_.name].rowCount, G(t.onProgress, {
+		let a = [], p = [], h = [], v = [], y = o.tables.length;
+		for (let u = 0; u < o.tables.length; u++) {
+			let f = o.tables[u];
+			if (z(f.name)) {
+				v.push(f.name);
+				continue;
+			}
+			if (i && f.name in g.tables) {
+				h.push(f.name), le++, ce += g.tables[f.name].rowCount, G(e.onProgress, {
 					phase: "import",
-					table: _.name,
-					index: p,
-					tableCount: g,
+					table: f.name,
+					index: u,
+					tableCount: y,
 					event: "done",
-					rowsDone: h.tables[_.name].rowCount,
-					total: _.rowCount
+					rowsDone: g.tables[f.name].rowCount,
+					total: f.rowCount
 				});
 				continue;
 			}
-			let b = i.join(t.bundleDir, _.file);
-			G(t.onProgress, {
+			let _ = t.join(e.bundleDir, f.file);
+			G(e.onProgress, {
 				phase: "import",
-				table: _.name,
-				index: p,
-				tableCount: g,
+				table: f.name,
+				index: u,
+				tableCount: y,
 				event: "start",
 				rowsDone: 0,
-				total: _.rowCount
+				total: f.rowCount
 			});
-			let S = a.length, C = n.gen(function* () {
-				let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, l = w("bundle", () => j(b).pipe(Xe(s.compression))).pipe(c.tap((e) => n.sync(() => i.update(e)))), f = async (t) => {
-					let n = {
-						entry: _,
-						row: t,
+			let b = a.length, x = n.gen(function* () {
+				let { createHash: t } = yield* n.promise(() => import("node:crypto")), i = t("sha256"), s = 0, u = ie("bundle", () => se(_).pipe(st(o.compression))).pipe(l.tap((e) => n.sync(() => i.update(e)))), p = async (e) => {
+					let t = {
+						entry: f,
+						row: e,
 						reason: ""
 					};
 					try {
-						await y(e, () => v(e, _, t));
-					} catch (e) {
-						let r = $t(e);
-						n.reason = r.reason, x(_, t, r), a.push(n);
+						await w(r, () => C(r, f, e));
+					} catch (n) {
+						let r = pn(n);
+						t.reason = r.reason, E(f, e, r), a.push(t);
 					}
-				}, p = yield* n.promise(async () => {
-					let n = t.copyLoader;
-					if (!n || n.dialect !== "postgres") return !1;
-					if (d) return D || (D = !0, t.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
-					if (u === "replace") return !0;
-					if (u !== "upsert") return !1;
+				}, m = yield* n.promise(async () => {
+					let t = e.copyLoader;
+					if (!t || t.dialect !== "postgres") return !1;
+					if (d) return ae || (ae = !0, e.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
+					if (c === "replace") return !0;
+					if (c !== "upsert") return !1;
 					try {
-						return (await e.query({
-							table: _.name,
+						return (await r.query({
+							table: f.name,
 							predicate: void 0,
 							order: [],
 							take: 1,
@@ -1154,123 +1351,175 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					} catch {
 						return !1;
 					}
-				}), m = Object.keys(_.columnTypes), h = Math.max(1, t.copyBatchSize ?? 5e3), g = [], S = async () => {
-					if (g.length === 0) return;
-					let e = g;
-					g = [];
+				}), h = Object.keys(f.columnTypes), g = Math.max(1, e.copyBatchSize ?? 5e3), v = [], y = async () => {
+					if (v.length === 0) return;
+					let t = v;
+					v = [];
 					try {
-						await t.copyLoader.copyInto({
-							table: _.name,
-							columns: m,
-							columnTypes: _.columnTypes,
-							rows: e
+						await e.copyLoader.copyInto({
+							table: f.name,
+							columns: h,
+							columnTypes: f.columnTypes,
+							rows: t
 						});
 					} catch (n) {
-						p = !1, t.onWarn?.(`bulk COPY into ${_.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
-						for (let t of e) await f(t);
+						m = !1, e.onWarn?.(`bulk COPY into ${f.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
+						for (let e of t) await p(e);
 					}
-				}, C = Math.max(1, t.savepointBatchSize ?? 200), T = typeof e.savepoint == "function", E = [], O = async () => {
-					if (E.length === 0) return;
-					let t = E;
-					E = [];
+				}, b = Math.max(1, e.savepointBatchSize ?? 200), x = typeof r.savepoint == "function", S = [], T = async () => {
+					if (S.length === 0) return;
+					let e = S;
+					S = [];
 					try {
-						await e.savepoint(async () => {
-							for (let n of t) await v(e, _, n);
+						await r.savepoint(async () => {
+							for (let t of e) await C(r, f, t);
 						});
 					} catch {
-						for (let e of t) await f(e);
+						for (let t of e) await p(t);
 					}
 				};
-				return yield* c.runForEach(At(l, _.name, _.columnTypes), (e) => n.promise(async () => {
-					if (o++, p) {
-						g.push(e), g.length >= h && await S();
+				return yield* l.runForEach(Ht(u, f.name, f.columnTypes), (e) => n.promise(async () => {
+					if (s++, m) {
+						v.push(e), v.length >= g && await y();
 						return;
 					}
-					if (T) {
-						E.push(e), E.length >= C && await O();
+					if (x) {
+						S.push(e), S.length >= b && await T();
 						return;
 					}
-					await f(e);
-				})), yield* n.promise(O), yield* n.promise(S), {
-					rowCount: o,
+					await p(e);
+				})), yield* n.promise(T), yield* n.promise(y), {
+					rowCount: s,
 					checksum: i.digest("hex")
 				};
-			}), { rowCount: T, checksum: E } = yield* pt("import", _.name, p, g, (e) => e.rowCount, C);
-			if (l) {
-				if (E !== _.checksum) return yield* n.fail(new R({
-					what: `table ${_.name} checksum`,
-					expected: _.checksum,
-					actual: E
+			}), { rowCount: S, checksum: T } = yield* Tt("import", f.name, u, y, (e) => e.rowCount, x);
+			if (s) {
+				if (T !== f.checksum) return yield* n.fail(new Ve({
+					what: `table ${f.name} checksum`,
+					expected: f.checksum,
+					actual: T
 				}));
-				if (T !== _.rowCount) return yield* n.fail(new R({
-					what: `table ${_.name} rowCount`,
-					expected: String(_.rowCount),
-					actual: String(T)
+				if (S !== f.rowCount) return yield* n.fail(new Ve({
+					what: `table ${f.name} rowCount`,
+					expected: String(f.rowCount),
+					actual: String(S)
 				}));
 			}
-			G(t.onProgress, {
+			G(e.onProgress, {
 				phase: "import",
-				table: _.name,
-				index: p,
-				tableCount: g,
+				table: f.name,
+				index: u,
+				tableCount: y,
 				event: "done",
-				rowsDone: T,
-				total: _.rowCount
-			}), k++, O += T, r && (a.length > S ? o.push({
-				name: _.name,
-				rowCount: T
-			}) : (h.tables[_.name] = {
-				rowCount: T,
-				checksum: _.checksum
-			}, yield* K(m, h)));
+				rowsDone: S,
+				total: f.rowCount
+			}), M++, oe += S, i && (a.length > b ? p.push({
+				name: f.name,
+				rowCount: S
+			}) : (g.tables[f.name] = {
+				rowCount: S,
+				checksum: f.checksum
+			}, yield* K(m, g)));
 		}
-		if (a.length > 0 && (yield* E(e, a)), r && o.length > 0) {
-			for (let e of o) {
-				let t = s.tables.find((t) => t.name === e.name);
-				h.tables[e.name] = {
+		if (a.length > 0 && (yield* re(r, a)), c === "replace" && !(i && g.truncated) && (yield* n.promise(() => r.deleteMany(u, { where: {
+			column: "startedAt",
+			op: "lte",
+			value: de
+		} }).then(() => void 0, () => void 0))), i && p.length > 0) {
+			for (let e of p) {
+				let t = o.tables.find((t) => t.name === e.name);
+				g.tables[e.name] = {
 					rowCount: e.rowCount,
 					checksum: t.checksum
 				};
 			}
-			yield* K(m, h);
+			yield* K(m, g);
 		}
-		if (f.length > 0) {
-			let e = f.length === s.tables.length;
-			t.onWarn?.(`resume: ${f.length} of ${s.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${e ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${f.join(", ")}. Delete ${m} to force a full re-import.`);
+		{
+			let t = ze(v, "skipped");
+			t !== void 0 && e.onWarn?.(t);
 		}
+		if (h.length > 0) {
+			let t = h.length === o.tables.length;
+			e.onWarn?.(`resume: ${h.length} of ${o.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${t ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${h.join(", ")}. Delete ${m} to force a full re-import.`);
+		}
+	}), ue = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`, de = /* @__PURE__ */ new Date(), P = yield* Mn({
+		store: e.store,
+		mode: c,
+		dir: e.rollbackDir,
+		snapshot: e.targetSnapshot,
+		dialect: e.targetDialect,
+		tables: o.tables.map((e) => e.name).filter((e) => !z(e)),
+		onWarn: e.onWarn
 	});
-	if (d ? yield* n.tryPromise({
-		try: () => t.store.transactional(async (t) => {
-			let i = await n.runPromiseExit(M(t, !1));
-			if (r.isFailure(i)) throw Error(e.pretty(i.cause));
+	if (P !== void 0 && (e.onRollbackCaptured !== void 0 && (yield* n.tryPromise({
+		try: () => e.onRollbackCaptured(P),
+		catch: (e) => new B({
+			reason: `the rollback capture could not be stored durably, so the import did not start and the target is untouched: ${String(e?.message ?? e)}\n  The capture only helps if it outlives this process — that is the failure it exists for.`,
+			path: P.dir
+		})
+	})), e.onWarn?.(Nn(P))), !j && c === "replace" && d && A.length > 0 && e.onWarn?.(vn(`the bundle's tables reference each other in a cycle (${A.map((e) => `${e.from}.${e.column} → ${e.to}`).join(", ")}), and a bulk copy cannot satisfy both directions on this dialect.`)), !j && c === "replace" && d && k.length > 0 && e.onWarn?.(vn(`a write recorder is registered for ${k.join(", ")}, and a recorder is keyed by table name — a staged write would find none and the recorder would silently not run.`)), j) {
+		e.onWarn?.(`staging ${O.length} table(s) before the swap — the target keeps its rows until the load stands.\n  The destructive step is one server-side transaction at the end, not the whole load.`);
+		let t = e.store, r = O.map((e) => e.name), i = Cn(r, {
+			getTable: (e) => h(e),
+			registerTable: (e) => {
+				b(e);
+			},
+			unregisterTable: S
+		}), a = !1;
+		try {
+			let i = d ? r : r.filter((e) => !Ot(g, e));
+			yield* n.tryPromise({
+				try: async () => {
+					await Dn(t, i.map((e) => xn(e, D))), await Dn(t, i.map((e) => bn(e, D)));
+				},
+				catch: (e) => new B({ reason: `could not prepare the staging tables, so the import did not start and the target is untouched: ${String(e?.message ?? e)}` })
+			}), yield* N(e.store, !d), !d && g.truncated === !0 ? a = !0 : yield* n.tryPromise({
+				try: () => On(t, O, D).then(() => {
+					a = !0;
+				}),
+				catch: (e) => new B({ reason: String(e?.message ?? e) })
+			}).pipe(n.catchAll((i) => n.gen(function* () {
+				let a = En(yield* n.promise(() => kn(t, wn(e.targetSnapshot, r), D).then((e) => e, () => [])));
+				return yield* n.fail(new B({ reason: a ?? `the swap failed and the target is UNCHANGED: ${i.reason}` }));
+			}))), !d && a && g.truncated !== !0 && (g.truncated = !0, yield* K(m, g));
+		} finally {
+			i.undo(), a || d ? yield* n.promise(() => Dn(t, r.map((e) => xn(e, D))).then(() => void 0, () => void 0)) : e.onWarn?.("the staged rows are KEPT so a re-run can continue from them rather than reload.\n  If you are not going to re-run this bundle, drop them: voltro data clear-staging --yes");
+		}
+	} else d ? yield* n.tryPromise({
+		try: () => e.store.transactional(async (e) => {
+			let t = await n.runPromiseExit(N(e, !1));
+			if (r.isFailure(t)) throw Vn(t.cause);
 		}),
-		catch: (e) => new L({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
-	}) : yield* M(t.store, !0), t.assets && s.assets.index && !t.assetsAlreadyRestored) {
-		let e = t.assets, r = i.join(t.bundleDir, W), a = i.join(t.bundleDir, s.assets.index ?? "assets/index.ndjson"), o = w("bundle", () => j(a)).pipe(c.decodeText(), c.splitLines, c.filter((e) => e.trim().length > 0), c.map((e) => JSON.parse(e)));
-		yield* c.runForEach(o, (t) => t.key in h.assets ? n.void : Ge(e, r, t).pipe(n.andThen(n.sync(() => {
-			h.assets[t.key] = !0;
-		})), n.andThen(K(m, h))));
+		catch: (e) => Bn(e) ?? new B({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
+	}) : yield* N(e.store, !0);
+	if (e.assets && o.assets.index && !e.assetsAlreadyRestored) {
+		let r = e.assets, i = t.join(e.bundleDir, _t), a = t.join(e.bundleDir, o.assets.index ?? "assets/index.ndjson"), s = ie("bundle", () => se(a)).pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.map((e) => JSON.parse(e)));
+		yield* l.runForEach(s, (e) => e.key in g.assets ? n.void : nt(r, i, e).pipe(n.andThen(n.sync(() => {
+			g.assets[e.key] = !0;
+		})), n.andThen(K(m, g))));
 	}
 	return {
-		manifest: s,
-		tablesWritten: k,
-		rowsWritten: O,
-		tablesSkipped: A,
-		rowsSkipped: ee,
-		fullyResumed: k === 0 && A > 0
+		manifest: o,
+		tablesWritten: M,
+		rowsWritten: oe,
+		tablesSkipped: le,
+		rowsSkipped: ce,
+		fullyResumed: M === 0 && le > 0,
+		...P === void 0 ? {} : { rollback: P }
 	};
-}), un = (e) => e, dn = (e) => {
+}), Wn = (e) => e, Gn = (e) => {
 	if (e.allowLive || e.liveInstance === null || e.sameTarget === "different") return { refuse: !1 };
 	let t = e.targetLabel === void 0 ? "" : ` Target: ${e.targetLabel}.`, n = e.sameTarget === "same" ? " That instance is connected to the SAME database." : " We could not confirm which database that instance is connected to, so this is refused on the conservative reading — an older instance, or one whose connection could not be parsed, reports nothing to compare.";
 	return {
 		refuse: !0,
 		message: `refusing to write into a target with a LIVE instance (${e.liveInstance}).${t}${n} A direct import is an uncoordinated concurrent writer — readers see partial state, the reactive layer either storms or goes stale, and rows race with live writes. Re-run with --allow-live to override, or use a live-safe strategy (shadow-swap for replace, or the api target).`
 	};
-}, Y = Buffer.from("VBUNDLE2"), fn = 0, pn = 1, mn = 2, hn = 32, gn = async (e) => {
+}, X = Buffer.from("VBUNDLE2"), Kn = 0, qn = 1, Jn = 2, Yn = 32, Xn = async (e) => {
 	let t = [], n = async (r) => {
 		let i;
 		try {
-			i = await ie(N(e, r), { withFileTypes: !0 });
+			i = await de(F(e, r), { withFileTypes: !0 });
 		} catch {
 			return;
 		}
@@ -1280,22 +1529,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	};
 	return await n(""), t.sort();
-}, _n = (e, t) => {
+}, Zn = (e, t) => {
 	let n = Buffer.from(e, "utf8"), r = Buffer.alloc(5 + n.length + 8);
-	return r.writeUInt8(pn, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
-}, vn = (e, t, n) => {
+	return r.writeUInt8(qn, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
+}, Qn = (e, t, n) => {
 	let r = Buffer.from(e, "utf8"), i = Buffer.from(t, "utf8"), a = Buffer.alloc(5 + r.length + 2 + i.length + 8), o = 0;
-	return a.writeUInt8(mn, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
+	return a.writeUInt8(Jn, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
 };
-async function* yn(e) {
-	yield new Uint8Array(Y);
-	for (let t of await gn(e.dir)) {
-		let n = N(e.dir, t), r = await ae(n);
-		if (yield new Uint8Array(_n(t, r.size)), r.size > 0) for await (let e of j(n)) yield new Uint8Array(e);
+async function* $n(e) {
+	yield new Uint8Array(X);
+	for (let t of await Xn(e.dir)) {
+		let n = F(e.dir, t), r = await P(n);
+		if (yield new Uint8Array(Zn(t, r.size)), r.size > 0) for await (let e of se(n)) yield new Uint8Array(e);
 	}
 	if (e.blobs) for await (let t of e.blobs.list()) {
-		yield new Uint8Array(vn(t.key, t.contentType, t.size));
-		let n = y("sha256"), r = 0;
+		yield new Uint8Array(Qn(t.key, t.contentType, t.size));
+		let n = E("sha256"), r = 0;
 		for await (let i of e.blobs.open(t.key)) {
 			let e = Buffer.from(i);
 			n.update(e), r += e.length, yield new Uint8Array(e);
@@ -1303,11 +1552,11 @@ async function* yn(e) {
 		if (r !== t.size) throw Error(`blob '${t.key}' size mismatch: header ${t.size}, streamed ${r}`);
 		yield new Uint8Array(n.digest());
 	}
-	yield new Uint8Array(Buffer.from([fn]));
+	yield new Uint8Array(Buffer.from([Kn]));
 }
-var bn = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), xn = (e) => new Promise((t) => e.end(t)), Sn = async (e, t) => {
-	let n = le(t.dir);
-	await re(n, { recursive: !0 });
+var er = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), tr = (e) => new Promise((t) => e.end(t)), nr = async (e, t) => {
+	let n = he(t.dir);
+	await ue(n, { recursive: !0 });
 	let r = Buffer.alloc(0), i = e[Symbol.asyncIterator](), a = !1, o = async () => {
 		let { value: e, done: t } = await i.next();
 		return t ? (a = !0, !1) : (r = r.length === 0 ? Buffer.from(e) : Buffer.concat([r, Buffer.from(e)]), !0);
@@ -1318,28 +1567,28 @@ var bn = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), xn
 		return r = r.subarray(e), t;
 	};
 	try {
-		if (await s(Y.length), !c(Y.length).equals(Y)) throw Error("not a bundle archive (bad magic)");
+		if (await s(X.length), !c(X.length).equals(X)) throw Error("not a bundle archive (bad magic)");
 		for (;;) {
 			await s(1);
 			let e = c(1).readUInt8(0);
-			if (e === fn) return;
-			if (e === pn) {
+			if (e === Kn) return;
+			if (e === qn) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
 				let t = c(e).toString("utf8");
 				await s(8);
-				let i = c(8).readBigUInt64BE(0), a = le(n, t);
-				if (a !== n && !a.startsWith(n + ue)) throw Error(`archive path '${t}' escapes the destination`);
-				await re(ce(a), { recursive: !0 });
+				let i = c(8).readBigUInt64BE(0), a = he(n, t);
+				if (a !== n && !a.startsWith(n + ge)) throw Error(`archive path '${t}' escapes the destination`);
+				await ue(me(a), { recursive: !0 });
 				let o = M(a);
 				for (; i > 0n;) {
 					r.length === 0 && await s(1);
 					let e = i < BigInt(r.length) ? Number(i) : r.length;
-					await bn(o, c(e)), i -= BigInt(e);
+					await er(o, c(e)), i -= BigInt(e);
 				}
-				await xn(o);
-			} else if (e === mn) {
+				await tr(o);
+			} else if (e === Jn) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
@@ -1349,24 +1598,24 @@ var bn = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), xn
 				await s(i);
 				let a = c(i).toString("utf8");
 				await s(8);
-				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = y("sha256"), d = new k(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
+				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = E("sha256"), d = new j(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
 					contentType: a,
 					size: Number(o)
 				}), p = o;
 				for (; p > 0n;) {
 					r.length === 0 && await s(1);
 					let e = p < BigInt(r.length) ? Number(p) : r.length, t = c(e);
-					u.update(t), l || await bn(d, t), p -= BigInt(e);
+					u.update(t), l || await er(d, t), p -= BigInt(e);
 				}
-				l ? d.destroy() : await xn(d), await f, await s(hn);
-				let m = c(hn);
+				l ? d.destroy() : await tr(d), await f, await s(Yn);
+				let m = c(Yn);
 				if (!u.digest().equals(m)) throw Error(`blob '${n}' failed integrity (sha mismatch)`);
 			} else throw Error(`unknown bundle entry kind ${e}`);
 		}
 	} finally {
 		a || await Promise.resolve(i.return?.()).catch(() => void 0);
 	}
-}, Cn = async (e, t) => {
+}, rr = async (e, t) => {
 	let n = new Set(t), r = /* @__PURE__ */ new Map(), i = Buffer.alloc(0), a = e[Symbol.asyncIterator](), o = async () => {
 		let { value: e, done: t } = await a.next();
 		return !t && (i = i.length === 0 ? Buffer.from(e) : Buffer.concat([i, Buffer.from(e)]), !0);
@@ -1385,11 +1634,11 @@ var bn = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), xn
 		}
 		return Buffer.concat(t);
 	};
-	if (!await s(Y.length) || !c(Y.length).equals(Y)) throw Error("not a bundle archive (bad magic)");
+	if (!await s(X.length) || !c(X.length).equals(X)) throw Error("not a bundle archive (bad magic)");
 	for (; await s(1);) {
 		let e = c(1).readUInt8(0);
-		if (e === fn || e === mn) break;
-		if (e !== pn) throw Error(`unknown bundle entry kind ${e}`);
+		if (e === Kn || e === Jn) break;
+		if (e !== qn) throw Error(`unknown bundle entry kind ${e}`);
 		if (!await s(4)) break;
 		let t = c(4).readUInt32BE(0);
 		if (!await s(t)) break;
@@ -1399,22 +1648,22 @@ var bn = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), xn
 		if (a === null || n.has(i) && (r.set(i, a), n.delete(i), n.size === 0)) break;
 	}
 	return r;
-}, wn = (e, t) => Sn(e, {
+}, ir = (e, t) => nr(e, {
 	dir: t,
-	blobs: Tn(t)
-}), Tn = (e) => {
+	blobs: ar(t)
+}), ar = (e) => {
 	let t = /* @__PURE__ */ new Set();
 	return {
 		has: async (e) => t.has(e),
 		write: async (n, r, i) => {
-			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = N(e, "assets");
-			await re(c, { recursive: !0 });
-			let l = y("sha256"), u = 0, d = new s({ transform(e, t, n) {
+			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = F(e, "assets");
+			await ue(c, { recursive: !0 });
+			let l = E("sha256"), u = 0, d = new s({ transform(e, t, n) {
 				l.update(e), u += e.length, n(null, e);
-			} }), f = N(c, `.tmp-${Date.now()}-${t.size}`);
+			} }), f = F(c, `.tmp-${Date.now()}-${t.size}`);
 			await o(r, d, M(f));
 			let p = l.digest("hex");
-			await a.rename(f, N(c, p)), await a.appendFile(N(c, "index.ndjson"), `${JSON.stringify({
+			await a.rename(f, F(c, p)), await a.appendFile(F(c, "index.ndjson"), `${JSON.stringify({
 				key: n,
 				sha256: p,
 				size: u,
@@ -1422,33 +1671,33 @@ var bn = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), xn
 			})}\n`), t.add(n);
 		}
 	};
-}, En = de(S), Dn = Buffer.from("VENC1\0\0\0"), On = 32, kn = 16, An = 7, X = 16, jn = 262144, Z = {
+}, or = _e(ne), sr = Buffer.from("VENC1\0\0\0"), cr = 32, lr = 16, ur = 7, Z = 16, dr = 262144, fr = {
 	N: 32768,
 	r: 8,
 	p: 1
-}, Mn = 134217728, Q = 43, Nn = (e, t, n) => {
+}, pr = 134217728, Q = 43, mr = (e, t, n) => {
 	let r = Buffer.alloc(12);
-	return e.copy(r, 0, 0, An), r.writeUInt32BE(t >>> 0, An), r.writeUInt8(+!!n, 11), r;
+	return e.copy(r, 0, 0, ur), r.writeUInt32BE(t >>> 0, ur), r.writeUInt8(+!!n, 11), r;
 };
-async function* Pn(e, t) {
+async function* hr(e, t) {
 	if (!t) throw Error("encryptStream: a non-empty passphrase is required");
-	let n = x(kn), r = x(An), i = await En(t, n, On, {
-		...Z,
-		maxmem: Mn
+	let n = te(lr), r = te(ur), i = await or(t, n, cr, {
+		...fr,
+		maxmem: pr
 	}), a = Buffer.alloc(Q);
-	Dn.copy(a, 0), a.writeUInt32BE(Z.N, 8), a.writeUInt32BE(Z.r, 12), a.writeUInt32BE(Z.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
+	sr.copy(a, 0), a.writeUInt32BE(fr.N, 8), a.writeUInt32BE(fr.r, 12), a.writeUInt32BE(fr.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
 	let o = 0, s = (e, t) => {
-		let n = _("aes-256-gcm", i, Nn(r, o, t));
+		let n = w("aes-256-gcm", i, mr(r, o, t));
 		o === 0 && n.setAAD(a);
 		let s = Buffer.concat([n.update(e), n.final()]), c = n.getAuthTag();
 		o++;
-		let l = Buffer.alloc(5 + s.length + X);
-		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + X, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
+		let l = Buffer.alloc(5 + s.length + Z);
+		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + Z, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
 	}, c = Buffer.alloc(0);
-	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > jn;) yield s(c.subarray(0, jn), !1), c = c.subarray(jn);
+	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > dr;) yield s(c.subarray(0, dr), !1), c = c.subarray(dr);
 	yield s(c, !0);
 }
-async function* Fn(e, t) {
+async function* gr(e, t) {
 	if (!t) throw Error("decryptStream: a non-empty passphrase is required");
 	let n = e[Symbol.asyncIterator](), r = Buffer.alloc(0), i = !1, a = async () => {
 		let { value: e, done: t } = await n.next();
@@ -1459,12 +1708,12 @@ async function* Fn(e, t) {
 	};
 	if (!await o(Q)) throw Error("encrypted bundle truncated (no header)");
 	let s = r.subarray(0, Q);
-	if (!s.subarray(0, 8).equals(Dn)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
-	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Q)), p = await En(t, d, On, {
+	if (!s.subarray(0, 8).equals(sr)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
+	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Q)), p = await or(t, d, cr, {
 		N: c,
 		r: l,
 		p: u,
-		maxmem: Mn
+		maxmem: pr
 	});
 	r = r.subarray(Q);
 	let m = 0, h = !1;
@@ -1475,11 +1724,11 @@ async function* Fn(e, t) {
 		}
 		if (h) throw Error("encrypted bundle has trailing data after the final frame");
 		let e = r.readUInt8(0) === 1, t = r.readUInt32BE(1);
-		if (t < X) throw Error("encrypted bundle corrupt (short frame)");
+		if (t < Z) throw Error("encrypted bundle corrupt (short frame)");
 		if (!await o(5 + t)) throw Error("encrypted bundle truncated (frame body)");
-		let n = r.subarray(5, 5 + t - X), i = r.subarray(5 + t - X, 5 + t);
+		let n = r.subarray(5, 5 + t - Z), i = r.subarray(5 + t - Z, 5 + t);
 		r = r.subarray(5 + t);
-		let a = v("aes-256-gcm", p, Nn(f, m, e));
+		let a = T("aes-256-gcm", p, mr(f, m, e));
 		m === 0 && a.setAAD(s), a.setAuthTag(i);
 		let c = Buffer.concat([a.update(n), a.final()]);
 		m++, e && (h = !0), c.length > 0 && (yield new Uint8Array(c));
@@ -1487,11 +1736,11 @@ async function* Fn(e, t) {
 }
 //#endregion
 //#region src/blobStorage.ts
-var In = (e, t) => ({
+var _r = (e, t) => ({
 	list: () => {
 		let e = t();
 		return { async *[Symbol.asyncIterator]() {
-			let t = await n.runPromise(c.runCollect(e));
+			let t = await n.runPromise(l.runCollect(e));
 			for (let e of t) yield {
 				key: e.key,
 				contentType: e.contentType,
@@ -1500,29 +1749,29 @@ var In = (e, t) => ({
 		} };
 	},
 	open: (t) => ({ async *[Symbol.asyncIterator]() {
-		let r = await n.runPromise(T(e, t)), i = await D(r.stream);
+		let r = await n.runPromise(D(e, t)), i = await k(r.stream);
 		for await (let e of i) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 	} })
-}), Ln = (e, t) => In(e, () => h(t, {
-	table: C,
+}), vr = (e, t) => _r(e, () => x(t, {
+	table: re,
 	chunkSize: 500
-}).pipe(c.map((e) => ({
+}).pipe(l.map((e) => ({
 	key: String(e.key),
 	contentType: String(e.contentType ?? "application/octet-stream"),
 	size: Number(e.size ?? 0)
-})))), Rn = (e) => ({
+})))), yr = (e) => ({
 	has: (t) => n.runPromise(e.head(t).pipe(n.map((e) => e !== null))),
 	write: async (t, r, i) => {
-		let a = w("storage", () => ee.from(r));
-		await n.runPromise(E(e, t, a, {
+		let a = ie("storage", () => ae.from(r));
+		await n.runPromise(O(e, t, a, {
 			contentType: i.contentType,
 			totalSize: i.size
 		}));
 	}
-}), zn = (e, t) => {
+}), br = (e, t) => {
 	let n = t === "dump" ? "mariadb-dump" : "mariadb", r = t === "dump" ? "mysqldump" : "mysql";
-	return e === "mariadb" && Bn(n) ? n : r;
-}, Bn = (e) => (process.env.PATH ?? "").split(se).filter((e) => e !== "").some((t) => te(N(t, e))), Vn = (e) => {
+	return e === "mariadb" && xr(n) ? n : r;
+}, xr = (e) => (process.env.PATH ?? "").split(pe).filter((e) => e !== "").some((t) => ce(F(t, e))), Sr = (e) => {
 	switch (e) {
 		case "postgres": return "db.dump";
 		case "mysql":
@@ -1532,7 +1781,7 @@ var In = (e, t) => ({
 		case "mssql": return "db.bacpac";
 		default: return "db.dump";
 	}
-}, Hn = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
+}, Cr = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
 	if (e.host || e.database) return {
 		host: e.host ?? "localhost",
 		port: e.port ?? 3306,
@@ -1548,7 +1797,7 @@ var In = (e, t) => ({
 		password: decodeURIComponent(t.password) || "",
 		database: t.pathname.replace(/^\//, "") || ""
 	};
-}, Un = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Wn = (e, t, n) => {
+}, wr = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Tr = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -1595,7 +1844,7 @@ var In = (e, t) => ({
 			let r = $(t);
 			return {
 				kind: "spawn",
-				tool: zn(e, "dump"),
+				tool: br(e, "dump"),
 				args: [
 					"--single-transaction",
 					"--routines",
@@ -1617,7 +1866,7 @@ var In = (e, t) => ({
 		case "sqlite":
 		case "turso": return {
 			kind: "copy",
-			from: Hn(t),
+			from: Cr(t),
 			to: n
 		};
 		case "mssql": return {
@@ -1625,7 +1874,7 @@ var In = (e, t) => ({
 			tool: "sqlpackage",
 			args: [
 				"/Action:Export",
-				`/SourceConnectionString:${Un($({
+				`/SourceConnectionString:${wr($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -1633,12 +1882,12 @@ var In = (e, t) => ({
 			],
 			env: {}
 		};
-		default: throw new B({
+		default: throw new H({
 			tool: "backup",
 			reason: `no native backup for dialect '${e}'`
 		});
 	}
-}, Gn = (e, t, n) => {
+}, Er = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -1683,7 +1932,7 @@ var In = (e, t) => ({
 			let r = $(t);
 			return {
 				kind: "spawn",
-				tool: zn(e, "client"),
+				tool: br(e, "client"),
 				args: [
 					"--protocol=TCP",
 					"-h",
@@ -1702,14 +1951,14 @@ var In = (e, t) => ({
 		case "turso": return {
 			kind: "copy",
 			from: n,
-			to: Hn(t)
+			to: Cr(t)
 		};
 		case "mssql": return {
 			kind: "spawn",
 			tool: "sqlpackage",
 			args: [
 				"/Action:Import",
-				`/TargetConnectionString:${Un($({
+				`/TargetConnectionString:${wr($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -1717,18 +1966,18 @@ var In = (e, t) => ({
 			],
 			env: {}
 		};
-		default: throw new B({
+		default: throw new H({
 			tool: "restore",
 			reason: `no native restore for dialect '${e}'`
 		});
 	}
-}, Kn = (e) => e.kind === "copy" ? n.async((t) => {
-	A(e.from, e.to, (r) => t(r ? n.fail(new B({
+}, Dr = (e) => e.kind === "copy" ? n.async((t) => {
+	oe(e.from, e.to, (r) => t(r ? n.fail(new H({
 		tool: "copy",
 		reason: `copy ${e.from} → ${e.to}: ${r.message}`
 	})) : n.void));
 }) : n.async((t) => {
-	let r = fe(e.tool, [...e.args], {
+	let r = ve(e.tool, [...e.args], {
 		env: {
 			...process.env,
 			...e.env
@@ -1741,14 +1990,14 @@ var In = (e, t) => ({
 	}), i = "";
 	r.stderr?.on("data", (e) => {
 		i += String(e);
-	}), e.stdoutFile && r.stdout && r.stdout.pipe(M(e.stdoutFile)), e.stdinFile && r.stdin && j(e.stdinFile).pipe(r.stdin);
+	}), e.stdoutFile && r.stdout && r.stdout.pipe(M(e.stdoutFile)), e.stdinFile && r.stdin && se(e.stdinFile).pipe(r.stdin);
 	let a = () => {
 		if (e.stdoutFile !== void 0) try {
-			ne(e.stdoutFile);
+			le(e.stdoutFile);
 		} catch {}
 	};
 	r.on("error", (r) => {
-		a(), t(n.fail(new B({
+		a(), t(n.fail(new H({
 			tool: e.tool,
 			reason: `failed to launch (is '${e.tool}' installed + on PATH?): ${r.message}`
 		})));
@@ -1757,37 +2006,37 @@ var In = (e, t) => ({
 			t(n.void);
 			return;
 		}
-		a(), t(n.fail(new B({
+		a(), t(n.fail(new H({
 			tool: e.tool,
-			reason: `exited with code ${r}` + (e.stdoutFile === void 0 ? "" : ` — the partial ${oe(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
+			reason: `exited with code ${r}` + (e.stdoutFile === void 0 ? "" : ` — the partial ${fe(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
 			stderr: i.slice(-2e3)
 		})));
 	});
-}), qn = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), Jn = (e) => n.gen(function* () {
-	let t = yield* Ve(e.scope ?? { kind: "all" }, e.snapshot, {
+}), Or = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), kr = (e) => n.gen(function* () {
+	let t = yield* Qe(e.scope ?? { kind: "all" }, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), r = jt(t.tables, e.snapshot), i = e.classification ?? he(e.snapshot), a = e.sampleSize ?? 20, o = De(r.map((t) => ({
+	}), r = Ut(t.tables, e.snapshot), i = e.classification ?? xe(e.snapshot), a = e.sampleSize ?? 20, o = Ne(r.map((t) => ({
 		name: t,
 		columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 			name: e.name,
 			type: e.type
 		}))
-	})), i, e.masking), s = [], l = [];
+	})), i, e.masking), s = [], c = [];
 	for (let i of r) {
-		let r = t.predicateFor(i), u = yield* h(e.store, {
+		let r = t.predicateFor(i), u = yield* x(e.store, {
 			table: i,
 			chunkSize: a,
 			...r === void 0 ? {} : { where: r }
-		}).pipe(c.take(a), c.runCollect, n.map((e) => [...e])), d = u.map((t) => Ae(t, i, o.actions, e.masking.seed));
-		l.push(...ke(d, i, o.actions));
+		}).pipe(l.take(a), l.runCollect, n.map((e) => [...e])), d = u.map((t) => Ie(t, i, o.actions, e.masking.seed));
+		c.push(...Fe(d, i, o.actions));
 		let f = u[0], p = d[0], m = [];
 		if (f && p) for (let [e, t] of Object.entries(o.actions)) {
 			if (!e.startsWith(`${i}.`) || t === "keep") continue;
 			let n = e.slice(i.length + 1);
 			m.push({
 				column: n,
-				action: qn(t),
+				action: Or(t),
 				before: f[n],
 				after: p[n]
 			});
@@ -1799,10 +2048,10 @@ var In = (e, t) => ({
 	}
 	return {
 		tables: s,
-		leaks: l,
+		leaks: c,
 		unclassified: o.unclassified
 	};
-}), Yn = (e, t) => {
+}), Ar = (e, t) => {
 	let n = new Map(t.map((e) => [e.name, e])), r = [], i = {};
 	for (let t of e) {
 		let e = n.get(t.name);
@@ -1857,7 +2106,7 @@ var In = (e, t) => ({
 		skipColumns: i,
 		refuse: r.some((e) => e.verdict === "refuse")
 	};
-}, Xn = (e) => {
+}, jr = (e) => {
 	if (e.findings.length === 0) return ["  schema matches the bundle"];
 	let t = {
 		safe: "✓",
@@ -1868,4 +2117,4 @@ var In = (e, t) => ({
 	return n.push(""), n.push(`  discarded: ${r("value-dropped")}   defaulted: ${r("filled-by-default")}   refused: ${r("refuse")}`), e.refuse && (n.push(""), n.push("  REFUSED — no row was written. These are the differences that would make"), n.push("  imported rows WRONG rather than merely incomplete.")), n;
 };
 //#endregion
-export { W as ASSETS_DIR, ot as ASSET_INDEX_FILE, L as BundleError, je as CodecError, Me as CompressionError, Le as CrossDialectError, at as DATA_DIR, me as DEFAULT_CLASS_ACTIONS, Ze as FORMAT_VERSION, Ie as ImportModeError, R as IntegrityError, st as LEDGER_FILE, U as MANIFEST_FILE, Fe as MaskingError, B as NativeToolError, Ne as RowsRefusedError, sn as SAVEPOINT_BATCH_SIZE, Pe as SchemaDriftError, z as ScopeError, Te as applyAction, dn as assessLiveImport, _t as assetDone, Vn as backupArtifactName, Wn as backupCommand, Gt as canonicalType, Jt as checkPortability, on as checkSchemaDrift, he as classificationFromSnapshot, Yn as classifyImportDrift, Je as compressionExt, ze as computeSubsetIds, rt as decodeManifest, Dt as decodeRow, Tt as decodeValue, Fn as decryptStream, un as defineDataProfile, an as diffSnapshots, Tn as dirBlobSink, mt as emptyLedger, nt as encodeManifest, Et as encodeRow, Ct as encodeValue, Pn as encryptStream, Xn as formatImportDrift, Yt as formatIssue, Ke as hasZstd, Ye as makeCompressor, Xe as makeDecompressor, Ae as maskRow, At as ndjsonToRows, Wt as outsideReferenceRefusal, Ut as outsideReferencesInto, yn as packBundle, Cn as peekBundle, qe as pickCompression, De as planMasking, Jn as previewMasking, ht as readLedger, ge as resolveAction, Ve as resolveScope, Ge as restoreAssetFromCas, Gn as restoreCommand, kt as rowsToNdjson, Ht as runExport, ln as runImport, Kn as runNativeStep, ke as scanForLeaks, Ue as storageAssetSink, He as storageAssetSource, Rn as storageBlobSink, In as storageBlobSource, Ln as storageRefsBlobSource, Be as subsetToScope, gt as tableDone, jt as topoSortTables, Sn as unpackBundle, wn as unpackBundleToDir, We as writeAssetToCas, K as writeLedger };
+export { _t as ASSETS_DIR, vt as ASSET_INDEX_FILE, B as BundleError, Be as CodecError, He as CompressionError, qe as CrossDialectError, gt as DATA_DIR, be as DEFAULT_CLASS_ACTIONS, ct as FORMAT_VERSION, Ke as ImportModeError, Ve as IntegrityError, yt as LEDGER_FILE, W as MANIFEST_FILE, Ge as MaskingError, H as NativeToolError, Ue as RowsRefusedError, Rn as SAVEPOINT_BATCH_SIZE, gn as STAGING_PREFIX, We as SchemaDriftError, V as ScopeError, je as applyAction, Bn as asImportError, Gn as assessLiveImport, kt as assetDone, Sr as backupArtifactName, Tr as backupCommand, rn as canonicalType, sn as checkPortability, Ln as checkSchemaDrift, xe as classificationFromSnapshot, Ar as classifyImportDrift, at as compressionExt, Ye as computeSubsetIds, mt as decodeManifest, zt as decodeRow, Lt as decodeValue, gr as decryptStream, Wn as defineDataProfile, In as diffSnapshots, ar as dirBlobSink, xn as dropStagingSql, Et as emptyLedger, pt as encodeManifest, Rt as encodeRow, Ft as encodeValue, hr as encryptStream, Dn as execStatements, jr as formatImportDrift, cn as formatIssue, rt as hasZstd, ot as makeCompressor, st as makeDecompressor, Ie as maskRow, Ht as ndjsonToRows, nn as outsideReferenceRefusal, tn as outsideReferencesInto, $n as packBundle, rr as peekBundle, it as pickCompression, Ne as planMasking, kr as previewMasking, Dt as readLedger, Se as resolveAction, Qe as resolveScope, nt as restoreAssetFromCas, Er as restoreCommand, Vt as rowsToNdjson, en as runExport, Un as runImport, Dr as runNativeStep, Fe as scanForLeaks, J as stagingNameFor, et as storageAssetSink, $e as storageAssetSource, yr as storageBlobSink, _r as storageBlobSource, vr as storageRefsBlobSource, Xe as subsetToScope, Ot as tableDone, Ut as topoSortTables, nr as unpackBundle, ir as unpackBundleToDir, tt as writeAssetToCas, K as writeLedger };