@voltro/data-transfer 0.53.0 → 0.55.0

package/dist/index.js

@@ -1,18 +1,18 @@
 import { Cause as e, Data as t, Effect as n, Exit as r, Metric as i, MetricBoundaries as a, Runtime as o, Schedule as s, Schema as c, Stream as l } from "effect";
-import { DATA_TRANSFERS_TABLE as u, REPLACE_IN_PROGRESS_TABLE as d, _voltroDataTransfersTable as f, classifyConstraintViolation as p, derivedRowId as m, ensureTableRegistered as h, eq as g, extractDbCause as _, getTable as v, inSet as y, isNotNull as b, or as x, recordsTable as S, registerTable as ee, streamTable as C, suspendWriteRecorders as te, suspendWriteRecordersEffect as ne, unregisterTable as re } from "@voltro/database";
-import { fingerprintSchema as ie } from "@voltro/database/sql";
-import { createCipheriv as w, createDecipheriv as T, createHash as E, createHmac as ae, randomBytes as D, randomUUID as oe, scrypt as se } from "node:crypto";
-import { copyFile as ce, createReadStream as le, createWriteStream as O, existsSync as ue, rename as de, statSync as fe, unlinkSync as k } from "node:fs";
-import { STORAGE_REFS_TABLE as pe, fromNodeReadable as me, getObjectStream as A, putObjectStream as j, toNodeReadable as he } from "@voltro/plugin-storage";
+import { DATA_TRANSFERS_TABLE as u, REPLACE_IN_PROGRESS_TABLE as d, STAGING_TABLE_PREFIX as f, _voltroDataTransfersTable as p, classifyConstraintViolation as m, derivedRowId as h, ensureTableRegistered as g, eq as _, extractDbCause as v, getTable as y, inSet as b, isNotNull as x, or as S, recordsTable as ee, registerTable as te, streamTable as C, suspendWriteRecorders as ne, suspendWriteRecordersEffect as re, unregisterTable as ie } from "@voltro/database";
+import { fingerprintSchema as w } from "@voltro/database/sql";
+import { createCipheriv as ae, createDecipheriv as oe, createHash as T, createHmac as se, randomBytes as ce, randomUUID as le, scrypt as ue } from "node:crypto";
+import { copyFile as E, createReadStream as de, createWriteStream as D, existsSync as fe, rename as pe, statSync as O, unlinkSync as me } from "node:fs";
+import { STORAGE_REFS_TABLE as k, fromNodeReadable as he, getObjectStream as A, putObjectStream as ge, toNodeReadable as j } from "@voltro/plugin-storage";
 import * as M from "node:zlib";
-import { PassThrough as N, Readable as ge } from "node:stream";
-import { SqlClient as _e } from "@effect/sql";
-import { mkdir as P, readdir as F, stat as ve } from "node:fs/promises";
-import { basename as I, delimiter as L, dirname as ye, join as R, resolve as be, sep as xe } from "node:path";
-import { promisify as Se } from "node:util";
-import { spawn as Ce } from "node:child_process";
+import { PassThrough as N, Readable as _e } from "node:stream";
+import { SqlClient as P } from "@effect/sql";
+import { mkdir as F, readdir as I, stat as ve } from "node:fs/promises";
+import { basename as L, delimiter as ye, dirname as be, join as R, resolve as xe, sep as Se } from "node:path";
+import { promisify as Ce } from "node:util";
+import { spawn as we } from "node:child_process";
 //#region src/consistency.ts
-var we = (e) => {
+var Te = (e) => {
 	switch (e) {
 		case "postgres": return ["SET TRANSACTION ISOLATION LEVEL REPEATABLE READ"];
 		case "mysql":
@@ -22,7 +22,7 @@ var we = (e) => {
 		case "turso": return [];
 		default: return [];
 	}
-}, Te = {
+}, Ee = {
 	email: { fake: "email" },
 	fullName: { fake: "fullName" },
 	firstName: { fake: "firstName" },
@@ -37,7 +37,7 @@ var we = (e) => {
 	date: "dateShift",
 	secret: "null",
 	freeText: "redact"
-}, Ee = (e) => {
+}, De = (e) => {
 	let t = {};
 	for (let n of e.tables) {
 		let e = {};
@@ -49,15 +49,15 @@ var we = (e) => {
 		t[n.name] = e;
 	}
 	return t;
-}, De = (e, t, n, r) => {
+}, Oe = (e, t, n, r) => {
 	let i = r.columns?.[`${e}.${t}`];
 	if (i) return i;
 	if (n?.sensitive) {
 		let e = n.sensitive.class;
-		return r.classes?.[e] ?? Te[e] ?? "redact";
+		return r.classes?.[e] ?? Ee[e] ?? "redact";
 	}
 	return n?.safe ? r.onSafe ?? "keep" : n?.columnType === "id" || n?.columnType === "reference" ? "keep" : r.onUnclassified ?? "error";
-}, Oe = (e, t) => ae("sha256", e).update(t == null ? "∅" : String(t)).digest(), z = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), ke = [
+}, ke = (e, t) => se("sha256", e).update(t == null ? "∅" : String(t)).digest(), z = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), Ae = [
 	"Ada",
 	"Alan",
 	"Grace",
@@ -70,7 +70,7 @@ var we = (e) => {
 	"Guido",
 	"Margaret",
 	"Bjarne"
-], Ae = [
+], je = [
 	"Lovelace",
 	"Turing",
 	"Hopper",
@@ -83,7 +83,7 @@ var we = (e) => {
 	"Rossum",
 	"Hamilton",
 	"Stroustrup"
-], je = [
+], Me = [
 	"Maple",
 	"Oak",
 	"Cedar",
@@ -92,7 +92,7 @@ var we = (e) => {
 	"Birch",
 	"Willow",
 	"Ash"
-], Me = [
+], Ne = [
 	"Initech",
 	"Hooli",
 	"Umbrella",
@@ -101,23 +101,23 @@ var we = (e) => {
 	"Soylent",
 	"Stark",
 	"Wayne"
-], B = (e, t, n) => e[z(t, n) % e.length], Ne = (e, t, n) => {
-	let r = Oe(n, `${e}:${String(t)}`), i = z(r, 1) % 1e4;
+], B = (e, t, n) => e[z(t, n) % e.length], Pe = (e, t, n) => {
+	let r = ke(n, `${e}:${String(t)}`), i = z(r, 1) % 1e4;
 	switch (e) {
-		case "email": return `${B(ke, r, 0).toLowerCase()}.${B(Ae, r, 2).toLowerCase()}${i}@example.com`;
-		case "fullName": return `${B(ke, r, 0)} ${B(Ae, r, 1)}`;
-		case "firstName": return B(ke, r, 0);
-		case "lastName": return B(Ae, r, 1);
-		case "username": return `${B(ke, r, 0).toLowerCase()}${i}`;
+		case "email": return `${B(Ae, r, 0).toLowerCase()}.${B(je, r, 2).toLowerCase()}${i}@example.com`;
+		case "fullName": return `${B(Ae, r, 0)} ${B(je, r, 1)}`;
+		case "firstName": return B(Ae, r, 0);
+		case "lastName": return B(je, r, 1);
+		case "username": return `${B(Ae, r, 0).toLowerCase()}${i}`;
 		case "phone": return `+1${String(z(r, 0) % 1e10).padStart(10, "0")}`;
-		case "address": return `${z(r, 0) % 9899 + 100} ${B(je, r, 1)} St`;
-		case "company": return B(Me, r, 0);
+		case "address": return `${z(r, 0) % 9899 + 100} ${B(Me, r, 1)} St`;
+		case "company": return B(Ne, r, 0);
 		case "url": return `https://example.com/${r.toString("hex").slice(0, 12)}`;
 		case "ip": return `${z(r, 0) % 256}.${z(r, 1) % 256}.${z(r, 2) % 256}.${z(r, 3) % 254 + 1}`;
-		case "creditCard": return Pe(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
+		case "creditCard": return Fe(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
 		default: return `${e}_${r.toString("hex").slice(0, 8)}`;
 	}
-}, Pe = (e) => {
+}, Fe = (e) => {
 	let t = e.slice(0, 15).split("").map(Number), n = 0;
 	t.forEach((e, t) => {
 		let r = e;
@@ -125,31 +125,31 @@ var we = (e) => {
 	});
 	let r = (10 - n % 10) % 10;
 	return e.slice(0, 15) + String(r);
-}, Fe = 864e5, Ie = (e, t) => {
+}, Ie = 864e5, Le = (e, t) => {
 	let n = e instanceof Date ? e.getTime() : Date.parse(String(e));
 	if (Number.isNaN(n)) return e;
-	let r = z(Oe(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Fe);
+	let r = z(ke(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Ie);
 	return e instanceof Date ? i : i.toISOString();
-}, Le = (e, t) => {
+}, Re = (e, t) => {
 	if (t.value === null || t.value === void 0) return null;
 	if (e === "error") throw Error(`masking: unresolved 'error' action for ${t.table}.${t.column}`);
 	if (e === "keep") return t.value;
 	if (e === "null") return null;
 	if (e === "redact") return t.columnType === "text" || typeof t.value == "string" ? "[redacted]" : null;
-	if (e === "hash") return Oe(t.seed, t.value).toString("hex").slice(0, 16);
-	if (e === "dateShift") return Ie(t.value, t.seed);
-	if (typeof e == "object" && "fake" in e) return Ne(e.fake, t.value, t.seed);
+	if (e === "hash") return ke(t.seed, t.value).toString("hex").slice(0, 16);
+	if (e === "dateShift") return Le(t.value, t.seed);
+	if (typeof e == "object" && "fake" in e) return Pe(e.fake, t.value, t.seed);
 	if (typeof e == "object" && "custom" in e) return e.custom(t);
 	throw Error(`masking: '${t.table}.${t.column}' resolved to an action this build does not understand (${JSON.stringify(e)}). Refusing to copy the value through. Valid actions: 'keep' | 'null' | 'redact' | 'hash' | 'dateShift' | { fake: '<class>' } | { custom: fn }.`);
-}, Re = (e) => typeof e == "string" ? e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error" : typeof e != "object" || !e ? !1 : "fake" in e ? typeof e.fake == "string" : "custom" in e && typeof e.custom == "function", ze = (e, t, n) => {
+}, ze = (e) => typeof e == "string" ? e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error" : typeof e != "object" || !e ? !1 : "fake" in e ? typeof e.fake == "string" : "custom" in e && typeof e.custom == "function", Be = (e, t, n) => {
 	let r = {}, i = [], a = [];
 	for (let o of e) for (let e of o.columns) {
-		let s = `${o.name}.${e.name}`, c = De(o.name, e.name, t[o.name]?.[e.name], n);
+		let s = `${o.name}.${e.name}`, c = Oe(o.name, e.name, t[o.name]?.[e.name], n);
 		if (c === "error") {
 			i.push(s);
 			continue;
 		}
-		if (!Re(c)) {
+		if (!ze(c)) {
 			a.push({
 				column: s,
 				action: c
@@ -163,7 +163,7 @@ var we = (e) => {
 		unclassified: i,
 		invalid: a
 	};
-}, Be = [
+}, Ve = [
 	{
 		name: "email",
 		re: /[\w.+-]+@[\w-]+\.[\w.-]+/
@@ -180,7 +180,7 @@ var we = (e) => {
 		name: "creditCard",
 		re: /\b(?:\d[ -]?){13,16}\b/
 	}
-], Ve = (e, t, n) => {
+], He = (e, t, n) => {
 	let r = [], i = /* @__PURE__ */ new Set();
 	for (let [a, o] of Object.entries(n)) {
 		if (!a.startsWith(`${t}.`) || o !== "keep") continue;
@@ -188,7 +188,7 @@ var we = (e) => {
 		for (let a of e) {
 			let e = a[n];
 			if (typeof e != "string" || e.length === 0) continue;
-			let o = Be.find((t) => t.re.test(e));
+			let o = Ve.find((t) => t.re.test(e));
 			if (o && !i.has(n)) {
 				i.add(n), r.push({
 					table: t,
@@ -201,9 +201,9 @@ var we = (e) => {
 		}
 	}
 	return r;
-}, He = (e, t, n, r, i) => {
+}, Ue = (e, t, n, r, i) => {
 	let a = {};
-	for (let [o, s] of Object.entries(e)) a[o] = Le(n[`${t}.${o}`] ?? "keep", {
+	for (let [o, s] of Object.entries(e)) a[o] = Re(n[`${t}.${o}`] ?? "keep", {
 		value: s,
 		table: t,
 		column: o,
@@ -211,7 +211,7 @@ var we = (e) => {
 		...i?.[o] ? { columnType: i[o] } : {}
 	});
 	return a;
-}, Ue = /* @__PURE__ */ new Map([
+}, We = /* @__PURE__ */ new Map([
 	["_voltro_migration_plans", "the schema fingerprint THIS deployment applied — a foreign row makes the next boot refuse"],
 	["_voltro_migrations", "which file-based migrations ran HERE — a foreign row marks unrun migrations as done"],
 	["_voltro_seeds", "which seeds ran HERE — a foreign row suppresses seeding the target still needs"],
@@ -244,7 +244,7 @@ var we = (e) => {
 	["_voltro_notification_held", "notifications waiting to be SENT from here — a foreign row makes the target deliver something queued elsewhere"],
 	["_voltro_webhook_event_stats", "per-deployment delivery counters a backoff decision reads — foreign counts steer the target's retries"],
 	["_voltro_webhook_rate_windows", "the live rate-limit windows this deployment is inside — a foreign window throttles or releases wrongly"]
-]), We = /* @__PURE__ */ new Map([
+]), Ge = /* @__PURE__ */ new Map([
 	["_voltro_agent_threads", "conversations the app's users had — app data"],
 	["_voltro_agent_messages", "the messages in those conversations — app data"],
 	["_voltro_prompts", "prompt definitions the app authored — app data"],
@@ -279,21 +279,21 @@ var we = (e) => {
 	["_voltro_comment_threads", "the threads those comments hang on — app data"],
 	["_voltro_comment_reactions", "the reactions the app's users left — app data"],
 	["_voltro_comment_reads", "which comments each user has read — app data, and losing it re-marks everything unread"]
-]), V = (e) => Ue.has(e), Ge = (e) => Ue.get(e), Ke = (e, t) => {
+]), V = (e) => We.has(e), Ke = (e) => We.get(e), qe = (e, t) => {
 	if (e.length === 0) return;
-	let n = e.map((e) => `    ${e} — ${Ge(e) ?? "describes this deployment"}`);
+	let n = e.map((e) => `    ${e} — ${Ke(e) ?? "describes this deployment"}`);
 	return `${t} ${e.length} table(s) that describe a deployment rather than its data:\n${n.join("\n")}\n  A row from another environment is not stale there, it is a false statement about this one.`;
 }, H = class extends c.TaggedError()("BundleError", {
 	reason: c.String,
 	path: c.optional(c.String)
-}) {}, qe = class extends c.TaggedError()("CodecError", {
+}) {}, Je = class extends c.TaggedError()("CodecError", {
 	table: c.String,
 	reason: c.String
-}) {}, Je = class extends c.TaggedError()("IntegrityError", {
+}) {}, Ye = class extends c.TaggedError()("IntegrityError", {
 	what: c.String,
 	expected: c.String,
 	actual: c.String
-}) {}, Ye = class extends t.TaggedError("CompressionError") {}, U = class extends c.TaggedError()("ScopeError", { reason: c.String }) {}, Xe = class extends c.TaggedError()("RowsRefusedError", {
+}) {}, Xe = class extends t.TaggedError("CompressionError") {}, U = class extends c.TaggedError()("ScopeError", { reason: c.String }) {}, Ze = class extends c.TaggedError()("RowsRefusedError", {
 	rows: c.Array(c.Struct({
 		table: c.String,
 		id: c.String,
@@ -307,7 +307,7 @@ var we = (e) => {
 		refused: c.Number,
 		primary: c.Number
 	}))
-}) {}, Ze = class extends c.TaggedError()("SchemaDriftError", {
+}) {}, Qe = class extends c.TaggedError()("SchemaDriftError", {
 	bundleFingerprint: c.String,
 	targetFingerprint: c.String,
 	diff: c.Array(c.String)
@@ -316,20 +316,20 @@ var we = (e) => {
 		let e = this.stderr?.trim(), t = this.hint?.trim();
 		return `${this.tool}: ${this.reason}${e ? `\n${e}` : ""}${t ? `\n\nhint: ${t}` : ""}`;
 	}
-}, Qe = class extends c.TaggedError()("MaskingError", {
+}, $e = class extends c.TaggedError()("MaskingError", {
 	unclassified: c.Array(c.String),
 	invalidActions: c.optional(c.Array(c.String))
-}) {}, $e = class extends c.TaggedError()("ImportModeError", {
+}) {}, et = class extends c.TaggedError()("ImportModeError", {
 	mode: c.String,
 	reason: c.String
-}) {}, et = class extends c.TaggedError()("CrossDialectError", {
+}) {}, tt = class extends c.TaggedError()("CrossDialectError", {
 	sourceDialect: c.String,
 	targetDialect: c.String,
 	blocking: c.Array(c.String)
-}) {}, G = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", tt = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
+}) {}, G = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", nt = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
 	col: e.name,
 	refTable: e.references.table
-})), nt = (e, t, r) => n.gen(function* () {
+})), rt = (e, t, r) => n.gen(function* () {
 	let i = r.maxDepth ?? 12, a = new Set(r.pinned ?? []), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = /* @__PURE__ */ new Map(), u = (e) => {
 		let t = s.get(e) ?? /* @__PURE__ */ new Set();
 		return s.set(e, t), t;
@@ -347,7 +347,7 @@ var we = (e) => {
 			for (let t of n) d(t.refTable, e[t.col]);
 		};
 	}, p = (r, i) => {
-		let a = f(r, G(t, r), tt(t, r));
+		let a = f(r, G(t, r), nt(t, r));
 		return l.runForEach(C(e, {
 			table: r,
 			pk: G(t, r),
@@ -359,7 +359,7 @@ var we = (e) => {
 			c.clear();
 			for (let [n, r] of e) {
 				let e = [...r].filter((e) => !s.get(n)?.has(e));
-				e.length !== 0 && (yield* p(n, y(G(t, n), e)));
+				e.length !== 0 && (yield* p(n, b(G(t, n), e)));
 			}
 		}
 	});
@@ -374,21 +374,21 @@ var we = (e) => {
 					refTable: e.references?.table
 				})).filter((t) => !!t.refTable && e.has(t.refTable) && (s.get(t.refTable)?.size ?? 0) > 0);
 				if (a.length === 0) continue;
-				let o = s.get(t)?.size ?? 0, c = a.map((e) => y(e.col, [...s.get(e.refTable)]));
-				yield* p(t, c.length === 1 ? c[0] : x(...c)), (s.get(t)?.size ?? 0) > o && !e.has(t) && r.push(t), (s.get(t)?.size ?? 0) > o && (n = !0);
+				let o = s.get(t)?.size ?? 0, c = a.map((e) => b(e.col, [...s.get(e.refTable)]));
+				yield* p(t, c.length === 1 ? c[0] : S(...c)), (s.get(t)?.size ?? 0) > o && !e.has(t) && r.push(t), (s.get(t)?.size ?? 0) > o && (n = !0);
 			}
 			for (let t of r) e.add(t);
 			if (yield* m, !n) break;
 		}
 	}
 	return o;
-}), rt = (e, t) => ({
+}), it = (e, t) => ({
 	tables: [...e.keys()],
 	predicateFor: (n) => {
 		let r = e.get(n);
-		return r ? y(G(t, n), [...r]) : void 0;
+		return r ? b(G(t, n), [...r]) : void 0;
 	}
-}), it = "tenantId", at = (e, t, r) => n.gen(function* () {
+}), at = "tenantId", ot = (e, t, r) => n.gen(function* () {
 	let i = t.tables.map((e) => e.name), a = new Map(t.tables.map((e) => [e.name, e]));
 	if (e.kind === "all") {
 		let t = new Set(e.exclude ?? []);
@@ -408,29 +408,29 @@ var we = (e) => {
 	}
 	let o = e.tenantId;
 	if (o === void 0 || o === "") return yield* n.fail(new U({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
-	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === it) ?? !1);
-	if (s.length === 0) return yield* n.fail(new U({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${it}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
-	let c = yield* nt(r.store, t, {
-		seeds: Object.fromEntries(s.map((e) => [e, g(it, o)])),
+	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === at) ?? !1);
+	if (s.length === 0) return yield* n.fail(new U({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${at}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
+	let c = yield* rt(r.store, t, {
+		seeds: Object.fromEntries(s.map((e) => [e, _(at, o)])),
 		pinned: s,
 		children: { roots: s }
 	}), l = [...c.entries()].filter(([, e]) => e.size > 0).map(([e]) => e), u = new Set(s);
 	return {
 		tables: [...s, ...l],
-		predicateFor: (e) => u.has(e) ? g(it, o) : c.has(e) ? y(G(t, e), [...c.get(e)]) : void 0
+		predicateFor: (e) => u.has(e) ? _(at, o) : c.has(e) ? b(G(t, e), [...c.get(e)]) : void 0
 	};
-}), ot = (e, t) => ({
+}), st = (e, t) => ({
 	list: t,
 	open: (t) => A(e, t)
-}), st = (e) => ({
-	write: (t, n, r) => j(e, t, n, r),
+}), ct = (e) => ({
+	write: (t, n, r) => ge(e, t, n, r),
 	has: (t) => e.head(t).pipe(n.map((e) => e !== null))
-}), ct = (e, t) => n.tryPromise({
+}), lt = (e, t) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), r = await import("node:fs/promises"), { createHash: i, randomUUID: a } = await import("node:crypto"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = await import("node:path"), l = c.join(t, `.tmp-${a()}`), u = i("sha256"), d = 0, f = new s({ transform(e, t, n) {
 			u.update(e), d += e.length, n(null, e);
 		} });
-		await o(await he(e.stream), f, n(l));
+		await o(await j(e.stream), f, n(l));
 		let p = u.digest("hex"), m = c.join(t, p);
 		try {
 			await r.access(m), await r.rm(l, { force: !0 });
@@ -447,26 +447,26 @@ var we = (e) => {
 		reason: `asset write failed: ${String(e?.message ?? e)}`,
 		path: t
 	})
-}), lt = (e, t, r) => n.gen(function* () {
-	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), c = o("sha256"), u = me("bundle", () => a(s)).pipe(l.tap((e) => n.sync(() => c.update(e))));
+}), ut = (e, t, r) => n.gen(function* () {
+	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), c = o("sha256"), u = he("bundle", () => a(s)).pipe(l.tap((e) => n.sync(() => c.update(e))));
 	yield* e.write(r.key, u, {
 		contentType: r.contentType,
 		totalSize: r.size
 	});
 	let d = c.digest("hex");
-	if (d !== r.sha256) return yield* n.fail(new Je({
+	if (d !== r.sha256) return yield* n.fail(new Ye({
 		what: `asset ${r.key}`,
 		expected: r.sha256,
 		actual: d
 	}));
-}), ut = {
+}), dt = {
 	done: () => !1,
 	mark: () => n.void
-}, dt = (e) => typeof e == "object" && !!e && e.status === 404, ft = (e) => n.gen(function* () {
-	let t = e.progress ?? ut, r = 0, i = 0, a = 0, o = 0, s = /* @__PURE__ */ new Set(), c = /* @__PURE__ */ new Set(), u = [];
-	return yield* l.runForEach(e.source.list(), (l) => (a++, t.done(l.key) || c.has(l.key) ? n.void : (c.add(l.key), e.source.open(l.key).pipe(n.map((e) => e), n.catchIf(dt, () => n.sync(() => {
+}, ft = (e) => typeof e == "object" && !!e && e.status === 404, pt = (e) => n.gen(function* () {
+	let t = e.progress ?? dt, r = 0, i = 0, a = 0, o = 0, s = /* @__PURE__ */ new Set(), c = /* @__PURE__ */ new Set(), u = [];
+	return yield* l.runForEach(e.source.list(), (l) => (a++, t.done(l.key) || c.has(l.key) ? n.void : (c.add(l.key), e.source.open(l.key).pipe(n.map((e) => e), n.catchIf(ft, () => n.sync(() => {
 		u.push(l.key);
-	})), n.flatMap((a) => a === void 0 ? n.void : ct(a, e.assetsDir).pipe(n.flatMap((e) => {
+	})), n.flatMap((a) => a === void 0 ? n.void : lt(a, e.assetsDir).pipe(n.flatMap((e) => {
 		let n = {
 			key: l.key,
 			sha256: e.sha256,
@@ -482,18 +482,18 @@ var we = (e) => {
 		objectBytes: o,
 		missing: u
 	};
-}), pt = (e) => me("bundle", () => le(e)).pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.map((e) => JSON.parse(e)), l.mapError((t) => t instanceof H ? t : new H({
+}), mt = (e) => he("bundle", () => de(e)).pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.map((e) => JSON.parse(e)), l.mapError((t) => t instanceof H ? t : new H({
 	reason: `asset index unreadable: ${String(t)}`,
 	path: e
-}))), mt = (e) => n.gen(function* () {
-	let t = e.progress ?? ut, r = 0, i = /* @__PURE__ */ new Set(), a = /* @__PURE__ */ new Set();
-	return yield* l.runForEach(pt(e.indexPath), (o) => t.done(o.key) || a.has(o.key) ? n.void : (a.add(o.key), lt(e.sink, e.assetsDir, o)).pipe(n.andThen(n.sync(() => {
+}))), ht = (e) => n.gen(function* () {
+	let t = e.progress ?? dt, r = 0, i = /* @__PURE__ */ new Set(), a = /* @__PURE__ */ new Set();
+	return yield* l.runForEach(mt(e.indexPath), (o) => t.done(o.key) || a.has(o.key) ? n.void : (a.add(o.key), ut(e.sink, e.assetsDir, o)).pipe(n.andThen(n.sync(() => {
 		r++, i.add(o.sha256);
 	})), n.andThen(t.mark(o.key, o)))), {
 		count: r,
 		objects: i.size
 	};
-}), ht = () => typeof M.createZstdCompress == "function", gt = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : ht() ? "zstd" : "gzip", _t = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", vt = (e) => e === "zstd" ? M.createZstdCompress() : e === "gzip" ? M.createGzip() : new N(), yt = (e) => e === "zstd" ? M.createZstdDecompress() : e === "gzip" ? M.createGunzip() : new N(), bt = 1, xt = c.Struct({
+}), gt = () => typeof M.createZstdCompress == "function", _t = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : gt() ? "zstd" : "gzip", vt = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", yt = (e) => e === "zstd" ? M.createZstdCompress() : e === "gzip" ? M.createGzip() : new N(), bt = (e) => e === "zstd" ? M.createZstdDecompress() : e === "gzip" ? M.createGunzip() : new N(), xt = 1, St = c.Struct({
 	name: c.String,
 	file: c.String,
 	rowCount: c.Number,
@@ -503,12 +503,12 @@ var we = (e) => {
 		value: c.String
 	}),
 	primaryKey: c.String
-}), St = c.Struct({
+}), Ct = c.Struct({
 	kind: c.Literal("all", "tenant", "tables"),
 	tenantId: c.optional(c.String),
 	tables: c.optional(c.Array(c.String)),
 	exclude: c.optional(c.Array(c.String))
-}), Ct = c.Struct({
+}), wt = c.Struct({
 	count: c.Number,
 	totalBytes: c.Number,
 	index: c.optional(c.String)
@@ -519,23 +519,23 @@ c.Struct({
 	size: c.Number,
 	contentType: c.String
 });
-var wt = c.Struct({
+var Tt = c.Struct({
 	formatVersion: c.Number,
 	createdAt: c.String,
 	source: c.Struct({
 		dialect: c.String,
 		schemaFingerprint: c.String
 	}),
-	scope: St,
+	scope: Ct,
 	consistency: c.Literal("live", "snapshot"),
 	compression: c.Literal("zstd", "gzip", "none"),
-	tables: c.Array(xt),
-	assets: Ct,
+	tables: c.Array(St),
+	assets: wt,
 	masking: c.optional(c.Struct({
 		policyId: c.optional(c.String),
 		transformed: c.Array(c.String)
 	}))
-}), Tt = c.encodeSync(c.parseJson(wt)), Et = c.decodeUnknownSync(c.parseJson(wt)), K = "manifest.json", Dt = "README.md", Ot = "data", kt = "assets", At = "assets/index.ndjson", jt = ".ledger.json", Mt = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", Nt = (e, t) => {
+}), Et = c.encodeSync(c.parseJson(Tt)), Dt = c.decodeUnknownSync(c.parseJson(Tt)), K = "manifest.json", Ot = "README.md", kt = "data", At = "assets", jt = "assets/index.ndjson", Mt = ".ledger.json", Nt = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", Pt = (e, t) => {
 	let n = e.tables.reduce((e, t) => e + t.rowCount, 0), r = e.masking ? `✅ **Masked at the source** — ${e.masking.transformed.length} column(s) transformed${e.masking.policyId ? ` (policy \`${e.masking.policyId}\`)` : ""}. Personal data was replaced with realistic, referentially-consistent fakes before any byte was written.` : "⚠️ **NOT masked — this bundle contains REAL data (PII included).** Treat it as production data: do not copy it into a lower environment or share it without review. To produce a safe copy, re-export under a masking profile (`--profile`).", i = e.masking && e.masking.transformed.length > 0 ? `\n\nMasked columns: ${e.masking.transformed.map((e) => `\`${e}\``).join(", ")}.` : "", a = e.assets.count > 0 ? `${e.assets.count} object(s), ${e.assets.totalBytes} bytes` : "none", o = e.tables.map((e) => `| \`${e.name}\` | ${e.rowCount} |`).join("\n");
 	return `# Voltro data export
 
@@ -549,7 +549,7 @@ The machine-readable manifest is \`manifest.json\`; this file is a human summary
 | **Format version** | ${e.formatVersion} |
 | **Consistency** | ${e.consistency} |
 | **Compression** | ${e.compression} |
-| **Scope** | ${Mt(e.scope)} |
+| **Scope** | ${Nt(e.scope)} |
 | **Tables** | ${e.tables.length} |
 | **Rows (total)** | ${n} |
 | **Assets** | ${a} |
@@ -574,26 +574,26 @@ voltro data import <this-directory>
 voltro data import <this-directory> --target api --api-url <url> --token <secret>
 \`\`\`
 `;
-}, Pt = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), Ft = a.exponential({
+}, Ft = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), It = a.exponential({
 	start: .01,
 	factor: 2,
 	count: 16
-}), It = i.histogram("voltro_data_transfer_table_seconds", Ft, "Per-table export/import duration in seconds, tagged by phase."), q = (e, t) => {
+}), Lt = i.histogram("voltro_data_transfer_table_seconds", It, "Per-table export/import duration in seconds, tagged by phase."), q = (e, t) => {
 	if (e) try {
 		e(t);
 	} catch {}
-}, Lt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(It.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), Pt.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
+}, Rt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(Lt.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), Ft.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
 	table: t,
 	index: r,
 	tableCount: a,
 	phase: e
-} })), Rt = () => ({
+} })), zt = () => ({
 	tables: {},
 	assets: {}
-}), zt = (e) => n.tryPromise(async () => {
+}), Bt = (e) => n.tryPromise(async () => {
 	let t = await (await import("node:fs/promises")).readFile(e, "utf8");
 	return JSON.parse(t);
-}).pipe(n.orElseSucceed(Rt)), J = (e, t) => n.tryPromise({
+}).pipe(n.orElseSucceed(zt)), J = (e, t) => n.tryPromise({
 	try: async () => {
 		let n = await import("node:fs/promises"), { randomUUID: r } = await import("node:crypto"), i = `${e}.tmp-${r()}`;
 		await n.writeFile(i, JSON.stringify(t)), await n.rename(i, e);
@@ -602,11 +602,11 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		reason: `ledger write failed: ${String(t?.message ?? t)}`,
 		path: e
 	})
-}), Bt = (e, t) => t in e.tables, Vt = (e, t) => t in e.assets, Ht = /* @__PURE__ */ new Set([
+}), Vt = (e, t) => t in e.tables, Ht = (e, t) => t in e.assets, Ut = /* @__PURE__ */ new Set([
 	"json",
 	"array",
 	"vector"
-]), Ut = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", Wt = (e) => Buffer.from(e).toString("base64"), Gt = (e) => new Uint8Array(Buffer.from(e, "base64")), Kt = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), qt = (e, t) => e == null ? null : t !== void 0 && Ht.has(t) ? e : t === "bytes" ? Wt(e) : t === "timestamp" || t === "date" ? Kt(e) : typeof e == "bigint" ? {
+]), Wt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", Gt = (e) => Buffer.from(e).toString("base64"), Kt = (e) => new Uint8Array(Buffer.from(e, "base64")), qt = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), Jt = (e, t) => e == null ? null : t !== void 0 && Ut.has(t) ? e : t === "bytes" ? Gt(e) : t === "timestamp" || t === "date" ? qt(e) : typeof e == "bigint" ? {
 	$v: "bigint",
 	d: e.toString()
 } : typeof e == "number" && !Number.isFinite(e) ? {
@@ -617,30 +617,30 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	d: e.toISOString()
 } : e instanceof Uint8Array ? {
 	$v: "bytes",
-	d: Wt(e)
-} : e, Jt = (e) => {
+	d: Gt(e)
+} : e, Yt = (e) => {
 	switch (e.$v) {
 		case "bigint": return BigInt(e.d);
 		case "number": return Number(e.d);
 		case "date": return new Date(e.d);
-		case "bytes": return Gt(e.d);
+		case "bytes": return Kt(e.d);
 		default: return e;
 	}
-}, Yt = (e, t) => e == null ? null : t !== void 0 && Ht.has(t) ? e : Ut(e) ? Jt(e) : t === "bytes" ? Gt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, Xt = (e, t) => {
+}, Xt = (e, t) => e == null ? null : t !== void 0 && Ut.has(t) ? e : Wt(e) ? Yt(e) : t === "bytes" ? Kt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, Zt = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = qt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = Jt(i, t[r]);
 	return n;
-}, Zt = (e, t) => {
+}, Qt = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = Yt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = Xt(i, t[r]);
 	return n;
-}, Qt = new TextEncoder(), $t = (e, t) => e.pipe(l.map((e) => Qt.encode(`${JSON.stringify(Xt(e, t))}\n`))), en = (e, t, r) => e.pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.mapEffect((e) => n.try({
-	try: () => Zt(JSON.parse(e), r),
-	catch: (e) => new qe({
+}, $t = new TextEncoder(), en = (e, t) => e.pipe(l.map((e) => $t.encode(`${JSON.stringify(Zt(e, t))}\n`))), tn = (e, t, r) => e.pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.mapEffect((e) => n.try({
+	try: () => Qt(JSON.parse(e), r),
+	catch: (e) => new Je({
 		table: t,
 		reason: String(e?.message ?? e)
 	})
-}))), tn = (e, t) => {
+}))), nn = (e, t) => {
 	let n = new Set(e), r = /* @__PURE__ */ new Map();
 	for (let e of t.tables) {
 		if (!n.has(e.name)) continue;
@@ -666,33 +666,33 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	let r = typeof t?.message == "string" ? t.message.trim() : "";
 	if (r === "" ? t?.cause !== void 0 && t.cause !== null && n.push(Y(t.cause)) : n.push(r), n.length === 0) {
 		let t = String(e ?? "").trim();
-		return t === "" || t === "[object Object]" ? nn(e) : t;
+		return t === "" || t === "[object Object]" ? rn(e) : t;
 	}
 	return n.join(": ");
-}, nn = (e) => {
+}, rn = (e) => {
 	try {
 		let t = JSON.stringify(e);
 		return t === void 0 || t === "{}" ? "unknown error (no message, cause or tag)" : t;
 	} catch {
 		return "unknown error (not serialisable)";
 	}
-}, rn = (e, t) => {
+}, an = (e, t) => {
 	let n = e.tables.find((e) => e.name === t), r = {};
 	for (let e of n?.columns ?? []) e.generatedAs === void 0 && (r[e.name] = e.type);
 	return r;
-}, an = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), on = (e, t) => {
+}, on = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), sn = (e, t) => {
 	if (t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, sn = (e, t) => {
+}, cn = (e, t) => {
 	let n = e.tables.find((e) => e.name === t);
 	if (n === void 0) return { refusal: `${t}: not in the schema snapshot, so its primary key is unknown.` };
 	let r = n.columns.find((e) => e.type === "id");
 	if (r !== void 0) return { column: r.name };
 	let i = n.indexes.find((e) => e.name === `${t}_pkey`)?.columns ?? n.primaryKey ?? [];
 	return i.length === 1 ? { column: i[0] } : i.length > 1 ? { refusal: `${t}: composite primary key (${i.join(", ")}). Keyset export orders by ONE column; ordering by the first alone would split equal values across pages and drop or duplicate rows. Exclude this table from the scope, or give it a single-column key.` } : { refusal: `${t}: no primary key, so there is no stable order to paginate by. A keyset export would return rows in an order the database may change between pages. Exclude this table from the scope.` };
-}, cn = (e, t, r) => n.tryPromise({
+}, ln = (e, t, r) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), i = await import("node:fs/promises"), { createHash: a, randomUUID: o } = await import("node:crypto"), { pipeline: s } = await import("node:stream/promises"), { Readable: c, Transform: u } = await import("node:stream"), d = a("sha256"), f = 0, p = new u({ transform(e, t, n) {
 			d.update(e);
@@ -701,7 +701,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			n(null, e);
 		} }), m = c.fromWeb(l.toReadableStream(e)), h = `${t}.tmp-${o()}`;
 		try {
-			await s(m, p, vt(r), n(h)), await i.rename(h, t);
+			await s(m, p, yt(r), n(h)), await i.rename(h, t);
 		} catch (e) {
 			throw await i.rm(h, { force: !0 }).catch(() => {}), e;
 		}
@@ -714,7 +714,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		reason: `write table failed: ${Y(e)}`,
 		path: t
 	})
-}), ln = (e, t) => n.tryPromise({
+}), un = (e, t) => n.tryPromise({
 	try: async () => {
 		await (await import("node:fs/promises")).appendFile(e, `${t}\n`);
 	},
@@ -722,13 +722,13 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		reason: `append failed: ${Y(t)}`,
 		path: e
 	})
-}), un = (e, t) => n.gen(function* () {
+}), dn = (e, t) => n.gen(function* () {
 	let r = [], i = t.ordered.length;
 	for (let a = 0; a < t.ordered.length; a++) {
-		let o = t.ordered[a], s = rn(t.snapshot, o), c = sn(t.snapshot, o);
+		let o = t.ordered[a], s = an(t.snapshot, o), c = cn(t.snapshot, o);
 		if ("refusal" in c) return yield* n.fail(new U({ reason: `export: ${c.refusal}` }));
-		let u = c.column, d = `${Ot}/${o}.ndjson${_t(t.compression)}`;
-		if (Bt(t.ledger, o)) {
+		let u = c.column, d = `${kt}/${o}.ndjson${vt(t.compression)}`;
+		if (Vt(t.ledger, o)) {
 			let e = t.ledger.tables[o];
 			q(t.onProgress, {
 				phase: "export",
@@ -762,7 +762,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			chunkSize: t.chunkSize,
 			retry: t.retry,
 			...f === void 0 ? {} : { where: f }
-		}), m = an(t.snapshot, o), h = m.length === 0 ? p : p.pipe(l.map((e) => on(e, m))), g = t.mask ? h.pipe(l.map((e) => He(e, o, t.mask.actions, t.mask.seed, s))) : h, { rowCount: _, checksum: v } = yield* Lt("export", o, a, i, (e) => e.rowCount, cn($t(g, s), t.bundleFile(d), t.compression));
+		}), m = on(t.snapshot, o), h = m.length === 0 ? p : p.pipe(l.map((e) => sn(e, m))), g = t.mask ? h.pipe(l.map((e) => Ue(e, o, t.mask.actions, t.mask.seed, s))) : h, { rowCount: _, checksum: v } = yield* Rt("export", o, a, i, (e) => e.rowCount, ln(en(g, s), t.bundleFile(d), t.compression));
 		t.ledger.tables[o] = {
 			rowCount: _,
 			checksum: v
@@ -784,43 +784,43 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return r;
-}), dn = (e) => ({
+}), fn = (e) => ({
 	_tag: "RawSqlFragment",
 	strings: [e],
 	values: []
-}), fn = (t, i, a) => n.tryPromise({
+}), pn = (t, i, a) => n.tryPromise({
 	try: () => t.transactional(async (t) => {
-		if (t.raw) for (let e of we(i)) await t.raw(dn(e));
+		if (t.raw) for (let e of Te(i)) await t.raw(fn(e));
 		let o = await n.runPromiseExit(a(t));
 		if (r.isFailure(o)) throw Error(e.pretty(o.cause));
 		return o.value;
 	}),
 	catch: (e) => e instanceof H ? e : new H({ reason: `snapshot export failed: ${Y(e)}` })
-}), pn = (e) => n.gen(function* () {
-	let t = e.scope ?? { kind: "all" }, r = gt(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, o = s.exponential("50 millis").pipe(s.jittered, s.intersect(s.recurs(a))), c = yield* n.promise(() => import("node:path")), l = (t) => c.join(e.outDir, t);
+}), mn = (e) => n.gen(function* () {
+	let t = e.scope ?? { kind: "all" }, r = _t(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, o = s.exponential("50 millis").pipe(s.jittered, s.intersect(s.recurs(a))), c = yield* n.promise(() => import("node:path")), l = (t) => c.join(e.outDir, t);
 	yield* n.tryPromise({
 		try: async () => {
 			let t = await import("node:fs/promises");
-			await t.mkdir(l(Ot), { recursive: !0 }), e.assets && await t.mkdir(l(kt), { recursive: !0 });
+			await t.mkdir(l(kt), { recursive: !0 }), e.assets && await t.mkdir(l(At), { recursive: !0 });
 		},
 		catch: (t) => new H({
 			reason: `mkdir failed: ${Y(t)}`,
 			path: e.outDir
 		})
 	});
-	let u = l(jt), d = yield* zt(u), f = e.subset ? rt(yield* nt(e.store, e.snapshot, e.subset), e.snapshot) : yield* at(t, e.snapshot, {
+	let u = l(Mt), d = yield* Bt(u), f = e.subset ? it(yield* rt(e.store, e.snapshot, e.subset), e.snapshot) : yield* ot(t, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), p = tn(f.tables, e.snapshot), m = e.consistency ?? "live", h, g;
+	}), p = nn(f.tables, e.snapshot), m = e.consistency ?? "live", h, g;
 	if (e.masking) {
-		let t = e.classification ?? Ee(e.snapshot), r = ze(p.map((t) => ({
+		let t = e.classification ?? De(e.snapshot), r = Be(p.map((t) => ({
 			name: t,
 			columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 				name: e.name,
 				type: e.type
 			}))
 		})), t, e.masking);
-		if (r.unclassified.length > 0 || r.invalid.length > 0) return yield* n.fail(new Qe({
+		if (r.unclassified.length > 0 || r.invalid.length > 0) return yield* n.fail(new $e({
 			unclassified: r.unclassified,
 			...r.invalid.length > 0 ? { invalidActions: r.invalid.map((e) => `${e.column}: ${JSON.stringify(e.action)}`) } : {}
 		}));
@@ -846,14 +846,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		bundleFile: l,
 		...g ? { mask: g } : {},
 		...e.onProgress ? { onProgress: e.onProgress } : {}
-	}, v = m === "snapshot" ? yield* fn(e.store, e.dialect, (e) => un(e, _)) : yield* un(e.store, _), y = 0, b = 0;
+	}, v = m === "snapshot" ? yield* pn(e.store, e.dialect, (e) => dn(e, _)) : yield* dn(e.store, _), y = 0, b = 0;
 	if (e.assets) {
-		let t = l(At), r = yield* ft({
+		let t = l(jt), r = yield* pt({
 			source: e.assets,
-			assetsDir: l(kt),
+			assetsDir: l(At),
 			progress: {
 				done: (e) => e in d.assets,
-				mark: (e, r) => (d.assets[e] = !0, ln(t, JSON.stringify(r)).pipe(n.andThen(J(u, d))))
+				mark: (e, r) => (d.assets[e] = !0, un(t, JSON.stringify(r)).pipe(n.andThen(J(u, d))))
 			}
 		});
 		y = r.count, b = r.totalBytes, r.missing.length > 0 && (yield* n.logWarning(`${r.missing.length} of ${r.missing.length + r.count} blob reference(s) point at objects the storage provider does not have; they are NOT in this bundle and no import can bring them back. e.g. ${r.missing.slice(0, 3).map((e) => `'${e}'`).join(", ")}` + (r.missing.length > 3 ? `, and ${r.missing.length - 3} more` : "")));
@@ -863,7 +863,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		createdAt: e.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
 		source: {
 			dialect: e.dialect,
-			schemaFingerprint: ie(e.snapshot)
+			schemaFingerprint: w(e.snapshot)
 		},
 		scope: t,
 		consistency: m,
@@ -872,7 +872,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		assets: y > 0 ? {
 			count: y,
 			totalBytes: b,
-			index: At
+			index: jt
 		} : {
 			count: 0,
 			totalBytes: 0
@@ -881,7 +881,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	};
 	return yield* n.tryPromise({
 		try: async () => {
-			await (await import("node:fs/promises")).writeFile(l(K), Tt(x));
+			await (await import("node:fs/promises")).writeFile(l(K), Et(x));
 		},
 		catch: (e) => new H({
 			reason: `manifest write failed: ${Y(e)}`,
@@ -890,14 +890,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	}), yield* n.tryPromise({
 		try: async () => {
 			let e = await import("node:fs/promises"), t = await import("node:os");
-			await e.writeFile(l(Dt), Nt(x, { hostname: t.hostname() }));
+			await e.writeFile(l(Ot), Pt(x, { hostname: t.hostname() }));
 		},
 		catch: (e) => new H({
 			reason: `readme write failed: ${Y(e)}`,
-			path: Dt
+			path: Ot
 		})
 	}), x;
-}), mn = (e, t) => {
+}), hn = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) if (!n.has(t.name)) for (let e of t.columns) {
 		let i = e.references?.table;
@@ -908,7 +908,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return r;
-}, hn = (e) => {
+}, gn = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) t.set(n.from, [...t.get(n.from) ?? [], n]);
 	let n = [...t.entries()].map(([e, t]) => {
@@ -916,7 +916,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		return `  ${e} (${n} row${n === 1 ? "" : "s"}): ${r}`;
 	});
 	return `replace cannot empty this target: ${t.size} table(s) OUTSIDE the bundle hold rows that reference tables INSIDE it. Emptying the bundle's tables would leave those rows pointing at nothing, and the bundle cannot restore them.\n${n.join("\n")}\nNothing has been deleted. Either re-export with a scope that includes those tables, or use --mode upsert if those rows are meant to survive.`;
-}, gn = (e) => {
+}, _n = (e) => {
 	switch (e) {
 		case "id":
 		case "text":
@@ -935,12 +935,12 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "raw": return "raw";
 		default: return "string";
 	}
-}, _n = {
+}, vn = {
 	vector: /* @__PURE__ */ new Set(["postgres"]),
 	array: /* @__PURE__ */ new Set(["postgres"]),
 	interval: /* @__PURE__ */ new Set(["postgres"])
-}, vn = (e, t, n, r) => {
-	let i = gn(n);
+}, yn = (e, t, n, r) => {
+	let i = _n(n);
 	if (i === "raw") return {
 		table: e,
 		column: t,
@@ -948,7 +948,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `raw() is verbatim source-dialect SQL — it cannot be assumed valid on ${r}`
 	};
-	let a = _n[i];
+	let a = vn[i];
 	return !a || a.has(r) ? null : i === "array" || i === "interval" ? {
 		table: e,
 		column: t,
@@ -962,15 +962,15 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `${i} columns require a ${[...a].join("/")} target; ${r} has no compatible column type`
 	};
-}, yn = (e, t, n) => {
+}, bn = (e, t, n) => {
 	if (t === n) return [];
 	let r = [];
 	for (let t of e) for (let [e, i] of Object.entries(t.columnTypes)) {
-		let a = vn(t.name, e, i, n);
+		let a = yn(t.name, e, i, n);
 		a && r.push(a);
 	}
 	return r;
-}, bn = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, xn = (e) => {
+}, xn = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, Sn = (e) => {
 	let t = e.constraint ?? e.column, n = t === void 0 ? "" : ` ${t}`;
 	switch (e.kind) {
 		case "foreignKey": return `foreign key${n}: the referenced row does not exist (import it first, or check the bundle's table order)`;
@@ -979,35 +979,35 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "notNull": return `not-null constraint${n}: the column requires a value`;
 		case "check": return `check constraint${n}: the row does not satisfy it`;
 	}
-}, Sn = (e) => {
+}, Cn = (e) => {
 	let t = [e.dbCode, e.dbErrno ?? e.dbNumber].filter((e) => e !== void 0).map(String);
 	return t.length > 0 ? t.join("/") : void 0;
-}, Cn = "Failed to execute statement", wn = (e) => {
+}, wn = "Failed to execute statement", Tn = (e) => {
 	let t = (e.split("\n", 1)[0] ?? "").trim();
 	for (; t.startsWith("(FiberFailure)");) t = t.slice(14).trim();
-	return t === `SqlError: ${Cn}` ? Cn : t;
-}, Tn = (e) => {
+	return t === `SqlError: ${wn}` ? wn : t;
+}, En = (e) => {
 	let t = String(e?.stack ?? e), n = t.length <= 1200 ? t : `${t.slice(0, 1200)}…`, r = (e, t) => ({
 		reason: e.length <= 300 ? e : `${e.slice(0, 300)}…`,
 		unclassified: t,
 		raw: n
-	}), i = _(e), a = p(i), o = Sn(i), s = o === void 0 ? "" : ` [${o}]`;
-	if (a !== void 0) return r(`${xn(a)}${s}`, !1);
-	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, l = e?.message, u = wn(typeof l == "string" && l.length > 0 ? l : String(e)), d = c !== void 0 && c !== u && !c.startsWith("SqlError:") ? c : u, f = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, m = f !== void 0 && /[←‖]/.test(f) ? ` (via ${f})` : "";
-	return r(d === Cn || d.length === 0 ? `the database refused the write and the driver gave no detail${s}${m}` : `${d}${s}`, d === Cn || d.length === 0);
-}, En = (e) => Tn(e).reason, Dn = (e) => {
-	let t = _(e), n = p(t);
+	}), i = v(e), a = m(i), o = Cn(i), s = o === void 0 ? "" : ` [${o}]`;
+	if (a !== void 0) return r(`${Sn(a)}${s}`, !1);
+	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, l = e?.message, u = Tn(typeof l == "string" && l.length > 0 ? l : String(e)), d = c !== void 0 && c !== u && !c.startsWith("SqlError:") ? c : u, f = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, p = f !== void 0 && /[←‖]/.test(f) ? ` (via ${f})` : "";
+	return r(d === wn || d.length === 0 ? `the database refused the write and the driver gave no detail${s}${p}` : `${d}${s}`, d === wn || d.length === 0);
+}, Dn = (e) => En(e).reason, On = (e) => {
+	let t = v(e), n = m(t);
 	if (n?.kind === "foreignKeyInUse") {
-		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = Sn(t);
+		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = Cn(t);
 		return `foreign key${r}: rows elsewhere still reference this table${i === void 0 ? "" : ` [${i}]`}`;
 	}
-	return En(e);
-}, On = "_voltro_staging_", X = (e) => `${On}${e}`, kn = (e) => typeof e.run == "function", An = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
+	return Dn(e);
+}, kn = f, X = (e) => `${kn}${e}`, An = (e) => typeof e.run == "function", jn = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
   process that dies mid-load depends on the database rolling it back. The rollback capture
-  written before the first delete is what covers that case.`, jn = /^[a-zA-Z_][a-zA-Z0-9_]*$/, Z = (e, t) => {
-	if (!jn.test(e)) throw Error(`refusing to build SQL for the table name ${JSON.stringify(e)}: it is outside the identifier class the framework allows. A name from a bundle manifest reaches this concatenation, so it is checked here rather than assumed to still be what the declaration validated.`);
+  written before the first delete is what covers that case.`, Mn = /^[a-zA-Z_][a-zA-Z0-9_]*$/, Z = (e, t) => {
+	if (!Mn.test(e)) throw Error(`refusing to build SQL for the table name ${JSON.stringify(e)}: it is outside the identifier class the framework allows. A name from a bundle manifest reaches this concatenation, so it is checked here rather than assumed to still be what the declaration validated.`);
 	return t === "mysql" || t === "mariadb" ? `\`${e}\`` : t === "mssql" ? `[${e}]` : `"${e}"`;
-}, Mn = (e, t) => {
+}, Nn = (e, t) => {
 	let n = Z(e, t), r = Z(X(e), t);
 	switch (t) {
 		case "postgres": return `CREATE TABLE ${r} (LIKE ${n})`;
@@ -1016,10 +1016,10 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "sqlite": return `CREATE TABLE ${r} AS SELECT * FROM ${n} WHERE 0`;
 		case "mssql": return `SELECT * INTO ${r} FROM ${n} WHERE 1 = 0`;
 	}
-}, Nn = (e, t) => {
+}, Pn = (e, t) => {
 	let n = Z(X(e), t);
 	return t === "mssql" ? `IF OBJECT_ID('${X(e)}', 'U') IS NOT NULL DROP TABLE ${n}` : `DROP TABLE IF EXISTS ${n}`;
-}, Pn = (e, t) => {
+}, Fn = (e, t) => {
 	let n = t === "mysql" || t === "mariadb", r = [];
 	n && r.push("SET FOREIGN_KEY_CHECKS = 0");
 	for (let n of [...e].reverse()) r.push(`DELETE FROM ${Z(n.name, t)}`);
@@ -1029,7 +1029,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		r.push(`INSERT INTO ${Z(n.name, t)} (${e}) SELECT ${e} FROM ${Z(X(n.name), t)}`);
 	}
 	return n && r.push("SET FOREIGN_KEY_CHECKS = 1"), r;
-}, Fn = (e, t) => {
+}, In = (e, t) => {
 	let n = [], r = () => {
 		for (let e of n) t.unregisterTable(e);
 	};
@@ -1051,7 +1051,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		staged: n,
 		undo: r
 	};
-}, In = (e, t) => {
+}, Ln = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) {
 		if (!n.has(t.name)) continue;
@@ -1068,22 +1068,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	}
 	return r;
-}, Ln = (e, t) => {
+}, Rn = (e, t) => {
 	let n = Z(X(e.from), t), r = Z(X(e.to), t), i = Z(e.column, t), a = Z(e.toColumn, t);
 	return `SELECT ${Z(e.primaryKey, t)} AS pk, ${i} AS value FROM ${n} c WHERE ${i} IS NOT NULL AND NOT EXISTS (SELECT 1 FROM ${r} p WHERE p.${a} = c.${i})`;
-}, Rn = (e) => {
+}, zn = (e) => {
 	if (e.length === 0) return;
 	let t = e.slice(0, 20), n = t.map((e) => `    ${e.table}.${e.primaryKey}: ${e.column} = ${JSON.stringify(e.value)} — no such row in ${e.references}`);
 	return `the swap could not run: ${e.length} row(s) in the bundle reference a row the bundle does not carry.\n${n.join("\n")}\n` + (e.length > t.length ? `    … and ${e.length - t.length} more\n` : "") + "  The target is UNCHANGED — the swap runs in one transaction and none of it committed.\n  Every offending row is listed above rather than only the first, so this can be fixed in one pass.";
-}, zn = async (e, t) => {
-	t.length !== 0 && await e.run(_e.SqlClient.pipe(n.flatMap((e) => n.forEach(t, (t) => e.unsafe(t), { discard: !0 }))));
-}, Bn = async (e, t, r) => {
-	let i = Pn(t, r);
-	i.length !== 0 && await e.run(_e.SqlClient.pipe(n.flatMap((e) => e.withTransaction(n.forEach(i, (t) => e.unsafe(t), { discard: !0 })))));
+}, Bn = async (e, t) => {
+	t.length !== 0 && await e.run(P.SqlClient.pipe(n.flatMap((e) => n.forEach(t, (t) => e.unsafe(t), { discard: !0 }))));
 }, Vn = async (e, t, r) => {
+	let i = Fn(t, r);
+	i.length !== 0 && await e.run(P.SqlClient.pipe(n.flatMap((e) => e.withTransaction(n.forEach(i, (t) => e.unsafe(t), { discard: !0 })))));
+}, Hn = async (e, t, r) => {
 	let i = [];
 	for (let a of t) {
-		let t = await e.run(_e.SqlClient.pipe(n.flatMap((e) => e.unsafe(Ln(a, r)))));
+		let t = await e.run(P.SqlClient.pipe(n.flatMap((e) => e.unsafe(Rn(a, r)))));
 		for (let e of t) i.push({
 			table: a.from,
 			primaryKey: String(e.pk ?? ""),
@@ -1093,14 +1093,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return i;
-}, Hn = (e, t) => {
+}, Un = (e, t) => {
 	let n = new Map(t.map((e, t) => [e, t]));
 	return e.filter((e) => {
 		if (e.from === e.to) return !1;
 		let t = n.get(e.from), r = n.get(e.to);
 		return t === void 0 || r === void 0 ? !1 : r > t;
 	});
-}, Un = (e) => e === "mysql" || e === "mariadb", Wn = (e) => {
+}, Wn = (e) => e === "mysql" || e === "mariadb", Gn = (e) => {
 	if (e.mode !== "replace") return {
 		active: !1,
 		tables: [],
@@ -1150,7 +1150,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		tables: [],
 		blocker: "every table in the bundle is one that describes a deployment, so there is nothing for a staged swap to move."
 	};
-	let s = o.map((e) => e.name), c = Un(t) ? [] : Hn(In(n, s), s);
+	let s = o.map((e) => e.name), c = Wn(t) ? [] : Un(Ln(n, s), s);
 	return c.length > 0 ? {
 		active: !1,
 		tables: [],
@@ -1159,7 +1159,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		active: !0,
 		tables: o
 	};
-}, Gn = (e) => n.gen(function* () {
+}, Kn = (e) => n.gen(function* () {
 	if (e.mode !== "replace" || e.dir === void 0 || e.tables.length === 0) return;
 	if (e.snapshot === void 0) return yield* n.fail(new H({
 		reason: "rollback capture needs the TARGET's schema, and this run has none.\n  `--mode replace` empties the target first, so a run without a capture can leave it\n  emptied and unfilled if the process does not survive to roll back. Pass the target\n  snapshot, or `--no-rollback` to accept that risk deliberately.",
@@ -1172,7 +1172,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	if (t.tables.length === 0) return;
 	e.onWarn?.(`capturing the target's current rows before emptying it → ${e.dir}\n  This is what a failed replace is restored FROM. It is written before the first delete,
   so it survives a run whose process does not.`);
-	let r = yield* pn({
+	let r = yield* mn({
 		store: e.store,
 		snapshot: t,
 		dialect: e.dialect ?? "unknown",
@@ -1188,18 +1188,18 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		rows: r.tables.reduce((e, t) => e + t.rowCount, 0),
 		tables: r.tables.length
 	};
-}), Kn = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`, qn = (e, t) => e.tables.find((e) => e.name === t), Jn = (e, t) => new Map((qn(e, t)?.columns ?? []).map((e) => [e.name, e])), Yn = /__dropped_\d+$/, Xn = (e, t) => {
+}), qn = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`, Jn = (e, t) => e.tables.find((e) => e.name === t), Yn = (e, t) => new Map((Jn(e, t)?.columns ?? []).map((e) => [e.name, e])), Xn = /__dropped_\d+$/, Zn = (e, t) => {
 	let n = [];
 	for (let r of [...e.tables].sort((e, t) => e.name.localeCompare(t.name))) {
-		if (qn(t, r.name) === void 0) {
+		if (Jn(t, r.name) === void 0) {
 			n.push(`table '${r.name}' is in the bundle but MISSING from the target — its rows have nowhere to go`);
 			continue;
 		}
-		let e = Jn(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
+		let e = Yn(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
 		for (let [t, a] of i) {
 			let i = e.get(t);
 			if (i === void 0) {
-				n.push(Yn.test(t) ? `${r.name}.${t}: a soft-dropped column, present only in the SOURCE — reclaim it there (voltro db gc-snapshots --before <date>) or re-export without it; the target is not missing anything` : `${r.name}.${t}: in the bundle, MISSING from the target — the value has nowhere to go`);
+				n.push(Xn.test(t) ? `${r.name}.${t}: a soft-dropped column, present only in the SOURCE — reclaim it there (voltro db gc-snapshots --before <date>) or re-export without it; the target is not missing anything` : `${r.name}.${t}: in the bundle, MISSING from the target — the value has nowhere to go`);
 				continue;
 			}
 			i.type !== a.type && n.push(`${r.name}.${t}: type '${a.type}' (bundle) vs '${i.type}' (target)`);
@@ -1207,22 +1207,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		for (let [t, a] of e) i.has(t) || !a.nullable && !a.hasDefault && n.push(`${r.name}.${t}: the target requires it (NOT NULL, no default) and the bundle carries no value — every row of this table would fail`);
 	}
 	return n.length > 30 ? [...n.slice(0, 30), `… and ${n.length - 30} more difference(s)`] : n;
-}, Zn = (e, t, n) => {
-	let r = ie(t);
+}, Qn = (e, t, n) => {
+	let r = w(t);
 	if (r === e || n === void 0) return {
 		drifted: !1,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: []
 	};
-	let i = Xn(n, t);
+	let i = Zn(n, t);
 	return {
 		drifted: i.length > 0,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: i
 	};
-}, Qn = 2e3, $n = 200, er = /* @__PURE__ */ new Set([
+}, $n = 2e3, er = 2e3, tr = 200, nr = /* @__PURE__ */ new Set([
 	"BundleError",
 	"CodecError",
 	"IntegrityError",
@@ -1231,29 +1231,29 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	"RowsRefusedError",
 	"SchemaDriftError",
 	"StorageError"
-]), tr = (t) => {
+]), rr = (t) => {
 	let n = o.isFiberFailure(t) ? [...e.failures(t[o.FiberFailureCauseId]), ...e.defects(t[o.FiberFailureCauseId])] : [t];
 	for (let e of n) {
 		let t = e?._tag;
-		if (typeof t == "string" && er.has(t)) return e;
+		if (typeof t == "string" && nr.has(t)) return e;
 		if (o.isFiberFailure(e)) {
-			let t = tr(e);
+			let t = rr(e);
 			if (t) return t;
 		}
 	}
-}, nr = (t) => [...e.failures(t)][0] ?? Error(e.pretty(t)), rr = (e) => n.tryPromise({
+}, ir = (t) => [...e.failures(t)][0] ?? Error(e.pretty(t)), ar = (e) => n.tryPromise({
 	try: async () => {
 		let t = await import("node:fs/promises"), n = await import("node:path");
-		return Et(await t.readFile(n.join(e, K), "utf8"));
+		return Dt(await t.readFile(n.join(e, K), "utf8"));
 	},
 	catch: (e) => new H({
 		reason: `manifest read/parse failed: ${String(e?.message ?? e)}`,
 		path: K
 	})
-}), ir = (e) => {
+}), or = (e) => {
 	let t;
 	return n.gen(function* () {
-		let i = yield* n.promise(() => import("node:path")), a = yield* rr(e.bundleDir);
+		let i = yield* n.promise(() => import("node:path")), a = yield* ar(e.bundleDir);
 		if (a.formatVersion !== 1) return yield* n.fail(new H({ reason: `unsupported bundle formatVersion ${a.formatVersion} (expected 1)` }));
 		if (e.tables !== void 0) {
 			let t = new Set(a.tables.map((e) => e.name)), r = e.tables.filter((e) => !t.has(e));
@@ -1274,9 +1274,9 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					unique: !1,
 					hasDefault: !1
 				}))
-			})) }, r = Zn(s.source.schemaFingerprint, e.targetSnapshot, t);
+			})) }, r = Qn(s.source.schemaFingerprint, e.targetSnapshot, t);
 			if (r.drifted) {
-				if (!e.force) return yield* n.fail(new Ze({
+				if (!e.force) return yield* n.fail(new Qe({
 					bundleFingerprint: r.bundleFingerprint,
 					targetFingerprint: r.targetFingerprint,
 					diff: r.diff
@@ -1285,28 +1285,28 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			}
 		}
 		if (e.targetDialect && e.targetDialect !== s.source.dialect) {
-			let t = yn(s.tables, s.source.dialect, e.targetDialect).filter((e) => e.severity === "block");
-			if (t.length > 0 && !e.allowIncompatible) return yield* n.fail(new et({
+			let t = bn(s.tables, s.source.dialect, e.targetDialect).filter((e) => e.severity === "block");
+			if (t.length > 0 && !e.allowIncompatible) return yield* n.fail(new tt({
 				sourceDialect: s.source.dialect,
 				targetDialect: e.targetDialect,
-				blocking: t.map(bn)
+				blocking: t.map(xn)
 			}));
 		}
-		let c = e.verify ?? !0, p = e.mode ?? "upsert", g = e.atomic ?? p === "replace", _ = e.onConflict ?? "skip", y = e.ledgerPath ?? i.join(e.bundleDir, ".import..ledger.json"), x = yield* zt(y);
-		if (p === "replace" && s.scope.kind !== "all") return yield* n.fail(new $e({
-			mode: p,
+		let c = e.verify ?? !0, f = e.mode ?? "upsert", m = e.atomic ?? f === "replace", _ = e.onConflict ?? "skip", v = e.ledgerPath ?? i.join(e.bundleDir, ".import..ledger.json"), b = yield* Bt(v);
+		if (f === "replace" && s.scope.kind !== "all") return yield* n.fail(new et({
+			mode: f,
 			reason: `replace refuses a partial bundle (scope='${s.scope.kind}') — truncating would delete rows not in the bundle. Use --mode upsert, or re-export with full scope. To leave specific tables out of a FULL export, use \`--exclude a,b\`: it keeps the scope \`all\` and records what it left out.`
 		}));
-		if (p === "replace" && (s.scope.exclude?.length ?? 0) > 0) {
+		if (f === "replace" && (s.scope.exclude?.length ?? 0) > 0) {
 			let t = s.scope.exclude;
 			e.onWarn?.(`this bundle was exported with ${t.length} table(s) excluded: ${t.join(", ")}.\n  A replace empties and refills the tables the bundle CARRIES, so those keep whatever rows the
   target already holds. That is not "everything the bundle says" — check it is what you meant.`);
 		}
-		if (p === "replace") {
+		if (f === "replace") {
 			let t = s.tables.map((e) => e.name), r = e.store.incomingForeignKeys ? yield* n.tryPromise({
 				try: () => e.store.incomingForeignKeys(t),
-				catch: (e) => new H({ reason: `foreign-key pre-flight failed: ${Dn(e)}` })
-			}) : e.targetSnapshot === void 0 ? [] : mn(e.targetSnapshot, t), i = [], a = /* @__PURE__ */ new Map();
+				catch: (e) => new H({ reason: `foreign-key pre-flight failed: ${On(e)}` })
+			}) : e.targetSnapshot === void 0 ? [] : hn(e.targetSnapshot, t), i = [], a = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				if (!a.has(t.from)) {
 					let r = yield* n.tryPromise({
@@ -1328,9 +1328,9 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					rowCount: r
 				});
 			}
-			if (i.length > 0) return yield* n.fail(new $e({
-				mode: p,
-				reason: hn(i)
+			if (i.length > 0) return yield* n.fail(new et({
+				mode: f,
+				reason: gn(i)
 			}));
 		}
 		if (e.dryRun === !0) return e.traceId !== void 0 && (yield* n.promise(() => e.store.update(u, e.traceId, {
@@ -1346,32 +1346,32 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			rowsSkipped: 0,
 			fullyResumed: !1
 		};
-		let C = /* @__PURE__ */ new Map();
+		let S = /* @__PURE__ */ new Map();
 		for (let t of e.targetSnapshot?.tables ?? []) {
 			let e = t.columns.filter((e) => e.generatedAs !== void 0).map((e) => e.name);
-			e.length > 0 && C.set(t.name, e);
+			e.length > 0 && S.set(t.name, e);
 		}
-		let ie = (e, t) => {
-			let n = C.get(e);
+		let C = (e, t) => {
+			let n = S.get(e);
 			if (n === void 0) return t;
 			let r;
 			for (let e of n) e in t && (r ??= { ...t }, delete r[e]);
 			return r ?? t;
 		}, w = (e, t, n, r = !1) => {
-			let i = k ? X(t.name) : t.name, a = t.primaryKey, o = ie(t.name, n);
-			return p === "append" ? _ === "fail" ? e.insert(i, o) : e.insertIgnore(i, o, { conflictColumns: [a] }) : p === "replace" ? r ? e.upsert(i, o, { conflictColumns: [a] }) : e.insert(i, o) : e.upsert(i, o, { conflictColumns: [a] });
-		}, T = (e, t) => e.savepoint ? e.savepoint(t) : t(), E = 0, ae = (t, n, r) => {
-			r.unclassified && (E++, !(E > 3) && e.onWarn?.(`row refused with no driver detail — table '${t.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (E === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
-		}, D = (e, t, r = !0) => n.tryPromise({
+			let i = O ? X(t.name) : t.name, a = t.primaryKey, o = C(t.name, n);
+			return f === "append" ? _ === "fail" ? e.insert(i, o) : e.insertIgnore(i, o, { conflictColumns: [a] }) : f === "replace" ? r ? e.upsert(i, o, { conflictColumns: [a] }) : e.insert(i, o) : e.upsert(i, o, { conflictColumns: [a] });
+		}, ae = (e, t) => e.savepoint ? e.savepoint(t) : t(), oe = 0, T = (t, n, r) => {
+			r.unclassified && (oe++, !(oe > 3) && e.onWarn?.(`row refused with no driver detail — table '${t.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (oe === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
+		}, se = (e, t, r = !0) => n.tryPromise({
 			try: e,
-			catch: (e) => Tn(e)
-		}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, ae(t.entry, t.row, e)), !1)))), oe = (e) => {
+			catch: (e) => En(e)
+		}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, T(t.entry, t.row, e)), !1)))), ce = (e) => {
 			let t = Object.entries(e.entry.columnTypes).filter(([t, n]) => n === "reference" && e.row[t] !== null && e.row[t] !== void 0).map(([e]) => e);
 			if (t.length !== 0) return {
 				...e.row,
 				...Object.fromEntries(t.map((e) => [e, null]))
 			};
-		}, se = (e) => {
+		}, le = (e) => {
 			let t = new Set(e.map((e) => String(e.row[e.entry.primaryKey]))), n = (e) => Object.entries(e.entry.columnTypes).some(([n, r]) => {
 				if (r !== "reference") return !1;
 				let i = e.row[n];
@@ -1389,7 +1389,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				};
 				t.refused++, e.derived || t.primary++, a.set(e.table, t);
 			}
-			return new Xe({
+			return new Ze({
 				rows: i.slice(0, 20),
 				primaryCount: r.filter((e) => !e.derived).length,
 				totalCount: e.length,
@@ -1399,104 +1399,104 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					primary: t.primary
 				})).sort((e, t) => t.refused - e.refused || e.table.localeCompare(t.table)).slice(0, 100)
 			});
-		}, ce = (e, t) => n.gen(function* () {
+		}, ue = (e, t) => n.gen(function* () {
 			let r = t, i = [], a = !0;
 			for (; r.length > 0 && a;) {
 				a = !1;
 				let t = [];
-				for (let n of r) (yield* D(() => T(e, () => w(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
+				for (let n of r) (yield* se(() => ae(e, () => w(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
 				if (!a && t.length > 0) for (let n = t.length - 1; n >= 0; n--) {
-					let r = t[n], o = oe(r);
-					o !== void 0 && (yield* D(() => T(e, () => w(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
+					let r = t[n], o = ce(r);
+					o !== void 0 && (yield* se(() => ae(e, () => w(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
 				}
 				r = t;
 			}
-			for (let t of i) (yield* D(() => T(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
-			if (r.length > 0) return yield* n.fail(se(r));
-		}), O = (() => {
+			for (let t of i) (yield* se(() => ae(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
+			if (r.length > 0) return yield* n.fail(le(r));
+		}), E = (() => {
 			let t = e.targetDialect;
 			return t === "postgres" || t === "mysql" || t === "mariadb" || t === "sqlite" || t === "mssql" ? t : void 0;
-		})(), ue = Wn({
-			mode: p,
+		})(), D = Gn({
+			mode: f,
 			...e.targetDialect === void 0 ? {} : { targetDialect: e.targetDialect },
 			...e.targetSnapshot === void 0 ? {} : { targetSnapshot: e.targetSnapshot },
 			bundleTables: s.tables.map((e) => e.name),
 			isSkipped: V,
-			canRunSql: kn(e.store)
-		}), de = ue.tables, fe = s.tables.filter((e) => !V(e.name) && S(e.name)).map((e) => e.name), k = ue.active, pe = !1, A = 0, j = 0, he, M = 0, N = 0, ge = (t, r) => n.gen(function* () {
-			if (p === "replace" && !k && !(r && x.truncated)) {
+			canRunSql: An(e.store)
+		}), fe = D.tables, pe = s.tables.filter((e) => !V(e.name) && ee(e.name)).map((e) => e.name), O = D.active, me = !1, k = 0, A = 0, ge, j, M = 0, N = 0, _e = (t, r) => n.gen(function* () {
+			if (f === "replace" && !O && !(r && b.truncated)) {
 				e.recordInterruption === !0 && (yield* n.tryPromise({
 					try: () => t.insert(d, {
-						id: m("repl", _e),
-						startedAt: P,
+						id: h("repl", P),
+						startedAt: F,
 						tables: String(s.tables.length),
-						capture: F?.dir ?? null,
+						capture: I?.dir ?? null,
 						via: e.via ?? "direct"
 					}),
 					catch: (e) => new H({ reason: `could not record that this replace started: ${String(e?.message ?? e)}\n  The marker is what makes an interrupted run visible instead of silent, so the run does
   not proceed without it.` })
 				}));
 				let i = [...s.tables].reverse().map((e) => e.name).filter((e) => !V(e)), a = !r, o = t.emptyTables ? () => t.emptyTables(i) : a ? async () => {
-					for (let e of [...s.tables].reverse()) await t.deleteMany(e.name, { where: b(e.primaryKey) });
+					for (let e of [...s.tables].reverse()) await t.deleteMany(e.name, { where: x(e.primaryKey) });
 				} : () => t.transactional(async (e) => {
-					for (let t of [...s.tables].reverse()) await e.deleteMany(t.name, { where: b(t.primaryKey) });
+					for (let t of [...s.tables].reverse()) await e.deleteMany(t.name, { where: x(t.primaryKey) });
 				});
 				yield* n.tryPromise({
 					try: o,
-					catch: (e) => new H({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${Dn(e)}` })
-				}), r && (x.truncated = !0, yield* J(y, x));
+					catch: (e) => new H({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${On(e)}` })
+				}), r && (b.truncated = !0, yield* J(v, b));
 			}
-			let a = [], o = [], u = [], f = [], h = s.tables.length;
+			let a = [], o = [], u = [], p = [], g = s.tables.length;
 			for (let d = 0; d < s.tables.length; d++) {
-				let m = s.tables[d];
-				if (V(m.name)) {
-					f.push(m.name);
+				let h = s.tables[d];
+				if (V(h.name)) {
+					p.push(h.name);
 					continue;
 				}
-				if (r && m.name in x.tables) {
-					u.push(m.name), N++, M += x.tables[m.name].rowCount, q(e.onProgress, {
+				if (r && h.name in b.tables) {
+					u.push(h.name), N++, M += b.tables[h.name].rowCount, q(e.onProgress, {
 						phase: "import",
-						table: m.name,
+						table: h.name,
 						index: d,
-						tableCount: h,
+						tableCount: g,
 						event: "done",
-						rowsDone: x.tables[m.name].rowCount,
-						total: m.rowCount
+						rowsDone: b.tables[h.name].rowCount,
+						total: h.rowCount
 					});
 					continue;
 				}
-				let _ = i.join(e.bundleDir, m.file);
+				let _ = i.join(e.bundleDir, h.file);
 				q(e.onProgress, {
 					phase: "import",
-					table: m.name,
+					table: h.name,
 					index: d,
-					tableCount: h,
+					tableCount: g,
 					event: "start",
 					rowsDone: 0,
-					total: m.rowCount
+					total: h.rowCount
 				});
-				let v = a.length, b = n.gen(function* () {
-					let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, c = me("bundle", () => le(_).pipe(yt(s.compression))).pipe(l.tap((e) => n.sync(() => i.update(e)))), u = async (e) => {
+				let y = a.length, x = n.gen(function* () {
+					let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, c = he("bundle", () => de(_).pipe(bt(s.compression))).pipe(l.tap((e) => n.sync(() => i.update(e)))), u = async (e) => {
 						let n = {
-							entry: m,
+							entry: h,
 							row: e,
 							reason: ""
 						};
 						try {
-							await T(t, () => w(t, m, e));
+							await ae(t, () => w(t, h, e));
 						} catch (t) {
-							let r = Tn(t);
-							n.reason = r.reason, ae(m, e, r), a.push(n);
+							let r = En(t);
+							n.reason = r.reason, T(h, e, r), a.push(n);
 						}
 					}, d = yield* n.promise(async () => {
 						let n = e.copyLoader;
 						if (!n || n.dialect !== "postgres") return !1;
-						if (g) return pe || (pe = !0, e.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
-						if (p === "replace") return !0;
-						if (p !== "upsert") return !1;
+						if (m) return me || (me = !0, e.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
+						if (f === "replace") return !0;
+						if (f !== "upsert") return !1;
 						try {
 							return (await t.query({
-								table: m.name,
+								table: h.name,
 								predicate: void 0,
 								order: [],
 								take: 1,
@@ -1506,19 +1506,19 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 						} catch {
 							return !1;
 						}
-					}), f = Object.keys(m.columnTypes), h = Math.max(1, e.copyBatchSize ?? 5e3), v = [], y = async () => {
+					}), p = Object.keys(h.columnTypes), g = Math.max(1, e.copyBatchSize ?? 5e3), v = [], y = async () => {
 						if (v.length === 0) return;
 						let t = v;
 						v = [];
 						try {
 							await e.copyLoader.copyInto({
-								table: m.name,
-								columns: f,
-								columnTypes: m.columnTypes,
+								table: h.name,
+								columns: p,
+								columnTypes: h.columnTypes,
 								rows: t
 							});
 						} catch (n) {
-							d = !1, e.onWarn?.(`bulk COPY into ${m.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
+							d = !1, e.onWarn?.(`bulk COPY into ${h.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
 							for (let e of t) await u(e);
 						}
 					}, b = Math.max(1, e.savepointBatchSize ?? 200), x = typeof t.savepoint == "function", S = [], ee = async () => {
@@ -1527,15 +1527,15 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 						S = [];
 						try {
 							await t.savepoint(async () => {
-								for (let n of e) await w(t, m, n);
+								for (let n of e) await w(t, h, n);
 							});
 						} catch {
 							for (let t of e) await u(t);
 						}
 					};
-					return yield* l.runForEach(en(c, m.name, m.columnTypes), (e) => n.promise(async () => {
-						if (o++, d) {
-							v.push(e), v.length >= h && await y();
+					return yield* l.runForEach(tn(c, h.name, h.columnTypes), (e) => n.promise(async () => {
+						if (o++, j?.(), d) {
+							v.push(e), v.length >= g && await y();
 							return;
 						}
 						if (x) {
@@ -1547,181 +1547,207 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 						rowCount: o,
 						checksum: i.digest("hex")
 					};
-				}), { rowCount: S, checksum: ee } = yield* Lt("import", m.name, d, h, (e) => e.rowCount, b);
+				}), { rowCount: S, checksum: ee } = yield* Rt("import", h.name, d, g, (e) => e.rowCount, x);
 				if (c) {
-					if (ee !== m.checksum) return yield* n.fail(new Je({
-						what: `table ${m.name} checksum`,
-						expected: m.checksum,
+					if (ee !== h.checksum) return yield* n.fail(new Ye({
+						what: `table ${h.name} checksum`,
+						expected: h.checksum,
 						actual: ee
 					}));
-					if (S !== m.rowCount) return yield* n.fail(new Je({
-						what: `table ${m.name} rowCount`,
-						expected: String(m.rowCount),
+					if (S !== h.rowCount) return yield* n.fail(new Ye({
+						what: `table ${h.name} rowCount`,
+						expected: String(h.rowCount),
 						actual: String(S)
 					}));
 				}
 				q(e.onProgress, {
 					phase: "import",
-					table: m.name,
+					table: h.name,
 					index: d,
-					tableCount: h,
+					tableCount: g,
 					event: "done",
 					rowsDone: S,
-					total: m.rowCount
-				}), j++, A += S, he?.(), r && (a.length > v ? o.push({
-					name: m.name,
+					total: h.rowCount
+				}), A++, k += S, ge?.(), j?.(), r && (a.length > y ? o.push({
+					name: h.name,
 					rowCount: S
-				}) : (x.tables[m.name] = {
+				}) : (b.tables[h.name] = {
 					rowCount: S,
-					checksum: m.checksum
-				}, yield* J(y, x)));
+					checksum: h.checksum
+				}, yield* J(v, b)));
 			}
-			if (a.length > 0 && (yield* ce(t, a)), p === "replace" && (yield* n.promise(() => t.deleteMany(d, { where: {
+			if (a.length > 0 && (yield* ue(t, a)), f === "replace" && (yield* n.promise(() => t.deleteMany(d, { where: {
 				column: "startedAt",
 				op: "lte",
-				value: P
+				value: F
 			} }).then(() => void 0, () => void 0))), r && o.length > 0) {
 				for (let e of o) {
 					let t = s.tables.find((t) => t.name === e.name);
-					x.tables[e.name] = {
+					b.tables[e.name] = {
 						rowCount: e.rowCount,
 						checksum: t.checksum
 					};
 				}
-				yield* J(y, x);
+				yield* J(v, b);
 			}
 			{
-				let t = Ke(f, "skipped");
+				let t = qe(p, "skipped");
 				t !== void 0 && e.onWarn?.(t);
 			}
 			if (u.length > 0) {
 				let t = u.length === s.tables.length;
-				e.onWarn?.(`resume: ${u.length} of ${s.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${t ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${u.join(", ")}. Delete ${y} to force a full re-import.`);
+				e.onWarn?.(`resume: ${u.length} of ${s.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${t ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${u.join(", ")}. Delete ${v} to force a full re-import.`);
 			}
-		}), _e = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`, P = /* @__PURE__ */ new Date(), F = yield* Gn({
+		}), P = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`, F = /* @__PURE__ */ new Date(), I = yield* Kn({
 			store: e.store,
-			mode: p,
+			mode: f,
 			dir: e.rollbackDir,
 			snapshot: e.targetSnapshot,
 			dialect: e.targetDialect,
 			tables: s.tables.map((e) => e.name).filter((e) => !V(e)),
 			onWarn: e.onWarn
 		});
-		F !== void 0 && (e.onRollbackCaptured !== void 0 && (yield* n.tryPromise({
-			try: () => e.onRollbackCaptured(F),
+		I !== void 0 && (e.onRollbackCaptured !== void 0 && (yield* n.tryPromise({
+			try: () => e.onRollbackCaptured(I),
 			catch: (e) => new H({
 				reason: `the rollback capture could not be stored durably, so the import did not start and the target is untouched: ${String(e?.message ?? e)}\n  The capture only helps if it outlives this process — that is the failure it exists for.`,
-				path: F.dir
+				path: I.dir
 			})
-		})), e.onWarn?.(Kn(F)));
-		let ve = (e) => p === "replace" ? te(e) : e(), I = (e) => p === "replace" ? ne(e) : e, L = e.traceId ?? m("dimp", `${Date.now()}-${s.source.schemaFingerprint ?? ""}`), ye = e.traceId !== void 0, R = (e.targetSnapshot?.tables.some((e) => e.name === u) ?? !1) || v(u) !== void 0;
-		R && h(f), R && e.traceId === void 0 && (yield* n.promise(() => e.store.insert(u, {
-			id: L,
-			mode: p,
+		})), e.onWarn?.(qn(I)));
+		let ve = (e) => f === "replace" ? ne(e) : e(), L = (e) => f === "replace" ? re(e) : e, ye = e.traceId ?? h("dimp", `${Date.now()}-${s.source.schemaFingerprint ?? ""}`), be = e.traceId !== void 0, R = (e.targetSnapshot?.tables.some((e) => e.name === u) ?? !1) || y(u) !== void 0;
+		R && g(p), R && e.traceId === void 0 && (yield* n.promise(() => e.store.insert(u, {
+			id: ye,
+			mode: f,
 			via: e.via ?? "direct",
 			direction: "import",
 			bundle: e.bundleDir,
 			sourceFingerprint: s.source.schemaFingerprint ?? null,
 			tablesWritten: 0,
 			rowsWritten: 0,
-			staged: p === "replace" ? k : null
+			staged: f === "replace" ? O : null
 		}).then(() => {
-			ye = !0;
+			be = !0;
 		}, (t) => {
 			e.onWarn?.(`the import trace could not be written (${String(t?.message ?? t)}).\n  The import continues — this is a record of what happened, not a safety check. Run
   \`voltro db apply\` so the next one is recorded.`);
-		}))), e.traceId !== void 0 && R && (yield* n.promise(() => e.store.update(u, L, {
-			staged: p === "replace" ? k : null,
+		}))), e.traceId !== void 0 && R && (yield* n.promise(() => e.store.update(u, ye, {
+			staged: f === "replace" ? O : null,
 			sourceFingerprint: s.source.schemaFingerprint ?? null
 		}).then(() => void 0, () => void 0)));
-		let be = 0, xe = !1;
-		he = () => {
-			if (!ye || xe) return;
+		let xe = 0, Se = !1;
+		ge = () => {
+			if (!be || Se) return;
 			let t = Date.now();
-			t - be < Qn || (be = t, e.store.update(u, L, {
-				tablesWritten: j,
-				rowsWritten: A
+			t - xe < $n || (xe = t, e.store.update(u, ye, {
+				tablesWritten: A,
+				rowsWritten: k
 			}).then(() => void 0, () => {
-				xe = !0;
+				Se = !0;
 			}));
 		};
-		let Se = (t) => ye ? e.store.update(u, L, {
+		let Ce = (t) => be ? e.store.update(u, ye, {
 			finishedAt: t === null ? /* @__PURE__ */ new Date() : null,
-			tablesWritten: j,
-			rowsWritten: A,
+			tablesWritten: A,
+			rowsWritten: k,
 			failure: t
 		}).then(() => void 0, () => void 0) : Promise.resolve();
-		if (t = (e) => Se(e), p === "replace" && !k && ue.blocker !== void 0 && e.onWarn?.(An(ue.blocker)), p === "replace" && fe.length > 0 && e.onWarn?.(`write recorders are SUSPENDED for this replace (${fe.length} table(s) have one).\n  A replace sets a state rather than changing rows, so a per-row history entry would describe
+		if (t = (e) => Ce(e), f === "replace" && !O && D.blocker !== void 0 && e.onWarn?.(jn(D.blocker)), f === "replace" && pe.length > 0 && e.onWarn?.(`write recorders are SUSPENDED for this replace (${pe.length} table(s) have one).\n  A replace sets a state rather than changing rows, so a per-row history entry would describe
   something that did not happen — and this path already writes through the raw store, without
-  tenant scoping or \`audit()\` stamping, for the same reason.`), k) {
-			e.onWarn?.(`staging ${de.length} table(s) before the swap — the target keeps its rows until the load stands.\n  The destructive step is one server-side transaction at the end, not the whole load.`);
-			let t = e.store, r = de.map((e) => e.name), i = Fn(r, {
-				getTable: (e) => v(e),
+  tenant scoping or \`audit()\` stamping, for the same reason.`), O) {
+			e.onWarn?.(`staging ${fe.length} table(s) before the swap — the target keeps its rows until the load stands.\n  The destructive step is one server-side transaction at the end, not the whole load.`);
+			let t = e.store, r = fe.map((e) => e.name), i = h("repl", `staging-${P}`), a = !1;
+			if (e.recordInterruption === !0) {
+				yield* n.promise(() => e.store.insert(d, {
+					id: i,
+					startedAt: F,
+					kind: "staging",
+					tables: String(fe.length),
+					capture: I?.dir ?? null,
+					via: e.via ?? "direct",
+					staging: r.map(X).join(","),
+					heartbeatAt: /* @__PURE__ */ new Date(),
+					resumable: !m
+				}).then(() => {
+					a = !0;
+				}, (t) => {
+					e.onWarn?.(`the staging tables could not be recorded (${String(t?.message ?? t)}).\n  The import continues and the target is unaffected — but if this run dies before the swap,
+  nothing at boot will mention the scratch tables it leaves. \`voltro data clear-staging\` finds
+  them by introspection.`);
+				}));
+				let t = Date.now();
+				j = () => {
+					if (!a) return;
+					let n = Date.now();
+					n - t < er || (t = n, e.store.update(d, i, { heartbeatAt: /* @__PURE__ */ new Date() }).then(() => void 0, () => void 0));
+				};
+			}
+			let o = () => a ? e.store.delete(d, i).then(() => void 0, () => void 0) : Promise.resolve(), s = In(r, {
+				getTable: (e) => y(e),
 				registerTable: (e) => {
-					ee(e);
+					te(e);
 				},
-				unregisterTable: re
-			}), a = !1;
+				unregisterTable: ie
+			}), c = !1;
 			try {
-				let i = g ? r : r.filter((e) => !Bt(x, e));
+				let i = m ? r : r.filter((e) => !Vt(b, e));
 				yield* n.tryPromise({
 					try: async () => {
-						await zn(t, i.map((e) => Nn(e, O))), await zn(t, i.map((e) => Mn(e, O)));
+						await Bn(t, i.map((e) => Pn(e, E))), await Bn(t, i.map((e) => Nn(e, E)));
 					},
 					catch: (e) => new H({ reason: `could not prepare the staging tables, so the import did not start and the target is untouched: ${String(e?.message ?? e)}` })
-				}), yield* I(ge(e.store, !g)), !g && x.truncated === !0 ? a = !0 : yield* n.tryPromise({
-					try: () => Bn(t, de, O).then(() => {
-						a = !0;
+				}), yield* L(_e(e.store, !m)), !m && b.truncated === !0 ? c = !0 : yield* n.tryPromise({
+					try: () => Vn(t, fe, E).then(() => {
+						c = !0;
 					}),
 					catch: (e) => new H({ reason: String(e?.message ?? e) })
 				}).pipe(n.catchAll((i) => n.gen(function* () {
-					let a = Rn(yield* n.promise(() => Vn(t, In(e.targetSnapshot, r), O).then((e) => e, () => [])));
+					let a = zn(yield* n.promise(() => Hn(t, Ln(e.targetSnapshot, r), E).then((e) => e, () => [])));
 					return yield* n.fail(new H({ reason: a ?? `the swap failed and the target is UNCHANGED: ${i.reason}` }));
-				}))), !g && a && x.truncated !== !0 && (x.truncated = !0, yield* J(y, x));
+				}))), !m && c && b.truncated !== !0 && (b.truncated = !0, yield* J(v, b));
 			} finally {
-				i.undo(), a || g ? yield* n.promise(() => zn(t, r.map((e) => Nn(e, O))).then(() => void 0, () => void 0)) : e.onWarn?.("the staged rows are KEPT so a re-run can continue from them rather than reload.\n  If you are not going to re-run this bundle, drop them: voltro data clear-staging --yes");
+				s.undo(), c || m ? (j = void 0, yield* n.promise(() => Bn(t, r.map((e) => Pn(e, E))).then(() => void 0, () => void 0)), yield* n.promise(o)) : e.onWarn?.("the staged rows are KEPT so a re-run can continue from them rather than reload.\n  If you are not going to re-run this bundle, drop them: voltro data clear-staging --yes");
 			}
-		} else g ? yield* n.tryPromise({
+		} else m ? yield* n.tryPromise({
 			try: () => e.store.transactional(async (e) => {
-				let t = await ve(() => n.runPromiseExit(ge(e, !1)));
-				if (r.isFailure(t)) throw nr(t.cause);
+				let t = await ve(() => n.runPromiseExit(_e(e, !1)));
+				if (r.isFailure(t)) throw ir(t.cause);
 			}),
-			catch: (e) => tr(e) ?? new H({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
-		}) : yield* I(ge(e.store, !0));
+			catch: (e) => rr(e) ?? new H({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
+		}) : yield* L(_e(e.store, !0));
 		if (e.assets && s.assets.index && !e.assetsAlreadyRestored) {
 			let t = e.assets;
-			yield* mt({
+			yield* ht({
 				sink: t,
-				assetsDir: i.join(e.bundleDir, kt),
+				assetsDir: i.join(e.bundleDir, At),
 				indexPath: i.join(e.bundleDir, s.assets.index ?? "assets/index.ndjson"),
 				progress: {
-					done: (e) => e in x.assets,
-					mark: (e) => (x.assets[e] = !0, J(y, x))
+					done: (e) => e in b.assets,
+					mark: (e) => (b.assets[e] = !0, J(v, b))
 				}
 			});
 		}
-		return yield* n.promise(() => Se(null)), {
+		return yield* n.promise(() => Ce(null)), {
 			manifest: s,
-			tablesWritten: j,
-			rowsWritten: A,
+			tablesWritten: A,
+			rowsWritten: k,
 			tablesSkipped: N,
 			rowsSkipped: M,
-			fullyResumed: j === 0 && N > 0,
-			...F === void 0 ? {} : { rollback: F }
+			fullyResumed: A === 0 && N > 0,
+			...I === void 0 ? {} : { rollback: I }
 		};
 	}).pipe(n.tapError((e) => n.promise(() => t?.(e?.reason ?? e?._tag ?? "the import did not finish") ?? Promise.resolve())));
-}, ar = (e) => e, or = (e) => {
+}, sr = (e) => e, cr = (e) => {
 	if (e.allowLive || e.liveInstance === null || e.sameTarget === "different") return { refuse: !1 };
 	let t = e.targetLabel === void 0 ? "" : ` Target: ${e.targetLabel}.`, n = e.sameTarget === "same" ? " That instance is connected to the SAME database." : " We could not confirm which database that instance is connected to, so this is refused on the conservative reading — an older instance, or one whose connection could not be parsed, reports nothing to compare.";
 	return {
 		refuse: !0,
 		message: `refusing to write into a target with a LIVE instance (${e.liveInstance}).${t}${n} A direct import is an uncoordinated concurrent writer — readers see partial state, the reactive layer either storms or goes stale, and rows race with live writes. Re-run with --allow-live to override, or use a live-safe strategy (shadow-swap for replace, or the api target).`
 	};
-}, Q = Buffer.from("VBUNDLE2"), sr = 0, cr = 1, lr = 2, ur = 32, dr = async (e) => {
+}, Q = Buffer.from("VBUNDLE2"), lr = 0, ur = 1, dr = 2, fr = 32, pr = async (e) => {
 	let t = [], n = async (r) => {
 		let i;
 		try {
-			i = await F(R(e, r), { withFileTypes: !0 });
+			i = await I(R(e, r), { withFileTypes: !0 });
 		} catch {
 			return;
 		}
@@ -1731,22 +1757,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	};
 	return await n(""), t.sort();
-}, fr = (e, t) => {
+}, mr = (e, t) => {
 	let n = Buffer.from(e, "utf8"), r = Buffer.alloc(5 + n.length + 8);
-	return r.writeUInt8(cr, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
-}, pr = (e, t, n) => {
+	return r.writeUInt8(ur, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
+}, hr = (e, t, n) => {
 	let r = Buffer.from(e, "utf8"), i = Buffer.from(t, "utf8"), a = Buffer.alloc(5 + r.length + 2 + i.length + 8), o = 0;
-	return a.writeUInt8(lr, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
+	return a.writeUInt8(dr, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
 };
-async function* mr(e) {
+async function* gr(e) {
 	yield new Uint8Array(Q);
-	for (let t of await dr(e.dir)) {
+	for (let t of await pr(e.dir)) {
 		let n = R(e.dir, t), r = await ve(n);
-		if (yield new Uint8Array(fr(t, r.size)), r.size > 0) for await (let e of le(n)) yield new Uint8Array(e);
+		if (yield new Uint8Array(mr(t, r.size)), r.size > 0) for await (let e of de(n)) yield new Uint8Array(e);
 	}
 	if (e.blobs) for await (let t of e.blobs.list()) {
-		yield new Uint8Array(pr(t.key, t.contentType, t.size));
-		let n = E("sha256"), r = 0;
+		yield new Uint8Array(hr(t.key, t.contentType, t.size));
+		let n = T("sha256"), r = 0;
 		for await (let i of e.blobs.open(t.key)) {
 			let e = Buffer.from(i);
 			n.update(e), r += e.length, yield new Uint8Array(e);
@@ -1754,11 +1780,11 @@ async function* mr(e) {
 		if (r !== t.size) throw Error(`blob '${t.key}' size mismatch: header ${t.size}, streamed ${r}`);
 		yield new Uint8Array(n.digest());
 	}
-	yield new Uint8Array(Buffer.from([sr]));
+	yield new Uint8Array(Buffer.from([lr]));
 }
-var hr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), gr = (e) => new Promise((t) => e.end(t)), _r = async (e, t) => {
-	let n = be(t.dir);
-	await P(n, { recursive: !0 });
+var _r = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vr = (e) => new Promise((t) => e.end(t)), yr = async (e, t) => {
+	let n = xe(t.dir);
+	await F(n, { recursive: !0 });
 	let r = Buffer.alloc(0), i = e[Symbol.asyncIterator](), a = !1, o = async () => {
 		let { value: e, done: t } = await i.next();
 		return t ? (a = !0, !1) : (r = r.length === 0 ? Buffer.from(e) : Buffer.concat([r, Buffer.from(e)]), !0);
@@ -1773,24 +1799,24 @@ var hr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), gr
 		for (;;) {
 			await s(1);
 			let e = c(1).readUInt8(0);
-			if (e === sr) return;
-			if (e === cr) {
+			if (e === lr) return;
+			if (e === ur) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
 				let t = c(e).toString("utf8");
 				await s(8);
-				let i = c(8).readBigUInt64BE(0), a = be(n, t);
-				if (a !== n && !a.startsWith(n + xe)) throw Error(`archive path '${t}' escapes the destination`);
-				await P(ye(a), { recursive: !0 });
-				let o = O(a);
+				let i = c(8).readBigUInt64BE(0), a = xe(n, t);
+				if (a !== n && !a.startsWith(n + Se)) throw Error(`archive path '${t}' escapes the destination`);
+				await F(be(a), { recursive: !0 });
+				let o = D(a);
 				for (; i > 0n;) {
 					r.length === 0 && await s(1);
 					let e = i < BigInt(r.length) ? Number(i) : r.length;
-					await hr(o, c(e)), i -= BigInt(e);
+					await _r(o, c(e)), i -= BigInt(e);
 				}
-				await gr(o);
-			} else if (e === lr) {
+				await vr(o);
+			} else if (e === dr) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
@@ -1800,24 +1826,24 @@ var hr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), gr
 				await s(i);
 				let a = c(i).toString("utf8");
 				await s(8);
-				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = E("sha256"), d = new N(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
+				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = T("sha256"), d = new N(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
 					contentType: a,
 					size: Number(o)
 				}), p = o;
 				for (; p > 0n;) {
 					r.length === 0 && await s(1);
 					let e = p < BigInt(r.length) ? Number(p) : r.length, t = c(e);
-					u.update(t), l || await hr(d, t), p -= BigInt(e);
+					u.update(t), l || await _r(d, t), p -= BigInt(e);
 				}
-				l ? d.destroy() : await gr(d), await f, await s(ur);
-				let m = c(ur);
+				l ? d.destroy() : await vr(d), await f, await s(fr);
+				let m = c(fr);
 				if (!u.digest().equals(m)) throw Error(`blob '${n}' failed integrity (sha mismatch)`);
 			} else throw Error(`unknown bundle entry kind ${e}`);
 		}
 	} finally {
 		a || await Promise.resolve(i.return?.()).catch(() => void 0);
 	}
-}, vr = async (e, t) => {
+}, br = async (e, t) => {
 	let n = new Set(t), r = /* @__PURE__ */ new Map(), i = Buffer.alloc(0), a = e[Symbol.asyncIterator](), o = async () => {
 		let { value: e, done: t } = await a.next();
 		return !t && (i = i.length === 0 ? Buffer.from(e) : Buffer.concat([i, Buffer.from(e)]), !0);
@@ -1839,8 +1865,8 @@ var hr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), gr
 	if (!await s(Q.length) || !c(Q.length).equals(Q)) throw Error("not a bundle archive (bad magic)");
 	for (; await s(1);) {
 		let e = c(1).readUInt8(0);
-		if (e === sr || e === lr) break;
-		if (e !== cr) throw Error(`unknown bundle entry kind ${e}`);
+		if (e === lr || e === dr) break;
+		if (e !== ur) throw Error(`unknown bundle entry kind ${e}`);
 		if (!await s(4)) break;
 		let t = c(4).readUInt32BE(0);
 		if (!await s(t)) break;
@@ -1850,20 +1876,20 @@ var hr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), gr
 		if (a === null || n.has(i) && (r.set(i, a), n.delete(i), n.size === 0)) break;
 	}
 	return r;
-}, yr = (e, t) => _r(e, {
+}, xr = (e, t) => yr(e, {
 	dir: t,
-	blobs: br(t)
-}), br = (e) => {
+	blobs: Sr(t)
+}), Sr = (e) => {
 	let t = /* @__PURE__ */ new Set();
 	return {
 		has: async (e) => t.has(e),
 		write: async (n, r, i) => {
 			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = R(e, "assets");
-			await P(c, { recursive: !0 });
-			let l = E("sha256"), u = 0, d = new s({ transform(e, t, n) {
+			await F(c, { recursive: !0 });
+			let l = T("sha256"), u = 0, d = new s({ transform(e, t, n) {
 				l.update(e), u += e.length, n(null, e);
 			} }), f = R(c, `.tmp-${Date.now()}-${t.size}`);
-			await o(r, d, O(f));
+			await o(r, d, D(f));
 			let p = l.digest("hex");
 			await a.rename(f, R(c, p)), await a.appendFile(R(c, "index.ndjson"), `${JSON.stringify({
 				key: n,
@@ -1873,33 +1899,33 @@ var hr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), gr
 			})}\n`), t.add(n);
 		}
 	};
-}, xr = Se(se), Sr = Buffer.from("VENC1\0\0\0"), Cr = 32, wr = 16, Tr = 7, Er = 16, Dr = 262144, Or = {
+}, Cr = Ce(ue), wr = Buffer.from("VENC1\0\0\0"), Tr = 32, Er = 16, Dr = 7, Or = 16, kr = 262144, Ar = {
 	N: 32768,
 	r: 8,
 	p: 1
-}, kr = 134217728, Ar = 43, jr = (e, t, n) => {
+}, jr = 134217728, Mr = 43, Nr = (e, t, n) => {
 	let r = Buffer.alloc(12);
-	return e.copy(r, 0, 0, Tr), r.writeUInt32BE(t >>> 0, Tr), r.writeUInt8(+!!n, 11), r;
+	return e.copy(r, 0, 0, Dr), r.writeUInt32BE(t >>> 0, Dr), r.writeUInt8(+!!n, 11), r;
 };
-async function* Mr(e, t) {
+async function* Pr(e, t) {
 	if (!t) throw Error("encryptStream: a non-empty passphrase is required");
-	let n = D(wr), r = D(Tr), i = await xr(t, n, Cr, {
-		...Or,
-		maxmem: kr
-	}), a = Buffer.alloc(Ar);
-	Sr.copy(a, 0), a.writeUInt32BE(Or.N, 8), a.writeUInt32BE(Or.r, 12), a.writeUInt32BE(Or.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
+	let n = ce(Er), r = ce(Dr), i = await Cr(t, n, Tr, {
+		...Ar,
+		maxmem: jr
+	}), a = Buffer.alloc(Mr);
+	wr.copy(a, 0), a.writeUInt32BE(Ar.N, 8), a.writeUInt32BE(Ar.r, 12), a.writeUInt32BE(Ar.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
 	let o = 0, s = (e, t) => {
-		let n = w("aes-256-gcm", i, jr(r, o, t));
+		let n = ae("aes-256-gcm", i, Nr(r, o, t));
 		o === 0 && n.setAAD(a);
 		let s = Buffer.concat([n.update(e), n.final()]), c = n.getAuthTag();
 		o++;
-		let l = Buffer.alloc(5 + s.length + Er);
-		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + Er, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
+		let l = Buffer.alloc(5 + s.length + Or);
+		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + Or, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
 	}, c = Buffer.alloc(0);
-	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > Dr;) yield s(c.subarray(0, Dr), !1), c = c.subarray(Dr);
+	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > kr;) yield s(c.subarray(0, kr), !1), c = c.subarray(kr);
 	yield s(c, !0);
 }
-async function* Nr(e, t) {
+async function* Fr(e, t) {
 	if (!t) throw Error("decryptStream: a non-empty passphrase is required");
 	let n = e[Symbol.asyncIterator](), r = Buffer.alloc(0), i = !1, a = async () => {
 		let { value: e, done: t } = await n.next();
@@ -1908,16 +1934,16 @@ async function* Nr(e, t) {
 		for (; r.length < e && !i && await a(););
 		return r.length >= e;
 	};
-	if (!await o(Ar)) throw Error("encrypted bundle truncated (no header)");
-	let s = r.subarray(0, Ar);
-	if (!s.subarray(0, 8).equals(Sr)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
-	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Ar)), p = await xr(t, d, Cr, {
+	if (!await o(Mr)) throw Error("encrypted bundle truncated (no header)");
+	let s = r.subarray(0, Mr);
+	if (!s.subarray(0, 8).equals(wr)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
+	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Mr)), p = await Cr(t, d, Tr, {
 		N: c,
 		r: l,
 		p: u,
-		maxmem: kr
+		maxmem: jr
 	});
-	r = r.subarray(Ar);
+	r = r.subarray(Mr);
 	let m = 0, h = !1;
 	for (;;) {
 		if (!await o(5)) {
@@ -1926,11 +1952,11 @@ async function* Nr(e, t) {
 		}
 		if (h) throw Error("encrypted bundle has trailing data after the final frame");
 		let e = r.readUInt8(0) === 1, t = r.readUInt32BE(1);
-		if (t < Er) throw Error("encrypted bundle corrupt (short frame)");
+		if (t < Or) throw Error("encrypted bundle corrupt (short frame)");
 		if (!await o(5 + t)) throw Error("encrypted bundle truncated (frame body)");
-		let n = r.subarray(5, 5 + t - Er), i = r.subarray(5 + t - Er, 5 + t);
+		let n = r.subarray(5, 5 + t - Or), i = r.subarray(5 + t - Or, 5 + t);
 		r = r.subarray(5 + t);
-		let a = T("aes-256-gcm", p, jr(f, m, e));
+		let a = oe("aes-256-gcm", p, Nr(f, m, e));
 		m === 0 && a.setAAD(s), a.setAuthTag(i);
 		let c = Buffer.concat([a.update(n), a.final()]);
 		m++, e && (h = !0), c.length > 0 && (yield new Uint8Array(c));
@@ -1938,7 +1964,7 @@ async function* Nr(e, t) {
 }
 //#endregion
 //#region src/blobStorage.ts
-var Pr = (e, t) => ({
+var Ir = (e, t) => ({
 	list: () => {
 		let e = t();
 		return { async *[Symbol.asyncIterator]() {
@@ -1951,32 +1977,32 @@ var Pr = (e, t) => ({
 		} };
 	},
 	open: (t) => ({ async *[Symbol.asyncIterator]() {
-		let r = await n.runPromise(A(e, t)), i = await he(r.stream);
+		let r = await n.runPromise(A(e, t)), i = await j(r.stream);
 		for await (let e of i) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 	} })
-}), Fr = (e, t) => Pr(e, () => C(t, {
-	table: pe,
+}), Lr = (e, t) => Ir(e, () => C(t, {
+	table: k,
 	chunkSize: 500
 }).pipe(l.map((e) => ({
 	key: String(e.key),
 	contentType: String(e.contentType ?? "application/octet-stream"),
 	size: Number(e.size ?? 0)
-})))), Ir = (e) => ({
+})))), Rr = (e) => ({
 	has: (t) => n.runPromise(e.head(t).pipe(n.map((e) => e !== null))),
 	write: async (t, r, i) => {
-		let a = me("storage", () => ge.from(r));
-		await n.runPromise(j(e, t, a, {
+		let a = he("storage", () => _e.from(r));
+		await n.runPromise(ge(e, t, a, {
 			contentType: i.contentType,
 			totalSize: i.size
 		}));
 	}
-}), Lr = (e, t) => {
+}), zr = (e, t) => {
 	let n = t === "dump" ? "mariadb-dump" : "mariadb", r = t === "dump" ? "mysqldump" : "mysql";
-	return e === "mariadb" ? Rr(n) ? { tool: n } : {
+	return e === "mariadb" ? Br(n) ? { tool: n } : {
 		tool: r,
 		hint: `'${n}' is not on PATH, so this ran '${r}' instead. If that binary came from Oracle's MySQL client it queries information_schema.COLUMN_STATISTICS, which MariaDB does not have, and the run dies with error 1109 after the first table. Install the MariaDB client package (which ships '${n}') and re-run. Do NOT reach for --column-statistics=0: that flag does not exist on '${n}', so it fixes the wrong client and breaks the right one. Note: a MariaDB 12.x client requires TLS by default, so running '${n}' BY HAND against a server without it fails with "TLS/SSL error: SSL is required" (2026) and needs --skip-ssl. This command is not affected.`
 	} : { tool: r };
-}, Rr = (e) => (process.env.PATH ?? "").split(L).filter((e) => e !== "").some((t) => ue(R(t, e))), zr = (e) => {
+}, Br = (e) => (process.env.PATH ?? "").split(ye).filter((e) => e !== "").some((t) => fe(R(t, e))), Vr = (e) => {
 	switch (e) {
 		case "postgres": return "db.dump";
 		case "mysql":
@@ -1986,7 +2012,7 @@ var Pr = (e, t) => ({
 		case "mssql": return "db.bacpac";
 		default: return "db.dump";
 	}
-}, Br = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
+}, Hr = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
 	if (e.host || e.database) return {
 		host: e.host ?? "localhost",
 		port: e.port ?? 3306,
@@ -2002,7 +2028,7 @@ var Pr = (e, t) => ({
 		password: decodeURIComponent(t.password) || "",
 		database: t.pathname.replace(/^\//, "") || ""
 	};
-}, Vr = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Hr = (e, t, n) => {
+}, Ur = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Wr = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -2012,7 +2038,7 @@ var Pr = (e, t) => ({
 					"--format=custom",
 					"--no-owner",
 					"--no-privileges",
-					...Wr,
+					...Kr,
 					"--dbname",
 					t.url,
 					"--file",
@@ -2031,7 +2057,7 @@ var Pr = (e, t) => ({
 					"--format=custom",
 					"--no-owner",
 					"--no-privileges",
-					...Wr,
+					...Kr,
 					"-h",
 					e.host,
 					"-p",
@@ -2051,14 +2077,14 @@ var Pr = (e, t) => ({
 			let r = $(t);
 			return {
 				kind: "spawn",
-				...Lr(e, "dump"),
+				...zr(e, "dump"),
 				args: [
 					"--single-transaction",
 					"--routines",
 					"--triggers",
 					"--no-tablespaces",
 					"--protocol=TCP",
-					...Ur.map((e) => `--ignore-table=${r.database}.${e}`),
+					...Gr.map((e) => `--ignore-table=${r.database}.${e}`),
 					"-h",
 					r.host,
 					"-P",
@@ -2074,7 +2100,7 @@ var Pr = (e, t) => ({
 		case "sqlite":
 		case "turso": return {
 			kind: "copy",
-			from: Br(t),
+			from: Hr(t),
 			to: n
 		};
 		case "mssql": return {
@@ -2082,7 +2108,7 @@ var Pr = (e, t) => ({
 			tool: "sqlpackage",
 			args: [
 				"/Action:Export",
-				`/SourceConnectionString:${Vr($({
+				`/SourceConnectionString:${Ur($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -2095,7 +2121,7 @@ var Pr = (e, t) => ({
 			reason: `no native backup for dialect '${e}'`
 		});
 	}
-}, Ur = [d, u], Wr = Ur.flatMap((e) => ["--exclude-table", e]), Gr = (e, t, n) => {
+}, Gr = [d, u], Kr = Gr.flatMap((e) => ["--exclude-table", e]), qr = (e) => e === "postgres" || e === "mysql" || e === "mariadb" ? Gr : [], Jr = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -2140,7 +2166,7 @@ var Pr = (e, t) => ({
 			let r = $(t);
 			return {
 				kind: "spawn",
-				...Lr(e, "client"),
+				...zr(e, "client"),
 				args: [
 					"--protocol=TCP",
 					"-h",
@@ -2159,14 +2185,14 @@ var Pr = (e, t) => ({
 		case "turso": return {
 			kind: "copy",
 			from: n,
-			to: Br(t)
+			to: Hr(t)
 		};
 		case "mssql": return {
 			kind: "spawn",
 			tool: "sqlpackage",
 			args: [
 				"/Action:Import",
-				`/TargetConnectionString:${Vr($({
+				`/TargetConnectionString:${Ur($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -2179,22 +2205,22 @@ var Pr = (e, t) => ({
 			reason: `no native restore for dialect '${e}'`
 		});
 	}
-}, Kr = (e) => e.kind === "copy" ? n.async((t) => {
-	let r = `${e.to}.restoring-${oe()}`, i = (e) => {
+}, Yr = (e) => e.kind === "copy" ? n.async((t) => {
+	let r = `${e.to}.restoring-${le()}`, i = (e) => {
 		try {
-			k(r);
+			me(r);
 		} catch {}
 		t(n.fail(new W({
 			tool: "copy",
 			reason: e
 		})));
 	};
-	ce(e.from, r, (a) => {
+	E(e.from, r, (a) => {
 		if (a) {
 			i(`copy ${e.from} → ${e.to}: ${a.message}`);
 			return;
 		}
-		de(r, e.to, (r) => {
+		pe(r, e.to, (r) => {
 			if (r) {
 				i(`copy ${e.from} → ${e.to}: ${r.message}`);
 				return;
@@ -2203,7 +2229,7 @@ var Pr = (e, t) => ({
 		});
 	});
 }) : n.async((t) => {
-	let r = Ce(e.tool, [...e.args], {
+	let r = we(e.tool, [...e.args], {
 		env: {
 			...process.env,
 			...e.env
@@ -2223,23 +2249,23 @@ var Pr = (e, t) => ({
 		s ??= e;
 	};
 	if (e.stdoutFile && r.stdout) {
-		let t = O(e.stdoutFile);
-		t.on("error", (t) => c(`writing ${I(e.stdoutFile)}: ${t.message}`)), r.stdout.on("error", (e) => c(`reading the tool's output: ${e.message}`)), r.stdout.pipe(t);
+		let t = D(e.stdoutFile);
+		t.on("error", (t) => c(`writing ${L(e.stdoutFile)}: ${t.message}`)), r.stdout.on("error", (e) => c(`reading the tool's output: ${e.message}`)), r.stdout.pipe(t);
 	}
 	let l = 0;
 	if (e.stdinFile && r.stdin) {
-		let t = le(e.stdinFile);
+		let t = de(e.stdinFile);
 		t.on("data", (e) => {
 			l += e.length;
 		}), t.on("error", (t) => {
-			c(`reading ${I(e.stdinFile)}: ${t.message}`), r.stdin?.end();
+			c(`reading ${L(e.stdinFile)}: ${t.message}`), r.stdin?.end();
 		}), r.stdin.on("error", (t) => {
-			t.code !== "EPIPE" && c(`feeding ${I(e.stdinFile)} to ${e.tool}: ${t.message}`);
+			t.code !== "EPIPE" && c(`feeding ${L(e.stdinFile)} to ${e.tool}: ${t.message}`);
 		}), t.pipe(r.stdin);
 	}
 	let u = () => {
 		if (e.stdoutFile !== void 0) try {
-			k(e.stdoutFile);
+			me(e.stdoutFile);
 		} catch {}
 	};
 	r.on("error", (t) => {
@@ -2254,25 +2280,25 @@ var Pr = (e, t) => ({
 			return;
 		}
 		u();
-		let r = e.stdinFile === void 0 ? "" : ` — ${l} of ${qr(e.stdinFile)} byte(s) of ${I(e.stdinFile)} had been fed to it`;
+		let r = e.stdinFile === void 0 ? "" : ` — ${l} of ${Xr(e.stdinFile)} byte(s) of ${L(e.stdinFile)} had been fed to it`;
 		o(n.fail(new W({
 			tool: e.tool,
-			reason: (t === 0 ? `exited cleanly, but ${s}` : `exited with code ${t}${s === void 0 ? "" : ` (${s})`}`) + r + (e.stdoutFile === void 0 ? "" : ` — the partial ${I(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
+			reason: (t === 0 ? `exited cleanly, but ${s}` : `exited with code ${t}${s === void 0 ? "" : ` (${s})`}`) + r + (e.stdoutFile === void 0 ? "" : ` — the partial ${L(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
 			stderr: i.trim() === "" ? `(${e.tool} printed nothing to stderr)` : i.slice(-2e3),
 			...e.hint === void 0 ? {} : { hint: e.hint }
 		})));
 	});
-}), qr = (e) => {
+}), Xr = (e) => {
 	try {
-		return String(fe(e).size);
+		return String(O(e).size);
 	} catch {
 		return "?";
 	}
-}, Jr = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), Yr = (e) => n.gen(function* () {
-	let t = yield* at(e.scope ?? { kind: "all" }, e.snapshot, {
+}, Zr = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), Qr = (e) => n.gen(function* () {
+	let t = yield* ot(e.scope ?? { kind: "all" }, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), r = tn(t.tables, e.snapshot), i = e.classification ?? Ee(e.snapshot), a = e.sampleSize ?? 20, o = ze(r.map((t) => ({
+	}), r = nn(t.tables, e.snapshot), i = e.classification ?? De(e.snapshot), a = e.sampleSize ?? 20, o = Be(r.map((t) => ({
 		name: t,
 		columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 			name: e.name,
@@ -2284,15 +2310,15 @@ var Pr = (e, t) => ({
 			table: i,
 			chunkSize: a,
 			...r === void 0 ? {} : { where: r }
-		}).pipe(l.take(a), l.runCollect, n.map((e) => [...e])), d = u.map((t) => He(t, i, o.actions, e.masking.seed));
-		c.push(...Ve(d, i, o.actions));
+		}).pipe(l.take(a), l.runCollect, n.map((e) => [...e])), d = u.map((t) => Ue(t, i, o.actions, e.masking.seed));
+		c.push(...He(d, i, o.actions));
 		let f = u[0], p = d[0], m = [];
 		if (f && p) for (let [e, t] of Object.entries(o.actions)) {
 			if (!e.startsWith(`${i}.`) || t === "keep") continue;
 			let n = e.slice(i.length + 1);
 			m.push({
 				column: n,
-				action: Jr(t),
+				action: Zr(t),
 				before: f[n],
 				after: p[n]
 			});
@@ -2307,7 +2333,7 @@ var Pr = (e, t) => ({
 		leaks: c,
 		unclassified: o.unclassified
 	};
-}), Xr = (e, t) => {
+}), $r = (e, t) => {
 	let n = new Map(t.map((e) => [e.name, e])), r = [], i = {};
 	for (let t of e) {
 		let e = n.get(t.name);
@@ -2362,7 +2388,7 @@ var Pr = (e, t) => ({
 		skipColumns: i,
 		refuse: r.some((e) => e.verdict === "refuse")
 	};
-}, Zr = (e) => {
+}, ei = (e) => {
 	if (e.findings.length === 0) return ["  schema matches the bundle"];
 	let t = {
 		safe: "✓",
@@ -2373,4 +2399,4 @@ var Pr = (e, t) => ({
 	return n.push(""), n.push(`  discarded: ${r("value-dropped")}   defaulted: ${r("filled-by-default")}   refused: ${r("refuse")}`), e.refuse && (n.push(""), n.push("  REFUSED — no row was written. These are the differences that would make"), n.push("  imported rows WRONG rather than merely incomplete.")), n;
 };
 //#endregion
-export { kt as ASSETS_DIR, At as ASSET_INDEX_FILE, H as BundleError, qe as CodecError, Ye as CompressionError, et as CrossDialectError, Ot as DATA_DIR, Te as DEFAULT_CLASS_ACTIONS, Ue as ENVIRONMENT_LOCAL_TABLES, We as ENVIRONMENT_PORTABLE_TABLES, Ur as EXCLUDED_FROM_DUMP, bt as FORMAT_VERSION, $e as ImportModeError, Je as IntegrityError, jt as LEDGER_FILE, K as MANIFEST_FILE, Qe as MaskingError, W as NativeToolError, Xe as RowsRefusedError, $n as SAVEPOINT_BATCH_SIZE, On as STAGING_PREFIX, Ze as SchemaDriftError, U as ScopeError, Le as applyAction, tr as asImportError, or as assessLiveImport, Vt as assetDone, zr as backupArtifactName, Hr as backupCommand, gn as canonicalType, ft as captureAssetsToCas, yn as checkPortability, Zn as checkSchemaDrift, Ee as classificationFromSnapshot, Xr as classifyImportDrift, _t as compressionExt, nt as computeSubsetIds, Wn as decideStaging, Et as decodeManifest, Zt as decodeRow, Yt as decodeValue, Nr as decryptStream, ar as defineDataProfile, Xn as diffSnapshots, br as dirBlobSink, Nn as dropStagingSql, Rt as emptyLedger, Tt as encodeManifest, Xt as encodeRow, qt as encodeValue, Mr as encryptStream, Ke as environmentLocalNotice, Ge as environmentLocalReason, zn as execStatements, Zr as formatImportDrift, bn as formatIssue, ht as hasZstd, V as isEnvironmentLocal, vt as makeCompressor, yt as makeDecompressor, He as maskRow, en as ndjsonToRows, ut as noAssetProgress, hn as outsideReferenceRefusal, mn as outsideReferencesInto, mr as packBundle, vr as peekBundle, gt as pickCompression, ze as planMasking, Yr as previewMasking, pt as readAssetIndex, zt as readLedger, De as resolveAction, at as resolveScope, lt as restoreAssetFromCas, mt as restoreAssetsFromCas, Gr as restoreCommand, $t as rowsToNdjson, pn as runExport, ir as runImport, Kr as runNativeStep, Ve as scanForLeaks, X as stagingNameFor, st as storageAssetSink, ot as storageAssetSource, Ir as storageBlobSink, Pr as storageBlobSource, Fr as storageRefsBlobSource, rt as subsetToScope, Bt as tableDone, tn as topoSortTables, _r as unpackBundle, yr as unpackBundleToDir, ct as writeAssetToCas, J as writeLedger };
+export { At as ASSETS_DIR, jt as ASSET_INDEX_FILE, H as BundleError, Je as CodecError, Xe as CompressionError, tt as CrossDialectError, kt as DATA_DIR, Ee as DEFAULT_CLASS_ACTIONS, We as ENVIRONMENT_LOCAL_TABLES, Ge as ENVIRONMENT_PORTABLE_TABLES, Gr as EXCLUDED_FROM_DUMP, xt as FORMAT_VERSION, et as ImportModeError, Ye as IntegrityError, Mt as LEDGER_FILE, K as MANIFEST_FILE, $e as MaskingError, W as NativeToolError, Ze as RowsRefusedError, tr as SAVEPOINT_BATCH_SIZE, kn as STAGING_PREFIX, Qe as SchemaDriftError, U as ScopeError, Re as applyAction, rr as asImportError, cr as assessLiveImport, Ht as assetDone, Vr as backupArtifactName, Wr as backupCommand, An as canStage, _n as canonicalType, pt as captureAssetsToCas, bn as checkPortability, Qn as checkSchemaDrift, De as classificationFromSnapshot, $r as classifyImportDrift, vt as compressionExt, rt as computeSubsetIds, Gn as decideStaging, Dt as decodeManifest, Qt as decodeRow, Xt as decodeValue, Fr as decryptStream, sr as defineDataProfile, Zn as diffSnapshots, Sr as dirBlobSink, Pn as dropStagingSql, qr as dumpExcludedTables, zt as emptyLedger, Et as encodeManifest, Zt as encodeRow, Jt as encodeValue, Pr as encryptStream, qe as environmentLocalNotice, Ke as environmentLocalReason, Bn as execStatements, ei as formatImportDrift, xn as formatIssue, gt as hasZstd, V as isEnvironmentLocal, yt as makeCompressor, bt as makeDecompressor, Ue as maskRow, tn as ndjsonToRows, dt as noAssetProgress, gn as outsideReferenceRefusal, hn as outsideReferencesInto, gr as packBundle, br as peekBundle, _t as pickCompression, Be as planMasking, Qr as previewMasking, mt as readAssetIndex, Bt as readLedger, Oe as resolveAction, ot as resolveScope, ut as restoreAssetFromCas, ht as restoreAssetsFromCas, Jr as restoreCommand, en as rowsToNdjson, mn as runExport, or as runImport, Yr as runNativeStep, He as scanForLeaks, X as stagingNameFor, ct as storageAssetSink, st as storageAssetSource, Rr as storageBlobSink, Ir as storageBlobSource, Lr as storageRefsBlobSource, it as subsetToScope, Vt as tableDone, nn as topoSortTables, yr as unpackBundle, xr as unpackBundleToDir, lt as writeAssetToCas, J as writeLedger };