@voltro/data-transfer 0.63.0 → 0.64.0

package/dist/index.js

@@ -1,18 +1,18 @@
 import { Cause as e, Data as t, Effect as n, Exit as r, Metric as i, MetricBoundaries as a, Runtime as o, Schedule as s, Schema as c, Stream as l } from "effect";
-import { DATA_TRANSFERS_TABLE as u, REPLACE_IN_PROGRESS_TABLE as d, STAGING_TABLE_PREFIX as f, _voltroDataTransfersTable as p, classifyConstraintViolation as m, derivedRowId as h, ensureTableRegistered as g, eq as _, extractDbCause as v, getTable as y, inSet as b, isNotNull as x, or as S, recordsTable as ee, registerTable as te, streamTable as C, suspendWriteRecorders as ne, suspendWriteRecordersEffect as re, unregisterTable as ie } from "@voltro/database";
-import { fingerprintSchema as w } from "@voltro/database/sql";
-import { createCipheriv as ae, createDecipheriv as oe, createHash as T, createHmac as se, randomBytes as ce, randomUUID as le, scrypt as ue } from "node:crypto";
-import { copyFile as E, createReadStream as de, createWriteStream as D, existsSync as fe, rename as pe, statSync as O, unlinkSync as me } from "node:fs";
-import { STORAGE_REFS_TABLE as k, fromNodeReadable as he, getObjectStream as A, putObjectStream as ge, toNodeReadable as j } from "@voltro/plugin-storage";
-import * as M from "node:zlib";
-import { PassThrough as N, Readable as _e } from "node:stream";
-import { SqlClient as P } from "@effect/sql";
-import { mkdir as F, readdir as I, stat as ve } from "node:fs/promises";
-import { basename as L, delimiter as ye, dirname as be, join as R, resolve as xe, sep as Se } from "node:path";
-import { promisify as Ce } from "node:util";
-import { spawn as we } from "node:child_process";
+import { DATA_TRANSFERS_TABLE as u, REPLACE_IN_PROGRESS_TABLE as d, STAGING_TABLE_PREFIX as f, _voltroDataTransfersTable as p, classifyConstraintViolation as m, derivedRowId as h, ensureTableRegistered as g, eq as _, extractDbCause as v, getTable as y, inSet as b, isNotNull as x, or as S, recordsTable as C, registerTable as ee, streamTable as w, suspendWriteRecorders as te, suspendWriteRecordersEffect as ne, unregisterTable as re } from "@voltro/database";
+import { fingerprintSchema as T } from "@voltro/database/sql";
+import { createCipheriv as E, createDecipheriv as ie, createHash as ae, createHmac as oe, randomBytes as se, randomUUID as ce, scrypt as le } from "node:crypto";
+import { copyFile as D, createReadStream as ue, createWriteStream as O, existsSync as de, rename as fe, statSync as k, unlinkSync as pe } from "node:fs";
+import { STORAGE_REFS_TABLE as A, fromNodeReadable as me, getObjectStream as j, putObjectStream as he, toNodeReadable as M } from "@voltro/plugin-storage";
+import * as N from "node:zlib";
+import { PassThrough as P, Readable as ge } from "node:stream";
+import { SqlClient as F } from "@effect/sql";
+import { mkdir as I, readdir as L, stat as _e } from "node:fs/promises";
+import { basename as R, delimiter as z, dirname as ve, join as B, resolve as ye, sep as be } from "node:path";
+import { promisify as xe } from "node:util";
+import { spawn as Se } from "node:child_process";
 //#region src/consistency.ts
-var Te = (e) => {
+var Ce = (e) => {
 	switch (e) {
 		case "postgres": return ["SET TRANSACTION ISOLATION LEVEL REPEATABLE READ"];
 		case "mysql":
@@ -22,7 +22,7 @@ var Te = (e) => {
 		case "turso": return [];
 		default: return [];
 	}
-}, Ee = {
+}, we = {
 	email: { fake: "email" },
 	fullName: { fake: "fullName" },
 	firstName: { fake: "firstName" },
@@ -37,7 +37,7 @@ var Te = (e) => {
 	date: "dateShift",
 	secret: "null",
 	freeText: "redact"
-}, De = (e) => {
+}, Te = (e) => {
 	let t = {};
 	for (let n of e.tables) {
 		let e = {};
@@ -49,15 +49,15 @@ var Te = (e) => {
 		t[n.name] = e;
 	}
 	return t;
-}, Oe = (e, t, n, r) => {
+}, Ee = (e, t, n, r) => {
 	let i = r.columns?.[`${e}.${t}`];
 	if (i) return i;
 	if (n?.sensitive) {
 		let e = n.sensitive.class;
-		return r.classes?.[e] ?? Ee[e] ?? "redact";
+		return r.classes?.[e] ?? we[e] ?? "redact";
 	}
 	return n?.safe ? r.onSafe ?? "keep" : n?.columnType === "id" || n?.columnType === "reference" ? "keep" : r.onUnclassified ?? "error";
-}, ke = (e, t) => se("sha256", e).update(t == null ? "∅" : String(t)).digest(), z = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), Ae = [
+}, De = (e, t) => oe("sha256", e).update(t == null ? "∅" : String(t)).digest(), V = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), Oe = [
 	"Ada",
 	"Alan",
 	"Grace",
@@ -70,7 +70,7 @@ var Te = (e) => {
 	"Guido",
 	"Margaret",
 	"Bjarne"
-], je = [
+], ke = [
 	"Lovelace",
 	"Turing",
 	"Hopper",
@@ -83,7 +83,7 @@ var Te = (e) => {
 	"Rossum",
 	"Hamilton",
 	"Stroustrup"
-], Me = [
+], Ae = [
 	"Maple",
 	"Oak",
 	"Cedar",
@@ -92,7 +92,7 @@ var Te = (e) => {
 	"Birch",
 	"Willow",
 	"Ash"
-], Ne = [
+], je = [
 	"Initech",
 	"Hooli",
 	"Umbrella",
@@ -101,23 +101,23 @@ var Te = (e) => {
 	"Soylent",
 	"Stark",
 	"Wayne"
-], B = (e, t, n) => e[z(t, n) % e.length], Pe = (e, t, n) => {
-	let r = ke(n, `${e}:${String(t)}`), i = z(r, 1) % 1e4;
+], H = (e, t, n) => e[V(t, n) % e.length], Me = (e, t, n) => {
+	let r = De(n, `${e}:${String(t)}`), i = V(r, 1) % 1e4;
 	switch (e) {
-		case "email": return `${B(Ae, r, 0).toLowerCase()}.${B(je, r, 2).toLowerCase()}${i}@example.com`;
-		case "fullName": return `${B(Ae, r, 0)} ${B(je, r, 1)}`;
-		case "firstName": return B(Ae, r, 0);
-		case "lastName": return B(je, r, 1);
-		case "username": return `${B(Ae, r, 0).toLowerCase()}${i}`;
-		case "phone": return `+1${String(z(r, 0) % 1e10).padStart(10, "0")}`;
-		case "address": return `${z(r, 0) % 9899 + 100} ${B(Me, r, 1)} St`;
-		case "company": return B(Ne, r, 0);
+		case "email": return `${H(Oe, r, 0).toLowerCase()}.${H(ke, r, 2).toLowerCase()}${i}@example.com`;
+		case "fullName": return `${H(Oe, r, 0)} ${H(ke, r, 1)}`;
+		case "firstName": return H(Oe, r, 0);
+		case "lastName": return H(ke, r, 1);
+		case "username": return `${H(Oe, r, 0).toLowerCase()}${i}`;
+		case "phone": return `+1${String(V(r, 0) % 1e10).padStart(10, "0")}`;
+		case "address": return `${V(r, 0) % 9899 + 100} ${H(Ae, r, 1)} St`;
+		case "company": return H(je, r, 0);
 		case "url": return `https://example.com/${r.toString("hex").slice(0, 12)}`;
-		case "ip": return `${z(r, 0) % 256}.${z(r, 1) % 256}.${z(r, 2) % 256}.${z(r, 3) % 254 + 1}`;
-		case "creditCard": return Fe(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
+		case "ip": return `${V(r, 0) % 256}.${V(r, 1) % 256}.${V(r, 2) % 256}.${V(r, 3) % 254 + 1}`;
+		case "creditCard": return Ne(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
 		default: return `${e}_${r.toString("hex").slice(0, 8)}`;
 	}
-}, Fe = (e) => {
+}, Ne = (e) => {
 	let t = e.slice(0, 15).split("").map(Number), n = 0;
 	t.forEach((e, t) => {
 		let r = e;
@@ -125,31 +125,91 @@ var Te = (e) => {
 	});
 	let r = (10 - n % 10) % 10;
 	return e.slice(0, 15) + String(r);
-}, Ie = 864e5, Le = (e, t) => {
+}, Pe = 864e5, Fe = (e, t) => {
 	let n = e instanceof Date ? e.getTime() : Date.parse(String(e));
 	if (Number.isNaN(n)) return e;
-	let r = z(ke(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Ie);
+	let r = V(De(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Pe);
 	return e instanceof Date ? i : i.toISOString();
-}, Re = (e, t) => {
+}, U = (e, t) => {
 	if (t.value === null || t.value === void 0) return null;
 	if (e === "error") throw Error(`masking: unresolved 'error' action for ${t.table}.${t.column}`);
 	if (e === "keep") return t.value;
 	if (e === "null") return null;
 	if (e === "redact") return t.columnType === "text" || typeof t.value == "string" ? "[redacted]" : null;
-	if (e === "hash") return ke(t.seed, t.value).toString("hex").slice(0, 16);
-	if (e === "dateShift") return Le(t.value, t.seed);
-	if (typeof e == "object" && "fake" in e) return Pe(e.fake, t.value, t.seed);
+	if (e === "hash") return De(t.seed, t.value).toString("hex").slice(0, 16);
+	if (e === "dateShift") return Fe(t.value, t.seed);
+	if (typeof e == "object" && "fake" in e) return Me(e.fake, t.value, t.seed);
 	if (typeof e == "object" && "custom" in e) return e.custom(t);
-	throw Error(`masking: '${t.table}.${t.column}' resolved to an action this build does not understand (${JSON.stringify(e)}). Refusing to copy the value through. Valid actions: 'keep' | 'null' | 'redact' | 'hash' | 'dateShift' | { fake: '<class>' } | { custom: fn }.`);
-}, ze = (e) => typeof e == "string" ? e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error" : typeof e != "object" || !e ? !1 : "fake" in e ? typeof e.fake == "string" : "custom" in e && typeof e.custom == "function", Be = (e, t, n) => {
+	if (typeof e == "object" && "json" in e) return Ie(e, t);
+	throw Error(`masking: '${t.table}.${t.column}' resolved to an action this build does not understand (${JSON.stringify(e)}). Refusing to copy the value through. Valid actions: 'keep' | 'null' | 'redact' | 'hash' | 'dateShift' | { fake: '<class>' } | { custom: fn } | { json: { fields, rest? } }.`);
+}, Ie = (e, t) => {
+	let { fields: n, rest: r = "redact" } = e.json, i = typeof t.value == "string" ? Le(t.value) : {
+		ok: !0,
+		value: t.value
+	};
+	if (!i.ok) return U(r, {
+		...t,
+		columnType: "text"
+	});
+	let a = (e, i) => {
+		if (e == null) return null;
+		if (Array.isArray(e)) return e.map((e, t) => a(e, `${i}[${t}]`));
+		if (typeof e == "object") {
+			let a = {};
+			for (let [o, s] of Object.entries(e)) {
+				let e = n[o] ?? r, c = `${i}.${o}`;
+				a[o] = typeof e == "object" && "json" in e ? Ie(e, {
+					...t,
+					value: s,
+					column: c,
+					columnType: "json"
+				}) : U(e, {
+					...t,
+					value: s,
+					column: c,
+					columnType: typeof s == "string" ? "text" : "json"
+				});
+			}
+			return a;
+		}
+		return U(r, {
+			...t,
+			value: e,
+			column: i,
+			columnType: typeof e == "string" ? "text" : "json"
+		});
+	}, o = a(i.value, t.column);
+	return typeof t.value == "string" ? JSON.stringify(o) : o;
+}, Le = (e) => {
+	try {
+		return {
+			ok: !0,
+			value: JSON.parse(e)
+		};
+	} catch {
+		return { ok: !1 };
+	}
+}, Re = (e) => {
+	if (typeof e == "string") return e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error";
+	if (typeof e != "object" || !e) return !1;
+	if ("fake" in e) return typeof e.fake == "string";
+	if ("custom" in e) return typeof e.custom == "function";
+	if ("json" in e) {
+		let t = e.json;
+		if (typeof t != "object" || !t) return !1;
+		let { fields: n, rest: r } = t;
+		return typeof n != "object" || !n ? !1 : Object.values(n).every(Re) && (r === void 0 || Re(r));
+	}
+	return !1;
+}, ze = (e, t, n) => {
 	let r = {}, i = [], a = [];
 	for (let o of e) for (let e of o.columns) {
-		let s = `${o.name}.${e.name}`, c = Oe(o.name, e.name, t[o.name]?.[e.name], n);
+		let s = `${o.name}.${e.name}`, c = Ee(o.name, e.name, t[o.name]?.[e.name], n);
 		if (c === "error") {
 			i.push(s);
 			continue;
 		}
-		if (!ze(c)) {
+		if (!Re(c)) {
 			a.push({
 				column: s,
 				action: c
@@ -163,7 +223,7 @@ var Te = (e) => {
 		unclassified: i,
 		invalid: a
 	};
-}, Ve = [
+}, Be = [
 	{
 		name: "email",
 		re: /[\w.+-]+@[\w-]+\.[\w.-]+/
@@ -180,7 +240,7 @@ var Te = (e) => {
 		name: "creditCard",
 		re: /\b(?:\d[ -]?){13,16}\b/
 	}
-], He = (e, t, n) => {
+], Ve = (e, t, n) => {
 	let r = [], i = /* @__PURE__ */ new Set();
 	for (let [a, o] of Object.entries(n)) {
 		if (!a.startsWith(`${t}.`) || o !== "keep") continue;
@@ -188,7 +248,7 @@ var Te = (e) => {
 		for (let a of e) {
 			let e = a[n];
 			if (typeof e != "string" || e.length === 0) continue;
-			let o = Ve.find((t) => t.re.test(e));
+			let o = Be.find((t) => t.re.test(e));
 			if (o && !i.has(n)) {
 				i.add(n), r.push({
 					table: t,
@@ -201,9 +261,9 @@ var Te = (e) => {
 		}
 	}
 	return r;
-}, Ue = (e, t, n, r, i) => {
+}, He = (e, t, n, r, i) => {
 	let a = {};
-	for (let [o, s] of Object.entries(e)) a[o] = Re(n[`${t}.${o}`] ?? "keep", {
+	for (let [o, s] of Object.entries(e)) a[o] = U(n[`${t}.${o}`] ?? "keep", {
 		value: s,
 		table: t,
 		column: o,
@@ -211,7 +271,7 @@ var Te = (e) => {
 		...i?.[o] ? { columnType: i[o] } : {}
 	});
 	return a;
-}, We = /* @__PURE__ */ new Map([
+}, Ue = /* @__PURE__ */ new Map([
 	["_voltro_migration_plans", "the schema fingerprint THIS deployment applied — a foreign row makes the next boot refuse"],
 	["_voltro_migrations", "which file-based migrations ran HERE — a foreign row marks unrun migrations as done"],
 	["_voltro_seeds", "which seeds ran HERE — a foreign row suppresses seeding the target still needs"],
@@ -246,7 +306,7 @@ var Te = (e) => {
 	["_voltro_notification_held", "notifications waiting to be SENT from here — a foreign row makes the target deliver something queued elsewhere"],
 	["_voltro_webhook_event_stats", "per-deployment delivery counters a backoff decision reads — foreign counts steer the target's retries"],
 	["_voltro_webhook_rate_windows", "the live rate-limit windows this deployment is inside — a foreign window throttles or releases wrongly"]
-]), Ge = /* @__PURE__ */ new Map([
+]), We = /* @__PURE__ */ new Map([
 	["_voltro_agent_threads", "conversations the app's users had — app data"],
 	["_voltro_agent_messages", "the messages in those conversations — app data"],
 	["_voltro_prompts", "prompt definitions the app authored — app data"],
@@ -281,21 +341,21 @@ var Te = (e) => {
 	["_voltro_comment_threads", "the threads those comments hang on — app data"],
 	["_voltro_comment_reactions", "the reactions the app's users left — app data"],
 	["_voltro_comment_reads", "which comments each user has read — app data, and losing it re-marks everything unread"]
-]), V = (e) => We.has(e), Ke = (e) => We.get(e), qe = (e, t) => {
+]), W = (e) => Ue.has(e), Ge = (e) => Ue.get(e), Ke = (e, t) => {
 	if (e.length === 0) return;
-	let n = e.map((e) => `    ${e} — ${Ke(e) ?? "describes this deployment"}`);
+	let n = e.map((e) => `    ${e} — ${Ge(e) ?? "describes this deployment"}`);
 	return `${t} ${e.length} table(s) that describe a deployment rather than its data:\n${n.join("\n")}\n  A row from another environment is not stale there, it is a false statement about this one.`;
-}, H = class extends c.TaggedError()("BundleError", {
+}, G = class extends c.TaggedError()("BundleError", {
 	reason: c.String,
 	path: c.optional(c.String)
-}) {}, Je = class extends c.TaggedError()("CodecError", {
+}) {}, qe = class extends c.TaggedError()("CodecError", {
 	table: c.String,
 	reason: c.String
-}) {}, Ye = class extends c.TaggedError()("IntegrityError", {
+}) {}, Je = class extends c.TaggedError()("IntegrityError", {
 	what: c.String,
 	expected: c.String,
 	actual: c.String
-}) {}, Xe = class extends t.TaggedError("CompressionError") {}, U = class extends c.TaggedError()("ScopeError", { reason: c.String }) {}, Ze = class extends c.TaggedError()("RowsRefusedError", {
+}) {}, Ye = class extends t.TaggedError("CompressionError") {}, Xe = class extends c.TaggedError()("ScopeError", { reason: c.String }) {}, Ze = class extends c.TaggedError()("RowsRefusedError", {
 	rows: c.Array(c.Struct({
 		table: c.String,
 		id: c.String,
@@ -313,7 +373,7 @@ var Te = (e) => {
 	bundleFingerprint: c.String,
 	targetFingerprint: c.String,
 	diff: c.Array(c.String)
-}) {}, W = class extends t.TaggedError("NativeToolError") {
+}) {}, K = class extends t.TaggedError("NativeToolError") {
 	get message() {
 		let e = this.stderr?.trim(), t = this.hint?.trim();
 		return `${this.tool}: ${this.reason}${e ? `\n${e}` : ""}${t ? `\n\nhint: ${t}` : ""}`;
@@ -328,10 +388,10 @@ var Te = (e) => {
 	sourceDialect: c.String,
 	targetDialect: c.String,
 	blocking: c.Array(c.String)
-}) {}, G = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", nt = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
+}) {}, nt = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", rt = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
 	col: e.name,
 	refTable: e.references.table
-})), rt = (e, t, r) => n.gen(function* () {
+})), it = (e, t, r) => n.gen(function* () {
 	let i = r.maxDepth ?? 12, a = new Set(r.pinned ?? []), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = /* @__PURE__ */ new Map(), u = (e) => {
 		let t = s.get(e) ?? /* @__PURE__ */ new Set();
 		return s.set(e, t), t;
@@ -349,10 +409,10 @@ var Te = (e) => {
 			for (let t of n) d(t.refTable, e[t.col]);
 		};
 	}, p = (r, i) => {
-		let a = f(r, G(t, r), nt(t, r));
-		return l.runForEach(C(e, {
+		let a = f(r, nt(t, r), rt(t, r));
+		return l.runForEach(w(e, {
 			table: r,
-			pk: G(t, r),
+			pk: nt(t, r),
 			...i === void 0 ? {} : { where: i }
 		}), (e) => n.sync(() => a(e)));
 	}, m = n.gen(function* () {
@@ -361,7 +421,7 @@ var Te = (e) => {
 			c.clear();
 			for (let [n, r] of e) {
 				let e = [...r].filter((e) => !s.get(n)?.has(e));
-				e.length !== 0 && (yield* p(n, b(G(t, n), e)));
+				e.length !== 0 && (yield* p(n, b(nt(t, n), e)));
 			}
 		}
 	});
@@ -384,24 +444,24 @@ var Te = (e) => {
 		}
 	}
 	return o;
-}), it = (e, t) => ({
+}), at = (e, t) => ({
 	tables: [...e.keys()],
 	predicateFor: (n) => {
 		let r = e.get(n);
-		return r ? b(G(t, n), [...r]) : void 0;
+		return r ? b(nt(t, n), [...r]) : void 0;
 	}
-}), at = "tenantId", ot = (e, t, r) => n.gen(function* () {
+}), ot = "tenantId", st = (e, t, r) => n.gen(function* () {
 	let i = t.tables.map((e) => e.name), a = new Map(t.tables.map((e) => [e.name, e]));
 	if (e.kind === "all") {
 		let t = new Set(e.exclude ?? []);
 		return {
-			tables: i.filter((e) => !V(e) && !t.has(e)),
+			tables: i.filter((e) => !W(e) && !t.has(e)),
 			predicateFor: () => void 0
 		};
 	}
 	if (e.kind === "tables") {
 		let t = e.tables ?? [], r = new Set(i), a = t.filter((e) => !r.has(e));
-		if (a.length > 0) return yield* n.fail(new U({ reason: `scope { kind: 'tables' } names ${a.length} table(s) that are not in the schema: ${a.join(", ")}. Refusing to write a bundle that silently omits them. Known tables: ${i.length}.` }));
+		if (a.length > 0) return yield* n.fail(new Xe({ reason: `scope { kind: 'tables' } names ${a.length} table(s) that are not in the schema: ${a.join(", ")}. Refusing to write a bundle that silently omits them. Known tables: ${i.length}.` }));
 		let o = new Set(t);
 		return {
 			tables: i.filter((e) => o.has(e)),
@@ -409,30 +469,30 @@ var Te = (e) => {
 		};
 	}
 	let o = e.tenantId;
-	if (o === void 0 || o === "") return yield* n.fail(new U({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
-	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === at) ?? !1);
-	if (s.length === 0) return yield* n.fail(new U({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${at}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
-	let c = yield* rt(r.store, t, {
-		seeds: Object.fromEntries(s.map((e) => [e, _(at, o)])),
+	if (o === void 0 || o === "") return yield* n.fail(new Xe({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
+	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === ot) ?? !1);
+	if (s.length === 0) return yield* n.fail(new Xe({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${ot}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
+	let c = yield* it(r.store, t, {
+		seeds: Object.fromEntries(s.map((e) => [e, _(ot, o)])),
 		pinned: s,
 		children: { roots: s }
 	}), l = [...c.entries()].filter(([, e]) => e.size > 0).map(([e]) => e), u = new Set(s);
 	return {
 		tables: [...s, ...l],
-		predicateFor: (e) => u.has(e) ? _(at, o) : c.has(e) ? b(G(t, e), [...c.get(e)]) : void 0
+		predicateFor: (e) => u.has(e) ? _(ot, o) : c.has(e) ? b(nt(t, e), [...c.get(e)]) : void 0
 	};
-}), st = (e, t) => ({
+}), ct = (e, t) => ({
 	list: t,
-	open: (t) => A(e, t)
-}), ct = (e) => ({
-	write: (t, n, r) => ge(e, t, n, r),
+	open: (t) => j(e, t)
+}), lt = (e) => ({
+	write: (t, n, r) => he(e, t, n, r),
 	has: (t) => e.head(t).pipe(n.map((e) => e !== null))
-}), lt = (e, t) => n.tryPromise({
+}), ut = (e, t) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), r = await import("node:fs/promises"), { createHash: i, randomUUID: a } = await import("node:crypto"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = await import("node:path"), l = c.join(t, `.tmp-${a()}`), u = i("sha256"), d = 0, f = new s({ transform(e, t, n) {
 			u.update(e), d += e.length, n(null, e);
 		} });
-		await o(await j(e.stream), f, n(l));
+		await o(await M(e.stream), f, n(l));
 		let p = u.digest("hex"), m = c.join(t, p);
 		try {
 			await r.access(m), await r.rm(l, { force: !0 });
@@ -445,30 +505,30 @@ var Te = (e) => {
 			contentType: e.contentType
 		};
 	},
-	catch: (e) => new H({
+	catch: (e) => new G({
 		reason: `asset write failed: ${String(e?.message ?? e)}`,
 		path: t
 	})
-}), ut = (e, t, r) => n.gen(function* () {
-	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), c = o("sha256"), u = he("bundle", () => a(s)).pipe(l.tap((e) => n.sync(() => c.update(e))));
+}), dt = (e, t, r) => n.gen(function* () {
+	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), c = o("sha256"), u = me("bundle", () => a(s)).pipe(l.tap((e) => n.sync(() => c.update(e))));
 	yield* e.write(r.key, u, {
 		contentType: r.contentType,
 		totalSize: r.size
 	});
 	let d = c.digest("hex");
-	if (d !== r.sha256) return yield* n.fail(new Ye({
+	if (d !== r.sha256) return yield* n.fail(new Je({
 		what: `asset ${r.key}`,
 		expected: r.sha256,
 		actual: d
 	}));
-}), dt = {
+}), ft = {
 	done: () => !1,
 	mark: () => n.void
-}, ft = (e) => typeof e == "object" && !!e && e.status === 404, pt = (e) => n.gen(function* () {
-	let t = e.progress ?? dt, r = 0, i = 0, a = 0, o = 0, s = /* @__PURE__ */ new Set(), c = /* @__PURE__ */ new Set(), u = [];
-	return yield* l.runForEach(e.source.list(), (l) => (a++, t.done(l.key) || c.has(l.key) ? n.void : (c.add(l.key), e.source.open(l.key).pipe(n.map((e) => e), n.catchIf(ft, () => n.sync(() => {
+}, pt = (e) => typeof e == "object" && !!e && e.status === 404, mt = (e) => n.gen(function* () {
+	let t = e.progress ?? ft, r = 0, i = 0, a = 0, o = 0, s = /* @__PURE__ */ new Set(), c = /* @__PURE__ */ new Set(), u = [];
+	return yield* l.runForEach(e.source.list(), (l) => (a++, t.done(l.key) || c.has(l.key) ? n.void : (c.add(l.key), e.source.open(l.key).pipe(n.map((e) => e), n.catchIf(pt, () => n.sync(() => {
 		u.push(l.key);
-	})), n.flatMap((a) => a === void 0 ? n.void : lt(a, e.assetsDir).pipe(n.flatMap((e) => {
+	})), n.flatMap((a) => a === void 0 ? n.void : ut(a, e.assetsDir).pipe(n.flatMap((e) => {
 		let n = {
 			key: l.key,
 			sha256: e.sha256,
@@ -476,7 +536,7 @@ var Te = (e) => {
 			contentType: e.contentType
 		};
 		return r++, i += e.size, s.has(e.sha256) || (s.add(e.sha256), o += e.size), t.mark(l.key, n);
-	}))))))).pipe(n.mapError((e) => e instanceof H ? e : new H({ reason: `asset export failed: ${String(e)}` }))), {
+	}))))))).pipe(n.mapError((e) => e instanceof G ? e : new G({ reason: `asset export failed: ${String(e)}` }))), {
 		count: r,
 		totalBytes: i,
 		references: a,
@@ -484,18 +544,18 @@ var Te = (e) => {
 		objectBytes: o,
 		missing: u
 	};
-}), mt = (e) => he("bundle", () => de(e)).pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.map((e) => JSON.parse(e)), l.mapError((t) => t instanceof H ? t : new H({
+}), ht = (e) => me("bundle", () => ue(e)).pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.map((e) => JSON.parse(e)), l.mapError((t) => t instanceof G ? t : new G({
 	reason: `asset index unreadable: ${String(t)}`,
 	path: e
-}))), ht = (e) => n.gen(function* () {
-	let t = e.progress ?? dt, r = 0, i = /* @__PURE__ */ new Set(), a = /* @__PURE__ */ new Set();
-	return yield* l.runForEach(mt(e.indexPath), (o) => t.done(o.key) || a.has(o.key) ? n.void : (a.add(o.key), ut(e.sink, e.assetsDir, o)).pipe(n.andThen(n.sync(() => {
+}))), gt = (e) => n.gen(function* () {
+	let t = e.progress ?? ft, r = 0, i = /* @__PURE__ */ new Set(), a = /* @__PURE__ */ new Set();
+	return yield* l.runForEach(ht(e.indexPath), (o) => t.done(o.key) || a.has(o.key) ? n.void : (a.add(o.key), dt(e.sink, e.assetsDir, o)).pipe(n.andThen(n.sync(() => {
 		r++, i.add(o.sha256);
 	})), n.andThen(t.mark(o.key, o)))), {
 		count: r,
 		objects: i.size
 	};
-}), gt = () => typeof M.createZstdCompress == "function", _t = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : gt() ? "zstd" : "gzip", vt = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", yt = (e) => e === "zstd" ? M.createZstdCompress() : e === "gzip" ? M.createGzip() : new N(), bt = (e) => e === "zstd" ? M.createZstdDecompress() : e === "gzip" ? M.createGunzip() : new N(), xt = 1, St = c.Struct({
+}), _t = () => typeof N.createZstdCompress == "function", vt = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : _t() ? "zstd" : "gzip", yt = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", bt = (e) => e === "zstd" ? N.createZstdCompress() : e === "gzip" ? N.createGzip() : new P(), xt = (e) => e === "zstd" ? N.createZstdDecompress() : e === "gzip" ? N.createGunzip() : new P(), St = 1, Ct = c.Struct({
 	name: c.String,
 	file: c.String,
 	rowCount: c.Number,
@@ -505,12 +565,12 @@ var Te = (e) => {
 		value: c.String
 	}),
 	primaryKey: c.String
-}), Ct = c.Struct({
+}), wt = c.Struct({
 	kind: c.Literal("all", "tenant", "tables"),
 	tenantId: c.optional(c.String),
 	tables: c.optional(c.Array(c.String)),
 	exclude: c.optional(c.Array(c.String))
-}), wt = c.Struct({
+}), Tt = c.Struct({
 	count: c.Number,
 	totalBytes: c.Number,
 	index: c.optional(c.String)
@@ -521,23 +581,23 @@ c.Struct({
 	size: c.Number,
 	contentType: c.String
 });
-var Tt = c.Struct({
+var Et = c.Struct({
 	formatVersion: c.Number,
 	createdAt: c.String,
 	source: c.Struct({
 		dialect: c.String,
 		schemaFingerprint: c.String
 	}),
-	scope: Ct,
+	scope: wt,
 	consistency: c.Literal("live", "snapshot"),
 	compression: c.Literal("zstd", "gzip", "none"),
-	tables: c.Array(St),
-	assets: wt,
+	tables: c.Array(Ct),
+	assets: Tt,
 	masking: c.optional(c.Struct({
 		policyId: c.optional(c.String),
 		transformed: c.Array(c.String)
 	}))
-}), Et = c.encodeSync(c.parseJson(Tt)), Dt = c.decodeUnknownSync(c.parseJson(Tt)), K = "manifest.json", Ot = "README.md", kt = "data", At = "assets", jt = "assets/index.ndjson", Mt = ".ledger.json", Nt = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", Pt = (e, t) => {
+}), Dt = c.encodeSync(c.parseJson(Et)), Ot = c.decodeUnknownSync(c.parseJson(Et)), kt = "manifest.json", At = "README.md", jt = "data", Mt = "assets", Nt = "assets/index.ndjson", Pt = ".ledger.json", Ft = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", It = (e, t) => {
 	let n = e.tables.reduce((e, t) => e + t.rowCount, 0), r = e.masking ? `✅ **Masked at the source** — ${e.masking.transformed.length} column(s) transformed${e.masking.policyId ? ` (policy \`${e.masking.policyId}\`)` : ""}. Personal data was replaced with realistic, referentially-consistent fakes before any byte was written.` : "⚠️ **NOT masked — this bundle contains REAL data (PII included).** Treat it as production data: do not copy it into a lower environment or share it without review. To produce a safe copy, re-export under a masking profile (`--profile`).", i = e.masking && e.masking.transformed.length > 0 ? `\n\nMasked columns: ${e.masking.transformed.map((e) => `\`${e}\``).join(", ")}.` : "", a = e.assets.count > 0 ? `${e.assets.count} object(s), ${e.assets.totalBytes} bytes` : "none", o = e.tables.map((e) => `| \`${e.name}\` | ${e.rowCount} |`).join("\n");
 	return `# Voltro data export
 
@@ -551,7 +611,7 @@ The machine-readable manifest is \`manifest.json\`; this file is a human summary
 | **Format version** | ${e.formatVersion} |
 | **Consistency** | ${e.consistency} |
 | **Compression** | ${e.compression} |
-| **Scope** | ${Nt(e.scope)} |
+| **Scope** | ${Ft(e.scope)} |
 | **Tables** | ${e.tables.length} |
 | **Rows (total)** | ${n} |
 | **Assets** | ${a} |
@@ -576,39 +636,39 @@ voltro data import <this-directory>
 voltro data import <this-directory> --target api --api-url <url> --token <secret>
 \`\`\`
 `;
-}, Ft = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), It = a.exponential({
+}, Lt = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), Rt = a.exponential({
 	start: .01,
 	factor: 2,
 	count: 16
-}), Lt = i.histogram("voltro_data_transfer_table_seconds", It, "Per-table export/import duration in seconds, tagged by phase."), q = (e, t) => {
+}), zt = i.histogram("voltro_data_transfer_table_seconds", Rt, "Per-table export/import duration in seconds, tagged by phase."), q = (e, t) => {
 	if (e) try {
 		e(t);
 	} catch {}
-}, Rt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(Lt.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), Ft.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
+}, Bt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(zt.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), Lt.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
 	table: t,
 	index: r,
 	tableCount: a,
 	phase: e
-} })), zt = () => ({
+} })), Vt = () => ({
 	tables: {},
 	assets: {}
-}), Bt = (e) => n.tryPromise(async () => {
+}), Ht = (e) => n.tryPromise(async () => {
 	let t = await (await import("node:fs/promises")).readFile(e, "utf8");
 	return JSON.parse(t);
-}).pipe(n.orElseSucceed(zt)), J = (e, t) => n.tryPromise({
+}).pipe(n.orElseSucceed(Vt)), J = (e, t) => n.tryPromise({
 	try: async () => {
 		let n = await import("node:fs/promises"), { randomUUID: r } = await import("node:crypto"), i = `${e}.tmp-${r()}`;
 		await n.writeFile(i, JSON.stringify(t)), await n.rename(i, e);
 	},
-	catch: (t) => new H({
+	catch: (t) => new G({
 		reason: `ledger write failed: ${String(t?.message ?? t)}`,
 		path: e
 	})
-}), Vt = (e, t) => t in e.tables, Ht = (e, t) => t in e.assets, Ut = /* @__PURE__ */ new Set([
+}), Ut = (e, t) => t in e.tables, Wt = (e, t) => t in e.assets, Gt = /* @__PURE__ */ new Set([
 	"json",
 	"array",
 	"vector"
-]), Wt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", Gt = (e) => Buffer.from(e).toString("base64"), Kt = (e) => new Uint8Array(Buffer.from(e, "base64")), qt = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), Jt = (e, t) => e == null ? null : t !== void 0 && Ut.has(t) ? e : t === "bytes" ? Gt(e) : t === "timestamp" || t === "date" ? qt(e) : typeof e == "bigint" ? {
+]), Kt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", qt = (e) => Buffer.from(e).toString("base64"), Jt = (e) => new Uint8Array(Buffer.from(e, "base64")), Yt = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), Xt = (e, t) => e == null ? null : t !== void 0 && Gt.has(t) ? e : t === "bytes" ? qt(e) : t === "timestamp" || t === "date" ? Yt(e) : typeof e == "bigint" ? {
 	$v: "bigint",
 	d: e.toString()
 } : typeof e == "number" && !Number.isFinite(e) ? {
@@ -619,30 +679,30 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	d: e.toISOString()
 } : e instanceof Uint8Array ? {
 	$v: "bytes",
-	d: Gt(e)
-} : e, Yt = (e) => {
+	d: qt(e)
+} : e, Zt = (e) => {
 	switch (e.$v) {
 		case "bigint": return BigInt(e.d);
 		case "number": return Number(e.d);
 		case "date": return new Date(e.d);
-		case "bytes": return Kt(e.d);
+		case "bytes": return Jt(e.d);
 		default: return e;
 	}
-}, Xt = (e, t) => e == null ? null : t !== void 0 && Ut.has(t) ? e : Wt(e) ? Yt(e) : t === "bytes" ? Kt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, Zt = (e, t) => {
+}, Qt = (e, t) => e == null ? null : t !== void 0 && Gt.has(t) ? e : Kt(e) ? Zt(e) : t === "bytes" ? Jt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, $t = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = Jt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = Xt(i, t[r]);
 	return n;
-}, Qt = (e, t) => {
+}, en = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = Xt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = Qt(i, t[r]);
 	return n;
-}, $t = new TextEncoder(), en = (e, t) => e.pipe(l.map((e) => $t.encode(`${JSON.stringify(Zt(e, t))}\n`))), tn = (e, t, r) => e.pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.mapEffect((e) => n.try({
-	try: () => Qt(JSON.parse(e), r),
-	catch: (e) => new Je({
+}, tn = new TextEncoder(), nn = (e, t) => e.pipe(l.map((e) => tn.encode(`${JSON.stringify($t(e, t))}\n`))), rn = (e, t, r) => e.pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.mapEffect((e) => n.try({
+	try: () => en(JSON.parse(e), r),
+	catch: (e) => new qe({
 		table: t,
 		reason: String(e?.message ?? e)
 	})
-}))), nn = (e, t) => {
+}))), an = (e, t) => {
 	let n = new Set(e), r = /* @__PURE__ */ new Map();
 	for (let e of t.tables) {
 		if (!n.has(e.name)) continue;
@@ -668,33 +728,33 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	let r = typeof t?.message == "string" ? t.message.trim() : "";
 	if (r === "" ? t?.cause !== void 0 && t.cause !== null && n.push(Y(t.cause)) : n.push(r), n.length === 0) {
 		let t = String(e ?? "").trim();
-		return t === "" || t === "[object Object]" ? rn(e) : t;
+		return t === "" || t === "[object Object]" ? on(e) : t;
 	}
 	return n.join(": ");
-}, rn = (e) => {
+}, on = (e) => {
 	try {
 		let t = JSON.stringify(e);
 		return t === void 0 || t === "{}" ? "unknown error (no message, cause or tag)" : t;
 	} catch {
 		return "unknown error (not serialisable)";
 	}
-}, an = (e, t) => {
+}, sn = (e, t) => {
 	let n = e.tables.find((e) => e.name === t), r = {};
 	for (let e of n?.columns ?? []) e.generatedAs === void 0 && (r[e.name] = e.type);
 	return r;
-}, on = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), sn = (e, t) => {
+}, cn = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), ln = (e, t) => {
 	if (t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, cn = (e, t) => {
+}, un = (e, t) => {
 	let n = e.tables.find((e) => e.name === t);
 	if (n === void 0) return { refusal: `${t}: not in the schema snapshot, so its primary key is unknown.` };
 	let r = n.columns.find((e) => e.type === "id");
 	if (r !== void 0) return { column: r.name };
 	let i = n.indexes.find((e) => e.name === `${t}_pkey`)?.columns ?? n.primaryKey ?? [];
 	return i.length === 1 ? { column: i[0] } : i.length > 1 ? { refusal: `${t}: composite primary key (${i.join(", ")}). Keyset export orders by ONE column; ordering by the first alone would split equal values across pages and drop or duplicate rows. Exclude this table from the scope, or give it a single-column key.` } : { refusal: `${t}: no primary key, so there is no stable order to paginate by. A keyset export would return rows in an order the database may change between pages. Exclude this table from the scope.` };
-}, ln = (e, t, r) => n.tryPromise({
+}, dn = (e, t, r) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), i = await import("node:fs/promises"), { createHash: a, randomUUID: o } = await import("node:crypto"), { pipeline: s } = await import("node:stream/promises"), { Readable: c, Transform: u } = await import("node:stream"), d = a("sha256"), f = 0, p = new u({ transform(e, t, n) {
 			d.update(e);
@@ -703,7 +763,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			n(null, e);
 		} }), m = c.fromWeb(l.toReadableStream(e)), h = `${t}.tmp-${o()}`;
 		try {
-			await s(m, p, yt(r), n(h)), await i.rename(h, t);
+			await s(m, p, bt(r), n(h)), await i.rename(h, t);
 		} catch (e) {
 			throw await i.rm(h, { force: !0 }).catch(() => {}), e;
 		}
@@ -712,25 +772,25 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			checksum: d.digest("hex")
 		};
 	},
-	catch: (e) => new H({
+	catch: (e) => new G({
 		reason: `write table failed: ${Y(e)}`,
 		path: t
 	})
-}), un = (e, t) => n.tryPromise({
+}), fn = (e, t) => n.tryPromise({
 	try: async () => {
 		await (await import("node:fs/promises")).appendFile(e, `${t}\n`);
 	},
-	catch: (t) => new H({
+	catch: (t) => new G({
 		reason: `append failed: ${Y(t)}`,
 		path: e
 	})
-}), dn = (e, t) => n.gen(function* () {
+}), pn = (e, t) => n.gen(function* () {
 	let r = [], i = t.ordered.length;
 	for (let a = 0; a < t.ordered.length; a++) {
-		let o = t.ordered[a], s = an(t.snapshot, o), c = cn(t.snapshot, o);
-		if ("refusal" in c) return yield* n.fail(new U({ reason: `export: ${c.refusal}` }));
-		let u = c.column, d = `${kt}/${o}.ndjson${vt(t.compression)}`;
-		if (Vt(t.ledger, o)) {
+		let o = t.ordered[a], s = sn(t.snapshot, o), c = un(t.snapshot, o);
+		if ("refusal" in c) return yield* n.fail(new Xe({ reason: `export: ${c.refusal}` }));
+		let u = c.column, d = `${jt}/${o}.ndjson${yt(t.compression)}`;
+		if (Ut(t.ledger, o)) {
 			let e = t.ledger.tables[o];
 			q(t.onProgress, {
 				phase: "export",
@@ -758,13 +818,13 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			event: "start",
 			rowsDone: 0
 		});
-		let f = t.resolved.predicateFor(o), p = C(e, {
+		let f = t.resolved.predicateFor(o), p = w(e, {
 			table: o,
 			pk: u,
 			chunkSize: t.chunkSize,
 			retry: t.retry,
 			...f === void 0 ? {} : { where: f }
-		}), m = on(t.snapshot, o), h = m.length === 0 ? p : p.pipe(l.map((e) => sn(e, m))), g = t.mask ? h.pipe(l.map((e) => Ue(e, o, t.mask.actions, t.mask.seed, s))) : h, { rowCount: _, checksum: v } = yield* Rt("export", o, a, i, (e) => e.rowCount, ln(en(g, s), t.bundleFile(d), t.compression));
+		}), m = cn(t.snapshot, o), h = m.length === 0 ? p : p.pipe(l.map((e) => ln(e, m))), g = t.mask ? h.pipe(l.map((e) => He(e, o, t.mask.actions, t.mask.seed, s))) : h, { rowCount: _, checksum: v } = yield* Bt("export", o, a, i, (e) => e.rowCount, dn(nn(g, s), t.bundleFile(d), t.compression));
 		t.ledger.tables[o] = {
 			rowCount: _,
 			checksum: v
@@ -786,36 +846,36 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return r;
-}), fn = (e) => ({
+}), mn = (e) => ({
 	_tag: "RawSqlFragment",
 	strings: [e],
 	values: []
-}), pn = (t, i, a) => n.tryPromise({
+}), hn = (t, i, a) => n.tryPromise({
 	try: () => t.transactional(async (t) => {
-		if (t.raw) for (let e of Te(i)) await t.raw(fn(e));
+		if (t.raw) for (let e of Ce(i)) await t.raw(mn(e));
 		let o = await n.runPromiseExit(a(t));
 		if (r.isFailure(o)) throw Error(e.pretty(o.cause));
 		return o.value;
 	}),
-	catch: (e) => e instanceof H ? e : new H({ reason: `snapshot export failed: ${Y(e)}` })
-}), mn = (e) => n.gen(function* () {
-	let t = e.scope ?? { kind: "all" }, r = _t(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, o = s.exponential("50 millis").pipe(s.jittered, s.intersect(s.recurs(a))), c = yield* n.promise(() => import("node:path")), l = (t) => c.join(e.outDir, t);
+	catch: (e) => e instanceof G ? e : new G({ reason: `snapshot export failed: ${Y(e)}` })
+}), gn = (e) => n.gen(function* () {
+	let t = e.scope ?? { kind: "all" }, r = vt(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, o = s.exponential("50 millis").pipe(s.jittered, s.intersect(s.recurs(a))), c = yield* n.promise(() => import("node:path")), l = (t) => c.join(e.outDir, t);
 	yield* n.tryPromise({
 		try: async () => {
 			let t = await import("node:fs/promises");
-			await t.mkdir(l(kt), { recursive: !0 }), e.assets && await t.mkdir(l(At), { recursive: !0 });
+			await t.mkdir(l(jt), { recursive: !0 }), e.assets && await t.mkdir(l(Mt), { recursive: !0 });
 		},
-		catch: (t) => new H({
+		catch: (t) => new G({
 			reason: `mkdir failed: ${Y(t)}`,
 			path: e.outDir
 		})
 	});
-	let u = l(Mt), d = yield* Bt(u), f = e.subset ? it(yield* rt(e.store, e.snapshot, e.subset), e.snapshot) : yield* ot(t, e.snapshot, {
+	let u = l(Pt), d = yield* Ht(u), f = e.subset ? at(yield* it(e.store, e.snapshot, e.subset), e.snapshot) : yield* st(t, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), p = nn(f.tables, e.snapshot), m = e.consistency ?? "live", h, g;
+	}), p = an(f.tables, e.snapshot), m = e.consistency ?? "live", h, g;
 	if (e.masking) {
-		let t = e.classification ?? De(e.snapshot), r = Be(p.map((t) => ({
+		let t = e.classification ?? Te(e.snapshot), r = ze(p.map((t) => ({
 			name: t,
 			columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 				name: e.name,
@@ -848,14 +908,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		bundleFile: l,
 		...g ? { mask: g } : {},
 		...e.onProgress ? { onProgress: e.onProgress } : {}
-	}, v = m === "snapshot" ? yield* pn(e.store, e.dialect, (e) => dn(e, _)) : yield* dn(e.store, _), y = 0, b = 0;
+	}, v = m === "snapshot" ? yield* hn(e.store, e.dialect, (e) => pn(e, _)) : yield* pn(e.store, _), y = 0, b = 0;
 	if (e.assets) {
-		let t = l(jt), r = yield* pt({
+		let t = l(Nt), r = yield* mt({
 			source: e.assets,
-			assetsDir: l(At),
+			assetsDir: l(Mt),
 			progress: {
 				done: (e) => e in d.assets,
-				mark: (e, r) => (d.assets[e] = !0, un(t, JSON.stringify(r)).pipe(n.andThen(J(u, d))))
+				mark: (e, r) => (d.assets[e] = !0, fn(t, JSON.stringify(r)).pipe(n.andThen(J(u, d))))
 			}
 		});
 		y = r.count, b = r.totalBytes, r.missing.length > 0 && (yield* n.logWarning(`${r.missing.length} of ${r.missing.length + r.count} blob reference(s) point at objects the storage provider does not have; they are NOT in this bundle and no import can bring them back. e.g. ${r.missing.slice(0, 3).map((e) => `'${e}'`).join(", ")}` + (r.missing.length > 3 ? `, and ${r.missing.length - 3} more` : "")));
@@ -865,7 +925,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		createdAt: e.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
 		source: {
 			dialect: e.dialect,
-			schemaFingerprint: w(e.snapshot)
+			schemaFingerprint: T(e.snapshot)
 		},
 		scope: t,
 		consistency: m,
@@ -874,7 +934,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		assets: y > 0 ? {
 			count: y,
 			totalBytes: b,
-			index: jt
+			index: Nt
 		} : {
 			count: 0,
 			totalBytes: 0
@@ -883,23 +943,23 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	};
 	return yield* n.tryPromise({
 		try: async () => {
-			await (await import("node:fs/promises")).writeFile(l(K), Et(x));
+			await (await import("node:fs/promises")).writeFile(l(kt), Dt(x));
 		},
-		catch: (e) => new H({
+		catch: (e) => new G({
 			reason: `manifest write failed: ${Y(e)}`,
-			path: K
+			path: kt
 		})
 	}), yield* n.tryPromise({
 		try: async () => {
 			let e = await import("node:fs/promises"), t = await import("node:os");
-			await e.writeFile(l(Ot), Pt(x, { hostname: t.hostname() }));
+			await e.writeFile(l(At), It(x, { hostname: t.hostname() }));
 		},
-		catch: (e) => new H({
+		catch: (e) => new G({
 			reason: `readme write failed: ${Y(e)}`,
-			path: Ot
+			path: At
 		})
 	}), x;
-}), hn = (e, t) => {
+}), _n = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) if (!n.has(t.name)) for (let e of t.columns) {
 		let i = e.references?.table;
@@ -910,7 +970,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return r;
-}, gn = (e) => {
+}, vn = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) t.set(n.from, [...t.get(n.from) ?? [], n]);
 	let n = [...t.entries()].map(([e, t]) => {
@@ -918,7 +978,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		return `  ${e} (${n} row${n === 1 ? "" : "s"}): ${r}`;
 	});
 	return `replace cannot empty this target: ${t.size} table(s) OUTSIDE the bundle hold rows that reference tables INSIDE it. Emptying the bundle's tables would leave those rows pointing at nothing, and the bundle cannot restore them.\n${n.join("\n")}\nNothing has been deleted. Either re-export with a scope that includes those tables, or use --mode upsert if those rows are meant to survive.`;
-}, _n = (e) => {
+}, yn = (e) => {
 	switch (e) {
 		case "id":
 		case "text":
@@ -937,12 +997,12 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "raw": return "raw";
 		default: return "string";
 	}
-}, vn = {
+}, bn = {
 	vector: /* @__PURE__ */ new Set(["postgres"]),
 	array: /* @__PURE__ */ new Set(["postgres"]),
 	interval: /* @__PURE__ */ new Set(["postgres"])
-}, yn = (e, t, n, r) => {
-	let i = _n(n);
+}, xn = (e, t, n, r) => {
+	let i = yn(n);
 	if (i === "raw") return {
 		table: e,
 		column: t,
@@ -950,7 +1010,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `raw() is verbatim source-dialect SQL — it cannot be assumed valid on ${r}`
 	};
-	let a = vn[i];
+	let a = bn[i];
 	return !a || a.has(r) ? null : i === "array" || i === "interval" ? {
 		table: e,
 		column: t,
@@ -964,15 +1024,15 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `${i} columns require a ${[...a].join("/")} target; ${r} has no compatible column type`
 	};
-}, bn = (e, t, n) => {
+}, Sn = (e, t, n) => {
 	if (t === n) return [];
 	let r = [];
 	for (let t of e) for (let [e, i] of Object.entries(t.columnTypes)) {
-		let a = yn(t.name, e, i, n);
+		let a = xn(t.name, e, i, n);
 		a && r.push(a);
 	}
 	return r;
-}, xn = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, Sn = (e) => {
+}, Cn = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, wn = (e) => {
 	let t = e.constraint ?? e.column, n = t === void 0 ? "" : ` ${t}`;
 	switch (e.kind) {
 		case "foreignKey": return `foreign key${n}: the referenced row does not exist (import it first, or check the bundle's table order)`;
@@ -981,35 +1041,35 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "notNull": return `not-null constraint${n}: the column requires a value`;
 		case "check": return `check constraint${n}: the row does not satisfy it`;
 	}
-}, Cn = (e) => {
+}, Tn = (e) => {
 	let t = [e.dbCode, e.dbErrno ?? e.dbNumber].filter((e) => e !== void 0).map(String);
 	return t.length > 0 ? t.join("/") : void 0;
-}, wn = "Failed to execute statement", Tn = (e) => {
+}, En = "Failed to execute statement", Dn = (e) => {
 	let t = (e.split("\n", 1)[0] ?? "").trim();
 	for (; t.startsWith("(FiberFailure)");) t = t.slice(14).trim();
-	return t === `SqlError: ${wn}` ? wn : t;
-}, En = (e) => {
+	return t === `SqlError: ${En}` ? En : t;
+}, On = (e) => {
 	let t = String(e?.stack ?? e), n = t.length <= 1200 ? t : `${t.slice(0, 1200)}…`, r = (e, t) => ({
 		reason: e.length <= 300 ? e : `${e.slice(0, 300)}…`,
 		unclassified: t,
 		raw: n
-	}), i = v(e), a = m(i), o = Cn(i), s = o === void 0 ? "" : ` [${o}]`;
-	if (a !== void 0) return r(`${Sn(a)}${s}`, !1);
-	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, l = e?.message, u = Tn(typeof l == "string" && l.length > 0 ? l : String(e)), d = c !== void 0 && c !== u && !c.startsWith("SqlError:") ? c : u, f = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, p = f !== void 0 && /[←‖]/.test(f) ? ` (via ${f})` : "";
-	return r(d === wn || d.length === 0 ? `the database refused the write and the driver gave no detail${s}${p}` : `${d}${s}`, d === wn || d.length === 0);
-}, Dn = (e) => En(e).reason, On = (e) => {
+	}), i = v(e), a = m(i), o = Tn(i), s = o === void 0 ? "" : ` [${o}]`;
+	if (a !== void 0) return r(`${wn(a)}${s}`, !1);
+	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, l = e?.message, u = Dn(typeof l == "string" && l.length > 0 ? l : String(e)), d = c !== void 0 && c !== u && !c.startsWith("SqlError:") ? c : u, f = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, p = f !== void 0 && /[←‖]/.test(f) ? ` (via ${f})` : "";
+	return r(d === En || d.length === 0 ? `the database refused the write and the driver gave no detail${s}${p}` : `${d}${s}`, d === En || d.length === 0);
+}, kn = (e) => On(e).reason, An = (e) => {
 	let t = v(e), n = m(t);
 	if (n?.kind === "foreignKeyInUse") {
-		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = Cn(t);
+		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = Tn(t);
 		return `foreign key${r}: rows elsewhere still reference this table${i === void 0 ? "" : ` [${i}]`}`;
 	}
-	return Dn(e);
-}, kn = f, X = (e) => `${kn}${e}`, An = (e) => typeof e.run == "function", jn = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
+	return kn(e);
+}, jn = f, X = (e) => `${jn}${e}`, Mn = (e) => typeof e.run == "function", Nn = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
   process that dies mid-load depends on the database rolling it back. The rollback capture
-  written before the first delete is what covers that case.`, Mn = /^[a-zA-Z_][a-zA-Z0-9_]*$/, Z = (e, t) => {
-	if (!Mn.test(e)) throw Error(`refusing to build SQL for the table name ${JSON.stringify(e)}: it is outside the identifier class the framework allows. A name from a bundle manifest reaches this concatenation, so it is checked here rather than assumed to still be what the declaration validated.`);
+  written before the first delete is what covers that case.`, Pn = /^[a-zA-Z_][a-zA-Z0-9_]*$/, Z = (e, t) => {
+	if (!Pn.test(e)) throw Error(`refusing to build SQL for the table name ${JSON.stringify(e)}: it is outside the identifier class the framework allows. A name from a bundle manifest reaches this concatenation, so it is checked here rather than assumed to still be what the declaration validated.`);
 	return t === "mysql" || t === "mariadb" ? `\`${e}\`` : t === "mssql" ? `[${e}]` : `"${e}"`;
-}, Nn = (e, t) => {
+}, Fn = (e, t) => {
 	let n = Z(e, t), r = Z(X(e), t);
 	switch (t) {
 		case "postgres": return `CREATE TABLE ${r} (LIKE ${n})`;
@@ -1018,10 +1078,10 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "sqlite": return `CREATE TABLE ${r} AS SELECT * FROM ${n} WHERE 0`;
 		case "mssql": return `SELECT * INTO ${r} FROM ${n} WHERE 1 = 0`;
 	}
-}, Pn = (e, t) => {
+}, In = (e, t) => {
 	let n = Z(X(e), t);
 	return t === "mssql" ? `IF OBJECT_ID('${X(e)}', 'U') IS NOT NULL DROP TABLE ${n}` : `DROP TABLE IF EXISTS ${n}`;
-}, Fn = (e, t) => {
+}, Ln = (e, t) => {
 	let n = t === "mysql" || t === "mariadb", r = [];
 	n && r.push("SET FOREIGN_KEY_CHECKS = 0");
 	for (let n of [...e].reverse()) r.push(`DELETE FROM ${Z(n.name, t)}`);
@@ -1031,7 +1091,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		r.push(`INSERT INTO ${Z(n.name, t)} (${e}) SELECT ${e} FROM ${Z(X(n.name), t)}`);
 	}
 	return n && r.push("SET FOREIGN_KEY_CHECKS = 1"), r;
-}, In = (e, t) => {
+}, Rn = (e, t) => {
 	let n = [], r = () => {
 		for (let e of n) t.unregisterTable(e);
 	};
@@ -1053,7 +1113,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		staged: n,
 		undo: r
 	};
-}, Ln = (e, t) => {
+}, zn = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) {
 		if (!n.has(t.name)) continue;
@@ -1070,22 +1130,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	}
 	return r;
-}, Rn = (e, t) => {
+}, Bn = (e, t) => {
 	let n = Z(X(e.from), t), r = Z(X(e.to), t), i = Z(e.column, t), a = Z(e.toColumn, t);
 	return `SELECT ${Z(e.primaryKey, t)} AS pk, ${i} AS value FROM ${n} c WHERE ${i} IS NOT NULL AND NOT EXISTS (SELECT 1 FROM ${r} p WHERE p.${a} = c.${i})`;
-}, zn = (e) => {
+}, Vn = (e) => {
 	if (e.length === 0) return;
 	let t = e.slice(0, 20), n = t.map((e) => `    ${e.table}.${e.primaryKey}: ${e.column} = ${JSON.stringify(e.value)} — no such row in ${e.references}`);
 	return `the swap could not run: ${e.length} row(s) in the bundle reference a row the bundle does not carry.\n${n.join("\n")}\n` + (e.length > t.length ? `    … and ${e.length - t.length} more\n` : "") + "  The target is UNCHANGED — the swap runs in one transaction and none of it committed.\n  Every offending row is listed above rather than only the first, so this can be fixed in one pass.";
-}, Bn = async (e, t) => {
-	t.length !== 0 && await e.run(P.SqlClient.pipe(n.flatMap((e) => n.forEach(t, (t) => e.unsafe(t), { discard: !0 }))));
-}, Vn = async (e, t, r) => {
-	let i = Fn(t, r);
-	i.length !== 0 && await e.run(P.SqlClient.pipe(n.flatMap((e) => e.withTransaction(n.forEach(i, (t) => e.unsafe(t), { discard: !0 })))));
-}, Hn = async (e, t, r) => {
+}, Hn = async (e, t) => {
+	t.length !== 0 && await e.run(F.SqlClient.pipe(n.flatMap((e) => n.forEach(t, (t) => e.unsafe(t), { discard: !0 }))));
+}, Un = async (e, t, r) => {
+	let i = Ln(t, r);
+	i.length !== 0 && await e.run(F.SqlClient.pipe(n.flatMap((e) => e.withTransaction(n.forEach(i, (t) => e.unsafe(t), { discard: !0 })))));
+}, Wn = async (e, t, r) => {
 	let i = [];
 	for (let a of t) {
-		let t = await e.run(P.SqlClient.pipe(n.flatMap((e) => e.unsafe(Rn(a, r)))));
+		let t = await e.run(F.SqlClient.pipe(n.flatMap((e) => e.unsafe(Bn(a, r)))));
 		for (let e of t) i.push({
 			table: a.from,
 			primaryKey: String(e.pk ?? ""),
@@ -1095,14 +1155,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return i;
-}, Un = (e, t) => {
+}, Gn = (e, t) => {
 	let n = new Map(t.map((e, t) => [e, t]));
 	return e.filter((e) => {
 		if (e.from === e.to) return !1;
 		let t = n.get(e.from), r = n.get(e.to);
 		return t === void 0 || r === void 0 ? !1 : r > t;
 	});
-}, Wn = (e) => e === "mysql" || e === "mariadb", Gn = (e) => {
+}, Kn = (e) => e === "mysql" || e === "mariadb", qn = (e) => {
 	if (e.mode !== "replace") return {
 		active: !1,
 		tables: [],
@@ -1152,7 +1212,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		tables: [],
 		blocker: "every table in the bundle is one that describes a deployment, so there is nothing for a staged swap to move."
 	};
-	let s = o.map((e) => e.name), c = Wn(t) ? [] : Un(Ln(n, s), s);
+	let s = o.map((e) => e.name), c = Kn(t) ? [] : Gn(zn(n, s), s);
 	return c.length > 0 ? {
 		active: !1,
 		tables: [],
@@ -1161,9 +1221,9 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		active: !0,
 		tables: o
 	};
-}, Kn = (e) => n.gen(function* () {
+}, Jn = (e) => n.gen(function* () {
 	if (e.mode !== "replace" || e.dir === void 0 || e.tables.length === 0) return;
-	if (e.snapshot === void 0) return yield* n.fail(new H({
+	if (e.snapshot === void 0) return yield* n.fail(new G({
 		reason: "rollback capture needs the TARGET's schema, and this run has none.\n  `--mode replace` empties the target first, so a run without a capture can leave it\n  emptied and unfilled if the process does not survive to roll back. Pass the target\n  snapshot, or `--no-rollback` to accept that risk deliberately.",
 		path: e.dir
 	}));
@@ -1174,14 +1234,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	if (t.tables.length === 0) return;
 	e.onWarn?.(`capturing the target's current rows before emptying it → ${e.dir}\n  This is what a failed replace is restored FROM. It is written before the first delete,
   so it survives a run whose process does not.`);
-	let r = yield* mn({
+	let r = yield* gn({
 		store: e.store,
 		snapshot: t,
 		dialect: e.dialect ?? "unknown",
 		outDir: e.dir,
 		scope: { kind: "all" },
 		compression: "none"
-	}).pipe(n.mapError((t) => new H({
+	}).pipe(n.mapError((t) => new G({
 		reason: `rollback capture failed, so the import did not start and the target is untouched: ${t.reason ?? String(t)}\n  Fix the capture, or re-run with \`--no-rollback\` to proceed without one.`,
 		path: e.dir
 	})));
@@ -1190,18 +1250,18 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		rows: r.tables.reduce((e, t) => e + t.rowCount, 0),
 		tables: r.tables.length
 	};
-}), qn = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`, Jn = (e, t) => e.tables.find((e) => e.name === t), Yn = (e, t) => new Map((Jn(e, t)?.columns ?? []).map((e) => [e.name, e])), Xn = /__dropped_\d+$/, Zn = (e, t) => {
+}), Yn = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`, Xn = (e, t) => e.tables.find((e) => e.name === t), Zn = (e, t) => new Map((Xn(e, t)?.columns ?? []).map((e) => [e.name, e])), Qn = /__dropped_\d+$/, $n = (e, t) => {
 	let n = [];
 	for (let r of [...e.tables].sort((e, t) => e.name.localeCompare(t.name))) {
-		if (Jn(t, r.name) === void 0) {
+		if (Xn(t, r.name) === void 0) {
 			n.push(`table '${r.name}' is in the bundle but MISSING from the target — its rows have nowhere to go`);
 			continue;
 		}
-		let e = Yn(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
+		let e = Zn(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
 		for (let [t, a] of i) {
 			let i = e.get(t);
 			if (i === void 0) {
-				n.push(Xn.test(t) ? `${r.name}.${t}: a soft-dropped column, present only in the SOURCE — reclaim it there (voltro db gc-snapshots --before <date>) or re-export without it; the target is not missing anything` : `${r.name}.${t}: in the bundle, MISSING from the target — the value has nowhere to go`);
+				n.push(Qn.test(t) ? `${r.name}.${t}: a soft-dropped column, present only in the SOURCE — reclaim it there (voltro db gc-snapshots --before <date>) or re-export without it; the target is not missing anything` : `${r.name}.${t}: in the bundle, MISSING from the target — the value has nowhere to go`);
 				continue;
 			}
 			i.type !== a.type && n.push(`${r.name}.${t}: type '${a.type}' (bundle) vs '${i.type}' (target)`);
@@ -1209,22 +1269,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		for (let [t, a] of e) i.has(t) || !a.nullable && !a.hasDefault && n.push(`${r.name}.${t}: the target requires it (NOT NULL, no default) and the bundle carries no value — every row of this table would fail`);
 	}
 	return n.length > 30 ? [...n.slice(0, 30), `… and ${n.length - 30} more difference(s)`] : n;
-}, Qn = (e, t, n) => {
-	let r = w(t);
+}, er = (e, t, n) => {
+	let r = T(t);
 	if (r === e || n === void 0) return {
 		drifted: !1,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: []
 	};
-	let i = Zn(n, t);
+	let i = $n(n, t);
 	return {
 		drifted: i.length > 0,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: i
 	};
-}, $n = 2e3, er = 2e3, tr = 200, nr = /* @__PURE__ */ new Set([
+}, tr = 2e3, nr = 2e3, rr = 200, ir = /* @__PURE__ */ new Set([
 	"BundleError",
 	"CodecError",
 	"IntegrityError",
@@ -1233,33 +1293,33 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	"RowsRefusedError",
 	"SchemaDriftError",
 	"StorageError"
-]), rr = (t) => {
+]), ar = (t) => {
 	let n = o.isFiberFailure(t) ? [...e.failures(t[o.FiberFailureCauseId]), ...e.defects(t[o.FiberFailureCauseId])] : [t];
 	for (let e of n) {
 		let t = e?._tag;
-		if (typeof t == "string" && nr.has(t)) return e;
+		if (typeof t == "string" && ir.has(t)) return e;
 		if (o.isFiberFailure(e)) {
-			let t = rr(e);
+			let t = ar(e);
 			if (t) return t;
 		}
 	}
-}, ir = (t) => [...e.failures(t)][0] ?? Error(e.pretty(t)), ar = (e) => n.tryPromise({
+}, or = (t) => [...e.failures(t)][0] ?? Error(e.pretty(t)), sr = (e) => n.tryPromise({
 	try: async () => {
 		let t = await import("node:fs/promises"), n = await import("node:path");
-		return Dt(await t.readFile(n.join(e, K), "utf8"));
+		return Ot(await t.readFile(n.join(e, kt), "utf8"));
 	},
-	catch: (e) => new H({
+	catch: (e) => new G({
 		reason: `manifest read/parse failed: ${String(e?.message ?? e)}`,
-		path: K
+		path: kt
 	})
-}), or = (e) => {
+}), cr = (e) => {
 	let t;
 	return n.gen(function* () {
-		let i = yield* n.promise(() => import("node:path")), a = yield* ar(e.bundleDir);
-		if (a.formatVersion !== 1) return yield* n.fail(new H({ reason: `unsupported bundle formatVersion ${a.formatVersion} (expected 1)` }));
+		let i = yield* n.promise(() => import("node:path")), a = yield* sr(e.bundleDir);
+		if (a.formatVersion !== 1) return yield* n.fail(new G({ reason: `unsupported bundle formatVersion ${a.formatVersion} (expected 1)` }));
 		if (e.tables !== void 0) {
 			let t = new Set(a.tables.map((e) => e.name)), r = e.tables.filter((e) => !t.has(e));
-			if (r.length > 0) return yield* n.fail(new H({ reason: `--tables names ${r.length} table(s) this bundle does not carry: ${r.join(", ")}. The bundle carries: ${[...t].sort().join(", ")}.` }));
+			if (r.length > 0) return yield* n.fail(new G({ reason: `--tables names ${r.length} table(s) this bundle does not carry: ${r.join(", ")}. The bundle carries: ${[...t].sort().join(", ")}.` }));
 		}
 		let o = e.tables === void 0 ? void 0 : new Set(e.tables), s = o === void 0 ? a : {
 			...a,
@@ -1276,7 +1336,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					unique: !1,
 					hasDefault: !1
 				}))
-			})) }, r = Qn(s.source.schemaFingerprint, e.targetSnapshot, t);
+			})) }, r = er(s.source.schemaFingerprint, e.targetSnapshot, t);
 			if (r.drifted) {
 				if (!e.force) return yield* n.fail(new Qe({
 					bundleFingerprint: r.bundleFingerprint,
@@ -1287,14 +1347,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			}
 		}
 		if (e.targetDialect && e.targetDialect !== s.source.dialect) {
-			let t = bn(s.tables, s.source.dialect, e.targetDialect).filter((e) => e.severity === "block");
+			let t = Sn(s.tables, s.source.dialect, e.targetDialect).filter((e) => e.severity === "block");
 			if (t.length > 0 && !e.allowIncompatible) return yield* n.fail(new tt({
 				sourceDialect: s.source.dialect,
 				targetDialect: e.targetDialect,
-				blocking: t.map(xn)
+				blocking: t.map(Cn)
 			}));
 		}
-		let c = e.verify ?? !0, f = e.mode ?? "upsert", m = e.atomic ?? f === "replace", _ = e.onConflict ?? "skip", v = e.ledgerPath ?? i.join(e.bundleDir, ".import..ledger.json"), b = yield* Bt(v);
+		let c = e.verify ?? !0, f = e.mode ?? "upsert", m = e.atomic ?? f === "replace", _ = e.onConflict ?? "skip", v = e.ledgerPath ?? i.join(e.bundleDir, ".import..ledger.json"), b = yield* Ht(v);
 		if (f === "replace" && s.scope.kind !== "all") return yield* n.fail(new et({
 			mode: f,
 			reason: `replace refuses a partial bundle (scope='${s.scope.kind}') — truncating would delete rows not in the bundle. Use --mode upsert, or re-export with full scope. To leave specific tables out of a FULL export, use \`--exclude a,b\`: it keeps the scope \`all\` and records what it left out.`
@@ -1307,8 +1367,8 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		if (f === "replace") {
 			let t = s.tables.map((e) => e.name), r = e.store.incomingForeignKeys ? yield* n.tryPromise({
 				try: () => e.store.incomingForeignKeys(t),
-				catch: (e) => new H({ reason: `foreign-key pre-flight failed: ${On(e)}` })
-			}) : e.targetSnapshot === void 0 ? [] : hn(e.targetSnapshot, t), i = [], a = /* @__PURE__ */ new Map();
+				catch: (e) => new G({ reason: `foreign-key pre-flight failed: ${An(e)}` })
+			}) : e.targetSnapshot === void 0 ? [] : _n(e.targetSnapshot, t), i = [], a = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				if (!a.has(t.from)) {
 					let r = yield* n.tryPromise({
@@ -1320,7 +1380,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 							skip: void 0,
 							projection: []
 						}),
-						catch: () => new H({ reason: `unreadable: ${t.from}` })
+						catch: () => new G({ reason: `unreadable: ${t.from}` })
 					}).pipe(n.map((e) => e.length), n.orElseSucceed(() => 0));
 					a.set(t.from, r);
 				}
@@ -1332,7 +1392,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			}
 			if (i.length > 0) return yield* n.fail(new et({
 				mode: f,
-				reason: gn(i)
+				reason: vn(i)
 			}));
 		}
 		if (e.dryRun === !0) return e.traceId !== void 0 && (yield* n.promise(() => e.store.update(u, e.traceId, {
@@ -1353,27 +1413,27 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			let e = t.columns.filter((e) => e.generatedAs !== void 0).map((e) => e.name);
 			e.length > 0 && S.set(t.name, e);
 		}
-		let C = (e, t) => {
+		let w = (e, t) => {
 			let n = S.get(e);
 			if (n === void 0) return t;
 			let r;
 			for (let e of n) e in t && (r ??= { ...t }, delete r[e]);
 			return r ?? t;
-		}, w = (e, t, n, r = !1) => {
-			let i = O ? X(t.name) : t.name, a = t.primaryKey, o = C(t.name, n);
+		}, T = (e, t, n, r = !1) => {
+			let i = k ? X(t.name) : t.name, a = t.primaryKey, o = w(t.name, n);
 			return f === "append" ? _ === "fail" ? e.insert(i, o) : e.insertIgnore(i, o, { conflictColumns: [a] }) : f === "replace" ? r ? e.upsert(i, o, { conflictColumns: [a] }) : e.insert(i, o) : e.upsert(i, o, { conflictColumns: [a] });
-		}, ae = (e, t) => e.savepoint ? e.savepoint(t) : t(), oe = 0, T = (t, n, r) => {
-			r.unclassified && (oe++, !(oe > 3) && e.onWarn?.(`row refused with no driver detail — table '${t.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (oe === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
-		}, se = (e, t, r = !0) => n.tryPromise({
+		}, E = (e, t) => e.savepoint ? e.savepoint(t) : t(), ie = 0, ae = (t, n, r) => {
+			r.unclassified && (ie++, !(ie > 3) && e.onWarn?.(`row refused with no driver detail — table '${t.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (ie === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
+		}, oe = (e, t, r = !0) => n.tryPromise({
 			try: e,
-			catch: (e) => En(e)
-		}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, T(t.entry, t.row, e)), !1)))), ce = (e) => {
+			catch: (e) => On(e)
+		}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, ae(t.entry, t.row, e)), !1)))), se = (e) => {
 			let t = Object.entries(e.entry.columnTypes).filter(([t, n]) => n === "reference" && e.row[t] !== null && e.row[t] !== void 0).map(([e]) => e);
 			if (t.length !== 0) return {
 				...e.row,
 				...Object.fromEntries(t.map((e) => [e, null]))
 			};
-		}, le = (e) => {
+		}, ce = (e) => {
 			let t = new Set(e.map((e) => String(e.row[e.entry.primaryKey]))), n = (e) => Object.entries(e.entry.columnTypes).some(([n, r]) => {
 				if (r !== "reference") return !1;
 				let i = e.row[n];
@@ -1401,62 +1461,62 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					primary: t.primary
 				})).sort((e, t) => t.refused - e.refused || e.table.localeCompare(t.table)).slice(0, 100)
 			});
-		}, ue = (e, t) => n.gen(function* () {
+		}, le = (e, t) => n.gen(function* () {
 			let r = t, i = [], a = !0;
 			for (; r.length > 0 && a;) {
 				a = !1;
 				let t = [];
-				for (let n of r) (yield* se(() => ae(e, () => w(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
+				for (let n of r) (yield* oe(() => E(e, () => T(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
 				if (!a && t.length > 0) for (let n = t.length - 1; n >= 0; n--) {
-					let r = t[n], o = ce(r);
-					o !== void 0 && (yield* se(() => ae(e, () => w(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
+					let r = t[n], o = se(r);
+					o !== void 0 && (yield* oe(() => E(e, () => T(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
 				}
 				r = t;
 			}
-			for (let t of i) (yield* se(() => ae(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
-			if (r.length > 0) return yield* n.fail(le(r));
-		}), E = (() => {
+			for (let t of i) (yield* oe(() => E(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
+			if (r.length > 0) return yield* n.fail(ce(r));
+		}), D = (() => {
 			let t = e.targetDialect;
 			return t === "postgres" || t === "mysql" || t === "mariadb" || t === "sqlite" || t === "mssql" ? t : void 0;
-		})(), D = Gn({
+		})(), O = qn({
 			mode: f,
 			...e.targetDialect === void 0 ? {} : { targetDialect: e.targetDialect },
 			...e.targetSnapshot === void 0 ? {} : { targetSnapshot: e.targetSnapshot },
 			bundleTables: s.tables.map((e) => e.name),
-			isSkipped: V,
-			canRunSql: An(e.store)
-		}), fe = D.tables, pe = s.tables.filter((e) => !V(e.name) && ee(e.name)).map((e) => e.name), O = D.active, me = !1, k = 0, A = 0, ge, j, M = 0, N = 0, _e = (t, r) => n.gen(function* () {
-			if (f === "replace" && !O && !(r && b.truncated)) {
+			isSkipped: W,
+			canRunSql: Mn(e.store)
+		}), de = O.tables, fe = s.tables.filter((e) => !W(e.name) && C(e.name)).map((e) => e.name), k = O.active, pe = !1, A = 0, j = 0, he, M, N = 0, P = 0, ge = (t, r) => n.gen(function* () {
+			if (f === "replace" && !k && !(r && b.truncated)) {
 				e.recordInterruption === !0 && (yield* n.tryPromise({
 					try: () => t.insert(d, {
-						id: h("repl", P),
-						startedAt: F,
+						id: h("repl", F),
+						startedAt: I,
 						tables: String(s.tables.length),
-						capture: I?.dir ?? null,
+						capture: L?.dir ?? null,
 						via: e.via ?? "direct"
 					}),
-					catch: (e) => new H({ reason: `could not record that this replace started: ${String(e?.message ?? e)}\n  The marker is what makes an interrupted run visible instead of silent, so the run does
+					catch: (e) => new G({ reason: `could not record that this replace started: ${String(e?.message ?? e)}\n  The marker is what makes an interrupted run visible instead of silent, so the run does
   not proceed without it.` })
 				}));
-				let i = [...s.tables].reverse().map((e) => e.name).filter((e) => !V(e)), a = !r, o = t.emptyTables ? () => t.emptyTables(i) : a ? async () => {
+				let i = [...s.tables].reverse().map((e) => e.name).filter((e) => !W(e)), a = !r, o = t.emptyTables ? () => t.emptyTables(i) : a ? async () => {
 					for (let e of [...s.tables].reverse()) await t.deleteMany(e.name, { where: x(e.primaryKey) });
 				} : () => t.transactional(async (e) => {
 					for (let t of [...s.tables].reverse()) await e.deleteMany(t.name, { where: x(t.primaryKey) });
 				});
 				yield* n.tryPromise({
 					try: o,
-					catch: (e) => new H({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${On(e)}` })
+					catch: (e) => new G({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${An(e)}` })
 				}), r && (b.truncated = !0, yield* J(v, b));
 			}
 			let a = [], o = [], u = [], p = [], g = s.tables.length;
 			for (let d = 0; d < s.tables.length; d++) {
 				let h = s.tables[d];
-				if (V(h.name)) {
+				if (W(h.name)) {
 					p.push(h.name);
 					continue;
 				}
 				if (r && h.name in b.tables) {
-					u.push(h.name), N++, M += b.tables[h.name].rowCount, q(e.onProgress, {
+					u.push(h.name), P++, N += b.tables[h.name].rowCount, q(e.onProgress, {
 						phase: "import",
 						table: h.name,
 						index: d,
@@ -1478,22 +1538,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					total: h.rowCount
 				});
 				let y = a.length, x = n.gen(function* () {
-					let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, c = he("bundle", () => de(_).pipe(bt(s.compression))).pipe(l.tap((e) => n.sync(() => i.update(e)))), u = async (e) => {
+					let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, c = me("bundle", () => ue(_).pipe(xt(s.compression))).pipe(l.tap((e) => n.sync(() => i.update(e)))), u = async (e) => {
 						let n = {
 							entry: h,
 							row: e,
 							reason: ""
 						};
 						try {
-							await ae(t, () => w(t, h, e));
+							await E(t, () => T(t, h, e));
 						} catch (t) {
-							let r = En(t);
-							n.reason = r.reason, T(h, e, r), a.push(n);
+							let r = On(t);
+							n.reason = r.reason, ae(h, e, r), a.push(n);
 						}
 					}, d = yield* n.promise(async () => {
 						let n = e.copyLoader;
 						if (!n || n.dialect !== "postgres") return !1;
-						if (m) return me || (me = !0, e.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
+						if (m) return pe || (pe = !0, e.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
 						if (f === "replace") return !0;
 						if (f !== "upsert") return !1;
 						try {
@@ -1523,40 +1583,40 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 							d = !1, e.onWarn?.(`bulk COPY into ${h.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
 							for (let e of t) await u(e);
 						}
-					}, b = Math.max(1, e.savepointBatchSize ?? 200), x = typeof t.savepoint == "function", S = [], ee = async () => {
+					}, b = Math.max(1, e.savepointBatchSize ?? 200), x = typeof t.savepoint == "function", S = [], C = async () => {
 						if (S.length === 0) return;
 						let e = S;
 						S = [];
 						try {
 							await t.savepoint(async () => {
-								for (let n of e) await w(t, h, n);
+								for (let n of e) await T(t, h, n);
 							});
 						} catch {
 							for (let t of e) await u(t);
 						}
 					};
-					return yield* l.runForEach(tn(c, h.name, h.columnTypes), (e) => n.promise(async () => {
-						if (o++, j?.(), d) {
+					return yield* l.runForEach(rn(c, h.name, h.columnTypes), (e) => n.promise(async () => {
+						if (o++, M?.(), d) {
 							v.push(e), v.length >= g && await y();
 							return;
 						}
 						if (x) {
-							S.push(e), S.length >= b && await ee();
+							S.push(e), S.length >= b && await C();
 							return;
 						}
 						await u(e);
-					})), yield* n.promise(ee), yield* n.promise(y), {
+					})), yield* n.promise(C), yield* n.promise(y), {
 						rowCount: o,
 						checksum: i.digest("hex")
 					};
-				}), { rowCount: S, checksum: ee } = yield* Rt("import", h.name, d, g, (e) => e.rowCount, x);
+				}), { rowCount: S, checksum: C } = yield* Bt("import", h.name, d, g, (e) => e.rowCount, x);
 				if (c) {
-					if (ee !== h.checksum) return yield* n.fail(new Ye({
+					if (C !== h.checksum) return yield* n.fail(new Je({
 						what: `table ${h.name} checksum`,
 						expected: h.checksum,
-						actual: ee
+						actual: C
 					}));
-					if (S !== h.rowCount) return yield* n.fail(new Ye({
+					if (S !== h.rowCount) return yield* n.fail(new Je({
 						what: `table ${h.name} rowCount`,
 						expected: String(h.rowCount),
 						actual: String(S)
@@ -1570,7 +1630,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					event: "done",
 					rowsDone: S,
 					total: h.rowCount
-				}), A++, k += S, ge?.(), j?.(), r && (a.length > y ? o.push({
+				}), j++, A += S, he?.(), M?.(), r && (a.length > y ? o.push({
 					name: h.name,
 					rowCount: S
 				}) : (b.tables[h.name] = {
@@ -1578,10 +1638,10 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					checksum: h.checksum
 				}, yield* J(v, b)));
 			}
-			if (a.length > 0 && (yield* ue(t, a)), f === "replace" && (yield* n.promise(() => t.deleteMany(d, { where: {
+			if (a.length > 0 && (yield* le(t, a)), f === "replace" && (yield* n.promise(() => t.deleteMany(d, { where: {
 				column: "startedAt",
 				op: "lte",
-				value: F
+				value: I
 			} }).then(() => void 0, () => void 0))), r && o.length > 0) {
 				for (let e of o) {
 					let t = s.tables.find((t) => t.name === e.name);
@@ -1593,32 +1653,32 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				yield* J(v, b);
 			}
 			{
-				let t = qe(p, "skipped");
+				let t = Ke(p, "skipped");
 				t !== void 0 && e.onWarn?.(t);
 			}
 			if (u.length > 0) {
 				let t = u.length === s.tables.length;
 				e.onWarn?.(`resume: ${u.length} of ${s.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${t ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${u.join(", ")}. Delete ${v} to force a full re-import.`);
 			}
-		}), P = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`, F = /* @__PURE__ */ new Date(), I = yield* Kn({
+		}), F = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`, I = /* @__PURE__ */ new Date(), L = yield* Jn({
 			store: e.store,
 			mode: f,
 			dir: e.rollbackDir,
 			snapshot: e.targetSnapshot,
 			dialect: e.targetDialect,
-			tables: s.tables.map((e) => e.name).filter((e) => !V(e)),
+			tables: s.tables.map((e) => e.name).filter((e) => !W(e)),
 			onWarn: e.onWarn
 		});
-		I !== void 0 && (e.onRollbackCaptured !== void 0 && (yield* n.tryPromise({
-			try: () => e.onRollbackCaptured(I),
-			catch: (e) => new H({
+		L !== void 0 && (e.onRollbackCaptured !== void 0 && (yield* n.tryPromise({
+			try: () => e.onRollbackCaptured(L),
+			catch: (e) => new G({
 				reason: `the rollback capture could not be stored durably, so the import did not start and the target is untouched: ${String(e?.message ?? e)}\n  The capture only helps if it outlives this process — that is the failure it exists for.`,
-				path: I.dir
+				path: L.dir
 			})
-		})), e.onWarn?.(qn(I)));
-		let ve = (e) => f === "replace" ? ne(e) : e(), L = (e) => f === "replace" ? re(e) : e, ye = e.traceId ?? h("dimp", `${Date.now()}-${s.source.schemaFingerprint ?? ""}`), be = e.traceId !== void 0, R = (e.targetSnapshot?.tables.some((e) => e.name === u) ?? !1) || y(u) !== void 0;
-		R && g(p), R && e.traceId === void 0 && (yield* n.promise(() => e.store.insert(u, {
-			id: ye,
+		})), e.onWarn?.(Yn(L)));
+		let _e = (e) => f === "replace" ? te(e) : e(), R = (e) => f === "replace" ? ne(e) : e, z = e.traceId ?? h("dimp", `${Date.now()}-${s.source.schemaFingerprint ?? ""}`), ve = e.traceId !== void 0, B = (e.targetSnapshot?.tables.some((e) => e.name === u) ?? !1) || y(u) !== void 0;
+		B && g(p), B && e.traceId === void 0 && (yield* n.promise(() => e.store.insert(u, {
+			id: z,
 			mode: f,
 			via: e.via ?? "direct",
 			direction: "import",
@@ -1626,45 +1686,45 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			sourceFingerprint: s.source.schemaFingerprint ?? null,
 			tablesWritten: 0,
 			rowsWritten: 0,
-			staged: f === "replace" ? O : null
+			staged: f === "replace" ? k : null
 		}).then(() => {
-			be = !0;
+			ve = !0;
 		}, (t) => {
 			e.onWarn?.(`the import trace could not be written (${String(t?.message ?? t)}).\n  The import continues — this is a record of what happened, not a safety check. Run
   \`voltro db apply\` so the next one is recorded.`);
-		}))), e.traceId !== void 0 && R && (yield* n.promise(() => e.store.update(u, ye, {
-			staged: f === "replace" ? O : null,
+		}))), e.traceId !== void 0 && B && (yield* n.promise(() => e.store.update(u, z, {
+			staged: f === "replace" ? k : null,
 			sourceFingerprint: s.source.schemaFingerprint ?? null
 		}).then(() => void 0, () => void 0)));
-		let xe = 0, Se = !1;
-		ge = () => {
-			if (!be || Se) return;
+		let ye = 0, be = !1;
+		he = () => {
+			if (!ve || be) return;
 			let t = Date.now();
-			t - xe < $n || (xe = t, e.store.update(u, ye, {
-				tablesWritten: A,
-				rowsWritten: k
+			t - ye < tr || (ye = t, e.store.update(u, z, {
+				tablesWritten: j,
+				rowsWritten: A
 			}).then(() => void 0, () => {
-				Se = !0;
+				be = !0;
 			}));
 		};
-		let Ce = (t) => be ? e.store.update(u, ye, {
+		let xe = (t) => ve ? e.store.update(u, z, {
 			finishedAt: t === null ? /* @__PURE__ */ new Date() : null,
-			tablesWritten: A,
-			rowsWritten: k,
+			tablesWritten: j,
+			rowsWritten: A,
 			failure: t
 		}).then(() => void 0, () => void 0) : Promise.resolve();
-		if (t = (e) => Ce(e), f === "replace" && !O && D.blocker !== void 0 && e.onWarn?.(jn(D.blocker)), f === "replace" && pe.length > 0 && e.onWarn?.(`write recorders are SUSPENDED for this replace (${pe.length} table(s) have one).\n  A replace sets a state rather than changing rows, so a per-row history entry would describe
+		if (t = (e) => xe(e), f === "replace" && !k && O.blocker !== void 0 && e.onWarn?.(Nn(O.blocker)), f === "replace" && fe.length > 0 && e.onWarn?.(`write recorders are SUSPENDED for this replace (${fe.length} table(s) have one).\n  A replace sets a state rather than changing rows, so a per-row history entry would describe
   something that did not happen — and this path already writes through the raw store, without
-  tenant scoping or \`audit()\` stamping, for the same reason.`), O) {
-			e.onWarn?.(`staging ${fe.length} table(s) before the swap — the target keeps its rows until the load stands.\n  The destructive step is one server-side transaction at the end, not the whole load.`);
-			let t = e.store, r = fe.map((e) => e.name), i = h("repl", `staging-${P}`), a = !1;
+  tenant scoping or \`audit()\` stamping, for the same reason.`), k) {
+			e.onWarn?.(`staging ${de.length} table(s) before the swap — the target keeps its rows until the load stands.\n  The destructive step is one server-side transaction at the end, not the whole load.`);
+			let t = e.store, r = de.map((e) => e.name), i = h("repl", `staging-${F}`), a = !1;
 			if (e.recordInterruption === !0) {
 				yield* n.promise(() => e.store.insert(d, {
 					id: i,
-					startedAt: F,
+					startedAt: I,
 					kind: "staging",
-					tables: String(fe.length),
-					capture: I?.dir ?? null,
+					tables: String(de.length),
+					capture: L?.dir ?? null,
 					via: e.via ?? "direct",
 					staging: r.map(X).join(","),
 					heartbeatAt: /* @__PURE__ */ new Date(),
@@ -1677,50 +1737,50 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
   them by introspection.`);
 				}));
 				let t = Date.now();
-				j = () => {
+				M = () => {
 					if (!a) return;
 					let n = Date.now();
-					n - t < er || (t = n, e.store.update(d, i, { heartbeatAt: /* @__PURE__ */ new Date() }).then(() => void 0, () => void 0));
+					n - t < nr || (t = n, e.store.update(d, i, { heartbeatAt: /* @__PURE__ */ new Date() }).then(() => void 0, () => void 0));
 				};
 			}
-			let o = () => a ? e.store.delete(d, i).then(() => void 0, () => void 0) : Promise.resolve(), s = In(r, {
+			let o = () => a ? e.store.delete(d, i).then(() => void 0, () => void 0) : Promise.resolve(), s = Rn(r, {
 				getTable: (e) => y(e),
 				registerTable: (e) => {
-					te(e);
+					ee(e);
 				},
-				unregisterTable: ie
+				unregisterTable: re
 			}), c = !1;
 			try {
-				let i = m ? r : r.filter((e) => !Vt(b, e));
+				let i = m ? r : r.filter((e) => !Ut(b, e));
 				yield* n.tryPromise({
 					try: async () => {
-						await Bn(t, i.map((e) => Pn(e, E))), await Bn(t, i.map((e) => Nn(e, E)));
+						await Hn(t, i.map((e) => In(e, D))), await Hn(t, i.map((e) => Fn(e, D)));
 					},
-					catch: (e) => new H({ reason: `could not prepare the staging tables, so the import did not start and the target is untouched: ${String(e?.message ?? e)}` })
-				}), yield* L(_e(e.store, !m)), !m && b.truncated === !0 ? c = !0 : yield* n.tryPromise({
-					try: () => Vn(t, fe, E).then(() => {
+					catch: (e) => new G({ reason: `could not prepare the staging tables, so the import did not start and the target is untouched: ${String(e?.message ?? e)}` })
+				}), yield* R(ge(e.store, !m)), !m && b.truncated === !0 ? c = !0 : yield* n.tryPromise({
+					try: () => Un(t, de, D).then(() => {
 						c = !0;
 					}),
-					catch: (e) => new H({ reason: String(e?.message ?? e) })
+					catch: (e) => new G({ reason: String(e?.message ?? e) })
 				}).pipe(n.catchAll((i) => n.gen(function* () {
-					let a = zn(yield* n.promise(() => Hn(t, Ln(e.targetSnapshot, r), E).then((e) => e, () => [])));
-					return yield* n.fail(new H({ reason: a ?? `the swap failed and the target is UNCHANGED: ${i.reason}` }));
+					let a = Vn(yield* n.promise(() => Wn(t, zn(e.targetSnapshot, r), D).then((e) => e, () => [])));
+					return yield* n.fail(new G({ reason: a ?? `the swap failed and the target is UNCHANGED: ${i.reason}` }));
 				}))), !m && c && b.truncated !== !0 && (b.truncated = !0, yield* J(v, b));
 			} finally {
-				s.undo(), c || m ? (j = void 0, yield* n.promise(() => Bn(t, r.map((e) => Pn(e, E))).then(() => void 0, () => void 0)), yield* n.promise(o)) : e.onWarn?.("the staged rows are KEPT so a re-run can continue from them rather than reload.\n  If you are not going to re-run this bundle, drop them: voltro data clear-staging --yes");
+				s.undo(), c || m ? (M = void 0, yield* n.promise(() => Hn(t, r.map((e) => In(e, D))).then(() => void 0, () => void 0)), yield* n.promise(o)) : e.onWarn?.("the staged rows are KEPT so a re-run can continue from them rather than reload.\n  If you are not going to re-run this bundle, drop them: voltro data clear-staging --yes");
 			}
 		} else m ? yield* n.tryPromise({
 			try: () => e.store.transactional(async (e) => {
-				let t = await ve(() => n.runPromiseExit(_e(e, !1)));
-				if (r.isFailure(t)) throw ir(t.cause);
+				let t = await _e(() => n.runPromiseExit(ge(e, !1)));
+				if (r.isFailure(t)) throw or(t.cause);
 			}),
-			catch: (e) => rr(e) ?? new H({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
-		}) : yield* L(_e(e.store, !0));
+			catch: (e) => ar(e) ?? new G({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
+		}) : yield* R(ge(e.store, !0));
 		if (e.assets && s.assets.index && !e.assetsAlreadyRestored) {
 			let t = e.assets;
-			yield* ht({
+			yield* gt({
 				sink: t,
-				assetsDir: i.join(e.bundleDir, At),
+				assetsDir: i.join(e.bundleDir, Mt),
 				indexPath: i.join(e.bundleDir, s.assets.index ?? "assets/index.ndjson"),
 				progress: {
 					done: (e) => e in b.assets,
@@ -1728,28 +1788,28 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				}
 			});
 		}
-		return yield* n.promise(() => Ce(null)), {
+		return yield* n.promise(() => xe(null)), {
 			manifest: s,
-			tablesWritten: A,
-			rowsWritten: k,
-			tablesSkipped: N,
-			rowsSkipped: M,
-			fullyResumed: A === 0 && N > 0,
-			...I === void 0 ? {} : { rollback: I }
+			tablesWritten: j,
+			rowsWritten: A,
+			tablesSkipped: P,
+			rowsSkipped: N,
+			fullyResumed: j === 0 && P > 0,
+			...L === void 0 ? {} : { rollback: L }
 		};
 	}).pipe(n.tapError((e) => n.promise(() => t?.(e?.reason ?? e?._tag ?? "the import did not finish") ?? Promise.resolve())));
-}, sr = (e) => e, cr = (e) => {
+}, lr = (e) => e, ur = (e) => {
 	if (e.allowLive || e.liveInstance === null || e.sameTarget === "different") return { refuse: !1 };
 	let t = e.targetLabel === void 0 ? "" : ` Target: ${e.targetLabel}.`, n = e.sameTarget === "same" ? " That instance is connected to the SAME database." : " We could not confirm which database that instance is connected to, so this is refused on the conservative reading — an older instance, or one whose connection could not be parsed, reports nothing to compare.";
 	return {
 		refuse: !0,
 		message: `refusing to write into a target with a LIVE instance (${e.liveInstance}).${t}${n} A direct import is an uncoordinated concurrent writer — readers see partial state, the reactive layer either storms or goes stale, and rows race with live writes. Re-run with --allow-live to override, or use a live-safe strategy (shadow-swap for replace, or the api target).`
 	};
-}, Q = Buffer.from("VBUNDLE2"), lr = 0, ur = 1, dr = 2, fr = 32, pr = async (e) => {
+}, Q = Buffer.from("VBUNDLE2"), dr = 0, fr = 1, pr = 2, mr = 32, hr = async (e) => {
 	let t = [], n = async (r) => {
 		let i;
 		try {
-			i = await I(R(e, r), { withFileTypes: !0 });
+			i = await L(B(e, r), { withFileTypes: !0 });
 		} catch {
 			return;
 		}
@@ -1759,22 +1819,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	};
 	return await n(""), t.sort();
-}, mr = (e, t) => {
+}, gr = (e, t) => {
 	let n = Buffer.from(e, "utf8"), r = Buffer.alloc(5 + n.length + 8);
-	return r.writeUInt8(ur, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
-}, hr = (e, t, n) => {
+	return r.writeUInt8(fr, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
+}, _r = (e, t, n) => {
 	let r = Buffer.from(e, "utf8"), i = Buffer.from(t, "utf8"), a = Buffer.alloc(5 + r.length + 2 + i.length + 8), o = 0;
-	return a.writeUInt8(dr, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
+	return a.writeUInt8(pr, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
 };
-async function* gr(e) {
+async function* vr(e) {
 	yield new Uint8Array(Q);
-	for (let t of await pr(e.dir)) {
-		let n = R(e.dir, t), r = await ve(n);
-		if (yield new Uint8Array(mr(t, r.size)), r.size > 0) for await (let e of de(n)) yield new Uint8Array(e);
+	for (let t of await hr(e.dir)) {
+		let n = B(e.dir, t), r = await _e(n);
+		if (yield new Uint8Array(gr(t, r.size)), r.size > 0) for await (let e of ue(n)) yield new Uint8Array(e);
 	}
 	if (e.blobs) for await (let t of e.blobs.list()) {
-		yield new Uint8Array(hr(t.key, t.contentType, t.size));
-		let n = T("sha256"), r = 0;
+		yield new Uint8Array(_r(t.key, t.contentType, t.size));
+		let n = ae("sha256"), r = 0;
 		for await (let i of e.blobs.open(t.key)) {
 			let e = Buffer.from(i);
 			n.update(e), r += e.length, yield new Uint8Array(e);
@@ -1782,11 +1842,11 @@ async function* gr(e) {
 		if (r !== t.size) throw Error(`blob '${t.key}' size mismatch: header ${t.size}, streamed ${r}`);
 		yield new Uint8Array(n.digest());
 	}
-	yield new Uint8Array(Buffer.from([lr]));
+	yield new Uint8Array(Buffer.from([dr]));
 }
-var _r = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vr = (e) => new Promise((t) => e.end(t)), yr = async (e, t) => {
-	let n = xe(t.dir);
-	await F(n, { recursive: !0 });
+var yr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), br = (e) => new Promise((t) => e.end(t)), xr = async (e, t) => {
+	let n = ye(t.dir);
+	await I(n, { recursive: !0 });
 	let r = Buffer.alloc(0), i = e[Symbol.asyncIterator](), a = !1, o = async () => {
 		let { value: e, done: t } = await i.next();
 		return t ? (a = !0, !1) : (r = r.length === 0 ? Buffer.from(e) : Buffer.concat([r, Buffer.from(e)]), !0);
@@ -1801,24 +1861,24 @@ var _r = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vr
 		for (;;) {
 			await s(1);
 			let e = c(1).readUInt8(0);
-			if (e === lr) return;
-			if (e === ur) {
+			if (e === dr) return;
+			if (e === fr) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
 				let t = c(e).toString("utf8");
 				await s(8);
-				let i = c(8).readBigUInt64BE(0), a = xe(n, t);
-				if (a !== n && !a.startsWith(n + Se)) throw Error(`archive path '${t}' escapes the destination`);
-				await F(be(a), { recursive: !0 });
-				let o = D(a);
+				let i = c(8).readBigUInt64BE(0), a = ye(n, t);
+				if (a !== n && !a.startsWith(n + be)) throw Error(`archive path '${t}' escapes the destination`);
+				await I(ve(a), { recursive: !0 });
+				let o = O(a);
 				for (; i > 0n;) {
 					r.length === 0 && await s(1);
 					let e = i < BigInt(r.length) ? Number(i) : r.length;
-					await _r(o, c(e)), i -= BigInt(e);
+					await yr(o, c(e)), i -= BigInt(e);
 				}
-				await vr(o);
-			} else if (e === dr) {
+				await br(o);
+			} else if (e === pr) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
@@ -1828,24 +1888,24 @@ var _r = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vr
 				await s(i);
 				let a = c(i).toString("utf8");
 				await s(8);
-				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = T("sha256"), d = new N(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
+				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = ae("sha256"), d = new P(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
 					contentType: a,
 					size: Number(o)
 				}), p = o;
 				for (; p > 0n;) {
 					r.length === 0 && await s(1);
 					let e = p < BigInt(r.length) ? Number(p) : r.length, t = c(e);
-					u.update(t), l || await _r(d, t), p -= BigInt(e);
+					u.update(t), l || await yr(d, t), p -= BigInt(e);
 				}
-				l ? d.destroy() : await vr(d), await f, await s(fr);
-				let m = c(fr);
+				l ? d.destroy() : await br(d), await f, await s(mr);
+				let m = c(mr);
 				if (!u.digest().equals(m)) throw Error(`blob '${n}' failed integrity (sha mismatch)`);
 			} else throw Error(`unknown bundle entry kind ${e}`);
 		}
 	} finally {
 		a || await Promise.resolve(i.return?.()).catch(() => void 0);
 	}
-}, br = async (e, t) => {
+}, Sr = async (e, t) => {
 	let n = new Set(t), r = /* @__PURE__ */ new Map(), i = Buffer.alloc(0), a = e[Symbol.asyncIterator](), o = async () => {
 		let { value: e, done: t } = await a.next();
 		return !t && (i = i.length === 0 ? Buffer.from(e) : Buffer.concat([i, Buffer.from(e)]), !0);
@@ -1867,8 +1927,8 @@ var _r = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vr
 	if (!await s(Q.length) || !c(Q.length).equals(Q)) throw Error("not a bundle archive (bad magic)");
 	for (; await s(1);) {
 		let e = c(1).readUInt8(0);
-		if (e === lr || e === dr) break;
-		if (e !== ur) throw Error(`unknown bundle entry kind ${e}`);
+		if (e === dr || e === pr) break;
+		if (e !== fr) throw Error(`unknown bundle entry kind ${e}`);
 		if (!await s(4)) break;
 		let t = c(4).readUInt32BE(0);
 		if (!await s(t)) break;
@@ -1878,22 +1938,22 @@ var _r = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vr
 		if (a === null || n.has(i) && (r.set(i, a), n.delete(i), n.size === 0)) break;
 	}
 	return r;
-}, xr = (e, t) => yr(e, {
+}, Cr = (e, t) => xr(e, {
 	dir: t,
-	blobs: Sr(t)
-}), Sr = (e) => {
+	blobs: wr(t)
+}), wr = (e) => {
 	let t = /* @__PURE__ */ new Set();
 	return {
 		has: async (e) => t.has(e),
 		write: async (n, r, i) => {
-			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = R(e, "assets");
-			await F(c, { recursive: !0 });
-			let l = T("sha256"), u = 0, d = new s({ transform(e, t, n) {
+			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = B(e, "assets");
+			await I(c, { recursive: !0 });
+			let l = ae("sha256"), u = 0, d = new s({ transform(e, t, n) {
 				l.update(e), u += e.length, n(null, e);
-			} }), f = R(c, `.tmp-${Date.now()}-${t.size}`);
-			await o(r, d, D(f));
+			} }), f = B(c, `.tmp-${Date.now()}-${t.size}`);
+			await o(r, d, O(f));
 			let p = l.digest("hex");
-			await a.rename(f, R(c, p)), await a.appendFile(R(c, "index.ndjson"), `${JSON.stringify({
+			await a.rename(f, B(c, p)), await a.appendFile(B(c, "index.ndjson"), `${JSON.stringify({
 				key: n,
 				sha256: p,
 				size: u,
@@ -1901,33 +1961,33 @@ var _r = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), vr
 			})}\n`), t.add(n);
 		}
 	};
-}, Cr = Ce(ue), wr = Buffer.from("VENC1\0\0\0"), Tr = 32, Er = 16, Dr = 7, Or = 16, kr = 262144, Ar = {
+}, Tr = xe(le), Er = Buffer.from("VENC1\0\0\0"), Dr = 32, Or = 16, kr = 7, Ar = 16, jr = 262144, Mr = {
 	N: 32768,
 	r: 8,
 	p: 1
-}, jr = 134217728, Mr = 43, Nr = (e, t, n) => {
+}, Nr = 134217728, Pr = 43, Fr = (e, t, n) => {
 	let r = Buffer.alloc(12);
-	return e.copy(r, 0, 0, Dr), r.writeUInt32BE(t >>> 0, Dr), r.writeUInt8(+!!n, 11), r;
+	return e.copy(r, 0, 0, kr), r.writeUInt32BE(t >>> 0, kr), r.writeUInt8(+!!n, 11), r;
 };
-async function* Pr(e, t) {
+async function* Ir(e, t) {
 	if (!t) throw Error("encryptStream: a non-empty passphrase is required");
-	let n = ce(Er), r = ce(Dr), i = await Cr(t, n, Tr, {
-		...Ar,
-		maxmem: jr
-	}), a = Buffer.alloc(Mr);
-	wr.copy(a, 0), a.writeUInt32BE(Ar.N, 8), a.writeUInt32BE(Ar.r, 12), a.writeUInt32BE(Ar.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
+	let n = se(Or), r = se(kr), i = await Tr(t, n, Dr, {
+		...Mr,
+		maxmem: Nr
+	}), a = Buffer.alloc(Pr);
+	Er.copy(a, 0), a.writeUInt32BE(Mr.N, 8), a.writeUInt32BE(Mr.r, 12), a.writeUInt32BE(Mr.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
 	let o = 0, s = (e, t) => {
-		let n = ae("aes-256-gcm", i, Nr(r, o, t));
+		let n = E("aes-256-gcm", i, Fr(r, o, t));
 		o === 0 && n.setAAD(a);
 		let s = Buffer.concat([n.update(e), n.final()]), c = n.getAuthTag();
 		o++;
-		let l = Buffer.alloc(5 + s.length + Or);
-		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + Or, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
+		let l = Buffer.alloc(5 + s.length + Ar);
+		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + Ar, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
 	}, c = Buffer.alloc(0);
-	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > kr;) yield s(c.subarray(0, kr), !1), c = c.subarray(kr);
+	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > jr;) yield s(c.subarray(0, jr), !1), c = c.subarray(jr);
 	yield s(c, !0);
 }
-async function* Fr(e, t) {
+async function* Lr(e, t) {
 	if (!t) throw Error("decryptStream: a non-empty passphrase is required");
 	let n = e[Symbol.asyncIterator](), r = Buffer.alloc(0), i = !1, a = async () => {
 		let { value: e, done: t } = await n.next();
@@ -1936,16 +1996,16 @@ async function* Fr(e, t) {
 		for (; r.length < e && !i && await a(););
 		return r.length >= e;
 	};
-	if (!await o(Mr)) throw Error("encrypted bundle truncated (no header)");
-	let s = r.subarray(0, Mr);
-	if (!s.subarray(0, 8).equals(wr)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
-	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Mr)), p = await Cr(t, d, Tr, {
+	if (!await o(Pr)) throw Error("encrypted bundle truncated (no header)");
+	let s = r.subarray(0, Pr);
+	if (!s.subarray(0, 8).equals(Er)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
+	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Pr)), p = await Tr(t, d, Dr, {
 		N: c,
 		r: l,
 		p: u,
-		maxmem: jr
+		maxmem: Nr
 	});
-	r = r.subarray(Mr);
+	r = r.subarray(Pr);
 	let m = 0, h = !1;
 	for (;;) {
 		if (!await o(5)) {
@@ -1954,11 +2014,11 @@ async function* Fr(e, t) {
 		}
 		if (h) throw Error("encrypted bundle has trailing data after the final frame");
 		let e = r.readUInt8(0) === 1, t = r.readUInt32BE(1);
-		if (t < Or) throw Error("encrypted bundle corrupt (short frame)");
+		if (t < Ar) throw Error("encrypted bundle corrupt (short frame)");
 		if (!await o(5 + t)) throw Error("encrypted bundle truncated (frame body)");
-		let n = r.subarray(5, 5 + t - Or), i = r.subarray(5 + t - Or, 5 + t);
+		let n = r.subarray(5, 5 + t - Ar), i = r.subarray(5 + t - Ar, 5 + t);
 		r = r.subarray(5 + t);
-		let a = oe("aes-256-gcm", p, Nr(f, m, e));
+		let a = ie("aes-256-gcm", p, Fr(f, m, e));
 		m === 0 && a.setAAD(s), a.setAuthTag(i);
 		let c = Buffer.concat([a.update(n), a.final()]);
 		m++, e && (h = !0), c.length > 0 && (yield new Uint8Array(c));
@@ -1966,7 +2026,7 @@ async function* Fr(e, t) {
 }
 //#endregion
 //#region src/blobStorage.ts
-var Ir = (e, t) => ({
+var Rr = (e, t) => ({
 	list: () => {
 		let e = t();
 		return { async *[Symbol.asyncIterator]() {
@@ -1979,32 +2039,32 @@ var Ir = (e, t) => ({
 		} };
 	},
 	open: (t) => ({ async *[Symbol.asyncIterator]() {
-		let r = await n.runPromise(A(e, t)), i = await j(r.stream);
+		let r = await n.runPromise(j(e, t)), i = await M(r.stream);
 		for await (let e of i) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 	} })
-}), Lr = (e, t) => Ir(e, () => C(t, {
-	table: k,
+}), zr = (e, t) => Rr(e, () => w(t, {
+	table: A,
 	chunkSize: 500
 }).pipe(l.map((e) => ({
 	key: String(e.key),
 	contentType: String(e.contentType ?? "application/octet-stream"),
 	size: Number(e.size ?? 0)
-})))), Rr = (e) => ({
+})))), Br = (e) => ({
 	has: (t) => n.runPromise(e.head(t).pipe(n.map((e) => e !== null))),
 	write: async (t, r, i) => {
-		let a = he("storage", () => _e.from(r));
-		await n.runPromise(ge(e, t, a, {
+		let a = me("storage", () => ge.from(r));
+		await n.runPromise(he(e, t, a, {
 			contentType: i.contentType,
 			totalSize: i.size
 		}));
 	}
-}), zr = (e, t) => {
+}), Vr = (e, t) => {
 	let n = t === "dump" ? "mariadb-dump" : "mariadb", r = t === "dump" ? "mysqldump" : "mysql";
-	return e === "mariadb" ? Br(n) ? { tool: n } : {
+	return e === "mariadb" ? Hr(n) ? { tool: n } : {
 		tool: r,
 		hint: `'${n}' is not on PATH, so this ran '${r}' instead. If that binary came from Oracle's MySQL client it queries information_schema.COLUMN_STATISTICS, which MariaDB does not have, and the run dies with error 1109 after the first table. Install the MariaDB client package (which ships '${n}') and re-run. Do NOT reach for --column-statistics=0: that flag does not exist on '${n}', so it fixes the wrong client and breaks the right one. Note: a MariaDB 12.x client requires TLS by default, so running '${n}' BY HAND against a server without it fails with "TLS/SSL error: SSL is required" (2026) and needs --skip-ssl. This command is not affected.`
 	} : { tool: r };
-}, Br = (e) => (process.env.PATH ?? "").split(ye).filter((e) => e !== "").some((t) => fe(R(t, e))), Vr = (e) => {
+}, Hr = (e) => (process.env.PATH ?? "").split(z).filter((e) => e !== "").some((t) => de(B(t, e))), Ur = (e) => {
 	switch (e) {
 		case "postgres": return "db.dump";
 		case "mysql":
@@ -2014,7 +2074,7 @@ var Ir = (e, t) => ({
 		case "mssql": return "db.bacpac";
 		default: return "db.dump";
 	}
-}, Hr = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
+}, Wr = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
 	if (e.host || e.database) return {
 		host: e.host ?? "localhost",
 		port: e.port ?? 3306,
@@ -2030,7 +2090,7 @@ var Ir = (e, t) => ({
 		password: decodeURIComponent(t.password) || "",
 		database: t.pathname.replace(/^\//, "") || ""
 	};
-}, Ur = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Wr = (e, t, n) => {
+}, Gr = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Kr = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -2040,7 +2100,7 @@ var Ir = (e, t) => ({
 					"--format=custom",
 					"--no-owner",
 					"--no-privileges",
-					...Kr,
+					...Jr,
 					"--dbname",
 					t.url,
 					"--file",
@@ -2059,7 +2119,7 @@ var Ir = (e, t) => ({
 					"--format=custom",
 					"--no-owner",
 					"--no-privileges",
-					...Kr,
+					...Jr,
 					"-h",
 					e.host,
 					"-p",
@@ -2079,14 +2139,14 @@ var Ir = (e, t) => ({
 			let r = $(t);
 			return {
 				kind: "spawn",
-				...zr(e, "dump"),
+				...Vr(e, "dump"),
 				args: [
 					"--single-transaction",
 					"--routines",
 					"--triggers",
 					"--no-tablespaces",
 					"--protocol=TCP",
-					...Gr.map((e) => `--ignore-table=${r.database}.${e}`),
+					...qr.map((e) => `--ignore-table=${r.database}.${e}`),
 					"-h",
 					r.host,
 					"-P",
@@ -2102,7 +2162,7 @@ var Ir = (e, t) => ({
 		case "sqlite":
 		case "turso": return {
 			kind: "copy",
-			from: Hr(t),
+			from: Wr(t),
 			to: n
 		};
 		case "mssql": return {
@@ -2110,7 +2170,7 @@ var Ir = (e, t) => ({
 			tool: "sqlpackage",
 			args: [
 				"/Action:Export",
-				`/SourceConnectionString:${Ur($({
+				`/SourceConnectionString:${Gr($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -2118,12 +2178,12 @@ var Ir = (e, t) => ({
 			],
 			env: {}
 		};
-		default: throw new W({
+		default: throw new K({
 			tool: "backup",
 			reason: `no native backup for dialect '${e}'`
 		});
 	}
-}, Gr = [d, u], Kr = Gr.flatMap((e) => ["--exclude-table", e]), qr = (e) => e === "postgres" || e === "mysql" || e === "mariadb" ? Gr : [], Jr = (e, t, n) => {
+}, qr = [d, u], Jr = qr.flatMap((e) => ["--exclude-table", e]), Yr = (e) => e === "postgres" || e === "mysql" || e === "mariadb" ? qr : [], Xr = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -2168,7 +2228,7 @@ var Ir = (e, t) => ({
 			let r = $(t);
 			return {
 				kind: "spawn",
-				...zr(e, "client"),
+				...Vr(e, "client"),
 				args: [
 					"--protocol=TCP",
 					"-h",
@@ -2187,14 +2247,14 @@ var Ir = (e, t) => ({
 		case "turso": return {
 			kind: "copy",
 			from: n,
-			to: Hr(t)
+			to: Wr(t)
 		};
 		case "mssql": return {
 			kind: "spawn",
 			tool: "sqlpackage",
 			args: [
 				"/Action:Import",
-				`/TargetConnectionString:${Ur($({
+				`/TargetConnectionString:${Gr($({
 					...t,
 					port: t.port ?? 1433
 				}))}`,
@@ -2202,27 +2262,27 @@ var Ir = (e, t) => ({
 			],
 			env: {}
 		};
-		default: throw new W({
+		default: throw new K({
 			tool: "restore",
 			reason: `no native restore for dialect '${e}'`
 		});
 	}
-}, Yr = (e) => e.kind === "copy" ? n.async((t) => {
-	let r = `${e.to}.restoring-${le()}`, i = (e) => {
+}, Zr = (e) => e.kind === "copy" ? n.async((t) => {
+	let r = `${e.to}.restoring-${ce()}`, i = (e) => {
 		try {
-			me(r);
+			pe(r);
 		} catch {}
-		t(n.fail(new W({
+		t(n.fail(new K({
 			tool: "copy",
 			reason: e
 		})));
 	};
-	E(e.from, r, (a) => {
+	D(e.from, r, (a) => {
 		if (a) {
 			i(`copy ${e.from} → ${e.to}: ${a.message}`);
 			return;
 		}
-		pe(r, e.to, (r) => {
+		fe(r, e.to, (r) => {
 			if (r) {
 				i(`copy ${e.from} → ${e.to}: ${r.message}`);
 				return;
@@ -2231,7 +2291,7 @@ var Ir = (e, t) => ({
 		});
 	});
 }) : n.async((t) => {
-	let r = we(e.tool, [...e.args], {
+	let r = Se(e.tool, [...e.args], {
 		env: {
 			...process.env,
 			...e.env
@@ -2251,27 +2311,27 @@ var Ir = (e, t) => ({
 		s ??= e;
 	};
 	if (e.stdoutFile && r.stdout) {
-		let t = D(e.stdoutFile);
-		t.on("error", (t) => c(`writing ${L(e.stdoutFile)}: ${t.message}`)), r.stdout.on("error", (e) => c(`reading the tool's output: ${e.message}`)), r.stdout.pipe(t);
+		let t = O(e.stdoutFile);
+		t.on("error", (t) => c(`writing ${R(e.stdoutFile)}: ${t.message}`)), r.stdout.on("error", (e) => c(`reading the tool's output: ${e.message}`)), r.stdout.pipe(t);
 	}
 	let l = 0;
 	if (e.stdinFile && r.stdin) {
-		let t = de(e.stdinFile);
+		let t = ue(e.stdinFile);
 		t.on("data", (e) => {
 			l += e.length;
 		}), t.on("error", (t) => {
-			c(`reading ${L(e.stdinFile)}: ${t.message}`), r.stdin?.end();
+			c(`reading ${R(e.stdinFile)}: ${t.message}`), r.stdin?.end();
 		}), r.stdin.on("error", (t) => {
-			t.code !== "EPIPE" && c(`feeding ${L(e.stdinFile)} to ${e.tool}: ${t.message}`);
+			t.code !== "EPIPE" && c(`feeding ${R(e.stdinFile)} to ${e.tool}: ${t.message}`);
 		}), t.pipe(r.stdin);
 	}
 	let u = () => {
 		if (e.stdoutFile !== void 0) try {
-			me(e.stdoutFile);
+			pe(e.stdoutFile);
 		} catch {}
 	};
 	r.on("error", (t) => {
-		u(), o(n.fail(new W({
+		u(), o(n.fail(new K({
 			tool: e.tool,
 			reason: `failed to launch (is '${e.tool}' installed + on PATH?): ${t.message}`,
 			...e.hint === void 0 ? {} : { hint: e.hint }
@@ -2282,25 +2342,25 @@ var Ir = (e, t) => ({
 			return;
 		}
 		u();
-		let r = e.stdinFile === void 0 ? "" : ` — ${l} of ${Xr(e.stdinFile)} byte(s) of ${L(e.stdinFile)} had been fed to it`;
-		o(n.fail(new W({
+		let r = e.stdinFile === void 0 ? "" : ` — ${l} of ${Qr(e.stdinFile)} byte(s) of ${R(e.stdinFile)} had been fed to it`;
+		o(n.fail(new K({
 			tool: e.tool,
-			reason: (t === 0 ? `exited cleanly, but ${s}` : `exited with code ${t}${s === void 0 ? "" : ` (${s})`}`) + r + (e.stdoutFile === void 0 ? "" : ` — the partial ${L(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
+			reason: (t === 0 ? `exited cleanly, but ${s}` : `exited with code ${t}${s === void 0 ? "" : ` (${s})`}`) + r + (e.stdoutFile === void 0 ? "" : ` — the partial ${R(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
 			stderr: i.trim() === "" ? `(${e.tool} printed nothing to stderr)` : i.slice(-2e3),
 			...e.hint === void 0 ? {} : { hint: e.hint }
 		})));
 	});
-}), Xr = (e) => {
+}), Qr = (e) => {
 	try {
-		return String(O(e).size);
+		return String(k(e).size);
 	} catch {
 		return "?";
 	}
-}, Zr = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), Qr = (e) => n.gen(function* () {
-	let t = yield* ot(e.scope ?? { kind: "all" }, e.snapshot, {
+}, $r = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), ei = (e) => n.gen(function* () {
+	let t = yield* st(e.scope ?? { kind: "all" }, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), r = nn(t.tables, e.snapshot), i = e.classification ?? De(e.snapshot), a = e.sampleSize ?? 20, o = Be(r.map((t) => ({
+	}), r = an(t.tables, e.snapshot), i = e.classification ?? Te(e.snapshot), a = e.sampleSize ?? 20, o = ze(r.map((t) => ({
 		name: t,
 		columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 			name: e.name,
@@ -2308,19 +2368,19 @@ var Ir = (e, t) => ({
 		}))
 	})), i, e.masking), s = [], c = [];
 	for (let i of r) {
-		let r = t.predicateFor(i), u = yield* C(e.store, {
+		let r = t.predicateFor(i), u = yield* w(e.store, {
 			table: i,
 			chunkSize: a,
 			...r === void 0 ? {} : { where: r }
-		}).pipe(l.take(a), l.runCollect, n.map((e) => [...e])), d = u.map((t) => Ue(t, i, o.actions, e.masking.seed));
-		c.push(...He(d, i, o.actions));
+		}).pipe(l.take(a), l.runCollect, n.map((e) => [...e])), d = u.map((t) => He(t, i, o.actions, e.masking.seed));
+		c.push(...Ve(d, i, o.actions));
 		let f = u[0], p = d[0], m = [];
 		if (f && p) for (let [e, t] of Object.entries(o.actions)) {
 			if (!e.startsWith(`${i}.`) || t === "keep") continue;
 			let n = e.slice(i.length + 1);
 			m.push({
 				column: n,
-				action: Zr(t),
+				action: $r(t),
 				before: f[n],
 				after: p[n]
 			});
@@ -2335,7 +2395,7 @@ var Ir = (e, t) => ({
 		leaks: c,
 		unclassified: o.unclassified
 	};
-}), $r = (e, t) => {
+}), ti = (e, t) => {
 	let n = new Map(t.map((e) => [e.name, e])), r = [], i = {};
 	for (let t of e) {
 		let e = n.get(t.name);
@@ -2390,7 +2450,7 @@ var Ir = (e, t) => ({
 		skipColumns: i,
 		refuse: r.some((e) => e.verdict === "refuse")
 	};
-}, ei = (e) => {
+}, ni = (e) => {
 	if (e.findings.length === 0) return ["  schema matches the bundle"];
 	let t = {
 		safe: "✓",
@@ -2401,4 +2461,4 @@ var Ir = (e, t) => ({
 	return n.push(""), n.push(`  discarded: ${r("value-dropped")}   defaulted: ${r("filled-by-default")}   refused: ${r("refuse")}`), e.refuse && (n.push(""), n.push("  REFUSED — no row was written. These are the differences that would make"), n.push("  imported rows WRONG rather than merely incomplete.")), n;
 };
 //#endregion
-export { At as ASSETS_DIR, jt as ASSET_INDEX_FILE, H as BundleError, Je as CodecError, Xe as CompressionError, tt as CrossDialectError, kt as DATA_DIR, Ee as DEFAULT_CLASS_ACTIONS, We as ENVIRONMENT_LOCAL_TABLES, Ge as ENVIRONMENT_PORTABLE_TABLES, Gr as EXCLUDED_FROM_DUMP, xt as FORMAT_VERSION, et as ImportModeError, Ye as IntegrityError, Mt as LEDGER_FILE, K as MANIFEST_FILE, $e as MaskingError, W as NativeToolError, Ze as RowsRefusedError, tr as SAVEPOINT_BATCH_SIZE, kn as STAGING_PREFIX, Qe as SchemaDriftError, U as ScopeError, Re as applyAction, rr as asImportError, cr as assessLiveImport, Ht as assetDone, Vr as backupArtifactName, Wr as backupCommand, An as canStage, _n as canonicalType, pt as captureAssetsToCas, bn as checkPortability, Qn as checkSchemaDrift, De as classificationFromSnapshot, $r as classifyImportDrift, vt as compressionExt, rt as computeSubsetIds, Gn as decideStaging, Dt as decodeManifest, Qt as decodeRow, Xt as decodeValue, Fr as decryptStream, sr as defineDataProfile, Zn as diffSnapshots, Sr as dirBlobSink, Pn as dropStagingSql, qr as dumpExcludedTables, zt as emptyLedger, Et as encodeManifest, Zt as encodeRow, Jt as encodeValue, Pr as encryptStream, qe as environmentLocalNotice, Ke as environmentLocalReason, Bn as execStatements, ei as formatImportDrift, xn as formatIssue, gt as hasZstd, V as isEnvironmentLocal, yt as makeCompressor, bt as makeDecompressor, Ue as maskRow, tn as ndjsonToRows, dt as noAssetProgress, gn as outsideReferenceRefusal, hn as outsideReferencesInto, gr as packBundle, br as peekBundle, _t as pickCompression, Be as planMasking, Qr as previewMasking, mt as readAssetIndex, Bt as readLedger, Oe as resolveAction, ot as resolveScope, ut as restoreAssetFromCas, ht as restoreAssetsFromCas, Jr as restoreCommand, en as rowsToNdjson, mn as runExport, or as runImport, Yr as runNativeStep, He as scanForLeaks, X as stagingNameFor, ct as storageAssetSink, st as storageAssetSource, Rr as storageBlobSink, Ir as storageBlobSource, Lr as storageRefsBlobSource, it as subsetToScope, Vt as tableDone, nn as topoSortTables, yr as unpackBundle, xr as unpackBundleToDir, lt as writeAssetToCas, J as writeLedger };
+export { Mt as ASSETS_DIR, Nt as ASSET_INDEX_FILE, G as BundleError, qe as CodecError, Ye as CompressionError, tt as CrossDialectError, jt as DATA_DIR, we as DEFAULT_CLASS_ACTIONS, Ue as ENVIRONMENT_LOCAL_TABLES, We as ENVIRONMENT_PORTABLE_TABLES, qr as EXCLUDED_FROM_DUMP, St as FORMAT_VERSION, et as ImportModeError, Je as IntegrityError, Pt as LEDGER_FILE, kt as MANIFEST_FILE, $e as MaskingError, K as NativeToolError, Ze as RowsRefusedError, rr as SAVEPOINT_BATCH_SIZE, jn as STAGING_PREFIX, Qe as SchemaDriftError, Xe as ScopeError, U as applyAction, ar as asImportError, ur as assessLiveImport, Wt as assetDone, Ur as backupArtifactName, Kr as backupCommand, Mn as canStage, yn as canonicalType, mt as captureAssetsToCas, Sn as checkPortability, er as checkSchemaDrift, Te as classificationFromSnapshot, ti as classifyImportDrift, yt as compressionExt, it as computeSubsetIds, qn as decideStaging, Ot as decodeManifest, en as decodeRow, Qt as decodeValue, Lr as decryptStream, lr as defineDataProfile, $n as diffSnapshots, wr as dirBlobSink, In as dropStagingSql, Yr as dumpExcludedTables, Vt as emptyLedger, Dt as encodeManifest, $t as encodeRow, Xt as encodeValue, Ir as encryptStream, Ke as environmentLocalNotice, Ge as environmentLocalReason, Hn as execStatements, ni as formatImportDrift, Cn as formatIssue, _t as hasZstd, W as isEnvironmentLocal, bt as makeCompressor, xt as makeDecompressor, He as maskRow, rn as ndjsonToRows, ft as noAssetProgress, vn as outsideReferenceRefusal, _n as outsideReferencesInto, vr as packBundle, Sr as peekBundle, vt as pickCompression, ze as planMasking, ei as previewMasking, ht as readAssetIndex, Ht as readLedger, Ee as resolveAction, st as resolveScope, dt as restoreAssetFromCas, gt as restoreAssetsFromCas, Xr as restoreCommand, nn as rowsToNdjson, gn as runExport, cr as runImport, Zr as runNativeStep, Ve as scanForLeaks, X as stagingNameFor, lt as storageAssetSink, ct as storageAssetSource, Br as storageBlobSink, Rr as storageBlobSource, zr as storageRefsBlobSource, at as subsetToScope, Ut as tableDone, an as topoSortTables, xr as unpackBundle, Cr as unpackBundleToDir, ut as writeAssetToCas, J as writeLedger };