@voltro/data-transfer 0.80.0 → 0.82.0

package/dist/index.js

@@ -1,18 +1,18 @@
 import { Cause as e, Data as t, Effect as n, Exit as r, Metric as i, MetricBoundaries as a, Runtime as o, Schedule as s, Schema as c, Stream as l } from "effect";
-import { DATA_TRANSFERS_TABLE as u, REPLACE_IN_PROGRESS_TABLE as d, STAGING_TABLE_PREFIX as f, _voltroDataTransfersTable as p, classifyConstraintViolation as m, derivedRowId as h, ensureTableRegistered as g, eq as _, extractDbCause as v, getTable as y, inSet as b, isNotNull as x, or as S, recordsTable as C, registerTable as ee, streamTable as w, suspendWriteRecorders as te, suspendWriteRecordersEffect as ne, unregisterTable as re } from "@voltro/database";
-import { fingerprintSchema as T } from "@voltro/database/sql";
-import { createCipheriv as ie, createDecipheriv as ae, createHash as oe, createHmac as se, randomBytes as ce, randomUUID as le, scrypt as ue } from "node:crypto";
-import { copyFile as E, createReadStream as de, createWriteStream as D, existsSync as fe, rename as pe, statSync as O, unlinkSync as k } from "node:fs";
-import { STORAGE_REFS_TABLE as A, fromNodeReadable as me, getObjectStream as j, putObjectStream as he, toNodeReadable as M } from "@voltro/plugin-storage";
-import * as N from "node:zlib";
-import { PassThrough as P, Readable as ge } from "node:stream";
-import { SqlClient as F } from "@effect/sql";
-import { mkdir as I, readdir as L, stat as _e } from "node:fs/promises";
-import { basename as R, delimiter as z, dirname as ve, join as B, resolve as ye, sep as be } from "node:path";
-import { promisify as xe } from "node:util";
-import { spawn as Se } from "node:child_process";
+import { DATA_TRANSFERS_TABLE as u, REPLACE_IN_PROGRESS_TABLE as d, STAGING_TABLE_PREFIX as f, _voltroDataTransfersTable as p, classifyConstraintViolation as m, derivedRowId as h, ensureTableRegistered as g, eq as _, extractDbCause as v, getTable as y, inSet as b, isNotNull as x, or as S, recordsTable as ee, registerTable as te, streamTable as C, suspendWriteRecorders as ne, suspendWriteRecordersEffect as re, unregisterTable as ie } from "@voltro/database";
+import { fingerprintSchema as w } from "@voltro/database/sql";
+import { createCipheriv as ae, createDecipheriv as oe, createHash as T, createHmac as se, randomBytes as ce, randomUUID as le, scrypt as ue } from "node:crypto";
+import { copyFile as de, createReadStream as fe, createWriteStream as pe, existsSync as E, rename as D, statSync as me, unlinkSync as he } from "node:fs";
+import { STORAGE_REFS_TABLE as O, fromNodeReadable as ge, getObjectStream as _e, putObjectStream as k, toNodeReadable as A } from "@voltro/plugin-storage";
+import * as j from "node:zlib";
+import { PassThrough as M, Readable as ve } from "node:stream";
+import { SqlClient as N } from "@effect/sql";
+import { mkdir as P, readdir as ye, stat as be } from "node:fs/promises";
+import { basename as F, delimiter as xe, dirname as Se, join as I, resolve as L, sep as Ce } from "node:path";
+import { promisify as we } from "node:util";
+import { spawn as Te } from "node:child_process";
 //#region src/consistency.ts
-var Ce = (e) => {
+var Ee = (e) => {
 	switch (e) {
 		case "postgres": return ["SET TRANSACTION ISOLATION LEVEL REPEATABLE READ"];
 		case "mysql":
@@ -22,7 +22,7 @@ var Ce = (e) => {
 		case "turso": return [];
 		default: return [];
 	}
-}, we = {
+}, De = {
 	email: { fake: "email" },
 	fullName: { fake: "fullName" },
 	firstName: { fake: "firstName" },
@@ -37,7 +37,7 @@ var Ce = (e) => {
 	date: "dateShift",
 	secret: "null",
 	freeText: "redact"
-}, Te = (e) => {
+}, Oe = (e) => {
 	let t = {};
 	for (let n of e.tables) {
 		let e = {};
@@ -49,15 +49,15 @@ var Ce = (e) => {
 		t[n.name] = e;
 	}
 	return t;
-}, Ee = (e, t, n, r) => {
+}, ke = (e, t, n, r) => {
 	let i = r.columns?.[`${e}.${t}`];
 	if (i) return i;
 	if (n?.sensitive) {
 		let e = n.sensitive.class;
-		return r.classes?.[e] ?? we[e] ?? "redact";
+		return r.classes?.[e] ?? De[e] ?? "redact";
 	}
 	return n?.safe ? r.onSafe ?? "keep" : n?.columnType === "id" || n?.columnType === "reference" ? "keep" : r.onUnclassified ?? "error";
-}, De = (e, t) => se("sha256", e).update(t == null ? "∅" : String(t)).digest(), V = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), Oe = [
+}, Ae = (e, t) => se("sha256", e).update(t == null ? "∅" : String(t)).digest(), R = (e, t) => e.readUInt32BE(t * 4 % (e.length - 4)), je = [
 	"Ada",
 	"Alan",
 	"Grace",
@@ -70,7 +70,7 @@ var Ce = (e) => {
 	"Guido",
 	"Margaret",
 	"Bjarne"
-], ke = [
+], Me = [
 	"Lovelace",
 	"Turing",
 	"Hopper",
@@ -83,7 +83,7 @@ var Ce = (e) => {
 	"Rossum",
 	"Hamilton",
 	"Stroustrup"
-], Ae = [
+], Ne = [
 	"Maple",
 	"Oak",
 	"Cedar",
@@ -92,7 +92,7 @@ var Ce = (e) => {
 	"Birch",
 	"Willow",
 	"Ash"
-], je = [
+], Pe = [
 	"Initech",
 	"Hooli",
 	"Umbrella",
@@ -101,23 +101,23 @@ var Ce = (e) => {
 	"Soylent",
 	"Stark",
 	"Wayne"
-], H = (e, t, n) => e[V(t, n) % e.length], Me = (e, t, n) => {
-	let r = De(n, `${e}:${String(t)}`), i = V(r, 1) % 1e4;
+], z = (e, t, n) => e[R(t, n) % e.length], Fe = (e, t, n) => {
+	let r = Ae(n, `${e}:${String(t)}`), i = R(r, 1) % 1e4;
 	switch (e) {
-		case "email": return `${H(Oe, r, 0).toLowerCase()}.${H(ke, r, 2).toLowerCase()}${i}@example.com`;
-		case "fullName": return `${H(Oe, r, 0)} ${H(ke, r, 1)}`;
-		case "firstName": return H(Oe, r, 0);
-		case "lastName": return H(ke, r, 1);
-		case "username": return `${H(Oe, r, 0).toLowerCase()}${i}`;
-		case "phone": return `+1${String(V(r, 0) % 1e10).padStart(10, "0")}`;
-		case "address": return `${V(r, 0) % 9899 + 100} ${H(Ae, r, 1)} St`;
-		case "company": return H(je, r, 0);
+		case "email": return `${z(je, r, 0).toLowerCase()}.${z(Me, r, 2).toLowerCase()}${i}@example.com`;
+		case "fullName": return `${z(je, r, 0)} ${z(Me, r, 1)}`;
+		case "firstName": return z(je, r, 0);
+		case "lastName": return z(Me, r, 1);
+		case "username": return `${z(je, r, 0).toLowerCase()}${i}`;
+		case "phone": return `+1${String(R(r, 0) % 1e10).padStart(10, "0")}`;
+		case "address": return `${R(r, 0) % 9899 + 100} ${z(Ne, r, 1)} St`;
+		case "company": return z(Pe, r, 0);
 		case "url": return `https://example.com/${r.toString("hex").slice(0, 12)}`;
-		case "ip": return `${V(r, 0) % 256}.${V(r, 1) % 256}.${V(r, 2) % 256}.${V(r, 3) % 254 + 1}`;
-		case "creditCard": return Ne(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
+		case "ip": return `${R(r, 0) % 256}.${R(r, 1) % 256}.${R(r, 2) % 256}.${R(r, 3) % 254 + 1}`;
+		case "creditCard": return Ie(`4${r.toString("hex").replace(/\D/g, "").padEnd(14, "0").slice(0, 14)}`);
 		default: return `${e}_${r.toString("hex").slice(0, 8)}`;
 	}
-}, Ne = (e) => {
+}, Ie = (e) => {
 	let t = e.slice(0, 15).split("").map(Number), n = 0;
 	t.forEach((e, t) => {
 		let r = e;
@@ -125,29 +125,29 @@ var Ce = (e) => {
 	});
 	let r = (10 - n % 10) % 10;
 	return e.slice(0, 15) + String(r);
-}, Pe = 864e5, Fe = (e, t) => {
+}, Le = 864e5, Re = (e, t) => {
 	let n = e instanceof Date ? e.getTime() : Date.parse(String(e));
 	if (Number.isNaN(n)) return e;
-	let r = V(De(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Pe);
+	let r = R(Ae(t, "date-shift-offset"), 0) % 730 - 365, i = new Date(n + r * Le);
 	return e instanceof Date ? i : i.toISOString();
-}, U = (e, t) => {
+}, B = (e, t) => {
 	if (t.value === null || t.value === void 0) return null;
 	if (e === "error") throw Error(`masking: unresolved 'error' action for ${t.table}.${t.column}`);
 	if (e === "keep") return t.value;
 	if (e === "null") return null;
 	if (e === "redact") return t.columnType === "text" || typeof t.value == "string" ? "[redacted]" : null;
-	if (e === "hash") return De(t.seed, t.value).toString("hex").slice(0, 16);
-	if (e === "dateShift") return Fe(t.value, t.seed);
-	if (typeof e == "object" && "fake" in e) return Me(e.fake, t.value, t.seed);
+	if (e === "hash") return Ae(t.seed, t.value).toString("hex").slice(0, 16);
+	if (e === "dateShift") return Re(t.value, t.seed);
+	if (typeof e == "object" && "fake" in e) return Fe(e.fake, t.value, t.seed);
 	if (typeof e == "object" && "custom" in e) return e.custom(t);
-	if (typeof e == "object" && "json" in e) return Ie(e, t);
+	if (typeof e == "object" && "json" in e) return ze(e, t);
 	throw Error(`masking: '${t.table}.${t.column}' resolved to an action this build does not understand (${JSON.stringify(e)}). Refusing to copy the value through. Valid actions: 'keep' | 'null' | 'redact' | 'hash' | 'dateShift' | { fake: '<class>' } | { custom: fn } | { json: { fields, rest? } }.`);
-}, Ie = (e, t) => {
-	let { fields: n, rest: r = "redact" } = e.json, i = typeof t.value == "string" ? Le(t.value) : {
+}, ze = (e, t) => {
+	let { fields: n, rest: r = "redact" } = e.json, i = typeof t.value == "string" ? Be(t.value) : {
 		ok: !0,
 		value: t.value
 	};
-	if (!i.ok) return U(r, {
+	if (!i.ok) return B(r, {
 		...t,
 		columnType: "text"
 	});
@@ -158,12 +158,12 @@ var Ce = (e) => {
 			let a = {};
 			for (let [o, s] of Object.entries(e)) {
 				let e = n[o] ?? r, c = `${i}.${o}`;
-				a[o] = typeof e == "object" && "json" in e ? Ie(e, {
+				a[o] = typeof e == "object" && "json" in e ? ze(e, {
 					...t,
 					value: s,
 					column: c,
 					columnType: "json"
-				}) : U(e, {
+				}) : B(e, {
 					...t,
 					value: s,
 					column: c,
@@ -172,7 +172,7 @@ var Ce = (e) => {
 			}
 			return a;
 		}
-		return U(r, {
+		return B(r, {
 			...t,
 			value: e,
 			column: i,
@@ -180,7 +180,7 @@ var Ce = (e) => {
 		});
 	}, o = a(i.value, t.column);
 	return typeof t.value == "string" ? JSON.stringify(o) : o;
-}, Le = (e) => {
+}, Be = (e) => {
 	try {
 		return {
 			ok: !0,
@@ -189,7 +189,7 @@ var Ce = (e) => {
 	} catch {
 		return { ok: !1 };
 	}
-}, Re = (e) => {
+}, Ve = (e) => {
 	if (typeof e == "string") return e === "keep" || e === "null" || e === "redact" || e === "hash" || e === "dateShift" || e === "error";
 	if (typeof e != "object" || !e) return !1;
 	if ("fake" in e) return typeof e.fake == "string";
@@ -198,18 +198,18 @@ var Ce = (e) => {
 		let t = e.json;
 		if (typeof t != "object" || !t) return !1;
 		let { fields: n, rest: r } = t;
-		return typeof n != "object" || !n ? !1 : Object.values(n).every(Re) && (r === void 0 || Re(r));
+		return typeof n != "object" || !n ? !1 : Object.values(n).every(Ve) && (r === void 0 || Ve(r));
 	}
 	return !1;
-}, ze = (e, t, n) => {
+}, He = (e, t, n) => {
 	let r = {}, i = [], a = [];
 	for (let o of e) for (let e of o.columns) {
-		let s = `${o.name}.${e.name}`, c = Ee(o.name, e.name, t[o.name]?.[e.name], n);
+		let s = `${o.name}.${e.name}`, c = ke(o.name, e.name, t[o.name]?.[e.name], n);
 		if (c === "error") {
 			i.push(s);
 			continue;
 		}
-		if (!Re(c)) {
+		if (!Ve(c)) {
 			a.push({
 				column: s,
 				action: c
@@ -223,7 +223,7 @@ var Ce = (e) => {
 		unclassified: i,
 		invalid: a
 	};
-}, Be = [
+}, Ue = [
 	{
 		name: "email",
 		re: /[\w.+-]+@[\w-]+\.[\w.-]+/
@@ -240,7 +240,7 @@ var Ce = (e) => {
 		name: "creditCard",
 		re: /\b(?:\d[ -]?){13,16}\b/
 	}
-], Ve = (e, t, n) => {
+], We = (e, t, n) => {
 	let r = [], i = /* @__PURE__ */ new Set();
 	for (let [a, o] of Object.entries(n)) {
 		if (!a.startsWith(`${t}.`) || o !== "keep") continue;
@@ -248,7 +248,7 @@ var Ce = (e) => {
 		for (let a of e) {
 			let e = a[n];
 			if (typeof e != "string" || e.length === 0) continue;
-			let o = Be.find((t) => t.re.test(e));
+			let o = Ue.find((t) => t.re.test(e));
 			if (o && !i.has(n)) {
 				i.add(n), r.push({
 					table: t,
@@ -261,9 +261,9 @@ var Ce = (e) => {
 		}
 	}
 	return r;
-}, He = (e, t, n, r, i) => {
+}, Ge = (e, t, n, r, i) => {
 	let a = {};
-	for (let [o, s] of Object.entries(e)) a[o] = U(n[`${t}.${o}`] ?? "keep", {
+	for (let [o, s] of Object.entries(e)) a[o] = B(n[`${t}.${o}`] ?? "keep", {
 		value: s,
 		table: t,
 		column: o,
@@ -271,9 +271,18 @@ var Ce = (e) => {
 		...i?.[o] ? { columnType: i[o] } : {}
 	});
 	return a;
-}, Ue = /* @__PURE__ */ new Map([
+}, Ke = /* @__PURE__ */ new Map([
+	["_voltro_aggregate_meta", "materialized refresh generations computed HERE — a foreign row would claim that the target refreshed its own source data"],
+	["_voltro_aggregate_rows", "materialized rows tied to this deployment’s refresh generation — the target recomputes them from its own data"],
+	["_voltro_timeline", "captured source mutations from this deployment — foreign rows invent local timeline history"],
+	["_voltro_timeline_meta", "capture epoch and source cursor of this database — foreign metadata claims continuity with another database"],
+	["_voltro_timeline_leases", "active capture readers of this database — foreign leases claim readers that do not exist here"],
+	["_voltro_timeline_slots", "bounded capture slots belonging to this source epoch — foreign slots invent local mutation history"],
+	["_voltro_plugin_migrations", "plugin migration steps applied to this database — a foreign ledger would skip steps that the target has not run"],
 	["_voltro_migration_plans", "the schema fingerprint THIS deployment applied — a foreign row makes the next boot refuse"],
 	["_voltro_migrations", "which file-based migrations ran HERE — a foreign row marks unrun migrations as done"],
+	["_voltro_plugin_migrations", "which plugin migration steps ran HERE — a foreign row marks a plugin's unrun steps as done"],
+	["_voltro_schema_owner", "which app owns THIS database — a foreign row hands the target's schema to the source app, so the target's own app refuses to boot on it"],
 	["_voltro_deploys", "the deploy THIS database is in the middle of, with the baseline to undo it from — a foreign row makes the next apply undo a deploy the target never started"],
 	["_voltro_devices", "devices paired with THIS deployment — token hashes; a foreign row makes a device paired elsewhere authenticate here"],
 	["_voltro_seeds", "which seeds ran HERE — a foreign row suppresses seeding the target still needs"],
@@ -318,6 +327,7 @@ var Ce = (e) => {
 	["_voltro_workflow_start_receipts", "the caller-facing identity of a start placed HERE, resolved through this deployment's placements — a foreign receipt names a run the target never accepted"],
 	["_voltro_workflow_control_requests", "cancel/resume traffic issued against executions HERE — a foreign row claims an operation nobody asked the target to perform"],
 	["_voltro_workflow_queued_cancellations", "cancellations waiting on a run that is queued HERE — a foreign row cancels something the target has not queued"],
+	["_voltro_workflow_restart_withdrawals", "withdrawal fences for restart requests issued HERE — a foreign row would block a target restart that its operator never withdrew"],
 	["_voltro_workflow_restart_requests", "restarts pending against this deployment's generations — a foreign row restarts a generation the target never entered"],
 	["_voltro_workflow_retry_requests", "retry intents an operator raised against runs HERE, keyed by their own request id — a foreign row binds the target to an intent nobody raised against it, and lets a later observation read somebody else's execution"],
 	["_voltro_workflow_parent_closures", "which parents are still waiting on children in flight HERE — a foreign row holds a parent open against a child the target is not running"],
@@ -326,8 +336,13 @@ var Ce = (e) => {
 	["_voltro_notification_deliveries", "the notification attempts this deployment made — a foreign row claims a send the target never performed"],
 	["_voltro_notification_held", "notifications waiting to be SENT from here — a foreign row makes the target deliver something queued elsewhere"],
 	["_voltro_webhook_event_stats", "per-deployment delivery counters a backoff decision reads — foreign counts steer the target's retries"],
-	["_voltro_webhook_rate_windows", "the live rate-limit windows this deployment is inside — a foreign window throttles or releases wrongly"]
-]), We = /* @__PURE__ */ new Map([
+	["_voltro_webhook_rate_windows", "the live rate-limit windows this deployment is inside — a foreign window throttles or releases wrongly"],
+	["cluster_runners", "the workflow runners of THIS deployment and their addresses — a foreign row routes shards to a runner that does not exist here"],
+	["cluster_locks", "the shard leases THIS deployment's runners hold — a foreign row holds a shard for nobody, and its work stalls"],
+	["cluster_messages", "workflow messages in flight HERE — a foreign row makes the target run work that was started, and may be running, elsewhere"],
+	["cluster_replies", "replies to those messages — a foreign row answers a request the target never sent"],
+	["cluster_migrations", "which engine migrations ran HERE — a foreign row marks the target's engine tables migrated when they are not"]
+]), qe = /* @__PURE__ */ new Map([
 	["_voltro_agent_threads", "conversations the app's users had — app data"],
 	["_voltro_agent_messages", "the messages in those conversations — app data"],
 	["_voltro_prompts", "prompt definitions the app authored — app data"],
@@ -363,21 +378,21 @@ var Ce = (e) => {
 	["_voltro_comment_threads", "the threads those comments hang on — app data"],
 	["_voltro_comment_reactions", "the reactions the app's users left — app data"],
 	["_voltro_comment_reads", "which comments each user has read — app data, and losing it re-marks everything unread"]
-]), W = (e) => Ue.has(e), Ge = (e) => Ue.get(e), Ke = (e, t) => {
+]), V = (e) => Ke.has(e), Je = (e) => Ke.get(e), Ye = (e, t) => {
 	if (e.length === 0) return;
-	let n = e.map((e) => `    ${e} — ${Ge(e) ?? "describes this deployment"}`);
+	let n = e.map((e) => `    ${e} — ${Je(e) ?? "describes this deployment"}`);
 	return `${t} ${e.length} table(s) that describe a deployment rather than its data:\n${n.join("\n")}\n  A row from another environment is not stale there, it is a false statement about this one.`;
-}, G = class extends c.TaggedError()("BundleError", {
+}, H = class extends c.TaggedError()("BundleError", {
 	reason: c.String,
 	path: c.optional(c.String)
-}) {}, qe = class extends c.TaggedError()("CodecError", {
+}) {}, Xe = class extends c.TaggedError()("CodecError", {
 	table: c.String,
 	reason: c.String
-}) {}, Je = class extends c.TaggedError()("IntegrityError", {
+}) {}, Ze = class extends c.TaggedError()("IntegrityError", {
 	what: c.String,
 	expected: c.String,
 	actual: c.String
-}) {}, Ye = class extends t.TaggedError("CompressionError") {}, Xe = class extends c.TaggedError()("ScopeError", { reason: c.String }) {}, Ze = class extends c.TaggedError()("RowsRefusedError", {
+}) {}, Qe = class extends t.TaggedError("CompressionError") {}, U = class extends c.TaggedError()("ScopeError", { reason: c.String }) {}, $e = class extends c.TaggedError()("RowsRefusedError", {
 	rows: c.Array(c.Struct({
 		table: c.String,
 		id: c.String,
@@ -391,29 +406,29 @@ var Ce = (e) => {
 		refused: c.Number,
 		primary: c.Number
 	}))
-}) {}, Qe = class extends c.TaggedError()("SchemaDriftError", {
+}) {}, et = class extends c.TaggedError()("SchemaDriftError", {
 	bundleFingerprint: c.String,
 	targetFingerprint: c.String,
 	diff: c.Array(c.String)
-}) {}, K = class extends t.TaggedError("NativeToolError") {
+}) {}, W = class extends t.TaggedError("NativeToolError") {
 	get message() {
 		let e = this.stderr?.trim(), t = this.hint?.trim();
 		return `${this.tool}: ${this.reason}${e ? `\n${e}` : ""}${t ? `\n\nhint: ${t}` : ""}`;
 	}
-}, $e = class extends c.TaggedError()("MaskingError", {
+}, tt = class extends c.TaggedError()("MaskingError", {
 	unclassified: c.Array(c.String),
 	invalidActions: c.optional(c.Array(c.String))
-}) {}, et = class extends c.TaggedError()("ImportModeError", {
+}) {}, nt = class extends c.TaggedError()("ImportModeError", {
 	mode: c.String,
 	reason: c.String
-}) {}, tt = class extends c.TaggedError()("CrossDialectError", {
+}) {}, rt = class extends c.TaggedError()("CrossDialectError", {
 	sourceDialect: c.String,
 	targetDialect: c.String,
 	blocking: c.Array(c.String)
-}) {}, nt = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", rt = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
+}) {}, it = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", at = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.references).map((e) => ({
 	col: e.name,
 	refTable: e.references.table
-})), it = (e, t, r) => n.gen(function* () {
+})), ot = (e, t, r) => n.gen(function* () {
 	let i = r.maxDepth ?? 12, a = new Set(r.pinned ?? []), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = /* @__PURE__ */ new Map(), u = (e) => {
 		let t = s.get(e) ?? /* @__PURE__ */ new Set();
 		return s.set(e, t), t;
@@ -431,10 +446,10 @@ var Ce = (e) => {
 			for (let t of n) d(t.refTable, e[t.col]);
 		};
 	}, p = (r, i) => {
-		let a = f(r, nt(t, r), rt(t, r));
-		return l.runForEach(w(e, {
+		let a = f(r, it(t, r), at(t, r));
+		return l.runForEach(C(e, {
 			table: r,
-			pk: nt(t, r),
+			pk: it(t, r),
 			...i === void 0 ? {} : { where: i }
 		}), (e) => n.sync(() => a(e)));
 	}, m = n.gen(function* () {
@@ -443,7 +458,7 @@ var Ce = (e) => {
 			c.clear();
 			for (let [n, r] of e) {
 				let e = [...r].filter((e) => !s.get(n)?.has(e));
-				e.length !== 0 && (yield* p(n, b(nt(t, n), e)));
+				e.length !== 0 && (yield* p(n, b(it(t, n), e)));
 			}
 		}
 	});
@@ -466,24 +481,24 @@ var Ce = (e) => {
 		}
 	}
 	return o;
-}), at = (e, t) => ({
+}), st = (e, t) => ({
 	tables: [...e.keys()],
 	predicateFor: (n) => {
 		let r = e.get(n);
-		return r ? b(nt(t, n), [...r]) : void 0;
+		return r ? b(it(t, n), [...r]) : void 0;
 	}
-}), ot = "tenantId", st = (e, t, r) => n.gen(function* () {
+}), ct = "tenantId", lt = (e, t, r) => n.gen(function* () {
 	let i = t.tables.map((e) => e.name), a = new Map(t.tables.map((e) => [e.name, e]));
 	if (e.kind === "all") {
 		let t = new Set(e.exclude ?? []);
 		return {
-			tables: i.filter((e) => !W(e) && !t.has(e)),
+			tables: i.filter((e) => !V(e) && !t.has(e)),
 			predicateFor: () => void 0
 		};
 	}
 	if (e.kind === "tables") {
 		let t = e.tables ?? [], r = new Set(i), a = t.filter((e) => !r.has(e));
-		if (a.length > 0) return yield* n.fail(new Xe({ reason: `scope { kind: 'tables' } names ${a.length} table(s) that are not in the schema: ${a.join(", ")}. Refusing to write a bundle that silently omits them. Known tables: ${i.length}.` }));
+		if (a.length > 0) return yield* n.fail(new U({ reason: `scope { kind: 'tables' } names ${a.length} table(s) that are not in the schema: ${a.join(", ")}. Refusing to write a bundle that silently omits them. Known tables: ${i.length}.` }));
 		let o = new Set(t);
 		return {
 			tables: i.filter((e) => o.has(e)),
@@ -491,30 +506,30 @@ var Ce = (e) => {
 		};
 	}
 	let o = e.tenantId;
-	if (o === void 0 || o === "") return yield* n.fail(new Xe({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
-	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === ot) ?? !1);
-	if (s.length === 0) return yield* n.fail(new Xe({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${ot}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
-	let c = yield* it(r.store, t, {
-		seeds: Object.fromEntries(s.map((e) => [e, _(ot, o)])),
+	if (o === void 0 || o === "") return yield* n.fail(new U({ reason: "scope { kind: 'tenant' } requires a tenantId — pass --tenant <id> (CLI) or scope.tenantId (API). Refusing to fall back to an unfiltered export." }));
+	let s = r.tenantTables ? r.tenantTables.filter((e) => a.has(e)) : i.filter((e) => a.get(e)?.columns.some((e) => e.name === ct) ?? !1);
+	if (s.length === 0) return yield* n.fail(new U({ reason: r.tenantTables ? "tenant scope: none of the provided tenantTables exist in the schema — nothing to filter." : `tenant scope: no table carries a '${ct}' column — nothing to filter. A tenant export of a schema without tenant-scoped tables would be the full database; refusing.` }));
+	let c = yield* ot(r.store, t, {
+		seeds: Object.fromEntries(s.map((e) => [e, _(ct, o)])),
 		pinned: s,
 		children: { roots: s }
 	}), l = [...c.entries()].filter(([, e]) => e.size > 0).map(([e]) => e), u = new Set(s);
 	return {
 		tables: [...s, ...l],
-		predicateFor: (e) => u.has(e) ? _(ot, o) : c.has(e) ? b(nt(t, e), [...c.get(e)]) : void 0
+		predicateFor: (e) => u.has(e) ? _(ct, o) : c.has(e) ? b(it(t, e), [...c.get(e)]) : void 0
 	};
-}), ct = (e, t) => ({
+}), ut = (e, t) => ({
 	list: t,
-	open: (t) => j(e, t)
-}), lt = (e) => ({
-	write: (t, n, r) => he(e, t, n, r),
+	open: (t) => _e(e, t)
+}), dt = (e) => ({
+	write: (t, n, r) => k(e, t, n, r),
 	has: (t) => e.head(t).pipe(n.map((e) => e !== null))
-}), ut = (e, t) => n.tryPromise({
+}), ft = (e, t) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), r = await import("node:fs/promises"), { createHash: i, randomUUID: a } = await import("node:crypto"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = await import("node:path"), l = c.join(t, `.tmp-${a()}`), u = i("sha256"), d = 0, f = new s({ transform(e, t, n) {
 			u.update(e), d += e.length, n(null, e);
 		} });
-		await o(await M(e.stream), f, n(l));
+		await o(await A(e.stream), f, n(l));
 		let p = u.digest("hex"), m = c.join(t, p);
 		try {
 			await r.access(m), await r.rm(l, { force: !0 });
@@ -527,30 +542,30 @@ var Ce = (e) => {
 			contentType: e.contentType
 		};
 	},
-	catch: (e) => new G({
+	catch: (e) => new H({
 		reason: `asset write failed: ${String(e?.message ?? e)}`,
 		path: t
 	})
-}), dt = (e, t, r) => n.gen(function* () {
-	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), c = o("sha256"), u = me("bundle", () => a(s)).pipe(l.tap((e) => n.sync(() => c.update(e))));
+}), pt = (e, t, r) => n.gen(function* () {
+	let i = yield* n.promise(() => import("node:path")), { createReadStream: a } = yield* n.promise(() => import("node:fs")), { createHash: o } = yield* n.promise(() => import("node:crypto")), s = i.join(t, r.sha256), c = o("sha256"), u = ge("bundle", () => a(s)).pipe(l.tap((e) => n.sync(() => c.update(e))));
 	yield* e.write(r.key, u, {
 		contentType: r.contentType,
 		totalSize: r.size
 	});
 	let d = c.digest("hex");
-	if (d !== r.sha256) return yield* n.fail(new Je({
+	if (d !== r.sha256) return yield* n.fail(new Ze({
 		what: `asset ${r.key}`,
 		expected: r.sha256,
 		actual: d
 	}));
-}), ft = {
+}), mt = {
 	done: () => !1,
 	mark: () => n.void
-}, pt = (e) => typeof e == "object" && !!e && e.status === 404, mt = (e) => n.gen(function* () {
-	let t = e.progress ?? ft, r = 0, i = 0, a = 0, o = 0, s = /* @__PURE__ */ new Set(), c = /* @__PURE__ */ new Set(), u = [];
-	return yield* l.runForEach(e.source.list(), (l) => (a++, t.done(l.key) || c.has(l.key) ? n.void : (c.add(l.key), e.source.open(l.key).pipe(n.map((e) => e), n.catchIf(pt, () => n.sync(() => {
+}, ht = (e) => typeof e == "object" && !!e && e.status === 404, gt = (e) => n.gen(function* () {
+	let t = e.progress ?? mt, r = 0, i = 0, a = 0, o = 0, s = /* @__PURE__ */ new Set(), c = /* @__PURE__ */ new Set(), u = [];
+	return yield* l.runForEach(e.source.list(), (l) => (a++, t.done(l.key) || c.has(l.key) ? n.void : (c.add(l.key), e.source.open(l.key).pipe(n.map((e) => e), n.catchIf(ht, () => n.sync(() => {
 		u.push(l.key);
-	})), n.flatMap((a) => a === void 0 ? n.void : ut(a, e.assetsDir).pipe(n.flatMap((e) => {
+	})), n.flatMap((a) => a === void 0 ? n.void : ft(a, e.assetsDir).pipe(n.flatMap((e) => {
 		let n = {
 			key: l.key,
 			sha256: e.sha256,
@@ -558,7 +573,7 @@ var Ce = (e) => {
 			contentType: e.contentType
 		};
 		return r++, i += e.size, s.has(e.sha256) || (s.add(e.sha256), o += e.size), t.mark(l.key, n);
-	}))))))).pipe(n.mapError((e) => e instanceof G ? e : new G({ reason: `asset export failed: ${String(e)}` }))), {
+	}))))))).pipe(n.mapError((e) => e instanceof H ? e : new H({ reason: `asset export failed: ${String(e)}` }))), {
 		count: r,
 		totalBytes: i,
 		references: a,
@@ -566,18 +581,18 @@ var Ce = (e) => {
 		objectBytes: o,
 		missing: u
 	};
-}), ht = (e) => me("bundle", () => de(e)).pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.map((e) => JSON.parse(e)), l.mapError((t) => t instanceof G ? t : new G({
+}), _t = (e) => ge("bundle", () => fe(e)).pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.map((e) => JSON.parse(e)), l.mapError((t) => t instanceof H ? t : new H({
 	reason: `asset index unreadable: ${String(t)}`,
 	path: e
-}))), gt = (e) => n.gen(function* () {
-	let t = e.progress ?? ft, r = 0, i = /* @__PURE__ */ new Set(), a = /* @__PURE__ */ new Set();
-	return yield* l.runForEach(ht(e.indexPath), (o) => t.done(o.key) || a.has(o.key) ? n.void : (a.add(o.key), dt(e.sink, e.assetsDir, o)).pipe(n.andThen(n.sync(() => {
+}))), vt = (e) => n.gen(function* () {
+	let t = e.progress ?? mt, r = 0, i = /* @__PURE__ */ new Set(), a = /* @__PURE__ */ new Set();
+	return yield* l.runForEach(_t(e.indexPath), (o) => t.done(o.key) || a.has(o.key) ? n.void : (a.add(o.key), pt(e.sink, e.assetsDir, o)).pipe(n.andThen(n.sync(() => {
 		r++, i.add(o.sha256);
 	})), n.andThen(t.mark(o.key, o)))), {
 		count: r,
 		objects: i.size
 	};
-}), _t = () => typeof N.createZstdCompress == "function", vt = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : _t() ? "zstd" : "gzip", yt = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", bt = (e) => e === "zstd" ? N.createZstdCompress() : e === "gzip" ? N.createGzip() : new P(), xt = (e) => e === "zstd" ? N.createZstdDecompress() : e === "gzip" ? N.createGunzip() : new P(), St = 1, Ct = c.Struct({
+}), yt = () => typeof j.createZstdCompress == "function", bt = (e) => e === "none" ? "none" : e === "gzip" ? "gzip" : yt() ? "zstd" : "gzip", xt = (e) => e === "zstd" ? ".zst" : e === "gzip" ? ".gz" : "", St = (e) => e === "zstd" ? j.createZstdCompress() : e === "gzip" ? j.createGzip() : new M(), Ct = (e) => e === "zstd" ? j.createZstdDecompress() : e === "gzip" ? j.createGunzip() : new M(), wt = 1, Tt = c.Struct({
 	name: c.String,
 	file: c.String,
 	rowCount: c.Number,
@@ -587,12 +602,12 @@ var Ce = (e) => {
 		value: c.String
 	}),
 	primaryKey: c.String
-}), wt = c.Struct({
+}), Et = c.Struct({
 	kind: c.Literal("all", "tenant", "tables"),
 	tenantId: c.optional(c.String),
 	tables: c.optional(c.Array(c.String)),
 	exclude: c.optional(c.Array(c.String))
-}), Tt = c.Struct({
+}), Dt = c.Struct({
 	count: c.Number,
 	totalBytes: c.Number,
 	index: c.optional(c.String)
@@ -603,23 +618,23 @@ c.Struct({
 	size: c.Number,
 	contentType: c.String
 });
-var Et = c.Struct({
+var Ot = c.Struct({
 	formatVersion: c.Number,
 	createdAt: c.String,
 	source: c.Struct({
 		dialect: c.String,
 		schemaFingerprint: c.String
 	}),
-	scope: wt,
+	scope: Et,
 	consistency: c.Literal("live", "snapshot"),
 	compression: c.Literal("zstd", "gzip", "none"),
-	tables: c.Array(Ct),
-	assets: Tt,
+	tables: c.Array(Tt),
+	assets: Dt,
 	masking: c.optional(c.Struct({
 		policyId: c.optional(c.String),
 		transformed: c.Array(c.String)
 	}))
-}), Dt = c.encodeSync(c.parseJson(Et)), Ot = c.decodeUnknownSync(c.parseJson(Et)), kt = "manifest.json", At = "README.md", jt = "data", Mt = "assets", Nt = "assets/index.ndjson", Pt = ".ledger.json", Ft = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", It = (e, t) => {
+}), kt = c.encodeSync(c.parseJson(Ot)), At = c.decodeUnknownSync(c.parseJson(Ot)), jt = "manifest.json", Mt = "README.md", Nt = "data", Pt = "assets", Ft = "assets/index.ndjson", It = ".ledger.json", Lt = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", Rt = (e, t) => {
 	let n = e.tables.reduce((e, t) => e + t.rowCount, 0), r = e.masking ? `✅ **Masked at the source** — ${e.masking.transformed.length} column(s) transformed${e.masking.policyId ? ` (policy \`${e.masking.policyId}\`)` : ""}. Personal data was replaced with realistic, referentially-consistent fakes before any byte was written.` : "⚠️ **NOT masked — this bundle contains REAL data (PII included).** Treat it as production data: do not copy it into a lower environment or share it without review. To produce a safe copy, re-export under a masking profile (`--profile`).", i = e.masking && e.masking.transformed.length > 0 ? `\n\nMasked columns: ${e.masking.transformed.map((e) => `\`${e}\``).join(", ")}.` : "", a = e.assets.count > 0 ? `${e.assets.count} object(s), ${e.assets.totalBytes} bytes` : "none", o = e.tables.map((e) => `| \`${e.name}\` | ${e.rowCount} |`).join("\n");
 	return `# Voltro data export
 
@@ -633,7 +648,7 @@ The machine-readable manifest is \`manifest.json\`; this file is a human summary
 | **Format version** | ${e.formatVersion} |
 | **Consistency** | ${e.consistency} |
 | **Compression** | ${e.compression} |
-| **Scope** | ${Ft(e.scope)} |
+| **Scope** | ${Lt(e.scope)} |
 | **Tables** | ${e.tables.length} |
 | **Rows (total)** | ${n} |
 | **Assets** | ${a} |
@@ -658,39 +673,39 @@ voltro data import <this-directory>
 voltro data import <this-directory> --target api --api-url <url> --token <secret>
 \`\`\`
 `;
-}, Lt = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), Rt = a.exponential({
+}, zt = i.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), Bt = a.exponential({
 	start: .01,
 	factor: 2,
 	count: 16
-}), zt = i.histogram("voltro_data_transfer_table_seconds", Rt, "Per-table export/import duration in seconds, tagged by phase."), q = (e, t) => {
+}), Vt = i.histogram("voltro_data_transfer_table_seconds", Bt, "Per-table export/import duration in seconds, tagged by phase."), G = (e, t) => {
 	if (e) try {
 		e(t);
 	} catch {}
-}, Bt = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(zt.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), Lt.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
+}, Ht = (e, t, r, a, o, s) => n.Do.pipe(n.bind("start", () => n.clockWith((e) => e.currentTimeMillis)), n.bind("result", () => s), n.tap(({ start: r, result: a }) => n.clockWith((e) => e.currentTimeMillis).pipe(n.flatMap((s) => n.zipRight(Vt.pipe(i.tagged("phase", e), i.update((s - r) / 1e3)), zt.pipe(i.tagged("phase", e), i.tagged("table", t), i.update(o(a))))))), n.map(({ result: e }) => e), n.withSpan(`data-transfer.${e}.table`, { attributes: {
 	table: t,
 	index: r,
 	tableCount: a,
 	phase: e
-} })), Vt = () => ({
+} })), Ut = () => ({
 	tables: {},
 	assets: {}
-}), Ht = (e) => n.tryPromise(async () => {
+}), Wt = (e) => n.tryPromise(async () => {
 	let t = await (await import("node:fs/promises")).readFile(e, "utf8");
 	return JSON.parse(t);
-}).pipe(n.orElseSucceed(Vt)), J = (e, t) => n.tryPromise({
+}).pipe(n.orElseSucceed(Ut)), K = (e, t) => n.tryPromise({
 	try: async () => {
 		let n = await import("node:fs/promises"), { randomUUID: r } = await import("node:crypto"), i = `${e}.tmp-${r()}`;
 		await n.writeFile(i, JSON.stringify(t)), await n.rename(i, e);
 	},
-	catch: (t) => new G({
+	catch: (t) => new H({
 		reason: `ledger write failed: ${String(t?.message ?? t)}`,
 		path: e
 	})
-}), Ut = (e, t) => t in e.tables, Wt = (e, t) => t in e.assets, Gt = /* @__PURE__ */ new Set([
+}), Gt = (e, t) => t in e.tables, Kt = (e, t) => t in e.assets, qt = /* @__PURE__ */ new Set([
 	"json",
 	"array",
 	"vector"
-]), Kt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", qt = (e) => Buffer.from(e).toString("base64"), Jt = (e) => new Uint8Array(Buffer.from(e, "base64")), Yt = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), Xt = (e, t) => e == null ? null : t !== void 0 && Gt.has(t) ? e : t === "bytes" ? qt(e) : t === "timestamp" || t === "date" ? Yt(e) : typeof e == "bigint" ? {
+]), Jt = (e) => typeof e == "object" && !!e && !Array.isArray(e) && typeof e.$v == "string", Yt = (e) => Buffer.from(e).toString("base64"), Xt = (e) => new Uint8Array(Buffer.from(e, "base64")), Zt = (e) => e instanceof Date ? e.toISOString() : typeof e == "number" ? new Date(e).toISOString() : String(e), Qt = (e, t) => e == null ? null : t !== void 0 && qt.has(t) ? e : t === "bytes" ? Yt(e) : t === "timestamp" || t === "date" ? Zt(e) : typeof e == "bigint" ? {
 	$v: "bigint",
 	d: e.toString()
 } : typeof e == "number" && !Number.isFinite(e) ? {
@@ -701,30 +716,30 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	d: e.toISOString()
 } : e instanceof Uint8Array ? {
 	$v: "bytes",
-	d: qt(e)
-} : e, Zt = (e) => {
+	d: Yt(e)
+} : e, $t = (e) => {
 	switch (e.$v) {
 		case "bigint": return BigInt(e.d);
 		case "number": return Number(e.d);
 		case "date": return new Date(e.d);
-		case "bytes": return Jt(e.d);
+		case "bytes": return Xt(e.d);
 		default: return e;
 	}
-}, Qt = (e, t) => e == null ? null : t !== void 0 && Gt.has(t) ? e : Kt(e) ? Zt(e) : t === "bytes" ? Jt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, $t = (e, t) => {
+}, en = (e, t) => e == null ? null : t !== void 0 && qt.has(t) ? e : Jt(e) ? $t(e) : t === "bytes" ? Xt(e) : t === "timestamp" || t === "date" ? new Date(e) : e, tn = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = Xt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = Qt(i, t[r]);
 	return n;
-}, en = (e, t) => {
+}, nn = (e, t) => {
 	let n = {};
-	for (let [r, i] of Object.entries(e)) n[r] = Qt(i, t[r]);
+	for (let [r, i] of Object.entries(e)) n[r] = en(i, t[r]);
 	return n;
-}, tn = new TextEncoder(), nn = (e, t) => e.pipe(l.map((e) => tn.encode(`${JSON.stringify($t(e, t))}\n`))), rn = (e, t, r) => e.pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.mapEffect((e) => n.try({
-	try: () => en(JSON.parse(e), r),
-	catch: (e) => new qe({
+}, rn = new TextEncoder(), an = (e, t) => e.pipe(l.map((e) => rn.encode(`${JSON.stringify(tn(e, t))}\n`))), on = (e, t, r) => e.pipe(l.decodeText(), l.splitLines, l.filter((e) => e.trim().length > 0), l.mapEffect((e) => n.try({
+	try: () => nn(JSON.parse(e), r),
+	catch: (e) => new Xe({
 		table: t,
 		reason: String(e?.message ?? e)
 	})
-}))), an = (e, t) => {
+}))), sn = (e, t) => {
 	let n = new Set(e), r = /* @__PURE__ */ new Map();
 	for (let e of t.tables) {
 		if (!n.has(e.name)) continue;
@@ -744,39 +759,39 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	};
 	for (let t of e) n.has(t) && s(t);
 	return i;
-}, Y = (e) => {
+}, q = (e) => {
 	let t = e, n = [];
 	typeof t?._tag == "string" && t._tag !== "" && n.push(t._tag);
 	let r = typeof t?.message == "string" ? t.message.trim() : "";
-	if (r === "" ? t?.cause !== void 0 && t.cause !== null && n.push(Y(t.cause)) : n.push(r), n.length === 0) {
+	if (r === "" ? t?.cause !== void 0 && t.cause !== null && n.push(q(t.cause)) : n.push(r), n.length === 0) {
 		let t = String(e ?? "").trim();
-		return t === "" || t === "[object Object]" ? on(e) : t;
+		return t === "" || t === "[object Object]" ? cn(e) : t;
 	}
 	return n.join(": ");
-}, on = (e) => {
+}, cn = (e) => {
 	try {
 		let t = JSON.stringify(e);
 		return t === void 0 || t === "{}" ? "unknown error (no message, cause or tag)" : t;
 	} catch {
 		return "unknown error (not serialisable)";
 	}
-}, sn = (e, t) => {
+}, ln = (e, t) => {
 	let n = e.tables.find((e) => e.name === t), r = {};
 	for (let e of n?.columns ?? []) e.generatedAs === void 0 && (r[e.name] = e.type);
 	return r;
-}, cn = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), ln = (e, t) => {
+}, un = (e, t) => (e.tables.find((e) => e.name === t)?.columns ?? []).filter((e) => e.generatedAs !== void 0).map((e) => e.name), dn = (e, t) => {
 	if (t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, un = (e, t) => {
+}, fn = (e, t) => {
 	let n = e.tables.find((e) => e.name === t);
 	if (n === void 0) return { refusal: `${t}: not in the schema snapshot, so its primary key is unknown.` };
 	let r = n.columns.find((e) => e.type === "id");
 	if (r !== void 0) return { column: r.name };
 	let i = n.indexes.find((e) => e.name === `${t}_pkey`)?.columns ?? n.primaryKey ?? [];
 	return i.length === 1 ? { column: i[0] } : i.length > 1 ? { refusal: `${t}: composite primary key (${i.join(", ")}). Keyset export orders by ONE column; ordering by the first alone would split equal values across pages and drop or duplicate rows. Exclude this table from the scope, or give it a single-column key.` } : { refusal: `${t}: no primary key, so there is no stable order to paginate by. A keyset export would return rows in an order the database may change between pages. Exclude this table from the scope.` };
-}, dn = (e, t, r) => n.tryPromise({
+}, pn = (e, t, r) => n.tryPromise({
 	try: async () => {
 		let { createWriteStream: n } = await import("node:fs"), i = await import("node:fs/promises"), { createHash: a, randomUUID: o } = await import("node:crypto"), { pipeline: s } = await import("node:stream/promises"), { Readable: c, Transform: u } = await import("node:stream"), d = a("sha256"), f = 0, p = new u({ transform(e, t, n) {
 			d.update(e);
@@ -785,7 +800,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			n(null, e);
 		} }), m = c.fromWeb(l.toReadableStream(e)), h = `${t}.tmp-${o()}`;
 		try {
-			await s(m, p, bt(r), n(h)), await i.rename(h, t);
+			await s(m, p, St(r), n(h)), await i.rename(h, t);
 		} catch (e) {
 			throw await i.rm(h, { force: !0 }).catch(() => {}), e;
 		}
@@ -794,27 +809,27 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			checksum: d.digest("hex")
 		};
 	},
-	catch: (e) => new G({
-		reason: `write table failed: ${Y(e)}`,
+	catch: (e) => new H({
+		reason: `write table failed: ${q(e)}`,
 		path: t
 	})
-}), fn = (e, t) => n.tryPromise({
+}), mn = (e, t) => n.tryPromise({
 	try: async () => {
 		await (await import("node:fs/promises")).appendFile(e, `${t}\n`);
 	},
-	catch: (t) => new G({
-		reason: `append failed: ${Y(t)}`,
+	catch: (t) => new H({
+		reason: `append failed: ${q(t)}`,
 		path: e
 	})
-}), pn = (e, t) => n.gen(function* () {
+}), hn = (e, t) => n.gen(function* () {
 	let r = [], i = t.ordered.length;
 	for (let a = 0; a < t.ordered.length; a++) {
-		let o = t.ordered[a], s = sn(t.snapshot, o), c = un(t.snapshot, o);
-		if ("refusal" in c) return yield* n.fail(new Xe({ reason: `export: ${c.refusal}` }));
-		let u = c.column, d = `${jt}/${o}.ndjson${yt(t.compression)}`;
-		if (Ut(t.ledger, o)) {
+		let o = t.ordered[a], s = ln(t.snapshot, o), c = fn(t.snapshot, o);
+		if ("refusal" in c) return yield* n.fail(new U({ reason: `export: ${c.refusal}` }));
+		let u = c.column, d = `${Nt}/${o}.ndjson${xt(t.compression)}`;
+		if (Gt(t.ledger, o)) {
 			let e = t.ledger.tables[o];
-			q(t.onProgress, {
+			G(t.onProgress, {
 				phase: "export",
 				table: o,
 				index: a,
@@ -832,7 +847,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			});
 			continue;
 		}
-		q(t.onProgress, {
+		G(t.onProgress, {
 			phase: "export",
 			table: o,
 			index: a,
@@ -840,17 +855,17 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			event: "start",
 			rowsDone: 0
 		});
-		let f = t.resolved.predicateFor(o), p = w(e, {
+		let f = t.resolved.predicateFor(o), p = C(e, {
 			table: o,
 			pk: u,
 			chunkSize: t.chunkSize,
 			retry: t.retry,
 			...f === void 0 ? {} : { where: f }
-		}), m = cn(t.snapshot, o), h = m.length === 0 ? p : p.pipe(l.map((e) => ln(e, m))), g = t.mask ? h.pipe(l.map((e) => He(e, o, t.mask.actions, t.mask.seed, s))) : h, { rowCount: _, checksum: v } = yield* Bt("export", o, a, i, (e) => e.rowCount, dn(nn(g, s), t.bundleFile(d), t.compression));
+		}), m = un(t.snapshot, o), h = m.length === 0 ? p : p.pipe(l.map((e) => dn(e, m))), g = t.mask ? h.pipe(l.map((e) => Ge(e, o, t.mask.actions, t.mask.seed, s))) : h, { rowCount: _, checksum: v } = yield* Ht("export", o, a, i, (e) => e.rowCount, pn(an(g, s), t.bundleFile(d), t.compression));
 		t.ledger.tables[o] = {
 			rowCount: _,
 			checksum: v
-		}, yield* J(t.ledgerPath, t.ledger), q(t.onProgress, {
+		}, yield* K(t.ledgerPath, t.ledger), G(t.onProgress, {
 			phase: "export",
 			table: o,
 			index: a,
@@ -868,43 +883,43 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return r;
-}), mn = (e) => ({
+}), gn = (e) => ({
 	_tag: "RawSqlFragment",
 	strings: [e],
 	values: []
-}), hn = (t, i, a) => n.tryPromise({
+}), _n = (t, i, a) => n.tryPromise({
 	try: () => t.transactional(async (t) => {
-		if (t.raw) for (let e of Ce(i)) await t.raw(mn(e));
+		if (t.raw) for (let e of Ee(i)) await t.raw(gn(e));
 		let o = await n.runPromiseExit(a(t));
 		if (r.isFailure(o)) throw Error(e.pretty(o.cause));
 		return o.value;
 	}),
-	catch: (e) => e instanceof G ? e : new G({ reason: `snapshot export failed: ${Y(e)}` })
-}), gn = (e) => n.gen(function* () {
-	let t = e.scope ?? { kind: "all" }, r = vt(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, o = s.exponential("50 millis").pipe(s.jittered, s.intersect(s.recurs(a))), c = yield* n.promise(() => import("node:path")), l = (t) => c.join(e.outDir, t);
+	catch: (e) => e instanceof H ? e : new H({ reason: `snapshot export failed: ${q(e)}` })
+}), vn = (e) => n.gen(function* () {
+	let t = e.scope ?? { kind: "all" }, r = bt(e.compression), i = e.chunkSize ?? 1e3, a = e.retryTimes ?? 5, o = s.exponential("50 millis").pipe(s.jittered, s.intersect(s.recurs(a))), c = yield* n.promise(() => import("node:path")), l = (t) => c.join(e.outDir, t);
 	yield* n.tryPromise({
 		try: async () => {
 			let t = await import("node:fs/promises");
-			await t.mkdir(l(jt), { recursive: !0 }), e.assets && await t.mkdir(l(Mt), { recursive: !0 });
+			await t.mkdir(l(Nt), { recursive: !0 }), e.assets && await t.mkdir(l(Pt), { recursive: !0 });
 		},
-		catch: (t) => new G({
-			reason: `mkdir failed: ${Y(t)}`,
+		catch: (t) => new H({
+			reason: `mkdir failed: ${q(t)}`,
 			path: e.outDir
 		})
 	});
-	let u = l(Pt), d = yield* Ht(u), f = e.subset ? at(yield* it(e.store, e.snapshot, e.subset), e.snapshot) : yield* st(t, e.snapshot, {
+	let u = l(It), d = yield* Wt(u), f = e.subset ? st(yield* ot(e.store, e.snapshot, e.subset), e.snapshot) : yield* lt(t, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), p = an(f.tables, e.snapshot), m = e.consistency ?? "live", h, g;
+	}), p = sn(f.tables, e.snapshot), m = e.consistency ?? "live", h, g;
 	if (e.masking) {
-		let t = e.classification ?? Te(e.snapshot), r = ze(p.map((t) => ({
+		let t = e.classification ?? Oe(e.snapshot), r = He(p.map((t) => ({
 			name: t,
 			columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 				name: e.name,
 				type: e.type
 			}))
 		})), t, e.masking);
-		if (r.unclassified.length > 0 || r.invalid.length > 0) return yield* n.fail(new $e({
+		if (r.unclassified.length > 0 || r.invalid.length > 0) return yield* n.fail(new tt({
 			unclassified: r.unclassified,
 			...r.invalid.length > 0 ? { invalidActions: r.invalid.map((e) => `${e.column}: ${JSON.stringify(e.action)}`) } : {}
 		}));
@@ -930,14 +945,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		bundleFile: l,
 		...g ? { mask: g } : {},
 		...e.onProgress ? { onProgress: e.onProgress } : {}
-	}, v = m === "snapshot" ? yield* hn(e.store, e.dialect, (e) => pn(e, _)) : yield* pn(e.store, _), y = 0, b = 0;
+	}, v = m === "snapshot" ? yield* _n(e.store, e.dialect, (e) => hn(e, _)) : yield* hn(e.store, _), y = 0, b = 0;
 	if (e.assets) {
-		let t = l(Nt), r = yield* mt({
+		let t = l(Ft), r = yield* gt({
 			source: e.assets,
-			assetsDir: l(Mt),
+			assetsDir: l(Pt),
 			progress: {
 				done: (e) => e in d.assets,
-				mark: (e, r) => (d.assets[e] = !0, fn(t, JSON.stringify(r)).pipe(n.andThen(J(u, d))))
+				mark: (e, r) => (d.assets[e] = !0, mn(t, JSON.stringify(r)).pipe(n.andThen(K(u, d))))
 			}
 		});
 		y = r.count, b = r.totalBytes, r.missing.length > 0 && (yield* n.logWarning(`${r.missing.length} of ${r.missing.length + r.count} blob reference(s) point at objects the storage provider does not have; they are NOT in this bundle and no import can bring them back. e.g. ${r.missing.slice(0, 3).map((e) => `'${e}'`).join(", ")}` + (r.missing.length > 3 ? `, and ${r.missing.length - 3} more` : "")));
@@ -947,7 +962,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		createdAt: e.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
 		source: {
 			dialect: e.dialect,
-			schemaFingerprint: T(e.snapshot)
+			schemaFingerprint: w(e.snapshot)
 		},
 		scope: t,
 		consistency: m,
@@ -956,7 +971,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		assets: y > 0 ? {
 			count: y,
 			totalBytes: b,
-			index: Nt
+			index: Ft
 		} : {
 			count: 0,
 			totalBytes: 0
@@ -965,23 +980,23 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	};
 	return yield* n.tryPromise({
 		try: async () => {
-			await (await import("node:fs/promises")).writeFile(l(kt), Dt(x));
+			await (await import("node:fs/promises")).writeFile(l(jt), kt(x));
 		},
-		catch: (e) => new G({
-			reason: `manifest write failed: ${Y(e)}`,
-			path: kt
+		catch: (e) => new H({
+			reason: `manifest write failed: ${q(e)}`,
+			path: jt
 		})
 	}), yield* n.tryPromise({
 		try: async () => {
 			let e = await import("node:fs/promises"), t = await import("node:os");
-			await e.writeFile(l(At), It(x, { hostname: t.hostname() }));
+			await e.writeFile(l(Mt), Rt(x, { hostname: t.hostname() }));
 		},
-		catch: (e) => new G({
-			reason: `readme write failed: ${Y(e)}`,
-			path: At
+		catch: (e) => new H({
+			reason: `readme write failed: ${q(e)}`,
+			path: Mt
 		})
 	}), x;
-}), _n = (e, t) => {
+}), yn = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) if (!n.has(t.name)) for (let e of t.columns) {
 		let i = e.references?.table;
@@ -992,7 +1007,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return r;
-}, vn = (e) => {
+}, bn = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) t.set(n.from, [...t.get(n.from) ?? [], n]);
 	let n = [...t.entries()].map(([e, t]) => {
@@ -1000,7 +1015,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		return `  ${e} (${n} row${n === 1 ? "" : "s"}): ${r}`;
 	});
 	return `replace cannot empty this target: ${t.size} table(s) OUTSIDE the bundle hold rows that reference tables INSIDE it. Emptying the bundle's tables would leave those rows pointing at nothing, and the bundle cannot restore them.\n${n.join("\n")}\nNothing has been deleted. Either re-export with a scope that includes those tables, or use --mode upsert if those rows are meant to survive.`;
-}, yn = (e) => {
+}, xn = (e) => {
 	switch (e) {
 		case "id":
 		case "text":
@@ -1019,12 +1034,12 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "raw": return "raw";
 		default: return "string";
 	}
-}, bn = {
+}, Sn = {
 	vector: /* @__PURE__ */ new Set(["postgres"]),
 	array: /* @__PURE__ */ new Set(["postgres"]),
 	interval: /* @__PURE__ */ new Set(["postgres"])
-}, xn = (e, t, n, r) => {
-	let i = yn(n);
+}, Cn = (e, t, n, r) => {
+	let i = xn(n);
 	if (i === "raw") return {
 		table: e,
 		column: t,
@@ -1032,7 +1047,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `raw() is verbatim source-dialect SQL — it cannot be assumed valid on ${r}`
 	};
-	let a = bn[i];
+	let a = Sn[i];
 	return !a || a.has(r) ? null : i === "array" || i === "interval" ? {
 		table: e,
 		column: t,
@@ -1046,15 +1061,15 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		severity: "block",
 		reason: `${i} columns require a ${[...a].join("/")} target; ${r} has no compatible column type`
 	};
-}, Sn = (e, t, n) => {
+}, wn = (e, t, n) => {
 	if (t === n) return [];
 	let r = [];
 	for (let t of e) for (let [e, i] of Object.entries(t.columnTypes)) {
-		let a = xn(t.name, e, i, n);
+		let a = Cn(t.name, e, i, n);
 		a && r.push(a);
 	}
 	return r;
-}, Cn = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, wn = (e) => {
+}, Tn = (e) => `[${e.severity}] ${e.table}.${e.column} (${e.type}): ${e.reason}`, En = (e) => {
 	let t = e.constraint ?? e.column, n = t === void 0 ? "" : ` ${t}`;
 	switch (e.kind) {
 		case "foreignKey": return `foreign key${n}: the referenced row does not exist (import it first, or check the bundle's table order)`;
@@ -1063,36 +1078,36 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "notNull": return `not-null constraint${n}: the column requires a value`;
 		case "check": return `check constraint${n}: the row does not satisfy it`;
 	}
-}, Tn = (e) => {
+}, Dn = (e) => {
 	let t = [e.dbCode, e.dbErrno ?? e.dbNumber].filter((e) => e !== void 0).map(String);
 	return t.length > 0 ? t.join("/") : void 0;
-}, En = "Failed to execute statement", Dn = (e) => {
+}, On = "Failed to execute statement", kn = (e) => {
 	let t = (e.split("\n", 1)[0] ?? "").trim();
 	for (; t.startsWith("(FiberFailure)");) t = t.slice(14).trim();
-	return t === `SqlError: ${En}` ? En : t;
-}, On = (e) => {
+	return t === `SqlError: ${On}` ? On : t;
+}, An = (e) => {
 	let t = String(e?.stack ?? e), n = t.length <= 1200 ? t : `${t.slice(0, 1200)}…`, r = (e, t) => ({
 		reason: e.length <= 300 ? e : `${e.slice(0, 300)}…`,
 		unclassified: t,
 		raw: n
-	}), i = v(e), a = m(i), o = Tn(i), s = o === void 0 ? "" : ` [${o}]`;
-	if (a !== void 0) return r(`${wn(a)}${s}`, !1);
-	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, l = e?.message, u = Dn(typeof l == "string" && l.length > 0 ? l : String(e)), d = c !== void 0 && c !== u && !c.startsWith("SqlError:") ? c : u, f = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, p = f !== void 0 && /[←‖]/.test(f) ? ` (via ${f})` : "";
-	return r(d === En || d.length === 0 ? `the database refused the write and the driver gave no detail${s}${p}` : `${d}${s}`, d === En || d.length === 0);
-}, kn = (e) => On(e).reason, An = (e) => {
+	}), i = v(e), a = m(i), o = Dn(i), s = o === void 0 ? "" : ` [${o}]`;
+	if (a !== void 0) return r(`${En(a)}${s}`, !1);
+	let c = typeof i.dbMessage == "string" ? i.dbMessage : void 0, l = e?.message, u = kn(typeof l == "string" && l.length > 0 ? l : String(e)), d = c !== void 0 && c !== u && !c.startsWith("SqlError:") ? c : u, f = typeof i.dbCauseChain == "string" ? i.dbCauseChain : void 0, p = f !== void 0 && /[←‖]/.test(f) ? ` (via ${f})` : "";
+	return r(d === On || d.length === 0 ? `the database refused the write and the driver gave no detail${s}${p}` : `${d}${s}`, d === On || d.length === 0);
+}, jn = (e) => An(e).reason, Mn = (e) => {
 	let t = v(e), n = m(t);
 	if (n?.kind === "foreignKeyInUse") {
-		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = Tn(t);
+		let e = n.constraint ?? n.column, r = e === void 0 ? "" : ` ${e}`, i = Dn(t);
 		return `foreign key${r}: rows elsewhere still reference this table${i === void 0 ? "" : ` [${i}]`}`;
 	}
-	return kn(e);
-}, jn = f, X = (e) => `${jn}${e}`, Mn = (e) => typeof e.run == "function", Nn = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
+	return jn(e);
+}, Nn = f, J = (e) => `${Nn}${e}`, Pn = (e) => typeof e.run == "function", Fn = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
   process that dies mid-load depends on the database rolling it back. The rollback capture
-  written before the first delete is what covers that case.`, Pn = /^[a-zA-Z_][a-zA-Z0-9_]*$/, Z = (e, t) => {
-	if (!Pn.test(e)) throw Error(`refusing to build SQL for the table name ${JSON.stringify(e)}: it is outside the identifier class the framework allows. A name from a bundle manifest reaches this concatenation, so it is checked here rather than assumed to still be what the declaration validated.`);
+  written before the first delete is what covers that case.`, In = /^[a-zA-Z_][a-zA-Z0-9_]*$/, Y = (e, t) => {
+	if (!In.test(e)) throw Error(`refusing to build SQL for the table name ${JSON.stringify(e)}: it is outside the identifier class the framework allows. A name from a bundle manifest reaches this concatenation, so it is checked here rather than assumed to still be what the declaration validated.`);
 	return t === "mysql" || t === "mariadb" ? `\`${e}\`` : t === "mssql" ? `[${e}]` : `"${e}"`;
-}, Fn = (e, t) => {
-	let n = Z(e, t), r = Z(X(e), t);
+}, Ln = (e, t) => {
+	let n = Y(e, t), r = Y(J(e), t);
 	switch (t) {
 		case "postgres": return `CREATE TABLE ${r} (LIKE ${n})`;
 		case "mysql":
@@ -1100,20 +1115,20 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		case "sqlite": return `CREATE TABLE ${r} AS SELECT * FROM ${n} WHERE 0`;
 		case "mssql": return `SELECT * INTO ${r} FROM ${n} WHERE 1 = 0`;
 	}
-}, In = (e, t) => {
-	let n = Z(X(e), t);
-	return t === "mssql" ? `IF OBJECT_ID('${X(e)}', 'U') IS NOT NULL DROP TABLE ${n}` : `DROP TABLE IF EXISTS ${n}`;
-}, Ln = (e, t) => {
+}, Rn = (e, t) => {
+	let n = Y(J(e), t);
+	return t === "mssql" ? `IF OBJECT_ID('${J(e)}', 'U') IS NOT NULL DROP TABLE ${n}` : `DROP TABLE IF EXISTS ${n}`;
+}, zn = (e, t) => {
 	let n = t === "mysql" || t === "mariadb", r = [];
 	n && r.push("SET FOREIGN_KEY_CHECKS = 0");
-	for (let n of [...e].reverse()) r.push(`DELETE FROM ${Z(n.name, t)}`);
+	for (let n of [...e].reverse()) r.push(`DELETE FROM ${Y(n.name, t)}`);
 	for (let n of e) {
 		if (n.columns.length === 0) throw Error(`refusing to build a swap for '${n.name}' with no columns: an empty list would have to mean \`SELECT *\`, which is the shape that fails on a generated column.`);
-		let e = n.columns.map((e) => Z(e, t)).join(", ");
-		r.push(`INSERT INTO ${Z(n.name, t)} (${e}) SELECT ${e} FROM ${Z(X(n.name), t)}`);
+		let e = n.columns.map((e) => Y(e, t)).join(", ");
+		r.push(`INSERT INTO ${Y(n.name, t)} (${e}) SELECT ${e} FROM ${Y(J(n.name), t)}`);
 	}
 	return n && r.push("SET FOREIGN_KEY_CHECKS = 1"), r;
-}, Rn = (e, t) => {
+}, Bn = (e, t) => {
 	let n = [], r = () => {
 		for (let e of n) t.unregisterTable(e);
 	};
@@ -1121,7 +1136,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		for (let r of e) {
 			let e = t.getTable(r);
 			if (e === void 0) continue;
-			let i = X(r);
+			let i = J(r);
 			t.registerTable({
 				...e,
 				tableName: i,
@@ -1135,7 +1150,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		staged: n,
 		undo: r
 	};
-}, zn = (e, t) => {
+}, Vn = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) {
 		if (!n.has(t.name)) continue;
@@ -1152,22 +1167,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	}
 	return r;
-}, Bn = (e, t) => {
-	let n = Z(X(e.from), t), r = Z(X(e.to), t), i = Z(e.column, t), a = Z(e.toColumn, t);
-	return `SELECT ${Z(e.primaryKey, t)} AS pk, ${i} AS value FROM ${n} c WHERE ${i} IS NOT NULL AND NOT EXISTS (SELECT 1 FROM ${r} p WHERE p.${a} = c.${i})`;
-}, Vn = (e) => {
+}, Hn = (e, t) => {
+	let n = Y(J(e.from), t), r = Y(J(e.to), t), i = Y(e.column, t), a = Y(e.toColumn, t);
+	return `SELECT ${Y(e.primaryKey, t)} AS pk, ${i} AS value FROM ${n} c WHERE ${i} IS NOT NULL AND NOT EXISTS (SELECT 1 FROM ${r} p WHERE p.${a} = c.${i})`;
+}, Un = (e) => {
 	if (e.length === 0) return;
 	let t = e.slice(0, 20), n = t.map((e) => `    ${e.table}.${e.primaryKey}: ${e.column} = ${JSON.stringify(e.value)} — no such row in ${e.references}`);
 	return `the swap could not run: ${e.length} row(s) in the bundle reference a row the bundle does not carry.\n${n.join("\n")}\n` + (e.length > t.length ? `    … and ${e.length - t.length} more\n` : "") + "  The target is UNCHANGED — the swap runs in one transaction and none of it committed.\n  Every offending row is listed above rather than only the first, so this can be fixed in one pass.";
-}, Hn = async (e, t) => {
-	t.length !== 0 && await e.run(F.SqlClient.pipe(n.flatMap((e) => n.forEach(t, (t) => e.unsafe(t), { discard: !0 }))));
-}, Un = async (e, t, r) => {
-	let i = Ln(t, r);
-	i.length !== 0 && await e.run(F.SqlClient.pipe(n.flatMap((e) => e.withTransaction(n.forEach(i, (t) => e.unsafe(t), { discard: !0 })))));
-}, Wn = async (e, t, r) => {
+}, Wn = async (e, t) => {
+	t.length !== 0 && await e.run(N.SqlClient.pipe(n.flatMap((e) => n.forEach(t, (t) => e.unsafe(t), { discard: !0 }))));
+}, Gn = async (e, t, r) => {
+	let i = zn(t, r);
+	i.length !== 0 && await e.run(N.SqlClient.pipe(n.flatMap((e) => e.withTransaction(n.forEach(i, (t) => e.unsafe(t), { discard: !0 })))));
+}, Kn = async (e, t, r) => {
 	let i = [];
 	for (let a of t) {
-		let t = await e.run(F.SqlClient.pipe(n.flatMap((e) => e.unsafe(Bn(a, r)))));
+		let t = await e.run(N.SqlClient.pipe(n.flatMap((e) => e.unsafe(Hn(a, r)))));
 		for (let e of t) i.push({
 			table: a.from,
 			primaryKey: String(e.pk ?? ""),
@@ -1177,14 +1192,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		});
 	}
 	return i;
-}, Gn = (e, t) => {
+}, qn = (e, t) => {
 	let n = new Map(t.map((e, t) => [e, t]));
 	return e.filter((e) => {
 		if (e.from === e.to) return !1;
 		let t = n.get(e.from), r = n.get(e.to);
 		return t === void 0 || r === void 0 ? !1 : r > t;
 	});
-}, Kn = (e) => e === "mysql" || e === "mariadb", qn = (e) => {
+}, Jn = (e) => e === "mysql" || e === "mariadb", Yn = (e) => {
 	if (e.mode !== "replace") return {
 		active: !1,
 		tables: [],
@@ -1234,7 +1249,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		tables: [],
 		blocker: "every table in the bundle is one that describes a deployment, so there is nothing for a staged swap to move."
 	};
-	let s = o.map((e) => e.name), c = Kn(t) ? [] : Gn(zn(n, s), s);
+	let s = o.map((e) => e.name), c = Jn(t) ? [] : qn(Vn(n, s), s);
 	return c.length > 0 ? {
 		active: !1,
 		tables: [],
@@ -1243,9 +1258,9 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		active: !0,
 		tables: o
 	};
-}, Jn = (e) => n.gen(function* () {
+}, Xn = (e) => n.gen(function* () {
 	if (e.mode !== "replace" || e.dir === void 0 || e.tables.length === 0) return;
-	if (e.snapshot === void 0) return yield* n.fail(new G({
+	if (e.snapshot === void 0) return yield* n.fail(new H({
 		reason: "rollback capture needs the TARGET's schema, and this run has none.\n  `--mode replace` empties the target first, so a run without a capture can leave it\n  emptied and unfilled if the process does not survive to roll back. Pass the target\n  snapshot, or `--no-rollback` to accept that risk deliberately.",
 		path: e.dir
 	}));
@@ -1256,14 +1271,14 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	if (t.tables.length === 0) return;
 	e.onWarn?.(`capturing the target's current rows before emptying it → ${e.dir}\n  This is what a failed replace is restored FROM. It is written before the first delete,
   so it survives a run whose process does not.`);
-	let r = yield* gn({
+	let r = yield* vn({
 		store: e.store,
 		snapshot: t,
 		dialect: e.dialect ?? "unknown",
 		outDir: e.dir,
 		scope: { kind: "all" },
 		compression: "none"
-	}).pipe(n.mapError((t) => new G({
+	}).pipe(n.mapError((t) => new H({
 		reason: `rollback capture failed, so the import did not start and the target is untouched: ${t.reason ?? String(t)}\n  Fix the capture, or re-run with \`--no-rollback\` to proceed without one.`,
 		path: e.dir
 	})));
@@ -1272,18 +1287,18 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		rows: r.tables.reduce((e, t) => e + t.rowCount, 0),
 		tables: r.tables.length
 	};
-}), Yn = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`, Xn = (e, t) => e.tables.find((e) => e.name === t), Zn = (e, t) => new Map((Xn(e, t)?.columns ?? []).map((e) => [e.name, e])), Qn = /__dropped_\d+$/, $n = (e, t) => {
+}), Zn = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`, Qn = (e, t) => e.tables.find((e) => e.name === t), $n = (e, t) => new Map((Qn(e, t)?.columns ?? []).map((e) => [e.name, e])), er = /__dropped_\d+$/, tr = (e, t) => {
 	let n = [];
 	for (let r of [...e.tables].sort((e, t) => e.name.localeCompare(t.name))) {
-		if (Xn(t, r.name) === void 0) {
+		if (Qn(t, r.name) === void 0) {
 			n.push(`table '${r.name}' is in the bundle but MISSING from the target — its rows have nowhere to go`);
 			continue;
 		}
-		let e = Zn(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
+		let e = $n(t, r.name), i = new Map(r.columns.map((e) => [e.name, e]));
 		for (let [t, a] of i) {
 			let i = e.get(t);
 			if (i === void 0) {
-				n.push(Qn.test(t) ? `${r.name}.${t}: a soft-dropped column, present only in the SOURCE — reclaim it there (voltro db gc-snapshots --before <date>) or re-export without it; the target is not missing anything` : `${r.name}.${t}: in the bundle, MISSING from the target — the value has nowhere to go`);
+				n.push(er.test(t) ? `${r.name}.${t}: a soft-dropped column, present only in the SOURCE — reclaim it there (voltro db gc-snapshots --before <date>) or re-export without it; the target is not missing anything` : `${r.name}.${t}: in the bundle, MISSING from the target — the value has nowhere to go`);
 				continue;
 			}
 			i.type !== a.type && n.push(`${r.name}.${t}: type '${a.type}' (bundle) vs '${i.type}' (target)`);
@@ -1291,22 +1306,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		for (let [t, a] of e) i.has(t) || !a.nullable && !a.hasDefault && n.push(`${r.name}.${t}: the target requires it (NOT NULL, no default) and the bundle carries no value — every row of this table would fail`);
 	}
 	return n.length > 30 ? [...n.slice(0, 30), `… and ${n.length - 30} more difference(s)`] : n;
-}, er = (e, t, n) => {
-	let r = T(t);
+}, nr = (e, t, n) => {
+	let r = w(t);
 	if (r === e || n === void 0) return {
 		drifted: !1,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: []
 	};
-	let i = $n(n, t);
+	let i = tr(n, t);
 	return {
 		drifted: i.length > 0,
 		bundleFingerprint: e,
 		targetFingerprint: r,
 		diff: i
 	};
-}, tr = 2e3, nr = 2e3, rr = 200, ir = /* @__PURE__ */ new Set([
+}, rr = 2e3, ir = 2e3, ar = 200, or = /* @__PURE__ */ new Set([
 	"BundleError",
 	"CodecError",
 	"IntegrityError",
@@ -1315,33 +1330,33 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 	"RowsRefusedError",
 	"SchemaDriftError",
 	"StorageError"
-]), ar = (t) => {
+]), sr = (t) => {
 	let n = o.isFiberFailure(t) ? [...e.failures(t[o.FiberFailureCauseId]), ...e.defects(t[o.FiberFailureCauseId])] : [t];
 	for (let e of n) {
 		let t = e?._tag;
-		if (typeof t == "string" && ir.has(t)) return e;
+		if (typeof t == "string" && or.has(t)) return e;
 		if (o.isFiberFailure(e)) {
-			let t = ar(e);
+			let t = sr(e);
 			if (t) return t;
 		}
 	}
-}, or = (t) => [...e.failures(t)][0] ?? Error(e.pretty(t)), sr = (e) => n.tryPromise({
+}, cr = (t) => [...e.failures(t)][0] ?? Error(e.pretty(t)), lr = (e) => n.tryPromise({
 	try: async () => {
 		let t = await import("node:fs/promises"), n = await import("node:path");
-		return Ot(await t.readFile(n.join(e, kt), "utf8"));
+		return At(await t.readFile(n.join(e, jt), "utf8"));
 	},
-	catch: (e) => new G({
+	catch: (e) => new H({
 		reason: `manifest read/parse failed: ${String(e?.message ?? e)}`,
-		path: kt
+		path: jt
 	})
-}), cr = (e) => {
+}), ur = (e) => {
 	let t;
 	return n.gen(function* () {
-		let i = yield* n.promise(() => import("node:path")), a = yield* sr(e.bundleDir);
-		if (a.formatVersion !== 1) return yield* n.fail(new G({ reason: `unsupported bundle formatVersion ${a.formatVersion} (expected 1)` }));
+		let i = yield* n.promise(() => import("node:path")), a = yield* lr(e.bundleDir);
+		if (a.formatVersion !== 1) return yield* n.fail(new H({ reason: `unsupported bundle formatVersion ${a.formatVersion} (expected 1)` }));
 		if (e.tables !== void 0) {
 			let t = new Set(a.tables.map((e) => e.name)), r = e.tables.filter((e) => !t.has(e));
-			if (r.length > 0) return yield* n.fail(new G({ reason: `--tables names ${r.length} table(s) this bundle does not carry: ${r.join(", ")}. The bundle carries: ${[...t].sort().join(", ")}.` }));
+			if (r.length > 0) return yield* n.fail(new H({ reason: `--tables names ${r.length} table(s) this bundle does not carry: ${r.join(", ")}. The bundle carries: ${[...t].sort().join(", ")}.` }));
 		}
 		let o = e.tables === void 0 ? void 0 : new Set(e.tables), s = o === void 0 ? a : {
 			...a,
@@ -1358,9 +1373,9 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					unique: !1,
 					hasDefault: !1
 				}))
-			})) }, r = er(s.source.schemaFingerprint, e.targetSnapshot, t);
+			})) }, r = nr(s.source.schemaFingerprint, e.targetSnapshot, t);
 			if (r.drifted) {
-				if (!e.force) return yield* n.fail(new Qe({
+				if (!e.force) return yield* n.fail(new et({
 					bundleFingerprint: r.bundleFingerprint,
 					targetFingerprint: r.targetFingerprint,
 					diff: r.diff
@@ -1369,15 +1384,15 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			}
 		}
 		if (e.targetDialect && e.targetDialect !== s.source.dialect) {
-			let t = Sn(s.tables, s.source.dialect, e.targetDialect).filter((e) => e.severity === "block");
-			if (t.length > 0 && !e.allowIncompatible) return yield* n.fail(new tt({
+			let t = wn(s.tables, s.source.dialect, e.targetDialect).filter((e) => e.severity === "block");
+			if (t.length > 0 && !e.allowIncompatible) return yield* n.fail(new rt({
 				sourceDialect: s.source.dialect,
 				targetDialect: e.targetDialect,
-				blocking: t.map(Cn)
+				blocking: t.map(Tn)
 			}));
 		}
-		let c = e.verify ?? !0, f = e.mode ?? "upsert", m = e.atomic ?? f === "replace", _ = e.onConflict ?? "skip", v = e.ledgerPath ?? i.join(e.bundleDir, ".import..ledger.json"), b = yield* Ht(v);
-		if (f === "replace" && s.scope.kind !== "all") return yield* n.fail(new et({
+		let c = e.verify ?? !0, f = e.mode ?? "upsert", m = e.atomic ?? f === "replace", _ = e.onConflict ?? "skip", v = e.ledgerPath ?? i.join(e.bundleDir, ".import..ledger.json"), b = yield* Wt(v);
+		if (f === "replace" && s.scope.kind !== "all") return yield* n.fail(new nt({
 			mode: f,
 			reason: `replace refuses a partial bundle (scope='${s.scope.kind}') — truncating would delete rows not in the bundle. Use --mode upsert, or re-export with full scope. To leave specific tables out of a FULL export, use \`--exclude a,b\`: it keeps the scope \`all\` and records what it left out.`
 		}));
@@ -1389,8 +1404,8 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		if (f === "replace") {
 			let t = s.tables.map((e) => e.name), r = e.store.incomingForeignKeys ? yield* n.tryPromise({
 				try: () => e.store.incomingForeignKeys(t),
-				catch: (e) => new G({ reason: `foreign-key pre-flight failed: ${An(e)}` })
-			}) : e.targetSnapshot === void 0 ? [] : _n(e.targetSnapshot, t), i = [], a = /* @__PURE__ */ new Map();
+				catch: (e) => new H({ reason: `foreign-key pre-flight failed: ${Mn(e)}` })
+			}) : e.targetSnapshot === void 0 ? [] : yn(e.targetSnapshot, t), i = [], a = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				if (!a.has(t.from)) {
 					let r = yield* n.tryPromise({
@@ -1402,7 +1417,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 							skip: void 0,
 							projection: []
 						}),
-						catch: () => new G({ reason: `unreadable: ${t.from}` })
+						catch: () => new H({ reason: `unreadable: ${t.from}` })
 					}).pipe(n.map((e) => e.length), n.orElseSucceed(() => 0));
 					a.set(t.from, r);
 				}
@@ -1412,9 +1427,9 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					rowCount: r
 				});
 			}
-			if (i.length > 0) return yield* n.fail(new et({
+			if (i.length > 0) return yield* n.fail(new nt({
 				mode: f,
-				reason: vn(i)
+				reason: bn(i)
 			}));
 		}
 		if (e.dryRun === !0) return e.traceId !== void 0 && (yield* n.promise(() => e.store.update(u, e.traceId, {
@@ -1435,27 +1450,35 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			let e = t.columns.filter((e) => e.generatedAs !== void 0).map((e) => e.name);
 			e.length > 0 && S.set(t.name, e);
 		}
-		let w = (e, t) => {
+		let C = (e, t) => {
 			let n = S.get(e);
 			if (n === void 0) return t;
 			let r;
 			for (let e of n) e in t && (r ??= { ...t }, delete r[e]);
 			return r ?? t;
-		}, T = (e, t, n, r = !1) => {
-			let i = O ? X(t.name) : t.name, a = t.primaryKey, o = w(t.name, n);
+		}, w = (e, t, n, r = !1) => {
+			let i = O ? J(t.name) : t.name, a = t.primaryKey, o = oe(t.name, C(t.name, n), t.columnTypes);
 			return f === "append" ? _ === "fail" ? e.insert(i, o) : e.insertIgnore(i, o, { conflictColumns: [a] }) : f === "replace" ? r ? e.upsert(i, o, { conflictColumns: [a] }) : e.insert(i, o) : e.upsert(i, o, { conflictColumns: [a] });
-		}, ie = (e, t) => e.savepoint ? e.savepoint(t) : t(), ae = 0, oe = (t, n, r) => {
-			r.unclassified && (ae++, !(ae > 3) && e.onWarn?.(`row refused with no driver detail — table '${t.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (ae === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
-		}, se = (e, t, r = !0) => n.tryPromise({
+		}, ae = e.targetDialect !== void 0 && e.targetDialect !== "memory", oe = (e, t, n) => {
+			if (!ae || n === void 0 || y(e) !== void 0) return t;
+			let r = null;
+			for (let [e, i] of Object.entries(n)) {
+				let n = t[e];
+				i === "json" && n != null && (r === null && (r = { ...t }), r[e] = JSON.stringify(n));
+			}
+			return r ?? t;
+		}, T = (e, t) => e.savepoint ? e.savepoint(t) : t(), se = 0, ce = (t, n, r) => {
+			r.unclassified && (se++, !(se > 3) && e.onWarn?.(`row refused with no driver detail — table '${t.name}', row '${String(n.id ?? "?")}'. The full rendering follows so the LAYER that refused is on the record; it is logged, never returned. ${r.raw}` + (se === 3 ? " (further unclassified refusals are counted, not logged)" : "")));
+		}, le = (e, t, r = !0) => n.tryPromise({
 			try: e,
-			catch: (e) => On(e)
-		}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, oe(t.entry, t.row, e)), !1)))), ce = (e) => {
+			catch: (e) => An(e)
+		}).pipe(n.map(() => !0), n.catchAll((e) => n.sync(() => (r && (t.reason = e.reason, ce(t.entry, t.row, e)), !1)))), ue = (e) => {
 			let t = Object.entries(e.entry.columnTypes).filter(([t, n]) => n === "reference" && e.row[t] !== null && e.row[t] !== void 0).map(([e]) => e);
 			if (t.length !== 0) return {
 				...e.row,
 				...Object.fromEntries(t.map((e) => [e, null]))
 			};
-		}, le = (e) => {
+		}, de = (e) => {
 			let t = new Set(e.map((e) => String(e.row[e.entry.primaryKey]))), n = (e) => Object.entries(e.entry.columnTypes).some(([n, r]) => {
 				if (r !== "reference") return !1;
 				let i = e.row[n];
@@ -1473,7 +1496,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				};
 				t.refused++, e.derived || t.primary++, a.set(e.table, t);
 			}
-			return new Ze({
+			return new $e({
 				rows: i.slice(0, 20),
 				primaryCount: r.filter((e) => !e.derived).length,
 				totalCount: e.length,
@@ -1483,62 +1506,62 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					primary: t.primary
 				})).sort((e, t) => t.refused - e.refused || e.table.localeCompare(t.table)).slice(0, 100)
 			});
-		}, ue = (e, t) => n.gen(function* () {
+		}, pe = (e, t) => n.gen(function* () {
 			let r = t, i = [], a = !0;
 			for (; r.length > 0 && a;) {
 				a = !1;
 				let t = [];
-				for (let n of r) (yield* se(() => ie(e, () => T(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
+				for (let n of r) (yield* le(() => T(e, () => w(e, n.entry, n.row, !0)), n)) ? a = !0 : t.push(n);
 				if (!a && t.length > 0) for (let n = t.length - 1; n >= 0; n--) {
-					let r = t[n], o = ce(r);
-					o !== void 0 && (yield* se(() => ie(e, () => T(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
+					let r = t[n], o = ue(r);
+					o !== void 0 && (yield* le(() => T(e, () => w(e, r.entry, o, !0)), r, !1)) && (i.push(r), t.splice(n, 1), a = !0);
 				}
 				r = t;
 			}
-			for (let t of i) (yield* se(() => ie(e, () => e.upsert(t.entry.name, t.row, { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
-			if (r.length > 0) return yield* n.fail(le(r));
+			for (let t of i) (yield* le(() => T(e, () => e.upsert(t.entry.name, oe(t.entry.name, t.row, t.entry.columnTypes), { conflictColumns: [t.entry.primaryKey] })), t)) || (r = [...r, t]);
+			if (r.length > 0) return yield* n.fail(de(r));
 		}), E = (() => {
 			let t = e.targetDialect;
 			return t === "postgres" || t === "mysql" || t === "mariadb" || t === "sqlite" || t === "mssql" ? t : void 0;
-		})(), D = qn({
+		})(), D = Yn({
 			mode: f,
 			...e.targetDialect === void 0 ? {} : { targetDialect: e.targetDialect },
 			...e.targetSnapshot === void 0 ? {} : { targetSnapshot: e.targetSnapshot },
 			bundleTables: s.tables.map((e) => e.name),
-			isSkipped: W,
-			canRunSql: Mn(e.store)
-		}), fe = D.tables, pe = s.tables.filter((e) => !W(e.name) && C(e.name)).map((e) => e.name), O = D.active, k = !1, A = 0, j = 0, he, M, N = 0, P = 0, ge = (t, r) => n.gen(function* () {
+			isSkipped: V,
+			canRunSql: Pn(e.store)
+		}), me = D.tables, he = s.tables.filter((e) => !V(e.name) && ee(e.name)).map((e) => e.name), O = D.active, _e = !1, k = 0, A = 0, j, M, ve = 0, N = 0, P = (t, r) => n.gen(function* () {
 			if (f === "replace" && !O && !(r && b.truncated)) {
 				e.recordInterruption === !0 && (yield* n.tryPromise({
 					try: () => t.insert(d, {
-						id: h("repl", F),
-						startedAt: I,
+						id: h("repl", ye),
+						startedAt: be,
 						tables: String(s.tables.length),
-						capture: L?.dir ?? null,
+						capture: F?.dir ?? null,
 						via: e.via ?? "direct"
 					}),
-					catch: (e) => new G({ reason: `could not record that this replace started: ${String(e?.message ?? e)}\n  The marker is what makes an interrupted run visible instead of silent, so the run does
+					catch: (e) => new H({ reason: `could not record that this replace started: ${String(e?.message ?? e)}\n  The marker is what makes an interrupted run visible instead of silent, so the run does
   not proceed without it.` })
 				}));
-				let i = [...s.tables].reverse().map((e) => e.name).filter((e) => !W(e)), a = !r, o = t.emptyTables ? () => t.emptyTables(i) : a ? async () => {
+				let i = [...s.tables].reverse().map((e) => e.name).filter((e) => !V(e)), a = !r, o = t.emptyTables ? () => t.emptyTables(i) : a ? async () => {
 					for (let e of [...s.tables].reverse()) await t.deleteMany(e.name, { where: x(e.primaryKey) });
 				} : () => t.transactional(async (e) => {
 					for (let t of [...s.tables].reverse()) await e.deleteMany(t.name, { where: x(t.primaryKey) });
 				});
 				yield* n.tryPromise({
 					try: o,
-					catch: (e) => new G({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${An(e)}` })
-				}), r && (b.truncated = !0, yield* J(v, b));
+					catch: (e) => new H({ reason: `emptying the target for --mode replace failed (nothing was deleted): ${Mn(e)}` })
+				}), r && (b.truncated = !0, yield* K(v, b));
 			}
 			let a = [], o = [], u = [], p = [], g = s.tables.length;
 			for (let d = 0; d < s.tables.length; d++) {
 				let h = s.tables[d];
-				if (W(h.name)) {
+				if (V(h.name)) {
 					p.push(h.name);
 					continue;
 				}
 				if (r && h.name in b.tables) {
-					u.push(h.name), P++, N += b.tables[h.name].rowCount, q(e.onProgress, {
+					u.push(h.name), N++, ve += b.tables[h.name].rowCount, G(e.onProgress, {
 						phase: "import",
 						table: h.name,
 						index: d,
@@ -1550,7 +1573,7 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					continue;
 				}
 				let _ = i.join(e.bundleDir, h.file);
-				q(e.onProgress, {
+				G(e.onProgress, {
 					phase: "import",
 					table: h.name,
 					index: d,
@@ -1560,22 +1583,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					total: h.rowCount
 				});
 				let y = a.length, x = n.gen(function* () {
-					let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, c = me("bundle", () => de(_).pipe(xt(s.compression))).pipe(l.tap((e) => n.sync(() => i.update(e)))), u = async (e) => {
+					let { createHash: r } = yield* n.promise(() => import("node:crypto")), i = r("sha256"), o = 0, c = ge("bundle", () => fe(_).pipe(Ct(s.compression))).pipe(l.tap((e) => n.sync(() => i.update(e)))), u = async (e) => {
 						let n = {
 							entry: h,
 							row: e,
 							reason: ""
 						};
 						try {
-							await ie(t, () => T(t, h, e));
+							await T(t, () => w(t, h, e));
 						} catch (t) {
-							let r = On(t);
-							n.reason = r.reason, oe(h, e, r), a.push(n);
+							let r = An(t);
+							n.reason = r.reason, ce(h, e, r), a.push(n);
 						}
 					}, d = yield* n.promise(async () => {
 						let n = e.copyLoader;
 						if (!n || n.dialect !== "postgres") return !1;
-						if (m) return k || (k = !0, e.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
+						if (m) return _e || (_e = !0, e.onWarn?.("bulk COPY is off for this run: it needs its own connection and this import runs in ONE transaction (the default for --mode replace, so a failure mid-load cannot leave the target emptied and unfilled). Pass --no-atomic to trade that guarantee back for COPY.")), !1;
 						if (f === "replace") return !0;
 						if (f !== "upsert") return !1;
 						try {
@@ -1605,46 +1628,46 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 							d = !1, e.onWarn?.(`bulk COPY into ${h.name} failed (${String(n?.message ?? n)}); falling back to per-row writes for this table`);
 							for (let e of t) await u(e);
 						}
-					}, b = Math.max(1, e.savepointBatchSize ?? 200), x = typeof t.savepoint == "function", S = [], C = async () => {
+					}, b = Math.max(1, e.savepointBatchSize ?? 200), x = typeof t.savepoint == "function", S = [], ee = async () => {
 						if (S.length === 0) return;
 						let e = S;
 						S = [];
 						try {
 							await t.savepoint(async () => {
-								for (let n of e) await T(t, h, n);
+								for (let n of e) await w(t, h, n);
 							});
 						} catch {
 							for (let t of e) await u(t);
 						}
 					};
-					return yield* l.runForEach(rn(c, h.name, h.columnTypes), (e) => n.promise(async () => {
+					return yield* l.runForEach(on(c, h.name, h.columnTypes), (e) => n.promise(async () => {
 						if (o++, M?.(), d) {
 							v.push(e), v.length >= g && await y();
 							return;
 						}
 						if (x) {
-							S.push(e), S.length >= b && await C();
+							S.push(e), S.length >= b && await ee();
 							return;
 						}
 						await u(e);
-					})), yield* n.promise(C), yield* n.promise(y), {
+					})), yield* n.promise(ee), yield* n.promise(y), {
 						rowCount: o,
 						checksum: i.digest("hex")
 					};
-				}), { rowCount: S, checksum: C } = yield* Bt("import", h.name, d, g, (e) => e.rowCount, x);
+				}), { rowCount: S, checksum: ee } = yield* Ht("import", h.name, d, g, (e) => e.rowCount, x);
 				if (c) {
-					if (C !== h.checksum) return yield* n.fail(new Je({
+					if (ee !== h.checksum) return yield* n.fail(new Ze({
 						what: `table ${h.name} checksum`,
 						expected: h.checksum,
-						actual: C
+						actual: ee
 					}));
-					if (S !== h.rowCount) return yield* n.fail(new Je({
+					if (S !== h.rowCount) return yield* n.fail(new Ze({
 						what: `table ${h.name} rowCount`,
 						expected: String(h.rowCount),
 						actual: String(S)
 					}));
 				}
-				q(e.onProgress, {
+				G(e.onProgress, {
 					phase: "import",
 					table: h.name,
 					index: d,
@@ -1652,18 +1675,18 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 					event: "done",
 					rowsDone: S,
 					total: h.rowCount
-				}), j++, A += S, he?.(), M?.(), r && (a.length > y ? o.push({
+				}), A++, k += S, j?.(), M?.(), r && (a.length > y ? o.push({
 					name: h.name,
 					rowCount: S
 				}) : (b.tables[h.name] = {
 					rowCount: S,
 					checksum: h.checksum
-				}, yield* J(v, b)));
+				}, yield* K(v, b)));
 			}
-			if (a.length > 0 && (yield* ue(t, a)), f === "replace" && (yield* n.promise(() => t.deleteMany(d, { where: {
+			if (a.length > 0 && (yield* pe(t, a)), f === "replace" && (yield* n.promise(() => t.deleteMany(d, { where: {
 				column: "startedAt",
 				op: "lte",
-				value: I
+				value: be
 			} }).then(() => void 0, () => void 0))), r && o.length > 0) {
 				for (let e of o) {
 					let t = s.tables.find((t) => t.name === e.name);
@@ -1672,35 +1695,35 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 						checksum: t.checksum
 					};
 				}
-				yield* J(v, b);
+				yield* K(v, b);
 			}
 			{
-				let t = Ke(p, "skipped");
+				let t = Ye(p, "skipped");
 				t !== void 0 && e.onWarn?.(t);
 			}
 			if (u.length > 0) {
 				let t = u.length === s.tables.length;
 				e.onWarn?.(`resume: ${u.length} of ${s.tables.length} table(s) were already applied by an earlier run of THIS bundle directory, so this run wrote NO rows for them${t ? " — that is every table in the bundle, so nothing was written at all" : ""}. Tables: ${u.join(", ")}. Delete ${v} to force a full re-import.`);
 			}
-		}), F = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`, I = /* @__PURE__ */ new Date(), L = yield* Jn({
+		}), ye = `${Date.now().toString(36)}${Math.random().toString(36).slice(2, 8)}`, be = /* @__PURE__ */ new Date(), F = yield* Xn({
 			store: e.store,
 			mode: f,
 			dir: e.rollbackDir,
 			snapshot: e.targetSnapshot,
 			dialect: e.targetDialect,
-			tables: s.tables.map((e) => e.name).filter((e) => !W(e)),
+			tables: s.tables.map((e) => e.name).filter((e) => !V(e)),
 			onWarn: e.onWarn
 		});
-		L !== void 0 && (e.onRollbackCaptured !== void 0 && (yield* n.tryPromise({
-			try: () => e.onRollbackCaptured(L),
-			catch: (e) => new G({
+		F !== void 0 && (e.onRollbackCaptured !== void 0 && (yield* n.tryPromise({
+			try: () => e.onRollbackCaptured(F),
+			catch: (e) => new H({
 				reason: `the rollback capture could not be stored durably, so the import did not start and the target is untouched: ${String(e?.message ?? e)}\n  The capture only helps if it outlives this process — that is the failure it exists for.`,
-				path: L.dir
+				path: F.dir
 			})
-		})), e.onWarn?.(Yn(L)));
-		let _e = (e) => f === "replace" ? te(e) : e(), R = (e) => f === "replace" ? ne(e) : e, z = e.traceId ?? h("dimp", `${Date.now()}-${s.source.schemaFingerprint ?? ""}`), ve = e.traceId !== void 0, B = (e.targetSnapshot?.tables.some((e) => e.name === u) ?? !1) || y(u) !== void 0;
-		B && g(p), B && e.traceId === void 0 && (yield* n.promise(() => e.store.insert(u, {
-			id: z,
+		})), e.onWarn?.(Zn(F)));
+		let xe = (e) => f === "replace" ? ne(e) : e(), Se = (e) => f === "replace" ? re(e) : e, I = e.traceId ?? h("dimp", `${Date.now()}-${s.source.schemaFingerprint ?? ""}`), L = e.traceId !== void 0, Ce = (e.targetSnapshot?.tables.some((e) => e.name === u) ?? !1) || y(u) !== void 0;
+		Ce && g(p), Ce && e.traceId === void 0 && (yield* n.promise(() => e.store.insert(u, {
+			id: I,
 			mode: f,
 			via: e.via ?? "direct",
 			direction: "import",
@@ -1710,45 +1733,45 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 			rowsWritten: 0,
 			staged: f === "replace" ? O : null
 		}).then(() => {
-			ve = !0;
+			L = !0;
 		}, (t) => {
 			e.onWarn?.(`the import trace could not be written (${String(t?.message ?? t)}).\n  The import continues — this is a record of what happened, not a safety check. Run
   \`voltro db apply\` so the next one is recorded.`);
-		}))), e.traceId !== void 0 && B && (yield* n.promise(() => e.store.update(u, z, {
+		}))), e.traceId !== void 0 && Ce && (yield* n.promise(() => e.store.update(u, I, {
 			staged: f === "replace" ? O : null,
 			sourceFingerprint: s.source.schemaFingerprint ?? null
 		}).then(() => void 0, () => void 0)));
-		let ye = 0, be = !1;
-		he = () => {
-			if (!ve || be) return;
+		let we = 0, Te = !1;
+		j = () => {
+			if (!L || Te) return;
 			let t = Date.now();
-			t - ye < tr || (ye = t, e.store.update(u, z, {
-				tablesWritten: j,
-				rowsWritten: A
+			t - we < rr || (we = t, e.store.update(u, I, {
+				tablesWritten: A,
+				rowsWritten: k
 			}).then(() => void 0, () => {
-				be = !0;
+				Te = !0;
 			}));
 		};
-		let xe = (t) => ve ? e.store.update(u, z, {
+		let Ee = (t) => L ? e.store.update(u, I, {
 			finishedAt: t === null ? /* @__PURE__ */ new Date() : null,
-			tablesWritten: j,
-			rowsWritten: A,
+			tablesWritten: A,
+			rowsWritten: k,
 			failure: t
 		}).then(() => void 0, () => void 0) : Promise.resolve();
-		if (t = (e) => xe(e), f === "replace" && !O && D.blocker !== void 0 && e.onWarn?.(Nn(D.blocker)), f === "replace" && pe.length > 0 && e.onWarn?.(`write recorders are SUSPENDED for this replace (${pe.length} table(s) have one).\n  A replace sets a state rather than changing rows, so a per-row history entry would describe
+		if (t = (e) => Ee(e), f === "replace" && !O && D.blocker !== void 0 && e.onWarn?.(Fn(D.blocker)), f === "replace" && he.length > 0 && e.onWarn?.(`write recorders are SUSPENDED for this replace (${he.length} table(s) have one).\n  A replace sets a state rather than changing rows, so a per-row history entry would describe
   something that did not happen — and this path already writes through the raw store, without
   tenant scoping or \`audit()\` stamping, for the same reason.`), O) {
-			e.onWarn?.(`staging ${fe.length} table(s) before the swap — the target keeps its rows until the load stands.\n  The destructive step is one server-side transaction at the end, not the whole load.`);
-			let t = e.store, r = fe.map((e) => e.name), i = h("repl", `staging-${F}`), a = !1;
+			e.onWarn?.(`staging ${me.length} table(s) before the swap — the target keeps its rows until the load stands.\n  The destructive step is one server-side transaction at the end, not the whole load.`);
+			let t = e.store, r = me.map((e) => e.name), i = h("repl", `staging-${ye}`), a = !1;
 			if (e.recordInterruption === !0) {
 				yield* n.promise(() => e.store.insert(d, {
 					id: i,
-					startedAt: I,
+					startedAt: be,
 					kind: "staging",
-					tables: String(fe.length),
-					capture: L?.dir ?? null,
+					tables: String(me.length),
+					capture: F?.dir ?? null,
 					via: e.via ?? "direct",
-					staging: r.map(X).join(","),
+					staging: r.map(J).join(","),
 					heartbeatAt: /* @__PURE__ */ new Date(),
 					resumable: !m
 				}).then(() => {
@@ -1762,76 +1785,76 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 				M = () => {
 					if (!a) return;
 					let n = Date.now();
-					n - t < nr || (t = n, e.store.update(d, i, { heartbeatAt: /* @__PURE__ */ new Date() }).then(() => void 0, () => void 0));
+					n - t < ir || (t = n, e.store.update(d, i, { heartbeatAt: /* @__PURE__ */ new Date() }).then(() => void 0, () => void 0));
 				};
 			}
-			let o = () => a ? e.store.delete(d, i).then(() => void 0, () => void 0) : Promise.resolve(), s = Rn(r, {
+			let o = () => a ? e.store.delete(d, i).then(() => void 0, () => void 0) : Promise.resolve(), s = Bn(r, {
 				getTable: (e) => y(e),
 				registerTable: (e) => {
-					ee(e);
+					te(e);
 				},
-				unregisterTable: re
+				unregisterTable: ie
 			}), c = !1;
 			try {
-				let i = m ? r : r.filter((e) => !Ut(b, e));
+				let i = m ? r : r.filter((e) => !Gt(b, e));
 				yield* n.tryPromise({
 					try: async () => {
-						await Hn(t, i.map((e) => In(e, E))), await Hn(t, i.map((e) => Fn(e, E)));
+						await Wn(t, i.map((e) => Rn(e, E))), await Wn(t, i.map((e) => Ln(e, E)));
 					},
-					catch: (e) => new G({ reason: `could not prepare the staging tables, so the import did not start and the target is untouched: ${String(e?.message ?? e)}` })
-				}), yield* R(ge(e.store, !m)), !m && b.truncated === !0 ? c = !0 : yield* n.tryPromise({
-					try: () => Un(t, fe, E).then(() => {
+					catch: (e) => new H({ reason: `could not prepare the staging tables, so the import did not start and the target is untouched: ${String(e?.message ?? e)}` })
+				}), yield* Se(P(e.store, !m)), !m && b.truncated === !0 ? c = !0 : yield* n.tryPromise({
+					try: () => Gn(t, me, E).then(() => {
 						c = !0;
 					}),
-					catch: (e) => new G({ reason: String(e?.message ?? e) })
+					catch: (e) => new H({ reason: String(e?.message ?? e) })
 				}).pipe(n.catchAll((i) => n.gen(function* () {
-					let a = Vn(yield* n.promise(() => Wn(t, zn(e.targetSnapshot, r), E).then((e) => e, () => [])));
-					return yield* n.fail(new G({ reason: a ?? `the swap failed and the target is UNCHANGED: ${i.reason}` }));
-				}))), !m && c && b.truncated !== !0 && (b.truncated = !0, yield* J(v, b));
+					let a = Un(yield* n.promise(() => Kn(t, Vn(e.targetSnapshot, r), E).then((e) => e, () => [])));
+					return yield* n.fail(new H({ reason: a ?? `the swap failed and the target is UNCHANGED: ${i.reason}` }));
+				}))), !m && c && b.truncated !== !0 && (b.truncated = !0, yield* K(v, b));
 			} finally {
-				s.undo(), c || m ? (M = void 0, yield* n.promise(() => Hn(t, r.map((e) => In(e, E))).then(() => void 0, () => void 0)), yield* n.promise(o)) : e.onWarn?.("the staged rows are KEPT so a re-run can continue from them rather than reload.\n  If you are not going to re-run this bundle, drop them: voltro data clear-staging --yes");
+				s.undo(), c || m ? (M = void 0, yield* n.promise(() => Wn(t, r.map((e) => Rn(e, E))).then(() => void 0, () => void 0)), yield* n.promise(o)) : e.onWarn?.("the staged rows are KEPT so a re-run can continue from them rather than reload.\n  If you are not going to re-run this bundle, drop them: voltro data clear-staging --yes");
 			}
 		} else m ? yield* n.tryPromise({
 			try: () => e.store.transactional(async (e) => {
-				let t = await _e(() => n.runPromiseExit(ge(e, !1)));
-				if (r.isFailure(t)) throw or(t.cause);
+				let t = await xe(() => n.runPromiseExit(P(e, !1)));
+				if (r.isFailure(t)) throw cr(t.cause);
 			}),
-			catch: (e) => ar(e) ?? new G({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
-		}) : yield* R(ge(e.store, !0));
+			catch: (e) => sr(e) ?? new H({ reason: `atomic import failed (rolled back): ${String(e?.message ?? e)}` })
+		}) : yield* Se(P(e.store, !0));
 		if (e.assets && s.assets.index && !e.assetsAlreadyRestored) {
 			let t = e.assets;
-			yield* gt({
+			yield* vt({
 				sink: t,
-				assetsDir: i.join(e.bundleDir, Mt),
+				assetsDir: i.join(e.bundleDir, Pt),
 				indexPath: i.join(e.bundleDir, s.assets.index ?? "assets/index.ndjson"),
 				progress: {
 					done: (e) => e in b.assets,
-					mark: (e) => (b.assets[e] = !0, J(v, b))
+					mark: (e) => (b.assets[e] = !0, K(v, b))
 				}
 			});
 		}
-		return yield* n.promise(() => xe(null)), {
+		return yield* n.promise(() => Ee(null)), {
 			manifest: s,
-			tablesWritten: j,
-			rowsWritten: A,
-			tablesSkipped: P,
-			rowsSkipped: N,
-			fullyResumed: j === 0 && P > 0,
-			...L === void 0 ? {} : { rollback: L }
+			tablesWritten: A,
+			rowsWritten: k,
+			tablesSkipped: N,
+			rowsSkipped: ve,
+			fullyResumed: A === 0 && N > 0,
+			...F === void 0 ? {} : { rollback: F }
 		};
 	}).pipe(n.tapError((e) => n.promise(() => t?.(e?.reason ?? e?._tag ?? "the import did not finish") ?? Promise.resolve())));
-}, lr = (e) => e, ur = (e) => {
+}, dr = (e) => e, fr = (e) => {
 	if (e.allowLive || e.liveInstance === null || e.sameTarget === "different") return { refuse: !1 };
 	let t = e.targetLabel === void 0 ? "" : ` Target: ${e.targetLabel}.`, n = e.sameTarget === "same" ? " That instance is connected to the SAME database." : " We could not confirm which database that instance is connected to, so this is refused on the conservative reading — an older instance, or one whose connection could not be parsed, reports nothing to compare.";
 	return {
 		refuse: !0,
 		message: `refusing to write into a target with a LIVE instance (${e.liveInstance}).${t}${n} A direct import is an uncoordinated concurrent writer — readers see partial state, the reactive layer either storms or goes stale, and rows race with live writes. Re-run with --allow-live to override, or use a live-safe strategy (shadow-swap for replace, or the api target).`
 	};
-}, Q = Buffer.from("VBUNDLE2"), dr = 0, fr = 1, pr = 2, mr = 32, hr = async (e) => {
+}, X = Buffer.from("VBUNDLE2"), pr = 0, mr = 1, hr = 2, gr = 32, _r = async (e) => {
 	let t = [], n = async (r) => {
 		let i;
 		try {
-			i = await L(B(e, r), { withFileTypes: !0 });
+			i = await ye(I(e, r), { withFileTypes: !0 });
 		} catch {
 			return;
 		}
@@ -1841,22 +1864,22 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 		}
 	};
 	return await n(""), t.sort();
-}, gr = (e, t) => {
+}, vr = (e, t) => {
 	let n = Buffer.from(e, "utf8"), r = Buffer.alloc(5 + n.length + 8);
-	return r.writeUInt8(fr, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
-}, _r = (e, t, n) => {
+	return r.writeUInt8(mr, 0), r.writeUInt32BE(n.length, 1), n.copy(r, 5), r.writeBigUInt64BE(BigInt(t), 5 + n.length), r;
+}, yr = (e, t, n) => {
 	let r = Buffer.from(e, "utf8"), i = Buffer.from(t, "utf8"), a = Buffer.alloc(5 + r.length + 2 + i.length + 8), o = 0;
-	return a.writeUInt8(pr, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
+	return a.writeUInt8(hr, o), o += 1, a.writeUInt32BE(r.length, o), o += 4, r.copy(a, o), o += r.length, a.writeUInt16BE(i.length, o), o += 2, i.copy(a, o), o += i.length, a.writeBigUInt64BE(BigInt(n), o), a;
 };
-async function* vr(e) {
-	yield new Uint8Array(Q);
-	for (let t of await hr(e.dir)) {
-		let n = B(e.dir, t), r = await _e(n);
-		if (yield new Uint8Array(gr(t, r.size)), r.size > 0) for await (let e of de(n)) yield new Uint8Array(e);
+async function* br(e) {
+	yield new Uint8Array(X);
+	for (let t of await _r(e.dir)) {
+		let n = I(e.dir, t), r = await be(n);
+		if (yield new Uint8Array(vr(t, r.size)), r.size > 0) for await (let e of fe(n)) yield new Uint8Array(e);
 	}
 	if (e.blobs) for await (let t of e.blobs.list()) {
-		yield new Uint8Array(_r(t.key, t.contentType, t.size));
-		let n = oe("sha256"), r = 0;
+		yield new Uint8Array(yr(t.key, t.contentType, t.size));
+		let n = T("sha256"), r = 0;
 		for await (let i of e.blobs.open(t.key)) {
 			let e = Buffer.from(i);
 			n.update(e), r += e.length, yield new Uint8Array(e);
@@ -1864,11 +1887,11 @@ async function* vr(e) {
 		if (r !== t.size) throw Error(`blob '${t.key}' size mismatch: header ${t.size}, streamed ${r}`);
 		yield new Uint8Array(n.digest());
 	}
-	yield new Uint8Array(Buffer.from([dr]));
+	yield new Uint8Array(Buffer.from([pr]));
 }
-var yr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), br = (e) => new Promise((t) => e.end(t)), xr = async (e, t) => {
-	let n = ye(t.dir);
-	await I(n, { recursive: !0 });
+var xr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), Sr = (e) => new Promise((t) => e.end(t)), Cr = async (e, t) => {
+	let n = L(t.dir);
+	await P(n, { recursive: !0 });
 	let r = Buffer.alloc(0), i = e[Symbol.asyncIterator](), a = !1, o = async () => {
 		let { value: e, done: t } = await i.next();
 		return t ? (a = !0, !1) : (r = r.length === 0 ? Buffer.from(e) : Buffer.concat([r, Buffer.from(e)]), !0);
@@ -1879,28 +1902,28 @@ var yr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), br
 		return r = r.subarray(e), t;
 	};
 	try {
-		if (await s(Q.length), !c(Q.length).equals(Q)) throw Error("not a bundle archive (bad magic)");
+		if (await s(X.length), !c(X.length).equals(X)) throw Error("not a bundle archive (bad magic)");
 		for (;;) {
 			await s(1);
 			let e = c(1).readUInt8(0);
-			if (e === dr) return;
-			if (e === fr) {
+			if (e === pr) return;
+			if (e === mr) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
 				let t = c(e).toString("utf8");
 				await s(8);
-				let i = c(8).readBigUInt64BE(0), a = ye(n, t);
-				if (a !== n && !a.startsWith(n + be)) throw Error(`archive path '${t}' escapes the destination`);
-				await I(ve(a), { recursive: !0 });
-				let o = D(a);
+				let i = c(8).readBigUInt64BE(0), a = L(n, t);
+				if (a !== n && !a.startsWith(n + Ce)) throw Error(`archive path '${t}' escapes the destination`);
+				await P(Se(a), { recursive: !0 });
+				let o = pe(a);
 				for (; i > 0n;) {
 					r.length === 0 && await s(1);
 					let e = i < BigInt(r.length) ? Number(i) : r.length;
-					await yr(o, c(e)), i -= BigInt(e);
+					await xr(o, c(e)), i -= BigInt(e);
 				}
-				await br(o);
-			} else if (e === pr) {
+				await Sr(o);
+			} else if (e === hr) {
 				await s(4);
 				let e = c(4).readUInt32BE(0);
 				await s(e);
@@ -1910,24 +1933,24 @@ var yr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), br
 				await s(i);
 				let a = c(i).toString("utf8");
 				await s(8);
-				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = oe("sha256"), d = new P(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
+				let o = c(8).readBigUInt64BE(0), l = await t.blobs.has(n), u = T("sha256"), d = new M(), f = l ? Promise.resolve() : t.blobs.write(n, d, {
 					contentType: a,
 					size: Number(o)
 				}), p = o;
 				for (; p > 0n;) {
 					r.length === 0 && await s(1);
 					let e = p < BigInt(r.length) ? Number(p) : r.length, t = c(e);
-					u.update(t), l || await yr(d, t), p -= BigInt(e);
+					u.update(t), l || await xr(d, t), p -= BigInt(e);
 				}
-				l ? d.destroy() : await br(d), await f, await s(mr);
-				let m = c(mr);
+				l ? d.destroy() : await Sr(d), await f, await s(gr);
+				let m = c(gr);
 				if (!u.digest().equals(m)) throw Error(`blob '${n}' failed integrity (sha mismatch)`);
 			} else throw Error(`unknown bundle entry kind ${e}`);
 		}
 	} finally {
 		a || await Promise.resolve(i.return?.()).catch(() => void 0);
 	}
-}, Sr = async (e, t) => {
+}, wr = async (e, t) => {
 	let n = new Set(t), r = /* @__PURE__ */ new Map(), i = Buffer.alloc(0), a = e[Symbol.asyncIterator](), o = async () => {
 		let { value: e, done: t } = await a.next();
 		return !t && (i = i.length === 0 ? Buffer.from(e) : Buffer.concat([i, Buffer.from(e)]), !0);
@@ -1946,11 +1969,11 @@ var yr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), br
 		}
 		return Buffer.concat(t);
 	};
-	if (!await s(Q.length) || !c(Q.length).equals(Q)) throw Error("not a bundle archive (bad magic)");
+	if (!await s(X.length) || !c(X.length).equals(X)) throw Error("not a bundle archive (bad magic)");
 	for (; await s(1);) {
 		let e = c(1).readUInt8(0);
-		if (e === dr || e === pr) break;
-		if (e !== fr) throw Error(`unknown bundle entry kind ${e}`);
+		if (e === pr || e === hr) break;
+		if (e !== mr) throw Error(`unknown bundle entry kind ${e}`);
 		if (!await s(4)) break;
 		let t = c(4).readUInt32BE(0);
 		if (!await s(t)) break;
@@ -1960,22 +1983,22 @@ var yr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), br
 		if (a === null || n.has(i) && (r.set(i, a), n.delete(i), n.size === 0)) break;
 	}
 	return r;
-}, Cr = (e, t) => xr(e, {
+}, Tr = (e, t) => Cr(e, {
 	dir: t,
-	blobs: wr(t)
-}), wr = (e) => {
+	blobs: Er(t)
+}), Er = (e) => {
 	let t = /* @__PURE__ */ new Set();
 	return {
 		has: async (e) => t.has(e),
 		write: async (n, r, i) => {
-			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = B(e, "assets");
-			await I(c, { recursive: !0 });
-			let l = oe("sha256"), u = 0, d = new s({ transform(e, t, n) {
+			let a = await import("node:fs/promises"), { pipeline: o } = await import("node:stream/promises"), { Transform: s } = await import("node:stream"), c = I(e, "assets");
+			await P(c, { recursive: !0 });
+			let l = T("sha256"), u = 0, d = new s({ transform(e, t, n) {
 				l.update(e), u += e.length, n(null, e);
-			} }), f = B(c, `.tmp-${Date.now()}-${t.size}`);
-			await o(r, d, D(f));
+			} }), f = I(c, `.tmp-${Date.now()}-${t.size}`);
+			await o(r, d, pe(f));
 			let p = l.digest("hex");
-			await a.rename(f, B(c, p)), await a.appendFile(B(c, "index.ndjson"), `${JSON.stringify({
+			await a.rename(f, I(c, p)), await a.appendFile(I(c, "index.ndjson"), `${JSON.stringify({
 				key: n,
 				sha256: p,
 				size: u,
@@ -1983,33 +2006,33 @@ var yr = (e, t) => new Promise((n, r) => e.write(t, (e) => e ? r(e) : n())), br
 			})}\n`), t.add(n);
 		}
 	};
-}, Tr = xe(ue), Er = Buffer.from("VENC1\0\0\0"), Dr = 32, Or = 16, kr = 7, Ar = 16, jr = 262144, Mr = {
+}, Dr = we(ue), Or = Buffer.from("VENC1\0\0\0"), kr = 32, Ar = 16, jr = 7, Mr = 16, Nr = 262144, Pr = {
 	N: 32768,
 	r: 8,
 	p: 1
-}, Nr = 134217728, Pr = 43, Fr = (e, t, n) => {
+}, Fr = 134217728, Ir = 43, Lr = (e, t, n) => {
 	let r = Buffer.alloc(12);
-	return e.copy(r, 0, 0, kr), r.writeUInt32BE(t >>> 0, kr), r.writeUInt8(+!!n, 11), r;
+	return e.copy(r, 0, 0, jr), r.writeUInt32BE(t >>> 0, jr), r.writeUInt8(+!!n, 11), r;
 };
-async function* Ir(e, t) {
+async function* Rr(e, t) {
 	if (!t) throw Error("encryptStream: a non-empty passphrase is required");
-	let n = ce(Or), r = ce(kr), i = await Tr(t, n, Dr, {
-		...Mr,
-		maxmem: Nr
-	}), a = Buffer.alloc(Pr);
-	Er.copy(a, 0), a.writeUInt32BE(Mr.N, 8), a.writeUInt32BE(Mr.r, 12), a.writeUInt32BE(Mr.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
+	let n = ce(Ar), r = ce(jr), i = await Dr(t, n, kr, {
+		...Pr,
+		maxmem: Fr
+	}), a = Buffer.alloc(Ir);
+	Or.copy(a, 0), a.writeUInt32BE(Pr.N, 8), a.writeUInt32BE(Pr.r, 12), a.writeUInt32BE(Pr.p, 16), n.copy(a, 20), r.copy(a, 36), yield new Uint8Array(a);
 	let o = 0, s = (e, t) => {
-		let n = ie("aes-256-gcm", i, Fr(r, o, t));
+		let n = ae("aes-256-gcm", i, Lr(r, o, t));
 		o === 0 && n.setAAD(a);
 		let s = Buffer.concat([n.update(e), n.final()]), c = n.getAuthTag();
 		o++;
-		let l = Buffer.alloc(5 + s.length + Ar);
-		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + Ar, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
+		let l = Buffer.alloc(5 + s.length + Mr);
+		return l.writeUInt8(+!!t, 0), l.writeUInt32BE(s.length + Mr, 1), s.copy(l, 5), c.copy(l, 5 + s.length), new Uint8Array(l);
 	}, c = Buffer.alloc(0);
-	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > jr;) yield s(c.subarray(0, jr), !1), c = c.subarray(jr);
+	for await (let t of e) for (c = c.length === 0 ? Buffer.from(t) : Buffer.concat([c, Buffer.from(t)]); c.length > Nr;) yield s(c.subarray(0, Nr), !1), c = c.subarray(Nr);
 	yield s(c, !0);
 }
-async function* Lr(e, t) {
+async function* zr(e, t) {
 	if (!t) throw Error("decryptStream: a non-empty passphrase is required");
 	let n = e[Symbol.asyncIterator](), r = Buffer.alloc(0), i = !1, a = async () => {
 		let { value: e, done: t } = await n.next();
@@ -2018,16 +2041,16 @@ async function* Lr(e, t) {
 		for (; r.length < e && !i && await a(););
 		return r.length >= e;
 	};
-	if (!await o(Pr)) throw Error("encrypted bundle truncated (no header)");
-	let s = r.subarray(0, Pr);
-	if (!s.subarray(0, 8).equals(Er)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
-	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Pr)), p = await Tr(t, d, Dr, {
+	if (!await o(Ir)) throw Error("encrypted bundle truncated (no header)");
+	let s = r.subarray(0, Ir);
+	if (!s.subarray(0, 8).equals(Or)) throw Error("not an encrypted bundle (bad magic / wrong passphrase target)");
+	let c = s.readUInt32BE(8), l = s.readUInt32BE(12), u = s.readUInt32BE(16), d = Buffer.from(s.subarray(20, 36)), f = Buffer.from(s.subarray(36, Ir)), p = await Dr(t, d, kr, {
 		N: c,
 		r: l,
 		p: u,
-		maxmem: Nr
+		maxmem: Fr
 	});
-	r = r.subarray(Pr);
+	r = r.subarray(Ir);
 	let m = 0, h = !1;
 	for (;;) {
 		if (!await o(5)) {
@@ -2036,11 +2059,11 @@ async function* Lr(e, t) {
 		}
 		if (h) throw Error("encrypted bundle has trailing data after the final frame");
 		let e = r.readUInt8(0) === 1, t = r.readUInt32BE(1);
-		if (t < Ar) throw Error("encrypted bundle corrupt (short frame)");
+		if (t < Mr) throw Error("encrypted bundle corrupt (short frame)");
 		if (!await o(5 + t)) throw Error("encrypted bundle truncated (frame body)");
-		let n = r.subarray(5, 5 + t - Ar), i = r.subarray(5 + t - Ar, 5 + t);
+		let n = r.subarray(5, 5 + t - Mr), i = r.subarray(5 + t - Mr, 5 + t);
 		r = r.subarray(5 + t);
-		let a = ae("aes-256-gcm", p, Fr(f, m, e));
+		let a = oe("aes-256-gcm", p, Lr(f, m, e));
 		m === 0 && a.setAAD(s), a.setAuthTag(i);
 		let c = Buffer.concat([a.update(n), a.final()]);
 		m++, e && (h = !0), c.length > 0 && (yield new Uint8Array(c));
@@ -2048,7 +2071,7 @@ async function* Lr(e, t) {
 }
 //#endregion
 //#region src/blobStorage.ts
-var Rr = (e, t) => ({
+var Br = (e, t) => ({
 	list: () => {
 		let e = t();
 		return { async *[Symbol.asyncIterator]() {
@@ -2061,32 +2084,32 @@ var Rr = (e, t) => ({
 		} };
 	},
 	open: (t) => ({ async *[Symbol.asyncIterator]() {
-		let r = await n.runPromise(j(e, t)), i = await M(r.stream);
+		let r = await n.runPromise(_e(e, t)), i = await A(r.stream);
 		for await (let e of i) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 	} })
-}), zr = (e, t) => Rr(e, () => w(t, {
-	table: A,
+}), Vr = (e, t) => Br(e, () => C(t, {
+	table: O,
 	chunkSize: 500
 }).pipe(l.map((e) => ({
 	key: String(e.key),
 	contentType: String(e.contentType ?? "application/octet-stream"),
 	size: Number(e.size ?? 0)
-})))), Br = (e) => ({
+})))), Hr = (e) => ({
 	has: (t) => n.runPromise(e.head(t).pipe(n.map((e) => e !== null))),
 	write: async (t, r, i) => {
-		let a = me("storage", () => ge.from(r));
-		await n.runPromise(he(e, t, a, {
+		let a = ge("storage", () => ve.from(r));
+		await n.runPromise(k(e, t, a, {
 			contentType: i.contentType,
 			totalSize: i.size
 		}));
 	}
-}), Vr = (e, t) => {
+}), Ur = (e, t) => {
 	let n = t === "dump" ? "mariadb-dump" : "mariadb", r = t === "dump" ? "mysqldump" : "mysql";
-	return e === "mariadb" ? Hr(n) ? { tool: n } : {
+	return e === "mariadb" ? Wr(n) ? { tool: n } : {
 		tool: r,
 		hint: `'${n}' is not on PATH, so this ran '${r}' instead. If that binary came from Oracle's MySQL client it queries information_schema.COLUMN_STATISTICS, which MariaDB does not have, and the run dies with error 1109 after the first table. Install the MariaDB client package (which ships '${n}') and re-run. Do NOT reach for --column-statistics=0: that flag does not exist on '${n}', so it fixes the wrong client and breaks the right one. Note: a MariaDB 12.x client requires TLS by default, so running '${n}' BY HAND against a server without it fails with "TLS/SSL error: SSL is required" (2026) and needs --skip-ssl. This command is not affected.`
 	} : { tool: r };
-}, Hr = (e) => (process.env.PATH ?? "").split(z).filter((e) => e !== "").some((t) => fe(B(t, e))), Ur = (e) => {
+}, Wr = (e) => (process.env.PATH ?? "").split(xe).filter((e) => e !== "").some((t) => E(I(t, e))), Gr = (e) => {
 	switch (e) {
 		case "postgres": return "db.dump";
 		case "mysql":
@@ -2096,23 +2119,23 @@ var Rr = (e, t) => ({
 		case "mssql": return "db.bacpac";
 		default: return "db.dump";
 	}
-}, Wr = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), $ = (e) => {
+}, Kr = (e) => e.filename ?? e.database ?? ((e.url ?? "").replace(/^file:/, "") || "app.sqlite"), Z = (e, t = 3306) => {
 	if (e.host || e.database) return {
 		host: e.host ?? "localhost",
-		port: e.port ?? 3306,
+		port: e.port ?? t,
 		username: e.username ?? "root",
 		password: e.password ?? "",
 		database: e.database ?? ""
 	};
-	let t = new URL(e.url ?? "");
+	let n = new URL(e.url ?? "");
 	return {
-		host: t.hostname || "localhost",
-		port: t.port ? Number(t.port) : 3306,
-		username: decodeURIComponent(t.username) || "root",
-		password: decodeURIComponent(t.password) || "",
-		database: t.pathname.replace(/^\//, "") || ""
+		host: n.hostname || "localhost",
+		port: e.port ?? (n.port ? Number(n.port) : t),
+		username: decodeURIComponent(n.username) || "root",
+		password: decodeURIComponent(n.password) || "",
+		database: n.pathname.replace(/^\//, "") || ""
 	};
-}, Gr = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Kr = (e, t, n) => {
+}, qr = (e) => `Server=${e.host},${e.port};Database=${e.database};User ID=${e.username};Password=${e.password};TrustServerCertificate=True`, Jr = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -2122,7 +2145,7 @@ var Rr = (e, t) => ({
 					"--format=custom",
 					"--no-owner",
 					"--no-privileges",
-					...Jr,
+					...Xr,
 					"--dbname",
 					t.url,
 					"--file",
@@ -2130,10 +2153,7 @@ var Rr = (e, t) => ({
 				],
 				env: {}
 			};
-			let e = $({
-				...t,
-				port: t.port ?? 5432
-			});
+			let e = Z(t, 5432);
 			return {
 				kind: "spawn",
 				tool: "pg_dump",
@@ -2141,7 +2161,7 @@ var Rr = (e, t) => ({
 					"--format=custom",
 					"--no-owner",
 					"--no-privileges",
-					...Jr,
+					...Xr,
 					"-h",
 					e.host,
 					"-p",
@@ -2158,17 +2178,17 @@ var Rr = (e, t) => ({
 		}
 		case "mysql":
 		case "mariadb": {
-			let r = $(t);
+			let r = Z(t);
 			return {
 				kind: "spawn",
-				...Vr(e, "dump"),
+				...Ur(e, "dump"),
 				args: [
 					"--single-transaction",
 					"--routines",
 					"--triggers",
 					"--no-tablespaces",
 					"--protocol=TCP",
-					...qr.map((e) => `--ignore-table=${r.database}.${e}`),
+					...Yr.map((e) => `--ignore-table=${r.database}.${e}`),
 					"-h",
 					r.host,
 					"-P",
@@ -2184,7 +2204,7 @@ var Rr = (e, t) => ({
 		case "sqlite":
 		case "turso": return {
 			kind: "copy",
-			from: Wr(t),
+			from: Kr(t),
 			to: n
 		};
 		case "mssql": return {
@@ -2192,20 +2212,17 @@ var Rr = (e, t) => ({
 			tool: "sqlpackage",
 			args: [
 				"/Action:Export",
-				`/SourceConnectionString:${Gr($({
-					...t,
-					port: t.port ?? 1433
-				}))}`,
+				`/SourceConnectionString:${qr(Z(t, 1433))}`,
 				`/TargetFile:${n}`
 			],
 			env: {}
 		};
-		default: throw new K({
+		default: throw new W({
 			tool: "backup",
 			reason: `no native backup for dialect '${e}'`
 		});
 	}
-}, qr = [d, u], Jr = qr.flatMap((e) => ["--exclude-table", e]), Yr = (e) => e === "postgres" || e === "mysql" || e === "mariadb" ? qr : [], Xr = (e, t, n) => {
+}, Yr = [d, u], Xr = Yr.flatMap((e) => ["--exclude-table", e]), Zr = (e) => e === "postgres" || e === "mysql" || e === "mariadb" ? Yr : [], Qr = (e, t, n) => {
 	switch (e) {
 		case "postgres": {
 			if (t.url) return {
@@ -2221,10 +2238,7 @@ var Rr = (e, t) => ({
 				],
 				env: {}
 			};
-			let e = $({
-				...t,
-				port: t.port ?? 5432
-			});
+			let e = Z(t, 5432);
 			return {
 				kind: "spawn",
 				tool: "pg_restore",
@@ -2247,10 +2261,10 @@ var Rr = (e, t) => ({
 		}
 		case "mysql":
 		case "mariadb": {
-			let r = $(t);
+			let r = Z(t);
 			return {
 				kind: "spawn",
-				...Vr(e, "client"),
+				...Ur(e, "client"),
 				args: [
 					"--protocol=TCP",
 					"-h",
@@ -2269,37 +2283,104 @@ var Rr = (e, t) => ({
 		case "turso": return {
 			kind: "copy",
 			from: n,
-			to: Wr(t)
-		};
-		case "mssql": return {
-			kind: "spawn",
-			tool: "sqlpackage",
-			args: [
-				"/Action:Import",
-				`/TargetConnectionString:${Gr($({
-					...t,
-					port: t.port ?? 1433
-				}))}`,
-				`/SourceFile:${n}`
-			],
-			env: {}
+			to: Kr(t)
 		};
-		default: throw new K({
+		case "mssql": {
+			let e = Z(t, 1433), r = ei(e.database);
+			return {
+				kind: "mssql-replace",
+				load: {
+					kind: "spawn",
+					tool: "sqlpackage",
+					args: [
+						"/Action:Import",
+						`/TargetConnectionString:${qr({
+							...e,
+							database: r
+						})}`,
+						`/SourceFile:${n}`
+					],
+					env: {}
+				},
+				server: {
+					host: e.host,
+					port: e.port,
+					username: e.username,
+					password: e.password,
+					database: "master"
+				},
+				live: e.database,
+				scratch: r,
+				carry: Yr
+			};
+		}
+		default: throw new W({
 			tool: "restore",
 			reason: `no native restore for dialect '${e}'`
 		});
 	}
-}, Zr = (e) => e.kind === "copy" ? n.async((t) => {
+}, Q = (e) => `[${e.replaceAll("]", "]]")}]`, $ = (e) => `N'${e.replaceAll("'", "''")}'`, $r = "__voltro_restore_", ei = (e, t = le().slice(0, 8)) => `${e}${$r}${t}`, ti = (e) => e.replace($r, "__voltro_replaced_"), ni = (e) => `IF DB_ID(${$(e)}) IS NOT NULL BEGIN ALTER DATABASE ${Q(e)} SET SINGLE_USER WITH ROLLBACK IMMEDIATE; DROP DATABASE ${Q(e)} END`, ri = (e) => `DECLARE @leftover sysname, @drop nvarchar(max);
+DECLARE leftovers CURSOR LOCAL FAST_FORWARD FOR SELECT name FROM sys.databases WHERE name LIKE ${$(`${`${e}${$r}`.replace(/[\\%_[]/g, (e) => `\\${e}`)}%`)} ESCAPE N'\\';
+OPEN leftovers; FETCH NEXT FROM leftovers INTO @leftover;
+WHILE @@FETCH_STATUS = 0 BEGIN
+  SET @drop = N'ALTER DATABASE ' + QUOTENAME(@leftover) + N' SET SINGLE_USER WITH ROLLBACK IMMEDIATE; DROP DATABASE ' + QUOTENAME(@leftover);
+  EXEC(@drop);
+  FETCH NEXT FROM leftovers INTO @leftover;
+END`, ii = (e) => {
+	let t = Q(e.live), n = Q(e.scratch), r = ti(e.scratch);
+	return {
+		prepare: [ri(e.live)],
+		carry: e.carry.map((e) => {
+			let r = $(`${n}.dbo.${Q(e)}`), i = $(`${t}.dbo.${Q(e)}`);
+			return `IF OBJECT_ID(${r}) IS NOT NULL BEGIN
+  DELETE FROM ${n}.dbo.${Q(e)};
+  IF OBJECT_ID(${i}) IS NOT NULL BEGIN
+    DECLARE @columns nvarchar(max) = (SELECT STRING_AGG(QUOTENAME(s.name), ',') FROM ${n}.sys.columns s
+      JOIN ${t}.sys.columns l ON l.name = s.name AND l.object_id = OBJECT_ID(${i})
+      WHERE s.object_id = OBJECT_ID(${r}) AND s.is_computed = 0);
+    EXEC(N'INSERT INTO ${n.replaceAll("'", "''")}.dbo.${Q(e).replaceAll("'", "''")} (' + @columns + N') SELECT ' + @columns + N' FROM ${t.replaceAll("'", "''")}.dbo.${Q(e).replaceAll("'", "''")}');
+  END
+END`;
+		}),
+		swap: [
+			`ALTER DATABASE ${t} SET SINGLE_USER WITH ROLLBACK IMMEDIATE`,
+			`ALTER DATABASE ${t} MODIFY NAME = ${Q(r)}`,
+			`ALTER DATABASE ${n} MODIFY NAME = ${t}`,
+			ni(r)
+		],
+		undoSwap: [`IF DB_ID(${$(e.live)}) IS NULL AND DB_ID(${$(r)}) IS NOT NULL ALTER DATABASE ${Q(r)} MODIFY NAME = ${t}`, `IF DB_ID(${$(e.live)}) IS NOT NULL ALTER DATABASE ${t} SET MULTI_USER`],
+		cleanup: [ni(e.scratch)]
+	};
+}, ai = (e) => {
+	let t = [];
+	for (let n = e, r = 0; n != null && r < 4; r++) {
+		let e = n instanceof Error ? n.message : typeof n == "object" && "message" in n ? String(n.message) : String(n);
+		e && !t.includes(e) && t.push(e), n = typeof n == "object" && "cause" in n ? n.cause : void 0;
+	}
+	return t.join(": ");
+}, oi = (e, t) => {
+	if (t === void 0) return n.fail(new W({
+		tool: "sqlpackage",
+		reason: "an mssql restore swaps databases and needs a SQL connection to the server; none was provided"
+	}));
+	let r = ii(e), i = (r, i) => t(e.server, i).pipe(n.mapError((e) => new W({
+		tool: "sqlpackage",
+		reason: `${r}: ${ai(e)}`
+	}))), a = i("dropping the scratch database", r.cleanup).pipe(n.ignore);
+	return n.gen(function* () {
+		yield* i(`preparing ${e.scratch}`, r.prepare), yield* si(e.load).pipe(n.tapError(() => a)), yield* i(`carrying ${e.carry.join(", ")} into the imported copy`, r.carry).pipe(n.tapError(() => a)), yield* i(`swapping ${e.scratch} in as ${e.live}`, r.swap).pipe(n.tapError(() => i("putting the original database back", r.undoSwap).pipe(n.ignore)));
+	});
+}, si = (e, t) => e.kind === "mssql-replace" ? oi(e, t) : e.kind === "copy" ? n.async((t) => {
 	let r = `${e.to}.restoring-${le()}`, i = (e) => {
 		try {
-			k(r);
+			he(r);
 		} catch {}
-		t(n.fail(new K({
+		t(n.fail(new W({
 			tool: "copy",
 			reason: e
 		})));
 	};
-	E(e.from, r, (a) => {
+	de(e.from, r, (a) => {
 		if (a) {
 			i(`copy ${e.from} → ${e.to}: ${a.message}`);
 			return;
@@ -2309,9 +2390,9 @@ var Rr = (e, t) => ({
 			`${e.to}-shm`,
 			`${e.to}-journal`
 		]) try {
-			k(t);
+			he(t);
 		} catch {}
-		pe(r, e.to, (r) => {
+		D(r, e.to, (r) => {
 			if (r) {
 				i(`copy ${e.from} → ${e.to}: ${r.message}`);
 				return;
@@ -2320,7 +2401,7 @@ var Rr = (e, t) => ({
 		});
 	});
 }) : n.async((t) => {
-	let r = Se(e.tool, [...e.args], {
+	let r = Te(e.tool, [...e.args], {
 		env: {
 			...process.env,
 			...e.env
@@ -2340,27 +2421,27 @@ var Rr = (e, t) => ({
 		s ??= e;
 	};
 	if (e.stdoutFile && r.stdout) {
-		let t = D(e.stdoutFile);
-		t.on("error", (t) => c(`writing ${R(e.stdoutFile)}: ${t.message}`)), r.stdout.on("error", (e) => c(`reading the tool's output: ${e.message}`)), r.stdout.pipe(t);
+		let t = pe(e.stdoutFile);
+		t.on("error", (t) => c(`writing ${F(e.stdoutFile)}: ${t.message}`)), r.stdout.on("error", (e) => c(`reading the tool's output: ${e.message}`)), r.stdout.pipe(t);
 	}
 	let l = 0;
 	if (e.stdinFile && r.stdin) {
-		let t = de(e.stdinFile);
+		let t = fe(e.stdinFile);
 		t.on("data", (e) => {
 			l += e.length;
 		}), t.on("error", (t) => {
-			c(`reading ${R(e.stdinFile)}: ${t.message}`), r.stdin?.end();
+			c(`reading ${F(e.stdinFile)}: ${t.message}`), r.stdin?.end();
 		}), r.stdin.on("error", (t) => {
-			t.code !== "EPIPE" && c(`feeding ${R(e.stdinFile)} to ${e.tool}: ${t.message}`);
+			t.code !== "EPIPE" && c(`feeding ${F(e.stdinFile)} to ${e.tool}: ${t.message}`);
 		}), t.pipe(r.stdin);
 	}
 	let u = () => {
 		if (e.stdoutFile !== void 0) try {
-			k(e.stdoutFile);
+			he(e.stdoutFile);
 		} catch {}
 	};
 	r.on("error", (t) => {
-		u(), o(n.fail(new K({
+		u(), o(n.fail(new W({
 			tool: e.tool,
 			reason: `failed to launch (is '${e.tool}' installed + on PATH?): ${t.message}`,
 			...e.hint === void 0 ? {} : { hint: e.hint }
@@ -2371,25 +2452,25 @@ var Rr = (e, t) => ({
 			return;
 		}
 		u();
-		let r = e.stdinFile === void 0 ? "" : ` — ${l} of ${Qr(e.stdinFile)} byte(s) of ${R(e.stdinFile)} had been fed to it`;
-		o(n.fail(new K({
+		let r = e.stdinFile === void 0 ? "" : ` — ${l} of ${ci(e.stdinFile)} byte(s) of ${F(e.stdinFile)} had been fed to it`;
+		o(n.fail(new W({
 			tool: e.tool,
-			reason: (t === 0 ? `exited cleanly, but ${s}` : `exited with code ${t}${s === void 0 ? "" : ` (${s})`}`) + r + (e.stdoutFile === void 0 ? "" : ` — the partial ${R(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
+			reason: (t === 0 ? `exited cleanly, but ${s}` : `exited with code ${t}${s === void 0 ? "" : ` (${s})`}`) + r + (e.stdoutFile === void 0 ? "" : ` — the partial ${F(e.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
 			stderr: i.trim() === "" ? `(${e.tool} printed nothing to stderr)` : i.slice(-2e3),
 			...e.hint === void 0 ? {} : { hint: e.hint }
 		})));
 	});
-}), Qr = (e) => {
+}), ci = (e) => {
 	try {
-		return String(O(e).size);
+		return String(me(e).size);
 	} catch {
 		return "?";
 	}
-}, $r = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), ei = (e) => n.gen(function* () {
-	let t = yield* st(e.scope ?? { kind: "all" }, e.snapshot, {
+}, li = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), ui = (e) => n.gen(function* () {
+	let t = yield* lt(e.scope ?? { kind: "all" }, e.snapshot, {
 		store: e.store,
 		...e.tenantTables ? { tenantTables: e.tenantTables } : {}
-	}), r = an(t.tables, e.snapshot), i = e.classification ?? Te(e.snapshot), a = e.sampleSize ?? 20, o = ze(r.map((t) => ({
+	}), r = sn(t.tables, e.snapshot), i = e.classification ?? Oe(e.snapshot), a = e.sampleSize ?? 20, o = He(r.map((t) => ({
 		name: t,
 		columns: (e.snapshot.tables.find((e) => e.name === t)?.columns ?? []).map((e) => ({
 			name: e.name,
@@ -2397,19 +2478,19 @@ var Rr = (e, t) => ({
 		}))
 	})), i, e.masking), s = [], c = [];
 	for (let i of r) {
-		let r = t.predicateFor(i), u = yield* w(e.store, {
+		let r = t.predicateFor(i), u = yield* C(e.store, {
 			table: i,
 			chunkSize: a,
 			...r === void 0 ? {} : { where: r }
-		}).pipe(l.take(a), l.runCollect, n.map((e) => [...e])), d = u.map((t) => He(t, i, o.actions, e.masking.seed));
-		c.push(...Ve(d, i, o.actions));
+		}).pipe(l.take(a), l.runCollect, n.map((e) => [...e])), d = u.map((t) => Ge(t, i, o.actions, e.masking.seed));
+		c.push(...We(d, i, o.actions));
 		let f = u[0], p = d[0], m = [];
 		if (f && p) for (let [e, t] of Object.entries(o.actions)) {
 			if (!e.startsWith(`${i}.`) || t === "keep") continue;
 			let n = e.slice(i.length + 1);
 			m.push({
 				column: n,
-				action: $r(t),
+				action: li(t),
 				before: f[n],
 				after: p[n]
 			});
@@ -2424,7 +2505,7 @@ var Rr = (e, t) => ({
 		leaks: c,
 		unclassified: o.unclassified
 	};
-}), ti = (e, t) => {
+}), di = (e, t) => {
 	let n = new Map(t.map((e) => [e.name, e])), r = [], i = {};
 	for (let t of e) {
 		let e = n.get(t.name);
@@ -2479,7 +2560,7 @@ var Rr = (e, t) => ({
 		skipColumns: i,
 		refuse: r.some((e) => e.verdict === "refuse")
 	};
-}, ni = (e) => {
+}, fi = (e) => {
 	if (e.findings.length === 0) return ["  schema matches the bundle"];
 	let t = {
 		safe: "✓",
@@ -2490,4 +2571,4 @@ var Rr = (e, t) => ({
 	return n.push(""), n.push(`  discarded: ${r("value-dropped")}   defaulted: ${r("filled-by-default")}   refused: ${r("refuse")}`), e.refuse && (n.push(""), n.push("  REFUSED — no row was written. These are the differences that would make"), n.push("  imported rows WRONG rather than merely incomplete.")), n;
 };
 //#endregion
-export { Mt as ASSETS_DIR, Nt as ASSET_INDEX_FILE, G as BundleError, qe as CodecError, Ye as CompressionError, tt as CrossDialectError, jt as DATA_DIR, we as DEFAULT_CLASS_ACTIONS, Ue as ENVIRONMENT_LOCAL_TABLES, We as ENVIRONMENT_PORTABLE_TABLES, qr as EXCLUDED_FROM_DUMP, St as FORMAT_VERSION, et as ImportModeError, Je as IntegrityError, Pt as LEDGER_FILE, kt as MANIFEST_FILE, $e as MaskingError, K as NativeToolError, Ze as RowsRefusedError, rr as SAVEPOINT_BATCH_SIZE, jn as STAGING_PREFIX, Qe as SchemaDriftError, Xe as ScopeError, U as applyAction, ar as asImportError, ur as assessLiveImport, Wt as assetDone, Ur as backupArtifactName, Kr as backupCommand, Mn as canStage, yn as canonicalType, mt as captureAssetsToCas, Sn as checkPortability, er as checkSchemaDrift, Te as classificationFromSnapshot, ti as classifyImportDrift, yt as compressionExt, it as computeSubsetIds, qn as decideStaging, Ot as decodeManifest, en as decodeRow, Qt as decodeValue, Lr as decryptStream, lr as defineDataProfile, $n as diffSnapshots, wr as dirBlobSink, In as dropStagingSql, Yr as dumpExcludedTables, Vt as emptyLedger, Dt as encodeManifest, $t as encodeRow, Xt as encodeValue, Ir as encryptStream, Ke as environmentLocalNotice, Ge as environmentLocalReason, Hn as execStatements, ni as formatImportDrift, Cn as formatIssue, _t as hasZstd, W as isEnvironmentLocal, bt as makeCompressor, xt as makeDecompressor, He as maskRow, rn as ndjsonToRows, ft as noAssetProgress, vn as outsideReferenceRefusal, _n as outsideReferencesInto, vr as packBundle, Sr as peekBundle, vt as pickCompression, ze as planMasking, ei as previewMasking, ht as readAssetIndex, Ht as readLedger, Ee as resolveAction, st as resolveScope, dt as restoreAssetFromCas, gt as restoreAssetsFromCas, Xr as restoreCommand, nn as rowsToNdjson, gn as runExport, cr as runImport, Zr as runNativeStep, Ve as scanForLeaks, X as stagingNameFor, lt as storageAssetSink, ct as storageAssetSource, Br as storageBlobSink, Rr as storageBlobSource, zr as storageRefsBlobSource, at as subsetToScope, Ut as tableDone, an as topoSortTables, xr as unpackBundle, Cr as unpackBundleToDir, ut as writeAssetToCas, J as writeLedger };
+export { Pt as ASSETS_DIR, Ft as ASSET_INDEX_FILE, H as BundleError, Xe as CodecError, Qe as CompressionError, rt as CrossDialectError, Nt as DATA_DIR, De as DEFAULT_CLASS_ACTIONS, Ke as ENVIRONMENT_LOCAL_TABLES, qe as ENVIRONMENT_PORTABLE_TABLES, Yr as EXCLUDED_FROM_DUMP, wt as FORMAT_VERSION, nt as ImportModeError, Ze as IntegrityError, It as LEDGER_FILE, jt as MANIFEST_FILE, tt as MaskingError, W as NativeToolError, $e as RowsRefusedError, ar as SAVEPOINT_BATCH_SIZE, Nn as STAGING_PREFIX, et as SchemaDriftError, U as ScopeError, B as applyAction, sr as asImportError, fr as assessLiveImport, Kt as assetDone, Gr as backupArtifactName, Jr as backupCommand, Pn as canStage, xn as canonicalType, gt as captureAssetsToCas, wn as checkPortability, nr as checkSchemaDrift, Oe as classificationFromSnapshot, di as classifyImportDrift, xt as compressionExt, ot as computeSubsetIds, Yn as decideStaging, At as decodeManifest, nn as decodeRow, en as decodeValue, zr as decryptStream, dr as defineDataProfile, tr as diffSnapshots, Er as dirBlobSink, Rn as dropStagingSql, Zr as dumpExcludedTables, Ut as emptyLedger, kt as encodeManifest, tn as encodeRow, Qt as encodeValue, Rr as encryptStream, Ye as environmentLocalNotice, Je as environmentLocalReason, Wn as execStatements, fi as formatImportDrift, Tn as formatIssue, yt as hasZstd, V as isEnvironmentLocal, St as makeCompressor, Ct as makeDecompressor, Ge as maskRow, ii as mssqlReplaceStatements, ei as mssqlScratchName, on as ndjsonToRows, mt as noAssetProgress, bn as outsideReferenceRefusal, yn as outsideReferencesInto, br as packBundle, wr as peekBundle, bt as pickCompression, He as planMasking, ui as previewMasking, _t as readAssetIndex, Wt as readLedger, ke as resolveAction, lt as resolveScope, pt as restoreAssetFromCas, vt as restoreAssetsFromCas, Qr as restoreCommand, an as rowsToNdjson, vn as runExport, ur as runImport, si as runNativeStep, We as scanForLeaks, J as stagingNameFor, dt as storageAssetSink, ut as storageAssetSource, Hr as storageBlobSink, Br as storageBlobSource, Vr as storageRefsBlobSource, st as subsetToScope, Gt as tableDone, sn as topoSortTables, Cr as unpackBundle, Tr as unpackBundleToDir, ft as writeAssetToCas, K as writeLedger };