@voltro/data-transfer 0.86.0 → 0.88.0

package/dist/manifest.js

@@ -1,52 +1,55 @@
-import { Schema as e } from "effect";
-//#region src/manifest.ts
-var t = 1, n = e.Struct({
-	name: e.String,
-	file: e.String,
-	rowCount: e.Number,
-	checksum: e.String,
-	columnTypes: e.Record(e.String, e.String),
-	primaryKey: e.String
-}), r = e.Struct({
-	kind: e.Literals([
+import { isSafeBundlePath as e } from "./bundlePaths.js";
+import { Schema as t } from "effect";
+import { StorageAddress as n } from "@voltro/plugin-storage/errors";
+// src/manifest.ts
+var r = 2, i = t.Struct({
+	name: t.String,
+	file: t.String,
+	rowCount: t.Number,
+	checksum: t.String,
+	columnTypes: t.Record(t.String, t.String),
+	primaryKey: t.String
+}), a = t.Struct({
+	kind: t.Literals([
 		"all",
 		"tenant",
 		"tables"
 	]),
-	tenantId: e.optional(e.String),
-	tables: e.optional(e.Array(e.String)),
-	exclude: e.optional(e.Array(e.String))
-}), i = e.Struct({
-	count: e.Number,
-	totalBytes: e.Number,
-	index: e.optional(e.String)
-});
-e.Struct({
-	key: e.String,
-	sha256: e.String,
-	size: e.Number,
-	contentType: e.String
-});
-var a = e.Struct({
-	formatVersion: e.Number,
-	createdAt: e.String,
-	source: e.Struct({
-		dialect: e.String,
-		schemaFingerprint: e.String
+	tenantId: t.optional(t.String),
+	tables: t.optional(t.Array(t.String)),
+	exclude: t.optional(t.Array(t.String))
+}), o = t.Struct({
+	count: t.Number,
+	totalBytes: t.Number,
+	index: t.optional(t.String.pipe(t.check(t.makeFilter(e))))
+}), s = n, c = t.Struct({
+	...s.fields,
+	sha256: t.String.pipe(t.check(t.isPattern(/^[a-f0-9]{64}$/))),
+	size: t.Number.pipe(t.check(t.isInt()), t.check(t.isGreaterThanOrEqualTo(0)), t.check(t.isLessThanOrEqualTo(2 ** 53 - 1))),
+	contentType: t.String.pipe(t.check(t.isMinLength(1)), t.check(t.makeFilter((e) => !/[\uD800-\uDFFF]/u.test(e))))
+}), l = t.Struct({
+	formatVersion: t.Number,
+	createdAt: t.String,
+	source: t.Struct({
+		dialect: t.String,
+		schemaFingerprint: t.String
 	}),
-	scope: r,
-	consistency: e.Literals(["live", "snapshot"]),
-	compression: e.Literals([
+	scope: a,
+	consistency: t.Literals(["live", "snapshot"]),
+	compression: t.Literals([
 		"zstd",
 		"gzip",
 		"none"
 	]),
-	tables: e.Array(n),
-	assets: i,
-	masking: e.optional(e.Struct({
-		policyId: e.optional(e.String),
-		transformed: e.Array(e.String)
+	tables: t.Array(i),
+	assets: o,
+	fieldKeys: t.optional(t.Struct({
+		keyIds: t.Array(t.String),
+		unnamed: t.Number
+	})),
+	masking: t.optional(t.Struct({
+		policyId: t.optional(t.String),
+		transformed: t.Array(t.String)
 	}))
-}), o = e.encodeSync(e.fromJsonString(a)), s = e.decodeUnknownSync(e.fromJsonString(a)), c = "manifest.json", l = "README.md", u = "data", d = "assets", f = "assets/index.ndjson", p = ".ledger.json";
-//#endregion
-export { d as ASSETS_DIR, f as ASSET_INDEX_FILE, i as AssetSummary, u as DATA_DIR, r as ExportScope, t as FORMAT_VERSION, p as LEDGER_FILE, c as MANIFEST_FILE, a as Manifest, l as README_FILE, n as TableEntry, s as decodeManifest, o as encodeManifest };
+}), u = t.encodeSync(t.fromJsonString(l)), d = t.decodeUnknownSync(t.fromJsonString(l)), f = "manifest.json", p = "README.md", m = "data", h = "assets", g = "assets/index.ndjson", _ = ".ledger.json";
+export { h as ASSETS_DIR, g as ASSET_INDEX_FILE, s as AssetAddress, c as AssetEntry, o as AssetSummary, m as DATA_DIR, a as ExportScope, r as FORMAT_VERSION, _ as LEDGER_FILE, f as MANIFEST_FILE, l as Manifest, p as README_FILE, i as TableEntry, d as decodeManifest, u as encodeManifest };

package/dist/masking.js

@@ -1,5 +1,5 @@
 import { createHmac as e } from "node:crypto";
-//#region src/masking.ts
+// src/masking.ts
 var t = {
 	email: { fake: "email" },
 	fullName: { fake: "fullName" },
@@ -242,5 +242,4 @@ var t = {
 	});
 	return a;
 };
-//#endregion
 export { t as DEFAULT_CLASS_ACTIONS, h as applyAction, n as classificationFromSnapshot, v as isMaskAction, S as maskRow, y as planMasking, r as resolveAction, x as scanForLeaks };

package/dist/maskingPreview.js

@@ -3,7 +3,7 @@ import { resolveScope as i } from "./scope.js";
 import { topoSortTables as a } from "./topo.js";
 import { Effect as o, Stream as s } from "effect";
 import { streamTable as c } from "@voltro/database";
-//#region src/maskingPreview.ts
+// src/maskingPreview.ts
 var l = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "custom" : String(e), u = (u) => o.gen(function* () {
 	let d = u.scope ?? { kind: "all" }, f = yield* i(d, u.snapshot, {
 		store: u.store,
@@ -44,5 +44,4 @@ var l = (e) => typeof e == "object" && e ? "fake" in e ? `fake:${e.fake}` : "cus
 		unclassified: _.unclassified
 	};
 });
-//#endregion
 export { u as previewMasking };

package/dist/nativeDump.js

@@ -5,7 +5,7 @@ import { randomUUID as i } from "node:crypto";
 import { copyFile as a, createReadStream as o, createWriteStream as s, existsSync as c, rename as l, statSync as u, unlinkSync as d } from "node:fs";
 import { basename as f, delimiter as p, join as m } from "node:path";
 import { spawn as h } from "node:child_process";
-//#region src/nativeDump.ts
+// src/nativeDump.ts
 var g = (e, t) => {
 	let n = t === "dump" ? "mariadb-dump" : "mariadb", r = t === "dump" ? "mysqldump" : "mysql";
 	return e === "mariadb" ? _(n) ? { tool: n } : {
@@ -104,12 +104,16 @@ var g = (e, t) => {
 				stdoutFile: r
 			};
 		}
-		case "sqlite":
-		case "turso": return {
-			kind: "copy",
+		case "sqlite": return {
+			kind: "sqlite-backup",
 			from: y(n),
 			to: r
 		};
+		case "turso": return {
+			kind: "vacuum-into",
+			conn: n,
+			to: r
+		};
 		case "mssql": return {
 			kind: "spawn",
 			tool: "sqlpackage",
@@ -273,97 +277,141 @@ END`;
 	return t.gen(function* () {
 		yield* a(`preparing ${n.scratch}`, i.prepare), yield* L(n.load).pipe(t.tapError(() => o)), yield* a(`carrying ${n.carry.join(", ")} into the imported copy`, i.carry).pipe(t.tapError(() => o)), yield* a(`swapping ${n.scratch} in as ${n.live}`, i.swap).pipe(t.tapError(() => a("putting the original database back", i.undoSwap).pipe(t.ignore)));
 	});
-}, L = (n, r) => n.kind === "mssql-replace" ? I(n, r) : n.kind === "copy" ? t.callback((r) => {
-	let o = `${n.to}.restoring-${i()}`, s = (n) => {
-		try {
-			d(o);
-		} catch {}
-		r(t.fail(new e({
-			tool: "copy",
-			reason: n
-		})));
-	};
-	a(n.from, o, (e) => {
-		if (e) s(`copy ${n.from} → ${n.to}: ${e.message}`);
-		else {
-			for (let e of [
-				`${n.to}-wal`,
-				`${n.to}-shm`,
-				`${n.to}-journal`
-			]) try {
-				d(e);
+}, L = (n, r) => {
+	if (n.kind === "mssql-replace") return I(n, r);
+	if (n.kind === "vacuum-into") {
+		if (r === void 0) return t.fail(new e({
+			tool: "vacuum-into",
+			reason: "a VACUUM INTO backup needs a SQL connection to the database"
+		}));
+		let a = `${n.to}.backing-up-${i()}`;
+		return r(n.conn, [`VACUUM INTO '${a.replaceAll("'", "''")}'`]).pipe(t.flatMap(() => t.callback((e) => {
+			l(a, n.to, (n) => e(n ? t.fail(n) : t.void));
+		})), t.mapError((t) => {
+			try {
+				d(a);
 			} catch {}
-			l(o, n.to, (e) => {
-				e ? s(`copy ${n.from} → ${n.to}: ${e.message}`) : r(t.void);
+			return new e({
+				tool: "vacuum-into",
+				reason: `VACUUM INTO ${n.to}: ${t instanceof Error ? t.message : String(t)}`
 			});
-		}
-	});
-}) : t.callback((r) => {
-	let i = h(n.tool, [...n.args], {
-		env: {
-			...process.env,
-			...n.env
-		},
-		stdio: [
-			"pipe",
-			n.stdoutFile ? "pipe" : "inherit",
-			"pipe"
-		]
-	}), a = "";
-	i.stderr?.on("data", (e) => {
-		a += String(e);
-	});
-	let c = !1, l = (e) => {
-		c || (c = !0, r(e));
-	}, u, p = (e) => {
-		u ??= e;
-	};
-	if (n.stdoutFile && i.stdout) {
-		let e = s(n.stdoutFile);
-		e.on("error", (e) => p(`writing ${f(n.stdoutFile)}: ${e.message}`)), i.stdout.on("error", (e) => p(`reading the tool's output: ${e.message}`)), i.stdout.pipe(e);
-	}
-	let m = 0;
-	if (n.stdinFile && i.stdin) {
-		let e = o(n.stdinFile);
-		e.on("data", (e) => {
-			m += e.length;
-		}), e.on("error", (e) => {
-			p(`reading ${f(n.stdinFile)}: ${e.message}`), i.stdin?.end();
-		}), i.stdin.on("error", (e) => {
-			e.code !== "EPIPE" && p(`feeding ${f(n.stdinFile)} to ${n.tool}: ${e.message}`);
-		}), e.pipe(i.stdin);
+		}));
 	}
-	let g = () => {
-		if (n.stdoutFile !== void 0) try {
-			d(n.stdoutFile);
-		} catch {}
-	};
-	i.on("error", (r) => {
-		g(), l(t.fail(new e({
-			tool: n.tool,
-			reason: `failed to launch (is '${n.tool}' installed + on PATH?): ${r.message}`,
-			...n.hint === void 0 ? {} : { hint: n.hint }
-		})));
-	}), i.on("close", (r) => {
-		if (r === 0 && u === void 0) {
-			l(t.void);
-			return;
+	return n.kind === "sqlite-backup" ? t.tryPromise({
+		try: async () => {
+			let { backup: e, DatabaseSync: t } = await import("node:sqlite"), r = `${n.to}.backing-up-${i()}`, a = new t(n.from, { readOnly: !0 });
+			try {
+				await e(a, r);
+			} catch (e) {
+				try {
+					d(r);
+				} catch {}
+				throw e;
+			} finally {
+				a.close();
+			}
+			await new Promise((e, t) => {
+				l(r, n.to, (n) => {
+					n ? t(n) : e();
+				});
+			});
+		},
+		catch: (t) => new e({
+			tool: "sqlite-backup",
+			reason: `backup ${n.from} → ${n.to}: ${t instanceof Error ? t.message : String(t)}`
+		})
+	}) : n.kind === "copy" ? t.callback((r) => {
+		let o = `${n.to}.restoring-${i()}`, s = (n) => {
+			try {
+				d(o);
+			} catch {}
+			r(t.fail(new e({
+				tool: "copy",
+				reason: n
+			})));
+		};
+		a(n.from, o, (e) => {
+			if (e) s(`copy ${n.from} → ${n.to}: ${e.message}`);
+			else {
+				for (let e of [
+					`${n.to}-wal`,
+					`${n.to}-shm`,
+					`${n.to}-journal`,
+					`${n.to}-log`
+				]) try {
+					d(e);
+				} catch {}
+				l(o, n.to, (e) => {
+					e ? s(`copy ${n.from} → ${n.to}: ${e.message}`) : r(t.void);
+				});
+			}
+		});
+	}) : t.callback((r) => {
+		let i = h(n.tool, [...n.args], {
+			env: {
+				...process.env,
+				...n.env
+			},
+			stdio: [
+				"pipe",
+				n.stdoutFile ? "pipe" : "inherit",
+				"pipe"
+			]
+		}), a = "";
+		i.stderr?.on("data", (e) => {
+			a += String(e);
+		});
+		let c = !1, l = (e) => {
+			c || (c = !0, r(e));
+		}, u, p = (e) => {
+			u ??= e;
+		};
+		if (n.stdoutFile && i.stdout) {
+			let e = s(n.stdoutFile);
+			e.on("error", (e) => p(`writing ${f(n.stdoutFile)}: ${e.message}`)), i.stdout.on("error", (e) => p(`reading the tool's output: ${e.message}`)), i.stdout.pipe(e);
+		}
+		let m = 0;
+		if (n.stdinFile && i.stdin) {
+			let e = o(n.stdinFile);
+			e.on("data", (e) => {
+				m += e.length;
+			}), e.on("error", (e) => {
+				p(`reading ${f(n.stdinFile)}: ${e.message}`), i.stdin?.end();
+			}), i.stdin.on("error", (e) => {
+				e.code !== "EPIPE" && p(`feeding ${f(n.stdinFile)} to ${n.tool}: ${e.message}`);
+			}), e.pipe(i.stdin);
 		}
-		g();
-		let i = n.stdinFile === void 0 ? "" : ` — ${m} of ${R(n.stdinFile)} byte(s) of ${f(n.stdinFile)} had been fed to it`;
-		l(t.fail(new e({
-			tool: n.tool,
-			reason: (r === 0 ? `exited cleanly, but ${u}` : `exited with code ${r}${u === void 0 ? "" : ` (${u})`}`) + i + (n.stdoutFile === void 0 ? "" : ` — the partial ${f(n.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
-			stderr: a.trim() === "" ? `(${n.tool} printed nothing to stderr)` : a.slice(-2e3),
-			...n.hint === void 0 ? {} : { hint: n.hint }
-		})));
+		let g = () => {
+			if (n.stdoutFile !== void 0) try {
+				d(n.stdoutFile);
+			} catch {}
+		};
+		i.on("error", (r) => {
+			g(), l(t.fail(new e({
+				tool: n.tool,
+				reason: `failed to launch (is '${n.tool}' installed + on PATH?): ${r.message}`,
+				...n.hint === void 0 ? {} : { hint: n.hint }
+			})));
+		}), i.on("close", (r) => {
+			if (r === 0 && u === void 0) {
+				l(t.void);
+				return;
+			}
+			g();
+			let i = n.stdinFile === void 0 ? "" : ` — ${m} of ${R(n.stdinFile)} byte(s) of ${f(n.stdinFile)} had been fed to it`;
+			l(t.fail(new e({
+				tool: n.tool,
+				reason: (r === 0 ? `exited cleanly, but ${u}` : `exited with code ${r}${u === void 0 ? "" : ` (${u})`}`) + i + (n.stdoutFile === void 0 ? "" : ` — the partial ${f(n.stdoutFile)} was removed, so it cannot be mistaken for a backup`),
+				stderr: a.trim() === "" ? `(${n.tool} printed nothing to stderr)` : a.slice(-2e3),
+				...n.hint === void 0 ? {} : { hint: n.hint }
+			})));
+		});
 	});
-}), R = (e) => {
+}, R = (e) => {
 	try {
 		return String(u(e).size);
 	} catch {
 		return "?";
 	}
 };
-//#endregion
 export { C as EXCLUDED_FROM_DUMP, v as backupArtifactName, S as backupCommand, T as dumpExcludedTables, P as mssqlReplaceStatements, A as mssqlScratchName, E as restoreCommand, L as runNativeStep };

package/dist/ndjson.js

@@ -1,7 +1,7 @@
 import { CodecError as e } from "./errors.js";
 import { decodeRow as t, encodeRow as n } from "./typedCodec.js";
 import { Effect as r, Stream as i } from "effect";
-//#region src/ndjson.ts
+// src/ndjson.ts
 var a = new TextEncoder(), o = (e, t) => e.pipe(i.map((e) => a.encode(`${JSON.stringify(n(e, t))}\n`))), s = (n, a, o) => n.pipe(i.decodeText(), i.splitLines, i.filter((e) => e.trim().length > 0), i.mapEffect((n) => r.try({
 	try: () => t(JSON.parse(n), o),
 	catch: (t) => new e({
@@ -9,5 +9,4 @@ var a = new TextEncoder(), o = (e, t) => e.pipe(i.map((e) => a.encode(`${JSON.st
 		reason: String(t?.message ?? t)
 	})
 })));
-//#endregion
 export { s as ndjsonToRows, o as rowsToNdjson };

package/dist/physicalRequest.js

@@ -0,0 +1,9 @@
+import { Effect as e } from "effect";
+// src/physicalRequest.ts
+var t = (t, n) => e.callback((r) => {
+	let i = new AbortController(), a = Promise.resolve().then(() => t(i.signal));
+	return a.then((t) => r(e.succeed(t)), (t) => r(e.fail(n(t)))), e.sync(() => {
+		i.abort();
+	}).pipe(e.andThen(e.promise(() => a.then(() => void 0, () => void 0))));
+});
+export { t as physicalRequest };

package/dist/profile.js

@@ -1,4 +1,3 @@
-//#region src/profile.ts
+// src/profile.ts
 var e = (e) => e;
-//#endregion
 export { e as defineDataProfile };

package/dist/progress.js

@@ -1,5 +1,5 @@
 import { Effect as e, Metric as t } from "effect";
-//#region src/progress.ts
+// src/progress.ts
 var n = t.counter("voltro_data_transfer_rows", { description: "Rows exported/imported by @voltro/data-transfer, tagged by phase + table." }), r = Array.from({ length: 16 }, (e, t) => .01 * 2 ** t), i = t.histogram("voltro_data_transfer_table_seconds", {
 	boundaries: r,
 	description: "Per-table export/import duration in seconds, tagged by phase."
@@ -13,5 +13,4 @@ var n = t.counter("voltro_data_transfer_rows", { description: "Rows exported/imp
 	tableCount: s,
 	phase: r
 } }));
-//#endregion
 export { a as reportProgress, o as withTableSpan };

package/dist/readme.js

@@ -1,4 +1,4 @@
-//#region src/readme.ts
+// src/readme.ts
 var e = (e) => e.kind === "tenant" ? `tenant \`${e.tenantId}\`` : e.kind === "tables" ? `tables \`${(e.tables ?? []).join(", ")}\`` : "all tables", t = (t, n) => {
 	let r = t.tables.reduce((e, t) => e + t.rowCount, 0), i = t.masking ? `✅ **Masked at the source** — ${t.masking.transformed.length} column(s) transformed${t.masking.policyId ? ` (policy \`${t.masking.policyId}\`)` : ""}. Personal data was replaced with realistic, referentially-consistent fakes before any byte was written.` : "⚠️ **NOT masked — this bundle contains REAL data (PII included).** Treat it as production data: do not copy it into a lower environment or share it without review. To produce a safe copy, re-export under a masking profile (`--profile`).", a = t.masking && t.masking.transformed.length > 0 ? `\n\nMasked columns: ${t.masking.transformed.map((e) => `\`${e}\``).join(", ")}.` : "", o = t.assets.count > 0 ? `${t.assets.count} object(s), ${t.assets.totalBytes} bytes` : "none", s = t.tables.map((e) => `| \`${e.name}\` | ${e.rowCount} |`).join("\n");
 	return `# Voltro data export
@@ -39,5 +39,4 @@ voltro data import <this-directory> --target api --api-url <url> --token <secret
 \`\`\`
 `;
 };
-//#endregion
 export { t as buildReadme };

package/dist/replacePreflight.js

@@ -1,4 +1,4 @@
-//#region src/replacePreflight.ts
+// src/replacePreflight.ts
 var e = (e, t) => {
 	let n = new Set(t), r = [];
 	for (let t of e.tables) if (!n.has(t.name)) for (let e of t.columns) {
@@ -19,5 +19,4 @@ var e = (e, t) => {
 	});
 	return `replace cannot empty this target: ${t.size} table(s) OUTSIDE the bundle hold rows that reference tables INSIDE it. Emptying the bundle's tables would leave those rows pointing at nothing, and the bundle cannot restore them.\n${n.join("\n")}\nNothing has been deleted. Either re-export with a scope that includes those tables, or use --mode upsert if those rows are meant to survive.`;
 };
-//#endregion
 export { t as outsideReferenceRefusal, e as outsideReferencesInto };

package/dist/rollbackCapture.js

@@ -1,7 +1,7 @@
 import { BundleError as e } from "./errors.js";
 import { runExport as t } from "./exporter.js";
 import { Effect as n } from "effect";
-//#region src/rollbackCapture.ts
+// src/rollbackCapture.ts
 var r = (r) => n.gen(function* () {
 	if (r.mode !== "replace" || r.dir === void 0 || r.tables.length === 0) return;
 	if (r.snapshot === void 0) return yield* n.fail(new e({
@@ -32,5 +32,4 @@ var r = (r) => n.gen(function* () {
 		tables: a.tables.length
 	};
 }), i = (e) => `rollback capture: ${e.rows} row(s) across ${e.tables} table(s) → ${e.dir}\n  If this run does not finish, restore with:  voltro data import ${e.dir} --mode replace`;
-//#endregion
 export { r as captureRollback, i as rollbackNotice };

package/dist/rowFailureReason.js

@@ -1,5 +1,5 @@
 import { classifyConstraintViolation as e, extractDbCause as t } from "@voltro/database";
-//#region src/rowFailureReason.ts
+// src/rowFailureReason.ts
 var n = (e) => {
 	let t = e.constraint ?? e.column, n = t === void 0 ? "" : ` ${t}`;
 	switch (e.kind) {
@@ -32,5 +32,4 @@ var n = (e) => {
 	}
 	return s(n);
 };
-//#endregion
 export { o as rowFailureDiagnosis, s as rowFailureReason, c as tableFailureReason };

package/dist/schemaDrift.js

@@ -1,5 +1,5 @@
 import { fingerprintSchema as e } from "@voltro/database/sql";
-//#region src/schemaDrift.ts
+// src/schemaDrift.ts
 var t = /__dropped_\d+$/, n = (e, n) => {
 	let r = [], i = /* @__PURE__ */ new Map();
 	for (let e of n.tables) {
@@ -36,5 +36,4 @@ var t = /__dropped_\d+$/, n = (e, n) => {
 		diff: o
 	};
 };
-//#endregion
 export { r as checkSchemaDrift, n as diffSnapshots };

package/dist/scope.js

@@ -3,7 +3,7 @@ import { ScopeError as t } from "./errors.js";
 import { computeSubsetIds as n, pkOf as r } from "./subset.js";
 import { Effect as i } from "effect";
 import { eq as a, inSet as o } from "@voltro/database";
-//#region src/scope.ts
+// src/scope.ts
 var s = "tenantId", c = (c, l, u) => i.gen(function* () {
 	let d = l.tables.map((e) => e.name), f = new Map(l.tables.map((e) => [e.name, e]));
 	if (c.kind === "all") {
@@ -36,5 +36,4 @@ var s = "tenantId", c = (c, l, u) => i.gen(function* () {
 		predicateFor: (e) => _.has(e) ? a(s, p) : h.has(e) ? o(r(l, e), [...h.get(e)]) : void 0
 	};
 });
-//#endregion
 export { c as resolveScope };

package/dist/sealedKeys.js

@@ -0,0 +1,39 @@
+import { ciphertextKeyId as e } from "@voltro/database";
+// src/sealedKeys.ts
+var t = /enc:v[12]:[A-Za-z0-9+/=:_-]+/g, n = () => ({
+	byKey: {},
+	unnamed: 0
+}), r = (e) => typeof e == "string" ? e : typeof e == "object" && e && !(e instanceof Uint8Array) && !(e instanceof Date) ? JSON.stringify(e) : void 0, i = (n, i) => {
+	for (let a of Object.values(n)) {
+		let n = r(a);
+		if (n !== void 0 && n.includes("enc:v")) for (let r of n.match(t) ?? []) {
+			let t = e(r);
+			t === void 0 ? i.unnamed += 1 : i.byKey[t] = (i.byKey[t] ?? 0) + 1;
+		}
+	}
+}, a = (e, t) => {
+	for (let [n, r] of Object.entries(t.byKey)) e.byKey[n] = (e.byKey[n] ?? 0) + r;
+	e.unnamed += t.unnamed;
+}, o = (e) => {
+	let n = e.match(t);
+	return n !== null && n.length === 1 && n[0] === e;
+}, s = (n, i, a, s) => {
+	let c = new Set(a.held), l = (t, r) => {
+		let o = e(t);
+		return o === void 0 ? a.opens?.(t, {
+			table: n,
+			column: r,
+			row: i
+		}) ?? !0 : c.has(o);
+	}, u = { ...i };
+	for (let [e, n] of Object.entries(i)) {
+		if (typeof n == "string" && o(n)) {
+			l(n, e) || (u[e] = null, s.nulled.set(e, (s.nulled.get(e) ?? 0) + 1));
+			continue;
+		}
+		let i = r(n);
+		if (i !== void 0 && i.includes("enc:v")) for (let n of i.match(t) ?? []) l(n, e) || s.unreadable.set(e, (s.unreadable.get(e) ?? 0) + 1);
+	}
+	return u;
+};
+export { n as emptyTally, a as mergeTally, s as nullUnreadableSealed, i as tallyRow };

package/dist/stagedSwap.js

@@ -1,7 +1,7 @@
 import { Effect as e } from "effect";
 import { STAGING_TABLE_PREFIX as t } from "@voltro/database";
 import { SqlClient as n } from "effect/sql";
-//#region src/stagedSwap.ts
+// src/stagedSwap.ts
 var r = t, i = (e) => `${r}${e}`, a = (e) => typeof e.run == "function", o = (e) => `staging is not available for this run — loading directly into the target instead: ${e}\n  The load therefore holds the destructive transaction open for its whole duration, so a
   process that dies mid-load depends on the database rolling it back. The rollback capture
   written before the first delete is what covers that case.`, s = /^[a-zA-Z_][a-zA-Z0-9_]*$/, c = (e, t) => {
@@ -160,5 +160,4 @@ var r = t, i = (e) => `${r}${e}`, a = (e) => typeof e.run == "function", o = (e)
 		tables: o
 	};
 };
-//#endregion
 export { r as STAGING_PREFIX, a as canStage, l as createStagingSql, m as danglingProbeSql, h as danglingReport, x as decideStaging, u as dropStagingSql, g as execStatements, v as findDangling, y as forwardReferences, c as quoteIdent, f as registerStagingClones, _ as runSwap, p as stagedReferences, i as stagingNameFor, o as stagingUnavailable, b as suspendsIntegrity, d as swapStatements };

package/dist/storageAssetMetadata.js

@@ -0,0 +1,46 @@
+import { BundleError as e } from "./errors.js";
+import { admitFilesystemPath as t } from "./filesystemAdmission.js";
+import { isSafeBundlePath as n } from "./bundlePaths.js";
+import { MANIFEST_FILE as r, decodeManifest as i } from "./manifest.js";
+import { AssetSourceInfo as a } from "./assetAdmission.js";
+import { makeDecompressor as o } from "./compress.js";
+import { ndjsonToRows as s } from "./ndjson.js";
+import { Effect as c, Schema as l, Stream as u } from "effect";
+import { createReadStream as d } from "node:fs";
+import { readFile as f } from "node:fs/promises";
+import { join as p } from "node:path";
+import { STORAGE_REFS_TABLE as m, fromNodeReadable as h } from "@voltro/plugin-storage";
+import { compose as g } from "node:stream";
+// src/storageAssetMetadata.ts
+var _ = (t) => c.tryPromise({
+	try: async () => {
+		let e = i(await f(p(t, r), "utf8"));
+		return {
+			dir: t,
+			tables: e.tables,
+			compression: e.compression
+		};
+	},
+	catch: () => new e({ reason: "exported asset manifest unavailable" })
+}), v = (e) => l.decodeUnknownSync(a)({
+	destination: e.bucket,
+	tenantId: e.tenantId,
+	key: e.key,
+	...typeof e.checksum == "string" && /^[a-f0-9]{64}$/.test(e.checksum) ? { sha256: e.checksum } : {},
+	contentType: e.contentType,
+	size: typeof e.size == "bigint" || typeof e.size == "string" && /^(0|[1-9]\d*)$/.test(e.size) ? Number(e.size) : e.size
+}), y = (r) => {
+	let i = r.tables.find((e) => e.name === m);
+	return i === void 0 ? u.empty : u.unwrap(c.gen(function* () {
+		if (!n(i.file)) return yield* c.fail(new e({ reason: "invalid asset metadata table path" }));
+		let a = p(r.dir, i.file);
+		return yield* c.tryPromise({
+			try: () => t(a, "file"),
+			catch: () => new e({ reason: "asset metadata path unavailable" })
+		}), s(h("bundle", () => g(d(a), o(r.compression))), i.name, i.columnTypes).pipe(u.mapEffect((t) => c.try({
+			try: () => v(t),
+			catch: () => new e({ reason: "invalid storage ownership in exported rows" })
+		})));
+	}));
+};
+export { _ as assetBundleContext, y as bundleAssetInfoStream, v as storageAssetInfo };

package/dist/subset.js

@@ -1,6 +1,6 @@
 import { Effect as e, Stream as t } from "effect";
 import { inSet as n, or as r, streamTable as i } from "@voltro/database";
-//#region src/subset.ts
+// src/subset.ts
 var a = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type === "id")?.name ?? "id", o = (a, o, s) => e.gen(function* () {
 	let c = s.maxDepth ?? 12, l = new Set(s.pinned ?? []), u = /* @__PURE__ */ new Map(), d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Map(), p = /* @__PURE__ */ new Map();
 	for (let e of o.tables) p.has(e.name) || p.set(e.name, e);
@@ -86,5 +86,4 @@ var a = (e, t) => e.tables.find((e) => e.name === t)?.columns.find((e) => e.type
 		return i ? n(a(t, r), [...i]) : void 0;
 	}
 });
-//#endregion
 export { o as computeSubsetIds, a as pkOf, s as subsetToScope };

package/dist/topo.js

@@ -1,4 +1,4 @@
-//#region src/topo.ts
+// src/topo.ts
 var e = (e, t) => {
 	let n = new Set(e), r = /* @__PURE__ */ new Map();
 	for (let e of t.tables) {
@@ -20,5 +20,4 @@ var e = (e, t) => {
 	for (let t of e) n.has(t) && s(t);
 	return i;
 };
-//#endregion
 export { e as topoSortTables };

package/dist/typedCodec.js

@@ -1,4 +1,4 @@
-//#region src/typedCodec.ts
+// src/typedCodec.ts
 var e = /* @__PURE__ */ new Set([
 	"json",
 	"array",
@@ -32,5 +32,4 @@ var e = /* @__PURE__ */ new Set([
 	for (let [r, i] of Object.entries(e)) n[r] = s(i, t[r]);
 	return n;
 };
-//#endregion
 export { l as decodeRow, s as decodeValue, c as encodeRow, a as encodeValue };