eraspace 0.1.0 → 0.3.0

package/bin.js

@@ -241,6 +241,34 @@ __export(Effect_exports, {
   zipWith: () => zipWith3
 });
 
+// node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Context.js
+var Context_exports = {};
+__export(Context_exports, {
+  Reference: () => Reference,
+  Service: () => Service,
+  ServiceTypeId: () => ServiceTypeId,
+  add: () => add,
+  addOrOmit: () => addOrOmit,
+  addUnsafe: () => addUnsafe,
+  empty: () => empty,
+  get: () => get,
+  getOption: () => getOption,
+  getOrElse: () => getOrElse2,
+  getOrUndefined: () => getOrUndefined2,
+  getOrUndefinedUnsafe: () => getOrUndefinedUnsafe,
+  getUnsafe: () => getUnsafe,
+  hasSameCache: () => hasSameCache,
+  isContext: () => isContext,
+  isKey: () => isKey,
+  isReference: () => isReference,
+  make: () => make5,
+  makeUnsafe: () => makeUnsafe,
+  merge: () => merge,
+  mergeAll: () => mergeAll,
+  omit: () => omit,
+  pick: () => pick
+});
+
 // node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Pipeable.js
 var pipeArguments = (self, args2) => {
   switch (args2.length) {
@@ -2273,6 +2301,7 @@ var Proto = {
 };
 var hasSameCache = (self, that) => self.cacheRoot === that.cacheRoot;
 var isContext = (u) => hasProperty(u, TypeId3);
+var isKey = (u) => hasProperty(u, ServiceTypeId);
 var isReference = (u) => !!u[ReferenceTypeId];
 var empty = () => emptyContext2;
 var emptyContext2 = /* @__PURE__ */ makeUnsafe(/* @__PURE__ */ new Map());
@@ -2293,6 +2322,12 @@ var addUnsafe = (self, key, service4) => {
     parent: impl.overlay
   }, impl.depth + 1);
 };
+var addOrOmit = /* @__PURE__ */ dual(3, (self, key, service4) => service4._tag === "None" ? omit(key)(self) : add(self, key, service4.value));
+var getOrElse2 = /* @__PURE__ */ dual(3, (self, key, orElse6) => {
+  const value4 = lookup(self, key.key);
+  if (value4 !== notFound) return value4;
+  return isReference(key) ? getDefaultValue(key) : orElse6();
+});
 var getOrUndefined2 = /* @__PURE__ */ dual(2, (self, key) => getOrUndefinedUnsafe(self, key.key));
 var getOrUndefinedUnsafe = (self, key) => {
   const value4 = lookup(self, key);
@@ -2342,6 +2377,26 @@ var mergeAll = (...ctxs) => {
   }
   return makeUnsafe(map18);
 };
+var pick = (...services) => (self) => {
+  if (services.length <= 1) {
+    const map18 = /* @__PURE__ */ new Map();
+    if (services.length === 1) {
+      const key = services[0].key;
+      const value4 = lookup(self, key);
+      if (value4 !== notFound) map18.set(key, value4);
+    }
+    return makeUnsafe(map18);
+  }
+  const keep = new Set(services.map((key) => key.key));
+  return withFlat(self, (map18) => map18.forEach((_, key) => {
+    if (!keep.has(key)) map18.delete(key);
+  }));
+};
+var omit = (...keys4) => (self) => withFlat(self, (map18) => {
+  for (let i = 0; i < keys4.length; i++) {
+    map18.delete(keys4[i].key);
+  }
+});
 var Reference = Service;
 
 // node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Duration.js
@@ -2988,7 +3043,7 @@ var merge2 = /* @__PURE__ */ match3({
   onFailure: identity,
   onSuccess: identity
 });
-var getOrElse2 = /* @__PURE__ */ dual(2, (self, onFailure) => isFailure2(self) ? onFailure(self.failure) : self.success);
+var getOrElse3 = /* @__PURE__ */ dual(2, (self, onFailure) => isFailure2(self) ? onFailure(self.failure) : self.success);
 var getOrThrowWith2 = /* @__PURE__ */ dual(2, (self, onFailure) => {
   if (isSuccess2(self)) {
     return self.success;
@@ -15424,12 +15479,12 @@ var posixImpl = /* @__PURE__ */ make21({
   resolve,
   normalize(path) {
     if (path.length === 0) return ".";
-    const isAbsolute = path.charCodeAt(0) === 47;
+    const isAbsolute2 = path.charCodeAt(0) === 47;
     const trailingSeparator = path.charCodeAt(path.length - 1) === 47;
-    path = normalizeStringPosix(path, !isAbsolute);
-    if (path.length === 0 && !isAbsolute) path = ".";
+    path = normalizeStringPosix(path, !isAbsolute2);
+    if (path.length === 0 && !isAbsolute2) path = ".";
     if (path.length > 0 && trailingSeparator) path += "/";
-    if (isAbsolute) return "/" + path;
+    if (isAbsolute2) return "/" + path;
     return path;
   },
   isAbsolute(path) {
@@ -15649,9 +15704,9 @@ var posixImpl = /* @__PURE__ */ make21({
     };
     if (path.length === 0) return ret;
     let code = path.charCodeAt(0);
-    const isAbsolute = code === 47;
+    const isAbsolute2 = code === 47;
     let start;
-    if (isAbsolute) {
+    if (isAbsolute2) {
       ret.root = "/";
       start = 1;
     } else {
@@ -15687,11 +15742,11 @@ var posixImpl = /* @__PURE__ */ make21({
     preDotState === 0 || // The (right-most) trimmed path component is exactly '..'
     preDotState === 1 && startDot === end3 - 1 && startDot === startPart + 1) {
       if (end3 !== -1) {
-        if (startPart === 0 && isAbsolute) ret.base = ret.name = path.slice(1, end3);
+        if (startPart === 0 && isAbsolute2) ret.base = ret.name = path.slice(1, end3);
         else ret.base = ret.name = path.slice(startPart, end3);
       }
     } else {
-      if (startPart === 0 && isAbsolute) {
+      if (startPart === 0 && isAbsolute2) {
         ret.name = path.slice(1, startDot);
         ret.base = path.slice(1, end3);
       } else {
@@ -15701,7 +15756,7 @@ var posixImpl = /* @__PURE__ */ make21({
       ret.ext = path.slice(startDot, end3);
     }
     if (startPart > 0) ret.dir = path.slice(0, startPart - 1);
-    else if (isAbsolute) ret.dir = "/";
+    else if (isAbsolute2) ret.dir = "/";
     return ret;
   },
   sep: "/",
@@ -16361,7 +16416,7 @@ function transformOptionalEffect(f) {
     transform: f
   });
 }
-function omit() {
+function omit2() {
   return transformOptional(() => none2());
 }
 function withDefault(defaultValue) {
@@ -18565,9 +18620,9 @@ function isPattern(regExp, annotations) {
   });
 }
 var bodyOwners = /* @__PURE__ */ new WeakMap();
-function copy2(ast, changes2) {
-  const out = Object.assign(Object.create(Object.getPrototypeOf(ast)), ast, changes2);
-  if (Reflect.ownKeys(changes2).every((key) => key === "context" || key === "encoding")) {
+function copy2(ast, changes3) {
+  const out = Object.assign(Object.create(Object.getPrototypeOf(ast)), ast, changes3);
+  if (Reflect.ownKeys(changes3).every((key) => key === "context" || key === "encoding")) {
     bodyOwners.set(out, getContextOwner(ast));
   }
   return out;
@@ -24947,10 +25002,10 @@ function toFormatter(ast, options3) {
 }
 
 // node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Struct.js
-var pick = /* @__PURE__ */ dual(2, (self, keys4) => {
+var pick2 = /* @__PURE__ */ dual(2, (self, keys4) => {
   return buildStruct(self, (k, v) => hasPropertyKey(keys4, k) ? [k, v] : void 0);
 });
-var omit2 = /* @__PURE__ */ dual(2, (self, keys4) => {
+var omit3 = /* @__PURE__ */ dual(2, (self, keys4) => {
   return buildStruct(self, (k, v) => !hasPropertyKey(keys4, k) ? [k, v] : void 0);
 });
 var assign = /* @__PURE__ */ dual(2, (self, that) => {
@@ -25070,10 +25125,10 @@ var OptionalImpl = class {
     this.replaceResult = replaceResult;
   }
   replace(a, s) {
-    return getOrElse2(this.replaceResult(a, s), () => s);
+    return getOrElse3(this.replaceResult(a, s), () => s);
   }
   modify(f) {
-    return (s) => getOrElse2(flatMap2(this.getResult(s), (a) => this.replaceResult(f(a), s)), () => s);
+    return (s) => getOrElse3(flatMap2(this.getResult(s), (a) => this.replaceResult(f(a), s)), () => s);
   }
   compose(that) {
     return make36(compose3(this.node, that.node));
@@ -25121,14 +25176,14 @@ var OptionalImpl = class {
     })));
   }
   pick(keys4) {
-    return this.compose(makeLens(pick(keys4), (p, a) => ({
-      ...omit2(a, keys4),
+    return this.compose(makeLens(pick2(keys4), (p, a) => ({
+      ...omit3(a, keys4),
       ...p
     })));
   }
   omit(keys4) {
-    return this.compose(makeLens(omit2(keys4), (o, a) => ({
-      ...pick(a, keys4),
+    return this.compose(makeLens(omit3(keys4), (o, a) => ({
+      ...pick2(a, keys4),
       ...o
     })));
   }
@@ -25174,7 +25229,7 @@ var OptionalImpl = class {
     );
   }
   modifyAll(f) {
-    return (s) => getOrElse2(flatMap2(this.getResult(s), (as5) => this.replaceResult(as5.map(f), s)), () => s);
+    return (s) => getOrElse3(flatMap2(this.getResult(s), (as5) => this.replaceResult(as5.map(f), s)), () => s);
   }
 };
 var IsoImpl = class extends OptionalImpl {
@@ -25213,7 +25268,7 @@ var PrismImpl = class extends OptionalImpl {
     return this.set(a);
   }
   modify(f) {
-    return (s) => getOrElse2(map2(this.getResult(s), (a) => this.set(f(a))), () => s);
+    return (s) => getOrElse3(map2(this.getResult(s), (a) => this.set(f(a))), () => s);
   }
 };
 function make36(node) {
@@ -26001,7 +26056,7 @@ function toIssueEffect(self) {
   return catchCause3(self, (cause) => failCauseSync2(() => map6(cause, (error2) => error2.issue)));
 }
 function withDecodingDefaultKey(defaultValue, options3) {
-  const encode5 = options3?.encodingStrategy === "omit" ? omit() : passthrough2();
+  const encode5 = options3?.encodingStrategy === "omit" ? omit2() : passthrough2();
   return (self) => {
     return optionalKey2(toEncoded2(self)).pipe(decodeTo2(self, {
       decode: withDefault(toIssueEffect(defaultValue)),
@@ -26015,7 +26070,7 @@ function withDecodingDefaultTypeKey(defaultValue, options3) {
   };
 }
 function withDecodingDefault(defaultValue, options3) {
-  const encode5 = options3?.encodingStrategy === "omit" ? omit() : passthrough2();
+  const encode5 = options3?.encodingStrategy === "omit" ? omit2() : passthrough2();
   return (self) => {
     return optional2(toEncoded2(self)).pipe(decodeTo2(self, {
       decode: withDefault(toIssueEffect(defaultValue)),
@@ -38939,7 +38994,7 @@ var runWith2 = (command2, config2) => {
 // cli/package.json
 var package_default = {
   name: "eraspace-cli",
-  version: "0.1.0",
+  version: "0.3.0",
   private: true,
   license: "MIT",
   type: "module",
@@ -39266,6 +39321,48 @@ function formatLog(l) {
   const data = l.data === void 0 || l.data === null ? "" : " " + c.gray(JSON.stringify(l.data));
   return `${c.gray(time3)} ${color(level.padEnd(5))} ${fn3}${l.msg ?? ""}${data}`;
 }
+var SKIPPED = {
+  fetch: "uses fetch",
+  identity: "reads the caller's identity",
+  running: "was running",
+  recovering: "cache recovering",
+  "new index": "reads an index this deploy adds",
+  committed: "a commit changed it during the check",
+  budget: "out of time",
+  limit: "too many entries",
+  interrupted: "interrupted"
+};
+var call = (fn3, args2) => {
+  const text2 = Array.isArray(args2) ? args2.map((a) => JSON.stringify(a)).join(", ") : JSON.stringify(args2);
+  return `${fn3}(${text2 && text2.length > 80 ? `${text2.slice(0, 77)}...` : text2 ?? ""})`;
+};
+function formatShadow(report) {
+  if (report.note) return c.dim(`Live queries: none checked (${report.note})`);
+  const total = report.total ?? 0;
+  if (total === 0) return c.dim("Live queries: none cached, nothing to check");
+  const errors = report.errors ?? 0;
+  const changed = report.changed ?? 0;
+  const parts2 = [
+    `${report.unchanged ?? 0} unchanged`,
+    changed ? c.yellow(`${changed} change value`) : "0 change value",
+    errors ? c.red(`${errors} now throw`) : "0 now throw",
+    ...report.fixed ? [c.green(`${report.fixed} fixed`)] : [],
+    ...report.skipped ? [c.dim(`${report.skipped} skipped`)] : []
+  ];
+  const at = report.commitSeq ? ` at commit ${report.commitSeq}` : "";
+  const lines2 = [`Live queries: ${report.checked ?? 0} of ${total} checked against the new code${at}: ${parts2.join(", ")}`];
+  for (const e of report.entries ?? []) {
+    const what = call(e.fn, e.args);
+    if (e.outcome === "error") lines2.push(`  ${c.red("throws ")} ${what}: ${e.error ? `${e.error.name}: ${e.error.message}` : ""}`);
+    else if (e.outcome === "changed") lines2.push(`  ${c.yellow("changes")} ${what}${e.error ? `: ${e.error.name}: ${e.error.message}` : ""}`);
+    else if (e.outcome === "fixed") lines2.push(`  ${c.green("fixed  ")} ${what}`);
+    else lines2.push(c.dim(`  skipped ${what}: ${SKIPPED[e.reason ?? ""] ?? e.reason ?? ""}`));
+  }
+  const listed = report.entries?.length ?? 0;
+  const notable = errors + changed + (report.fixed ?? 0) + (report.skipped ?? 0);
+  if (notable > listed) lines2.push(c.dim(`  ... and ${notable - listed} more`));
+  return lines2.join("\n");
+}
 
 // cli/src/api.ts
 var Timestamp = Schema_exports.NullOr(Schema_exports.Union([Schema_exports.Number, Schema_exports.String]));
@@ -39280,10 +39377,34 @@ var App = Schema_exports.Struct({
   expiresAt: Schema_exports.optional(Timestamp),
   publicInspection: Schema_exports.optional(Schema_exports.Boolean)
 });
+var Count = Schema_exports.optional(Schema_exports.Number);
+var ShadowReport = Schema_exports.Struct({
+  total: Count,
+  checked: Count,
+  unchanged: Count,
+  changed: Count,
+  errors: Count,
+  fixed: Count,
+  skipped: Count,
+  commitSeq: Count,
+  note: Schema_exports.optional(Schema_exports.String),
+  entries: Schema_exports.optional(
+    Schema_exports.Array(
+      Schema_exports.Struct({
+        fn: Schema_exports.String,
+        args: Schema_exports.optional(Schema_exports.Unknown),
+        outcome: Schema_exports.String,
+        reason: Schema_exports.optional(Schema_exports.String),
+        error: Schema_exports.optional(Schema_exports.Struct({ name: Schema_exports.String, message: Schema_exports.String }))
+      })
+    )
+  )
+});
 var Deployed = Schema_exports.Struct({
   ...App.fields,
   version: Schema_exports.optional(Schema_exports.Number),
-  claimToken: Schema_exports.optional(Schema_exports.String)
+  claimToken: Schema_exports.optional(Schema_exports.String),
+  shadow: Schema_exports.optional(ShadowReport)
 });
 var AppList = Schema_exports.Struct({ apps: Schema_exports.Array(App) });
 var StateChange = Schema_exports.Struct({ state: Schema_exports.String });
@@ -39448,15 +39569,20 @@ var login = Effect_exports.fnUntraced(function* (config2, browser) {
   }
   return yield* fail12("The sign-in code expired. Run eraspace auth login again.");
 });
+var LogoutResult = Schema_exports.Struct({ ok: Schema_exports.Literal(true) });
 var logout = Effect_exports.fnUntraced(function* (config2) {
   const session = yield* sessionFor(config2.origin);
   if (!session) {
     yield* Console_exports.log(`Not signed in to ${config2.origin}.`);
     return;
   }
-  yield* request3(config2, "POST", "/_api/auth/logout", { bearer: Redacted_exports.make(session.token) }).pipe(Effect_exports.timeout("10 seconds"), Effect_exports.ignore);
+  const response = yield* api(config2, "POST", "/_api/auth/logout", { bearer: Redacted_exports.make(session.token), timeout: "10 seconds" });
+  if (response.status !== 401) {
+    if (response.status >= 400 || response.json.ok === false) return yield* Effect_exports.fail(yield* failure(response));
+    yield* decode5(LogoutResult, response.json, "sign-out");
+  }
   yield* removeSession(config2.origin);
-  yield* Console_exports.log(`Signed out of ${config2.origin}.`);
+  yield* Console_exports.log(response.status === 401 ? `Removed invalid session for ${config2.origin}.` : `Signed out of ${config2.origin}.`);
 });
 var okWhoami = ok(Whoami);
 var whoami = Effect_exports.fnUntraced(function* (config2) {
@@ -39468,7 +39594,7 @@ var whoami = Effect_exports.fnUntraced(function* (config2) {
 import { basename } from "node:path";
 
 // cli/src/build.ts
-import { dirname as dirname2, join as join5, relative as relative2, resolve as resolve8, sep } from "node:path";
+import { dirname as dirname2, isAbsolute, join as join5, relative as relative2, resolve as resolve8, sep } from "node:path";
 import * as esbuild from "esbuild";
 import { parseSync } from "oxc-parser";
 var toPosix = (p) => p.split(sep).join("/");
@@ -39478,14 +39604,12 @@ function scanImports(file2, source) {
   const fatal = result4.errors.find((e) => e.severity === "Error");
   if (fatal) return { imports: [], error: { message: fatal.message, at: fatal.labels[0]?.start ?? 0 } };
   const imports = [];
-  for (const imp of result4.module.staticImports) {
-    if (imp.entries.length && imp.entries.every((e) => e.isType)) continue;
-    imports.push({ spec: imp.moduleRequest.value, at: imp.moduleRequest.start, kind: "import-statement" });
-  }
-  for (const exp of result4.module.staticExports) {
-    const from = exp.entries.filter((e) => e.moduleRequest && !e.isType);
-    const first = from[0]?.moduleRequest;
-    if (first) imports.push({ spec: first.value, at: first.start, kind: "import-statement" });
+  for (const statement of result4.program.body) {
+    if (statement.type === "ImportDeclaration" && statement.importKind !== "type") {
+      imports.push({ spec: statement.source.value, at: statement.source.start, kind: "import-statement" });
+    } else if ((statement.type === "ExportNamedDeclaration" || statement.type === "ExportAllDeclaration") && statement.exportKind !== "type" && statement.source) {
+      imports.push({ spec: statement.source.value, at: statement.source.start, kind: "import-statement" });
+    }
   }
   for (const imp of result4.module.dynamicImports) {
     const literal = /^\s*(["'`])(.*)\1\s*$/s.exec(source.slice(imp.moduleRequest.start, imp.moduleRequest.end));
@@ -39493,10 +39617,20 @@ function scanImports(file2, source) {
   }
   return { imports: imports.sort((a, b) => (a.at ?? 0) - (b.at ?? 0)) };
 }
+var MAX_MODULE_BYTES = 256 * 1024;
+var EXTENSIONS = [".ts", ".mts", ".js", ".mjs", ".tsx"];
+function importCandidates(base) {
+  const stem = /\.m?js$/.test(base) ? base.replace(/\.m?js$/, "") : void 0;
+  return [
+    base,
+    ...EXTENSIONS.map((ext) => base + ext),
+    ...stem === void 0 ? [] : [".ts", ".mts", ".tsx"].map((ext) => stem + ext),
+    ...EXTENSIONS.map((ext) => join5(base, "index" + ext))
+  ].filter((candidate) => EXTENSIONS.some((ext) => candidate.endsWith(ext)));
+}
 var resolveRelative = Effect_exports.fnUntraced(function* (fromFile, spec) {
   const fs = yield* FileSystem_exports.FileSystem;
-  const base = resolve8(dirname2(fromFile), spec);
-  for (const candidate of [base, base + ".ts", join5(base, "index.ts")]) {
+  for (const candidate of importCandidates(resolve8(dirname2(fromFile), spec))) {
     const info2 = yield* fs.stat(candidate).pipe(Effect_exports.option);
     if (info2._tag === "Some" && info2.value.type === "File") return candidate;
   }
@@ -39519,6 +39653,10 @@ var collectServerFiles = Effect_exports.fnUntraced(function* (root) {
     const rel = toPosix(relative2(root, abs2));
     const source = yield* fs.readFileString(abs2);
     files[rel] = source;
+    const bytes2 = Buffer.byteLength(source, "utf8");
+    if (bytes2 > MAX_MODULE_BYTES) {
+      errors.push({ file: rel, line: 0, column: 0, message: `module is ${bytes2} bytes, over the server's ${MAX_MODULE_BYTES} byte (256 KiB) limit; split it into smaller modules` });
+    }
     const { imports, error: error2 } = scanImports(abs2, source);
     if (error2) {
       errors.push({ file: rel, ...lineCol(source, error2.at), message: error2.message });
@@ -39573,6 +39711,7 @@ function clientPlugin(root, sdk, rejected) {
     setup(build3) {
       build3.onResolve({ filter: /^[^./]/ }, async (args2) => {
         if (args2.pluginData === "eraspace-sdk") return void 0;
+        if (args2.kind === "entry-point" || isAbsolute(args2.path)) return void 0;
         const spec = args2.path;
         const fromCapsule = !args2.importer || inCapsule(args2.importer);
         if (fromCapsule) {
@@ -39778,6 +39917,14 @@ var requireTarget = Effect_exports.fnUntraced(function* (config2, explicit) {
     );
   return { ref, claim: claim2 };
 });
+var confirmedDeletes = Effect_exports.fnUntraced(function* (tables) {
+  const out = {};
+  for (const [table2, rows] of Object.entries(tables ?? {})) {
+    if (!/^\d+$/.test(rows)) return yield* fail12(`--delete-table ${table2}=${rows}: the row count must be a whole number, e.g. --delete-table ${table2}=12`);
+    out[table2] = Number(rows);
+  }
+  return out;
+});
 var withoutEnv = Effect_exports.fnUntraced(function* (payload) {
   if (Object.keys(payload.env).length) {
     yield* Console_exports.warn(
@@ -39788,23 +39935,13 @@ var withoutEnv = Effect_exports.fnUntraced(function* (payload) {
   }
   return { ...payload, env: {} };
 });
-var okDeployed = ok(Deployed);
 var requestedName = (config2, opts) => opts.name !== void 0 ? { name: opts.name } : { name: config2.name ?? toAppName(basename(config2.root)), uniqueName: true };
 var createApp = Effect_exports.fnUntraced(function* (config2, payload, extra, opts, signedIn) {
   const naming = requestedName(config2, opts);
-  const create = (body) => api(config2, "POST", "/_api/apps", {
-    body: { ...payload, ...extra, ...body },
+  const response = yield* api(config2, "POST", "/_api/apps", {
+    body: { ...payload, ...extra, ...naming },
     timeout: DEPLOY_TIMEOUT
   });
-  let response = yield* create(naming);
-  if (response.status === 401 && !signedIn && naming.uniqueName) {
-    yield* Console_exports.warn(
-      c.yellow(
-        `This platform names apps only for signed-in developers, so this app gets an id. Run eraspace auth login and eraspace claim to name it ${naming.name}.`
-      )
-    );
-    response = yield* create({});
-  }
   if (response.status === 409 && !naming.uniqueName) {
     return yield* fail12(
       signedIn ? `The name ${naming.name} is taken. Pick another with --name or in eraspace.json; if it is your app, deploy to it with --app ${naming.name}.` : `The name ${naming.name} is taken. Pick another with --name.`
@@ -39827,22 +39964,30 @@ var deploy = Effect_exports.fnUntraced(function* (config2, opts = {}) {
   const build3 = yield* buildCapsule(config2.root);
   if (!build3.ok || !build3.payload)
     return yield* fail12(yield* formatErrors(build3.errors, config2.root));
-  const extra = opts.publicInspect ? { publicInspection: true } : {};
+  const deleteTables = yield* confirmedDeletes(opts.deleteTables);
+  const extra = {
+    ...opts.publicInspect ? { publicInspection: true } : {},
+    ...Object.keys(deleteTables).length ? { deleteTables } : {},
+    ...opts.shadow ? { shadow: true } : {},
+    ...opts.failOnQueryErrors ? { failOnQueryErrors: true } : {}
+  };
   const signedIn = (yield* bearerFor(config2.origin)) !== void 0;
   const t = yield* target(config2);
   let result4;
   if (t.ref) {
     const payload = t.claim ? yield* withoutEnv(build3.payload) : build3.payload;
-    result4 = yield* okDeployed(
-      config2,
-      "POST",
-      `/_api/apps/${enc(t.ref)}/deploy`,
-      {
-        body: { ...payload, ...extra },
-        claim: t.claim,
-        timeout: DEPLOY_TIMEOUT
-      }
-    );
+    const path = `/_api/apps/${enc(t.ref)}/deploy`;
+    const response = yield* api(config2, "POST", path, {
+      body: { ...payload, ...extra },
+      claim: t.claim,
+      timeout: DEPLOY_TIMEOUT
+    });
+    if (response.status >= 400 || response.json.ok === false) {
+      const refused = Schema_exports.decodeUnknownOption(ShadowReport)(response.json.shadow);
+      if (Option_exports.isSome(refused)) yield* Console_exports.log(formatShadow(refused.value));
+      return yield* Effect_exports.fail(yield* failure(response, config2.root));
+    }
+    result4 = yield* decode5(Deployed, response.json, `POST ${path}`);
     if (t.claim && result4.claimed)
       yield* removeLocalDeploy(config2.root, config2.origin);
   } else if (signedIn) {
@@ -39867,6 +40012,7 @@ var deploy = Effect_exports.fnUntraced(function* (config2, opts = {}) {
       expiresAt: Number.isFinite(expiresAt) ? expiresAt : null
     });
   }
+  if (result4.shadow) yield* Console_exports.log(formatShadow(result4.shadow));
   const label = result4.names?.[0] ?? result4.id;
   yield* Console_exports.log(
     `${label}${result4.version === void 0 ? "" : ` v${result4.version}`}: ${result4.url ?? config2.url}`
@@ -39953,7 +40099,10 @@ var dev = Effect_exports.fnUntraced(function* (config2, opts) {
 });
 
 // cli/src/logs.ts
-var IDLE = Duration_exports.seconds(75);
+var LogTimeouts = Context_exports.Reference(
+  "eraspace/cli/LogTimeouts",
+  { defaultValue: () => ({ idle: Duration_exports.seconds(75), stalled: Duration_exports.seconds(30), errorBody: Duration_exports.seconds(10) }) }
+);
 var Printed = class {
   lines = [];
   limit;
@@ -39994,12 +40143,14 @@ var readOnce = Effect_exports.fnUntraced(function* (config2, path, claim2, follo
   const response = yield* request3(config2, "GET", path, { claim: claim2 }).pipe(
     Effect_exports.timeoutOrElse({ duration: "30 seconds", orElse: () => Effect_exports.fail(new Transient({ message: `The platform at ${config2.origin} did not answer within 30s.` })) })
   );
+  const timeouts = yield* LogTimeouts;
+  const errorText = response.text.pipe(Effect_exports.timeout(timeouts.errorBody), Effect_exports.orElseSucceed(() => ""));
   if (isGatewayError(response.status)) {
-    yield* response.text.pipe(Effect_exports.ignore);
+    yield* errorText;
     return yield* new Transient({ message: `The platform at ${config2.origin} is unavailable (HTTP ${response.status}).` });
   }
   if (response.status >= 400) {
-    const text2 = yield* response.text.pipe(Effect_exports.orElseSucceed(() => ""));
+    const text2 = yield* errorText;
     let json2 = { ok: false, error: text2.trim() || `HTTP ${response.status}` };
     try {
       json2 = JSON.parse(text2);
@@ -40007,12 +40158,15 @@ var readOnce = Effect_exports.fnUntraced(function* (config2, path, claim2, follo
     }
     return yield* Effect_exports.fail(yield* failure({ status: response.status, json: json2 }, config2.root));
   }
-  let lines2 = response.stream.pipe(
+  const lines2 = response.stream.pipe(
+    Stream_exports.mapError((error2) => new Transient({ message: `The log stream broke: ${describe(error2.cause ?? error2)}` })),
+    Stream_exports.timeoutOrElse({
+      duration: follow ? timeouts.idle : timeouts.stalled,
+      orElse: () => Stream_exports.fail(new Transient({ message: follow ? "The log stream went quiet." : `The platform at ${config2.origin} stopped sending logs.` }))
+    }),
     Stream_exports.decodeText(),
-    Stream_exports.splitLines,
-    Stream_exports.mapError((error2) => new Transient({ message: `The log stream broke: ${describe(error2.cause ?? error2)}` }))
+    Stream_exports.splitLines
   );
-  if (follow) lines2 = lines2.pipe(Stream_exports.timeoutOrElse({ duration: IDLE, orElse: () => Stream_exports.fail(new Transient({ message: "The log stream went quiet." })) }));
   const fresh2 = printed.connection();
   yield* lines2.pipe(
     Stream_exports.filter((line) => line.trim() !== ""),
@@ -40079,6 +40233,68 @@ var lifecycle = Effect_exports.fnUntraced(function* (config2, action, explicit,
   const result4 = yield* okState(config2, "POST", `/_api/apps/${enc(t.ref)}/${action}`, { claim: t.claim });
   yield* Console_exports.log(`${t.ref}: ${result4.state}`);
 });
+var explain = Effect_exports.fnUntraced(function* (config2, fn3, inputs, json2) {
+  const args2 = yield* parseCallArgs(inputs);
+  const t = yield* requireTarget(config2);
+  const report = yield* okJson(config2, "POST", `/_api/apps/${enc(t.ref)}/explain`, { body: { fn: fn3, args: args2 }, claim: t.claim });
+  if (json2) return yield* Console_exports.log(JSON.stringify(report, null, 2));
+  const scans = report.scans ?? [];
+  yield* Console_exports.log(`${fn3}: read ${String(report.rowsRead)} row${report.rowsRead === 1 ? "" : "s"} in ${scans.length} scan${scans.length === 1 ? "" : "s"} and returned ${String(report.returned)}`);
+  for (const s of scans) yield* Console_exports.log(`  ${s.table} via ${s.index} (${s.mode}): read ${s.rowsRead}, kept ${s.kept} of ${s.rows}`);
+  const suggestions = report.suggestions ?? [];
+  if (!suggestions.length) yield* Console_exports.log(c.dim("No index suggestions."));
+  for (const s of suggestions) yield* Console_exports.log(`${c.yellow("suggest")} ${s.message}`);
+});
+var profile = Effect_exports.fnUntraced(function* (config2, explicit, seconds2, out) {
+  const t = yield* requireTarget(config2, explicit);
+  yield* Console_exports.error(c.dim(`Profiling ${t.ref} for ${seconds2}s...`));
+  const result4 = yield* okJson(config2, "POST", `/_api/apps/${enc(t.ref)}/profile`, { body: { seconds: seconds2 }, claim: t.claim, timeout: Duration_exports.seconds(seconds2 + 30) });
+  const file2 = out ?? `${t.ref}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.cpuprofile`;
+  const fs = yield* FileSystem_exports.FileSystem;
+  yield* fs.writeFileString(file2, JSON.stringify(result4));
+  const nodes = new Map((result4.nodes ?? []).map((n) => [n.id, n]));
+  const counts = /* @__PURE__ */ new Map();
+  let busy = 0;
+  for (const id2 of result4.samples ?? []) {
+    const f = nodes.get(id2)?.callFrame;
+    if (!f || f.functionName === "(idle)" || f.functionName === "(root)") continue;
+    busy++;
+    const at = f.url ? ` ${f.url}:${f.lineNumber + 1}` : "";
+    const name = `${f.functionName || "(anonymous)"}${at}`;
+    counts.set(name, (counts.get(name) ?? 0) + 1);
+  }
+  const samples = (result4.samples ?? []).length;
+  yield* Console_exports.log(`${t.ref}: busy in ${busy} of ${samples} samples. Open ${file2} in Chrome DevTools (Performance > Load profile).`);
+  for (const [name, n] of [...counts].sort((a, b) => b[1] - a[1]).slice(0, 10)) {
+    yield* Console_exports.log(`  ${(100 * n / Math.max(busy, 1)).toFixed(1).padStart(5)}%  ${name}`);
+  }
+});
+var changes2 = Effect_exports.fnUntraced(function* (config2, since, limit) {
+  const t = yield* requireTarget(config2);
+  const response = yield* request3(config2, "GET", `/_api/apps/${enc(t.ref)}/changes?since=${since}&limit=${limit}`, { claim: t.claim });
+  const text2 = yield* response.text.pipe(Effect_exports.orElseSucceed(() => ""));
+  if (response.status >= 400) {
+    let json2 = { ok: false, error: text2.trim() || `HTTP ${response.status}` };
+    try {
+      json2 = JSON.parse(text2);
+    } catch {
+    }
+    return yield* Effect_exports.fail(yield* failure({ status: response.status, json: json2 }));
+  }
+  const lines2 = text2.split("\n").filter(Boolean);
+  for (const line of lines2) yield* Console_exports.log(line);
+  const head5 = Number(response.headers["x-eraspace-commit-seq"] ?? 0);
+  const last = lines2.length ? JSON.parse(lines2.at(-1)).seq : since;
+  const more = response.headers["x-eraspace-more"] === "1";
+  yield* Console_exports.error(c.dim(more ? `Latest commit ${head5}; continue with --since ${last}` : `Up to date at commit ${head5}`));
+});
+var undo = Effect_exports.fnUntraced(function* (config2, to, yes) {
+  const t = yield* requireTarget(config2);
+  if (!yes) return yield* fail12(`eraspace undo ${to} puts every row of ${t.ref} changed after commit ${to} back as it was. Re-run with --yes.`);
+  const result4 = yield* okJson(config2, "POST", `/_api/apps/${enc(t.ref)}/undo`, { body: { toSeq: to }, claim: t.claim });
+  const undone = Number(result4.undone ?? 0);
+  yield* Console_exports.log(undone ? `${t.ref}: restored ${undone} row${undone === 1 ? "" : "s"} to commit ${to} as commit ${String(result4.commitSeq)}` : `${t.ref}: nothing changed after commit ${to}`);
+});
 var listTokens = Effect_exports.fnUntraced(function* (config2) {
   const { tokens } = yield* ok(TokenList)(config2, "GET", "/_api/tokens");
   if (!tokens.length) yield* Console_exports.log("No tokens.");
@@ -40111,7 +40327,7 @@ Pass each argument as JSON, for example eraspace call send '"general"' '{"text":
   }
   return Effect_exports.succeed(args2);
 }
-var call = Effect_exports.fnUntraced(function* (config2, fn3, inputs) {
+var call2 = Effect_exports.fnUntraced(function* (config2, fn3, inputs) {
   const args2 = yield* parseCallArgs(inputs);
   const t = yield* requireTarget(config2);
   const { status, text: text2 } = yield* Effect_exports.gen(function* () {
@@ -40134,7 +40350,7 @@ import { basename as basename2, join as join7, relative as relative3, resolve as
 var TEMPLATES = ["chat", "todo", "poll"];
 var agents = (cli) => `# eraspace capsule: agent instructions
 
-This directory is one eraspace app ("capsule"): a TypeScript server compiled to BEAM bytecode, a Preact client, a
+This directory is one eraspace app ("capsule"): a TypeScript server running in V8, a Preact client, a
 Postgres-backed database with live queries, and hosting, all through the \`eraspace\` CLI. Treat this directory as the
 whole app. Build the requested app by editing the starter files, deploy it, verify it, and report the URL.
 
@@ -40211,13 +40427,19 @@ export default capsule({
   \`paginate({ cursor, numItems })\`. Every table has an implicit \`by_creation\` index. Await every db call.
 - Queries and actions have a read-only db. Write in mutations or writable endpoints. Actions can call
   \`ctx.runQuery\`, \`ctx.runMutation\` and global \`fetch\`.
+- Mutations schedule later work with \`ctx.scheduler.runAfter(ms, "mutationName", ...args)\`, which returns a job id.
+  The job commits with the mutation and its run commits once; only mutations can be scheduled.
 - Handler arguments are positional and not validated. Check them in the handler.
 - \`ctx.auth.userId\` is a per-connection guest id that changes on reload. It is not a login: never use it for
   ownership or access control. Every app is public.
 - \`ctx.log.info(msg, data?)\` (also debug/warn/error) writes to \`eraspace logs\`.
 - Endpoints receive \`req\` with \`method, path, url, headers.get(), query.get(), json(), text()\` and return
   \`json(value)\`, \`text(string)\`, \`empty()\`, \`redirect(url)\` or a plain value (sent as JSON).
-- Removing a table that still holds rows is refused on deploy. Keep it in the schema.
+- Removing a populated table needs its row count confirmed: \`${cli} deploy --delete-table <table>=<rows>\` (the
+  refused deploy prints the exact flag). Deletion runs in background batches.
+- Changing a field's type or making it required fails the deploy while stored rows do not match. Declare a
+  migration instead: \`table({ ... }).migrate(1, row => ({ ...row, done: false }))\` upgrades old rows when read
+  and rewrites them in the background. Number migrations 1, 2, 3, ... and keep each one until its rows are done.
 
 ## Client API (\`eraspace/client\`)
 
@@ -40226,7 +40448,7 @@ import { createClient } from "eraspace/client";
 import { useState } from "preact/hooks";
 import type app from "../server/index";
 
-const client = createClient<typeof app>({ reloadOnDeploy: true });
+const client = createClient<typeof app>();
 
 export default function App() {
   const items = client.useQuery("items", "some-list");   // undefined while loading, then live
@@ -40251,28 +40473,59 @@ export default function App() {
 - Realtime rooms, not stored: \`const room = client.useRoom(name, meta)\` gives \`room.presence\`,
   \`room.broadcast(event, payload)\` and \`room.on(event, cb)\` (call \`on\` inside \`useEffect\` and return its
   cleanup). \`client.usePresence(name, meta)\` returns just the members.
-- Files: \`await client.storage.upload(file)\` returns \`{ key }\`; \`client.storage.url(key)\`; \`client.storage.delete(key)\`.
-  Up to 5 MiB per file.
+- Files: see "File uploads" below.
 - Pages: \`Router\`, \`Route\`, \`Link\`, \`useLocation\`, \`useNavigate\`, \`useParams\` from \`eraspace/client\`.
+- Open tabs reload by themselves after each deploy. Pass \`createClient({ reloadOnDeploy: false })\` to keep the
+  page and react to \`client.onDeployed(version => ...)\` instead.
 - Client imports are limited to \`eraspace/client\`, \`preact\`, \`preact/hooks\`, \`@preact/signals\` and relative files.
 
-## TypeScript subset on the server
+## File uploads
 
-Server code is compiled to BEAM, not run in Node. It supports modern TypeScript (classes, closures, async/await,
-destructuring, spread, template literals, Map, Set, JSON, Math, Date, URL, RegExp, fetch) with these limits:
+Files go to the app's bucket, not the database. Save the returned \`FileRef\` in a row, then preview it.
 
-- No npm packages, Node built-ins (\`node:*\`, \`fs\`, \`process\`, \`Buffer\`) or dynamic \`import()\`. Do not install
-  app dependencies.
-- Rejected at compile time: \`eval\`, \`new Function\`, Proxy, Reflect, generators, getters/setters, private
-  \`#fields\`, decorators, enums, namespaces, BigInt, symbols, labeled statements, \`for await\`, static blocks and
-  named function expressions (\`const f = function g() {}\`; use arrow functions or function declarations).
-- Do not declare regex literals at module top level; create them inside the function that uses them.
-- Do not use constructor parameter properties (\`constructor(private x: number)\`). Declare the field and assign
-  \`this.x = x\` in the constructor.
-- Module-level variables are reset for every handler call. Persist state in the database.
-- \`await\` blocks; there is no real concurrency inside a handler. Handlers time out after about a second and have
-  a memory limit, so keep loops and reads bounded.
-- No Intl or \`toLocaleString\` formatting on the server. Format dates and numbers in the client.
+\`\`\`tsx
+// server/index.ts: declare the file in the schema and copy its fields in the mutation (extra fields are refused).
+photos: table({ caption: string(), file: object({ key: string(), name: string(), contentType: string(), size: number() }) }),
+addPhoto: mutation(async (ctx, caption: string, file: { key: string; name: string; contentType: string; size: number }) => {
+  if (!/^[0-9a-f-]{36}$/.test(String(file?.key))) throw new Error("Upload the photo first.");
+  return ctx.db.photos.insert({ caption, file: { key: file.key, name: file.name, contentType: file.contentType, size: file.size } });
+}),
+
+// client/index.tsx
+import { createClient, FileUpload, FilePreview } from "eraspace/client";
+const addPhoto = client.useMutation("addPhoto");
+<FileUpload client={client} accept="image/*" onUpload={(file) => addPhoto(caption, file)} />
+{photos?.map((p) => <FilePreview key={p.id} client={client} file={p.file} />)}
+\`\`\`
+
+- \`<FileUpload>\` is a drop zone and file picker with progress and error text. Props: \`accept\`, \`multiple\`,
+  \`maxBytes\`, \`disabled\`, \`class\` (replaces its default style; \`data-dragging\` is set during a drag) and
+  children for the label. \`onUpload(file)\` runs once per stored file; if it throws, the file is deleted again.
+- \`<FilePreview file={fileRef or key}>\` shows images, video and audio inline, plain text in a frame, and other
+  types (PDF, zip...) as a download card. \`caption={false}\` hides the name/size line; \`class\` replaces its style.
+  Pass the saved \`FileRef\`: a bare key costs a metadata request per preview. Images, video and audio uploaded
+  from the same page show at once from the browser's copy; \`<FileUpload>\` shows an image while it uploads.
+- Custom UI: \`const { upload, uploading, progress, error, file } = client.useUpload({ accept, maxBytes, onUpload })\`,
+  then \`upload(input.files)\`; \`file\` is the Blob uploading now. Lower level: \`client.storage.upload(blob, { onProgress })\`,
+  \`.url(key)\`, \`.localUrl(key)\`, \`.info(key)\` and \`.delete(key)\`.
+- \`accept\` and \`maxBytes\` are checked in the browser only; the server stores any type up to its limit.
+- Up to 5 MiB per file and 100 MiB per app. Anyone with a key can read or delete that file; never upload secrets.
+
+## Server execution
+
+Server TypeScript is transformed with oxc and runs as ES modules in V8. JavaScript language features such as
+classes, closures, async/await, generators, getters, private fields, Proxy, Reflect and BigInt use V8 semantics.
+Values crossing the database or RPC boundary must be JSON-compatible.
+
+- Imports support relative deployed files and \`eraspace/server\`. npm packages, Node built-ins and dynamic
+  \`import()\` are unavailable. Apps need no installed server dependencies.
+- The host supplies \`fetch\`, \`URL\`, \`URLPattern\`, \`Headers\`, \`Request\`, \`Response\`, Web Streams,
+  \`Blob\`, \`File\`, \`FormData\`, \`crypto\` (including \`crypto.subtle\`), \`TextEncoder\`, \`TextDecoder\`,
+  \`CompressionStream\`, timers and \`console\`. Bodies arrive and leave whole rather than incrementally.
+- Persist state in the database. Module state is not durable and resets when an app unloads or a worker restarts.
+- Await database calls. Mutations run through one writer per app and reply after their Postgres commit.
+- Handlers have CPU, wall-clock and heap limits. Keep loops and reads bounded.
+- Outbound fetch is available to claimed apps in actions and read-only endpoints. Private addresses are blocked.
 
 ## Deploys without an account
 
@@ -40410,6 +40663,22 @@ var deployFlags = {
   publicInspect: Flag_exports.Boolean("public-inspect").pipe(Flag_exports.withDefault(false), Flag_exports.withDescription("Let anyone read this app's inspection data and logs"))
 };
 var deployOptions = (input) => ({ name: value3(input.name), publicInspect: input.publicInspect });
+var deleteTableFlag = {
+  deleteTable: Flag_exports.KeyValuePair("delete-table").pipe(
+    Flag_exports.withDescription("Delete a table removed from the schema, confirming its current row count: --delete-table <table>=<rows> (repeatable)"),
+    Flag_exports.optional
+  )
+};
+var shadowFlags = {
+  shadow: Flag_exports.Boolean("shadow").pipe(
+    Flag_exports.withDefault(false),
+    Flag_exports.withDescription("Before installing, rerun the app's live queries on the new code and report which results change or start throwing")
+  ),
+  failOnQueryErrors: Flag_exports.Boolean("fail-on-query-errors").pipe(
+    Flag_exports.withDefault(false),
+    Flag_exports.withDescription("Like --shadow, but refuse the deploy if a live query that returns a value now would throw")
+  )
+};
 var browserFlag = {
   browser: Flag_exports.Boolean("browser").pipe(Flag_exports.withDefault(true), Flag_exports.withDescription("Open the sign-in page in a browser; --no-browser only prints the URL"))
 };
@@ -40431,8 +40700,19 @@ var initCommand = Command_exports.make("init", { template: templateFlag }, ({ te
 var typecheckCommand = Command_exports.make("typecheck", {}, () => Effect_exports.flatMap(config, (c2) => typecheck(c2.root))).pipe(
   Command_exports.withDescription("Typecheck server/, client/ and shared/ (no tsconfig.json or node_modules needed)")
 );
-var deployCommand = Command_exports.make("deploy", deployFlags, (input) => Effect_exports.flatMap(config, (c2) => deploy(c2, deployOptions(input)))).pipe(
-  Command_exports.withDescription("Build and deploy. Without a login this creates a temporary unclaimed app.")
+var deployCommand = Command_exports.make(
+  "deploy",
+  { ...deployFlags, ...deleteTableFlag, ...shadowFlags },
+  (input) => Effect_exports.flatMap(
+    config,
+    (c2) => deploy(c2, { ...deployOptions(input), deleteTables: value3(input.deleteTable), shadow: input.shadow, failOnQueryErrors: input.failOnQueryErrors })
+  )
+).pipe(
+  Command_exports.withDescription("Build and deploy. Without a login this creates a temporary unclaimed app."),
+  Command_exports.withExamples([
+    { command: "eraspace deploy --delete-table drafts=12", description: "Deploy a schema without drafts, deleting its 12 rows" },
+    { command: "eraspace deploy --fail-on-query-errors", description: "Deploy only if no live query starts throwing on the new code" }
+  ])
 );
 var devCommand = Command_exports.make("dev", deployFlags, (input) => Effect_exports.flatMap(config, (c2) => dev(c2, deployOptions(input)))).pipe(
   Command_exports.withDescription("Deploy, then redeploy whenever server/, client/, shared/ or .env.eraspace.server change")
@@ -40440,14 +40720,38 @@ var devCommand = Command_exports.make("dev", deployFlags, (input) => Effect_expo
 var callCommand = Command_exports.make(
   "call",
   {
-    fn: Argument_exports.String("fn").pipe(Argument_exports.withDescription("Query or mutation name")),
+    fn: Argument_exports.String("fn").pipe(Argument_exports.withDescription("Query, mutation or action name")),
     args: Argument_exports.String("json").pipe(Argument_exports.withDescription("Arguments, each one a JSON value"), Argument_exports.variadic())
   },
-  ({ fn: fn3, args: args2 }) => Effect_exports.flatMap(config, (c2) => call(c2, fn3, args2))
+  ({ fn: fn3, args: args2 }) => Effect_exports.flatMap(config, (c2) => call2(c2, fn3, args2))
 ).pipe(
   Command_exports.withDescription("Call a handler with positional JSON arguments"),
   Command_exports.withExamples([{ command: `eraspace call messages '"general"'`, description: "Strings are JSON too, so quote them" }])
 );
+var profileCommand = Command_exports.make(
+  "profile",
+  {
+    app: optionalArg("app", "App name or id (default: this checkout's app)"),
+    seconds: Flag_exports.Int("seconds").pipe(Flag_exports.filter((n) => n >= 1 && n <= 60, (n) => `--seconds must be between 1 and 60, got ${n}`), Flag_exports.withDefault(10), Flag_exports.withDescription("How long to sample")),
+    out: optionalString("out", "Where to write the .cpuprofile (default: <app>-<time>.cpuprofile)")
+  },
+  ({ app, seconds: seconds2, out }) => Effect_exports.flatMap(config, (c2) => profile(c2, value3(app), seconds2, value3(out)))
+).pipe(
+  Command_exports.withDescription("Sample the app's server CPU time and write a .cpuprofile that opens in Chrome DevTools against the TypeScript sources"),
+  Command_exports.withExamples([{ command: "eraspace profile my-app --seconds 10", description: "Profile while you exercise the app" }])
+);
+var explainCommand = Command_exports.make(
+  "explain",
+  {
+    fn: Argument_exports.String("fn").pipe(Argument_exports.withDescription("Query name")),
+    args: Argument_exports.String("json").pipe(Argument_exports.withDescription("Arguments, each one a JSON value"), Argument_exports.variadic()),
+    json: Flag_exports.Boolean("json").pipe(Flag_exports.withDefault(false), Flag_exports.withDescription("Print the full report as JSON"))
+  },
+  ({ fn: fn3, args: args2, json: json2 }) => Effect_exports.flatMap(config, (c2) => explain(c2, fn3, args2, json2))
+).pipe(
+  Command_exports.withDescription("Run a query once and suggest indexes for rows it filters in JavaScript"),
+  Command_exports.withExamples([{ command: `eraspace explain todosByStatus '"done"'`, description: "Strings are JSON too, so quote them" }])
+);
 var logsCommand = Command_exports.make(
   "logs",
   {
@@ -40492,15 +40796,40 @@ var inspectionCommand = Command_exports.make(
   },
   ({ visibility, app }) => Effect_exports.flatMap(config, (c2) => inspection(c2, visibility, value3(app)))
 ).pipe(Command_exports.withDescription("Open or close inspection and logs to everyone"));
-var yesFlag = Flag_exports.Boolean("yes").pipe(Flag_exports.withAlias("y"), Flag_exports.withDefault(false), Flag_exports.withDescription("Confirm"));
-var lifecycleCommand = (action, description) => Command_exports.make(
-  action,
+var lifecycleApp = optionalArg("app", "App name or id (default: this checkout's app)");
+var lifecycleCommand = (action, description) => Command_exports.make(action, { app: lifecycleApp }, ({ app }) => Effect_exports.flatMap(config, (c2) => lifecycle(c2, action, value3(app), false))).pipe(
+  Command_exports.withDescription(description)
+);
+var changesCommand = Command_exports.make(
+  "changes",
   {
-    app: optionalArg("app", "App name or id (default: this checkout's app)"),
-    yes: yesFlag
+    since: Flag_exports.Int("since").pipe(Flag_exports.filter((n) => n >= 0, (n) => `--since must be a commit number, got ${n}`), Flag_exports.withDefault(0), Flag_exports.withDescription("Print changes committed after this commit")),
+    limit: Flag_exports.Int("limit").pipe(Flag_exports.filter((n) => n >= 1 && n <= 1e4, (n) => `--limit must be between 1 and 10000, got ${n}`), Flag_exports.withDefault(1e3), Flag_exports.withDescription("Rows to print at most (whole commits)"))
+  },
+  ({ since, limit }) => Effect_exports.flatMap(config, (c2) => changes2(c2, since, limit))
+).pipe(
+  Command_exports.withDescription("Print recent committed row changes as NDJSON (the change log keeps 24 hours by default)"),
+  Command_exports.withExamples([{ command: "eraspace changes --since 120 | jq .", description: "Changes committed after commit 120" }])
+);
+var undoCommand = Command_exports.make(
+  "undo",
+  {
+    to: Argument_exports.Int("commit").pipe(Argument_exports.withDescription("Commit number to restore rows to")),
+    yes: Flag_exports.Boolean("yes").pipe(Flag_exports.withAlias("y"), Flag_exports.withDefault(false), Flag_exports.withDescription("Confirm the undo"))
+  },
+  ({ to, yes }) => Effect_exports.flatMap(config, (c2) => undo(c2, to, yes))
+).pipe(
+  Command_exports.withDescription("Put every row changed after a commit back as it was; needs --yes. The undo is a commit too, so it can be undone"),
+  Command_exports.withExamples([{ command: "eraspace undo 120 --yes", description: "Revert everything committed after commit 120" }])
+);
+var terminateCommand = Command_exports.make(
+  "terminate",
+  {
+    app: lifecycleApp,
+    yes: Flag_exports.Boolean("yes").pipe(Flag_exports.withAlias("y"), Flag_exports.withDefault(false), Flag_exports.withDescription("Confirm that the app stops permanently"))
   },
-  ({ app, yes }) => Effect_exports.flatMap(config, (c2) => lifecycle(c2, action, value3(app), yes))
-).pipe(Command_exports.withDescription(description));
+  ({ app, yes }) => Effect_exports.flatMap(config, (c2) => lifecycle(c2, "terminate", value3(app), yes))
+).pipe(Command_exports.withDescription("Stop permanently (data kept, no more deploys); needs --yes"));
 var tokenCommand = Command_exports.make("token").pipe(
   Command_exports.withDescription("Create, list and revoke API tokens"),
   Command_exports.withSubcommands([
@@ -40534,6 +40863,8 @@ var command = eraspace.pipe(
     deployCommand,
     devCommand,
     callCommand,
+    explainCommand,
+    profileCommand,
     logsCommand,
     inspectCommand,
     authCommand,
@@ -40543,7 +40874,9 @@ var command = eraspace.pipe(
     inspectionCommand,
     lifecycleCommand("archive", "Stop serving and keep the data"),
     lifecycleCommand("restore", "Serve an archived app again"),
-    lifecycleCommand("terminate", "Stop permanently (data kept, no more deploys); needs --yes"),
+    terminateCommand,
+    changesCommand,
+    undoCommand,
     tokenCommand,
     ...hidden
   ])