eraspace 0.2.0 → 0.3.0

package/bin.js

@@ -241,6 +241,34 @@ __export(Effect_exports, {
   zipWith: () => zipWith3
 });
 
+// node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Context.js
+var Context_exports = {};
+__export(Context_exports, {
+  Reference: () => Reference,
+  Service: () => Service,
+  ServiceTypeId: () => ServiceTypeId,
+  add: () => add,
+  addOrOmit: () => addOrOmit,
+  addUnsafe: () => addUnsafe,
+  empty: () => empty,
+  get: () => get,
+  getOption: () => getOption,
+  getOrElse: () => getOrElse2,
+  getOrUndefined: () => getOrUndefined2,
+  getOrUndefinedUnsafe: () => getOrUndefinedUnsafe,
+  getUnsafe: () => getUnsafe,
+  hasSameCache: () => hasSameCache,
+  isContext: () => isContext,
+  isKey: () => isKey,
+  isReference: () => isReference,
+  make: () => make5,
+  makeUnsafe: () => makeUnsafe,
+  merge: () => merge,
+  mergeAll: () => mergeAll,
+  omit: () => omit,
+  pick: () => pick
+});
+
 // node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Pipeable.js
 var pipeArguments = (self, args2) => {
   switch (args2.length) {
@@ -2273,6 +2301,7 @@ var Proto = {
 };
 var hasSameCache = (self, that) => self.cacheRoot === that.cacheRoot;
 var isContext = (u) => hasProperty(u, TypeId3);
+var isKey = (u) => hasProperty(u, ServiceTypeId);
 var isReference = (u) => !!u[ReferenceTypeId];
 var empty = () => emptyContext2;
 var emptyContext2 = /* @__PURE__ */ makeUnsafe(/* @__PURE__ */ new Map());
@@ -2293,6 +2322,12 @@ var addUnsafe = (self, key, service4) => {
     parent: impl.overlay
   }, impl.depth + 1);
 };
+var addOrOmit = /* @__PURE__ */ dual(3, (self, key, service4) => service4._tag === "None" ? omit(key)(self) : add(self, key, service4.value));
+var getOrElse2 = /* @__PURE__ */ dual(3, (self, key, orElse6) => {
+  const value4 = lookup(self, key.key);
+  if (value4 !== notFound) return value4;
+  return isReference(key) ? getDefaultValue(key) : orElse6();
+});
 var getOrUndefined2 = /* @__PURE__ */ dual(2, (self, key) => getOrUndefinedUnsafe(self, key.key));
 var getOrUndefinedUnsafe = (self, key) => {
   const value4 = lookup(self, key);
@@ -2342,6 +2377,26 @@ var mergeAll = (...ctxs) => {
   }
   return makeUnsafe(map18);
 };
+var pick = (...services) => (self) => {
+  if (services.length <= 1) {
+    const map18 = /* @__PURE__ */ new Map();
+    if (services.length === 1) {
+      const key = services[0].key;
+      const value4 = lookup(self, key);
+      if (value4 !== notFound) map18.set(key, value4);
+    }
+    return makeUnsafe(map18);
+  }
+  const keep = new Set(services.map((key) => key.key));
+  return withFlat(self, (map18) => map18.forEach((_, key) => {
+    if (!keep.has(key)) map18.delete(key);
+  }));
+};
+var omit = (...keys4) => (self) => withFlat(self, (map18) => {
+  for (let i = 0; i < keys4.length; i++) {
+    map18.delete(keys4[i].key);
+  }
+});
 var Reference = Service;
 
 // node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Duration.js
@@ -2988,7 +3043,7 @@ var merge2 = /* @__PURE__ */ match3({
   onFailure: identity,
   onSuccess: identity
 });
-var getOrElse2 = /* @__PURE__ */ dual(2, (self, onFailure) => isFailure2(self) ? onFailure(self.failure) : self.success);
+var getOrElse3 = /* @__PURE__ */ dual(2, (self, onFailure) => isFailure2(self) ? onFailure(self.failure) : self.success);
 var getOrThrowWith2 = /* @__PURE__ */ dual(2, (self, onFailure) => {
   if (isSuccess2(self)) {
     return self.success;
@@ -16361,7 +16416,7 @@ function transformOptionalEffect(f) {
     transform: f
   });
 }
-function omit() {
+function omit2() {
   return transformOptional(() => none2());
 }
 function withDefault(defaultValue) {
@@ -18565,9 +18620,9 @@ function isPattern(regExp, annotations) {
   });
 }
 var bodyOwners = /* @__PURE__ */ new WeakMap();
-function copy2(ast, changes2) {
-  const out = Object.assign(Object.create(Object.getPrototypeOf(ast)), ast, changes2);
-  if (Reflect.ownKeys(changes2).every((key) => key === "context" || key === "encoding")) {
+function copy2(ast, changes3) {
+  const out = Object.assign(Object.create(Object.getPrototypeOf(ast)), ast, changes3);
+  if (Reflect.ownKeys(changes3).every((key) => key === "context" || key === "encoding")) {
     bodyOwners.set(out, getContextOwner(ast));
   }
   return out;
@@ -24947,10 +25002,10 @@ function toFormatter(ast, options3) {
 }
 
 // node_modules/.pnpm/effect@4.0.5/node_modules/effect/dist/Struct.js
-var pick = /* @__PURE__ */ dual(2, (self, keys4) => {
+var pick2 = /* @__PURE__ */ dual(2, (self, keys4) => {
   return buildStruct(self, (k, v) => hasPropertyKey(keys4, k) ? [k, v] : void 0);
 });
-var omit2 = /* @__PURE__ */ dual(2, (self, keys4) => {
+var omit3 = /* @__PURE__ */ dual(2, (self, keys4) => {
   return buildStruct(self, (k, v) => !hasPropertyKey(keys4, k) ? [k, v] : void 0);
 });
 var assign = /* @__PURE__ */ dual(2, (self, that) => {
@@ -25070,10 +25125,10 @@ var OptionalImpl = class {
     this.replaceResult = replaceResult;
   }
   replace(a, s) {
-    return getOrElse2(this.replaceResult(a, s), () => s);
+    return getOrElse3(this.replaceResult(a, s), () => s);
   }
   modify(f) {
-    return (s) => getOrElse2(flatMap2(this.getResult(s), (a) => this.replaceResult(f(a), s)), () => s);
+    return (s) => getOrElse3(flatMap2(this.getResult(s), (a) => this.replaceResult(f(a), s)), () => s);
   }
   compose(that) {
     return make36(compose3(this.node, that.node));
@@ -25121,14 +25176,14 @@ var OptionalImpl = class {
     })));
   }
   pick(keys4) {
-    return this.compose(makeLens(pick(keys4), (p, a) => ({
-      ...omit2(a, keys4),
+    return this.compose(makeLens(pick2(keys4), (p, a) => ({
+      ...omit3(a, keys4),
       ...p
     })));
   }
   omit(keys4) {
-    return this.compose(makeLens(omit2(keys4), (o, a) => ({
-      ...pick(a, keys4),
+    return this.compose(makeLens(omit3(keys4), (o, a) => ({
+      ...pick2(a, keys4),
       ...o
     })));
   }
@@ -25174,7 +25229,7 @@ var OptionalImpl = class {
     );
   }
   modifyAll(f) {
-    return (s) => getOrElse2(flatMap2(this.getResult(s), (as5) => this.replaceResult(as5.map(f), s)), () => s);
+    return (s) => getOrElse3(flatMap2(this.getResult(s), (as5) => this.replaceResult(as5.map(f), s)), () => s);
   }
 };
 var IsoImpl = class extends OptionalImpl {
@@ -25213,7 +25268,7 @@ var PrismImpl = class extends OptionalImpl {
     return this.set(a);
   }
   modify(f) {
-    return (s) => getOrElse2(map2(this.getResult(s), (a) => this.set(f(a))), () => s);
+    return (s) => getOrElse3(map2(this.getResult(s), (a) => this.set(f(a))), () => s);
   }
 };
 function make36(node) {
@@ -26001,7 +26056,7 @@ function toIssueEffect(self) {
   return catchCause3(self, (cause) => failCauseSync2(() => map6(cause, (error2) => error2.issue)));
 }
 function withDecodingDefaultKey(defaultValue, options3) {
-  const encode5 = options3?.encodingStrategy === "omit" ? omit() : passthrough2();
+  const encode5 = options3?.encodingStrategy === "omit" ? omit2() : passthrough2();
   return (self) => {
     return optionalKey2(toEncoded2(self)).pipe(decodeTo2(self, {
       decode: withDefault(toIssueEffect(defaultValue)),
@@ -26015,7 +26070,7 @@ function withDecodingDefaultTypeKey(defaultValue, options3) {
   };
 }
 function withDecodingDefault(defaultValue, options3) {
-  const encode5 = options3?.encodingStrategy === "omit" ? omit() : passthrough2();
+  const encode5 = options3?.encodingStrategy === "omit" ? omit2() : passthrough2();
   return (self) => {
     return optional2(toEncoded2(self)).pipe(decodeTo2(self, {
       decode: withDefault(toIssueEffect(defaultValue)),
@@ -38939,7 +38994,7 @@ var runWith2 = (command2, config2) => {
 // cli/package.json
 var package_default = {
   name: "eraspace-cli",
-  version: "0.2.0",
+  version: "0.3.0",
   private: true,
   license: "MIT",
   type: "module",
@@ -39266,6 +39321,48 @@ function formatLog(l) {
   const data = l.data === void 0 || l.data === null ? "" : " " + c.gray(JSON.stringify(l.data));
   return `${c.gray(time3)} ${color(level.padEnd(5))} ${fn3}${l.msg ?? ""}${data}`;
 }
+var SKIPPED = {
+  fetch: "uses fetch",
+  identity: "reads the caller's identity",
+  running: "was running",
+  recovering: "cache recovering",
+  "new index": "reads an index this deploy adds",
+  committed: "a commit changed it during the check",
+  budget: "out of time",
+  limit: "too many entries",
+  interrupted: "interrupted"
+};
+var call = (fn3, args2) => {
+  const text2 = Array.isArray(args2) ? args2.map((a) => JSON.stringify(a)).join(", ") : JSON.stringify(args2);
+  return `${fn3}(${text2 && text2.length > 80 ? `${text2.slice(0, 77)}...` : text2 ?? ""})`;
+};
+function formatShadow(report) {
+  if (report.note) return c.dim(`Live queries: none checked (${report.note})`);
+  const total = report.total ?? 0;
+  if (total === 0) return c.dim("Live queries: none cached, nothing to check");
+  const errors = report.errors ?? 0;
+  const changed = report.changed ?? 0;
+  const parts2 = [
+    `${report.unchanged ?? 0} unchanged`,
+    changed ? c.yellow(`${changed} change value`) : "0 change value",
+    errors ? c.red(`${errors} now throw`) : "0 now throw",
+    ...report.fixed ? [c.green(`${report.fixed} fixed`)] : [],
+    ...report.skipped ? [c.dim(`${report.skipped} skipped`)] : []
+  ];
+  const at = report.commitSeq ? ` at commit ${report.commitSeq}` : "";
+  const lines2 = [`Live queries: ${report.checked ?? 0} of ${total} checked against the new code${at}: ${parts2.join(", ")}`];
+  for (const e of report.entries ?? []) {
+    const what = call(e.fn, e.args);
+    if (e.outcome === "error") lines2.push(`  ${c.red("throws ")} ${what}: ${e.error ? `${e.error.name}: ${e.error.message}` : ""}`);
+    else if (e.outcome === "changed") lines2.push(`  ${c.yellow("changes")} ${what}${e.error ? `: ${e.error.name}: ${e.error.message}` : ""}`);
+    else if (e.outcome === "fixed") lines2.push(`  ${c.green("fixed  ")} ${what}`);
+    else lines2.push(c.dim(`  skipped ${what}: ${SKIPPED[e.reason ?? ""] ?? e.reason ?? ""}`));
+  }
+  const listed = report.entries?.length ?? 0;
+  const notable = errors + changed + (report.fixed ?? 0) + (report.skipped ?? 0);
+  if (notable > listed) lines2.push(c.dim(`  ... and ${notable - listed} more`));
+  return lines2.join("\n");
+}
 
 // cli/src/api.ts
 var Timestamp = Schema_exports.NullOr(Schema_exports.Union([Schema_exports.Number, Schema_exports.String]));
@@ -39280,10 +39377,34 @@ var App = Schema_exports.Struct({
   expiresAt: Schema_exports.optional(Timestamp),
   publicInspection: Schema_exports.optional(Schema_exports.Boolean)
 });
+var Count = Schema_exports.optional(Schema_exports.Number);
+var ShadowReport = Schema_exports.Struct({
+  total: Count,
+  checked: Count,
+  unchanged: Count,
+  changed: Count,
+  errors: Count,
+  fixed: Count,
+  skipped: Count,
+  commitSeq: Count,
+  note: Schema_exports.optional(Schema_exports.String),
+  entries: Schema_exports.optional(
+    Schema_exports.Array(
+      Schema_exports.Struct({
+        fn: Schema_exports.String,
+        args: Schema_exports.optional(Schema_exports.Unknown),
+        outcome: Schema_exports.String,
+        reason: Schema_exports.optional(Schema_exports.String),
+        error: Schema_exports.optional(Schema_exports.Struct({ name: Schema_exports.String, message: Schema_exports.String }))
+      })
+    )
+  )
+});
 var Deployed = Schema_exports.Struct({
   ...App.fields,
   version: Schema_exports.optional(Schema_exports.Number),
-  claimToken: Schema_exports.optional(Schema_exports.String)
+  claimToken: Schema_exports.optional(Schema_exports.String),
+  shadow: Schema_exports.optional(ShadowReport)
 });
 var AppList = Schema_exports.Struct({ apps: Schema_exports.Array(App) });
 var StateChange = Schema_exports.Struct({ state: Schema_exports.String });
@@ -39448,15 +39569,20 @@ var login = Effect_exports.fnUntraced(function* (config2, browser) {
   }
   return yield* fail12("The sign-in code expired. Run eraspace auth login again.");
 });
+var LogoutResult = Schema_exports.Struct({ ok: Schema_exports.Literal(true) });
 var logout = Effect_exports.fnUntraced(function* (config2) {
   const session = yield* sessionFor(config2.origin);
   if (!session) {
     yield* Console_exports.log(`Not signed in to ${config2.origin}.`);
     return;
   }
-  yield* request3(config2, "POST", "/_api/auth/logout", { bearer: Redacted_exports.make(session.token) }).pipe(Effect_exports.timeout("10 seconds"), Effect_exports.ignore);
+  const response = yield* api(config2, "POST", "/_api/auth/logout", { bearer: Redacted_exports.make(session.token), timeout: "10 seconds" });
+  if (response.status !== 401) {
+    if (response.status >= 400 || response.json.ok === false) return yield* Effect_exports.fail(yield* failure(response));
+    yield* decode5(LogoutResult, response.json, "sign-out");
+  }
   yield* removeSession(config2.origin);
-  yield* Console_exports.log(`Signed out of ${config2.origin}.`);
+  yield* Console_exports.log(response.status === 401 ? `Removed invalid session for ${config2.origin}.` : `Signed out of ${config2.origin}.`);
 });
 var okWhoami = ok(Whoami);
 var whoami = Effect_exports.fnUntraced(function* (config2) {
@@ -39491,6 +39617,7 @@ function scanImports(file2, source) {
   }
   return { imports: imports.sort((a, b) => (a.at ?? 0) - (b.at ?? 0)) };
 }
+var MAX_MODULE_BYTES = 256 * 1024;
 var EXTENSIONS = [".ts", ".mts", ".js", ".mjs", ".tsx"];
 function importCandidates(base) {
   const stem = /\.m?js$/.test(base) ? base.replace(/\.m?js$/, "") : void 0;
@@ -39526,6 +39653,10 @@ var collectServerFiles = Effect_exports.fnUntraced(function* (root) {
     const rel = toPosix(relative2(root, abs2));
     const source = yield* fs.readFileString(abs2);
     files[rel] = source;
+    const bytes2 = Buffer.byteLength(source, "utf8");
+    if (bytes2 > MAX_MODULE_BYTES) {
+      errors.push({ file: rel, line: 0, column: 0, message: `module is ${bytes2} bytes, over the server's ${MAX_MODULE_BYTES} byte (256 KiB) limit; split it into smaller modules` });
+    }
     const { imports, error: error2 } = scanImports(abs2, source);
     if (error2) {
       errors.push({ file: rel, ...lineCol(source, error2.at), message: error2.message });
@@ -39804,7 +39935,6 @@ var withoutEnv = Effect_exports.fnUntraced(function* (payload) {
   }
   return { ...payload, env: {} };
 });
-var okDeployed = ok(Deployed);
 var requestedName = (config2, opts) => opts.name !== void 0 ? { name: opts.name } : { name: config2.name ?? toAppName(basename(config2.root)), uniqueName: true };
 var createApp = Effect_exports.fnUntraced(function* (config2, payload, extra, opts, signedIn) {
   const naming = requestedName(config2, opts);
@@ -39837,23 +39967,27 @@ var deploy = Effect_exports.fnUntraced(function* (config2, opts = {}) {
   const deleteTables = yield* confirmedDeletes(opts.deleteTables);
   const extra = {
     ...opts.publicInspect ? { publicInspection: true } : {},
-    ...Object.keys(deleteTables).length ? { deleteTables } : {}
+    ...Object.keys(deleteTables).length ? { deleteTables } : {},
+    ...opts.shadow ? { shadow: true } : {},
+    ...opts.failOnQueryErrors ? { failOnQueryErrors: true } : {}
   };
   const signedIn = (yield* bearerFor(config2.origin)) !== void 0;
   const t = yield* target(config2);
   let result4;
   if (t.ref) {
     const payload = t.claim ? yield* withoutEnv(build3.payload) : build3.payload;
-    result4 = yield* okDeployed(
-      config2,
-      "POST",
-      `/_api/apps/${enc(t.ref)}/deploy`,
-      {
-        body: { ...payload, ...extra },
-        claim: t.claim,
-        timeout: DEPLOY_TIMEOUT
-      }
-    );
+    const path = `/_api/apps/${enc(t.ref)}/deploy`;
+    const response = yield* api(config2, "POST", path, {
+      body: { ...payload, ...extra },
+      claim: t.claim,
+      timeout: DEPLOY_TIMEOUT
+    });
+    if (response.status >= 400 || response.json.ok === false) {
+      const refused = Schema_exports.decodeUnknownOption(ShadowReport)(response.json.shadow);
+      if (Option_exports.isSome(refused)) yield* Console_exports.log(formatShadow(refused.value));
+      return yield* Effect_exports.fail(yield* failure(response, config2.root));
+    }
+    result4 = yield* decode5(Deployed, response.json, `POST ${path}`);
     if (t.claim && result4.claimed)
       yield* removeLocalDeploy(config2.root, config2.origin);
   } else if (signedIn) {
@@ -39878,6 +40012,7 @@ var deploy = Effect_exports.fnUntraced(function* (config2, opts = {}) {
       expiresAt: Number.isFinite(expiresAt) ? expiresAt : null
     });
   }
+  if (result4.shadow) yield* Console_exports.log(formatShadow(result4.shadow));
   const label = result4.names?.[0] ?? result4.id;
   yield* Console_exports.log(
     `${label}${result4.version === void 0 ? "" : ` v${result4.version}`}: ${result4.url ?? config2.url}`
@@ -39964,7 +40099,10 @@ var dev = Effect_exports.fnUntraced(function* (config2, opts) {
 });
 
 // cli/src/logs.ts
-var IDLE = Duration_exports.seconds(75);
+var LogTimeouts = Context_exports.Reference(
+  "eraspace/cli/LogTimeouts",
+  { defaultValue: () => ({ idle: Duration_exports.seconds(75), stalled: Duration_exports.seconds(30), errorBody: Duration_exports.seconds(10) }) }
+);
 var Printed = class {
   lines = [];
   limit;
@@ -40005,12 +40143,14 @@ var readOnce = Effect_exports.fnUntraced(function* (config2, path, claim2, follo
   const response = yield* request3(config2, "GET", path, { claim: claim2 }).pipe(
     Effect_exports.timeoutOrElse({ duration: "30 seconds", orElse: () => Effect_exports.fail(new Transient({ message: `The platform at ${config2.origin} did not answer within 30s.` })) })
   );
+  const timeouts = yield* LogTimeouts;
+  const errorText = response.text.pipe(Effect_exports.timeout(timeouts.errorBody), Effect_exports.orElseSucceed(() => ""));
   if (isGatewayError(response.status)) {
-    yield* response.text.pipe(Effect_exports.ignore);
+    yield* errorText;
     return yield* new Transient({ message: `The platform at ${config2.origin} is unavailable (HTTP ${response.status}).` });
   }
   if (response.status >= 400) {
-    const text2 = yield* response.text.pipe(Effect_exports.orElseSucceed(() => ""));
+    const text2 = yield* errorText;
     let json2 = { ok: false, error: text2.trim() || `HTTP ${response.status}` };
     try {
       json2 = JSON.parse(text2);
@@ -40018,12 +40158,15 @@ var readOnce = Effect_exports.fnUntraced(function* (config2, path, claim2, follo
     }
     return yield* Effect_exports.fail(yield* failure({ status: response.status, json: json2 }, config2.root));
   }
-  let lines2 = response.stream.pipe(
+  const lines2 = response.stream.pipe(
+    Stream_exports.mapError((error2) => new Transient({ message: `The log stream broke: ${describe(error2.cause ?? error2)}` })),
+    Stream_exports.timeoutOrElse({
+      duration: follow ? timeouts.idle : timeouts.stalled,
+      orElse: () => Stream_exports.fail(new Transient({ message: follow ? "The log stream went quiet." : `The platform at ${config2.origin} stopped sending logs.` }))
+    }),
     Stream_exports.decodeText(),
-    Stream_exports.splitLines,
-    Stream_exports.mapError((error2) => new Transient({ message: `The log stream broke: ${describe(error2.cause ?? error2)}` }))
+    Stream_exports.splitLines
   );
-  if (follow) lines2 = lines2.pipe(Stream_exports.timeoutOrElse({ duration: IDLE, orElse: () => Stream_exports.fail(new Transient({ message: "The log stream went quiet." })) }));
   const fresh2 = printed.connection();
   yield* lines2.pipe(
     Stream_exports.filter((line) => line.trim() !== ""),
@@ -40090,6 +40233,68 @@ var lifecycle = Effect_exports.fnUntraced(function* (config2, action, explicit,
   const result4 = yield* okState(config2, "POST", `/_api/apps/${enc(t.ref)}/${action}`, { claim: t.claim });
   yield* Console_exports.log(`${t.ref}: ${result4.state}`);
 });
+var explain = Effect_exports.fnUntraced(function* (config2, fn3, inputs, json2) {
+  const args2 = yield* parseCallArgs(inputs);
+  const t = yield* requireTarget(config2);
+  const report = yield* okJson(config2, "POST", `/_api/apps/${enc(t.ref)}/explain`, { body: { fn: fn3, args: args2 }, claim: t.claim });
+  if (json2) return yield* Console_exports.log(JSON.stringify(report, null, 2));
+  const scans = report.scans ?? [];
+  yield* Console_exports.log(`${fn3}: read ${String(report.rowsRead)} row${report.rowsRead === 1 ? "" : "s"} in ${scans.length} scan${scans.length === 1 ? "" : "s"} and returned ${String(report.returned)}`);
+  for (const s of scans) yield* Console_exports.log(`  ${s.table} via ${s.index} (${s.mode}): read ${s.rowsRead}, kept ${s.kept} of ${s.rows}`);
+  const suggestions = report.suggestions ?? [];
+  if (!suggestions.length) yield* Console_exports.log(c.dim("No index suggestions."));
+  for (const s of suggestions) yield* Console_exports.log(`${c.yellow("suggest")} ${s.message}`);
+});
+var profile = Effect_exports.fnUntraced(function* (config2, explicit, seconds2, out) {
+  const t = yield* requireTarget(config2, explicit);
+  yield* Console_exports.error(c.dim(`Profiling ${t.ref} for ${seconds2}s...`));
+  const result4 = yield* okJson(config2, "POST", `/_api/apps/${enc(t.ref)}/profile`, { body: { seconds: seconds2 }, claim: t.claim, timeout: Duration_exports.seconds(seconds2 + 30) });
+  const file2 = out ?? `${t.ref}-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.cpuprofile`;
+  const fs = yield* FileSystem_exports.FileSystem;
+  yield* fs.writeFileString(file2, JSON.stringify(result4));
+  const nodes = new Map((result4.nodes ?? []).map((n) => [n.id, n]));
+  const counts = /* @__PURE__ */ new Map();
+  let busy = 0;
+  for (const id2 of result4.samples ?? []) {
+    const f = nodes.get(id2)?.callFrame;
+    if (!f || f.functionName === "(idle)" || f.functionName === "(root)") continue;
+    busy++;
+    const at = f.url ? ` ${f.url}:${f.lineNumber + 1}` : "";
+    const name = `${f.functionName || "(anonymous)"}${at}`;
+    counts.set(name, (counts.get(name) ?? 0) + 1);
+  }
+  const samples = (result4.samples ?? []).length;
+  yield* Console_exports.log(`${t.ref}: busy in ${busy} of ${samples} samples. Open ${file2} in Chrome DevTools (Performance > Load profile).`);
+  for (const [name, n] of [...counts].sort((a, b) => b[1] - a[1]).slice(0, 10)) {
+    yield* Console_exports.log(`  ${(100 * n / Math.max(busy, 1)).toFixed(1).padStart(5)}%  ${name}`);
+  }
+});
+var changes2 = Effect_exports.fnUntraced(function* (config2, since, limit) {
+  const t = yield* requireTarget(config2);
+  const response = yield* request3(config2, "GET", `/_api/apps/${enc(t.ref)}/changes?since=${since}&limit=${limit}`, { claim: t.claim });
+  const text2 = yield* response.text.pipe(Effect_exports.orElseSucceed(() => ""));
+  if (response.status >= 400) {
+    let json2 = { ok: false, error: text2.trim() || `HTTP ${response.status}` };
+    try {
+      json2 = JSON.parse(text2);
+    } catch {
+    }
+    return yield* Effect_exports.fail(yield* failure({ status: response.status, json: json2 }));
+  }
+  const lines2 = text2.split("\n").filter(Boolean);
+  for (const line of lines2) yield* Console_exports.log(line);
+  const head5 = Number(response.headers["x-eraspace-commit-seq"] ?? 0);
+  const last = lines2.length ? JSON.parse(lines2.at(-1)).seq : since;
+  const more = response.headers["x-eraspace-more"] === "1";
+  yield* Console_exports.error(c.dim(more ? `Latest commit ${head5}; continue with --since ${last}` : `Up to date at commit ${head5}`));
+});
+var undo = Effect_exports.fnUntraced(function* (config2, to, yes) {
+  const t = yield* requireTarget(config2);
+  if (!yes) return yield* fail12(`eraspace undo ${to} puts every row of ${t.ref} changed after commit ${to} back as it was. Re-run with --yes.`);
+  const result4 = yield* okJson(config2, "POST", `/_api/apps/${enc(t.ref)}/undo`, { body: { toSeq: to }, claim: t.claim });
+  const undone = Number(result4.undone ?? 0);
+  yield* Console_exports.log(undone ? `${t.ref}: restored ${undone} row${undone === 1 ? "" : "s"} to commit ${to} as commit ${String(result4.commitSeq)}` : `${t.ref}: nothing changed after commit ${to}`);
+});
 var listTokens = Effect_exports.fnUntraced(function* (config2) {
   const { tokens } = yield* ok(TokenList)(config2, "GET", "/_api/tokens");
   if (!tokens.length) yield* Console_exports.log("No tokens.");
@@ -40122,7 +40327,7 @@ Pass each argument as JSON, for example eraspace call send '"general"' '{"text":
   }
   return Effect_exports.succeed(args2);
 }
-var call = Effect_exports.fnUntraced(function* (config2, fn3, inputs) {
+var call2 = Effect_exports.fnUntraced(function* (config2, fn3, inputs) {
   const args2 = yield* parseCallArgs(inputs);
   const t = yield* requireTarget(config2);
   const { status, text: text2 } = yield* Effect_exports.gen(function* () {
@@ -40222,6 +40427,8 @@ export default capsule({
   \`paginate({ cursor, numItems })\`. Every table has an implicit \`by_creation\` index. Await every db call.
 - Queries and actions have a read-only db. Write in mutations or writable endpoints. Actions can call
   \`ctx.runQuery\`, \`ctx.runMutation\` and global \`fetch\`.
+- Mutations schedule later work with \`ctx.scheduler.runAfter(ms, "mutationName", ...args)\`, which returns a job id.
+  The job commits with the mutation and its run commits once; only mutations can be scheduled.
 - Handler arguments are positional and not validated. Check them in the handler.
 - \`ctx.auth.userId\` is a per-connection guest id that changes on reload. It is not a login: never use it for
   ownership or access control. Every app is public.
@@ -40230,7 +40437,9 @@ export default capsule({
   \`json(value)\`, \`text(string)\`, \`empty()\`, \`redirect(url)\` or a plain value (sent as JSON).
 - Removing a populated table needs its row count confirmed: \`${cli} deploy --delete-table <table>=<rows>\` (the
   refused deploy prints the exact flag). Deletion runs in background batches.
-- Changing a field's type or making it required fails the deploy while stored rows do not match; migrate them first.
+- Changing a field's type or making it required fails the deploy while stored rows do not match. Declare a
+  migration instead: \`table({ ... }).migrate(1, row => ({ ...row, done: false }))\` upgrades old rows when read
+  and rewrites them in the background. Number migrations 1, 2, 3, ... and keep each one until its rows are done.
 
 ## Client API (\`eraspace/client\`)
 
@@ -40239,7 +40448,7 @@ import { createClient } from "eraspace/client";
 import { useState } from "preact/hooks";
 import type app from "../server/index";
 
-const client = createClient<typeof app>({ reloadOnDeploy: true });
+const client = createClient<typeof app>();
 
 export default function App() {
   const items = client.useQuery("items", "some-list");   // undefined while loading, then live
@@ -40266,6 +40475,8 @@ export default function App() {
   cleanup). \`client.usePresence(name, meta)\` returns just the members.
 - Files: see "File uploads" below.
 - Pages: \`Router\`, \`Route\`, \`Link\`, \`useLocation\`, \`useNavigate\`, \`useParams\` from \`eraspace/client\`.
+- Open tabs reload by themselves after each deploy. Pass \`createClient({ reloadOnDeploy: false })\` to keep the
+  page and react to \`client.onDeployed(version => ...)\` instead.
 - Client imports are limited to \`eraspace/client\`, \`preact\`, \`preact/hooks\`, \`@preact/signals\` and relative files.
 
 ## File uploads
@@ -40292,10 +40503,11 @@ const addPhoto = client.useMutation("addPhoto");
   children for the label. \`onUpload(file)\` runs once per stored file; if it throws, the file is deleted again.
 - \`<FilePreview file={fileRef or key}>\` shows images, video and audio inline, plain text in a frame, and other
   types (PDF, zip...) as a download card. \`caption={false}\` hides the name/size line; \`class\` replaces its style.
-  Pass the saved \`FileRef\`: a bare key costs a metadata request per preview.
-- Custom UI: \`const { upload, uploading, progress, error } = client.useUpload({ accept, maxBytes, onUpload })\`,
-  then \`upload(input.files)\`. Lower level: \`client.storage.upload(blob, { onProgress })\`, \`.url(key)\`,
-  \`.info(key)\` and \`.delete(key)\`.
+  Pass the saved \`FileRef\`: a bare key costs a metadata request per preview. Images, video and audio uploaded
+  from the same page show at once from the browser's copy; \`<FileUpload>\` shows an image while it uploads.
+- Custom UI: \`const { upload, uploading, progress, error, file } = client.useUpload({ accept, maxBytes, onUpload })\`,
+  then \`upload(input.files)\`; \`file\` is the Blob uploading now. Lower level: \`client.storage.upload(blob, { onProgress })\`,
+  \`.url(key)\`, \`.localUrl(key)\`, \`.info(key)\` and \`.delete(key)\`.
 - \`accept\` and \`maxBytes\` are checked in the browser only; the server stores any type up to its limit.
 - Up to 5 MiB per file and 100 MiB per app. Anyone with a key can read or delete that file; never upload secrets.
 
@@ -40307,8 +40519,9 @@ Values crossing the database or RPC boundary must be JSON-compatible.
 
 - Imports support relative deployed files and \`eraspace/server\`. npm packages, Node built-ins and dynamic
   \`import()\` are unavailable. Apps need no installed server dependencies.
-- The host supplies \`fetch\`, \`URL\`, \`Headers\`, \`Request\`, \`Response\`, \`crypto.randomUUID\`,
-  \`TextEncoder\`, \`TextDecoder\`, timers and \`console\`.
+- The host supplies \`fetch\`, \`URL\`, \`URLPattern\`, \`Headers\`, \`Request\`, \`Response\`, Web Streams,
+  \`Blob\`, \`File\`, \`FormData\`, \`crypto\` (including \`crypto.subtle\`), \`TextEncoder\`, \`TextDecoder\`,
+  \`CompressionStream\`, timers and \`console\`. Bodies arrive and leave whole rather than incrementally.
 - Persist state in the database. Module state is not durable and resets when an app unloads or a worker restarts.
 - Await database calls. Mutations run through one writer per app and reply after their Postgres commit.
 - Handlers have CPU, wall-clock and heap limits. Keep loops and reads bounded.
@@ -40456,6 +40669,16 @@ var deleteTableFlag = {
     Flag_exports.optional
   )
 };
+var shadowFlags = {
+  shadow: Flag_exports.Boolean("shadow").pipe(
+    Flag_exports.withDefault(false),
+    Flag_exports.withDescription("Before installing, rerun the app's live queries on the new code and report which results change or start throwing")
+  ),
+  failOnQueryErrors: Flag_exports.Boolean("fail-on-query-errors").pipe(
+    Flag_exports.withDefault(false),
+    Flag_exports.withDescription("Like --shadow, but refuse the deploy if a live query that returns a value now would throw")
+  )
+};
 var browserFlag = {
   browser: Flag_exports.Boolean("browser").pipe(Flag_exports.withDefault(true), Flag_exports.withDescription("Open the sign-in page in a browser; --no-browser only prints the URL"))
 };
@@ -40479,11 +40702,17 @@ var typecheckCommand = Command_exports.make("typecheck", {}, () => Effect_export
 );
 var deployCommand = Command_exports.make(
   "deploy",
-  { ...deployFlags, ...deleteTableFlag },
-  (input) => Effect_exports.flatMap(config, (c2) => deploy(c2, { ...deployOptions(input), deleteTables: value3(input.deleteTable) }))
+  { ...deployFlags, ...deleteTableFlag, ...shadowFlags },
+  (input) => Effect_exports.flatMap(
+    config,
+    (c2) => deploy(c2, { ...deployOptions(input), deleteTables: value3(input.deleteTable), shadow: input.shadow, failOnQueryErrors: input.failOnQueryErrors })
+  )
 ).pipe(
   Command_exports.withDescription("Build and deploy. Without a login this creates a temporary unclaimed app."),
-  Command_exports.withExamples([{ command: "eraspace deploy --delete-table drafts=12", description: "Deploy a schema without drafts, deleting its 12 rows" }])
+  Command_exports.withExamples([
+    { command: "eraspace deploy --delete-table drafts=12", description: "Deploy a schema without drafts, deleting its 12 rows" },
+    { command: "eraspace deploy --fail-on-query-errors", description: "Deploy only if no live query starts throwing on the new code" }
+  ])
 );
 var devCommand = Command_exports.make("dev", deployFlags, (input) => Effect_exports.flatMap(config, (c2) => dev(c2, deployOptions(input)))).pipe(
   Command_exports.withDescription("Deploy, then redeploy whenever server/, client/, shared/ or .env.eraspace.server change")
@@ -40491,14 +40720,38 @@ var devCommand = Command_exports.make("dev", deployFlags, (input) => Effect_expo
 var callCommand = Command_exports.make(
   "call",
   {
-    fn: Argument_exports.String("fn").pipe(Argument_exports.withDescription("Query or mutation name")),
+    fn: Argument_exports.String("fn").pipe(Argument_exports.withDescription("Query, mutation or action name")),
     args: Argument_exports.String("json").pipe(Argument_exports.withDescription("Arguments, each one a JSON value"), Argument_exports.variadic())
   },
-  ({ fn: fn3, args: args2 }) => Effect_exports.flatMap(config, (c2) => call(c2, fn3, args2))
+  ({ fn: fn3, args: args2 }) => Effect_exports.flatMap(config, (c2) => call2(c2, fn3, args2))
 ).pipe(
   Command_exports.withDescription("Call a handler with positional JSON arguments"),
   Command_exports.withExamples([{ command: `eraspace call messages '"general"'`, description: "Strings are JSON too, so quote them" }])
 );
+var profileCommand = Command_exports.make(
+  "profile",
+  {
+    app: optionalArg("app", "App name or id (default: this checkout's app)"),
+    seconds: Flag_exports.Int("seconds").pipe(Flag_exports.filter((n) => n >= 1 && n <= 60, (n) => `--seconds must be between 1 and 60, got ${n}`), Flag_exports.withDefault(10), Flag_exports.withDescription("How long to sample")),
+    out: optionalString("out", "Where to write the .cpuprofile (default: <app>-<time>.cpuprofile)")
+  },
+  ({ app, seconds: seconds2, out }) => Effect_exports.flatMap(config, (c2) => profile(c2, value3(app), seconds2, value3(out)))
+).pipe(
+  Command_exports.withDescription("Sample the app's server CPU time and write a .cpuprofile that opens in Chrome DevTools against the TypeScript sources"),
+  Command_exports.withExamples([{ command: "eraspace profile my-app --seconds 10", description: "Profile while you exercise the app" }])
+);
+var explainCommand = Command_exports.make(
+  "explain",
+  {
+    fn: Argument_exports.String("fn").pipe(Argument_exports.withDescription("Query name")),
+    args: Argument_exports.String("json").pipe(Argument_exports.withDescription("Arguments, each one a JSON value"), Argument_exports.variadic()),
+    json: Flag_exports.Boolean("json").pipe(Flag_exports.withDefault(false), Flag_exports.withDescription("Print the full report as JSON"))
+  },
+  ({ fn: fn3, args: args2, json: json2 }) => Effect_exports.flatMap(config, (c2) => explain(c2, fn3, args2, json2))
+).pipe(
+  Command_exports.withDescription("Run a query once and suggest indexes for rows it filters in JavaScript"),
+  Command_exports.withExamples([{ command: `eraspace explain todosByStatus '"done"'`, description: "Strings are JSON too, so quote them" }])
+);
 var logsCommand = Command_exports.make(
   "logs",
   {
@@ -40543,15 +40796,40 @@ var inspectionCommand = Command_exports.make(
   },
   ({ visibility, app }) => Effect_exports.flatMap(config, (c2) => inspection(c2, visibility, value3(app)))
 ).pipe(Command_exports.withDescription("Open or close inspection and logs to everyone"));
-var yesFlag = Flag_exports.Boolean("yes").pipe(Flag_exports.withAlias("y"), Flag_exports.withDefault(false), Flag_exports.withDescription("Confirm"));
-var lifecycleCommand = (action, description) => Command_exports.make(
-  action,
+var lifecycleApp = optionalArg("app", "App name or id (default: this checkout's app)");
+var lifecycleCommand = (action, description) => Command_exports.make(action, { app: lifecycleApp }, ({ app }) => Effect_exports.flatMap(config, (c2) => lifecycle(c2, action, value3(app), false))).pipe(
+  Command_exports.withDescription(description)
+);
+var changesCommand = Command_exports.make(
+  "changes",
   {
-    app: optionalArg("app", "App name or id (default: this checkout's app)"),
-    yes: yesFlag
+    since: Flag_exports.Int("since").pipe(Flag_exports.filter((n) => n >= 0, (n) => `--since must be a commit number, got ${n}`), Flag_exports.withDefault(0), Flag_exports.withDescription("Print changes committed after this commit")),
+    limit: Flag_exports.Int("limit").pipe(Flag_exports.filter((n) => n >= 1 && n <= 1e4, (n) => `--limit must be between 1 and 10000, got ${n}`), Flag_exports.withDefault(1e3), Flag_exports.withDescription("Rows to print at most (whole commits)"))
+  },
+  ({ since, limit }) => Effect_exports.flatMap(config, (c2) => changes2(c2, since, limit))
+).pipe(
+  Command_exports.withDescription("Print recent committed row changes as NDJSON (the change log keeps 24 hours by default)"),
+  Command_exports.withExamples([{ command: "eraspace changes --since 120 | jq .", description: "Changes committed after commit 120" }])
+);
+var undoCommand = Command_exports.make(
+  "undo",
+  {
+    to: Argument_exports.Int("commit").pipe(Argument_exports.withDescription("Commit number to restore rows to")),
+    yes: Flag_exports.Boolean("yes").pipe(Flag_exports.withAlias("y"), Flag_exports.withDefault(false), Flag_exports.withDescription("Confirm the undo"))
+  },
+  ({ to, yes }) => Effect_exports.flatMap(config, (c2) => undo(c2, to, yes))
+).pipe(
+  Command_exports.withDescription("Put every row changed after a commit back as it was; needs --yes. The undo is a commit too, so it can be undone"),
+  Command_exports.withExamples([{ command: "eraspace undo 120 --yes", description: "Revert everything committed after commit 120" }])
+);
+var terminateCommand = Command_exports.make(
+  "terminate",
+  {
+    app: lifecycleApp,
+    yes: Flag_exports.Boolean("yes").pipe(Flag_exports.withAlias("y"), Flag_exports.withDefault(false), Flag_exports.withDescription("Confirm that the app stops permanently"))
   },
-  ({ app, yes }) => Effect_exports.flatMap(config, (c2) => lifecycle(c2, action, value3(app), yes))
-).pipe(Command_exports.withDescription(description));
+  ({ app, yes }) => Effect_exports.flatMap(config, (c2) => lifecycle(c2, "terminate", value3(app), yes))
+).pipe(Command_exports.withDescription("Stop permanently (data kept, no more deploys); needs --yes"));
 var tokenCommand = Command_exports.make("token").pipe(
   Command_exports.withDescription("Create, list and revoke API tokens"),
   Command_exports.withSubcommands([
@@ -40585,6 +40863,8 @@ var command = eraspace.pipe(
     deployCommand,
     devCommand,
     callCommand,
+    explainCommand,
+    profileCommand,
     logsCommand,
     inspectCommand,
     authCommand,
@@ -40594,7 +40874,9 @@ var command = eraspace.pipe(
     inspectionCommand,
     lifecycleCommand("archive", "Stop serving and keep the data"),
     lifecycleCommand("restore", "Serve an archived app again"),
-    lifecycleCommand("terminate", "Stop permanently (data kept, no more deploys); needs --yes"),
+    terminateCommand,
+    changesCommand,
+    undoCommand,
     tokenCommand,
     ...hidden
   ])