hazo_env 0.10.0 → 0.10.2

package/CHANGE_LOG.md

@@ -1,5 +1,27 @@
 # hazo_env — Change Log
 
+## 0.10.2 — 2026-09-19
+
+Pure plumbing — no behavior change. Future-proofs hazo_env for the workspace's i18n adoption
+effort (`hazo_core/i18n`'s canonical `createPackageT` bridge, see `hazo_i18n`).
+
+- Verified hazo_env is genuinely a "zero-string" package: it's a CLI/resolver tool with no
+  React UI (no `.tsx` in `src/`); the only string content is developer/operator-facing —
+  `console.log` output in `src/cli.ts` and thrown `HazoError` messages in `src/resolve/*` /
+  `src/env.server.ts` for misconfiguration diagnostics — not text rendered to an end user of a
+  consuming app.
+- Added `src/locales/en.json` (empty flat catalog `{}`) and `src/lib/i18n.ts`, exporting
+  `t = createPackageT('hazo_env', en)` via the existing `src/lib/index.ts` barrel (server entry
+  only — `t` reads its catalog via `node:module`'s `createRequire` because this package's
+  tsconfig uses `module: "Node16"`, which doesn't support `import ... with { type: 'json' }`
+  (TS2823)).
+- `build` script now copies `src/locales` to `dist/locales` so the JSON catalog ships with the
+  compiled output.
+- Added `hazo_i18n` as an optional peer dependency (`^0.5.0`); `hazo_core` was already a
+  required peer.
+- test-app `/autotest`: added a documented zero-case `i18n-stub` scenario group (`t` is
+  server-only in this package's layout, so it can't be exercised from the client-side harness).
+
 ## 0.10.0 — 2026-07-29
 
 Security/safety hardening of `envsync`. Six defects fixed, each with a regression test. These are **behavior changes** — new validation refuses inputs that previously ran, one new opt-in flag is required to keep an old behavior, and diff/log output is now redacted.

package/dist/lib/i18n.d.ts

@@ -0,0 +1,2 @@
+export declare const t: import("hazo_core/i18n").TFunc;
+//# sourceMappingURL=i18n.d.ts.map

package/dist/lib/i18n.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../src/lib/i18n.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,CAAC,gCAAiC,CAAC"}

package/dist/lib/i18n.js

@@ -0,0 +1,21 @@
+// hazo_env/src/lib/i18n.ts — canonical i18n bridge wiring
+//
+// Future-proofing plumbing only: hazo_env is a "zero-string" package (no
+// user-facing UI text — it's a CLI/resolver tool; console output in
+// src/cli.ts and thrown HazoError messages in src/resolve/* and
+// src/env.server.ts are developer/operator-facing diagnostics, not
+// application UI). `en` is an empty flat catalog today. If this package
+// ever grows a user-facing string, add it to `src/locales/en.json` and read
+// it via `t('some.key')` instead of a literal.
+//
+// NOTE: this package's tsconfig uses `module: "Node16"`, which does not
+// support `import ... with { type: 'json' }` (TS2823). We use
+// `createRequire` instead, matching the workaround documented for other
+// Node16 packages in this adoption effort. The build script copies
+// `src/locales` to `dist/locales` so the JSON ships alongside the compiled
+// output.
+import { createRequire } from 'node:module';
+import { createPackageT } from 'hazo_core/i18n';
+const require = createRequire(import.meta.url);
+const en = require('../locales/en.json');
+export const t = createPackageT('hazo_env', en);

package/dist/lib/index.d.ts

@@ -1,2 +1,3 @@
 export * from './secret_columns.js';
+export { t } from './i18n.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AACA,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,WAAW,CAAC"}

package/dist/lib/index.js

@@ -1,2 +1,3 @@
 // hazo_env/src/lib/index.ts — Core library exports
 export * from './secret_columns.js';
+export { t } from './i18n.js';

package/dist/locales/en.json

@@ -0,0 +1 @@
+{}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hazo_env",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "Canonical environment resolver — typed env names, per-env DB/file/secret config, doctor and CLI for hazo apps",
   "type": "module",
   "main": "./dist/index.js",
@@ -27,7 +27,7 @@
     "CHANGE_LOG.md"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.build.json",
+    "build": "tsc -p tsconfig.build.json && cp -r src/locales dist/locales",
     "lint": "tsc --noEmit",
     "test": "NODE_OPTIONS=--experimental-vm-modules jest",
     "dev:test-app": "npm run build && cd test-app && npm run dev",
@@ -38,13 +38,14 @@
     "picocolors": "^1.1.1"
   },
   "peerDependencies": {
-    "hazo_core": "^1.3.0",
-    "hazo_config": "^2.4.1",
-    "hazo_connect": "^3.9.2",
-    "hazo_files": "^3.1.1",
-    "hazo_secure": "^1.7.0",
-    "hazo_audit": "^2.1.2",
-    "hazo_pdf": "^2.2.0",
+    "hazo_core": "^2.4.0",
+    "hazo_config": "^2.6.0",
+    "hazo_connect": "^4.3.0",
+    "hazo_files": "^3.4.0",
+    "hazo_secure": "^1.8.1",
+    "hazo_audit": "^2.3.0",
+    "hazo_pdf": "^2.4.0",
+    "hazo_i18n": "^0.5.0",
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
     "next": "^14.0.0 || ^16.0.0"
@@ -53,6 +54,9 @@
     "hazo_connect": {
       "optional": true
     },
+    "hazo_i18n": {
+      "optional": true
+    },
     "hazo_files": {
       "optional": true
     },
@@ -84,10 +88,10 @@
     "@types/node": "^22.10.0",
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
-    "hazo_core": "^1.3.0",
-    "hazo_config": "^2.4.1",
-    "hazo_connect": "^3.9.2",
-    "hazo_files": "^3.1.1",
+    "hazo_core": "^2.4.0",
+    "hazo_config": "^2.6.0",
+    "hazo_connect": "^4.3.0",
+    "hazo_files": "^3.4.0",
     "next": "^16.0.10",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",

package/dist/mask/registry.d.ts

@@ -1,8 +0,0 @@
-import type { MaskTransform } from '../types/index.js';
-/** Register a custom transform (or override a built-in). */
-export declare function registerMask(name: string, fn: MaskTransform): void;
-/** Get the transform function for a given name. Returns undefined if not registered. */
-export declare function getTransform(name: string): Promise<MaskTransform | undefined>;
-/** List all registered transform names. */
-export declare function listTransforms(): Promise<string[]>;
-//# sourceMappingURL=registry.d.ts.map

package/dist/mask/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/mask/registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAiBvD,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,GAAG,IAAI,CAElE;AAED,wFAAwF;AACxF,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAGnF;AAED,2CAA2C;AAC3C,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAGxD"}

package/dist/mask/registry.js

@@ -1,29 +0,0 @@
-// hazo_env/src/mask/registry.ts — mask transform registry
-import { optional_import } from 'hazo_core';
-const _registry = new Map();
-let _seeded = false;
-async function ensureSeeded() {
-    if (_seeded)
-        return;
-    _seeded = true;
-    const maskModule = await optional_import('hazo_secure/mask');
-    if (maskModule?.BUILTIN_TRANSFORMS) {
-        for (const [name, fn] of Object.entries(maskModule.BUILTIN_TRANSFORMS)) {
-            _registry.set(name, fn);
-        }
-    }
-}
-/** Register a custom transform (or override a built-in). */
-export function registerMask(name, fn) {
-    _registry.set(name, fn);
-}
-/** Get the transform function for a given name. Returns undefined if not registered. */
-export async function getTransform(name) {
-    await ensureSeeded();
-    return _registry.get(name);
-}
-/** List all registered transform names. */
-export async function listTransforms() {
-    await ensureSeeded();
-    return [..._registry.keys()].sort();
-}

package/dist/mask/ruleset.d.ts

@@ -1,15 +0,0 @@
-import type { HazoConnectAdapter } from 'hazo_connect';
-export interface MaskRule {
-    table: string;
-    column: string;
-    transform: string;
-    params?: Record<string, unknown>;
-}
-export declare function ensureAppConfigTable(adapter: HazoConnectAdapter): Promise<void>;
-/** Load rules from hazo_env_masking.ini into hazo_app_config. */
-export declare function syncRulesetFromIni(adapter: HazoConnectAdapter, iniPath?: string): Promise<number>;
-/** Read the effective ruleset from hazo_app_config. */
-export declare function loadRuleset(adapter: HazoConnectAdapter): Promise<MaskRule[]>;
-/** Parse INI-format masking rules. Format: [table_name] / column = transform */
-export declare function parseIniRules(content: string): MaskRule[];
-//# sourceMappingURL=ruleset.d.ts.map

package/dist/mask/ruleset.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ruleset.d.ts","sourceRoot":"","sources":["../../src/mask/ruleset.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AASD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYrF;AAED,iEAAiE;AACjE,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,EAC3B,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAwBjB;AAED,uDAAuD;AACvD,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAYlF;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAkBzD"}

package/dist/mask/ruleset.js

@@ -1,77 +0,0 @@
-// hazo_env/src/mask/ruleset.ts — ruleset persistence (hazo_app_config)
-import path from 'node:path';
-import fs from 'node:fs';
-const CONFIG_SECTION = 'hazo_env_masking';
-// Ensure hazo_app_config table exists in the given SQLite adapter
-function rawQuery(adapter, sql, params = []) {
-    return adapter.rawQuery(sql, { params });
-}
-export async function ensureAppConfigTable(adapter) {
-    await rawQuery(adapter, `
-    CREATE TABLE IF NOT EXISTS hazo_app_config (
-      id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
-      config_section TEXT NOT NULL,
-      config_name TEXT NOT NULL,
-      config_value_json TEXT,
-      created_at TEXT DEFAULT (datetime('now')),
-      updated_at TEXT DEFAULT (datetime('now')),
-      UNIQUE(config_section, config_name)
-    )
-  `);
-}
-/** Load rules from hazo_env_masking.ini into hazo_app_config. */
-export async function syncRulesetFromIni(adapter, iniPath) {
-    const resolvedPath = iniPath ?? path.resolve(process.cwd(), 'config', 'hazo_env_masking.ini');
-    if (!fs.existsSync(resolvedPath)) {
-        throw new Error(`hazo_env_masking.ini not found at ${resolvedPath}`);
-    }
-    const content = fs.readFileSync(resolvedPath, 'utf-8');
-    const rules = parseIniRules(content);
-    await ensureAppConfigTable(adapter);
-    let count = 0;
-    for (const rule of rules) {
-        const name = `${rule.table}.${rule.column}`;
-        const valueJson = JSON.stringify({ transform: rule.transform, params: rule.params ?? {} });
-        await rawQuery(adapter, `
-      INSERT INTO hazo_app_config (config_section, config_name, config_value_json)
-      VALUES (?, ?, ?)
-      ON CONFLICT(config_section, config_name) DO UPDATE SET
-        config_value_json = excluded.config_value_json,
-        updated_at = datetime('now')
-    `, [CONFIG_SECTION, name, valueJson]);
-        count++;
-    }
-    return count;
-}
-/** Read the effective ruleset from hazo_app_config. */
-export async function loadRuleset(adapter) {
-    await ensureAppConfigTable(adapter);
-    const rows = await rawQuery(adapter, `SELECT config_name, config_value_json FROM hazo_app_config WHERE config_section = ? ORDER BY config_name`, [CONFIG_SECTION]);
-    return rows.map((row) => {
-        const [table, column] = row.config_name.split('.');
-        const parsed = JSON.parse(row.config_value_json ?? '{}');
-        return { table, column, transform: parsed.transform, params: parsed.params };
-    });
-}
-/** Parse INI-format masking rules. Format: [table_name] / column = transform */
-export function parseIniRules(content) {
-    const rules = [];
-    let currentTable = '';
-    for (const rawLine of content.split('\n')) {
-        const line = rawLine.trim();
-        if (!line || line.startsWith(';') || line.startsWith('#'))
-            continue;
-        if (line.startsWith('[') && line.endsWith(']')) {
-            currentTable = line.slice(1, -1).trim();
-        }
-        else if (currentTable && line.includes('=')) {
-            const eqIdx = line.indexOf('=');
-            const column = line.slice(0, eqIdx).trim();
-            const transform = line.slice(eqIdx + 1).trim();
-            if (column && transform) {
-                rules.push({ table: currentTable, column, transform });
-            }
-        }
-    }
-    return rules;
-}

package/dist/migrate/audit.d.ts

@@ -1,21 +0,0 @@
-import type { HazoConnectAdapter } from 'hazo_connect';
-export interface AuditMigrationPayload {
-    from: string;
-    to: string;
-    scrub: string;
-    db?: {
-        tables: number;
-        rows: number;
-        scrubbed: number;
-    };
-    files?: {
-        copied: number;
-        bytes: number;
-    };
-    verify?: {
-        ok: boolean;
-        checked: number;
-    };
-}
-export declare function auditMigration(adapter: HazoConnectAdapter, payload: AuditMigrationPayload): Promise<void>;
-//# sourceMappingURL=audit.d.ts.map

package/dist/migrate/audit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/migrate/audit.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAOD,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAgCf"}

package/dist/migrate/audit.js

@@ -1,36 +0,0 @@
-// hazo_env/src/migrate/audit.ts — emit audit intent event (wrapped, never fails migration)
-import { optional_import } from 'hazo_core';
-// Cast helper for SQLite rawQuery params extension
-function rawQuery(adapter, sql, params = []) {
-    return adapter.rawQuery(sql, { params });
-}
-export async function auditMigration(adapter, payload) {
-    try {
-        // Ensure hazo_audit_intent table exists (CREATE TABLE IF NOT EXISTS)
-        await rawQuery(adapter, `
-      CREATE TABLE IF NOT EXISTS hazo_audit_intent (
-        id TEXT PRIMARY KEY DEFAULT (lower(hex(randomblob(16)))),
-        event_name TEXT NOT NULL,
-        payload TEXT,
-        subject_kind TEXT,
-        subject_id TEXT,
-        created_at TEXT DEFAULT (datetime('now'))
-      )
-    `).catch(() => { });
-        const auditModule = await optional_import('hazo_audit/server');
-        if (auditModule?.emitIntentEvent) {
-            await auditModule.emitIntentEvent(adapter, {
-                event_name: 'hazo_env.migration',
-                payload: payload,
-            });
-        }
-        else {
-            // Fallback: insert directly
-            await rawQuery(adapter, `INSERT INTO hazo_audit_intent (event_name, payload, subject_kind) VALUES (?, ?, ?)`, ['hazo_env.migration', JSON.stringify(payload), 'migration']);
-        }
-    }
-    catch (e) {
-        // Audit write failure never fails the migration
-        console.warn('[hazo_env] audit write failed (non-fatal):', e instanceof Error ? e.message : String(e));
-    }
-}

package/dist/migrate/clear.d.ts

@@ -1,3 +0,0 @@
-import type { ClearRequest, ClearResult } from '../types/index.js';
-export declare function clearEnv(req: ClearRequest): Promise<ClearResult>;
-//# sourceMappingURL=clear.d.ts.map

package/dist/migrate/clear.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"clear.d.ts","sourceRoot":"","sources":["../../src/migrate/clear.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAqB,MAAM,mBAAmB,CAAC;AAYtF,wBAAsB,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAoHtE"}

package/dist/migrate/clear.js

@@ -1,117 +0,0 @@
-// hazo_env/src/migrate/clear.ts — clearEnv: wipe DB tables + files for a target environment
-import { HazoError, optional_import } from 'hazo_core';
-import { getEnvRole } from '../env.server.js';
-import { resolveMigrateConfig } from '../resolve/migrate.js';
-import { resolveConnectConfig } from '../resolve/connect.js';
-import { resolveFilesRoot } from '../resolve/files.js';
-import { writeMigrationProgress } from './progress.js';
-import fs from 'node:fs';
-function emitProgress(req, p) {
-    req.onProgress?.(p);
-    if (req.jobId && req.progressDir) {
-        writeMigrationProgress(req.progressDir, req.jobId, p);
-    }
-}
-export async function clearEnv(req) {
-    const startMs = Date.now();
-    const warnings = [];
-    // Guard: refuse production target unless explicitly unlocked with a confirm token
-    const role = getEnvRole(req.env);
-    if (role === 'production' && !req.allowProdTarget) {
-        throw new HazoError({
-            code: 'HAZO_ENV_PROD_TARGET_REFUSED',
-            pkg: 'hazo_env',
-            message: `Refusing to clear production environment "${req.env}". Pass allowProdTarget:true and a confirmToken to override.`,
-        });
-    }
-    if (role === 'production' && req.allowProdTarget && !req.confirmToken) {
-        throw new HazoError({
-            code: 'HAZO_ENV_PROD_TARGET_REFUSED',
-            pkg: 'hazo_env',
-            message: 'Production target requires a confirmToken for safety.',
-        });
-    }
-    emitProgress(req, { phase: 'validate', message: 'Validating clear request', percent: 0 });
-    const migrateConfig = resolveMigrateConfig();
-    const { tables, preserve = [], pkOverrides = {} } = migrateConfig;
-    if (!tables || tables.length === 0) {
-        throw new HazoError({
-            code: 'HAZO_ENV_MISSING_TABLE_LIST',
-            pkg: 'hazo_env',
-            message: 'clearEnv requires an explicit table list. ' +
-                'Set [migrate] tables = ... in hazo_env_config.ini.',
-        });
-    }
-    const tablesToClear = [...tables.filter((t) => !preserve.includes(t))].reverse();
-    const dbConfig = resolveConnectConfig({ env: req.env, allowOtherEnv: true });
-    if (dbConfig.type !== 'postgrest') {
-        throw new HazoError({
-            code: 'HAZO_ENV_NOT_IMPLEMENTED',
-            pkg: 'hazo_env',
-            message: `clearEnv only supports PostgREST connections (got "${dbConfig.type}").`,
-        });
-    }
-    if (!dbConfig.postgrest) {
-        throw new HazoError({
-            code: 'HAZO_ENV_NOT_IMPLEMENTED',
-            pkg: 'hazo_env',
-            message: 'PostgREST config missing base_url/api_key.',
-        });
-    }
-    const connect = await optional_import('hazo_connect/server');
-    if (!connect) {
-        throw new HazoError({
-            code: 'HAZO_ENV_MISSING_DEPENDENCY',
-            pkg: 'hazo_env',
-            message: 'hazo_connect is required for clearEnv. Install hazo_connect to continue.',
-        });
-    }
-    const tgtAdapter = connect.createHazoConnect({
-        type: 'postgrest',
-        postgrest: {
-            base_url: dbConfig.postgrest.base_url,
-            api_key: dbConfig.postgrest.api_key,
-        },
-    });
-    // DB clear (only if not explicitly disabled)
-    let tablesCleared = 0;
-    if (req.include?.db !== false) {
-        for (let idx = 0; idx < tablesToClear.length; idx++) {
-            const table = tablesToClear[idx];
-            const percent = Math.round(((idx + 1) / tablesToClear.length) * 90);
-            emitProgress(req, {
-                phase: 'clear',
-                message: `Clearing table ${idx + 1}/${tablesToClear.length}: ${table}`,
-                percent,
-            });
-            const pk = pkOverrides[table] ?? 'id';
-            try {
-                await tgtAdapter.rawQuery(`/${table}?${pk}=not.is.null`, { method: 'DELETE' });
-                tablesCleared++;
-            }
-            catch (err) {
-                const msg = err instanceof Error ? err.message : String(err);
-                warnings.push(`Warning: could not clear ${table}: ${msg}`);
-            }
-        }
-    }
-    // File clear
-    let filesCleared = false;
-    if (req.include?.files !== false) {
-        emitProgress(req, { phase: 'clear', message: 'Clearing files...', percent: 92 });
-        const filesRoot = resolveFilesRoot(req.env);
-        if (fs.existsSync(filesRoot)) {
-            fs.rmSync(filesRoot, { recursive: true, force: true });
-        }
-        fs.mkdirSync(filesRoot, { recursive: true });
-        filesCleared = true;
-    }
-    emitProgress(req, { phase: 'done', message: 'Clear complete', percent: 100 });
-    return {
-        ok: true,
-        tablesCleared,
-        filesCleared,
-        durationMs: Date.now() - startMs,
-        warnings,
-    };
-}

package/dist/migrate/db-dump-restore.d.ts

@@ -1,24 +0,0 @@
-import type { BackupConfig } from '../resolve/backup.js';
-export interface DbDumpRestoreResult {
-    tables: number;
-    rows: number;
-    scrubbed: number;
-    mode: string;
-}
-/**
- * Restore a Postgres database on a remote server via SSH pg_dump/pg_restore.
- *
- * Steps executed remotely:
- *  1. Obtain a dump file (fresh pg_dump or locate an existing .pgdump)
- *  2. Run pre_restore_cmd (if configured)
- *  3. dropdb --if-exists + createdb -O <owner>
- *  4. pg_restore -d <target_db>
- *  5. Run post_restore_cmd (if configured)
- *
- * Returns a DbDumpRestoreResult with mode: 'dump-restore' and zero
- * row/table counts (binary restore does not report these).
- */
-export declare function restoreDbViaDump(backup: BackupConfig, opts?: {
-    onProgress?: (msg: string) => void;
-}): Promise<DbDumpRestoreResult>;
-//# sourceMappingURL=db-dump-restore.d.ts.map

package/dist/migrate/db-dump-restore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"db-dump-restore.d.ts","sourceRoot":"","sources":["../../src/migrate/db-dump-restore.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GAC5C,OAAO,CAAC,mBAAmB,CAAC,CA6D9B"}

package/dist/migrate/db-dump-restore.js

@@ -1,72 +0,0 @@
-// hazo_env/src/migrate/db-dump-restore.ts — DB copy via SSH pg_dump/pg_restore
-//
-// Builds a single remote bash script and runs it via runSsh.
-// ⚠️  No PII scrubbing on this path — pg_restore copies raw binary rows.
-//     Use the default api transport when scrubbed data is required in dev.
-import { resolveSshConfig } from '../resolve/ssh.js';
-import { runSsh } from './ssh-exec.js';
-/**
- * Restore a Postgres database on a remote server via SSH pg_dump/pg_restore.
- *
- * Steps executed remotely:
- *  1. Obtain a dump file (fresh pg_dump or locate an existing .pgdump)
- *  2. Run pre_restore_cmd (if configured)
- *  3. dropdb --if-exists + createdb -O <owner>
- *  4. pg_restore -d <target_db>
- *  5. Run post_restore_cmd (if configured)
- *
- * Returns a DbDumpRestoreResult with mode: 'dump-restore' and zero
- * row/table counts (binary restore does not report these).
- */
-export async function restoreDbViaDump(backup, opts) {
-    const ssh = resolveSshConfig(backup.ssh_env);
-    if (!ssh) {
-        throw new Error(`dump-restore: no [transport.ssh.${backup.ssh_env}] config found — ` +
-            `set ssh_env to a configured SSH transport in [backup.*]`);
-    }
-    // Build remote bash script lines
-    const lines = ['set -euo pipefail', ''];
-    // Step 1: Get or create dump
-    lines.push('# Step 1: Get or create dump');
-    if (backup.dump_source === 'fresh') {
-        lines.push('DUMP_FILE="/tmp/he-$(date +%s).pgdump"');
-        lines.push(`echo "Creating fresh dump of ${backup.fresh_dump_db}..."`);
-        lines.push(`pg_dump -Fc ${backup.fresh_dump_db} > "$DUMP_FILE"`);
-    }
-    else {
-        lines.push(`echo "Locating dump file matching ${backup.dump_source}..."`);
-        lines.push(`DUMP_FILE=$(ls -t ${backup.dump_source} 2>/dev/null | head -1)`);
-        lines.push(`if [ -z "$DUMP_FILE" ]; then echo "No dump file found matching ${backup.dump_source}"; exit 1; fi`);
-        lines.push('echo "Using dump: $DUMP_FILE"');
-    }
-    lines.push('');
-    // Step 2: Pre-restore command (optional)
-    if (backup.pre_restore_cmd) {
-        lines.push('# Step 2: Pre-restore command');
-        lines.push('echo "Running pre-restore..."');
-        lines.push(backup.pre_restore_cmd);
-        lines.push('');
-    }
-    // Step 3: Drop and recreate target DB
-    lines.push('# Step 3: Drop and recreate target DB');
-    lines.push(`echo "Dropping ${backup.target_db}..."`);
-    lines.push(`dropdb --if-exists ${backup.target_db}`);
-    lines.push(`echo "Creating ${backup.target_db}..."`);
-    lines.push(`createdb -O ${backup.owner} ${backup.target_db}`);
-    lines.push('');
-    // Step 4: Restore
-    lines.push('# Step 4: Restore');
-    lines.push(`echo "Restoring to ${backup.target_db}..."`);
-    lines.push(`pg_restore -d ${backup.target_db} "$DUMP_FILE"`);
-    lines.push('echo "Restore complete."');
-    // Step 5: Post-restore command (optional)
-    if (backup.post_restore_cmd) {
-        lines.push('');
-        lines.push('# Step 5: Post-restore command');
-        lines.push('echo "Running post-restore..."');
-        lines.push(backup.post_restore_cmd);
-    }
-    const script = lines.join('\n');
-    await runSsh(ssh, script, { onProgress: opts?.onProgress });
-    return { tables: 0, rows: 0, scrubbed: 0, mode: 'dump-restore' };
-}

package/dist/migrate/db.d.ts

@@ -1,17 +0,0 @@
-import type { HazoConnectAdapter } from 'hazo_connect';
-export interface DbCopyOptions {
-    type?: 'sqlite' | 'postgrest';
-    tables?: '*' | string[];
-    preserve?: string[];
-    pkOverrides?: Record<string, string>;
-    scrubHook?: (tableName: string, row: Record<string, unknown>) => Record<string, unknown>;
-    onProgress?: (msg: string) => void;
-    onTableProgress?: (tableIdx: number, totalTables: number, tableName: string) => void;
-}
-export interface DbCopyResult {
-    tables: number;
-    rows: number;
-    scrubbed: number;
-}
-export declare function copyDb(srcAdapter: HazoConnectAdapter, tgtAdapter: HazoConnectAdapter, opts?: DbCopyOptions): Promise<DbCopyResult>;
-//# sourceMappingURL=db.d.ts.map

package/dist/migrate/db.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/migrate/db.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,MAAM,CAAC,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzF,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CACtF;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AA6BD,wBAAsB,MAAM,CAC1B,UAAU,EAAE,kBAAkB,EAC9B,UAAU,EAAE,kBAAkB,EAC9B,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,YAAY,CAAC,CAqHvB"}