@abloatai/ablo 0.17.0 → 0.19.0

package/dist/cli.cjs

@@ -6044,8 +6044,8 @@ var require_typescript = __commonJS({
       function createGetCanonicalFileName(useCaseSensitiveFileNames2) {
         return useCaseSensitiveFileNames2 ? identity : toFileNameLowerCase;
       }
-      function patternText({ prefix, suffix }) {
-        return `${prefix}*${suffix}`;
+      function patternText({ prefix: prefix2, suffix }) {
+        return `${prefix2}*${suffix}`;
       }
       function matchedText(pattern, candidate) {
         Debug.assert(isPatternMatch(pattern, candidate));
@@ -6064,17 +6064,17 @@ var require_typescript = __commonJS({
         }
         return matchedValue;
       }
-      function startsWith(str, prefix, ignoreCase) {
-        return ignoreCase ? equateStringsCaseInsensitive(str.slice(0, prefix.length), prefix) : str.lastIndexOf(prefix, 0) === 0;
+      function startsWith(str, prefix2, ignoreCase) {
+        return ignoreCase ? equateStringsCaseInsensitive(str.slice(0, prefix2.length), prefix2) : str.lastIndexOf(prefix2, 0) === 0;
       }
-      function removePrefix(str, prefix) {
-        return startsWith(str, prefix) ? str.substr(prefix.length) : str;
+      function removePrefix(str, prefix2) {
+        return startsWith(str, prefix2) ? str.substr(prefix2.length) : str;
       }
-      function tryRemovePrefix(str, prefix, getCanonicalFileName = identity) {
-        return startsWith(getCanonicalFileName(str), getCanonicalFileName(prefix)) ? str.substring(prefix.length) : void 0;
+      function tryRemovePrefix(str, prefix2, getCanonicalFileName = identity) {
+        return startsWith(getCanonicalFileName(str), getCanonicalFileName(prefix2)) ? str.substring(prefix2.length) : void 0;
       }
-      function isPatternMatch({ prefix, suffix }, candidate) {
-        return candidate.length >= prefix.length + suffix.length && startsWith(candidate, prefix) && endsWith(candidate, suffix);
+      function isPatternMatch({ prefix: prefix2, suffix }, candidate) {
+        return candidate.length >= prefix2.length + suffix.length && startsWith(candidate, prefix2) && endsWith(candidate, suffix);
       }
       function and(f, g2) {
         return (arg) => f(arg) && g2(arg);
@@ -11848,8 +11848,8 @@ ${lanes.join("\n")}
         );
         const firstComponent = pathComponents2[0];
         if (isAbsolutePathAnUrl && isRootedDiskPath(firstComponent)) {
-          const prefix = firstComponent.charAt(0) === directorySeparator ? "file://" : "file:///";
-          pathComponents2[0] = prefix + firstComponent;
+          const prefix2 = firstComponent.charAt(0) === directorySeparator ? "file://" : "file:///";
+          pathComponents2[0] = prefix2 + firstComponent;
         }
         return getPathFromPathComponents(pathComponents2);
       }
@@ -28865,12 +28865,12 @@ ${lanes.join("\n")}
           node.symbol = void 0;
           return node;
         }
-        function createBaseGeneratedIdentifier(text, autoGenerateFlags, prefix, suffix) {
+        function createBaseGeneratedIdentifier(text, autoGenerateFlags, prefix2, suffix) {
           const node = createBaseIdentifier(escapeLeadingUnderscores(text));
           setIdentifierAutoGenerate(node, {
             flags: autoGenerateFlags,
             id: nextAutoGenerateId,
-            prefix,
+            prefix: prefix2,
             suffix
           });
           nextAutoGenerateId++;
@@ -28893,10 +28893,10 @@ ${lanes.join("\n")}
           }
           return node;
         }
-        function createTempVariable(recordTempVariable, reservedInNestedScopes, prefix, suffix) {
+        function createTempVariable(recordTempVariable, reservedInNestedScopes, prefix2, suffix) {
           let flags2 = 1;
           if (reservedInNestedScopes) flags2 |= 8;
-          const name = createBaseGeneratedIdentifier("", flags2, prefix, suffix);
+          const name = createBaseGeneratedIdentifier("", flags2, prefix2, suffix);
           if (recordTempVariable) {
             recordTempVariable(name);
           }
@@ -28914,23 +28914,23 @@ ${lanes.join("\n")}
             void 0
           );
         }
-        function createUniqueName(text, flags2 = 0, prefix, suffix) {
+        function createUniqueName(text, flags2 = 0, prefix2, suffix) {
           Debug.assert(!(flags2 & 7), "Argument out of range: flags");
           Debug.assert((flags2 & (16 | 32)) !== 32, "GeneratedIdentifierFlags.FileLevel cannot be set without also setting GeneratedIdentifierFlags.Optimistic");
-          return createBaseGeneratedIdentifier(text, 3 | flags2, prefix, suffix);
+          return createBaseGeneratedIdentifier(text, 3 | flags2, prefix2, suffix);
         }
-        function getGeneratedNameForNode(node, flags2 = 0, prefix, suffix) {
+        function getGeneratedNameForNode(node, flags2 = 0, prefix2, suffix) {
           Debug.assert(!(flags2 & 7), "Argument out of range: flags");
           const text = !node ? "" : isMemberName(node) ? formatGeneratedName(
             /*privateName*/
             false,
-            prefix,
+            prefix2,
             node,
             suffix,
             idText
           ) : `generated@${getNodeId(node)}`;
-          if (prefix || suffix) flags2 |= 16;
-          const name = createBaseGeneratedIdentifier(text, 4 | flags2, prefix, suffix);
+          if (prefix2 || suffix) flags2 |= 16;
+          const name = createBaseGeneratedIdentifier(text, 4 | flags2, prefix2, suffix);
           name.original = node;
           return name;
         }
@@ -28947,33 +28947,33 @@ ${lanes.join("\n")}
           if (!startsWith(text, "#")) Debug.fail("First character of private identifier must be #: " + text);
           return createBasePrivateIdentifier(escapeLeadingUnderscores(text));
         }
-        function createBaseGeneratedPrivateIdentifier(text, autoGenerateFlags, prefix, suffix) {
+        function createBaseGeneratedPrivateIdentifier(text, autoGenerateFlags, prefix2, suffix) {
           const node = createBasePrivateIdentifier(escapeLeadingUnderscores(text));
           setIdentifierAutoGenerate(node, {
             flags: autoGenerateFlags,
             id: nextAutoGenerateId,
-            prefix,
+            prefix: prefix2,
             suffix
           });
           nextAutoGenerateId++;
           return node;
         }
-        function createUniquePrivateName(text, prefix, suffix) {
+        function createUniquePrivateName(text, prefix2, suffix) {
           if (text && !startsWith(text, "#")) Debug.fail("First character of private identifier must be #: " + text);
           const autoGenerateFlags = 8 | (text ? 3 : 1);
-          return createBaseGeneratedPrivateIdentifier(text ?? "", autoGenerateFlags, prefix, suffix);
+          return createBaseGeneratedPrivateIdentifier(text ?? "", autoGenerateFlags, prefix2, suffix);
         }
-        function getGeneratedPrivateNameForNode(node, prefix, suffix) {
+        function getGeneratedPrivateNameForNode(node, prefix2, suffix) {
           const text = isMemberName(node) ? formatGeneratedName(
             /*privateName*/
             true,
-            prefix,
+            prefix2,
             node,
             suffix,
             idText
           ) : `#generated@${getNodeId(node)}`;
-          const flags2 = prefix || suffix ? 16 : 0;
-          const name = createBaseGeneratedPrivateIdentifier(text, 4 | flags2, prefix, suffix);
+          const flags2 = prefix2 || suffix ? 16 : 0;
+          const name = createBaseGeneratedPrivateIdentifier(text, 4 | flags2, prefix2, suffix);
           name.original = node;
           return name;
         }
@@ -33775,13 +33775,13 @@ ${lanes.join("\n")}
             [expr]
           );
         }
-        function createSetFunctionNameHelper(f, name, prefix) {
+        function createSetFunctionNameHelper(f, name, prefix2) {
           context.requestEmitHelper(setFunctionNameHelper);
           return context.factory.createCallExpression(
             getUnscopedHelperName("__setFunctionName"),
             /*typeArguments*/
             void 0,
-            prefix ? [f, name, context.factory.createStringLiteral(prefix)] : [f, name]
+            prefix2 ? [f, name, context.factory.createStringLiteral(prefix2)] : [f, name]
           );
         }
         function createValuesHelper(expression) {
@@ -36118,11 +36118,11 @@ ${lanes.join("\n")}
       function formatIdentifierWorker(node, generateName) {
         return isGeneratedPrivateIdentifier(node) ? generateName(node).slice(1) : isGeneratedIdentifier(node) ? generateName(node) : isPrivateIdentifier(node) ? node.escapedText.slice(1) : idText(node);
       }
-      function formatGeneratedName(privateName, prefix, baseName, suffix, generateName) {
-        prefix = formatGeneratedNamePart(prefix, generateName);
+      function formatGeneratedName(privateName, prefix2, baseName, suffix, generateName) {
+        prefix2 = formatGeneratedNamePart(prefix2, generateName);
         suffix = formatGeneratedNamePart(suffix, generateName);
         baseName = formatIdentifier(baseName, generateName);
-        return `${privateName ? "#" : ""}${prefix}${baseName}${suffix}`;
+        return `${privateName ? "#" : ""}${prefix2}${baseName}${suffix}`;
       }
       function createAccessorPropertyBackingField(factory2, node, modifiers, initializer) {
         return factory2.updatePropertyDeclaration(
@@ -56197,11 +56197,11 @@ ${lanes.join("\n")}
               candidates.push({ ending: void 0, value: relativeToBaseUrl });
             }
             if (indexOfStar !== -1) {
-              const prefix = pattern.substring(0, indexOfStar);
+              const prefix2 = pattern.substring(0, indexOfStar);
               const suffix = pattern.substring(indexOfStar + 1);
               for (const { ending, value } of candidates) {
-                if (value.length >= prefix.length + suffix.length && startsWith(value, prefix) && endsWith(value, suffix) && validateEnding({ ending, value })) {
-                  const matchedStar = value.substring(prefix.length, value.length - suffix.length);
+                if (value.length >= prefix2.length + suffix.length && startsWith(value, prefix2) && endsWith(value, suffix) && validateEnding({ ending, value })) {
+                  const matchedStar = value.substring(prefix2.length, value.length - suffix.length);
                   if (!pathIsRelative(matchedStar)) {
                     return replaceFirstStar(key, matchedStar);
                   }
@@ -75900,9 +75900,9 @@ ${lanes.join("\n")}
                     }
                     secondaryRootErrors.unshift([mappedMsg, args[0], args[1]]);
                   } else {
-                    const prefix = msg.code === Diagnostics.Construct_signature_return_types_0_and_1_are_incompatible.code || msg.code === Diagnostics.Construct_signatures_with_no_arguments_have_incompatible_return_types_0_and_1.code ? "new " : "";
+                    const prefix2 = msg.code === Diagnostics.Construct_signature_return_types_0_and_1_are_incompatible.code || msg.code === Diagnostics.Construct_signatures_with_no_arguments_have_incompatible_return_types_0_and_1.code ? "new " : "";
                     const params = msg.code === Diagnostics.Call_signatures_with_no_arguments_have_incompatible_return_types_0_and_1.code || msg.code === Diagnostics.Construct_signatures_with_no_arguments_have_incompatible_return_types_0_and_1.code ? "" : "...";
-                    path = `${prefix}${path}(${params})`;
+                    path = `${prefix2}${path}(${params})`;
                   }
                   break;
                 }
@@ -110744,13 +110744,13 @@ ${lanes.join("\n")}
         }
         function createHoistedVariableForClass(name, node, suffix) {
           const { className } = getPrivateIdentifierEnvironment().data;
-          const prefix = className ? { prefix: "_", node: className, suffix: "_" } : "_";
-          const identifier = typeof name === "object" ? factory2.getGeneratedNameForNode(name, 16 | 8, prefix, suffix) : typeof name === "string" ? factory2.createUniqueName(name, 16, prefix, suffix) : factory2.createTempVariable(
+          const prefix2 = className ? { prefix: "_", node: className, suffix: "_" } : "_";
+          const identifier = typeof name === "object" ? factory2.getGeneratedNameForNode(name, 16 | 8, prefix2, suffix) : typeof name === "string" ? factory2.createUniqueName(name, 16, prefix2, suffix) : factory2.createTempVariable(
             /*recordTempVariable*/
             void 0,
             /*reservedInNestedScopes*/
             true,
-            prefix,
+            prefix2,
             suffix
           );
           if (resolver.hasNodeCheckFlag(
@@ -111823,7 +111823,7 @@ ${lanes.join("\n")}
           if (!decoratorExpressions) {
             return void 0;
           }
-          const prefix = getClassMemberPrefix(node, member);
+          const prefix2 = getClassMemberPrefix(node, member);
           const memberName = getExpressionForPropertyName(
             member,
             /*generateNameForComputedPropertyName*/
@@ -111836,7 +111836,7 @@ ${lanes.join("\n")}
           const descriptor = isPropertyDeclaration(member) && !hasAccessorModifier(member) ? factory2.createVoidZero() : factory2.createNull();
           const helper = emitHelpers().createDecorateHelper(
             decoratorExpressions,
-            prefix,
+            prefix2,
             memberName,
             descriptor
           );
@@ -113739,13 +113739,13 @@ ${lanes.join("\n")}
             3072
             /* NoComments */
           );
-          const prefix = kind === "get" || kind === "set" ? kind : void 0;
+          const prefix2 = kind === "get" || kind === "set" ? kind : void 0;
           const functionName = factory2.createStringLiteralFromNode(
             name,
             /*isSingleQuote*/
             void 0
           );
-          const namedFunction = emitHelpers().createSetFunctionNameHelper(func, functionName, prefix);
+          const namedFunction = emitHelpers().createSetFunctionNameHelper(func, functionName, prefix2);
           const method = factory2.createPropertyAssignment(factory2.createIdentifier(kind), namedFunction);
           setOriginalNode(method, original);
           setSourceMapRange(method, moveRangePastDecorators(original));
@@ -134525,9 +134525,9 @@ ${lanes.join("\n")}
             emitExpression(node, parenthesizerRule);
           }
         }
-        function emitNodeWithPrefix(prefix, prefixWriter, node, emit2) {
+        function emitNodeWithPrefix(prefix2, prefixWriter, node, emit2) {
           if (node) {
-            prefixWriter(prefix);
+            prefixWriter(prefix2);
             emit2(node);
           }
         }
@@ -135265,10 +135265,10 @@ ${lanes.join("\n")}
             return autoGeneratedIdToGeneratedName[autoGenerateId] || (autoGeneratedIdToGeneratedName[autoGenerateId] = makeName(name));
           }
         }
-        function generateNameCached(node, privateName, flags, prefix, suffix) {
+        function generateNameCached(node, privateName, flags, prefix2, suffix) {
           const nodeId = getNodeId(node);
           const cache = privateName ? nodeIdToGeneratedPrivateName : nodeIdToGeneratedName;
-          return cache[nodeId] || (cache[nodeId] = generateNameForNode(node, privateName, flags ?? 0, formatGeneratedNamePart(prefix, generateName), formatGeneratedNamePart(suffix)));
+          return cache[nodeId] || (cache[nodeId] = generateNameForNode(node, privateName, flags ?? 0, formatGeneratedNamePart(prefix2, generateName), formatGeneratedNamePart(suffix)));
         }
         function isUniqueName(name, privateName) {
           return isFileLevelUniqueNameInCurrentFile(name, privateName) && !isReservedName(name, privateName) && !generatedNames.has(name);
@@ -135335,15 +135335,15 @@ ${lanes.join("\n")}
               break;
           }
         }
-        function makeTempVariableName(flags, reservedInNestedScopes, privateName, prefix, suffix) {
-          if (prefix.length > 0 && prefix.charCodeAt(0) === 35) {
-            prefix = prefix.slice(1);
+        function makeTempVariableName(flags, reservedInNestedScopes, privateName, prefix2, suffix) {
+          if (prefix2.length > 0 && prefix2.charCodeAt(0) === 35) {
+            prefix2 = prefix2.slice(1);
           }
-          const key = formatGeneratedName(privateName, prefix, "", suffix);
+          const key = formatGeneratedName(privateName, prefix2, "", suffix);
           let tempFlags2 = getTempFlags(key);
           if (flags && !(tempFlags2 & flags)) {
             const name = flags === 268435456 ? "_i" : "_n";
-            const fullName = formatGeneratedName(privateName, prefix, name, suffix);
+            const fullName = formatGeneratedName(privateName, prefix2, name, suffix);
             if (isUniqueName(fullName, privateName)) {
               tempFlags2 |= flags;
               if (privateName) {
@@ -135360,7 +135360,7 @@ ${lanes.join("\n")}
             tempFlags2++;
             if (count !== 8 && count !== 13) {
               const name = count < 26 ? "_" + String.fromCharCode(97 + count) : "_" + (count - 26);
-              const fullName = formatGeneratedName(privateName, prefix, name, suffix);
+              const fullName = formatGeneratedName(privateName, prefix2, name, suffix);
               if (isUniqueName(fullName, privateName)) {
                 if (privateName) {
                   reservePrivateNameInNestedScopes(fullName);
@@ -135373,15 +135373,15 @@ ${lanes.join("\n")}
             }
           }
         }
-        function makeUniqueName2(baseName, checkFn = isUniqueName, optimistic, scoped, privateName, prefix, suffix) {
+        function makeUniqueName2(baseName, checkFn = isUniqueName, optimistic, scoped, privateName, prefix2, suffix) {
           if (baseName.length > 0 && baseName.charCodeAt(0) === 35) {
             baseName = baseName.slice(1);
           }
-          if (prefix.length > 0 && prefix.charCodeAt(0) === 35) {
-            prefix = prefix.slice(1);
+          if (prefix2.length > 0 && prefix2.charCodeAt(0) === 35) {
+            prefix2 = prefix2.slice(1);
           }
           if (optimistic) {
-            const fullName = formatGeneratedName(privateName, prefix, baseName, suffix);
+            const fullName = formatGeneratedName(privateName, prefix2, baseName, suffix);
             if (checkFn(fullName, privateName)) {
               if (privateName) {
                 reservePrivateNameInNestedScopes(fullName);
@@ -135398,7 +135398,7 @@ ${lanes.join("\n")}
           }
           let i = 1;
           while (true) {
-            const fullName = formatGeneratedName(privateName, prefix, baseName + i, suffix);
+            const fullName = formatGeneratedName(privateName, prefix2, baseName + i, suffix);
             if (checkFn(fullName, privateName)) {
               if (privateName) {
                 reservePrivateNameInNestedScopes(fullName);
@@ -135495,7 +135495,7 @@ ${lanes.join("\n")}
             ""
           );
         }
-        function generateNameForMethodOrAccessor(node, privateName, prefix, suffix) {
+        function generateNameForMethodOrAccessor(node, privateName, prefix2, suffix) {
           if (isIdentifier3(node.name)) {
             return generateNameCached(node.name, privateName);
           }
@@ -135504,11 +135504,11 @@ ${lanes.join("\n")}
             /*reservedInNestedScopes*/
             false,
             privateName,
-            prefix,
+            prefix2,
             suffix
           );
         }
-        function generateNameForNode(node, privateName, flags, prefix, suffix) {
+        function generateNameForNode(node, privateName, flags, prefix2, suffix) {
           switch (node.kind) {
             case 80:
             case 81:
@@ -135518,20 +135518,20 @@ ${lanes.join("\n")}
                 !!(flags & 16),
                 !!(flags & 8),
                 privateName,
-                prefix,
+                prefix2,
                 suffix
               );
             case 267:
             case 266:
-              Debug.assert(!prefix && !suffix && !privateName);
+              Debug.assert(!prefix2 && !suffix && !privateName);
               return generateNameForModuleOrEnum(node);
             case 272:
             case 278:
-              Debug.assert(!prefix && !suffix && !privateName);
+              Debug.assert(!prefix2 && !suffix && !privateName);
               return generateNameForImportOrExportDeclaration(node);
             case 262:
             case 263: {
-              Debug.assert(!prefix && !suffix && !privateName);
+              Debug.assert(!prefix2 && !suffix && !privateName);
               const name = node.name;
               if (name && !isGeneratedIdentifier(name)) {
                 return generateNameForNode(
@@ -135539,29 +135539,29 @@ ${lanes.join("\n")}
                   /*privateName*/
                   false,
                   flags,
-                  prefix,
+                  prefix2,
                   suffix
                 );
               }
               return generateNameForExportDefault();
             }
             case 277:
-              Debug.assert(!prefix && !suffix && !privateName);
+              Debug.assert(!prefix2 && !suffix && !privateName);
               return generateNameForExportDefault();
             case 231:
-              Debug.assert(!prefix && !suffix && !privateName);
+              Debug.assert(!prefix2 && !suffix && !privateName);
               return generateNameForClassExpression();
             case 174:
             case 177:
             case 178:
-              return generateNameForMethodOrAccessor(node, privateName, prefix, suffix);
+              return generateNameForMethodOrAccessor(node, privateName, prefix2, suffix);
             case 167:
               return makeTempVariableName(
                 0,
                 /*reservedInNestedScopes*/
                 true,
                 privateName,
-                prefix,
+                prefix2,
                 suffix
               );
             default:
@@ -135570,18 +135570,18 @@ ${lanes.join("\n")}
                 /*reservedInNestedScopes*/
                 false,
                 privateName,
-                prefix,
+                prefix2,
                 suffix
               );
           }
         }
         function makeName(name) {
           const autoGenerate = name.emitNode.autoGenerate;
-          const prefix = formatGeneratedNamePart(autoGenerate.prefix, generateName);
+          const prefix2 = formatGeneratedNamePart(autoGenerate.prefix, generateName);
           const suffix = formatGeneratedNamePart(autoGenerate.suffix);
           switch (autoGenerate.flags & 7) {
             case 1:
-              return makeTempVariableName(0, !!(autoGenerate.flags & 8), isPrivateIdentifier(name), prefix, suffix);
+              return makeTempVariableName(0, !!(autoGenerate.flags & 8), isPrivateIdentifier(name), prefix2, suffix);
             case 2:
               Debug.assertNode(name, isIdentifier3);
               return makeTempVariableName(
@@ -135589,7 +135589,7 @@ ${lanes.join("\n")}
                 !!(autoGenerate.flags & 8),
                 /*privateName*/
                 false,
-                prefix,
+                prefix2,
                 suffix
               );
             case 3:
@@ -135599,7 +135599,7 @@ ${lanes.join("\n")}
                 !!(autoGenerate.flags & 16),
                 !!(autoGenerate.flags & 8),
                 isPrivateIdentifier(name),
-                prefix,
+                prefix2,
                 suffix
               );
           }
@@ -152155,8 +152155,8 @@ ${lanes.join("\n")}
       }
       function buildLinkParts(link, checker) {
         var _a;
-        const prefix = isJSDocLink(link) ? "link" : isJSDocLinkCode(link) ? "linkcode" : "linkplain";
-        const parts = [linkPart(`{@${prefix} `)];
+        const prefix2 = isJSDocLink(link) ? "link" : isJSDocLinkCode(link) ? "linkcode" : "linkplain";
+        const parts = [linkPart(`{@${prefix2} `)];
         if (!link.name) {
           if (link.text) {
             parts.push(linkTextPart(link.text));
@@ -153629,9 +153629,9 @@ ${lanes.join("\n")}
           let token = 0;
           let lastNonTriviaToken = 0;
           const templateStack = [];
-          const { prefix, pushTemplate } = getPrefixFromLexState(lexState);
-          text = prefix + text;
-          const offset = prefix.length;
+          const { prefix: prefix2, pushTemplate } = getPrefixFromLexState(lexState);
+          text = prefix2 + text;
+          const offset = prefix2.length;
           if (pushTemplate) {
             templateStack.push(
               16
@@ -162789,11 +162789,11 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
           if (decls && decls.some((d3) => d3.parent === scopeDecl)) {
             return factory.createIdentifier(symbol.name);
           }
-          const prefix = tryReplaceWithQualifiedNameOrPropertyAccess(symbol.parent, scopeDecl, isTypeNode2);
-          if (prefix === void 0) {
+          const prefix2 = tryReplaceWithQualifiedNameOrPropertyAccess(symbol.parent, scopeDecl, isTypeNode2);
+          if (prefix2 === void 0) {
             return void 0;
           }
-          return isTypeNode2 ? factory.createQualifiedName(prefix, factory.createIdentifier(symbol.name)) : factory.createPropertyAccessExpression(prefix, symbol.name);
+          return isTypeNode2 ? factory.createQualifiedName(prefix2, factory.createIdentifier(symbol.name)) : factory.createPropertyAccessExpression(prefix2, symbol.name);
         }
       }
       function getExtractableParent(node) {
@@ -164108,13 +164108,13 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
         if (textChangeRange) {
           if (version2 !== sourceFile.version) {
             let newText;
-            const prefix = textChangeRange.span.start !== 0 ? sourceFile.text.substr(0, textChangeRange.span.start) : "";
+            const prefix2 = textChangeRange.span.start !== 0 ? sourceFile.text.substr(0, textChangeRange.span.start) : "";
             const suffix = textSpanEnd(textChangeRange.span) !== sourceFile.text.length ? sourceFile.text.substr(textSpanEnd(textChangeRange.span)) : "";
             if (textChangeRange.newLength === 0) {
-              newText = prefix && suffix ? prefix + suffix : prefix || suffix;
+              newText = prefix2 && suffix ? prefix2 + suffix : prefix2 || suffix;
             } else {
               const changedText = scriptSnapshot.getText(textChangeRange.span.start, textChangeRange.span.start + textChangeRange.newLength);
-              newText = prefix && suffix ? prefix + changedText + suffix : prefix ? prefix + changedText : changedText + suffix;
+              newText = prefix2 && suffix ? prefix2 + changedText + suffix : prefix2 ? prefix2 + changedText : changedText + suffix;
             }
             const newSourceFile = updateSourceFile(sourceFile, newText, textChangeRange, aggressiveChecks);
             setSourceFileFields(newSourceFile, scriptSnapshot, version2);
@@ -166244,8 +166244,8 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
           const end = pos + 6;
           const typeChecker = program.getTypeChecker();
           const symbol = typeChecker.getSymbolAtLocation(node.parent);
-          const prefix = symbol ? `${typeChecker.symbolToString(symbol, node.parent)} ` : "";
-          return { text: `${prefix}static {}`, pos, end };
+          const prefix2 = symbol ? `${typeChecker.symbolToString(symbol, node.parent)} ` : "";
+          return { text: `${prefix2}static {}`, pos, end };
         }
         const declName = isAssignedExpression(node) ? node.parent.name : Debug.checkDefined(getNameOfDeclaration(node), "Expected call hierarchy item to have a name");
         let text = isIdentifier3(declName) ? idText(declName) : isStringOrNumericLiteralLike(declName) ? declName.text : isComputedPropertyName(declName) ? isStringOrNumericLiteralLike(declName.expression) ? declName.expression.text : void 0 : void 0;
@@ -169591,18 +169591,18 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
         const commentNode = node.parent;
         const { leftSibling, rightSibling } = getLeftAndRightSiblings(node);
         let pos = commentNode.getStart();
-        let prefix = "";
+        let prefix2 = "";
         if (!leftSibling && commentNode.comment) {
           pos = findEndOfTextBetween(commentNode, commentNode.getStart(), node.getStart());
-          prefix = `${newLine} */${newLine}`;
+          prefix2 = `${newLine} */${newLine}`;
         }
         if (leftSibling) {
           if (fixAll && isJSDocTypedefTag(leftSibling)) {
             pos = node.getStart();
-            prefix = "";
+            prefix2 = "";
           } else {
             pos = findEndOfTextBetween(commentNode, leftSibling.getStart(), node.getStart());
-            prefix = `${newLine} */${newLine}`;
+            prefix2 = `${newLine} */${newLine}`;
           }
         }
         let end = commentNode.getEnd();
@@ -169616,7 +169616,7 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
             suffix = `${newLine}/**${newLine} * `;
           }
         }
-        changes.replaceRange(sourceFile, { pos, end }, declaration, { prefix, suffix });
+        changes.replaceRange(sourceFile, { pos, end }, declaration, { prefix: prefix2, suffix });
       }
       function getLeftAndRightSiblings(typedefNode) {
         const commentNode = typedefNode.parent;
@@ -174034,9 +174034,9 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
               result.push(createDeleteFix(deletion, [Diagnostics.Remove_unused_declaration_for_Colon_0, name.getText(sourceFile)]));
             }
           }
-          const prefix = ts_textChanges_exports.ChangeTracker.with(context, (t) => tryPrefixDeclaration(t, errorCode, sourceFile, token));
-          if (prefix.length) {
-            result.push(createCodeFixAction(fixName3, prefix, [Diagnostics.Prefix_0_with_an_underscore, token.getText(sourceFile)], fixIdPrefix, Diagnostics.Prefix_all_unused_declarations_with_where_possible));
+          const prefix2 = ts_textChanges_exports.ChangeTracker.with(context, (t) => tryPrefixDeclaration(t, errorCode, sourceFile, token));
+          if (prefix2.length) {
+            result.push(createCodeFixAction(fixName3, prefix2, [Diagnostics.Prefix_0_with_an_underscore, token.getText(sourceFile)], fixIdPrefix, Diagnostics.Prefix_all_unused_declarations_with_where_possible));
           }
           return result;
         },
@@ -183737,9 +183737,9 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
         function getDirectoryMatches(directoryName) {
           return mapDefined(tryGetDirectories(host, directoryName), (dir) => dir === "node_modules" ? void 0 : directoryResult(dir));
         }
-        function trimPrefixAndSuffix(path, prefix) {
+        function trimPrefixAndSuffix(path, prefix2) {
           return firstDefined(matchingSuffixes, (suffix) => {
-            const inner = withoutStartAndEnd(normalizePath(path), prefix, suffix);
+            const inner = withoutStartAndEnd(normalizePath(path), prefix2, suffix);
             return inner === void 0 ? void 0 : removeLeadingDirectorySeparator(inner);
           });
         }
@@ -183772,7 +183772,7 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
         if (!match) {
           return void 0;
         }
-        const [, prefix, kind, toComplete] = match;
+        const [, prefix2, kind, toComplete] = match;
         const scriptPath = getDirectoryPath(sourceFile.path);
         const names = kind === "path" ? getCompletionEntriesForDirectoryFragment(
           toComplete,
@@ -183785,7 +183785,7 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
           true,
           sourceFile.path
         ) : kind === "types" ? getCompletionEntriesFromTypings(program, host, moduleSpecifierResolutionHost, scriptPath, getFragmentDirectory(toComplete), getExtensionOptions(compilerOptions, 1, sourceFile)) : Debug.fail();
-        return addReplacementSpans(toComplete, range.pos + prefix.length, arrayFrom(names.values()));
+        return addReplacementSpans(toComplete, range.pos + prefix2.length, arrayFrom(names.values()));
       }
       function getCompletionEntriesFromTypings(program, host, moduleSpecifierResolutionHost, scriptPath, fragmentDirectory, extensionOptions, result = createNameAndKindSet()) {
         const options = program.getCompilerOptions();
@@ -190136,8 +190136,8 @@ ${content}
       ), spacePart()];
       function getSignatureHelpItem(candidateSignature, callTargetDisplayParts, isTypeParameterList, checker, enclosingDeclaration, sourceFile) {
         const infos = (isTypeParameterList ? itemInfoForTypeParameters : itemInfoForParameters)(candidateSignature, checker, enclosingDeclaration, sourceFile);
-        return map(infos, ({ isVariadic, parameters, prefix, suffix }) => {
-          const prefixDisplayParts = [...callTargetDisplayParts, ...prefix];
+        return map(infos, ({ isVariadic, parameters, prefix: prefix2, suffix }) => {
+          const prefixDisplayParts = [...callTargetDisplayParts, ...prefix2];
           const suffixDisplayParts = [...suffix, ...returnTypeToDisplayParts(candidateSignature, enclosingDeclaration, checker)];
           const documentation = candidateSignature.getDocumentationComment(checker);
           const tags = candidateSignature.getJsDocTags();
@@ -192224,11 +192224,11 @@ ${options.prefix}` : "\n" : options.prefix
           const noIndent = options.indentation !== void 0 || getLineStartPositionForPosition(pos, targetSourceFile) === pos ? text : text.replace(/^\s+/, "");
           return (options.prefix || "") + noIndent + (!options.suffix || endsWith(noIndent, options.suffix) ? "" : options.suffix);
         }
-        function getFormattedTextOfNode(nodeIn, targetSourceFile, sourceFile, pos, { indentation, prefix, delta }, newLineCharacter, formatContext, validate) {
+        function getFormattedTextOfNode(nodeIn, targetSourceFile, sourceFile, pos, { indentation, prefix: prefix2, delta }, newLineCharacter, formatContext, validate) {
           const { node, text } = getNonformattedText(nodeIn, targetSourceFile, newLineCharacter);
           if (validate) validate(node, text);
           const formatOptions = getFormatCodeSettingsForWriting(formatContext, targetSourceFile);
-          const initialIndentation = indentation !== void 0 ? indentation : ts_formatting_exports.SmartIndenter.getIndentation(pos, sourceFile, formatOptions, prefix === newLineCharacter || getLineStartPositionForPosition(pos, targetSourceFile) === pos);
+          const initialIndentation = indentation !== void 0 ? indentation : ts_formatting_exports.SmartIndenter.getIndentation(pos, sourceFile, formatOptions, prefix2 === newLineCharacter || getLineStartPositionForPosition(pos, targetSourceFile) === pos);
           if (delta === void 0) {
             delta = ts_formatting_exports.SmartIndenter.shouldIndentChildNode(formatOptions, nodeIn) ? formatOptions.indentSize || 0 : 0;
           }
@@ -209953,9 +209953,9 @@ Project '${project.projectName}' (${ProjectKind[project.projectKind]}) ${counter
           );
           if (completions === void 0) return void 0;
           if (kind === "completions-full") return completions;
-          const prefix = args.prefix || "";
+          const prefix2 = args.prefix || "";
           const entries = mapDefined(completions.entries, (entry) => {
-            if (completions.isMemberCompletion || startsWith(entry.name.toLowerCase(), prefix.toLowerCase())) {
+            if (completions.isMemberCompletion || startsWith(entry.name.toLowerCase(), prefix2.toLowerCase())) {
               const convertedSpan = entry.replacementSpan ? toProtocolTextSpan(entry.replacementSpan, scriptInfo) : void 0;
               return {
                 ...entry,
@@ -214868,15 +214868,15 @@ var require_to_regex_range = __commonJS({
       }
       return tokens;
     }
-    function filterPatterns(arr, comparison, prefix, intersection, options) {
+    function filterPatterns(arr, comparison, prefix2, intersection, options) {
       let result = [];
       for (let ele of arr) {
         let { string } = ele;
         if (!intersection && !contains(comparison, "string", string)) {
-          result.push(prefix + string);
+          result.push(prefix2 + string);
         }
         if (intersection && contains(comparison, "string", string)) {
-          result.push(prefix + string);
+          result.push(prefix2 + string);
         }
       }
       return result;
@@ -214987,7 +214987,7 @@ var require_fill_range = __commonJS({
     var toSequence = (parts, options, maxLen) => {
       parts.negatives.sort((a, b4) => a < b4 ? -1 : a > b4 ? 1 : 0);
       parts.positives.sort((a, b4) => a < b4 ? -1 : a > b4 ? 1 : 0);
-      let prefix = options.capture ? "" : "?:";
+      let prefix2 = options.capture ? "" : "?:";
       let positives = "";
       let negatives = "";
       let result;
@@ -214995,7 +214995,7 @@ var require_fill_range = __commonJS({
         positives = parts.positives.map((v) => toMaxLen(String(v), maxLen)).join("|");
       }
       if (parts.negatives.length) {
-        negatives = `-(${prefix}${parts.negatives.map((v) => toMaxLen(String(v), maxLen)).join("|")})`;
+        negatives = `-(${prefix2}${parts.negatives.map((v) => toMaxLen(String(v), maxLen)).join("|")})`;
       }
       if (positives && negatives) {
         result = `${positives}|${negatives}`;
@@ -215003,7 +215003,7 @@ var require_fill_range = __commonJS({
         result = positives || negatives;
       }
       if (options.wrap) {
-        return `(${prefix}${result})`;
+        return `(${prefix2}${result})`;
       }
       return result;
     };
@@ -215019,8 +215019,8 @@ var require_fill_range = __commonJS({
     var toRegex = (start, end, options) => {
       if (Array.isArray(start)) {
         let wrap = options.wrap === true;
-        let prefix = options.capture ? "" : "?:";
-        return wrap ? `(${prefix}${start.join("|")})` : start.join("|");
+        let prefix2 = options.capture ? "" : "?:";
+        return wrap ? `(${prefix2}${start.join("|")})` : start.join("|");
       }
       return toRegexRange(start, end, options);
     };
@@ -215142,20 +215142,20 @@ var require_compile = __commonJS({
         const invalidBlock = utils.isInvalidBrace(parent);
         const invalidNode = node.invalid === true && options.escapeInvalid === true;
         const invalid = invalidBlock === true || invalidNode === true;
-        const prefix = options.escapeInvalid === true ? "\\" : "";
+        const prefix2 = options.escapeInvalid === true ? "\\" : "";
         let output = "";
         if (node.isOpen === true) {
-          return prefix + node.value;
+          return prefix2 + node.value;
         }
         if (node.isClose === true) {
-          console.log("node.isClose", prefix, node.value);
-          return prefix + node.value;
+          console.log("node.isClose", prefix2, node.value);
+          return prefix2 + node.value;
         }
         if (node.type === "open") {
-          return invalid ? prefix + node.value : "(";
+          return invalid ? prefix2 + node.value : "(";
         }
         if (node.type === "close") {
-          return invalid ? prefix + node.value : ")";
+          return invalid ? prefix2 + node.value : ")";
         }
         if (node.type === "comma") {
           return node.prev.type === "comma" ? "" : invalid ? node.value : "|";
@@ -216191,10 +216191,10 @@ var require_scan = __commonJS({
         isGlob = false;
       }
       let base = str;
-      let prefix = "";
+      let prefix2 = "";
       let glob = "";
       if (start > 0) {
-        prefix = str.slice(0, start);
+        prefix2 = str.slice(0, start);
         str = str.slice(start);
         lastIndex -= start;
       }
@@ -216219,7 +216219,7 @@ var require_scan = __commonJS({
         }
       }
       const state = {
-        prefix,
+        prefix: prefix2,
         input,
         start,
         base,
@@ -216248,7 +216248,7 @@ var require_scan = __commonJS({
           if (opts.tokens) {
             if (idx === 0 && start !== 0) {
               tokens[idx].isPrefix = true;
-              tokens[idx].value = prefix;
+              tokens[idx].value = prefix2;
             } else {
               tokens[idx].value = value;
             }
@@ -220466,8 +220466,8 @@ ${nodeLocation}` : message;
       errors.ArgumentTypeError = ArgumentTypeError;
       class PathNotFoundError extends BaseError {
         path;
-        constructor(path2, prefix = "Path") {
-          super(`${prefix} not found: ${path2}`);
+        constructor(path2, prefix2 = "Path") {
+          super(`${prefix2} not found: ${path2}`);
           this.path = path2;
         }
         code = "ENOENT";
@@ -276700,7 +276700,7 @@ var Y2 = ({ indicator: t = "dots" } = {}) => {
 };
 
 // src/cli/index.ts
-var import_picocolors18 = __toESM(require_picocolors(), 1);
+var import_picocolors19 = __toESM(require_picocolors(), 1);
 var import_fs12 = require("fs");
 var import_path7 = require("path");
 var import_child_process2 = require("child_process");
@@ -276770,6 +276770,7 @@ var ERROR_CODES = {
   browser_database_url_blocked: client("auth", "A database connection string must not be used from a browser context \u2014 it carries DB credentials."),
   datasource_registration_failed: client("auth", "Failed to register the provided databaseUrl as a datasource."),
   datasource_connection_unsupported: wire("validation", 400, false, "This deployment cannot register a direct (connection string) datasource \u2014 use the signed endpoint kind."),
+  datasource_direct_deprecated: wire("validation", 410, false, "The direct (connection string) datasource is deprecated. Register a signed Data Source endpoint instead \u2014 your app owns the write and your credentials never leave it."),
   // ── permission / capability (403) ──────────────────────────────────
   capability_scope_denied: wire("capability", 403, false, "The connection's resolved scope does not cover the attempted action."),
   issuer_register_forbidden: wire("permission", 403, false, "Registering a trusted issuer requires a secret (sk_) API key."),
@@ -276846,6 +276847,7 @@ var ERROR_CODES = {
   unique_violation: wire("conflict", 409, false, "A value violates a uniqueness constraint."),
   check_violation: wire("validation", 400, false, "A value violates a database check constraint."),
   constraint_violation: wire("validation", 400, false, "A database integrity constraint was violated."),
+  column_type_mismatch: wire("validation", 400, false, 'A structured (JSON) value was written to a column whose database type is not jsonb. The column was not provisioned as jsonb (often a pre-existing column adopted by `ablo push`); storing the value would silently corrupt it to "[object Object]". Run `ablo migrate` to alter the column to jsonb.'),
   // ── tenant / unknown model (400) ───────────────────────────────────
   server_execute_unknown_model: wire("tenant", 400, false, "Wrote to a model the server does not know. The server keeps its own copy of the schema \u2014 run `ablo push` (or keep `ablo dev` running) to upload `ablo/schema.ts` before writing to new or changed models."),
   mutate_create_unknown_model: wire("tenant", 400, false, "Created a model the server does not know. Run `ablo push` (or keep `ablo dev` running) to upload `ablo/schema.ts` first \u2014 the server keeps its own copy of the schema."),
@@ -277009,6 +277011,18 @@ var ERROR_CODES = {
   invalid_schema: wire("validation", 400, false, "The submitted schema could not be parsed."),
   incompatible_change: wire("conflict", 409, false, "The schema change is incompatible with the current schema.")
 };
+function errorCodeSpec(code) {
+  return ERROR_CODES[code];
+}
+function classifyRecovery(code) {
+  const spec = errorCodeSpec(code);
+  if (!spec) return "none";
+  if (spec.recovery) return spec.recovery;
+  if (spec.retryable) return "transient";
+  if (spec.httpStatus === 403) return "permission";
+  if (spec.category === "auth") return "auth_blocked";
+  return "none";
+}
 
 // src/coordination/schema.ts
 init_cjs_shims();
@@ -277134,8 +277148,8 @@ var claimStatusSchema = import_zod3.z.enum([
 ]);
 var wireClaimBaseSchema = targetRefSchema.extend({
   claimId: import_zod3.z.string(),
-  /** Verb the agent expects: 'update' | 'create' | 'editing' | 'reviewing' … */
-  action: import_zod3.z.string(),
+  /** Human-readable phase: 'editing' | 'reviewing' | 'forecasting' … */
+  reason: import_zod3.z.string(),
   /** Server-stamped declaration time (epoch ms). */
   declaredAt: import_zod3.z.number(),
   /** Server-computed TTL deadline (epoch ms). Readers treat as advisory. */
@@ -277144,7 +277158,7 @@ var wireClaimBaseSchema = targetRefSchema.extend({
 });
 var wireClaimSummarySchema = wireClaimBaseSchema.pick({
   claimId: true,
-  action: true,
+  reason: true,
   declaredAt: true,
   expiresAt: true,
   entityType: true,
@@ -277189,8 +277203,7 @@ var modelClaimSchema = import_zod3.z.object({
   id: import_zod3.z.string(),
   actor: import_zod3.z.string(),
   participantKind: wireParticipantKindSchema,
-  /** Human-readable phase (`'editing'`). The public SDK field; the WS/HTTP
-   *  wire carries the same value as `action` (healed on read). */
+  /** Human-readable phase (`'editing'`). */
   reason: import_zod3.z.string(),
   description: import_zod3.z.string().optional(),
   field: import_zod3.z.string().optional(),
@@ -277201,7 +277214,7 @@ var modelClaimSchema = import_zod3.z.object({
 }).readonly();
 var claimBeginPayloadSchema = targetRefSchema.extend({
   claimId: import_zod3.z.string(),
-  action: import_zod3.z.string(),
+  reason: import_zod3.z.string(),
   /** Hint for `expiresAt`; the server caps it. */
   estimatedMs: import_zod3.z.number().optional(),
   /**
@@ -277331,6 +277344,20 @@ var AbloError = class extends Error {
       ...this.details ?? {}
     };
   }
+  /**
+   * A single, leak-proof line for logs and `String(err)` / template
+   * interpolation: `AbloValidationError [code]: message (see docs) [request_id: …]`.
+   *
+   * Deliberately does NOT dump `details`, `cause`, or the stack — the thing that
+   * makes `console.error(richError)` an unreadable wall of text. The structured
+   * payload stays available via {@link toJSON}; this is the human one-liner.
+   */
+  toString() {
+    const code = this.code ? ` [${this.code}]` : "";
+    const docs = this.docUrl ? ` (see ${this.docUrl})` : "";
+    const req = this.requestId ? ` [request_id: ${this.requestId}]` : "";
+    return `${this.name}${code}: ${this.message}${docs}${req}`;
+  }
 };
 function docUrlForCode(code) {
   return `https://docs.abloatai.com/errors#${code}`;
@@ -279530,6 +279557,16 @@ function readProjectDatabaseUrl(cwd = process.cwd()) {
   }
   return null;
 }
+function readProjectApiKey(cwd = process.cwd()) {
+  if (process.env.ABLO_API_KEY) return { key: process.env.ABLO_API_KEY, source: "env" };
+  for (const name of [".env.local", ".env"]) {
+    const path = (0, import_path.resolve)(cwd, name);
+    if (!(0, import_fs2.existsSync)(path)) continue;
+    const match = (0, import_fs2.readFileSync)(path, "utf8").match(/^ABLO_API_KEY=(.+)$/m);
+    if (match?.[1]) return { key: match[1].trim().replace(/^["']|["']$/g, ""), source: name };
+  }
+  return null;
+}
 
 // src/cli/migrate.ts
 var import_schema3 = require("@abloatai/ablo/schema");
@@ -279548,8 +279585,8 @@ var KIND_BY_PREFIX = [
   ["pk_", "publishable"]
 ];
 function classifyCredentialKind(value) {
-  for (const [prefix, kind] of KIND_BY_PREFIX) {
-    if (value.startsWith(prefix)) return kind;
+  for (const [prefix2, kind] of KIND_BY_PREFIX) {
+    if (value.startsWith(prefix2)) return kind;
   }
   return null;
 }
@@ -279726,6 +279763,38 @@ function modeFromKey(key) {
   if (/^(sk|rk)_live_/.test(key)) return "production";
   return void 0;
 }
+function prefix(key) {
+  return key ? key.slice(0, 12) : null;
+}
+function describeEffectiveKey(activeMode, envKey, storedEntry) {
+  const effectiveKey = envKey ?? storedEntry?.apiKey;
+  const keySource = envKey ? "env" : storedEntry ? "stored" : null;
+  const keyMode = effectiveKey ? modeFromKey(effectiveKey) ?? null : null;
+  const keyMatchesActiveMode = keyMode ? keyMode === activeMode : null;
+  const keyMatchesStoredActiveKey = envKey && storedEntry?.apiKey ? envKey === storedEntry.apiKey : null;
+  let keyMismatch = null;
+  if (keyMode && keyMode !== activeMode) {
+    const sourceLabel = envKey ? "ABLO_API_KEY" : "stored active key";
+    keyMismatch = {
+      code: "key_mode_mismatch",
+      message: `${sourceLabel} is a ${keyMode} key but the CLI mode is ${activeMode}. Requests use ${sourceLabel} (${prefix(effectiveKey)}...), not the active CLI mode.`
+    };
+  } else if (envKey && storedEntry?.apiKey && envKey !== storedEntry.apiKey) {
+    keyMismatch = {
+      code: "env_key_overrides_stored",
+      message: `ABLO_API_KEY (${prefix(envKey)}...) overrides the stored ${activeMode} key (${prefix(storedEntry.apiKey)}...).`
+    };
+  }
+  return {
+    keyPrefix: prefix(effectiveKey),
+    keySource,
+    keyMode,
+    storedKeyPrefix: prefix(storedEntry?.apiKey),
+    keyMatchesActiveMode,
+    keyMatchesStoredActiveKey,
+    keyMismatch
+  };
+}
 function normalizeMode(value) {
   return normalizeStoredMode(value);
 }
@@ -279886,6 +279955,21 @@ async function loadSchema(schemaPath, exportName) {
   }
   return schema;
 }
+function maskKey(key) {
+  return key ? `${key.slice(0, 12)}\u2026` : "(none)";
+}
+function describeKeySource(source) {
+  switch (source) {
+    case "env":
+      return "ABLO_API_KEY (environment)";
+    case ".env.local":
+      return ".env.local";
+    case ".env":
+      return ".env";
+    case "login":
+      return "`ablo login` (stored sandbox config)";
+  }
+}
 async function push(argv) {
   let args;
   try {
@@ -279894,7 +279978,17 @@ async function push(argv) {
     console.error(import_picocolors2.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
-  if (!args.apiKey) args.apiKey = resolveApiKey();
+  let keySource = "env";
+  if (!args.apiKey) {
+    const fromProject = readProjectApiKey();
+    if (fromProject) {
+      args.apiKey = fromProject.key;
+      keySource = fromProject.source;
+    } else {
+      args.apiKey = resolveApiKey();
+      keySource = "login";
+    }
+  }
   if (!args.apiKey) {
     console.error(
       import_picocolors2.default.red(`  No API key.`) + import_picocolors2.default.dim(
@@ -279953,6 +280047,7 @@ async function push(argv) {
     const code = body.code ?? body.reason;
     const serverMsg = body.message ?? body.reason;
     console.error(import_picocolors2.default.red(`  Forbidden${code ? ` [${code}]` : ""}: ${serverMsg ?? "permission denied"}`));
+    console.error(import_picocolors2.default.dim(`  Push used ${import_picocolors2.default.bold(maskKey(args.apiKey))} from ${describeKeySource(keySource)}.`));
     if (code === "database_role_cannot_enforce_rls") {
       console.error(
         import_picocolors2.default.dim(
@@ -279971,6 +280066,12 @@ async function push(argv) {
           `  Schema pushes need a SECRET key: ${import_picocolors2.default.bold("sk_test_")} (sandbox dev loop) or a dashboard ${import_picocolors2.default.bold("sk_live_")} (production deploy: ${import_picocolors2.default.bold("ABLO_API_KEY=sk_live_\u2026 npx ablo push")}).`
         )
       );
+    } else {
+      console.error(
+        import_picocolors2.default.dim(
+          `  This key isn't authorized to push schema (needs ${import_picocolors2.default.bold("schema:push")}). ` + (keySource === "login" ? `It's your stored ${import_picocolors2.default.bold("ablo login")} sandbox key \u2014 a key in ${import_picocolors2.default.bold(".env.local")} or ${import_picocolors2.default.bold("ABLO_API_KEY")} takes precedence, so put a schema:push key there (sandbox ${import_picocolors2.default.bold("sk_test_")} or production ${import_picocolors2.default.bold("sk_live_")}) and re-push. ` : `Use a schema:push key \u2014 a sandbox ${import_picocolors2.default.bold("sk_test_")} or production ${import_picocolors2.default.bold("sk_live_")}. `) + `Manage keys at https://abloatai.com`
+        )
+      );
     }
   } else {
     console.error(import_picocolors2.default.red(`  Push failed (${status2}): ${body.message ?? body.reason ?? bodyText}`));
@@ -281134,20 +281235,50 @@ async function ping(apiUrl2) {
     clearTimeout(t);
   }
 }
+async function fetchPushedSchema(apiUrl2, apiKey) {
+  if (!apiKey) return null;
+  const ctrl = new AbortController();
+  const t = setTimeout(() => ctrl.abort(), 3e3);
+  try {
+    const res = await fetch(`${apiUrl2}/api/schema`, {
+      headers: { authorization: `Bearer ${apiKey}` },
+      signal: ctrl.signal
+    });
+    if (!res.ok) return null;
+    return await res.json();
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(t);
+  }
+}
+function formatConflict(conflict) {
+  if (!conflict) return "";
+  const parts = ["user", "agent", "system"].flatMap((k3) => conflict[k3] ? [`${k3}:${conflict[k3]}`] : []);
+  return parts.length ? `{${parts.join(",")}}` : "";
+}
 async function status(args = []) {
   const apiUrl2 = (process.env.ABLO_API_URL ?? DEFAULT_URL).replace(/\/+$/, "");
   const cfg = readConfig();
   const mode2 = getMode();
   if (args.includes("--json")) {
     const entry = getKeyEntry(mode2);
+    const key2 = describeEffectiveKey(mode2, process.env.ABLO_API_KEY, entry);
     const plan2 = resolvePushPlan();
     const activeProject2 = getActiveProject();
+    const introspectKey = process.env.ABLO_API_KEY ?? entry?.apiKey;
+    const pushed = await fetchPushedSchema(apiUrl2, introspectKey);
     const out = {
       mode: mode2,
       // The locally-active project (`ablo projects use`); null = org-default.
       project: activeProject2 ?? null,
-      keyPrefix: process.env.ABLO_API_KEY ? process.env.ABLO_API_KEY.slice(0, 12) : entry?.apiKey.slice(0, 12) ?? null,
-      keySource: process.env.ABLO_API_KEY ? "env" : entry ? "stored" : null,
+      keyPrefix: key2.keyPrefix,
+      keySource: key2.keySource,
+      keyMode: key2.keyMode,
+      storedKeyPrefix: key2.storedKeyPrefix,
+      keyMatchesActiveMode: key2.keyMatchesActiveMode,
+      keyMatchesStoredActiveKey: key2.keyMatchesStoredActiveKey,
+      keyMismatch: key2.keyMismatch,
       organizationId: entry?.organizationId ?? null,
       // What `ablo push` would do right now — the one-command answer to
       // "why did push demand a different key" (2026-06-11 live-key incident).
@@ -281156,6 +281287,15 @@ async function status(args = []) {
         keyPrefix: plan2.apiKey?.slice(0, 12) ?? null,
         keySource: plan2.source
       },
+      // The schema ACTIVE on this key's plane — the typename/conflict the
+      // engine enforces, which may differ from local `schema.ts`. null = the
+      // server didn't answer (unreachable / old server / no key).
+      schema: pushed ? {
+        active: pushed.active,
+        version: pushed.version ?? null,
+        pushedAt: pushed.pushedAt ?? null,
+        models: pushed.models
+      } : null,
       apiUrl: apiUrl2,
       reachable: await ping(apiUrl2)
     };
@@ -281173,6 +281313,11 @@ async function status(args = []) {
     console.log(`  ${import_picocolors10.default.yellow("!")} Not logged in \u2014 run ${import_picocolors10.default.bold("ablo login")}.`);
   }
   console.log(`  ${import_picocolors10.default.dim("mode")}    ${import_picocolors10.default.bold(mode2)}`);
+  const activeEntry = getKeyEntry(mode2);
+  const key = describeEffectiveKey(mode2, process.env.ABLO_API_KEY, activeEntry);
+  if (key.keyMismatch) {
+    console.log(`  ${import_picocolors10.default.yellow("!")} ${import_picocolors10.default.yellow(key.keyMismatch.message)}`);
+  }
   const activeProject = getActiveProject();
   console.log(
     `  ${import_picocolors10.default.dim("project")} ${activeProject ? `${import_picocolors10.default.bold(activeProject.slug)} ${import_picocolors10.default.dim(`(${activeProject.id})`)}` : import_picocolors10.default.bold("default")}`
@@ -281187,14 +281332,32 @@ async function status(args = []) {
       console.log(`  ${marker} ${m2.padEnd(10)}  ${import_picocolors10.default.dim("\u2014 no key")}`);
     }
   }
-  const org = getKeyEntry(mode2)?.organizationId;
+  const org = activeEntry?.organizationId;
   if (org) console.log(`  ${import_picocolors10.default.dim("org")}     ${org}`);
   const plan = resolvePushPlan();
   console.log(
     `  ${import_picocolors10.default.dim("push")}    ${plan.apiKey ? `${import_picocolors10.default.bold(plan.flow)} ${import_picocolors10.default.dim(`with ${plan.apiKey.slice(0, 12)}\u2026 (${plan.source})`)}` : `${import_picocolors10.default.bold(plan.flow)} ${import_picocolors10.default.yellow("\u2014 no credential")} ${import_picocolors10.default.dim(`(run ${import_picocolors10.default.bold("ablo login")} or set ${import_picocolors10.default.bold("ABLO_API_KEY")})`)}`}`
   );
   process.stdout.write(`  ${import_picocolors10.default.dim("api")}     ${apiUrl2}  `);
-  console.log(await ping(apiUrl2) ? import_picocolors10.default.green("reachable") : import_picocolors10.default.red("unreachable"));
+  const reachable = await ping(apiUrl2);
+  console.log(reachable ? import_picocolors10.default.green("reachable") : import_picocolors10.default.red("unreachable"));
+  if (reachable) {
+    const introspectKey = process.env.ABLO_API_KEY ?? activeEntry?.apiKey;
+    const pushed = await fetchPushedSchema(apiUrl2, introspectKey);
+    if (pushed && pushed.active) {
+      const when = pushed.pushedAt ? ` ${import_picocolors10.default.dim(`@ ${pushed.pushedAt.slice(0, 10)}`)}` : "";
+      const ver = pushed.version != null ? ` ${import_picocolors10.default.dim(`(rev ${pushed.version})`)}` : "";
+      console.log(`  ${import_picocolors10.default.dim("schema")}  ${import_picocolors10.default.bold(`${pushed.models.length} models pushed`)}${ver}${when}`);
+      for (const m2 of pushed.models) {
+        const tn = m2.typename === m2.key ? import_picocolors10.default.dim(`typename=${m2.typename}`) : import_picocolors10.default.yellow(`typename=${m2.typename}`);
+        const conflict = formatConflict(m2.conflict);
+        const conflictStr = conflict ? `  ${import_picocolors10.default.dim(`conflict=${conflict}`)}` : "";
+        console.log(`          ${import_picocolors10.default.dim("\u2022")} ${m2.key.padEnd(14)} ${tn}${conflictStr}`);
+      }
+    } else if (pushed && !pushed.active) {
+      console.log(`  ${import_picocolors10.default.dim("schema")}  ${import_picocolors10.default.yellow("none pushed")} ${import_picocolors10.default.dim(`(run ${import_picocolors10.default.bold("ablo push")} or ${import_picocolors10.default.bold("ablo dev")})`)}`);
+    }
+  }
   console.log();
 }
 
@@ -282500,9 +282663,86 @@ async function drizzlePull(argv) {
   );
 }
 
+// src/cli/renderError.ts
+init_cjs_shims();
+var import_picocolors18 = __toESM(require_picocolors(), 1);
+var RECOVERY_HINT = {
+  transient: "This looks transient \u2014 retry in a moment.",
+  permission: "Your key isn't allowed to do this \u2014 check its scopes or role.",
+  session_expiry: "Your session expired \u2014 sign in again.",
+  access_credential_expiry: "Your access credential expired \u2014 refresh it and retry.",
+  auth_blocked: "Authentication was blocked."
+};
+function titleForType(type) {
+  const core = type.replace(/^Ablo/, "").replace(/Error$/, "");
+  const spaced = core.replace(/([a-z0-9])([A-Z])/g, "$1 $2").trim();
+  if (!spaced) return "Error";
+  return /error$/i.test(spaced) ? spaced : `${spaced} error`;
+}
+function isStringArray(v) {
+  return Array.isArray(v) && v.every((x2) => typeof x2 === "string");
+}
+function renderKnownDetails(details, line) {
+  if (!details) return;
+  const { retryAfterSeconds, missingIds, requiredCapability, unexecutable, errors } = details;
+  if (typeof retryAfterSeconds === "number") line(`    ${import_picocolors18.default.dim("retry")}  after ${retryAfterSeconds}s`);
+  if (isStringArray(missingIds) && missingIds.length > 0) {
+    const shown = missingIds.slice(0, 5).join(", ");
+    const more = missingIds.length > 5 ? ` (+${missingIds.length - 5} more)` : "";
+    line(`    ${import_picocolors18.default.dim("missing")} ${shown}${more}`);
+  }
+  if (typeof requiredCapability === "string") line(`    ${import_picocolors18.default.dim("needs")}  ${requiredCapability}`);
+  if (Array.isArray(unexecutable) && unexecutable.length > 0) {
+    line(`    ${import_picocolors18.default.dim("blocked")} ${unexecutable.length} change(s) can't be applied \u2014 see \`unexecutable\` (--verbose)`);
+  }
+  if (Array.isArray(errors)) {
+    for (const e2 of errors.slice(0, 8)) {
+      if (e2 && typeof e2 === "object") {
+        const rec = e2;
+        const where = typeof rec.param === "string" ? `${rec.param}: ` : "";
+        const msg = typeof rec.message === "string" ? rec.message : "";
+        if (msg) line(`    ${import_picocolors18.default.dim("\xB7")} ${where}${msg}`);
+      }
+    }
+  }
+}
+function renderCliError(err, opts = {}) {
+  const line = opts.write ?? ((l2) => console.error(l2));
+  const verbose = opts.verbose ?? (process.argv.includes("--verbose") || process.env.ABLO_VERBOSE === "1");
+  if (err instanceof AbloError) {
+    const codeTag = err.code ? `  ${import_picocolors18.default.dim(`[${err.code}]`)}` : "";
+    line("");
+    line(`  ${brand("ablo")} ${import_picocolors18.default.red("\u2717")} ${import_picocolors18.default.bold(titleForType(err.type))}${codeTag}`);
+    line("");
+    line(`    ${err.message}`);
+    if (err.param) line(`    ${import_picocolors18.default.dim("field")}  ${err.param}`);
+    renderKnownDetails(err.details, line);
+    const hint = err.code ? RECOVERY_HINT[classifyRecovery(err.code)] : void 0;
+    if (hint) line(`    ${import_picocolors18.default.dim(hint)}`);
+    if (err.docUrl) line(`    ${import_picocolors18.default.dim("docs")}   ${err.docUrl}`);
+    if (err.requestId) line(`    ${import_picocolors18.default.dim("ref")}    ${err.requestId}`);
+    if (verbose) {
+      if (err.details && Object.keys(err.details).length > 0) {
+        line(`    ${import_picocolors18.default.dim("details")} ${JSON.stringify(err.details)}`);
+      }
+      if (err.stack) line(import_picocolors18.default.dim(err.stack));
+    }
+    line("");
+    process.exitCode = 1;
+    return;
+  }
+  const message = err instanceof Error ? err.message : String(err);
+  line("");
+  line(`  ${brand("ablo")} ${import_picocolors18.default.red("\u2717")} ${message}`);
+  if (verbose && err instanceof Error && err.stack) line(import_picocolors18.default.dim(err.stack));
+  else line(`    ${import_picocolors18.default.dim("Run with --verbose for the full error.")}`);
+  line("");
+  process.exitCode = 1;
+}
+
 // src/cli/index.ts
 var LOGO = `
-  ${brand("ablo")} ${import_picocolors18.default.dim("sync engine")}
+  ${brand("ablo")} ${import_picocolors19.default.dim("sync engine")}
 `;
 var SUBCOMMAND_USAGE = {
   connect: CONNECT_USAGE,
@@ -282537,7 +282777,7 @@ async function main() {
     const devArgs = process.argv.slice(3);
     const oneShot = devArgs.includes("--no-watch");
     console.log(
-      import_picocolors18.default.dim(
+      import_picocolors19.default.dim(
         oneShot ? "  `ablo dev --no-watch` is `ablo push` (push once, no watcher) \u2014 running that." : "  `ablo dev` is now `ablo push --watch` \u2014 running that."
       )
     );
@@ -282564,14 +282804,14 @@ async function main() {
     const guard = guardActiveProjectKey();
     if (!guard.ok && guard.available.length > 0 && !rest.includes("--url")) {
       console.error(
-        `  ${import_picocolors18.default.yellow("\u26A0")} active project ${import_picocolors18.default.bold(guard.activeProfile)} has no stored key ${import_picocolors18.default.dim(
+        `  ${import_picocolors19.default.yellow("\u26A0")} active project ${import_picocolors19.default.bold(guard.activeProfile)} has no stored key ${import_picocolors19.default.dim(
           `(you have keys for: ${guard.available.join(", ")})`
         )}`
       );
       const loginCmd = guard.activeProfile === "default" ? "ablo login" : `ablo login --project ${guard.activeProfile}`;
       console.error(
-        import_picocolors18.default.dim(
-          `    Mint one with ${import_picocolors18.default.bold(loginCmd)}, or switch with ${import_picocolors18.default.bold("ablo projects use <slug>")}.`
+        import_picocolors19.default.dim(
+          `    Mint one with ${import_picocolors19.default.bold(loginCmd)}, or switch with ${import_picocolors19.default.bold("ablo projects use <slug>")}.`
         )
       );
       process.exitCode = 1;
@@ -282589,13 +282829,13 @@ async function main() {
     await generate(process.argv.slice(3));
   } else if (command === "schema") {
     console.error(
-      `  ${import_picocolors18.default.red("\u2717")} \`ablo schema push\` was renamed to \`${brand("ablo push")}\`.`
+      `  ${import_picocolors19.default.red("\u2717")} \`ablo schema push\` was renamed to \`${brand("ablo push")}\`.`
     );
     console.error(`    Run \`ablo push${process.argv.slice(4).join(" ") ? " " + process.argv.slice(4).join(" ") : ""}\` instead.`);
     process.exitCode = 1;
   } else {
     console.log(LOGO);
-    console.log(`  ${import_picocolors18.default.bold("Usage:")}`);
+    console.log(`  ${import_picocolors19.default.bold("Usage:")}`);
     console.log(`    npx ablo init                          Scaffold ablo/ directory + starter schema`);
     console.log(`    npx ablo init --yes [--framework nextjs] Non-interactive (agents/CI): no prompts, flag-driven`);
     console.log(`                  [--auth apikey] [--storage direct|endpoint] [--project <slug>] [--no-project]`);
@@ -282630,10 +282870,10 @@ async function main() {
     console.log(`    npx ablo generate                      Emit TypeScript types from your schema`);
     console.log(`    npx ablo generate --out path.ts        Write generated types to a path`);
     console.log();
-    console.log(`  ${import_picocolors18.default.bold("Schema workflow:")}`);
+    console.log(`  ${import_picocolors19.default.bold("Schema workflow:")}`);
     console.log(`    The server holds its own copy of your schema \u2014 edit ${brand("ablo/schema.ts")}, then`);
     console.log(`    run ${brand("ablo push")} (or keep ${brand("ablo dev")} running) before the server will accept`);
-    console.log(`    writes to new or changed models. Skip it and writes fail with ${import_picocolors18.default.yellow("server_execute_unknown_model")}.`);
+    console.log(`    writes to new or changed models. Skip it and writes fail with ${import_picocolors19.default.yellow("server_execute_unknown_model")}.`);
     console.log();
   }
 }
@@ -282645,7 +282885,7 @@ function bailIfCancelled(value) {
 }
 var INIT_FRAMEWORKS = ["nextjs", "vite", "remix", "vanilla"];
 var INIT_AUTHS = ["apikey", "firebase", "auth0", "clerk", "supabase", "betterauth", "jwt"];
-var INIT_STORAGES = ["direct", "endpoint", "datasource"];
+var INIT_STORAGES = ["endpoint", "direct", "datasource"];
 function parseInitArgs(args) {
   const has = (flag2) => args.includes(flag2);
   const val = (flag2) => {
@@ -282684,7 +282924,7 @@ async function ensureInitProject(opts) {
   const ensured = await ensureProject(slug);
   if (ensured) {
     console.log(
-      `  ${import_picocolors18.default.green("\u2713")} ${ensured.created ? "Created" : "Using"} project ${import_picocolors18.default.bold(ensured.slug)} ${import_picocolors18.default.dim(`(${ensured.id})`)} \u2014 keys you mint for it are isolated from the org's other apps.`
+      `  ${import_picocolors19.default.green("\u2713")} ${ensured.created ? "Created" : "Using"} project ${import_picocolors19.default.bold(ensured.slug)} ${import_picocolors19.default.dim(`(${ensured.id})`)} \u2014 keys you mint for it are isolated from the org's other apps.`
     );
   }
 }
@@ -282726,7 +282966,7 @@ async function chooseBool(flagValue, fallback, interactive, prompt) {
 async function init(args = []) {
   const opts = parseInitArgs(args);
   const interactive = Boolean(process.stdin.isTTY) && !opts.yes && !process.env.CI;
-  Ie(`${brand("ablo")} ${import_picocolors18.default.dim("sync engine")}`);
+  Ie(`${brand("ablo")} ${import_picocolors19.default.dim("sync engine")}`);
   if (!(0, import_fs12.existsSync)("package.json")) {
     xe("No package.json found. Run this from your project root.");
     process.exit(1);
@@ -282771,19 +283011,18 @@ async function init(args = []) {
   const storageChoice = await chooseOption(
     "storage",
     opts.storage,
-    "direct",
+    "endpoint",
     INIT_STORAGES,
-    interactive,
-    () => ve({
-      message: "How should Ablo reach your database?",
-      initialValue: "direct",
-      options: [
-        { value: "direct", label: "Connection string (DATABASE_URL) \u2014 recommended" },
-        { value: "endpoint", label: "Signed endpoint in my app (credentials never leave it)" }
-      ]
-    })
+    false,
+    () => Promise.resolve("endpoint")
   );
   const storage = storageChoice === "datasource" ? "endpoint" : storageChoice;
+  if (storage === "direct") {
+    Me(
+      "`--storage direct` uses the deprecated databaseUrl connector. The signed Data\nSource endpoint is the supported path.",
+      import_picocolors19.default.yellow("Deprecated")
+    );
+  }
   const agent = await chooseBool(
     opts.agent,
     true,
@@ -282811,7 +283050,7 @@ async function init(args = []) {
   if (pullExisting) {
     const dbUrl = process.env.DATABASE_URL ?? process.env.ABLO_DATABASE_URL;
     if (!dbUrl) {
-      schemaNote = import_picocolors18.default.dim(" (no DATABASE_URL \u2014 wrote starter; run `ablo pull` later)");
+      schemaNote = import_picocolors19.default.dim(" (no DATABASE_URL \u2014 wrote starter; run `ablo pull` later)");
     } else {
       try {
         const pulled = await buildSchemaSourceFromDb({
@@ -282821,12 +283060,12 @@ async function init(args = []) {
         });
         if (pulled.models.length > 0) {
           schemaSource = pulled.source;
-          schemaNote = import_picocolors18.default.dim(` (pulled ${pulled.models.length} models)`);
+          schemaNote = import_picocolors19.default.dim(` (pulled ${pulled.models.length} models)`);
         } else {
-          schemaNote = import_picocolors18.default.dim(" (no adoptable tables \u2014 wrote starter)");
+          schemaNote = import_picocolors19.default.dim(" (no adoptable tables \u2014 wrote starter)");
         }
       } catch {
-        schemaNote = import_picocolors18.default.dim(" (pull failed \u2014 wrote starter)");
+        schemaNote = import_picocolors19.default.dim(" (pull failed \u2014 wrote starter)");
       }
     }
   }
@@ -282852,14 +283091,14 @@ async function init(args = []) {
     const existing = (0, import_fs12.readFileSync)(envFile, "utf-8");
     if (!existing.includes("ABLO_")) {
       (0, import_fs12.writeFileSync)(envFile, existing + "\n" + envBody);
-      created.push(`${envFile} ${import_picocolors18.default.dim("(appended)")}`);
+      created.push(`${envFile} ${import_picocolors19.default.dim("(appended)")}`);
     } else {
-      created.push(`${envFile} ${import_picocolors18.default.dim("(already configured)")}`);
+      created.push(`${envFile} ${import_picocolors19.default.dim("(already configured)")}`);
     }
   }
   if (wireRealKey && resolvedKey) {
     wireEnvLocal(resolvedKey);
-    created.push(`.env.local ${import_picocolors18.default.dim("(ABLO_API_KEY set from your login)")}`);
+    created.push(`.env.local ${import_picocolors19.default.dim("(ABLO_API_KEY set from your login)")}`);
   }
   if (agent) {
     (0, import_fs12.writeFileSync)((0, import_path7.join)(abloDir, "agent.ts"), generateAgent());
@@ -282874,17 +283113,17 @@ async function init(args = []) {
     }
     const providersPath = (0, import_path7.join)(layout.appBase, "providers.tsx");
     (0, import_fs12.writeFileSync)(providersPath, generateProviders());
-    created.push(`${providersPath} ${import_picocolors18.default.dim(`(wrap ${(0, import_path7.join)(layout.appBase, "layout.tsx")} in <Providers>)`)}`);
+    created.push(`${providersPath} ${import_picocolors19.default.dim(`(wrap ${(0, import_path7.join)(layout.appBase, "layout.tsx")} in <Providers>)`)}`);
     const sessionDir = (0, import_path7.join)(layout.appBase, "api", "ablo-session");
     (0, import_fs12.mkdirSync)(sessionDir, { recursive: true });
     (0, import_fs12.writeFileSync)((0, import_path7.join)(sessionDir, "route.ts"), generateSessionRoute());
-    created.push(`${(0, import_path7.join)(sessionDir, "route.ts")} ${import_picocolors18.default.dim("(wire your auth)")}`);
+    created.push(`${(0, import_path7.join)(sessionDir, "route.ts")} ${import_picocolors19.default.dim("(wire your auth)")}`);
   }
   if (framework !== "vanilla") {
     (0, import_fs12.writeFileSync)((0, import_path7.join)(abloDir, "TaskList.tsx"), generateComponent());
     created.push(`${abloDir}/TaskList.tsx`);
   }
-  Me(created.map((f) => `${import_picocolors18.default.green("\u2713")} ${f}`).join("\n"), "Created");
+  Me(created.map((f) => `${import_picocolors19.default.green("\u2713")} ${f}`).join("\n"), "Created");
   const pm = detectPackageManager();
   if (opts.install) {
     const s = Y2();
@@ -282893,45 +283132,45 @@ async function init(args = []) {
       (0, import_child_process2.execSync)(`${pm} add @abloatai/ablo`, { stdio: "ignore" });
       s.stop("Installed @abloatai/ablo");
     } catch {
-      s.stop(`${import_picocolors18.default.yellow("!")} Couldn't auto-install \u2014 run ${import_picocolors18.default.bold(`${pm} install @abloatai/ablo`)}`);
+      s.stop(`${import_picocolors19.default.yellow("!")} Couldn't auto-install \u2014 run ${import_picocolors19.default.bold(`${pm} install @abloatai/ablo`)}`);
     }
   }
   const steps = [
-    `Get a ${import_picocolors18.default.bold("sk_test_")} key at ${import_picocolors18.default.cyan("https://abloatai.com")}`,
-    `Run ${import_picocolors18.default.bold("npx ablo login")} (or add ${import_picocolors18.default.bold("ABLO_API_KEY")} to ${import_picocolors18.default.bold(envFile)})`,
-    `Set ${import_picocolors18.default.bold("DATABASE_URL")} in ${import_picocolors18.default.bold(envFile)} \u2014 your Postgres is the system of record; rows live there, never with Ablo`,
-    `Run ${import_picocolors18.default.bold("npx ablo dev")} \u2014 pushes your schema definition and watches for changes`,
+    `Get a ${import_picocolors19.default.bold("sk_test_")} key at ${import_picocolors19.default.cyan("https://abloatai.com")}`,
+    `Run ${import_picocolors19.default.bold("npx ablo login")} (or add ${import_picocolors19.default.bold("ABLO_API_KEY")} to ${import_picocolors19.default.bold(envFile)})`,
+    `Set ${import_picocolors19.default.bold("DATABASE_URL")} in ${import_picocolors19.default.bold(envFile)} \u2014 your Postgres is the system of record; rows live there, never with Ablo`,
+    `Run ${import_picocolors19.default.bold("npx ablo dev")} \u2014 pushes your schema definition and watches for changes`,
     ...storage === "direct" ? [
-      `Provision your DB: ${import_picocolors18.default.bold("npx ablo migrate")} (creates your synced-model tables with row-level security; keep your own migrations for everything else)`
+      `Provision your DB: ${import_picocolors19.default.bold("npx ablo migrate")} (creates your synced-model tables with row-level security; keep your own migrations for everything else)`
     ] : [
-      `Provision your DB: ${import_picocolors18.default.bold("npx ablo migrate")} (creates your Ablo-model tables + the adapter tables; keep your own migrations for everything else), then mount ${import_picocolors18.default.bold(`${abloDir}/data-source.ts`)} at ${import_picocolors18.default.bold("/api/ablo/source")}`
+      `Provision your DB: ${import_picocolors19.default.bold("npx ablo migrate")} (creates your Ablo-model tables + the adapter tables; keep your own migrations for everything else), then mount ${import_picocolors19.default.bold(`${abloDir}/data-source.ts`)} at ${import_picocolors19.default.bold("/api/ablo/source")}`
     ],
     ...framework === "nextjs" ? [
-      `Wrap ${import_picocolors18.default.bold((0, import_path7.join)(layout.appBase, "layout.tsx"))} in ${import_picocolors18.default.bold("<Providers>")} (${(0, import_path7.join)(layout.appBase, "providers.tsx")}) and add your auth to ${import_picocolors18.default.bold((0, import_path7.join)(layout.appBase, "api", "ablo-session", "route.ts"))}`
+      `Wrap ${import_picocolors19.default.bold((0, import_path7.join)(layout.appBase, "layout.tsx"))} in ${import_picocolors19.default.bold("<Providers>")} (${(0, import_path7.join)(layout.appBase, "providers.tsx")}) and add your auth to ${import_picocolors19.default.bold((0, import_path7.join)(layout.appBase, "api", "ablo-session", "route.ts"))}`
     ] : [],
-    `Run ${import_picocolors18.default.bold(`${pm} run dev`)} and open two browser tabs \u2014 changes sync in real-time`,
+    `Run ${import_picocolors19.default.bold(`${pm} run dev`)} and open two browser tabs \u2014 changes sync in real-time`,
     ...agent ? [
-      `Run ${import_picocolors18.default.bold(`npx tsx ${abloDir}/agent.ts`)} \u2014 an AI teammate edits the same tasks`,
-      `Run ${import_picocolors18.default.bold("npx ablo logs")} to watch human + agent commits stream by`
+      `Run ${import_picocolors19.default.bold(`npx tsx ${abloDir}/agent.ts`)} \u2014 an AI teammate edits the same tasks`,
+      `Run ${import_picocolors19.default.bold("npx ablo logs")} to watch human + agent commits stream by`
     ] : []
   ];
   Me(steps.map((s, i) => `${i + 1}. ${s}`).join("\n"), "Next steps");
   const existingKey = resolveApiKey("sandbox");
   if (existingKey) {
     await ensureInitProject(opts);
-    Se(`Already authorized ${import_picocolors18.default.dim(`(${existingKey.slice(0, 11)}\u2026)`)} \u2014 run ${import_picocolors18.default.bold("npx ablo push")} next. ${import_picocolors18.default.dim("Docs:")} https://abloatai.com/docs`);
+    Se(`Already authorized ${import_picocolors19.default.dim(`(${existingKey.slice(0, 11)}\u2026)`)} \u2014 run ${import_picocolors19.default.bold("npx ablo push")} next. ${import_picocolors19.default.dim("Docs:")} https://abloatai.com/docs`);
     return;
   }
   if (interactive && opts.login) {
     const loginNow = await ye({ message: "Log in now? (opens your browser)", initialValue: true });
     if (!pD(loginNow) && loginNow) {
-      Se(`${import_picocolors18.default.dim("Docs:")} https://abloatai.com/docs`);
+      Se(`${import_picocolors19.default.dim("Docs:")} https://abloatai.com/docs`);
       await login();
       await ensureInitProject(opts);
       return;
     }
   }
-  Se(`Run ${import_picocolors18.default.bold("npx ablo login")} when ready. ${import_picocolors18.default.dim("Docs:")} https://abloatai.com/docs`);
+  Se(`Run ${import_picocolors19.default.bold("npx ablo login")} when ready. ${import_picocolors19.default.dim("Docs:")} https://abloatai.com/docs`);
 }
 function generateSchema() {
   return `import { defineSchema, model, relation, z } from '@abloatai/ablo/schema';
@@ -282962,7 +283201,7 @@ export const schema = defineSchema({
 }
 function generateSyncConfig(auth, storage) {
   const databaseLine = storage === "direct" ? `
-  databaseUrl: process.env.DATABASE_URL, // your Postgres \u2014 rows live here, never with Ablo` : "";
+  databaseUrl: process.env.DATABASE_URL, // deprecated direct connector` : "";
   const authLine = auth === "apikey" ? "" : auth === "firebase" ? `
   auth: async () => {
     const { getAuth } = await import('firebase/auth');
@@ -282977,11 +283216,10 @@ function generateSyncConfig(auth, storage) {
   return `import Ablo from '@abloatai/ablo';
 import { schema } from './schema';
 
-// SERVER-ONLY client \u2014 it holds your \`sk_\` key (and in direct mode your
-// database URL). Use it from server code: the agent script and the
-// /api/ablo-session route. Do NOT import this into a browser ('use client')
-// component; the browser uses app/providers.tsx, which authenticates via the
-// session route and never touches the key or the database URL.
+// SERVER-ONLY client \u2014 it holds your \`sk_\` key. Use it from server code: the
+// agent script and the /api/ablo-session route. Do NOT import this into a browser
+// ('use client') component; the browser uses app/providers.tsx, which authenticates
+// via the session route and never touches the key.
 export const sync = Ablo({
   apiKey: process.env.ABLO_API_KEY,${databaseLine}${authLine}
   schema,
@@ -283007,7 +283245,7 @@ export {};
 }
 function generateEnv(storage, opts = {}) {
   const { includeApiKey = true } = opts;
-  const databaseBlock = storage === "direct" ? "# Your Postgres \u2014 the system of record. The client registers this connection\n# (sent once over TLS, stored sealed) and every row lives HERE, never with Ablo.\n# Use a dedicated non-superuser role; the browser never sees this value.\nDATABASE_URL=postgres://user:password@host:5432/db\n" : "# Used by ablo/data-source.ts (your DB endpoint) + `ablo migrate` \u2014 NOT the client.\n# Ablo never sees it; the browser never sees it. Your DB stays in your app.\nDATABASE_URL=postgres://user:password@host:5432/db\n";
+  const databaseBlock = storage === "direct" ? "# DEPRECATED direct connector. The client registers this connection (sent once\n# over TLS, stored sealed) so Ablo dials into your Postgres. Prefer a signed Data\n# Source endpoint; to keep the transaction log in your infra too, self-host the engine.\n# Use a dedicated non-superuser role; the browser never sees this value.\nDATABASE_URL=postgres://user:password@host:5432/db\n" : "# Used by ablo/data-source.ts (your DB endpoint) + `ablo migrate` \u2014 NOT the client.\n# Ablo never sees it; the browser never sees it. Your DB stays in your app.\nDATABASE_URL=postgres://user:password@host:5432/db\n";
   const webhookBlock = storage === "endpoint" ? "# Signing secret for the webhook receiver (app/api/ablo/webhooks/route.ts).\n# Ablo mints this when you register the endpoint's URL (POST /v1/webhook_endpoints\n# or the dashboard) and returns it once \u2014 paste it here.\nABLO_WEBHOOK_SECRET=whsec_your_endpoint_secret_here\n" : "";
   const apiKeyBlock = includeApiKey ? "# Ablo Sync Engine \u2014 use a sk_test_ key for local dev (`npx ablo push`)\nABLO_API_KEY=sk_test_your_key_here\n" : "";
   return `${apiKeyBlock}${webhookBlock}${databaseBlock}`;
@@ -283209,7 +283447,9 @@ async function main() {
 }
 
 main().catch((err) => {
-  console.error(err);
+  // Ablo errors stringify to one clean line (code + message + docs link),
+  // never a stack/object dump \u2014 see AbloError.toString().
+  console.error(String(err));
   process.exit(1);
 });
 `;
@@ -283296,22 +283536,33 @@ export function Providers({ children }: { children: React.ReactNode }) {
 `;
 }
 function generateSessionRoute() {
-  return `import { sync } from '@/ablo';
+  return `import { headers } from 'next/headers';
+import { sync } from '@/ablo';
+import { auth } from '@/lib/auth'; // your server-side betterAuth({ ... }) instance
 
 // Mints the browser's session token. The browser never sees your sk_ key \u2014 it
-// only gets this token, which already names your org + the user you assert here.
-// Replace getCurrentUser() with your real auth (NextAuth / Clerk / Better Auth / \u2026).
+// only gets this short-lived token, already scoped to your org + the user you
+// assert here. The browser fetches THIS route at a relative URL
+// ('/api/ablo-session') \u2014 that's correct + best practice (same-origin, cookies
+// flow automatically); the SDK refreshes it in the browser only.
 export async function POST(): Promise<Response> {
-  const user = await getCurrentUser(); // \u2190 your auth: who is making this request?
+  const user = await getCurrentUser();
   if (!user) return new Response('Unauthorized', { status: 401 });
 
   const { token } = await sync.sessions.create({ user: { id: user.id } });
   return Response.json({ token });
 }
 
-// TODO: replace with your auth provider's "current user" lookup.
+// Validate the signed-in user SERVER-SIDE. This ships wired for Better Auth;
+// \`getSession\` is the server method \u2014 pass the request headers (async in current
+// Next.js), it does NOT read cookies implicitly. Using a different provider?
+// Replace the body:
+//   \u2022 NextAuth:  const s = await auth();            return s?.user ? { id: s.user.id } : null;
+//   \u2022 Clerk:     const { userId } = await auth();   return userId ? { id: userId } : null;
+//   \u2022 Supabase:  const { data } = await supabase.auth.getUser(); return data.user ? { id: data.user.id } : null;
 async function getCurrentUser(): Promise<{ id: string } | null> {
-  return null;
+  const session = await auth.api.getSession({ headers: await headers() });
+  return session?.user ? { id: session.user.id } : null;
 }
 `;
 }
@@ -283321,7 +283572,10 @@ function detectPackageManager() {
   if ((0, import_fs12.existsSync)("bun.lockb")) return "bun";
   return "npm";
 }
-main().catch(console.error);
+main().catch((err) => {
+  renderCliError(err);
+  process.exit(process.exitCode ?? 1);
+});
 /*! Bundled license information:
 
 @ts-morph/common/dist/typescript.js: