@abloatai/ablo 0.23.0 → 0.25.0

package/dist/cli.cjs

@@ -4850,8 +4850,8 @@ var require_typescript = __commonJS({
         let count = 0;
         if (array !== void 0) {
           for (let i = 0; i < array.length; i++) {
-            const v = array[i];
-            if (predicate(v, i)) {
+            const v2 = array[i];
+            if (predicate(v2, i)) {
               count++;
             }
           }
@@ -4926,12 +4926,12 @@ var require_typescript = __commonJS({
       function flatten(array) {
         const result = [];
         for (let i = 0; i < array.length; i++) {
-          const v = array[i];
-          if (v) {
-            if (isArray(v)) {
-              addRange(result, v);
+          const v2 = array[i];
+          if (v2) {
+            if (isArray(v2)) {
+              addRange(result, v2);
             } else {
-              result.push(v);
+              result.push(v2);
             }
           }
         }
@@ -4941,12 +4941,12 @@ var require_typescript = __commonJS({
         let result;
         if (array !== void 0) {
           for (let i = 0; i < array.length; i++) {
-            const v = mapfn(array[i], i);
-            if (v) {
-              if (isArray(v)) {
-                result = addRange(result, v);
+            const v2 = mapfn(array[i], i);
+            if (v2) {
+              if (isArray(v2)) {
+                result = addRange(result, v2);
               } else {
-                result = append(result, v);
+                result = append(result, v2);
               }
             }
           }
@@ -4957,12 +4957,12 @@ var require_typescript = __commonJS({
         const result = [];
         if (array !== void 0) {
           for (let i = 0; i < array.length; i++) {
-            const v = mapfn(array[i], i);
-            if (v) {
-              if (isArray(v)) {
-                addRange(result, v);
+            const v2 = mapfn(array[i], i);
+            if (v2) {
+              if (isArray(v2)) {
+                addRange(result, v2);
               } else {
-                result.push(v);
+                result.push(v2);
               }
             }
           }
@@ -5066,9 +5066,9 @@ var require_typescript = __commonJS({
               pos++;
             }
             if (start < pos) {
-              const v = mapfn(array.slice(start, pos), previousKey, start, pos);
-              if (v) {
-                result.push(v);
+              const v2 = mapfn(array.slice(start, pos), previousKey, start, pos);
+              if (v2) {
+                result.push(v2);
               }
               start = pos;
             }
@@ -5224,11 +5224,11 @@ var require_typescript = __commonJS({
         let result;
         if (array !== void 0) {
           for (let i = 0; i < array.length; i++) {
-            const v = array[i];
-            if (result ?? !v) {
+            const v2 = array[i];
+            if (result ?? !v2) {
               result ?? (result = array.slice(0, i));
-              if (v) {
-                result.push(v);
+              if (v2) {
+                result.push(v2);
               }
             }
           }
@@ -6055,11 +6055,11 @@ var require_typescript = __commonJS({
         let matchedValue;
         let longestMatchPrefixLength = -1;
         for (let i = 0; i < values2.length; i++) {
-          const v = values2[i];
-          const pattern = getPattern(v);
+          const v2 = values2[i];
+          const pattern = getPattern(v2);
           if (pattern.prefix.length > longestMatchPrefixLength && isPatternMatch(pattern, candidate)) {
             longestMatchPrefixLength = pattern.prefix.length;
-            matchedValue = v;
+            matchedValue = v2;
           }
         }
         return matchedValue;
@@ -6323,8 +6323,8 @@ Node ${formatSyntaxKind(node.kind)} was unexpected.`,
         }
         Debug2.checkDefined = checkDefined;
         function assertEachIsDefined(value, message, stackCrawlMark) {
-          for (const v of value) {
-            assertIsDefined(v, message, stackCrawlMark || assertEachIsDefined);
+          for (const v2 of value) {
+            assertIsDefined(v2, message, stackCrawlMark || assertEachIsDefined);
           }
         }
         Debug2.assertEachIsDefined = assertEachIsDefined;
@@ -7695,7 +7695,7 @@ ${lanes.join("\n")}
           const meta = { cat: "__metadata", ph: "M", ts: 1e3 * timestamp(), pid: 1, tid: 1 };
           fs2.writeSync(
             traceFd,
-            "[\n" + [{ name: "process_name", args: { name: "tsc" }, ...meta }, { name: "thread_name", args: { name: "Main" }, ...meta }, { name: "TracingStartedInBrowser", ...meta, cat: "disabled-by-default-devtools.timeline" }].map((v) => JSON.stringify(v)).join(",\n")
+            "[\n" + [{ name: "process_name", args: { name: "tsc" }, ...meta }, { name: "thread_name", args: { name: "Main" }, ...meta }, { name: "TracingStartedInBrowser", ...meta, cat: "disabled-by-default-devtools.timeline" }].map((v2) => JSON.stringify(v2)).join(",\n")
           );
         }
         tracingEnabled2.startTracing = startTracing2;
@@ -21820,8 +21820,8 @@ ${lanes.join("\n")}
       function getSingleInitializerOfVariableStatementOrPropertyDeclaration(node) {
         switch (node.kind) {
           case 243:
-            const v = getSingleVariableOfVariableStatement(node);
-            return v && v.initializer;
+            const v2 = getSingleVariableOfVariableStatement(node);
+            return v2 && v2.initializer;
           case 172:
             return node.initializer;
           case 303:
@@ -47572,14 +47572,14 @@ ${lanes.join("\n")}
         const values2 = value.split(",");
         switch (opt.element.type) {
           case "number":
-            return mapDefined(values2, (v) => validateJsonOptionValue(opt.element, parseInt(v), errors));
+            return mapDefined(values2, (v2) => validateJsonOptionValue(opt.element, parseInt(v2), errors));
           case "string":
-            return mapDefined(values2, (v) => validateJsonOptionValue(opt.element, v || "", errors));
+            return mapDefined(values2, (v2) => validateJsonOptionValue(opt.element, v2 || "", errors));
           case "boolean":
           case "object":
             return Debug.fail(`List of ${opt.element.type} is not yet supported.`);
           default:
-            return mapDefined(values2, (v) => parseCustomTypeOption(opt.element, v, errors));
+            return mapDefined(values2, (v2) => parseCustomTypeOption(opt.element, v2, errors));
         }
       }
       function getOptionName(option) {
@@ -48060,7 +48060,7 @@ ${lanes.join("\n")}
             elements.forEach((element) => convertPropertyValueToJson(element, elementOption));
             return void 0;
           }
-          return filter(elements.map((element) => convertPropertyValueToJson(element, elementOption)), (v) => v !== void 0);
+          return filter(elements.map((element) => convertPropertyValueToJson(element, elementOption)), (v2) => v2 !== void 0);
         }
         function convertPropertyValueToJson(valueExpression, option) {
           switch (valueExpression.kind) {
@@ -48255,7 +48255,7 @@ ${lanes.join("\n")}
                 if (pathOptions && optionDefinition.isFilePath) {
                   result.set(name, getRelativePathFromFile(pathOptions.configFilePath, getNormalizedAbsolutePath(value, getDirectoryPath(pathOptions.configFilePath)), getCanonicalFileName));
                 } else if (pathOptions && optionDefinition.type === "list" && optionDefinition.element.isFilePath) {
-                  result.set(name, value.map((v) => getRelativePathFromFile(pathOptions.configFilePath, getNormalizedAbsolutePath(v, getDirectoryPath(pathOptions.configFilePath)), getCanonicalFileName)));
+                  result.set(name, value.map((v2) => getRelativePathFromFile(pathOptions.configFilePath, getNormalizedAbsolutePath(v2, getDirectoryPath(pathOptions.configFilePath)), getCanonicalFileName)));
                 } else {
                   result.set(name, value);
                 }
@@ -49063,7 +49063,7 @@ ${lanes.join("\n")}
         }
       }
       function convertJsonOptionOfListType(option, values2, basePath, errors, propertyAssignment, valueExpression, sourceFile) {
-        return filter(map(values2, (v, index) => convertJsonOption(option.element, v, basePath, errors, propertyAssignment, valueExpression == null ? void 0 : valueExpression.elements[index], sourceFile)), (v) => option.listPreserveFalsyValues ? true : !!v);
+        return filter(map(values2, (v2, index) => convertJsonOption(option.element, v2, basePath, errors, propertyAssignment, valueExpression == null ? void 0 : valueExpression.elements[index], sourceFile)), (v2) => option.listPreserveFalsyValues ? true : !!v2);
       }
       var invalidTrailingRecursionPattern = /(?:^|\/)\*\*\/?$/;
       var wildcardDirectoryPattern = /^[^*?]*(?=\/[^/]*[*?])/;
@@ -49325,7 +49325,7 @@ ${lanes.join("\n")}
           // fall through to list
           case "list":
             const elementType = option.element;
-            return isArray(value) ? mapDefined(value, (v) => getOptionValueWithEmptyStrings(v, elementType)) : "";
+            return isArray(value) ? mapDefined(value, (v2) => getOptionValueWithEmptyStrings(v2, elementType)) : "";
           default:
             return forEachEntry(option.type, (optionEnumValue, optionStringValue) => {
               if (optionEnumValue === value) {
@@ -69653,9 +69653,9 @@ ${lanes.join("\n")}
               return getBaseConstraint(getSubstitutionIntersection(t));
             }
             if (isGenericTupleType(t)) {
-              const newElements = map(getElementTypes(t), (v, i) => {
-                const constraint = v.flags & 262144 && t.target.elementFlags[i] & 8 && getBaseConstraint(v) || v;
-                return constraint !== v && everyType(constraint, (c) => isArrayOrTupleType(c) && !isGenericTupleType(c)) ? constraint : v;
+              const newElements = map(getElementTypes(t), (v2, i) => {
+                const constraint = v2.flags & 262144 && t.target.elementFlags[i] & 8 && getBaseConstraint(v2) || v2;
+                return constraint !== v2 && everyType(constraint, (c) => isArrayOrTupleType(c) && !isGenericTupleType(c)) ? constraint : v2;
               });
               return createTupleType(newElements, t.target.elementFlags, t.target.readonly, t.target.labeledElementDeclarations);
             }
@@ -77429,7 +77429,7 @@ ${lanes.join("\n")}
               if (result2 = typeArgumentsRelatedTo(sourceTypeArguments, targetTypeArguments, variances, reportErrors2, intersectionState2)) {
                 return result2;
               }
-              if (some(variances, (v) => !!(v & 24))) {
+              if (some(variances, (v2) => !!(v2 & 24))) {
                 originalErrorInfo = void 0;
                 resetErrorInfo(saveErrorInfo);
                 return void 0;
@@ -77439,7 +77439,7 @@ ${lanes.join("\n")}
               if (variances !== emptyArray && !allowStructuralFallback) {
                 if (varianceCheckFailed && !(reportErrors2 && some(
                   variances,
-                  (v) => (v & 7) === 0
+                  (v2) => (v2 & 7) === 0
                   /* Invariant */
                 ))) {
                   return 0;
@@ -140817,7 +140817,7 @@ ${lanes.join("\n")}
         function createManyToManyPathMap() {
           function create2(forward, reverse, deleted) {
             const map2 = {
-              getKeys: (v) => reverse.get(v),
+              getKeys: (v2) => reverse.get(v2),
               getValues: (k3) => forward.get(k3),
               keys: () => forward.keys(),
               size: () => forward.size,
@@ -140827,7 +140827,7 @@ ${lanes.join("\n")}
                 if (!set) {
                   return false;
                 }
-                set.forEach((v) => deleteFromMultimap(reverse, v, k3));
+                set.forEach((v2) => deleteFromMultimap(reverse, v2, k3));
                 forward.delete(k3);
                 return true;
               },
@@ -140835,14 +140835,14 @@ ${lanes.join("\n")}
                 deleted == null ? void 0 : deleted.delete(k3);
                 const existingVSet = forward.get(k3);
                 forward.set(k3, vSet);
-                existingVSet == null ? void 0 : existingVSet.forEach((v) => {
-                  if (!vSet.has(v)) {
-                    deleteFromMultimap(reverse, v, k3);
+                existingVSet == null ? void 0 : existingVSet.forEach((v2) => {
+                  if (!vSet.has(v2)) {
+                    deleteFromMultimap(reverse, v2, k3);
                   }
                 });
-                vSet.forEach((v) => {
-                  if (!(existingVSet == null ? void 0 : existingVSet.has(v))) {
-                    addToMultimap(reverse, v, k3);
+                vSet.forEach((v2) => {
+                  if (!(existingVSet == null ? void 0 : existingVSet.has(v2))) {
+                    addToMultimap(reverse, v2, k3);
                   }
                 });
                 return map2;
@@ -140858,17 +140858,17 @@ ${lanes.join("\n")}
           );
         }
         BuilderState2.createManyToManyPathMap = createManyToManyPathMap;
-        function addToMultimap(map2, k3, v) {
+        function addToMultimap(map2, k3, v2) {
           let set = map2.get(k3);
           if (!set) {
             set = /* @__PURE__ */ new Set();
             map2.set(k3, set);
           }
-          set.add(v);
+          set.add(v2);
         }
-        function deleteFromMultimap(map2, k3, v) {
+        function deleteFromMultimap(map2, k3, v2) {
           const set = map2.get(k3);
-          if (set == null ? void 0 : set.delete(v)) {
+          if (set == null ? void 0 : set.delete(v2)) {
             if (!set.size) {
               map2.delete(k3);
             }
@@ -147186,7 +147186,7 @@ ${lanes.join("\n")}
         return options.pretty;
       }
       function getOptionsForHelp(commandLine) {
-        return !!commandLine.options.all ? toSorted(optionDeclarations.concat(tscBuildOption), (a, b4) => compareStringsCaseInsensitive(a.name, b4.name)) : filter(optionDeclarations.concat(tscBuildOption), (v) => !!v.showInSimplifiedHelpView);
+        return !!commandLine.options.all ? toSorted(optionDeclarations.concat(tscBuildOption), (a, b4) => compareStringsCaseInsensitive(a.name, b4.name)) : filter(optionDeclarations.concat(tscBuildOption), (v2) => !!v2.showInSimplifiedHelpView);
       }
       function printVersion(sys2) {
         sys2.write(getDiagnosticText(Diagnostics.Version_0, version) + sys2.newLine);
@@ -150589,8 +150589,8 @@ ${lanes.join("\n")}
           default:
             return "";
         }
-        function getKindOfVariableDeclaration(v) {
-          return isVarConst(v) ? "const" : isLet(v) ? "let" : "var";
+        function getKindOfVariableDeclaration(v2) {
+          return isVarConst(v2) ? "const" : isLet(v2) ? "let" : "var";
         }
       }
       function isThis(node) {
@@ -156679,7 +156679,7 @@ interface Symbol {
       }
       var commandLineOptionsStringToEnum;
       function fixupCompilerOptions(options, diagnostics) {
-        commandLineOptionsStringToEnum = commandLineOptionsStringToEnum || filter(optionDeclarations, (o2) => typeof o2.type === "object" && !forEachEntry(o2.type, (v) => typeof v !== "number"));
+        commandLineOptionsStringToEnum = commandLineOptionsStringToEnum || filter(optionDeclarations, (o2) => typeof o2.type === "object" && !forEachEntry(o2.type, (v2) => typeof v2 !== "number"));
         options = cloneCompilerOptions(options);
         for (const opt of commandLineOptionsStringToEnum) {
           if (!hasProperty(options, opt.name)) {
@@ -156689,7 +156689,7 @@ interface Symbol {
           if (isString(value)) {
             options[opt.name] = parseCustomTypeOption(opt, value, diagnostics);
           } else {
-            if (!forEachEntry(opt.type, (v) => v === value)) {
+            if (!forEachEntry(opt.type, (v2) => v2 === value)) {
               diagnostics.push(createCompilerDiagnosticForInvalidCustomType(opt));
             }
           }
@@ -162506,12 +162506,12 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
         }
       }
       function getPropertyAssignmentsForWritesAndVariableDeclarations(exposedVariableDeclarations, writes) {
-        const variableAssignments = map(exposedVariableDeclarations, (v) => factory.createShorthandPropertyAssignment(v.symbol.name));
+        const variableAssignments = map(exposedVariableDeclarations, (v2) => factory.createShorthandPropertyAssignment(v2.symbol.name));
         const writeAssignments = map(writes, (w2) => factory.createShorthandPropertyAssignment(w2.symbol.name));
         return variableAssignments === void 0 ? writeAssignments : writeAssignments === void 0 ? variableAssignments : variableAssignments.concat(writeAssignments);
       }
-      function isReadonlyArray(v) {
-        return isArray(v);
+      function isReadonlyArray(v2) {
+        return isArray(v2);
       }
       function getEnclosingTextRange(targetRange, sourceFile) {
         return isReadonlyArray(targetRange.range) ? { pos: first(targetRange.range).getStart(sourceFile), end: last(targetRange.range).getEnd() } : targetRange.range;
@@ -200579,19 +200579,19 @@ ${options.prefix}` : "\n" : options.prefix
         }
         const set = /* @__PURE__ */ new Map();
         let unique = 0;
-        for (const v of arr1) {
-          if (set.get(v) !== true) {
-            set.set(v, true);
+        for (const v2 of arr1) {
+          if (set.get(v2) !== true) {
+            set.set(v2, true);
             unique++;
           }
         }
-        for (const v of arr2) {
-          const isSet = set.get(v);
+        for (const v2 of arr2) {
+          const isSet = set.get(v2);
           if (isSet === void 0) {
             return false;
           }
           if (isSet === true) {
-            set.set(v, false);
+            set.set(v2, false);
             unique--;
           }
         }
@@ -211969,10 +211969,10 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
       }
     })({ get exports() {
       return ts;
-    }, set exports(v) {
-      ts = v;
+    }, set exports(v2) {
+      ts = v2;
       if (typeof module2 !== "undefined" && module2.exports) {
-        module2.exports = v;
+        module2.exports = v2;
       }
     } });
   }
@@ -212120,17 +212120,19 @@ var require_commonjs2 = __commonJS({
     }
     function expand_(str, max, isTop) {
       const expansions = [];
-      const m2 = (0, balanced_match_1.balanced)("{", "}", str);
-      if (!m2)
-        return [str];
-      const pre = m2.pre;
-      const post = m2.post.length ? expand_(m2.post, max, false) : [""];
-      if (/\$$/.test(m2.pre)) {
-        for (let k3 = 0; k3 < post.length && k3 < max; k3++) {
-          const expansion = pre + "{" + m2.body + "}" + post[k3];
-          expansions.push(expansion);
+      for (; ; ) {
+        const m2 = (0, balanced_match_1.balanced)("{", "}", str);
+        if (!m2)
+          return [str];
+        const pre = m2.pre;
+        if (/\$$/.test(m2.pre)) {
+          const post2 = m2.post.length ? expand_(m2.post, max, false) : [""];
+          for (let k3 = 0; k3 < post2.length && k3 < max; k3++) {
+            const expansion = pre + "{" + m2.body + "}" + post2[k3];
+            expansions.push(expansion);
+          }
+          return expansions;
         }
-      } else {
         const isNumericSequence = /^-?\d+\.\.-?\d+(?:\.\.-?\d+)?$/.test(m2.body);
         const isAlphaSequence = /^[a-zA-Z]\.\.[a-zA-Z](?:\.\.-?\d+)?$/.test(m2.body);
         const isSequence = isNumericSequence || isAlphaSequence;
@@ -212138,10 +212140,12 @@ var require_commonjs2 = __commonJS({
         if (!isSequence && !isOptions) {
           if (m2.post.match(/,(?!,).*\}/)) {
             str = m2.pre + "{" + m2.body + escClose + m2.post;
-            return expand_(str, max, true);
+            isTop = true;
+            continue;
           }
           return [str];
         }
+        const post = m2.post.length ? expand_(m2.post, max, false) : [""];
         let n;
         if (isSequence) {
           n = m2.body.split(/\.\./);
@@ -212205,8 +212209,8 @@ var require_commonjs2 = __commonJS({
             }
           }
         }
+        return expansions;
       }
-      return expansions;
     }
   }
 });
@@ -214992,10 +214996,10 @@ var require_fill_range = __commonJS({
       let negatives = "";
       let result;
       if (parts.positives.length) {
-        positives = parts.positives.map((v) => toMaxLen(String(v), maxLen)).join("|");
+        positives = parts.positives.map((v2) => toMaxLen(String(v2), maxLen)).join("|");
       }
       if (parts.negatives.length) {
-        negatives = `-(${prefix2}${parts.negatives.map((v) => toMaxLen(String(v), maxLen)).join("|")})`;
+        negatives = `-(${prefix2}${parts.negatives.map((v2) => toMaxLen(String(v2), maxLen)).join("|")})`;
       }
       if (positives && negatives) {
         result = `${positives}|${negatives}`;
@@ -216301,7 +216305,7 @@ var require_parse2 = __commonJS({
       try {
         new RegExp(value);
       } catch (ex) {
-        return args.map((v) => utils.escapeRegex(v)).join("..");
+        return args.map((v2) => utils.escapeRegex(v2)).join("..");
       }
       return value;
     };
@@ -217441,10 +217445,10 @@ var require_micromatch = __commonJS({
     var braces = require_braces();
     var picomatch = require_picomatch2();
     var utils = require_utils2();
-    var isEmptyString = (v) => v === "" || v === "./";
-    var hasBraces = (v) => {
-      const index = v.indexOf("{");
-      return index > -1 && v.indexOf("}", index) > -1;
+    var isEmptyString = (v2) => v2 === "" || v2 === "./";
+    var hasBraces = (v2) => {
+      const index = v2.indexOf("{");
+      return index > -1 && v2.indexOf("}", index) > -1;
     };
     var micromatch = (list, patterns, options) => {
       patterns = [].concat(patterns);
@@ -217564,7 +217568,7 @@ var require_micromatch = __commonJS({
       let regex = picomatch.makeRe(String(glob), { ...options, capture: true });
       let match = regex.exec(posix ? utils.toPosixSlashes(input) : input);
       if (match) {
-        return match.slice(1).map((v) => v === void 0 ? "" : v);
+        return match.slice(1).map((v2) => v2 === void 0 ? "" : v2);
       }
     };
     micromatch.makeRe = (...args) => picomatch.makeRe(...args);
@@ -256143,7 +256147,7 @@ var require_ts_morph = __commonJS({
         errors: result.errors.map((error) => new Diagnostic(void 0, error))
       };
     }
-    var [tsMajor, tsMinor, tsPatch] = common.ts.version.split(".").map((v) => parseInt(v, 10));
+    var [tsMajor, tsMinor, tsPatch] = common.ts.version.split(".").map((v2) => parseInt(v2, 10));
     var WriterUtils = class {
       constructor() {
       }
@@ -276124,6 +276128,7 @@ var import_node_process = require("process");
 var g = __toESM(require("readline"), 1);
 var import_node_readline = __toESM(require("readline"), 1);
 var import_node_stream = require("stream");
+var import_picocolors = __toESM(require_picocolors(), 1);
 function DD({ onlyFirst: e2 = false } = {}) {
   const t = ["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?(?:\\u0007|\\u001B\\u005C|\\u009C))", "(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-nq-uy=><~]))"].join("|");
   return new RegExp(t, e2 ? void 0 : "g");
@@ -276492,10 +276497,26 @@ var LD = class extends x {
     this.value = this._value.value;
   }
 };
+var RD = class extends x {
+  get valueWithCursor() {
+    if (this.state === "submit") return this.value;
+    if (this.cursor >= this.value.length) return `${this.value}\u2588`;
+    const u2 = this.value.slice(0, this.cursor), [t, ...F2] = this.value.slice(this.cursor);
+    return `${u2}${import_picocolors.default.inverse(t)}${F2.join("")}`;
+  }
+  get cursor() {
+    return this._cursor;
+  }
+  constructor(u2) {
+    super(u2), this.on("finalize", () => {
+      this.value || (this.value = u2.defaultValue);
+    });
+  }
+};
 
 // node_modules/@clack/prompts/dist/index.mjs
 var import_node_process2 = __toESM(require("process"), 1);
-var import_picocolors = __toESM(require_picocolors(), 1);
+var import_picocolors2 = __toESM(require_picocolors(), 1);
 var import_sisteransi2 = __toESM(require_src(), 1);
 function ce() {
   return import_node_process2.default.platform !== "win32" ? import_node_process2.default.env.TERM !== "linux" : !!import_node_process2.default.env.CI || !!import_node_process2.default.env.WT_SESSION || !!import_node_process2.default.env.TERMINUS_SUBLIME || import_node_process2.default.env.ConEmuTask === "{cmd::Cmder}" || import_node_process2.default.env.TERM_PROGRAM === "Terminus-Sublime" || import_node_process2.default.env.TERM_PROGRAM === "vscode" || import_node_process2.default.env.TERM === "xterm-256color" || import_node_process2.default.env.TERM === "alacritty" || import_node_process2.default.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
@@ -276527,13 +276548,13 @@ var b2 = (t) => {
   switch (t) {
     case "initial":
     case "active":
-      return import_picocolors.default.cyan(le);
+      return import_picocolors2.default.cyan(le);
     case "cancel":
-      return import_picocolors.default.red(L2);
+      return import_picocolors2.default.red(L2);
     case "error":
-      return import_picocolors.default.yellow(W2);
+      return import_picocolors2.default.yellow(W2);
     case "submit":
-      return import_picocolors.default.green(C);
+      return import_picocolors2.default.green(C);
   }
 };
 var G2 = (t) => {
@@ -276541,26 +276562,47 @@ var G2 = (t) => {
   let l2 = 0;
   n >= l2 + a - 3 ? l2 = Math.max(Math.min(n - a + 3, r2.length - a), 0) : n < l2 + 2 && (l2 = Math.max(n - 2, 0));
   const $2 = a < r2.length && l2 > 0, g2 = a < r2.length && l2 + a < r2.length;
-  return r2.slice(l2, l2 + a).map((p2, v, f) => {
-    const j2 = v === 0 && $2, E = v === f.length - 1 && g2;
-    return j2 || E ? import_picocolors.default.dim("...") : i(p2, v + l2 === n);
+  return r2.slice(l2, l2 + a).map((p2, v2, f) => {
+    const j2 = v2 === 0 && $2, E = v2 === f.length - 1 && g2;
+    return j2 || E ? import_picocolors2.default.dim("...") : i(p2, v2 + l2 === n);
   });
 };
+var he = (t) => new RD({ validate: t.validate, placeholder: t.placeholder, defaultValue: t.defaultValue, initialValue: t.initialValue, render() {
+  const n = `${import_picocolors2.default.gray(o)}
+${b2(this.state)}  ${t.message}
+`, r2 = t.placeholder ? import_picocolors2.default.inverse(t.placeholder[0]) + import_picocolors2.default.dim(t.placeholder.slice(1)) : import_picocolors2.default.inverse(import_picocolors2.default.hidden("_")), i = this.value ? this.valueWithCursor : r2;
+  switch (this.state) {
+    case "error":
+      return `${n.trim()}
+${import_picocolors2.default.yellow(o)}  ${i}
+${import_picocolors2.default.yellow(d2)}  ${import_picocolors2.default.yellow(this.error)}
+`;
+    case "submit":
+      return `${n}${import_picocolors2.default.gray(o)}  ${import_picocolors2.default.dim(this.value || t.placeholder)}`;
+    case "cancel":
+      return `${n}${import_picocolors2.default.gray(o)}  ${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(this.value ?? ""))}${this.value?.trim() ? `
+${import_picocolors2.default.gray(o)}` : ""}`;
+    default:
+      return `${n}${import_picocolors2.default.cyan(o)}  ${i}
+${import_picocolors2.default.cyan(d2)}
+`;
+  }
+} }).prompt();
 var ye = (t) => {
   const n = t.active ?? "Yes", r2 = t.inactive ?? "No";
   return new dD({ active: n, inactive: r2, initialValue: t.initialValue ?? true, render() {
-    const i = `${import_picocolors.default.gray(o)}
+    const i = `${import_picocolors2.default.gray(o)}
 ${b2(this.state)}  ${t.message}
 `, s = this.value ? n : r2;
     switch (this.state) {
       case "submit":
-        return `${i}${import_picocolors.default.gray(o)}  ${import_picocolors.default.dim(s)}`;
+        return `${i}${import_picocolors2.default.gray(o)}  ${import_picocolors2.default.dim(s)}`;
       case "cancel":
-        return `${i}${import_picocolors.default.gray(o)}  ${import_picocolors.default.strikethrough(import_picocolors.default.dim(s))}
-${import_picocolors.default.gray(o)}`;
+        return `${i}${import_picocolors2.default.gray(o)}  ${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(s))}
+${import_picocolors2.default.gray(o)}`;
       default:
-        return `${i}${import_picocolors.default.cyan(o)}  ${this.value ? `${import_picocolors.default.green(k2)} ${n}` : `${import_picocolors.default.dim(P2)} ${import_picocolors.default.dim(n)}`} ${import_picocolors.default.dim("/")} ${this.value ? `${import_picocolors.default.dim(P2)} ${import_picocolors.default.dim(r2)}` : `${import_picocolors.default.green(k2)} ${r2}`}
-${import_picocolors.default.cyan(d2)}
+        return `${i}${import_picocolors2.default.cyan(o)}  ${this.value ? `${import_picocolors2.default.green(k2)} ${n}` : `${import_picocolors2.default.dim(P2)} ${import_picocolors2.default.dim(n)}`} ${import_picocolors2.default.dim("/")} ${this.value ? `${import_picocolors2.default.dim(P2)} ${import_picocolors2.default.dim(r2)}` : `${import_picocolors2.default.green(k2)} ${r2}`}
+${import_picocolors2.default.cyan(d2)}
 `;
     }
   } }).prompt();
@@ -276570,29 +276612,29 @@ var ve = (t) => {
     const s = r2.label ?? String(r2.value);
     switch (i) {
       case "selected":
-        return `${import_picocolors.default.dim(s)}`;
+        return `${import_picocolors2.default.dim(s)}`;
       case "active":
-        return `${import_picocolors.default.green(k2)} ${s} ${r2.hint ? import_picocolors.default.dim(`(${r2.hint})`) : ""}`;
+        return `${import_picocolors2.default.green(k2)} ${s} ${r2.hint ? import_picocolors2.default.dim(`(${r2.hint})`) : ""}`;
       case "cancelled":
-        return `${import_picocolors.default.strikethrough(import_picocolors.default.dim(s))}`;
+        return `${import_picocolors2.default.strikethrough(import_picocolors2.default.dim(s))}`;
       default:
-        return `${import_picocolors.default.dim(P2)} ${import_picocolors.default.dim(s)}`;
+        return `${import_picocolors2.default.dim(P2)} ${import_picocolors2.default.dim(s)}`;
     }
   };
   return new LD({ options: t.options, initialValue: t.initialValue, render() {
-    const r2 = `${import_picocolors.default.gray(o)}
+    const r2 = `${import_picocolors2.default.gray(o)}
 ${b2(this.state)}  ${t.message}
 `;
     switch (this.state) {
       case "submit":
-        return `${r2}${import_picocolors.default.gray(o)}  ${n(this.options[this.cursor], "selected")}`;
+        return `${r2}${import_picocolors2.default.gray(o)}  ${n(this.options[this.cursor], "selected")}`;
       case "cancel":
-        return `${r2}${import_picocolors.default.gray(o)}  ${n(this.options[this.cursor], "cancelled")}
-${import_picocolors.default.gray(o)}`;
+        return `${r2}${import_picocolors2.default.gray(o)}  ${n(this.options[this.cursor], "cancelled")}
+${import_picocolors2.default.gray(o)}`;
       default:
-        return `${r2}${import_picocolors.default.cyan(o)}  ${G2({ cursor: this.cursor, options: this.options, maxItems: t.maxItems, style: (i, s) => n(i, s ? "active" : "inactive") }).join(`
-${import_picocolors.default.cyan(o)}  `)}
-${import_picocolors.default.cyan(d2)}
+        return `${r2}${import_picocolors2.default.cyan(o)}  ${G2({ cursor: this.cursor, options: this.options, maxItems: t.maxItems, style: (i, s) => n(i, s ? "active" : "inactive") }).join(`
+${import_picocolors2.default.cyan(o)}  `)}
+${import_picocolors2.default.cyan(d2)}
 `;
     }
   } }).prompt();
@@ -276604,63 +276646,63 @@ ${t}
 `), i = (0, import_node_util.stripVTControlCharacters)(n).length, s = Math.max(r2.reduce((a, l2) => {
     const $2 = (0, import_node_util.stripVTControlCharacters)(l2);
     return $2.length > a ? $2.length : a;
-  }, 0), i) + 2, c = r2.map((a) => `${import_picocolors.default.gray(o)}  ${import_picocolors.default.dim(a)}${" ".repeat(s - (0, import_node_util.stripVTControlCharacters)(a).length)}${import_picocolors.default.gray(o)}`).join(`
+  }, 0), i) + 2, c = r2.map((a) => `${import_picocolors2.default.gray(o)}  ${import_picocolors2.default.dim(a)}${" ".repeat(s - (0, import_node_util.stripVTControlCharacters)(a).length)}${import_picocolors2.default.gray(o)}`).join(`
 `);
-  process.stdout.write(`${import_picocolors.default.gray(o)}
-${import_picocolors.default.green(C)}  ${import_picocolors.default.reset(n)} ${import_picocolors.default.gray(_2.repeat(Math.max(s - i - 1, 1)) + me)}
+  process.stdout.write(`${import_picocolors2.default.gray(o)}
+${import_picocolors2.default.green(C)}  ${import_picocolors2.default.reset(n)} ${import_picocolors2.default.gray(_2.repeat(Math.max(s - i - 1, 1)) + me)}
 ${c}
-${import_picocolors.default.gray(de + _2.repeat(s + 2) + pe)}
+${import_picocolors2.default.gray(de + _2.repeat(s + 2) + pe)}
 `);
 };
 var xe = (t = "") => {
-  process.stdout.write(`${import_picocolors.default.gray(d2)}  ${import_picocolors.default.red(t)}
+  process.stdout.write(`${import_picocolors2.default.gray(d2)}  ${import_picocolors2.default.red(t)}
 
 `);
 };
 var Ie = (t = "") => {
-  process.stdout.write(`${import_picocolors.default.gray(ue)}  ${t}
+  process.stdout.write(`${import_picocolors2.default.gray(ue)}  ${t}
 `);
 };
 var Se = (t = "") => {
-  process.stdout.write(`${import_picocolors.default.gray(o)}
-${import_picocolors.default.gray(d2)}  ${t}
+  process.stdout.write(`${import_picocolors2.default.gray(o)}
+${import_picocolors2.default.gray(d2)}  ${t}
 
 `);
 };
-var M2 = { message: (t = "", { symbol: n = import_picocolors.default.gray(o) } = {}) => {
-  const r2 = [`${import_picocolors.default.gray(o)}`];
+var M2 = { message: (t = "", { symbol: n = import_picocolors2.default.gray(o) } = {}) => {
+  const r2 = [`${import_picocolors2.default.gray(o)}`];
   if (t) {
     const [i, ...s] = t.split(`
 `);
-    r2.push(`${n}  ${i}`, ...s.map((c) => `${import_picocolors.default.gray(o)}  ${c}`));
+    r2.push(`${n}  ${i}`, ...s.map((c) => `${import_picocolors2.default.gray(o)}  ${c}`));
   }
   process.stdout.write(`${r2.join(`
 `)}
 `);
 }, info: (t) => {
-  M2.message(t, { symbol: import_picocolors.default.blue(q) });
+  M2.message(t, { symbol: import_picocolors2.default.blue(q) });
 }, success: (t) => {
-  M2.message(t, { symbol: import_picocolors.default.green(D) });
+  M2.message(t, { symbol: import_picocolors2.default.green(D) });
 }, step: (t) => {
-  M2.message(t, { symbol: import_picocolors.default.green(C) });
+  M2.message(t, { symbol: import_picocolors2.default.green(C) });
 }, warn: (t) => {
-  M2.message(t, { symbol: import_picocolors.default.yellow(U) });
+  M2.message(t, { symbol: import_picocolors2.default.yellow(U) });
 }, warning: (t) => {
   M2.warn(t);
 }, error: (t) => {
-  M2.message(t, { symbol: import_picocolors.default.red(K2) });
+  M2.message(t, { symbol: import_picocolors2.default.red(K2) });
 } };
-var J2 = `${import_picocolors.default.gray(o)}  `;
+var J2 = `${import_picocolors2.default.gray(o)}  `;
 var Y2 = ({ indicator: t = "dots" } = {}) => {
   const n = V2 ? ["\u25D2", "\u25D0", "\u25D3", "\u25D1"] : ["\u2022", "o", "O", "0"], r2 = V2 ? 80 : 120, i = process.env.CI === "true";
   let s, c, a = false, l2 = "", $2, g2 = performance.now();
   const p2 = (m2) => {
     const h2 = m2 > 1 ? "Something went wrong" : "Canceled";
     a && N2(h2, m2);
-  }, v = () => p2(2), f = () => p2(1), j2 = () => {
-    process.on("uncaughtExceptionMonitor", v), process.on("unhandledRejection", v), process.on("SIGINT", f), process.on("SIGTERM", f), process.on("exit", p2);
+  }, v2 = () => p2(2), f = () => p2(1), j2 = () => {
+    process.on("uncaughtExceptionMonitor", v2), process.on("unhandledRejection", v2), process.on("SIGINT", f), process.on("SIGTERM", f), process.on("exit", p2);
   }, E = () => {
-    process.removeListener("uncaughtExceptionMonitor", v), process.removeListener("unhandledRejection", v), process.removeListener("SIGINT", f), process.removeListener("SIGTERM", f), process.removeListener("exit", p2);
+    process.removeListener("uncaughtExceptionMonitor", v2), process.removeListener("unhandledRejection", v2), process.removeListener("SIGINT", f), process.removeListener("SIGTERM", f), process.removeListener("exit", p2);
   }, B2 = () => {
     if ($2 === void 0) return;
     i && process.stdout.write(`
@@ -276672,13 +276714,13 @@ var Y2 = ({ indicator: t = "dots" } = {}) => {
     const h2 = (performance.now() - m2) / 1e3, w2 = Math.floor(h2 / 60), I2 = Math.floor(h2 % 60);
     return w2 > 0 ? `[${w2}m ${I2}s]` : `[${I2}s]`;
   }, H = (m2 = "") => {
-    a = true, s = fD(), l2 = R2(m2), g2 = performance.now(), process.stdout.write(`${import_picocolors.default.gray(o)}
+    a = true, s = fD(), l2 = R2(m2), g2 = performance.now(), process.stdout.write(`${import_picocolors2.default.gray(o)}
 `);
     let h2 = 0, w2 = 0;
     j2(), c = setInterval(() => {
       if (i && l2 === $2) return;
       B2(), $2 = l2;
-      const I2 = import_picocolors.default.magenta(n[h2]);
+      const I2 = import_picocolors2.default.magenta(n[h2]);
       if (i) process.stdout.write(`${I2}  ${l2}...`);
       else if (t === "timer") process.stdout.write(`${I2}  ${l2} ${O2(g2)}`);
       else {
@@ -276689,7 +276731,7 @@ var Y2 = ({ indicator: t = "dots" } = {}) => {
     }, r2);
   }, N2 = (m2 = "", h2 = 0) => {
     a = false, clearInterval(c), B2();
-    const w2 = h2 === 0 ? import_picocolors.default.green(C) : h2 === 1 ? import_picocolors.default.red(L2) : import_picocolors.default.red(W2);
+    const w2 = h2 === 0 ? import_picocolors2.default.green(C) : h2 === 1 ? import_picocolors2.default.red(L2) : import_picocolors2.default.red(W2);
     l2 = R2(m2 ?? l2), t === "timer" ? process.stdout.write(`${w2}  ${l2} ${O2(g2)}
 `) : process.stdout.write(`${w2}  ${l2}
 `), E(), s();
@@ -276700,10 +276742,10 @@ var Y2 = ({ indicator: t = "dots" } = {}) => {
 };
 
 // src/cli/index.ts
-var import_picocolors19 = __toESM(require_picocolors(), 1);
+var import_picocolors20 = __toESM(require_picocolors(), 1);
 var import_fs12 = require("fs");
 var import_path7 = require("path");
-var import_child_process2 = require("child_process");
+var import_child_process3 = require("child_process");
 
 // src/cli/migrate.ts
 init_cjs_shims();
@@ -277411,7 +277453,7 @@ var ErrorBodyShapeSchema = import_zod4.z.object({
 }).passthrough();
 
 // src/cli/migrate.ts
-var import_picocolors3 = __toESM(require_picocolors(), 1);
+var import_picocolors4 = __toESM(require_picocolors(), 1);
 var import_fs5 = require("fs");
 
 // node_modules/postgres/src/index.js
@@ -277878,7 +277920,7 @@ var fromPascal = (x2) => (x2.slice(0, 1) + x2.slice(1).replace(/([A-Z])/g, "_$1"
 var fromKebab = (x2) => x2.replace(/-/g, "_");
 function createJsonTransform(fn) {
   return function jsonTransform(x2, column) {
-    return typeof x2 === "object" && x2 !== null && (column.type === 114 || column.type === 3802) ? Array.isArray(x2) ? x2.map((x3) => jsonTransform(x3, column)) : Object.entries(x2).reduce((acc, [k3, v]) => Object.assign(acc, { [fn(k3)]: jsonTransform(v, column) }), {}) : x2;
+    return typeof x2 === "object" && x2 !== null && (column.type === 114 || column.type === 3802) ? Array.isArray(x2) ? x2.map((x3) => jsonTransform(x3, column)) : Object.entries(x2).reduce((acc, [k3, v2]) => Object.assign(acc, { [fn(k3)]: jsonTransform(v2, column) }), {}) : x2;
   };
 }
 toCamel.column = { from: toCamel };
@@ -277956,9 +277998,9 @@ init_cjs_shims();
 var size = 256;
 var buffer = Buffer.allocUnsafe(size);
 var messages = "BCcDdEFfHPpQSX".split("").reduce((acc, x2) => {
-  const v = x2.charCodeAt(0);
+  const v2 = x2.charCodeAt(0);
   acc[x2] = () => {
-    buffer[0] = v;
+    buffer[0] = v2;
     b3.i = 5;
     return b3;
   };
@@ -278453,11 +278495,11 @@ function Connection(options, queues = {}, { onopen = noop, onend = noop, onclose
     query.forEachFn ? query.forEachFn(transform.row.from ? transform.row.from(row) : row, result) : result[rows++] = transform.row.from ? transform.row.from(row) : row;
   }
   function ParameterStatus(x2) {
-    const [k3, v] = x2.toString("utf8", 5, x2.length - 1).split(bytes_default.N);
-    backendParameters[k3] = v;
-    if (options.parameters[k3] !== v) {
-      options.parameters[k3] = v;
-      onparameter && onparameter(k3, v);
+    const [k3, v2] = x2.toString("utf8", 5, x2.length - 1).split(bytes_default.N);
+    backendParameters[k3] = v2;
+    if (options.parameters[k3] !== v2) {
+      options.parameters[k3] = v2;
+      onparameter && onparameter(k3, v2);
     }
   }
   function ReadyForQuery(x2) {
@@ -278814,7 +278856,7 @@ function Connection(options, queues = {}, { onopen = noop, onend = noop, onclose
           client_encoding: "UTF8"
         },
         options.connection
-      )).filter(([, v]) => v).map(([k3, v]) => k3 + bytes_default.N + v).join(bytes_default.N)
+      )).filter(([, v2]) => v2).map(([k3, v2]) => k3 + bytes_default.N + v2).join(bytes_default.N)
     ).z(2).end(0);
   }
 }
@@ -278979,7 +279021,7 @@ function Time(x2) {
   return new Date(Date.UTC(2e3, 0, 1) + Number(x2 / BigInt(1e3)));
 }
 function parse(x2, state, parsers2, handle, transform) {
-  const char = (acc, [k3, v]) => (acc[k3.charCodeAt(0)] = v, acc);
+  const char = (acc, [k3, v2]) => (acc[k3.charCodeAt(0)] = v2, acc);
   Object.entries({
     R: (x3) => {
       let i = 1;
@@ -279476,7 +279518,7 @@ function parseOptions(a, b4) {
     connection: {
       application_name: env.PGAPPNAME || "postgres.js",
       ...o2.connection,
-      ...Object.entries(query).reduce((acc, [k3, v]) => (k3 in defaults || (acc[k3] = v), acc), {})
+      ...Object.entries(query).reduce((acc, [k3, v2]) => (k3 in defaults || (acc[k3] = v2), acc), {})
     },
     types: o2.types || {},
     target_session_attrs: tsa(o2, url, env),
@@ -279580,7 +279622,7 @@ var import_source = require("@abloatai/ablo/source");
 
 // src/cli/push.ts
 init_cjs_shims();
-var import_picocolors2 = __toESM(require_picocolors(), 1);
+var import_picocolors3 = __toESM(require_picocolors(), 1);
 
 // src/auth/credentialPolicy.ts
 init_cjs_shims();
@@ -279600,6 +279642,7 @@ function classifyCredentialKind(value) {
 // src/cli/push.ts
 var import_fs4 = require("fs");
 var import_path3 = require("path");
+var import_child_process = require("child_process");
 var import_schema2 = require("@abloatai/ablo/schema");
 
 // src/cli/config.ts
@@ -279630,17 +279673,17 @@ function asKeyEntry(value) {
 }
 function asProfileKeys(value) {
   if (!value || typeof value !== "object") return void 0;
-  const v = value;
-  const sandbox = asKeyEntry(v.sandbox);
-  const production = asKeyEntry(v.production);
+  const v2 = value;
+  const sandbox = asKeyEntry(v2.sandbox);
+  const production = asKeyEntry(v2.production);
   if (!sandbox && !production) return void 0;
   return { ...sandbox ? { sandbox } : {}, ...production ? { production } : {} };
 }
 function asProfileMap(value) {
   if (!value || typeof value !== "object") return {};
   const out = {};
-  for (const [name, v] of Object.entries(value)) {
-    const keys = asProfileKeys(v);
+  for (const [name, v2] of Object.entries(value)) {
+    const keys = asProfileKeys(v2);
     if (keys) out[name] = keys;
   }
   return out;
@@ -279656,8 +279699,8 @@ function readJson(path) {
 }
 function asActiveProject(value) {
   if (value && typeof value === "object" && typeof value.id === "string" && typeof value.slug === "string") {
-    const v = value;
-    return { id: v.id, slug: v.slug };
+    const v2 = value;
+    return { id: v2.id, slug: v2.slug };
   }
   return void 0;
 }
@@ -279841,6 +279884,19 @@ function resolvePushPlan() {
   return { flow: mode2, apiKey, source: apiKey ? "stored" : null };
 }
 
+// src/cli/theme.ts
+init_cjs_shims();
+var RESET = "\x1B[0m";
+var PAPER_BG = "\x1B[48;2;250;250;250m";
+var BLACK_FG = "\x1B[38;2;0;0;0m";
+function colorEnabled() {
+  return Boolean(process.stdout.isTTY) && !process.env.NO_COLOR;
+}
+function brand(label = "ablo") {
+  if (!colorEnabled()) return label;
+  return `${PAPER_BG}${BLACK_FG} ${label} ${RESET}`;
+}
+
 // src/cli/push.ts
 function coerceBackfill(raw) {
   if (raw === "true") return true;
@@ -279854,14 +279910,14 @@ var DEFAULT_URL = "https://api.abloatai.com";
 function fmtSignal(s) {
   const sig = s;
   const where = sig.field ? `${sig.model}.${sig.field}` : sig.model;
-  let line = `    \u2022 ${import_picocolors2.default.bold(where ?? "?")} \u2014 ${sig.detail ?? ""}`;
+  let line = `    \u2022 ${import_picocolors3.default.bold(where ?? "?")} \u2014 ${sig.detail ?? ""}`;
   if (sig.shadowed) {
     const env = sig.shadowed.environment ?? "production";
     const ver = sig.shadowed.version != null ? `v${sig.shadowed.version}` : "active";
     const when = sig.shadowed.pushedAt ? new Date(sig.shadowed.pushedAt).toISOString().slice(0, 10) : "unknown date";
     const by = sig.shadowed.pushedBy ? ` by ${sig.shadowed.pushedBy}` : "";
     line += `
-      ${import_picocolors2.default.dim(`\u21B3 baseline: ${env} ${ver}, pushed ${when}${by}`)}`;
+      ${import_picocolors3.default.dim(`\u21B3 baseline: ${env} ${ver}, pushed ${when}${by}`)}`;
   }
   return line;
 }
@@ -279893,6 +279949,9 @@ function parsePushArgs(argv) {
   let exportName = DEFAULT_EXPORT;
   let url = process.env.ABLO_API_URL ?? DEFAULT_URL;
   let force = false;
+  let yes = false;
+  let allowDirty = false;
+  let dryRun = false;
   const renames = [];
   const backfills = [];
   for (let i = 0; i < argv.length; i++) {
@@ -279910,6 +279969,17 @@ function parsePushArgs(argv) {
       case "--force":
         force = true;
         break;
+      case "--yes":
+      case "-y":
+        yes = true;
+        break;
+      case "--allow-dirty":
+        allowDirty = true;
+        break;
+      case "--dry-run":
+      case "--plan":
+        dryRun = true;
+        break;
       case "--rename": {
         const spec = argv[++i] ?? "";
         const [from, to] = spec.split(":");
@@ -279938,13 +280008,13 @@ function parsePushArgs(argv) {
     }
   }
   url = url.replace(/\/+$/, "");
-  return { schemaPath, exportName, url, apiKey: process.env.ABLO_API_KEY, force, renames, backfills };
+  return { schemaPath, exportName, url, apiKey: process.env.ABLO_API_KEY, force, renames, backfills, yes, allowDirty, dryRun };
 }
 async function loadSchema(schemaPath, exportName) {
   const abs = (0, import_path3.resolve)(process.cwd(), schemaPath);
   if (!(0, import_fs4.existsSync)(abs)) {
     throw new AbloValidationError(
-      `schema not found at ${import_picocolors2.default.bold(schemaPath)}. Run ${import_picocolors2.default.bold("npx ablo init")} or pass ${import_picocolors2.default.bold("--schema <path>")}.`,
+      `schema not found at ${import_picocolors3.default.bold(schemaPath)}. Run ${import_picocolors3.default.bold("npx ablo init")} or pass ${import_picocolors3.default.bold("--schema <path>")}.`,
       { code: "cli_invalid_arguments" }
     );
   }
@@ -279955,7 +280025,7 @@ async function loadSchema(schemaPath, exportName) {
   const schema = mod[exportName] ?? nested?.[exportName];
   if (!schema || typeof schema !== "object" || !("models" in schema)) {
     throw new AbloValidationError(
-      `${import_picocolors2.default.bold(schemaPath)} has no \`${exportName}\` export that looks like a Schema. Did you \`export const ${exportName} = defineSchema({ ... })\`?`,
+      `${import_picocolors3.default.bold(schemaPath)} has no \`${exportName}\` export that looks like a Schema. Did you \`export const ${exportName} = defineSchema({ ... })\`?`,
       { code: "cli_invalid_arguments" }
     );
   }
@@ -279964,6 +280034,124 @@ async function loadSchema(schemaPath, exportName) {
 function maskKey(key) {
   return key ? `${key.slice(0, 12)}\u2026` : "(none)";
 }
+function schemaGitState(schemaPath) {
+  try {
+    const out = (0, import_child_process.execFileSync)("git", ["status", "--porcelain", "--", schemaPath], {
+      cwd: process.cwd(),
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    if (out === "") return { dirty: false, untracked: false };
+    return { dirty: true, untracked: out.startsWith("??") };
+  } catch {
+    return null;
+  }
+}
+async function fetchActiveSchema(url, apiKey) {
+  const ctrl = new AbortController();
+  const t = setTimeout(() => ctrl.abort(), 3e3);
+  try {
+    const res = await fetch(`${url}/api/schema`, {
+      headers: { authorization: `Bearer ${apiKey}` },
+      signal: ctrl.signal
+    });
+    if (!res.ok) return null;
+    return await res.json();
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(t);
+  }
+}
+function conflictStr(c) {
+  if (!c) return "";
+  const parts = ["user", "agent", "system"].flatMap((k3) => c[k3] ? [`${k3}:${c[k3]}`] : []);
+  return parts.length ? `{${parts.join(",")}}` : "";
+}
+function localModels(schema) {
+  const json = JSON.parse((0, import_schema2.serializeSchema)(schema));
+  const out = /* @__PURE__ */ new Map();
+  for (const [key, def] of Object.entries(json.models)) out.set(key, conflictStr(def.conflict));
+  return out;
+}
+function printPlan(local, remote) {
+  if (!remote?.models) {
+    console.log(`  ${import_picocolors3.default.dim("plan")}     ${import_picocolors3.default.dim("(deployed schema unavailable \u2014 the server computes the diff on apply)")}
+`);
+    return;
+  }
+  const remoteMap = /* @__PURE__ */ new Map();
+  for (const m2 of remote.models) remoteMap.set(m2.key, conflictStr(m2.conflict));
+  const added = [...local.keys()].filter((k3) => !remoteMap.has(k3));
+  const removed = [...remoteMap.keys()].filter((k3) => !local.has(k3));
+  const changed = [...local.keys()].filter((k3) => remoteMap.has(k3) && remoteMap.get(k3) !== local.get(k3));
+  const verLabel = remote.version != null ? `v${remote.version}` : "active";
+  if (added.length === 0 && removed.length === 0 && changed.length === 0) {
+    console.log(`  ${import_picocolors3.default.dim("plan")}     ${import_picocolors3.default.dim(`no model-level changes vs deployed ${verLabel} (any field changes apply on push)`)}
+`);
+    return;
+  }
+  console.log(`  ${import_picocolors3.default.dim("plan")}     ${import_picocolors3.default.dim(`vs deployed ${verLabel}:`)}`);
+  for (const k3 of added) console.log(`           ${import_picocolors3.default.green(`+ ${k3}`)} ${import_picocolors3.default.dim("(new model)")}`);
+  for (const k3 of changed)
+    console.log(`           ${import_picocolors3.default.yellow(`~ ${k3}`)} ${import_picocolors3.default.dim(`conflict ${remoteMap.get(k3) || "(default)"} \u2192 ${local.get(k3) || "(default)"}`)}`);
+  for (const k3 of removed) console.log(`           ${import_picocolors3.default.red(`- ${k3}`)} ${import_picocolors3.default.dim("(removed \u2014 destructive, needs --force)")}`);
+  console.log("");
+}
+async function confirmPush(args, env) {
+  const isProd = env === "production";
+  const tty = Boolean(process.stdout.isTTY && process.stdin.isTTY);
+  if (isProd && !args.yes) {
+    const git = schemaGitState(args.schemaPath);
+    if (git?.dirty && !args.allowDirty) {
+      console.error(`  ${import_picocolors3.default.red("\u2717")} Refusing to deploy uncommitted schema to ${import_picocolors3.default.red(import_picocolors3.default.bold("production"))}.`);
+      console.error(import_picocolors3.default.dim(`    Commit ${import_picocolors3.default.bold(args.schemaPath)} first, or pass ${import_picocolors3.default.bold("--allow-dirty")} to override.`));
+      process.exit(1);
+    }
+    if (!tty) {
+      console.error(`  ${import_picocolors3.default.red("\u2717")} Refusing to deploy to ${import_picocolors3.default.red(import_picocolors3.default.bold("production"))} non-interactively without confirmation.`);
+      console.error(import_picocolors3.default.dim(`    Re-run with ${import_picocolors3.default.bold("--yes")} to confirm in CI/scripts.`));
+      process.exit(1);
+    }
+    const project = getActiveProject();
+    const expected = project?.slug ?? "production";
+    const typed = await he({
+      message: `This deploys to ${import_picocolors3.default.red(import_picocolors3.default.bold("PRODUCTION"))}. Type ${import_picocolors3.default.bold(expected)} to confirm:`,
+      placeholder: expected
+    });
+    if (pD(typed) || String(typed).trim() !== expected) {
+      xe("Aborted \u2014 confirmation did not match.");
+      process.exit(1);
+    }
+    return;
+  }
+  if (!isProd && !args.yes && tty) {
+    const ok = await ye({ message: `Apply to ${import_picocolors3.default.green("sandbox")}?` });
+    if (pD(ok) || !ok) {
+      xe("Aborted.");
+      process.exit(1);
+    }
+  }
+}
+function printPushTarget(opts) {
+  const env = modeFromKey(opts.apiKey);
+  const envLabel = env === "production" ? import_picocolors3.default.red(import_picocolors3.default.bold("production")) : env === "sandbox" ? import_picocolors3.default.green("sandbox") : import_picocolors3.default.yellow("unknown env");
+  const project = getActiveProject();
+  const projectLabel = project ? `${import_picocolors3.default.bold(project.slug)} ${import_picocolors3.default.dim(`(${project.id})`)}` : `${import_picocolors3.default.bold("default")} ${import_picocolors3.default.dim("(org-default \u2014 `ablo projects use <slug>` to scope)")}`;
+  const cliMode = getMode();
+  const modeNote = env && env !== cliMode ? ` ${import_picocolors3.default.yellow(`(CLI mode is ${cliMode} \u2014 this key targets ${env})`)}` : "";
+  console.log(`
+  ${brand("ablo")} ${import_picocolors3.default.dim("push")} ${import_picocolors3.default.dim("\u2192")} ${envLabel}${modeNote}`);
+  console.log(`  ${import_picocolors3.default.dim("project")}  ${projectLabel}`);
+  console.log(`  ${import_picocolors3.default.dim("target")}   ${import_picocolors3.default.dim(opts.url)}`);
+  console.log(
+    `  ${import_picocolors3.default.dim("key")}      ${maskKey(opts.apiKey)} ${import_picocolors3.default.dim(`(${describeKeySource(opts.keySource)})`)}`
+  );
+  console.log(
+    `  ${import_picocolors3.default.dim("schema")}   ${import_picocolors3.default.bold(opts.schemaPath)} ${import_picocolors3.default.dim(`\xB7 ${opts.modelCount} models \xB7 hash ${opts.hash}`)}
+`
+  );
+}
 function describeKeySource(source) {
   switch (source) {
     case "env":
@@ -279981,7 +280169,7 @@ async function push(argv) {
   try {
     args = parsePushArgs(argv);
   } catch (err) {
-    console.error(import_picocolors2.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors3.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   let keySource = "env";
@@ -279997,26 +280185,44 @@ async function push(argv) {
   }
   if (!args.apiKey) {
     console.error(
-      import_picocolors2.default.red(`  No API key.`) + import_picocolors2.default.dim(
-        ` Run ${import_picocolors2.default.bold("npx ablo login")} for the sandbox dev loop \u2014 or set ${import_picocolors2.default.bold("ABLO_API_KEY")} (${import_picocolors2.default.bold("sk_test_")} = sandbox; ${import_picocolors2.default.bold("sk_live_")} = deliberate production deploy). Mode is currently '${getMode()}'.`
+      import_picocolors3.default.red(`  No API key.`) + import_picocolors3.default.dim(
+        ` Run ${import_picocolors3.default.bold("npx ablo login")} for the sandbox dev loop \u2014 or set ${import_picocolors3.default.bold("ABLO_API_KEY")} (${import_picocolors3.default.bold("sk_test_")} = sandbox; ${import_picocolors3.default.bold("sk_live_")} = deliberate production deploy). Mode is currently '${getMode()}'.`
       )
     );
     process.exit(1);
   }
   const schema = await loadSchema(args.schemaPath, args.exportName);
   const hash = (0, import_schema2.schemaHash)(schema);
-  console.log(
-    `  Pushing ${import_picocolors2.default.bold(args.schemaPath)} ${import_picocolors2.default.dim(`(${Object.keys(schema.models).length} models, hash ${hash})`)} \u2192 ${import_picocolors2.default.dim(args.url)}`
-  );
+  printPushTarget({
+    schemaPath: args.schemaPath,
+    url: args.url,
+    apiKey: args.apiKey,
+    keySource,
+    modelCount: Object.keys(schema.models).length,
+    hash
+  });
+  const remote = await fetchActiveSchema(args.url, args.apiKey);
+  printPlan(localModels(schema), remote);
+  const git = schemaGitState(args.schemaPath);
+  if (git?.dirty) {
+    const what = git.untracked ? "is untracked (not committed)" : "has uncommitted changes";
+    console.log(`  ${import_picocolors3.default.yellow("\u26A0")}  ${import_picocolors3.default.bold(args.schemaPath)} ${what} \u2014 this deploy won't match a git commit.
+`);
+  }
+  if (args.dryRun) {
+    console.log(`  ${import_picocolors3.default.dim("\u25CB")} dry run \u2014 nothing applied. Re-run without ${import_picocolors3.default.bold("--dry-run")} to deploy.`);
+    return;
+  }
+  await confirmPush(args, modeFromKey(args.apiKey));
   const { ok: resOk, status: status2, body, bodyText } = await pushSchema(schema, args);
   if (resOk) {
     if (body.unchanged) {
-      console.log(`  ${import_picocolors2.default.dim("\u25CB")} No changes \u2014 schema already active (v${body.version}).`);
+      console.log(`  ${import_picocolors3.default.dim("\u25CB")} No changes \u2014 schema already active (v${body.version}).`);
     } else {
-      console.log(`  ${import_picocolors2.default.green("\u2713")} Activated ${import_picocolors2.default.bold(`v${body.version}`)} ${import_picocolors2.default.dim(`(hash ${body.hash})`)}`);
+      console.log(`  ${import_picocolors3.default.green("\u2713")} Activated ${import_picocolors3.default.bold(`v${body.version}`)} ${import_picocolors3.default.dim(`(hash ${body.hash})`)}`);
       if (Array.isArray(body.warnings) && body.warnings.length > 0) {
-        console.log(import_picocolors2.default.yellow(`  Applied ${body.warnings.length} destructive change(s):`));
-        for (const w2 of body.warnings) console.log(import_picocolors2.default.yellow(fmtSignal(w2)));
+        console.log(import_picocolors3.default.yellow(`  Applied ${body.warnings.length} destructive change(s):`));
+        for (const w2 of body.warnings) console.log(import_picocolors3.default.yellow(fmtSignal(w2)));
       }
     }
     return;
@@ -280024,63 +280230,69 @@ async function push(argv) {
   if (status2 === 409) {
     const unexecutable = Array.isArray(body.unexecutable) ? body.unexecutable : [];
     const warnings = Array.isArray(body.warnings) ? body.warnings : [];
-    console.error(import_picocolors2.default.red("  Incompatible change \u2014 this push is not safe to apply as-is."));
+    console.error(import_picocolors3.default.red("  Incompatible change \u2014 this push is not safe to apply as-is."));
     if (unexecutable.length > 0) {
-      console.error(import_picocolors2.default.red(`  Unexecutable (would fail on existing rows):`));
-      for (const u2 of unexecutable) console.error(import_picocolors2.default.red(fmtSignal(u2)));
+      console.error(import_picocolors3.default.red(`  Unexecutable (would fail on existing rows):`));
+      for (const u2 of unexecutable) console.error(import_picocolors3.default.red(fmtSignal(u2)));
     }
     if (warnings.length > 0) {
-      console.error(import_picocolors2.default.yellow(`  Destructive (data loss):`));
-      for (const w2 of warnings) console.error(import_picocolors2.default.yellow(fmtSignal(w2)));
+      console.error(import_picocolors3.default.yellow(`  Destructive (data loss):`));
+      for (const w2 of warnings) console.error(import_picocolors3.default.yellow(fmtSignal(w2)));
     }
     const hasShadowed = [...unexecutable, ...warnings].some(
       (s) => s.shadowed != null
     );
     if (hasShadowed) {
       console.error(
-        import_picocolors2.default.dim(
+        import_picocolors3.default.dim(
           "  These models exist in the baseline above but not in your push. Sandbox readers fall"
         )
       );
       console.error(
-        import_picocolors2.default.dim(
+        import_picocolors3.default.dim(
           "  back to the production schema until you push your own, so applying this drops them."
         )
       );
     }
-    console.error(import_picocolors2.default.dim(`  Re-push with ${import_picocolors2.default.bold("--force")} to override, or use ${import_picocolors2.default.bold("--rename old:new")} if you renamed a model.`));
+    console.error(import_picocolors3.default.dim(`  Re-push with ${import_picocolors3.default.bold("--force")} to override, or use ${import_picocolors3.default.bold("--rename old:new")} if you renamed a model.`));
   } else if (status2 === 403) {
     const code = body.code ?? body.reason;
     const serverMsg = body.message ?? body.reason;
-    console.error(import_picocolors2.default.red(`  Forbidden${code ? ` [${code}]` : ""}: ${serverMsg ?? "permission denied"}`));
-    console.error(import_picocolors2.default.dim(`  Push used ${import_picocolors2.default.bold(maskKey(args.apiKey))} from ${describeKeySource(keySource)}.`));
+    console.error(import_picocolors3.default.red(`  Forbidden${code ? ` [${code}]` : ""}: ${serverMsg ?? "permission denied"}`));
+    console.error(import_picocolors3.default.dim(`  Push used ${import_picocolors3.default.bold(maskKey(args.apiKey))} from ${describeKeySource(keySource)}.`));
     if (code === "database_role_cannot_enforce_rls") {
       console.error(
-        import_picocolors2.default.dim(
-          `  Your database role bypasses row-level security. Run ${import_picocolors2.default.bold("npx ablo migrate")} to create a scoped (NOBYPASSRLS) role and repoint DATABASE_URL, then re-push.`
+        import_picocolors3.default.dim(
+          `  Your database role bypasses row-level security. Run ${import_picocolors3.default.bold("npx ablo migrate")} to create a scoped (NOBYPASSRLS) role and repoint DATABASE_URL, then re-push.`
         )
       );
     } else if (code === "database_tables_unforced_rls") {
       console.error(
-        import_picocolors2.default.dim(
-          `  One or more synced tables don't have FORCE ROW LEVEL SECURITY. Run ${import_picocolors2.default.bold("npx ablo migrate")} to (re)apply the tenant policies, then re-push.`
+        import_picocolors3.default.dim(
+          `  One or more synced tables don't have FORCE ROW LEVEL SECURITY. Run ${import_picocolors3.default.bold("npx ablo migrate")} to (re)apply the tenant policies, then re-push.`
+        )
+      );
+    } else if (code === "capability_scope_denied" || code === "capability_invalid") {
+      console.error(
+        import_picocolors3.default.dim(
+          `  This is a ${import_picocolors3.default.bold("database privilege")} error (Postgres 42501 / row-level security), not a key scope \u2014 a different API key won't help. The role behind this org's database can't write the target. Provision a writable, RLS-scoped role with ${import_picocolors3.default.bold("npx ablo migrate")}, or check the org's database registration. See docs/plans/read-path-logical-replication-vs-hosting.md.`
         )
       );
     } else if (args.apiKey != null && classifyCredentialKind(args.apiKey) === "restricted") {
       console.error(
-        import_picocolors2.default.dim(
-          `  Schema pushes need a SECRET key: ${import_picocolors2.default.bold("sk_test_")} (sandbox dev loop) or a dashboard ${import_picocolors2.default.bold("sk_live_")} (production deploy: ${import_picocolors2.default.bold("ABLO_API_KEY=sk_live_\u2026 npx ablo push")}).`
+        import_picocolors3.default.dim(
+          `  Schema pushes need a SECRET key: ${import_picocolors3.default.bold("sk_test_")} (sandbox dev loop) or a dashboard ${import_picocolors3.default.bold("sk_live_")} (production deploy: ${import_picocolors3.default.bold("ABLO_API_KEY=sk_live_\u2026 npx ablo push")}).`
         )
       );
     } else {
       console.error(
-        import_picocolors2.default.dim(
-          `  This key isn't authorized to push schema (needs ${import_picocolors2.default.bold("schema:push")}). ` + (keySource === "login" ? `It's your stored ${import_picocolors2.default.bold("ablo login")} sandbox key \u2014 a key in ${import_picocolors2.default.bold(".env.local")} or ${import_picocolors2.default.bold("ABLO_API_KEY")} takes precedence, so put a schema:push key there (sandbox ${import_picocolors2.default.bold("sk_test_")} or production ${import_picocolors2.default.bold("sk_live_")}) and re-push. ` : `Use a schema:push key \u2014 a sandbox ${import_picocolors2.default.bold("sk_test_")} or production ${import_picocolors2.default.bold("sk_live_")}. `) + `Manage keys at https://abloatai.com`
+        import_picocolors3.default.dim(
+          `  This key isn't authorized to push schema (needs ${import_picocolors3.default.bold("schema:push")}). ` + (keySource === "login" ? `It's your stored ${import_picocolors3.default.bold("ablo login")} sandbox key \u2014 a key in ${import_picocolors3.default.bold(".env.local")} or ${import_picocolors3.default.bold("ABLO_API_KEY")} takes precedence, so put a schema:push key there (sandbox ${import_picocolors3.default.bold("sk_test_")} or production ${import_picocolors3.default.bold("sk_live_")}) and re-push. ` : `Use a schema:push key \u2014 a sandbox ${import_picocolors3.default.bold("sk_test_")} or production ${import_picocolors3.default.bold("sk_live_")}. `) + `Manage keys at https://abloatai.com`
         )
       );
     }
   } else {
-    console.error(import_picocolors2.default.red(`  Push failed (${status2}): ${body.message ?? body.reason ?? bodyText}`));
+    console.error(import_picocolors3.default.red(`  Push failed (${status2}): ${body.message ?? body.reason ?? bodyText}`));
   }
   process.exit(1);
 }
@@ -280140,8 +280352,8 @@ function planFor(schema, targetSchema = "public") {
 }
 var log = {
   info: (msg, fields) => console.log(`[migrate] ${msg}`, fields),
-  warn: (msg, fields) => console.warn(import_picocolors3.default.yellow(`[migrate] ${msg}`), fields),
-  error: (msg, fields) => console.error(import_picocolors3.default.red(`[migrate] ${msg}`), fields)
+  warn: (msg, fields) => console.warn(import_picocolors4.default.yellow(`[migrate] ${msg}`), fields),
+  error: (msg, fields) => console.error(import_picocolors4.default.red(`[migrate] ${msg}`), fields)
 };
 var PG_LOCK_NOT_AVAILABLE = "55P03";
 var LOCK_TIMEOUT = process.env.ABLO_SCHEMA_LOCK_TIMEOUT ?? process.env.ABLO_DDL_LOCK_TIMEOUT ?? "5s";
@@ -280216,7 +280428,7 @@ async function migrate(argv) {
   try {
     args = parseMigrateArgs(argv);
   } catch (err) {
-    console.error(import_picocolors3.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors4.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const schema = await loadSchema(args.schemaPath, args.exportName);
@@ -280227,11 +280439,11 @@ async function migrate(argv) {
   ].join("\n");
   const totalStatements = plan.statements.length + plan.concurrent.length;
   console.log(
-    `  ${import_picocolors3.default.dim("Schema")} ${import_picocolors3.default.bold(args.schemaPath)} \u2192 ${import_picocolors3.default.dim(`${Object.keys(schema.models).length} models, ${totalStatements} statements`)}`
+    `  ${import_picocolors4.default.dim("Schema")} ${import_picocolors4.default.bold(args.schemaPath)} \u2192 ${import_picocolors4.default.dim(`${Object.keys(schema.models).length} models, ${totalStatements} statements`)}`
   );
   if (args.outputFile) {
     (0, import_fs5.writeFileSync)(args.outputFile, sql + "\n");
-    console.log(`  ${import_picocolors3.default.green("\u2713")} SQL written to ${import_picocolors3.default.bold(args.outputFile)}`);
+    console.log(`  ${import_picocolors4.default.green("\u2713")} SQL written to ${import_picocolors4.default.bold(args.outputFile)}`);
     return;
   }
   if (args.dryRun) {
@@ -280241,7 +280453,7 @@ async function migrate(argv) {
   const dbUrl = readProjectDatabaseUrl();
   if (!dbUrl) {
     console.error(
-      import_picocolors3.default.red(
+      import_picocolors4.default.red(
         "  No DATABASE_URL found (checked process env, .env.local, .env). Set it to apply, or use --dry-run to preview."
       )
     );
@@ -280249,7 +280461,7 @@ async function migrate(argv) {
   }
   try {
     await applyStatements(dbUrl, args.targetSchema, plan.statements, plan.concurrent);
-    console.log(`  ${import_picocolors3.default.green("\u2713")} Migration complete`);
+    console.log(`  ${import_picocolors4.default.green("\u2713")} Migration complete`);
   } catch {
     process.exit(1);
   }
@@ -280257,26 +280469,13 @@ async function migrate(argv) {
 
 // src/cli/connect.ts
 init_cjs_shims();
-var import_picocolors4 = __toESM(require_picocolors(), 1);
-
-// src/cli/theme.ts
-init_cjs_shims();
-var RESET = "\x1B[0m";
-var PAPER_BG = "\x1B[48;2;250;250;250m";
-var BLACK_FG = "\x1B[38;2;0;0;0m";
-function colorEnabled() {
-  return Boolean(process.stdout.isTTY) && !process.env.NO_COLOR;
-}
-function brand(label = "ablo") {
-  if (!colorEnabled()) return label;
-  return `${PAPER_BG}${BLACK_FG} ${label} ${RESET}`;
-}
-
-// src/cli/connect.ts
+var import_picocolors5 = __toESM(require_picocolors(), 1);
 var ABLO_PUBLICATION = "ablo_publication";
 var ABLO_REPLICATION_ROLE = "ablo_replicator";
 function parseConnectArgs(argv) {
   let check2 = false;
+  let register = false;
+  let auditInfra = false;
   let tables = [];
   let role = ABLO_REPLICATION_ROLE;
   for (let i = 0; i < argv.length; i++) {
@@ -280285,6 +280484,12 @@ function parseConnectArgs(argv) {
       case "--check":
         check2 = true;
         break;
+      case "--register":
+        register = true;
+        break;
+      case "--audit-infra":
+        auditInfra = true;
+        break;
       case "--tables": {
         const value = argv[++i] ?? "";
         tables = value.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
@@ -280297,7 +280502,7 @@ function parseConnectArgs(argv) {
         throw new AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
     }
   }
-  return { check: check2, tables, role };
+  return { check: check2, register, auditInfra, tables, role };
 }
 function quoteIdent(id) {
   return `"${id.replace(/"/g, '""')}"`;
@@ -280321,74 +280526,89 @@ function connectSetupSql(input) {
 function printConnectRecipe(args) {
   const sql = connectSetupSql({ tables: args.tables, role: args.role });
   console.log(`
-  ${brand("ablo")} ${import_picocolors4.default.dim("connect")}  ${import_picocolors4.default.dim("logical replication \u2014 the one way to connect a real database")}
+  ${brand("ablo")} ${import_picocolors5.default.dim("connect")}  ${import_picocolors5.default.dim("logical replication \u2014 the read path (your writes stay on your own backend)")}
 `);
   console.log(
-    `  Ablo READS your write-ahead log (WAL) and ${import_picocolors4.default.bold("never")} runs DDL, owns, or migrates your
-  schema. Your app keeps writing through your own backend \u2014 Ablo only tails the changes.
-  Run this once against your Postgres ${import_picocolors4.default.dim("(as a superuser / the DB owner)")}:
+    `  Ablo consumes your write-ahead log (WAL) via logical replication and ${import_picocolors5.default.bold("never")} runs DDL,
+  owns, hosts, or migrates your schema. Your app continues to own the write path \u2014 Ablo tails
+  the changes and serves them as live shapes. Run this once against your Postgres ${import_picocolors5.default.dim("(as a superuser / DB owner)")}:
 `
   );
-  console.log(`  ${import_picocolors4.default.bold("1.")} Enable logical decoding ${import_picocolors4.default.dim("(then RESTART Postgres \u2014 wal_level is not reloadable)")}`);
-  console.log(`       ${import_picocolors4.default.cyan(sql[0])}`);
+  console.log(`  ${import_picocolors5.default.bold("1.")} Enable logical decoding ${import_picocolors5.default.dim("(then RESTART Postgres \u2014 wal_level is not reloadable)")}`);
+  console.log(`       ${import_picocolors5.default.cyan(sql[0])}`);
   console.log(
-    import_picocolors4.default.dim(
-      `       On Amazon RDS / Aurora you can't ALTER SYSTEM: set ${import_picocolors4.default.bold("rds.logical_replication = 1")} in the
+    import_picocolors5.default.dim(
+      `       On Amazon RDS / Aurora you can't ALTER SYSTEM: set ${import_picocolors5.default.bold("rds.logical_replication = 1")} in the
        instance's parameter group instead, then reboot.`
     )
   );
   console.log(`
-  ${import_picocolors4.default.bold("2.")} Publish the tables Ablo should read`);
-  console.log(`       ${import_picocolors4.default.cyan(sql[1])}`);
+  ${import_picocolors5.default.bold("2.")} Publish the tables Ablo should read`);
+  console.log(`       ${import_picocolors5.default.cyan(sql[1])}`);
   if (args.tables.length === 0) {
-    console.log(import_picocolors4.default.dim(`       (Scope it with ${import_picocolors4.default.bold("ablo connect --tables a,b,c")} to publish a subset.)`));
+    console.log(import_picocolors5.default.dim(`       (Scope it with ${import_picocolors5.default.bold("ablo connect --tables a,b,c")} to publish a subset.)`));
   }
   console.log(`
-  ${import_picocolors4.default.bold("3.")} Create a least-privilege replication role ${import_picocolors4.default.dim("(pick your own password)")}`);
-  console.log(`       ${import_picocolors4.default.cyan(sql[2])}`);
-  console.log(`       ${import_picocolors4.default.cyan(sql[3])}`);
-  console.log(`       ${import_picocolors4.default.cyan(sql[4])}`);
+  ${import_picocolors5.default.bold("3.")} Create a least-privilege replication role ${import_picocolors5.default.dim("(pick your own password)")}`);
+  console.log(`       ${import_picocolors5.default.cyan(sql[2])}`);
+  console.log(`       ${import_picocolors5.default.cyan(sql[3])}`);
+  console.log(`       ${import_picocolors5.default.cyan(sql[4])}`);
   console.log(
-    import_picocolors4.default.dim(
+    import_picocolors5.default.dim(
       `       On Amazon RDS, the REPLICATION attribute is granted, not set directly:
-       ${import_picocolors4.default.bold(`GRANT rds_replication TO ${quoteIdent(args.role)};`)}`
+       ${import_picocolors5.default.bold(`GRANT rds_replication TO ${quoteIdent(args.role)};`)}`
     )
   );
   console.log(
     `
-  ${import_picocolors4.default.bold("4.")} Put the role's connection string in ${import_picocolors4.default.bold("DATABASE_URL")}, then verify:
-       ${import_picocolors4.default.cyan("npx ablo connect --check")}
+  ${import_picocolors5.default.bold("4.")} Put the role's connection string in ${import_picocolors5.default.bold("DATABASE_URL")}, then verify:
+       ${import_picocolors5.default.cyan("npx ablo connect --check")}
 `
   );
   console.log(
-    import_picocolors4.default.dim(
-      `  Reminder: Ablo never writes to your database on this path. Provisioning tables with
-  ${import_picocolors4.default.bold("ablo migrate")} is a separate, optional escape hatch \u2014 connecting a real database is this.`
+    import_picocolors5.default.dim(
+      `  Reminder: this is the READ path \u2014 Ablo tails your WAL and never writes to your database.
+  Your writes keep going through your own backend. (Ablo HOSTING your rows, or dialing in via
+  ${import_picocolors5.default.bold("databaseUrl")}, is the deprecated posture \u2014 see the read-path decision doc.)`
     )
   );
   console.log();
 }
+var SYNC_INFRA_RELATIONS = [
+  "sync_deltas",
+  "sync_id_seq",
+  "sync_metadata",
+  "mutation_log"
+];
+var SYNC_INFRA_TYPES = [
+  "participant_kind",
+  "backfill_provenance",
+  "confirmation_state"
+];
 function printCheckItem(item) {
   if (item.ok) {
-    console.log(`  ${import_picocolors4.default.green("\u2713")} ${item.label}`);
+    console.log(`  ${import_picocolors5.default.green("\u2713")} ${item.label}`);
   } else {
-    console.log(`  ${import_picocolors4.default.red("\u2717")} ${item.label}`);
+    console.log(`  ${import_picocolors5.default.red("\u2717")} ${item.label}`);
     if (item.fix) {
-      for (const line of item.fix.split("\n")) console.log(`      ${import_picocolors4.default.red("\u2022")} ${line}`);
+      for (const line of item.fix.split("\n")) console.log(`      ${import_picocolors5.default.red("\u2022")} ${line}`);
     }
   }
 }
 async function probeReadiness(sql, opts = {}) {
   const publication = opts.publication ?? ABLO_PUBLICATION;
   const items = [];
-  const walRows = await sql.unsafe(`SHOW wal_level`);
+  const walRows = await sql.unsafe(
+    `SELECT setting FROM pg_settings WHERE name = 'wal_level'`
+  );
   const walLevel = walRows[0]?.setting ?? "unknown";
   items.push(
-    walLevel === "logical" ? { ok: true, label: `wal_level is ${import_picocolors4.default.bold("logical")}` } : {
+    walLevel === "logical" ? { ok: true, label: `wal_level is ${import_picocolors5.default.bold("logical")}` } : {
       ok: false,
-      label: `wal_level is ${import_picocolors4.default.bold(walLevel)} (need ${import_picocolors4.default.bold("logical")})`,
+      label: `wal_level is ${import_picocolors5.default.bold(walLevel)} (need ${import_picocolors5.default.bold("logical")})`,
       fix: `ALTER SYSTEM SET wal_level = 'logical'; then RESTART Postgres.
-On RDS/Aurora set rds.logical_replication = 1 in the parameter group, then reboot.`
+On RDS/Aurora set rds.logical_replication = 1 in the parameter group, then reboot.
+On Neon enable Logical Replication in the project (Console \u2192 Settings \u2192 Logical Replication, or the API) \u2014 Neon forbids ALTER SYSTEM; the toggle sets wal_level=logical.`
     }
   );
   const pubRows = await sql.unsafe(
@@ -280398,10 +280618,10 @@ On RDS/Aurora set rds.logical_replication = 1 in the parameter group, then reboo
   items.push(
     pubRows.length > 0 ? {
       ok: true,
-      label: `publication ${import_picocolors4.default.bold(publication)} exists ${import_picocolors4.default.dim(pubRows[0].puballtables ? "(all tables)" : "(table subset)")}`
+      label: `publication ${import_picocolors5.default.bold(publication)} exists ${import_picocolors5.default.dim(pubRows[0].puballtables ? "(all tables)" : "(table subset)")}`
     } : {
       ok: false,
-      label: `publication ${import_picocolors4.default.bold(publication)} not found`,
+      label: `publication ${import_picocolors5.default.bold(publication)} not found`,
       fix: `CREATE PUBLICATION ${quoteIdent(publication)} FOR ALL TABLES;`
     }
   );
@@ -280411,9 +280631,9 @@ On RDS/Aurora set rds.logical_replication = 1 in the parameter group, then reboo
   const role = roleRows[0];
   const hasReplication = Boolean(role && (role.rolreplication || role.rolsuper));
   items.push(
-    hasReplication ? { ok: true, label: `DATABASE_URL role can stream replication ${import_picocolors4.default.dim("(REPLICATION)")}` } : {
+    hasReplication ? { ok: true, label: `DATABASE_URL role can stream replication ${import_picocolors5.default.dim("(REPLICATION)")}` } : {
       ok: false,
-      label: `DATABASE_URL role lacks the ${import_picocolors4.default.bold("REPLICATION")} attribute`,
+      label: `DATABASE_URL role lacks the ${import_picocolors5.default.bold("REPLICATION")} attribute`,
       fix: `ALTER ROLE current_user WITH REPLICATION;
 On RDS: GRANT rds_replication TO <your_role>;`
     }
@@ -280449,17 +280669,35 @@ On RDS: GRANT rds_replication TO <your_role>;`
   }
   return items;
 }
-async function runCheck() {
+async function auditTenantSyncInfra(sql) {
+  const artifacts = [];
+  for (const name of SYNC_INFRA_RELATIONS) {
+    const rows = await sql.unsafe(
+      `SELECT to_regclass($1)::text AS reg`,
+      [`public.${name}`]
+    );
+    artifacts.push({ kind: "relation", name, present: rows[0]?.reg != null });
+  }
+  for (const name of SYNC_INFRA_TYPES) {
+    const rows = await sql.unsafe(
+      `SELECT to_regtype($1)::text AS reg`,
+      [`public.${name}`]
+    );
+    artifacts.push({ kind: "type", name, present: rows[0]?.reg != null });
+  }
+  return artifacts;
+}
+function requireDatabaseUrl(verb) {
   const dbUrl = readProjectDatabaseUrl();
   if (!dbUrl) {
     console.error(
-      import_picocolors4.default.red("  No DATABASE_URL found (checked process env, .env.local, .env).") + import_picocolors4.default.dim(` Set it to the Postgres you want Ablo to read, then re-run ${import_picocolors4.default.bold("ablo connect --check")}.`)
+      import_picocolors5.default.red("  No DATABASE_URL found (checked process env, .env.local, .env).") + import_picocolors5.default.dim(` Set it to the Postgres you want Ablo to read, then re-run ${import_picocolors5.default.bold(`ablo connect ${verb}`)}.`)
     );
     process.exit(1);
   }
-  console.log(`
-  ${brand("ablo")} ${import_picocolors4.default.dim("connect --check")}  ${import_picocolors4.default.dim("logical-replication readiness")}
-`);
+  return dbUrl;
+}
+async function probeAndReport(dbUrl) {
   const sql = src_default(dbUrl, { max: 1, prepare: false, onnotice: () => {
   } });
   let items;
@@ -280467,55 +280705,170 @@ async function runCheck() {
     items = await probeReadiness(sql);
   } catch (err) {
     const pg = err ?? {};
-    console.error(import_picocolors4.default.red(`  Couldn't read the database: ${pg.message ?? String(err)}`));
+    console.error(import_picocolors5.default.red(`  Couldn't read the database: ${pg.message ?? String(err)}`));
     await sql.end({ timeout: 2 });
     process.exit(1);
   }
   await sql.end({ timeout: 2 });
   for (const item of items) printCheckItem(item);
-  const failures = items.filter((i) => !i.ok).length;
+  return items.filter((i) => !i.ok).length;
+}
+async function runCheck() {
+  const dbUrl = requireDatabaseUrl("--check");
+  console.log(`
+  ${brand("ablo")} ${import_picocolors5.default.dim("connect --check")}  ${import_picocolors5.default.dim("logical-replication readiness")}
+`);
+  const failures = await probeAndReport(dbUrl);
   console.log();
   if (failures === 0) {
-    console.log(`  ${import_picocolors4.default.green("\u2713")} Ready \u2014 Ablo can connect and tail this database's WAL.
+    console.log(`  ${import_picocolors5.default.green("\u2713")} Ready \u2014 Ablo can connect and tail this database's WAL.
 `);
     process.exit(0);
   }
   console.log(
-    `  ${import_picocolors4.default.red(`${failures} item${failures === 1 ? "" : "s"} to fix`)} ${import_picocolors4.default.dim(`\u2014 apply the fixes above, then re-run ${import_picocolors4.default.bold("ablo connect --check")}.`)}
+    `  ${import_picocolors5.default.red(`${failures} item${failures === 1 ? "" : "s"} to fix`)} ${import_picocolors5.default.dim(`\u2014 apply the fixes above, then re-run ${import_picocolors5.default.bold("ablo connect --check")}.`)}
 `
   );
   process.exit(1);
 }
+async function runRegister() {
+  const dbUrl = requireDatabaseUrl("--register");
+  const apiKey = resolveApiKey();
+  if (!apiKey) {
+    console.error(
+      import_picocolors5.default.red("  Not logged in.") + import_picocolors5.default.dim(` Run ${import_picocolors5.default.bold("ablo login")} (or set ${import_picocolors5.default.bold("ABLO_API_KEY")}) so Ablo knows which project to register this database for.`)
+    );
+    process.exit(1);
+  }
+  console.log(`
+  ${brand("ablo")} ${import_picocolors5.default.dim("connect --register")}  ${import_picocolors5.default.dim("register this database for replication")}
+`);
+  const failures = await probeAndReport(dbUrl);
+  if (failures > 0) {
+    console.log(
+      `
+  ${import_picocolors5.default.red(`${failures} item${failures === 1 ? "" : "s"} to fix`)} ${import_picocolors5.default.dim("\u2014 a database that isn\u2019t replication-ready can\u2019t stream. Fix the above, then re-run.")}
+`
+    );
+    process.exit(1);
+  }
+  const apiUrl2 = (process.env.ABLO_API_URL ?? DEFAULT_URL).replace(/\/+$/, "");
+  let res;
+  try {
+    res = await fetch(`${apiUrl2}/v1/datasources`, {
+      method: "POST",
+      headers: { "content-type": "application/json", authorization: `Bearer ${apiKey}` },
+      body: JSON.stringify({ connectionString: dbUrl })
+    });
+  } catch (err) {
+    console.error(import_picocolors5.default.red(`
+  Couldn't reach ${apiUrl2}: ${err instanceof Error ? err.message : String(err)}
+`));
+    process.exit(1);
+  }
+  if (res.ok) {
+    const body2 = await res.json().catch(() => ({}));
+    console.log(
+      `
+  ${import_picocolors5.default.green("\u2713")} Registered${body2.host ? ` ${import_picocolors5.default.dim(body2.host)}` : ""}${body2.id ? ` ${import_picocolors5.default.dim(`(${body2.id})`)}` : ""} \u2014 Ablo will replicate this database on the next sync.
+`
+    );
+    process.exit(0);
+  }
+  const body = await res.json().catch(() => ({}));
+  const code = body.error?.code;
+  const message = body.error?.message ?? `HTTP ${res.status}`;
+  console.error(import_picocolors5.default.red(`
+  Registration failed: ${message}`));
+  if (code === "forbidden") {
+    console.error(import_picocolors5.default.dim(`  Registering a database needs a ${import_picocolors5.default.bold("secret")} key (sk_\u2026). Run ${import_picocolors5.default.bold("ablo login")} for one.`));
+  } else if (code === "datasource_direct_deprecated") {
+    console.error(
+      import_picocolors5.default.dim(
+        `  This deployment doesn\u2019t accept new connection-string registrations yet. The operator must enable it (${import_picocolors5.default.bold("ABLO_ALLOW_DIRECT_DATASOURCE=true")}) \u2014 see ${import_picocolors5.default.bold("docs/runbooks/connect-customer-database-byo-replication.md")}.`
+      )
+    );
+  } else if (code === "datasource_connection_unsupported") {
+    console.error(
+      import_picocolors5.default.dim(`  This deployment can\u2019t accept connection strings \u2014 use a self-hosted/hosted engine, or the signed endpoint fallback.`)
+    );
+  }
+  console.error();
+  process.exit(1);
+}
+async function runAuditInfra() {
+  const dbUrl = requireDatabaseUrl("--audit-infra");
+  const sql = src_default(dbUrl, { max: 1, prepare: false, onnotice: () => {
+  } });
+  let artifacts;
+  try {
+    artifacts = await auditTenantSyncInfra(sql);
+  } catch (err) {
+    const pg = err ?? {};
+    console.error(import_picocolors5.default.red(`  Couldn't audit the database: ${pg.message ?? String(err)}`));
+    await sql.end({ timeout: 2 });
+    process.exit(1);
+  }
+  await sql.end({ timeout: 2 });
+  console.log(`
+  ${brand("ablo")} ${import_picocolors5.default.dim("connect --audit-infra")}  ${import_picocolors5.default.dim("Stage 5 tenant DB sync-infra audit")}
+`);
+  const present = artifacts.filter((a) => a.present);
+  if (present.length === 0) {
+    console.log(`  ${import_picocolors5.default.green("\u2713")} No deprecated Ablo sync infrastructure found in public.
+`);
+    process.exit(0);
+  }
+  for (const artifact of present) {
+    const label = artifact.kind === "type" ? "type" : "relation";
+    console.log(`  ${import_picocolors5.default.yellow("!")} ${label} ${import_picocolors5.default.bold(`public.${artifact.name}`)} exists`);
+  }
+  console.log(
+    `
+  ${import_picocolors5.default.yellow(`${present.length} artifact${present.length === 1 ? "" : "s"} found`)} ` + import_picocolors5.default.dim("\u2014 do not drop automatically. Confirm the org/environment is log-authoritative, then follow ") + import_picocolors5.default.bold("docs/runbooks/wal-stage5-customer-db-infra-cleanup.md") + import_picocolors5.default.dim(".\n")
+  );
+  process.exit(1);
+}
 async function connect(argv) {
   let args;
   try {
     args = parseConnectArgs(argv);
   } catch (err) {
-    console.error(import_picocolors4.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors5.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (args.check) {
     await runCheck();
     return;
   }
+  if (args.register) {
+    await runRegister();
+    return;
+  }
+  if (args.auditInfra) {
+    await runAuditInfra();
+    return;
+  }
   printConnectRecipe(args);
 }
-var CONNECT_USAGE = `  ablo connect \u2014 connect a real database to Ablo via logical replication (the one way)
+var CONNECT_USAGE = `  ablo connect \u2014 connect your database for the read path, via logical replication
 
-  Ablo READS your WAL and never runs DDL, owns, or migrates your schema. Your app
-  keeps writing through your own backend.
+  The Electric/PowerSync/Zero model: Ablo consumes your WAL via logical replication and
+  never runs DDL, owns, hosts, or migrates your schema. Your app continues to own the write path.
 
   Usage:
     npx ablo connect                      Print the exact setup SQL for your Postgres
     npx ablo connect --tables a,b,c       Publish only these tables (default: all tables)
     npx ablo connect --role <name>        Name the replication role (default: ablo_replicator)
-    npx ablo connect --check              Validate DATABASE_URL is replication-ready`;
+    npx ablo connect --check              Validate DATABASE_URL is replication-ready
+    npx ablo connect --register           Register DATABASE_URL so Ablo replicates it (one self-service step)
+    npx ablo connect --audit-infra        Read-only Stage 5 audit for deprecated Ablo sync tables/types`;
 
 // src/cli/generate.ts
 init_cjs_shims();
 var import_fs6 = require("fs");
 var import_path4 = require("path");
-var import_picocolors5 = __toESM(require_picocolors(), 1);
+var import_picocolors6 = __toESM(require_picocolors(), 1);
 var import_schema4 = require("@abloatai/ablo/schema");
 var DEFAULT_SCHEMA_PATH3 = "ablo/schema.ts";
 var DEFAULT_EXPORT3 = "schema";
@@ -280547,7 +280900,7 @@ async function generate(argv) {
   try {
     args = parseGenerateArgs(argv);
   } catch (err) {
-    console.error(import_picocolors5.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors6.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   let source;
@@ -280556,18 +280909,18 @@ async function generate(argv) {
     const schemaJson = JSON.parse((0, import_schema4.serializeSchema)(schema));
     source = (0, import_schema4.generateTypes)(schemaJson);
   } catch (err) {
-    console.error(import_picocolors5.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors6.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const abs = (0, import_path4.resolve)(process.cwd(), args.out);
   (0, import_fs6.mkdirSync)((0, import_path4.dirname)(abs), { recursive: true });
   (0, import_fs6.writeFileSync)(abs, source);
-  console.log(`  ${import_picocolors5.default.green("\u2713")} Generated types \u2192 ${import_picocolors5.default.bold(args.out)}`);
+  console.log(`  ${import_picocolors6.default.green("\u2713")} Generated types \u2192 ${import_picocolors6.default.bold(args.out)}`);
 }
 
 // src/cli/dev.ts
 init_cjs_shims();
-var import_picocolors6 = __toESM(require_picocolors(), 1);
+var import_picocolors7 = __toESM(require_picocolors(), 1);
 var import_fs7 = require("fs");
 var import_path5 = require("path");
 var import_schema5 = require("@abloatai/ablo/schema");
@@ -280605,25 +280958,25 @@ function classifyKey(apiKey, activeMode) {
   if (!apiKey) {
     return {
       ok: false,
-      reason: `No API key. Run ${import_picocolors6.default.bold("npx ablo login")} for the sandbox dev loop \u2014 or set ${import_picocolors6.default.bold("ABLO_API_KEY")} (${import_picocolors6.default.bold("sk_test_")} = sandbox; ${import_picocolors6.default.bold("sk_live_")} = deliberate production deploy). ` + import_picocolors6.default.dim(`Mode is currently '${activeMode}'.`)
+      reason: `No API key. Run ${import_picocolors7.default.bold("npx ablo login")} for the sandbox dev loop \u2014 or set ${import_picocolors7.default.bold("ABLO_API_KEY")} (${import_picocolors7.default.bold("sk_test_")} = sandbox; ${import_picocolors7.default.bold("sk_live_")} = deliberate production deploy). ` + import_picocolors7.default.dim(`Mode is currently '${activeMode}'.`)
     };
   }
   if (apiKey.startsWith("sk_test_")) return { ok: true };
   if (apiKey.startsWith("sk_live_")) {
     return {
       ok: false,
-      reason: `Production schema deploys run one-shot: ${import_picocolors6.default.bold("ABLO_API_KEY=sk_live_\u2026 npx ablo push")} (or ${import_picocolors6.default.bold("ablo mode production")}). ${import_picocolors6.default.bold("--watch")} is sandbox-only.`
+      reason: `Production schema deploys run one-shot: ${import_picocolors7.default.bold("ABLO_API_KEY=sk_live_\u2026 npx ablo push")} (or ${import_picocolors7.default.bold("ablo mode production")}). ${import_picocolors7.default.bold("--watch")} is sandbox-only.`
     };
   }
   if (classifyCredentialKind(apiKey) === "restricted") {
     return {
       ok: false,
-      reason: `Restricted (${import_picocolors6.default.bold("rk_")}) keys can't push schema. Use a secret key: ${import_picocolors6.default.bold("sk_test_")} for the sandbox dev loop, or ${import_picocolors6.default.bold("sk_live_")} with ${import_picocolors6.default.bold("npx ablo push")} for a production deploy.`
+      reason: `Restricted (${import_picocolors7.default.bold("rk_")}) keys can't push schema. Use a secret key: ${import_picocolors7.default.bold("sk_test_")} for the sandbox dev loop, or ${import_picocolors7.default.bold("sk_live_")} with ${import_picocolors7.default.bold("npx ablo push")} for a production deploy.`
     };
   }
   return {
     ok: false,
-    reason: `${import_picocolors6.default.bold("ABLO_API_KEY")} is not an Ablo key \u2014 expected ${import_picocolors6.default.bold("sk_test_\u2026")} (sandbox) or ${import_picocolors6.default.bold("sk_live_\u2026")} (production deploy via ${import_picocolors6.default.bold("npx ablo push")}).`
+    reason: `${import_picocolors7.default.bold("ABLO_API_KEY")} is not an Ablo key \u2014 expected ${import_picocolors7.default.bold("sk_test_\u2026")} (sandbox) or ${import_picocolors7.default.bold("sk_live_\u2026")} (production deploy via ${import_picocolors7.default.bold("npx ablo push")}).`
   };
 }
 function wireEnvLocal(apiKey, cwd = process.cwd()) {
@@ -280633,19 +280986,19 @@ function wireEnvLocal(apiKey, cwd = process.cwd()) {
   if (!(0, import_fs7.existsSync)(envPath)) {
     (0, import_fs7.writeFileSync)(envPath, `${line}
 `, { mode: 384 });
-    action = `Created ${import_picocolors6.default.bold(".env.local")} with ${import_picocolors6.default.bold("ABLO_API_KEY")}`;
+    action = `Created ${import_picocolors7.default.bold(".env.local")} with ${import_picocolors7.default.bold("ABLO_API_KEY")}`;
   } else {
     const content = (0, import_fs7.readFileSync)(envPath, "utf8");
     const match = content.match(/^ABLO_API_KEY=(.*)$/m);
     if (!match) {
       (0, import_fs7.appendFileSync)(envPath, `${content.endsWith("\n") || content.length === 0 ? "" : "\n"}${line}
 `);
-      action = `Added ${import_picocolors6.default.bold("ABLO_API_KEY")} to ${import_picocolors6.default.bold(".env.local")}`;
+      action = `Added ${import_picocolors7.default.bold("ABLO_API_KEY")} to ${import_picocolors7.default.bold(".env.local")}`;
     } else if (match[1] === apiKey) {
-      action = `${import_picocolors6.default.bold(".env.local")} already has this key`;
+      action = `${import_picocolors7.default.bold(".env.local")} already has this key`;
     } else {
       (0, import_fs7.writeFileSync)(envPath, content.replace(/^ABLO_API_KEY=.*$/m, line));
-      action = `Updated ${import_picocolors6.default.bold("ABLO_API_KEY")} in ${import_picocolors6.default.bold(".env.local")} ${import_picocolors6.default.dim(`(was ${match[1].slice(0, 12)}\u2026)`)}`;
+      action = `Updated ${import_picocolors7.default.bold("ABLO_API_KEY")} in ${import_picocolors7.default.bold(".env.local")} ${import_picocolors7.default.dim(`(was ${match[1].slice(0, 12)}\u2026)`)}`;
     }
   }
   const gitignorePath = (0, import_path5.resolve)(cwd, ".gitignore");
@@ -280659,7 +281012,7 @@ function wireEnvLocal(apiKey, cwd = process.cwd()) {
 `}.env.local
 `
     );
-    gitignoreNote = ` Added ${import_picocolors6.default.bold(".env.local")} to ${import_picocolors6.default.bold(".gitignore")} so the key can't be committed.`;
+    gitignoreNote = ` Added ${import_picocolors7.default.bold(".env.local")} to ${import_picocolors7.default.bold(".gitignore")} so the key can't be committed.`;
   }
   return `${action}.${gitignoreNote}`;
 }
@@ -280674,7 +281027,7 @@ async function runPush(schema, args) {
   if (ok) {
     return {
       ok: true,
-      message: body.unchanged ? `schema unchanged ${import_picocolors6.default.dim(`(v${body.version})`)}` : `schema pushed (sandbox) ${import_picocolors6.default.dim(`(v${body.version}, hash ${body.hash})`)}`
+      message: body.unchanged ? `schema unchanged ${import_picocolors7.default.dim(`(v${body.version})`)}` : `schema pushed (sandbox) ${import_picocolors7.default.dim(`(v${body.version}, hash ${body.hash})`)}`
     };
   }
   if (status2 === 409) {
@@ -280684,33 +281037,33 @@ async function runPush(schema, args) {
       (s) => s.shadowed != null
     );
     const lines = [
-      import_picocolors6.default.bold("Incompatible schema change \u2014 not safe to apply as-is."),
+      import_picocolors7.default.bold("Incompatible schema change \u2014 not safe to apply as-is."),
       "",
-      ...unexecutable.map((u2) => import_picocolors6.default.red(fmtSignal(u2))),
-      ...warnings.map((w2) => import_picocolors6.default.yellow(fmtSignal(w2))),
+      ...unexecutable.map((u2) => import_picocolors7.default.red(fmtSignal(u2))),
+      ...warnings.map((w2) => import_picocolors7.default.yellow(fmtSignal(w2))),
       "",
       ...hasShadowed ? [
-        import_picocolors6.default.dim(
+        import_picocolors7.default.dim(
           "  These models exist in the baseline above but not in your push. Sandbox readers"
         ),
-        import_picocolors6.default.dim(
+        import_picocolors7.default.dim(
           "  fall back to the production schema until you push your own, so applying this drops them."
         ),
         ""
       ] : [],
-      import_picocolors6.default.dim(
-        `  Fix: ${import_picocolors6.default.bold("ablo push --force")} to apply anyway, or ${import_picocolors6.default.bold("--rename old:new")} if you renamed a model.`
+      import_picocolors7.default.dim(
+        `  Fix: ${import_picocolors7.default.bold("ablo push --force")} to apply anyway, or ${import_picocolors7.default.bold("--rename old:new")} if you renamed a model.`
       )
     ];
     return { ok: false, message: lines.join("\n") };
   }
   if (status2 === 403) {
     const serverSays = body.message ?? body.reason;
-    const hint = body.code === "database_role_cannot_enforce_rls" ? `Run ${import_picocolors6.default.bold("npx ablo migrate")} \u2014 it creates the scoped role for you (your DB credential never leaves this machine).` : `Schema authoring needs a ${import_picocolors6.default.bold("sandbox")} key with ${import_picocolors6.default.bold("schema:push")} \u2014 manage keys at ${import_picocolors6.default.cyan("https://abloatai.com")}.`;
+    const hint = body.code === "database_role_cannot_enforce_rls" ? `Run ${import_picocolors7.default.bold("npx ablo migrate")} \u2014 it creates the scoped role for you (your DB credential never leaves this machine).` : `Schema authoring needs a ${import_picocolors7.default.bold("sandbox")} key with ${import_picocolors7.default.bold("schema:push")} \u2014 manage keys at ${import_picocolors7.default.cyan("https://abloatai.com")}.`;
     return {
       ok: false,
       message: `${serverSays ?? "This key can't author schema (missing schema:push scope)."}
-` + import_picocolors6.default.dim(hint)
+` + import_picocolors7.default.dim(hint)
     };
   }
   return { ok: false, message: `Push failed (${status2}): ${body.message ?? body.reason ?? bodyText}` };
@@ -280720,25 +281073,25 @@ async function dev(argv) {
   try {
     args = parseDevArgs(argv);
   } catch (err) {
-    console.error(import_picocolors6.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors7.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (!args.apiKey) args.apiKey = resolveApiKey("sandbox");
   const key = classifyKey(args.apiKey, getMode());
   if (!key.ok) {
-    console.error(import_picocolors6.default.red(`  ${key.reason}`));
+    console.error(import_picocolors7.default.red(`  ${key.reason}`));
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors6.default.dim("push")} ${import_picocolors6.default.dim("(sandbox)")}
+  ${brand("ablo")} ${import_picocolors7.default.dim("push")} ${import_picocolors7.default.dim("(sandbox)")}
 `);
   const schema = await loadSchema(args.schemaPath, args.exportName);
   const modelCount = Object.keys(schema.models).length;
   console.log(
-    `  ${import_picocolors6.default.dim("schema")}  ${import_picocolors6.default.bold(args.schemaPath)} ${import_picocolors6.default.dim(`(${modelCount} models, hash ${(0, import_schema5.schemaHash)(schema)})`)}`
+    `  ${import_picocolors7.default.dim("schema")}  ${import_picocolors7.default.bold(args.schemaPath)} ${import_picocolors7.default.dim(`(${modelCount} models, hash ${(0, import_schema5.schemaHash)(schema)})`)}`
   );
-  console.log(`  ${import_picocolors6.default.dim("key")}     ${args.apiKey.slice(0, 12)}\u2026`);
-  console.log(`  ${import_picocolors6.default.dim("api")}     ${args.url}
+  console.log(`  ${import_picocolors7.default.dim("key")}     ${args.apiKey.slice(0, 12)}\u2026`);
+  console.log(`  ${import_picocolors7.default.dim("api")}     ${args.url}
 `);
   const s = Y2();
   s.start("Pushing schema definition (sandbox)");
@@ -280747,16 +281100,16 @@ async function dev(argv) {
   if (!first.ok) process.exit(1);
   if (process.env.ABLO_API_KEY) {
     console.log(`
-  ${import_picocolors6.default.green("\u2713")} ${import_picocolors6.default.bold("ABLO_API_KEY")} is set in this shell \u2014 the SDK reads it directly.`);
+  ${import_picocolors7.default.green("\u2713")} ${import_picocolors7.default.bold("ABLO_API_KEY")} is set in this shell \u2014 the SDK reads it directly.`);
   } else {
     console.log(`
-  ${import_picocolors6.default.green("\u2713")} ${wireEnvLocal(args.apiKey)}`);
-    console.log(`  ${import_picocolors6.default.dim("Frameworks load it automatically; plain Node: node --env-file=.env.local app.ts")}`);
+  ${import_picocolors7.default.green("\u2713")} ${wireEnvLocal(args.apiKey)}`);
+    console.log(`  ${import_picocolors7.default.dim("Frameworks load it automatically; plain Node: node --env-file=.env.local app.ts")}`);
   }
   console.log(`  Your app is wired for the sandbox.`);
   if (!args.watch) return;
   const abs = (0, import_path5.resolve)(process.cwd(), args.schemaPath);
-  console.log(`  ${import_picocolors6.default.dim(`watching ${args.schemaPath} \u2026 (Ctrl-C to stop)`)}
+  console.log(`  ${import_picocolors7.default.dim(`watching ${args.schemaPath} \u2026 (Ctrl-C to stop)`)}
 `);
   let timer2 = null;
   let pushing = false;
@@ -280776,7 +281129,7 @@ async function dev(argv) {
       const r2 = await runPush(next, args);
       s2.stop(r2.message, r2.ok ? 0 : 1);
     } catch (err) {
-      s2.stop(import_picocolors6.default.red(`schema reload failed: ${err instanceof Error ? err.message : String(err)}`), 1);
+      s2.stop(import_picocolors7.default.red(`schema reload failed: ${err instanceof Error ? err.message : String(err)}`), 1);
     } finally {
       pushing = false;
     }
@@ -280784,7 +281137,7 @@ async function dev(argv) {
   const stop = () => {
     watcher.close();
     console.log(`
-  ${import_picocolors6.default.dim("stopped.")}`);
+  ${import_picocolors7.default.dim("stopped.")}`);
     process.exit(0);
   };
   process.on("SIGINT", stop);
@@ -280795,8 +281148,8 @@ async function dev(argv) {
 
 // src/cli/login.ts
 init_cjs_shims();
-var import_child_process = require("child_process");
-var import_picocolors7 = __toESM(require_picocolors(), 1);
+var import_child_process2 = require("child_process");
+var import_picocolors8 = __toESM(require_picocolors(), 1);
 var CLIENT_ID = "ablo-cli";
 var stripSlash = (u2) => u2.replace(/\/+$/, "");
 var AUTH_URL = stripSlash(process.env.ABLO_AUTH_URL ?? "https://auth.abloatai.com");
@@ -280805,7 +281158,7 @@ var sleep = (ms) => new Promise((r2) => setTimeout(r2, ms));
 function openBrowser(url) {
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   try {
-    const child = (0, import_child_process.spawn)(cmd, [url], { stdio: "ignore", detached: true, shell: process.platform === "win32" });
+    const child = (0, import_child_process2.spawn)(cmd, [url], { stdio: "ignore", detached: true, shell: process.platform === "win32" });
     child.on("error", () => {
     });
     child.unref();
@@ -280854,9 +281207,9 @@ async function deviceLogin(argv, deps = {}) {
   const code = await codeRes.json();
   const approvePath = `/cli?user_code=${code.user_code}`;
   const url = account === "signup" ? `${DASHBOARD_URL}/signup?next=${encodeURIComponent(approvePath)}` : `${DASHBOARD_URL}${approvePath}`;
-  Me(`${import_picocolors7.default.bold(code.user_code)}
+  Me(`${import_picocolors8.default.bold(code.user_code)}
 
-${import_picocolors7.default.dim(url)}`, "Approve in your browser");
+${import_picocolors8.default.dim(url)}`, "Approve in your browser");
   openUrl(url);
   const s = Y2();
   s.start("Waiting for approval\u2026");
@@ -280923,7 +281276,7 @@ ${import_picocolors7.default.dim(url)}`, "Approve in your browser");
     if (reason) M2.error(reason);
     else if (provRes) M2.error(`Key provisioning returned ${provRes.status} from ${DASHBOARD_URL}/api/cli/provision-key.`);
     M2.error(
-      `The browser approval succeeded but the key handoff failed. Try again, or grab a ${import_picocolors7.default.bold("sk_test_")} key from the dashboard and set ${import_picocolors7.default.bold("ABLO_API_KEY")}.`
+      `The browser approval succeeded but the key handoff failed. Try again, or grab a ${import_picocolors8.default.bold("sk_test_")} key from the dashboard and set ${import_picocolors8.default.bold("ABLO_API_KEY")}.`
     );
     process.exit(1);
   }
@@ -280943,9 +281296,9 @@ ${import_picocolors7.default.dim(url)}`, "Approve in your browser");
     { mode: "sandbox", activeProject: prov.project ?? void 0 }
   );
   s.stop(`Saved keys to ${path}`);
-  const where = prov.project ? ` ${import_picocolors7.default.dim(`(project ${prov.project.slug})`)}` : "";
+  const where = prov.project ? ` ${import_picocolors8.default.dim(`(project ${prov.project.slug})`)}` : "";
   Se(
-    `${import_picocolors7.default.green("\u2713")} Logged in ${import_picocolors7.default.dim("(sandbox)")}${where}. Run ${import_picocolors7.default.bold("npx ablo push")} to push your schema.`
+    `${import_picocolors8.default.green("\u2713")} Logged in ${import_picocolors8.default.dim("(sandbox)")}${where}. Run ${import_picocolors8.default.bold("npx ablo push")} to push your schema.`
   );
 }
 async function login(argv = [], deps = {}) {
@@ -280954,20 +281307,20 @@ async function login(argv = [], deps = {}) {
 function logout() {
   const removed = clearCredential();
   if (removed) {
-    console.log(`  ${import_picocolors7.default.green("\u2713")} Logged out ${import_picocolors7.default.dim(`(credentials removed from ${configDir()})`)}`);
+    console.log(`  ${import_picocolors8.default.green("\u2713")} Logged out ${import_picocolors8.default.dim(`(credentials removed from ${configDir()})`)}`);
   } else {
-    console.log(`  ${import_picocolors7.default.dim("\u25CB")} Not logged in \u2014 nothing to remove.`);
+    console.log(`  ${import_picocolors8.default.dim("\u25CB")} Not logged in \u2014 nothing to remove.`);
   }
   if (process.env.ABLO_API_KEY) {
     console.log(
-      import_picocolors7.default.dim(`  Note: ${import_picocolors7.default.bold("ABLO_API_KEY")} is still set in this shell and takes precedence.`)
+      import_picocolors8.default.dim(`  Note: ${import_picocolors8.default.bold("ABLO_API_KEY")} is still set in this shell and takes precedence.`)
     );
   }
 }
 
 // src/cli/mode.ts
 init_cjs_shims();
-var import_picocolors8 = __toESM(require_picocolors(), 1);
+var import_picocolors9 = __toESM(require_picocolors(), 1);
 var PREFIX = { sandbox: "sk_test_", production: "rk_live_" };
 function hintFor(m2, current) {
   const parts = [];
@@ -280977,10 +281330,10 @@ function hintFor(m2, current) {
 }
 function apply(m2) {
   setMode(m2);
-  console.log(`  ${import_picocolors8.default.green("\u2713")} now in ${import_picocolors8.default.bold(m2)}`);
+  console.log(`  ${import_picocolors9.default.green("\u2713")} now in ${import_picocolors9.default.bold(m2)}`);
   if (!getKeyEntry(m2)) {
     console.log(
-      import_picocolors8.default.dim(`  No ${m2} key stored \u2014 run ${import_picocolors8.default.bold("ablo login")} or ${import_picocolors8.default.bold(`ablo login --api-key ${PREFIX[m2]}\u2026`)}.`)
+      import_picocolors9.default.dim(`  No ${m2} key stored \u2014 run ${import_picocolors9.default.bold("ablo login")} or ${import_picocolors9.default.bold(`ablo login --api-key ${PREFIX[m2]}\u2026`)}.`)
     );
   }
 }
@@ -280993,14 +281346,14 @@ async function mode(argv) {
   }
   if (arg) {
     console.error(
-      import_picocolors8.default.red(`  unknown mode: ${arg}`) + import_picocolors8.default.dim(` (expected ${import_picocolors8.default.bold("sandbox")} or ${import_picocolors8.default.bold("production")})`)
+      import_picocolors9.default.red(`  unknown mode: ${arg}`) + import_picocolors9.default.dim(` (expected ${import_picocolors9.default.bold("sandbox")} or ${import_picocolors9.default.bold("production")})`)
     );
     process.exit(1);
   }
   const current = getMode();
   if (!process.stdin.isTTY || process.env.CI) {
     console.error(
-      import_picocolors8.default.red("  `ablo mode` needs an argument without a TTY: ") + import_picocolors8.default.bold("ablo mode sandbox") + import_picocolors8.default.dim(" | ") + import_picocolors8.default.bold("ablo mode production") + import_picocolors8.default.dim(`  (current: ${current})`)
+      import_picocolors9.default.red("  `ablo mode` needs an argument without a TTY: ") + import_picocolors9.default.bold("ablo mode sandbox") + import_picocolors9.default.dim(" | ") + import_picocolors9.default.bold("ablo mode production") + import_picocolors9.default.dim(`  (current: ${current})`)
     );
     process.exit(1);
   }
@@ -281021,7 +281374,7 @@ async function mode(argv) {
 
 // src/cli/projects.ts
 init_cjs_shims();
-var import_picocolors9 = __toESM(require_picocolors(), 1);
+var import_picocolors10 = __toESM(require_picocolors(), 1);
 function apiUrl() {
   return (process.env.ABLO_API_URL ?? DEFAULT_URL).replace(/\/+$/, "");
 }
@@ -281029,8 +281382,8 @@ function requireKey() {
   const apiKey = resolveApiKey();
   if (!apiKey) {
     console.error(
-      import_picocolors9.default.red("  No API key.") + import_picocolors9.default.dim(
-        ` Run ${import_picocolors9.default.bold("npx ablo login")} \u2014 or set ${import_picocolors9.default.bold("ABLO_API_KEY")} (${import_picocolors9.default.bold("sk_test_")} = sandbox; ${import_picocolors9.default.bold("sk_live_")} = production).`
+      import_picocolors10.default.red("  No API key.") + import_picocolors10.default.dim(
+        ` Run ${import_picocolors10.default.bold("npx ablo login")} \u2014 or set ${import_picocolors10.default.bold("ABLO_API_KEY")} (${import_picocolors10.default.bold("sk_test_")} = sandbox; ${import_picocolors10.default.bold("sk_live_")} = production).`
       )
     );
     process.exit(1);
@@ -281065,7 +281418,7 @@ async function listProjects(apiKey) {
 async function fetchProjects() {
   const all = await listProjects(requireKey());
   if (!all) {
-    console.error(import_picocolors9.default.red("  Could not list projects \u2014 is the API reachable and the key valid?"));
+    console.error(import_picocolors10.default.red("  Could not list projects \u2014 is the API reachable and the key valid?"));
     process.exit(1);
   }
   return all;
@@ -281105,10 +281458,10 @@ function printList(projects2) {
   const active = getActiveProject();
   for (const p2 of projects2) {
     const isActive = active ? active.id === p2.id : p2.default;
-    const marker = isActive ? import_picocolors9.default.green("\u25CF") : import_picocolors9.default.dim("\u25CB");
-    const tags = [p2.default ? import_picocolors9.default.dim("default") : "", isActive ? import_picocolors9.default.green("active") : ""].filter(Boolean).join(import_picocolors9.default.dim(", "));
+    const marker = isActive ? import_picocolors10.default.green("\u25CF") : import_picocolors10.default.dim("\u25CB");
+    const tags = [p2.default ? import_picocolors10.default.dim("default") : "", isActive ? import_picocolors10.default.green("active") : ""].filter(Boolean).join(import_picocolors10.default.dim(", "));
     console.log(
-      `  ${marker} ${p2.slug.padEnd(20)} ${import_picocolors9.default.dim(p2.id)}${tags ? `  ${tags}` : ""}`
+      `  ${marker} ${p2.slug.padEnd(20)} ${import_picocolors10.default.dim(p2.id)}${tags ? `  ${tags}` : ""}`
     );
   }
 }
@@ -281116,7 +281469,7 @@ async function projects(argv) {
   const sub = argv[0];
   if (sub === "list" || sub === void 0) {
     console.log(`
-  ${brand("ablo")} ${import_picocolors9.default.dim("projects")}
+  ${brand("ablo")} ${import_picocolors10.default.dim("projects")}
 `);
     printList(await fetchProjects());
     console.log();
@@ -281125,7 +281478,7 @@ async function projects(argv) {
   if (sub === "create") {
     const slug = argv[1];
     if (!slug || slug.startsWith("-")) {
-      console.error(import_picocolors9.default.red('  usage: ablo projects create <slug> [--name "Display Name"]'));
+      console.error(import_picocolors10.default.red('  usage: ablo projects create <slug> [--name "Display Name"]'));
       process.exit(1);
     }
     const nameIdx = argv.indexOf("--name");
@@ -281136,17 +281489,17 @@ async function projects(argv) {
     });
     if (status2 !== 201) {
       console.error(
-        import_picocolors9.default.red(`  Create failed (${status2}): ${String(body.message ?? body.code ?? "")}`)
+        import_picocolors10.default.red(`  Create failed (${status2}): ${String(body.message ?? body.code ?? "")}`)
       );
       if (body.code === "project_slug_taken") {
-        console.error(import_picocolors9.default.dim(`  Pick another slug, or switch to it: ${import_picocolors9.default.bold(`ablo projects use ${slug}`)}`));
+        console.error(import_picocolors10.default.dim(`  Pick another slug, or switch to it: ${import_picocolors10.default.bold(`ablo projects use ${slug}`)}`));
       }
       process.exit(1);
     }
     const created = body;
-    console.log(`  ${import_picocolors9.default.green("\u2713")} Created project ${import_picocolors9.default.bold(created.slug)} ${import_picocolors9.default.dim(`(${created.id})`)}`);
+    console.log(`  ${import_picocolors10.default.green("\u2713")} Created project ${import_picocolors10.default.bold(created.slug)} ${import_picocolors10.default.dim(`(${created.id})`)}`);
     console.log(
-      import_picocolors9.default.dim(`  Make it active with ${import_picocolors9.default.bold(`ablo projects use ${created.slug}`)}; mint its keys in the dashboard.`)
+      import_picocolors10.default.dim(`  Make it active with ${import_picocolors10.default.bold(`ablo projects use ${created.slug}`)}; mint its keys in the dashboard.`)
     );
     return;
   }
@@ -281154,17 +281507,17 @@ async function projects(argv) {
     const ref = argv[1];
     const name = argv.slice(2).join(" ").trim();
     if (!ref || ref.startsWith("-") || !name) {
-      console.error(import_picocolors9.default.red("  usage: ablo projects rename <slug|id> <new name>"));
+      console.error(import_picocolors10.default.red("  usage: ablo projects rename <slug|id> <new name>"));
       process.exit(1);
     }
     const all = await fetchProjects();
     const target = all.find((p2) => p2.slug === ref || p2.id === ref);
     if (!target) {
-      console.error(import_picocolors9.default.red(`  No project "${ref}".`) + import_picocolors9.default.dim(" Run ablo projects list."));
+      console.error(import_picocolors10.default.red(`  No project "${ref}".`) + import_picocolors10.default.dim(" Run ablo projects list."));
       process.exit(1);
     }
     if (target.default) {
-      console.error(import_picocolors9.default.red("  The default project cannot be renamed."));
+      console.error(import_picocolors10.default.red("  The default project cannot be renamed."));
       process.exit(1);
     }
     const { status: status2, body } = await request(`/api/v1/projects/${target.id}`, requireKey(), {
@@ -281173,47 +281526,47 @@ async function projects(argv) {
     });
     if (status2 !== 200) {
       console.error(
-        import_picocolors9.default.red(`  Rename failed (${status2}): ${String(body.message ?? body.code ?? "")}`)
+        import_picocolors10.default.red(`  Rename failed (${status2}): ${String(body.message ?? body.code ?? "")}`)
       );
       process.exit(1);
     }
     const updated = body;
     console.log(
-      `  ${import_picocolors9.default.green("\u2713")} Renamed ${import_picocolors9.default.bold(updated.slug)} \u2192 ${import_picocolors9.default.bold(updated.name ?? updated.slug)} ${import_picocolors9.default.dim(`(${updated.id})`)}`
+      `  ${import_picocolors10.default.green("\u2713")} Renamed ${import_picocolors10.default.bold(updated.slug)} \u2192 ${import_picocolors10.default.bold(updated.name ?? updated.slug)} ${import_picocolors10.default.dim(`(${updated.id})`)}`
     );
     return;
   }
   if (sub === "use") {
     const ref = argv[1];
     if (!ref) {
-      console.error(import_picocolors9.default.red("  usage: ablo projects use <slug|id|default>"));
+      console.error(import_picocolors10.default.red("  usage: ablo projects use <slug|id|default>"));
       process.exit(1);
     }
     const all = await fetchProjects();
     const target = all.find((p2) => p2.slug === ref || p2.id === ref);
     if (!target) {
-      console.error(import_picocolors9.default.red(`  No project "${ref}".`) + import_picocolors9.default.dim(" Run ablo projects list."));
+      console.error(import_picocolors10.default.red(`  No project "${ref}".`) + import_picocolors10.default.dim(" Run ablo projects list."));
       process.exit(1);
     }
     if (target.default) {
       setActiveProject(void 0);
-      console.log(`  ${import_picocolors9.default.green("\u2713")} now targeting the ${import_picocolors9.default.bold("default")} project`);
+      console.log(`  ${import_picocolors10.default.green("\u2713")} now targeting the ${import_picocolors10.default.bold("default")} project`);
     } else {
       setActiveProject({ id: target.id, slug: target.slug });
-      console.log(`  ${import_picocolors9.default.green("\u2713")} now targeting project ${import_picocolors9.default.bold(target.slug)} ${import_picocolors9.default.dim(`(${target.id})`)}`);
+      console.log(`  ${import_picocolors10.default.green("\u2713")} now targeting project ${import_picocolors10.default.bold(target.slug)} ${import_picocolors10.default.dim(`(${target.id})`)}`);
     }
     const guard = guardActiveProjectKey();
     if (!guard.ok) {
       const loginCmd = guard.activeProfile === DEFAULT_PROFILE ? "ablo login" : `ablo login --project ${guard.activeProfile}`;
       console.log(
-        import_picocolors9.default.dim(`  No key stored for this project yet \u2014 run ${import_picocolors9.default.bold(loginCmd)} to mint one.`)
+        import_picocolors10.default.dim(`  No key stored for this project yet \u2014 run ${import_picocolors10.default.bold(loginCmd)} to mint one.`)
       );
     }
     return;
   }
   console.error(
-    import_picocolors9.default.red(`  unknown subcommand: ${sub}`) + import_picocolors9.default.dim(
-      ` (expected ${import_picocolors9.default.bold("list")}, ${import_picocolors9.default.bold("create")}, ${import_picocolors9.default.bold("rename")}, or ${import_picocolors9.default.bold("use")})`
+    import_picocolors10.default.red(`  unknown subcommand: ${sub}`) + import_picocolors10.default.dim(
+      ` (expected ${import_picocolors10.default.bold("list")}, ${import_picocolors10.default.bold("create")}, ${import_picocolors10.default.bold("rename")}, or ${import_picocolors10.default.bold("use")})`
     )
   );
   process.exit(1);
@@ -281221,13 +281574,13 @@ async function projects(argv) {
 
 // src/cli/status.ts
 init_cjs_shims();
-var import_picocolors10 = __toESM(require_picocolors(), 1);
+var import_picocolors11 = __toESM(require_picocolors(), 1);
 function expiryLabel(iso) {
   const ms = Date.parse(iso) - Date.now();
   if (Number.isNaN(ms)) return "";
-  if (ms <= 0) return import_picocolors10.default.red("expired");
+  if (ms <= 0) return import_picocolors11.default.red("expired");
   const days = Math.floor(ms / (24 * 60 * 60 * 1e3));
-  return import_picocolors10.default.dim(days > 0 ? `expires in ${days}d` : "expires <1d");
+  return import_picocolors11.default.dim(days > 0 ? `expires in ${days}d` : "expires <1d");
 }
 async function ping(apiUrl2) {
   const ctrl = new AbortController();
@@ -281258,6 +281611,45 @@ async function fetchPushedSchema(apiUrl2, apiKey) {
     clearTimeout(t);
   }
 }
+async function sampleRead(apiUrl2, apiKey, modelTypename, n) {
+  const ctrl = new AbortController();
+  const t = setTimeout(() => ctrl.abort(), 4e3);
+  try {
+    const res = await fetch(
+      `${apiUrl2}/v1/models/${encodeURIComponent(modelTypename)}/__ablo_health_probe_${n}__`,
+      { headers: { authorization: `Bearer ${apiKey}` }, signal: ctrl.signal }
+    );
+    if (res.ok) return "routed";
+    let code;
+    try {
+      const body = await res.json();
+      code = body.code ?? body.error?.code;
+    } catch {
+    }
+    if (code === "entity_not_found") return "routed";
+    if (code === "tenant_routing_failed") return "no_route";
+    if (res.status === 401 || res.status === 403) return { forbidden: code };
+    return { other: `${res.status}${code ? ` ${code}` : ""}` };
+  } catch {
+    return { other: "unreachable" };
+  } finally {
+    clearTimeout(t);
+  }
+}
+async function probeDataPlane(apiUrl2, apiKey, modelTypename) {
+  if (!apiKey) return { status: "skipped" };
+  const samples = [];
+  for (let i = 0; i < 3; i++) samples.push(await sampleRead(apiUrl2, apiKey, modelTypename, i));
+  const forbidden = samples.find((s) => typeof s === "object" && "forbidden" in s);
+  if (forbidden) return { status: "forbidden", detail: forbidden.forbidden };
+  const routed = samples.filter((s) => s === "routed").length;
+  const noRoute = samples.filter((s) => s === "no_route").length;
+  if (routed === samples.length) return { status: "ok" };
+  if (noRoute === samples.length) return { status: "no_database" };
+  if (routed > 0 && noRoute > 0) return { status: "intermittent", ok: routed, failed: noRoute };
+  const other = samples.find((s) => typeof s === "object" && "other" in s);
+  return { status: "unknown", detail: other?.other ?? "inconclusive" };
+}
 function formatConflict(conflict) {
   if (!conflict) return "";
   const parts = ["user", "agent", "system"].flatMap((k3) => conflict[k3] ? [`${k3}:${conflict[k3]}`] : []);
@@ -281309,59 +281701,81 @@ async function status(args = []) {
     return;
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors10.default.dim("status")}
+  ${brand("ablo")} ${import_picocolors11.default.dim("status")}
 `);
   if (process.env.ABLO_API_KEY) {
     console.log(
-      `  ${import_picocolors10.default.dim("key")}     ${process.env.ABLO_API_KEY.slice(0, 12)}\u2026 ${import_picocolors10.default.dim("(ABLO_API_KEY env \u2014 overrides stored)")}`
+      `  ${import_picocolors11.default.dim("key")}     ${process.env.ABLO_API_KEY.slice(0, 12)}\u2026 ${import_picocolors11.default.dim("(ABLO_API_KEY env \u2014 overrides stored)")}`
     );
   } else if (!cfg) {
-    console.log(`  ${import_picocolors10.default.yellow("!")} Not logged in \u2014 run ${import_picocolors10.default.bold("ablo login")}.`);
+    console.log(`  ${import_picocolors11.default.yellow("!")} Not logged in \u2014 run ${import_picocolors11.default.bold("ablo login")}.`);
   }
-  console.log(`  ${import_picocolors10.default.dim("mode")}    ${import_picocolors10.default.bold(mode2)}`);
+  console.log(`  ${import_picocolors11.default.dim("mode")}    ${import_picocolors11.default.bold(mode2)}`);
   const activeEntry = getKeyEntry(mode2);
   const key = describeEffectiveKey(mode2, process.env.ABLO_API_KEY, activeEntry);
   if (key.keyMismatch) {
-    console.log(`  ${import_picocolors10.default.yellow("!")} ${import_picocolors10.default.yellow(key.keyMismatch.message)}`);
+    console.log(`  ${import_picocolors11.default.yellow("!")} ${import_picocolors11.default.yellow(key.keyMismatch.message)}`);
   }
   const activeProject = getActiveProject();
   console.log(
-    `  ${import_picocolors10.default.dim("project")} ${activeProject ? `${import_picocolors10.default.bold(activeProject.slug)} ${import_picocolors10.default.dim(`(${activeProject.id})`)}` : import_picocolors10.default.bold("default")}`
+    `  ${import_picocolors11.default.dim("project")} ${activeProject ? `${import_picocolors11.default.bold(activeProject.slug)} ${import_picocolors11.default.dim(`(${activeProject.id})`)}` : import_picocolors11.default.bold("default")}`
   );
   for (const m2 of ["sandbox", "production"]) {
     const entry = getKeyEntry(m2);
-    const marker = m2 === mode2 ? import_picocolors10.default.green("\u25CF") : import_picocolors10.default.dim("\u25CB");
+    const marker = m2 === mode2 ? import_picocolors11.default.green("\u25CF") : import_picocolors11.default.dim("\u25CB");
     if (entry) {
       const exp = entry.expiresAt ? ` ${expiryLabel(entry.expiresAt)}` : "";
-      console.log(`  ${marker} ${m2.padEnd(10)}  ${import_picocolors10.default.dim(`${entry.apiKey.slice(0, 12)}\u2026`)}${exp}`);
+      console.log(`  ${marker} ${m2.padEnd(10)}  ${import_picocolors11.default.dim(`${entry.apiKey.slice(0, 12)}\u2026`)}${exp}`);
     } else {
-      console.log(`  ${marker} ${m2.padEnd(10)}  ${import_picocolors10.default.dim("\u2014 no key")}`);
+      console.log(`  ${marker} ${m2.padEnd(10)}  ${import_picocolors11.default.dim("\u2014 no key")}`);
     }
   }
   const org = activeEntry?.organizationId;
-  if (org) console.log(`  ${import_picocolors10.default.dim("org")}     ${org}`);
+  if (org) console.log(`  ${import_picocolors11.default.dim("org")}     ${org}`);
   const plan = resolvePushPlan();
   console.log(
-    `  ${import_picocolors10.default.dim("push")}    ${plan.apiKey ? `${import_picocolors10.default.bold(plan.flow)} ${import_picocolors10.default.dim(`with ${plan.apiKey.slice(0, 12)}\u2026 (${plan.source})`)}` : `${import_picocolors10.default.bold(plan.flow)} ${import_picocolors10.default.yellow("\u2014 no credential")} ${import_picocolors10.default.dim(`(run ${import_picocolors10.default.bold("ablo login")} or set ${import_picocolors10.default.bold("ABLO_API_KEY")})`)}`}`
+    `  ${import_picocolors11.default.dim("push")}    ${plan.apiKey ? `${import_picocolors11.default.bold(plan.flow)} ${import_picocolors11.default.dim(`with ${plan.apiKey.slice(0, 12)}\u2026 (${plan.source})`)}` : `${import_picocolors11.default.bold(plan.flow)} ${import_picocolors11.default.yellow("\u2014 no credential")} ${import_picocolors11.default.dim(`(run ${import_picocolors11.default.bold("ablo login")} or set ${import_picocolors11.default.bold("ABLO_API_KEY")})`)}`}`
   );
-  process.stdout.write(`  ${import_picocolors10.default.dim("api")}     ${apiUrl2}  `);
+  process.stdout.write(`  ${import_picocolors11.default.dim("api")}     ${apiUrl2}  `);
   const reachable = await ping(apiUrl2);
-  console.log(reachable ? import_picocolors10.default.green("reachable") : import_picocolors10.default.red("unreachable"));
+  console.log(reachable ? import_picocolors11.default.green("reachable") : import_picocolors11.default.red("unreachable"));
   if (reachable) {
     const introspectKey = process.env.ABLO_API_KEY ?? activeEntry?.apiKey;
     const pushed = await fetchPushedSchema(apiUrl2, introspectKey);
     if (pushed && pushed.active) {
-      const when = pushed.pushedAt ? ` ${import_picocolors10.default.dim(`@ ${pushed.pushedAt.slice(0, 10)}`)}` : "";
-      const ver = pushed.version != null ? ` ${import_picocolors10.default.dim(`(rev ${pushed.version})`)}` : "";
-      console.log(`  ${import_picocolors10.default.dim("schema")}  ${import_picocolors10.default.bold(`${pushed.models.length} models pushed`)}${ver}${when}`);
+      const when = pushed.pushedAt ? ` ${import_picocolors11.default.dim(`@ ${pushed.pushedAt.slice(0, 10)}`)}` : "";
+      const ver = pushed.version != null ? ` ${import_picocolors11.default.dim(`(rev ${pushed.version})`)}` : "";
+      console.log(`  ${import_picocolors11.default.dim("schema")}  ${import_picocolors11.default.bold(`${pushed.models.length} models pushed`)}${ver}${when}`);
       for (const m2 of pushed.models) {
-        const tn = m2.typename === m2.key ? import_picocolors10.default.dim(`typename=${m2.typename}`) : import_picocolors10.default.yellow(`typename=${m2.typename}`);
+        const tn = m2.typename === m2.key ? import_picocolors11.default.dim(`typename=${m2.typename}`) : import_picocolors11.default.yellow(`typename=${m2.typename}`);
         const conflict = formatConflict(m2.conflict);
-        const conflictStr = conflict ? `  ${import_picocolors10.default.dim(`conflict=${conflict}`)}` : "";
-        console.log(`          ${import_picocolors10.default.dim("\u2022")} ${m2.key.padEnd(14)} ${tn}${conflictStr}`);
+        const conflictStr2 = conflict ? `  ${import_picocolors11.default.dim(`conflict=${conflict}`)}` : "";
+        console.log(`          ${import_picocolors11.default.dim("\u2022")} ${m2.key.padEnd(14)} ${tn}${conflictStr2}`);
       }
     } else if (pushed && !pushed.active) {
-      console.log(`  ${import_picocolors10.default.dim("schema")}  ${import_picocolors10.default.yellow("none pushed")} ${import_picocolors10.default.dim(`(run ${import_picocolors10.default.bold("ablo push")} or ${import_picocolors10.default.bold("ablo dev")})`)}`);
+      console.log(`  ${import_picocolors11.default.dim("schema")}  ${import_picocolors11.default.yellow("none pushed")} ${import_picocolors11.default.dim(`(run ${import_picocolors11.default.bold("ablo push")} or ${import_picocolors11.default.bold("ablo dev")})`)}`);
+    }
+    if (pushed && pushed.active && pushed.models.length > 0) {
+      const probe = await probeDataPlane(apiUrl2, introspectKey, pushed.models[0].typename);
+      if (probe.status === "no_database") {
+        console.log(`  ${import_picocolors11.default.dim("data")}    ${import_picocolors11.default.red("\u2717 no database registered")}${org ? import_picocolors11.default.dim(` for org ${org}`) : ""}`);
+        console.log(
+          `          ${import_picocolors11.default.dim(
+            `reads/writes will fail with ${import_picocolors11.default.bold("tenant_routing_failed")}. Connect one with ${import_picocolors11.default.bold("ablo connect")}, or point ${import_picocolors11.default.bold("ABLO_API_KEY")} at an org that has a database.`
+          )}`
+        );
+      } else if (probe.status === "intermittent") {
+        console.log(`  ${import_picocolors11.default.dim("data")}    ${import_picocolors11.default.red(`\u2717 database routing is intermittent`)} ${import_picocolors11.default.dim(`(${probe.ok} ok / ${probe.failed} failed of ${probe.ok + probe.failed})`)}${org ? import_picocolors11.default.dim(` for org ${org}`) : ""}`);
+        console.log(
+          `          ${import_picocolors11.default.dim(
+            `some reads/writes fail with ${import_picocolors11.default.bold("tenant_routing_failed")} \u2014 the registration is unstable. Re-establish it with ${import_picocolors11.default.bold("ablo connect")} (or check for a recent server redeploy).`
+          )}`
+        );
+      } else if (probe.status === "forbidden") {
+        console.log(`  ${import_picocolors11.default.dim("data")}    ${import_picocolors11.default.yellow("? key not authorized to read")}${probe.detail ? import_picocolors11.default.dim(` (${probe.detail})`) : ""}`);
+      } else if (probe.status === "unknown") {
+        console.log(`  ${import_picocolors11.default.dim("data")}    ${import_picocolors11.default.yellow(`? data-plane check inconclusive (${probe.detail})`)}`);
+      }
     }
   }
   console.log();
@@ -281369,7 +281783,7 @@ async function status(args = []) {
 
 // src/cli/logs.ts
 init_cjs_shims();
-var import_picocolors11 = __toESM(require_picocolors(), 1);
+var import_picocolors12 = __toESM(require_picocolors(), 1);
 function parseLogsArgs(argv) {
   const args = {
     follow: true,
@@ -281433,10 +281847,10 @@ function resolveSince(since) {
 var sleep2 = (ms) => new Promise((r2) => setTimeout(r2, ms));
 function colorOp(op) {
   const label = op.padEnd(6);
-  if (op === "create") return import_picocolors11.default.green(label);
-  if (op === "update") return import_picocolors11.default.yellow(label);
-  if (op === "delete") return import_picocolors11.default.red(label);
-  return import_picocolors11.default.dim(label);
+  if (op === "create") return import_picocolors12.default.green(label);
+  if (op === "update") return import_picocolors12.default.yellow(label);
+  if (op === "delete") return import_picocolors12.default.red(label);
+  return import_picocolors12.default.dim(label);
 }
 function render(e2, json) {
   if (json) {
@@ -281445,21 +281859,21 @@ function render(e2, json) {
     return;
   }
   const t = new Date(e2.at).toLocaleTimeString();
-  const actor = e2.actor ? import_picocolors11.default.dim(`  ${e2.actor}`) : "";
-  console.log(`  ${import_picocolors11.default.dim(t)}  ${colorOp(e2.op)}  ${import_picocolors11.default.bold(e2.model)} ${import_picocolors11.default.dim(e2.recordId)}${actor}`);
+  const actor = e2.actor ? import_picocolors12.default.dim(`  ${e2.actor}`) : "";
+  console.log(`  ${import_picocolors12.default.dim(t)}  ${colorOp(e2.op)}  ${import_picocolors12.default.bold(e2.model)} ${import_picocolors12.default.dim(e2.recordId)}${actor}`);
 }
 async function logs(argv) {
   let args;
   try {
     args = parseLogsArgs(argv);
   } catch (err) {
-    console.error(import_picocolors11.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors12.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const apiKey = resolveApiKey(args.mode);
   if (!apiKey) {
     console.error(
-      import_picocolors11.default.red(`  No API key.`) + import_picocolors11.default.dim(` Run ${import_picocolors11.default.bold("ablo login")} or set ${import_picocolors11.default.bold("ABLO_API_KEY")}.`)
+      import_picocolors12.default.red(`  No API key.`) + import_picocolors12.default.dim(` Run ${import_picocolors12.default.bold("ablo login")} or set ${import_picocolors12.default.bold("ABLO_API_KEY")}.`)
     );
     process.exit(1);
   }
@@ -281473,7 +281887,7 @@ async function logs(argv) {
     if (!res) return null;
     if (!res.ok) {
       const body = await res.json().catch(() => ({}));
-      console.error(import_picocolors11.default.red(`  logs failed (${res.status}): ${body.reason ?? body.message ?? ""}`));
+      console.error(import_picocolors12.default.red(`  logs failed (${res.status}): ${body.reason ?? body.message ?? ""}`));
       process.exit(1);
     }
     const json = await res.json();
@@ -281484,7 +281898,7 @@ async function logs(argv) {
   }
   if (!args.json) {
     console.log(`
-  ${brand("ablo")} ${import_picocolors11.default.dim("logs")} ${import_picocolors11.default.dim(`(${args.mode ?? "active"} mode)`)}
+  ${brand("ablo")} ${import_picocolors12.default.dim("logs")} ${import_picocolors12.default.dim(`(${args.mode ?? "active"} mode)`)}
 `);
   }
   const initial = await fetchPage({
@@ -281494,13 +281908,13 @@ async function logs(argv) {
     ...args.op ? { op: args.op } : {}
   });
   if (!initial) {
-    console.error(import_picocolors11.default.red(`  Couldn't reach ${baseUrl2}.`));
+    console.error(import_picocolors12.default.red(`  Couldn't reach ${baseUrl2}.`));
     process.exit(1);
   }
   for (const e2 of initial.events) render(e2, args.json);
   let cursor = initial.cursor;
   if (!args.follow) return;
-  if (!args.json) console.log(`  ${import_picocolors11.default.dim("watching for new activity \u2026 (Ctrl-C to stop)")}
+  if (!args.json) console.log(`  ${import_picocolors12.default.dim("watching for new activity \u2026 (Ctrl-C to stop)")}
 `);
   for (; ; ) {
     await sleep2(1500);
@@ -281518,7 +281932,7 @@ async function logs(argv) {
 // src/cli/webhooks.ts
 init_cjs_shims();
 var import_fs8 = require("fs");
-var import_picocolors12 = __toESM(require_picocolors(), 1);
+var import_picocolors13 = __toESM(require_picocolors(), 1);
 var ENV_KEY = "ABLO_WEBHOOK_SECRET";
 function flag(args, name) {
   const inline = args.find((a) => a.startsWith(`${name}=`));
@@ -281545,12 +281959,12 @@ function requireKey2(mode2) {
   const apiKey = resolveApiKey(mode2);
   if (!apiKey) {
     console.error(
-      import_picocolors12.default.red("  No API key.") + import_picocolors12.default.dim(` Run ${import_picocolors12.default.bold("ablo login")} or set ${import_picocolors12.default.bold("ABLO_API_KEY")}.`)
+      import_picocolors13.default.red("  No API key.") + import_picocolors13.default.dim(` Run ${import_picocolors13.default.bold("ablo login")} or set ${import_picocolors13.default.bold("ABLO_API_KEY")}.`)
     );
     process.exit(1);
   }
   if (classifyCredentialKind(apiKey) !== "secret") {
-    console.error(import_picocolors12.default.red("  Managing webhooks requires a secret key ") + import_picocolors12.default.dim("(sk_test_ / sk_live_)."));
+    console.error(import_picocolors13.default.red("  Managing webhooks requires a secret key ") + import_picocolors13.default.dim("(sk_test_ / sk_live_)."));
     process.exit(1);
   }
   return apiKey;
@@ -281566,12 +281980,12 @@ async function api(apiKey, method, path, body) {
     ...body ? { body: JSON.stringify(body) } : {}
   }).catch(() => null);
   if (!res) {
-    console.error(import_picocolors12.default.red(`  Couldn't reach ${baseUrl()}.`));
+    console.error(import_picocolors13.default.red(`  Couldn't reach ${baseUrl()}.`));
     process.exit(1);
   }
   if (!res.ok) {
     const err = await res.json().catch(() => ({}));
-    console.error(import_picocolors12.default.red(`  Request failed (${res.status}): ${err.message ?? err.reason ?? ""}`));
+    console.error(import_picocolors13.default.red(`  Request failed (${res.status}): ${err.message ?? err.reason ?? ""}`));
     process.exit(1);
   }
   return await res.json();
@@ -281593,11 +282007,11 @@ ${line}
   return file;
 }
 function printEndpoint(e2) {
-  const dot = e2.status === "enabled" ? import_picocolors12.default.green("\u25CF") : import_picocolors12.default.red("\u25CF");
-  const health = e2.last_error ? import_picocolors12.default.red(` last error: ${e2.last_error}`) : "";
-  console.log(`  ${dot} ${import_picocolors12.default.bold(e2.id)}  ${e2.url}`);
+  const dot = e2.status === "enabled" ? import_picocolors13.default.green("\u25CF") : import_picocolors13.default.red("\u25CF");
+  const health = e2.last_error ? import_picocolors13.default.red(` last error: ${e2.last_error}`) : "";
+  console.log(`  ${dot} ${import_picocolors13.default.bold(e2.id)}  ${e2.url}`);
   console.log(
-    import_picocolors12.default.dim(
+    import_picocolors13.default.dim(
       `      ${e2.status} \xB7 ${e2.environment} \xB7 events ${e2.enabled_events.join(",")} \xB7 cursor ${e2.cursor ?? "\u2014"}${health}`
     )
   );
@@ -281609,7 +282023,7 @@ async function webhooks(argv) {
   if (sub === "create") {
     const url = positional(rest);
     if (!url) {
-      console.error(import_picocolors12.default.red("  Usage: ") + brand("ablo webhooks create <url>"));
+      console.error(import_picocolors13.default.red("  Usage: ") + brand("ablo webhooks create <url>"));
       process.exit(1);
     }
     const apiKey = requireKey2(mode2);
@@ -281621,8 +282035,8 @@ async function webhooks(argv) {
     });
     const file = writeSecretToEnv(created.secret);
     console.log(`
-  ${import_picocolors12.default.green("\u2713")} Registered ${import_picocolors12.default.bold(created.id)} \u2192 ${created.url}`);
-    console.log(`  ${import_picocolors12.default.green("\u2713")} Wrote ${import_picocolors12.default.bold(ENV_KEY)} to ${import_picocolors12.default.bold(file)} ${import_picocolors12.default.dim("(shown once)")}
+  ${import_picocolors13.default.green("\u2713")} Registered ${import_picocolors13.default.bold(created.id)} \u2192 ${created.url}`);
+    console.log(`  ${import_picocolors13.default.green("\u2713")} Wrote ${import_picocolors13.default.bold(ENV_KEY)} to ${import_picocolors13.default.bold(file)} ${import_picocolors13.default.dim("(shown once)")}
 `);
     return;
   }
@@ -281630,7 +282044,7 @@ async function webhooks(argv) {
     const apiKey = requireKey2(mode2);
     const { data } = await api(apiKey, "GET", "");
     if (data.length === 0) {
-      console.log(import_picocolors12.default.dim("  No webhook endpoints. ") + brand("ablo webhooks create <url>"));
+      console.log(import_picocolors13.default.dim("  No webhook endpoints. ") + brand("ablo webhooks create <url>"));
       return;
     }
     console.log();
@@ -281641,40 +282055,40 @@ async function webhooks(argv) {
   if (sub === "roll") {
     const id = positional(rest);
     if (!id) {
-      console.error(import_picocolors12.default.red("  Usage: ") + brand("ablo webhooks roll <id>"));
+      console.error(import_picocolors13.default.red("  Usage: ") + brand("ablo webhooks roll <id>"));
       process.exit(1);
     }
     const apiKey = requireKey2(mode2);
     const rolled = await api(apiKey, "POST", `/${id}/roll_secret`);
     const file = writeSecretToEnv(rolled.secret);
     console.log(`
-  ${import_picocolors12.default.green("\u2713")} Rolled secret for ${import_picocolors12.default.bold(id)} \u2192 ${import_picocolors12.default.bold(file)} ${import_picocolors12.default.dim("(old secret now invalid)")}
+  ${import_picocolors13.default.green("\u2713")} Rolled secret for ${import_picocolors13.default.bold(id)} \u2192 ${import_picocolors13.default.bold(file)} ${import_picocolors13.default.dim("(old secret now invalid)")}
 `);
     return;
   }
   if (sub === "enable") {
     const id = positional(rest);
     if (!id) {
-      console.error(import_picocolors12.default.red("  Usage: ") + brand("ablo webhooks enable <id>"));
+      console.error(import_picocolors13.default.red("  Usage: ") + brand("ablo webhooks enable <id>"));
       process.exit(1);
     }
     const apiKey = requireKey2(mode2);
     const e2 = await api(apiKey, "POST", `/${id}/enable`);
-    console.log(`  ${import_picocolors12.default.green("\u2713")} Re-enabled ${import_picocolors12.default.bold(e2.id)}`);
+    console.log(`  ${import_picocolors13.default.green("\u2713")} Re-enabled ${import_picocolors13.default.bold(e2.id)}`);
     return;
   }
   if (sub === "rm" || sub === "delete") {
     const id = positional(rest);
     if (!id) {
-      console.error(import_picocolors12.default.red("  Usage: ") + brand("ablo webhooks rm <id>"));
+      console.error(import_picocolors13.default.red("  Usage: ") + brand("ablo webhooks rm <id>"));
       process.exit(1);
     }
     const apiKey = requireKey2(mode2);
     await api(apiKey, "DELETE", `/${id}`);
-    console.log(`  ${import_picocolors12.default.green("\u2713")} Removed ${import_picocolors12.default.bold(id)}`);
+    console.log(`  ${import_picocolors13.default.green("\u2713")} Removed ${import_picocolors13.default.bold(id)}`);
     return;
   }
-  console.log(`  ${import_picocolors12.default.bold("Usage:")}`);
+  console.log(`  ${import_picocolors13.default.bold("Usage:")}`);
   console.log(`    ${brand("ablo webhooks create <url>")}   Register an endpoint; writes ${ENV_KEY}`);
   console.log(`    ${brand("ablo webhooks list")}           List endpoints + delivery health`);
   console.log(`    ${brand("ablo webhooks roll <id>")}       Mint a fresh signing secret`);
@@ -281685,7 +282099,7 @@ async function webhooks(argv) {
 
 // src/cli/check.ts
 init_cjs_shims();
-var import_picocolors13 = __toESM(require_picocolors(), 1);
+var import_picocolors14 = __toESM(require_picocolors(), 1);
 var import_schema6 = require("@abloatai/ablo/schema");
 var DEFAULT_SCHEMA_PATH4 = "ablo/schema.ts";
 var DEFAULT_EXPORT4 = "schema";
@@ -281720,13 +282134,13 @@ async function check(argv) {
   try {
     args = parseCheckArgs(argv);
   } catch (err) {
-    console.error(import_picocolors13.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors14.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const dbUrl = process.env.DATABASE_URL ?? process.env.ABLO_DATABASE_URL;
   if (!dbUrl) {
     console.error(
-      import_picocolors13.default.red(`  No database.`) + import_picocolors13.default.dim(` Set ${import_picocolors13.default.bold("DATABASE_URL")} to the Postgres you want Ablo to adopt.`)
+      import_picocolors14.default.red(`  No database.`) + import_picocolors14.default.dim(` Set ${import_picocolors14.default.bold("DATABASE_URL")} to the Postgres you want Ablo to adopt.`)
     );
     process.exit(1);
   }
@@ -281741,7 +282155,7 @@ async function check(argv) {
       [args.appSchema]
     );
   } catch (err) {
-    console.error(import_picocolors13.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors14.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
     await sql.end({ timeout: 2 });
     process.exit(1);
   }
@@ -281756,7 +282170,7 @@ async function check(argv) {
     set.add(r2.column_name);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors13.default.dim("check")}  ${import_picocolors13.default.dim(`schema "${args.appSchema}"`)}
+  ${brand("ablo")} ${import_picocolors14.default.dim("check")}  ${import_picocolors14.default.dim(`schema "${args.appSchema}"`)}
 `);
   const declaredTables = /* @__PURE__ */ new Set();
   let errors = 0;
@@ -281766,7 +282180,7 @@ async function check(argv) {
     declaredTables.add(table);
     const present = colsByTable.get(table);
     if (!present) {
-      console.log(`  ${import_picocolors13.default.red("\u2717")} ${import_picocolors13.default.bold(key)} ${import_picocolors13.default.dim("\u2192")} table ${import_picocolors13.default.bold(table)} ${import_picocolors13.default.red("not found")}`);
+      console.log(`  ${import_picocolors14.default.red("\u2717")} ${import_picocolors14.default.bold(key)} ${import_picocolors14.default.dim("\u2192")} table ${import_picocolors14.default.bold(table)} ${import_picocolors14.default.red("not found")}`);
       errors++;
       continue;
     }
@@ -281788,26 +282202,26 @@ async function check(argv) {
       if (!present.has(col)) problems.push(`missing column "${col}" (field ${fieldName})`);
     }
     if (problems.length > 0) {
-      console.log(`  ${import_picocolors13.default.red("\u2717")} ${import_picocolors13.default.bold(key)} ${import_picocolors13.default.dim("\u2192")} ${table}`);
-      for (const p2 of problems) console.log(`      ${import_picocolors13.default.red("\u2022")} ${p2}`);
-      for (const w2 of warns) console.log(`      ${import_picocolors13.default.yellow("\u2022")} ${w2}`);
+      console.log(`  ${import_picocolors14.default.red("\u2717")} ${import_picocolors14.default.bold(key)} ${import_picocolors14.default.dim("\u2192")} ${table}`);
+      for (const p2 of problems) console.log(`      ${import_picocolors14.default.red("\u2022")} ${p2}`);
+      for (const w2 of warns) console.log(`      ${import_picocolors14.default.yellow("\u2022")} ${w2}`);
       errors++;
     } else if (warns.length > 0) {
-      console.log(`  ${import_picocolors13.default.yellow("!")} ${import_picocolors13.default.bold(key)} ${import_picocolors13.default.dim("\u2192")} ${table}`);
-      for (const w2 of warns) console.log(`      ${import_picocolors13.default.yellow("\u2022")} ${w2}`);
+      console.log(`  ${import_picocolors14.default.yellow("!")} ${import_picocolors14.default.bold(key)} ${import_picocolors14.default.dim("\u2192")} ${table}`);
+      for (const w2 of warns) console.log(`      ${import_picocolors14.default.yellow("\u2022")} ${w2}`);
       warnings++;
     } else {
-      console.log(`  ${import_picocolors13.default.green("\u2713")} ${import_picocolors13.default.bold(key)} ${import_picocolors13.default.dim(`\u2192 ${table} (id, ${orgCol ?? "no org"} ok)`)}`);
+      console.log(`  ${import_picocolors14.default.green("\u2713")} ${import_picocolors14.default.bold(key)} ${import_picocolors14.default.dim(`\u2192 ${table} (id, ${orgCol ?? "no org"} ok)`)}`);
     }
   }
   const modelCount = Object.keys(schemaJson.models).length;
   const ignored = [...colsByTable.keys()].filter((t) => !declaredTables.has(t)).length;
   console.log(
     `
-  ${modelCount} model${modelCount === 1 ? "" : "s"} \xB7 ${import_picocolors13.default.green(`${modelCount - errors - warnings} ok`)}` + (warnings ? ` \xB7 ${import_picocolors13.default.yellow(`${warnings} warning${warnings === 1 ? "" : "s"}`)}` : "") + (errors ? ` \xB7 ${import_picocolors13.default.red(`${errors} error${errors === 1 ? "" : "s"}`)}` : "")
+  ${modelCount} model${modelCount === 1 ? "" : "s"} \xB7 ${import_picocolors14.default.green(`${modelCount - errors - warnings} ok`)}` + (warnings ? ` \xB7 ${import_picocolors14.default.yellow(`${warnings} warning${warnings === 1 ? "" : "s"}`)}` : "") + (errors ? ` \xB7 ${import_picocolors14.default.red(`${errors} error${errors === 1 ? "" : "s"}`)}` : "")
   );
   if (ignored > 0) {
-    console.log(`  ${import_picocolors13.default.dim(`${ignored} other table${ignored === 1 ? "" : "s"} in your database \u2014 ignored by Ablo`)}`);
+    console.log(`  ${import_picocolors14.default.dim(`${ignored} other table${ignored === 1 ? "" : "s"} in your database \u2014 ignored by Ablo`)}`);
   }
   console.log();
   process.exit(errors > 0 ? 1 : 0);
@@ -281815,7 +282229,7 @@ async function check(argv) {
 
 // src/cli/upgrade.ts
 init_cjs_shims();
-var import_picocolors14 = __toESM(require_picocolors(), 1);
+var import_picocolors15 = __toESM(require_picocolors(), 1);
 var import_ts_morph = __toESM(require_ts_morph(), 1);
 var DEFAULT_GLOBS = ["app/**/*.{ts,tsx}", "src/**/*.{ts,tsx}", "ablo/**/*.{ts,tsx}", "lib/**/*.{ts,tsx}"];
 var VERB_ARGS = {
@@ -281893,7 +282307,7 @@ async function upgrade(argv) {
   project.addSourceFilesAtPaths(globs.length > 0 ? globs : DEFAULT_GLOBS);
   const files = project.getSourceFiles();
   if (files.length === 0) {
-    console.log(import_picocolors14.default.yellow('  No .ts/.tsx files found. Pass a glob, e.g. `ablo upgrade "src/**/*.tsx"`.'));
+    console.log(import_picocolors15.default.yellow('  No .ts/.tsx files found. Pass a glob, e.g. `ablo upgrade "src/**/*.tsx"`.'));
     return;
   }
   const edits = [];
@@ -281967,38 +282381,38 @@ async function upgrade(argv) {
   const rel = (f) => f.replace(cwd + "/", "");
   console.log();
   if (edits.length === 0 && manual.length === 0) {
-    console.log(import_picocolors14.default.green("  \u2713 Nothing to migrate \u2014 your code is already on the current API."));
+    console.log(import_picocolors15.default.green("  \u2713 Nothing to migrate \u2014 your code is already on the current API."));
     return;
   }
   if (edits.length > 0) {
-    console.log(import_picocolors14.default.bold(`  ${write ? "Applied" : "Would apply"} ${edits.length} change${edits.length === 1 ? "" : "s"}:`));
+    console.log(import_picocolors15.default.bold(`  ${write ? "Applied" : "Would apply"} ${edits.length} change${edits.length === 1 ? "" : "s"}:`));
     for (const e2 of edits) {
-      console.log(`    ${import_picocolors14.default.dim(`${rel(e2.file)}:${e2.line}`)}  ${import_picocolors14.default.cyan(e2.rule)}`);
-      console.log(`      ${import_picocolors14.default.red("-")} ${e2.before}`);
-      console.log(`      ${import_picocolors14.default.green("+")} ${e2.after}`);
+      console.log(`    ${import_picocolors15.default.dim(`${rel(e2.file)}:${e2.line}`)}  ${import_picocolors15.default.cyan(e2.rule)}`);
+      console.log(`      ${import_picocolors15.default.red("-")} ${e2.before}`);
+      console.log(`      ${import_picocolors15.default.green("+")} ${e2.after}`);
     }
   }
   if (manual.length > 0) {
     console.log();
-    console.log(import_picocolors14.default.bold(import_picocolors14.default.yellow(`  ${manual.length} spot${manual.length === 1 ? "" : "s"} need manual review (structural):`)));
+    console.log(import_picocolors15.default.bold(import_picocolors15.default.yellow(`  ${manual.length} spot${manual.length === 1 ? "" : "s"} need manual review (structural):`)));
     for (const m2 of manual) {
-      console.log(`    ${import_picocolors14.default.dim(`${rel(m2.file)}:${m2.line}`)}  ${import_picocolors14.default.yellow(m2.rule)}`);
-      console.log(`      ${import_picocolors14.default.dim(m2.snippet)}`);
+      console.log(`    ${import_picocolors15.default.dim(`${rel(m2.file)}:${m2.line}`)}  ${import_picocolors15.default.yellow(m2.rule)}`);
+      console.log(`      ${import_picocolors15.default.dim(m2.snippet)}`);
       console.log(`      \u2192 ${m2.hint}`);
     }
   }
   console.log();
   if (write) {
     await project.save();
-    console.log(import_picocolors14.default.green(`  \u2713 Wrote ${edits.length} change${edits.length === 1 ? "" : "s"}. Review the diff, run your typecheck.`));
+    console.log(import_picocolors15.default.green(`  \u2713 Wrote ${edits.length} change${edits.length === 1 ? "" : "s"}. Review the diff, run your typecheck.`));
   } else {
-    console.log(import_picocolors14.default.dim("  Dry run. Re-run with `--write` to apply the auto-fixes above (manual items are never auto-written)."));
+    console.log(import_picocolors15.default.dim("  Dry run. Re-run with `--write` to apply the auto-fixes above (manual items are never auto-written)."));
   }
 }
 
 // src/cli/pull.ts
 init_cjs_shims();
-var import_picocolors15 = __toESM(require_picocolors(), 1);
+var import_picocolors16 = __toESM(require_picocolors(), 1);
 var import_fs9 = require("fs");
 var DEFAULT_OUT2 = "ablo/schema.ts";
 var DEFAULT_IMPORT = "@abloatai/ablo/schema";
@@ -282110,52 +282524,52 @@ async function pull(argv) {
   try {
     args = parsePullArgs(argv);
   } catch (err) {
-    console.error(import_picocolors15.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors16.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const dbUrl = process.env.DATABASE_URL ?? process.env.ABLO_DATABASE_URL;
   if (!dbUrl) {
-    console.error(import_picocolors15.default.red(`  No database.`) + import_picocolors15.default.dim(` Set ${import_picocolors15.default.bold("DATABASE_URL")} to the Postgres to pull from.`));
+    console.error(import_picocolors16.default.red(`  No database.`) + import_picocolors16.default.dim(` Set ${import_picocolors16.default.bold("DATABASE_URL")} to the Postgres to pull from.`));
     process.exit(1);
   }
   if ((0, import_fs9.existsSync)(args.out) && !args.force) {
     console.error(
-      import_picocolors15.default.red(`  ${args.out} already exists.`) + import_picocolors15.default.dim(` Re-run with ${import_picocolors15.default.bold("--force")} to overwrite.`)
+      import_picocolors16.default.red(`  ${args.out} already exists.`) + import_picocolors16.default.dim(` Re-run with ${import_picocolors16.default.bold("--force")} to overwrite.`)
     );
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors15.default.dim("pull")}  ${import_picocolors15.default.dim(`schema "${args.appSchema}"`)}
+  ${brand("ablo")} ${import_picocolors16.default.dim("pull")}  ${import_picocolors16.default.dim(`schema "${args.appSchema}"`)}
 `);
   let result;
   try {
     result = await buildSchemaSourceFromDb({ dbUrl, appSchema: args.appSchema, importPath: args.importPath });
   } catch (err) {
-    console.error(import_picocolors15.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors16.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (result.models.length === 0) {
     console.error(
-      import_picocolors15.default.yellow(`  No adoptable tables found`) + import_picocolors15.default.dim(` (a model needs an ${import_picocolors15.default.bold("id")} + ${import_picocolors15.default.bold("organization_id")} column).`)
+      import_picocolors16.default.yellow(`  No adoptable tables found`) + import_picocolors16.default.dim(` (a model needs an ${import_picocolors16.default.bold("id")} + ${import_picocolors16.default.bold("organization_id")} column).`)
     );
     process.exit(1);
   }
   (0, import_fs9.writeFileSync)(args.out, result.source);
-  console.log(`  ${import_picocolors15.default.green("\u2713")} wrote ${import_picocolors15.default.bold(args.out)} ${import_picocolors15.default.dim(`(${result.models.length} models)`)}`);
-  console.log(`  ${import_picocolors15.default.dim(`models: ${result.models.join(", ")}`)}`);
+  console.log(`  ${import_picocolors16.default.green("\u2713")} wrote ${import_picocolors16.default.bold(args.out)} ${import_picocolors16.default.dim(`(${result.models.length} models)`)}`);
+  console.log(`  ${import_picocolors16.default.dim(`models: ${result.models.join(", ")}`)}`);
   if (result.skipped > 0) {
-    console.log(`  ${import_picocolors15.default.dim(`${result.skipped} table(s) skipped \u2014 no id/organization_id`)}`);
+    console.log(`  ${import_picocolors16.default.dim(`${result.skipped} table(s) skipped \u2014 no id/organization_id`)}`);
   }
   console.log(
     `
-  ${import_picocolors15.default.dim("Introspection is lossy (enums, JSON shape, relations). Review the file, then")} ${import_picocolors15.default.bold("ablo check")}.
+  ${import_picocolors16.default.dim("Introspection is lossy (enums, JSON shape, relations). Review the file, then")} ${import_picocolors16.default.bold("ablo check")}.
 `
   );
 }
 
 // src/cli/prisma-pull.ts
 init_cjs_shims();
-var import_picocolors16 = __toESM(require_picocolors(), 1);
+var import_picocolors17 = __toESM(require_picocolors(), 1);
 var import_fs10 = require("fs");
 
 // src/cli/schema-ir.ts
@@ -282433,55 +282847,55 @@ async function prismaPull(argv) {
   try {
     args = parsePrismaPullArgs(argv);
   } catch (err) {
-    console.error(import_picocolors16.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors17.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (!(0, import_fs10.existsSync)(args.schema)) {
     console.error(
-      import_picocolors16.default.red(`  No Prisma schema at ${import_picocolors16.default.bold(args.schema)}.`) + import_picocolors16.default.dim(` Pass a path: ${import_picocolors16.default.bold("ablo pull prisma <path>")}.`)
+      import_picocolors17.default.red(`  No Prisma schema at ${import_picocolors17.default.bold(args.schema)}.`) + import_picocolors17.default.dim(` Pass a path: ${import_picocolors17.default.bold("ablo pull prisma <path>")}.`)
     );
     process.exit(1);
   }
   if ((0, import_fs10.existsSync)(args.out) && !args.force) {
     console.error(
-      import_picocolors16.default.red(`  ${args.out} already exists.`) + import_picocolors16.default.dim(` Re-run with ${import_picocolors16.default.bold("--force")} to overwrite.`)
+      import_picocolors17.default.red(`  ${args.out} already exists.`) + import_picocolors17.default.dim(` Re-run with ${import_picocolors17.default.bold("--force")} to overwrite.`)
     );
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors16.default.dim("pull prisma")}  ${import_picocolors16.default.dim(args.schema)}
+  ${brand("ablo")} ${import_picocolors17.default.dim("pull prisma")}  ${import_picocolors17.default.dim(args.schema)}
 `);
   let result;
   try {
     const src = (0, import_fs10.readFileSync)(args.schema, "utf8");
     result = buildSchemaSourceFromPrisma({ src, importPath: args.importPath });
   } catch (err) {
-    console.error(import_picocolors16.default.red(`  Couldn't parse the schema: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors17.default.red(`  Couldn't parse the schema: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (result.models.length === 0) {
     console.error(
-      import_picocolors16.default.yellow(`  No adoptable models found`) + import_picocolors16.default.dim(` (a model needs an ${import_picocolors16.default.bold("id")} + ${import_picocolors16.default.bold("organizationId")} / ${import_picocolors16.default.bold("organization_id")}).`)
+      import_picocolors17.default.yellow(`  No adoptable models found`) + import_picocolors17.default.dim(` (a model needs an ${import_picocolors17.default.bold("id")} + ${import_picocolors17.default.bold("organizationId")} / ${import_picocolors17.default.bold("organization_id")}).`)
     );
     process.exit(1);
   }
   (0, import_fs10.writeFileSync)(args.out, result.source);
-  console.log(`  ${import_picocolors16.default.green("\u2713")} wrote ${import_picocolors16.default.bold(args.out)} ${import_picocolors16.default.dim(`(${result.models.length} models)`)}`);
-  console.log(`  ${import_picocolors16.default.dim(`models: ${result.models.join(", ")}`)}`);
+  console.log(`  ${import_picocolors17.default.green("\u2713")} wrote ${import_picocolors17.default.bold(args.out)} ${import_picocolors17.default.dim(`(${result.models.length} models)`)}`);
+  console.log(`  ${import_picocolors17.default.dim(`models: ${result.models.join(", ")}`)}`);
   if (result.skipped.length > 0) {
-    console.log(`  ${import_picocolors16.default.dim(`${result.skipped.length} model(s) skipped:`)}`);
-    for (const s of result.skipped) console.log(`    ${import_picocolors16.default.dim(`- ${s.name}: ${s.reason}`)}`);
+    console.log(`  ${import_picocolors17.default.dim(`${result.skipped.length} model(s) skipped:`)}`);
+    for (const s of result.skipped) console.log(`    ${import_picocolors17.default.dim(`- ${s.name}: ${s.reason}`)}`);
   }
   console.log(
     `
-  ${import_picocolors16.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors16.default.bold("ablo check")}.
+  ${import_picocolors17.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors17.default.bold("ablo check")}.
 `
   );
 }
 
 // src/cli/drizzle-pull.ts
 init_cjs_shims();
-var import_picocolors17 = __toESM(require_picocolors(), 1);
+var import_picocolors18 = __toESM(require_picocolors(), 1);
 var import_fs11 = require("fs");
 var import_path6 = require("path");
 var DEFAULT_OUT4 = "ablo/schema.ts";
@@ -282530,7 +282944,7 @@ async function loadDrizzle() {
 }
 async function lowerDrizzleModule(mod) {
   const { is, getTableName, getTableColumns, PgTable, getTableConfig } = await loadDrizzle();
-  const tables = Object.values(mod).filter((v) => is(v, PgTable));
+  const tables = Object.values(mod).filter((v2) => is(v2, PgTable));
   const models = [];
   const skipped = [];
   for (const table of tables) {
@@ -282617,27 +283031,27 @@ async function drizzlePull(argv) {
   try {
     args = parseDrizzlePullArgs(argv);
   } catch (err) {
-    console.error(import_picocolors17.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors18.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (!args.schema) {
     console.error(
-      import_picocolors17.default.red(`  No Drizzle schema given.`) + import_picocolors17.default.dim(` Pass the module: ${import_picocolors17.default.bold("ablo pull drizzle src/db/schema.ts")}.`)
+      import_picocolors18.default.red(`  No Drizzle schema given.`) + import_picocolors18.default.dim(` Pass the module: ${import_picocolors18.default.bold("ablo pull drizzle src/db/schema.ts")}.`)
     );
     process.exit(1);
   }
   if (!(0, import_fs11.existsSync)(args.schema)) {
-    console.error(import_picocolors17.default.red(`  No file at ${import_picocolors17.default.bold(args.schema)}.`));
+    console.error(import_picocolors18.default.red(`  No file at ${import_picocolors18.default.bold(args.schema)}.`));
     process.exit(1);
   }
   if ((0, import_fs11.existsSync)(args.out) && !args.force) {
     console.error(
-      import_picocolors17.default.red(`  ${args.out} already exists.`) + import_picocolors17.default.dim(` Re-run with ${import_picocolors17.default.bold("--force")} to overwrite.`)
+      import_picocolors18.default.red(`  ${args.out} already exists.`) + import_picocolors18.default.dim(` Re-run with ${import_picocolors18.default.bold("--force")} to overwrite.`)
     );
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors17.default.dim("pull drizzle")}  ${import_picocolors17.default.dim(args.schema)}
+  ${brand("ablo")} ${import_picocolors18.default.dim("pull drizzle")}  ${import_picocolors18.default.dim(args.schema)}
 `);
   let result;
   try {
@@ -282645,33 +283059,33 @@ async function drizzlePull(argv) {
     result = await buildSchemaSourceFromDrizzle({ mod, importPath: args.importPath });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    const hint = /Cannot find package 'drizzle-orm'/.test(msg) ? import_picocolors17.default.dim(` (install ${import_picocolors17.default.bold("drizzle-orm")} in this project)`) : "";
-    console.error(import_picocolors17.default.red(`  Couldn't load the schema: ${msg}`) + hint);
+    const hint = /Cannot find package 'drizzle-orm'/.test(msg) ? import_picocolors18.default.dim(` (install ${import_picocolors18.default.bold("drizzle-orm")} in this project)`) : "";
+    console.error(import_picocolors18.default.red(`  Couldn't load the schema: ${msg}`) + hint);
     process.exit(1);
   }
   if (result.models.length === 0) {
     console.error(
-      import_picocolors17.default.yellow(`  No adoptable tables found`) + import_picocolors17.default.dim(` (a table needs an ${import_picocolors17.default.bold("id")} + ${import_picocolors17.default.bold("organization_id")} column).`)
+      import_picocolors18.default.yellow(`  No adoptable tables found`) + import_picocolors18.default.dim(` (a table needs an ${import_picocolors18.default.bold("id")} + ${import_picocolors18.default.bold("organization_id")} column).`)
     );
     process.exit(1);
   }
   (0, import_fs11.writeFileSync)(args.out, result.source);
-  console.log(`  ${import_picocolors17.default.green("\u2713")} wrote ${import_picocolors17.default.bold(args.out)} ${import_picocolors17.default.dim(`(${result.models.length} models)`)}`);
-  console.log(`  ${import_picocolors17.default.dim(`models: ${result.models.join(", ")}`)}`);
+  console.log(`  ${import_picocolors18.default.green("\u2713")} wrote ${import_picocolors18.default.bold(args.out)} ${import_picocolors18.default.dim(`(${result.models.length} models)`)}`);
+  console.log(`  ${import_picocolors18.default.dim(`models: ${result.models.join(", ")}`)}`);
   if (result.skipped.length > 0) {
-    console.log(`  ${import_picocolors17.default.dim(`${result.skipped.length} table(s) skipped:`)}`);
-    for (const s of result.skipped) console.log(`    ${import_picocolors17.default.dim(`- ${s.name}: ${s.reason}`)}`);
+    console.log(`  ${import_picocolors18.default.dim(`${result.skipped.length} table(s) skipped:`)}`);
+    for (const s of result.skipped) console.log(`    ${import_picocolors18.default.dim(`- ${s.name}: ${s.reason}`)}`);
   }
   console.log(
     `
-  ${import_picocolors17.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors17.default.bold("ablo check")}.
+  ${import_picocolors18.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors18.default.bold("ablo check")}.
 `
   );
 }
 
 // src/cli/renderError.ts
 init_cjs_shims();
-var import_picocolors18 = __toESM(require_picocolors(), 1);
+var import_picocolors19 = __toESM(require_picocolors(), 1);
 var RECOVERY_HINT = {
   transient: "This looks transient \u2014 retry in a moment.",
   permission: "Your key isn't allowed to do this \u2014 check its scopes or role.",
@@ -282685,21 +283099,21 @@ function titleForType(type) {
   if (!spaced) return "Error";
   return /error$/i.test(spaced) ? spaced : `${spaced} error`;
 }
-function isStringArray(v) {
-  return Array.isArray(v) && v.every((x2) => typeof x2 === "string");
+function isStringArray(v2) {
+  return Array.isArray(v2) && v2.every((x2) => typeof x2 === "string");
 }
 function renderKnownDetails(details, line) {
   if (!details) return;
   const { retryAfterSeconds, missingIds, requiredCapability, unexecutable, errors } = details;
-  if (typeof retryAfterSeconds === "number") line(`    ${import_picocolors18.default.dim("retry")}  after ${retryAfterSeconds}s`);
+  if (typeof retryAfterSeconds === "number") line(`    ${import_picocolors19.default.dim("retry")}  after ${retryAfterSeconds}s`);
   if (isStringArray(missingIds) && missingIds.length > 0) {
     const shown = missingIds.slice(0, 5).join(", ");
     const more = missingIds.length > 5 ? ` (+${missingIds.length - 5} more)` : "";
-    line(`    ${import_picocolors18.default.dim("missing")} ${shown}${more}`);
+    line(`    ${import_picocolors19.default.dim("missing")} ${shown}${more}`);
   }
-  if (typeof requiredCapability === "string") line(`    ${import_picocolors18.default.dim("needs")}  ${requiredCapability}`);
+  if (typeof requiredCapability === "string") line(`    ${import_picocolors19.default.dim("needs")}  ${requiredCapability}`);
   if (Array.isArray(unexecutable) && unexecutable.length > 0) {
-    line(`    ${import_picocolors18.default.dim("blocked")} ${unexecutable.length} change(s) can't be applied \u2014 see \`unexecutable\` (--verbose)`);
+    line(`    ${import_picocolors19.default.dim("blocked")} ${unexecutable.length} change(s) can't be applied \u2014 see \`unexecutable\` (--verbose)`);
   }
   if (Array.isArray(errors)) {
     for (const e2 of errors.slice(0, 8)) {
@@ -282707,7 +283121,7 @@ function renderKnownDetails(details, line) {
         const rec = e2;
         const where = typeof rec.param === "string" ? `${rec.param}: ` : "";
         const msg = typeof rec.message === "string" ? rec.message : "";
-        if (msg) line(`    ${import_picocolors18.default.dim("\xB7")} ${where}${msg}`);
+        if (msg) line(`    ${import_picocolors19.default.dim("\xB7")} ${where}${msg}`);
       }
     }
   }
@@ -282716,22 +283130,22 @@ function renderCliError(err, opts = {}) {
   const line = opts.write ?? ((l2) => console.error(l2));
   const verbose = opts.verbose ?? (process.argv.includes("--verbose") || process.env.ABLO_VERBOSE === "1");
   if (err instanceof AbloError) {
-    const codeTag = err.code ? `  ${import_picocolors18.default.dim(`[${err.code}]`)}` : "";
+    const codeTag = err.code ? `  ${import_picocolors19.default.dim(`[${err.code}]`)}` : "";
     line("");
-    line(`  ${brand("ablo")} ${import_picocolors18.default.red("\u2717")} ${import_picocolors18.default.bold(titleForType(err.type))}${codeTag}`);
+    line(`  ${brand("ablo")} ${import_picocolors19.default.red("\u2717")} ${import_picocolors19.default.bold(titleForType(err.type))}${codeTag}`);
     line("");
     line(`    ${err.message}`);
-    if (err.param) line(`    ${import_picocolors18.default.dim("field")}  ${err.param}`);
+    if (err.param) line(`    ${import_picocolors19.default.dim("field")}  ${err.param}`);
     renderKnownDetails(err.details, line);
     const hint = err.code ? RECOVERY_HINT[classifyRecovery(err.code)] : void 0;
-    if (hint) line(`    ${import_picocolors18.default.dim(hint)}`);
-    if (err.docUrl) line(`    ${import_picocolors18.default.dim("docs")}   ${err.docUrl}`);
-    if (err.requestId) line(`    ${import_picocolors18.default.dim("ref")}    ${err.requestId}`);
+    if (hint) line(`    ${import_picocolors19.default.dim(hint)}`);
+    if (err.docUrl) line(`    ${import_picocolors19.default.dim("docs")}   ${err.docUrl}`);
+    if (err.requestId) line(`    ${import_picocolors19.default.dim("ref")}    ${err.requestId}`);
     if (verbose) {
       if (err.details && Object.keys(err.details).length > 0) {
-        line(`    ${import_picocolors18.default.dim("details")} ${JSON.stringify(err.details)}`);
+        line(`    ${import_picocolors19.default.dim("details")} ${JSON.stringify(err.details)}`);
       }
-      if (err.stack) line(import_picocolors18.default.dim(err.stack));
+      if (err.stack) line(import_picocolors19.default.dim(err.stack));
     }
     line("");
     process.exitCode = 1;
@@ -282739,16 +283153,16 @@ function renderCliError(err, opts = {}) {
   }
   const message = err instanceof Error ? err.message : String(err);
   line("");
-  line(`  ${brand("ablo")} ${import_picocolors18.default.red("\u2717")} ${message}`);
-  if (verbose && err instanceof Error && err.stack) line(import_picocolors18.default.dim(err.stack));
-  else line(`    ${import_picocolors18.default.dim("Run with --verbose for the full error.")}`);
+  line(`  ${brand("ablo")} ${import_picocolors19.default.red("\u2717")} ${message}`);
+  if (verbose && err instanceof Error && err.stack) line(import_picocolors19.default.dim(err.stack));
+  else line(`    ${import_picocolors19.default.dim("Run with --verbose for the full error.")}`);
   line("");
   process.exitCode = 1;
 }
 
 // src/cli/index.ts
 var LOGO = `
-  ${brand("ablo")} ${import_picocolors19.default.dim("sync engine")}
+  ${brand("ablo")} ${import_picocolors20.default.dim("sync engine")}
 `;
 var SUBCOMMAND_USAGE = {
   connect: CONNECT_USAGE,
@@ -282783,7 +283197,7 @@ async function main() {
     const devArgs = process.argv.slice(3);
     const oneShot = devArgs.includes("--no-watch");
     console.log(
-      import_picocolors19.default.dim(
+      import_picocolors20.default.dim(
         oneShot ? "  `ablo dev --no-watch` is `ablo push` (push once, no watcher) \u2014 running that." : "  `ablo dev` is now `ablo push --watch` \u2014 running that."
       )
     );
@@ -282805,19 +283219,21 @@ async function main() {
     await migrate(process.argv.slice(3));
   } else if (command === "push") {
     const rest = process.argv.slice(3);
-    const advanced = rest.some((a) => ["--force", "--rename", "--backfill", "--url"].includes(a));
+    const advanced = rest.some(
+      (a) => ["--force", "--rename", "--backfill", "--url", "--dry-run", "--plan", "--yes", "-y", "--allow-dirty"].includes(a)
+    );
     const watching = rest.includes("--watch");
     const guard = guardActiveProjectKey();
     if (!guard.ok && guard.available.length > 0 && !rest.includes("--url")) {
       console.error(
-        `  ${import_picocolors19.default.yellow("\u26A0")} active project ${import_picocolors19.default.bold(guard.activeProfile)} has no stored key ${import_picocolors19.default.dim(
+        `  ${import_picocolors20.default.yellow("\u26A0")} active project ${import_picocolors20.default.bold(guard.activeProfile)} has no stored key ${import_picocolors20.default.dim(
           `(you have keys for: ${guard.available.join(", ")})`
         )}`
       );
       const loginCmd = guard.activeProfile === "default" ? "ablo login" : `ablo login --project ${guard.activeProfile}`;
       console.error(
-        import_picocolors19.default.dim(
-          `    Mint one with ${import_picocolors19.default.bold(loginCmd)}, or switch with ${import_picocolors19.default.bold("ablo projects use <slug>")}.`
+        import_picocolors20.default.dim(
+          `    Mint one with ${import_picocolors20.default.bold(loginCmd)}, or switch with ${import_picocolors20.default.bold("ablo projects use <slug>")}.`
         )
       );
       process.exitCode = 1;
@@ -282835,13 +283251,13 @@ async function main() {
     await generate(process.argv.slice(3));
   } else if (command === "schema") {
     console.error(
-      `  ${import_picocolors19.default.red("\u2717")} \`ablo schema push\` was renamed to \`${brand("ablo push")}\`.`
+      `  ${import_picocolors20.default.red("\u2717")} \`ablo schema push\` was renamed to \`${brand("ablo push")}\`.`
     );
     console.error(`    Run \`ablo push${process.argv.slice(4).join(" ") ? " " + process.argv.slice(4).join(" ") : ""}\` instead.`);
     process.exitCode = 1;
   } else {
     console.log(LOGO);
-    console.log(`  ${import_picocolors19.default.bold("Usage:")}`);
+    console.log(`  ${import_picocolors20.default.bold("Usage:")}`);
     console.log(`    npx ablo init                          Scaffold ablo/ directory + starter schema`);
     console.log(`    npx ablo init --yes [--framework nextjs] Non-interactive (agents/CI): no prompts, flag-driven`);
     console.log(`                  [--auth apikey] [--storage direct|endpoint] [--project <slug>] [--no-project]`);
@@ -282866,6 +283282,7 @@ async function main() {
     console.log(`    npx ablo check                         Check your existing database fits the schema (read-only, creates no tables)`);
     console.log(`    npx ablo connect                       Connect a real database \u2014 prints the logical-replication setup SQL (the one way)`);
     console.log(`    npx ablo connect --check               Validate DATABASE_URL is replication-ready (wal_level, publication, role, replica identity)`);
+    console.log(`    npx ablo connect --audit-infra         Read-only audit for deprecated Ablo sync infra in a customer DB`);
     console.log(`    npx ablo migrate                       Provision your synced-model tables in your own Postgres (optional escape hatch \u2014 \`connect\` is the way)`);
     console.log(`    npx ablo migrate --dry-run             Print the SQL without executing (preview)`);
     console.log(`    npx ablo push                          Upload your schema definition to Ablo (metadata only \u2014 rows stay in your DB)`);
@@ -282876,10 +283293,10 @@ async function main() {
     console.log(`    npx ablo generate                      Emit TypeScript types from your schema`);
     console.log(`    npx ablo generate --out path.ts        Write generated types to a path`);
     console.log();
-    console.log(`  ${import_picocolors19.default.bold("Schema workflow:")}`);
+    console.log(`  ${import_picocolors20.default.bold("Schema workflow:")}`);
     console.log(`    The server holds its own copy of your schema \u2014 edit ${brand("ablo/schema.ts")}, then`);
     console.log(`    run ${brand("ablo push")} (or keep ${brand("ablo dev")} running) before the server will accept`);
-    console.log(`    writes to new or changed models. Skip it and writes fail with ${import_picocolors19.default.yellow("server_execute_unknown_model")}.`);
+    console.log(`    writes to new or changed models. Skip it and writes fail with ${import_picocolors20.default.yellow("server_execute_unknown_model")}.`);
     console.log();
   }
 }
@@ -282891,7 +283308,7 @@ function bailIfCancelled(value) {
 }
 var INIT_FRAMEWORKS = ["nextjs", "vite", "remix", "vanilla"];
 var INIT_AUTHS = ["apikey", "firebase", "auth0", "clerk", "supabase", "betterauth", "jwt"];
-var INIT_STORAGES = ["endpoint", "direct", "datasource"];
+var INIT_STORAGES = ["replication", "endpoint", "direct", "datasource"];
 function parseInitArgs(args) {
   const has = (flag2) => args.includes(flag2);
   const val = (flag2) => {
@@ -282930,7 +283347,7 @@ async function ensureInitProject(opts) {
   const ensured = await ensureProject(slug);
   if (ensured) {
     console.log(
-      `  ${import_picocolors19.default.green("\u2713")} ${ensured.created ? "Created" : "Using"} project ${import_picocolors19.default.bold(ensured.slug)} ${import_picocolors19.default.dim(`(${ensured.id})`)} \u2014 keys you mint for it are isolated from the org's other apps.`
+      `  ${import_picocolors20.default.green("\u2713")} ${ensured.created ? "Created" : "Using"} project ${import_picocolors20.default.bold(ensured.slug)} ${import_picocolors20.default.dim(`(${ensured.id})`)} \u2014 keys you mint for it are isolated from the org's other apps.`
     );
   }
 }
@@ -282972,7 +283389,7 @@ async function chooseBool(flagValue, fallback, interactive, prompt) {
 async function init(args = []) {
   const opts = parseInitArgs(args);
   const interactive = Boolean(process.stdin.isTTY) && !opts.yes && !process.env.CI;
-  Ie(`${brand("ablo")} ${import_picocolors19.default.dim("sync engine")}`);
+  Ie(`${brand("ablo")} ${import_picocolors20.default.dim("sync engine")}`);
   if (!(0, import_fs12.existsSync)("package.json")) {
     xe("No package.json found. Run this from your project root.");
     process.exit(1);
@@ -283017,16 +283434,16 @@ async function init(args = []) {
   const storageChoice = await chooseOption(
     "storage",
     opts.storage,
-    "endpoint",
+    "replication",
     INIT_STORAGES,
     false,
-    () => Promise.resolve("endpoint")
+    () => Promise.resolve("replication")
   );
   const storage = storageChoice === "datasource" ? "endpoint" : storageChoice;
   if (storage === "direct") {
     Me(
-      "`--storage direct` uses the deprecated databaseUrl connector. The signed Data\nSource endpoint is the supported path.",
-      import_picocolors19.default.yellow("Deprecated")
+      "`--storage direct` uses the deprecated databaseUrl connector. Logical replication\n(`npx ablo connect`) is the supported path; a signed Data Source endpoint is the fallback.",
+      import_picocolors20.default.yellow("Deprecated")
     );
   }
   const agent = await chooseBool(
@@ -283056,7 +283473,7 @@ async function init(args = []) {
   if (pullExisting) {
     const dbUrl = process.env.DATABASE_URL ?? process.env.ABLO_DATABASE_URL;
     if (!dbUrl) {
-      schemaNote = import_picocolors19.default.dim(" (no DATABASE_URL \u2014 wrote starter; run `ablo pull` later)");
+      schemaNote = import_picocolors20.default.dim(" (no DATABASE_URL \u2014 wrote starter; run `ablo pull` later)");
     } else {
       try {
         const pulled = await buildSchemaSourceFromDb({
@@ -283066,12 +283483,12 @@ async function init(args = []) {
         });
         if (pulled.models.length > 0) {
           schemaSource = pulled.source;
-          schemaNote = import_picocolors19.default.dim(` (pulled ${pulled.models.length} models)`);
+          schemaNote = import_picocolors20.default.dim(` (pulled ${pulled.models.length} models)`);
         } else {
-          schemaNote = import_picocolors19.default.dim(" (no adoptable tables \u2014 wrote starter)");
+          schemaNote = import_picocolors20.default.dim(" (no adoptable tables \u2014 wrote starter)");
         }
       } catch {
-        schemaNote = import_picocolors19.default.dim(" (pull failed \u2014 wrote starter)");
+        schemaNote = import_picocolors20.default.dim(" (pull failed \u2014 wrote starter)");
       }
     }
   }
@@ -283097,14 +283514,14 @@ async function init(args = []) {
     const existing = (0, import_fs12.readFileSync)(envFile, "utf-8");
     if (!existing.includes("ABLO_")) {
       (0, import_fs12.writeFileSync)(envFile, existing + "\n" + envBody);
-      created.push(`${envFile} ${import_picocolors19.default.dim("(appended)")}`);
+      created.push(`${envFile} ${import_picocolors20.default.dim("(appended)")}`);
     } else {
-      created.push(`${envFile} ${import_picocolors19.default.dim("(already configured)")}`);
+      created.push(`${envFile} ${import_picocolors20.default.dim("(already configured)")}`);
     }
   }
   if (wireRealKey && resolvedKey) {
     wireEnvLocal(resolvedKey);
-    created.push(`.env.local ${import_picocolors19.default.dim("(ABLO_API_KEY set from your login)")}`);
+    created.push(`.env.local ${import_picocolors20.default.dim("(ABLO_API_KEY set from your login)")}`);
   }
   if (agent) {
     (0, import_fs12.writeFileSync)((0, import_path7.join)(abloDir, "agent.ts"), generateAgent());
@@ -283119,64 +283536,66 @@ async function init(args = []) {
     }
     const providersPath = (0, import_path7.join)(layout.appBase, "providers.tsx");
     (0, import_fs12.writeFileSync)(providersPath, generateProviders());
-    created.push(`${providersPath} ${import_picocolors19.default.dim(`(wrap ${(0, import_path7.join)(layout.appBase, "layout.tsx")} in <Providers>)`)}`);
+    created.push(`${providersPath} ${import_picocolors20.default.dim(`(wrap ${(0, import_path7.join)(layout.appBase, "layout.tsx")} in <Providers>)`)}`);
     const sessionDir = (0, import_path7.join)(layout.appBase, "api", "ablo-session");
     (0, import_fs12.mkdirSync)(sessionDir, { recursive: true });
     (0, import_fs12.writeFileSync)((0, import_path7.join)(sessionDir, "route.ts"), generateSessionRoute());
-    created.push(`${(0, import_path7.join)(sessionDir, "route.ts")} ${import_picocolors19.default.dim("(wire your auth)")}`);
+    created.push(`${(0, import_path7.join)(sessionDir, "route.ts")} ${import_picocolors20.default.dim("(wire your auth)")}`);
   }
   if (framework !== "vanilla") {
     (0, import_fs12.writeFileSync)((0, import_path7.join)(abloDir, "TaskList.tsx"), generateComponent());
     created.push(`${abloDir}/TaskList.tsx`);
   }
-  Me(created.map((f) => `${import_picocolors19.default.green("\u2713")} ${f}`).join("\n"), "Created");
+  Me(created.map((f) => `${import_picocolors20.default.green("\u2713")} ${f}`).join("\n"), "Created");
   const pm = detectPackageManager();
   if (opts.install) {
     const s = Y2();
     s.start("Installing @abloatai/ablo");
     try {
-      (0, import_child_process2.execSync)(`${pm} add @abloatai/ablo`, { stdio: "ignore" });
+      (0, import_child_process3.execSync)(`${pm} add @abloatai/ablo`, { stdio: "ignore" });
       s.stop("Installed @abloatai/ablo");
     } catch {
-      s.stop(`${import_picocolors19.default.yellow("!")} Couldn't auto-install \u2014 run ${import_picocolors19.default.bold(`${pm} install @abloatai/ablo`)}`);
+      s.stop(`${import_picocolors20.default.yellow("!")} Couldn't auto-install \u2014 run ${import_picocolors20.default.bold(`${pm} install @abloatai/ablo`)}`);
     }
   }
   const steps = [
-    `Get a ${import_picocolors19.default.bold("sk_test_")} key at ${import_picocolors19.default.cyan("https://abloatai.com")}`,
-    `Run ${import_picocolors19.default.bold("npx ablo login")} (or add ${import_picocolors19.default.bold("ABLO_API_KEY")} to ${import_picocolors19.default.bold(envFile)})`,
-    `Set ${import_picocolors19.default.bold("DATABASE_URL")} in ${import_picocolors19.default.bold(envFile)} \u2014 your Postgres is the system of record; rows live there, never with Ablo`,
-    `Run ${import_picocolors19.default.bold("npx ablo dev")} \u2014 pushes your schema definition and watches for changes`,
-    ...storage === "direct" ? [
-      `Provision your DB: ${import_picocolors19.default.bold("npx ablo migrate")} (creates your synced-model tables with row-level security; keep your own migrations for everything else)`
+    `Get a ${import_picocolors20.default.bold("sk_test_")} key at ${import_picocolors20.default.cyan("https://abloatai.com")}`,
+    `Run ${import_picocolors20.default.bold("npx ablo login")} (or add ${import_picocolors20.default.bold("ABLO_API_KEY")} to ${import_picocolors20.default.bold(envFile)})`,
+    `Set ${import_picocolors20.default.bold("DATABASE_URL")} in ${import_picocolors20.default.bold(envFile)} \u2014 your Postgres is the system of record; rows live there, never with Ablo`,
+    `Run ${import_picocolors20.default.bold("npx ablo dev")} \u2014 pushes your schema definition and watches for changes`,
+    ...storage === "replication" ? [
+      `Connect your database: ${import_picocolors20.default.bold("npx ablo connect")} prints the logical-replication setup SQL (run it once on your Postgres), then ${import_picocolors20.default.bold("npx ablo connect --register")} tells Ablo to replicate it \u2014 your app keeps writing through your own backend, Ablo tails the WAL`
+    ] : storage === "direct" ? [
+      `Provision your DB: ${import_picocolors20.default.bold("npx ablo migrate")} (creates your synced-model tables with row-level security; keep your own migrations for everything else)`
     ] : [
-      `Provision your DB: ${import_picocolors19.default.bold("npx ablo migrate")} (creates your Ablo-model tables + the adapter tables; keep your own migrations for everything else), then mount ${import_picocolors19.default.bold(`${abloDir}/data-source.ts`)} at ${import_picocolors19.default.bold("/api/ablo/source")}`
+      `Provision your DB: ${import_picocolors20.default.bold("npx ablo migrate")} (creates your Ablo-model tables + the adapter tables; keep your own migrations for everything else), then mount ${import_picocolors20.default.bold(`${abloDir}/data-source.ts`)} at ${import_picocolors20.default.bold("/api/ablo/source")}`
     ],
     ...framework === "nextjs" ? [
-      `Wrap ${import_picocolors19.default.bold((0, import_path7.join)(layout.appBase, "layout.tsx"))} in ${import_picocolors19.default.bold("<Providers>")} (${(0, import_path7.join)(layout.appBase, "providers.tsx")}) and add your auth to ${import_picocolors19.default.bold((0, import_path7.join)(layout.appBase, "api", "ablo-session", "route.ts"))}`
+      `Wrap ${import_picocolors20.default.bold((0, import_path7.join)(layout.appBase, "layout.tsx"))} in ${import_picocolors20.default.bold("<Providers>")} (${(0, import_path7.join)(layout.appBase, "providers.tsx")}) and add your auth to ${import_picocolors20.default.bold((0, import_path7.join)(layout.appBase, "api", "ablo-session", "route.ts"))}`
     ] : [],
-    `Run ${import_picocolors19.default.bold(`${pm} run dev`)} and open two browser tabs \u2014 changes sync in real-time`,
+    `Run ${import_picocolors20.default.bold(`${pm} run dev`)} and open two browser tabs \u2014 changes sync in real-time`,
     ...agent ? [
-      `Run ${import_picocolors19.default.bold(`npx tsx ${abloDir}/agent.ts`)} \u2014 an AI teammate edits the same tasks`,
-      `Run ${import_picocolors19.default.bold("npx ablo logs")} to watch human + agent commits stream by`
+      `Run ${import_picocolors20.default.bold(`npx tsx ${abloDir}/agent.ts`)} \u2014 an AI teammate edits the same tasks`,
+      `Run ${import_picocolors20.default.bold("npx ablo logs")} to watch human + agent commits stream by`
     ] : []
   ];
   Me(steps.map((s, i) => `${i + 1}. ${s}`).join("\n"), "Next steps");
   const existingKey = resolveApiKey("sandbox");
   if (existingKey) {
     await ensureInitProject(opts);
-    Se(`Already authorized ${import_picocolors19.default.dim(`(${existingKey.slice(0, 11)}\u2026)`)} \u2014 run ${import_picocolors19.default.bold("npx ablo push")} next. ${import_picocolors19.default.dim("Docs:")} https://abloatai.com/docs`);
+    Se(`Already authorized ${import_picocolors20.default.dim(`(${existingKey.slice(0, 11)}\u2026)`)} \u2014 run ${import_picocolors20.default.bold("npx ablo push")} next. ${import_picocolors20.default.dim("Docs:")} https://abloatai.com/docs`);
     return;
   }
   if (interactive && opts.login) {
     const loginNow = await ye({ message: "Log in now? (opens your browser)", initialValue: true });
     if (!pD(loginNow) && loginNow) {
-      Se(`${import_picocolors19.default.dim("Docs:")} https://abloatai.com/docs`);
+      Se(`${import_picocolors20.default.dim("Docs:")} https://abloatai.com/docs`);
       await login();
       await ensureInitProject(opts);
       return;
     }
   }
-  Se(`Run ${import_picocolors19.default.bold("npx ablo login")} when ready. ${import_picocolors19.default.dim("Docs:")} https://abloatai.com/docs`);
+  Se(`Run ${import_picocolors20.default.bold("npx ablo login")} when ready. ${import_picocolors20.default.dim("Docs:")} https://abloatai.com/docs`);
 }
 function generateSchema() {
   return `import { defineSchema, model, relation, z } from '@abloatai/ablo/schema';
@@ -283251,7 +283670,7 @@ export {};
 }
 function generateEnv(storage, opts = {}) {
   const { includeApiKey = true } = opts;
-  const databaseBlock = storage === "direct" ? "# DEPRECATED direct connector. The client registers this connection (sent once\n# over TLS, stored sealed) so Ablo dials into your Postgres. Prefer a signed Data\n# Source endpoint; to keep the transaction log in your infra too, self-host the engine.\n# Use a dedicated non-superuser role; the browser never sees this value.\nDATABASE_URL=postgres://user:password@host:5432/db\n" : "# Used by ablo/data-source.ts (your DB endpoint) + `ablo migrate` \u2014 NOT the client.\n# Ablo never sees it; the browser never sees it. Your DB stays in your app.\nDATABASE_URL=postgres://user:password@host:5432/db\n";
+  const databaseBlock = storage === "direct" ? "# DEPRECATED direct connector. The client registers this connection (sent once\n# over TLS, stored sealed) so Ablo dials into your Postgres. Prefer logical\n# replication (`npx ablo connect`); to keep the transaction log in your infra too,\n# self-host the engine. Use a dedicated non-superuser role; the browser never sees this.\nDATABASE_URL=postgres://user:password@host:5432/db\n" : storage === "replication" ? "# Used by `npx ablo connect` to set up + register logical replication \u2014 the\n# DIRECT (un-pooled) endpoint. Ablo TAILS your WAL from here; it never writes.\n# The client never sees it; the browser never sees it. Your DB stays yours.\nDATABASE_URL=postgres://user:password@host:5432/db\n" : "# Used by ablo/data-source.ts (your DB endpoint) + `ablo migrate` \u2014 NOT the client.\n# Ablo never sees it; the browser never sees it. Your DB stays in your app.\nDATABASE_URL=postgres://user:password@host:5432/db\n";
   const webhookBlock = storage === "endpoint" ? "# Signing secret for the webhook receiver (app/api/ablo/webhooks/route.ts).\n# Ablo mints this when you register the endpoint's URL (POST /v1/webhook_endpoints\n# or the dashboard) and returns it once \u2014 paste it here.\nABLO_WEBHOOK_SECRET=whsec_your_endpoint_secret_here\n" : "";
   const apiKeyBlock = includeApiKey ? "# Ablo Sync Engine \u2014 use a sk_test_ key for local dev (`npx ablo push`)\nABLO_API_KEY=sk_test_your_key_here\n" : "";
   return `${apiKeyBlock}${webhookBlock}${databaseBlock}`;