@abloatai/cli 0.53.0 → 0.54.0

package/dist/cli.cjs

@@ -787,8 +787,8 @@ ${import_picocolors2.default.gray(d2)}  ${t}
           if (i) process.stdout.write(`${I2}  ${l2}...`);
           else if (t === "timer") process.stdout.write(`${I2}  ${l2} ${O2(g2)}`);
           else {
-            const z7 = ".".repeat(Math.floor(w2)).slice(0, 3);
-            process.stdout.write(`${I2}  ${l2}${z7}`);
+            const z8 = ".".repeat(Math.floor(w2)).slice(0, 3);
+            process.stdout.write(`${I2}  ${l2}${z8}`);
           }
           h2 = h2 + 1 < n.length ? h2 + 1 : 0, w2 = w2 < n.length ? w2 + 0.125 : 0;
         }, r2);
@@ -3970,7 +3970,7 @@ var init_observeCliError = __esm({
     import_errorObservation = require("@abloatai/transaction/errorObservation");
     import_errors5 = require("@abloatai/transaction/errors");
     dsn = process.env.ABLO_CLI_SENTRY_DSN ?? "https://1ac154bff10b06836e1ea9de9e0d92f0@o4510928209772544.ingest.de.sentry.io/4511660691423312" ?? "";
-    release = process.env.ABLO_CLI_RELEASE ?? "@abloatai/cli@0.53.0";
+    release = process.env.ABLO_CLI_RELEASE ?? "@abloatai/cli@0.54.0";
     initialized = false;
     nativeProcessExit = process.exit.bind(process);
     exitBoundaryInstalled = false;
@@ -4295,6 +4295,30 @@ var init_src2 = __esm({
   }
 });
 
+// src/cliEnvironment.ts
+function cliVersion() {
+  return "0.54.0";
+}
+function cliOs() {
+  const value = (0, import_node_os.platform)();
+  return value === "darwin" || value === "linux" || value === "win32" ? value : "other";
+}
+function cliArchitecture() {
+  const value = (0, import_node_os.arch)();
+  return value === "arm64" || value === "x64" || value === "ia32" ? value : "other";
+}
+function nodeMajorVersion() {
+  return Number(process.versions.node.split(".")[0]);
+}
+var import_node_os;
+var init_cliEnvironment = __esm({
+  "src/cliEnvironment.ts"() {
+    "use strict";
+    init_cjs_shims();
+    import_node_os = require("os");
+  }
+});
+
 // src/telemetry.ts
 function telemetryPath() {
   return (0, import_node_path.join)(configDir(), "telemetry.json");
@@ -4455,17 +4479,6 @@ function environmentBlocker() {
 function truthyEnvironmentValue(value) {
   return value !== void 0 && value !== "" && value !== "0" && value.toLowerCase() !== "false";
 }
-function cliVersion() {
-  return "0.53.0";
-}
-function cliOs() {
-  const value = (0, import_node_os.platform)();
-  return value === "darwin" || value === "linux" || value === "win32" ? value : "other";
-}
-function cliArchitecture() {
-  const value = (0, import_node_os.arch)();
-  return value === "arm64" || value === "x64" || value === "ia32" ? value : "other";
-}
 function durationBucket(durationMs) {
   if (durationMs < 1e3) return "under_1s";
   if (durationMs < 5e3) return "1s_to_5s";
@@ -4489,16 +4502,16 @@ function runTelemetryCommand(argv) {
   if (status2.blockedBy) console.log(`Environment override: ${status2.blockedBy}`);
   console.log(`Queued events: ${status2.queuedEvents}`);
 }
-var import_node_crypto2, import_node_fs, import_node_os, import_node_path, TELEMETRY_FILE_VERSION, MAX_QUEUED_EVENTS, MAX_FLUSH_EVENTS, DEFAULT_FLUSH_TIMEOUT_MS, flushInFlight;
+var import_node_crypto2, import_node_fs, import_node_path, TELEMETRY_FILE_VERSION, MAX_QUEUED_EVENTS, MAX_FLUSH_EVENTS, DEFAULT_FLUSH_TIMEOUT_MS, flushInFlight;
 var init_telemetry = __esm({
   "src/telemetry.ts"() {
     "use strict";
     init_cjs_shims();
     import_node_crypto2 = require("crypto");
     import_node_fs = require("fs");
-    import_node_os = require("os");
     import_node_path = require("path");
     init_src2();
+    init_cliEnvironment();
     init_controlPlane();
     init_config();
     TELEMETRY_FILE_VERSION = 1;
@@ -219754,11 +219767,11 @@ var require_commonjs2 = __commonJS({
           if (pad2) {
             const need = width - c.length;
             if (need > 0) {
-              const z7 = new Array(need + 1).join("0");
+              const z8 = new Array(need + 1).join("0");
               if (i < 0) {
-                c = "-" + z7 + c.slice(1);
+                c = "-" + z8 + c.slice(1);
               } else {
-                c = z7 + c;
+                c = z8 + c;
               }
             }
           }
@@ -283732,7 +283745,7 @@ Node text: ${this.#forgottenText}`;
 
 // src/index.ts
 init_cjs_shims();
-var import_picocolors30 = __toESM(require_picocolors(), 1);
+var import_picocolors31 = __toESM(require_picocolors(), 1);
 
 // src/migrate.ts
 init_cjs_shims();
@@ -284085,9 +284098,287 @@ function truncate(text, max) {
   return collapsed.length <= max ? collapsed : `${collapsed.slice(0, max - 1).trimEnd()}\u2026`;
 }
 
-// src/branches.ts
+// ../product-analytics/src/feedback.ts
 init_cjs_shims();
+var import_node_crypto3 = require("crypto");
+var import_zod5 = require("zod");
+init_events();
+var AGENT_FEEDBACK_VERSION = 1;
+var MAX_FEEDBACK_SUMMARY_LENGTH = 200;
+var MAX_FEEDBACK_DETAIL_LENGTH = 4e3;
+var FEEDBACK_KINDS = ["bug", "docs", "feature", "friction"];
+var feedbackKindSchema = import_zod5.z.enum(FEEDBACK_KINDS);
+var FEEDBACK_KIND_DESCRIPTIONS = {
+  bug: "It broke, or did something other than what it said it would.",
+  docs: "The answer was missing from the docs, or the docs were wrong.",
+  feature: "The thing you needed does not exist yet.",
+  friction: "It worked, and it was harder than it should have been."
+};
+var shortToken2 = import_zod5.z.string().trim().min(1).max(100);
+var feedbackContextSchema = import_zod5.z.strictObject({
+  /** The command in play, e.g. `push` — the registry name, not the full argv. */
+  command: shortToken2.optional(),
+  /** A code from the `ERROR_CODES` registry. The strongest clustering signal
+   *  there is: it groups reports by the failure, not by how it was worded. */
+  errorCode: shortToken2.optional(),
+  /** Which agent is reporting, e.g. `claude-code`. The world owns this set and
+   *  adds to it faster than we could ship an enum, so it stays an open token. */
+  reportedBy: shortToken2.optional(),
+  cliVersion: shortToken2.optional(),
+  os: cliOsSchema.optional(),
+  architecture: cliArchitectureSchema.optional(),
+  nodeMajorVersion: import_zod5.z.number().int().min(18).max(100).optional()
+});
+var agentFeedbackSchema = import_zod5.z.strictObject({
+  feedbackVersion: import_zod5.z.literal(AGENT_FEEDBACK_VERSION),
+  /** Idempotency: a retried submission is the same report, not a second one. */
+  submissionId: import_zod5.z.uuid(),
+  occurredAt: import_zod5.z.iso.datetime({ offset: true }),
+  kind: feedbackKindSchema,
+  /** One line. This is the ticket title a human reads in a list. */
+  summary: import_zod5.z.string().trim().min(1).max(MAX_FEEDBACK_SUMMARY_LENGTH),
+  /** What happened, in the reporter's own words. */
+  detail: import_zod5.z.string().trim().min(1).max(MAX_FEEDBACK_DETAIL_LENGTH).optional(),
+  context: feedbackContextSchema.default({})
+});
+var agentFeedbackSubmissionSchema = import_zod5.z.strictObject({
+  feedback: agentFeedbackSchema
+});
+var agentFeedbackReceiptSchema = import_zod5.z.strictObject({
+  submissionId: import_zod5.z.uuid(),
+  accepted: import_zod5.z.boolean(),
+  duplicate: import_zod5.z.boolean(),
+  clusterKey: import_zod5.z.string(),
+  clusterCount: import_zod5.z.number().int().positive()
+});
+
+// src/feedback.ts
+init_cjs_shims();
+var import_node_crypto4 = require("crypto");
+var import_node_fs2 = require("fs");
 var import_picocolors14 = __toESM(require_picocolors(), 1);
+init_dist2();
+var import_errors12 = require("@abloatai/transaction/errors");
+var import_errorObservation2 = require("@abloatai/transaction/errorObservation");
+init_cliEnvironment();
+init_controlPlane();
+init_config();
+init_theme();
+var KIND_WIDTH = Math.max(...FEEDBACK_KINDS.map((kind) => kind.length));
+var USAGE_LINES = FEEDBACK_KINDS.map(
+  (kind) => `    npx ablo feedback ${kind.padEnd(KIND_WIDTH)} "<one line>"  [--detail <text>]`
+).join("\n");
+var KIND_LINES = FEEDBACK_KINDS.map(
+  (kind) => `    ${kind.padEnd(KIND_WIDTH + 2)}${FEEDBACK_KIND_DESCRIPTIONS[kind]}`
+).join("\n");
+var FEEDBACK_USAGE = `  ablo feedback \u2014 tell us what got in your way
+
+  Usage
+${USAGE_LINES}
+
+  Kinds
+${KIND_LINES}
+
+  Options
+    --detail <text>       What happened, at length. Use \`-\` to read stdin.
+    --command <name>      The command in play, e.g. \`push\`.
+    --error-code <code>   The code the failure printed, e.g. \`schema_unknown_model\`.
+    --from <agent>        Who is reporting, e.g. \`claude-code\`. Detected when omitted.
+    --yes                 Send without the confirmation step (agents/CI).
+    --json                Print the receipt as JSON.
+
+  Connection strings, API keys, and addresses are removed from what you write
+  before it is sent, and on a terminal you see the redacted text first. Nothing
+  is read from your repository. Reports are grouped by what they describe, so
+  the receipt tells you how many others have hit the same thing.`;
+function parseFeedbackArgs(argv) {
+  const kindRaw = argv[0];
+  const kind = feedbackKindSchema.safeParse(kindRaw);
+  if (!kind.success) {
+    throw new import_errors12.AbloValidationError(
+      `\`ablo feedback\` needs a kind first: ${FEEDBACK_KINDS.join(", ")}.`,
+      { code: "cli_invalid_arguments" }
+    );
+  }
+  const positional2 = [];
+  let detail;
+  let command;
+  let errorCode;
+  let from;
+  let yes = false;
+  let json = false;
+  const flagValue = (flag2, value) => {
+    if (value === void 0 || value.startsWith("--")) {
+      throw new import_errors12.AbloValidationError(`\`${flag2}\` needs a value.`, {
+        code: "cli_invalid_arguments"
+      });
+    }
+    return value;
+  };
+  for (let i = 1; i < argv.length; i++) {
+    const arg = argv[i];
+    switch (arg) {
+      case "--detail":
+        detail = flagValue("--detail", argv[++i]);
+        break;
+      case "--command":
+        command = flagValue("--command", argv[++i]);
+        break;
+      case "--error-code":
+        errorCode = flagValue("--error-code", argv[++i]);
+        break;
+      case "--from":
+        from = flagValue("--from", argv[++i]);
+        break;
+      case "--yes":
+        yes = true;
+        break;
+      case "--json":
+        json = true;
+        break;
+      default:
+        if (arg !== void 0 && arg.startsWith("--")) {
+          throw new import_errors12.AbloValidationError(`\`${arg}\` is not an option of this command.`, {
+            code: "cli_invalid_arguments"
+          });
+        }
+        if (arg !== void 0) positional2.push(arg);
+    }
+  }
+  const summary = positional2.join(" ").trim();
+  if (!summary) {
+    throw new import_errors12.AbloValidationError(
+      "Say in one line what got in your way, in quotes after the kind.",
+      { code: "cli_invalid_arguments" }
+    );
+  }
+  if (summary.length > MAX_FEEDBACK_SUMMARY_LENGTH) {
+    throw new import_errors12.AbloValidationError(
+      `Keep the first line under ${MAX_FEEDBACK_SUMMARY_LENGTH} characters and put the rest in \`--detail\`.`,
+      { code: "cli_invalid_arguments" }
+    );
+  }
+  return {
+    kind: kind.data,
+    summary,
+    ...detail !== void 0 ? { detail } : {},
+    ...command !== void 0 ? { command } : {},
+    ...errorCode !== void 0 ? { errorCode } : {},
+    ...from !== void 0 ? { from } : {},
+    yes,
+    json
+  };
+}
+async function feedback(argv) {
+  if (argv.includes("--help") || argv.includes("-h") || argv.length === 0) {
+    console.log(FEEDBACK_USAGE);
+    return;
+  }
+  const args = parseFeedbackArgs(argv);
+  const detail = args.detail === "-" ? readStdin() : args.detail;
+  if (detail !== void 0 && detail.length > MAX_FEEDBACK_DETAIL_LENGTH) {
+    throw new import_errors12.AbloValidationError(
+      `\`--detail\` holds up to ${MAX_FEEDBACK_DETAIL_LENGTH} characters.`,
+      { code: "cli_invalid_arguments" }
+    );
+  }
+  const reporter = reportedBy(args.from);
+  const report = agentFeedbackSchema.parse({
+    feedbackVersion: AGENT_FEEDBACK_VERSION,
+    submissionId: (0, import_node_crypto4.randomUUID)(),
+    occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+    kind: args.kind,
+    summary: (0, import_errorObservation2.redactObservationString)(args.summary),
+    ...detail ? { detail: (0, import_errorObservation2.redactObservationString)(detail) } : {},
+    context: {
+      ...args.command !== void 0 ? { command: args.command } : {},
+      ...args.errorCode !== void 0 ? { errorCode: args.errorCode } : {},
+      ...reporter !== void 0 ? { reportedBy: reporter } : {},
+      cliVersion: cliVersion(),
+      os: cliOs(),
+      architecture: cliArchitecture(),
+      nodeMajorVersion: nodeMajorVersion()
+    }
+  });
+  const interactive = Boolean(process.stdout.isTTY && process.stdin.isTTY) && !args.yes;
+  if (interactive) {
+    printPreview(report);
+    const proceed = await ye({ message: "Send this?" });
+    if (pD(proceed) || !proceed) {
+      console.log(`  ${import_picocolors14.default.dim("Nothing sent.")}`);
+      return;
+    }
+  }
+  const managementKey = resolveManagementKey();
+  const receipt = await requestControlPlane({
+    path: "/v1/feedback",
+    method: "POST",
+    body: { feedback: report },
+    ...managementKey !== void 0 ? { apiKey: managementKey } : {},
+    responseSchema: agentFeedbackReceiptSchema,
+    timeoutMs: 1e4
+  });
+  if (args.json || process.env.ABLO_JSON === "1") {
+    console.log(JSON.stringify(receipt, null, 2));
+    return;
+  }
+  if (receipt.duplicate) {
+    console.log(`  ${import_picocolors14.default.dim("Already recorded \u2014 this report was sent before.")}`);
+    return;
+  }
+  console.log(`  ${import_picocolors14.default.green("\u2713")} Thank you. Recorded as ${import_picocolors14.default.dim(receipt.submissionId)}`);
+  if (receipt.clusterCount > 1) {
+    console.log(
+      `    ${import_picocolors14.default.dim(`${receipt.clusterCount} reports describe this same thing.`)}`
+    );
+  }
+}
+function printPreview(report) {
+  console.log(`
+  ${brand("ablo")} ${import_picocolors14.default.dim("feedback")} ${import_picocolors14.default.dim(report.kind)}
+`);
+  console.log(`  ${report.summary}`);
+  if (report.detail) {
+    console.log();
+    for (const line of report.detail.split("\n")) console.log(`  ${import_picocolors14.default.dim(line)}`);
+  }
+  const context = [
+    report.context.command ? `command ${report.context.command}` : null,
+    report.context.errorCode ? `code ${report.context.errorCode}` : null,
+    report.context.reportedBy ? `from ${report.context.reportedBy}` : null,
+    report.context.cliVersion ? `cli ${report.context.cliVersion}` : null,
+    report.context.os ?? null
+  ].filter((entry) => entry !== null);
+  console.log(`
+  ${import_picocolors14.default.dim(context.join(" \xB7 "))}
+`);
+}
+function reportedBy(explicit) {
+  if (explicit) return explicit;
+  const configured = process.env.ABLO_AGENT?.trim();
+  if (configured) return configured;
+  if (process.env.CLAUDECODE || process.env.CLAUDE_CODE_ENTRYPOINT) return "claude-code";
+  return void 0;
+}
+function readStdin() {
+  if (process.stdin.isTTY) {
+    throw new import_errors12.AbloValidationError(
+      "`--detail -` reads piped input. Pass the text directly instead.",
+      { code: "cli_invalid_arguments" }
+    );
+  }
+  try {
+    return (0, import_node_fs2.readFileSync)(0, "utf8").trim();
+  } catch {
+    throw new import_errors12.AbloValidationError("Could not read `--detail` from stdin.", {
+      code: "cli_invalid_arguments"
+    });
+  }
+}
+
+// src/branches.ts
+init_cjs_shims();
+var import_picocolors15 = __toESM(require_picocolors(), 1);
 var import_branches = require("@abloatai/transaction/branches");
 init_controlPlane();
 init_config();
@@ -284150,12 +284441,12 @@ function valueAfter(argv, flag2) {
 function print(branches2) {
   const slugWidth = Math.max(...branches2.map((branch) => branch.slug.length), 6);
   for (const branch of branches2) {
-    const marker = branch.root ? import_picocolors14.default.green("\u25CF") : import_picocolors14.default.dim("\u25CB");
-    const kind = branch.root ? import_picocolors14.default.green("root") : import_picocolors14.default.dim(branch.kind);
-    const state = branch.state === "ready" ? import_picocolors14.default.green(branch.state) : import_picocolors14.default.yellow(branch.state);
-    const expiry = branch.expires_at ? import_picocolors14.default.dim(` expires ${new Date(branch.expires_at).toLocaleDateString()}`) : "";
+    const marker = branch.root ? import_picocolors15.default.green("\u25CF") : import_picocolors15.default.dim("\u25CB");
+    const kind = branch.root ? import_picocolors15.default.green("root") : import_picocolors15.default.dim(branch.kind);
+    const state = branch.state === "ready" ? import_picocolors15.default.green(branch.state) : import_picocolors15.default.yellow(branch.state);
+    const expiry = branch.expires_at ? import_picocolors15.default.dim(` expires ${new Date(branch.expires_at).toLocaleDateString()}`) : "";
     console.log(
-      `  ${marker} ${branch.slug.padEnd(slugWidth)}  ${kind.padEnd(12)} ${state.padEnd(14)} ${import_picocolors14.default.dim(branch.id)}${expiry}`
+      `  ${marker} ${branch.slug.padEnd(slugWidth)}  ${kind.padEnd(12)} ${state.padEnd(14)} ${import_picocolors15.default.dim(branch.id)}${expiry}`
     );
   }
 }
@@ -284203,32 +284494,32 @@ async function readStatus(ref, context = {}) {
 }
 function printStatus(status2) {
   const { branch, schema, storage, data_source: source } = status2;
-  console.log(`  ${import_picocolors14.default.bold(branch.slug)} ${import_picocolors14.default.dim(branch.id)}`);
+  console.log(`  ${import_picocolors15.default.bold(branch.slug)} ${import_picocolors15.default.dim(branch.id)}`);
   console.log(
-    `  ${import_picocolors14.default.dim("state")}   ${branch.state === "ready" ? import_picocolors14.default.green(branch.state) : import_picocolors14.default.yellow(branch.state)}`
+    `  ${import_picocolors15.default.dim("state")}   ${branch.state === "ready" ? import_picocolors15.default.green(branch.state) : import_picocolors15.default.yellow(branch.state)}`
   );
   console.log(
-    `  ${import_picocolors14.default.dim("schema")}  ${schema.active ? `${import_picocolors14.default.green("active")} ${import_picocolors14.default.dim(`v${schema.version ?? "?"} \xB7 ${schema.hash ?? "no hash"}`)}` : import_picocolors14.default.red("missing")}`
+    `  ${import_picocolors15.default.dim("schema")}  ${schema.active ? `${import_picocolors15.default.green("active")} ${import_picocolors15.default.dim(`v${schema.version ?? "?"} \xB7 ${schema.hash ?? "no hash"}`)}` : import_picocolors15.default.red("missing")}`
   );
   if (!branch.root) {
-    const counts = schema.changes > 0 ? import_picocolors14.default.dim(
+    const counts = schema.changes > 0 ? import_picocolors15.default.dim(
       ` \xB7 ${schema.changes} changes, ${schema.warnings} warnings, ${schema.blockers} blockers`
     ) : "";
     console.log(
-      `  ${import_picocolors14.default.dim("parent")}  ${import_picocolors14.default.bold(schema.parent_compatibility)}${counts}`
+      `  ${import_picocolors15.default.dim("parent")}  ${import_picocolors15.default.bold(schema.parent_compatibility)}${counts}`
     );
   }
   const sourceLabel = source ? `${source.connection} \xB7 ${source.host ?? "unknown host"}${source.database ? `/${source.database}` : ""} \xB7 ${source.status}` : storage.kind === "unbound" ? "not connected to a database" : storage.kind === "internal" ? `Ablo internal product storage \xB7 ${storage.implementation}` : storage.kind === "blocked" ? "storage configuration needs attention" : "customer database connection unavailable";
-  console.log(`  ${import_picocolors14.default.dim("data")}    ${sourceLabel}`);
+  console.log(`  ${import_picocolors15.default.dim("data")}    ${sourceLabel}`);
   if (status2.ready) {
     console.log(`
-  ${import_picocolors14.default.green("\u2713 ready")}`);
+  ${import_picocolors15.default.green("\u2713 ready")}`);
   } else {
     console.log(`
-  ${import_picocolors14.default.red("\u2717 not ready")}`);
+  ${import_picocolors15.default.red("\u2717 not ready")}`);
     for (const blocker2 of status2.blockers) {
-      console.log(`    ${import_picocolors14.default.red("\u2022")} ${blocker2.problem}`);
-      console.log(`      ${import_picocolors14.default.dim(`Fix: ${blocker2.fix}`)}`);
+      console.log(`    ${import_picocolors15.default.red("\u2022")} ${blocker2.problem}`);
+      console.log(`      ${import_picocolors15.default.dim(`Fix: ${blocker2.fix}`)}`);
     }
   }
 }
@@ -284294,12 +284585,12 @@ async function branches(argv) {
         )
       );
     } else {
-      console.log(`  ${import_picocolors14.default.green("\u2713")} ${row.slug} ${import_picocolors14.default.dim(row.id)}`);
-      console.log(import_picocolors14.default.dim(`    parent ${row.parent_branch_id ?? "none"} \xB7 ${row.state}`));
+      console.log(`  ${import_picocolors15.default.green("\u2713")} ${row.slug} ${import_picocolors15.default.dim(row.id)}`);
+      console.log(import_picocolors15.default.dim(`    parent ${row.parent_branch_id ?? "none"} \xB7 ${row.state}`));
       if (credential) {
         console.log(credential.api_key);
         console.error(
-          import_picocolors14.default.dim(`  expires ${credential.expires_at} \xB7 branch ${credential.branch_id}`)
+          import_picocolors15.default.dim(`  expires ${credential.expires_at} \xB7 branch ${credential.branch_id}`)
         );
       }
     }
@@ -284324,7 +284615,7 @@ async function branches(argv) {
       throw new Error(message(response.body, `Could not delete branch (HTTP ${response.status}).`));
     }
     const row = import_branches.branchResponseSchema.parse(response.body);
-    console.log(`  ${import_picocolors14.default.green("\u2713")} deleted ${row.slug} ${import_picocolors14.default.dim(row.id)}`);
+    console.log(`  ${import_picocolors15.default.green("\u2713")} deleted ${row.slug} ${import_picocolors15.default.dim(row.id)}`);
     return;
   }
   if (command === "credential") {
@@ -284336,7 +284627,7 @@ async function branches(argv) {
     if (argv.includes("--json")) console.log(JSON.stringify(credential, null, 2));
     else {
       console.log(credential.api_key);
-      console.error(import_picocolors14.default.dim(`  expires ${credential.expires_at} \xB7 branch ${credential.branch_id}`));
+      console.error(import_picocolors15.default.dim(`  expires ${credential.expires_at} \xB7 branch ${credential.branch_id}`));
     }
     return;
   }
@@ -284345,18 +284636,18 @@ async function branches(argv) {
 
 // src/branchDev.ts
 init_cjs_shims();
-var import_node_crypto3 = require("crypto");
+var import_node_crypto5 = require("crypto");
 var import_node_child_process = require("child_process");
 var import_branches2 = require("@abloatai/transaction/branches");
-var import_errors13 = require("@abloatai/transaction/errors");
+var import_errors14 = require("@abloatai/transaction/errors");
 init_config();
 init_telemetry();
 
 // src/dev.ts
 init_cjs_shims();
-var import_errors12 = require("@abloatai/transaction/errors");
+var import_errors13 = require("@abloatai/transaction/errors");
 var import_credentialPolicy2 = require("@abloatai/transaction/auth/credentialPolicy");
-var import_picocolors15 = __toESM(require_picocolors(), 1);
+var import_picocolors16 = __toESM(require_picocolors(), 1);
 init_dist2();
 var import_fs7 = require("fs");
 var import_path5 = require("path");
@@ -284400,7 +284691,7 @@ function parseDevArgs(argv) {
         sourcePath = argv[++i] ?? sourcePath;
         break;
       default:
-        throw new import_errors12.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
+        throw new import_errors13.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
     }
   }
   url = apiBaseUrl(url);
@@ -284418,8 +284709,8 @@ function parseDevArgs(argv) {
 async function loadLocalSourceHandler(sourcePath) {
   const abs = (0, import_path5.resolve)(process.cwd(), sourcePath);
   if (!(0, import_fs7.existsSync)(abs)) {
-    throw new import_errors12.AbloValidationError(
-      `local Data Source not found at ${import_picocolors15.default.bold(sourcePath)}. Add the signed Data Source handler described by ${import_picocolors15.default.bold("npx ablo docs data-sources")}, or pass ${import_picocolors15.default.bold("--source <path>")}.`,
+    throw new import_errors13.AbloValidationError(
+      `local Data Source not found at ${import_picocolors16.default.bold(sourcePath)}. Add the signed Data Source handler described by ${import_picocolors16.default.bold("npx ablo docs data-sources")}, or pass ${import_picocolors16.default.bold("--source <path>")}.`,
       { code: "cli_invalid_arguments" }
     );
   }
@@ -284429,8 +284720,8 @@ async function loadLocalSourceHandler(sourcePath) {
   const nested = mod.default && typeof mod.default === "object" ? mod.default : void 0;
   const handler = mod.POST ?? nested?.POST;
   if (typeof handler !== "function") {
-    throw new import_errors12.AbloValidationError(
-      `${import_picocolors15.default.bold(sourcePath)} must export a ${import_picocolors15.default.bold("POST(request)")} Data Source handler.`,
+    throw new import_errors13.AbloValidationError(
+      `${import_picocolors16.default.bold(sourcePath)} must export a ${import_picocolors16.default.bold("POST(request)")} Data Source handler.`,
       { code: "cli_invalid_arguments" }
     );
   }
@@ -284453,7 +284744,7 @@ async function registerLocalSource(args) {
   });
   if (!response.ok) {
     const body = await response.text();
-    throw new import_errors12.AbloValidationError(
+    throw new import_errors13.AbloValidationError(
       `Could not register the local Data Source (${response.status}): ${body}`,
       { code: "cli_invalid_arguments" }
     );
@@ -284463,19 +284754,19 @@ function classifyKey(apiKey) {
   if (!apiKey) {
     return {
       ok: false,
-      reason: `No API key. Run ${import_picocolors15.default.bold("npx ablo login")}, or set a branch-bound ${import_picocolors15.default.bold("ABLO_API_KEY")}. ${import_picocolors15.default.bold("npx ablo dev")} prepares a development branch.`
+      reason: `No API key. Run ${import_picocolors16.default.bold("npx ablo login")}, or set a branch-bound ${import_picocolors16.default.bold("ABLO_API_KEY")}. ${import_picocolors16.default.bold("npx ablo dev")} prepares a development branch.`
     };
   }
   if ((0, import_credentialPolicy2.classifyCredentialKind)(apiKey) === "secret") return { ok: true };
   if ((0, import_credentialPolicy2.classifyCredentialKind)(apiKey) === "restricted") {
     return {
       ok: false,
-      reason: `Authoring schema needs a branch-bound secret ${import_picocolors15.default.bold("sk_")} key. ${import_picocolors15.default.bold("npx ablo dev")} prepares a development branch. A restricted ${import_picocolors15.default.bold("rk_")} key carries only the scopes it was minted with.`
+      reason: `Authoring schema needs a branch-bound secret ${import_picocolors16.default.bold("sk_")} key. ${import_picocolors16.default.bold("npx ablo dev")} prepares a development branch. A restricted ${import_picocolors16.default.bold("rk_")} key carries only the scopes it was minted with.`
     };
   }
   return {
     ok: false,
-    reason: `${import_picocolors15.default.bold("ABLO_API_KEY")} is not a secret Ablo key. Expected a branch-bound ${import_picocolors15.default.bold("sk_\u2026")} credential. Run ${import_picocolors15.default.bold("npx ablo dev")} to prepare a development branch.`
+    reason: `${import_picocolors16.default.bold("ABLO_API_KEY")} is not a secret Ablo key. Expected a branch-bound ${import_picocolors16.default.bold("sk_\u2026")} credential. Run ${import_picocolors16.default.bold("npx ablo dev")} to prepare a development branch.`
   };
 }
 function wireEnvLocal(apiKey, cwd = process.cwd(), projectId, branchId) {
@@ -284493,7 +284784,7 @@ ${projectLine ? `${projectLine}
 ` : ""}`,
       { mode: 384 }
     );
-    action = `Created ${import_picocolors15.default.bold(".env.local")} with ${import_picocolors15.default.bold("ABLO_API_KEY")}`;
+    action = `Created ${import_picocolors16.default.bold(".env.local")} with ${import_picocolors16.default.bold("ABLO_API_KEY")}`;
   } else {
     const content = (0, import_fs7.readFileSync)(envPath, "utf8");
     const match = /^ABLO_API_KEY=(.*)$/m.exec(content);
@@ -284501,12 +284792,12 @@ ${projectLine ? `${projectLine}
     if (!match) {
       (0, import_fs7.appendFileSync)(envPath, `${content.endsWith("\n") || content.length === 0 ? "" : "\n"}${line}
 `);
-      action = `Added ${import_picocolors15.default.bold("ABLO_API_KEY")} to ${import_picocolors15.default.bold(".env.local")}`;
+      action = `Added ${import_picocolors16.default.bold("ABLO_API_KEY")} to ${import_picocolors16.default.bold(".env.local")}`;
     } else if (existing === apiKey) {
-      action = `${import_picocolors15.default.bold(".env.local")} already has this key`;
+      action = `${import_picocolors16.default.bold(".env.local")} already has this key`;
     } else {
       (0, import_fs7.writeFileSync)(envPath, content.replace(/^ABLO_API_KEY=.*$/m, line));
-      action = `Updated ${import_picocolors15.default.bold("ABLO_API_KEY")} in ${import_picocolors15.default.bold(".env.local")} ${import_picocolors15.default.dim(`(was ${existing.slice(0, 12)}\u2026)`)}`;
+      action = `Updated ${import_picocolors16.default.bold("ABLO_API_KEY")} in ${import_picocolors16.default.bold(".env.local")} ${import_picocolors16.default.dim(`(was ${existing.slice(0, 12)}\u2026)`)}`;
     }
     if (projectLine) {
       const next = (0, import_fs7.readFileSync)(envPath, "utf8");
@@ -284538,7 +284829,7 @@ ${projectLine ? `${projectLine}
 `}.env.local
 `
     );
-    gitignoreNote = ` Added ${import_picocolors15.default.bold(".env.local")} to ${import_picocolors15.default.bold(".gitignore")} so the key can't be committed.`;
+    gitignoreNote = ` Added ${import_picocolors16.default.bold(".env.local")} to ${import_picocolors16.default.bold(".gitignore")} so the key can't be committed.`;
   }
   return `${action}.${gitignoreNote}`;
 }
@@ -284553,7 +284844,7 @@ async function runPush(schema, args) {
   if (ok) {
     return {
       ok: true,
-      message: body.unchanged ? `schema unchanged ${import_picocolors15.default.dim(`(v${body.version})`)}` : `schema pushed (${args.planeLabel}) ${import_picocolors15.default.dim(`(v${body.version}, hash ${body.hash})`)}`
+      message: body.unchanged ? `schema unchanged ${import_picocolors16.default.dim(`(v${body.version})`)}` : `schema pushed (${args.planeLabel}) ${import_picocolors16.default.dim(`(v${body.version}, hash ${body.hash})`)}`
     };
   }
   if (status2 === 409) {
@@ -284562,9 +284853,9 @@ async function runPush(schema, args) {
       return {
         ok: false,
         message: [
-          import_picocolors15.default.bold("Replication reset required \u2014 a removed model still has live rows in this log plane."),
-          ...models.map((model) => import_picocolors15.default.yellow(`  Live vanished model: ${String(model)}`)),
-          import_picocolors15.default.dim(`  Use ${import_picocolors15.default.bold("--rename old:new")} to carry it forward, or ${import_picocolors15.default.bold("--force")} to accept the drop/reset.`)
+          import_picocolors16.default.bold("Replication reset required \u2014 a removed model still has live rows in this log plane."),
+          ...models.map((model) => import_picocolors16.default.yellow(`  Live vanished model: ${String(model)}`)),
+          import_picocolors16.default.dim(`  Use ${import_picocolors16.default.bold("--rename old:new")} to carry it forward, or ${import_picocolors16.default.bold("--force")} to accept the drop/reset.`)
         ].join("\n")
       };
     }
@@ -284574,46 +284865,46 @@ async function runPush(schema, args) {
       (s) => s.shadowed != null
     );
     const lines = [
-      import_picocolors15.default.bold("Incompatible schema change \u2014 not safe to apply as-is."),
+      import_picocolors16.default.bold("Incompatible schema change \u2014 not safe to apply as-is."),
       "",
-      ...unexecutable.map((u2) => import_picocolors15.default.red(fmtSignal(u2))),
-      ...warnings.map((w2) => import_picocolors15.default.yellow(fmtSignal(w2))),
+      ...unexecutable.map((u2) => import_picocolors16.default.red(fmtSignal(u2))),
+      ...warnings.map((w2) => import_picocolors16.default.yellow(fmtSignal(w2))),
       "",
       ...hasShadowed ? [
-        import_picocolors15.default.dim(
+        import_picocolors16.default.dim(
           "  These models exist in the baseline above but not in your push. Sandbox readers"
         ),
-        import_picocolors15.default.dim(
+        import_picocolors16.default.dim(
           "  fall back to the production schema until you push your own, so applying this drops them."
         ),
         ""
       ] : [],
-      import_picocolors15.default.dim(
-        `  Fix: ${import_picocolors15.default.bold("ablo push --force")} to apply anyway, or ${import_picocolors15.default.bold("--rename old:new")} if you renamed a model.`
+      import_picocolors16.default.dim(
+        `  Fix: ${import_picocolors16.default.bold("ablo push --force")} to apply anyway, or ${import_picocolors16.default.bold("--rename old:new")} if you renamed a model.`
       )
     ];
     return { ok: false, message: lines.join("\n") };
   }
   if (status2 === 403) {
     const serverSays = body.message ?? body.reason;
-    const hint = schemaPushStorageHint(body.code) ?? (body.code === "database_role_cannot_enforce_rls" ? `Run ${import_picocolors15.default.bold("npx ablo migrate")} \u2014 it creates the scoped role for you (your DB credential never leaves this machine).` : `Schema authoring needs a branch-bound ${import_picocolors15.default.bold("sk_")} key with ${import_picocolors15.default.bold("schema:push")} \u2014 manage keys at ${import_picocolors15.default.cyan("https://abloatai.com")}.`);
+    const hint = schemaPushStorageHint(body.code) ?? (body.code === "database_role_cannot_enforce_rls" ? `Run ${import_picocolors16.default.bold("npx ablo migrate")} \u2014 it creates the scoped role for you (your DB credential never leaves this machine).` : `Schema authoring needs a branch-bound ${import_picocolors16.default.bold("sk_")} key with ${import_picocolors16.default.bold("schema:push")} \u2014 manage keys at ${import_picocolors16.default.cyan("https://abloatai.com")}.`);
     return {
       ok: false,
       message: `${serverSays ?? "This key can't author schema (missing schema:push scope)."}
-` + import_picocolors15.default.dim(hint)
+` + import_picocolors16.default.dim(hint)
     };
   }
   const serverMessage = String(body.message ?? body.reason ?? bodyText);
   const storageHint = schemaPushStorageHint(body.code);
   if (storageHint) {
     return { ok: false, message: `${serverMessage}
-${import_picocolors15.default.dim(storageHint)}` };
+${import_picocolors16.default.dim(storageHint)}` };
   }
   if (looksLikeCredentialRefusal(serverMessage)) {
     const pooled = await poolerExplanation(apiBaseUrl(), args.apiKey);
     if (pooled) {
       return { ok: false, message: `${serverMessage}
-${import_picocolors15.default.dim(pooled)}` };
+${import_picocolors16.default.dim(pooled)}` };
     }
   }
   return { ok: false, message: `Push failed (${status2}): ${serverMessage}` };
@@ -284623,32 +284914,32 @@ async function dev(argv, runtime = {}) {
   try {
     args = parseDevArgs(argv);
   } catch (err) {
-    console.error(import_picocolors15.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors16.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (runtime.apiKey) args.apiKey = runtime.apiKey;
   else if (!args.apiKey) args.apiKey = resolveRuntimeApiKey("sandbox").key;
   if (runtime.branch) args.planeLabel = runtime.branch.slug;
   if (args.local && !args.watch) {
-    throw new import_errors12.AbloValidationError(
-      `${import_picocolors15.default.bold("--local")} opens a long-lived secure connector and cannot be combined with ${import_picocolors15.default.bold("--no-watch")}.`,
+    throw new import_errors13.AbloValidationError(
+      `${import_picocolors16.default.bold("--local")} opens a long-lived secure connector and cannot be combined with ${import_picocolors16.default.bold("--no-watch")}.`,
       { code: "cli_invalid_arguments" }
     );
   }
   const key = classifyKey(args.apiKey);
   if (!key.ok) {
-    console.error(import_picocolors15.default.red(`  ${key.reason}`));
+    console.error(import_picocolors16.default.red(`  ${key.reason}`));
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors15.default.dim("push")} ${import_picocolors15.default.dim(`(${args.planeLabel})`)}
+  ${brand("ablo")} ${import_picocolors16.default.dim("push")} ${import_picocolors16.default.dim(`(${args.planeLabel})`)}
 `);
   if (runtime.branch) {
     console.log(
-      `  ${import_picocolors15.default.dim("branch")}  ${import_picocolors15.default.bold(runtime.branch.slug)} ${import_picocolors15.default.dim(runtime.branch.id)}`
+      `  ${import_picocolors16.default.dim("branch")}  ${import_picocolors16.default.bold(runtime.branch.slug)} ${import_picocolors16.default.dim(runtime.branch.id)}`
     );
     console.log(
-      `  ${import_picocolors15.default.dim("key")}     temporary \xB7 expires ${runtime.branch.expiresAt}`
+      `  ${import_picocolors16.default.dim("key")}     temporary \xB7 expires ${runtime.branch.expiresAt}`
     );
   }
   let localAbort = null;
@@ -284668,27 +284959,27 @@ async function dev(argv, runtime = {}) {
       client: "ablo-dev",
       onStatus(status2) {
         if (status2 === "ready") {
-          console.log(`  ${import_picocolors15.default.green("\u2713")} local Postgres connected through the secure reverse channel`);
+          console.log(`  ${import_picocolors16.default.green("\u2713")} local Postgres connected through the secure reverse channel`);
         }
       },
       onError(error) {
-        console.error(import_picocolors15.default.yellow(`  local connector: ${error instanceof Error ? error.message : String(error)}`));
+        console.error(import_picocolors16.default.yellow(`  local connector: ${error instanceof Error ? error.message : String(error)}`));
       }
     });
     void connector.run(localAbort.signal).catch((error) => {
-      console.error(import_picocolors15.default.red(`  local connector stopped: ${error instanceof Error ? error.message : String(error)}`));
+      console.error(import_picocolors16.default.red(`  local connector stopped: ${error instanceof Error ? error.message : String(error)}`));
     });
-    console.log(`  ${import_picocolors15.default.dim("source")}  ${args.sourcePath} ${import_picocolors15.default.dim("(outbound connector; no public URL)")}`);
+    console.log(`  ${import_picocolors16.default.dim("source")}  ${args.sourcePath} ${import_picocolors16.default.dim("(outbound connector; no public URL)")}`);
   }
   const schema = await loadSchema(args.schemaPath, args.exportName);
   const modelCount = Object.keys(schema.models).length;
   console.log(
-    `  ${import_picocolors15.default.dim("schema")}  ${import_picocolors15.default.bold(args.schemaPath)} ${import_picocolors15.default.dim(`(${modelCount} models, hash ${(0, import_schema6.schemaHash)(schema)})`)}`
+    `  ${import_picocolors16.default.dim("schema")}  ${import_picocolors16.default.bold(args.schemaPath)} ${import_picocolors16.default.dim(`(${modelCount} models, hash ${(0, import_schema6.schemaHash)(schema)})`)}`
   );
   if (!runtime.branch) {
-    console.log(`  ${import_picocolors15.default.dim("key")}     ${args.apiKey.slice(0, 12)}\u2026`);
+    console.log(`  ${import_picocolors16.default.dim("key")}     ${args.apiKey.slice(0, 12)}\u2026`);
   }
-  console.log(`  ${import_picocolors15.default.dim("api")}     ${args.url}
+  console.log(`  ${import_picocolors16.default.dim("api")}     ${args.url}
 `);
   const s = Y2();
   s.start("Pushing schema definition (development branch)");
@@ -284701,30 +284992,30 @@ async function dev(argv, runtime = {}) {
   if (runtime.branch) {
     console.log(
       `
-  ${import_picocolors15.default.green("\u2713")} ${wireEnvLocal(args.apiKey, process.cwd(), runtime.branch.projectId, runtime.branch.id)}`
+  ${import_picocolors16.default.green("\u2713")} ${wireEnvLocal(args.apiKey, process.cwd(), runtime.branch.projectId, runtime.branch.id)}`
     );
     console.log(
-      `  ${import_picocolors15.default.dim(`Temporary branch credential expires ${runtime.branch.expiresAt}; rerun ablo dev to rotate it.`)}`
+      `  ${import_picocolors16.default.dim(`Temporary branch credential expires ${runtime.branch.expiresAt}; rerun ablo dev to rotate it.`)}`
     );
     if (process.env.ABLO_API_KEY && process.env.ABLO_API_KEY !== args.apiKey) {
       console.log(
-        import_picocolors15.default.yellow(
+        import_picocolors16.default.yellow(
           `  An exported ABLO_API_KEY overrides .env.local for child processes; unset it before starting your app.`
         )
       );
     }
   } else if (process.env.ABLO_API_KEY) {
     console.log(`
-  ${import_picocolors15.default.green("\u2713")} ${import_picocolors15.default.bold("ABLO_API_KEY")} is set in this shell \u2014 the SDK reads it directly.`);
+  ${import_picocolors16.default.green("\u2713")} ${import_picocolors16.default.bold("ABLO_API_KEY")} is set in this shell \u2014 the SDK reads it directly.`);
   } else {
     console.log(`
-  ${import_picocolors15.default.green("\u2713")} ${wireEnvLocal(args.apiKey)}`);
-    console.log(`  ${import_picocolors15.default.dim("Frameworks load it automatically; plain Node: node --env-file=.env.local app.ts")}`);
+  ${import_picocolors16.default.green("\u2713")} ${wireEnvLocal(args.apiKey)}`);
+    console.log(`  ${import_picocolors16.default.dim("Frameworks load it automatically; plain Node: node --env-file=.env.local app.ts")}`);
   }
   console.log(`  Your app is wired for ${runtime.branch ? `branch ${runtime.branch.slug}` : "this branch"}.`);
   if (!args.watch) return;
   const abs = (0, import_path5.resolve)(process.cwd(), args.schemaPath);
-  console.log(`  ${import_picocolors15.default.dim(`watching ${args.schemaPath} \u2026 (Ctrl-C to stop)`)}
+  console.log(`  ${import_picocolors16.default.dim(`watching ${args.schemaPath} \u2026 (Ctrl-C to stop)`)}
 `);
   let timer2 = null;
   let pushing = false;
@@ -284744,7 +285035,7 @@ async function dev(argv, runtime = {}) {
       const r2 = await runPush(next, args);
       s2.stop(r2.message, r2.ok ? 0 : 1);
     } catch (err) {
-      s2.stop(import_picocolors15.default.red(`schema reload failed: ${err instanceof Error ? err.message : String(err)}`), 1);
+      s2.stop(import_picocolors16.default.red(`schema reload failed: ${err instanceof Error ? err.message : String(err)}`), 1);
     } finally {
       pushing = false;
     }
@@ -284753,7 +285044,7 @@ async function dev(argv, runtime = {}) {
     watcher.close();
     localAbort?.abort();
     console.log(`
-  ${import_picocolors15.default.dim("stopped.")}`);
+  ${import_picocolors16.default.dim("stopped.")}`);
     process.exit(0);
   };
   process.on("SIGINT", stop);
@@ -284781,7 +285072,7 @@ function parseBranchDevArgs(argv) {
     const arg = argv[index];
     if (!arg) continue;
     if (arg === "--no-branch") {
-      throw new import_errors13.AbloValidationError(
+      throw new import_errors14.AbloValidationError(
         "--no-branch was removed: development is branch-isolated. Use --branch <slug> to select explicitly.",
         { code: "cli_invalid_arguments" }
       );
@@ -284789,7 +285080,7 @@ function parseBranchDevArgs(argv) {
     if (arg === "--branch") {
       branchSlug = argv[++index];
       if (!branchSlug) {
-        throw new import_errors13.AbloValidationError("--branch requires a slug", {
+        throw new import_errors14.AbloValidationError("--branch requires a slug", {
           code: "cli_invalid_arguments"
         });
       }
@@ -284798,7 +285089,7 @@ function parseBranchDevArgs(argv) {
     if (arg === "--branch-ttl-hours") {
       const value = Number(argv[++index]);
       if (!Number.isInteger(value) || value < 1 || value > 168) {
-        throw new import_errors13.AbloValidationError("--branch-ttl-hours must be between 1 and 168", {
+        throw new import_errors14.AbloValidationError("--branch-ttl-hours must be between 1 and 168", {
           code: "cli_invalid_arguments"
         });
       }
@@ -284816,12 +285107,12 @@ function parseBranchDevArgs(argv) {
 function branchSlugFromRef(ref) {
   const base = ref.normalize("NFKD").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   if (!base) {
-    throw new import_errors13.AbloValidationError(`cannot derive an Ablo branch slug from "${ref}"`, {
+    throw new import_errors14.AbloValidationError(`cannot derive an Ablo branch slug from "${ref}"`, {
       code: "cli_invalid_arguments"
     });
   }
   const nonRoot = base === "production" ? "production-dev" : base;
-  const shortened = nonRoot.length <= 40 ? nonRoot : `${nonRoot.slice(0, 31).replace(/-+$/g, "")}-${(0, import_node_crypto3.createHash)("sha256").update(nonRoot).digest("hex").slice(0, 8)}`;
+  const shortened = nonRoot.length <= 40 ? nonRoot : `${nonRoot.slice(0, 31).replace(/-+$/g, "")}-${(0, import_node_crypto5.createHash)("sha256").update(nonRoot).digest("hex").slice(0, 8)}`;
   return import_branches2.branchSlugSchema.parse(shortened);
 }
 function gitBranch() {
@@ -284838,7 +285129,7 @@ function gitBranch() {
 function discoverBranchRef(explicit, env = process.env, readGitBranch = gitBranch) {
   const value = explicit ?? env.ABLO_BRANCH ?? env.GITHUB_HEAD_REF ?? env.GITHUB_REF_NAME ?? env.VERCEL_GIT_COMMIT_REF ?? env.CI_COMMIT_REF_NAME ?? readGitBranch();
   if (!value) {
-    throw new import_errors13.AbloValidationError(
+    throw new import_errors14.AbloValidationError(
       "Could not determine the Git branch. Pass --branch <slug> or set ABLO_BRANCH.",
       { code: "cli_invalid_arguments" }
     );
@@ -284856,13 +285147,13 @@ async function runBranchDev(argv, dependencies = {}) {
   const slug = branchSlugFromRef(ref);
   const managementKey = dependencies.resolveManagementKey?.() ?? resolveManagementKey();
   if (!managementKey) {
-    throw new import_errors13.AbloValidationError(
+    throw new import_errors14.AbloValidationError(
       "Creating a development branch needs a project management credential. Run `npx ablo login` or set ABLO_MANAGEMENT_KEY.",
       { code: "cli_invalid_arguments" }
     );
   }
   if (!managementKey.startsWith("mk_")) {
-    throw new import_errors13.AbloValidationError(
+    throw new import_errors14.AbloValidationError(
       "Branch creation needs the active project management credential (mk_\u2026). Run `npx ablo login` to refresh it.",
       { code: "cli_invalid_arguments" }
     );
@@ -284890,8 +285181,8 @@ async function runBranchDev(argv, dependencies = {}) {
 
 // src/whoami.ts
 init_cjs_shims();
-var import_picocolors16 = __toESM(require_picocolors(), 1);
-var import_errors14 = require("@abloatai/transaction/errors");
+var import_picocolors17 = __toESM(require_picocolors(), 1);
+var import_errors15 = require("@abloatai/transaction/errors");
 init_config();
 init_controlPlane();
 
@@ -284966,7 +285257,7 @@ function parseWhoamiArgs(argv) {
       case "--key": {
         const value = argv[++i];
         if (!value || value.startsWith("--")) {
-          throw new import_errors14.AbloValidationError("`--key` needs a credential value.", {
+          throw new import_errors15.AbloValidationError("`--key` needs a credential value.", {
             code: "cli_invalid_arguments"
           });
         }
@@ -284976,12 +285267,12 @@ function parseWhoamiArgs(argv) {
       case "--key-env": {
         const value = argv[++i];
         if (!value || value.startsWith("--")) {
-          throw new import_errors14.AbloValidationError("`--key-env` needs an environment variable name.", {
+          throw new import_errors15.AbloValidationError("`--key-env` needs an environment variable name.", {
             code: "cli_invalid_arguments"
           });
         }
         if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(value)) {
-          throw new import_errors14.AbloValidationError(
+          throw new import_errors15.AbloValidationError(
             `\`${value}\` is not a valid environment variable name.`,
             { code: "cli_invalid_arguments" }
           );
@@ -284990,13 +285281,13 @@ function parseWhoamiArgs(argv) {
         break;
       }
       default:
-        throw new import_errors14.AbloValidationError(`unknown whoami flag: ${arg}`, {
+        throw new import_errors15.AbloValidationError(`unknown whoami flag: ${arg}`, {
           code: "cli_invalid_arguments"
         });
     }
   }
   if (key && keyEnv) {
-    throw new import_errors14.AbloValidationError("Choose one credential source: `--key` or `--key-env`.", {
+    throw new import_errors15.AbloValidationError("Choose one credential source: `--key` or `--key-env`.", {
       code: "cli_invalid_arguments"
     });
   }
@@ -285007,7 +285298,7 @@ function selectWhoamiCredential(args, cwd = process.cwd()) {
   if (args.keyEnv) {
     const found = readProjectEnvVariable(args.keyEnv, cwd);
     if (!found) {
-      throw new import_errors14.AbloAuthenticationError(
+      throw new import_errors15.AbloAuthenticationError(
         `${args.keyEnv} is not set in the process environment, .env.local, or .env.`,
         { code: "cli_api_key_missing" }
       );
@@ -285036,7 +285327,7 @@ function selectWhoamiCredential(args, cwd = process.cwd()) {
     };
   }
   const ambient = ambientEnvKeyNote();
-  throw new import_errors14.AbloAuthenticationError(
+  throw new import_errors15.AbloAuthenticationError(
     `No credential found. Run \`ablo login\`, set ABLO_API_KEY, or pass \`--key-env <NAME>\`.${ambient ? `
 
 ${ambient}` : ""}`,
@@ -285054,7 +285345,7 @@ async function whoami(argv) {
   });
   const confirmed = target.confirmed;
   if (!confirmed) {
-    throw new import_errors14.AbloAuthenticationError(
+    throw new import_errors15.AbloAuthenticationError(
       "The server did not confirm an identity for this credential.",
       { code: "identity_resolve_failed" }
     );
@@ -285091,18 +285382,18 @@ async function whoami(argv) {
     return;
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors16.default.dim("whoami")}
+  ${brand("ablo")} ${import_picocolors17.default.dim("whoami")}
 `);
   console.log(
-    `  ${import_picocolors16.default.dim("key")}     ${selected.key.slice(0, 12)}\u2026 ${import_picocolors16.default.dim(`(${selected.source} \xB7 ${capability.label})`)}`
+    `  ${import_picocolors17.default.dim("key")}     ${selected.key.slice(0, 12)}\u2026 ${import_picocolors17.default.dim(`(${selected.source} \xB7 ${capability.label})`)}`
   );
-  console.log(`  ${import_picocolors16.default.dim("org")}     ${import_picocolors16.default.dim(confirmed.organizationId)}`);
+  console.log(`  ${import_picocolors17.default.dim("org")}     ${import_picocolors17.default.dim(confirmed.organizationId)}`);
   console.log(
-    `  ${import_picocolors16.default.dim("project")} ${import_picocolors16.default.bold(projectLabel)}${project ? ` ${import_picocolors16.default.dim(`(${project.id})`)}` : ""}`
+    `  ${import_picocolors17.default.dim("project")} ${import_picocolors17.default.bold(projectLabel)}${project ? ` ${import_picocolors17.default.dim(`(${project.id})`)}` : ""}`
   );
-  console.log(`  ${import_picocolors16.default.dim("acts on")} ${import_picocolors16.default.bold(actsOn)}`);
+  console.log(`  ${import_picocolors17.default.dim("acts on")} ${import_picocolors17.default.bold(actsOn)}`);
   console.log(`
-  ${import_picocolors16.default.green("\u2713")} ${import_picocolors16.default.dim("credential accepted; target confirmed by the server")}
+  ${import_picocolors17.default.green("\u2713")} ${import_picocolors17.default.dim("credential accepted; target confirmed by the server")}
 `);
 }
 
@@ -285111,14 +285402,14 @@ init_push();
 
 // src/setup/run.ts
 init_cjs_shims();
-var import_picocolors18 = __toESM(require_picocolors(), 1);
-var import_errors15 = require("@abloatai/transaction/errors");
+var import_picocolors19 = __toESM(require_picocolors(), 1);
+var import_errors16 = require("@abloatai/transaction/errors");
 init_theme();
 
 // src/setup/discover.ts
 init_cjs_shims();
-var import_node_fs2 = require("fs");
-var import_node_crypto4 = require("crypto");
+var import_node_fs3 = require("fs");
+var import_node_crypto6 = require("crypto");
 var import_node_child_process2 = require("child_process");
 var import_node_path2 = require("path");
 init_controlPlane();
@@ -285126,18 +285417,18 @@ init_config();
 
 // src/doctor.ts
 init_cjs_shims();
-var import_picocolors17 = __toESM(require_picocolors(), 1);
+var import_picocolors18 = __toESM(require_picocolors(), 1);
 init_theme();
 init_controlPlane();
 init_config();
 init_target();
 init_readiness();
 function render(check2) {
-  const mark = check2.state === "ok" ? import_picocolors17.default.green("\u2713") : check2.state === "fail" ? import_picocolors17.default.red("\u2717") : import_picocolors17.default.dim("\u2013");
+  const mark = check2.state === "ok" ? import_picocolors18.default.green("\u2713") : check2.state === "fail" ? import_picocolors18.default.red("\u2717") : import_picocolors18.default.dim("\u2013");
   console.log(
-    `  ${mark} ${check2.label.padEnd(10)} ${check2.state === "fail" ? check2.detail : import_picocolors17.default.dim(check2.detail)}`
+    `  ${mark} ${check2.label.padEnd(10)} ${check2.state === "fail" ? check2.detail : import_picocolors18.default.dim(check2.detail)}`
   );
-  if (check2.fix) console.log(`    ${" ".repeat(11)}${import_picocolors17.default.dim(`\u2192 ${check2.fix}`)}`);
+  if (check2.fix) console.log(`    ${" ".repeat(11)}${import_picocolors18.default.dim(`\u2192 ${check2.fix}`)}`);
 }
 async function ping(apiUrl3) {
   const ctrl = new AbortController();
@@ -285306,24 +285597,24 @@ async function inspectDoctor(options = {}) {
 }
 function renderDoctorReport(report) {
   console.log(`
-  ${brand("ablo")} ${import_picocolors17.default.dim("doctor")}
+  ${brand("ablo")} ${import_picocolors18.default.dim("doctor")}
 `);
   for (const check2 of report.checks) render(check2);
   console.log();
   if (report.failed > 0) {
     console.log(
-      `  ${import_picocolors17.default.red("\u2717")} ${import_picocolors17.default.bold(`${report.failed} problem${report.failed === 1 ? "" : "s"}`)}` + import_picocolors17.default.dim(report.skipped > 0 ? `, ${report.skipped} check${report.skipped === 1 ? "" : "s"} skipped` : "")
+      `  ${import_picocolors18.default.red("\u2717")} ${import_picocolors18.default.bold(`${report.failed} problem${report.failed === 1 ? "" : "s"}`)}` + import_picocolors18.default.dim(report.skipped > 0 ? `, ${report.skipped} check${report.skipped === 1 ? "" : "s"} skipped` : "")
     );
     console.log(
-      import_picocolors17.default.dim("    Fix them in the order above \u2014 an earlier one often explains a later one.")
+      import_picocolors18.default.dim("    Fix them in the order above \u2014 an earlier one often explains a later one.")
     );
   } else if (report.skipped > 0) {
     console.log(
-      `  ${import_picocolors17.default.yellow("?")} ${import_picocolors17.default.dim(`nothing is blocking a write, but ${report.skipped} check${report.skipped === 1 ? "" : "s"} could not be run`)}`
+      `  ${import_picocolors18.default.yellow("?")} ${import_picocolors18.default.dim(`nothing is blocking a write, but ${report.skipped} check${report.skipped === 1 ? "" : "s"} could not be run`)}`
     );
   } else {
     console.log(
-      `  ${import_picocolors17.default.green("\u2713")} ${import_picocolors17.default.dim("write infrastructure is ready \u2014 your database constraints and row-level policies still apply")}`
+      `  ${import_picocolors18.default.green("\u2713")} ${import_picocolors18.default.dim("write infrastructure is ready \u2014 your database constraints and row-level policies still apply")}`
     );
   }
   console.log();
@@ -285336,10 +285627,10 @@ async function doctor() {
 
 // src/setup/contracts.ts
 init_cjs_shims();
-var import_zod5 = require("zod");
+var import_zod6 = require("zod");
 var SETUP_CONTRACT_VERSION = 1;
-var setupEvidenceSchema = import_zod5.z.object({
-  source: import_zod5.z.enum([
+var setupEvidenceSchema = import_zod6.z.object({
+  source: import_zod6.z.enum([
     "filesystem",
     "package_manifest",
     "git",
@@ -285349,32 +285640,32 @@ var setupEvidenceSchema = import_zod5.z.object({
     "inference",
     "user"
   ]),
-  locator: import_zod5.z.string().min(1).optional(),
-  detail: import_zod5.z.string().min(1),
-  observedAt: import_zod5.z.iso.datetime()
+  locator: import_zod6.z.string().min(1).optional(),
+  detail: import_zod6.z.string().min(1),
+  observedAt: import_zod6.z.iso.datetime()
 }).strict();
-var setupFactSchema = import_zod5.z.object({
-  key: import_zod5.z.string().min(1),
-  value: import_zod5.z.json(),
-  confidence: import_zod5.z.enum(["high", "medium", "low"]),
-  evidence: import_zod5.z.array(setupEvidenceSchema).min(1)
+var setupFactSchema = import_zod6.z.object({
+  key: import_zod6.z.string().min(1),
+  value: import_zod6.z.json(),
+  confidence: import_zod6.z.enum(["high", "medium", "low"]),
+  evidence: import_zod6.z.array(setupEvidenceSchema).min(1)
 }).strict();
-var setupCoordinationAdoptionDispositionSchema = import_zod5.z.enum([
+var setupCoordinationAdoptionDispositionSchema = import_zod6.z.enum([
   "existing_state_reuse_candidate",
   "model_migration_required",
   "coordination_path_undetermined"
 ]);
-var setupDecisionSchema = import_zod5.z.object({
-  id: import_zod5.z.string().min(1),
-  question: import_zod5.z.string().min(1),
-  status: import_zod5.z.enum(["unresolved", "resolved", "not_applicable"]),
-  choices: import_zod5.z.array(import_zod5.z.object({
-    value: import_zod5.z.string().min(1),
-    label: import_zod5.z.string().min(1),
-    consequence: import_zod5.z.string().min(1)
+var setupDecisionSchema = import_zod6.z.object({
+  id: import_zod6.z.string().min(1),
+  question: import_zod6.z.string().min(1),
+  status: import_zod6.z.enum(["unresolved", "resolved", "not_applicable"]),
+  choices: import_zod6.z.array(import_zod6.z.object({
+    value: import_zod6.z.string().min(1),
+    label: import_zod6.z.string().min(1),
+    consequence: import_zod6.z.string().min(1)
   }).strict()),
-  selected: import_zod5.z.string().min(1).optional(),
-  reason: import_zod5.z.string().min(1)
+  selected: import_zod6.z.string().min(1).optional(),
+  reason: import_zod6.z.string().min(1)
 }).strict().superRefine((decision, ctx) => {
   if (decision.status === "resolved" && decision.selected === void 0) {
     ctx.addIssue({ code: "custom", message: "A resolved decision needs a selected value." });
@@ -285383,17 +285674,17 @@ var setupDecisionSchema = import_zod5.z.object({
     ctx.addIssue({ code: "custom", message: "The selected value must be one of the choices." });
   }
 });
-var setupMutationClassSchema = import_zod5.z.enum([
+var setupMutationClassSchema = import_zod6.z.enum([
   "read_only",
   "local_write",
   "remote_write",
   "database_write"
 ]);
-var setupApprovalClassSchema = import_zod5.z.enum(["none", "review", "explicit"]);
-var setupActionSchema = import_zod5.z.object({
-  id: import_zod5.z.string().min(1),
-  stepId: import_zod5.z.string().min(1),
-  kind: import_zod5.z.enum([
+var setupApprovalClassSchema = import_zod6.z.enum(["none", "review", "explicit"]);
+var setupActionSchema = import_zod6.z.object({
+  id: import_zod6.z.string().min(1),
+  stepId: import_zod6.z.string().min(1),
+  kind: import_zod6.z.enum([
     "inspect_repository",
     "analyze_compatibility",
     "select_application",
@@ -285408,20 +285699,20 @@ var setupActionSchema = import_zod5.z.object({
     "verify",
     "run_canary"
   ]),
-  summary: import_zod5.z.string().min(1),
+  summary: import_zod6.z.string().min(1),
   mutation: setupMutationClassSchema,
   approval: setupApprovalClassSchema,
-  executor: import_zod5.z.enum(["deterministic", "agent", "user"]).default("deterministic"),
-  status: import_zod5.z.enum(["planned", "blocked", "not_needed"]),
-  blockedBy: import_zod5.z.array(import_zod5.z.string().min(1)).default([]),
-  paths: import_zod5.z.array(import_zod5.z.string().min(1)).default([]),
-  preconditions: import_zod5.z.array(import_zod5.z.string().min(1)).default([])
+  executor: import_zod6.z.enum(["deterministic", "agent", "user"]).default("deterministic"),
+  status: import_zod6.z.enum(["planned", "blocked", "not_needed"]),
+  blockedBy: import_zod6.z.array(import_zod6.z.string().min(1)).default([]),
+  paths: import_zod6.z.array(import_zod6.z.string().min(1)).default([]),
+  preconditions: import_zod6.z.array(import_zod6.z.string().min(1)).default([])
 }).strict();
-var setupMutationSiteSchema = import_zod5.z.object({
-  path: import_zod5.z.string().min(1),
-  line: import_zod5.z.number().int().positive(),
-  kind: import_zod5.z.enum(["prisma", "drizzle", "sql", "http", "ablo"]),
-  operation: import_zod5.z.enum([
+var setupMutationSiteSchema = import_zod6.z.object({
+  path: import_zod6.z.string().min(1),
+  line: import_zod6.z.number().int().positive(),
+  kind: import_zod6.z.enum(["prisma", "drizzle", "sql", "http", "ablo"]),
+  operation: import_zod6.z.enum([
     "create",
     "update",
     "delete",
@@ -285432,35 +285723,35 @@ var setupMutationSiteSchema = import_zod5.z.object({
     "sql_write",
     "http_write"
   ]),
-  modelHint: import_zod5.z.string().min(1).nullable(),
-  confidence: import_zod5.z.enum(["high", "medium", "low"])
+  modelHint: import_zod6.z.string().min(1).nullable(),
+  confidence: import_zod6.z.enum(["high", "medium", "low"])
 }).strict();
-var setupDatabaseColumnSchema = import_zod5.z.object({
-  table: import_zod5.z.string().min(1),
-  column: import_zod5.z.string().min(1),
-  dataType: import_zod5.z.string().min(1),
-  nullable: import_zod5.z.boolean(),
-  defaultExpression: import_zod5.z.string().min(1).nullable(),
-  generatedBy: import_zod5.z.enum(["application", "database"]).default("application")
+var setupDatabaseColumnSchema = import_zod6.z.object({
+  table: import_zod6.z.string().min(1),
+  column: import_zod6.z.string().min(1),
+  dataType: import_zod6.z.string().min(1),
+  nullable: import_zod6.z.boolean(),
+  defaultExpression: import_zod6.z.string().min(1).nullable(),
+  generatedBy: import_zod6.z.enum(["application", "database"]).default("application")
 }).strict();
-var setupCompatibilityBlockerCodeSchema = import_zod5.z.enum([
+var setupCompatibilityBlockerCodeSchema = import_zod6.z.enum([
   "database_schema_unavailable",
   "identity_type_unsupported",
   "stable_identity_missing"
 ]);
-var setupDatabaseMappingSchema = import_zod5.z.object({
-  table: import_zod5.z.string().min(1),
-  field: import_zod5.z.enum(["id", "organizationId", "createdBy"]),
-  column: import_zod5.z.string().min(1).nullable(),
-  databaseType: import_zod5.z.enum([
+var setupDatabaseMappingSchema = import_zod6.z.object({
+  table: import_zod6.z.string().min(1),
+  field: import_zod6.z.enum(["id", "organizationId", "createdBy"]),
+  column: import_zod6.z.string().min(1).nullable(),
+  databaseType: import_zod6.z.enum([
     "text",
     "uuid",
     "bigint"
   ]).nullable(),
-  generatedBy: import_zod5.z.enum(["application", "ablo", "database"]).nullable(),
-  status: import_zod5.z.enum(["ready", "review_required"]),
-  reason: import_zod5.z.string().min(1),
-  evidence: import_zod5.z.array(setupEvidenceSchema).min(1)
+  generatedBy: import_zod6.z.enum(["application", "ablo", "database"]).nullable(),
+  status: import_zod6.z.enum(["ready", "review_required"]),
+  reason: import_zod6.z.string().min(1),
+  evidence: import_zod6.z.array(setupEvidenceSchema).min(1)
 }).strict().superRefine((mapping, ctx) => {
   if (mapping.column === null && (mapping.databaseType !== null || mapping.generatedBy !== null)) {
     ctx.addIssue({
@@ -285475,53 +285766,53 @@ var setupDatabaseMappingSchema = import_zod5.z.object({
     });
   }
 });
-var setupCompatibilityRemediationSchema = import_zod5.z.object({
-  kind: import_zod5.z.enum(["migration", "translation", "retain_direct_path", "unsupported"]),
-  summary: import_zod5.z.string().min(1)
+var setupCompatibilityRemediationSchema = import_zod6.z.object({
+  kind: import_zod6.z.enum(["migration", "translation", "retain_direct_path", "unsupported"]),
+  summary: import_zod6.z.string().min(1)
 }).strict();
-var setupCompatibilityBlockerSchema = import_zod5.z.object({
+var setupCompatibilityBlockerSchema = import_zod6.z.object({
   code: setupCompatibilityBlockerCodeSchema,
-  table: import_zod5.z.string().min(1).nullable(),
-  field: import_zod5.z.string().min(1).nullable(),
-  observed: import_zod5.z.string().min(1),
-  expected: import_zod5.z.string().min(1),
-  remediations: import_zod5.z.array(setupCompatibilityRemediationSchema).min(1),
-  evidence: import_zod5.z.array(setupEvidenceSchema).min(1)
+  table: import_zod6.z.string().min(1).nullable(),
+  field: import_zod6.z.string().min(1).nullable(),
+  observed: import_zod6.z.string().min(1),
+  expected: import_zod6.z.string().min(1),
+  remediations: import_zod6.z.array(setupCompatibilityRemediationSchema).min(1),
+  evidence: import_zod6.z.array(setupEvidenceSchema).min(1)
 }).strict();
-var incompatibleDispositionSchema = import_zod5.z.object({
-  blockers: import_zod5.z.array(setupCompatibilityBlockerSchema).min(1),
-  mappings: import_zod5.z.array(setupDatabaseMappingSchema)
+var incompatibleDispositionSchema = import_zod6.z.object({
+  blockers: import_zod6.z.array(setupCompatibilityBlockerSchema).min(1),
+  mappings: import_zod6.z.array(setupDatabaseMappingSchema)
 }).strict();
-var setupCompatibilityDispositionSchema = import_zod5.z.discriminatedUnion("status", [
-  import_zod5.z.object({
-    status: import_zod5.z.literal("compatible"),
-    blockers: import_zod5.z.array(import_zod5.z.never()).length(0),
-    mappings: import_zod5.z.array(setupDatabaseMappingSchema)
+var setupCompatibilityDispositionSchema = import_zod6.z.discriminatedUnion("status", [
+  import_zod6.z.object({
+    status: import_zod6.z.literal("compatible"),
+    blockers: import_zod6.z.array(import_zod6.z.never()).length(0),
+    mappings: import_zod6.z.array(setupDatabaseMappingSchema)
   }).strict(),
-  incompatibleDispositionSchema.extend({ status: import_zod5.z.literal("migration_required") }),
-  incompatibleDispositionSchema.extend({ status: import_zod5.z.literal("translation_required") }),
-  incompatibleDispositionSchema.extend({ status: import_zod5.z.literal("migration_or_translation_required") }),
-  incompatibleDispositionSchema.extend({ status: import_zod5.z.literal("unsupported") })
+  incompatibleDispositionSchema.extend({ status: import_zod6.z.literal("migration_required") }),
+  incompatibleDispositionSchema.extend({ status: import_zod6.z.literal("translation_required") }),
+  incompatibleDispositionSchema.extend({ status: import_zod6.z.literal("migration_or_translation_required") }),
+  incompatibleDispositionSchema.extend({ status: import_zod6.z.literal("unsupported") })
 ]);
-var setupAdaptationTaskSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_adaptation_task"),
-  recordId: import_zod5.z.string().min(1),
-  actionId: import_zod5.z.string().min(1),
-  repositoryRoot: import_zod5.z.string().min(1),
-  applicationRoot: import_zod5.z.string().min(1),
-  selectedModels: import_zod5.z.array(import_zod5.z.string().min(1)).min(1),
-  databaseMappings: import_zod5.z.array(setupDatabaseMappingSchema).default([]),
-  discoveryHints: import_zod5.z.array(setupMutationSiteSchema),
-  scope: import_zod5.z.object({
-    allowedRoot: import_zod5.z.string().min(1),
-    mustExploreBeyondHints: import_zod5.z.literal(true),
-    mayReadEnvironmentValues: import_zod5.z.literal(false),
-    maximumMutation: import_zod5.z.literal("local_write")
+var setupAdaptationTaskSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_adaptation_task"),
+  recordId: import_zod6.z.string().min(1),
+  actionId: import_zod6.z.string().min(1),
+  repositoryRoot: import_zod6.z.string().min(1),
+  applicationRoot: import_zod6.z.string().min(1),
+  selectedModels: import_zod6.z.array(import_zod6.z.string().min(1)).min(1),
+  databaseMappings: import_zod6.z.array(setupDatabaseMappingSchema).default([]),
+  discoveryHints: import_zod6.z.array(setupMutationSiteSchema),
+  scope: import_zod6.z.object({
+    allowedRoot: import_zod6.z.string().min(1),
+    mustExploreBeyondHints: import_zod6.z.literal(true),
+    mayReadEnvironmentValues: import_zod6.z.literal(false),
+    maximumMutation: import_zod6.z.literal("local_write")
   }).strict(),
-  objective: import_zod5.z.string().min(1),
-  constraints: import_zod5.z.array(import_zod5.z.string().min(1)).min(1),
-  acceptanceCriteria: import_zod5.z.array(import_zod5.z.string().min(1)).min(1)
+  objective: import_zod6.z.string().min(1),
+  constraints: import_zod6.z.array(import_zod6.z.string().min(1)).min(1),
+  acceptanceCriteria: import_zod6.z.array(import_zod6.z.string().min(1)).min(1)
 }).strict().superRefine((record, ctx) => {
   if (record.applicationRoot !== record.scope.allowedRoot) {
     ctx.addIssue({
@@ -285531,233 +285822,233 @@ var setupAdaptationTaskSchema = import_zod5.z.object({
     });
   }
 });
-var setupSkillFileSchema = import_zod5.z.object({
-  path: import_zod5.z.string().min(1),
-  sha256: import_zod5.z.string().regex(/^[a-f0-9]{64}$/),
-  content: import_zod5.z.string().min(1)
+var setupSkillFileSchema = import_zod6.z.object({
+  path: import_zod6.z.string().min(1),
+  sha256: import_zod6.z.string().regex(/^[a-f0-9]{64}$/),
+  content: import_zod6.z.string().min(1)
 }).strict();
-var setupSkillBundleSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_skill"),
-  id: import_zod5.z.literal("integrate-ablo"),
-  version: import_zod5.z.string().min(1),
-  entrypoint: import_zod5.z.literal("SKILL.md"),
-  files: import_zod5.z.array(setupSkillFileSchema).min(1)
+var setupSkillBundleSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_skill"),
+  id: import_zod6.z.literal("integrate-ablo"),
+  version: import_zod6.z.string().min(1),
+  entrypoint: import_zod6.z.literal("SKILL.md"),
+  files: import_zod6.z.array(setupSkillFileSchema).min(1)
 }).strict();
-var setupAgentBundleSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_agent_bundle"),
-  createdAt: import_zod5.z.iso.datetime(),
+var setupAgentBundleSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_agent_bundle"),
+  createdAt: import_zod6.z.iso.datetime(),
   record: setupAdaptationTaskSchema,
   skill: setupSkillBundleSchema
 }).strict();
-var setupWorkspaceSnapshotSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_workspace_snapshot"),
-  repositoryRoot: import_zod5.z.string().min(1),
-  capturedAt: import_zod5.z.iso.datetime(),
-  truncated: import_zod5.z.boolean(),
-  files: import_zod5.z.array(import_zod5.z.object({
-    path: import_zod5.z.string().min(1),
-    fingerprint: import_zod5.z.string().regex(/^[a-f0-9]{64}$/),
-    size: import_zod5.z.number().int().nonnegative(),
-    protectedEnvironment: import_zod5.z.boolean()
+var setupWorkspaceSnapshotSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_workspace_snapshot"),
+  repositoryRoot: import_zod6.z.string().min(1),
+  capturedAt: import_zod6.z.iso.datetime(),
+  truncated: import_zod6.z.boolean(),
+  files: import_zod6.z.array(import_zod6.z.object({
+    path: import_zod6.z.string().min(1),
+    fingerprint: import_zod6.z.string().regex(/^[a-f0-9]{64}$/),
+    size: import_zod6.z.number().int().nonnegative(),
+    protectedEnvironment: import_zod6.z.boolean()
   }).strict())
 }).strict();
-var setupDiffEvaluationSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_diff_evaluation"),
-  createdAt: import_zod5.z.iso.datetime(),
-  selectedModels: import_zod5.z.array(import_zod5.z.string().min(1)).min(1),
-  changes: import_zod5.z.array(import_zod5.z.object({
-    path: import_zod5.z.string().min(1),
-    kind: import_zod5.z.enum(["created", "modified", "deleted"])
+var setupDiffEvaluationSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_diff_evaluation"),
+  createdAt: import_zod6.z.iso.datetime(),
+  selectedModels: import_zod6.z.array(import_zod6.z.string().min(1)).min(1),
+  changes: import_zod6.z.array(import_zod6.z.object({
+    path: import_zod6.z.string().min(1),
+    kind: import_zod6.z.enum(["created", "modified", "deleted"])
   }).strict()),
-  checks: import_zod5.z.array(import_zod5.z.object({
-    id: import_zod5.z.string().min(1),
-    status: import_zod5.z.enum(["pass", "fail", "review"]),
-    detail: import_zod5.z.string().min(1),
-    evidencePaths: import_zod5.z.array(import_zod5.z.string().min(1))
+  checks: import_zod6.z.array(import_zod6.z.object({
+    id: import_zod6.z.string().min(1),
+    status: import_zod6.z.enum(["pass", "fail", "review"]),
+    detail: import_zod6.z.string().min(1),
+    evidencePaths: import_zod6.z.array(import_zod6.z.string().min(1))
   }).strict()),
-  outcome: import_zod5.z.enum(["candidate", "incomplete", "unsafe"]),
-  summary: import_zod5.z.string().min(1)
+  outcome: import_zod6.z.enum(["candidate", "incomplete", "unsafe"]),
+  summary: import_zod6.z.string().min(1)
 }).strict();
-var setupEvalVerificationSchema = import_zod5.z.object({
-  id: import_zod5.z.string().min(1),
-  status: import_zod5.z.enum(["pass", "fail", "error"]),
-  detail: import_zod5.z.string().min(1),
-  durationMs: import_zod5.z.number().int().nonnegative()
+var setupEvalVerificationSchema = import_zod6.z.object({
+  id: import_zod6.z.string().min(1),
+  status: import_zod6.z.enum(["pass", "fail", "error"]),
+  detail: import_zod6.z.string().min(1),
+  durationMs: import_zod6.z.number().int().nonnegative()
 }).strict();
-var setupAgentHandoffSchema = import_zod5.z.object({
-  outcome: import_zod5.z.enum(["candidate", "blocked", "failed"]),
-  changedFiles: import_zod5.z.array(import_zod5.z.string().min(1)),
-  exploredWritePaths: import_zod5.z.array(import_zod5.z.object({
-    model: import_zod5.z.string().min(1),
-    path: import_zod5.z.string().min(1),
-    role: import_zod5.z.string().min(1)
+var setupAgentHandoffSchema = import_zod6.z.object({
+  outcome: import_zod6.z.enum(["candidate", "blocked", "failed"]),
+  changedFiles: import_zod6.z.array(import_zod6.z.string().min(1)),
+  exploredWritePaths: import_zod6.z.array(import_zod6.z.object({
+    model: import_zod6.z.string().min(1),
+    path: import_zod6.z.string().min(1),
+    role: import_zod6.z.string().min(1)
   }).strict()),
-  directWriteExceptions: import_zod5.z.array(import_zod5.z.object({
-    path: import_zod5.z.string().min(1),
-    reason: import_zod5.z.string().min(1)
+  directWriteExceptions: import_zod6.z.array(import_zod6.z.object({
+    path: import_zod6.z.string().min(1),
+    reason: import_zod6.z.string().min(1)
   }).strict()),
-  verification: import_zod5.z.array(import_zod5.z.object({
-    command: import_zod5.z.string().min(1),
-    exitCode: import_zod5.z.number().int().nullable(),
-    result: import_zod5.z.string().min(1)
+  verification: import_zod6.z.array(import_zod6.z.object({
+    command: import_zod6.z.string().min(1),
+    exitCode: import_zod6.z.number().int().nullable(),
+    result: import_zod6.z.string().min(1)
   }).strict()),
-  blockers: import_zod5.z.array(import_zod5.z.string().min(1))
+  blockers: import_zod6.z.array(import_zod6.z.string().min(1))
 }).strict();
-var setupEvalResultSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_eval_result"),
-  caseId: import_zod5.z.string().min(1),
-  runner: import_zod5.z.string().min(1),
-  model: import_zod5.z.string().min(1).nullable(),
-  startedAt: import_zod5.z.iso.datetime(),
-  finishedAt: import_zod5.z.iso.datetime(),
-  durationMs: import_zod5.z.number().int().nonnegative(),
-  agent: import_zod5.z.object({
-    status: import_zod5.z.enum(["completed", "failed", "timed_out"]),
-    exitCode: import_zod5.z.number().int().nullable(),
+var setupEvalResultSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_eval_result"),
+  caseId: import_zod6.z.string().min(1),
+  runner: import_zod6.z.string().min(1),
+  model: import_zod6.z.string().min(1).nullable(),
+  startedAt: import_zod6.z.iso.datetime(),
+  finishedAt: import_zod6.z.iso.datetime(),
+  durationMs: import_zod6.z.number().int().nonnegative(),
+  agent: import_zod6.z.object({
+    status: import_zod6.z.enum(["completed", "failed", "timed_out"]),
+    exitCode: import_zod6.z.number().int().nullable(),
     handoff: setupAgentHandoffSchema.nullable()
   }).strict(),
   diff: setupDiffEvaluationSchema,
-  verification: import_zod5.z.array(setupEvalVerificationSchema),
-  outcome: import_zod5.z.enum(["passed", "blocked", "failed", "incomplete", "unsafe"]),
-  summary: import_zod5.z.string().min(1)
+  verification: import_zod6.z.array(setupEvalVerificationSchema),
+  outcome: import_zod6.z.enum(["passed", "blocked", "failed", "incomplete", "unsafe"]),
+  summary: import_zod6.z.string().min(1)
 }).strict();
-var setupRepositoryBenchmarkCaseSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_repository_benchmark_case"),
-  caseId: import_zod5.z.string().min(1),
-  repository: import_zod5.z.object({
-    url: import_zod5.z.url(),
-    commit: import_zod5.z.string().regex(/^[a-f0-9]{40}$/)
+var setupRepositoryBenchmarkCaseSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_repository_benchmark_case"),
+  caseId: import_zod6.z.string().min(1),
+  repository: import_zod6.z.object({
+    url: import_zod6.z.url(),
+    commit: import_zod6.z.string().regex(/^[a-f0-9]{40}$/)
   }).strict(),
-  expectations: import_zod5.z.object({
-    applicationRoot: import_zod5.z.string().min(1),
-    persistenceIncludes: import_zod5.z.array(import_zod5.z.string().min(1)),
-    requiredMutationPaths: import_zod5.z.array(import_zod5.z.string().min(1)),
-    forbiddenMutationPathPrefixes: import_zod5.z.array(import_zod5.z.string().min(1)),
+  expectations: import_zod6.z.object({
+    applicationRoot: import_zod6.z.string().min(1),
+    persistenceIncludes: import_zod6.z.array(import_zod6.z.string().min(1)),
+    requiredMutationPaths: import_zod6.z.array(import_zod6.z.string().min(1)),
+    forbiddenMutationPathPrefixes: import_zod6.z.array(import_zod6.z.string().min(1)),
     coordinationAdoption: setupCoordinationAdoptionDispositionSchema
   }).strict()
 }).strict();
-var setupRepositoryBenchmarkResultSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_repository_benchmark_result"),
-  caseId: import_zod5.z.string().min(1),
-  repositoryUrl: import_zod5.z.url(),
-  commit: import_zod5.z.string().regex(/^[a-f0-9]{40}$/),
-  checks: import_zod5.z.array(import_zod5.z.object({
-    id: import_zod5.z.string().min(1),
-    status: import_zod5.z.enum(["pass", "fail"]),
-    detail: import_zod5.z.string().min(1)
+var setupRepositoryBenchmarkResultSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_repository_benchmark_result"),
+  caseId: import_zod6.z.string().min(1),
+  repositoryUrl: import_zod6.z.url(),
+  commit: import_zod6.z.string().regex(/^[a-f0-9]{40}$/),
+  checks: import_zod6.z.array(import_zod6.z.object({
+    id: import_zod6.z.string().min(1),
+    status: import_zod6.z.enum(["pass", "fail"]),
+    detail: import_zod6.z.string().min(1)
   }).strict()),
-  outcome: import_zod5.z.enum(["passed", "failed"])
+  outcome: import_zod6.z.enum(["passed", "failed"])
 }).strict();
-var setupStepResultBaseSchema = import_zod5.z.object({
-  stepId: import_zod5.z.string().min(1),
-  summary: import_zod5.z.string().min(1),
-  facts: import_zod5.z.array(setupFactSchema).default([]),
-  decisions: import_zod5.z.array(setupDecisionSchema).default([]),
-  actions: import_zod5.z.array(setupActionSchema).default([]),
-  startedAt: import_zod5.z.iso.datetime(),
-  finishedAt: import_zod5.z.iso.datetime()
+var setupStepResultBaseSchema = import_zod6.z.object({
+  stepId: import_zod6.z.string().min(1),
+  summary: import_zod6.z.string().min(1),
+  facts: import_zod6.z.array(setupFactSchema).default([]),
+  decisions: import_zod6.z.array(setupDecisionSchema).default([]),
+  actions: import_zod6.z.array(setupActionSchema).default([]),
+  startedAt: import_zod6.z.iso.datetime(),
+  finishedAt: import_zod6.z.iso.datetime()
 }).strict();
-var setupStepResultSchema = import_zod5.z.discriminatedUnion("status", [
-  setupStepResultBaseSchema.extend({ status: import_zod5.z.literal("complete") }),
+var setupStepResultSchema = import_zod6.z.discriminatedUnion("status", [
+  setupStepResultBaseSchema.extend({ status: import_zod6.z.literal("complete") }),
   setupStepResultBaseSchema.extend({
-    status: import_zod5.z.literal("incomplete"),
-    next: import_zod5.z.string().min(1)
+    status: import_zod6.z.literal("incomplete"),
+    next: import_zod6.z.string().min(1)
   }),
   setupStepResultBaseSchema.extend({
-    status: import_zod5.z.literal("blocked"),
-    blockers: import_zod5.z.array(import_zod5.z.string().min(1)).min(1),
-    next: import_zod5.z.string().min(1)
+    status: import_zod6.z.literal("blocked"),
+    blockers: import_zod6.z.array(import_zod6.z.string().min(1)).min(1),
+    next: import_zod6.z.string().min(1)
   }),
   setupStepResultBaseSchema.extend({
-    status: import_zod5.z.literal("failed"),
-    error: import_zod5.z.object({
-      code: import_zod5.z.string().min(1),
-      message: import_zod5.z.string().min(1)
+    status: import_zod6.z.literal("failed"),
+    error: import_zod6.z.object({
+      code: import_zod6.z.string().min(1),
+      message: import_zod6.z.string().min(1)
     }).strict()
   })
 ]);
-var setupTargetSchema = import_zod5.z.object({
-  repositoryRoot: import_zod5.z.string().min(1),
-  applicationRoot: import_zod5.z.string().min(1).nullable(),
-  packageName: import_zod5.z.string().min(1).nullable(),
-  abloProjectId: import_zod5.z.string().min(1).nullable(),
-  abloBranchId: import_zod5.z.string().min(1).nullable(),
-  databaseFingerprint: import_zod5.z.string().min(1).nullable(),
-  localSchemaDigest: import_zod5.z.string().min(1).nullable(),
-  pushedSchemaDigest: import_zod5.z.string().min(1).nullable()
+var setupTargetSchema = import_zod6.z.object({
+  repositoryRoot: import_zod6.z.string().min(1),
+  applicationRoot: import_zod6.z.string().min(1).nullable(),
+  packageName: import_zod6.z.string().min(1).nullable(),
+  abloProjectId: import_zod6.z.string().min(1).nullable(),
+  abloBranchId: import_zod6.z.string().min(1).nullable(),
+  databaseFingerprint: import_zod6.z.string().min(1).nullable(),
+  localSchemaDigest: import_zod6.z.string().min(1).nullable(),
+  pushedSchemaDigest: import_zod6.z.string().min(1).nullable()
 }).strict();
-var setupPostconditionSchema = import_zod5.z.object({
-  id: import_zod5.z.string().min(1),
-  description: import_zod5.z.string().min(1),
-  status: import_zod5.z.enum(["unverified", "satisfied", "unsatisfied", "blocked"]),
-  evidence: import_zod5.z.array(setupEvidenceSchema).default([])
+var setupPostconditionSchema = import_zod6.z.object({
+  id: import_zod6.z.string().min(1),
+  description: import_zod6.z.string().min(1),
+  status: import_zod6.z.enum(["unverified", "satisfied", "unsatisfied", "blocked"]),
+  evidence: import_zod6.z.array(setupEvidenceSchema).default([])
 }).strict();
-var setupInitPlanProjectionSchema = import_zod5.z.object({
-  root: import_zod5.z.string().min(1),
-  actions: import_zod5.z.array(import_zod5.z.object({
-    kind: import_zod5.z.enum(["create", "update", "unchanged"]),
-    path: import_zod5.z.string().min(1),
-    note: import_zod5.z.string().optional(),
-    precondition: import_zod5.z.discriminatedUnion("kind", [
-      import_zod5.z.object({ kind: import_zod5.z.literal("absent") }).strict(),
-      import_zod5.z.object({
-        kind: import_zod5.z.literal("content"),
-        sha256: import_zod5.z.string().regex(/^[a-f0-9]{64}$/)
+var setupInitPlanProjectionSchema = import_zod6.z.object({
+  root: import_zod6.z.string().min(1),
+  actions: import_zod6.z.array(import_zod6.z.object({
+    kind: import_zod6.z.enum(["create", "update", "unchanged"]),
+    path: import_zod6.z.string().min(1),
+    note: import_zod6.z.string().optional(),
+    precondition: import_zod6.z.discriminatedUnion("kind", [
+      import_zod6.z.object({ kind: import_zod6.z.literal("absent") }).strict(),
+      import_zod6.z.object({
+        kind: import_zod6.z.literal("content"),
+        sha256: import_zod6.z.string().regex(/^[a-f0-9]{64}$/)
       }).strict()
     ]).optional()
   }).strict()),
-  conflicts: import_zod5.z.array(import_zod5.z.object({
-    path: import_zod5.z.string().min(1),
-    reason: import_zod5.z.literal("occupied")
+  conflicts: import_zod6.z.array(import_zod6.z.object({
+    path: import_zod6.z.string().min(1),
+    reason: import_zod6.z.literal("occupied")
   }).strict())
 }).strict();
-var setupInitResultSchema = import_zod5.z.object({
-  status: import_zod5.z.enum(["planned", "applied"]),
+var setupInitResultSchema = import_zod6.z.object({
+  status: import_zod6.z.enum(["planned", "applied"]),
   plan: setupInitPlanProjectionSchema
 }).strict();
-var setupPlanSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_plan"),
-  mode: import_zod5.z.literal("plan"),
-  createdAt: import_zod5.z.iso.datetime(),
+var setupPlanSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_plan"),
+  mode: import_zod6.z.literal("plan"),
+  createdAt: import_zod6.z.iso.datetime(),
   target: setupTargetSchema,
   compatibility: setupCompatibilityDispositionSchema,
-  steps: import_zod5.z.array(setupStepResultSchema),
-  facts: import_zod5.z.array(setupFactSchema),
-  decisions: import_zod5.z.array(setupDecisionSchema),
-  actions: import_zod5.z.array(setupActionSchema),
-  postconditions: import_zod5.z.array(setupPostconditionSchema),
-  outcome: import_zod5.z.enum(["ready_to_apply", "needs_decisions", "blocked"]),
-  summary: import_zod5.z.string().min(1)
+  steps: import_zod6.z.array(setupStepResultSchema),
+  facts: import_zod6.z.array(setupFactSchema),
+  decisions: import_zod6.z.array(setupDecisionSchema),
+  actions: import_zod6.z.array(setupActionSchema),
+  postconditions: import_zod6.z.array(setupPostconditionSchema),
+  outcome: import_zod6.z.enum(["ready_to_apply", "needs_decisions", "blocked"]),
+  summary: import_zod6.z.string().min(1)
 }).strict();
-var setupCheckpointSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_checkpoint"),
-  programId: import_zod5.z.string().min(1),
-  repositoryRoot: import_zod5.z.string().min(1),
-  createdAt: import_zod5.z.iso.datetime(),
-  updatedAt: import_zod5.z.iso.datetime(),
-  completedStepIds: import_zod5.z.array(import_zod5.z.string().min(1)),
-  results: import_zod5.z.array(setupStepResultSchema)
+var setupCheckpointSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_checkpoint"),
+  programId: import_zod6.z.string().min(1),
+  repositoryRoot: import_zod6.z.string().min(1),
+  createdAt: import_zod6.z.iso.datetime(),
+  updatedAt: import_zod6.z.iso.datetime(),
+  completedStepIds: import_zod6.z.array(import_zod6.z.string().min(1)),
+  results: import_zod6.z.array(setupStepResultSchema)
 }).strict();
-var setupReportSchema = import_zod5.z.object({
-  schemaVersion: import_zod5.z.literal(SETUP_CONTRACT_VERSION),
-  kind: import_zod5.z.literal("ablo_setup_report"),
-  createdAt: import_zod5.z.iso.datetime(),
+var setupReportSchema = import_zod6.z.object({
+  schemaVersion: import_zod6.z.literal(SETUP_CONTRACT_VERSION),
+  kind: import_zod6.z.literal("ablo_setup_report"),
+  createdAt: import_zod6.z.iso.datetime(),
   target: setupTargetSchema,
-  outcome: import_zod5.z.enum(["complete", "incomplete", "blocked", "failed"]),
-  facts: import_zod5.z.array(setupFactSchema),
-  decisions: import_zod5.z.array(setupDecisionSchema),
-  actions: import_zod5.z.array(setupActionSchema),
-  postconditions: import_zod5.z.array(setupPostconditionSchema),
-  next: import_zod5.z.array(import_zod5.z.string().min(1))
+  outcome: import_zod6.z.enum(["complete", "incomplete", "blocked", "failed"]),
+  facts: import_zod6.z.array(setupFactSchema),
+  decisions: import_zod6.z.array(setupDecisionSchema),
+  actions: import_zod6.z.array(setupActionSchema),
+  postconditions: import_zod6.z.array(setupPostconditionSchema),
+  next: import_zod6.z.array(import_zod6.z.string().min(1))
 }).strict();
 
 // src/setup/program.ts
@@ -286132,7 +286423,7 @@ function walkFiles(root, maxDepth = 5) {
     const current = stack.pop();
     let entries;
     try {
-      entries = (0, import_node_fs2.readdirSync)(current.path, { withFileTypes: true });
+      entries = (0, import_node_fs3.readdirSync)(current.path, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -286152,7 +286443,7 @@ function walkFiles(root, maxDepth = 5) {
 }
 function readManifest(path) {
   try {
-    const parsed = JSON.parse((0, import_node_fs2.readFileSync)(path, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs3.readFileSync)(path, "utf8"));
     return {
       root: (0, import_node_path2.resolve)(path, ".."),
       name: typeof parsed.name === "string" ? parsed.name : null,
@@ -286229,8 +286520,8 @@ function detectedPersistence(manifest, files) {
     if (!SOURCE_EXTENSIONS.has(sourceExtension(path))) continue;
     let source;
     try {
-      if ((0, import_node_fs2.lstatSync)(path).size > MAX_SOURCE_BYTES) continue;
-      source = (0, import_node_fs2.readFileSync)(path, "utf8");
+      if ((0, import_node_fs3.lstatSync)(path).size > MAX_SOURCE_BYTES) continue;
+      source = (0, import_node_fs3.readFileSync)(path, "utf8");
     } catch {
       continue;
     }
@@ -286258,17 +286549,17 @@ function coordinationAdoptionReason(disposition, persistence) {
   }
 }
 function packageManager(root) {
-  if ((0, import_node_fs2.existsSync)((0, import_node_path2.join)(root, "pnpm-lock.yaml"))) return "pnpm";
-  if ((0, import_node_fs2.existsSync)((0, import_node_path2.join)(root, "yarn.lock"))) return "yarn";
-  if ((0, import_node_fs2.existsSync)((0, import_node_path2.join)(root, "bun.lockb")) || (0, import_node_fs2.existsSync)((0, import_node_path2.join)(root, "bun.lock"))) return "bun";
+  if ((0, import_node_fs3.existsSync)((0, import_node_path2.join)(root, "pnpm-lock.yaml"))) return "pnpm";
+  if ((0, import_node_fs3.existsSync)((0, import_node_path2.join)(root, "yarn.lock"))) return "yarn";
+  if ((0, import_node_fs3.existsSync)((0, import_node_path2.join)(root, "bun.lockb")) || (0, import_node_fs3.existsSync)((0, import_node_path2.join)(root, "bun.lock"))) return "bun";
   return "npm";
 }
 function environmentKeyNames(root) {
   const names = [".env.local", ".env.development.local", ".env.development", ".env"];
   return names.flatMap((name) => {
     const path = (0, import_node_path2.join)(root, name);
-    if (!(0, import_node_fs2.existsSync)(path)) return [];
-    const keys = (0, import_node_fs2.readFileSync)(path, "utf8").split(/\r?\n/).flatMap((line) => {
+    if (!(0, import_node_fs3.existsSync)(path)) return [];
+    const keys = (0, import_node_fs3.readFileSync)(path, "utf8").split(/\r?\n/).flatMap((line) => {
       const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(line);
       return match ? [match[1]] : [];
     });
@@ -286283,8 +286574,8 @@ function abloSourceFiles(root, files) {
   return files.flatMap((path) => {
     if (!SOURCE_EXTENSIONS.has(sourceExtension(path))) return [];
     try {
-      if ((0, import_node_fs2.lstatSync)(path).size > MAX_SOURCE_BYTES) return [];
-      return (0, import_node_fs2.readFileSync)(path, "utf8").includes("@abloatai/") ? [(0, import_node_path2.relative)(root, path) || "."] : [];
+      if ((0, import_node_fs3.lstatSync)(path).size > MAX_SOURCE_BYTES) return [];
+      return (0, import_node_fs3.readFileSync)(path, "utf8").includes("@abloatai/") ? [(0, import_node_path2.relative)(root, path) || "."] : [];
     } catch {
       return [];
     }
@@ -286311,8 +286602,8 @@ function discoverMutationSites(root, files) {
     if (!SOURCE_EXTENSIONS.has(sourceExtension(path))) continue;
     let source;
     try {
-      if ((0, import_node_fs2.lstatSync)(path).size > MAX_SOURCE_BYTES) continue;
-      source = (0, import_node_fs2.readFileSync)(path, "utf8");
+      if ((0, import_node_fs3.lstatSync)(path).size > MAX_SOURCE_BYTES) continue;
+      source = (0, import_node_fs3.readFileSync)(path, "utf8");
     } catch {
       continue;
     }
@@ -286352,9 +286643,9 @@ function isProductionMutationFile(root, path) {
   return !/(?:^|\/)(?:test|tests|__tests__|scripts)(?:\/|$)/.test(locator) && !/\.(?:test|spec)\.[cm]?[jt]sx?$/.test(locator);
 }
 function digestFile(path) {
-  if (!(0, import_node_fs2.existsSync)(path)) return null;
+  if (!(0, import_node_fs3.existsSync)(path)) return null;
   try {
-    return (0, import_node_crypto4.createHash)("sha256").update((0, import_node_fs2.readFileSync)(path)).digest("hex");
+    return (0, import_node_crypto6.createHash)("sha256").update((0, import_node_fs3.readFileSync)(path)).digest("hex");
   } catch {
     return null;
   }
@@ -286398,8 +286689,8 @@ function localDiscoveryStep(state) {
     if (!SOURCE_EXTENSIONS.has(sourceExtension(path))) continue;
     let source;
     try {
-      if ((0, import_node_fs2.lstatSync)(path).size > MAX_SOURCE_BYTES) continue;
-      source = (0, import_node_fs2.readFileSync)(path, "utf8");
+      if ((0, import_node_fs3.lstatSync)(path).size > MAX_SOURCE_BYTES) continue;
+      source = (0, import_node_fs3.readFileSync)(path, "utf8");
     } catch {
       continue;
     }
@@ -286440,8 +286731,8 @@ function localDiscoveryStep(state) {
     "src/app/providers.tsx",
     "app/api/ablo-session/route.ts",
     "src/app/api/ablo-session/route.ts"
-  ].filter((path) => (0, import_node_fs2.existsSync)((0, import_node_path2.join)(envRoot, path)));
-  const localSchemaPath = [(0, import_node_path2.join)(envRoot, "ablo", "schema.ts"), (0, import_node_path2.join)(envRoot, "src", "ablo", "schema.ts")].find((path) => (0, import_node_fs2.existsSync)(path)) ?? (0, import_node_path2.join)(envRoot, "ablo", "schema.ts");
+  ].filter((path) => (0, import_node_fs3.existsSync)((0, import_node_path2.join)(envRoot, path)));
+  const localSchemaPath = [(0, import_node_path2.join)(envRoot, "ablo", "schema.ts"), (0, import_node_path2.join)(envRoot, "src", "ablo", "schema.ts")].find((path) => (0, import_node_fs3.existsSync)(path)) ?? (0, import_node_path2.join)(envRoot, "ablo", "schema.ts");
   state.localSchemaDigest = digestFile(localSchemaPath);
   const facts = [
     fact("repository.root", root, "git", tryGit(root, ["rev-parse", "--show-toplevel"]) ? "Resolved from Git." : "No Git root was available; using the requested directory.", root),
@@ -286843,7 +287134,7 @@ function parseSetupArgs(args) {
     if (arg === "--root") {
       const next = args[index + 1];
       if (!next || next.startsWith("-")) {
-        throw new import_errors15.AbloValidationError("`--root` requires a directory.", {
+        throw new import_errors16.AbloValidationError("`--root` requires a directory.", {
           code: "cli_invalid_arguments"
         });
       }
@@ -286852,7 +287143,7 @@ function parseSetupArgs(args) {
       continue;
     }
     if (!allowedFlags.has(arg)) {
-      throw new import_errors15.AbloValidationError(`Unknown setup option: ${arg}`, {
+      throw new import_errors16.AbloValidationError(`Unknown setup option: ${arg}`, {
         code: "cli_invalid_arguments"
       });
     }
@@ -286864,7 +287155,7 @@ function parseSetupArgs(args) {
   };
 }
 function renderValue(value) {
-  if (value === null) return import_picocolors18.default.dim("unknown");
+  if (value === null) return import_picocolors19.default.dim("unknown");
   if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
     return String(value);
   }
@@ -286876,69 +287167,69 @@ function renderStatus(value) {
 }
 function renderHumanPlan(plan) {
   console.log(`
-  ${brand("ablo")} ${import_picocolors18.default.dim("setup plan")}  ${import_picocolors18.default.dim("(read-only)")}
+  ${brand("ablo")} ${import_picocolors19.default.dim("setup plan")}  ${import_picocolors19.default.dim("(read-only)")}
 `);
-  console.log(`  ${import_picocolors18.default.bold("Target")}`);
+  console.log(`  ${import_picocolors19.default.bold("Target")}`);
   console.log(`    repository   ${plan.target.repositoryRoot}`);
-  console.log(`    application  ${plan.target.applicationRoot ?? import_picocolors18.default.yellow("unresolved")}`);
-  console.log(`    package      ${plan.target.packageName ?? import_picocolors18.default.dim("unknown")}`);
-  console.log(`    project      ${plan.target.abloProjectId ?? import_picocolors18.default.dim("unconfirmed")}`);
-  console.log(`    branch       ${plan.target.abloBranchId ?? import_picocolors18.default.dim("unconfirmed")}`);
-  console.log(`    compatibility ${plan.compatibility.status === "compatible" ? import_picocolors18.default.green("compatible") : import_picocolors18.default.yellow(renderStatus(plan.compatibility.status))}`);
+  console.log(`    application  ${plan.target.applicationRoot ?? import_picocolors19.default.yellow("unresolved")}`);
+  console.log(`    package      ${plan.target.packageName ?? import_picocolors19.default.dim("unknown")}`);
+  console.log(`    project      ${plan.target.abloProjectId ?? import_picocolors19.default.dim("unconfirmed")}`);
+  console.log(`    branch       ${plan.target.abloBranchId ?? import_picocolors19.default.dim("unconfirmed")}`);
+  console.log(`    compatibility ${plan.compatibility.status === "compatible" ? import_picocolors19.default.green("compatible") : import_picocolors19.default.yellow(renderStatus(plan.compatibility.status))}`);
   if (plan.compatibility.blockers.length > 0) {
     console.log(`
-  ${import_picocolors18.default.bold("Compatibility blockers")}`);
+  ${import_picocolors19.default.bold("Compatibility blockers")}`);
     for (const blocker2 of plan.compatibility.blockers) {
       const location = blocker2.table ? `${blocker2.table}${blocker2.field ? ` (${blocker2.field})` : ""}` : "Repository";
-      console.log(`    ${import_picocolors18.default.bold(location)}  ${import_picocolors18.default.yellow(renderStatus(blocker2.code))}`);
+      console.log(`    ${import_picocolors19.default.bold(location)}  ${import_picocolors19.default.yellow(renderStatus(blocker2.code))}`);
       console.log(`      ${blocker2.observed}`);
-      console.log(`      ${import_picocolors18.default.dim(`Required: ${blocker2.expected}`)}`);
+      console.log(`      ${import_picocolors19.default.dim(`Required: ${blocker2.expected}`)}`);
       for (const remediation of blocker2.remediations) {
-        console.log(`      ${import_picocolors18.default.dim(`${renderStatus(remediation.kind)} \u2014 ${remediation.summary}`)}`);
+        console.log(`      ${import_picocolors19.default.dim(`${renderStatus(remediation.kind)} \u2014 ${remediation.summary}`)}`);
       }
     }
   }
   if (plan.compatibility.mappings.length > 0) {
     console.log(`
-  ${import_picocolors18.default.bold("Database mappings")}`);
+  ${import_picocolors19.default.bold("Database mappings")}`);
     for (const mapping of plan.compatibility.mappings) {
       const target = mapping.column === null ? "disabled" : `${mapping.column} \xB7 ${mapping.databaseType ?? "unmapped"}`;
-      const status2 = mapping.status === "ready" ? import_picocolors18.default.green("ready") : import_picocolors18.default.yellow("review");
+      const status2 = mapping.status === "ready" ? import_picocolors19.default.green("ready") : import_picocolors19.default.yellow("review");
       console.log(`    ${`${mapping.table}.${mapping.field}`.padEnd(34)} ${target} \xB7 ${status2}`);
-      if (mapping.status === "review_required") console.log(`      ${import_picocolors18.default.dim(mapping.reason)}`);
+      if (mapping.status === "review_required") console.log(`      ${import_picocolors19.default.dim(mapping.reason)}`);
     }
   }
   console.log(`
-  ${import_picocolors18.default.bold("Evidence")}`);
+  ${import_picocolors19.default.bold("Evidence")}`);
   for (const item of plan.facts) {
     console.log(`    ${item.key.padEnd(34)} ${renderValue(item.value)}`);
   }
   console.log(`
-  ${import_picocolors18.default.bold("Decisions")}`);
+  ${import_picocolors19.default.bold("Decisions")}`);
   for (const decision of plan.decisions) {
-    const marker = decision.status === "resolved" ? import_picocolors18.default.green("\u2713") : import_picocolors18.default.yellow("?");
+    const marker = decision.status === "resolved" ? import_picocolors19.default.green("\u2713") : import_picocolors19.default.yellow("?");
     console.log(`    ${marker} ${decision.question}`);
-    console.log(`      ${import_picocolors18.default.dim(decision.reason)}`);
+    console.log(`      ${import_picocolors19.default.dim(decision.reason)}`);
   }
   console.log(`
-  ${import_picocolors18.default.bold("Actions")}`);
+  ${import_picocolors19.default.bold("Actions")}`);
   for (const action of plan.actions) {
-    const marker = action.status === "blocked" ? import_picocolors18.default.yellow("blocked") : import_picocolors18.default.green(action.status);
-    console.log(`    ${marker.padEnd(18)} ${action.summary} ${import_picocolors18.default.dim(`[${action.executor}]`)}`);
+    const marker = action.status === "blocked" ? import_picocolors19.default.yellow("blocked") : import_picocolors19.default.green(action.status);
+    console.log(`    ${marker.padEnd(18)} ${action.summary} ${import_picocolors19.default.dim(`[${action.executor}]`)}`);
     if (action.blockedBy.length > 0) {
-      console.log(`      ${import_picocolors18.default.dim(`needs ${action.blockedBy.join(", ")}`)}`);
+      console.log(`      ${import_picocolors19.default.dim(`needs ${action.blockedBy.join(", ")}`)}`);
     }
   }
   console.log(`
-  ${import_picocolors18.default.bold("Result")}  ${import_picocolors18.default.yellow(plan.outcome)}`);
+  ${import_picocolors19.default.bold("Result")}  ${import_picocolors19.default.yellow(plan.outcome)}`);
   console.log(`  ${plan.summary}`);
-  console.log(import_picocolors18.default.dim("  Machine-readable: npx ablo setup --plan --json"));
+  console.log(import_picocolors19.default.dim("  Machine-readable: npx ablo setup --plan --json"));
   console.log();
 }
 async function runSetup(args) {
   const options = parseSetupArgs(args);
   if (options.json && !options.plan) {
-    throw new import_errors15.AbloValidationError(
+    throw new import_errors16.AbloValidationError(
       "`--json` is a plan renderer. Use `ablo setup --plan --json`.",
       { code: "cli_invalid_arguments" }
     );
@@ -287117,6 +287408,28 @@ var COMMANDS = [
       ]
     }
   },
+  {
+    // Sits beside `docs` on purpose. An agent that just failed to find an
+    // answer is already reading this block, and the command that reports the
+    // gap is the next line down rather than somewhere it would have to know to
+    // look. Discoverability IS the feature: a channel an agent never finds
+    // collects nothing.
+    name: "feedback",
+    usage: FEEDBACK_USAGE,
+    core: { group: "More", does: "Tell us what got in your way, so the next agent does not hit it" },
+    full: {
+      group: "Read the docs",
+      rows: [
+        // The kinds come from the taxonomy rather than being spelled out here:
+        // a help screen listing four when the schema knows five is the drift
+        // this registry exists to stop.
+        { run: `feedback <${FEEDBACK_KINDS.join("|")}> "<one line>"`, does: "Report one wall you hit" },
+        { run: 'feedback bug "..." --detail <text>', does: "Add what happened, at length (`-` reads stdin)" },
+        { run: "     [--command <name>] [--error-code <code>] [--from <agent>]" },
+        { run: "     [--yes] [--json]" }
+      ]
+    }
+  },
   {
     name: "whoami",
     usage: WHOAMI_USAGE,
@@ -287257,15 +287570,15 @@ function fullRows(group) {
 }
 
 // src/index.ts
-var import_errors24 = require("@abloatai/transaction/errors");
+var import_errors25 = require("@abloatai/transaction/errors");
 init_push();
 
 // src/generate.ts
 init_cjs_shims();
-var import_errors16 = require("@abloatai/transaction/errors");
+var import_errors17 = require("@abloatai/transaction/errors");
 var import_fs8 = require("fs");
 var import_path6 = require("path");
-var import_picocolors19 = __toESM(require_picocolors(), 1);
+var import_picocolors20 = __toESM(require_picocolors(), 1);
 var import_schema7 = require("@abloatai/transaction/schema");
 init_push();
 var DEFAULT_SCHEMA_PATH4 = "ablo/schema.ts";
@@ -287288,7 +287601,7 @@ function parseGenerateArgs(argv) {
         out = argv[++i] ?? out;
         break;
       default:
-        throw new import_errors16.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
+        throw new import_errors17.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
     }
   }
   return { schemaPath, exportName, out };
@@ -287298,7 +287611,7 @@ async function generate(argv) {
   try {
     args = parseGenerateArgs(argv);
   } catch (err) {
-    console.error(import_picocolors19.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors20.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   let source;
@@ -287307,21 +287620,21 @@ async function generate(argv) {
     const schemaJson = JSON.parse((0, import_schema7.serializeSchema)(schema));
     source = (0, import_schema7.generateTypes)(schemaJson);
   } catch (err) {
-    console.error(import_picocolors19.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors20.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const abs = (0, import_path6.resolve)(process.cwd(), args.out);
   (0, import_fs8.mkdirSync)((0, import_path6.dirname)(abs), { recursive: true });
   (0, import_fs8.writeFileSync)(abs, source);
-  console.log(`  ${import_picocolors19.default.green("\u2713")} Generated types \u2192 ${import_picocolors19.default.bold(args.out)}`);
+  console.log(`  ${import_picocolors20.default.green("\u2713")} Generated types \u2192 ${import_picocolors20.default.bold(args.out)}`);
 }
 
 // src/login.ts
 init_cjs_shims();
 var import_child_process2 = require("child_process");
-var import_picocolors20 = __toESM(require_picocolors(), 1);
+var import_picocolors21 = __toESM(require_picocolors(), 1);
 init_dist2();
-var import_errors17 = require("@abloatai/transaction/errors");
+var import_errors18 = require("@abloatai/transaction/errors");
 var import_wire8 = require("@abloatai/transaction/wire");
 init_config();
 init_theme();
@@ -287383,9 +287696,9 @@ async function deviceLogin(argv, deps = {}) {
   const code = await codeRes.json();
   const approvePath = `/cli?user_code=${code.user_code}${targetOrg ? `&org=${encodeURIComponent(targetOrg)}` : ""}`;
   const url = account === "signup" ? `${DASHBOARD_URL}/signup?next=${encodeURIComponent(approvePath)}` : `${DASHBOARD_URL}${approvePath}`;
-  Me(`${import_picocolors20.default.bold(code.user_code)}
+  Me(`${import_picocolors21.default.bold(code.user_code)}
 
-${import_picocolors20.default.dim(url)}`, "Approve in your browser");
+${import_picocolors21.default.dim(url)}`, "Approve in your browser");
   openUrl(url);
   const s = Y2();
   s.start("Waiting for approval\u2026");
@@ -287455,7 +287768,7 @@ ${import_picocolors20.default.dim(url)}`, "Approve in your browser");
   }
   if (!provRes.ok) {
     s.stop("Could not provision a key.");
-    const err = (0, import_errors17.translateHttpError)(
+    const err = (0, import_errors18.translateHttpError)(
       provRes.status,
       await provRes.json().catch(() => null),
       provRes.headers.get("x-request-id") ?? void 0
@@ -287463,11 +287776,11 @@ ${import_picocolors20.default.dim(url)}`, "Approve in your browser");
     M2.error(err.message);
     if (err.code === "entity_not_found" && targetProject) {
       M2.error(
-        `If that isn't the account you meant, run ${import_picocolors20.default.bold("npx ablo logout")} and sign in again. Otherwise create it with ${import_picocolors20.default.bold(`npx ablo projects create ${targetProject}`)}.`
+        `If that isn't the account you meant, run ${import_picocolors21.default.bold("npx ablo logout")} and sign in again. Otherwise create it with ${import_picocolors21.default.bold(`npx ablo projects create ${targetProject}`)}.`
       );
     } else {
       M2.error(
-        `The browser approval succeeded but the credential handoff failed. Try ${import_picocolors20.default.bold("npx ablo login")} again.`
+        `The browser approval succeeded but the credential handoff failed. Try ${import_picocolors21.default.bold("npx ablo login")} again.`
       );
     }
     process.exit(1);
@@ -287478,7 +287791,7 @@ ${import_picocolors20.default.dim(url)}`, "Approve in your browser");
   if (!parsedProv.success) {
     s.stop("Could not provision a key.");
     M2.error("The key handoff returned something this version does not recognize.");
-    M2.error(`Try again, or upgrade with ${import_picocolors20.default.bold("npm i -g @abloatai/ablo")}.`);
+    M2.error(`Try again, or upgrade with ${import_picocolors21.default.bold("npm i -g @abloatai/ablo")}.`);
     process.exit(1);
   }
   const prov = parsedProv.data;
@@ -287490,7 +287803,7 @@ ${import_picocolors20.default.dim(url)}`, "Approve in your browser");
   });
   if (targetOrg && prov.organizationSlug && prov.organizationSlug !== targetOrg) {
     M2.warn(
-      `The approval chose ${import_picocolors20.default.bold(prov.organizationSlug)}, not ${import_picocolors20.default.bold(targetOrg)}. The credential is scoped to ${import_picocolors20.default.bold(prov.organizationSlug)}.`
+      `The approval chose ${import_picocolors21.default.bold(prov.organizationSlug)}, not ${import_picocolors21.default.bold(targetOrg)}. The credential is scoped to ${import_picocolors21.default.bold(prov.organizationSlug)}.`
     );
   }
   const profileName = prov.project?.slug ?? DEFAULT_PROFILE;
@@ -287502,10 +287815,10 @@ ${import_picocolors20.default.dim(url)}`, "Approve in your browser");
     { mode: "sandbox", activeProject: prov.project ?? void 0 }
   );
   s.stop(`Saved project credential to ${path}`);
-  const orgLabel = prov.organizationSlug ? ` to ${import_picocolors20.default.bold(prov.organizationSlug)}` : "";
-  const where = prov.project ? ` ${import_picocolors20.default.dim(`(project ${prov.project.slug})`)}` : "";
+  const orgLabel = prov.organizationSlug ? ` to ${import_picocolors21.default.bold(prov.organizationSlug)}` : "";
+  const where = prov.project ? ` ${import_picocolors21.default.dim(`(project ${prov.project.slug})`)}` : "";
   Se(
-    `${import_picocolors20.default.green("\u2713")} Logged in${orgLabel}${where}. Run ${import_picocolors20.default.bold("npx ablo dev")} to create or resume your Git branch and start with an expiring runtime key.`
+    `${import_picocolors21.default.green("\u2713")} Logged in${orgLabel}${where}. Run ${import_picocolors21.default.bold("npx ablo dev")} to create or resume your Git branch and start with an expiring runtime key.`
   );
 }
 async function login(argv = [], deps = {}) {
@@ -287514,14 +287827,14 @@ async function login(argv = [], deps = {}) {
 function logout() {
   const removed = clearCredential();
   if (removed) {
-    console.log(`  ${import_picocolors20.default.green("\u2713")} Logged out ${import_picocolors20.default.dim(`(credentials removed from ${configDir()})`)}`);
+    console.log(`  ${import_picocolors21.default.green("\u2713")} Logged out ${import_picocolors21.default.dim(`(credentials removed from ${configDir()})`)}`);
   } else {
-    console.log(`  ${import_picocolors20.default.dim("\u25CB")} Not logged in \u2014 nothing to remove.`);
+    console.log(`  ${import_picocolors21.default.dim("\u25CB")} Not logged in \u2014 nothing to remove.`);
   }
   if (process.env.ABLO_MANAGEMENT_KEY) {
     console.log(
-      import_picocolors20.default.dim(
-        `  Note: ${import_picocolors20.default.bold("ABLO_MANAGEMENT_KEY")} is still set in this shell and takes precedence.`
+      import_picocolors21.default.dim(
+        `  Note: ${import_picocolors21.default.bold("ABLO_MANAGEMENT_KEY")} is still set in this shell and takes precedence.`
       )
     );
   }
@@ -287532,7 +287845,7 @@ init_projects();
 
 // src/status.ts
 init_cjs_shims();
-var import_picocolors21 = __toESM(require_picocolors(), 1);
+var import_picocolors22 = __toESM(require_picocolors(), 1);
 init_config();
 init_target();
 init_theme();
@@ -287542,9 +287855,9 @@ init_readiness();
 function expiryLabel(iso) {
   const ms = Date.parse(iso) - Date.now();
   if (Number.isNaN(ms)) return "";
-  if (ms <= 0) return import_picocolors21.default.red("expired");
+  if (ms <= 0) return import_picocolors22.default.red("expired");
   const days = Math.floor(ms / (24 * 60 * 60 * 1e3));
-  return import_picocolors21.default.dim(days > 0 ? `expires in ${days}d` : "expires <1d");
+  return import_picocolors22.default.dim(days > 0 ? `expires in ${days}d` : "expires <1d");
 }
 async function ping2(apiUrl3) {
   const ctrl = new AbortController();
@@ -287571,38 +287884,38 @@ function printTargetLines(target, localProject, storedOrganizationId, storedOrga
   const confirmed = target?.confirmed ?? null;
   const org = confirmed?.organizationId ?? storedOrganizationId;
   if (org) {
-    const suffix = confirmed?.organizationId ? "" : ` ${import_picocolors21.default.yellow("(unconfirmed)")}`;
+    const suffix = confirmed?.organizationId ? "" : ` ${import_picocolors22.default.yellow("(unconfirmed)")}`;
     const slug = org === storedOrganizationId ? storedOrganizationSlug : void 0;
-    const label = slug ? `${import_picocolors21.default.bold(slug)} ${import_picocolors21.default.dim(`(${org})`)}` : import_picocolors21.default.dim(org);
-    console.log(`  ${import_picocolors21.default.dim("org")}     ${label}${suffix}`);
+    const label = slug ? `${import_picocolors22.default.bold(slug)} ${import_picocolors22.default.dim(`(${org})`)}` : import_picocolors22.default.dim(org);
+    console.log(`  ${import_picocolors22.default.dim("org")}     ${label}${suffix}`);
   } else {
     console.log(
-      `  ${import_picocolors21.default.dim("org")}     ${import_picocolors21.default.yellow("unknown")} ${import_picocolors21.default.dim("(the server did not confirm one for this key)")}`
+      `  ${import_picocolors22.default.dim("org")}     ${import_picocolors22.default.yellow("unknown")} ${import_picocolors22.default.dim("(the server did not confirm one for this key)")}`
     );
   }
   let projectLine;
   if (confirmed?.project) {
     const p2 = confirmed.project;
-    projectLine = p2.isDefault ? `${import_picocolors21.default.bold("default")} ${import_picocolors21.default.dim("(org-default)")}` : `${import_picocolors21.default.bold(p2.slug)} ${import_picocolors21.default.dim(`(${p2.id})`)}`;
+    projectLine = p2.isDefault ? `${import_picocolors22.default.bold("default")} ${import_picocolors22.default.dim("(org-default)")}` : `${import_picocolors22.default.bold(p2.slug)} ${import_picocolors22.default.dim(`(${p2.id})`)}`;
   } else if (confirmed) {
-    projectLine = `${import_picocolors21.default.bold("default")} ${import_picocolors21.default.dim("(org-default)")}`;
+    projectLine = `${import_picocolors22.default.bold("default")} ${import_picocolors22.default.dim("(org-default)")}`;
   } else if (localProject) {
-    projectLine = `${import_picocolors21.default.bold(localProject.slug)} ${import_picocolors21.default.dim(`(${localProject.id})`)} ${import_picocolors21.default.yellow("(unconfirmed)")}`;
+    projectLine = `${import_picocolors22.default.bold(localProject.slug)} ${import_picocolors22.default.dim(`(${localProject.id})`)} ${import_picocolors22.default.yellow("(unconfirmed)")}`;
   } else {
-    projectLine = `${import_picocolors21.default.bold("default")} ${target ? import_picocolors21.default.yellow("(unconfirmed)") : import_picocolors21.default.dim("(org-default)")}`;
+    projectLine = `${import_picocolors22.default.bold("default")} ${target ? import_picocolors22.default.yellow("(unconfirmed)") : import_picocolors22.default.dim("(org-default)")}`;
   }
-  console.log(`  ${import_picocolors21.default.dim("project")} ${projectLine}`);
+  console.log(`  ${import_picocolors22.default.dim("project")} ${projectLine}`);
   const branch = confirmed?.branchId ?? null;
   const env = confirmed?.environment ?? target?.keyEnv ?? null;
   if (branch) {
     const label = confirmed?.branchRoot ? "production root" : `branch ${branch}`;
-    console.log(`  ${import_picocolors21.default.dim("acts on")} ${import_picocolors21.default.bold(label)}`);
+    console.log(`  ${import_picocolors22.default.dim("acts on")} ${import_picocolors22.default.bold(label)}`);
   } else if (env) {
-    const suffix = confirmed ? "" : ` ${import_picocolors21.default.yellow("(unconfirmed)")}`;
-    console.log(`  ${import_picocolors21.default.dim("acts on")} ${import_picocolors21.default.bold(env)}${suffix}`);
+    const suffix = confirmed ? "" : ` ${import_picocolors22.default.yellow("(unconfirmed)")}`;
+    console.log(`  ${import_picocolors22.default.dim("acts on")} ${import_picocolors22.default.bold(env)}${suffix}`);
   }
   const divergence = describeMismatches(target?.mismatches ?? []);
-  if (divergence) console.log(`    ${import_picocolors21.default.yellow(`\u26A0 ${divergence}`)}`);
+  if (divergence) console.log(`    ${import_picocolors22.default.yellow(`\u26A0 ${divergence}`)}`);
 }
 async function status(args = []) {
   const apiUrl3 = apiBaseUrl();
@@ -287686,15 +287999,15 @@ async function status(args = []) {
     return;
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors21.default.dim("status")}
+  ${brand("ablo")} ${import_picocolors22.default.dim("status")}
 `);
   if (runtimeKey.key && runtimeKey.source && runtimeKey.source !== "stored") {
     const label = runtimeKey.source === "env" ? "ABLO_API_KEY env" : runtimeKey.source;
     console.log(
-      `  ${import_picocolors21.default.dim("key")}     ${runtimeKey.key.slice(0, 12)}\u2026 ${import_picocolors21.default.dim(`(${label} \u2014 overrides stored)`)}`
+      `  ${import_picocolors22.default.dim("key")}     ${runtimeKey.key.slice(0, 12)}\u2026 ${import_picocolors22.default.dim(`(${label} \u2014 overrides stored)`)}`
     );
   } else if (!cfg) {
-    console.log(`  ${import_picocolors21.default.yellow("!")} Not logged in \u2014 run ${import_picocolors21.default.bold("ablo login")}.`);
+    console.log(`  ${import_picocolors22.default.yellow("!")} Not logged in \u2014 run ${import_picocolors22.default.bold("ablo login")}.`);
   }
   const activeEntry = getKeyEntry(mode);
   const activeProject = getActiveProject();
@@ -287706,9 +288019,9 @@ async function status(args = []) {
   );
   const management = getManagementKeyEntry();
   console.log(
-    `  ${import_picocolors21.default.dim("\u25CB")} ${"management".padEnd(12)}  ${management ? import_picocolors21.default.dim(
+    `  ${import_picocolors22.default.dim("\u25CB")} ${"management".padEnd(12)}  ${management ? import_picocolors22.default.dim(
       `${management.apiKey.slice(0, 12)}\u2026${management.expiresAt ? ` \xB7 ${expiryLabel(management.expiresAt)}` : ""}`
-    ) : import_picocolors21.default.dim("\u2014 no key")}`
+    ) : import_picocolors22.default.dim("\u2014 no key")}`
   );
   for (const { key: m2, label } of [
     { key: "sandbox", label: "legacy child" },
@@ -287720,21 +288033,21 @@ async function status(args = []) {
         credentialCapability(entry.apiKey).label,
         entry.expiresAt ? expiryLabel(entry.expiresAt) : ""
       ].filter(Boolean);
-      const trail = facts.length ? ` ${import_picocolors21.default.dim("\xB7")} ${facts.join(import_picocolors21.default.dim(" \xB7 "))}` : "";
+      const trail = facts.length ? ` ${import_picocolors22.default.dim("\xB7")} ${facts.join(import_picocolors22.default.dim(" \xB7 "))}` : "";
       console.log(
-        `  ${import_picocolors21.default.dim("\u25CB")} ${label.padEnd(12)}  ${import_picocolors21.default.dim(`${entry.apiKey.slice(0, 12)}\u2026`)}${trail}`
+        `  ${import_picocolors22.default.dim("\u25CB")} ${label.padEnd(12)}  ${import_picocolors22.default.dim(`${entry.apiKey.slice(0, 12)}\u2026`)}${trail}`
       );
     }
   }
   const pushBranch = target?.confirmed?.branchRoot === true ? "production root" : target?.confirmed?.branchId ? `branch ${target.confirmed.branchId}` : runtimeKey.key ? "unknown branch" : "no branch";
   console.log(
-    `  ${import_picocolors21.default.dim("push")}    ${runtimeKey.key ? `${import_picocolors21.default.bold(pushBranch)} ${import_picocolors21.default.dim(`with ${runtimeKey.key.slice(0, 12)}\u2026 (${runtimeKey.source})`)}` : `${import_picocolors21.default.bold(pushBranch)} ${import_picocolors21.default.yellow("\u2014 no runtime key")} ${import_picocolors21.default.dim(`(set ${import_picocolors21.default.bold("ABLO_API_KEY")} or run ${import_picocolors21.default.bold("ablo dev")})`)}`}`
+    `  ${import_picocolors22.default.dim("push")}    ${runtimeKey.key ? `${import_picocolors22.default.bold(pushBranch)} ${import_picocolors22.default.dim(`with ${runtimeKey.key.slice(0, 12)}\u2026 (${runtimeKey.source})`)}` : `${import_picocolors22.default.bold(pushBranch)} ${import_picocolors22.default.yellow("\u2014 no runtime key")} ${import_picocolors22.default.dim(`(set ${import_picocolors22.default.bold("ABLO_API_KEY")} or run ${import_picocolors22.default.bold("ablo dev")})`)}`}`
   );
   const capability = credentialCapability(runtimeKey.key);
-  if (capability.note) console.log(`    ${import_picocolors21.default.dim(capability.note)}`);
-  process.stdout.write(`  ${import_picocolors21.default.dim("api")}     ${apiUrl3}  `);
+  if (capability.note) console.log(`    ${import_picocolors22.default.dim(capability.note)}`);
+  process.stdout.write(`  ${import_picocolors22.default.dim("api")}     ${apiUrl3}  `);
   const reachable = await ping2(apiUrl3);
-  console.log(reachable ? import_picocolors21.default.green("reachable") : import_picocolors21.default.red("unreachable"));
+  console.log(reachable ? import_picocolors22.default.green("reachable") : import_picocolors22.default.red("unreachable"));
   const introspectKey = runtimeKey.key;
   const { source: dataSource, validation } = reachable ? await fetchRoutingState(apiUrl3, introspectKey) : { source: { kind: "unknown", detail: "unreachable" }, validation: null };
   if (dataSource.kind === "connected") {
@@ -287742,65 +288055,65 @@ async function status(args = []) {
     const pooled = detectPoolerIn(dataSource.hosts);
     const unreachable = validation && !validation.ok ? validation.message : void 0;
     console.log(
-      `  ${import_picocolors21.default.dim("data")}    ${import_picocolors21.default.green("\u2713")} ${import_picocolors21.default.dim(`database connected to this plane (${how})`)}`
+      `  ${import_picocolors22.default.dim("data")}    ${import_picocolors22.default.green("\u2713")} ${import_picocolors22.default.dim(`database connected to this plane (${how})`)}`
     );
     if (pooled) {
       console.log(
-        `          ${import_picocolors21.default.yellow("\u26A0")} ${import_picocolors21.default.dim(
+        `          ${import_picocolors22.default.yellow("\u26A0")} ${import_picocolors22.default.dim(
           `${pooled.host} is a connection pooler` + (pooled.direct ? `; register the direct host instead: ${pooled.direct}` : "; register the direct host instead")
         )}`
       );
     }
     if (unreachable) {
-      console.log(`          ${import_picocolors21.default.red("\u2717")} ${import_picocolors21.default.dim(`Ablo could not reach it \u2014 ${unreachable}`)}`);
+      console.log(`          ${import_picocolors22.default.red("\u2717")} ${import_picocolors22.default.dim(`Ablo could not reach it \u2014 ${unreachable}`)}`);
     }
     if (validation?.ok && validation.initialSnapshot?.status === "loading") {
       console.log(
-        `          ${import_picocolors21.default.yellow("\u25CC")} ${import_picocolors21.default.dim(
-          `loading rows that predate the connection \u2014 automatic; check with ${import_picocolors21.default.bold("ablo connect check")}`
+        `          ${import_picocolors22.default.yellow("\u25CC")} ${import_picocolors22.default.dim(
+          `loading rows that predate the connection \u2014 automatic; check with ${import_picocolors22.default.bold("ablo connect check")}`
         )}`
       );
     } else if (validation?.ok && validation.initialSnapshot?.status === "retrying") {
       console.log(
-        `          ${import_picocolors21.default.red("\u2717")} ${import_picocolors21.default.dim(
+        `          ${import_picocolors22.default.red("\u2717")} ${import_picocolors22.default.dim(
           `loading existing rows is retrying${validation.initialSnapshot.detail ? ` \u2014 ${validation.initialSnapshot.detail}` : ""}`
         )}`
       );
     }
   } else if (dataSource.kind === "none") {
     console.log(
-      `  ${import_picocolors21.default.dim("data")}    ${import_picocolors21.default.red("\u2717 this branch is not connected to a database")} ${import_picocolors21.default.dim("\u2014 writes are held")}`
+      `  ${import_picocolors22.default.dim("data")}    ${import_picocolors22.default.red("\u2717 this branch is not connected to a database")} ${import_picocolors22.default.dim("\u2014 writes are held")}`
     );
   } else if (reachable) {
     console.log(
-      `  ${import_picocolors21.default.dim("data")}    ${import_picocolors21.default.yellow("?")} ${import_picocolors21.default.dim(`could not read this branch's database connection (${dataSource.detail})`)}`
+      `  ${import_picocolors22.default.dim("data")}    ${import_picocolors22.default.yellow("?")} ${import_picocolors22.default.dim(`could not read this branch's database connection (${dataSource.detail})`)}`
     );
   }
   const pushed = reachable ? await fetchPushedSchema(apiUrl3, introspectKey) : null;
   if (reachable) {
     if (pushed?.active) {
-      const when = pushed.pushedAt ? ` ${import_picocolors21.default.dim(`@ ${pushed.pushedAt.slice(0, 10)}`)}` : "";
-      const ver = pushed.version != null ? ` ${import_picocolors21.default.dim(`(rev ${pushed.version})`)}` : "";
-      const hashLabel = pushed.hash ? ` ${import_picocolors21.default.dim(`hash ${pushed.hash}`)}` : "";
+      const when = pushed.pushedAt ? ` ${import_picocolors22.default.dim(`@ ${pushed.pushedAt.slice(0, 10)}`)}` : "";
+      const ver = pushed.version != null ? ` ${import_picocolors22.default.dim(`(rev ${pushed.version})`)}` : "";
+      const hashLabel = pushed.hash ? ` ${import_picocolors22.default.dim(`hash ${pushed.hash}`)}` : "";
       console.log(
-        `  ${import_picocolors21.default.dim("schema")}  ${import_picocolors21.default.bold(`${pushed.models.length} models pushed`)}${ver}${hashLabel}${when}`
+        `  ${import_picocolors22.default.dim("schema")}  ${import_picocolors22.default.bold(`${pushed.models.length} models pushed`)}${ver}${hashLabel}${when}`
       );
       for (const m2 of pushed.models) {
-        const tn = m2.typename === m2.key ? import_picocolors21.default.dim(`typename=${m2.typename}`) : import_picocolors21.default.yellow(`typename=${m2.typename}`);
+        const tn = m2.typename === m2.key ? import_picocolors22.default.dim(`typename=${m2.typename}`) : import_picocolors22.default.yellow(`typename=${m2.typename}`);
         const conflict = formatConflict(m2.conflict);
-        const conflictStr2 = conflict ? `  ${import_picocolors21.default.dim(`conflict=${conflict}`)}` : "";
-        console.log(`          ${import_picocolors21.default.dim("\u2022")} ${m2.key.padEnd(14)} ${tn}${conflictStr2}`);
+        const conflictStr2 = conflict ? `  ${import_picocolors22.default.dim(`conflict=${conflict}`)}` : "";
+        console.log(`          ${import_picocolors22.default.dim("\u2022")} ${m2.key.padEnd(14)} ${tn}${conflictStr2}`);
       }
     } else if (pushed && !pushed.active) {
       console.log(
-        `  ${import_picocolors21.default.dim("schema")}  ${import_picocolors21.default.yellow("none pushed")} ${import_picocolors21.default.dim(`(run ${import_picocolors21.default.bold("ablo push")} or ${import_picocolors21.default.bold("ablo dev")})`)}`
+        `  ${import_picocolors22.default.dim("schema")}  ${import_picocolors22.default.yellow("none pushed")} ${import_picocolors22.default.dim(`(run ${import_picocolors22.default.bold("ablo push")} or ${import_picocolors22.default.bold("ablo dev")})`)}`
       );
     }
   }
   const drift = schemaDrift(await readLocalSchemaHash(), pushed?.hash);
   if (drift) {
     console.log(
-      `  ${import_picocolors21.default.dim("drift")}   ${import_picocolors21.default.red("\u2717 local schema differs from the server")} ` + import_picocolors21.default.dim(`(local ${drift.local}, server ${drift.server})`)
+      `  ${import_picocolors22.default.dim("drift")}   ${import_picocolors22.default.red("\u2717 local schema differs from the server")} ` + import_picocolors22.default.dim(`(local ${drift.local}, server ${drift.server})`)
     );
   }
   const found = blockers({
@@ -287812,18 +288125,18 @@ async function status(args = []) {
   });
   console.log();
   if (found.length > 0) {
-    console.log(`  ${import_picocolors21.default.red("\u2717")} ${import_picocolors21.default.bold("writes would fail right now")}`);
+    console.log(`  ${import_picocolors22.default.red("\u2717")} ${import_picocolors22.default.bold("writes would fail right now")}`);
     for (const b4 of found) {
-      console.log(`    ${import_picocolors21.default.dim("\xB7")} ${b4.problem}`);
-      console.log(`      ${import_picocolors21.default.dim(b4.fix)}`);
+      console.log(`    ${import_picocolors22.default.dim("\xB7")} ${b4.problem}`);
+      console.log(`      ${import_picocolors22.default.dim(b4.fix)}`);
     }
   } else if (dataSource.kind === "unknown") {
     console.log(
-      `  ${import_picocolors21.default.yellow("?")} ${import_picocolors21.default.dim("nothing is blocking a write, but this key could not read the branch's database connection \u2014 some checks were skipped")}`
+      `  ${import_picocolors22.default.yellow("?")} ${import_picocolors22.default.dim("nothing is blocking a write, but this key could not read the branch's database connection \u2014 some checks were skipped")}`
     );
   } else {
     console.log(
-      `  ${import_picocolors21.default.green("\u2713")} ${import_picocolors21.default.dim("write infrastructure is ready \u2014 database constraints and row-level policies still apply")}`
+      `  ${import_picocolors22.default.green("\u2713")} ${import_picocolors22.default.dim("write infrastructure is ready \u2014 database constraints and row-level policies still apply")}`
     );
   }
   console.log();
@@ -287831,9 +288144,9 @@ async function status(args = []) {
 
 // src/logs.ts
 init_cjs_shims();
-var import_errors18 = require("@abloatai/transaction/errors");
+var import_errors19 = require("@abloatai/transaction/errors");
 var import_wire9 = require("@abloatai/transaction/wire");
-var import_picocolors22 = __toESM(require_picocolors(), 1);
+var import_picocolors23 = __toESM(require_picocolors(), 1);
 init_config();
 init_theme();
 init_controlPlane();
@@ -287873,12 +288186,12 @@ function parseLogsArgs(argv) {
         args.json = true;
         break;
       case "--mode":
-        throw new import_errors18.AbloValidationError(
+        throw new import_errors19.AbloValidationError(
           "--mode was removed. Logs follow the branch bound to ABLO_API_KEY; select a different branch by supplying its key.",
           { code: "cli_invalid_arguments" }
         );
       default:
-        throw new import_errors18.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
+        throw new import_errors19.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
     }
   }
   return args;
@@ -287897,10 +288210,10 @@ function resolveSince(since) {
 var sleep2 = (ms) => new Promise((r2) => setTimeout(r2, ms));
 function colorOp(op) {
   const label = op.padEnd(6);
-  if (op === "create") return import_picocolors22.default.green(label);
-  if (op === "update") return import_picocolors22.default.yellow(label);
-  if (op === "delete") return import_picocolors22.default.red(label);
-  return import_picocolors22.default.dim(label);
+  if (op === "create") return import_picocolors23.default.green(label);
+  if (op === "update") return import_picocolors23.default.yellow(label);
+  if (op === "delete") return import_picocolors23.default.red(label);
+  return import_picocolors23.default.dim(label);
 }
 function render2(e2, json) {
   if (json) {
@@ -287909,21 +288222,21 @@ function render2(e2, json) {
     return;
   }
   const t = new Date(e2.at).toLocaleTimeString();
-  const actor = e2.actor ? import_picocolors22.default.dim(`  ${e2.actor}`) : "";
-  console.log(`  ${import_picocolors22.default.dim(t)}  ${colorOp(e2.op)}  ${import_picocolors22.default.bold(e2.model)} ${import_picocolors22.default.dim(e2.recordId)}${actor}`);
+  const actor = e2.actor ? import_picocolors23.default.dim(`  ${e2.actor}`) : "";
+  console.log(`  ${import_picocolors23.default.dim(t)}  ${colorOp(e2.op)}  ${import_picocolors23.default.bold(e2.model)} ${import_picocolors23.default.dim(e2.recordId)}${actor}`);
 }
 async function logs(argv) {
   let args;
   try {
     args = parseLogsArgs(argv);
   } catch (err) {
-    console.error(import_picocolors22.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors23.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const apiKey = resolveRuntimeApiKey().key;
   if (!apiKey) {
     console.error(
-      import_picocolors22.default.red(`  No API key.`) + import_picocolors22.default.dim(` Run ${import_picocolors22.default.bold("ablo login")} or set ${import_picocolors22.default.bold("ABLO_API_KEY")}.`)
+      import_picocolors23.default.red(`  No API key.`) + import_picocolors23.default.dim(` Run ${import_picocolors23.default.bold("ablo login")} or set ${import_picocolors23.default.bold("ABLO_API_KEY")}.`)
     );
     process.exit(1);
   }
@@ -287937,7 +288250,7 @@ async function logs(argv) {
     if (!res) return null;
     if (!res.ok) {
       const body = await res.json().catch(() => ({}));
-      console.error(import_picocolors22.default.red(`  logs failed (${res.status}): ${body.reason ?? body.message ?? ""}`));
+      console.error(import_picocolors23.default.red(`  logs failed (${res.status}): ${body.reason ?? body.message ?? ""}`));
       process.exit(1);
     }
     const json = await res.json();
@@ -287948,7 +288261,7 @@ async function logs(argv) {
   }
   if (!args.json) {
     console.log(`
-  ${brand("ablo")} ${import_picocolors22.default.dim("logs")}
+  ${brand("ablo")} ${import_picocolors23.default.dim("logs")}
 `);
   }
   const initial = await fetchPage({
@@ -287958,13 +288271,13 @@ async function logs(argv) {
     ...args.op ? { op: args.op } : {}
   });
   if (!initial) {
-    console.error(import_picocolors22.default.red(`  Couldn't reach ${baseUrl2}.`));
+    console.error(import_picocolors23.default.red(`  Couldn't reach ${baseUrl2}.`));
     process.exit(1);
   }
   for (const e2 of initial.events) render2(e2, args.json);
   let cursor = initial.cursor;
   if (!args.follow) return;
-  if (!args.json) console.log(`  ${import_picocolors22.default.dim("watching for new activity \u2026 (Ctrl-C to stop)")}
+  if (!args.json) console.log(`  ${import_picocolors23.default.dim("watching for new activity \u2026 (Ctrl-C to stop)")}
 `);
   for (; ; ) {
     await sleep2(1500);
@@ -287984,7 +288297,7 @@ async function logs(argv) {
 // src/webhooks.ts
 init_cjs_shims();
 var import_fs9 = require("fs");
-var import_picocolors23 = __toESM(require_picocolors(), 1);
+var import_picocolors24 = __toESM(require_picocolors(), 1);
 var import_credentialPolicy4 = require("@abloatai/transaction/auth/credentialPolicy");
 init_config();
 init_theme();
@@ -288017,12 +288330,12 @@ function requireKey3(mode) {
   const apiKey = resolveMutationApiKey(mode);
   if (!apiKey) {
     console.error(
-      import_picocolors23.default.red("  No API key.") + import_picocolors23.default.dim(` Run ${import_picocolors23.default.bold("ablo login")} or set ${import_picocolors23.default.bold("ABLO_API_KEY")}.`)
+      import_picocolors24.default.red("  No API key.") + import_picocolors24.default.dim(` Run ${import_picocolors24.default.bold("ablo login")} or set ${import_picocolors24.default.bold("ABLO_API_KEY")}.`)
     );
     process.exit(1);
   }
   if ((0, import_credentialPolicy4.classifyCredentialKind)(apiKey) !== "secret") {
-    console.error(import_picocolors23.default.red("  Managing webhooks requires a branch-bound secret key ") + import_picocolors23.default.dim("(sk_)."));
+    console.error(import_picocolors24.default.red("  Managing webhooks requires a branch-bound secret key ") + import_picocolors24.default.dim("(sk_)."));
     process.exit(1);
   }
   return apiKey;
@@ -288038,12 +288351,12 @@ async function api(apiKey, method, path, body) {
     ...body ? { body: JSON.stringify(body) } : {}
   }).catch(() => null);
   if (!res) {
-    console.error(import_picocolors23.default.red(`  Couldn't reach ${baseUrl()}.`));
+    console.error(import_picocolors24.default.red(`  Couldn't reach ${baseUrl()}.`));
     process.exit(1);
   }
   if (!res.ok) {
     const err = await res.json().catch(() => ({}));
-    console.error(import_picocolors23.default.red(`  Request failed (${res.status}): ${err.message ?? err.reason ?? ""}`));
+    console.error(import_picocolors24.default.red(`  Request failed (${res.status}): ${err.message ?? err.reason ?? ""}`));
     process.exit(1);
   }
   return await res.json();
@@ -288065,11 +288378,11 @@ ${line}
   return file;
 }
 function printEndpoint(e2) {
-  const dot = e2.status === "enabled" ? import_picocolors23.default.green("\u25CF") : import_picocolors23.default.red("\u25CF");
-  const health = e2.last_error ? import_picocolors23.default.red(` last error: ${e2.last_error}`) : "";
-  console.log(`  ${dot} ${import_picocolors23.default.bold(e2.id)}  ${e2.url}`);
+  const dot = e2.status === "enabled" ? import_picocolors24.default.green("\u25CF") : import_picocolors24.default.red("\u25CF");
+  const health = e2.last_error ? import_picocolors24.default.red(` last error: ${e2.last_error}`) : "";
+  console.log(`  ${dot} ${import_picocolors24.default.bold(e2.id)}  ${e2.url}`);
   console.log(
-    import_picocolors23.default.dim(
+    import_picocolors24.default.dim(
       `      ${e2.status} \xB7 ${e2.environment} \xB7 events ${e2.enabled_events.join(",")} \xB7 cursor ${e2.cursor ?? "\u2014"}${health}`
     )
   );
@@ -288081,7 +288394,7 @@ async function webhooks(argv) {
   if (sub === "create") {
     const url = positional(rest);
     if (!url) {
-      console.error(import_picocolors23.default.red("  Usage: ") + brand("ablo webhooks create <url>"));
+      console.error(import_picocolors24.default.red("  Usage: ") + brand("ablo webhooks create <url>"));
       process.exit(1);
     }
     const apiKey = requireKey3(mode);
@@ -288093,8 +288406,8 @@ async function webhooks(argv) {
     });
     const file = writeSecretToEnv(created.secret);
     console.log(`
-  ${import_picocolors23.default.green("\u2713")} Registered ${import_picocolors23.default.bold(created.id)} \u2192 ${created.url}`);
-    console.log(`  ${import_picocolors23.default.green("\u2713")} Wrote ${import_picocolors23.default.bold(ENV_KEY)} to ${import_picocolors23.default.bold(file)} ${import_picocolors23.default.dim("(shown once)")}
+  ${import_picocolors24.default.green("\u2713")} Registered ${import_picocolors24.default.bold(created.id)} \u2192 ${created.url}`);
+    console.log(`  ${import_picocolors24.default.green("\u2713")} Wrote ${import_picocolors24.default.bold(ENV_KEY)} to ${import_picocolors24.default.bold(file)} ${import_picocolors24.default.dim("(shown once)")}
 `);
     return;
   }
@@ -288102,7 +288415,7 @@ async function webhooks(argv) {
     const apiKey = requireKey3(mode);
     const { data } = await api(apiKey, "GET", "");
     if (data.length === 0) {
-      console.log(import_picocolors23.default.dim("  No webhook endpoints. ") + brand("ablo webhooks create <url>"));
+      console.log(import_picocolors24.default.dim("  No webhook endpoints. ") + brand("ablo webhooks create <url>"));
       return;
     }
     console.log();
@@ -288113,40 +288426,40 @@ async function webhooks(argv) {
   if (sub === "roll") {
     const id = positional(rest);
     if (!id) {
-      console.error(import_picocolors23.default.red("  Usage: ") + brand("ablo webhooks roll <id>"));
+      console.error(import_picocolors24.default.red("  Usage: ") + brand("ablo webhooks roll <id>"));
       process.exit(1);
     }
     const apiKey = requireKey3(mode);
     const rolled = await api(apiKey, "POST", `/${id}/roll_secret`);
     const file = writeSecretToEnv(rolled.secret);
     console.log(`
-  ${import_picocolors23.default.green("\u2713")} Rolled secret for ${import_picocolors23.default.bold(id)} \u2192 ${import_picocolors23.default.bold(file)} ${import_picocolors23.default.dim("(old secret now invalid)")}
+  ${import_picocolors24.default.green("\u2713")} Rolled secret for ${import_picocolors24.default.bold(id)} \u2192 ${import_picocolors24.default.bold(file)} ${import_picocolors24.default.dim("(old secret now invalid)")}
 `);
     return;
   }
   if (sub === "enable") {
     const id = positional(rest);
     if (!id) {
-      console.error(import_picocolors23.default.red("  Usage: ") + brand("ablo webhooks enable <id>"));
+      console.error(import_picocolors24.default.red("  Usage: ") + brand("ablo webhooks enable <id>"));
       process.exit(1);
     }
     const apiKey = requireKey3(mode);
     const e2 = await api(apiKey, "POST", `/${id}/enable`);
-    console.log(`  ${import_picocolors23.default.green("\u2713")} Re-enabled ${import_picocolors23.default.bold(e2.id)}`);
+    console.log(`  ${import_picocolors24.default.green("\u2713")} Re-enabled ${import_picocolors24.default.bold(e2.id)}`);
     return;
   }
   if (sub === "rm" || sub === "delete") {
     const id = positional(rest);
     if (!id) {
-      console.error(import_picocolors23.default.red("  Usage: ") + brand("ablo webhooks rm <id>"));
+      console.error(import_picocolors24.default.red("  Usage: ") + brand("ablo webhooks rm <id>"));
       process.exit(1);
     }
     const apiKey = requireKey3(mode);
     await api(apiKey, "DELETE", `/${id}`);
-    console.log(`  ${import_picocolors23.default.green("\u2713")} Removed ${import_picocolors23.default.bold(id)}`);
+    console.log(`  ${import_picocolors24.default.green("\u2713")} Removed ${import_picocolors24.default.bold(id)}`);
     return;
   }
-  console.log(`  ${import_picocolors23.default.bold("Usage:")}`);
+  console.log(`  ${import_picocolors24.default.bold("Usage:")}`);
   console.log(`    ${brand("ablo webhooks create <url>")}   Register an endpoint; writes ${ENV_KEY}`);
   console.log(`    ${brand("ablo webhooks list")}           List endpoints + delivery health`);
   console.log(`    ${brand("ablo webhooks roll <id>")}       Mint a fresh signing secret`);
@@ -288157,8 +288470,8 @@ async function webhooks(argv) {
 
 // src/check.ts
 init_cjs_shims();
-var import_errors19 = require("@abloatai/transaction/errors");
-var import_picocolors24 = __toESM(require_picocolors(), 1);
+var import_errors20 = require("@abloatai/transaction/errors");
+var import_picocolors25 = __toESM(require_picocolors(), 1);
 init_src();
 var import_schema9 = require("@abloatai/transaction/schema");
 init_push();
@@ -288305,7 +288618,7 @@ function parseCheckArgs(argv) {
         appSchema = argv[++i] ?? appSchema;
         break;
       default:
-        throw new import_errors19.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
+        throw new import_errors20.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
     }
   }
   return { schemaPath, exportName, appSchema };
@@ -288319,22 +288632,22 @@ function hostOf(connectionString) {
 }
 async function reportReadSubject(dbUrl) {
   const host = hostOf(dbUrl);
-  console.log(`  ${import_picocolors24.default.dim("reading")} ${import_picocolors24.default.bold(host ?? "your database")}`);
+  console.log(`  ${import_picocolors25.default.dim("reading")} ${import_picocolors25.default.bold(host ?? "your database")}`);
   const runtimeKey = resolveRuntimeApiKey();
   const state = await fetchDataSourceState(apiBaseUrl(), runtimeKey.key);
   if (state.kind === "unknown") {
     console.log(
-      `  ${import_picocolors24.default.dim("ablo")}    ${import_picocolors24.default.yellow("?")} ${import_picocolors24.default.dim(`couldn't ask which database Ablo reads (${state.detail})`)}
+      `  ${import_picocolors25.default.dim("ablo")}    ${import_picocolors25.default.yellow("?")} ${import_picocolors25.default.dim(`couldn't ask which database Ablo reads (${state.detail})`)}
 `
     );
     return;
   }
   if (state.kind === "none") {
     console.log(
-      `  ${import_picocolors24.default.dim("ablo")}    ${import_picocolors24.default.yellow("!")} this branch is not connected to a database, so Ablo does not read this one`
+      `  ${import_picocolors25.default.dim("ablo")}    ${import_picocolors25.default.yellow("!")} this branch is not connected to a database, so Ablo does not read this one`
     );
     console.log(
-      `           ${import_picocolors24.default.dim(`Connect it with ${import_picocolors24.default.bold("ablo connect apply")}. Until then a table here is invisible to the engine.`)}
+      `           ${import_picocolors25.default.dim(`Connect it with ${import_picocolors25.default.bold("ablo connect apply")}. Until then a table here is invisible to the engine.`)}
 `
     );
     return;
@@ -288342,15 +288655,15 @@ async function reportReadSubject(dbUrl) {
   const registered = [...new Set(state.hosts)];
   if (host && registered.length > 0 && !registered.includes(host)) {
     console.log(
-      `  ${import_picocolors24.default.dim("ablo")}    ${import_picocolors24.default.yellow("!")} Ablo reads ${import_picocolors24.default.bold(registered.join(", "))}`
+      `  ${import_picocolors25.default.dim("ablo")}    ${import_picocolors25.default.yellow("!")} Ablo reads ${import_picocolors25.default.bold(registered.join(", "))}`
     );
     console.log(
-      `           ${import_picocolors24.default.dim("If that is this database under a pooled hostname, this is fine \u2014 otherwise the report below describes a database Ablo never reads.")}
+      `           ${import_picocolors25.default.dim("If that is this database under a pooled hostname, this is fine \u2014 otherwise the report below describes a database Ablo never reads.")}
 `
     );
     return;
   }
-  console.log(`  ${import_picocolors24.default.dim("ablo")}    ${import_picocolors24.default.green("\u2713")} ${import_picocolors24.default.dim("reads this database")}
+  console.log(`  ${import_picocolors25.default.dim("ablo")}    ${import_picocolors25.default.green("\u2713")} ${import_picocolors25.default.dim("reads this database")}
 `);
 }
 async function check(argv) {
@@ -288358,20 +288671,20 @@ async function check(argv) {
   try {
     args = parseCheckArgs(argv);
   } catch (err) {
-    console.error(import_picocolors24.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors25.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const dbUrl = readProjectAdminDatabaseUrl();
   if (!dbUrl) {
     console.error(
-      import_picocolors24.default.red(`  No database.`) + import_picocolors24.default.dim(` Set ${import_picocolors24.default.bold(ADMIN_URL_VAR)} to the Postgres you want Ablo to adopt.`)
+      import_picocolors25.default.red(`  No database.`) + import_picocolors25.default.dim(` Set ${import_picocolors25.default.bold(ADMIN_URL_VAR)} to the Postgres you want Ablo to adopt.`)
     );
     process.exit(1);
   }
   const schema = await loadSchema(args.schemaPath, args.exportName);
   const schemaJson = JSON.parse((0, import_schema9.serializeSchema)(schema));
   console.log(`
-  ${brand("ablo")} ${import_picocolors24.default.dim("check")}  ${import_picocolors24.default.dim(`schema "${args.appSchema}"`)}
+  ${brand("ablo")} ${import_picocolors25.default.dim("check")}  ${import_picocolors25.default.dim(`schema "${args.appSchema}"`)}
 `);
   await reportReadSubject(dbUrl);
   const sql = src_default(dbUrl, { max: 1, prepare: false, onnotice: () => {
@@ -288383,7 +288696,7 @@ async function check(argv) {
       [args.appSchema]
     );
   } catch (err) {
-    console.error(import_picocolors24.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors25.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
     await sql.end({ timeout: 2 });
     process.exit(1);
   }
@@ -288405,7 +288718,7 @@ async function check(argv) {
     declaredTables.add(table);
     const present = colsByTable.get(table);
     if (!present) {
-      console.log(`  ${import_picocolors24.default.red("\u2717")} ${import_picocolors24.default.bold(key)} ${import_picocolors24.default.dim("\u2192")} table ${import_picocolors24.default.bold(table)} ${import_picocolors24.default.red("not found")}`);
+      console.log(`  ${import_picocolors25.default.red("\u2717")} ${import_picocolors25.default.bold(key)} ${import_picocolors25.default.dim("\u2192")} table ${import_picocolors25.default.bold(table)} ${import_picocolors25.default.red("not found")}`);
       errors++;
       continue;
     }
@@ -288427,26 +288740,26 @@ async function check(argv) {
       if (!present.has(col)) problems.push(`missing column "${col}" (field ${fieldName})`);
     }
     if (problems.length > 0) {
-      console.log(`  ${import_picocolors24.default.red("\u2717")} ${import_picocolors24.default.bold(key)} ${import_picocolors24.default.dim("\u2192")} ${table}`);
-      for (const p2 of problems) console.log(`      ${import_picocolors24.default.red("\u2022")} ${p2}`);
-      for (const w2 of warns) console.log(`      ${import_picocolors24.default.yellow("\u2022")} ${w2}`);
+      console.log(`  ${import_picocolors25.default.red("\u2717")} ${import_picocolors25.default.bold(key)} ${import_picocolors25.default.dim("\u2192")} ${table}`);
+      for (const p2 of problems) console.log(`      ${import_picocolors25.default.red("\u2022")} ${p2}`);
+      for (const w2 of warns) console.log(`      ${import_picocolors25.default.yellow("\u2022")} ${w2}`);
       errors++;
     } else if (warns.length > 0) {
-      console.log(`  ${import_picocolors24.default.yellow("!")} ${import_picocolors24.default.bold(key)} ${import_picocolors24.default.dim("\u2192")} ${table}`);
-      for (const w2 of warns) console.log(`      ${import_picocolors24.default.yellow("\u2022")} ${w2}`);
+      console.log(`  ${import_picocolors25.default.yellow("!")} ${import_picocolors25.default.bold(key)} ${import_picocolors25.default.dim("\u2192")} ${table}`);
+      for (const w2 of warns) console.log(`      ${import_picocolors25.default.yellow("\u2022")} ${w2}`);
       warnings++;
     } else {
-      console.log(`  ${import_picocolors24.default.green("\u2713")} ${import_picocolors24.default.bold(key)} ${import_picocolors24.default.dim(`\u2192 ${table} (id, ${orgCol ?? "no org"} ok)`)}`);
+      console.log(`  ${import_picocolors25.default.green("\u2713")} ${import_picocolors25.default.bold(key)} ${import_picocolors25.default.dim(`\u2192 ${table} (id, ${orgCol ?? "no org"} ok)`)}`);
     }
   }
   const modelCount = Object.keys(schemaJson.models).length;
   const ignored = [...colsByTable.keys()].filter((t) => !declaredTables.has(t)).length;
   console.log(
     `
-  ${modelCount} model${modelCount === 1 ? "" : "s"} \xB7 ${import_picocolors24.default.green(`${modelCount - errors - warnings} ok`)}` + (warnings ? ` \xB7 ${import_picocolors24.default.yellow(`${warnings} warning${warnings === 1 ? "" : "s"}`)}` : "") + (errors ? ` \xB7 ${import_picocolors24.default.red(`${errors} error${errors === 1 ? "" : "s"}`)}` : "")
+  ${modelCount} model${modelCount === 1 ? "" : "s"} \xB7 ${import_picocolors25.default.green(`${modelCount - errors - warnings} ok`)}` + (warnings ? ` \xB7 ${import_picocolors25.default.yellow(`${warnings} warning${warnings === 1 ? "" : "s"}`)}` : "") + (errors ? ` \xB7 ${import_picocolors25.default.red(`${errors} error${errors === 1 ? "" : "s"}`)}` : "")
   );
   if (ignored > 0) {
-    console.log(`  ${import_picocolors24.default.dim(`${ignored} other table${ignored === 1 ? "" : "s"} in your database \u2014 ignored by Ablo`)}`);
+    console.log(`  ${import_picocolors25.default.dim(`${ignored} other table${ignored === 1 ? "" : "s"} in your database \u2014 ignored by Ablo`)}`);
   }
   console.log();
   process.exit(errors > 0 ? 1 : 0);
@@ -288454,7 +288767,7 @@ async function check(argv) {
 
 // src/upgrade.ts
 init_cjs_shims();
-var import_picocolors25 = __toESM(require_picocolors(), 1);
+var import_picocolors26 = __toESM(require_picocolors(), 1);
 var import_ts_morph = __toESM(require_ts_morph(), 1);
 var DEFAULT_GLOBS = ["app/**/*.{ts,tsx}", "src/**/*.{ts,tsx}", "ablo/**/*.{ts,tsx}", "lib/**/*.{ts,tsx}"];
 var VERB_ARGS = {
@@ -288532,7 +288845,7 @@ async function upgrade(argv) {
   project.addSourceFilesAtPaths(globs.length > 0 ? globs : DEFAULT_GLOBS);
   const files = project.getSourceFiles();
   if (files.length === 0) {
-    console.log(import_picocolors25.default.yellow('  No .ts/.tsx files found. Pass a glob, e.g. `ablo upgrade "src/**/*.tsx"`.'));
+    console.log(import_picocolors26.default.yellow('  No .ts/.tsx files found. Pass a glob, e.g. `ablo upgrade "src/**/*.tsx"`.'));
     return;
   }
   const edits = [];
@@ -288606,39 +288919,39 @@ async function upgrade(argv) {
   const rel = (f) => f.replace(cwd + "/", "");
   console.log();
   if (edits.length === 0 && manual.length === 0) {
-    console.log(import_picocolors25.default.green("  \u2713 Nothing to migrate \u2014 your code is already on the current API."));
+    console.log(import_picocolors26.default.green("  \u2713 Nothing to migrate \u2014 your code is already on the current API."));
     return;
   }
   if (edits.length > 0) {
-    console.log(import_picocolors25.default.bold(`  ${write ? "Applied" : "Would apply"} ${edits.length} change${edits.length === 1 ? "" : "s"}:`));
+    console.log(import_picocolors26.default.bold(`  ${write ? "Applied" : "Would apply"} ${edits.length} change${edits.length === 1 ? "" : "s"}:`));
     for (const e2 of edits) {
-      console.log(`    ${import_picocolors25.default.dim(`${rel(e2.file)}:${e2.line}`)}  ${import_picocolors25.default.cyan(e2.rule)}`);
-      console.log(`      ${import_picocolors25.default.red("-")} ${e2.before}`);
-      console.log(`      ${import_picocolors25.default.green("+")} ${e2.after}`);
+      console.log(`    ${import_picocolors26.default.dim(`${rel(e2.file)}:${e2.line}`)}  ${import_picocolors26.default.cyan(e2.rule)}`);
+      console.log(`      ${import_picocolors26.default.red("-")} ${e2.before}`);
+      console.log(`      ${import_picocolors26.default.green("+")} ${e2.after}`);
     }
   }
   if (manual.length > 0) {
     console.log();
-    console.log(import_picocolors25.default.bold(import_picocolors25.default.yellow(`  ${manual.length} spot${manual.length === 1 ? "" : "s"} need manual review (structural):`)));
+    console.log(import_picocolors26.default.bold(import_picocolors26.default.yellow(`  ${manual.length} spot${manual.length === 1 ? "" : "s"} need manual review (structural):`)));
     for (const m2 of manual) {
-      console.log(`    ${import_picocolors25.default.dim(`${rel(m2.file)}:${m2.line}`)}  ${import_picocolors25.default.yellow(m2.rule)}`);
-      console.log(`      ${import_picocolors25.default.dim(m2.snippet)}`);
+      console.log(`    ${import_picocolors26.default.dim(`${rel(m2.file)}:${m2.line}`)}  ${import_picocolors26.default.yellow(m2.rule)}`);
+      console.log(`      ${import_picocolors26.default.dim(m2.snippet)}`);
       console.log(`      \u2192 ${m2.hint}`);
     }
   }
   console.log();
   if (write) {
     await project.save();
-    console.log(import_picocolors25.default.green(`  \u2713 Wrote ${edits.length} change${edits.length === 1 ? "" : "s"}. Review the diff, run your typecheck.`));
+    console.log(import_picocolors26.default.green(`  \u2713 Wrote ${edits.length} change${edits.length === 1 ? "" : "s"}. Review the diff, run your typecheck.`));
   } else {
-    console.log(import_picocolors25.default.dim("  Dry run. Re-run with `--write` to apply the auto-fixes above (manual items are never auto-written)."));
+    console.log(import_picocolors26.default.dim("  Dry run. Re-run with `--write` to apply the auto-fixes above (manual items are never auto-written)."));
   }
 }
 
 // src/pull.ts
 init_cjs_shims();
-var import_errors20 = require("@abloatai/transaction/errors");
-var import_picocolors26 = __toESM(require_picocolors(), 1);
+var import_errors21 = require("@abloatai/transaction/errors");
+var import_picocolors27 = __toESM(require_picocolors(), 1);
 init_src();
 var import_fs10 = require("fs");
 init_theme();
@@ -288666,7 +288979,7 @@ function parsePullArgs(argv) {
         force = true;
         break;
       default:
-        throw new import_errors20.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
+        throw new import_errors21.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
     }
   }
   return { out, appSchema, importPath, force };
@@ -288736,56 +289049,56 @@ async function pull(argv) {
   try {
     args = parsePullArgs(argv);
   } catch (err) {
-    console.error(import_picocolors26.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors27.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   const dbUrl = readProjectAdminDatabaseUrl();
   if (!dbUrl) {
     console.error(
-      import_picocolors26.default.red(`  No database.`) + import_picocolors26.default.dim(` Set ${import_picocolors26.default.bold(ADMIN_URL_VAR)} to the Postgres to pull from.`)
+      import_picocolors27.default.red(`  No database.`) + import_picocolors27.default.dim(` Set ${import_picocolors27.default.bold(ADMIN_URL_VAR)} to the Postgres to pull from.`)
     );
     process.exit(1);
   }
   if ((0, import_fs10.existsSync)(args.out) && !args.force) {
     console.error(
-      import_picocolors26.default.red(`  ${args.out} already exists.`) + import_picocolors26.default.dim(` Re-run with ${import_picocolors26.default.bold("--force")} to overwrite.`)
+      import_picocolors27.default.red(`  ${args.out} already exists.`) + import_picocolors27.default.dim(` Re-run with ${import_picocolors27.default.bold("--force")} to overwrite.`)
     );
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors26.default.dim("pull")}  ${import_picocolors26.default.dim(`schema "${args.appSchema}"`)}
+  ${brand("ablo")} ${import_picocolors27.default.dim("pull")}  ${import_picocolors27.default.dim(`schema "${args.appSchema}"`)}
 `);
   let result;
   try {
     result = await buildSchemaSourceFromDb({ dbUrl, appSchema: args.appSchema, importPath: args.importPath });
   } catch (err) {
-    console.error(import_picocolors26.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors27.default.red(`  Couldn't read the database: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (result.models.length === 0) {
     console.error(
-      import_picocolors26.default.yellow(`  No adoptable tables found`) + import_picocolors26.default.dim(` (a model needs an ${import_picocolors26.default.bold("id")} + ${import_picocolors26.default.bold("organization_id")} column).`)
+      import_picocolors27.default.yellow(`  No adoptable tables found`) + import_picocolors27.default.dim(` (a model needs an ${import_picocolors27.default.bold("id")} + ${import_picocolors27.default.bold("organization_id")} column).`)
     );
     process.exit(1);
   }
   (0, import_fs10.writeFileSync)(args.out, result.source);
-  console.log(`  ${import_picocolors26.default.green("\u2713")} wrote ${import_picocolors26.default.bold(args.out)} ${import_picocolors26.default.dim(`(${result.models.length} models)`)}`);
-  console.log(`  ${import_picocolors26.default.dim(`models: ${result.models.join(", ")}`)}`);
+  console.log(`  ${import_picocolors27.default.green("\u2713")} wrote ${import_picocolors27.default.bold(args.out)} ${import_picocolors27.default.dim(`(${result.models.length} models)`)}`);
+  console.log(`  ${import_picocolors27.default.dim(`models: ${result.models.join(", ")}`)}`);
   if (result.skipped.length > 0) {
-    console.log(`  ${import_picocolors26.default.dim(`${result.skipped.length} table(s) skipped:`)}`);
-    for (const s of result.skipped) console.log(`    ${import_picocolors26.default.dim(`- ${s.name}: ${s.reason}`)}`);
+    console.log(`  ${import_picocolors27.default.dim(`${result.skipped.length} table(s) skipped:`)}`);
+    for (const s of result.skipped) console.log(`    ${import_picocolors27.default.dim(`- ${s.name}: ${s.reason}`)}`);
   }
   console.log(
     `
-  ${import_picocolors26.default.dim("Introspection is lossy (enums, JSON shape, relations). Review the file, then")} ${import_picocolors26.default.bold("ablo check")}.
+  ${import_picocolors27.default.dim("Introspection is lossy (enums, JSON shape, relations). Review the file, then")} ${import_picocolors27.default.bold("ablo check")}.
 `
   );
 }
 
 // src/prismaPull.ts
 init_cjs_shims();
-var import_errors21 = require("@abloatai/transaction/errors");
-var import_picocolors27 = __toESM(require_picocolors(), 1);
+var import_errors22 = require("@abloatai/transaction/errors");
+var import_picocolors28 = __toESM(require_picocolors(), 1);
 var import_fs11 = require("fs");
 init_theme();
 var DEFAULT_SCHEMA = "prisma/schema.prisma";
@@ -288982,7 +289295,7 @@ function parsePrismaPullArgs(argv) {
         force = true;
         break;
       default:
-        if (arg.startsWith("--")) throw new import_errors21.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
+        if (arg.startsWith("--")) throw new import_errors22.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
         schema = arg;
     }
   }
@@ -288993,56 +289306,56 @@ async function prismaPull(argv) {
   try {
     args = parsePrismaPullArgs(argv);
   } catch (err) {
-    console.error(import_picocolors27.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors28.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (!(0, import_fs11.existsSync)(args.schema)) {
     console.error(
-      import_picocolors27.default.red(`  No Prisma schema at ${import_picocolors27.default.bold(args.schema)}.`) + import_picocolors27.default.dim(` Pass a path: ${import_picocolors27.default.bold("ablo pull prisma <path>")}.`)
+      import_picocolors28.default.red(`  No Prisma schema at ${import_picocolors28.default.bold(args.schema)}.`) + import_picocolors28.default.dim(` Pass a path: ${import_picocolors28.default.bold("ablo pull prisma <path>")}.`)
     );
     process.exit(1);
   }
   if ((0, import_fs11.existsSync)(args.out) && !args.force) {
     console.error(
-      import_picocolors27.default.red(`  ${args.out} already exists.`) + import_picocolors27.default.dim(` Re-run with ${import_picocolors27.default.bold("--force")} to overwrite.`)
+      import_picocolors28.default.red(`  ${args.out} already exists.`) + import_picocolors28.default.dim(` Re-run with ${import_picocolors28.default.bold("--force")} to overwrite.`)
     );
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors27.default.dim("pull prisma")}  ${import_picocolors27.default.dim(args.schema)}
+  ${brand("ablo")} ${import_picocolors28.default.dim("pull prisma")}  ${import_picocolors28.default.dim(args.schema)}
 `);
   let result;
   try {
     const src = (0, import_fs11.readFileSync)(args.schema, "utf8");
     result = buildSchemaSourceFromPrisma({ src, importPath: args.importPath });
   } catch (err) {
-    console.error(import_picocolors27.default.red(`  Couldn't parse the schema: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors28.default.red(`  Couldn't parse the schema: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (result.models.length === 0) {
     console.error(
-      import_picocolors27.default.yellow(`  No adoptable models found`) + import_picocolors27.default.dim(` (a model needs an ${import_picocolors27.default.bold("id")} + ${import_picocolors27.default.bold("organizationId")} / ${import_picocolors27.default.bold("organization_id")}).`)
+      import_picocolors28.default.yellow(`  No adoptable models found`) + import_picocolors28.default.dim(` (a model needs an ${import_picocolors28.default.bold("id")} + ${import_picocolors28.default.bold("organizationId")} / ${import_picocolors28.default.bold("organization_id")}).`)
     );
     process.exit(1);
   }
   (0, import_fs11.writeFileSync)(args.out, result.source);
-  console.log(`  ${import_picocolors27.default.green("\u2713")} wrote ${import_picocolors27.default.bold(args.out)} ${import_picocolors27.default.dim(`(${result.models.length} models)`)}`);
-  console.log(`  ${import_picocolors27.default.dim(`models: ${result.models.join(", ")}`)}`);
+  console.log(`  ${import_picocolors28.default.green("\u2713")} wrote ${import_picocolors28.default.bold(args.out)} ${import_picocolors28.default.dim(`(${result.models.length} models)`)}`);
+  console.log(`  ${import_picocolors28.default.dim(`models: ${result.models.join(", ")}`)}`);
   if (result.skipped.length > 0) {
-    console.log(`  ${import_picocolors27.default.dim(`${result.skipped.length} model(s) skipped:`)}`);
-    for (const s of result.skipped) console.log(`    ${import_picocolors27.default.dim(`- ${s.name}: ${s.reason}`)}`);
+    console.log(`  ${import_picocolors28.default.dim(`${result.skipped.length} model(s) skipped:`)}`);
+    for (const s of result.skipped) console.log(`    ${import_picocolors28.default.dim(`- ${s.name}: ${s.reason}`)}`);
   }
   console.log(
     `
-  ${import_picocolors27.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors27.default.bold("ablo check")}.
+  ${import_picocolors28.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors28.default.bold("ablo check")}.
 `
   );
 }
 
 // src/drizzlePull.ts
 init_cjs_shims();
-var import_picocolors28 = __toESM(require_picocolors(), 1);
-var import_errors22 = require("@abloatai/transaction/errors");
+var import_picocolors29 = __toESM(require_picocolors(), 1);
+var import_errors23 = require("@abloatai/transaction/errors");
 var import_fs12 = require("fs");
 var import_path7 = require("path");
 init_theme();
@@ -289149,7 +289462,7 @@ function parseDrizzlePullArgs(argv) {
         force = true;
         break;
       default:
-        if (arg.startsWith("--")) throw new import_errors22.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
+        if (arg.startsWith("--")) throw new import_errors23.AbloValidationError(`unknown flag: ${arg}`, { code: "cli_invalid_arguments" });
         schema = arg;
     }
   }
@@ -289166,27 +289479,27 @@ async function drizzlePull(argv) {
   try {
     args = parseDrizzlePullArgs(argv);
   } catch (err) {
-    console.error(import_picocolors28.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_picocolors29.default.red(`  ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
   if (!args.schema) {
     console.error(
-      import_picocolors28.default.red(`  No Drizzle schema given.`) + import_picocolors28.default.dim(` Pass the module: ${import_picocolors28.default.bold("ablo pull drizzle src/db/schema.ts")}.`)
+      import_picocolors29.default.red(`  No Drizzle schema given.`) + import_picocolors29.default.dim(` Pass the module: ${import_picocolors29.default.bold("ablo pull drizzle src/db/schema.ts")}.`)
     );
     process.exit(1);
   }
   if (!(0, import_fs12.existsSync)(args.schema)) {
-    console.error(import_picocolors28.default.red(`  No file at ${import_picocolors28.default.bold(args.schema)}.`));
+    console.error(import_picocolors29.default.red(`  No file at ${import_picocolors29.default.bold(args.schema)}.`));
     process.exit(1);
   }
   if ((0, import_fs12.existsSync)(args.out) && !args.force) {
     console.error(
-      import_picocolors28.default.red(`  ${args.out} already exists.`) + import_picocolors28.default.dim(` Re-run with ${import_picocolors28.default.bold("--force")} to overwrite.`)
+      import_picocolors29.default.red(`  ${args.out} already exists.`) + import_picocolors29.default.dim(` Re-run with ${import_picocolors29.default.bold("--force")} to overwrite.`)
     );
     process.exit(1);
   }
   console.log(`
-  ${brand("ablo")} ${import_picocolors28.default.dim("pull drizzle")}  ${import_picocolors28.default.dim(args.schema)}
+  ${brand("ablo")} ${import_picocolors29.default.dim("pull drizzle")}  ${import_picocolors29.default.dim(args.schema)}
 `);
   let result;
   try {
@@ -289194,26 +289507,26 @@ async function drizzlePull(argv) {
     result = await buildSchemaSourceFromDrizzle({ mod, importPath: args.importPath });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    const hint = msg.includes("Cannot find package 'drizzle-orm'") ? import_picocolors28.default.dim(` (install ${import_picocolors28.default.bold("drizzle-orm")} in this project)`) : "";
-    console.error(import_picocolors28.default.red(`  Couldn't load the schema: ${msg}`) + hint);
+    const hint = msg.includes("Cannot find package 'drizzle-orm'") ? import_picocolors29.default.dim(` (install ${import_picocolors29.default.bold("drizzle-orm")} in this project)`) : "";
+    console.error(import_picocolors29.default.red(`  Couldn't load the schema: ${msg}`) + hint);
     process.exit(1);
   }
   if (result.models.length === 0) {
     console.error(
-      import_picocolors28.default.yellow(`  No adoptable tables found`) + import_picocolors28.default.dim(` (a table needs an ${import_picocolors28.default.bold("id")} + ${import_picocolors28.default.bold("organization_id")} column).`)
+      import_picocolors29.default.yellow(`  No adoptable tables found`) + import_picocolors29.default.dim(` (a table needs an ${import_picocolors29.default.bold("id")} + ${import_picocolors29.default.bold("organization_id")} column).`)
     );
     process.exit(1);
   }
   (0, import_fs12.writeFileSync)(args.out, result.source);
-  console.log(`  ${import_picocolors28.default.green("\u2713")} wrote ${import_picocolors28.default.bold(args.out)} ${import_picocolors28.default.dim(`(${result.models.length} models)`)}`);
-  console.log(`  ${import_picocolors28.default.dim(`models: ${result.models.join(", ")}`)}`);
+  console.log(`  ${import_picocolors29.default.green("\u2713")} wrote ${import_picocolors29.default.bold(args.out)} ${import_picocolors29.default.dim(`(${result.models.length} models)`)}`);
+  console.log(`  ${import_picocolors29.default.dim(`models: ${result.models.join(", ")}`)}`);
   if (result.skipped.length > 0) {
-    console.log(`  ${import_picocolors28.default.dim(`${result.skipped.length} table(s) skipped:`)}`);
-    for (const s of result.skipped) console.log(`    ${import_picocolors28.default.dim(`- ${s.name}: ${s.reason}`)}`);
+    console.log(`  ${import_picocolors29.default.dim(`${result.skipped.length} table(s) skipped:`)}`);
+    for (const s of result.skipped) console.log(`    ${import_picocolors29.default.dim(`- ${s.name}: ${s.reason}`)}`);
   }
   console.log(
     `
-  ${import_picocolors28.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors28.default.bold("ablo check")}.
+  ${import_picocolors29.default.dim("Enums and relations were preserved. Review the file, then")} ${import_picocolors29.default.bold("ablo check")}.
 `
   );
 }
@@ -289226,7 +289539,7 @@ init_telemetry();
 
 // src/init/options.ts
 init_cjs_shims();
-var import_node_fs3 = require("fs");
+var import_node_fs4 = require("fs");
 var import_node_path3 = require("path");
 var INIT_FRAMEWORKS = ["nextjs", "vite", "remix", "vanilla"];
 var INIT_AUTHS = [
@@ -289266,7 +289579,7 @@ function parseInitArgs(args) {
 function detectOrm(override, root = process.cwd()) {
   if (override === "prisma" || override === "drizzle" || override === "none") return override;
   try {
-    const pkg = JSON.parse((0, import_node_fs3.readFileSync)((0, import_node_path3.resolve)(root, "package.json"), "utf8"));
+    const pkg = JSON.parse((0, import_node_fs4.readFileSync)((0, import_node_path3.resolve)(root, "package.json"), "utf8"));
     const dependencies = { ...pkg.dependencies, ...pkg.devDependencies };
     if (dependencies["@prisma/client"] || dependencies.prisma) return "prisma";
     if (dependencies["drizzle-orm"]) return "drizzle";
@@ -289275,24 +289588,24 @@ function detectOrm(override, root = process.cwd()) {
   return "none";
 }
 function detectNextLayout(root = process.cwd()) {
-  const useSrc = (0, import_node_fs3.existsSync)((0, import_node_path3.resolve)(root, "src", "app")) || !(0, import_node_fs3.existsSync)((0, import_node_path3.resolve)(root, "app")) && (0, import_node_fs3.existsSync)((0, import_node_path3.resolve)(root, "src"));
+  const useSrc = (0, import_node_fs4.existsSync)((0, import_node_path3.resolve)(root, "src", "app")) || !(0, import_node_fs4.existsSync)((0, import_node_path3.resolve)(root, "app")) && (0, import_node_fs4.existsSync)((0, import_node_path3.resolve)(root, "src"));
   return useSrc ? { appBase: (0, import_node_path3.join)("src", "app"), aliasBase: "src" } : { appBase: "app", aliasBase: "." };
 }
 function detectPackageManager(root = process.cwd()) {
-  if ((0, import_node_fs3.existsSync)((0, import_node_path3.resolve)(root, "pnpm-lock.yaml"))) return "pnpm";
-  if ((0, import_node_fs3.existsSync)((0, import_node_path3.resolve)(root, "yarn.lock"))) return "yarn";
-  if ((0, import_node_fs3.existsSync)((0, import_node_path3.resolve)(root, "bun.lockb"))) return "bun";
+  if ((0, import_node_fs4.existsSync)((0, import_node_path3.resolve)(root, "pnpm-lock.yaml"))) return "pnpm";
+  if ((0, import_node_fs4.existsSync)((0, import_node_path3.resolve)(root, "yarn.lock"))) return "yarn";
+  if ((0, import_node_fs4.existsSync)((0, import_node_path3.resolve)(root, "bun.lockb"))) return "bun";
   return "npm";
 }
 
 // src/init/run.ts
 init_cjs_shims();
 var import_node_child_process3 = require("child_process");
-var import_node_fs5 = require("fs");
+var import_node_fs6 = require("fs");
 var import_node_path5 = require("path");
 init_dist2();
-var import_picocolors29 = __toESM(require_picocolors(), 1);
-var import_errors23 = require("@abloatai/transaction/errors");
+var import_picocolors30 = __toESM(require_picocolors(), 1);
+var import_errors24 = require("@abloatai/transaction/errors");
 init_dbRole();
 init_config();
 init_projects();
@@ -289717,9 +290030,9 @@ export function RecordList() {
 
 // src/init/writer.ts
 init_cjs_shims();
-var import_node_fs4 = require("fs");
+var import_node_fs5 = require("fs");
 var import_node_path4 = require("path");
-var import_node_crypto5 = require("crypto");
+var import_node_crypto7 = require("crypto");
 function projectInitWritePlan(plan) {
   return setupInitPlanProjectionSchema.parse({
     root: plan.root,
@@ -289741,10 +290054,10 @@ function absolute(root, path) {
   return target;
 }
 function sha2562(content) {
-  return (0, import_node_crypto5.createHash)("sha256").update(content).digest("hex");
+  return (0, import_node_crypto7.createHash)("sha256").update(content).digest("hex");
 }
 function readIfPresent(path) {
-  return (0, import_node_fs4.existsSync)(path) ? (0, import_node_fs4.readFileSync)(path, "utf8") : void 0;
+  return (0, import_node_fs5.existsSync)(path) ? (0, import_node_fs5.readFileSync)(path, "utf8") : void 0;
 }
 function mergeEnvironmentTemplate(existing, template) {
   const assignments = template.split(/\r?\n/).map((line) => {
@@ -289813,18 +290126,18 @@ function planInitWrites(input) {
   return { root, actions, conflicts };
 }
 function writeAtomic(path, content, kind) {
-  (0, import_node_fs4.mkdirSync)((0, import_node_path4.dirname)(path), { recursive: true });
-  const temporary = (0, import_node_path4.join)((0, import_node_path4.dirname)(path), `.${(0, import_node_crypto5.randomUUID)()}.ablo-init.tmp`);
-  (0, import_node_fs4.writeFileSync)(temporary, content, { flag: "wx" });
+  (0, import_node_fs5.mkdirSync)((0, import_node_path4.dirname)(path), { recursive: true });
+  const temporary = (0, import_node_path4.join)((0, import_node_path4.dirname)(path), `.${(0, import_node_crypto7.randomUUID)()}.ablo-init.tmp`);
+  (0, import_node_fs5.writeFileSync)(temporary, content, { flag: "wx" });
   try {
     if (kind === "create") {
-      (0, import_node_fs4.linkSync)(temporary, path);
-      (0, import_node_fs4.unlinkSync)(temporary);
+      (0, import_node_fs5.linkSync)(temporary, path);
+      (0, import_node_fs5.unlinkSync)(temporary);
     } else {
-      (0, import_node_fs4.renameSync)(temporary, path);
+      (0, import_node_fs5.renameSync)(temporary, path);
     }
   } catch (error) {
-    if ((0, import_node_fs4.existsSync)(temporary)) (0, import_node_fs4.unlinkSync)(temporary);
+    if ((0, import_node_fs5.existsSync)(temporary)) (0, import_node_fs5.unlinkSync)(temporary);
     throw error;
   }
 }
@@ -289858,7 +290171,7 @@ function bailIfCancelled(value) {
 async function chooseOption(name, flagValue, fallback, allowed, interactive, prompt) {
   if (flagValue !== void 0) {
     if (!allowed.includes(flagValue)) {
-      throw new import_errors23.AbloValidationError(
+      throw new import_errors24.AbloValidationError(
         `Invalid --${name} "${flagValue}". Allowed: ${allowed.join(", ")}`,
         { code: "cli_invalid_arguments" }
       );
@@ -289882,7 +290195,7 @@ async function ensureInitProject(opts) {
   const slug = opts.project ?? projectSlugFromPackageName(
     (() => {
       try {
-        return JSON.parse((0, import_node_fs5.readFileSync)("package.json", "utf8")).name;
+        return JSON.parse((0, import_node_fs6.readFileSync)("package.json", "utf8")).name;
       } catch {
         return void 0;
       }
@@ -289892,7 +290205,7 @@ async function ensureInitProject(opts) {
   const ensured = await ensureProject(slug);
   if (ensured) {
     console.log(
-      `  ${import_picocolors29.default.green("\u2713")} ${ensured.created ? "Created" : "Using"} project ${import_picocolors29.default.bold(ensured.slug)} ${import_picocolors29.default.dim(`(${ensured.id})`)} \u2014 keys you mint for it are isolated from the org's other apps.`
+      `  ${import_picocolors30.default.green("\u2713")} ${ensured.created ? "Created" : "Using"} project ${import_picocolors30.default.bold(ensured.slug)} ${import_picocolors30.default.dim(`(${ensured.id})`)} \u2014 keys you mint for it are isolated from the org's other apps.`
     );
   }
 }
@@ -289904,16 +290217,16 @@ function renderWritePlan(actions) {
 }
 function renderAppliedWrites(actions) {
   return actions.map((action) => {
-    const status2 = action.kind === "create" ? import_picocolors29.default.green("created") : action.kind === "update" ? import_picocolors29.default.yellow("updated") : import_picocolors29.default.dim("unchanged");
-    return `${import_picocolors29.default.green("\u2713")} ${action.path}${action.note ?? ""} ${import_picocolors29.default.dim(`(${status2})`)}`;
+    const status2 = action.kind === "create" ? import_picocolors30.default.green("created") : action.kind === "update" ? import_picocolors30.default.yellow("updated") : import_picocolors30.default.dim("unchanged");
+    return `${import_picocolors30.default.green("\u2713")} ${action.path}${action.note ?? ""} ${import_picocolors30.default.dim(`(${status2})`)}`;
   }).join("\n");
 }
 async function runInit(args = []) {
   const opts = parseInitArgs(args);
   const interactive = Boolean(process.stdin.isTTY) && !opts.yes && !process.env.CI;
-  Ie(`${brand("ablo")} ${import_picocolors29.default.dim("sync engine")}`);
-  if (!(0, import_node_fs5.existsSync)("package.json")) {
-    throw new import_errors23.AbloValidationError("No package.json found. Run this from your project root.", {
+  Ie(`${brand("ablo")} ${import_picocolors30.default.dim("sync engine")}`);
+  if (!(0, import_node_fs6.existsSync)("package.json")) {
+    throw new import_errors24.AbloValidationError("No package.json found. Run this from your project root.", {
       code: "cli_invalid_arguments"
     });
   }
@@ -289989,7 +290302,7 @@ async function runInit(args = []) {
   if (pullExisting) {
     const dbUrl = readProjectAdminDatabaseUrl();
     if (!dbUrl) {
-      schemaNote = import_picocolors29.default.dim(` (no ${ADMIN_URL_VAR} \u2014 wrote starter; run \`ablo pull\` later)`);
+      schemaNote = import_picocolors30.default.dim(` (no ${ADMIN_URL_VAR} \u2014 wrote starter; run \`ablo pull\` later)`);
     } else {
       try {
         const pulled = await buildSchemaSourceFromDb({
@@ -289999,12 +290312,12 @@ async function runInit(args = []) {
         });
         if (pulled.models.length > 0) {
           schemaSource = pulled.source;
-          schemaNote = import_picocolors29.default.dim(` (pulled ${pulled.models.length} models)`);
+          schemaNote = import_picocolors30.default.dim(` (pulled ${pulled.models.length} models)`);
         } else {
-          schemaNote = import_picocolors29.default.dim(" (no adoptable tables \u2014 wrote starter)");
+          schemaNote = import_picocolors30.default.dim(" (no adoptable tables \u2014 wrote starter)");
         }
       } catch {
-        schemaNote = import_picocolors29.default.dim(" (pull failed \u2014 wrote starter)");
+        schemaNote = import_picocolors30.default.dim(" (pull failed \u2014 wrote starter)");
       }
     }
   }
@@ -290048,7 +290361,7 @@ async function runInit(args = []) {
   const writePlan = planInitWrites({ files, environment: { path: envFile, template: envBody } });
   if (writePlan.conflicts.length > 0) {
     const occupied = writePlan.conflicts.map(({ path }) => `  - ${path}`).join("\n");
-    throw new import_errors23.AbloValidationError(
+    throw new import_errors24.AbloValidationError(
       `Ablo init did not change any files because these application-owned paths already contain different contents:
 ${occupied}
 
@@ -290058,7 +290371,7 @@ Move them, reconcile Ablo manually, or rerun after they match the generated scaf
   }
   if (opts.plan) {
     Me(renderWritePlan(writePlan.actions), "Plan (no files changed)");
-    Se(`Dry run complete. Re-run without ${import_picocolors29.default.bold("--plan")} to apply it.`);
+    Se(`Dry run complete. Re-run without ${import_picocolors30.default.bold("--plan")} to apply it.`);
     return setupInitResultSchema.parse({
       status: "planned",
       plan: projectInitWritePlan(writePlan)
@@ -290079,28 +290392,28 @@ Move them, reconcile Ablo manually, or rerun after they match the generated scaf
       progress.stop("Installed @abloatai/ablo");
     } catch {
       progress.stop(
-        `${import_picocolors29.default.yellow("!")} Couldn't auto-install \u2014 run ${import_picocolors29.default.bold(`${packageManager2} install @abloatai/ablo`)}`
+        `${import_picocolors30.default.yellow("!")} Couldn't auto-install \u2014 run ${import_picocolors30.default.bold(`${packageManager2} install @abloatai/ablo`)}`
       );
     }
   }
   const steps = [
-    `Run ${import_picocolors29.default.bold("npx ablo login")} to authorize branch management`,
-    `Set ${import_picocolors29.default.bold("DATABASE_URL")} in ${import_picocolors29.default.bold(envFile)} \u2014 your Postgres is the system of record; rows live there, never with Ablo`,
-    `Run ${import_picocolors29.default.bold("npx ablo dev")} \u2014 pushes your schema definition and watches for changes`,
+    `Run ${import_picocolors30.default.bold("npx ablo login")} to authorize branch management`,
+    `Set ${import_picocolors30.default.bold("DATABASE_URL")} in ${import_picocolors30.default.bold(envFile)} \u2014 your Postgres is the system of record; rows live there, never with Ablo`,
+    `Run ${import_picocolors30.default.bold("npx ablo dev")} \u2014 pushes your schema definition and watches for changes`,
     ...storage === "replication" ? [
-      `Connect your database \u2014 ${import_picocolors29.default.bold("npx ablo connect")} prints the one-time logical-replication setup SQL to run on your Postgres`,
-      `Verify it \u2014 ${import_picocolors29.default.bold("npx ablo connect check")} walks wal_level, the publication, the role, and replica identity, with the exact fix for anything missing`,
-      `Register it \u2014 ${import_picocolors29.default.bold("npx ablo connect register")} tells Ablo to start replicating; your app keeps writing through your own backend while Ablo tails the WAL`
+      `Connect your database \u2014 ${import_picocolors30.default.bold("npx ablo connect")} prints the one-time logical-replication setup SQL to run on your Postgres`,
+      `Verify it \u2014 ${import_picocolors30.default.bold("npx ablo connect check")} walks wal_level, the publication, the role, and replica identity, with the exact fix for anything missing`,
+      `Register it \u2014 ${import_picocolors30.default.bold("npx ablo connect register")} tells Ablo to start replicating; your app keeps writing through your own backend while Ablo tails the WAL`
     ] : [
-      `Provision your DB: ${import_picocolors29.default.bold("npx ablo migrate")} (creates your Ablo-model tables + the adapter tables; keep your own migrations for everything else), then mount ${import_picocolors29.default.bold(`${abloDir}/data-source.ts`)} at ${import_picocolors29.default.bold("/api/ablo/source")}`
+      `Provision your DB: ${import_picocolors30.default.bold("npx ablo migrate")} (creates your Ablo-model tables + the adapter tables; keep your own migrations for everything else), then mount ${import_picocolors30.default.bold(`${abloDir}/data-source.ts`)} at ${import_picocolors30.default.bold("/api/ablo/source")}`
     ],
     ...framework === "nextjs" ? [
-      `Wrap ${import_picocolors29.default.bold((0, import_node_path5.join)(layout.appBase, "layout.tsx"))} in ${import_picocolors29.default.bold("<Providers>")} (${(0, import_node_path5.join)(layout.appBase, "providers.tsx")}) and add your auth to ${import_picocolors29.default.bold((0, import_node_path5.join)(layout.appBase, "api", "ablo-session", "route.ts"))}`
+      `Wrap ${import_picocolors30.default.bold((0, import_node_path5.join)(layout.appBase, "layout.tsx"))} in ${import_picocolors30.default.bold("<Providers>")} (${(0, import_node_path5.join)(layout.appBase, "providers.tsx")}) and add your auth to ${import_picocolors30.default.bold((0, import_node_path5.join)(layout.appBase, "api", "ablo-session", "route.ts"))}`
     ] : [],
-    `Run ${import_picocolors29.default.bold(`${packageManager2} run dev`)} and open two browser tabs \u2014 changes sync in real-time`,
+    `Run ${import_picocolors30.default.bold(`${packageManager2} run dev`)} and open two browser tabs \u2014 changes sync in real-time`,
     ...agent ? [
-      `Run ${import_picocolors29.default.bold(`npx tsx ${abloDir}/agent.ts`)} \u2014 an AI teammate edits the same records`,
-      `Run ${import_picocolors29.default.bold("npx ablo logs")} to watch human + agent commits stream by`
+      `Run ${import_picocolors30.default.bold(`npx tsx ${abloDir}/agent.ts`)} \u2014 an AI teammate edits the same records`,
+      `Run ${import_picocolors30.default.bold("npx ablo logs")} to watch human + agent commits stream by`
     ] : []
   ];
   Me(steps.map((step, index) => `${index + 1}. ${step}`).join("\n"), "Next steps");
@@ -290108,26 +290421,26 @@ Move them, reconcile Ablo manually, or rerun after they match the generated scaf
   if (existingKey) {
     await ensureInitProject(opts);
     Se(
-      `Already authorized ${import_picocolors29.default.dim(`(${existingKey.slice(0, 11)}\u2026)`)}. Run ${import_picocolors29.default.bold("npx ablo dev")} next. ${import_picocolors29.default.dim("Docs:")} https://abloatai.com/docs`
+      `Already authorized ${import_picocolors30.default.dim(`(${existingKey.slice(0, 11)}\u2026)`)}. Run ${import_picocolors30.default.bold("npx ablo dev")} next. ${import_picocolors30.default.dim("Docs:")} https://abloatai.com/docs`
     );
     return initResult;
   }
   if (interactive && opts.login) {
     const loginNow = await ye({ message: "Log in now? (opens your browser)", initialValue: true });
     if (!pD(loginNow) && loginNow) {
-      Se(`${import_picocolors29.default.dim("Docs:")} https://abloatai.com/docs`);
+      Se(`${import_picocolors30.default.dim("Docs:")} https://abloatai.com/docs`);
       await login();
       await ensureInitProject(opts);
       return initResult;
     }
   }
-  Se(`Run ${import_picocolors29.default.bold("npx ablo login")} when ready. ${import_picocolors29.default.dim("Docs:")} https://abloatai.com/docs`);
+  Se(`Run ${import_picocolors30.default.bold("npx ablo login")} when ready. ${import_picocolors30.default.dim("Docs:")} https://abloatai.com/docs`);
   return initResult;
 }
 
 // src/index.ts
 var LOGO = `
-  ${brand("ablo")} ${import_picocolors30.default.dim("sync engine")}
+  ${brand("ablo")} ${import_picocolors31.default.dim("sync engine")}
 `;
 var HANDLERS = {
   setup: (argv) => runSetup(argv),
@@ -290146,6 +290459,7 @@ var HANDLERS = {
   webhooks: (argv) => webhooks([...argv]),
   check: (argv) => check([...argv]),
   docs: (argv) => docs([...argv]),
+  feedback: (argv) => feedback([...argv]),
   connect: (argv) => connect([...argv]),
   migrate: (argv) => migrate([...argv]),
   upgrade: (argv) => upgrade([...argv]),
@@ -290159,7 +290473,7 @@ async function runDev(argv) {
   const devArgs = [...argv];
   const oneShot = devArgs.includes("--no-watch");
   console.log(
-    import_picocolors30.default.dim(
+    import_picocolors31.default.dim(
       oneShot ? "  `ablo dev --no-watch` prepares this Git branch and pushes once." : "  `ablo dev` prepares this Git branch and watches the schema."
     )
   );
@@ -290177,7 +290491,7 @@ async function runPush2(argv) {
 }
 function runRenamedSchema(argv) {
   const forwarded = argv.slice(1).join(" ");
-  console.error(`  ${import_picocolors30.default.red("\u2717")} \`ablo schema push\` was renamed to \`${brand("ablo push")}\`.`);
+  console.error(`  ${import_picocolors31.default.red("\u2717")} \`ablo schema push\` was renamed to \`${brand("ablo push")}\`.`);
   console.error(`    Run \`ablo push${forwarded ? " " + forwarded : ""}\` instead.`);
   process.exitCode = 1;
 }
@@ -290187,7 +290501,7 @@ async function main() {
   const argv = process.argv.slice(3);
   if (!command && raw !== void 0 && raw !== "help" && !raw.startsWith("-")) {
     const suggestion = suggestCommand(raw);
-    throw new import_errors24.AbloValidationError(
+    throw new import_errors25.AbloValidationError(
       `\`${raw}\` isn't an ablo command.` + (suggestion ? ` Did you mean \`ablo ${suggestion}\`?` : " Run `ablo help --all` to see every command."),
       { code: "cli_invalid_arguments" }
     );
@@ -290228,7 +290542,7 @@ function printCoreHelp() {
   const width = Math.max(...rows.map((r2) => r2.run.length)) + 4;
   console.log(LOGO);
   for (const group of CORE_GROUPS) {
-    console.log(`  ${import_picocolors30.default.bold(group)}`);
+    console.log(`  ${import_picocolors31.default.bold(group)}`);
     const printed = group === "More" ? [...coreRows(group), ...extra] : coreRows(group);
     for (const row of printed) console.log(`    npx ablo ${row.run.padEnd(width)}${row.does}`);
     console.log();
@@ -290237,7 +290551,7 @@ function printCoreHelp() {
 }
 function printSchemaReminder() {
   console.log(
-    import_picocolors30.default.dim(`  Edit ${import_picocolors30.default.bold("ablo/schema.ts")}, then push \u2014 writes to models you haven't pushed fail with `) + import_picocolors30.default.yellow("server_execute_unknown_model") + import_picocolors30.default.dim(".")
+    import_picocolors31.default.dim(`  Edit ${import_picocolors31.default.bold("ablo/schema.ts")}, then push \u2014 writes to models you haven't pushed fail with `) + import_picocolors31.default.yellow("server_execute_unknown_model") + import_picocolors31.default.dim(".")
   );
   console.log();
 }
@@ -290247,7 +290561,7 @@ function printFullHelp() {
   ) + 2;
   console.log(LOGO);
   for (const group of FULL_GROUPS) {
-    console.log(`  ${import_picocolors30.default.bold(group)}`);
+    console.log(`  ${import_picocolors31.default.bold(group)}`);
     for (const row of fullRows(group)) {
       console.log(row.does === void 0 ? `    ${" ".repeat(9)}${row.run}` : `    npx ablo ${row.run.padEnd(width)}${row.does}`);
     }