@crvouga/mockingbird-service-postgres 1.6.0 → 2.0.0

package/dist/wire/cli.js

@@ -1,7 +1,73 @@
 #!/usr/bin/env node
 
-// src/wire/index.ts
-import { createServer } from "node:net";
+// ../../adapters/node/dist/cli.js
+import { readFile as readFile2 } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { parseArgs } from "node:util";
+
+// ../core/dist/clock.js
+var createClock = (source = Date.now) => {
+  let offsetMs = 0;
+  let frozenAt;
+  const now = () => frozenAt ?? source() + offsetMs;
+  return {
+    now,
+    set: (epochMs) => {
+      if (frozenAt !== void 0)
+        frozenAt = epochMs;
+      else
+        offsetMs = epochMs - source();
+    },
+    advance: (deltaMs) => {
+      if (frozenAt !== void 0)
+        frozenAt += deltaMs;
+      else
+        offsetMs += deltaMs;
+    },
+    freeze: () => {
+      frozenAt = now();
+    },
+    unfreeze: () => {
+      if (frozenAt === void 0)
+        return;
+      offsetMs = frozenAt - source();
+      frozenAt = void 0;
+    },
+    reset: () => {
+      offsetMs = 0;
+      frozenAt = void 0;
+    },
+    state: () => ({ now: now(), frozen: frozenAt !== void 0, offsetMs })
+  };
+};
+
+// ../core/dist/control.js
+var ADMIN_PREFIX = "/__admin";
+var resolveAdminPrefix = (prefix = ADMIN_PREFIX) => {
+  if (!/^\/[A-Za-z0-9_-]+(?:\/[A-Za-z0-9_-]+)*$/.test(prefix)) {
+    throw new Error("adminPrefix must be an absolute non-root path of literal segments, without a trailing slash");
+  }
+  return prefix;
+};
+var UNITS = {
+  ms: 1,
+  s: 1e3,
+  m: 6e4,
+  h: 36e5,
+  d: 864e5
+};
+var parseDuration = (value) => {
+  if (typeof value === "number" && Number.isFinite(value))
+    return value;
+  if (typeof value !== "string")
+    return void 0;
+  const match = /^(-?\d+(?:\.\d+)?)\s*(ms|s|m|h|d)$/.exec(value.trim());
+  if (!match)
+    return void 0;
+  return Number(match[1]) * UNITS[match[2]];
+};
 
 // ../../core/dist/timeline.js
 var BRANCH_PATTERN = /^[A-Za-z0-9_.-]{1,64}$/;
@@ -164,6 +230,786 @@ var Timeline = class {
   }
 };
 
+// ../../adapters/node/dist/fleet.js
+import { randomUUID } from "node:crypto";
+import { chmod, readFile, rename, rm, writeFile } from "node:fs/promises";
+
+// ../../adapters/node/dist/serve.js
+import { createServer } from "node:http";
+var serve = async (api, options2 = {}) => {
+  const server2 = createServer(async (req, res) => {
+    const chunks = [];
+    for await (const chunk of req) {
+      chunks.push(Buffer.from(chunk));
+    }
+    const body = Buffer.concat(chunks);
+    const address = server2.address();
+    const port = typeof address === "object" && address !== null ? address.port : void 0;
+    const base = `http://${req.headers.host ?? `localhost:${port ?? 80}`}`;
+    const raw = req.url ?? "/";
+    const url = new URL(raw.replace(/^\/+/, "/"), base);
+    const method = req.method ?? "GET";
+    const init = { method, headers: req.headers };
+    if (method !== "GET" && method !== "HEAD" && body.length > 0) {
+      init.body = body;
+    }
+    const aborted = new AbortController();
+    res.once("close", () => {
+      if (!res.writableFinished)
+        aborted.abort();
+    });
+    init.signal = aborted.signal;
+    const request = new Request(url, init);
+    let response;
+    try {
+      response = await api.fetch(request);
+    } catch (error) {
+      if (error.code === "MOCKINGBIRD_DROP") {
+        req.socket.destroy();
+        return;
+      }
+      res.writeHead(500, { "content-type": "application/json" });
+      res.end(JSON.stringify({
+        error: {
+          type: "mockingbird_internal",
+          message: error instanceof Error ? error.message : String(error)
+        }
+      }));
+      return;
+    }
+    const headers = Object.fromEntries(response.headers);
+    const cookies = response.headers.getSetCookie();
+    if (cookies.length > 0)
+      headers["set-cookie"] = cookies;
+    if (!response.body) {
+      res.writeHead(response.status, headers);
+      res.end();
+      return;
+    }
+    res.writeHead(response.status, headers);
+    res.flushHeaders();
+    const reader = response.body.getReader();
+    try {
+      for (; ; ) {
+        const { done, value } = await reader.read();
+        if (done)
+          break;
+        if (!res.write(value))
+          await new Promise((resolve2) => res.once("drain", resolve2));
+      }
+      res.end();
+    } catch {
+      res.destroy();
+    } finally {
+      reader.releaseLock();
+    }
+  });
+  await new Promise((resolve2, reject) => {
+    server2.once("error", reject);
+    server2.listen(options2.port ?? 0, options2.host, resolve2);
+  });
+  return server2;
+};
+
+// ../../adapters/node/dist/listen.js
+var listen = async (api, options2 = {}) => {
+  const host = options2.host ?? "127.0.0.1";
+  const server2 = await serve(api, { port: options2.port ?? 0, host });
+  const address = server2.address();
+  const port = typeof address === "object" && address !== null ? address.port : options2.port ?? 0;
+  const shown = host.includes(":") ? `[${host}]` : host;
+  return {
+    url: `http://${shown}:${port}`,
+    port,
+    host,
+    server: server2,
+    close: () => new Promise((resolve2, reject) => {
+      server2.close((error) => {
+        if (error && error.code !== "ERR_SERVER_NOT_RUNNING")
+          reject(error);
+        else
+          resolve2();
+      });
+      server2.closeAllConnections?.();
+    })
+  };
+};
+
+// ../../adapters/node/dist/fleet.js
+var EMPTY = {
+  activeRequests: 0,
+  activeConnections: 0,
+  blockedCommands: 0,
+  pendingJobs: 0,
+  pendingWebhooks: 0,
+  unmatchedRequests: 0
+};
+var NS = /^[A-Za-z0-9_.-]{1,64}$/;
+var json = (status, value) => Response.json(value, { status });
+var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var pending = (d) => d.activeRequests + d.blockedCommands + d.pendingJobs + d.pendingWebhooks;
+var publicUrl = (raw) => {
+  const url = new URL(raw);
+  url.password = "";
+  return url.href;
+};
+var atomicWrite = async (path, value) => {
+  const temp = `${path}.${randomUUID()}.tmp`;
+  try {
+    await writeFile(temp, `${JSON.stringify(value, null, 2)}
+`, { mode: 384, flag: "wx" });
+    await chmod(temp, 384);
+    await rename(temp, path);
+  } finally {
+    await rm(temp, { force: true });
+  }
+};
+var removeOwned = async (path, id) => {
+  if (!path)
+    return;
+  try {
+    const value = JSON.parse(await readFile(path, "utf8"));
+    if (isObject(value) && value.id === id)
+      await rm(path, { force: true });
+  } catch (error) {
+    if (error.code !== "ENOENT")
+      throw error;
+  }
+};
+var httpChild = async (target, entry, options2) => {
+  const runtime = await target.create(entry.options ?? {}, {
+    adminPrefix: resolveAdminPrefix(entry.adminPrefix),
+    adminKey: entry.adminKey,
+    seed: entry.seed,
+    onLog: options2.onLog
+  });
+  const adminPrefix = resolveAdminPrefix(entry.adminPrefix);
+  runtime.isolateNamespaces();
+  const locked = /* @__PURE__ */ new Set();
+  const active = /* @__PURE__ */ new Map();
+  const api = {
+    async fetch(request) {
+      const namespace = runtime.namespaceOf(request);
+      if (locked.has(namespace))
+        return json(409, { error: "fleet control in progress", namespace });
+      active.set(namespace, (active.get(namespace) ?? 0) + 1);
+      try {
+        return await runtime.fetch(request);
+      } finally {
+        active.set(namespace, (active.get(namespace) ?? 1) - 1);
+      }
+    }
+  };
+  let server2;
+  try {
+    server2 = await listen(api, {
+      port: entry.port ?? target.defaultPort,
+      host: entry.host ?? "127.0.0.1"
+    });
+    target.listening?.(server2);
+  } catch (error) {
+    runtime.stop?.();
+    await server2?.close();
+    runtime.webhooks?.clear();
+    await runtime.webhooks?.idle();
+    throw error;
+  }
+  return {
+    protocol: "http",
+    url: server2.url,
+    healthUrl: `${server2.url}${adminPrefix}/health`,
+    adminUrl: `${server2.url}${adminPrefix}`,
+    namespaces: { header: "x-mockingbird-namespace", path: `${adminPrefix}/ns/{name}` },
+    ready: async () => {
+      try {
+        return (await fetch(`${server2.url}${adminPrefix}/health`, { signal: AbortSignal.timeout(2e3) })).ok;
+      } catch {
+        return false;
+      }
+    },
+    async close() {
+      runtime.stop?.();
+      runtime.webhooks?.clear();
+      await server2.close();
+      await runtime.webhooks?.idle();
+    },
+    lock(namespace) {
+      if (locked.has(namespace))
+        throw new Error("namespace already locked");
+      locked.add(namespace);
+      return () => locked.delete(namespace);
+    },
+    diagnostics(namespace) {
+      return {
+        ...EMPTY,
+        activeRequests: active.get(namespace) ?? 0,
+        pendingWebhooks: runtime.webhooks?.pending(namespace) ?? 0,
+        unmatchedRequests: runtime.metrics.report(namespace).unmatched.reduce((n, r) => n + r.count, 0)
+      };
+    },
+    async checkpoint(namespace) {
+      return runtime.fleetSnapshot(namespace);
+    },
+    async restore(namespace, checkpoint) {
+      runtime.fleetRestore(checkpoint, namespace);
+    },
+    reset: (namespace) => runtime.reset(namespace),
+    clock: (namespace) => runtime.namespaceClock(namespace),
+    async settle(namespace) {
+      const instance = runtime.instance(namespace);
+      instance.tick?.();
+      await runtime.webhooks?.idle();
+    }
+  };
+};
+async function startFleet(config, options2) {
+  const id = randomUUID();
+  const startedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const children = /* @__PURE__ */ new Map();
+  const clocks = /* @__PURE__ */ new Map();
+  const checkpoints = /* @__PURE__ */ new Map();
+  let supervisor;
+  let stopped = false;
+  let controlling = false;
+  const close = async () => {
+    if (stopped)
+      return;
+    stopped = true;
+    await Promise.allSettled([...children.values()].map((child) => child.close()));
+    await supervisor?.close();
+    await removeOwned(options2.readyFile, id);
+    await removeOwned(options2.connectionsFile, id);
+  };
+  if (options2.readyFile)
+    await rm(options2.readyFile, { force: true });
+  if (options2.connectionsFile)
+    await rm(options2.connectionsFile, { force: true });
+  const clock = (namespace) => {
+    let value = clocks.get(namespace);
+    if (!value) {
+      value = createClock();
+      clocks.set(namespace, value);
+    }
+    return value;
+  };
+  const select = (body) => {
+    if (body.services === void 0)
+      return children;
+    if (!Array.isArray(body.services) || body.services.length === 0)
+      throw new Error("services must be a nonempty list");
+    const selected = /* @__PURE__ */ new Map();
+    for (const name of body.services) {
+      if (typeof name !== "string" || !children.has(name))
+        throw new Error("unknown service in selection");
+      selected.set(name, children.get(name));
+    }
+    return selected;
+  };
+  const diagnostics = (namespace) => Object.fromEntries([...children].map(([name, child]) => [name, child.diagnostics(namespace)]));
+  const transaction = async (namespace, selected, run) => {
+    if (controlling)
+      return json(409, { error: "another fleet operation is in progress" });
+    controlling = true;
+    const release = [];
+    const before = /* @__PURE__ */ new Map();
+    const results = {};
+    let failure;
+    try {
+      for (const [name, child] of selected) {
+        failure = name;
+        release.push(child.lock(namespace));
+      }
+      const busy = Object.fromEntries([...selected].filter(([, child]) => {
+        const state = child.diagnostics(namespace);
+        return state.activeRequests + state.blockedCommands + state.pendingWebhooks + (state.activeJobs ?? 0) > 0;
+      }).map(([name, child]) => [name, child.diagnostics(namespace)]));
+      if (Object.keys(busy).length)
+        return json(409, { error: "namespace is not quiescent", services: busy });
+      for (const [name, child] of selected) {
+        failure = name;
+        before.set(name, await child.checkpoint(namespace));
+      }
+      for (const [name, child] of selected) {
+        failure = name;
+        results[name] = { status: "ok", result: await run(name, child) };
+      }
+      return json(200, { status: "ok", namespace, services: results });
+    } catch {
+      const rollback = {};
+      for (const [name, point] of before) {
+        try {
+          await selected.get(name)?.restore(namespace, point);
+          rollback[name] = "restored";
+        } catch {
+          rollback[name] = "failed";
+        }
+      }
+      return json(500, {
+        status: "failed",
+        namespace,
+        failedService: failure,
+        services: results,
+        rollback,
+        rolledBack: before.size > 0 && Object.values(rollback).every((value) => value === "restored")
+      });
+    } finally {
+      for (const unlock of release.reverse())
+        unlock();
+      controlling = false;
+    }
+  };
+  const api = {
+    async fetch(request) {
+      const url = new URL(request.url);
+      const adminPrefix = resolveAdminPrefix(config.adminPrefix);
+      const path = url.pathname.startsWith(`${adminPrefix}/`) ? url.pathname.slice(adminPrefix.length) : "";
+      if (path === "/health" && request.method === "GET") {
+        const states = await Promise.all([...children].map(async ([name, child]) => {
+          let protocolReady = false;
+          try {
+            protocolReady = await child.ready();
+          } catch {
+          }
+          return [
+            name,
+            {
+              processReady: !stopped,
+              protocolReady,
+              status: protocolReady ? "ready" : "failed",
+              url: publicUrl(child.url)
+            }
+          ];
+        }));
+        const ready = !stopped && states.every(([, state]) => state.protocolReady);
+        return json(ready ? 200 : 503, {
+          status: ready ? "ready" : "failed",
+          id,
+          services: Object.fromEntries(states)
+        });
+      }
+      if (!path.startsWith("/fleet/"))
+        return json(404, { error: "not found" });
+      const adminKey = config.adminKey ?? process.env.MOCKINGBIRD_ADMIN_KEY;
+      if (adminKey !== void 0 && request.headers.get("x-mockingbird-admin-key") !== adminKey)
+        return json(401, { error: "admin key required" });
+      const route = /^\/fleet\/namespaces\/([^/]+)\/(reset|snapshots)(?:\/([^/]+)\/restore)?$/.exec(path);
+      const namespace = route ? decodeURIComponent(route[1]) : url.searchParams.get("namespace") ?? request.headers.get("x-mockingbird-namespace") ?? config.namespace ?? "default";
+      if (!NS.test(namespace))
+        return json(400, { error: "invalid namespace" });
+      if (request.method === "GET" && path === "/fleet/metrics")
+        return json(200, { namespace, services: diagnostics(namespace) });
+      if (request.method === "GET" && path === "/fleet/clock")
+        return json(200, {
+          namespace,
+          ...clock(namespace).state(),
+          services: Object.fromEntries([...children].map(([name, child]) => [name, child.clock(namespace).state()]))
+        });
+      if (request.method !== "POST")
+        return json(405, { error: "method not allowed" });
+      let body;
+      try {
+        const text = await request.text();
+        const value = text ? JSON.parse(text) : {};
+        if (!isObject(value))
+          throw new Error("expected object");
+        body = value;
+      } catch {
+        return json(400, { error: "expected JSON object" });
+      }
+      let selected;
+      try {
+        selected = select(body);
+      } catch (error) {
+        return json(400, { error: error instanceof Error ? error.message : "bad selection" });
+      }
+      if (path === "/fleet/wait-until-idle") {
+        const services = diagnostics(namespace);
+        const idle = Object.values(services).every((d) => pending(d) === 0);
+        return json(idle ? 200 : 409, { status: idle ? "idle" : "busy", namespace, services });
+      }
+      if (path === "/fleet/clock") {
+        const current = clock(namespace);
+        let target = current.now();
+        if (body.set !== void 0) {
+          target = typeof body.set === "number" ? body.set : typeof body.set === "string" ? Date.parse(body.set) : NaN;
+          if (!Number.isFinite(target))
+            return json(400, { error: "set must be epoch ms or ISO-8601" });
+        }
+        if (body.advance !== void 0) {
+          const delta = parseDuration(body.advance);
+          if (delta === void 0)
+            return json(400, { error: "invalid advance" });
+          target += delta;
+        }
+        const frozen = body.freeze === void 0 ? current.state().frozen : body.freeze;
+        if (typeof frozen !== "boolean")
+          return json(400, { error: "freeze must be boolean" });
+        const response2 = await transaction(namespace, selected, async (_name, child) => {
+          const childClock = child.clock(namespace);
+          childClock.freeze();
+          childClock.set(target);
+          if (!frozen)
+            childClock.unfreeze();
+          await child.settle?.(namespace);
+          return childClock.state();
+        });
+        if (response2.ok) {
+          current.freeze();
+          current.set(target);
+          if (!frozen)
+            current.unfreeze();
+        }
+        return response2;
+      }
+      if (!route)
+        return json(404, { error: "not found" });
+      if (route[2] === "reset") {
+        if (route[3])
+          return json(404, { error: "not found" });
+        const response2 = await transaction(namespace, selected, async (_name, child) => child.reset(namespace));
+        if (response2.ok && selected.size === children.size)
+          clock(namespace).reset();
+        return response2;
+      }
+      if (route[3]) {
+        const point = checkpoints.get(route[3]);
+        if (!point || point.namespace !== namespace)
+          return json(404, { error: "no snapshot in this namespace" });
+        const restored = new Map([...point.values].map(([name]) => [name, children.get(name)]));
+        const response2 = await transaction(namespace, restored, async (name, child) => child.restore(namespace, point.values.get(name)));
+        if (response2.ok) {
+          const current = clock(namespace);
+          current.freeze();
+          current.set(point.clock.now);
+          if (!point.clock.frozen)
+            current.unfreeze();
+        }
+        return response2;
+      }
+      const snapshotId = randomUUID();
+      const values = /* @__PURE__ */ new Map();
+      const response = await transaction(namespace, selected, async (name, child) => {
+        values.set(name, await child.checkpoint(namespace));
+        return { checkpoint: `${snapshotId}:${name}` };
+      });
+      if (!response.ok)
+        return response;
+      checkpoints.set(snapshotId, { namespace, values, clock: clock(namespace).state() });
+      return json(201, {
+        ...await response.json(),
+        id: snapshotId,
+        label: body.label
+      });
+    }
+  };
+  try {
+    const adminPrefix = resolveAdminPrefix(config.adminPrefix);
+    if (!isObject(config.services) || Object.keys(config.services).length === 0)
+      throw new Error("config must contain at least one service");
+    for (const [name, entry] of Object.entries(config.services)) {
+      if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name))
+        throw new Error("invalid service name");
+      try {
+        const target = await options2.load(name);
+        if (entry.protocol && entry.protocol !== ("protocol" in target ? target.protocol : "http"))
+          throw new Error("configured protocol does not match target");
+        const adminKey = entry.adminKey ?? config.adminKey ?? process.env.MOCKINGBIRD_ADMIN_KEY;
+        const child = "start" in target ? await target.start(entry) : await httpChild(target, {
+          ...entry,
+          adminPrefix: resolveAdminPrefix(entry.adminPrefix ?? adminPrefix),
+          ...adminKey !== void 0 ? { adminKey } : {}
+        }, options2);
+        children.set(name, child);
+        if (!await child.ready())
+          throw new Error("protocol readiness failed");
+      } catch {
+        throw new Error(`service ${name} failed to start; all started listeners were closed`);
+      }
+    }
+    supervisor = await listen(api, {
+      port: config.control?.port ?? 0,
+      host: config.control?.host ?? "127.0.0.1"
+    });
+    const manifest = {
+      version: 1,
+      state: "ready",
+      pid: process.pid,
+      id,
+      startedAt,
+      adminBase: `${supervisor.url}${adminPrefix}/fleet`,
+      healthUrl: `${supervisor.url}${adminPrefix}/health`,
+      services: Object.fromEntries([...children].map(([name, child]) => [
+        name,
+        {
+          protocol: child.protocol,
+          url: publicUrl(child.url),
+          healthUrl: child.healthUrl ?? `${supervisor?.url}${adminPrefix}/health`,
+          adminUrl: child.adminUrl ?? `${supervisor?.url}${adminPrefix}/fleet`,
+          namespaces: child.namespaces,
+          processReady: true,
+          protocolReady: true
+        }
+      ]))
+    };
+    if (options2.connectionsFile)
+      await atomicWrite(options2.connectionsFile, {
+        version: 1,
+        id,
+        pid: process.pid,
+        services: Object.fromEntries([...children].map(([name, child]) => [
+          name,
+          { url: child.connection ?? child.url, namespaces: child.connections }
+        ]))
+      });
+    if (options2.readyFile)
+      await atomicWrite(options2.readyFile, manifest);
+    options2.onReady?.(manifest);
+    return { manifest, children, fetch: api.fetch, close };
+  } catch (error) {
+    await close();
+    throw error;
+  }
+}
+
+// ../../adapters/node/dist/cli.js
+var optionHelp = (options2) => Object.entries(options2).map(([name, option]) => {
+  const flag = `--${name}${option.type === "string" ? ` ${option.value ?? "<value>"}` : ""}`;
+  const fallback2 = option.default !== void 0 ? ` (default: ${String(option.default)})` : "";
+  return `  ${flag.padEnd(30)} ${option.description}${fallback2}`;
+});
+var help = (spec) => [
+  `${spec.bin} \u2014 ${spec.description}`,
+  "",
+  "Usage:",
+  `  ${spec.bin} <command> [options]`,
+  "",
+  "Commands:",
+  ...Object.entries(spec.commands).map(([name, c]) => `  ${name.padEnd(30)} ${c.summary}`),
+  "",
+  `Run \`${spec.bin} <command> --help\` for a command's options.`
+].join("\n");
+var commandHelp = (spec, name, command2) => [
+  `${spec.bin} ${name} \u2014 ${command2.summary}`,
+  "",
+  "Usage:",
+  `  ${command2.usage ?? `${spec.bin} ${name} [options]`}`,
+  ...command2.options ? ["", "Options:", ...optionHelp(command2.options)] : []
+].join("\n");
+var runCli = async (spec, argv) => {
+  const pair = argv.length >= 2 ? `${argv[0]} ${argv[1]}` : void 0;
+  const words = pair !== void 0 && spec.commands[pair] ? 2 : 1;
+  const name = words === 2 ? pair : argv[0];
+  const rest = argv.slice(words);
+  if (name === void 0 || name === "--help" || name === "-h" || name === "help") {
+    console.log(help(spec));
+    return 0;
+  }
+  const command2 = spec.commands[name];
+  if (!command2) {
+    console.error(`${spec.bin}: unknown command ${JSON.stringify(name)}
+
+${help(spec)}`);
+    return 2;
+  }
+  if (rest.includes("--help") || rest.includes("-h")) {
+    console.log(commandHelp(spec, name, command2));
+    return 0;
+  }
+  let parsed;
+  try {
+    parsed = parseArgs({
+      args: rest,
+      allowPositionals: true,
+      strict: true,
+      options: Object.fromEntries(Object.entries(command2.options ?? {}).map(([key, option]) => [
+        key,
+        {
+          type: option.type,
+          ...option.default !== void 0 ? { default: option.default } : {}
+        }
+      ]))
+    });
+  } catch (error) {
+    console.error(`${spec.bin} ${name}: ${error instanceof Error ? error.message : String(error)}
+
+${commandHelp(spec, name, command2)}`);
+    return 2;
+  }
+  return command2.run(parsed.values, parsed.positionals);
+};
+var COMMON_SERVE_OPTIONS = {
+  port: { type: "string", value: "<port>", description: "Port to listen on" },
+  host: { type: "string", value: "<host>", description: "Interface to bind", default: "127.0.0.1" },
+  "admin-prefix": {
+    type: "string",
+    value: "<path>",
+    description: "Internal API prefix (default /__admin; env MOCKINGBIRD_ADMIN_PREFIX)"
+  },
+  "admin-key": {
+    type: "string",
+    value: "<key>",
+    description: "Require x-mockingbird-admin-key on /__admin/* (env MOCKINGBIRD_ADMIN_KEY)"
+  },
+  seed: { type: "string", value: "<seed>", description: "Seed for every random choice" },
+  log: {
+    type: "string",
+    value: "<pretty|json|off>",
+    description: "Request log format",
+    default: "pretty"
+  },
+  "log-requests": {
+    type: "boolean",
+    description: "One JSON line per request: namespace, operationId, status, ids touched (never bodies). Same as --log json"
+  },
+  config: {
+    type: "string",
+    value: "<file>",
+    description: "Serve every service in a mockingbird.json config instead"
+  },
+  "ready-file": {
+    type: "string",
+    description: "Atomically publish fleet endpoint JSON",
+    value: "<file>"
+  },
+  "connections-file": {
+    type: "string",
+    description: "Write private connection URLs with mode 0600",
+    value: "<file>"
+  },
+  "ready-json": {
+    type: "boolean",
+    description: "Emit one public JSON record after fleet readiness"
+  }
+};
+var formatLog = (format) => {
+  if (format === "off")
+    return void 0;
+  if (format === "json")
+    return (entry) => console.log(JSON.stringify(entry));
+  return (entry) => {
+    const op = entry.operationId ?? (entry.unmatched ? "UNMATCHED" : "-");
+    const ns = entry.namespace === "default" ? "" : ` [${entry.namespace}]`;
+    const fault = entry.faultId ? ` fault=${entry.faultId}` : "";
+    const adopted = entry.adopted ? " adopted" : "";
+    const received = entry.request ? ` received=${entry.request.bodyBytes === null ? "?" : `${entry.request.bodyBytes}B`} ct=${entry.request.contentType ?? "-"}${entry.request.transferEncoding ? ` te=${entry.request.transferEncoding}` : ""}` : "";
+    const issues = entry.issues?.length ? ` issues=${entry.issues.slice(0, 3).map((issue) => `${issue.path || "$"}: ${issue.message}`).join("; ")}${entry.issues.length > 3 ? ` (+${entry.issues.length - 3})` : ""}` : "";
+    console.log(`${entry.service} ${entry.method} ${entry.path} ${entry.status} ${op} ${entry.durationMs}ms${ns}${fault}${adopted}${received}${issues}`);
+  };
+};
+var asString = (value) => typeof value === "string" ? value : void 0;
+var loadTarget = async (name, own) => {
+  if (name === own.name)
+    return own;
+  const specifier = `@crvouga/mockingbird-service-${name}/server`;
+  try {
+    let mod;
+    try {
+      mod = await import(specifier);
+    } catch {
+      const fromProject = createRequire(resolve(process.cwd(), "package.json"));
+      mod = await import(pathToFileURL(fromProject.resolve(specifier)).href);
+    }
+    if (!mod.serveTarget)
+      throw new Error(`${specifier} exports no serveTarget`);
+    return mod.serveTarget;
+  } catch (error) {
+    const reason = error instanceof Error ? error.message : String(error);
+    throw new Error(`cannot load service "${name}": ${reason}. Install @crvouga/mockingbird-service-${name}.`);
+  }
+};
+var start = async (target, values, config) => {
+  const adminPrefix = resolveAdminPrefix(config.adminPrefix);
+  const runtime = await target.create(values, {
+    adminPrefix,
+    adminKey: config.adminKey,
+    seed: config.seed,
+    onLog: formatLog(config.log)
+  });
+  const listening = await listen(runtime, { port: config.port, host: config.host });
+  target.listening?.(listening);
+  console.log(`${target.name} mock listening on ${listening.url}`);
+  console.log(`${target.name} health: GET ${listening.url}${adminPrefix}/health`);
+  console.log(`${target.name} admin: ${listening.url}${adminPrefix} (${config.adminKey ? "x-mockingbird-admin-key required" : "open \u2014 pass --admin-key to lock"})`);
+  console.log(`${target.name} admin ui: ${listening.url}${adminPrefix}/ui`);
+  for (const line of target.banner?.(runtime) ?? [])
+    console.log(`${target.name} ${line.replaceAll("/__admin", adminPrefix)}`);
+  return listening;
+};
+var untilSignal = async (servers) => new Promise((resolve2) => {
+  const stop2 = async () => {
+    ;
+    process.removeListener("SIGINT", stop2);
+    process.removeListener("SIGTERM", stop2);
+    await Promise.allSettled(servers.map((s) => s.close()));
+    resolve2(0);
+  };
+  process.once("SIGINT", stop2);
+  process.once("SIGTERM", stop2);
+});
+var serveCommand = (target) => ({
+  summary: `Serve the ${target.name} mock or a configured fleet`,
+  options: { ...COMMON_SERVE_OPTIONS, ..."options" in target ? target.options : {} },
+  async run(values) {
+    const log2 = values["log-requests"] === true ? "json" : asString(values.log) ?? "pretty";
+    if (!["pretty", "json", "off"].includes(log2)) {
+      console.error(`--log must be pretty, json or off (got ${log2})`);
+      return 2;
+    }
+    const configPath = asString(values.config);
+    if (configPath !== void 0) {
+      try {
+        const config = JSON.parse(await readFile2(configPath, "utf8"));
+        config.adminPrefix = resolveAdminPrefix(config.adminPrefix ?? asString(values["admin-prefix"]) ?? process.env.MOCKINGBIRD_ADMIN_PREFIX);
+        const adminKey2 = config.adminKey ?? asString(values["admin-key"]) ?? process.env.MOCKINGBIRD_ADMIN_KEY;
+        if (adminKey2 !== void 0)
+          config.adminKey = adminKey2;
+        const fleet = await startFleet(config, {
+          load: (name) => loadTarget(name, target),
+          onLog: formatLog(config.log ?? log2),
+          ...asString(values["ready-file"]) ? { readyFile: asString(values["ready-file"]) } : {},
+          ...asString(values["connections-file"]) ? { connectionsFile: asString(values["connections-file"]) } : {},
+          onReady: (manifest) => {
+            if (values["ready-json"])
+              console.log(JSON.stringify(manifest));
+            else
+              for (const [name, endpoint] of Object.entries(manifest.services))
+                console.log(`${name} mock listening on ${endpoint.url}`);
+          }
+        });
+        return untilSignal([fleet]);
+      } catch (error) {
+        console.error(error instanceof Error ? error.message : String(error));
+        return 1;
+      }
+    }
+    if ("start" in target) {
+      console.error("Use --config to supervise protocol services with this command");
+      return 2;
+    }
+    const port = asString(values.port);
+    const adminKey = asString(values["admin-key"]) ?? process.env.MOCKINGBIRD_ADMIN_KEY;
+    const seed = asString(values.seed);
+    let listening;
+    try {
+      listening = await start(target, values, {
+        adminPrefix: resolveAdminPrefix(asString(values["admin-prefix"]) ?? process.env.MOCKINGBIRD_ADMIN_PREFIX),
+        port: port === void 0 ? target.defaultPort : Number.parseInt(port, 10),
+        host: asString(values.host) ?? "127.0.0.1",
+        ...adminKey !== void 0 ? { adminKey } : {},
+        ...seed !== void 0 ? { seed } : {},
+        log: log2
+      });
+    } catch (error) {
+      console.error(error instanceof Error ? error.message : String(error));
+      return 1;
+    }
+    return untilSignal([listening]);
+  }
+});
+
+// src/wire/index.ts
+import { createServer as createServer2 } from "node:net";
+
 // src/errors/error.ts
 var CATEGORY_TO_SQLSTATE = {
   syntax: "42601",
@@ -2344,11 +3190,11 @@ var JsonParser = class {
     }
   }
   parseNumber() {
-    const start = this.pos;
+    const start2 = this.pos;
     const re = /-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?/y;
     re.lastIndex = this.pos;
     const m = re.exec(this.text);
-    if (!m || m.index !== start) this.fail("bad number");
+    if (!m || m.index !== start2) this.fail("bad number");
     this.pos = re.lastIndex;
     return jsonbNum(parseNumeric(m[0]));
   }
@@ -4700,18 +5546,18 @@ function isoWeek(days) {
     return jan4 - (isoDw - 1);
   };
   let year = y;
-  let start = week1Monday(y);
-  if (days < start) {
+  let start2 = week1Monday(y);
+  if (days < start2) {
     year = y - 1;
-    start = week1Monday(year);
+    start2 = week1Monday(year);
   } else {
     const nextStart = week1Monday(y + 1);
     if (days >= nextStart) {
       year = y + 1;
-      start = nextStart;
+      start2 = nextStart;
     }
   }
-  return { week: Math.floor((days - start) / 7) + 1, year };
+  return { week: Math.floor((days - start2) / 7) + 1, year };
 }
 function dateTruncDays(field, days) {
   const { y, m } = daysToCivil(days);
@@ -5281,9 +6127,9 @@ function getArrayFunctions() {
     }
     const elemT = arrayElemType(a.t);
     const target = castTo(ctx, args2[1], elemT, {});
-    const start = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
+    const start2 = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
     const lb = lbsOf(arr)[0] ?? 1;
-    for (let i = Math.max(start - lb, 0); i < arr.items.length; i++) {
+    for (let i = Math.max(start2 - lb, 0); i < arr.items.length; i++) {
       const item = arr.items[i];
       const eq = item === null ? target.v === null : target.v !== null && datumEquals(elemT, item, target.v, ctx);
       if (eq) return tv("int4", i + lb);
@@ -5763,12 +6609,12 @@ function parseByFormat(input, fmt) {
   };
   const readNum = (maxLen) => {
     skipInputSeparators();
-    const start = i;
-    while (i < input.length && /[0-9]/.test(input[i]) && i - start < maxLen) i++;
-    if (i === start) {
+    const start2 = i;
+    while (i < input.length && /[0-9]/.test(input[i]) && i - start2 < maxLen) i++;
+    if (i === start2) {
       throw pgError("invalid_datetime", `invalid value for field in source string "${input}"`, "22007");
     }
-    return Number(input.slice(start, i));
+    return Number(input.slice(start2, i));
   };
   const readMonthName = () => {
     skipInputSeparators();
@@ -7603,15 +8449,15 @@ var decoderUtf8 = new TextDecoder("utf-8", { fatal: false });
 function chars(s) {
   return [...s];
 }
-function substrImpl(s, start, len) {
+function substrImpl(s, start2, len) {
   const cs = chars(s);
   if (len === void 0) {
-    const from2 = Math.max(start, 1);
+    const from2 = Math.max(start2, 1);
     return cs.slice(from2 - 1).join("");
   }
   if (len < 0) throw pgError("substring_error", "negative substring length not allowed", "22011");
-  const end = start + len;
-  const from = Math.max(start, 1);
+  const end = start2 + len;
+  const from = Math.max(start2, 1);
   const to = Math.max(end, 1);
   if (to <= from) return "";
   return cs.slice(from - 1, to - 1).join("");
@@ -7675,14 +8521,14 @@ function getStringFunctions() {
       const a = args2[0];
       if (a.t === "bytea") {
         const bytes = a.v;
-        const start2 = argInt(ctx, args2[1]);
+        const start3 = argInt(ctx, args2[1]);
         const len2 = args2.length > 2 ? argInt(ctx, args2[2]) : void 0;
-        return tv("bytea", byteaSubstr(bytes, start2, len2));
+        return tv("bytea", byteaSubstr(bytes, start3, len2));
       }
       const s = argText(ctx, a);
-      const start = argInt(ctx, args2[1]);
+      const start2 = argInt(ctx, args2[1]);
       const len = args2.length > 2 ? argInt(ctx, args2[2]) : void 0;
-      return tv("text", substrImpl(s, start, len));
+      return tv("text", substrImpl(s, start2, len));
     })
   );
   m.set(
@@ -7978,11 +8824,11 @@ function getStringFunctions() {
     strict("int4", (ctx, args2) => {
       const s = argText(ctx, args2[0]);
       const pattern = argText(ctx, args2[1]);
-      const start = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
+      const start2 = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
       const flags = args2.length > 3 ? argText(ctx, args2[3]) : "";
-      if (start < 1) throw pgError("invalid_parameter_value", `invalid value for parameter "start": ${start}`);
+      if (start2 < 1) throw pgError("invalid_parameter_value", `invalid value for parameter "start": ${start2}`);
       const js = new RegExp(pgRegexToJs(pattern), `${regexFlags(flags, true)}g`);
-      const sub = chars(s).slice(start - 1).join("");
+      const sub = chars(s).slice(start2 - 1).join("");
       let count = 0;
       for (const _ of sub.matchAll(js)) count++;
       return tv("int4", count);
@@ -8003,11 +8849,11 @@ function getStringFunctions() {
     strict("text", (ctx, args2) => {
       const s = argText(ctx, args2[0]);
       const pattern = argText(ctx, args2[1]);
-      const start = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
+      const start2 = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
       const nth = args2.length > 3 ? argInt(ctx, args2[3]) : 1;
       const flags = args2.length > 4 ? argText(ctx, args2[4]) : "";
       const js = new RegExp(pgRegexToJs(pattern), `${regexFlags(flags, true)}g`);
-      const sub = chars(s).slice(start - 1).join("");
+      const sub = chars(s).slice(start2 - 1).join("");
       let i = 0;
       for (const match of sub.matchAll(js)) {
         i++;
@@ -8021,21 +8867,21 @@ function getStringFunctions() {
     strict("int4", (ctx, args2) => {
       const s = argText(ctx, args2[0]);
       const pattern = argText(ctx, args2[1]);
-      const start = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
+      const start2 = args2.length > 2 ? argInt(ctx, args2[2]) : 1;
       const nth = args2.length > 3 ? argInt(ctx, args2[3]) : 1;
       const endoption = args2.length > 4 ? argInt(ctx, args2[4]) : 0;
       const flags = args2.length > 5 ? argText(ctx, args2[5]) : "";
-      if (start < 1) throw pgError("invalid_parameter_value", `invalid value for parameter "start": ${start}`);
+      if (start2 < 1) throw pgError("invalid_parameter_value", `invalid value for parameter "start": ${start2}`);
       if (endoption !== 0 && endoption !== 1) {
         throw pgError("invalid_parameter_value", `invalid value for parameter "endoption": ${endoption}`);
       }
       const js = new RegExp(pgRegexToJs(pattern), `${regexFlags(flags, true)}g`);
-      const sub = chars(s).slice(start - 1).join("");
+      const sub = chars(s).slice(start2 - 1).join("");
       let i = 0;
       for (const match of sub.matchAll(js)) {
         i++;
         if (i === nth) {
-          const base = start - 1 + chars(sub.slice(0, match.index)).length;
+          const base = start2 - 1 + chars(sub.slice(0, match.index)).length;
           return tv("int4", endoption === 0 ? base + 1 : base + chars(match[0]).length + 1);
         }
       }
@@ -8149,10 +8995,10 @@ function getStringFunctions() {
   );
   return m;
 }
-function byteaSubstr(bytes, start, len) {
+function byteaSubstr(bytes, start2, len) {
   if (len !== void 0 && len < 0) throw pgError("substring_error", "negative substring length not allowed", "22011");
-  const from = Math.max(start, 1) - 1;
-  const to = len === void 0 ? bytes.length : Math.max(start + len - 1, 0);
+  const from = Math.max(start2, 1) - 1;
+  const to = len === void 0 ? bytes.length : Math.max(start2 + len - 1, 0);
   return bytes.slice(from, to);
 }
 function pad(s, len, fill, left) {
@@ -10714,7 +11560,7 @@ function evalOverlaps(ctx, scope, args2) {
   };
   const [s1r, e1r] = pair(args2[0]);
   const [s2r, e2r] = pair(args2[1]);
-  const resolveEnd = (start, end) => end.t === "interval" ? evalBinary(ctx, "+", start, end) : end;
+  const resolveEnd = (start2, end) => end.t === "interval" ? evalBinary(ctx, "+", start2, end) : end;
   const e1 = resolveEnd(s1r, e1r);
   const e2 = resolveEnd(s2r, e2r);
   const target = [s1r, e1, s2r, e2].map((x) => x.t).find((t) => t !== "unknown") ?? "timestamp";
@@ -11973,7 +12819,7 @@ SRFS.set("generate_series", (ctx, args2, alias) => {
   }
   if (a.t === "timestamp" || a.t === "timestamptz" || b.t === "timestamp" || b.t === "timestamptz" || a.t === "date") {
     const t2 = a.t === "timestamptz" || b.t === "timestamptz" ? "timestamptz" : "timestamp";
-    const start2 = castTo(ctx, a, t2, { explicit: true }).v;
+    const start3 = castTo(ctx, a, t2, { explicit: true }).v;
     const stop3 = castTo(ctx, b, t2, { explicit: true }).v;
     const stepArg = args2[2];
     if (stepArg === void 0 || !isInterval(stepArg.v)) {
@@ -11988,7 +12834,7 @@ SRFS.set("generate_series", (ctx, args2, alias) => {
     if (step2.months !== 0) {
       let i = 0;
       for (; ; ) {
-        const { days, tod } = splitTs(start2);
+        const { days, tod } = splitTs(start3);
         const c = daysToCivil(days);
         const totalMonths = c.y * 12 + (c.m - 1) + step2.months * i;
         const y = Math.floor(totalMonths / 12);
@@ -12005,19 +12851,19 @@ SRFS.set("generate_series", (ctx, args2, alias) => {
     const stepMicros = intervalTotalMicros(step2);
     if (stepMicros === 0n) throw pgError("invalid_parameter_value", "step size cannot equal zero", "22023");
     if (stepMicros > 0n) {
-      for (let cur = start2; cur <= stop3; cur += stepMicros) rows2.push([cur]);
+      for (let cur = start3; cur <= stop3; cur += stepMicros) rows2.push([cur]);
     } else {
-      for (let cur = start2; cur >= stop3; cur += stepMicros) rows2.push([cur]);
+      for (let cur = start3; cur >= stop3; cur += stepMicros) rows2.push([cur]);
     }
     return { columns: [{ name: alias, type: t2 }], rows: rows2 };
   }
   if (a.t === "numeric" || b.t === "numeric" || args2[2]?.t === "numeric") {
-    const start2 = castTo(ctx, a, "numeric", { explicit: true }).v;
+    const start3 = castTo(ctx, a, "numeric", { explicit: true }).v;
     const stop3 = castTo(ctx, b, "numeric", { explicit: true }).v;
     const step2 = args2[2] ? castTo(ctx, args2[2], "numeric", { explicit: true }).v : castTo(ctx, tv("int4", 1), "numeric", { explicit: true }).v;
     if (numericSign(step2) === 0) throw pgError("invalid_parameter_value", "step size cannot equal zero", "22023");
     const rows2 = [];
-    let cur = start2;
+    let cur = start3;
     const ascending = numericSign(step2) > 0;
     while (ascending ? numericCmp(cur, stop3) <= 0 : numericCmp(cur, stop3) >= 0) {
       rows2.push([cur]);
@@ -12029,19 +12875,19 @@ SRFS.set("generate_series", (ctx, args2, alias) => {
   }
   const useBig = a.t === "int8" || b.t === "int8" || args2[2]?.t === "int8";
   const t = useBig ? "int8" : "int4";
-  const start = castTo(ctx, a, "int8", {}).v;
+  const start2 = castTo(ctx, a, "int8", {}).v;
   const stop2 = castTo(ctx, b, "int8", {}).v;
   const step = args2[2] ? castTo(ctx, args2[2], "int8", {}).v : 1n;
   if (step === 0n) throw pgError("invalid_parameter_value", "step size cannot equal zero", "22023");
   const rows = [];
   if (step > 0n) {
-    for (let cur = start; cur <= stop2; cur += step) {
+    for (let cur = start2; cur <= stop2; cur += step) {
       rows.push([useBig ? cur : Number(cur)]);
       if (rows.length > 1e7)
         throw pgError("program_limit_exceeded", "generate_series result set too large", "54000");
     }
   } else {
-    for (let cur = start; cur >= stop2; cur += step) {
+    for (let cur = start2; cur >= stop2; cur += step) {
       rows.push([useBig ? cur : Number(cur)]);
       if (rows.length > 1e7)
         throw pgError("program_limit_exceeded", "generate_series result set too large", "54000");
@@ -12471,10 +13317,10 @@ function tokenize(sql) {
       const m = /^\$([A-Za-z_\u0080-\uffff][A-Za-z0-9_\u0080-\uffff]*)?\$/.exec(sql.slice(i));
       if (m) {
         const open = m[0];
-        const start = i + open.length;
-        const end = sql.indexOf(open, start);
+        const start2 = i + open.length;
+        const end = sql.indexOf(open, start2);
         if (end === -1) syntaxError("unterminated dollar-quoted string");
-        push("string", sql.slice(start, end), i);
+        push("string", sql.slice(start2, end), i);
         i = end + open.length;
         continue;
       }
@@ -12541,14 +13387,14 @@ function tokenize(sql) {
       continue;
     }
     if (/\d/.test(c) || c === "." && /\d/.test(sql[i + 1] ?? "")) {
-      const start = i;
+      const start2 = i;
       const radix = /^0[xX][0-9a-fA-F_]+|^0[oO][0-7_]+|^0[bB][01_]+/.exec(sql.slice(i));
       if (radix) {
         const raw2 = radix[0];
         i += raw2.length;
         const clean = raw2.replaceAll("_", "");
         const v = BigInt(clean);
-        push("number", v.toString(), start);
+        push("number", v.toString(), start2);
         continue;
       }
       let j = i;
@@ -12570,7 +13416,7 @@ function tokenize(sql) {
       if (j < n && IDENT_START.test(sql[j])) {
         syntaxError(`trailing junk after numeric literal at or near "${sql.slice(i, j + 1)}"`);
       }
-      push("number", raw, start);
+      push("number", raw, start2);
       i = j;
       continue;
     }
@@ -12628,9 +13474,9 @@ function tokenize(sql) {
   push("eof", "", i);
   return tokens;
 }
-function scanStandardString(sql, start) {
+function scanStandardString(sql, start2) {
   let out = "";
-  let i = start + 1;
+  let i = start2 + 1;
   const n = sql.length;
   for (; ; ) {
     if (i >= n) syntaxError("unterminated quoted string");
@@ -12658,9 +13504,9 @@ function scanStandardString(sql, start) {
     i++;
   }
 }
-function scanEscapeString(sql, start) {
+function scanEscapeString(sql, start2) {
   let out = "";
-  let i = start + 1;
+  let i = start2 + 1;
   const n = sql.length;
   for (; ; ) {
     if (i >= n) syntaxError("unterminated quoted string");
@@ -16400,14 +17246,14 @@ var Parser = class {
     let frame = null;
     if (this.atKw("range") || this.atKw("rows") || this.atKw("groups")) {
       const mode = this.next().value;
-      let start;
+      let start2;
       let end = null;
       if (this.eatKw("between")) {
-        start = this.parseFrameBound();
+        start2 = this.parseFrameBound();
         this.expectKw("and");
         end = this.parseFrameBound();
       } else {
-        start = this.parseFrameBound();
+        start2 = this.parseFrameBound();
       }
       let exclusion = null;
       if (this.eatKw("exclude")) {
@@ -16424,7 +17270,7 @@ var Parser = class {
           exclusion = "no_others";
         }
       }
-      frame = { mode, start, end, exclusion };
+      frame = { mode, start: start2, end, exclusion };
     }
     return { name, partitionBy, orderBy, frame };
   }
@@ -16670,7 +17516,7 @@ var PlParser = class {
     return { kind: "assign", target, expr: this.parseExprUntilSemi() };
   }
   parseSqlTextUntilSemi() {
-    const start = this.peek().pos;
+    const start2 = this.peek().pos;
     let depth = 0;
     for (; ; ) {
       const t = this.peek();
@@ -16678,7 +17524,7 @@ var PlParser = class {
       if (t.type === "punct" && t.value === "(") depth++;
       if (t.type === "punct" && t.value === ")") depth--;
       if (t.type === "punct" && t.value === ";" && depth === 0) {
-        const text = this.src.slice(start, t.pos).trim();
+        const text = this.src.slice(start2, t.pos).trim();
         this.pos++;
         return text;
       }
@@ -16686,7 +17532,7 @@ var PlParser = class {
     }
   }
   parseExprUntilSemi() {
-    const start = this.peek().pos;
+    const start2 = this.peek().pos;
     let depth = 0;
     for (; ; ) {
       const t = this.peek();
@@ -16694,7 +17540,7 @@ var PlParser = class {
       if (t.type === "punct" && t.value === "(") depth++;
       if (t.type === "punct" && t.value === ")") depth--;
       if (t.type === "punct" && t.value === ";" && depth === 0) {
-        const text = this.src.slice(start, t.pos);
+        const text = this.src.slice(start2, t.pos);
         this.pos++;
         return parseSqlExpr(text);
       }
@@ -16702,7 +17548,7 @@ var PlParser = class {
     }
   }
   parseExprUntilKw(kw) {
-    const start = this.peek().pos;
+    const start2 = this.peek().pos;
     let depth = 0;
     let caseDepth = 0;
     for (; ; ) {
@@ -16713,7 +17559,7 @@ var PlParser = class {
       if (t.type === "ident" && t.value === "case" && depth === 0) caseDepth++;
       if (t.type === "ident" && t.value === "end" && depth === 0 && caseDepth > 0) caseDepth--;
       if (t.type === "ident" && t.value === kw && depth === 0 && caseDepth === 0) {
-        const text = this.src.slice(start, t.pos);
+        const text = this.src.slice(start2, t.pos);
         this.pos++;
         return parseSqlExpr(text);
       }
@@ -16721,7 +17567,7 @@ var PlParser = class {
     }
   }
   parseQueryUntilKw(kw) {
-    const start = this.peek().pos;
+    const start2 = this.peek().pos;
     let depth = 0;
     for (; ; ) {
       const t = this.peek();
@@ -16729,7 +17575,7 @@ var PlParser = class {
       if (t.type === "punct" && t.value === "(") depth++;
       if (t.type === "punct" && t.value === ")") depth--;
       if (t.type === "ident" && t.value === kw && depth === 0) {
-        const text = this.src.slice(start, t.pos).trim();
+        const text = this.src.slice(start2, t.pos).trim();
         this.pos++;
         const stmts = parse(text);
         const q = stmts[0];
@@ -18272,7 +19118,7 @@ function buildFrom(env, items, where = null) {
         }
       }
       if (cols === null) {
-        const probe = materializeItem(
+        const probe2 = materializeItem(
           env,
           item,
           new RowScope(
@@ -18282,8 +19128,8 @@ function buildFrom(env, items, where = null) {
             accVars
           )
         );
-        cols = [...accRel.columns, ...probe.rel.columns];
-        vars = /* @__PURE__ */ new Set([...accVars, ...probe.rangeVars]);
+        cols = [...accRel.columns, ...probe2.rel.columns];
+        vars = /* @__PURE__ */ new Set([...accVars, ...probe2.rangeVars]);
       }
       acc = { rel: { columns: cols, rows }, rangeVars: vars };
     } else {
@@ -19043,13 +19889,13 @@ function expandTargets(core, columns) {
   return items;
 }
 function checkPredicateType(env, columns, rangeVars, e, kind, extras) {
-  const probe = new RowScope(
+  const probe2 = new RowScope(
     columns,
     columns.map(() => null),
     env.outer,
     rangeVars
   );
-  checkBoolExprType(env.ctx, makeEvalScope(env, probe, extras), e, kind);
+  checkBoolExprType(env.ctx, makeEvalScope(env, probe2, extras), e, kind);
 }
 function executeCore(env0, core, orderBy, opts) {
   const env = env0;
@@ -19139,8 +19985,8 @@ function executeCore(env0, core, orderBy, opts) {
         const groupValues = groupDefs.map((d, di) => {
           if (!activeSet[di]) {
             if (rows.length > 0) {
-              const probe = evalScalar(env, repScope, d.expr);
-              return tv(probe.t, null);
+              const probe2 = evalScalar(env, repScope, d.expr);
+              return tv(probe2.t, null);
             }
             return tv(UNKNOWN, null);
           }
@@ -20293,8 +21139,8 @@ function executeTransaction(env, stmt) {
 var defaultSettings = null;
 function getDefaultSettings() {
   if (!defaultSettings) {
-    const probe = new DatabaseState(new Prng(1), () => /* @__PURE__ */ new Date(0));
-    defaultSettings = new Map(probe.settings);
+    const probe2 = new DatabaseState(new Prng(1), () => /* @__PURE__ */ new Date(0));
+    defaultSettings = new Map(probe2.settings);
   }
   return defaultSettings;
 }
@@ -20561,7 +21407,7 @@ function parseCsvLine(line, delim, quote) {
 }
 function splitCsvRecords(data, quote) {
   const records = [];
-  let start = 0;
+  let start2 = 0;
   let quoted = false;
   for (let i = 0; i < data.length; i++) {
     const char = data[i];
@@ -20571,13 +21417,13 @@ function splitCsvRecords(data, quote) {
       continue;
     }
     if (char === "\n" && !quoted) {
-      const end = i > start && data[i - 1] === "\r" ? i - 1 : i;
-      records.push(data.slice(start, end));
-      start = i + 1;
+      const end = i > start2 && data[i - 1] === "\r" ? i - 1 : i;
+      records.push(data.slice(start2, end));
+      start2 = i + 1;
     }
   }
   if (quoted) throw pgError("invalid_text_representation", "unterminated CSV quoted field", "22P04");
-  if (start < data.length) records.push(data.slice(start));
+  if (start2 < data.length) records.push(data.slice(start2));
   return records;
 }
 function executeCopyFromData(env, stmt, data) {
@@ -23735,6 +24581,16 @@ var Cluster = class {
   databaseNames() {
     return [...this.databases.keys()].sort();
   }
+  snapshotAll() {
+    return new Map([...this.databases].map(([name, db]) => [name, db.snapshot()]));
+  }
+  restoreAll(points) {
+    if (this.sessions.size > 0) throw new Error("cannot restore a catalog with active sessions");
+    if (!points.has(this.defaultDatabaseName)) throw new Error("snapshot lacks default database");
+    for (const db of this.databases.values()) db.close();
+    this.databases.clear();
+    for (const [name, point] of points) this.installDatabase(name, point.open());
+  }
   getDatabase(name) {
     return this.databases.get(name);
   }
@@ -23747,7 +24603,7 @@ var Cluster = class {
     if (this.databases.has(name)) {
       throw new PostgresError("duplicate_object", `database "${name}" already exists`, "42P04");
     }
-    const db = template === void 0 ? new Database() : this.requireTemplate(template).snapshot().open();
+    const db = template === void 0 ? new Database({ now: this.db.now, seed: this.db.seed }) : this.requireTemplate(template).snapshot().open();
     this.installDatabase(name, db);
   }
   dropDatabase(name, requester) {
@@ -23811,8 +24667,8 @@ var Cluster = class {
     if (holder.waitingForLock !== null && this.locks.get(holder.waitingForLock)?.holder === session) {
       return Promise.reject(deadlock());
     }
-    return new Promise((resolve, reject) => {
-      const waiter = { session, resolve, reject };
+    return new Promise((resolve2, reject) => {
+      const waiter = { session, resolve: resolve2, reject };
       session.waitingForTurn = waiter;
       this.turnQueue.push(waiter);
     });
@@ -23843,8 +24699,8 @@ var Cluster = class {
     if (holder.waitingForLock !== null && this.locks.get(holder.waitingForLock)?.holder === session) {
       return Promise.reject(deadlock());
     }
-    return new Promise((resolve, reject) => {
-      const waiter = { session, resolve, reject };
+    return new Promise((resolve2, reject) => {
+      const waiter = { session, resolve: resolve2, reject };
       session.waitingForLock = key;
       const queue = this.lockQueues.get(key) ?? [];
       queue.push(waiter);
@@ -24103,9 +24959,9 @@ var backend = {
   no: () => new Uint8Array([78])
 };
 var ByteReader = class {
-  constructor(bytes, start = 0) {
+  constructor(bytes, start2 = 0) {
     this.bytes = bytes;
-    this.pos = start;
+    this.pos = start2;
     this.view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
   }
   bytes;
@@ -24265,11 +25121,11 @@ var ScramServer = class {
 // src/wire/split.ts
 var splitStatements = (script) => {
   const out = [];
-  let start = 0;
+  let start2 = 0;
   let i = 0;
   const n = script.length;
   const push = (end) => {
-    const text = script.slice(start, end).trim();
+    const text = script.slice(start2, end).trim();
     if (text.length > 0) out.push(text);
   };
   while (i < n) {
@@ -24325,7 +25181,7 @@ var splitStatements = (script) => {
     }
     if (c === ";") {
       push(i);
-      start = i + 1;
+      start2 = i + 1;
     }
     i++;
   }
@@ -24786,8 +25642,8 @@ var Connection = class {
         "25P02"
       );
     }
-    const listen = LISTEN.exec(text);
-    if (listen) return this.listen(listen[2]);
+    const listen2 = LISTEN.exec(text);
+    if (listen2) return this.listen(listen2[2]);
     const unlisten = UNLISTEN.exec(text);
     if (unlisten) return this.unlisten(unlisten[1].replaceAll('"', ""));
     const notify = NOTIFY.exec(text);
@@ -24804,7 +25660,7 @@ var Connection = class {
       if (faults.delayStatementMs !== void 0) {
         const ms = faults.delayStatementMs;
         faults.delayStatementMs = void 0;
-        await new Promise((resolve) => setTimeout(resolve, ms));
+        await new Promise((resolve2) => setTimeout(resolve2, ms));
       }
       if (faults.dropConnection && this.inTransaction) {
         faults.dropConnection = void 0;
@@ -24828,7 +25684,7 @@ var Connection = class {
     }
   }
   waitForLock(key) {
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       this.lockWaiter = (error) => {
         this.lockWaiter = null;
         this.waitingForLock = null;
@@ -24837,7 +25693,7 @@ var Connection = class {
       this.cluster.waitLock(this, key).then(
         () => {
           this.lockWaiter = null;
-          resolve();
+          resolve2();
         },
         (error) => {
           this.lockWaiter = null;
@@ -25029,10 +25885,10 @@ var Connection = class {
       this.cluster.dropDatabase(name, this);
       return command("DROP DATABASE");
     }
-    const rename = RENAME_DATABASE.exec(text);
-    if (rename) {
-      const from = identifier(rename[1], rename[2]);
-      const to = identifier(rename[3], rename[4]);
+    const rename2 = RENAME_DATABASE.exec(text);
+    if (rename2) {
+      const from = identifier(rename2[1], rename2[2]);
+      const to = identifier(rename2[3], rename2[4]);
       this.cluster.renameDatabase(from, to, this);
       return command("ALTER DATABASE");
     }
@@ -25455,7 +26311,7 @@ var normalize = (input) => {
   };
 };
 var isSnapshot = (value) => typeof value === "object" && value !== null && "open" in value && typeof value.open === "function";
-var serve = (input = {}) => {
+var serve2 = (input = {}) => {
   const options2 = normalize(input);
   const database = isSnapshot(options2.database) ? options2.database.open() : options2.database ?? new Database();
   const initialName = options2.databaseName ?? "postgres";
@@ -25464,20 +26320,20 @@ var serve = (input = {}) => {
   const connections = /* @__PURE__ */ new Set();
   const host = options2.host ?? "127.0.0.1";
   const user = options2.user || "postgres";
-  const server2 = createServer((socket) => {
+  const server2 = createServer2((socket) => {
     socket.setNoDelay(true);
     const connection = new Connection(socket, cluster, {
       ...options2.password !== void 0 ? { password: options2.password } : {},
       serverVersion: options2.serverVersion ?? "18.3",
       parameters: options2.parameters ?? {},
       faults,
-      ...options2.databaseName !== void 0 ? { database: options2.databaseName } : {},
+      ...options2.databaseName !== void 0 && !options2.allowDatabaseSelection ? { database: options2.databaseName } : {},
       ...options2.onLog ? { onLog: options2.onLog } : {}
     });
     connections.add(connection);
     socket.on("close", () => connections.delete(connection));
   });
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     server2.once("error", reject);
     server2.listen(options2.port ?? 0, host, () => {
       server2.removeListener("error", reject);
@@ -25485,11 +26341,13 @@ var serve = (input = {}) => {
       const port = typeof address === "object" && address !== null ? address.port : 0;
       const name = initialName;
       const auth = options2.password ? `${encodeURIComponent(user)}:${encodeURIComponent(options2.password)}@` : `${encodeURIComponent(user)}@`;
-      resolve({
+      resolve2({
         port,
         host,
         connectionString: `postgres://${auth}${host}:${port}/${encodeURIComponent(name)}`,
-        database,
+        get database() {
+          return cluster.db;
+        },
         databaseNames() {
           return cluster.databaseNames();
         },
@@ -25503,6 +26361,14 @@ var serve = (input = {}) => {
         fault(next) {
           Object.assign(faults, next);
         },
+        clearFaults() {
+          for (const key of Object.keys(faults)) delete faults[key];
+        },
+        faultState() {
+          return structuredClone(faults);
+        },
+        snapshotAll: () => cluster.snapshotAll(),
+        restoreAll: (points) => cluster.restoreAll(points),
         snapshot(databaseName = initialName) {
           return cluster.requireDatabase(databaseName).snapshot();
         },
@@ -25518,9 +26384,251 @@ var serve = (input = {}) => {
   });
 };
 
+// src/wire/probe.ts
+import { createHash as createHash2, createHmac as createHmac2, pbkdf2Sync as pbkdf2Sync2, randomBytes as randomBytes2 } from "node:crypto";
+import { createConnection } from "node:net";
+function probe(connectionString) {
+  const url = new URL(connectionString);
+  return new Promise((resolve2) => {
+    const socket = createConnection({ host: url.hostname, port: Number(url.port) });
+    let buffer = Buffer.alloc(0);
+    let result = false;
+    let querying = false;
+    let row = false;
+    const nonce = randomBytes2(18).toString("base64");
+    const first = `n=,r=${nonce}`;
+    const finish = (ok) => {
+      result = ok;
+      socket.destroy();
+    };
+    const timeout = setTimeout(() => finish(false), 2e3);
+    const send = (type, body) => {
+      const header = Buffer.alloc(5);
+      header.write(type);
+      header.writeInt32BE(body.length + 4, 1);
+      socket.write(Buffer.concat([header, body]));
+    };
+    socket.once("close", () => {
+      clearTimeout(timeout);
+      resolve2(result);
+    });
+    socket.on("error", () => finish(false));
+    socket.once("connect", () => {
+      const parameters = Buffer.from(
+        `user\0${decodeURIComponent(url.username)}\0database\0${decodeURIComponent(url.pathname.slice(1))}\0\0`
+      );
+      const header = Buffer.alloc(8);
+      header.writeInt32BE(parameters.length + 8);
+      header.writeInt32BE(196608, 4);
+      socket.write(Buffer.concat([header, parameters]));
+    });
+    socket.on("data", (data) => {
+      buffer = Buffer.concat([buffer, data]);
+      while (buffer.length >= 5) {
+        const length = buffer.readInt32BE(1);
+        if (length < 4 || length > 1e6) {
+          finish(false);
+          return;
+        }
+        if (buffer.length < length + 1) return;
+        const type = String.fromCharCode(buffer[0]);
+        const body = buffer.subarray(5, length + 1);
+        buffer = buffer.subarray(length + 1);
+        if (type === "E") {
+          finish(false);
+          return;
+        }
+        if (type === "R") {
+          const auth = body.readInt32BE();
+          if (auth === 10) {
+            const initial = Buffer.from(`n,,${first}`);
+            const size = Buffer.alloc(4);
+            size.writeInt32BE(initial.length);
+            send("p", Buffer.concat([Buffer.from("SCRAM-SHA-256\0"), size, initial]));
+          } else if (auth === 11) {
+            const serverFirst = body.subarray(4).toString();
+            const fields = Object.fromEntries(serverFirst.split(",").map((field) => [field[0], field.slice(2)]));
+            if (!fields.r?.startsWith(nonce) || !fields.s || fields.i !== "4096") {
+              finish(false);
+              return;
+            }
+            const salted = pbkdf2Sync2(
+              decodeURIComponent(url.password),
+              Buffer.from(fields.s, "base64"),
+              4096,
+              32,
+              "sha256"
+            );
+            const key = createHmac2("sha256", salted).update("Client Key").digest();
+            const stored = createHash2("sha256").update(key).digest();
+            const final = `c=biws,r=${fields.r}`;
+            const signature = createHmac2("sha256", stored).update(`${first},${serverFirst},${final}`).digest();
+            const proof = Buffer.from(key.map((value, index) => value ^ signature[index]));
+            send("p", Buffer.from(`${final},p=${proof.toString("base64")}`));
+          } else if (auth !== 0 && auth !== 12) {
+            finish(false);
+            return;
+          }
+        }
+        if (type === "D") row = body.readInt16BE() === 1 && body.subarray(6).toString() === "1";
+        if (type === "Z") {
+          if (querying) {
+            finish(row);
+            return;
+          }
+          querying = true;
+          send("Q", Buffer.from("SELECT 1\0"));
+        }
+      }
+    });
+  });
+}
+
+// src/wire/fleet.ts
+async function startProtocol(entry) {
+  const namespaces = /* @__PURE__ */ new Map();
+  const selectors = { default: entry.database ?? "postgres", ...entry.namespaces };
+  try {
+    for (const [name, databaseName] of Object.entries(selectors)) {
+      if (!/^[A-Za-z0-9_.-]{1,64}$/.test(name) || typeof databaseName !== "string")
+        throw new Error("invalid Postgres namespace/database name");
+      const clock = createClock();
+      const database = new Database({
+        now: () => new Date(clock.now()),
+        ...entry.seed !== void 0 ? { seed: Number(entry.seed) } : {}
+      });
+      const server2 = await serve2({
+        database,
+        databaseName,
+        allowDatabaseSelection: true,
+        host: entry.host ?? "127.0.0.1",
+        port: name === "default" ? entry.port ?? 0 : 0,
+        ...entry.password !== void 0 ? { password: entry.password } : {},
+        ...entry.user !== void 0 ? { user: entry.user } : {}
+      });
+      namespaces.set(name, { server: server2, clock });
+    }
+  } catch (error) {
+    await Promise.allSettled([...namespaces.values()].map(({ server: server2 }) => server2.close()));
+    throw error;
+  }
+  const get = (name) => {
+    const found = namespaces.get(name);
+    if (!found) throw new Error(`Postgres namespace ${name} is not configured`);
+    return found;
+  };
+  const publicUrl2 = (name) => {
+    const url = new URL(get(name).server.connectionString);
+    url.password = "";
+    return url.href;
+  };
+  const locked = /* @__PURE__ */ new Set();
+  const snapshots = /* @__PURE__ */ new WeakMap();
+  const origins = new Map([...namespaces].map(([name, { server: server2 }]) => [name, server2.snapshotAll()]));
+  return {
+    protocol: "postgres",
+    url: publicUrl2("default"),
+    connection: get("default").server.connectionString,
+    connections: Object.fromEntries([...namespaces].map(([name, { server: server2 }]) => [name, server2.connectionString])),
+    namespaces: {
+      mechanism: "endpoint",
+      endpoints: Object.fromEntries([...namespaces.keys()].map((name) => [name, publicUrl2(name)]))
+    },
+    async ready() {
+      const results = await Promise.all(
+        [...namespaces.values()].map(
+          ({ server: server2 }) => server2.server.listening ? probe(server2.connectionString) : false
+        )
+      );
+      return results.every(Boolean);
+    },
+    async close() {
+      await Promise.all(
+        [...namespaces.values()].map(async ({ server: server2 }) => {
+          await server2.close();
+          for (const name of server2.databaseNames()) server2.getDatabase(name).close();
+        })
+      );
+    },
+    lock(namespace) {
+      const { server: server2 } = get(namespace);
+      if (locked.has(namespace)) throw new Error("Postgres namespace already locked");
+      locked.add(namespace);
+      const reject = (socket) => socket.destroy();
+      server2.server.prependListener("connection", reject);
+      return () => {
+        locked.delete(namespace);
+        server2.server.off("connection", reject);
+      };
+    },
+    diagnostics(namespace) {
+      const { server: server2 } = get(namespace);
+      return {
+        activeRequests: server2.connections,
+        activeConnections: server2.connections,
+        blockedCommands: 0,
+        pendingJobs: 0,
+        pendingWebhooks: 0,
+        unmatchedRequests: 0
+      };
+    },
+    async checkpoint(namespace) {
+      const { server: server2, clock } = get(namespace);
+      const handle = {};
+      snapshots.set(handle, {
+        namespace,
+        databases: server2.snapshotAll(),
+        clock: clock.state(),
+        faults: server2.faultState()
+      });
+      return handle;
+    },
+    async restore(namespace, handle) {
+      const point = typeof handle === "object" && handle !== null ? snapshots.get(handle) : void 0;
+      if (!point || point.namespace !== namespace) throw new Error("invalid Postgres checkpoint");
+      const { server: server2, clock } = get(namespace);
+      server2.restoreAll(point.databases);
+      for (const name of server2.databaseNames()) server2.getDatabase(name).now = () => new Date(clock.now());
+      server2.clearFaults();
+      server2.fault(point.faults);
+      clock.freeze();
+      clock.set(point.clock.now);
+      if (!point.clock.frozen) clock.unfreeze();
+    },
+    async reset(namespace) {
+      const { server: server2, clock } = get(namespace);
+      server2.restoreAll(origins.get(namespace));
+      for (const name of server2.databaseNames()) server2.getDatabase(name).now = () => new Date(clock.now());
+      server2.clearFaults();
+      clock.reset();
+    },
+    clock: (namespace) => get(namespace).clock
+  };
+}
+
+// src/server.ts
+var serveTarget = {
+  name: "postgres",
+  protocol: "postgres",
+  defaultPort: 0,
+  start: startProtocol
+};
+
 // src/wire/cli.ts
 var usage = `mockingbird-postgres serve [postgres://URI] [--port <n>] [--host <h>] [--password <p>] [--server-version <v>] [--log]`;
 var args = process.argv.slice(2);
+if (args[0] === "serve" && args.includes("--config")) {
+  process.exit(
+    await runCli(
+      {
+        bin: "mockingbird-postgres",
+        description: "Postgres and fleet server",
+        commands: { serve: serveCommand(serveTarget) }
+      },
+      args
+    )
+  );
+}
 if (args[0] !== "serve") {
   console.error(usage);
   process.exit(args[0] === "--help" || args[0] === "-h" ? 0 : 2);
@@ -25569,7 +26677,7 @@ if (log) {
     `[pid ${entry.pid}] ${entry.status} ${entry.durationMs.toFixed(1)}ms  ${entry.sql.replace(/\s+/g, " ").slice(0, 200)}`
   );
 }
-var server = await serve(options);
+var server = await serve2(options);
 console.log(`mockingbird-postgres listening on ${server.connectionString}`);
 var stop = async () => {
   await server.close();