@mason-data/cli 0.0.0-stage → 0.7.0

package/dist/src/cli/commands.js

@@ -0,0 +1,1277 @@
+/**
+ * THE COMMANDS BESIDE `mason start` (an interface as good for people as for coding agents).
+ * Each one finds the run it means (src/cli/runs.ts) and asks its command server (src/cli/control.ts) — or, for what
+ * needs only the project's files and its database (tables; add and remove while Mason is down), reads them itself — and
+ * prints it for a person or, with `--json`, as data a program reads. Exit codes are part of each command's contract:
+ *
+ *   mason status [--json]                 what the run is doing: its database, its tables and their copies, the Postgres API
+ *   mason tables [<table>…] [--json]      the database's tables, their columns, keys and foreign keys
+ *   mason add <table>… [--columns …]      copy tables into Mason: every column, or the ones --columns names
+ *   mason remove <table>…                 take tables out of the sources file; their copies are dropped
+ *   mason wait [--timeout <s>] [--json]   until every added table is copied: 0 ready, 1 a copy failed (said), 124 timed out
+ *   mason logs [-n <lines>] [-f] [--start] [--requests]   the run's log; --start, the start's terminal; --requests, its request log
+ *   mason stop                            stop Mason for this folder's project (the copy stays)
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { asFailure, endText, errorJson, failed, jsonText, nextBlock, parseCommand, reportText, withEnd } from "./command.js";
+import { err as styleErr, out as styleOut, stepRenderer, wrap } from "./style.js";
+import { alive, endRun, END_GRACE_MS, notAnswering, runState, theRun } from "./runs.js";
+import { version } from "./version.js";
+import { readRestarts, signalSupervisor, stopSupervisor, supervisorGone } from "./supervise.js";
+import { DEMO_DIR, DUCK_FILE, STATE_DIR, isProject, projectSource, readProject, theProject, writeConfig } from "./project.js";
+import { callRun, RunUnreachable } from "./control.js";
+import { withPlaceholders, postgresLink } from "./pg-url.js";
+import { listenerText } from "./pg-tls.js";
+import { SLOW_MS } from "./run-server.js";
+import { catalogTable, entryName, looksSecret, tableNameProblem } from "./sources.js";
+import { addEntry, Refusal, removeEntries, sourceToEdit } from "./source-edit.js";
+import { changesOf } from "./replication-mode.js";
+import { connectSource, maskedUrl, parseSource, readSourceFacts } from "./preflight.js";
+import { reach } from "./state.js";
+import { copyingText, copyProgress, duration, readiness } from "./readiness.js";
+import { pathText } from "../duck/kept-route.js";
+import { countsText } from "../duck/stream.js";
+const out = (m) => { process.stdout.write(`${m}\n`); };
+const err = (m) => { process.stderr.write(`${m}\n`); };
+// ------------------------------------------------------------------ shared
+/** The run a command that needs one works with (src/cli/state.ts reach), or null once the state's failure is said. */
+async function runOr(spec, json) {
+    const w = await reach(spec, json);
+    return w !== null && "run" in w ? w.run : null;
+}
+export async function readState(run) {
+    const r = await callRun(run, "GET", "/api/state");
+    if (r.status !== 200)
+        throw new RunUnreachable(String(r.body.error ?? `HTTP ${r.status}`));
+    return r.body;
+}
+/** A command body that may fail to reach the run: the failure said (JSON under --json), exit 1. */
+export async function guarded(cmd, json, f) {
+    try {
+        return await f();
+    }
+    catch (e) {
+        if (e instanceof RunUnreachable)
+            return failed(cmd, e.failure, { json });
+        throw e;
+    }
+}
+const n = (x) => x.toLocaleString("en-US");
+/** A list of sentences, each a bullet; a sentence's own further lines indented under it. */
+const bullets = (xs) => xs.map((x) => `  - ${x.split("\n").join("\n    ")}`).join("\n");
+const firstLine = (s) => s.split("\n")[0].trim();
+/** A table as the commands name it: `orders` (in public), or `schema.table` — never a third part (tableNameProblem). */
+export function findTable(tables, name) {
+    const malformed = tableNameProblem(name, tables.map((t) => t.table));
+    if (malformed !== null)
+        return { message: malformed, code: "usage" };
+    const exact = tables.find((t) => t.table === name) ?? tables.find((t) => t.table === `public.${name}`);
+    if (exact)
+        return exact;
+    const byTable = tables.filter((t) => t.table.split(".").slice(1).join(".") === name);
+    if (byTable.length === 1)
+        return byTable[0];
+    if (byTable.length > 1)
+        return { message: `${name} is in several schemas (${byTable.map((t) => t.table).join(", ")})`, code: "not_found", fix: "name it with its schema: schema.table" };
+    return { message: `the database has no table ${JSON.stringify(name)} this user can read`, code: "not_found", next: [["mason tables", "the tables it has, as this user reads them"]] };
+}
+/** A table as `mason add` and `mason tables` take it: its name alone in the public schema, else with its schema. */
+export const tableArg = entryName;
+/** What to run once every added table is copied: a user for the tool that will query it (src/cli/user.ts). */
+export const READY_STEPS = [
+    ["mason user add <name>", "a user for your BI tool or psql: it prints the password and the URL to paste"],
+    ["mason status", "each table's copy, and the statements the Postgres API answered slowly or refused"],
+];
+/** What to run next over a database's tables: a table's columns, then adding it — named after a real table not yet added.
+ *  `from: "tables"` is mason tables itself asking: it never points at itself. */
+export function addSteps(tables, from = null) {
+    const one = tables.find((t) => !t.added && t.reason === null);
+    if (!one)
+        return [...READY_STEPS];
+    const name = tableArg(one.table);
+    // every table first: which to add is the first question (so mason status's Next includes mason tables)
+    return [
+        ...(from === "tables" ? [] : [["mason tables", "the database's tables: rows, key, whether added"]]),
+        [`mason tables ${name}`, "one table's columns"],
+        [`mason add ${name}`, "copy it into Mason: it is added to the sources file (--columns a,b,c: those only)"],
+    ];
+}
+// ------------------------------------------------------------------ readiness (mason wait, mason status): src/cli/readiness.ts
+export { copyingText, copyProgress, duration, readiness };
+/** A table line's bar in its state's colour (on a terminal): green copied, red failed, yellow served but not kept current, cyan at work. */
+export function paintBar(line, s) {
+    const colour = / its copy failed: /.test(line) ? s.red : / NOT kept current /.test(line) ? s.yellow : / 100%  [\d,]+ rows · copied( · |$)/.test(line) ? s.green : s.cyan;
+    return line.replace(/(█+)(░*)|(░+)/, (_m, full, empty, none) => full !== undefined ? `${colour(full)}${s.dim(empty ?? "")}` : s.dim(none ?? ""));
+}
+/** The width of a table's progress bar, in characters. */
+const BAR = 20;
+const bar = (fraction) => { const full = Math.round(Math.max(0, Math.min(1, fraction)) * BAR); return "█".repeat(full) + "░".repeat(BAR - full); };
+/**
+ * EVERY ADDED TABLE ON A LINE OF ITS OWN (after `mason add a b c` where a and c copy quickly, `mason wait` showed only
+ * b; it shows a line for each table, 100% for those up to date and a progress bar for those still at work, in order of
+ * last processed, so the ones at work are at the bottom): its bar, its percent and what it is doing. The finished
+ * first, in the order they finished (`copy.updatedAt`: a finished copy's state is written once, when it finishes), then
+ * the failed, the copying and the waiting.
+ */
+export function tableLines(s) {
+    const picked = s.tables.filter((t) => t.added);
+    // 0 done, 1 failed, 2 copying, 3 waiting for its copy
+    const rank = (t) => t.error ? 1 : t.copy?.phase === "copying" ? 2 : !t.copy ? 3 : 0;
+    const rows = picked.map((t) => {
+        const r = rank(t);
+        let fraction, what;
+        // a table over the poll's row limit is served as copied, and said so on its line (src/duck/sync.ts POLL_ROW_LIMIT)
+        if (r === 0 && t.unsynced) {
+            fraction = 1;
+            what = `${n(t.copy?.rowsCopied ?? 0)} rows · copied, NOT kept current (${t.unsynced.reason}${t.unsynced.asOf ? `; as of ${t.unsynced.asOf.slice(0, 16).replace("T", " ")} UTC` : ""}) — mason sync ${tableArg(t.table)}, or mason start --replication`;
+        }
+        else if (r === 0) {
+            fraction = 1;
+            what = `${n(t.copy?.rowsCopied ?? 0)} rows · copied${t.copy?.retired ? ` · ${t.copy.retired}` : ""}`;
+        }
+        else if (r === 1) {
+            fraction = 1;
+            what = `its copy failed: ${firstLine(t.error)}`;
+        }
+        else if (r === 2) {
+            const c = copyingText(t.copy.rowsCopied, t.rows, t.copy.progress);
+            fraction = c.fraction ?? 0;
+            // a count says it is copying; "reading the first chunk" says so itself
+            what = /^\d/.test(c.text) ? `copying ${c.text}` : c.text;
+        }
+        else {
+            fraction = 0;
+            what = "waiting for its copy to start";
+        }
+        return { t, r, at: t.copy?.updatedAt ?? "", line: `${bar(fraction)} ${`${Math.floor(fraction * 100)}%`.padStart(4)}  ${what}` };
+    });
+    rows.sort((a, b) => a.r - b.r || a.at.localeCompare(b.at) || a.t.table.localeCompare(b.t.table));
+    const w = Math.max(0, ...rows.map((x) => x.t.table.length));
+    return rows.map((x) => `${x.t.table.padEnd(w)}  ${x.line}`);
+}
+/** A span of seconds as the stream's lines say it: `0.3 s` under ten seconds, then as a wait reads (`duration`). */
+const spanText = (seconds) => seconds < 10 ? `${Math.max(0, seconds).toFixed(1)} s` : duration(seconds);
+/**
+ * WHERE THE STREAM IS, a thing a line (the first replication run on a server showed nothing of it in 35
+ * minutes): its position against the database's and the bytes between, the newest change applied and how long after
+ * its commit, then every added table — streamed with what it applied this run, being caught up (from when, doing what),
+ * not streamed yet, or left out — and why. `mason status` prints it under "Stream", `mason wait` under its tables;
+ * `--json` is the `StreamStatus` itself.
+ */
+export function streamLines(st, now = Date.now()) {
+    const rows = [];
+    const since = (iso) => (now - Date.parse(iso)) / 1000;
+    if (!st.running) {
+        rows.push(["stream", st.failure === null ? "not running yet: it starts once the slot is made"
+                : `not running: ${st.failure.error.split("\n")[0]} · it starts again in ${spanText(Math.max(0, -since(st.failure.retryAt)))}`]);
+    }
+    const db = "lsn" in st.database
+        ? `the database is at ${st.database.lsn}: ${n(st.lag.bytes ?? 0)} bytes behind (read ${spanText(since(st.database.at))} ago)`
+        : `the database's position could not be read: ${st.database.error.split("\n")[0]}`;
+    rows.push(["position", `${st.position} · ${db}`]);
+    rows.push(["last change", st.lastBatch === null ? "none applied this run"
+            : `committed ${spanText(since(st.lastBatch.committedAt))} ago, applied ${spanText((Date.parse(st.lastBatch.appliedAt) - Date.parse(st.lastBatch.committedAt)) / 1000)} after its commit`]);
+    const total = (t) => t.applied.inserts + t.applied.updates + t.applied.deletes + t.applied.truncates;
+    for (const t of st.tables) {
+        const counts = ` · ${countsText(t.applied)} this run`;
+        const c = t.catchUp;
+        rows.push([t.table, t.state === "streamed" ? `streamed${counts}`
+                : t.state === "catching-up" && c !== undefined
+                    ? `catching up by one poll ${c.from ? `from ${c.from.slice(0, 16).replace("T", " ")} UTC` : t.why?.replace(/^caught up by one poll /, "") ?? ""}: ` +
+                        `${c.phase === "queued" ? (c.retryAt ? `its last catch-up failed, tried again after ${c.retryAt.slice(11, 16)} UTC (mason logs says why)` : "waiting its turn") : c.phase === "polling" ? "polling" : "applying what the stream held meanwhile"}` +
+                        `${c.startedAt ? `, for ${spanText(since(c.startedAt))}` : ""} · the stream holds ${n(c.held)} change${c.held === 1 ? "" : "s"} of it meanwhile${total(t) ? counts : ""}`
+                    : t.state === "left-out" ? `left out: ${t.why ?? ""}`
+                        : `not streamed yet: ${t.why ?? ""}${total(t) ? counts : ""}`]);
+    }
+    const w = Math.max(...rows.map(([k]) => k.length));
+    return rows.map(([k, v]) => `${k.padEnd(w)}  ${v}`);
+}
+// ------------------------------------------------------------------ mason status
+const STATUS_USAGE = `usage: mason status [--json]
+
+  Status: running, not running, or hung — then this project's facts, one a line: its folder, its database and how
+  its changes are read, the run and its copy's file, the Postgres API and how it listens. Then each added table as
+  mason wait shows it; the statements the Postgres API answered slowly in the last day; and the ones it refused or
+  failed, each with the reason (mason logs --requests lists every one). With Mason stopped, the same rows say "not
+  running", how the last run ended, and the tables are the ones the sources file names. Hung is a run that is alive and does
+  not answer its commands (a statement may be holding its main thread): the same rows, and mason stop ends it (exit 1).
+
+    mason status
+    mason status --json
+
+  --json   as data: { running, pid, postgres: { url, host, port, database, sslmode (require when it is TLS), listener:
+           { host (what it is bound to), tls (certificate, self-signed or null), fingerprint } }, source: { name (the
+           source's: its sources file's), file (the sources file), url, database, remote, version, standby, changes,
+           replication, demo (the demo database this run hosts) }, warnings, folder, project, tables: [{ table, rows,
+           bytes, key, added, addedColumns, copy, error, unsynced: { reason, asOf } (copied and served, not kept
+           current by the poll), kept, … }], engine: { file, bytes, pollSeconds, restarts (each time its supervisor
+           started the run again: { at, reason, upSeconds }) }, slowQueries, refusedQueries, refusedTotal (how many in
+           all), readiness (what mason wait waits on), ui (whether this run serves the web page: mason ui), next }.
+           Each table's kept is how its copy is kept current now (absent for a table the sync does not hold):
+           { by: poll, polledAt (its last copy or poll), unsynced (only when it applies: why the passes leave it as
+           copied, mason sync polls it), pending (only when it applies: why the copy is not kept current now, its
+           phase included: waiting for its copy, being copied, its copy failed, to be copied again, caught up first) }
+           or { by: recopy, copiedAt, pending (only when it applies, as the poll's) }
+           or { by: replication, slot, state (streamed, catching-up, waiting, left-out), why, position, lastCommit,
+           notRunning (why the stream is not running, null when it is) }; with Mason stopped: { running: false, project, source: { name,
+           file, url, error (the sources file's problem, or null) }, engine, tables: [{ table }], lastRun, lastStop:
+           { at, how } or null, next }; hung: the same with hung: { pid, problem, why },
+           exit 1. In replication mode stream: { slot, publication, running, failure, position,
+           applied, database: { lsn, at } or { error }, lag: { bytes, seconds }, lastBatch: { appliedAt, committedAt },
+           tables: [{ table, state (streamed, catching-up, waiting, left-out), why, catchUp: { phase (queued, polling,
+           applying), from, startedAt, held, retryAt }, applied: { inserts, updates, deletes, truncates } }] }.
+           jsonPaths: [{ table, column, steps, either, canonical, asText (false: a path's -> and ->> share it), name,
+           state (waiting, backfilling, ready, dropped), rowsTotal, rowsDone, marked, statements, slowestMs, totalMs,
+           fill: { rows, bytesPerRow, seconds, basis (measured: from the last fill of its column; disk or text: modelled from
+           the column's bytes a row on disk, or its text's before it is on disk), rowsPerSecond } (the fill's estimate it
+           was decided on), filled: { rows, seconds } (what its own fill measured), queued (a backfill waiting for the fill
+           under way), keptAt, readyAt, why }]
+
+  In replication mode a Stream section says where the stream is: its position against the database's (bytes behind),
+  when the newest change applied was committed and how long after it was applied, and each added table — streamed,
+  with the changes applied this run; being caught up by one poll; not streamed yet; or left out — and why.
+
+  Stored JSON paths: a JSON value statements keep reading (payload ->> 'customer_id' read by several statements, or by
+  one slow one) is stored as a column of the copy and read from there, computed once when its row is written instead
+  of for every row of every statement; on a table whose fill would take a minute or more, only once the statements
+  reading it took a tenth of the fill's estimate in all. The estimate is the rate the last fill of the same JSON
+  column measured, once one has run, else modelled from the column's bytes on disk; the line says which. Each path is
+  waiting (its fill's cost holds it back: the line says the estimate and what would store it), queued (its column
+  added, its fill after the one under way), backfilling (its existing rows being filled, N %) or ready (read from its
+  column). MASON_STORE_JSON_PATHS=off turns it off.
+`;
+export const STATUS = {
+    needs: "project",
+    name: "status",
+    summary: "what Mason is doing: the database, each table's copy, the Postgres API, the slow and refused statements",
+    usage: STATUS_USAGE,
+    options: { json: { type: "boolean" } },
+    json: ["running", "pid", "postgres", "source", "warnings", "folder", "project", "tables", "engine", "stream", "jsonPaths", "slowQueries", "refusedQueries", "refusedTotal", "readiness", "ui",
+        "lastRun", "lastStop", "hung", "next"],
+};
+export async function status(argv) {
+    const f = parseCommand(STATUS, argv);
+    if (typeof f === "number")
+        return f;
+    const r0 = await theRun(process.cwd());
+    // the first line goes straight to the point (Status: running); when the service is not running, the same rows and
+    // tables show, with "not running" for each service that is not
+    const json = f.values.json === true;
+    if ("problem" in r0) {
+        if (!r0.project)
+            return failed("status", r0, { json });
+        return stoppedStatus(r0.project, json, r0.hung === undefined ? null : { run: r0.hung, problem: r0 });
+    }
+    const run = r0.run;
+    return guarded("status", json, async () => {
+        const st = styleOut();
+        const s = await readState(run);
+        const r = readiness(s);
+        // the statements the Postgres API answered slowly, and the ones it refused, with the reason (src/duck/requests.ts)
+        const slowReply = await callRun(run, "GET", "/api/slow");
+        const slow = slowReply.status === 200 ? slowReply.body.slow : [];
+        const refusedReply = await callRun(run, "GET", "/api/refused");
+        const refused = refusedReply.status === 200 ? refusedReply.body.refused : [];
+        const refusedTotal = typeof refusedReply.body.total === "number" ? refusedReply.body.total : null;
+        const picked = s.tables.filter((t) => t.added);
+        // what to run next, the same for a person and under --json
+        const next = !picked.length ? addSteps(s.tables)
+            : r.ready ? [...READY_STEPS]
+                : r.failed.length ? [["mason logs", "the detail of each failure"], ["mason wait", "each failure, with the way out"]]
+                    : [["mason wait", "until it is done"]];
+        // the times its supervisor started it again (src/cli/supervise.ts): a run that crashed says so, never only in a log
+        const restarts = restartsOf(run.home);
+        if (json) {
+            out(jsonText(STATUS, { running: true, pid: run.pid, postgres: { ...postgresLink(run.postgresUrl), listener: run.postgresListener },
+                ...s, engine: { ...s.engine, restarts }, slowQueries: slow, refusedQueries: refused, refusedTotal, readiness: r }, next));
+            return 0;
+        }
+        const rows = [
+            ["Project", `${run.name}, files in ${s.folder ?? "(none chosen)"}`],
+            ...sourceRows(s),
+            ["Mason", `${version()}, pid ${run.pid} · one process`],
+            ["Copy", `${s.engine.file}${s.engine.bytes === null ? "" : ` · ${fileSize(s.engine.bytes)}`}`],
+            ...restartsRows(restarts),
+            ["Postgres API", `${withPlaceholders(run.postgresUrl)}  (mason user add <name> makes a user)`],
+            // what it serves: its address, TLS or plain (src/cli/pg-tls.ts)
+            ["Listener", listenerText(run.postgresListener, postgresLink(run.postgresUrl).port)],
+            // the web page (mason ui), without its one-time token: mason ui prints the URL that carries it, and opens it
+            ...(s.ui === true ? [["Web UI", `${run.control.url}/  (mason ui opens it)`]] : []),
+            ...s.warnings.map((w) => ["Warning", w]),
+        ];
+        out(reportText({ headline: `Status: ${st.green("running")}`, details: rows }, st));
+        out("");
+        if (!picked.length) {
+            out(withEnd(`No table added yet (${s.tables.length} in the database).`, { next }));
+            return 0;
+        }
+        if (s.stream) {
+            out(st.bold(`Stream (slot ${s.stream.slot}):`));
+            for (const l of streamLines(s.stream))
+                out(`  ${l}`);
+            out("");
+        }
+        out(st.bold(`Tables (${picked.length} of ${s.tables.length} added):`));
+        for (const l of tableLines(s))
+            out(`  ${paintBar(l, st)}`);
+        for (const l of jsonPathLines(s.jsonPaths ?? [], st))
+            out(l);
+        for (const l of slowLines(slowReply.status === 200 ? slow : { error: String(slowReply.body.error ?? slowReply.status) }, st))
+            out(l);
+        for (const l of refusedLines(refusedReply.status === 200 ? { refused, total: refusedTotal } : { error: String(refusedReply.body.error ?? refusedReply.status) }, st))
+            out(l);
+        out("");
+        if (r.ready)
+            out(withEnd(st.green("Ready: every added table is copied and served."), { next }));
+        else if (r.failed.length)
+            out(withEnd(`${st.red("Failed:")}\n${bullets(r.failed)}`, { next }));
+        else
+            out(withEnd(`Under way:\n${r.waiting.map((x) => `  - ${x}`).join("\n")}`, { next }));
+        return 0;
+    });
+}
+/**
+ * mason status's rows for the database the run copies: its sources file, its URL (masked by the run), and how its changes
+ * arrive. The web page (src/web/app.js `sourceRows`) says the same rows, held equal by tests/web-page.test.ts.
+ */
+export function sourceRows(s) {
+    return [
+        ...(s.source.file ? [["Source", `${s.source.file} (the tables it names are added)`]] : []),
+        ["Database", s.source.demo ? `the demo database Mason hosts (${s.source.url} · Postgres ${s.source.version})`
+                : `${s.source.url} · Postgres ${s.source.version}${s.source.standby ? " · a read replica" : ""}`],
+        ["Changes", s.source.replication ? `logical replication: slot ${s.source.replication.slot}, publication ${s.source.replication.publication} ` +
+                `(${s.source.replication.owned ? "Mason's own" : "named: read as it is, never altered"}) · mason start --poll goes back to polling`
+                : `polling with SELECTs (xmin), every ${s.engine.pollSeconds} s · ${s.source.demo ? "the demo database is read by polling only" : "mason start --replication reads the database's change log instead"}`],
+    ];
+}
+/** An SQL statement on one line, cut at `max` characters (the whole of it is mason logs --requests --json's). */
+export function oneLine(sql, max = 100) {
+    const line = sql.replace(/\s+/g, " ").trim();
+    return line.length <= max ? line : `${line.slice(0, max - 1)}…`;
+}
+/**
+ * mason status's stored JSON paths (src/duck/kept.ts): each one being filled or stored, by table, with why it was
+ * stored; the dropped ones counted (mason status --json says why each went).
+ */
+export function jsonPathLines(paths, st) {
+    const live = paths.filter((p) => p.state !== "dropped").sort((a, b) => Number(a.state === "waiting") - Number(b.state === "waiting"));
+    const dropped = paths.length - live.length;
+    if (!live.length && !dropped)
+        return [];
+    const lines = [`\n${st.bold("Stored JSON paths")} ${st.dim("(read from a column of the copy, computed once per row written; MASON_STORE_JSON_PATHS=off turns it off)")}:`];
+    for (const p of live) {
+        const pct = p.rowsTotal > 0 ? Math.min(99, Math.floor((p.rowsDone / p.rowsTotal) * 100)) : 0;
+        // a path its fill's cost holds back says so: its why is the decision, with the estimate
+        const state = p.state === "ready" ? st.green("ready") : p.state === "waiting" ? st.yellow("waiting")
+            : p.queued === true ? `queued, filled after the fill under way (${n(p.rowsTotal)} rows)` : `backfilling ${pct} % (${n(p.rowsDone)} of ${n(p.rowsTotal)} rows)`;
+        lines.push(`  ${p.table}  ${pathText(p)}  ${state}  ${st.dim(p.why)}`);
+    }
+    if (dropped)
+        lines.push(`  ${st.dim(`${dropped} dropped (mason status --json says why)`)}`);
+    return lines;
+}
+/** mason status's slow statements (src/duck/requests.ts slow), each on one line with its times. */
+export function slowLines(slow, st) {
+    if (!Array.isArray(slow))
+        return [`\n${st.bold("Slow queries")}: could not read them (${firstLine(slow.error)}; mason logs has the detail)`];
+    if (!slow.length)
+        return [];
+    const lines = [`\n${st.bold("Slow queries")} ${st.dim(`(the last day, still ${(SLOW_MS / 1000).toLocaleString("en-US")} s or more; slowest first)`)}:`];
+    for (const q of slow) {
+        const times = `${n(q.latestMs)} ms last time (${q.runs} run${q.runs === 1 ? "" : "s"}, median ${n(q.medianMs)} ms)`;
+        lines.push(`  ${times}, last ${q.last.slice(0, 16).replace("T", " ")} UTC`, `    ${oneLine(q.payload)}`);
+    }
+    return lines;
+}
+/**
+ * mason status's refused statements: each distinct one once, newest first, with its SQLSTATE, how often, when last, and
+ * the message's first line (the whole of it is mason logs --requests --failed's). `total`: how many in all.
+ */
+export function refusedLines(r, st) {
+    if ("error" in r)
+        return [`\n${st.bold("Refused queries")}: could not read them (${firstLine(r.error)}; mason logs has the detail)`];
+    if (!r.refused.length)
+        return [];
+    const lines = [`\n${st.bold("Refused queries")} ${st.dim(`(the last day${r.total === null ? "" : `: ${n(r.total)} in all`}, newest first; each message says what to change; mason logs --requests --failed lists each)`)}:`];
+    for (const q of r.refused) {
+        lines.push(`  ${q.code}, ${q.runs} time${q.runs === 1 ? "" : "s"}, last ${q.last.slice(0, 16).replace("T", " ")} — ${oneLine(q.payload)}`);
+        lines.push(`    ${firstLine(q.message)}`);
+    }
+    return lines;
+}
+/** A file's size, as a person reads one */
+function fileSize(b) {
+    return b >= 1024 ** 3 ? `${(b / 1024 ** 3).toFixed(1)} GiB` : b >= 1024 ** 2 ? `${(b / 1024 ** 2).toFixed(1)} MiB` : `${(b / 1024).toFixed(1)} KiB`;
+}
+/** The restarts recorded for a run, or why they could not be read (a file nobody can read is said, never taken as none). */
+function restartsOf(home) {
+    try {
+        return readRestarts(home);
+    }
+    catch (e) {
+        return { error: `${path.join(home, "restarts.json")} could not be read: ${e.message}` };
+    }
+}
+/** `Restarts` in mason status: how many times the run was started again, and the last one's reason (none: no row) */
+function restartsRows(r) {
+    if (!Array.isArray(r))
+        return [["Restarts", r.error]];
+    const last = r[r.length - 1];
+    if (last === undefined)
+        return [];
+    return [["Restarts", `${r.length}, the last ${ago(last.at)}: ${last.reason}, after ${last.upSeconds} s up (mason logs --start has its last lines)`]];
+}
+/**
+ * mason status with Mason stopped: the same rows and tables, "not running" where something is not. The
+ * database is the sources file's, unchecked; the tables are the ones it names, as nothing reads their copies now — or, when
+ * the file cannot be read, what is wrong with it, with the way out (`source.error`).
+ * With a run HUNG (alive, a Mason run, silent; src/cli/runs.ts), the same rows say so — never "not running", which is
+ * what the test server read while its ports were held — the next step is mason stop, and the exit is 1.
+ */
+function stoppedStatus(project, json, hung = null) {
+    const st = styleOut();
+    const src = projectSource(project);
+    const tables = "message" in src ? [] : src.tables.map((e) => e.table);
+    const database = "message" in src ? null : maskedUrl(src.resolved);
+    const duckFile = path.join(project.dir, DUCK_FILE);
+    // the copy's file, when a run has made one: its size says what the next mason start resumes with
+    const bytes = fs.existsSync(duckFile) ? fs.statSync(duckFile).size : null;
+    const restarts = restartsOf(project.dir);
+    const lastStop = project.config.lastStop ?? null;
+    const next = hung === null ? ("message" in src && src.next?.length ? src.next : [["mason start", "start Mason for this project: what it copied is kept, and polled again"]])
+        : hung.problem.next ?? [["mason stop", "end it"], ["mason logs", "what it was doing"]];
+    const state = hung === null ? "not running" : "hung";
+    if (json) {
+        out(jsonText(STATUS, { running: false, ...(hung === null ? {} : { hung: { pid: hung.run.pid, problem: hung.problem.problem, why: hung.problem.why } }),
+            project: { name: project.config.name, folder: project.folder },
+            source: { name: "message" in src ? null : src.name, file: "message" in src ? null : src.file, url: database, error: "message" in src ? errorJson(src) : null },
+            engine: { name: "duckdb", file: duckFile, bytes, restarts }, tables: tables.map((table) => ({ table })),
+            lastRun: project.config.lastRun ?? null, lastStop }, next));
+        return hung === null ? 0 : 1;
+    }
+    const ended = lastStop === null ? "" : `; ${ago(lastStop.at)}: ${lastStop.how}`;
+    out(reportText({ headline: `Status: ${hung === null ? st.yellow(state) : st.red(state)}`, details: [
+            ["Project", `${project.config.name}, files in ${project.folder}`],
+            ["Source", "message" in src ? `${src.message}${src.fix ? ` — ${src.fix.split("\n")[0]}` : ""}` : src.file],
+            ...(database === null ? [] : [["Database", `${database} (not checked: Mason ${hung === null ? "is not running" : "does not answer"})`]]),
+            ["Mason", hung === null ? `${version()} · not running${project.config.lastRun ? ` (last started ${ago(project.config.lastRun)}${ended})` : ""}`
+                    : `${version()}, pid ${hung.run.pid} · running but does not answer its commands: ${hung.problem.why}`],
+            ["Copy", bytes === null ? "none yet (mason start makes it)" : `${duckFile} · ${fileSize(bytes)}`],
+            ...restartsRows(restarts),
+            ["Postgres API", hung === null ? "not running" : `${withPlaceholders(hung.run.postgresUrl)}  (held by the hung run; it may not answer)`],
+        ] }, st));
+    out("");
+    if (!tables.length)
+        out("No table added yet.");
+    else {
+        out(st.bold(`Tables (${tables.length} added):`));
+        const w = Math.max(...tables.map((m) => m.length));
+        for (const m of tables)
+            out(`  ${m.padEnd(w)}  ${st.dim(`${"░".repeat(20)}    —  ${state === "hung" ? "not checked: Mason does not answer" : "not running"}`)}`);
+    }
+    out(endText({ tips: [], next }, st));
+    return hung === null ? 0 : 1;
+}
+function ago(iso) {
+    const s = Math.max(0, Math.round((Date.now() - Date.parse(iso)) / 1000));
+    return s < 90 ? `${s}s ago` : s < 5400 ? `${Math.round(s / 60)} min ago` : `${Math.round(s / 3600)} h ago`;
+}
+// ------------------------------------------------------------------ mason tables
+const TABLES_USAGE = `usage: mason tables [<table>…] [--all] [--json]
+
+  The tables of the database that this user can read, one line each: rows, primary key, whether it is added, and why
+  one cannot be added as it is (no primary key: --key names the columns). Name a table for its columns —
+  each one's type, what it references, and whether mason add would leave it out as a secret. It reads the project's
+  database itself: Mason need not be running.
+
+    mason tables                             every table, one line each
+    mason tables orders public.customers     those tables' columns (a table's name alone, or schema.table)
+    mason tables --all                       every table with its columns, at once (long)
+
+  --all       every table with its columns, not only the named ones
+  --json      as data: { database, source: { name (the source's: its sources file's), file (the sources file) },
+              tables: [{ table, rows, bytes, primaryKey, comment, addable,
+              reason, added, addedColumns (the columns its copy keeps: null when not added), copyKey (the key: the sources
+              file copies it by, null: its primary key), columns: [{ name, type, nullable, comment, references }] }], next }
+`;
+export const TABLES = {
+    // the project, not the run (the hands-on review of #451, item 15): what it lists is the database's catalog and the
+    // project's sources file, and choosing what to add comes before anything is started
+    needs: "project",
+    name: "tables",
+    summary: "the database's tables: rows, key, whether added; a table's columns and what they reference",
+    usage: TABLES_USAGE,
+    options: { json: { type: "boolean" }, all: { type: "boolean" } },
+    json: ["database", "source", "tables", "next"],
+};
+export async function tables(argv) {
+    const f = parseCommand(TABLES, argv);
+    if (typeof f === "number")
+        return f;
+    const json = f.values.json === true;
+    const where = await reach(TABLES, json);
+    // (a state with no project never meets the need: reach said it)
+    if (where === null || where.project === null)
+        return 1;
+    const s = await databaseTables(where.project);
+    if ("message" in s)
+        return failed("tables", s, { json });
+    let shown = s.tables;
+    if (f.positionals.length) {
+        shown = [];
+        for (const name of f.positionals) {
+            const t = findTable(s.tables, name);
+            if (!("table" in t))
+                return failed("tables", t, { json });
+            shown.push(t);
+        }
+    }
+    // what to run next: the first table not yet added, as a whole list or as the named tables
+    const one = shown.find((t) => !t.added && t.reason === null);
+    const next = f.positionals.length
+        ? (one ? [[`mason add ${tableArg(one.table)}`, `copy it into Mason (--columns ${one.columns.slice(0, 2).map((c) => c.name).join(",")}: those only)`]] : [])
+        : addSteps(shown, "tables");
+    if (json) {
+        out(jsonText(TABLES, { database: s.database, source: { name: s.name, file: s.file }, tables: shown.map((t) => ({
+                table: t.table, rows: t.rows, bytes: t.bytes, primaryKey: t.key, comment: t.comment,
+                addable: t.reason === null, reason: t.reason, added: t.added, addedColumns: t.addedColumns, copyKey: t.copyKey,
+                columns: t.columns.map((c) => ({ name: c.name, type: c.type, nullable: c.nullable, comment: c.comment, references: c.references })),
+            })) }, next));
+        return 0;
+    }
+    if (!shown.length) {
+        out(`${s.database} has no table this user can read.`);
+        return 0;
+    }
+    // one line per table unless a table is named or --all asks: 54 tables were 600 lines, and choosing what to
+    // add needs the names, sizes and keys (an agent read them through --json and python, #409)
+    if (!f.positionals.length && !f.values.all) {
+        const w = Math.max(...shown.map((t) => t.table.length));
+        for (const t of shown) {
+            const l = tableFacts(t);
+            out(`${t.table.padEnd(w)}  ${l.size.padStart(18)}  ${l.key}${l.state ? `  · ${l.state}` : ""}`);
+        }
+        out(nextBlock(next));
+        return 0;
+    }
+    for (const t of shown) {
+        const size = t.rows === null ? "rows unknown" : `~${n(t.rows)} rows`;
+        const added = t.added ? ` · added (${t.addedColumns.length === t.columns.length ? "every column" : t.addedColumns.join(", ")}${t.copyKey ? `; copied by ${t.copyKey.join(", ")}` : ""})` : "";
+        out(`${t.table} · ${size}${t.key.length ? ` · key ${t.key.join(", ")}` : ""}${added}`);
+        if (t.comment)
+            out(`  ${t.comment}`);
+        if (t.reason)
+            out(`  cannot be added as it is: ${t.reason}`);
+        const w = Math.max(...t.columns.map((c) => c.name.length));
+        const tw = Math.max(...t.columns.map((c) => c.type.length));
+        for (const c of t.columns) {
+            const notes = [c.nullable ? "" : "not null", c.references ? `→ ${c.references.table}.${c.references.column}` : "",
+                looksSecret(c.name) && !t.key.includes(c.name) ? "(looks like a secret: left out unless named)" : "", c.comment ? `-- ${c.comment}` : ""].filter(Boolean);
+            out(`  ${c.name.padEnd(w)}  ${c.type.padEnd(tw)}  ${notes.join("  ")}`.trimEnd());
+        }
+        out("");
+    }
+    // each table above ends with its blank line: the block's own is left out
+    if (next.length)
+        out(nextBlock(next).slice(1));
+    return 0;
+}
+/** A table's line in `mason tables`: its size, its key, and added or why it cannot be added as it is (the web page's
+ *  tables say the same, src/web/app.js; tests/web-page.test.ts holds the two equal). */
+export function tableFacts(t) {
+    return { size: t.rows === null ? "rows unknown" : `~${n(t.rows)} rows`, key: t.key.length ? `key ${t.key.join(", ")}` : "no key",
+        state: t.added ? "added" : t.reason ? `cannot be added as it is: ${t.reason}` : null };
+}
+/**
+ * THE PROJECT'S DATABASE'S CATALOG, READ BY THE COMMAND ITSELF (the hands-on review of #451, item 15: `mason tables`
+ * answered "Mason is not running", though it reads only Postgres): the sources file as the run reads it, and the
+ * database's catalog (preflight.ts readSourceFacts, what mason start reads) — what `mason tables` lists, and what `mason
+ * add` and `mason remove` check an edit against while Mason is down. A file that cannot be read, or a database that does
+ * not answer, is said with why and the way out.
+ */
+async function readCatalog(p) {
+    const src = projectSource(p);
+    if ("message" in src)
+        return src;
+    const demo = p.config.demo === true;
+    const fix = `change the URL where it is (${src.from}) when the database's password or host changed`;
+    const parsed = parseSource(src.resolved);
+    if ("problem" in parsed)
+        return { message: `the database's URL (${src.from}): ${parsed.problem}`, code: "bad_source", fix };
+    const connected = await connectSource(parsed.source, { demo });
+    if ("failure" in connected) {
+        // the demo database's way out is its run (src/cli/demo.ts): its hint is the fix, mason start the next command
+        if (demo) {
+            return { message: `could not connect to ${maskedUrl(parsed.source.url)}: ${connected.failure.message}`, code: "unreachable",
+                fix: connected.failure.hints.join("; ") || "mason start hosts the demo database", next: [["mason start", "the demo database and Mason, in the background"]] };
+        }
+        return { message: `could not connect to ${maskedUrl(parsed.source.url)}: ${connected.failure.message}`, code: "unreachable",
+            ...(connected.failure.hints.length ? { why: connected.failure.hints.join("; ") } : {}), fix,
+            next: [["mason doctor", "checks the machine and the project's database"]] };
+    }
+    let facts;
+    try {
+        facts = await readSourceFacts(connected.pg);
+    }
+    catch (e) {
+        // a catalog this user cannot read (a revoked grant, a server shutting down): said as the database's, never a crash
+        return { message: `could not read ${parsed.source.database}'s tables: ${e.message}`, code: "failed",
+            next: [["mason doctor", "checks the machine and the project's database"]] };
+    }
+    finally {
+        connected.pg.close();
+    }
+    return { src, database: parsed.source.database, facts: facts.tables };
+}
+/** `mason tables` without the run: the database's tables, each as the run's state says it against the sources file
+ *  (sources.ts catalogTable). */
+async function databaseTables(p) {
+    const c = await readCatalog(p);
+    if ("message" in c)
+        return c;
+    return { database: c.database, name: c.src.name, file: c.src.file, tables: c.facts.map((t) => catalogTable(t, c.src.tables.find((e) => e.table === t.source))) };
+}
+/**
+ * MASON DOWN, `mason add` AND `mason remove` EDIT THE FILE THEMSELVES (the file is the list: `mason init && mason add
+ * orders && mason start` is a natural order, and `mason init demo` already writes entries before any run) — through
+ * the same check-and-write the run's command server calls (src/cli/source-edit.ts), against the catalog the command
+ * reads itself (`readCatalog`), so a refusal is worded alike from both. A run alive and silent (hung) still holds the
+ * file: refused, with mason stop as the way out, as is a run that came up since the command looked. Null once the
+ * failure is said.
+ */
+async function withoutRun(cmd, p, json) {
+    const st = await runState(p);
+    // a hung run is Mason running and not answering: FAILURE_CODES' unreachable
+    if (st.kind === "hung") {
+        failed(cmd, { ...asFailure(notAnswering(p, st.run)), code: "unreachable" }, { json });
+        return null;
+    }
+    if (st.kind === "up") {
+        failed(cmd, { message: `Mason started for ${p.config.name} while mason ${cmd} ran`, code: "refused", fix: `run mason ${cmd} again: it asks the run, which copies at once` }, { json });
+        return null;
+    }
+    const c = await readCatalog(p);
+    if ("message" in c) {
+        failed(cmd, c, { json });
+        return null;
+    }
+    return { db: { tables: c.facts, database: c.database, replication: changesOf(null, p.config.changes) === "replication" },
+        tables: c.facts.map((t) => catalogTable(t, c.src.tables.find((e) => e.table === t.source))), file: c.src.file,
+        edit: () => sourceToEdit(p.folder, p.root, () => projectSource(p)) };
+}
+function edited(f) {
+    try {
+        return { ok: f() };
+    }
+    catch (e) {
+        // a refusal is the edit's answer, said as the run's is; anything else is a bug, and goes on up
+        if (e instanceof Refusal)
+            return { status: e.status, error: e.message };
+        throw e;
+    }
+}
+/** The run's command server's answer, as an edit's (`Edited`): what `/api/pick` or `/api/remove` answered. */
+async function viaRun(run, route, body) {
+    const r = await callRun(run, "POST", route, body);
+    return r.status === 200 ? { ok: r.body } : { status: r.status, error: String(r.body.error) };
+}
+// ------------------------------------------------------------------ mason add
+const ADD_USAGE = `usage: mason add <table>… [--columns <column>,…] [--include <column>,…] [--key <column>,…] [--json]
+
+  Copies tables into Mason: each one is added to the project's sources file (mason/sources/<name>.yml), under tables:
+    mason add orders                                    every column:            orders: {}
+    mason add orders --columns id,status,total          those columns:           orders: { columns: [id, status, total] }
+    mason add orders customers                          several tables, every column of each
+    mason add users --include password_hash             every column, and one that looks like a secret
+    mason add event_log --key tenant_id,id              a table with no primary key, copied by those columns
+  A table is its name (orders) or schema.table (billing.invoices). Its primary key is always copied. The rest of the
+  file — your comments, other tables — stays as it was.
+
+  A column that looks like a secret (password, token, api_key, private_key, …) is left out unless named, and said:
+  it is written as exclude: [password_hash], since anyone with a user's password can read every copied column. Name
+  one with --columns or --include to have it.
+
+  With Mason running the copy starts at once; mason wait returns when it is done and the table is served. Before
+  mason start (mason init && mason add orders && mason start) the entry is written, checked against the database as
+  the run checks it, and the copy begins at mason start. Adding a table again with other columns changes its entry,
+  and the table is copied again with them.
+
+  --columns <a,b,…>   only these columns (one table at a time: the list is that table's)
+  --include <a,b,…>   these columns as well as every other one — a column that looks like a secret, named on purpose
+  --key <a,b,…>       for a table with no primary key: the columns that tell its rows apart, which it is copied by (one
+                      table at a time; polling only: logical replication cannot apply a change by them)
+  --json              as data: { added: [{ table, entry, columns (null: every one), exclude, key, addedKey (key columns
+                      added to --columns), skippedSecrets, already (the file said so already) } or { table, error }],
+                      file (the sources file), error (when a table was not added: { code, message, why }), next };
+                      exit 1 when a table could not be added
+`;
+export const ADD = {
+    // the project, not the run: the sources file is the list, so a table is added before mason start as well as after
+    needs: "project",
+    name: "add",
+    summary: "copy tables into Mason, adding them to the sources file: mason add orders (--columns id,status: those only)",
+    usage: ADD_USAGE,
+    options: { json: { type: "boolean" }, columns: { type: "string" }, include: { type: "string" }, key: { type: "string" } },
+    json: ["added", "file", "error", "next"],
+};
+/**
+ * The tables and the columns each one's entry copies (add takes --columns, not a DSL):
+ * `["*"]` for every column, the --columns list for one table, and --include's columns on top of either; `key`, --key's
+ * list, for one table. A list names each column once; an empty one is refused.
+ */
+export function addSpecs(tables, columns, include, key) {
+    if (!tables.length)
+        return "name a table: mason add orders (mason tables lists them)";
+    const list = (flag, v) => {
+        if (v === undefined)
+            return null;
+        const names = v.split(",").map((c) => c.trim()).filter(Boolean);
+        return names.length ? [...new Set(names)] : `${flag} names no column: ${flag} id,status`;
+    };
+    const cols = list("--columns", columns), inc = list("--include", include), keys = list("--key", key);
+    if (typeof cols === "string")
+        return cols;
+    if (typeof inc === "string")
+        return inc;
+    if (typeof keys === "string")
+        return keys;
+    if (cols !== null && tables.length > 1)
+        return `--columns is one table's list, and ${tables.length} tables are named: add them one at a time (mason add ${tables[0]} --columns …)`;
+    if (keys !== null && tables.length > 1)
+        return `--key is one table's key, and ${tables.length} tables are named: add them one at a time (mason add ${tables[0]} --key …)`;
+    const chosen = [...(cols ?? ["*"]), ...(inc ?? []).filter((c) => !(cols ?? []).includes(c))];
+    return tables.map((table) => ({ table, columns: chosen, key: keys }));
+}
+export async function add(argv) {
+    const f = parseCommand(ADD, argv);
+    if (typeof f === "number")
+        return f;
+    const json = f.values.json === true;
+    const specs = addSpecs(f.positionals, f.values.columns, f.values.include, f.values.key);
+    if (typeof specs === "string")
+        return failed("add", { message: specs, code: "usage", usage: ADD_USAGE }, { json });
+    const where = await reach(ADD, json);
+    // (a state with no project never meets the need: reach said it)
+    if (where === null || where.project === null)
+        return 1;
+    if (where.state === "up") {
+        // Mason up: the run adds it (the copy starts now, and the run's own re-read never races the file's write)
+        const run = where.run;
+        return guarded("add", json, async () => {
+            const s = await readState(run);
+            return addTables({ tables: s.tables, file: s.source.file ?? null,
+                pick: (table, columns, key) => viaRun(run, "/api/pick", { table, picked: true, columns, ...(key ? { key } : {}) }),
+                next: (n) => [["mason wait", `until ${n === 1 ? "its copy finishes" : "their copies finish"} (the copy has started)`], READY_STEPS[0]] }, specs, json);
+        });
+    }
+    // Mason down: the command writes the entry itself, checked as the run checks it; the copy begins at mason start
+    const down = await withoutRun("add", where.project, json);
+    if (down === null)
+        return 1;
+    return addTables({ tables: down.tables, file: down.file,
+        pick: async (table, columns, key) => edited(() => addEntry(down.edit(), down.db, table, columns, key)),
+        next: () => [["mason start", "Mason in the background, for this project: the copy of every added table begins"],
+            ["mason wait", "then, until every added table is copied and served"]] }, specs, json);
+}
+/** `mason add`'s checklist and answer, the same whichever way the tables are added (`AddWay`). */
+async function addTables(way, specs, json) {
+    const results = [];
+    const added = [];
+    let file = way.file;
+    // the tables that could not be added, each with its reason and code: the command's failure, in the failure shape
+    const refused = [];
+    // A CHECKLIST, a line per table (it reads best as a list of completed actions): a spinner
+    // while it is added, ✔ with what was written, its notes under it; ✘ with the reason when it could not be
+    const st = styleOut();
+    const steps = stepRenderer({ line: out, live: !json && process.stdout.isTTY ? { write: (t) => { process.stdout.write(t); } } : null, style: st });
+    const note = (text) => { if (!json)
+        steps.print(st.dim(`    ${wrap(text, st.width, 4)}`)); };
+    const shown = (p) => { const rel = path.relative(process.cwd(), p); return rel.startsWith("..") ? p : rel; };
+    for (const spec of specs) {
+        const t = findTable(way.tables, spec.table);
+        // a table the database lacks is a failed line of the checklist, its reason under it, like a table Mason refused
+        if (!("table" in t)) {
+            refused.push({ table: spec.table, message: t.message, code: t.code });
+            results.push({ table: spec.table, error: t.message });
+            if (!json) {
+                steps.begin(`Adding ${spec.table}`);
+                steps.fail(`Adding ${spec.table}`);
+                note(`${t.message}${t.fix ? `: ${t.fix}` : ""}${t.next?.length ? ` (${t.next[0][0]})` : ""}`);
+            }
+            continue;
+        }
+        if (!json)
+            steps.begin(`Adding ${t.table}`);
+        const r = await way.pick(t.table, spec.columns, spec.key);
+        if (!("ok" in r)) {
+            refused.push({ table: t.table, message: r.error, code: r.status === 404 ? "not_found" : "refused" });
+            results.push({ table: t.table, error: r.error });
+            if (!json) {
+                steps.fail(`Adding ${t.table}`);
+                note(r.error);
+            }
+            continue;
+        }
+        const b = r.ok;
+        file = b.file;
+        results.push({ table: b.table, entry: b.entry, columns: b.columns, exclude: b.exclude, key: b.key, addedKey: b.addedKey, skippedSecrets: b.skippedSecrets, already: b.already });
+        added.push(b.table);
+        if (json)
+            continue;
+        const l = addedLines(b, shown(b.file));
+        steps.done(l.line);
+        for (const x of l.notes)
+            note(x);
+    }
+    const next = added.length ? way.next(added.length) : [];
+    if (refused.length) {
+        // A TABLE NOT ADDED IS THE COMMAND'S FAILURE, in the shape every failure has (found by the CLI session test of the private repo:
+        // exit 1 with no error, and nothing on stderr): what is wrong, each table's reason, and next — the added ones' too
+        const f = {
+            message: specs.length === 1 ? `${refused[0].table} was not added` : `${refused.length} of ${specs.length} tables were not added: ${refused.map((x) => x.table).join(", ")}`,
+            code: refused.every((x) => x.code === "not_found") ? "not_found" : refused.every((x) => x.code === "usage") ? "usage" : "refused",
+            why: refused.map((x) => specs.length === 1 ? x.message : `${x.table}: ${x.message}`).join("; "),
+            next: [...next, ["mason tables", "the database's tables, as this user reads them"]],
+        };
+        if (json) {
+            out(jsonText(ADD, { added: results, file, error: errorJson(f) }, f.next));
+            return 1;
+        }
+        return failed("add", f, { json: false });
+    }
+    if (json)
+        out(jsonText(ADD, { added: results, file }, next));
+    else
+        out(endText({ next }, st));
+    return 0;
+}
+/** What `mason add` prints for a table added: its line (✔ …), then its notes under it (the web page says the same,
+ *  src/web/app.js; tests/web-page.test.ts holds the two equal). `file` is the sources file as the reader is shown it. */
+export function addedLines(b, file) {
+    const copies = b.columns === null ? (b.exclude.length ? `every column but ${b.exclude.join(", ")}` : "every column") : b.columns.join(", ");
+    const s = b.skippedSecrets;
+    return { line: `Added ${b.table} to ${file}: ${copies}${b.key ? `, copied by ${b.key.join(", ")}` : ""}${b.already ? " (already so)" : ""}`, notes: [
+            ...(b.addedKey.length ? [`key added: ${b.addedKey.join(", ")} (a copy always has its key)`] : []),
+            // a secret is readable by anyone with a user's password: left out, and said, with the way to include one
+            ...(s.length ? [`left out ${s.join(", ")}: ${s.length === 1 ? "it looks" : "they look"} like ${s.length === 1 ? "a secret" : "secrets"}, ` +
+                    `which anyone with a user's password could read (--include ${s[0]} adds it)`] : []),
+        ] };
+}
+// ------------------------------------------------------------------ mason remove
+const REMOVE_USAGE = `usage: mason remove <table>… [--json]
+
+  Takes tables out of the project: each one's entry in the sources file (mason/sources/<name>.yml) is removed, the
+  rest of the file as it was. With Mason running it stops copying the table and drops its copy at once; with Mason
+  stopped, a copy an earlier run made is dropped at the next mason start.
+
+    mason remove customers
+    mason remove customers billing.invoices     several at once
+
+  --json   as data: { removed (the tables, schema.table), file (the sources file), next }
+`;
+export const REMOVE = {
+    // the project, not the run, as mason add
+    needs: "project",
+    name: "remove",
+    summary: "take tables out of the sources file: mason remove customers (its copy is dropped)",
+    usage: REMOVE_USAGE,
+    options: { json: { type: "boolean" } },
+    json: ["removed", "file", "next"],
+};
+export async function remove(argv) {
+    const f = parseCommand(REMOVE, argv);
+    if (typeof f === "number")
+        return f;
+    const json = f.values.json === true;
+    const names = [...new Set(f.positionals)];
+    if (!names.length)
+        return failed("remove", { message: "name a table: mason remove customers (mason status lists the added ones)", code: "usage", usage: REMOVE_USAGE }, { json });
+    const where = await reach(REMOVE, json);
+    // (a state with no project never meets the need: reach said it)
+    if (where === null || where.project === null)
+        return 1;
+    if (where.state === "up") {
+        // Mason up: the run removes it and drops the copy at once (src/cli/run-server.ts removeTables)
+        const run = where.run;
+        return guarded("remove", json, async () => removedAnswer(await viaRun(run, "/api/remove", { tables: names }), names, true, json));
+    }
+    // Mason down: the command cuts the entries itself, checked as the run checks them (src/cli/source-edit.ts removeEntries)
+    const down = await withoutRun("remove", where.project, json);
+    if (down === null)
+        return 1;
+    return removedAnswer(edited(() => removeEntries(down.edit(), down.db, names)), names, false, json);
+}
+/** `mason remove`'s answer, the same whichever way the entries were cut; `running`: Mason is up, and dropped the copies. */
+function removedAnswer(r, names, running, json) {
+    if (!("ok" in r)) {
+        return failed("remove", { message: `${names.join(", ")} ${names.length === 1 ? "was" : "were"} not removed`, code: r.status === 404 ? "not_found" : r.status === 400 ? "usage" : "refused", why: r.error,
+            next: [["mason status", "the tables added"]] }, { json });
+    }
+    const b = r.ok;
+    const next = running ? [["mason status", "the tables left"]]
+        : [["mason start", "Mason in the background, for this project: it copies the tables left"], ["mason status", "the tables left"]];
+    if (json) {
+        out(jsonText(REMOVE, { removed: b.removed, file: b.file }, next));
+        return 0;
+    }
+    const rel = path.relative(process.cwd(), b.file);
+    out(reportText({ ...removedReport(b.removed, rel.startsWith("..") ? b.file : rel, { running }), next }, styleOut()));
+    return 0;
+}
+/** What `mason remove` prints for the tables removed, `file` the sources file as the reader is shown it (the web page
+ *  says the same, src/web/app.js; tests/web-page.test.ts holds the two equal). */
+export function removedReport(removed, file, o = {}) {
+    const one = removed.length === 1;
+    return { headline: `Removed ${removed.join(", ")}`, details: [["from", file]],
+        // Mason down (the web page always has a run): a copy an earlier run made is dropped by the next start's sync
+        tips: [o.running === false ? `a copy an earlier run made of ${one ? "it" : "them"} is dropped at the next mason start`
+                : `Mason stops copying ${one ? "it" : "them"} and drops ${one ? "its copy" : "their copies"}`] };
+}
+// ------------------------------------------------------------------ mason wait
+/** An added table as mason wait --json says it: its copy, its error, and how it is kept current, as the run's state has
+ *  them (mason status --json's own fields, never derived again here) */
+export function waitTable(t) {
+    return { table: t.table, copy: t.copy, error: t.error, ...(t.unsynced ? { unsynced: t.unsynced } : {}), ...(t.kept ? { kept: t.kept } : {}) };
+}
+const WAIT_USAGE = `usage: mason wait [--timeout <seconds>] [--json]
+
+  Waits until every added table is copied and served, showing every added table on a line of its own: 100% for the
+  finished (in the order they finished), a bar for the ones still copying, at the bottom. Run it after mason add.
+
+    mason add orders && mason wait
+    mason wait --timeout 3600     a large table: wait up to an hour
+
+  --timeout <seconds>   how long to wait (default 600); the copy goes on after, and mason wait again picks it up
+  --json                as data, once it ends: { ready, failed, waiting, timedOut, tables: [{ table, copy, error,
+                        unsynced, kept }] (copy: { phase, rowsCopied, progress: the chunks done, reading and for how
+                        long, the rate, the seconds left, while its chunks are read }; unsynced: { reason, asOf }
+                        and kept as mason status --json says them — kept's pending, when it applies, says why the
+                        copy is not kept current now, its phase included),
+                        stream (replication mode: where the stream is, as mason status --json says it), error (on a
+                        failure or a timeout: { code, message, next }), next }
+
+  Exit status: 0 ready; 1 a copy failed (printed, with what to do; Mason tries it again by itself); 124 timed out.
+`;
+export const WAIT = {
+    needs: "run",
+    name: "wait",
+    summary: "wait until every added table is copied and served (exit 0; 1 on a failure, with why)",
+    usage: WAIT_USAGE,
+    options: { json: { type: "boolean" }, timeout: { type: "string" } },
+    json: ["ready", "failed", "waiting", "timedOut", "tables", "stream", "error", "next"],
+};
+export async function wait(argv) {
+    const f = parseCommand(WAIT, argv);
+    if (typeof f === "number")
+        return f;
+    const json = f.values.json === true;
+    const timeout = f.values.timeout === undefined ? 600 : Number(f.values.timeout);
+    if (!Number.isFinite(timeout) || timeout <= 0)
+        return failed("wait", { message: `--timeout is a number of seconds, not ${JSON.stringify(f.values.timeout)}`, code: "usage" }, { json });
+    const run = await runOr(WAIT, json);
+    if (!run)
+        return 1;
+    return guarded("wait", json, async () => {
+        const until = Date.now() + timeout * 1000;
+        // a terminal gets the block — every added table on its line (tableLines), then the stream — redrawn in place;
+        // anything else (a coding agent's shell, a log) the block when what is under way changes, and every 30 s, so a
+        // long copy neither floods it nor goes quiet. Each line ends in a newline, so whatever is printed next (Ready, a
+        // failure, a run that stops mid-wait) starts on a line of its own.
+        const live = process.stderr.isTTY === true && !json;
+        let said = "", saidAt = 0, drawn = 0;
+        const fit = (l) => { const w = (process.stderr.columns ?? 120) - 3; return l.length > w ? `${l.slice(0, w - 1)}…` : l; };
+        const show = (lines, next = []) => {
+            if (json || !lines.length)
+                return;
+            if (live) {
+                // back to the block's first line, each line rewritten and cleared to its end, anything left below cleared; under
+                // it, while tables are still at work, what can be run already (the Next section at the bottom while it works,
+                // so the tables already complete can be queried) — wrapped at the width by nextBlock itself
+                const below = next.length ? nextBlock(next, styleErr()).split("\n") : [];
+                process.stderr.write(`${drawn ? `\x1b[${drawn}F` : ""}${lines.map((l) => `\x1b[2K  ${paintBar(fit(l), styleErr())}\n`).join("")}` +
+                    `${below.map((l) => `\x1b[2K${l}\n`).join("")}\x1b[J`);
+                drawn = lines.length + below.reduce((k, l) => k + 1 + (l.match(/\n/g)?.length ?? 0), 0);
+                return;
+            }
+            // the same work, other numbers (a stream's positions included: they move with every change)
+            const what = lines.join("\n").replace(/[█░]+/g, "").replace(/\b[0-9A-F]+\/[0-9A-F]+\b/g, "#").replace(/[\d,.]+(%| rows\/s| s| min| h)?/g, "#");
+            if (what !== said || Date.now() - saidAt >= 30_000) {
+                err(lines.map((l) => `  ${l}`).join("\n"));
+                said = what;
+                saidAt = Date.now();
+            }
+        };
+        for (;;) {
+            // a copy's rate and progress are the run's own, measured per chunk (src/duck/sync.ts copyProgressNow)
+            const s = await readState(run);
+            const r = readiness(s);
+            const done = r.ready || r.failed.length > 0;
+            const picked = s.tables.filter((t) => t.added);
+            // the outcome and what to run next, the same for a person and under --json
+            const readyNext = picked.length ? [...READY_STEPS] : addSteps(s.tables);
+            const failure = r.failed.length
+                ? { message: r.failed.length === 1 ? r.failed[0] : `${r.failed.length} copies failed`, code: "failed", why: r.failed.length === 1 ? undefined : r.failed.join("\n"),
+                    fix: "Mason tries a failed copy again by itself; mason logs says why it failed and when it tries next",
+                    next: [["mason logs", "the detail of each failure"], ["mason status", "the rest of the project"]] }
+                : !done && Date.now() >= until
+                    ? { message: `not ready after ${timeout} s`, code: "timeout", why: r.waiting.join("\n"), fix: "nothing stopped: the copies go on",
+                        next: [["mason wait", "keep waiting (--timeout <seconds> for longer)"], ["mason status", "what Mason is doing"]] }
+                    : null;
+            if (json && (done || failure)) {
+                out(jsonText(WAIT, { ...r, timedOut: !done, tables: picked.map(waitTable),
+                    ...(s.stream ? { stream: s.stream } : {}), ...(failure ? { error: errorJson(failure) } : {}) }, failure ? failure.next ?? [] : readyNext));
+            }
+            // the block as it ends, too: every table at 100% beside Ready (when the last change was not printed yet)
+            // while at work: a table already copied can be queried now; the final Next is Ready's, printed once below
+            const copied = picked.some((t) => t.copy?.phase === "done");
+            const meanwhile = done ? [] : [...(copied ? [["mason user add <name>", "a user for your BI tool or psql: a copied table can be queried now"]] : []), ["mason status", "what Mason is doing"]];
+            show([...tableLines(s), ...(s.stream ? ["Stream:", ...streamLines(s.stream).map((l) => `  ${l}`)] : [])], meanwhile); // done: the meanwhile Next is dropped
+            if (r.ready) {
+                const head = !picked.length ? "Nothing to wait for: no table added yet." : "Ready: every added table is copied and served.";
+                if (!json)
+                    out(withEnd(picked.length ? styleOut().green(head) : head, { next: readyNext }));
+                return 0;
+            }
+            if (failure)
+                return json ? (failure.code === "timeout" ? 124 : 1) : failed("wait", failure, { json: false });
+            await new Promise((res) => setTimeout(res, 1000));
+        }
+    });
+}
+// ------------------------------------------------------------------ mason logs
+const LOGS_USAGE = `usage: mason logs [-n <lines>] [-f] [--start] [--requests [--failed]] [--json]
+
+  The last lines of Mason's log: every copy, poll and statement it ran, warnings and errors with their reasons —
+  running or not. With --requests, the run's request log instead: every statement a tool sent the
+  Postgres API that Mason answered, and every one it refused or failed, a line each, newest last — when, the outcome
+  and SQLSTATE, how long, the rows sent, the client's application_name (and the mason user's name), the statement and
+  the error's first line. It is kept MASON_REQUEST_LOG_DAYS days (default 7) in the run's copy, and read through the
+  running Mason.
+
+    mason logs
+    mason logs -f                 keep printing new lines as Mason works, until Ctrl-C
+    mason logs -n 200 --start     what mason start printed: its steps, and the warnings and errors since
+    mason logs --requests --failed -n 20    the last 20 statements refused or failed
+
+  -n, --lines <n>  how many lines, or with --requests how many requests (default 40)
+  -f, --follow     keep printing new lines until Ctrl-C
+  --start          mason start's own terminal instead (its steps, then only the warnings and errors)
+  --requests       the Postgres API's requests, from the run's request log (Mason must be running)
+  --failed         with --requests: only the refused and failed ones
+  --json           as data: { lines } (the log's), or with --requests { requests: [{ requestId, startedAt, session,
+                   applicationName, tokenName, user (the mason user), method, outcome (ok, refused, failed), sqlstate, message, detail, hint,
+                   rows, durationMs, query, queryTruncated }], keptDays }; next
+`;
+export const LOGS = {
+    needs: "project",
+    name: "logs",
+    summary: "Mason's log: every copy, poll and statement (-f to follow it; --requests, every statement the Postgres API met)",
+    usage: LOGS_USAGE,
+    options: { lines: { type: "string", short: "n" }, follow: { type: "boolean", short: "f" }, start: { type: "boolean" },
+        requests: { type: "boolean" }, failed: { type: "boolean" }, json: { type: "boolean" } },
+    json: ["lines", "requests", "keptDays", "next"],
+};
+/**
+ * One request of the run's ledger on one line (src/duck/requests.ts): when, the outcome and SQLSTATE, how long,
+ * the rows sent, who (application_name, a mason user's name), the statement on one line and the error's first line.
+ */
+export function requestLine(r, st) {
+    const word = r.outcome === "ok" ? "ok" : `${r.outcome} ${r.sqlstate ?? ""}`;
+    const paint = r.outcome === "ok" ? st.green : r.outcome === "failed" ? st.red : st.yellow;
+    const rows = r.rows === null ? "" : `${n(r.rows)} row${r.rows === 1 ? "" : "s"}`;
+    const who = `${r.applicationName || "(no application_name)"}${r.tokenName ? ` (token ${r.tokenName})` : ""}${r.user ? ` (user ${r.user})` : ""}`;
+    return `${r.startedAt.slice(0, 19).replace("T", " ")}  ${paint(word.padEnd(13))}  ${`${n(r.durationMs)} ms`.padStart(9)}  ${rows.padStart(11)}  ${who}  ` +
+        `${oneLine(r.query, 120) || "(no statement)"}${r.message ? ` — ${firstLine(r.message)}` : ""}`;
+}
+/** mason logs --requests: the run's ledger through its command server (one process holds the copy's file) */
+async function requestLogs(limit, failedOnly, json) {
+    const r0 = await theRun(process.cwd());
+    if ("problem" in r0)
+        return failed("logs", r0, { json });
+    return guarded("logs", json, async () => {
+        const reply = await callRun(r0.run, "GET", `/api/requests?limit=${limit}${failedOnly ? "&failed=1" : ""}`);
+        if (reply.status !== 200) {
+            return failed("logs", { message: String(reply.body.error ?? `the run answered ${reply.status}`), code: reply.status === 409 ? "refused" : "failed",
+                next: [["mason status", "the slow and refused queries of the last day"], ["mason logs", "Mason's log"]] }, { json });
+        }
+        const requests = reply.body.requests;
+        const keptDays = Number(reply.body.keptDays);
+        const next = failedOnly ? [["mason logs --requests", "every request, answered or not"], ["mason logs", "Mason's log, where each refusal is a line too"]]
+            : [["mason logs --requests --failed", "only the refused and failed ones"], ["mason status", "the slow and refused ones of the last day, grouped"]];
+        if (json) {
+            out(jsonText(LOGS, { requests, keptDays }, next));
+            return 0;
+        }
+        const st = styleOut();
+        if (!requests.length)
+            out(`No ${failedOnly ? "refused or failed request" : "request"} in the last ${keptDays} day${keptDays === 1 ? "" : "s"} (MASON_REQUEST_LOG_DAYS).`);
+        for (const r of requests)
+            out(requestLine(r, st));
+        out(endText({ next }, st));
+        return 0;
+    });
+}
+export async function logs(argv) {
+    const f = parseCommand(LOGS, argv);
+    if (typeof f === "number")
+        return f;
+    const json = f.values.json === true;
+    const lines = f.values.lines === undefined ? 40 : Number(f.values.lines);
+    if (!Number.isInteger(lines) || lines < 0)
+        return failed("logs", { message: `-n (--lines) is a number of lines, not ${JSON.stringify(f.values.lines)}`, code: "usage" }, { json });
+    if (f.values.failed && !f.values.requests)
+        return failed("logs", { message: "--failed is a filter of --requests", code: "usage", fix: "mason logs --requests --failed" }, { json });
+    if (f.values.requests && (f.values.start || f.values.follow))
+        return failed("logs", { message: `--requests lists the request log; ${f.values.start ? "--start" : "-f"} is the log file's`, code: "usage", fix: "mason logs --requests, or mason logs " + (f.values.start ? "--start" : "-f") }, { json });
+    if (json && f.values.follow)
+        return failed("logs", { message: "-f prints lines as they come, and --json is one answer", code: "usage", fix: "mason logs --json, or mason logs -f" }, { json });
+    if (f.values.requests) {
+        if (lines < 1)
+            return failed("logs", { message: "-n with --requests is a number of requests, 1 or more", code: "usage" }, { json });
+        return requestLogs(lines, f.values.failed === true, json);
+    }
+    // a stopped run's log is still worth reading: the project's, running or not
+    const t = theProject(process.cwd());
+    if ("problem" in t)
+        return failed("logs", t, { json });
+    // the run's log by default (mason logs once showed no actual logs: it showed
+    // mason start's terminal, which after the start carries only warnings and errors)
+    const file = path.join(t.project.dir, f.values.start ? "dev.log" : "mason.log");
+    if (!fs.existsSync(file)) {
+        return failed("logs", { message: `${file} does not exist yet`, code: "nothing_yet", why: `Mason has not run for ${t.project.config.name}`, next: [["mason start", "start it, in the background"]] }, { json });
+    }
+    const text = fs.readFileSync(file, "utf8");
+    const all = text.split("\n");
+    if (all[all.length - 1] === "")
+        all.pop();
+    if (json) {
+        out(jsonText(LOGS, { lines: all.slice(Math.max(0, all.length - lines)) }, [["mason logs --requests", "every statement the Postgres API met"]]));
+        return 0;
+    }
+    for (const l of all.slice(Math.max(0, all.length - lines)))
+        out(l);
+    if (!f.values.follow)
+        return 0;
+    let offset = Buffer.byteLength(text);
+    for (;;) {
+        await new Promise((res) => setTimeout(res, 500));
+        const size = fs.statSync(file).size;
+        if (size < offset)
+            offset = 0; // a new run started the file over
+        if (size === offset)
+            continue;
+        const buf = Buffer.alloc(size - offset);
+        const fd = fs.openSync(file, "r");
+        try {
+            fs.readSync(fd, buf, 0, buf.length, offset);
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        offset = size;
+        process.stdout.write(buf.toString());
+    }
+}
+// ------------------------------------------------------------------ mason stop
+const STOP_USAGE = `usage: mason stop [--json]
+
+  Stops Mason for this folder's project. The copy of your data and Mason's state stay: the next mason start resumes
+  in seconds, reading only what changed.
+
+    mason stop
+
+  mason destroy removes the copy and the state too (your files stay), to free the disk or begin again.
+
+  --json    as data: { stopped: [name], killed (a run that did not answer and ignored SIGTERM), supervisor (its pid, when one was stopped), next }
+`;
+export const STOP = {
+    needs: "project",
+    name: "stop",
+    summary: "stop Mason for this folder's project (the copy stays: the next mason start resumes)",
+    usage: STOP_USAGE,
+    options: { json: { type: "boolean" } },
+    json: ["stopped", "killed", "supervisor", "next"],
+};
+export async function stop(argv) {
+    const f = parseCommand(STOP, argv);
+    if (typeof f === "number")
+        return f;
+    const json = f.values.json === true;
+    const next = [["mason start", "resume, in seconds (in the project's folder)"], ["mason destroy", "remove its copy of the data and its state; your files stay"]];
+    const r = await theRun(process.cwd());
+    if ("problem" in r && r.hung !== undefined) {
+        // A RUN THAT DOES NOT ANSWER (src/cli/runs.ts "alive and silent"): its supervisor first, so it is not started again
+        // over the kill, then SIGTERM and, after the grace, SIGKILL; the run could not record that it stopped, so stop does
+        const hung = r.hung;
+        if (!json)
+            err(styleErr().dim(`  Mason for ${hung.name} (pid ${hung.pid}) does not answer: stopping it (SIGKILL after ${END_GRACE_MS / 1000} s) …`));
+        // the supervisor is told BEFORE the run dies (it waits for the run, so it cannot leave yet): the run's exit is then a
+        // stop to it, never a crash to record and restart from (found on the test server)
+        const sup = signalSupervisor(r.project.dir);
+        const { killed } = await endRun(hung.pid);
+        if (sup !== null)
+            await supervisorGone(r.project.dir, sup);
+        const how = killed ? `it did not answer its commands and ignored SIGTERM for ${END_GRACE_MS / 1000} s, so it was killed` : "it did not answer its commands and left on SIGTERM";
+        const recorded = readProject(hung.root);
+        // what the run could not record: that it stopped, and how (mason status shows it once it is gone)
+        if (isProject(recorded)) {
+            recorded.config.running = null;
+            recorded.config.lastStop = { at: new Date().toISOString(), how: `${killed ? "killed by mason stop (SIGKILL)" : "stopped by mason stop (SIGTERM)"}: ${how.replace(/, so it was killed$/, "")}` };
+            writeConfig(recorded.dir, recorded.config);
+        }
+        if (json) {
+            out(jsonText(STOP, { stopped: [hung.name], killed, supervisor: sup }, next));
+            return 0;
+        }
+        out(reportText({ headline: `Stopped ${hung.name}`, details: [["how", `${how}${sup === null ? "" : `; its supervisor (pid ${sup}) will not start it again`}`],
+                ["kept", "its copy of the data and its state (DuckDB recovers from its write-ahead log at the next start)"], ["log", "mason logs shows what it was doing"]] }));
+        out(endText({ next }));
+        return 0;
+    }
+    if ("problem" in r) {
+        // not running is what stop wants: said, exit 0; no project here is a wrong place, exit 1
+        if (r.project) {
+            // a run that crashed is dead while its supervisor waits to start it again: the supervisor is what stops then
+            const sup = await stopSupervisor(r.project.dir);
+            if (sup !== null) {
+                if (json)
+                    out(jsonText(STOP, { stopped: [r.project.config.name] }, next));
+                else
+                    out(withEnd(`Stopped Mason for ${r.project.config.name}: it was between restarts, and its supervisor (pid ${sup}) will not start it again.`, { next }));
+                return 0;
+            }
+            if (json)
+                out(jsonText(STOP, { stopped: [] }, next.slice(0, 1)));
+            else
+                out(withEnd(`Mason is not running for ${r.project.config.name}.`, { next: next.slice(0, 1) }));
+            return 0;
+        }
+        return failed("stop", r, { json });
+    }
+    const run = r.run;
+    process.kill(run.pid, "SIGTERM");
+    if (!json)
+        err(styleErr().dim(`  stopping Mason for ${run.name} (pid ${run.pid}) …`));
+    // it closes the Postgres API, ends the poll or the stream, and closes its copy
+    const until = Date.now() + 90_000;
+    while (alive(run.pid) && Date.now() < until)
+        await new Promise((res) => setTimeout(res, 250));
+    if (alive(run.pid))
+        return failed("stop", { message: `Mason for ${run.name} (pid ${run.pid}) is still running after 90 s`, code: "failed", next: [["mason logs", "what it is doing"]] }, { json });
+    // a replication slot outlives the run that reads it, and holds the database's WAL meanwhile: said where it is left
+    const recorded = readProject(run.root);
+    const replicating = isProject(recorded) && recorded.config.changes === "replication";
+    const named = isProject(recorded) ? recorded.config.publication ?? null : null;
+    // a demo project's database (src/cli/demo.ts) stays too, as the copy does: said where a person reads the stop
+    const demo = isProject(recorded) && recorded.config.demo === true;
+    if (json) {
+        out(jsonText(STOP, { stopped: [run.name] }, next));
+        return 0;
+    }
+    out(reportText({ headline: `Stopped ${run.name}`, details: [["kept", `its copy of the data and its state${demo ? ` and the demo database (${STATE_DIR}/${DEMO_DIR})` : ""}`],
+            ...(replicating ? [["slot", `its replication slot stays on the database, holding WAL until the next mason start (mason destroy drops it)`],
+                ["publication", named ? `${named}, its owner's: read as it is, never altered (mason destroy leaves it)` : "Mason's own (mason destroy drops it)"]] : [])] }));
+    out(endText({ next }));
+    return 0;
+}