@mason-data/cli 0.7.0 → 0.9.0

package/dist/src/cli/commands.js

@@ -8,8 +8,8 @@
  *   mason tables [<table>…] [--json]      the database's tables, their columns, keys and foreign keys
  *   mason add <table>… [--columns …]      copy tables into Mason: every column, or the ones --columns names
  *   mason remove <table>…                 take tables out of the sources file; their copies are dropped
- *   mason wait [--timeout <s>] [--json]   until every added table is copied: 0 ready, 1 a copy failed (said), 124 timed out
- *   mason logs [-n <lines>] [-f] [--start] [--requests]   the run's log; --start, the start's terminal; --requests, its request log
+ *   mason wait [--timeout <s>] [--json]   until every added table is synced: 0 ready, 1 a copy failed (said), 124 timed out
+ *   mason logs [-n <lines>] [-f] [--start] [--requests] [--events]   the run's log; --start, the start's terminal; --requests, its request log; --events, the sync's events
  *   mason stop                            stop Mason for this folder's project (the copy stays)
  */
 import * as fs from "node:fs";
@@ -18,20 +18,22 @@ import { asFailure, endText, errorJson, failed, jsonText, nextBlock, parseComman
 import { err as styleErr, out as styleOut, stepRenderer, wrap } from "./style.js";
 import { alive, endRun, END_GRACE_MS, notAnswering, runState, theRun } from "./runs.js";
 import { version } from "./version.js";
-import { readRestarts, signalSupervisor, stopSupervisor, supervisorGone } from "./supervise.js";
-import { DEMO_DIR, DUCK_FILE, STATE_DIR, isProject, projectSource, readProject, theProject, writeConfig } from "./project.js";
+import { restartsFact, signalSupervisor, stopSupervisor, supervisorGone } from "./supervise.js";
+import { DEMO_DIR, DUCK_FILE, STATE_DIR, databaseMoved, isProject, projectDatabase, projectSource, projectWriteRefusal, readProject, theProject, writeConfig } from "./project.js";
 import { callRun, RunUnreachable } from "./control.js";
-import { withPlaceholders, postgresLink } from "./pg-url.js";
+import { withPlaceholders, postgresFacts, postgresLink } from "./pg-url.js";
 import { listenerText } from "./pg-tls.js";
-import { SLOW_MS } from "./run-server.js";
+import { entriesOfLines, logLineText } from "../lib/log-buffer.js";
+import { LogReader, logPath } from "../lib/log-read.js";
 import { catalogTable, entryName, looksSecret, tableNameProblem } from "./sources.js";
 import { addEntry, Refusal, removeEntries, sourceToEdit } from "./source-edit.js";
-import { changesOf } from "./replication-mode.js";
 import { connectSource, maskedUrl, parseSource, readSourceFacts } from "./preflight.js";
 import { reach } from "./state.js";
-import { copyingText, copyProgress, duration, readiness } from "./readiness.js";
+import { copyingText, copyProgress, duration, generatedReadiness, msText, readiness, readinessWord } from "./readiness.js";
 import { pathText } from "../duck/kept-route.js";
+import { DEFAULT_REQUEST_LIMIT, eventLimit, MAX_SEARCH, SLOW_MS, requestFilter, requestFilterParams } from "./request-filter.js";
 import { countsText } from "../duck/stream.js";
+import { agoText, BIG_TABLE_ROWS, parseSync, syncText } from "../lib/table-sync.js";
 const out = (m) => { process.stdout.write(`${m}\n`); };
 const err = (m) => { process.stderr.write(`${m}\n`); };
 // ------------------------------------------------------------------ shared
@@ -40,8 +42,9 @@ async function runOr(spec, json) {
     const w = await reach(spec, json);
     return w !== null && "run" in w ? w.run : null;
 }
+/** The run's state with each table's columns (`?columns=1`: `mason status --json` carries them; the page polls it lean). */
 export async function readState(run) {
-    const r = await callRun(run, "GET", "/api/state");
+    const r = await callRun(run, "GET", "/api/state?columns=1");
     if (r.status !== 200)
         throw new RunUnreachable(String(r.body.error ?? `HTTP ${r.status}`));
     return r.body;
@@ -81,7 +84,7 @@ export const tableArg = entryName;
 /** What to run once every added table is copied: a user for the tool that will query it (src/cli/user.ts). */
 export const READY_STEPS = [
     ["mason user add <name>", "a user for your BI tool or psql: it prints the password and the URL to paste"],
-    ["mason status", "each table's copy, and the statements the Postgres API answered slowly or refused"],
+    ["mason status", "each synced table, and the statements the Postgres API answered slowly or refused"],
 ];
 /** What to run next over a database's tables: a table's columns, then adding it — named after a real table not yet added.
  *  `from: "tables"` is mason tables itself asking: it never points at itself. */
@@ -94,14 +97,16 @@ export function addSteps(tables, from = null) {
     return [
         ...(from === "tables" ? [] : [["mason tables", "the database's tables: rows, key, whether added"]]),
         [`mason tables ${name}`, "one table's columns"],
-        [`mason add ${name}`, "copy it into Mason: it is added to the sources file (--columns a,b,c: those only)"],
+        [`mason add ${name}`, "sync it into Mason: it is added to the sources file (--columns a,b,c: those only)"],
     ];
 }
 // ------------------------------------------------------------------ readiness (mason wait, mason status): src/cli/readiness.ts
-export { copyingText, copyProgress, duration, readiness };
-/** A table line's bar in its state's colour (on a terminal): green copied, red failed, yellow served but not kept current, cyan at work. */
+export { copyingText, copyProgress, duration, msText, readiness, readinessWord };
+/** A table line's bar in its state's colour (on a terminal): green copied, red failed, yellow served but not kept current, cyan at work
+ *  (a table whose sync is off is copied as it asked: green). */
 export function paintBar(line, s) {
-    const colour = / its copy failed: /.test(line) ? s.red : / NOT kept current /.test(line) ? s.yellow : / 100%  [\d,]+ rows · copied( · |$)/.test(line) ? s.green : s.cyan;
+    const colour = / its first sync failed: | NOT kept current, its sync failed /.test(line) ? s.red : / NOT kept current | (—|·) behind by /.test(line) ? s.yellow
+        : / 100%  [\d,]+ rows · synced( · |$)/.test(line) ? s.green : s.cyan;
     return line.replace(/(█+)(░*)|(░+)/, (_m, full, empty, none) => full !== undefined ? `${colour(full)}${s.dim(empty ?? "")}` : s.dim(none ?? ""));
 }
 /** The width of a table's progress bar, in characters. */
@@ -112,37 +117,34 @@ const bar = (fraction) => { const full = Math.round(Math.max(0, Math.min(1, frac
  * b; it shows a line for each table, 100% for those up to date and a progress bar for those still at work, in order of
  * last processed, so the ones at work are at the bottom): its bar, its percent and what it is doing. The finished
  * first, in the order they finished (`copy.updatedAt`: a finished copy's state is written once, when it finishes), then
- * the failed, the copying and the waiting.
+ * the failed, the copying and the waiting. A copied table says how it is kept current and how old its copy is
+ * (`keptAge`): a copy's age is never hidden.
  */
-export function tableLines(s) {
+export function tableLines(s, now = Date.now()) {
     const picked = s.tables.filter((t) => t.added);
     // 0 done, 1 failed, 2 copying, 3 waiting for its copy
     const rank = (t) => t.error ? 1 : t.copy?.phase === "copying" ? 2 : !t.copy ? 3 : 0;
     const rows = picked.map((t) => {
         const r = rank(t);
         let fraction, what;
-        // a table over the poll's row limit is served as copied, and said so on its line (src/duck/sync.ts POLL_ROW_LIMIT)
-        if (r === 0 && t.unsynced) {
+        if (r === 0) {
             fraction = 1;
-            what = `${n(t.copy?.rowsCopied ?? 0)} rows · copied, NOT kept current (${t.unsynced.reason}${t.unsynced.asOf ? `; as of ${t.unsynced.asOf.slice(0, 16).replace("T", " ")} UTC` : ""}) — mason sync ${tableArg(t.table)}, or mason start --replication`;
-        }
-        else if (r === 0) {
-            fraction = 1;
-            what = `${n(t.copy?.rowsCopied ?? 0)} rows · copied${t.copy?.retired ? ` · ${t.copy.retired}` : ""}`;
+            const age = keptWords(t, now);
+            what = `${n(t.copy?.rowsCopied ?? 0)} rows · synced${t.copy?.retired ? ` · ${t.copy.retired}` : ""}${age ? ` · ${age}` : ""}`;
         }
         else if (r === 1) {
             fraction = 1;
-            what = `its copy failed: ${firstLine(t.error)}`;
+            what = t.copy?.phase === "done" ? copiedFailedText(t, now) : `its first sync failed: ${firstLine(t.error)}`;
         }
         else if (r === 2) {
             const c = copyingText(t.copy.rowsCopied, t.rows, t.copy.progress);
             fraction = c.fraction ?? 0;
             // a count says it is copying; "reading the first chunk" says so itself
-            what = /^\d/.test(c.text) ? `copying ${c.text}` : c.text;
+            what = /^\d/.test(c.text) ? `syncing ${c.text}` : c.text;
         }
         else {
             fraction = 0;
-            what = "waiting for its copy to start";
+            what = "waiting for its first sync to start";
         }
         return { t, r, at: t.copy?.updatedAt ?? "", line: `${bar(fraction)} ${`${Math.floor(fraction * 100)}%`.padStart(4)}  ${what}` };
     });
@@ -150,8 +152,61 @@ export function tableLines(s) {
     const w = Math.max(0, ...rows.map((x) => x.t.table.length));
     return rows.map((x) => `${x.t.table.padEnd(w)}  ${x.line}`);
 }
+/**
+ * HOW A COPIED TABLE IS KEPT CURRENT, AND HOW OLD ITS COPY IS, on its line (issue 33: a copy days old answers today's
+ * count(*) wrongly, and nothing else tells): `sync: off, last synced 3 days ago — mason sync orders`, `polled every
+ * 30s, last 4 s ago`, `replicated, at 0/1A2B3C4D, 2 s ago` (the stream's position, and the last moment it had
+ * everything the database wrote); a table being caught up, copied again or not streamed says why it is NOT kept current.
+ * The Stream section says the rest of the stream.
+ */
+export function keptAge(t, now = Date.now()) {
+    const k = t.kept;
+    if (k?.by === "replication") {
+        if (k.state !== "streamed")
+            return `NOT kept current (${k.syncedAt === null ? "never synced" : `last synced ${agoText(k.syncedAt, now)}`}): ${k.why ?? "it is not streamed yet"}`;
+        const at = `replicated, at ${k.position}, ${k.syncedAt === null ? "not synced yet" : agoText(k.syncedAt, now)}`;
+        // behind: `keptWords` says it, with the stream not running as its why
+        return k.notRunning === null || t.sync?.state === "behind" ? at : `${at} — NOT kept current now, the stream is not running: ${k.notRunning}`;
+    }
+    if (k?.by !== "poll")
+        return null;
+    const synced = k.syncedAt === null ? "never synced" : `last synced ${agoText(k.syncedAt, now)}`;
+    if (k.pending !== undefined)
+        return `NOT kept current (${synced}): ${k.pending}`;
+    // the line to write as well as the command: a project an older Mason polled is off after the upgrade
+    if (k.sync.mode === "off")
+        return `sync: off, ${synced} — mason sync ${tableArg(t.table)} syncs it now; sync: poll 5m on its entry polls it`;
+    return `polled every ${k.sync.every}, ${k.syncedAt === null ? "not polled yet" : `last ${agoText(k.syncedAt, now)}`}`;
+}
+/**
+ * WHAT A SERVED TABLE'S LINE SAYS AFTER `synced`: how it is kept and how old it is (`keptAge`, by the kind of its
+ * keeping), then — for EVERY kind, from the one word (`tables[].sync.state`, src/cli/readiness.ts behindOf), never a
+ * second reading of `kept` — behind by how much and why. A kind keptAge has no words for (recopy) still says behind;
+ * a why its words already say is not said twice. Null: nothing to say.
+ */
+export function keptWords(t, now = Date.now()) {
+    const age = keptAge(t, now), s = t.sync;
+    if (s?.state !== "behind" || s.behindBySeconds == null)
+        return age;
+    const why = s.behindWhy ?? "its next sync is late";
+    const by = `behind by ${duration(s.behindBySeconds)}${age !== null && age.includes(why) ? "" : `: ${why}`}`;
+    return age === null ? by : `${age} — ${by}`;
+}
+/**
+ * A SERVED TABLE WHOSE SYNC FAILED (its first sync succeeded; its poll, catch-up, stream or publication check did not:
+ * issues 100, 82): served as of its age, NOT kept current, why — how it is kept, when it says it is not kept current
+ * now (`keptAge`: a catch-up waiting out its back-off, a table the publication does not carry, with the way out), else
+ * its error's first line — never "its first sync failed".
+ */
+function copiedFailedText(t, now) {
+    const k = t.kept;
+    const reason = k?.by === "replication" ? (k.state !== "streamed" ? k.why : k.notRunning === null ? null : `the stream is not running: ${k.notRunning}`)
+        : k?.by === "poll" || k?.by === "recopy" ? k.pending ?? null : null;
+    const asOf = t.sync?.asOf ?? (t.kept && t.kept.by !== "generated" && t.kept.by !== "recopy" ? t.kept.syncedAt : null) ?? t.sync?.syncedAt ?? null;
+    return `${n(t.copy?.rowsCopied ?? 0)} rows · synced · NOT kept current, its sync failed (${asOf === null ? "never synced" : `last synced ${agoText(asOf, now)}`}): ${reason ?? firstLine(t.error)}`;
+}
 /** A span of seconds as the stream's lines say it: `0.3 s` under ten seconds, then as a wait reads (`duration`). */
-const spanText = (seconds) => seconds < 10 ? `${Math.max(0, seconds).toFixed(1)} s` : duration(seconds);
+export const spanText = (seconds) => seconds < 10 ? `${Math.max(0, seconds).toFixed(1)} s` : duration(seconds);
 /**
  * WHERE THE STREAM IS, a thing a line (the first replication run on a server showed nothing of it in 35
  * minutes): its position against the database's and the bytes between, the newest change applied and how long after
@@ -170,6 +225,7 @@ export function streamLines(st, now = Date.now()) {
         ? `the database is at ${st.database.lsn}: ${n(st.lag.bytes ?? 0)} bytes behind (read ${spanText(since(st.database.at))} ago)`
         : `the database's position could not be read: ${st.database.error.split("\n")[0]}`;
     rows.push(["position", `${st.position} · ${db}`]);
+    rows.push(["slot", slotText(st.slotWal, since)]);
     rows.push(["last change", st.lastBatch === null ? "none applied this run"
             : `committed ${spanText(since(st.lastBatch.committedAt))} ago, applied ${spanText((Date.parse(st.lastBatch.appliedAt) - Date.parse(st.lastBatch.committedAt)) / 1000)} after its commit`]);
     const total = (t) => t.applied.inserts + t.applied.updates + t.applied.deletes + t.applied.truncates;
@@ -187,12 +243,32 @@ export function streamLines(st, now = Date.now()) {
     const w = Math.max(...rows.map(([k]) => k.length));
     return rows.map(([k, v]) => `${k.padEnd(w)}  ${v}`);
 }
+/**
+ * THE WAL THE SLOT HOLDS ON THE DATABASE, in a line (`StreamStatus.slotWal`): how much, Postgres's status of it, and the cap —
+ * or, with `max_slot_wal_keep_size` unset, that nothing caps it: while nothing reads the slot it holds WAL for ever, until
+ * the database's disk fills (CLAUDE.md "Hard-won gotchas"). A read that failed is said, never a 0.
+ */
+export function slotText(w, since) {
+    if ("error" in w)
+        return `the WAL it holds could not be read: ${w.error.split("\n")[0]}`;
+    const read = `(read ${spanText(since(w.at))} ago)`;
+    if (w.walStatus === "lost")
+        return `lost: Postgres invalidated it (it held more WAL than max_slot_wal_keep_size), so Mason makes it again and catches the synced tables up by one poll ${read}`;
+    const cap = w.safeWalSizeBytes === null
+        ? "max_slot_wal_keep_size is unset, so nothing caps it: while nothing reads the slot it holds WAL for ever, until the database's disk fills (set max_slot_wal_keep_size on the database)"
+        : w.safeWalSizeBytes <= 0 ? "past max_slot_wal_keep_size: Postgres invalidates it at its next checkpoint, and Mason makes it again"
+            : `${fileSize(w.safeWalSizeBytes)} more before Postgres invalidates it (max_slot_wal_keep_size)`;
+    return `holds ${fileSize(w.walHeldBytes)} of the database's WAL${w.walStatus === null ? "" : ` (${w.walStatus})`} · ${cap} ${read}`;
+}
 // ------------------------------------------------------------------ mason status
 const STATUS_USAGE = `usage: mason status [--json]
 
   Status: running, not running, or hung — then this project's facts, one a line: its folder, its database and how
-  its changes are read, the run and its copy's file, the Postgres API and how it listens. Then each added table as
-  mason wait shows it; the statements the Postgres API answered slowly in the last day; and the ones it refused or
+  its changes are read, the run and the synced data's file and the synced tables in all (synced, rows, the last sync), the Postgres API
+  and how it listens. Then each added table as mason wait shows it, with how it is kept current and when it was last synced
+  (sync: off, last synced 3 days ago; polled every 30s, last 4 s ago); the sync's latest failures (mason logs --events
+  lists every event) and the latest statements refused, failed or cancelled (mason logs --requests --failed); the Postgres API's statements of the last day and the last week (each outcome, the completed
+  ones' average, p50 and p95 time, the rows and bytes sent); the ones it answered slowly in the last day; and the ones it refused or
   failed, each with the reason (mason logs --requests lists every one). With Mason stopped, the same rows say "not
   running", how the last run ended, and the tables are the ones the sources file names. Hung is a run that is alive and does
   not answer its commands (a statement may be holding its main thread): the same rows, and mason stop ends it (exit 1).
@@ -200,24 +276,56 @@ const STATUS_USAGE = `usage: mason status [--json]
     mason status
     mason status --json
 
-  --json   as data: { running, pid, postgres: { url, host, port, database, sslmode (require when it is TLS), listener:
+  --json   as data: { running, pid, postgres: { url, host, port, database, sslmode (require when it is TLS), shown (the URL with
+           <user>:<password> in the credentials' place), psql (its psql line), listener:
            { host (what it is bound to), tls (certificate, self-signed or null), fingerprint } }, source: { name (the
-           source's: its sources file's), file (the sources file), url, database, remote, version, standby, changes,
-           replication, demo (the demo database this run hosts) }, warnings, folder, project, tables: [{ table, rows,
-           bytes, key, added, addedColumns, copy, error, unsynced: { reason, asOf } (copied and served, not kept
-           current by the poll), kept, … }], engine: { file, bytes, pollSeconds, restarts (each time its supervisor
-           started the run again: { at, reason, upSeconds }) }, slowQueries, refusedQueries, refusedTotal (how many in
-           all), readiness (what mason wait waits on), ui (whether this run serves the web page: mason ui), next }.
-           Each table's kept is how its copy is kept current now (absent for a table the sync does not hold):
-           { by: poll, polledAt (its last copy or poll), unsynced (only when it applies: why the passes leave it as
-           copied, mason sync polls it), pending (only when it applies: why the copy is not kept current now, its
-           phase included: waiting for its copy, being copied, its copy failed, to be copied again, caught up first) }
-           or { by: recopy, copiedAt, pending (only when it applies, as the poll's) }
+           source's: its sources file's), file (the sources file), shownFile (it from the project's root), url, database, remote, version, standby, changes,
+           replication, demo (the demo database this run hosts), textOrder (what reading the database's text order left to say), sync: { default (every table's sync unless its entry
+           says its own: off, poll 30s), written (the file's top sync: says it; false: the default) } }, warnings, folder, project, tables: [{ table, rows,
+           bytes, key, added, addedColumns, copy, error (why its sync failed: its first sync, or the poll, catch-up, stream or
+           publication check keeping a synced table current; null otherwise), kept, sync: { state (synced, syncing,
+           behind: served and kept but older than its sync: promises, failed, waiting), syncedAt (when
+           it was last brought current), syncSeconds (how long that took), syncedBy (copy, poll, catch-up, stream),
+           ageSeconds (how long ago that was), asOf (the time the synced data holds the database as of: kept's syncedAt),
+           promisedSeconds (the age its sync: promises not to pass; null: sync: off promises nothing), behindBySeconds
+           (how far past it, 0 when not; null when nothing is promised), behindWhy (why, while behind; else null) }, … }], totals: { added, copied, failed, rows (the synced tables' rows),
+           syncedAt (the latest sync of any) }, engine: { file, bytes, keptDays (MASON_HISTORY_DAYS), version (the run's), startedAt,
+           uptimeSeconds, restarts (the times its supervisor started the run again: { count, last: { at, why, upSeconds }
+           or null }, or { error }) }, disk: { path (where the synced data's file is), freeBytes, copyBytes (the file),
+           projectedBytes (what the first syncs running are projected to add; null: none, or too early to say), error },
+           sessions: { open (the Postgres API's sessions logged in), byClient: [{ user ('' a token's), client (its
+           application_name), open, running }] }, share: (null, or what mason share has open) { port, fingerprint, sessions,
+           refusedLogins, droppedConnections, shares: [{ user, from (command: mason share; page: the web page), role, reads, openedAt, via, host, port, endsAt, state }] }, shareEnded: (null, or the last share that ended) { user, from, why, at }, queries: { keptDays, day, week } (the last day's and the last 7
+           days' statements, each { days, covered (the days of it the request log keeps), statements, completed, refused,
+           failed, cancelled, rows, bytesSent, durationMs: { avg, p50, p95 } (the completed ones') or null }; { error }
+           when it could not be read), slowQueries, refusedQueries, refusedTotal (how many in all), unsupported: [{ gap
+           (its entry of docs/SQL-SUPPORT.md), title (what it is; null for an entry this Mason no longer has), runs
+           (the statements it refused in the last day), users, clients (application_name), last, example (the latest,
+           cut at 1,000 characters) }] (the most refused first: GET /api/unsupported) or { error },
+           recentErrors: { sync: [{ at, kind, failed, table, message }] (the latest failures of the sync and restarts,
+           newest last: mason logs --events), error (why they could not be read, or null), queries: [{ requestId,
+           startedAt, outcome, sqlstate, message, query, … }] (the latest statements refused, failed or cancelled, newest
+           last, as mason logs --requests --json shows each: mason logs --requests --failed), queriesError (or null) },
+           readiness (what mason wait waits on), ui (whether this run serves the web page: mason ui), served (this is
+           mason serve's run: mason ui --ssh opens its page), sourcesReadOnly (why the page offers no Add or Remove — the
+           project's files deployed read-only, MASON_PROJECT_READONLY, which mason add and mason remove refuse too, or a
+           server's sources file it cannot write — or null), next }.
+           Each table's kept is how it is kept current now (absent for a table the sync does not hold):
+           { by: poll, sync: { mode: off } or { mode: poll, every (30s), seconds } (its entry's sync:, else the file's,
+           else off), syncedAt (its last whole read or poll), nextAt (when its next poll is due; null: off, or not polled
+           now), pending (only when it applies: why it is not kept current now, its phase included: it waits for
+           its first sync, it is being read whole, its first sync failed, it is read again whole, caught up first) }
+           or { by: recopy, copiedAt, syncedAt, pending (only when it applies, as the poll's) }
            or { by: replication, slot, state (streamed, catching-up, waiting, left-out), why, position, lastCommit,
-           notRunning (why the stream is not running, null when it is) }; with Mason stopped: { running: false, project, source: { name,
+           notRunning (why the stream is not running, null when it is) }; each with promisedSeconds (the age of
+           its synced data past which it is behind: poll, its interval plus the larger of 60 s and twice its last poll;
+           replication, 120 s; off, null) and lateWhy (what would make it late now: the pass's or its own poll's
+           time, which Mason waits four times, the stream not running); with Mason stopped: { running: false, project, source: { name,
            file, url, error (the sources file's problem, or null) }, engine, tables: [{ table }], lastRun, lastStop:
            { at, how } or null, next }; hung: the same with hung: { pid, problem, why },
-           exit 1. In replication mode stream: { slot, publication, running, failure, position,
+           exit 1. In replication mode stream: { slot, slotWal: { walHeldBytes (the WAL the slot holds on the
+           database), walStatus (reserved, extended, unreserved, lost), safeWalSizeBytes (the WAL left before Postgres
+           invalidates it; null: max_slot_wal_keep_size unset, nothing caps it), at } or { error }, publication, running, failure, position,
            applied, database: { lsn, at } or { error }, lag: { bytes, seconds }, lastBatch: { appliedAt, committedAt },
            tables: [{ table, state (streamed, catching-up, waiting, left-out), why, catchUp: { phase (queued, polling,
            applying), from, startedAt, held, retryAt }, applied: { inserts, updates, deletes, truncates } }] }.
@@ -226,14 +334,21 @@ const STATUS_USAGE = `usage: mason status [--json]
            fill: { rows, bytesPerRow, seconds, basis (measured: from the last fill of its column; disk or text: modelled from
            the column's bytes a row on disk, or its text's before it is on disk), rowsPerSecond } (the fill's estimate it
            was decided on), filled: { rows, seconds } (what its own fill measured), queued (a backfill waiting for the fill
-           under way), keptAt, readyAt, why }]
+           under way), keptAt, readyAt, why }]. generatedTables: [{ table, file, kind, method (whole: its SQL run again),
+           state (refused, waiting, building, failed, current, behind), targetLag, behindSeconds (across its chain: the
+           oldest base change below it not in it), behindSince (when that change was committed; null: none), missingTarget, serving,
+           lastRun: { at, seconds, rows }, error (the last run's, no value of a row in it), retryAt,
+           refusals: [{ key, message, why, options, text }], waitingFor, warnings }]. roles (a run with a roles file, mason/roles.yml: what a user added
+           with --role may read): { file, roles: [name], problem (what is wrong with the file now, every statement of a
+           user with a role refused while there is; null), default (the role of a user added without --role; null: the
+           file names none, and such a user reads nothing), all (the roles of tables: all) }
 
   In replication mode a Stream section says where the stream is: its position against the database's (bytes behind),
   when the newest change applied was committed and how long after it was applied, and each added table — streamed,
   with the changes applied this run; being caught up by one poll; not streamed yet; or left out — and why.
 
   Stored JSON paths: a JSON value statements keep reading (payload ->> 'customer_id' read by several statements, or by
-  one slow one) is stored as a column of the copy and read from there, computed once when its row is written instead
+  one slow one) is stored as a column of the synced table and read from there, computed once when its row is written instead
   of for every row of every statement; on a table whose fill would take a minute or more, only once the statements
   reading it took a tenth of the fill's estimate in all. The estimate is the rate the last fill of the same JSON
   column measured, once one has run, else modelled from the column's bytes on disk; the line says which. Each path is
@@ -244,11 +359,12 @@ const STATUS_USAGE = `usage: mason status [--json]
 export const STATUS = {
     needs: "project",
     name: "status",
-    summary: "what Mason is doing: the database, each table's copy, the Postgres API, the slow and refused statements",
+    summary: "what Mason is doing: the database, each synced table, the Postgres API, its statements and errors",
     usage: STATUS_USAGE,
     options: { json: { type: "boolean" } },
-    json: ["running", "pid", "postgres", "source", "warnings", "folder", "project", "tables", "engine", "stream", "jsonPaths", "slowQueries", "refusedQueries", "refusedTotal", "readiness", "ui",
-        "lastRun", "lastStop", "hung", "next"],
+    json: ["running", "pid", "postgres", "source", "warnings", "folder", "project", "tables", "totals", "engine", "disk", "sessions", "stream", "jsonPaths", "generatedTables", "queries", "slowQueries", "refusedQueries",
+        "refusedTotal", "unsupported", "recentErrors", "readiness", "ui", "served", "sourcesReadOnly",
+        "roles", "share", "shareEnded", "lastRun", "lastStop", "hung", "next"],
 };
 export async function status(argv) {
     const f = parseCommand(STATUS, argv);
@@ -266,7 +382,12 @@ export async function status(argv) {
     const run = r0.run;
     return guarded("status", json, async () => {
         const st = styleOut();
-        const s = await readState(run);
+        const read = await readState(run);
+        // the name is read at the start, so an edit of the sources file's database: is said here until the run takes it
+        const answersAs = postgresLink(run.postgresUrl).database;
+        const fileSays = databaseMoved(r0.project, answersAs);
+        const s = fileSays !== null
+            ? { ...read, warnings: [...read.warnings, `the sources file now says tools connect with ${fileSays}, and this run answers as ${answersAs}: mason stop && mason start takes it`] } : read;
         const r = readiness(s);
         // the statements the Postgres API answered slowly, and the ones it refused, with the reason (src/duck/requests.ts)
         const slowReply = await callRun(run, "GET", "/api/slow");
@@ -274,30 +395,56 @@ export async function status(argv) {
         const refusedReply = await callRun(run, "GET", "/api/refused");
         const refused = refusedReply.status === 200 ? refusedReply.body.refused : [];
         const refusedTotal = typeof refusedReply.body.total === "number" ? refusedReply.body.total : null;
+        // the same refusals grouped by the unsupported SQL they used (src/duck/gaps.ts): what to rewrite
+        const unsupportedReply = await callRun(run, "GET", `/api/unsupported?limit=${STATUS_UNSUPPORTED}`);
+        const unsupported = unsupportedReply.status === 200 ? unsupportedReply.body.unsupported
+            : { error: String(unsupportedReply.body.error ?? `the run answered ${unsupportedReply.status}`) };
+        // the sync's latest failures (src/duck/events.ts), and the run's restarts among them
+        const eventsReply = await callRun(run, "GET", `/api/events?failed=1&limit=${RECENT_ERRORS}`);
+        // and the latest statements refused, failed or cancelled: the request log's own page, the shape mason logs --requests --json prints
+        const failedReply = await callRun(run, "GET", `/api/requests?failed=1&limit=${RECENT_ERRORS}`);
+        const recentErrors = {
+            sync: eventsReply.status === 200 ? eventsReply.body.events : [],
+            error: eventsReply.status === 200 ? null : String(eventsReply.body.error ?? `the run answered ${eventsReply.status}`),
+            queries: failedReply.status === 200 ? failedReply.body.requests : [],
+            queriesError: failedReply.status === 200 ? null : String(failedReply.body.error ?? `the run answered ${failedReply.status}`),
+        };
+        // the last day's and week's statements (src/duck/requests.ts summary): asked here, never with the state
+        const queriesReply = await callRun(run, "GET", "/api/queries");
+        const queries = queriesReply.status === 200 ? queriesReply.body.queries
+            : { error: String(queriesReply.body.error ?? `the run answered ${queriesReply.status}`) };
         const picked = s.tables.filter((t) => t.added);
         // what to run next, the same for a person and under --json
         const next = !picked.length ? addSteps(s.tables)
             : r.ready ? [...READY_STEPS]
                 : r.failed.length ? [["mason logs", "the detail of each failure"], ["mason wait", "each failure, with the way out"]]
                     : [["mason wait", "until it is done"]];
-        // the times its supervisor started it again (src/cli/supervise.ts): a run that crashed says so, never only in a log
-        const restarts = restartsOf(run.home);
         if (json) {
-            out(jsonText(STATUS, { running: true, pid: run.pid, postgres: { ...postgresLink(run.postgresUrl), listener: run.postgresListener },
-                ...s, engine: { ...s.engine, restarts }, slowQueries: slow, refusedQueries: refused, refusedTotal, readiness: r }, next));
+            out(jsonText(STATUS, { running: true, pid: run.pid,
+                ...s, postgres: { ...postgresFacts(run.postgresUrl), listener: run.postgresListener }, queries, slowQueries: slow, refusedQueries: refused, refusedTotal, unsupported, recentErrors, readiness: r }, next));
             return 0;
         }
         const rows = [
             ["Project", `${run.name}, files in ${s.folder ?? "(none chosen)"}`],
             ...sourceRows(s),
-            ["Mason", `${version()}, pid ${run.pid} · one process`],
-            ["Copy", `${s.engine.file}${s.engine.bytes === null ? "" : ` · ${fileSize(s.engine.bytes)}`}`],
-            ...restartsRows(restarts),
+            masonRow(s.engine, run.pid),
+            ["Synced data", `${s.engine.file}${s.engine.bytes === null ? "" : ` · ${fileSize(s.engine.bytes)}`}`],
+            ...diskRows(s.disk),
+            // the copies in all (src/cli/readiness.ts syncTotals): a run from before them has none
+            ...(s.totals ? [["Synced tables", totalsText(s.totals)]] : []),
+            // the times its supervisor started it again (src/cli/supervise.ts): a run that crashed says so, never only in a log
+            ...restartsRows(s.engine.restarts),
             ["Postgres API", `${withPlaceholders(run.postgresUrl)}  (mason user add <name> makes a user)`],
+            ...sessionsRows(s.sessions),
             // what it serves: its address, TLS or plain (src/cli/pg-tls.ts)
             ["Listener", listenerText(run.postgresListener, postgresLink(run.postgresUrl).port)],
+            ...shareRows(s.share),
             // the web page (mason ui), without its one-time token: mason ui prints the URL that carries it, and opens it
-            ...(s.ui === true ? [["Web UI", `${run.control.url}/  (mason ui opens it)`]] : []),
+            ...(s.ui === true ? [["Web UI", s.served === true ? "from your machine: mason ui --ssh <user@server>" : `${run.control.url}/  (mason ui opens it)`]] : []),
+            // the roles file as the listener reads it now (mason user add --role): its roles, or what is wrong with it
+            ...(s.roles && s.roles.file !== null
+                ? [["Roles", s.roles.problem !== null ? st.red(`${s.roles.problem} (every statement of a user with a role is refused until it is fixed)`)
+                            : `${s.roles.roles.join(", ")}  (${s.roles.file}; ${s.roles.default != null ? `default ${s.roles.default} for a user added without --role` : "no default: a user with no role reads nothing"})`]] : []),
             ...s.warnings.map((w) => ["Warning", w]),
         ];
         out(reportText({ headline: `Status: ${st.green("running")}`, details: rows }, st));
@@ -315,19 +462,31 @@ export async function status(argv) {
         out(st.bold(`Tables (${picked.length} of ${s.tables.length} added):`));
         for (const l of tableLines(s))
             out(`  ${paintBar(l, st)}`);
+        for (const l of syncErrorLines(recentErrors, st))
+            out(l);
+        for (const l of queryErrorLines(recentErrors, st))
+            out(l);
         for (const l of jsonPathLines(s.jsonPaths ?? [], st))
             out(l);
+        for (const l of generatedLines(s.generatedTables ?? [], st))
+            out(l);
+        for (const l of queryLines(queries, st))
+            out(l);
         for (const l of slowLines(slowReply.status === 200 ? slow : { error: String(slowReply.body.error ?? slowReply.status) }, st))
             out(l);
         for (const l of refusedLines(refusedReply.status === 200 ? { refused, total: refusedTotal } : { error: String(refusedReply.body.error ?? refusedReply.status) }, st))
             out(l);
+        for (const l of unsupportedLines(unsupported, st))
+            out(l);
         out("");
+        // the word the web page's Status says too (readinessWord)
+        const word = readinessWord(r);
         if (r.ready)
-            out(withEnd(st.green("Ready: every added table is copied and served."), { next }));
+            out(withEnd(st.green(`${word}: every added table is synced and served.`), { next }));
         else if (r.failed.length)
-            out(withEnd(`${st.red("Failed:")}\n${bullets(r.failed)}`, { next }));
+            out(withEnd(`${st.red(`${word}:`)}\n${bullets(r.failed)}`, { next }));
         else
-            out(withEnd(`Under way:\n${r.waiting.map((x) => `  - ${x}`).join("\n")}`, { next }));
+            out(withEnd(`${word}:\n${r.waiting.map((x) => `  - ${x}`).join("\n")}`, { next }));
         return 0;
     });
 }
@@ -337,12 +496,16 @@ export async function status(argv) {
  */
 export function sourceRows(s) {
     return [
-        ...(s.source.file ? [["Source", `${s.source.file} (the tables it names are added)`]] : []),
+        ...(s.source.file ? [["Source", `${s.source.shownFile ?? s.source.file} (the tables it names are added)`]] : []),
         ["Database", s.source.demo ? `the demo database Mason hosts (${s.source.url} · Postgres ${s.source.version})`
                 : `${s.source.url} · Postgres ${s.source.version}${s.source.standby ? " · a read replica" : ""}`],
-        ["Changes", s.source.replication ? `logical replication: slot ${s.source.replication.slot}, publication ${s.source.replication.publication} ` +
-                `(${s.source.replication.owned ? "Mason's own" : "named: read as it is, never altered"}) · mason start --poll goes back to polling`
-                : `polling with SELECTs (xmin), every ${s.engine.pollSeconds} s · ${s.source.demo ? "the demo database is read by polling only" : "mason start --replication reads the database's change log instead"}`],
+        // in a web developer's words first (each table as its sync: says, streamed as they happen); the mechanism an operator needs in parentheses
+        ["Changes", `each table as its sync: says${s.source.replication ? "" : " (a SELECT of its changed rows)"}${s.source.sync ? ` · sync: ${s.source.sync.default} ${s.source.sync.written ? "for every table without its own" : "(the default: the file writes none)"}` : ""} · ` +
+                (s.source.replication ? `sync: replication tables streamed as they happen (logical replication: slot ${s.source.replication.slot}, publication ${s.source.replication.publication}, ` +
+                    `${s.source.replication.owned ? "Mason's own, carrying them alone" : "named: read as it is, never altered"}); the others by a SELECT of their changed rows`
+                    : s.source.demo ? "the demo database is checked this way only"
+                        : "sync: replication on an entry streams that table as it happens instead")],
+        ...(s.source.textOrder ? [["Text order", s.source.textOrder]] : []),
     ];
 }
 /** An SQL statement on one line, cut at `max` characters (the whole of it is mason logs --requests --json's). */
@@ -359,7 +522,7 @@ export function jsonPathLines(paths, st) {
     const dropped = paths.length - live.length;
     if (!live.length && !dropped)
         return [];
-    const lines = [`\n${st.bold("Stored JSON paths")} ${st.dim("(read from a column of the copy, computed once per row written; MASON_STORE_JSON_PATHS=off turns it off)")}:`];
+    const lines = [`\n${st.bold("Stored JSON paths")} ${st.dim("(read from a column of the synced table, computed once per row written; MASON_STORE_JSON_PATHS=off turns it off)")}:`];
     for (const p of live) {
         const pct = p.rowsTotal > 0 ? Math.min(99, Math.floor((p.rowsDone / p.rowsTotal) * 100)) : 0;
         // a path its fill's cost holds back says so: its why is the decision, with the estimate
@@ -371,6 +534,83 @@ export function jsonPathLines(paths, st) {
         lines.push(`  ${st.dim(`${dropped} dropped (mason status --json says why)`)}`);
     return lines;
 }
+/** a generated table's state in the words mason status prints: how it is kept, how far behind, its last run */
+function generatedWords(g) {
+    const how = `${g.kind ?? "?"} ${g.method}, target ${g.targetLag ?? "?"}`;
+    const last = g.lastRun === null ? "" : `; last re-run ${duration(g.lastRun.seconds)}, ${n(g.lastRun.rows)} row${g.lastRun.rows === 1 ? "" : "s"}`;
+    if (g.state === "waiting")
+        return `${how}, waiting for ${g.waitingFor ?? "a table"} to sync`;
+    if (g.state === "building")
+        return `${how}, being built`;
+    if (g.state === "refused")
+        return g.serving ? `${how}, its file is refused; it keeps serving what it was built from${last}` : "refused";
+    const lag = g.behindSeconds === 0 ? "nothing behind" : `${duration(g.behindSeconds)} behind`;
+    const missed = g.missingTarget ? ", past its target" : "";
+    const failed = g.error === null ? "" : `; its last run failed, tried again at ${g.retryAt ?? "?"}: ${g.error}`;
+    return `${how}, ${lag}${missed}${last}${failed}`;
+}
+/** mason status's generated tables: a line each, and a refused one's reasons and ways out under it, whole */
+export function generatedLines(tables, st) {
+    if (tables.length === 0)
+        return [];
+    const width = Math.max(...tables.map((g) => entryName(g.table).length));
+    const lines = [`\n${st.bold("Generated tables")} ${st.dim("(tables declared in SQL; mason help generated)")}:`];
+    for (const g of tables) {
+        const words = generatedWords(g);
+        const paint = g.state === "refused" || g.state === "failed" || g.missingTarget ? st.red : g.state === "current" ? st.green : g.state === "behind" ? (x) => x : st.yellow;
+        lines.push(`  ${entryName(g.table).padEnd(width)}  ${paint(words)}`);
+        for (const r of g.refusals)
+            lines.push(...r.text.split("\n").map((l) => `    ${l}`));
+        for (const w of g.warnings)
+            lines.push(`    ${st.yellow(w)}`);
+    }
+    return lines;
+}
+/** The copies in all, as mason status's `Copies` row says them: `3 of 3 added synced, 1,234 rows, the last synced 5 s ago`. */
+export function totalsText(t, now = Date.now()) {
+    const last = t.syncedAt === null ? "" : `, the last synced ${duration((now - Date.parse(t.syncedAt)) / 1000)} ago`;
+    return `${n(t.copied)} of ${n(t.added)} added synced, ${n(t.rows)} row${t.rows === 1 ? "" : "s"}${t.failed ? `, ${n(t.failed)} failed` : ""}${last}`;
+}
+/** How many of the latest sync failures and failed statements mason status shows (`recentErrors`); mason logs --events and --requests --failed list each. */
+export const RECENT_ERRORS = 5;
+/** One event of the sync on one line (src/duck/events.ts): when, what (a failure in red), its table, its reason's first line. */
+export function eventLine(e, st) {
+    return `${e.at.slice(0, 19).replace("T", " ")}  ${(e.failed ? st.red : st.green)(e.kind.padEnd(18))}  ${e.table ?? "(the sync)"}  ${firstLine(e.message)}`;
+}
+/** mason status's sync errors: the latest few, a line each, newest last; none, no section. */
+export function syncErrorLines(r, st) {
+    if (r.error !== null)
+        return [`\n${st.bold("Sync errors")}: could not read them (${firstLine(r.error)}; mason logs has the detail)`];
+    if (!r.sync.length)
+        return [];
+    return [`\n${st.bold("Sync errors")} ${st.dim("(the latest, newest last; mason logs --events lists every event)")}:`, ...r.sync.map((e) => `  ${eventLine(e, st)}`)];
+}
+/** mason status's statement errors: the latest few refused, failed or cancelled, a line each (`requestLine`), newest last; none, no section. */
+export function queryErrorLines(r, st) {
+    if (r.queriesError !== null)
+        return [`\n${st.bold("Query errors")}: could not read them (${firstLine(r.queriesError)}; mason logs has the detail)`];
+    if (!r.queries.length)
+        return [];
+    return [`\n${st.bold("Query errors")} ${st.dim("(the latest refused, failed or cancelled, newest last; mason logs --requests --failed lists each)")}:`, ...r.queries.map((q) => `  ${requestLine(q, st)}`)];
+}
+/** Bytes as a person reads them: B, KiB, MiB, GiB (the web page's statements say the same, src/web/shared.js). */
+export function bytesText(b) { return b < 1024 ? `${n(b)} B` : fileSize(b); }
+/**
+ * mason status's queries (src/duck/requests.ts summary): the last day's and the last week's statements, a line each —
+ * how many, each outcome, the completed ones' times, the rows and bytes sent — and, when the request log keeps fewer
+ * days than the week, that the week is only what it keeps.
+ */
+export function queryLines(q, st) {
+    if ("error" in q)
+        return [`\n${st.bold("Queries")}: could not read them (${firstLine(q.error)}; mason logs has the detail)`];
+    const line = (label, w) => {
+        const counts = `${n(w.statements)} statement${w.statements === 1 ? "" : "s"}: ${n(w.completed)} completed, ${n(w.refused)} refused, ${n(w.failed)} failed, ${n(w.cancelled)} cancelled`;
+        const times = w.durationMs === null ? "" : ` · ${msText(w.durationMs.avg)} / ${msText(w.durationMs.p50)} / ${msText(w.durationMs.p95)}`;
+        const short = w.covered < w.days ? st.dim(` (the request log keeps ${w.covered} day${w.covered === 1 ? "" : "s"}: MASON_HISTORY_DAYS)`) : "";
+        return `  ${label.padEnd(10)}  ${counts}${times} · ${n(w.rows)} rows, ${bytesText(w.bytesSent)} sent${short}`;
+    };
+    return [`\n${st.bold("Queries")} ${st.dim("(the completed ones' time: average / p50 / p95; mason logs --requests lists each)")}:`, line("last day", q.day), line("last week", q.week)];
+}
 /** mason status's slow statements (src/duck/requests.ts slow), each on one line with its times. */
 export function slowLines(slow, st) {
     if (!Array.isArray(slow))
@@ -379,7 +619,7 @@ export function slowLines(slow, st) {
         return [];
     const lines = [`\n${st.bold("Slow queries")} ${st.dim(`(the last day, still ${(SLOW_MS / 1000).toLocaleString("en-US")} s or more; slowest first)`)}:`];
     for (const q of slow) {
-        const times = `${n(q.latestMs)} ms last time (${q.runs} run${q.runs === 1 ? "" : "s"}, median ${n(q.medianMs)} ms)`;
+        const times = `${msText(q.latestMs)} last time (${q.runs} run${q.runs === 1 ? "" : "s"}, median ${msText(q.medianMs)})`;
         lines.push(`  ${times}, last ${q.last.slice(0, 16).replace("T", " ")} UTC`, `    ${oneLine(q.payload)}`);
     }
     return lines;
@@ -400,27 +640,80 @@ export function refusedLines(r, st) {
     }
     return lines;
 }
-/** A file's size, as a person reads one */
-function fileSize(b) {
+/** how many entries of the unsupported SQL mason status shows (and its --json carries) */
+const STATUS_UNSUPPORTED = 5;
+/**
+ * `Unsupported SQL` in mason status: the last day's refused statements grouped by the registry entry that refused them
+ * (src/duck/requests.ts unsupported), the most refused first — how many, what they used, who sent them, and the latest
+ * — so a person knows what to rewrite; docs/SQL-SUPPORT.md has each entry's way out. None: no section.
+ */
+export function unsupportedLines(u, st) {
+    if ("error" in u)
+        return [`\n${st.bold("Unsupported SQL")}: could not read it (${firstLine(u.error)}; mason logs has the detail)`];
+    if (!u.length)
+        return [];
+    const lines = [`\n${st.bold("Unsupported SQL")} ${st.dim("(the last day's refused statements by what they used, the most first)")}:`];
+    for (const g of u) {
+        const title = g.title ?? "SQL this Mason no longer lists";
+        const who = [...(g.users.length ? [`as ${g.users.join(", ")}`] : []), ...(g.clients.length ? [`from ${g.clients.join(", ")}`] : [])];
+        lines.push(`  ${title}: ${n(g.runs)} statement${g.runs === 1 ? "" : "s"}${who.length ? ` ${who.join(" ")}` : ""}`);
+        lines.push(`    last ${g.last.slice(0, 16).replace("T", " ")} — ${oneLine(g.example)}`);
+        lines.push(`    How to rewrite it: see docs/SQL-SUPPORT.md › ${title}`);
+    }
+    return lines;
+}
+/** A file's size, as a person reads one (mason status's copy, mason usage's) */
+export function fileSize(b) {
     return b >= 1024 ** 3 ? `${(b / 1024 ** 3).toFixed(1)} GiB` : b >= 1024 ** 2 ? `${(b / 1024 ** 2).toFixed(1)} MiB` : `${(b / 1024).toFixed(1)} KiB`;
 }
-/** The restarts recorded for a run, or why they could not be read (a file nobody can read is said, never taken as none). */
-function restartsOf(home) {
-    try {
-        return readRestarts(home);
-    }
-    catch (e) {
-        return { error: `${path.join(home, "restarts.json")} could not be read: ${e.message}` };
-    }
+/** `Mason` in mason status: the run's own version (a CLI of another version says the run's), its pid, and how long it
+ *  has been up (a run from before it: the CLI's version, no uptime) */
+export function masonRow(e, pid) {
+    return ["Mason", `${e.version ?? version()}, pid ${pid} · one process${e.startedAt ? ` · up ${spanText(e.uptimeSeconds ?? 0)}, since ${e.startedAt.slice(0, 19).replace("T", " ")} UTC` : ""}`];
 }
-/** `Restarts` in mason status: how many times the run was started again, and the last one's reason (none: no row) */
-function restartsRows(r) {
-    if (!Array.isArray(r))
+/** `Sessions` in mason status: how many are logged in to the Postgres API, how many run a statement, and by whom (the
+ *  three with the most, then how many others) */
+export function sessionsRows(s) {
+    if (s === undefined)
+        return [];
+    if (s.open === 0)
+        return [["Sessions", "none open"]];
+    const running = s.byClient.reduce((n, c) => n + c.running, 0);
+    const who = s.byClient.slice(0, 3).map((c) => `${c.open} ${c.user === "" ? "by a token" : `as ${c.user}`}${c.client === "" ? "" : ` (${c.client})`}`);
+    const others = s.byClient.length - who.length;
+    return [["Sessions", `${s.open} open, ${running} running a statement · ${who.join(", ")}${others > 0 ? `, and ${others} other client${others === 1 ? "" : "s"}` : ""} (mason logs --running lists the statements)`]];
+}
+/** `Share` in mason status: each share open now (mason share) and what its socket met; no row when none is. */
+export function shareRows(s, now = Date.now()) {
+    if (s === undefined || s === null)
+        return [];
+    const each = s.shares.map((h) => {
+        const where = h.host === null ? "its tunnel is opening" : `${h.host}:${h.port} via ${h.via ?? "a tunnel"}${h.state === "reconnecting" ? " (reconnecting)" : ""}`;
+        const ends = h.endsAt === null ? "" : `, ends in about ${Math.max(0, Math.round((Date.parse(h.endsAt) - now) / 60_000))} min`;
+        return ["Share", `${where}, as ${h.user}, reads ${h.role === null ? h.reads : `as the role ${h.role}`}${ends}`];
+    });
+    return [...each, ["Share socket", `127.0.0.1:${s.port}, TLS required, SHA-256 ${s.fingerprint} · ${s.sessions} session${s.sessions === 1 ? "" : "s"}, ${s.refusedLogins} login${s.refusedLogins === 1 ? "" : "s"} refused, ${s.droppedConnections} dropped before a login`]];
+}
+/** `Disk` in mason status: the bytes free where the synced data is, and what the first syncs running are projected to add (none: no
+ *  row, for a run from before it) */
+export function diskRows(d) {
+    if (d === undefined)
+        return [];
+    const adds = d.projectedBytes === null ? "" : ` · the first syncs running are projected to add about ${fileSize(d.projectedBytes)} more`;
+    if (d.freeBytes === null)
+        return [["Disk", `${d.error ?? "the free space could not be read"}${adds}`]];
+    return [["Disk", `${fileSize(d.freeBytes)} free in ${d.path}${adds}${d.projectedBytes !== null && d.projectedBytes > d.freeBytes ? " — more than is free: the sync stops before the disk fills" : ""}`]];
+}
+/** `Restarts` in mason status: how many times the run was started again, and the last one's reason (none: no row) —
+ *  the run's own `engine.restarts` while it is up, the same fact read from the file while it is not (`restartsFact`) */
+export function restartsRows(r) {
+    if (r === undefined)
+        return [];
+    if ("error" in r)
         return [["Restarts", r.error]];
-    const last = r[r.length - 1];
-    if (last === undefined)
+    if (r.last === null)
         return [];
-    return [["Restarts", `${r.length}, the last ${ago(last.at)}: ${last.reason}, after ${last.upSeconds} s up (mason logs --start has its last lines)`]];
+    return [["Restarts", `${r.count}, the last ${ago(r.last.at)}: ${r.last.why}, after ${r.last.upSeconds} s up (mason logs --start has its last lines)`]];
 }
 /**
  * mason status with Mason stopped: the same rows and tables, "not running" where something is not. The
@@ -434,19 +727,23 @@ function stoppedStatus(project, json, hung = null) {
     const src = projectSource(project);
     const tables = "message" in src ? [] : src.tables.map((e) => e.table);
     const database = "message" in src ? null : maskedUrl(src.resolved);
+    // the name a tool connects with once it starts: null when the file cannot say it (`source.error` says why)
+    const connect = projectDatabase(project);
+    const connectName = typeof connect === "string" ? connect : null;
     const duckFile = path.join(project.dir, DUCK_FILE);
     // the copy's file, when a run has made one: its size says what the next mason start resumes with
     const bytes = fs.existsSync(duckFile) ? fs.statSync(duckFile).size : null;
-    const restarts = restartsOf(project.dir);
+    const restarts = restartsFact(project.dir);
     const lastStop = project.config.lastStop ?? null;
-    const next = hung === null ? ("message" in src && src.next?.length ? src.next : [["mason start", "start Mason for this project: what it copied is kept, and polled again"]])
+    const next = hung === null ? ("message" in src && src.next?.length ? src.next : [["mason start", "start Mason for this project: what it synced is kept, and polled again"]])
         : hung.problem.next ?? [["mason stop", "end it"], ["mason logs", "what it was doing"]];
     const state = hung === null ? "not running" : "hung";
     if (json) {
         out(jsonText(STATUS, { running: false, ...(hung === null ? {} : { hung: { pid: hung.run.pid, problem: hung.problem.problem, why: hung.problem.why } }),
+            postgres: { database: connectName },
             project: { name: project.config.name, folder: project.folder },
             source: { name: "message" in src ? null : src.name, file: "message" in src ? null : src.file, url: database, error: "message" in src ? errorJson(src) : null },
-            engine: { name: "duckdb", file: duckFile, bytes, restarts }, tables: tables.map((table) => ({ table })),
+            engine: { file: duckFile, bytes, restarts }, tables: tables.map((table) => ({ table })),
             lastRun: project.config.lastRun ?? null, lastStop }, next));
         return hung === null ? 0 : 1;
     }
@@ -457,9 +754,9 @@ function stoppedStatus(project, json, hung = null) {
             ...(database === null ? [] : [["Database", `${database} (not checked: Mason ${hung === null ? "is not running" : "does not answer"})`]]),
             ["Mason", hung === null ? `${version()} · not running${project.config.lastRun ? ` (last started ${ago(project.config.lastRun)}${ended})` : ""}`
                     : `${version()}, pid ${hung.run.pid} · running but does not answer its commands: ${hung.problem.why}`],
-            ["Copy", bytes === null ? "none yet (mason start makes it)" : `${duckFile} · ${fileSize(bytes)}`],
+            ["Synced data", bytes === null ? "none yet (mason start makes it)" : `${duckFile} · ${fileSize(bytes)}`],
             ...restartsRows(restarts),
-            ["Postgres API", hung === null ? "not running" : `${withPlaceholders(hung.run.postgresUrl)}  (held by the hung run; it may not answer)`],
+            ["Postgres API", hung === null ? `not running${connectName === null ? "" : ` (a tool connects with the database ${connectName})`}` : `${withPlaceholders(hung.run.postgresUrl)}  (held by the hung run; it may not answer)`],
         ] }, st));
     out("");
     if (!tables.length)
@@ -473,8 +770,9 @@ function stoppedStatus(project, json, hung = null) {
     out(endText({ tips: [], next }, st));
     return hung === null ? 0 : 1;
 }
-function ago(iso) {
-    const s = Math.max(0, Math.round((Date.now() - Date.parse(iso)) / 1000));
+/** How long ago a time was, as mason status says it (`12s ago`, `5 min ago`, `3 h ago`; the web page's `agoText`, held equal) */
+export function ago(iso, now = Date.now()) {
+    const s = Math.max(0, Math.round((now - Date.parse(iso)) / 1000));
     return s < 90 ? `${s}s ago` : s < 5400 ? `${Math.round(s / 60)} min ago` : `${Math.round(s / 3600)} h ago`;
 }
 // ------------------------------------------------------------------ mason tables
@@ -492,8 +790,8 @@ const TABLES_USAGE = `usage: mason tables [<table>…] [--all] [--json]
   --all       every table with its columns, not only the named ones
   --json      as data: { database, source: { name (the source's: its sources file's), file (the sources file) },
               tables: [{ table, rows, bytes, primaryKey, comment, addable,
-              reason, added, addedColumns (the columns its copy keeps: null when not added), copyKey (the key: the sources
-              file copies it by, null: its primary key), columns: [{ name, type, nullable, comment, references }] }], next }
+              reason, added, addedColumns (the columns it syncs: null when not added), copyKey (the key: the sources
+              file keys it by, null: its primary key), columns: [{ name, type, nullable, comment, references }] }], next }
 `;
 export const TABLES = {
     // the project, not the run (the hands-on review of #451, item 15): what it lists is the database's catalog and the
@@ -530,7 +828,7 @@ export async function tables(argv) {
     // what to run next: the first table not yet added, as a whole list or as the named tables
     const one = shown.find((t) => !t.added && t.reason === null);
     const next = f.positionals.length
-        ? (one ? [[`mason add ${tableArg(one.table)}`, `copy it into Mason (--columns ${one.columns.slice(0, 2).map((c) => c.name).join(",")}: those only)`]] : [])
+        ? (one ? [[`mason add ${tableArg(one.table)}`, `sync it into Mason (--columns ${one.columns.slice(0, 2).map((c) => c.name).join(",")}: those only)`]] : [])
         : addSteps(shown, "tables");
     if (json) {
         out(jsonText(TABLES, { database: s.database, source: { name: s.name, file: s.file }, tables: shown.map((t) => ({
@@ -557,7 +855,7 @@ export async function tables(argv) {
     }
     for (const t of shown) {
         const size = t.rows === null ? "rows unknown" : `~${n(t.rows)} rows`;
-        const added = t.added ? ` · added (${t.addedColumns.length === t.columns.length ? "every column" : t.addedColumns.join(", ")}${t.copyKey ? `; copied by ${t.copyKey.join(", ")}` : ""})` : "";
+        const added = t.added ? ` · added (${t.addedColumns.length === t.columns.length ? "every column" : t.addedColumns.join(", ")}${t.copyKey ? `; keyed by ${t.copyKey.join(", ")}` : ""})` : "";
         out(`${t.table} · ${size}${t.key.length ? ` · key ${t.key.join(", ")}` : ""}${added}`);
         if (t.comment)
             out(`  ${t.comment}`);
@@ -596,9 +894,9 @@ async function readCatalog(p) {
         return src;
     const demo = p.config.demo === true;
     const fix = `change the URL where it is (${src.from}) when the database's password or host changed`;
-    const parsed = parseSource(src.resolved);
+    const parsed = parseSource(src.resolved, src.from);
     if ("problem" in parsed)
-        return { message: `the database's URL (${src.from}): ${parsed.problem}`, code: "bad_source", fix };
+        return { message: parsed.problem, code: "bad_source", fix };
     const connected = await connectSource(parsed.source, { demo });
     if ("failure" in connected) {
         // the demo database's way out is its run (src/cli/demo.ts): its hint is the fix, mason start the next command
@@ -648,7 +946,7 @@ async function withoutRun(cmd, p, json) {
         return null;
     }
     if (st.kind === "up") {
-        failed(cmd, { message: `Mason started for ${p.config.name} while mason ${cmd} ran`, code: "refused", fix: `run mason ${cmd} again: it asks the run, which copies at once` }, { json });
+        failed(cmd, { message: `Mason started for ${p.config.name} while mason ${cmd} ran`, code: "refused", fix: `run mason ${cmd} again: it asks the run, which syncs at once` }, { json });
         return null;
     }
     const c = await readCatalog(p);
@@ -656,7 +954,7 @@ async function withoutRun(cmd, p, json) {
         failed(cmd, c, { json });
         return null;
     }
-    return { db: { tables: c.facts, database: c.database, replication: changesOf(null, p.config.changes) === "replication" },
+    return { db: { tables: c.facts, database: c.database },
         tables: c.facts.map((t) => catalogTable(t, c.src.tables.find((e) => e.table === t.source))), file: c.src.file,
         edit: () => sourceToEdit(p.folder, p.root, () => projectSource(p)) };
 }
@@ -677,32 +975,49 @@ async function viaRun(run, route, body) {
     return r.status === 200 ? { ok: r.body } : { status: r.status, error: String(r.body.error) };
 }
 // ------------------------------------------------------------------ mason add
-const ADD_USAGE = `usage: mason add <table>… [--columns <column>,…] [--include <column>,…] [--key <column>,…] [--json]
+const ADD_USAGE = `usage: mason add <table>… [--columns <column>,…] [--include <column>,…] [--key <column>,…] [--sync <sync>] [--json]
 
-  Copies tables into Mason: each one is added to the project's sources file (mason/sources/<name>.yml), under tables:
+  Syncs tables into Mason: each one is added to the project's sources file (mason/sources/<name>.yml), under tables:
     mason add orders                                    every column:            orders: {}
     mason add orders --columns id,status,total          those columns:           orders: { columns: [id, status, total] }
     mason add orders customers                          several tables, every column of each
     mason add users --include password_hash             every column, and one that looks like a secret
-    mason add event_log --key tenant_id,id              a table with no primary key, copied by those columns
-  A table is its name (orders) or schema.table (billing.invoices). Its primary key is always copied. The rest of the
+    mason add event_log --key tenant_id,id              a table with no primary key, keyed by those columns
+    mason add orders --sync "poll 30s"                  polled every 30 seconds:  orders: { sync: poll 30s }
+  A table is its name (orders) or schema.table (billing.invoices). Its primary key is always synced. The rest of the
   file — your comments, other tables — stays as it was.
 
+  After its first sync, a table is kept current as the file's sync: says — at the top for every table (mason init
+  writes sync: off: read again only by mason sync <table>), or on its own entry. --sync writes the table's own:
+  off, poll <interval> (poll 5s, poll 5m, poll 1h; 1s to 24h), or replication (the database's change log, through
+  the project's slot). On a table already added, --sync alone changes its sync: line and nothing else; its synced data is
+  kept and caught up by one poll. Without --sync a new entry follows the file's — but a table of more than
+  ${BIG_TABLE_ROWS.toLocaleString("en-US")} rows under a file that polls is written sync: off and said, since each poll scans a table whole on your
+  database, and a table replication cannot keep (no primary key: --key; REPLICA IDENTITY NOTHING) under a file whose
+  sync: is replication is written sync: poll 5m and said. A table of tens of millions of rows set to poll more often
+  than every minute is warned of, with an estimate of what each poll costs your database.
+
   A column that looks like a secret (password, token, api_key, private_key, …) is left out unless named, and said:
-  it is written as exclude: [password_hash], since anyone with a user's password can read every copied column. Name
+  it is written as exclude: [password_hash], since anyone with a user's password can read every synced column. Name
   one with --columns or --include to have it.
 
-  With Mason running the copy starts at once; mason wait returns when it is done and the table is served. Before
+  With Mason running the first sync starts at once; mason wait returns when it is done and the table is served. Before
   mason start (mason init && mason add orders && mason start) the entry is written, checked against the database as
-  the run checks it, and the copy begins at mason start. Adding a table again with other columns changes its entry,
-  and the table is copied again with them.
+  the run checks it, and the first sync begins at mason start. Adding a table again with other columns changes its entry,
+  and the table is synced again whole with them. A project deployed as committed (MASON_PROJECT_READONLY=1 where Mason
+  runs) is refused, its files left as they are: add the table where the project is committed, then deploy.
 
   --columns <a,b,…>   only these columns (one table at a time: the list is that table's)
   --include <a,b,…>   these columns as well as every other one — a column that looks like a secret, named on purpose
-  --key <a,b,…>       for a table with no primary key: the columns that tell its rows apart, which it is copied by (one
-                      table at a time; polling only: logical replication cannot apply a change by them)
+  --key <a,b,…>       for a table with no primary key: the columns that tell its rows apart, which it is keyed by (one
+                      table at a time; polled or off: logical replication cannot apply a change by them)
+  --sync <sync>       how it is kept current after its first sync, written on its entry: off, "poll 30s" or replication
   --json              as data: { added: [{ table, entry, columns (null: every one), exclude, key, addedKey (key columns
-                      added to --columns), skippedSecrets, already (the file said so already) } or { table, error }],
+                      added to --columns), skippedSecrets, already (the file said so already), sync: { value (off, poll
+                      30s), from (entry: its own sync:, file: the file's, default: off, as the file writes none) },
+                      bigOff (it is over ${BIG_TABLE_ROWS.toLocaleString("en-US")} rows and its entry was written sync: off), notReplicated (why
+                      its entry was written sync: poll 5m under a file whose sync: is replication, or null), pollCost (an estimate of
+                      what a frequent poll of a big table costs your database, or null) } or { table, error }],
                       file (the sources file), error (when a table was not added: { code, message, why }), next };
                       exit 1 when a table could not be added
 `;
@@ -710,11 +1025,18 @@ export const ADD = {
     // the project, not the run: the sources file is the list, so a table is added before mason start as well as after
     needs: "project",
     name: "add",
-    summary: "copy tables into Mason, adding them to the sources file: mason add orders (--columns id,status: those only)",
+    summary: "sync tables into Mason, adding them to the sources file: mason add orders (--columns id,status: those only)",
     usage: ADD_USAGE,
-    options: { json: { type: "boolean" }, columns: { type: "string" }, include: { type: "string" }, key: { type: "string" } },
+    options: { json: { type: "boolean" }, columns: { type: "string" }, include: { type: "string" }, key: { type: "string" }, sync: { type: "string" } },
     json: ["added", "file", "error", "next"],
 };
+/** `--sync`, read by the sources file's own grammar (src/lib/table-sync.ts parseSync): a sync, or the usage's problem */
+export function addSync(v) {
+    if (v === undefined)
+        return undefined;
+    const s = parseSync(v);
+    return "problem" in s ? `--sync ${JSON.stringify(v)}: ${s.problem}` : s;
+}
 /**
  * The tables and the columns each one's entry copies (add takes --columns, not a DSL):
  * `["*"]` for every column, the --columns list for one table, and --include's columns on top of either; `key`, --key's
@@ -751,18 +1073,32 @@ export async function add(argv) {
     const specs = addSpecs(f.positionals, f.values.columns, f.values.include, f.values.key);
     if (typeof specs === "string")
         return failed("add", { message: specs, code: "usage", usage: ADD_USAGE }, { json });
+    const sync = addSync(f.values.sync);
+    if (typeof sync === "string")
+        return failed("add", { message: sync, code: "usage", usage: ADD_USAGE }, { json });
+    // --sync alone: a table already added keeps its columns and key, and only its sync: line is written
+    const keep = sync !== undefined && f.values.columns === undefined && f.values.include === undefined && f.values.key === undefined;
+    const how = { ...(sync !== undefined ? { sync } : {}), keep };
     const where = await reach(ADD, json);
     // (a state with no project never meets the need: reach said it)
     if (where === null || where.project === null)
         return 1;
+    // a project whose files are deployed read-only (src/cli/project.ts projectWriteRefusal): refused before the run or the
+    // database is asked, whether Mason is up or down — the run's own record counts, whatever this shell's environment says
+    const readOnly = projectWriteRefusal(where.project.root, process.env);
+    if (readOnly !== null)
+        return failed("add", readOnly, { json });
     if (where.state === "up") {
         // Mason up: the run adds it (the copy starts now, and the run's own re-read never races the file's write)
         const run = where.run;
         return guarded("add", json, async () => {
             const s = await readState(run);
             return addTables({ tables: s.tables, file: s.source.file ?? null,
-                pick: (table, columns, key) => viaRun(run, "/api/pick", { table, picked: true, columns, ...(key ? { key } : {}) }),
-                next: (n) => [["mason wait", `until ${n === 1 ? "its copy finishes" : "their copies finish"} (the copy has started)`], READY_STEPS[0]] }, specs, json);
+                pick: (table, columns, key) => viaRun(run, "/api/pick", { table, picked: true, columns, ...(key ? { key } : {}), ...(sync ? { sync: syncText(sync) } : {}), keep }),
+                // --sync alone on tables already added: no copy starts (each is caught up by one poll), so wait has nothing to wait for
+                next: (n, wereAdded) => keep && wereAdded === n
+                    ? [["mason status", `${n === 1 ? "its sync and when it was last synced: it is" : "their sync and when each was last synced: each is"} caught up by one poll, never synced again whole`], READY_STEPS[0]]
+                    : [["mason wait", `until ${n === 1 ? "its first sync finishes" : "their first syncs finish"} (the sync has started)`], READY_STEPS[0]] }, specs, json);
         });
     }
     // Mason down: the command writes the entry itself, checked as the run checks it; the copy begins at mason start
@@ -770,14 +1106,15 @@ export async function add(argv) {
     if (down === null)
         return 1;
     return addTables({ tables: down.tables, file: down.file,
-        pick: async (table, columns, key) => edited(() => addEntry(down.edit(), down.db, table, columns, key)),
-        next: () => [["mason start", "Mason in the background, for this project: the copy of every added table begins"],
-            ["mason wait", "then, until every added table is copied and served"]] }, specs, json);
+        pick: async (table, columns, key) => edited(() => addEntry(down.edit(), down.db, table, columns, key, how)),
+        next: () => [["mason start", "Mason in the background, for this project: the first sync of every added table begins"],
+            ["mason wait", "then, until every added table is synced and served"]] }, specs, json);
 }
 /** `mason add`'s checklist and answer, the same whichever way the tables are added (`AddWay`). */
 async function addTables(way, specs, json) {
     const results = [];
     const added = [];
+    let wereAdded = 0;
     let file = way.file;
     // the tables that could not be added, each with its reason and code: the command's failure, in the failure shape
     const refused = [];
@@ -815,8 +1152,11 @@ async function addTables(way, specs, json) {
         }
         const b = r.ok;
         file = b.file;
-        results.push({ table: b.table, entry: b.entry, columns: b.columns, exclude: b.exclude, key: b.key, addedKey: b.addedKey, skippedSecrets: b.skippedSecrets, already: b.already });
+        results.push({ table: b.table, entry: b.entry, columns: b.columns, exclude: b.exclude, key: b.key, addedKey: b.addedKey, skippedSecrets: b.skippedSecrets, already: b.already,
+            sync: b.sync, bigOff: b.bigOff, notReplicated: b.notReplicated, pollCost: b.pollCost });
         added.push(b.table);
+        if (t.added)
+            wereAdded++;
         if (json)
             continue;
         const l = addedLines(b, shown(b.file));
@@ -824,7 +1164,7 @@ async function addTables(way, specs, json) {
         for (const x of l.notes)
             note(x);
     }
-    const next = added.length ? way.next(added.length) : [];
+    const next = added.length ? way.next(added.length, wereAdded) : [];
     if (refused.length) {
         // A TABLE NOT ADDED IS THE COMMAND'S FAILURE, in the shape every failure has (found by the CLI session test of the private repo:
         // exit 1 with no error, and nothing on stderr): what is wrong, each table's reason, and next — the added ones' too
@@ -847,12 +1187,26 @@ async function addTables(way, specs, json) {
     return 0;
 }
 /** What `mason add` prints for a table added: its line (✔ …), then its notes under it (the web page says the same,
- *  src/web/app.js; tests/web-page.test.ts holds the two equal). `file` is the sources file as the reader is shown it. */
+ *  src/web/pages/tables.js; tests/web-page.test.ts holds the two equal). `file` is the sources file as the reader is shown it. */
 export function addedLines(b, file) {
     const copies = b.columns === null ? (b.exclude.length ? `every column but ${b.exclude.join(", ")}` : "every column") : b.columns.join(", ");
     const s = b.skippedSecrets;
-    return { line: `Added ${b.table} to ${file}: ${copies}${b.key ? `, copied by ${b.key.join(", ")}` : ""}${b.already ? " (already so)" : ""}`, notes: [
-            ...(b.addedKey.length ? [`key added: ${b.addedKey.join(", ")} (a copy always has its key)`] : []),
+    const name = tableArg(b.table);
+    // HOW IT IS KEPT CURRENT, always said (issue 33: the default is never met by surprise): the sync: it follows, where it
+    // is said, and the one line that changes it — a big table written off, with the alternatives
+    const sync = b.bigOff ? `sync: off written on its entry: it has more than ${BIG_TABLE_ROWS.toLocaleString("en-US")} rows, and each poll scans it whole on your database — ` +
+        `mason add ${name} --sync "poll 1h" polls it hourly; mason sync ${name} syncs it once, now; mason add ${name} --sync replication keeps it current from the change log`
+        : b.notReplicated !== null ? `sync: poll 5m written on its entry, not the file's replication: ${b.notReplicated} — ` +
+            `mason add ${name} --sync "poll 1h" polls it hourly; mason add ${name} --sync off reads it only by mason sync ${name}`
+            : b.sync.value === "off" ? `sync: off (${b.sync.from === "entry" ? "its entry's" : b.sync.from === "file" ? "the file's" : "the default"}): after its first sync it is read again only by mason sync ${name} — ` +
+                `mason add ${name} --sync "poll 5m" polls it every 5 minutes`
+                : b.sync.value === "replication" ? `sync: replication (${b.sync.from === "entry" ? "its entry's" : "the file's"}): kept current from the database's change log after its first sync — ` +
+                    `mason add ${name} --sync "poll 5m" polls it instead`
+                    : `sync: ${b.sync.value} (${b.sync.from === "entry" ? "its entry's" : "the file's"}): polled every ${b.sync.value.slice("poll ".length)} after its first sync — mason add ${name} --sync off stops that`;
+    return { line: `Added ${b.table} to ${file}: ${copies}${b.key ? `, keyed by ${b.key.join(", ")}` : ""}${b.already ? " (already so)" : ""}`, notes: [
+            sync,
+            ...(b.pollCost !== null ? [b.pollCost] : []),
+            ...(b.addedKey.length ? [`key added: ${b.addedKey.join(", ")} (a synced table always has its key)`] : []),
             // a secret is readable by anyone with a user's password: left out, and said, with the way to include one
             ...(s.length ? [`left out ${s.join(", ")}: ${s.length === 1 ? "it looks" : "they look"} like ${s.length === 1 ? "a secret" : "secrets"}, ` +
                     `which anyone with a user's password could read (--include ${s[0]} adds it)`] : []),
@@ -862,8 +1216,10 @@ export function addedLines(b, file) {
 const REMOVE_USAGE = `usage: mason remove <table>… [--json]
 
   Takes tables out of the project: each one's entry in the sources file (mason/sources/<name>.yml) is removed, the
-  rest of the file as it was. With Mason running it stops copying the table and drops its copy at once; with Mason
-  stopped, a copy an earlier run made is dropped at the next mason start.
+  rest of the file as it was. With Mason running it stops syncing the table and drops its synced data at once; with Mason
+  stopped, what an earlier run synced is dropped at the next mason start. A project deployed as committed
+  (MASON_PROJECT_READONLY=1 where Mason runs) is refused, its files left as they are: remove it where the project is
+  committed, then deploy.
 
     mason remove customers
     mason remove customers billing.invoices     several at once
@@ -874,7 +1230,7 @@ export const REMOVE = {
     // the project, not the run, as mason add
     needs: "project",
     name: "remove",
-    summary: "take tables out of the sources file: mason remove customers (its copy is dropped)",
+    summary: "take tables out of the sources file: mason remove customers (its synced data is dropped)",
     usage: REMOVE_USAGE,
     options: { json: { type: "boolean" } },
     json: ["removed", "file", "next"],
@@ -891,6 +1247,10 @@ export async function remove(argv) {
     // (a state with no project never meets the need: reach said it)
     if (where === null || where.project === null)
         return 1;
+    // read-only, as mason add (src/cli/project.ts projectWriteRefusal): refused before the run or the database is asked
+    const readOnly = projectWriteRefusal(where.project.root, process.env);
+    if (readOnly !== null)
+        return failed("remove", readOnly, { json });
     if (where.state === "up") {
         // Mason up: the run removes it and drops the copy at once (src/cli/run-server.ts removeTables)
         const run = where.run;
@@ -910,7 +1270,7 @@ function removedAnswer(r, names, running, json) {
     }
     const b = r.ok;
     const next = running ? [["mason status", "the tables left"]]
-        : [["mason start", "Mason in the background, for this project: it copies the tables left"], ["mason status", "the tables left"]];
+        : [["mason start", "Mason in the background, for this project: it syncs the tables left"], ["mason status", "the tables left"]];
     if (json) {
         out(jsonText(REMOVE, { removed: b.removed, file: b.file }, next));
         return 0;
@@ -925,41 +1285,62 @@ export function removedReport(removed, file, o = {}) {
     const one = removed.length === 1;
     return { headline: `Removed ${removed.join(", ")}`, details: [["from", file]],
         // Mason down (the web page always has a run): a copy an earlier run made is dropped by the next start's sync
-        tips: [o.running === false ? `a copy an earlier run made of ${one ? "it" : "them"} is dropped at the next mason start`
-                : `Mason stops copying ${one ? "it" : "them"} and drops ${one ? "its copy" : "their copies"}`] };
+        tips: [o.running === false ? `what an earlier run synced of ${one ? "it" : "them"} is dropped at the next mason start`
+                : `Mason stops syncing ${one ? "it" : "them"} and drops ${one ? "its synced data" : "their synced data"}`] };
 }
 // ------------------------------------------------------------------ mason wait
 /** An added table as mason wait --json says it: its copy, its error, and how it is kept current, as the run's state has
  *  them (mason status --json's own fields, never derived again here) */
 export function waitTable(t) {
-    return { table: t.table, copy: t.copy, error: t.error, ...(t.unsynced ? { unsynced: t.unsynced } : {}), ...(t.kept ? { kept: t.kept } : {}) };
+    return { table: t.table, copy: t.copy, error: t.error, ...(t.kept ? { kept: t.kept } : {}), ...(t.sync ? { sync: t.sync } : {}) };
 }
-const WAIT_USAGE = `usage: mason wait [--timeout <seconds>] [--json]
+const WAIT_USAGE = `usage: mason wait [<generated table>] [--timeout <seconds>] [--json]
 
-  Waits until every added table is copied and served, showing every added table on a line of its own: 100% for the
-  finished (in the order they finished), a bar for the ones still copying, at the bottom. Run it after mason add.
+  Waits until every added table is synced and served, showing every added table on a line of its own: 100% for the
+  finished (in the order they finished), a bar for the ones still syncing, at the bottom. Run it after mason add.
+  Named, a generated table instead: waits until it holds every change Mason had synced when the wait began, across its
+  chain (the tables it is generated from, and theirs), so what is read from it next includes them.
 
     mason add orders && mason wait
     mason wait --timeout 3600     a large table: wait up to an hour
+    mason wait daily_requests     a generated table: until it holds what is synced now
 
-  --timeout <seconds>   how long to wait (default 600); the copy goes on after, and mason wait again picks it up
+  --timeout <seconds>   how long to wait (default 600); the sync goes on after, and mason wait again picks it up
   --json                as data, once it ends: { ready, failed, waiting, timedOut, tables: [{ table, copy, error,
-                        unsynced, kept }] (copy: { phase, rowsCopied, progress: the chunks done, reading and for how
-                        long, the rate, the seconds left, while its chunks are read }; unsynced: { reason, asOf }
-                        and kept as mason status --json says them — kept's pending, when it applies, says why the
-                        copy is not kept current now, its phase included),
+                        kept }] (copy: { phase, rowsCopied, progress: the chunks done, reading and for how long, the
+                        rate, the seconds left, while its chunks are read }; kept as mason status --json says it —
+                        { by: poll, sync: { mode: off } or { mode: poll, every, seconds }, syncedAt (its last whole read
+                        or poll), nextAt (its next poll; null: off) }; kept's pending, when it applies, says why
+                        it is not kept current now, its phase included; sync as mason status --json says it: its state —
+                        synced, syncing, behind, failed, waiting — asOf, promisedSeconds, behindBySeconds, behindWhy),
                         stream (replication mode: where the stream is, as mason status --json says it), error (on a
                         failure or a timeout: { code, message, next }), next }
+                        Named, a generated table: the same ready, failed, waiting, timedOut, error and next, tables
+                        empty, and generatedTable (as mason status --json's generatedTables says it: its state,
+                        behindSeconds, behindSince — when the oldest change not in it was committed, null: none)
 
-  Exit status: 0 ready; 1 a copy failed (printed, with what to do; Mason tries it again by itself); 124 timed out.
+  Exit status: 0 ready (a table behind what its sync: promises is said on its line, and ready); 1 a first sync failed,
+  or the sync keeping a synced table current failed (its poll, its catch-up, the stream, or a named publication that
+  does not carry it), or the generated table's run failed, or it or a parent was refused
+  before it was built (printed, with what to do; Mason tries a failed one again by itself); 124 timed out.
+  A generated table that serves and holds everything synced is ready (0) though its last run failed: after editing its
+  file, read mason status for whether the new definition was refused or failed.
 `;
+/** how often a wait not drawn in place says its block again though nothing in it changed, so a long one never goes
+ *  quiet: the copies' wait and a generated table's */
+export const SAY_AGAIN_MS = 30_000;
+/** whether a wait says its block now: what it is changed (`what`, its numbers taken out), or `every` ms went by since it
+ *  last said it */
+export function sayAgain(what, said, saidAt, now, every = SAY_AGAIN_MS) {
+    return what !== said || now - saidAt >= every;
+}
 export const WAIT = {
     needs: "run",
     name: "wait",
-    summary: "wait until every added table is copied and served (exit 0; 1 on a failure, with why)",
+    summary: "wait until every added table is synced, or a generated table holds what is synced now (1: a failure)",
     usage: WAIT_USAGE,
     options: { json: { type: "boolean" }, timeout: { type: "string" } },
-    json: ["ready", "failed", "waiting", "timedOut", "tables", "stream", "error", "next"],
+    json: ["ready", "failed", "waiting", "timedOut", "tables", "stream", "generatedTable", "error", "next"],
 };
 export async function wait(argv) {
     const f = parseCommand(WAIT, argv);
@@ -969,9 +1350,14 @@ export async function wait(argv) {
     const timeout = f.values.timeout === undefined ? 600 : Number(f.values.timeout);
     if (!Number.isFinite(timeout) || timeout <= 0)
         return failed("wait", { message: `--timeout is a number of seconds, not ${JSON.stringify(f.values.timeout)}`, code: "usage" }, { json });
+    if (f.positionals.length > 1)
+        return failed("wait", { message: `name one generated table, not ${f.positionals.length}`, code: "usage", usage: WAIT_USAGE }, { json });
+    const named = f.positionals[0];
     const run = await runOr(WAIT, json);
     if (!run)
         return 1;
+    if (named !== undefined)
+        return waitGenerated(run, named, timeout, json);
     return guarded("wait", json, async () => {
         const until = Date.now() + timeout * 1000;
         // a terminal gets the block — every added table on its line (tableLines), then the stream — redrawn in place;
@@ -996,7 +1382,7 @@ export async function wait(argv) {
             }
             // the same work, other numbers (a stream's positions included: they move with every change)
             const what = lines.join("\n").replace(/[█░]+/g, "").replace(/\b[0-9A-F]+\/[0-9A-F]+\b/g, "#").replace(/[\d,.]+(%| rows\/s| s| min| h)?/g, "#");
-            if (what !== said || Date.now() - saidAt >= 30_000) {
+            if (sayAgain(what, said, saidAt, Date.now())) {
                 err(lines.map((l) => `  ${l}`).join("\n"));
                 said = what;
                 saidAt = Date.now();
@@ -1011,11 +1397,11 @@ export async function wait(argv) {
             // the outcome and what to run next, the same for a person and under --json
             const readyNext = picked.length ? [...READY_STEPS] : addSteps(s.tables);
             const failure = r.failed.length
-                ? { message: r.failed.length === 1 ? r.failed[0] : `${r.failed.length} copies failed`, code: "failed", why: r.failed.length === 1 ? undefined : r.failed.join("\n"),
-                    fix: "Mason tries a failed copy again by itself; mason logs says why it failed and when it tries next",
+                ? { message: r.failed.length === 1 ? r.failed[0] : `${r.failed.length} first syncs failed`, code: "failed", why: r.failed.length === 1 ? undefined : r.failed.join("\n"),
+                    fix: "Mason tries a failed first sync again by itself; mason logs says why it failed and when it tries next",
                     next: [["mason logs", "the detail of each failure"], ["mason status", "the rest of the project"]] }
                 : !done && Date.now() >= until
-                    ? { message: `not ready after ${timeout} s`, code: "timeout", why: r.waiting.join("\n"), fix: "nothing stopped: the copies go on",
+                    ? { message: `not ready after ${timeout} s`, code: "timeout", why: r.waiting.join("\n"), fix: "nothing stopped: the syncs go on",
                         next: [["mason wait", "keep waiting (--timeout <seconds> for longer)"], ["mason status", "what Mason is doing"]] }
                     : null;
             if (json && (done || failure)) {
@@ -1025,10 +1411,10 @@ export async function wait(argv) {
             // the block as it ends, too: every table at 100% beside Ready (when the last change was not printed yet)
             // while at work: a table already copied can be queried now; the final Next is Ready's, printed once below
             const copied = picked.some((t) => t.copy?.phase === "done");
-            const meanwhile = done ? [] : [...(copied ? [["mason user add <name>", "a user for your BI tool or psql: a copied table can be queried now"]] : []), ["mason status", "what Mason is doing"]];
+            const meanwhile = done ? [] : [...(copied ? [["mason user add <name>", "a user for your BI tool or psql: a synced table can be queried now"]] : []), ["mason status", "what Mason is doing"]];
             show([...tableLines(s), ...(s.stream ? ["Stream:", ...streamLines(s.stream).map((l) => `  ${l}`)] : [])], meanwhile); // done: the meanwhile Next is dropped
             if (r.ready) {
-                const head = !picked.length ? "Nothing to wait for: no table added yet." : "Ready: every added table is copied and served.";
+                const head = !picked.length ? "Nothing to wait for: no table added yet." : "Ready: every added table is synced and served.";
                 if (!json)
                     out(withEnd(picked.length ? styleOut().green(head) : head, { next: readyNext }));
                 return 0;
@@ -1039,39 +1425,123 @@ export async function wait(argv) {
         }
     });
 }
+/** `mason wait <generated table>`: until it holds every change synced when the wait began (src/cli/readiness.ts
+ *  generatedReadiness), a line when what it waits for changes; the same outcome and exit codes as the wait for copies */
+async function waitGenerated(run, named, timeout, json) {
+    return guarded("wait", json, async () => {
+        const since = Date.now(), until = since + timeout * 1000;
+        let said = "", saidAt = 0;
+        for (;;) {
+            const s = await readState(run);
+            const all = s.generatedTables ?? [];
+            const g = all.find((t) => t.table === named) ?? all.find((t) => t.table === `public.${named}`);
+            if (g === undefined) {
+                const names = all.map((t) => entryName(t.table));
+                return failed("wait", { message: `no generated table ${JSON.stringify(named)}${names.length ? "" : ": the project has none"}`, code: "not_found",
+                    ...(names.length ? { fix: `name one of: ${names.join(", ")}` } : {}), next: [["mason status", "the generated tables and what each is doing"]] }, { json });
+            }
+            const r = generatedReadiness(g, since);
+            const next = [["mason status", "the generated tables and what each is doing"]];
+            const failure = r.failed.length
+                ? { message: r.failed[0], code: "failed", fix: "Mason tries a failed run again by itself; mason logs says why it failed", next: [["mason logs", "the detail of the failure"], ...next] }
+                : !r.ready && Date.now() >= until
+                    ? { message: `${g.table} does not hold what was synced ${timeout} s ago yet`, code: "timeout", why: r.waiting.join("\n"), fix: "nothing stopped: its runs go on",
+                        next: [[`mason wait ${entryName(g.table)}`, "keep waiting (--timeout <seconds> for longer)"], ...next] }
+                    : null;
+            if (json && (r.ready || failure)) {
+                out(jsonText(WAIT, { ...r, timedOut: !r.ready && failure?.code === "timeout", tables: [], generatedTable: g, ...(failure ? { error: errorJson(failure) } : {}) }, failure ? failure.next ?? [] : next));
+            }
+            if (r.ready) {
+                if (!json)
+                    out(withEnd(styleOut().green(`Ready: ${g.table} holds every change synced when the wait began.`), { next }));
+                return 0;
+            }
+            if (failure)
+                return json ? (failure.code === "timeout" ? 124 : 1) : failed("wait", failure, { json: false });
+            const line = r.waiting.join("\n").replace(/\d+ s behind/, "# s behind");
+            // when what it waits for changes, and every 30 s while it does not, as the copies' wait says its block
+            if (!json && sayAgain(line, said, saidAt, Date.now())) {
+                err(`  ${r.waiting.join("\n  ")}`);
+                said = line;
+                saidAt = Date.now();
+            }
+            await new Promise((res) => setTimeout(res, 1000));
+        }
+    });
+}
 // ------------------------------------------------------------------ mason logs
-const LOGS_USAGE = `usage: mason logs [-n <lines>] [-f] [--start] [--requests [--failed]] [--json]
+/** What the sync's events leave out, said where they are listed (mason logs --help, the page's Sync events, held equal
+ *  by tests/web-page.test.ts): a scheduled poll that succeeds is no event, so a person who synced reads where it is. */
+export const EVENTS_LEAVE_OUT = "A scheduled poll that succeeds is not listed: the last one's result is each table's last sync (mason status, the Tables page's Last sync).";
+const LOGS_USAGE = `usage: mason logs [-n <lines>] [-f] [--start] [--requests [<filters>]] [--events [--failed]] [--running] [--json]
 
-  The last lines of Mason's log: every copy, poll and statement it ran, warnings and errors with their reasons —
+  The last lines of Mason's log: every sync, poll and statement it ran, warnings and errors with their reasons —
   running or not. With --requests, the run's request log instead: every statement a tool sent the
-  Postgres API that Mason answered, and every one it refused or failed, a line each, newest last — when, the outcome
-  and SQLSTATE, how long, the rows sent, the client's application_name (and the mason user's name), the statement and
-  the error's first line. It is kept MASON_REQUEST_LOG_DAYS days (default 7) in the run's copy, and read through the
-  running Mason.
+  Postgres API that Mason answered, and every one it refused, failed or cancelled, a line each, newest last — when, the
+  outcome and SQLSTATE, how long, the rows sent, the client's application_name (and the mason user's name), the
+  statement and the error's first line; the filters narrow it, and a page that has older rows ends with the line that
+  reads them (--before). With --events, the sync's events: each first sync that failed or finished, each poll, catch-up or
+  stream that failed, the database out of reach, a table current again, each sync asked by hand (mason sync, the
+  page's Sync now) and what it did, and each restart of the run — a line each, newest last (a failure repeated word for
+  word is said once an hour). A scheduled poll that succeeds is not listed: the last one's result is each table's last
+  sync (mason status, the Tables page's Last sync). Both are kept MASON_HISTORY_DAYS days
+  (default 7) in the run's synced data, and read through the running Mason. With --running, the statements running now
+  instead, one per session, each with its number (mason cancel <session> --statement <n> stops one).
 
     mason logs
     mason logs -f                 keep printing new lines as Mason works, until Ctrl-C
     mason logs -n 200 --start     what mason start printed: its steps, and the warnings and errors since
-    mason logs --requests --failed -n 20    the last 20 statements refused or failed
+    mason logs --requests --failed -n 20    the last 20 statements refused, failed or cancelled
+    mason logs --requests --since 2h --user metabase --outcome failed,cancelled
+    mason logs --requests --slow --search orders   the statements over orders that took a second or more
+    mason logs --events --failed  the sync's latest failures
+    mason logs --running          the statements running now, and their sessions
 
-  -n, --lines <n>  how many lines, or with --requests how many requests (default 40)
+  -n, --lines <n>  how many lines, or with --requests or --events how many of them (default 40; 1 to 10000 for each)
   -f, --follow     keep printing new lines until Ctrl-C
   --start          mason start's own terminal instead (its steps, then only the warnings and errors)
   --requests       the Postgres API's requests, from the run's request log (Mason must be running)
-  --failed         with --requests: only the refused and failed ones
-  --json           as data: { lines } (the log's), or with --requests { requests: [{ requestId, startedAt, session,
-                   applicationName, tokenName, user (the mason user), method, outcome (ok, refused, failed), sqlstate, message, detail, hint,
-                   rows, durationMs, query, queryTruncated }], keptDays }; next
+  --events         the sync's events and the run's restarts (Mason must be running)
+  --failed         with --requests: only the ones not answered (refused, failed or cancelled); with --events: only
+                   the failures
+  --outcome <o,…>  with --requests: only these outcomes — ok, refused (the statement's own fault), failed (Mason's or
+                   the machine's), cancelled (a cancel or a statement timeout, SQLSTATE 57014)
+  --since <time>   with --requests: started at or after it — an age (30m, 2h, 7d) or an ISO 8601 date or time with
+                   its zone (2026-10-28, 2026-10-28T09:00:00Z)
+  --until <time>   with --requests: started before it (as --since)
+  --user <name>    with --requests: the mason user's statements
+  --client <name>  with --requests: the statements of the client whose application_name it is
+  --slow           with --requests: only the ones that took ${(SLOW_MS / 1000).toLocaleString("en-US")} s or more (the slow ones mason status lists)
+  --search <text>  with --requests: only the statements whose text has it, in any case (at most ${MAX_SEARCH} characters)
+  --before <pos>   with --requests: the page before: the position a page answered with (its last Next line)
+  --running        the statements running now (Mason must be running)
+  --json           as data: { lines: [{ at, text }] } (the log's entries, oldest first; at is null for a line with no
+                   time); with --requests { requests: [{ requestId, startedAt, endedAt, session, applicationName,
+                   clientAddress (the client's address; behind a TCP proxy, the one its PROXY header carries),
+                   tokenName, user (the mason user), role, attributes (the user's values its role's row filters
+                   read, or null), method, outcome (ok, refused, failed, cancelled), status
+                   (completed, failed, cancelled: what a reader shows), sqlstate, message, detail, hint, rows,
+                   bytesSent, durationMs, query, queryTruncated }], keptDays, before (the position of the page before,
+                   or null: none older) }; with --events { events: [{ at, kind (copy_failed, poll_failed,
+                   catch_up_failed, stream_failed, source_unreachable, restart, copied, recovered, synced (a sync
+                   asked by hand), sync_changed (a table's sync: changed)), failed, table (null: the whole sync),
+                   message }], keptDays }; with --running { running: [{ session, user,
+                   applicationName, method, startedAt, runningMs, rows (sent so far), query, queryTruncated }] }; next
 `;
 export const LOGS = {
     needs: "project",
     name: "logs",
-    summary: "Mason's log: every copy, poll and statement (-f to follow it; --requests, every statement the Postgres API met)",
+    summary: "Mason's log (-f follows it); --requests: the Postgres API's statements; --events: the sync's; --running: running now",
     usage: LOGS_USAGE,
     options: { lines: { type: "string", short: "n" }, follow: { type: "boolean", short: "f" }, start: { type: "boolean" },
-        requests: { type: "boolean" }, failed: { type: "boolean" }, json: { type: "boolean" } },
-    json: ["lines", "requests", "keptDays", "next"],
+        requests: { type: "boolean" }, events: { type: "boolean" }, failed: { type: "boolean" }, outcome: { type: "string" }, since: { type: "string" },
+        until: { type: "string" }, user: { type: "string" }, client: { type: "string" }, slow: { type: "boolean" }, search: { type: "string" }, before: { type: "string" }, running: { type: "boolean" }, json: { type: "boolean" } },
+    json: ["lines", "requests", "events", "keptDays", "before", "running", "next"],
 };
+/** the request log's filters as mason logs spells them: -n, --since, … (src/cli/request-filter.ts names each so) */
+const flagOf = (k) => k === "limit" ? "-n" : `--${k}`;
+/** the filters of --requests (every one but -n) */
+const FILTER_FLAGS = ["failed", "outcome", "since", "until", "user", "client", "slow", "search", "before"];
 /**
  * One request of the run's ledger on one line (src/duck/requests.ts): when, the outcome and SQLSTATE, how long,
  * the rows sent, who (application_name, a mason user's name), the statement on one line and the error's first line.
@@ -1081,55 +1551,181 @@ export function requestLine(r, st) {
     const paint = r.outcome === "ok" ? st.green : r.outcome === "failed" ? st.red : st.yellow;
     const rows = r.rows === null ? "" : `${n(r.rows)} row${r.rows === 1 ? "" : "s"}`;
     const who = `${r.applicationName || "(no application_name)"}${r.tokenName ? ` (token ${r.tokenName})` : ""}${r.user ? ` (user ${r.user})` : ""}`;
-    return `${r.startedAt.slice(0, 19).replace("T", " ")}  ${paint(word.padEnd(13))}  ${`${n(r.durationMs)} ms`.padStart(9)}  ${rows.padStart(11)}  ${who}  ` +
+    return `${r.startedAt.slice(0, 19).replace("T", " ")}  ${paint(word.padEnd(15))}  ${msText(r.durationMs).padStart(9)}  ${rows.padStart(11)}  ${who}  ` +
         `${oneLine(r.query, 120) || "(no statement)"}${r.message ? ` — ${firstLine(r.message)}` : ""}`;
 }
+/** One statement running now on one line (src/api/postgres/server.ts RunningStatement): its session, how long, who, what. */
+export function runningLine(r) {
+    const who = `${r.applicationName || "(no application_name)"}${r.user ? ` (user ${r.user})` : ""}`;
+    return `session ${String(r.session).padEnd(5)}  statement ${String(r.statement).padEnd(6)}  ${spanText(r.runningMs / 1000).padStart(8)}  ${`${n(r.rows)} row${r.rows === 1 ? "" : "s"} sent`.padStart(14)}  ${who}  ` +
+        `${oneLine(r.query, 120) || "(no statement)"}`;
+}
+/** The mason logs line that reads the same filters again, a page further back (`before`, the page's cursor). */
+function olderPage(q, before) {
+    const quote = (v) => /^[\w.:,~+-]+$/.test(v) ? v : `'${v.replaceAll("'", "'\\''")}'`;
+    const parts = ["mason logs --requests", ...(q.limit !== DEFAULT_REQUEST_LIMIT ? [`-n ${q.limit}`] : [])];
+    if (q.failed === true)
+        parts.push("--failed");
+    if (q.outcomes !== undefined)
+        parts.push(`--outcome ${q.outcomes.join(",")}`);
+    for (const k of ["since", "until", "user", "client"]) {
+        const v = q[k];
+        if (v !== undefined)
+            parts.push(`--${k} ${quote(v)}`);
+    }
+    if (q.minMs !== undefined)
+        parts.push("--slow");
+    if (q.search !== undefined)
+        parts.push(`--search ${quote(q.search)}`);
+    parts.push(`--before ${quote(before)}`);
+    return parts.join(" ");
+}
+/**
+ * WHAT THE REQUEST LOG DOES NOT LIST, said where a first statement is looked for (`mason logs --requests` with none, the
+ * Queries page; src/web/shared.js, held equal by the tests): a catalog read, a SET or a SHOW is the protocol's chatter —
+ * a BI tool sends hundreds as it connects — and is not recorded (src/api/postgres/server.ts `recordRequest`), so a
+ * `select 1` typed to test the connection is answered and never appears.
+ */
+export const UNLISTED_STATEMENTS = "A statement that reads no synced table (select 1, SET, SHOW, a BI tool's catalog queries) is answered but not listed";
 /** mason logs --requests: the run's ledger through its command server (one process holds the copy's file) */
-async function requestLogs(limit, failedOnly, json) {
+async function requestLogs(q, json) {
     const r0 = await theRun(process.cwd());
     if ("problem" in r0)
         return failed("logs", r0, { json });
     return guarded("logs", json, async () => {
-        const reply = await callRun(r0.run, "GET", `/api/requests?limit=${limit}${failedOnly ? "&failed=1" : ""}`);
-        if (reply.status !== 200) {
-            return failed("logs", { message: String(reply.body.error ?? `the run answered ${reply.status}`), code: reply.status === 409 ? "refused" : "failed",
-                next: [["mason status", "the slow and refused queries of the last day"], ["mason logs", "Mason's log"]] }, { json });
-        }
+        const reply = await callRun(r0.run, "GET", `/api/requests?${requestFilterParams(q).toString()}`);
+        if (reply.status !== 200)
+            return failed("logs", runFailure(reply, [["mason status", "the slow and refused queries of the last day"], ["mason logs", "Mason's log"]]), { json });
         const requests = reply.body.requests;
         const keptDays = Number(reply.body.keptDays);
-        const next = failedOnly ? [["mason logs --requests", "every request, answered or not"], ["mason logs", "Mason's log, where each refusal is a line too"]]
-            : [["mason logs --requests --failed", "only the refused and failed ones"], ["mason status", "the slow and refused ones of the last day, grouped"]];
+        const before = typeof reply.body.before === "string" ? reply.body.before : null;
+        const filtered = q.failed === true || q.outcomes !== undefined || q.since !== undefined || q.until !== undefined || q.user !== undefined || q.client !== undefined ||
+            q.minMs !== undefined || q.search !== undefined;
+        const next = [
+            ...(before !== null ? [[olderPage(q, before), "the page before this one"]] : []),
+            ...(filtered ? [["mason logs --requests", "every request, answered or not"]] : [["mason logs --requests --failed", "only the ones not answered"]]),
+            ["mason status", "the last day's and week's statements, and the slow and refused ones grouped"],
+        ];
         if (json) {
-            out(jsonText(LOGS, { requests, keptDays }, next));
+            out(jsonText(LOGS, { requests, keptDays, before }, next));
             return 0;
         }
         const st = styleOut();
         if (!requests.length)
-            out(`No ${failedOnly ? "refused or failed request" : "request"} in the last ${keptDays} day${keptDays === 1 ? "" : "s"} (MASON_REQUEST_LOG_DAYS).`);
+            out(`No ${filtered ? "request that passes the filters" : "request"} in the last ${keptDays} day${keptDays === 1 ? "" : "s"} (MASON_HISTORY_DAYS).`);
         for (const r of requests)
             out(requestLine(r, st));
+        out(endText({ next, ...(!requests.length && !filtered ? { tips: [`${UNLISTED_STATEMENTS}.`] } : {}) }, st));
+        return 0;
+    });
+}
+/** mason logs --events: the sync's events and the run's restarts through its command server (src/duck/events.ts) */
+async function eventLogs(limit, failedOnly, json) {
+    const r0 = await theRun(process.cwd());
+    if ("problem" in r0)
+        return failed("logs", r0, { json });
+    return guarded("logs", json, async () => {
+        const reply = await callRun(r0.run, "GET", `/api/events?limit=${limit}${failedOnly ? "&failed=1" : ""}`);
+        if (reply.status !== 200) {
+            return failed("logs", runFailure(reply, [["mason status", "each synced table and its error now"], ["mason logs", "Mason's log, where each event is a line too"]]), { json });
+        }
+        const events = reply.body.events;
+        const keptDays = Number(reply.body.keptDays);
+        const next = failedOnly ? [["mason logs --events", "every event, the first syncs finished and the tables current again too"], ["mason status", "each synced table and its error now"]]
+            : [["mason logs --events --failed", "only the failures"], ["mason status", "each synced table and its error now"]];
+        if (json) {
+            out(jsonText(LOGS, { events, keptDays }, next));
+            return 0;
+        }
+        const st = styleOut();
+        if (!events.length)
+            out(`No ${failedOnly ? "sync failure" : "sync event"} in the last ${keptDays} day${keptDays === 1 ? "" : "s"} (MASON_HISTORY_DAYS).`);
+        for (const e of events)
+            out(eventLine(e, st));
         out(endText({ next }, st));
         return 0;
     });
 }
+/** mason logs --running: the statements the listener runs now, through the run's command server */
+async function runningLogs(json) {
+    const r0 = await theRun(process.cwd());
+    if ("problem" in r0)
+        return failed("logs", r0, { json });
+    return guarded("logs", json, async () => {
+        const reply = await callRun(r0.run, "GET", "/api/running");
+        if (reply.status !== 200)
+            return failed("logs", runFailure(reply, [["mason logs", "Mason's log"]]), { json });
+        const running = reply.body.running;
+        const next = running.length
+            ? [[`mason cancel ${running[0].session} --statement ${running[0].statement}`, "stop a session's statement, as a client's cancel does"], ["mason logs --requests", "the statements answered, refused and cancelled"]]
+            : [["mason logs --requests", "the statements answered, refused and cancelled"]];
+        if (json) {
+            out(jsonText(LOGS, { running }, next));
+            return 0;
+        }
+        const st = styleOut();
+        out(running.length ? st.bold(`Running now (${running.length}):`) : "No statement is running now.");
+        for (const r of running)
+            out(`  ${runningLine(r)}`);
+        out(endText({ next }, st));
+        return 0;
+    });
+}
+/** A refusal the run answered, in the Failure shape it carries (`failure`, src/cli/run-server.ts sendFailure). */
+export function runFailure(reply, next) {
+    const f = reply.body.failure;
+    const code = typeof f?.code === "string" ? f.code : reply.status === 400 ? "usage" : reply.status === 404 ? "not_found" : reply.status === 409 ? "refused" : "failed";
+    return { message: typeof f?.message === "string" ? f.message : String(reply.body.error ?? `the run answered ${reply.status}`), code,
+        ...(typeof f?.why === "string" ? { why: f.why } : {}), ...(typeof f?.fix === "string" ? { fix: f.fix } : {}), next };
+}
 export async function logs(argv) {
     const f = parseCommand(LOGS, argv);
     if (typeof f === "number")
         return f;
     const json = f.values.json === true;
-    const lines = f.values.lines === undefined ? 40 : Number(f.values.lines);
-    if (!Number.isInteger(lines) || lines < 0)
-        return failed("logs", { message: `-n (--lines) is a number of lines, not ${JSON.stringify(f.values.lines)}`, code: "usage" }, { json });
-    if (f.values.failed && !f.values.requests)
-        return failed("logs", { message: "--failed is a filter of --requests", code: "usage", fix: "mason logs --requests --failed" }, { json });
+    if (f.values.requests && f.values.events)
+        return failed("logs", { message: "--requests and --events are two lists: ask for one", code: "usage", fix: "mason logs --requests, or mason logs --events" }, { json });
+    if (f.values.failed && !f.values.requests && !f.values.events)
+        return failed("logs", { message: "--failed is a filter of --requests or --events", code: "usage", fix: "mason logs --requests --failed, or mason logs --events --failed" }, { json });
+    // the request log's own filters (--failed is --events' too)
+    const filter = FILTER_FLAGS.find((k) => k !== "failed" && f.values[k] !== undefined);
+    if (filter !== undefined && !f.values.requests) {
+        return failed("logs", { message: `--${filter} is a filter of --requests`, code: "usage", fix: `mason logs --requests --${filter} …` }, { json });
+    }
+    if (f.values.running && (f.values.requests || f.values.events || f.values.start || f.values.follow)) {
+        const other = f.values.requests ? "--requests" : f.values.events ? "--events" : f.values.start ? "--start" : "-f";
+        const whose = other === "--requests" ? "the request log's" : other === "--events" ? "the sync's events'" : "the log file's";
+        return failed("logs", { message: `--running lists the statements running now; ${other} is ${whose}`, code: "usage", fix: `mason logs --running, or mason logs ${other}` }, { json });
+    }
+    if (f.values.running && f.values.lines !== undefined) {
+        return failed("logs", { message: "--running lists every statement running now: -n (--lines) does not apply to it", code: "usage", fix: "mason logs --running" }, { json });
+    }
     if (f.values.requests && (f.values.start || f.values.follow))
         return failed("logs", { message: `--requests lists the request log; ${f.values.start ? "--start" : "-f"} is the log file's`, code: "usage", fix: "mason logs --requests, or mason logs " + (f.values.start ? "--start" : "-f") }, { json });
+    if (f.values.events && (f.values.start || f.values.follow))
+        return failed("logs", { message: `--events lists the sync's events; ${f.values.start ? "--start" : "-f"} is the log file's`, code: "usage", fix: "mason logs --events, or mason logs " + (f.values.start ? "--start" : "-f") }, { json });
     if (json && f.values.follow)
         return failed("logs", { message: "-f prints lines as they come, and --json is one answer", code: "usage", fix: "mason logs --json, or mason logs -f" }, { json });
+    if (f.values.running)
+        return runningLogs(json);
     if (f.values.requests) {
-        if (lines < 1)
-            return failed("logs", { message: "-n with --requests is a number of requests, 1 or more", code: "usage" }, { json });
-        return requestLogs(lines, f.values.failed === true, json);
+        // the filters, read as the run reads its query string (src/cli/request-filter.ts): a mistake is said here, exit 2
+        const text = (v) => typeof v === "string" ? v : undefined;
+        const q = requestFilter({ limit: text(f.values.lines), failed: f.values.failed === true, outcome: text(f.values.outcome), since: text(f.values.since),
+            until: text(f.values.until), user: text(f.values.user), client: text(f.values.client),
+            slow: f.values.slow === true, search: text(f.values.search), before: text(f.values.before) }, Date.now(), flagOf);
+        if ("message" in q)
+            return failed("logs", { ...q, usage: LOGS_USAGE }, { json });
+        return requestLogs(q, json);
+    }
+    const lines = f.values.lines === undefined ? 40 : Number(f.values.lines);
+    if (!Number.isInteger(lines) || lines < 0)
+        return failed("logs", { message: `-n (--lines) is a number of lines, not ${JSON.stringify(f.values.lines)}`, code: "usage" }, { json });
+    if (f.values.events) {
+        const limit = eventLimit(typeof f.values.lines === "string" ? f.values.lines : undefined, "-n");
+        if (typeof limit !== "number")
+            return failed("logs", { ...limit, usage: LOGS_USAGE }, { json });
+        return eventLogs(limit, f.values.failed === true, json);
     }
     // a stopped run's log is still worth reading: the project's, running or not
     const t = theProject(process.cwd());
@@ -1137,58 +1733,56 @@ export async function logs(argv) {
         return failed("logs", t, { json });
     // the run's log by default (mason logs once showed no actual logs: it showed
     // mason start's terminal, which after the start carries only warnings and errors)
-    const file = path.join(t.project.dir, f.values.start ? "dev.log" : "mason.log");
+    const file = logPath(t.project.dir, f.values.start ? "start" : "run");
     if (!fs.existsSync(file)) {
         return failed("logs", { message: `${file} does not exist yet`, code: "nothing_yet", why: `Mason has not run for ${t.project.config.name}`, next: [["mason start", "start it, in the background"]] }, { json });
     }
-    const text = fs.readFileSync(file, "utf8");
-    const all = text.split("\n");
-    if (all[all.length - 1] === "")
-        all.pop();
+    // read through the one reader, every line masked as it is read (src/lib/log-read.ts, issue 621: an older Mason's lines
+    // held the source's password in a `password=` value); a line not yet ended is -f's to show as it stands, else read whole
+    const reader = new LogReader(file);
+    const read = reader.readLines();
+    const unended = f.values.follow ? "" : reader.rest();
+    if (unended !== "")
+        read.push(unended);
+    // WHY THE FILE, even with the run up: it is the whole record (the run's memory keeps only its last LOG_KEPT entries,
+    // src/lib/log-buffer.ts) and the only one when the run is down. The entries are parsed by the buffer's own parser, so
+    // `{ at, text }` is the shape of GET /api/logs too (the run's answer, which a `mason serve` run has no file for).
+    // -n counts entries, a multi-line one being ONE; dev.log's lines (the start's steps, indented under each other) are a line each.
+    const all = entriesOfLines(read, { perLine: f.values.start === true });
+    const last = all.slice(Math.max(0, all.length - lines));
     if (json) {
-        out(jsonText(LOGS, { lines: all.slice(Math.max(0, all.length - lines)) }, [["mason logs --requests", "every statement the Postgres API met"]]));
+        out(jsonText(LOGS, { lines: last }, [["mason logs --requests", "every statement the Postgres API met"]]));
         return 0;
     }
-    for (const l of all.slice(Math.max(0, all.length - lines)))
-        out(l);
+    for (const l of last)
+        out(logLineText(l));
     if (!f.values.follow)
         return 0;
-    let offset = Buffer.byteLength(text);
     for (;;) {
+        // the lines written since, each masked once it is whole, then the line not ended yet as it stands, masked (a run
+        // killed mid-write leaves its last words unended); a new run that started the file over is read from its start
+        const more = reader.follow();
+        if (more !== "")
+            process.stdout.write(more);
         await new Promise((res) => setTimeout(res, 500));
-        const size = fs.statSync(file).size;
-        if (size < offset)
-            offset = 0; // a new run started the file over
-        if (size === offset)
-            continue;
-        const buf = Buffer.alloc(size - offset);
-        const fd = fs.openSync(file, "r");
-        try {
-            fs.readSync(fd, buf, 0, buf.length, offset);
-        }
-        finally {
-            fs.closeSync(fd);
-        }
-        offset = size;
-        process.stdout.write(buf.toString());
     }
 }
 // ------------------------------------------------------------------ mason stop
 const STOP_USAGE = `usage: mason stop [--json]
 
-  Stops Mason for this folder's project. The copy of your data and Mason's state stay: the next mason start resumes
+  Stops Mason for this folder's project. The synced data and Mason's state stay: the next mason start resumes
   in seconds, reading only what changed.
 
     mason stop
 
-  mason destroy removes the copy and the state too (your files stay), to free the disk or begin again.
+  mason destroy removes the synced data and the state too (your files stay), to free the disk or begin again.
 
   --json    as data: { stopped: [name], killed (a run that did not answer and ignored SIGTERM), supervisor (its pid, when one was stopped), next }
 `;
 export const STOP = {
     needs: "project",
     name: "stop",
-    summary: "stop Mason for this folder's project (the copy stays: the next mason start resumes)",
+    summary: "stop Mason for this folder's project (the synced data stays: the next mason start resumes)",
     usage: STOP_USAGE,
     options: { json: { type: "boolean" } },
     json: ["stopped", "killed", "supervisor", "next"],
@@ -1198,7 +1792,7 @@ export async function stop(argv) {
     if (typeof f === "number")
         return f;
     const json = f.values.json === true;
-    const next = [["mason start", "resume, in seconds (in the project's folder)"], ["mason destroy", "remove its copy of the data and its state; your files stay"]];
+    const next = [["mason start", "resume, in seconds (in the project's folder)"], ["mason destroy", "remove its synced data and its state; your files stay"]];
     const r = await theRun(process.cwd());
     if ("problem" in r && r.hung !== undefined) {
         // A RUN THAT DOES NOT ANSWER (src/cli/runs.ts "alive and silent"): its supervisor first, so it is not started again
@@ -1225,7 +1819,7 @@ export async function stop(argv) {
             return 0;
         }
         out(reportText({ headline: `Stopped ${hung.name}`, details: [["how", `${how}${sup === null ? "" : `; its supervisor (pid ${sup}) will not start it again`}`],
-                ["kept", "its copy of the data and its state (DuckDB recovers from its write-ahead log at the next start)"], ["log", "mason logs shows what it was doing"]] }));
+                ["kept", "its synced data and its state (it recovers from its write-ahead log at the next start)"], ["log", "mason logs shows what it was doing"]] }));
         out(endText({ next }));
         return 0;
     }
@@ -1261,7 +1855,8 @@ export async function stop(argv) {
         return failed("stop", { message: `Mason for ${run.name} (pid ${run.pid}) is still running after 90 s`, code: "failed", next: [["mason logs", "what it is doing"]] }, { json });
     // a replication slot outlives the run that reads it, and holds the database's WAL meanwhile: said where it is left
     const recorded = readProject(run.root);
-    const replicating = isProject(recorded) && recorded.config.changes === "replication";
+    // what a start made on the database, as it recorded it (src/cli/dev.ts): a project none of whose tables is replicated has none
+    const replicating = isProject(recorded) && (recorded.config.replication ?? null) !== null;
     const named = isProject(recorded) ? recorded.config.publication ?? null : null;
     // a demo project's database (src/cli/demo.ts) stays too, as the copy does: said where a person reads the stop
     const demo = isProject(recorded) && recorded.config.demo === true;
@@ -1269,7 +1864,7 @@ export async function stop(argv) {
         out(jsonText(STOP, { stopped: [run.name] }, next));
         return 0;
     }
-    out(reportText({ headline: `Stopped ${run.name}`, details: [["kept", `its copy of the data and its state${demo ? ` and the demo database (${STATE_DIR}/${DEMO_DIR})` : ""}`],
+    out(reportText({ headline: `Stopped ${run.name}`, details: [["kept", `its synced data and its state${demo ? ` and the demo database (${STATE_DIR}/${DEMO_DIR})` : ""}`],
             ...(replicating ? [["slot", `its replication slot stays on the database, holding WAL until the next mason start (mason destroy drops it)`],
                 ["publication", named ? `${named}, its owner's: read as it is, never altered (mason destroy leaves it)` : "Mason's own (mason destroy drops it)"]] : [])] }));
     out(endText({ next }));