latticesql 1.16.0 → 1.16.2

package/README.md

@@ -2300,7 +2300,15 @@ lattice teams join \
 
 The cloud rejects redemption if the caller's claimed email doesn't match the invitation's `invitee_email` (case-insensitive). Sharing an invite token in a public channel is therefore safe — only the addressee can redeem it.
 
-**Other subcommands** (`lattice teams help` for the full list): `list`, `members`, `leave`, `destroy`, `share`, `unshare`, `shared`, `sync`, `link`, `unlink`, `pull`, `push`, `status`.
+**Other subcommands** (`lattice teams help` for the full list): `list`, `members`, `leave`, `destroy`, `share`, `unshare`, `shared`, `sync`, `link`, `unlink`, `pull`, `push`, `status`, `dlq`.
+
+**Dead-letter queue (v1.15+).** A pulled change envelope that fails to apply (e.g. it arrived before the row/table it depends on), and any non-owner-overwrite divergence notice, lands in `__lattice_team_dlq`. Inspect and recover it instead of losing it behind the pull cursor:
+
+```bash
+lattice teams dlq list  --team <name>            # show entries (op, target, error)
+lattice teams dlq retry --team <name> [--id <id>] # replay; a late dependency now applies cleanly
+lattice teams dlq purge --team <name> [--id <id>] # discard without applying
+```
 
 **Per-table ownership + opt-in sharing (v1.14+).** Team members share one physical Postgres, so visibility is enforced at the app layer via a `__lattice_object_owners` table: each table records its creator, and a user sees only the tables they own plus tables explicitly shared to the team. The native `files`/`secrets` objects are owned by the database creator and private by default. Sharing is an explicit, owner-only action (not a side effect of creating a table). The filter gates API access, not just the display.
 

package/dist/cli.js

@@ -435,6 +435,15 @@ function resolveDbPath(raw, configDir2) {
   }
   return resolve(configDir2, raw);
 }
+var warnedDeprecatedRefs = /* @__PURE__ */ new Set();
+function warnDeprecatedRef(entity, field, target) {
+  const key = `${entity}.${field}`;
+  if (warnedDeprecatedRefs.has(key)) return;
+  warnedDeprecatedRefs.add(key);
+  console.warn(
+    `Lattice: one-to-many \`ref:\` on "${entity}.${field}" \u2192 "${target}" is deprecated in favor of many-to-many junction tables and will be removed in 2.0.`
+  );
+}
 function entityToTableDef(entityName, entity) {
   const rawFields = entity.fields;
   if (!rawFields || typeof rawFields !== "object" || Array.isArray(rawFields)) {
@@ -457,6 +466,7 @@ function entityToTableDef(entityName, entity) {
         table: field.ref,
         foreignKey: fieldName
       };
+      warnDeprecatedRef(entityName, fieldName, field.ref);
     }
   }
   const primaryKey = entity.primaryKey ?? pkFromField;
@@ -6238,7 +6248,6 @@ var css = `
       --danger: #ef4444;
       --danger-deep: #dc2626;
       --shadow: 0 1px 2px rgba(0, 0, 0, 0.45);
-      --sidebar-width: 380px;
       --nav-width: 220px;
     }
     * { box-sizing: border-box; }
@@ -6459,30 +6468,11 @@ var css = `
        minimum keeps the track at content-width and the whole page scrolls
        horizontally. */
     .layout {
-      display: grid; grid-template-columns: var(--nav-width) minmax(0, 1fr) var(--sidebar-width);
+      display: grid; grid-template-columns: var(--nav-width) minmax(0, 1fr);
       height: calc(100vh - 56px);
     }
-    .rail-handle { display: none; }
     @media (max-width: 720px) {
-      /* The activity rail becomes a bottom drawer: tap the handle to expand
-         the feed to ~62svh. */
-      .layout { grid-template-columns: var(--nav-width) minmax(0, 1fr); }
-      .assistant-rail {
-        position: fixed; left: 0; right: 0; bottom: 0; z-index: 50;
-        border-left: none; border-top: 1px solid var(--border);
-        max-height: 62svh; box-shadow: 0 -8px 24px rgba(0, 0, 0, 0.4);
-      }
-      .rail-resize { display: none; }
-      .rail-handle {
-        display: block; flex: 0 0 auto; height: 22px; cursor: pointer; position: relative;
-      }
-      .rail-handle::after {
-        content: ''; position: absolute; top: 9px; left: 50%; transform: translateX(-50%);
-        width: 40px; height: 4px; border-radius: 2px; background: var(--border-strong);
-      }
-      .assistant-rail:not(.expanded) { max-height: none; }
-      .assistant-rail:not(.expanded) .rail-feed { display: none; }
-      main#content { padding-bottom: 96px; }
+      main#content { padding-bottom: 24px; }
     }
     nav.sidebar {
       background: var(--surface); border-right: 1px solid var(--border);
@@ -6506,51 +6496,6 @@ var css = `
 
     main#content { padding: 24px; overflow: auto; }
 
-    /* \u2500\u2500 Assistant rail (activity feed) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
-    .assistant-rail {
-      position: relative;
-      background: var(--surface);
-      border-left: 1px solid var(--border);
-      display: flex; flex-direction: column;
-      min-width: 0; overflow: hidden;
-    }
-    .rail-resize {
-      position: absolute; left: 0; top: 0; bottom: 0; width: 5px;
-      cursor: col-resize; background: transparent; z-index: 5;
-      transition: background-color 120ms;
-    }
-    .rail-resize:hover, .rail-resize.dragging { background: var(--accent-soft); }
-    .rail-header {
-      flex: 0 0 auto; padding: 12px 14px; border-bottom: 1px solid var(--border);
-      display: flex; align-items: center; gap: 8px;
-    }
-    .rail-title {
-      font-size: 11px; font-weight: 600; color: var(--text-muted);
-      text-transform: uppercase; letter-spacing: 0.06em; flex: 0 0 auto;
-    }
-    .rail-feed {
-      flex: 1 1 auto; overflow-y: auto; padding: 10px 12px;
-      display: flex; flex-direction: column; gap: 8px;
-    }
-    .rail-empty { color: var(--text-muted); font-size: 12.5px; text-align: center; padding: 18px 8px; }
-    .feed-item {
-      display: grid; grid-template-columns: 20px minmax(0, 1fr) auto; gap: 8px;
-      align-items: baseline; padding: 7px 9px; border-radius: 8px;
-      background: var(--surface-2); border: 1px solid var(--border);
-      animation: feedIn 0.18s ease-out;
-    }
-    @keyframes feedIn { from { opacity: 0; transform: translateY(6px); } to { opacity: 1; transform: translateY(0); } }
-    .feed-icon { text-align: center; font-size: 13px; }
-    .feed-body { min-width: 0; }
-    .feed-summary { font-size: 13px; color: var(--text); word-break: break-word; }
-    .feed-meta { margin-top: 2px; display: flex; align-items: center; gap: 6px; }
-    .feed-source {
-      font-size: 10px; font-weight: 600; text-transform: uppercase; letter-spacing: 0.04em;
-      padding: 1px 6px; border-radius: 999px;
-      background: var(--accent-soft); color: var(--accent);
-    }
-    .feed-time { font-size: 11px; color: var(--text-muted); white-space: nowrap; }
-
     /* \u2500\u2500 File preview (files detail page) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
     .file-preview { margin: 4px 0 16px; }
     .file-preview .file-desc {
@@ -6599,13 +6544,6 @@ var css = `
     .stat-n { font-size: 24px; font-weight: 700; color: var(--text); }
     .stat-tile.warn .stat-n { color: var(--warn); }
     .stat-l { font-size: 12px; color: var(--text-muted); margin-top: 2px; }
-    .dash-recent { margin-top: 26px; max-width: 1100px; }
-    .dash-recent-head { font-size: 13px; font-weight: 600; color: var(--text-muted); text-transform: uppercase; letter-spacing: 0.04em; margin-bottom: 10px; }
-    .dash-recent ul { list-style: none; margin: 0; padding: 0; }
-    .dash-act { display: flex; align-items: center; gap: 10px; padding: 8px 0; border-bottom: 1px solid var(--border); font-size: 14px; }
-    .dash-act-ic { width: 18px; text-align: center; }
-    .dash-act-txt { flex: 1; color: var(--text); }
-    .dash-act-time { font-size: 12px; color: var(--text-muted); }
 
     /* \u2500\u2500 Table view \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500 */
     .view-header {
@@ -7117,6 +7055,8 @@ var css = `
       transition: transform 0.05s ease, border-color 0.15s ease, box-shadow 0.15s ease;
     }
     .fs-tile:hover { border-color: var(--accent); transform: translateY(-1px); }
+    .fs-tile-create { border-style: dashed; background: transparent; }
+    .fs-tile-create .fs-tile-icon { color: var(--accent); }
     .fs-tile-icon { font-size: 40px; line-height: 1; }
     .fs-tile-label {
       font-size: 13px; font-weight: 500; color: var(--text);
@@ -7412,9 +7352,6 @@ var appJs = `
         refreshHistoryState();
         renderRoute();
         startRealtime();
-        initRailResize();
-        initRailDrawer();
-        startFeed();
         initSearch();
         initLastEdited();
         initOffline();
@@ -7770,11 +7707,12 @@ var appJs = `
     }
 
     // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-    // Activity feed \u2014 SSE from /api/feed/stream. Renders every audited
-    // mutation as a bubble in the assistant rail. Unlike the realtime
-    // channel (Postgres-only), this works for SQLite databases too.
+    // Shared activity helpers \u2014 the operation-icon map and relative-time
+    // formatter, used by Version History and the dashboard activity list. The
+    // standalone Activity rail was removed in 1.16.1 (redundant with Version
+    // History); multiplayer realtime convergence runs on the separate realtime
+    // channel (startRealtime), not on this.
     // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-    var feedSource = null;
     var FEED_ICONS = {
       insert: '\u2795', update: '\u270F\uFE0F', delete: '\u{1F5D1}',
       link: '\u{1F517}', unlink: '\u26D3', undo: '\u21B6', redo: '\u21B7', schema: '\u{1F6E0}',
@@ -7790,51 +7728,6 @@ var appJs = `
         return new Date(iso).toLocaleDateString();
       } catch (_) { return ''; }
     }
-    function renderFeedItem(ev) {
-      var feedEl = document.getElementById('rail-feed');
-      if (!feedEl) return;
-      var empty = document.getElementById('rail-empty');
-      if (empty) empty.remove();
-      var item = document.createElement('div');
-      item.className = 'feed-item';
-      var icon = document.createElement('div');
-      icon.className = 'feed-icon';
-      icon.textContent = FEED_ICONS[ev.op] || '\u2022';
-      var body = document.createElement('div');
-      body.className = 'feed-body';
-      var summary = document.createElement('div');
-      summary.className = 'feed-summary';
-      summary.textContent = ev.summary || (String(ev.op || '') + ' ' + String(ev.table || ''));
-      var meta = document.createElement('div');
-      meta.className = 'feed-meta';
-      var src = document.createElement('span');
-      src.className = 'feed-source';
-      src.textContent = ev.source === 'gui' ? 'you' : String(ev.source || '');
-      meta.appendChild(src);
-      body.appendChild(summary);
-      body.appendChild(meta);
-      var time = document.createElement('div');
-      time.className = 'feed-time';
-      time.textContent = relTime(ev.ts);
-      item.appendChild(icon);
-      item.appendChild(body);
-      item.appendChild(time);
-      // Most-recent on top: prepend new items and keep the view scrolled up.
-      feedEl.insertBefore(item, feedEl.firstChild);
-      feedEl.scrollTop = 0;
-    }
-    function startFeed() {
-      if (feedSource) {
-        try { feedSource.close(); } catch (_) { /* ignore */ }
-        feedSource = null;
-      }
-      if (typeof EventSource === 'undefined') return;
-      feedSource = new EventSource('/api/feed/stream');
-      feedSource.addEventListener('feed', function (ev) {
-        try { renderFeedItem(JSON.parse(ev.data)); } catch (_) { /* ignore malformed */ }
-      });
-      // EventSource auto-reconnects on error; no extra handling needed.
-    }
 
     // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
     // Full-text search \u2014 GET /api/search, grouped dropdown, click to open.
@@ -7916,52 +7809,6 @@ var appJs = `
       });
     }
 
-    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-    // Activity rail resize \u2014 drag the left edge, clamp, persist.
-    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-    var RAIL_MIN = 320, RAIL_MAX = 640, RAIL_KEY = 'lattice-rail-width';
-    function applyRailWidth(px) {
-      var w = Math.min(RAIL_MAX, Math.max(RAIL_MIN, Math.round(px)));
-      document.documentElement.style.setProperty('--sidebar-width', w + 'px');
-      return w;
-    }
-    function initRailResize() {
-      var saved = parseInt(window.localStorage.getItem(RAIL_KEY) || '', 10);
-      if (!isNaN(saved)) applyRailWidth(saved);
-      var handle = document.getElementById('rail-resize');
-      if (!handle) return;
-      handle.addEventListener('pointerdown', function (e) {
-        e.preventDefault();
-        var startX = e.clientX;
-        var rail = document.getElementById('assistant-rail');
-        var startW = rail ? rail.getBoundingClientRect().width : 380;
-        handle.classList.add('dragging');
-        function move(ev) {
-          // Rail sits on the right; dragging left (smaller clientX) widens it.
-          applyRailWidth(startW - (ev.clientX - startX));
-        }
-        function up() {
-          handle.classList.remove('dragging');
-          window.removeEventListener('pointermove', move);
-          window.removeEventListener('pointerup', up);
-          var cur = parseInt(
-            getComputedStyle(document.documentElement).getPropertyValue('--sidebar-width'),
-            10,
-          );
-          if (!isNaN(cur)) window.localStorage.setItem(RAIL_KEY, String(cur));
-        }
-        window.addEventListener('pointermove', move);
-        window.addEventListener('pointerup', up);
-      });
-    }
-
-    // Mobile: tapping the handle expands/collapses the bottom drawer.
-    function initRailDrawer() {
-      var handle = document.getElementById('rail-handle');
-      var rail = document.getElementById('assistant-rail');
-      if (handle && rail) handle.addEventListener('click', function () { rail.classList.toggle('expanded'); });
-    }
-
     /** Reload column meta after a secret-flag change. */
     function refreshColumnMeta() {
       return fetchJson('/api/gui-meta/columns').then(function (d) {
@@ -8112,10 +7959,10 @@ var appJs = `
         else renderRoute();
         loadedTables = {};
         startRealtime();
-        startFeed();
       });
     }
 
+    var wsOutsideClickBound = false;
     function renderWsSwitcher(data) {
       var wrap = document.getElementById('ws-switcher');
       var btn = document.getElementById('ws-button');
@@ -8173,8 +8020,13 @@ var appJs = `
             });
           });
         });
-        document.getElementById('ws-create-btn').addEventListener('click', function () {
-          showCreateWorkspaceInput(menu);
+        document.getElementById('ws-create-btn').addEventListener('click', function (e) {
+          // Stop propagation: showCreateWorkspaceInput replaces .db-create's
+          // innerHTML, detaching THIS button. Without this, the click then
+          // bubbles to the document outside-click closer, whose
+          // menu.contains(e.target) is now false (target detached) \u2192 it would
+          // close the menu, so the create input never appears.
+          e.stopPropagation(); showCreateWorkspaceInput(menu);
         });
       }
 
@@ -8183,12 +8035,20 @@ var appJs = `
         if (menu.hidden) buildMenu();
         menu.hidden = !menu.hidden;
       };
-      document.addEventListener('click', function (e) {
-        if (menu.hidden) return;
-        if (!menu.contains(e.target) && e.target !== btn && !btn.contains(e.target)) {
-          menu.hidden = true;
-        }
-      });
+      // Attach the outside-click closer ONCE \u2014 renderWsSwitcher runs on every
+      // reload, so adding it each time leaked a listener per render. Re-fetch
+      // the elements by id inside the handler so it never holds a stale closure.
+      if (!wsOutsideClickBound) {
+        wsOutsideClickBound = true;
+        document.addEventListener('click', function (e) {
+          var m = document.getElementById('ws-menu');
+          var b = document.getElementById('ws-button');
+          if (!m || m.hidden) return;
+          if (!m.contains(e.target) && e.target !== b && (!b || !b.contains(e.target))) {
+            m.hidden = true;
+          }
+        });
+      }
     }
 
     // Inline "new workspace" name entry, shown inside the Workspaces menu.
@@ -8433,7 +8293,6 @@ var appJs = `
         entities: tables.map(function (t) {
           return { name: t.name, rowCount: t.rowCount, lastUpdatedAt: null, stale: false };
         }),
-        recent: [],
       };
     }
     function drawDashboard(content, d) {
@@ -8471,21 +8330,7 @@ var appJs = `
           fresh +
           '</a>';
       }).join('');
-      var recent = '';
-      if (d.recent && d.recent.length) {
-        var items = d.recent.map(function (r) {
-          var ic = FEED_ICONS[r.op] || '\u2022';
-          var label = displayFor(r.table).label;
-          return '<li class="dash-act">' +
-            '<span class="dash-act-ic">' + ic + '</span>' +
-            '<span class="dash-act-txt">' + escapeHtml(String(r.op)) + ' \xB7 ' + escapeHtml(label) + '</span>' +
-            '<span class="dash-act-time">' + relTime(r.ts) + '</span>' +
-            '</li>';
-        }).join('');
-        recent = '<div class="dash-recent"><div class="dash-recent-head">Recent activity</div>' +
-          '<ul>' + items + '</ul></div>';
-      }
-      content.innerHTML = stats + '<div class="dashboard">' + cards + '</div>' + recent;
+      content.innerHTML = stats + '<div class="dashboard">' + cards + '</div>';
     }
     function renderDashboard(content) {
       // Workspace overview: counts + freshness + recent activity from
@@ -9365,7 +9210,16 @@ var appJs = `
         return rowsP.then(function (rows) {
           var d = displayFor(table);
           var base = fsHref(segs);
-          var tiles = rows.length
+          // "New" tile (top-level collections only) \u2014 a folder box with a + that
+          // opens a create form. Related-row folders aren't a place to mint a
+          // brand-new object, so the tile is top-level only.
+          var createTile = topLevel
+            ? '<a class="fs-tile fs-tile-create" href="#" data-fs-create="1" title="Create a new ' + escapeHtml(d.label) + '">' +
+                '<div class="fs-tile-icon">\u2795</div>' +
+                '<div class="fs-tile-label">New ' + escapeHtml(d.label) + '</div>' +
+              '</a>'
+            : '';
+          var rowTiles = rows.length
             ? rows.map(function (r) {
                 var icon = (table === 'files') ? fileEmoji(r) : '\u{1F4C1}';
                 return '<a class="fs-tile" href="' + base + '/' + encodeURIComponent(r.id) + '">' +
@@ -9373,7 +9227,7 @@ var appJs = `
                   '<div class="fs-tile-label">' + escapeHtml(fsDisplayName(r)) + '</div>' +
                 '</a>';
               }).join('')
-            : '<div class="fs-empty">Nothing here yet.</div>';
+            : (topLevel ? '' : '<div class="fs-empty">Nothing here yet.</div>');
           content.innerHTML =
             fsBreadcrumb(segs, crumbs) +
             '<div class="view-header">' +
@@ -9381,13 +9235,111 @@ var appJs = `
               '<h1>' + escapeHtml(d.label) + '</h1>' +
               '<span class="count">' + rows.length + ' item' + (rows.length === 1 ? '' : 's') + '</span>' +
             '</div>' +
-            '<div class="fs-grid">' + tiles + '</div>';
+            '<div class="fs-grid">' + createTile + rowTiles + '</div>';
+          var ctile = content.querySelector('[data-fs-create]');
+          if (ctile) ctile.addEventListener('click', function (e) {
+            e.preventDefault();
+            openFsCreateModal(content, table, segs);
+          });
         });
       }).catch(function (err) {
         content.innerHTML = '<div class="placeholder"><h2>Failed</h2>' + escapeHtml(err.message) + '</div>';
       });
     }
 
+    // Create a new object from the simple view \u2014 a form styled like the item
+    // page with blank fields + a Save button, plus a select-menu + "+" for each
+    // many-to-many link. Reuses fieldFor() (intrinsic + belongsTo) and the
+    // existing row-create + junction-row endpoints (no new backend).
+    function openFsCreateModal(content, table, segs) {
+      var t = tableByName(table);
+      if (!t) return;
+      var bt = belongsToColumns(t);
+      var juncs = junctionsFor(table);
+      // Preload FK + junction-remote target rows so the <select> menus populate.
+      var needed = bt.map(function (b) { return b.rel.table; })
+        .concat(juncs.map(function (j) { return j.remoteRel.table; }));
+      Promise.all(needed.map(loadAllRows)).then(function () {
+        var fieldsHtml = '';
+        intrinsicColumns(t).forEach(function (c) {
+          fieldsHtml += '<div class="fs-field"><div class="fs-field-label">' + escapeHtml(titleCase(c)) + '</div>' +
+            '<div class="fs-field-val">' + fieldFor(c, '', t) + '</div></div>';
+        });
+        bt.forEach(function (b) {
+          fieldsHtml += '<div class="fs-field"><div class="fs-field-label">' + escapeHtml(titleCase(b.relName)) + '</div>' +
+            '<div class="fs-field-val">' + fieldFor(b.rel.foreignKey, '', t) + '</div></div>';
+        });
+        juncs.forEach(function (j) {
+          var remoteRows = loadedTables[j.remoteRel.table] || [];
+          var opts = '<option value="">(none)</option>' + remoteRows.map(function (r) {
+            return '<option value="' + escapeHtml(r.id) + '">' + escapeHtml(displayNameFor(r)) + '</option>';
+          }).join('');
+          fieldsHtml += '<div class="fs-field"><div class="fs-field-label">' + escapeHtml(titleCase(j.remoteRel.table)) + ' (links)</div>' +
+            '<div class="fs-field-val">' +
+              '<div class="fs-link-stage" data-junction="' + escapeHtml(j.junction) + '" data-local-fk="' + escapeHtml(j.localFk) + '" data-remote-fk="' + escapeHtml(j.remoteRel.foreignKey) + '">' +
+                '<select class="fs-link-select">' + opts + '</select>' +
+              '</div>' +
+              '<button type="button" class="btn fs-link-add">+ Add another</button>' +
+            '</div></div>';
+        });
+        showModal('New ' + displayFor(table).label, '<div class="fs-doc fs-create-form">' + fieldsHtml + '</div>', {
+          primaryLabel: 'Save',
+          onBody: function (backdrop) {
+            backdrop.querySelectorAll('.fs-link-add').forEach(function (addBtn) {
+              addBtn.addEventListener('click', function () {
+                var stage = addBtn.previousElementSibling; // the .fs-link-stage
+                var firstSel = stage && stage.querySelector('.fs-link-select');
+                if (!firstSel) return;
+                var clone = firstSel.cloneNode(true);
+                clone.value = '';
+                stage.appendChild(clone);
+              });
+            });
+          },
+          onSubmit: function (scope) {
+            // Intrinsic + belongsTo values (the [name] inputs/selects).
+            var values = {};
+            scope.querySelectorAll('.fs-create-form [name]').forEach(function (el) {
+              var v = el.value;
+              if (v !== '' && v != null) values[el.getAttribute('name')] = v;
+            });
+            // Staged many-to-many links \u2014 one junction row per chosen target.
+            var links = [];
+            scope.querySelectorAll('.fs-link-stage').forEach(function (stage) {
+              var junction = stage.getAttribute('data-junction');
+              var localFk = stage.getAttribute('data-local-fk');
+              var remoteFk = stage.getAttribute('data-remote-fk');
+              stage.querySelectorAll('.fs-link-select').forEach(function (sel) {
+                if (sel.value) links.push({ junction: junction, localFk: localFk, remoteFk: remoteFk, remoteId: sel.value });
+              });
+            });
+            return rowWrite('POST', '/api/tables/' + encodeURIComponent(table) + '/rows', values).then(function (res) {
+              var newId = res && (res.id || (res.row && res.row.id));
+              var chain = Promise.resolve();
+              links.forEach(function (lk) {
+                chain = chain.then(function () {
+                  // Use the junction's /link endpoint (INSERT OR IGNORE on the
+                  // two FK columns) \u2014 works for junctions with no own pk and is
+                  // idempotent, unlike a raw row insert.
+                  var jrow = {};
+                  jrow[lk.localFk] = newId;
+                  jrow[lk.remoteFk] = lk.remoteId;
+                  return rowWrite('POST', '/api/tables/' + encodeURIComponent(lk.junction) + '/link', jrow);
+                });
+              });
+              return chain;
+            }).then(function () {
+              invalidate(table);
+              return refreshEntities();
+            }).then(function () {
+              showToast('Created', {});
+              renderFsCollection(content, segs);
+            });
+          },
+        });
+      }).catch(function (err) { showToast('Create failed: ' + err.message, {}); });
+    }
+
     // Item view \u2014 one row as a document (click-to-edit) + its relationship folders.
     function renderFsItem(content, segs) {
       fsWalk(segs).then(function (crumbs) {
@@ -9732,8 +9684,11 @@ var appJs = `
       if (!s) return '';
       try {
         var d = new Date(s);
+        // Never render the literal "Invalid Date" \u2014 new Date() returns an
+        // Invalid Date (not a throw) for an unparseable value.
+        if (isNaN(d.getTime())) return '(no timestamp)';
         return d.toLocaleString();
-      } catch (_e) { return s; }
+      } catch (_e) { return '(no timestamp)'; }
     }
 
     /** Side-by-side-ish text diff. Shows changed columns only for updates. */
@@ -10288,7 +10243,9 @@ var appJs = `
       var linkRows = dmLinks.map(function (lk, i) {
         return '<div class="dm-link-row">' +
           '<span class="dm-link-name">' + escapeHtml(displayFor(lk.other).label) + '</span>' +
-          '<span class="dm-link-arrow">\u2194 many-to-many</span>' +
+          '<span class="dm-link-arrow' + (lk.kind === 'fk' ? ' legacy' : '') + '" ' +
+            (lk.kind === 'fk' ? 'title="Legacy one-to-many link. New links are many-to-many; this is kept for back-compat and will be migrated in 2.0."' : '') +
+            '>' + (lk.kind === 'fk' ? '\u2192 one-to-many (legacy)' : '\u2194 many-to-many') + '</span>' +
           '<button class="btn danger dm-link-destroy" data-link="' + i +
             '" title="Delete this link \u2014 removes it from both tables">Delete link</button>' +
           '</div>';
@@ -11230,12 +11187,12 @@ var appJs = `
       fetchJson('/api/userconfig/databases').then(function (cat) {
         var localRows = (cat.local || []).map(function (d) {
           var stateBadge = '<span style="font-family:JetBrains Mono,monospace;font-size:10px;color:var(--text-muted)">' + escapeHtml((d.state || 'local').toUpperCase()) + '</span>';
-          return '<tr>' +
+          return '<tr' + (d.active ? '' : ' class="db-row" data-switch-path="' + escapeHtml(d.configPath) + '"') + '>' +
             '<td>' + escapeHtml(d.label) + (d.active ? ' <span class="role-tag">active</span>' : '') + '</td>' +
             '<td>SQLite</td>' +
             '<td>' + stateBadge + '</td>' +
             '<td><code>' + escapeHtml(d.dbFile) + '</code></td>' +
-            '<td>' + (d.active ? '\u2014' : '<button class="btn" data-switch="' + escapeHtml(d.configPath) + '">Switch</button>') + '</td>' +
+            '<td>\u2014</td>' +
           '</tr>';
         }).join('');
         var cloudRows = (cat.cloud || []).map(function (d) {
@@ -11253,9 +11210,9 @@ var appJs = `
               '<tbody>' + (localRows + cloudRows || '<tr><td colspan="5" style="padding:8px;color:var(--text-muted)">No databases configured.</td></tr>') + '</tbody>' +
             '</table>' +
           '</div>';
-        host.querySelectorAll('[data-switch]').forEach(function (btn) {
-          btn.addEventListener('click', function () {
-            var configPath = btn.getAttribute('data-switch');
+        host.querySelectorAll('tr.db-row[data-switch-path]').forEach(function (row) {
+          row.addEventListener('click', function () {
+            var configPath = row.getAttribute('data-switch-path');
             fetch('/api/databases/switch', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ path: configPath }) })
               .then(function (r) { return r.json(); })
               .then(function () { renderUserConfig(document.getElementById('content')); });
@@ -11356,11 +11313,74 @@ var appJs = `
 
     function renderDatabaseDangerZone(host) {
       if (!host) return;
-      fetchJson('/api/databases').then(function (data) {
+      Promise.all([
+        fetchJson('/api/databases'),
+        fetchJson('/api/dbconfig').catch(function () { return {}; }),
+      ]).then(function (results) {
+        var data = results[0];
+        var cfg = results[1] || {};
         var current = (data && data.current) || {};
         var label = current.label || current.dbFile || '';
         var path = current.path || '';
         if (!path) { host.innerHTML = ''; return; }
+
+        // After tearing down / leaving the active DB, switch to another the
+        // operator still has and navigate off the (now-gone) page.
+        var switchAway = function () {
+          var cur = (data && data.current && data.current.path) || null;
+          var target = ((data && data.configs) || []).filter(function (c) { return c.path !== cur; })[0];
+          var p = target
+            ? fetchJson('/api/databases/switch', {
+                method: 'POST', headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ path: target.path }),
+              }).then(function () { return reloadEverything(); })
+            : reloadEverything();
+          return p.then(function () { location.hash = '#/'; renderRoute(); });
+        };
+
+        if (cfg.state === 'team-cloud-creator') {
+          // Owner: disconnect the database from the cloud \u2014 kicks all members.
+          host.innerHTML =
+            '<div class="danger-zone">' +
+              '<h3>Danger zone</h3>' +
+              '<p style="font-size:12px;color:var(--text-muted);margin:0 0 10px">' +
+                'Disconnect this database from the cloud. This removes the team and <strong>kicks all members</strong>. This cannot be undone.' +
+              '</p>' +
+              '<button class="btn destructive" id="db-disconnect-btn">Disconnect from cloud</button>' +
+            '</div>';
+          host.querySelector('#db-disconnect-btn').addEventListener('click', function () {
+            if (!confirm('Disconnect "' + (cfg.teamName || label || 'this database') + '" from the cloud? This kicks all members and cannot be undone.')) return;
+            var dbtn = host.querySelector('#db-disconnect-btn');
+            withBusy(dbtn, function () {
+              return fetchJson('/api/teams-gui/teams/' + cfg.teamId, { method: 'DELETE' })
+                .then(function () { showToast('Disconnected from cloud', {}); return switchAway(); })
+                .catch(function (e) { alert('Disconnect failed: ' + e.message); });
+            });
+          });
+          return;
+        }
+        if (cfg.state === 'team-cloud-member') {
+          // Member: leave the team. The cloud DB keeps running for others.
+          host.innerHTML =
+            '<div class="danger-zone">' +
+              '<h3>Danger zone</h3>' +
+              '<p style="font-size:12px;color:var(--text-muted);margin:0 0 10px">' +
+                'Leave this team. The cloud database keeps running for everyone else; you simply stop being a member.' +
+              '</p>' +
+              '<button class="btn destructive" id="db-leave-btn">Leave team</button>' +
+            '</div>';
+          host.querySelector('#db-leave-btn').addEventListener('click', function () {
+            if (!confirm('Leave "' + (cfg.teamName || label || 'this team') + '"?')) return;
+            var lbtn = host.querySelector('#db-leave-btn');
+            withBusy(lbtn, function () {
+              return fetchJson('/api/teams-gui/teams/' + cfg.teamId + '/members/' + encodeURIComponent(cfg.myUserId), { method: 'DELETE' })
+                .then(function () { showToast('Left the team', {}); return switchAway(); })
+                .catch(function (e) { alert('Leave failed: ' + e.message); });
+            });
+          });
+          return;
+        }
+        // Local / non-team cloud database: delete it.
         host.innerHTML =
           '<div class="danger-zone">' +
             '<h3>Danger zone</h3>' +
@@ -11461,12 +11481,11 @@ var appJs = `
             : '\u2014';
           var rowLabel = c.label || c.name;
           var del = '<button class="btn danger" data-delete-path="' + escapeHtml(c.path) + '" data-delete-label="' + escapeHtml(rowLabel) + '">Delete</button>';
-          var actions = (c.active ? '' : '<button class="btn" data-switch="' + escapeHtml(c.path) + '">Switch</button> ') + del;
-          return '<tr>' +
+          return '<tr' + (c.active ? '' : ' class="ws-row" data-switch-path="' + escapeHtml(c.path) + '"') + '>' +
             '<td>' + escapeHtml(rowLabel) + (c.active ? ' <span class="role-tag">active</span>' : '') + '</td>' +
             '<td>' + kind + '</td>' +
             '<td><code>' + escapeHtml(c.dbFile || '') + '</code></td>' +
-            '<td>' + actions + '</td>' +
+            '<td>' + del + '</td>' +
           '</tr>';
         }).join('');
         host.innerHTML =
@@ -11480,9 +11499,9 @@ var appJs = `
               '<tbody>' + (rows || '<tr><td colspan="4" style="padding:8px;color:var(--text-muted)">No workspaces configured.</td></tr>') + '</tbody>' +
             '</table>' +
           '</div>';
-        host.querySelectorAll('[data-switch]').forEach(function (btn) {
-          btn.addEventListener('click', function () {
-            var configPath = btn.getAttribute('data-switch');
+        host.querySelectorAll('tr.ws-row[data-switch-path]').forEach(function (row) {
+          row.addEventListener('click', function () {
+            var configPath = row.getAttribute('data-switch-path');
             fetch('/api/databases/switch', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ path: configPath }) })
               .then(function (r) { return r.json(); })
               .then(function () { return reloadEverything(); })
@@ -11490,7 +11509,8 @@ var appJs = `
           });
         });
         host.querySelectorAll('[data-delete-path]').forEach(function (btn) {
-          btn.addEventListener('click', function () {
+          btn.addEventListener('click', function (e) {
+            e.stopPropagation(); // don't trigger the row's switch handler
             confirmDeleteDatabase(
               btn.getAttribute('data-delete-path'),
               btn.getAttribute('data-delete-label'),
@@ -11569,11 +11589,11 @@ var appJs = `
         return (
           '<p style="margin:0 0 12px;color:var(--text-muted);font-size:13px">' +
             'SQLite DB: <code>' + escapeHtml(info.dbFile || '(unknown)') + '</code>. ' +
-            'Move forward by either pushing this data to a new cloud Postgres or connecting to an existing one.' +
+            'Push this workspace to a cloud Postgres to collaborate. ' +
+            '(To join an existing cloud, create a new workspace and choose \u201Cjoin via cloud invite\u201D.)' +
           '</p>' +
           '<div class="team-actions">' +
             '<button class="btn primary" data-act="open-migrate">Migrate to cloud \u2192</button>' +
-            '<button class="btn" data-act="open-connect-existing">Connect to existing cloud \u2192</button>' +
           '</div>'
         );
       }
@@ -11594,10 +11614,10 @@ var appJs = `
             (isCreator ? ' \xB7 <span style="color:var(--accent)">you are the creator</span>' : ' \xB7 <span style="color:var(--text-muted)">member</span>') +
           '</div>' +
           '<div class="team-actions" style="margin-top:10px">' +
-            (isCreator ? '<button class="btn primary" data-act="open-invite">Generate invite token</button>' : '') +
+            (isCreator ? '<button class="btn primary" data-act="open-invite">Invite member</button>' : '') +
           '</div>' +
-          // Leave (member) / Destroy (creator) now live on your own row in
-          // the members list below \u2014 no separate top-level button.
+          // Exit actions (Disconnect for the owner / Leave for a member) live
+          // in the Danger Zone below \u2014 not on a member row.
           '<div id="db-members-host" style="margin-top:12px"><div style="font-size:12px;color:var(--text-muted)">Loading members\u2026</div></div>'
         );
       }
@@ -11642,11 +11662,6 @@ var appJs = `
         showMigrateToCloudModal(rerender);
       });
 
-      var connectExBtn = host.querySelector('[data-act="open-connect-existing"]');
-      if (connectExBtn) connectExBtn.addEventListener('click', function () {
-        showConnectExistingModal(rerender);
-      });
-
       var upgradeBtn = host.querySelector('[data-act="open-upgrade"]');
       if (upgradeBtn) upgradeBtn.addEventListener('click', function () {
         showUpgradeToTeamModal(rerender);
@@ -11661,27 +11676,10 @@ var appJs = `
       var myUserId = info.myUserId;
       var isCreator = !!info.isCreator;
 
-      // After leaving/destroying, the left DB is torn down on the backend
-      // (config + credential removed). Switch to another database the
-      // operator still has and navigate off the (now-gone) DB page.
-      var switchAway = function () {
-        return fetchJson('/api/databases').then(function (data) {
-          var current = (data && data.current && data.current.path) || null;
-          var configs = (data && data.configs) || [];
-          var target = configs.filter(function (c) { return c.path !== current; })[0];
-          if (!target) return reloadEverything();
-          return fetchJson('/api/databases/switch', {
-            method: 'POST',
-            headers: { 'content-type': 'application/json' },
-            body: JSON.stringify({ path: target.path }),
-          }).then(function () { return reloadEverything(); });
-        }).then(function () { location.hash = '#/'; renderRoute(); });
-      };
-
       var inviteBtn = host.querySelector('[data-act="open-invite"]');
       if (inviteBtn) inviteBtn.addEventListener('click', function () {
         if (!teamId) { alert('No team is active.'); return; }
-        showInviteByEmailModal(teamId);
+        showInviteByEmailModal(teamId, info);
       });
 
       // Inline member list for the active team cloud. Marks "you"; your
@@ -11705,26 +11703,6 @@ var appJs = `
               });
             });
           });
-          // Leave (member) / Destroy team (creator) \u2014 your own row.
-          var selfBtn = membersHost.querySelector('[data-act="leave-self"]');
-          if (selfBtn) selfBtn.addEventListener('click', function () {
-            
-            if (isCreator) {
-              if (!confirm('Destroy team "' + (info.teamName || 'this team') + '"? This soft-deletes it on the cloud for everyone.')) return;
-              withBusy(selfBtn, function () {
-                return fetchJson('/api/teams-gui/teams/' + teamId, { method: 'DELETE' })
-                  .then(function () { showToast('Team destroyed', {}); return switchAway(); })
-                  .catch(function (e) { setMsg('Destroy failed: ' + e.message, false); });
-              });
-            } else {
-              if (!confirm('Leave team "' + (info.teamName || 'this team') + '"?')) return;
-              withBusy(selfBtn, function () {
-                return fetchJson('/api/teams-gui/teams/' + teamId + '/members/' + encodeURIComponent(myUserId), { method: 'DELETE' })
-                  .then(function () { showToast('Left the team', {}); return switchAway(); })
-                  .catch(function (e) { setMsg('Leave failed: ' + e.message, false); });
-              });
-            }
-          });
         }).catch(function () { membersHost.innerHTML = '<div style="font-size:12px;color:var(--text-muted)">Members unavailable.</div>'; });
       }
 
@@ -12070,13 +12048,11 @@ var appJs = `
       var rows = members.map(function (m) {
         var label = m.name || m.email || '(unknown)';
         var isSelf = m.user_id === myUserId;
-        // Your own row: Leave (member) or Destroy team (creator). Other
-        // rows: Kick, but only the creator may remove other members.
+        // Other rows: Kick, but only the creator may remove other members.
+        // Your own exit (Disconnect for the owner / Leave for a member) lives
+        // in the Danger Zone, not on a member row.
         var btn = '';
-        if (isSelf) {
-          btn = '<button class="btn danger-btn" data-act="leave-self">' +
-            (isCreator ? 'Destroy team' : 'Leave') + '</button>';
-        } else if (isCreator) {
+        if (!isSelf && isCreator) {
           btn = '<button class="btn danger-btn" data-act="kick">Kick</button>';
         }
         return '<div class="member-row" data-user-id="' + escapeHtml(m.user_id) + '">' +
@@ -12091,7 +12067,7 @@ var appJs = `
       return '<div class="members-list"><h4>Members</h4>' + rows + '</div>';
     }
 
-    function showInviteByEmailModal(teamId) {
+    function showInviteByEmailModal(teamId, info) {
       var bodyHtml =
         '<div class="field"><label>Invitee email</label>' +
         '<input name="invitee_email" type="email" placeholder="bob@example.com" /></div>' +
@@ -12107,17 +12083,30 @@ var appJs = `
             method: 'POST',
             headers: { 'content-type': 'application/json' },
             body: JSON.stringify({ invitee_email: data.invitee_email }),
-          }).then(function (inv) { showInviteTokenModal(inv); });
+          }).then(function (inv) { showInviteTokenModal(inv, info); });
         },
       });
     }
 
-    function showInviteTokenModal(inv) {
+    function showInviteTokenModal(inv, info) {
+      info = info || {};
+      // The invitee needs the cloud connection string AND the token. Show the
+      // URL with the password MASKED \u2014 redeem never needs the owner's password
+      // (the invitee authenticates with their own credentials).
+      var connStr = info.host
+        ? 'postgres://' + (info.user || 'user') + ':****@' + info.host + ':' + (info.port || 5432) + '/' + (info.dbname || '')
+        : '';
+      var connBlock = connStr
+        ? '<h4 style="margin:14px 0 4px">Cloud connection</h4>' +
+          '<div class="copy-token" id="copy-conn">' + escapeHtml(connStr) + '</div>' +
+          '<p style="font-size:12px;color:var(--text-muted);margin:4px 0 0">Share this URL with the invitee (password masked). Click to copy.</p>'
+        : '';
       var bodyHtml =
         '<p style="margin-top:0">Share this token with the invitee (one-time use). It expires at <code>' +
         escapeHtml(inv.expires_at || '(no expiry)') + '</code>.</p>' +
         '<div class="copy-token" id="copy-token">' + escapeHtml(inv.raw_token) + '</div>' +
-        '<p style="font-size:12px;color:var(--text-muted);margin-bottom:0">Click the token to copy.</p>';
+        '<p style="font-size:12px;color:var(--text-muted);margin-bottom:0">Click the token to copy.</p>' +
+        connBlock;
       var handle = showModal('Invitation token', bodyHtml, { primaryLabel: 'Done', onSubmit: function () {} });
       var tokenEl = document.getElementById('copy-token');
       if (tokenEl) {
@@ -12128,6 +12117,15 @@ var appJs = `
           });
         });
       }
+      var connEl = document.getElementById('copy-conn');
+      if (connEl) {
+        connEl.addEventListener('click', function () {
+          navigator.clipboard.writeText(connStr).then(function () {
+            connEl.textContent = 'Copied!';
+            setTimeout(function () { connEl.textContent = connStr; }, 1200);
+          });
+        });
+      }
       // Suppress unused-var on handle
       void handle;
     }
@@ -12218,16 +12216,6 @@ var guiAppHtml = `<!doctype html>
       </div>
     </nav>
     <main id="content"></main>
-    <aside class="assistant-rail" id="assistant-rail">
-      <div class="rail-resize" id="rail-resize" role="separator" aria-orientation="vertical" title="Drag to resize"></div>
-      <div class="rail-handle" id="rail-handle" title="Expand / collapse"></div>
-      <div class="rail-header">
-        <span class="rail-title">Activity</span>
-      </div>
-      <div class="rail-feed" id="rail-feed">
-        <div class="rail-empty" id="rail-empty">No activity yet. Changes you make will appear here.</div>
-      </div>
-    </aside>
   </div>
 
   <div class="drawer-backdrop" id="drawer-backdrop" hidden></div>
@@ -13303,17 +13291,22 @@ async function resolveTeamContext(db, teamsClient, cloudUrl, candidateTables) {
   const teamId = identity.team_id;
   const creatorUserId = identity.creator_email ? await resolveUserIdByEmail(db, identity.creator_email) : null;
   let myUserId = "";
+  let myEmail = "";
   try {
     const me = await db.get("__lattice_user_identity", "singleton");
-    if (me?.email) myUserId = await resolveUserIdByEmail(db, me.email) ?? "";
+    if (me?.email) {
+      myEmail = me.email;
+      myUserId = await resolveUserIdByEmail(db, me.email) ?? "";
+    }
   } catch {
     myUserId = "";
   }
+  let savedConn = null;
   if (!myUserId) {
     try {
       const conns = await teamsClient.listConnections();
-      const conn = conns.find((c) => c.cloud_url === cloudUrl) ?? conns.find((c) => c.team_id === teamId);
-      myUserId = conn?.my_user_id ?? "";
+      savedConn = conns.find((c) => c.cloud_url === cloudUrl) ?? conns.find((c) => c.team_id === teamId) ?? null;
+      myUserId = savedConn?.my_user_id ?? "";
     } catch {
     }
   }
@@ -13332,6 +13325,26 @@ async function resolveTeamContext(db, teamsClient, cloudUrl, candidateTables) {
       isMember = false;
     }
   }
+  if (!isMember && (myEmail || savedConn)) {
+    try {
+      const memberRows = await db.query("__lattice_team_members", {
+        filters: [
+          { col: "team_id", op: "eq", val: teamId },
+          { col: "deleted_at", op: "isNull" }
+        ]
+      });
+      if (memberRows.length > 0) {
+        const matchId = myEmail ? await resolveUserIdByEmail(db, myEmail) : null;
+        if (matchId && memberRows.some((m) => m.user_id === matchId)) {
+          myUserId = matchId;
+          isMember = true;
+        } else if (savedConn) {
+          isMember = true;
+        }
+      }
+    } catch {
+    }
+  }
   if (creatorUserId) {
     await reconcileObjectOwners(db, teamId, creatorUserId, candidateTables);
   }
@@ -13602,6 +13615,11 @@ async function appendAudit(db, feed, table, rowId, op, before, after, source = "
   for (const r of undone) await db.delete("_lattice_gui_audit", r.id);
   await db.insert("_lattice_gui_audit", {
     id: crypto.randomUUID(),
+    // Set ts explicitly (don't rely on the column DEFAULT — it uses the
+    // SQLite-only `strftime(...)`, which doesn't yield a parseable ISO string
+    // on Postgres, so cloud history rendered "Invalid Date"). Mirrors the
+    // explicit `client_ts` below; adapter-agnostic.
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
     table_name: table,
     row_id: rowId,
     operation: op,
@@ -13623,6 +13641,9 @@ async function recordSchemaAudit(db, feed, table, operation, before, after, summ
   for (const r of undone) await db.delete("_lattice_gui_audit", r.id);
   await db.insert("_lattice_gui_audit", {
     id: crypto.randomUUID(),
+    // Explicit ISO ts — see appendAudit (the SQLite-only strftime DEFAULT
+    // rendered "Invalid Date" on the Postgres/cloud path).
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
     table_name: table,
     row_id: null,
     operation,
@@ -13653,10 +13674,32 @@ async function createRow(ctx, table, values) {
   await emitTeamEnvelope(ctx, table, id, "upsert", row);
   return { id, row };
 }
+function storedValueMatches(stored, requested) {
+  if (stored === requested) return true;
+  const storedEmpty = stored === null || stored === void 0 || stored === "";
+  const reqEmpty = requested === null || requested === void 0 || requested === "";
+  if (storedEmpty && reqEmpty) return true;
+  if (typeof requested === "boolean") return Number(stored) === Number(requested);
+  if (typeof requested === "number") return Number(stored) === requested;
+  return String(stored) === String(requested);
+}
+function rowsEqual(a, b) {
+  const keys = /* @__PURE__ */ new Set([...Object.keys(a), ...Object.keys(b)]);
+  for (const k of keys) if (a[k] !== b[k]) return false;
+  return true;
+}
 async function updateRow(ctx, table, id, values) {
   const before = await ctx.db.get(table, id);
   await ctx.db.update(table, id, values);
   const after = await ctx.db.get(table, id);
+  if (before != null && after != null) {
+    const wantedChange = Object.keys(values).some(
+      (k) => !storedValueMatches(before[k], values[k])
+    );
+    if (wantedChange && rowsEqual(before, after)) {
+      throw new Error("Row update did not persist \u2014 the data source may be read-only");
+    }
+  }
   await appendAudit(
     ctx.db,
     ctx.feed,
@@ -17132,18 +17175,11 @@ async function dashboardPayload(db, configPath, outputDir, teamContext) {
     if (stale) staleCount += 1;
     return { ...t, lastUpdatedAt, stale };
   });
-  let recent = [];
-  try {
-    const raw = await db.query("_lattice_gui_audit", { limit: 15 });
-    recent = raw.map(parseAudit).sort((a, b) => b.ts.localeCompare(a.ts)).slice(0, 15).map((e) => ({ table: e.table_name, op: e.operation, rowId: e.row_id, ts: e.ts }));
-  } catch {
-  }
   return {
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     staleDays: DASHBOARD_STALE_DAYS,
     totals: { entities: entities.length, rows: totalRows, stale: staleCount },
-    entities,
-    recent
+    entities
   };
 }
 var ROWS_PATH = /^\/api\/tables\/([^/]+)\/rows(?:\/(.+))?$/;
@@ -18194,6 +18230,14 @@ data: ${JSON.stringify(data)}
             sendJson(res, { error: `Unknown entity: ${oldName}` }, 400);
             return;
           }
+          if (isNativeEntity(oldName)) {
+            sendJson(
+              res,
+              { error: `"${oldName}" is a built-in entity and cannot be modified` },
+              400
+            );
+            return;
+          }
           if (!operatorOwnsTable(active.teamContext, oldName)) {
             sendJson(res, { error: "Only the table owner can edit this entity" }, 403);
             return;
@@ -18239,6 +18283,14 @@ data: ${JSON.stringify(data)}
             sendJson(res, { error: `Unknown entity: ${entityName}` }, 400);
             return;
           }
+          if (isNativeEntity(entityName)) {
+            sendJson(
+              res,
+              { error: `"${entityName}" is a built-in entity and cannot be modified` },
+              400
+            );
+            return;
+          }
           if (!operatorOwnsTable(active.teamContext, entityName)) {
             sendJson(res, { error: "Only the table owner can edit this entity" }, 403);
             return;
@@ -18266,12 +18318,22 @@ data: ${JSON.stringify(data)}
             sendJson(res, { error: "Use \u201CAdd link\u201D to create a relationship column" }, 400);
             return;
           }
+          const doc = loadConfigDoc(active.configPath);
+          const fieldsNode = doc.getIn(["entities", entityName, "fields"]);
+          if (!fieldsNode || typeof fieldsNode !== "object" || typeof fieldsNode.toJSON !== "function") {
+            sendJson(res, { error: `Cannot add columns to "${entityName}"` }, 400);
+            return;
+          }
+          const existingFields = fieldsNode.toJSON();
+          if (colName in existingFields) {
+            sendJson(res, { error: `Column "${colName}" already exists on ${entityName}` }, 400);
+            return;
+          }
           const sqliteType = fieldToSqliteBaseType(colType);
           await execSql(
             active.db,
             `ALTER TABLE "${entityName}" ADD COLUMN "${colName}" ${sqliteType}`
           );
-          const doc = loadConfigDoc(active.configPath);
           const fieldDef = { type: colType };
           if (body.required === true) fieldDef.required = true;
           doc.setIn(["entities", entityName, "fields", colName], fieldDef);
@@ -18298,6 +18360,14 @@ data: ${JSON.stringify(data)}
             sendJson(res, { error: `Unknown entity: ${entityName}` }, 400);
             return;
           }
+          if (isNativeEntity(entityName)) {
+            sendJson(
+              res,
+              { error: `"${entityName}" is a built-in entity and cannot be modified` },
+              400
+            );
+            return;
+          }
           if (!operatorOwnsTable(active.teamContext, entityName)) {
             sendJson(res, { error: "Only the table owner can edit this entity" }, 403);
             return;
@@ -18320,14 +18390,30 @@ data: ${JSON.stringify(data)}
             sendJson(res, { error: `"${newCol}" is a reserved system column` }, 400);
             return;
           }
+          const doc = loadConfigDoc(active.configPath);
+          const fieldsNode = doc.getIn(["entities", entityName, "fields"]);
+          if (!fieldsNode || typeof fieldsNode !== "object" || typeof fieldsNode.toJSON !== "function") {
+            sendJson(res, { error: `Cannot rename columns on "${entityName}"` }, 400);
+            return;
+          }
+          const fieldsObj = fieldsNode.toJSON();
+          if (!(colName in fieldsObj)) {
+            sendJson(res, { error: `Unknown column "${colName}" on ${entityName}` }, 400);
+            return;
+          }
+          if (newCol in fieldsObj) {
+            sendJson(res, { error: `Column "${newCol}" already exists on ${entityName}` }, 400);
+            return;
+          }
           await execSql(
             active.db,
             `ALTER TABLE "${entityName}" RENAME COLUMN "${colName}" TO "${newCol}"`
           );
-          const doc = loadConfigDoc(active.configPath);
-          const fieldDef = doc.getIn(["entities", entityName, "fields", colName]);
-          doc.deleteIn(["entities", entityName, "fields", colName]);
-          doc.setIn(["entities", entityName, "fields", newCol], fieldDef);
+          const renamedFields = {};
+          for (const k of Object.keys(fieldsObj)) {
+            renamedFields[k === colName ? newCol : k] = fieldsObj[k];
+          }
+          doc.setIn(["entities", entityName, "fields"], renamedFields);
           saveConfigDoc(active.configPath, doc);
           await disposeActive(active);
           active = await openConfig(active.configPath, active.outputDir, autoRender);
@@ -18569,10 +18655,12 @@ data: ${JSON.stringify(data)}
               (e) => e.table_name === filterTable || junctionMatchesFilter.has(e.table_name)
             );
           }
-          const allEntries = raw.map(parseAudit);
-          const liveCount = allEntries.filter((e) => e.undone === 0).length;
-          const undoneCount = allEntries.length - liveCount;
-          sendJson(res, { entries, canUndo: liveCount > 0, canRedo: undoneCount > 0 });
+          const sessionRows = await active.db.query("_lattice_gui_audit", {
+            filters: [{ col: "session_id", op: "eq", val: sessionId }]
+          });
+          const sessionLive = sessionRows.filter((r) => Number(r.undone) === 0).length;
+          const sessionUndone = sessionRows.length - sessionLive;
+          sendJson(res, { entries, canUndo: sessionLive > 0, canRedo: sessionUndone > 0 });
           return;
         }
         if (method === "POST" && pathname === "/api/history/undo") {

package/dist/index.cjs

@@ -3560,6 +3560,15 @@ function resolveDbPath(raw, configDir2) {
   }
   return (0, import_node_path11.resolve)(configDir2, raw);
 }
+var warnedDeprecatedRefs = /* @__PURE__ */ new Set();
+function warnDeprecatedRef(entity, field, target) {
+  const key = `${entity}.${field}`;
+  if (warnedDeprecatedRefs.has(key)) return;
+  warnedDeprecatedRefs.add(key);
+  console.warn(
+    `Lattice: one-to-many \`ref:\` on "${entity}.${field}" \u2192 "${target}" is deprecated in favor of many-to-many junction tables and will be removed in 2.0.`
+  );
+}
 function entityToTableDef(entityName, entity) {
   const rawFields = entity.fields;
   if (!rawFields || typeof rawFields !== "object" || Array.isArray(rawFields)) {
@@ -3582,6 +3591,7 @@ function entityToTableDef(entityName, entity) {
         table: field.ref,
         foreignKey: fieldName
       };
+      warnDeprecatedRef(entityName, fieldName, field.ref);
     }
   }
   const primaryKey = entity.primaryKey ?? pkFromField;

package/dist/index.js

@@ -3436,6 +3436,15 @@ function resolveDbPath(raw, configDir2) {
   }
   return resolve2(configDir2, raw);
 }
+var warnedDeprecatedRefs = /* @__PURE__ */ new Set();
+function warnDeprecatedRef(entity, field, target) {
+  const key = `${entity}.${field}`;
+  if (warnedDeprecatedRefs.has(key)) return;
+  warnedDeprecatedRefs.add(key);
+  console.warn(
+    `Lattice: one-to-many \`ref:\` on "${entity}.${field}" \u2192 "${target}" is deprecated in favor of many-to-many junction tables and will be removed in 2.0.`
+  );
+}
 function entityToTableDef(entityName, entity) {
   const rawFields = entity.fields;
   if (!rawFields || typeof rawFields !== "object" || Array.isArray(rawFields)) {
@@ -3458,6 +3467,7 @@ function entityToTableDef(entityName, entity) {
         table: field.ref,
         foreignKey: fieldName
       };
+      warnDeprecatedRef(entityName, fieldName, field.ref);
     }
   }
   const primaryKey = entity.primaryKey ?? pkFromField;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "latticesql",
-  "version": "1.16.0",
+  "version": "1.16.2",
   "description": "Persistent structured memory for AI agent systems — pluggable SQLite or Postgres backend, LLM context bridge",
   "type": "module",
   "main": "./dist/index.js",