vela 0.25.1 → 0.26.0

package/dist/bin.js

@@ -20,7 +20,7 @@ import dotenv2 from "dotenv";
 // package.json
 var package_default = {
   name: "vela",
-  version: "0.25.1",
+  version: "0.26.0",
   type: "module",
   description: "A CLI for creating and updating SvelteKit projects",
   license: "MIT",
@@ -1476,7 +1476,7 @@ async function execPackageBin(cwd, args, stdio = "pipe") {
   if (packageManager2 === "npm") resolvedArgs.unshift("--yes");
   return x(command, resolvedArgs, { nodeOptions: { cwd, stdio }, throwOnError: true });
 }
-async function withPocketbase(cwd, fn, creds) {
+async function withPocketbase(cwd, fn, creds, opts = {}) {
   const dir = path8.join(cwd, DATA_DIR);
   const migrationsDir = path8.join(cwd, MIGRATIONS_DIR);
   const host = "localhost";
@@ -1492,9 +1492,11 @@ async function withPocketbase(cwd, fn, creds) {
     await fn(pb);
     return;
   }
+  const hooksDir = path8.join(dir, "hooks");
   const { proc, url } = await startPocketbaseServe({
     dataDir: dir,
     migrationsDir,
+    ...opts.hooks && fs9.existsSync(hooksDir) ? { hooksDir } : {},
     host,
     stdio: "ignore"
   });
@@ -2772,18 +2774,18 @@ async function ensureEnvDeclarations(root, specs) {
 
 // src/lib/result-report.ts
 import * as p5 from "@clack/prompts";
-function reportResult(report5) {
+function reportResult(report6) {
   const sections = [
-    ["Files created", report5.filesCreated],
-    ["Files modified", report5.filesModified],
-    ["Files deleted", report5.filesDeleted],
-    ["UI components added", report5.componentsAdded],
-    ["Packages installed", report5.packagesInstalled],
-    ["Collections added", report5.collectionsAdded],
-    ["Records loaded", report5.recordsLoaded],
-    ["Records cleared", report5.recordsCleared]
+    ["Files created", report6.filesCreated],
+    ["Files modified", report6.filesModified],
+    ["Files deleted", report6.filesDeleted],
+    ["UI components added", report6.componentsAdded],
+    ["Packages installed", report6.packagesInstalled],
+    ["Collections added", report6.collectionsAdded],
+    ["Records loaded", report6.recordsLoaded],
+    ["Records cleared", report6.recordsCleared]
   ];
-  for (const extra of report5.sections ?? []) {
+  for (const extra of report6.sections ?? []) {
     sections.push([extra.label, extra.items]);
   }
   const body = [];
@@ -2793,13 +2795,13 @@ function reportResult(report5) {
     body.push(`${label2}:`);
     for (const item of items) body.push(`- ${item}`);
   }
-  const failures = report5.failures ?? [];
+  const failures = report6.failures ?? [];
   if (body.length > 0) {
-    p5.log.success(`${report5.summary}
+    p5.log.success(`${report6.summary}
 
 ${body.join("\n")}`);
   } else if (failures.length === 0) {
-    p5.log.success(report5.summary);
+    p5.log.success(report6.summary);
   }
   for (const failure of failures) {
     const headline = failure.status === "not-found" ? `Could not find ${failure.path}` : `Could not update ${failure.path}`;
@@ -2807,8 +2809,8 @@ ${body.join("\n")}`);
 
 ${failure.message}` : headline);
   }
-  if (report5.nextSteps && report5.nextSteps.length > 0) {
-    p5.note(report5.nextSteps.map((s) => `- ${s}`).join("\n"), "Next steps", {
+  if (report6.nextSteps && report6.nextSteps.length > 0) {
+    p5.note(report6.nextSteps.map((s) => `- ${s}`).join("\n"), "Next steps", {
       format: (line) => line
     });
   }
@@ -6939,7 +6941,7 @@ function splitCreated(creates, modifies, root, migrationsBefore) {
     modified: modified.filter((f) => !isNewMigration(f))
   };
 }
-async function runPattern(slug2, argv, input, report5, after) {
+async function runPattern(slug2, argv, input, report6, after) {
   const pattern = bySlug3[slug2];
   if (!pattern) {
     throw new Error(`Unknown pattern: ${slug2}`);
@@ -6957,7 +6959,7 @@ async function runPattern(slug2, argv, input, report5, after) {
     provider: typeof input.provider === "string" ? input.provider : void 0
   });
   const migrationsBefore = listMigrations2(workspaceRootDir);
-  const log58 = p13.taskLog({ title: report5.task.title });
+  const log58 = p13.taskLog({ title: report6.task.title });
   let result;
   try {
     result = await pattern.generate({
@@ -6981,9 +6983,9 @@ async function runPattern(slug2, argv, input, report5, after) {
       },
       logger: { info: (message) => log58.message(message) }
     });
-    log58.success(report5.task.success);
+    log58.success(report6.task.success);
   } catch (e) {
-    log58.error(report5.task.error);
+    log58.error(report6.task.error);
     throw e;
   }
   let afterError;
@@ -7013,7 +7015,7 @@ async function runPattern(slug2, argv, input, report5, after) {
     p13.log.info(`${pattern.title ?? slug2} produced no changes.`);
   } else {
     reportResult({
-      summary: report5.summary ?? `Applied ${pattern.title ?? slug2}.`,
+      summary: report6.summary ?? `Applied ${pattern.title ?? slug2}.`,
       filesCreated: created.map((f) => rel(f.path)),
       filesModified: modified.map((f) => rel(f.path)),
       filesDeleted: deleted.map((f) => rel(f.path)),
@@ -7023,7 +7025,7 @@ async function runPattern(slug2, argv, input, report5, after) {
       failures,
       // Next steps assume the pattern applied; when part of it didn't, the
       // remediation snippets above are the actual next step.
-      nextSteps: failures.length > 0 || afterError ? void 0 : report5.nextSteps
+      nextSteps: failures.length > 0 || afterError ? void 0 : report6.nextSteps
     });
   }
   if (afterError) throw afterError;
@@ -8971,7 +8973,7 @@ import { Command as Command49 } from "commander";
 // src/commands/destroy/_shared.ts
 import process23 from "node:process";
 import * as p25 from "@clack/prompts";
-async function runDestroy(slug2, model, confirmMessage, report5, flags) {
+async function runDestroy(slug2, model, confirmMessage, report6, flags) {
   if (!flags.yes) {
     const ok = await p25.confirm({ message: confirmMessage, initialValue: false });
     if (p25.isCancel(ok) || !ok) {
@@ -8979,7 +8981,7 @@ async function runDestroy(slug2, model, confirmMessage, report5, flags) {
       process23.exit(0);
     }
   }
-  await runPattern(slug2, [model], { destructive: true, route: flags.route }, report5);
+  await runPattern(slug2, [model], { destructive: true, route: flags.route }, report6);
 }
 
 // src/commands/destroy/form.ts
@@ -10459,19 +10461,19 @@ var NEXT_STEPS4 = [
 ];
 function uiAddReport(requested, outcome) {
   const { installed: installed2, skipped, packages } = outcome;
-  const report5 = {
+  const report6 = {
     summary: installed2.length > 0 ? `Added ${installed2.length} UI component(s).` : `All ${new Set(requested).size} requested component(s) are already present.`,
     componentsAdded: installed2,
     packagesInstalled: packages,
     nextSteps: [...NEXT_STEPS4]
   };
   if (skipped.length > 0) {
-    report5.sections = [{ label: "Already present (pass --overwrite to replace)", items: skipped }];
-    report5.nextSteps.push(
+    report6.sections = [{ label: "Already present (pass --overwrite to replace)", items: skipped }];
+    report6.nextSteps.push(
       `Re-add an existing component with: vela ui add --overwrite ${skipped[0]}`
     );
   }
-  return report5;
+  return report6;
 }
 
 // src/commands/ui/add.ts
@@ -12163,40 +12165,29 @@ import { Command as Command70 } from "commander";
 import { Command as Command65 } from "commander";
 
 // src/lib/data.ts
+import crypto6 from "node:crypto";
 import fs43 from "node:fs";
 import path44 from "node:path";
 import { ClientResponseError } from "pocketbase";
 
 // src/lib/collections.ts
-function dependencyOrder(collections2, startingCollectionId) {
-  const order = [];
-  const visited = {};
-  const queue = [];
+function dependencyOrder(collections2) {
   const eligible = collections2.filter((c) => !c.name.startsWith("_"));
-  if (startingCollectionId) {
-    queue.push(startingCollectionId);
-  } else {
-    for (const collection of eligible) {
-      if (!visited[collection.id]) {
-        visited[collection.id] = true;
-        queue.push(collection.id);
-      }
-    }
-  }
-  while (queue.length > 0) {
-    const collectionId = queue.shift();
-    if (!collectionId) continue;
-    order.push(collectionId);
-    const source = collections2.find((c) => c.id === collectionId);
-    for (const field of source?.fields ?? []) {
-      if (field.type === "relation" && field.collectionId && !visited[field.collectionId]) {
-        visited[field.collectionId] = true;
-        queue.push(field.collectionId);
-      }
-    }
-  }
-  const nameById = Object.fromEntries(collections2.map((c) => [c.id, c.name]));
-  return { ids: order, names: order.map((id) => nameById[id]) };
+  const byId = new Map(eligible.map((c) => [c.id, c]));
+  const seen = /* @__PURE__ */ new Set();
+  const order = [];
+  const visit = (collection) => {
+    if (seen.has(collection.id)) return;
+    seen.add(collection.id);
+    for (const field of collection.fields) {
+      if (field.type !== "relation" || !field.collectionId) continue;
+      const target = byId.get(field.collectionId);
+      if (target) visit(target);
+    }
+    order.push(collection);
+  };
+  for (const collection of eligible) visit(collection);
+  return { ids: order.map((c) => c.id), names: order.map((c) => c.name) };
 }
 
 // src/lib/data.ts
@@ -12237,11 +12228,14 @@ function fixtureFilter(collectionName) {
 var DataLoadError = class extends Error {
   kind;
   file;
-  constructor(kind, file, index, cause) {
+  /** The file is at fault as written, whatever the schema says. */
+  malformed;
+  constructor(kind, file, index, cause, opts = {}) {
     super(`${file}, record ${index + 1}: ${describeError(cause)}`);
     this.name = "DataLoadError";
     this.kind = kind;
     this.file = file;
+    this.malformed = opts.malformed ?? false;
   }
 };
 function describeError(e) {
@@ -12268,13 +12262,80 @@ async function createRecords(pb, kind, cwd, { collectionName, filePath }) {
   }
   return records.length;
 }
+var ID_LOOKUP_CHUNK = 50;
+async function existingIds(pb, collectionName, ids) {
+  const found = /* @__PURE__ */ new Set();
+  for (let start = 0; start < ids.length; start += ID_LOOKUP_CHUNK) {
+    const filter = ids.slice(start, start + ID_LOOKUP_CHUNK).map((id) => `id = ${JSON.stringify(id)}`).join(" || ");
+    const records = await pb.collection(collectionName).getFullList({ filter, fields: "id" });
+    for (const record of records) found.add(record.id);
+  }
+  return found;
+}
+function withPassword(record) {
+  if (typeof record.password === "string" && record.password) {
+    return { passwordConfirm: record.password, ...record };
+  }
+  const password8 = crypto6.randomBytes(24).toString("base64url");
+  return { ...record, password: password8, passwordConfirm: password8 };
+}
 async function loadSeeds(pb, cwd, seedFiles = getSeedFiles(cwd)) {
-  const loaded = [];
-  for (const file of seedFiles) {
-    const count = await createRecords(pb, "seeds", cwd, file);
-    loaded.push(label(cwd, file.filePath, count));
+  const files = seedFiles.map((file) => ({ file, records: readRecords(file.filePath) }));
+  if (files.length === 0) return [];
+  for (const { file, records } of files) {
+    for (const [index, record] of records.entries()) {
+      if (typeof record.id === "string" && record.id) continue;
+      throw new DataLoadError(
+        "seeds",
+        path44.relative(cwd, file.filePath),
+        index,
+        new Error(
+          "seed records need an `id`. It is how a record already loaded is told from a new one."
+        ),
+        { malformed: true }
+      );
+    }
   }
-  return loaded;
+  const authCollections = new Set(
+    (await pb.collections.getFullList()).filter((c) => c.type === "auth").map((c) => c.name)
+  );
+  const results = [];
+  for (const { file, records } of files) {
+    const { collectionName, filePath } = file;
+    const relative = path44.relative(cwd, filePath);
+    const present = await existingIds(
+      pb,
+      collectionName,
+      records.map((record) => record.id)
+    );
+    const isAuth = authCollections.has(collectionName);
+    let created = 0;
+    for (const [index, record] of records.entries()) {
+      if (present.has(record.id)) continue;
+      try {
+        await pb.collection(collectionName).create(isAuth ? withPassword(record) : record);
+      } catch (e) {
+        throw new DataLoadError("seeds", relative, index, e);
+      }
+      present.add(record.id);
+      created++;
+    }
+    const skipped = records.length - created;
+    results.push({
+      label: `${relative} (${created} created` + (skipped > 0 ? `, ${skipped} already there)` : ")"),
+      created,
+      skipped
+    });
+  }
+  return results;
+}
+function summarizeSeedLoad(results) {
+  const created = results.reduce((sum, r) => sum + r.created, 0);
+  const skipped = results.reduce((sum, r) => sum + r.skipped, 0);
+  const plural = (count) => `${count} seed record${count === 1 ? "" : "s"}`;
+  if (created === 0 && skipped === 0) return "No seed records to load.";
+  if (created === 0) return `All ${plural(skipped)} already there, nothing to load.`;
+  return `Loaded ${plural(created)}` + (skipped > 0 ? `, ${skipped} already there.` : ".");
 }
 async function clearSeeds(pb, cwd, seedFiles = getSeedFiles(cwd)) {
   const cleared = [];
@@ -12655,46 +12716,130 @@ import { Command as Command74 } from "commander";
 
 // src/commands/seeds/load.ts
 import { Command as Command71 } from "commander";
-var load2 = new Command71("load").description("load seeds into the database").option("-f, --force", "load even if target collections already have records").configureHelp(helpConfig).action(
-  (opts) => runCommand(async () => {
-    const { workspaceRootDir } = await getWorkspace();
-    const seedFiles = getSeedFiles(workspaceRootDir);
-    if (seedFiles.length === 0) {
-      reportResult({
-        summary: "No seed files found in data/seeds.",
-        nextSteps: ["Run `vela seeds save` to snapshot the current database contents as seeds."]
-      });
-      return;
-    }
-    let loaded = [];
-    await withPocketbase(workspaceRootDir, async (pb) => {
-      if (!opts.force) {
-        for (const { collectionName } of seedFiles) {
-          const page = await pb.collection(collectionName).getList(1, 1, { fields: "id" });
-          if (page.totalItems > 0) {
-            throw new Error(
-              `${collectionName} collection already has records. Pass --force to load anyway.`
-            );
+import pc13 from "picocolors";
+
+// src/lib/remote-pocketbase.ts
+import PocketBase5 from "pocketbase";
+async function requireRemoteDatabase(session, instance) {
+  const [state] = await readInstanceStates(session, instance);
+  const pbPort = instanceHasBackend(state) ? state?.pbPort : void 0;
+  if (!pbPort) {
+    throw new Error(
+      `${instance} has no deployed database.
+
+The database is created by the first \`vela deploy\` of a project with a backend.
+If this project has none, \`vela enable backend\` adds one; then deploy again.`
+    );
+  }
+  return pbPort;
+}
+async function openRemoteDatabase(session, instance) {
+  const pbPort = await requireRemoteDatabase(session, instance);
+  const env2 = await readRemoteEnv(session, instance);
+  const email2 = env2.POCKETBASE_SUPERUSER_EMAIL;
+  const password8 = env2.POCKETBASE_SUPERUSER_PASSWORD;
+  if (!email2 || !password8) {
+    throw new Error(
+      `${instance} has no PocketBase superuser credentials in its environment.
+
+A deploy creates them. Deploy again to repair this instance.`
+    );
+  }
+  const localPort = await findFreePort("127.0.0.1");
+  await session.forwardLocalPort(localPort, "127.0.0.1", pbPort);
+  return {
+    url: `http://127.0.0.1:${localPort}`,
+    email: email2,
+    password: password8,
+    close: () => session.cancelForward(localPort, "127.0.0.1", pbPort)
+  };
+}
+async function withRemotePocketbase(session, instance, fn) {
+  const db = await openRemoteDatabase(session, instance);
+  try {
+    const pb = new PocketBase5(db.url);
+    await authWithRetries(pb, db.email, db.password);
+    return await fn(pb);
+  } finally {
+    await db.close();
+  }
+}
+
+// src/commands/seeds/load.ts
+var load2 = addTargetOptions(
+  new Command71("load").description("load seeds into the database, creating the records not already there").configureHelp(helpConfig),
+  "local"
+).action(
+  (raw) => runCommand(
+    () => withTarget(
+      raw,
+      {
+        local: async (ctx) => {
+          if (!hasBackend(ctx.workspaceRootDir)) {
+            throw new Error(missingBackendMessage("vela seeds load"));
           }
+          const seedFiles = requireSeedFiles(ctx.workspaceRootDir);
+          if (!seedFiles) return;
+          if (!hasSuperuserCredentials()) throw new Error(missingCredentialsMessage());
+          let loaded = [];
+          await withPocketbase(
+            ctx.workspaceRootDir,
+            async (pb) => {
+              loaded = await loadSeeds(pb, ctx.workspaceRootDir, seedFiles);
+            },
+            void 0,
+            // The app's hooks apply to a seed as to any other write, as
+            // they do on a deployed copy and under `vela dev`.
+            { hooks: true }
+          );
+          report(loaded, [
+            "Run `vela dev` to see the seeded data in the app.",
+            "Run `vela seeds clear` to remove the seeded records."
+          ]);
+        },
+        remote: async (ctx) => {
+          const seedFiles = requireSeedFiles(ctx.workspaceRootDir);
+          if (!seedFiles) return;
+          await requireRemoteDatabase(ctx.session, ctx.instance);
+          const loaded = await withRemotePocketbase(
+            ctx.session,
+            ctx.instance,
+            (pb) => loadSeeds(pb, ctx.workspaceRootDir, seedFiles)
+          );
+          report(
+            loaded,
+            [],
+            ` ${pc13.dim("\u2192")} ${pc13.cyan(ctx.targetName)} ${pc13.dim(`(${ctx.server})`)}`
+          );
         }
-      }
-      loaded = await loadSeeds(pb, workspaceRootDir, seedFiles);
-    });
-    reportResult({
-      summary: `Loaded ${loaded.length} seed file(s) into the database.`,
-      recordsLoaded: loaded,
-      nextSteps: [
-        "Run `vela dev` to see the seeded data in the app.",
-        "Run `vela seeds clear` to remove the seeded records."
-      ]
-    });
-  }, "Failed to load seeds.")
+      },
+      { label: "seeds load" }
+    ),
+    "Failed to load seeds."
+  )
 );
+function requireSeedFiles(workspaceRootDir) {
+  const seedFiles = getSeedFiles(workspaceRootDir);
+  if (seedFiles.length > 0) return seedFiles;
+  reportResult({
+    summary: "No seed files found in data/seeds.",
+    nextSteps: ["Run `vela seeds save` to snapshot the current database contents as seeds."]
+  });
+  return null;
+}
+function report(loaded, nextSteps, where = "") {
+  reportResult({
+    summary: summarizeSeedLoad(loaded) + where,
+    recordsLoaded: loaded.map((result) => result.label),
+    nextSteps
+  });
+}
 
 // src/commands/seeds/save.ts
 import fs45 from "node:fs";
 import path46 from "node:path";
 import { Command as Command72 } from "commander";
+var AUTH_IDENTITY_FIELDS = /* @__PURE__ */ new Set(["email", "emailVisibility", "verified"]);
 var padZeros2 = (num, length) => num.toString().padStart(length, "0");
 function filterSystemFields(record, systemFieldNames) {
   const out = {};
@@ -12725,6 +12870,7 @@ var save = new Command72("save").description("save the current data as seeds").o
       const collections2 = fullList.map((c) => ({
         id: c.id,
         name: c.name,
+        type: c.type,
         fields: c.fields.map((f) => ({
           name: f.name,
           type: f.type,
@@ -12737,10 +12883,13 @@ var save = new Command72("save").description("save the current data as seeds").o
       for (const collectionName of names) {
         const collection = collections2.find((c) => c.name === collectionName);
         if (!collection) continue;
+        if (collection.type === "view") continue;
         const systemFieldNames = new Set(
-          collection.fields.filter((f) => f.system && f.name !== "id").map((f) => f.name)
+          collection.fields.filter((f) => f.system && f.name !== "id").filter((f) => !(collection.type === "auth" && AUTH_IDENTITY_FIELDS.has(f.name))).map((f) => f.name)
         );
-        const records = await pb.collection(collectionName).getFullList();
+        const records = await pb.collection(collectionName).getFullList({
+          filter: `id !~ "${FIXTURE_PREFIX}${collectionName.slice(0, 6)}%"`
+        });
         if (records.length === 0) continue;
         const filtered = records.map(
           (r) => filterSystemFields(r, systemFieldNames)
@@ -12760,7 +12909,7 @@ var save = new Command72("save").description("save the current data as seeds").o
       reportResult({
         summary: "No records to save.",
         nextSteps: [
-          "Create some records first (via the app, `vela fixtures load`, or the PocketBase admin UI), then rerun `vela seeds save`."
+          "Create the records the app needs first (in the app or its admin panel), then rerun `vela seeds save`. Fixtures are left out."
         ]
       });
       return;
@@ -12769,8 +12918,8 @@ var save = new Command72("save").description("save the current data as seeds").o
       summary: `Saved ${saved.length} collection(s) as seeds.`,
       filesCreated: saved,
       nextSteps: [
-        "Commit the new files under data/seeds/ so teammates get the same starting data.",
-        "Run `vela seeds load` on a fresh database to restore this snapshot."
+        "Read through data/seeds/ before committing: `vela deploy` loads these records into every copy of the app.",
+        "Run `vela seeds load` to load them here, or `vela seeds load -t production` into a deployed copy."
       ]
     });
   }, "Failed to save seeds.")
@@ -13039,11 +13188,11 @@ import path50 from "node:path";
 import process31 from "node:process";
 import { Command as Command83 } from "commander";
 import * as p44 from "@clack/prompts";
-import pc13 from "picocolors";
+import pc14 from "picocolors";
 var sveltekit3 = new Command83("sveltekit-3").description("upgrade a SvelteKit 2 project to SvelteKit 3 (sv migrate, then the vela steps)").option("--cwd <path>", "the project to migrate (default: the current project)").option("--no-install", "skip installing dependencies").option("--force", "run even when the git working tree has uncommitted changes").option("--skip-sv", "only run the vela steps (sv has already been run)").configureHelp(helpConfig).action(
   (options) => runCommand(async () => {
     const root = options.cwd ? path50.resolve(options.cwd) : findWorkspaceRoot() ?? process31.cwd();
-    p44.intro(pc13.bgCyan(pc13.black(" vela migrate sveltekit-3 ")));
+    p44.intro(pc14.bgCyan(pc14.black(" vela migrate sveltekit-3 ")));
     const result = await runKit3Migration(root, {
       install: options.install,
       force: options.force,
@@ -13122,8 +13271,8 @@ import path52 from "node:path";
 import process33 from "node:process";
 import { performance } from "node:perf_hooks";
 import { Command as Command85, InvalidArgumentError as InvalidArgumentError4 } from "commander";
-import pc15 from "picocolors";
-import PocketBase5 from "pocketbase";
+import pc16 from "picocolors";
+import PocketBase6 from "pocketbase";
 
 // src/lib/pocketbase-log-filter.ts
 import { Transform } from "node:stream";
@@ -13154,7 +13303,7 @@ import path51 from "node:path";
 import process32 from "node:process";
 import { createRequire as createRequire4 } from "node:module";
 import { pathToFileURL } from "node:url";
-import pc14 from "picocolors";
+import pc15 from "picocolors";
 var REQUIRED_VITE_MAJOR = 8;
 function viteVersionError(version) {
   const major = Number.parseInt(version, 10);
@@ -13180,7 +13329,7 @@ async function loadVite(cwd = process32.cwd()) {
   const vite = entry ? await import(pathToFileURL(entry).href) : await import("vite");
   const error = viteVersionError(vite.version);
   if (error) {
-    console.error(`${pc14.redBright("\u2717")} ${error}`);
+    console.error(`${pc15.redBright("\u2717")} ${error}`);
     process32.exit(1);
   }
   return vite;
@@ -13196,7 +13345,7 @@ function parsePort(value) {
 }
 var dev = new Command85("dev").description("start the development server").option("--open [path]", "open the app in a browser once the server is ready").option("--host [host]", "expose the server on the network").option("--port <port>", "port to listen on", parsePort).option("--strictPort", "exit if the port is already in use instead of taking the next one").option("--cors", "enable CORS").option("--force", "re-bundle dependencies, ignoring the optimizer cache").option("--all-sql", "also print the auth lookup PocketBase runs on every request").configureHelp(helpConfig).action(async (options) => {
   const cwd = process33.cwd();
-  warnIfKit2(findWorkspaceRoot(cwd) ?? cwd, (m) => console.warn(pc15.yellow(`\u25B2 ${m}`)));
+  warnIfKit2(findWorkspaceRoot(cwd) ?? cwd, (m) => console.warn(pc16.yellow(`\u25B2 ${m}`)));
   process33.env.VELA_DATA_DIR ??= localDataDir(cwd);
   const startTime = performance.now();
   const { createServer, resolveConfig, version } = await loadVite(cwd);
@@ -13230,7 +13379,7 @@ var dev = new Command85("dev").description("start the development server").optio
     const site = await readSite(cwd);
     if (!site?.name) {
       console.log(
-        pc15.dim(
+        pc16.dim(
           `No app name in ${SITE_FILE}, so PocketBase keeps the one it has. Add \`export const site = { name: '\u2026', url: '\u2026' }\` there to set it from code.`
         )
       );
@@ -13270,7 +13419,7 @@ var dev = new Command85("dev").description("start the development server").optio
         viteHost
       })
     );
-    const pb = new PocketBase5(process33.env.POCKETBASE_URL);
+    const pb = new PocketBase6(process33.env.POCKETBASE_URL);
     await pb.collection("_superusers").authWithPassword(
       process33.env.POCKETBASE_SUPERUSER_EMAIL,
       process33.env.POCKETBASE_SUPERUSER_PASSWORD
@@ -13279,12 +13428,12 @@ var dev = new Command85("dev").description("start the development server").optio
   });
   await server.listen();
   const hasExistingLogs = process33.stdout.bytesWritten > 0 || process33.stderr.bytesWritten > 0;
-  const startupDurationString = pc15.dim(
-    `ready in ${pc15.reset(pc15.bold(Math.ceil(performance.now() - startTime)))} ms`
+  const startupDurationString = pc16.dim(
+    `ready in ${pc16.reset(pc16.bold(Math.ceil(performance.now() - startTime)))} ms`
   );
   server.config.logger.info(
     `
-  ${pc15.green(`${pc15.bold("VITE")} v${version}`)}  ${startupDurationString}
+  ${pc16.green(`${pc16.bold("VITE")} v${version}`)}  ${startupDurationString}
 `,
     { clear: !hasExistingLogs }
   );
@@ -13321,7 +13470,7 @@ import path53 from "node:path";
 import process35 from "node:process";
 import { Command as Command86 } from "commander";
 import * as p45 from "@clack/prompts";
-import pc16 from "picocolors";
+import pc17 from "picocolors";
 import { x as x5 } from "tinyexec";
 import { detect as detect8 } from "package-manager-detector";
 import { resolveCommand as resolveCommand6 } from "package-manager-detector/commands";
@@ -13437,17 +13586,17 @@ several hosts (or on none yet), and baking one in would make the others render
 as it and refuse their form posts. Each host takes its origin from the request
 instead, and a page prerendered at build time has none, so anything it takes
 from the request's origin points at SvelteKit's placeholder host. Build such links
-from ${pc16.cyan("src/lib/site.ts")}, as the templates' canonical links are.`
+from ${pc17.cyan("src/lib/site.ts")}, as the templates' canonical links are.`
     );
     return;
   }
   p45.log.warn(
     `Prerendered pages were built with no domain configured, so anything they take
 from the request's origin points at SvelteKit's placeholder host rather than at
-this site. Links built from ${pc16.cyan("src/lib/site.ts")}, as the templates' canonical
+this site. Links built from ${pc17.cyan("src/lib/site.ts")}, as the templates' canonical
 links are, don't depend on it.
 
-Set one with ${pc16.cyan("vela deploy --domain example.com")}, or pass ${pc16.cyan("VELA_ORIGIN")}.`
+Set one with ${pc17.cyan("vela deploy --domain example.com")}, or pass ${pc17.cyan("VELA_ORIGIN")}.`
   );
 }
 
@@ -13457,7 +13606,7 @@ import path54 from "node:path";
 import process36 from "node:process";
 import { Command as Command87 } from "commander";
 import * as p46 from "@clack/prompts";
-import pc17 from "picocolors";
+import pc18 from "picocolors";
 import { x as x6 } from "tinyexec";
 import { detect as detect9 } from "package-manager-detector";
 import { resolveCommand as resolveCommand7 } from "package-manager-detector/commands";
@@ -13521,10 +13670,10 @@ function warnIfOriginBaked(cwd) {
   const origin = bakedOrigin(source);
   if (!origin || isLocalUrl(origin)) return;
   p46.log.warn(
-    `This build was made for ${pc17.cyan(origin)}, and SvelteKit treats that as the origin of
+    `This build was made for ${pc18.cyan(origin)}, and SvelteKit treats that as the origin of
 every request. Form posts from localhost will be refused as cross-site (403).
 
-Build for this machine first: ${pc17.cyan("vela build -t local")}, or with ${pc17.cyan("VELA_ORIGIN=")}
+Build for this machine first: ${pc18.cyan("vela build -t local")}, or with ${pc18.cyan("VELA_ORIGIN=")}
 set empty so no domain is baked in.`
   );
 }
@@ -13547,7 +13696,7 @@ var sync = new Command88("sync").description("sync types from the database").con
 // src/commands/provision.ts
 import { Command as Command89 } from "commander";
 import * as p47 from "@clack/prompts";
-import pc18 from "picocolors";
+import pc19 from "picocolors";
 import * as v9 from "valibot";
 var NODE_MAJOR = "24";
 var OptionsSchema2 = v9.object({
@@ -13569,8 +13718,8 @@ var provision = addSshOptions(
   (target, raw) => runCommand(async () => {
     const options = parseOptions(OptionsSchema2, raw);
     const pbVersion = options.pbVersion ?? pocketbaseVersion();
-    p47.intro(pc18.bgCyan(pc18.black(" vela provision ")));
-    p47.log.info(`Target ${pc18.cyan(target)}`);
+    p47.intro(pc19.bgCyan(pc19.black(" vela provision ")));
+    p47.log.info(`Target ${pc19.cyan(target)}`);
     await withSsh(target, sshOptionsFrom(options), async (session) => {
       await session.detectElevation();
       const existing = await readServerInfo(session);
@@ -13601,7 +13750,7 @@ var provision = addSshOptions(
   PocketBase  ${result?.pocketbase ?? pbVersion}`
       );
     });
-    p47.outro(`Deploy with ${pc18.cyan(`vela deploy --server ${target}`)}`);
+    p47.outro(`Deploy with ${pc19.cyan(`vela deploy --server ${target}`)}`);
   }, "Failed to provision.")
 );
 
@@ -13611,7 +13760,7 @@ import fs54 from "node:fs";
 import process38 from "node:process";
 import { Command as Command90, Option as Option2 } from "commander";
 import * as p49 from "@clack/prompts";
-import pc20 from "picocolors";
+import pc21 from "picocolors";
 import * as v10 from "valibot";
 
 // src/lib/env-scopes.ts
@@ -13883,7 +14032,7 @@ import fs53 from "node:fs";
 import path58 from "node:path";
 import process37 from "node:process";
 import * as p48 from "@clack/prompts";
-import pc19 from "picocolors";
+import pc20 from "picocolors";
 var ENV_EXAMPLE = ".env.example";
 var SUPPLIED = /^(NODE_ENV|HOST|PORT|ORIGIN|PROTOCOL_HEADER|HOST_HEADER|ADDRESS_HEADER|XFF_DEPTH|PB_PORT|POCKETBASE_URL|POCKETBASE_SUPERUSER_EMAIL|POCKETBASE_SUPERUSER_PASSWORD|APP_NAME|VELA_)/;
 function missingFromExample(root, present) {
@@ -13895,14 +14044,14 @@ function missingFromExample(root, present) {
 async function nudgeMissingEnv(root, target, present) {
   const missing = missingFromExample(root, present);
   if (missing.length === 0) return [];
-  const where = pc19.cyan(target.targetName);
+  const where = pc20.cyan(target.targetName);
   if (!isInteractive()) {
     p48.log.warn(
       `${where} does not have ${missing.length} of the variables ${ENV_EXAMPLE} documents:
 
 ` + missing.map((key) => `  ${key}`).join("\n") + `
 
-Set any it needs with ${pc19.cyan(`vela env set KEY -t ${target.targetName}`)}.`
+Set any it needs with ${pc20.cyan(`vela env set KEY -t ${target.targetName}`)}.`
     );
     return [];
   }
@@ -13923,7 +14072,7 @@ Set any it needs with ${pc19.cyan(`vela env set KEY -t ${target.targetName}`)}.`
     const files = layer === "instance" ? layerFiles(target.appId, "instance", target.instance) : layerFiles(target.appId, layer);
     await setInLayer(target.session, files, key, value, asPublic);
     p48.log.success(
-      `${key} set${asPublic ? " (public)" : ""} ${pc19.dim(`(${layer === "instance" ? target.targetName : layer})`)}`
+      `${key} set${asPublic ? " (public)" : ""} ${pc20.dim(`(${layer === "instance" ? target.targetName : layer})`)}`
     );
     set.push(key);
   }
@@ -13936,20 +14085,20 @@ async function pickLayer(key, target) {
   ];
   if (target.preview) options.push({ value: "preview", label: "preview", hint: "every preview" });
   options.push({ value: "skip", label: "skip", hint: "leave it unset" });
-  const choice = await p48.select({ message: `Where should ${pc19.cyan(key)} be set?`, options });
+  const choice = await p48.select({ message: `Where should ${pc20.cyan(key)} be set?`, options });
   if (p48.isCancel(choice)) cancel22();
   return choice === "skip" ? null : choice;
 }
 async function askPublic(key) {
   const choice = await p48.confirm({
-    message: `Is ${pc19.cyan(key)} public? (readable back with vela env list; no for a secret)`,
+    message: `Is ${pc20.cyan(key)} public? (readable back with vela env list; no for a secret)`,
     initialValue: false
   });
   if (p48.isCancel(choice)) cancel22();
   return choice;
 }
 async function promptValue(key, asPublic) {
-  const message = `Value for ${pc19.cyan(key)}${asPublic ? pc19.dim(" (public)") : ""}`;
+  const message = `Value for ${pc20.cyan(key)}${asPublic ? pc20.dim(" (public)") : ""}`;
   const validate = (input) => !input?.length ? "Required" : void 0;
   const value = asPublic ? await p48.text({ message, validate }) : await p48.password({ message, validate });
   if (p48.isCancel(value)) cancel22();
@@ -13991,16 +14140,16 @@ var deploy = addLockWaitOption(
   (raw) => runCommand(async () => {
     const options = parseOptions(OptionsSchema3, raw);
     const backend3 = hasBackend();
-    p49.intro(pc20.bgCyan(pc20.black(" vela deploy ")));
+    p49.intro(pc21.bgCyan(pc21.black(" vela deploy ")));
     if (options.build !== false) {
       const { workspaceRootDir } = await getWorkspace();
       await prepareAdapter(workspaceRootDir);
       const foreign = foreignLockfile(workspaceRootDir);
       if (foreign) {
         p49.log.warn(
-          `Dependencies are pinned by ${pc20.cyan(foreign)}, but the server installs with npm, which cannot replay it.
+          `Dependencies are pinned by ${pc21.cyan(foreign)}, but the server installs with npm, which cannot replay it.
 Versions there are resolved from package.json ranges and may differ from yours. Commit a
-${pc20.cyan("package-lock.json")} (${pc20.dim("npm install --package-lock-only")}) for a reproducible deploy.`
+${pc21.cyan("package-lock.json")} (${pc21.dim("npm install --package-lock-only")}) for a reproducible deploy.`
         );
       }
     }
@@ -14011,14 +14160,14 @@ ${pc20.cyan("package-lock.json")} (${pc20.dim("npm install --package-lock-only")
         remote: async (ctx) => {
           const { session, instance, workspaceRootDir } = ctx;
           p49.log.info(
-            `${pc20.cyan(ctx.appName)} ${pc20.dim("\u2192")} ${pc20.cyan(ctx.targetName)} ${pc20.dim(`(${ctx.server})`)}`
+            `${pc21.cyan(ctx.appName)} ${pc21.dim("\u2192")} ${pc21.cyan(ctx.targetName)} ${pc21.dim(`(${ctx.server})`)}`
           );
           const serverNode = await requireServerNode(session, ctx.server);
           const drift = nodeMajorDrift(serverNode, process38.version);
           if (drift) {
             p49.log.warn(
               `${ctx.server} runs Node ${drift.server}, but this deploy runs Node ${drift.build}. The server's npm can reject a lockfile this one accepts.
-Run ${pc20.cyan(`vela provision ${ctx.server}`)} to bring it up to ${drift.build}.`
+Run ${pc21.cyan(`vela provision ${ctx.server}`)} to bring it up to ${drift.build}.`
             );
           }
           const [existing] = await readInstanceStates(session, instance);
@@ -14029,7 +14178,7 @@ Run ${pc20.cyan(`vela provision ${ctx.server}`)} to bring it up to ${drift.build
           const remoteDb = askedForRemoteDb ?? instanceHasBackend(existing);
           if (existing && instanceHasBackend(existing) !== backend3) {
             p49.log.info(
-              backend3 ? `${pc20.cyan(ctx.targetName)} was deployed without a backend before. This deploy adds PocketBase.` : `${pc20.cyan(ctx.targetName)} was deployed with a backend before. This deploy removes PocketBase; its database stays on the server.`
+              backend3 ? `${pc21.cyan(ctx.targetName)} was deployed without a backend before. This deploy adds PocketBase.` : `${pc21.cyan(ctx.targetName)} was deployed with a backend before. This deploy removes PocketBase; its database stays on the server.`
             );
           }
           let stack = await resolveStack(session, ctx.appId, instance, isPreview2);
@@ -14075,8 +14224,8 @@ Run ${pc20.cyan(`vela provision ${ctx.server}`)} to bring it up to ${drift.build
               throw new Error(
                 `Nothing routes to this preview.
 
-Previews get a free velastack.app hostname from velastack.dev: ${pc20.cyan("vela link")} the
-project and ${pc20.cyan("vela login")} (or set ${pc20.cyan("VELA_API_KEY")}). Or pass ${pc20.cyan("--domain <host>")}
+Previews get a free velastack.app hostname from velastack.dev: ${pc21.cyan("vela link")} the
+project and ${pc21.cyan("vela login")} (or set ${pc21.cyan("VELA_API_KEY")}). Or pass ${pc21.cyan("--domain <host>")}
 with DNS of your own pointing at ${ctx.server}.`
               );
             }
@@ -14092,15 +14241,15 @@ with DNS of your own pointing at ${ctx.server}.`
                 } catch (err) {
                   if (askedForRemoteDb) throw err;
                   p49.log.warn(
-                    `Could not build against the ${pc20.cyan(ctx.targetName)} database, using a local one instead.
-${pc20.dim(String(err))}`
+                    `Could not build against the ${pc21.cyan(ctx.targetName)} database, using a local one instead.
+${pc21.dim(String(err))}`
                   );
                 }
               }
               if (tunnel) {
                 derived = { ...derived, ...tunnel.env };
                 p49.log.info(
-                  `Building against the ${pc20.cyan(ctx.targetName)} database on ${ctx.server} ${pc20.dim(`(port ${tunnel.pbPort})`)}`
+                  `Building against the ${pc21.cyan(ctx.targetName)} database on ${ctx.server} ${pc21.dim(`(port ${tunnel.pbPort})`)}`
                 );
               } else if (backend3) {
                 await ensureSuperuser(workspaceRootDir);
@@ -14112,7 +14261,7 @@ ${pc20.dim(String(err))}`
               });
               if (blanked.length > 0) {
                 p49.log.info(
-                  `Building without ${blanked.join(", ")} \u2014 set in .env but not for ${pc20.cyan(ctx.targetName)}.`
+                  `Building without ${blanked.join(", ")} \u2014 set in .env but not for ${pc21.cyan(ctx.targetName)}.`
                 );
               }
               p49.log.step("Building");
@@ -14123,7 +14272,7 @@ ${pc20.dim(String(err))}`
               }
             }
             const entries = collectArtifact(workspaceRootDir);
-            p49.log.step(`Uploading release ${pc20.dim(release)}`);
+            p49.log.step(`Uploading release ${pc21.dim(release)}`);
             await uploadRelease(session, instance, release, entries);
             p49.log.step("Activating");
             result = await runServerScript(session, "apply.sh", {
@@ -14191,44 +14340,69 @@ ${pc20.dim(String(err))}`
           });
           const redirects = started?.environment.redirects ?? [];
           p49.log.success(
-            `Deployed ${pc20.cyan(ctx.appName)} ${pc20.dim(release)}
+            `Deployed ${pc21.cyan(ctx.appName)} ${pc21.dim(release)}
 
   URL   ${url}
-` + (redirects.length ? `  Also  ${redirects.map((h) => `https://${h}`).join(", ")} ${pc20.dim("(redirects here)")}
+` + (redirects.length ? `  Also  ${redirects.map((h) => `https://${h}`).join(", ")} ${pc21.dim("(redirects here)")}
 ` : "") + `  Port  ${result?.webPort ?? "?"}${backend3 ? ` (PocketBase ${result?.pbPort ?? "?"})` : ""}`
           );
           if (managed && managed !== existing?.managed) {
-            p49.log.info(`${pc20.cyan(managed)} goes live within a minute.`);
+            p49.log.info(`${pc21.cyan(managed)} goes live within a minute.`);
           }
           if (result?.superuserCreated) {
             p49.log.info(
               `Created the PocketBase superuser this app authenticates as.
 
 Its credentials are stored in the environment on the server. To use
-your own instead, ${pc20.cyan("vela env set POCKETBASE_SUPERUSER_PASSWORD")}
+your own instead, ${pc21.cyan("vela env set POCKETBASE_SUPERUSER_PASSWORD")}
 and deploy again.`
             );
           }
           if (!primaryHost) {
             p49.log.warn(
               `No domain configured, so nothing is proxied to this app yet.
-Redeploy with ${pc20.cyan("--domain example.com")} once DNS points at ${ctx.server}` + (reporter.enabled ? "" : `,
-or ${pc20.cyan("vela link")} it to get a free velastack.app hostname.`) + `.`
+Redeploy with ${pc21.cyan("--domain example.com")} once DNS points at ${ctx.server}` + (reporter.enabled ? "" : `,
+or ${pc21.cyan("vela link")} it to get a free velastack.app hostname.`) + `.`
             );
           }
+          if (backend3) await loadDeployedSeeds(ctx);
         }
       },
       { project: options.project, askDomain: true, label: "deploy" }
     );
-    p49.outro(`${pc20.cyan("vela status")} to see what is running`);
+    p49.outro(`${pc21.cyan("vela status")} to see what is running`);
   }, "Failed to deploy.")
 );
+async function loadDeployedSeeds(ctx) {
+  const seedFiles = getSeedFiles(ctx.workspaceRootDir);
+  if (seedFiles.length === 0) return;
+  try {
+    const loaded = await withRemotePocketbase(
+      ctx.session,
+      ctx.instance,
+      (pb) => loadSeeds(pb, ctx.workspaceRootDir, seedFiles)
+    );
+    if (loaded.some((result) => result.created > 0)) {
+      p49.log.success(summarizeSeedLoad(loaded));
+    }
+  } catch (err) {
+    const retry = `vela seeds load -t ${ctx.targetName}`;
+    p49.log.error(
+      `The release is deployed, but its seeds did not all load.
+
+${err instanceof Error ? err.message : String(err)}
+
+` + (err instanceof DataLoadError ? `Fix the file, then run ${pc21.cyan(retry)}. Records already loaded are left as they are.` : `Run ${pc21.cyan(retry)} to try again.`)
+    );
+    process38.exitCode = 1;
+  }
+}
 async function prepareAdapter(workspaceRootDir) {
   const rethrow = (err) => {
     if (err instanceof AdapterError) {
       throw new Error(err.snippet ? `${err.message}
 
-${pc20.cyan(err.snippet)}` : err.message);
+${pc21.cyan(err.snippet)}` : err.message);
     }
     throw err;
   };
@@ -14256,7 +14430,7 @@ Switch it to ${ADAPTER_NODE}? This edits ${path59.basename(current.file)} and pa
     outcome.packageJsonChanged ? "package.json" : void 0
   ].filter((f) => Boolean(f));
   const why = outcome.previous === "auto" ? `${ADAPTER_AUTO} builds nothing for a server of your own` : outcome.previous === "none" ? "No adapter was configured" : `${ADAPTER_NODE} was configured but not in package.json`;
-  p49.log.step(`Switching the adapter to ${pc20.cyan(ADAPTER_NODE)}`);
+  p49.log.step(`Switching the adapter to ${pc21.cyan(ADAPTER_NODE)}`);
   p49.log.info(
     `${why}, and vela deploy runs the app as a Node server.
 
@@ -14316,13 +14490,13 @@ Set them with \`vela env set POCKETBASE_SUPERUSER_EMAIL\` and \`vela env set POC
 
 They are what \`--remote-db\` renders the build as. The usual cause is a password
 changed in the PocketBase admin panel, which leaves the database and
-${pc20.cyan(`/etc/vela/apps/${instance}/env`)} disagreeing.
+${pc21.cyan(`/etc/vela/apps/${instance}/env`)} disagreeing.
 
 Point the environment at the password the database has:
-  ${pc20.cyan("vela env set POCKETBASE_SUPERUSER_PASSWORD")}
+  ${pc21.cyan("vela env set POCKETBASE_SUPERUSER_PASSWORD")}
 
 or build against a throwaway local database instead:
-  ${pc20.cyan("vela deploy --no-remote-db")}`
+  ${pc21.cyan("vela deploy --no-remote-db")}`
     );
   }
   return {
@@ -14387,7 +14561,7 @@ async function requireServerNode(session, server) {
   throw new Error(
     `${server} ${version ? `runs Node ${version}` : "has no Node"}, and this app needs ${major}.${minor} or later.
 
-Run ${pc20.cyan(`vela provision ${server}`)} to upgrade it, then deploy again.`
+Run ${pc21.cyan(`vela provision ${server}`)} to upgrade it, then deploy again.`
   );
 }
 function nodeMajorDrift(serverVersion, buildVersion) {
@@ -14485,12 +14659,12 @@ import { Command as Command97 } from "commander";
 import { Command as Command92 } from "commander";
 import * as v12 from "valibot";
 import * as p53 from "@clack/prompts";
-import pc23 from "picocolors";
+import pc24 from "picocolors";
 
 // src/lib/local-env.ts
 import fs55 from "node:fs";
 import * as p51 from "@clack/prompts";
-import pc21 from "picocolors";
+import pc22 from "picocolors";
 function readLocalEnv(envFile) {
   if (!fs55.existsSync(envFile)) return {};
   return readLocalEnvFile(envFile);
@@ -14519,12 +14693,12 @@ async function applyLocalEnvChange(ctx, changed) {
     } else {
       p51.log.warn(
         `The local database still has the old superuser.
-Set both ${pc21.cyan("POCKETBASE_SUPERUSER_EMAIL")} and ${pc21.cyan("POCKETBASE_SUPERUSER_PASSWORD")} to reconcile it.`
+Set both ${pc22.cyan("POCKETBASE_SUPERUSER_EMAIL")} and ${pc22.cyan("POCKETBASE_SUPERUSER_PASSWORD")} to reconcile it.`
       );
     }
   }
   if (getPocketbaseMetadata(ctx.workspaceRootDir)) {
-    p51.log.info(`Restart ${pc21.cyan("vela dev")} to pick this up.`);
+    p51.log.info(`Restart ${pc22.cyan("vela dev")} to pick this up.`);
   }
 }
 
@@ -14532,7 +14706,7 @@ Set both ${pc21.cyan("POCKETBASE_SUPERUSER_EMAIL")} and ${pc21.cyan("POCKETBASE_
 import process40 from "node:process";
 import * as v11 from "valibot";
 import * as p52 from "@clack/prompts";
-import pc22 from "picocolors";
+import pc23 from "picocolors";
 var ALL_SCOPE = "all";
 var PREVIEW_SCOPE = "preview";
 function parseEnvScope(raw) {
@@ -14575,7 +14749,7 @@ async function withEnvScope(raw, handlers, run) {
   let scope = parseEnvScope(options.target);
   if (!scope) {
     if (!run.ask)
-      throw new TargetError(`${label2} needs ${pc22.cyan("-t")} to say which environment.`);
+      throw new TargetError(`${label2} needs ${pc23.cyan("-t")} to say which environment.`);
     scope = await promptScope(workspaceRootDir, label2);
   }
   if (scope.kind === "local" || scope.kind === "instance") {
@@ -14610,9 +14784,9 @@ async function withEnvScope(raw, handlers, run) {
     throw new TargetError(
       layer === "all" ? `No target is bound to a server yet, so there is nowhere to write.
 
-Deploy once (${pc22.cyan("vela deploy --server user@host")}) and the app-wide layer goes to every server it is deployed to.` : `Previews are not bound to a server yet.
+Deploy once (${pc23.cyan("vela deploy --server user@host")}) and the app-wide layer goes to every server it is deployed to.` : `Previews are not bound to a server yet.
 
-Deploy one first: ${pc22.cyan("vela deploy -t preview --server user@host")}.`
+Deploy one first: ${pc23.cyan("vela deploy -t preview --server user@host")}.`
     );
   }
   const app = resolveAppIdentity(workspaceRootDir);
@@ -14648,7 +14822,7 @@ async function promptScope(workspaceRootDir, label2) {
   const scopes = knownScopes(workspaceRootDir);
   if (!isInteractive()) {
     throw new TargetError(
-      `${label2} needs ${pc22.cyan("-t")} to say which environment: ${scopes.join(", ")}.`
+      `${label2} needs ${pc23.cyan("-t")} to say which environment: ${scopes.join(", ")}.`
     );
   }
   const hints = {
@@ -14676,7 +14850,7 @@ async function applyLayerRestart(ctx, changed) {
       `PocketBase superuser credentials changed.
 
 Each database still holds the old ones, so nothing was restarted.
-Run ${pc22.cyan("vela deploy")} for every target to push them in.`
+Run ${pc23.cyan("vela deploy")} for every target to push them in.`
     );
     return;
   }
@@ -14689,18 +14863,18 @@ Run ${pc22.cyan("vela deploy")} for every target to push them in.`
     const reach = changed.filter((key) => !(key in shadowed));
     if (Object.keys(shadowed).length > 0) p52.log.warn(shadowWarning(state, ctx.layer, shadowed));
     if (reach.length === 0) {
-      p52.log.info(`${state.env} not restarted ${pc22.dim(`(${ctx.server})`)}`);
+      p52.log.info(`${state.env} not restarted ${pc23.dim(`(${ctx.server})`)}`);
       continue;
     }
     const outcome = await restartInstance(ctx.session, state.instance);
     if (!outcome.deployed) continue;
-    if (outcome.restarted) p52.log.success(`${state.env} restarted ${pc22.dim(`(${ctx.server})`)}`);
+    if (outcome.restarted) p52.log.success(`${state.env} restarted ${pc23.dim(`(${ctx.server})`)}`);
     else {
       p52.log.error(
         `${state.env} restart failed.
 
 The new value is stored and will be used the next time it starts.
-${pc22.dim(outcome.error ?? "")}`
+${pc23.dim(outcome.error ?? "")}`
       );
     }
   }
@@ -14717,7 +14891,7 @@ function shadowWarning(state, layer, shadowed) {
     if (above === "preview") {
       lines.push(
         `The preview layer sets ${list3} too, and wins over ${layer} for ${state.env}.`,
-        `To use the ${layer} value${plural ? "s" : ""} there: ${pc22.cyan(`vela env unset ${plural ? "<key>" : list3} -t preview`)}`
+        `To use the ${layer} value${plural ? "s" : ""} there: ${pc23.cyan(`vela env unset ${plural ? "<key>" : list3} -t preview`)}`
       );
     } else if (state.preview) {
       lines.push(`${state.env} sets ${list3} itself, which wins over ${layer}.`);
@@ -14725,7 +14899,7 @@ function shadowWarning(state, layer, shadowed) {
       const target = state.env === PROD_ENV ? PRODUCTION_TARGET : state.env;
       lines.push(
         `${state.env} sets ${list3} itself, which wins over ${layer}.`,
-        `To use the ${layer} value${plural ? "s" : ""} there: ${pc22.cyan(`vela env unset ${plural ? "<key>" : list3} -t ${target}`)}`
+        `To use the ${layer} value${plural ? "s" : ""} there: ${pc23.cyan(`vela env unset ${plural ? "<key>" : list3} -t ${target}`)}`
       );
     }
   }
@@ -14735,7 +14909,7 @@ async function applyChange(workspaceRootDir, ctx, changed) {
   const { baked, how } = readAtBuildTime(workspaceRootDir, changed);
   if (baked.length > 0) {
     p52.log.info(
-      `${baked.join(", ")} ${baked.length === 1 ? "is" : "are"} read at build time (${pc22.cyan(how)}); redeploy to apply.`
+      `${baked.join(", ")} ${baked.length === 1 ? "is" : "are"} read at build time (${pc23.cyan(how)}); redeploy to apply.`
     );
     const rest = changed.filter((key) => !baked.includes(key));
     if (rest.length === 0) return;
@@ -14770,11 +14944,11 @@ var envList = addEnvTargetOptions(
         local: async (ctx) => {
           const keys = Object.keys(readLocalEnv(ctx.envFile)).sort();
           if (keys.length === 0) {
-            p53.log.info(`No environment variables configured ${pc23.dim("(local)")}.`);
+            p53.log.info(`No environment variables configured ${pc24.dim("(local)")}.`);
             return;
           }
           p53.log.info(
-            `Environment ${pc23.dim("(local, .env)")}
+            `Environment ${pc24.dim("(local, .env)")}
 
 ${keys.map((k) => `  ${k}`).join("\n")}`
           );
@@ -14783,16 +14957,16 @@ ${keys.map((k) => `  ${k}`).join("\n")}`
           const stack = await resolveStack(ctx.session, ctx.appId, ctx.instance, ctx.preview);
           const keys = Object.keys(stack.entries).sort();
           if (keys.length === 0) {
-            p53.log.info(`No environment variables configured ${pc23.dim(`(${ctx.targetName})`)}.`);
+            p53.log.info(`No environment variables configured ${pc24.dim(`(${ctx.targetName})`)}.`);
             return;
           }
           const width = Math.max(...keys.map((k) => k.length));
           p53.log.info(
-            `Environment ${pc23.dim(`(${ctx.targetName}, as the app sees it)`)}
+            `Environment ${pc24.dim(`(${ctx.targetName}, as the app sees it)`)}
 
 ` + keys.map((key) => {
               const entry = stack.entries[key];
-              const from = entry.layer === "instance" ? "" : pc23.dim(`  from ${entry.layer}`);
+              const from = entry.layer === "instance" ? "" : pc24.dim(`  from ${entry.layer}`);
               return `  ${key.padEnd(width)}  ${cell(entry.visibility, entry.value)}${from}`;
             }).join("\n")
           );
@@ -14802,12 +14976,12 @@ ${keys.map((k) => `  ${k}`).join("\n")}`
           const keys = [...Object.keys(contents.secret), ...Object.keys(contents.public)].sort();
           const where = `${ctx.layer}, ${ctx.server}`;
           if (keys.length === 0) {
-            p53.log.info(`No environment variables configured ${pc23.dim(`(${where})`)}.`);
+            p53.log.info(`No environment variables configured ${pc24.dim(`(${where})`)}.`);
             return;
           }
           const width = Math.max(...keys.map((k) => k.length));
           p53.log.info(
-            `Environment ${pc23.dim(`(${where})`)}
+            `Environment ${pc24.dim(`(${where})`)}
 
 ` + keys.map(
               (key) => `  ${key.padEnd(width)}  ${key in contents.public ? cell("public", contents.public[key]) : cell("secret")}`
@@ -14820,7 +14994,7 @@ ${keys.map((k) => `  ${k}`).join("\n")}`
   }, "Failed to read the environment.")
 );
 function cell(visibility, value) {
-  if (visibility === "secret") return pc23.dim(HIDDEN);
+  if (visibility === "secret") return pc24.dim(HIDDEN);
   const shown = value ?? "";
   return shown.length > MAX_VALUE ? `${shown.slice(0, MAX_VALUE - 1)}\u2026` : shown;
 }
@@ -14831,13 +15005,13 @@ async function listMatrix(raw) {
   const bindings = readBindings(workspaceRootDir);
   const local = Object.keys(readLocalEnv(`${workspaceRootDir}/.env`)).sort();
   p53.log.info(
-    local.length ? `Local ${pc23.dim("(.env, names only)")}
+    local.length ? `Local ${pc24.dim("(.env, names only)")}
 
-${local.map((k) => `  ${k}`).join("\n")}` : `No local environment ${pc23.dim("(.env)")}.`
+${local.map((k) => `  ${k}`).join("\n")}` : `No local environment ${pc24.dim("(.env)")}.`
   );
   const servers = [...new Set(Object.values(bindings).map((b) => b.server))];
   if (!app || servers.length === 0) {
-    p53.log.info(`No target is bound to a server yet; ${pc23.cyan("vela deploy")} binds one.`);
+    p53.log.info(`No target is bound to a server yet; ${pc24.cyan("vela deploy")} binds one.`);
     return;
   }
   for (const server of servers) {
@@ -14876,7 +15050,7 @@ ${local.map((k) => `  ${k}`).join("\n")}` : `No local environment ${pc23.dim("(.
         )
       ].sort();
       if (keys.length === 0) {
-        p53.log.info(`No environment variables configured ${pc23.dim(`(${server})`)}.`);
+        p53.log.info(`No environment variables configured ${pc24.dim(`(${server})`)}.`);
         return;
       }
       const rows = keys.map((key) => [
@@ -14889,9 +15063,9 @@ ${local.map((k) => `  ${k}`).join("\n")}` : `No local environment ${pc23.dim("(.
       );
       const line = (cells) => cells.map((c, i) => c + " ".repeat(widths[i] - plain(c).length)).join("  ");
       p53.log.info(
-        `Environment ${pc23.dim(`(${server})`)}
+        `Environment ${pc24.dim(`(${server})`)}
 
-  ${pc23.dim(line(headings))}
+  ${pc24.dim(line(headings))}
 ` + rows.map((r) => `  ${line(r)}`).join("\n")
       );
     });
@@ -14901,17 +15075,17 @@ function matrixCell(key, columns, index, states) {
   const column = columns[index];
   if (key in column.contents.public) return cell("public", column.contents.public[key]);
   if (key in column.contents.secret) return cell("secret");
-  if (column.layer !== "instance") return pc23.dim("\u2014");
+  if (column.layer !== "instance") return pc24.dim("\u2014");
   const state = states[index - columns.findIndex((c) => c.layer === "instance")];
   const inherits = columns.filter(
     (c) => c.layer === "all" || c.layer === "preview" && state?.preview === true
   );
   for (const layer of inherits.reverse()) {
     if (key in layer.contents.public || key in layer.contents.secret) {
-      return pc23.dim(`\u2191 ${layer.heading}`);
+      return pc24.dim(`\u2191 ${layer.heading}`);
     }
   }
-  return pc23.dim("\u2014");
+  return pc24.dim("\u2014");
 }
 var ANSI3 = /\u001b\[[0-9;]*m/g;
 function plain(text20) {
@@ -14922,7 +15096,7 @@ function plain(text20) {
 import process41 from "node:process";
 import { Command as Command93 } from "commander";
 import * as p54 from "@clack/prompts";
-import pc24 from "picocolors";
+import pc25 from "picocolors";
 var envSet = addEnvTargetOptions(
   new Command93("set").description("set an environment variable \u2014 the value is prompted for, never an argument").argument("<key>", "variable name").option(
     "--public",
@@ -14938,19 +15112,19 @@ var envSet = addEnvTargetOptions(
         local: async (ctx) => {
           const value = await promptValue2(key, "public");
           setLocalEnv(ctx.envFile, key, value);
-          p54.log.success(`${key} updated ${pc24.dim("(local)")}`);
+          p54.log.success(`${key} updated ${pc25.dim("(local)")}`);
           await applyLocalEnvChange(ctx, [key]);
         },
         instance: async (ctx) => {
           const value = await promptValue2(key, visibilityFor(key, asPublic));
           const outcome = await setInLayer(ctx.session, ctx.files, key, value, asPublic);
-          report(key, outcome.visibility, outcome.moved, ctx.targetName);
+          report2(key, outcome.visibility, outcome.moved, ctx.targetName);
           await applyChange(ctx.workspaceRootDir, ctx, [key]);
         },
         layer: async (ctx) => {
           const value = await promptValue2(key, visibilityFor(key, asPublic));
           const outcome = await setInLayer(ctx.session, ctx.files, key, value, asPublic);
-          report(key, outcome.visibility, outcome.moved, `${ctx.layer}, ${ctx.server}`);
+          report2(key, outcome.visibility, outcome.moved, `${ctx.layer}, ${ctx.server}`);
           await applyChange(ctx.workspaceRootDir, ctx, [key]);
         }
       },
@@ -14958,9 +15132,9 @@ var envSet = addEnvTargetOptions(
     );
   }, "Failed to set the variable.")
 );
-function report(key, visibility, moved, where) {
+function report2(key, visibility, moved, where) {
   const tag = visibility === "public" ? " (public)" : "";
-  p54.log.success(`${key} updated${tag} ${pc24.dim(`(${where})`)}`);
+  p54.log.success(`${key} updated${tag} ${pc25.dim(`(${where})`)}`);
   if (moved) {
     p54.log.info(
       visibility === "public" ? `${key} was secret before; it is readable from now on.` : `${key} was public before; it is write-only from now on.`
@@ -14968,7 +15142,7 @@ function report(key, visibility, moved, where) {
   }
 }
 async function promptValue2(key, visibility) {
-  const message = `Value for ${pc24.cyan(key)}${visibility === "public" ? pc24.dim(" (public)") : ""}`;
+  const message = `Value for ${pc25.cyan(key)}${visibility === "public" ? pc25.dim(" (public)") : ""}`;
   const validate = (input) => !input?.length ? "Required" : void 0;
   const value = visibility === "public" ? await p54.text({ message, validate }) : await p54.password({ message, validate });
   if (p54.isCancel(value)) {
@@ -14984,7 +15158,7 @@ async function promptValue2(key, visibility) {
 // src/commands/env/unset.ts
 import { Command as Command94 } from "commander";
 import * as p55 from "@clack/prompts";
-import pc25 from "picocolors";
+import pc26 from "picocolors";
 var envUnset = addEnvTargetOptions(
   new Command94("unset").description("remove an environment variable").argument("<key>", "variable name").configureHelp(helpConfig)
 ).action(
@@ -14998,7 +15172,7 @@ var envUnset = addEnvTargetOptions(
             return;
           }
           unsetLocalEnv(ctx.envFile, key);
-          p55.log.success(`${key} removed ${pc25.dim("(local)")}`);
+          p55.log.success(`${key} removed ${pc26.dim("(local)")}`);
           await applyLocalEnvChange(ctx, [key]);
         },
         // Removed from whichever side it was on; nobody should have to
@@ -15008,7 +15182,7 @@ var envUnset = addEnvTargetOptions(
             p55.log.info(`${key} is not set on ${ctx.targetName} \u2014 nothing to remove.`);
             return;
           }
-          p55.log.success(`${key} removed ${pc25.dim(`(${ctx.targetName})`)}`);
+          p55.log.success(`${key} removed ${pc26.dim(`(${ctx.targetName})`)}`);
           await applyChange(ctx.workspaceRootDir, ctx, [key]);
         },
         layer: async (ctx) => {
@@ -15016,7 +15190,7 @@ var envUnset = addEnvTargetOptions(
             p55.log.info(`${key} is not set (${ctx.layer}, ${ctx.server}) \u2014 nothing to remove.`);
             return;
           }
-          p55.log.success(`${key} removed ${pc25.dim(`(${ctx.layer}, ${ctx.server})`)}`);
+          p55.log.success(`${key} removed ${pc26.dim(`(${ctx.layer}, ${ctx.server})`)}`);
           await applyChange(ctx.workspaceRootDir, ctx, [key]);
         }
       },
@@ -15032,7 +15206,7 @@ import path61 from "node:path";
 import process42 from "node:process";
 import { Command as Command95 } from "commander";
 import * as p56 from "@clack/prompts";
-import pc26 from "picocolors";
+import pc27 from "picocolors";
 var envImport = addEnvTargetOptions(
   new Command95("import").description("merge a dotenv file into the environment").argument("<file>", "dotenv file to read").option("--public", "import as readable values; PUBLIC_* keys are public regardless").configureHelp(helpConfig)
 ).action(
@@ -15048,12 +15222,12 @@ var envImport = addEnvTargetOptions(
           const incoming = read(source, file);
           const keys = Object.keys(incoming);
           if (keys.length === 0) return;
-          p56.log.step(`Importing ${keys.length} variable(s) from ${pc26.cyan(file)}`);
+          p56.log.step(`Importing ${keys.length} variable(s) from ${pc27.cyan(file)}`);
           editLocalEnv(
             ctx.envFile,
             (content) => keys.reduce((acc, key) => upsertEnvVar(acc, key, incoming[key]), content)
           );
-          p56.log.success(`${keys.length} variable(s) updated ${pc26.dim("(local)")}`);
+          p56.log.success(`${keys.length} variable(s) updated ${pc27.dim("(local)")}`);
           await applyLocalEnvChange(ctx, keys);
         },
         // Merge: values in the layer that the file does not mention stay put.
@@ -15061,28 +15235,28 @@ var envImport = addEnvTargetOptions(
           const incoming = read(resolve(file), file);
           const keys = Object.keys(incoming);
           if (keys.length === 0) return;
-          p56.log.step(`Importing ${keys.length} variable(s) from ${pc26.cyan(file)}`);
+          p56.log.step(`Importing ${keys.length} variable(s) from ${pc27.cyan(file)}`);
           const outcome = await importIntoLayer(
             ctx.session,
             ctx.files,
             incoming,
             raw.public === true
           );
-          report2(outcome, ctx.targetName);
+          report3(outcome, ctx.targetName);
           await applyChange(ctx.workspaceRootDir, ctx, keys);
         },
         layer: async (ctx) => {
           const incoming = read(resolve(file), file);
           const keys = Object.keys(incoming);
           if (keys.length === 0) return;
-          p56.log.step(`Importing ${keys.length} variable(s) from ${pc26.cyan(file)}`);
+          p56.log.step(`Importing ${keys.length} variable(s) from ${pc27.cyan(file)}`);
           const outcome = await importIntoLayer(
             ctx.session,
             ctx.files,
             incoming,
             raw.public === true
           );
-          report2(outcome, `${ctx.layer}, ${ctx.server}`);
+          report3(outcome, `${ctx.layer}, ${ctx.server}`);
           await applyChange(ctx.workspaceRootDir, ctx, keys);
         }
       },
@@ -15091,12 +15265,12 @@ var envImport = addEnvTargetOptions(
     "Failed to import the environment."
   )
 );
-function report2(outcome, where) {
+function report3(outcome, where) {
   const parts = [
     outcome.secret.length ? `${outcome.secret.length} secret` : "",
     outcome.public.length ? `${outcome.public.length} public` : ""
   ].filter(Boolean);
-  p56.log.success(`${parts.join(", ")} variable(s) updated ${pc26.dim(`(${where})`)}`);
+  p56.log.success(`${parts.join(", ")} variable(s) updated ${pc27.dim(`(${where})`)}`);
 }
 function resolve(file) {
   return path61.resolve(process42.cwd(), file);
@@ -15112,7 +15286,7 @@ function read(resolved, shown) {
 import process43 from "node:process";
 import { Command as Command96 } from "commander";
 import * as p57 from "@clack/prompts";
-import pc27 from "picocolors";
+import pc28 from "picocolors";
 var envGet = addEnvTargetOptions(
   new Command96("get").description("print a public environment variable").argument("<key>", "variable name").configureHelp(helpConfig)
 ).action(
@@ -15155,8 +15329,8 @@ var envGet = addEnvTargetOptions(
 );
 function secret(key, where, from) {
   p57.log.info(
-    `${key} is secret ${pc27.dim(`(${where}${from ? `, from ${from}` : ""})`)}, so it is not read back.
-Set it again to change it: ${pc27.cyan(`vela env set ${key}`)}`
+    `${key} is secret ${pc28.dim(`(${where}${from ? `, from ${from}` : ""})`)}, so it is not read back.
+Set it again to change it: ${pc28.cyan(`vela env set ${key}`)}`
   );
   process43.exitCode = 1;
 }
@@ -15167,7 +15341,7 @@ var env = new Command97("env").description("manage environment variables, locall
 // src/commands/status.ts
 import { Command as Command98 } from "commander";
 import * as p58 from "@clack/prompts";
-import pc28 from "picocolors";
+import pc29 from "picocolors";
 var status = addTargetOptions(
   new Command98("status").description("show what is deployed").configureHelp(helpConfig),
   "production"
@@ -15176,7 +15350,7 @@ var status = addTargetOptions(
     const options = raw;
     if (options.all) {
       await withServerSession(raw, async (session) => {
-        report3(await readInstanceStates(session), options.json);
+        report4(await readInstanceStates(session), options.json);
       });
       return;
     }
@@ -15184,7 +15358,7 @@ var status = addTargetOptions(
       raw,
       {
         remote: async (ctx) => {
-          report3(await readInstanceStates(ctx.session, ctx.instance), options.json);
+          report4(await readInstanceStates(ctx.session, ctx.instance), options.json);
         }
       },
       {
@@ -15194,7 +15368,7 @@ var status = addTargetOptions(
     );
   }, "Failed to read status.")
 );
-function report3(states, json2) {
+function report4(states, json2) {
   if (json2) {
     console.log(JSON.stringify(states, null, 2));
     return;
@@ -15208,7 +15382,7 @@ function report3(states, json2) {
   }
 }
 function describe2(state) {
-  const health = (value) => value === "active" ? pc28.green(value) : pc28.red(value || "inactive");
+  const health = (value) => value === "active" ? pc29.green(value) : pc29.red(value || "inactive");
   const rows = [
     ["Instance", state.instance],
     ["Environment", state.env],
@@ -15224,13 +15398,13 @@ function describe2(state) {
     ...state.gitSha ? [["Commit", state.gitSha.slice(0, 12)]] : []
   ];
   const width = Math.max(...rows.map(([label2]) => label2.length));
-  return pc28.cyan(state.name) + "\n\n" + rows.map(([label2, value]) => `  ${label2.padEnd(width)}  ${value}`).join("\n");
+  return pc29.cyan(state.name) + "\n\n" + rows.map(([label2, value]) => `  ${label2.padEnd(width)}  ${value}`).join("\n");
 }
 
 // src/commands/rollback.ts
 import { Command as Command99 } from "commander";
 import * as p59 from "@clack/prompts";
-import pc29 from "picocolors";
+import pc30 from "picocolors";
 var rollback = addLockWaitOption(
   addTargetOptions(
     new Command99("rollback").description("put the previous release back").configureHelp(helpConfig),
@@ -15244,7 +15418,7 @@ var rollback = addLockWaitOption(
       {
         remote: async (ctx) => {
           p59.log.step(
-            `Rolling back ${pc29.cyan(ctx.appName)} ${pc29.dim(`(${ctx.targetName})`)} on ${ctx.server}`
+            `Rolling back ${pc30.cyan(ctx.appName)} ${pc30.dim(`(${ctx.targetName})`)} on ${ctx.server}`
           );
           const result = await runServerScript(
             ctx.session,
@@ -15259,7 +15433,7 @@ var rollback = addLockWaitOption(
             }
           );
           p59.log.success(
-            `Rolled back to ${pc29.cyan(result?.release ?? "the previous release")}` + (result?.from ? ` ${pc29.dim(`(was ${result.from})`)}` : "")
+            `Rolled back to ${pc30.cyan(result?.release ?? "the previous release")}` + (result?.from ? ` ${pc30.dim(`(was ${result.from})`)}` : "")
           );
         }
       },
@@ -15273,55 +15447,6 @@ var rollback = addLockWaitOption(
 
 // src/commands/logs.ts
 import { Command as Command100 } from "commander";
-
-// src/lib/remote-pocketbase.ts
-import PocketBase6 from "pocketbase";
-async function requireRemoteDatabase(session, instance) {
-  const [state] = await readInstanceStates(session, instance);
-  const pbPort = instanceHasBackend(state) ? state?.pbPort : void 0;
-  if (!pbPort) {
-    throw new Error(
-      `${instance} has no deployed database.
-
-The database is created by the first \`vela deploy\` of a project with a backend.
-If this project has none, \`vela enable backend\` adds one; then deploy again.`
-    );
-  }
-  return pbPort;
-}
-async function openRemoteDatabase(session, instance) {
-  const pbPort = await requireRemoteDatabase(session, instance);
-  const env2 = await readRemoteEnv(session, instance);
-  const email2 = env2.POCKETBASE_SUPERUSER_EMAIL;
-  const password8 = env2.POCKETBASE_SUPERUSER_PASSWORD;
-  if (!email2 || !password8) {
-    throw new Error(
-      `${instance} has no PocketBase superuser credentials in its environment.
-
-A deploy creates them. Deploy again to repair this instance.`
-    );
-  }
-  const localPort = await findFreePort("127.0.0.1");
-  await session.forwardLocalPort(localPort, "127.0.0.1", pbPort);
-  return {
-    url: `http://127.0.0.1:${localPort}`,
-    email: email2,
-    password: password8,
-    close: () => session.cancelForward(localPort, "127.0.0.1", pbPort)
-  };
-}
-async function withRemotePocketbase(session, instance, fn) {
-  const db = await openRemoteDatabase(session, instance);
-  try {
-    const pb = new PocketBase6(db.url);
-    await authWithRetries(pb, db.email, db.password);
-    return await fn(pb);
-  } finally {
-    await db.close();
-  }
-}
-
-// src/commands/logs.ts
 var logs = addTargetOptions(
   new Command100("logs").description("tail the logs of a deployed app").configureHelp(helpConfig),
   "production"
@@ -15364,7 +15489,7 @@ import { Command as Command102 } from "commander";
 import process44 from "node:process";
 import { Command as Command101 } from "commander";
 import * as p60 from "@clack/prompts";
-import pc30 from "picocolors";
+import pc31 from "picocolors";
 var MIN_PASSWORD = 10;
 var adminCreate = addTargetOptions(
   new Command101("create").description("create a login for the admin panel").argument("[email]", "email to sign in with \u2014 prompted for when omitted").configureHelp(helpConfig),
@@ -15379,7 +15504,7 @@ var adminCreate = addTargetOptions(
             throw new Error(
               `This project has no backend, so there is no admin panel to sign in to.
 
-Run ${pc30.cyan("vela enable backend")} to add one.`
+Run ${pc31.cyan("vela enable backend")} to add one.`
             );
           }
           const creds = readLocalEnv(ctx.envFile);
@@ -15403,7 +15528,7 @@ Run ${pc30.cyan("vela enable backend")} to add one.`
             if (metadata) signIn = `http://${metadata.viteHost}:${metadata.vitePort}`;
           }
           p60.log.info(
-            signIn ? `Sign in at ${pc30.cyan(`${signIn}/admin`)}` : `Sign in at ${pc30.cyan("/admin")} once ${pc30.cyan("vela dev")} is running.`
+            signIn ? `Sign in at ${pc31.cyan(`${signIn}/admin`)}` : `Sign in at ${pc31.cyan("/admin")} once ${pc31.cyan("vela dev")} is running.`
           );
         },
         remote: async (ctx) => {
@@ -15418,7 +15543,7 @@ Run ${pc30.cyan("vela enable backend")} to add one.`
           );
           const base2 = state?.domain ? `https://${state.domain.split(",")[0].trim()}` : "";
           p60.log.info(
-            base2 ? `Sign in at ${pc30.cyan(`${base2}/admin`)}` : `Sign in at ${pc30.cyan("/admin")} once a domain is configured for this target.`
+            base2 ? `Sign in at ${pc31.cyan(`${base2}/admin`)}` : `Sign in at ${pc31.cyan("/admin")} once a domain is configured for this target.`
           );
         }
       },
@@ -15439,11 +15564,11 @@ async function upsertSuperuser2(pb, email2, password8) {
       process44.exit(0);
     }
     await pb.collection("_superusers").update(existing, { password: password8, passwordConfirm: password8 });
-    p60.log.success(`Password updated for ${pc30.cyan(email2)}, you can sign in now`);
+    p60.log.success(`Password updated for ${pc31.cyan(email2)}, you can sign in now`);
     return;
   }
   await pb.collection("_superusers").create({ email: email2, password: password8, passwordConfirm: password8 });
-  p60.log.success(`${pc30.cyan(email2)} can now sign in`);
+  p60.log.success(`${pc31.cyan(email2)} can now sign in`);
 }
 async function findSuperuser(pb, email2) {
   try {
@@ -15495,10 +15620,10 @@ import fs57 from "node:fs";
 import path62 from "node:path";
 import { Command as Command103 } from "commander";
 import * as p61 from "@clack/prompts";
-import pc32 from "picocolors";
+import pc33 from "picocolors";
 
 // src/lib/backup-target.ts
-import pc31 from "picocolors";
+import pc32 from "picocolors";
 async function withBackupTarget(raw, label2, fn) {
   await withTarget(
     raw,
@@ -15508,7 +15633,7 @@ async function withBackupTarget(raw, label2, fn) {
           throw new Error(
             `This project has no database, so there is nothing to back up.
 
-Run ${pc31.cyan("vela bless")} to add a backend.`
+Run ${pc32.cyan("vela bless")} to add a backend.`
           );
         }
         const creds = readLocalEnv(ctx.envFile);
@@ -15518,7 +15643,7 @@ Run ${pc31.cyan("vela bless")} to add a backend.`
           throw new Error(
             `The local database has no superuser credentials to sign in with.
 
-Set ${pc31.cyan("POCKETBASE_SUPERUSER_EMAIL")} and ${pc31.cyan("POCKETBASE_SUPERUSER_PASSWORD")} in ${pc31.cyan(".env")}.`
+Set ${pc32.cyan("POCKETBASE_SUPERUSER_EMAIL")} and ${pc32.cyan("POCKETBASE_SUPERUSER_PASSWORD")} in ${pc32.cyan(".env")}.`
           );
         }
         await withPocketbase(
@@ -15651,9 +15776,9 @@ var backupCreate = addTargetOptions(
       const key = name ?? backupName(ctx.instance);
       if (!isBackupKey(key)) {
         throw new Error(
-          `${pc32.cyan(key)} is not a name PocketBase will accept.
+          `${pc33.cyan(key)} is not a name PocketBase will accept.
 
-Backup names are lowercase letters, digits, ${pc32.cyan("-")} and ${pc32.cyan("_")}, ending in ${pc32.cyan(".zip")}.`
+Backup names are lowercase letters, digits, ${pc33.cyan("-")} and ${pc33.cyan("_")}, ending in ${pc33.cyan(".zip")}.`
         );
       }
       const storage = await readStorageSettings(ctx.pb);
@@ -15661,7 +15786,7 @@ Backup names are lowercase letters, digits, ${pc32.cyan("-")} and ${pc32.cyan("_
         p61.log.warn(
           `Uploads are stored in S3, so this archive holds the database only.
 
-PocketBase leaves ${pc32.cyan("storage/")} out of a backup whenever S3 is on.
+PocketBase leaves ${pc33.cyan("storage/")} out of a backup whenever S3 is on.
 Your bucket's own versioning is what protects the uploaded files.`
         );
       }
@@ -15728,7 +15853,7 @@ async function download(ctx, key, outputDir) {
 // src/commands/backup/list.ts
 import { Command as Command104 } from "commander";
 import * as p62 from "@clack/prompts";
-import pc33 from "picocolors";
+import pc34 from "picocolors";
 var backupList = addTargetOptions(
   new Command104("list").description("list the backups on a target").configureHelp(helpConfig),
   "production"
@@ -15738,16 +15863,16 @@ var backupList = addTargetOptions(
       const backups = await listBackups(ctx.pb);
       if (backups.length === 0) {
         p62.log.info(
-          `${pc33.cyan(ctx.targetName)} has no backups yet.
+          `${pc34.cyan(ctx.targetName)} has no backups yet.
 
-Take one with ${pc33.cyan("vela backup create")}.`
+Take one with ${pc34.cyan("vela backup create")}.`
         );
         return;
       }
       const width = Math.max(...backups.map((b) => b.key.length));
       p62.log.message(
         backups.map(
-          (b) => `${b.key.padEnd(width)}  ${pc33.dim(formatBytes(b.size).padStart(8))}  ${pc33.dim(b.modified)}`
+          (b) => `${b.key.padEnd(width)}  ${pc34.dim(formatBytes(b.size).padStart(8))}  ${pc34.dim(b.modified)}`
         ).join("\n")
       );
     }),
@@ -15760,7 +15885,7 @@ import fs58 from "node:fs";
 import path63 from "node:path";
 import { Command as Command105 } from "commander";
 import * as p63 from "@clack/prompts";
-import pc34 from "picocolors";
+import pc35 from "picocolors";
 var backupDownload = addTargetOptions(
   new Command105("download").description("save a backup off the server").argument("<key>", "archive to download, as shown by `vela backup list`").option("-o, --output <dir>", "where to save the archive", DEFAULT_BACKUP_DIR).configureHelp(helpConfig),
   "production"
@@ -15771,9 +15896,9 @@ var backupDownload = addTargetOptions(
       const found = (await listBackups(ctx.pb)).find((b) => b.key === key);
       if (!found) {
         throw new Error(
-          `${ctx.targetName} has no backup called ${pc34.cyan(key)}.
+          `${ctx.targetName} has no backup called ${pc35.cyan(key)}.
 
-Run ${pc34.cyan("vela backup list")} to see what it does have.`
+Run ${pc35.cyan("vela backup list")} to see what it does have.`
         );
       }
       const storage = await readStorageSettings(ctx.pb);
@@ -15812,7 +15937,7 @@ Fetch it from the bucket directly \u2014 vela does not hold its credentials.`
 import process45 from "node:process";
 import { Command as Command106 } from "commander";
 import * as p64 from "@clack/prompts";
-import pc35 from "picocolors";
+import pc36 from "picocolors";
 var backupDelete = addTargetOptions(
   new Command106("delete").description("remove a backup from a target").argument("<key>", "archive to delete, as shown by `vela backup list`").option("-y, --yes", "skip the confirmation").configureHelp(helpConfig),
   "production"
@@ -15823,9 +15948,9 @@ var backupDelete = addTargetOptions(
       const found = (await listBackups(ctx.pb)).find((b) => b.key === key);
       if (!found) {
         throw new Error(
-          `${ctx.targetName} has no backup called ${pc35.cyan(key)}.
+          `${ctx.targetName} has no backup called ${pc36.cyan(key)}.
 
-Run ${pc35.cyan("vela backup list")} to see what it does have.`
+Run ${pc36.cyan("vela backup list")} to see what it does have.`
         );
       }
       if (!options.yes) {
@@ -15847,7 +15972,7 @@ Run ${pc35.cyan("vela backup list")} to see what it does have.`
 // src/commands/backup/schedule.ts
 import { Command as Command107 } from "commander";
 import * as p65 from "@clack/prompts";
-import pc36 from "picocolors";
+import pc37 from "picocolors";
 var DEFAULT_KEEP = 7;
 var backupSchedule = addTargetOptions(
   new Command107("schedule").description("back up automatically on a schedule").argument("[cron]", "when to run, as a cron expression \u2014 shows the current one when omitted").option("--keep <n>", "how many scheduled archives to keep", String(DEFAULT_KEEP)).option("--off", "stop backing up automatically").configureHelp(helpConfig),
@@ -15864,16 +15989,16 @@ var backupSchedule = addTargetOptions(
       if (!cron) {
         const current = await readSchedule(ctx.pb);
         p65.log.info(
-          current.cron ? `${ctx.targetName} backs up on ${pc36.cyan(current.cron)}, keeping ${current.maxKeep}.` : `${ctx.targetName} has no backup schedule.
+          current.cron ? `${ctx.targetName} backs up on ${pc37.cyan(current.cron)}, keeping ${current.maxKeep}.` : `${ctx.targetName} has no backup schedule.
 
-Set one with ${pc36.cyan('vela backup schedule "0 3 * * *"')}.`
+Set one with ${pc37.cyan('vela backup schedule "0 3 * * *"')}.`
         );
         return;
       }
       const keep = Number.parseInt(options.keep, 10);
       if (!Number.isInteger(keep) || keep < 1) {
         throw new Error(
-          `${pc36.cyan(options.keep)} is not a number of backups to keep \u2014 pass at least 1.`
+          `${pc37.cyan(options.keep)} is not a number of backups to keep \u2014 pass at least 1.`
         );
       }
       await writeSchedule(ctx.pb, cron, keep);
@@ -15902,7 +16027,7 @@ import path64 from "node:path";
 import process46 from "node:process";
 import { Command as Command109 } from "commander";
 import * as p66 from "@clack/prompts";
-import pc37 from "picocolors";
+import pc38 from "picocolors";
 var restore = addLockWaitOption(
   addTargetOptions(
     new Command109("restore").description("replace a deployment\u2019s database and uploads from a backup").argument("[source]", "a backup key on the target, or a path to a local archive").configureHelp(helpConfig),
@@ -15950,7 +16075,7 @@ Run \`vela deploy\` first, then restore.`
             stream: true
           });
           p66.log.success(
-            `Restored ${pc37.cyan(`${ctx.appName} (${ctx.targetName})`)} from ${pc37.cyan(
+            `Restored ${pc38.cyan(`${ctx.appName} (${ctx.targetName})`)} from ${pc38.cyan(
               local ? path64.basename(local) : key
             )}.`
           );
@@ -15961,7 +16086,7 @@ Run \`vela deploy\` first, then restore.`
           }
           if (result?.previousDataDir) {
             p66.log.info(
-              `The database this replaced is at ${pc37.cyan(result.previousDataDir)}.
+              `The database this replaced is at ${pc38.cyan(result.previousDataDir)}.
 
 It is the only way back. Remove it once you are satisfied with the restore.`
             );
@@ -15978,18 +16103,18 @@ It is the only way back. Remove it once you are satisfied with the restore.`
 async function resolveKey(ctx, source) {
   if (source && !isBackupKey(source)) {
     throw new Error(
-      `${pc37.cyan(source)} is neither a file on this machine nor a backup key.
+      `${pc38.cyan(source)} is neither a file on this machine nor a backup key.
 
-Run ${pc37.cyan("vela backup list")} to see what ${ctx.targetName} has.`
+Run ${pc38.cyan("vela backup list")} to see what ${ctx.targetName} has.`
     );
   }
   const backups = await withRemotePocketbase(ctx.session, ctx.instance, listBackups);
   if (source) {
     if (!backups.some((b) => b.key === source)) {
       throw new Error(
-        `${ctx.targetName} has no backup called ${pc37.cyan(source)}.
+        `${ctx.targetName} has no backup called ${pc38.cyan(source)}.
 
-Run ${pc37.cyan("vela backup list")} to see what it does have.`
+Run ${pc38.cyan("vela backup list")} to see what it does have.`
       );
     }
     return source;
@@ -15998,7 +16123,7 @@ Run ${pc37.cyan("vela backup list")} to see what it does have.`
     throw new Error(
       `${ctx.targetName} has no backups to restore from.
 
-Take one with ${pc37.cyan("vela backup create")}, or pass the path to an archive on this machine.`
+Take one with ${pc38.cyan("vela backup create")}, or pass the path to an archive on this machine.`
     );
   }
   const chosen = await p66.select({
@@ -16031,7 +16156,7 @@ async function stage(ctx, file) {
   return remote;
 }
 async function confirm14(appName, targetName, envTag, from) {
-  const what = `${pc37.cyan(`${appName} (${targetName})`)} from ${pc37.cyan(path64.basename(from))}`;
+  const what = `${pc38.cyan(`${appName} (${targetName})`)} from ${pc38.cyan(path64.basename(from))}`;
   if (isProd(envTag)) {
     const answer = await p66.text({
       message: `This replaces the database and uploads of ${what}. Type the app name to confirm`,
@@ -16056,7 +16181,7 @@ async function confirm14(appName, targetName, envTag, from) {
 // src/commands/targets.ts
 import { Command as Command110 } from "commander";
 import * as p67 from "@clack/prompts";
-import pc38 from "picocolors";
+import pc39 from "picocolors";
 import * as v13 from "valibot";
 var OptionsSchema6 = v13.object({
   ...SSH_OPTION_SCHEMA,
@@ -16117,19 +16242,19 @@ var targets = addSshOptions(
       console.log(JSON.stringify(rows, null, 2));
       return;
     }
-    report4(rows, options.offline === true);
+    report5(rows, options.offline === true);
   }, "Failed to list targets.")
 );
-function report4(rows, offline) {
+function report5(rows, offline) {
   const width = (heading, pick) => Math.max(heading.length, ...rows.map((row) => pick(row).length));
   const target = width("TARGET", (row) => row.target);
   const server = width("SERVER", (row) => row.server);
   const domain = width("DOMAIN", (row) => row.domain);
   const header = `${"TARGET".padEnd(target)}  ${"SERVER".padEnd(server)}  ${"DOMAIN".padEnd(domain)}  RELEASE`;
   const lines = rows.map(
-    (row) => `${row.kind === "local" ? pc38.dim(row.target.padEnd(target)) : pc38.cyan(row.target.padEnd(target))}  ${row.server.padEnd(server)}  ${row.domain.padEnd(domain)}  ${row.release}`
+    (row) => `${row.kind === "local" ? pc39.dim(row.target.padEnd(target)) : pc39.cyan(row.target.padEnd(target))}  ${row.server.padEnd(server)}  ${row.domain.padEnd(domain)}  ${row.release}`
   );
-  p67.log.info(`${pc38.dim(header)}
+  p67.log.info(`${pc39.dim(header)}
 ${lines.join("\n")}`);
   const unreachable = rows.filter((row) => row.kind === "remote" && !row.reachable);
   if (!offline && unreachable.length > 0) {
@@ -16143,7 +16268,7 @@ Release and domain are shown from what this project recorded.`
 // src/commands/test.ts
 import process48 from "node:process";
 import { Command as Command111 } from "commander";
-import pc39 from "picocolors";
+import pc40 from "picocolors";
 import { x as x7 } from "tinyexec";
 import { detect as detect10 } from "package-manager-detector";
 import { resolveCommand as resolveCommand8 } from "package-manager-detector/commands";
@@ -16271,7 +16396,7 @@ function isAlive(pid) {
 }
 function describeLoadFailure(e) {
   if (e instanceof DataLoadError) {
-    const hint = e.kind === "fixtures" ? "Run `vela fixtures regen` to regenerate fixtures from the current schema." : `Check ${e.file} against the current schema.`;
+    const hint = e.malformed ? `Fix ${e.file}, or rewrite it from a database with \`vela seeds save --force\`.` : e.kind === "fixtures" ? "Run `vela fixtures regen` to regenerate fixtures from the current schema." : `Check ${e.file} against the current schema.`;
     return `Failed to load ${e.message}
   ${hint}`;
   }
@@ -16297,7 +16422,7 @@ function stubPagesPlugin() {
 // src/commands/test.ts
 var testServer = new Command111("test:server").description("run server tests").allowUnknownOption(true).allowExcessArguments(true).configureHelp(helpConfig).action(async (_opts, cmd) => {
   const cwd = process48.cwd();
-  warnIfKit2(cwd, (m) => console.warn(pc39.yellow(`\u25B2 ${m}`)));
+  warnIfKit2(cwd, (m) => console.warn(pc40.yellow(`\u25B2 ${m}`)));
   const extraArgs = (cmd.parent?.args ?? []).slice(1);
   const filtered = extraArgs.some((arg) => !arg.startsWith("-"));
   try {
@@ -16318,7 +16443,7 @@ var testServer = new Command111("test:server").description("run server tests").a
     });
     process48.exitCode = result.exitCode ?? 1;
   } catch (e) {
-    console.error(`${pc39.redBright("\u2717")} ${e.message}`);
+    console.error(`${pc40.redBright("\u2717")} ${e.message}`);
     process48.exitCode = 1;
   }
 });
@@ -16326,7 +16451,7 @@ var testHarness = new Command111("test:harness").description("start the servers
   const cwd = process48.cwd();
   if (!process48.send) {
     console.error(
-      `${pc39.redBright("\u2717")} vela test:harness is started by vitest through \`vela/testing\`. Run \`vela test:server\` instead.`
+      `${pc40.redBright("\u2717")} vela test:harness is started by vitest through \`vela/testing\`. Run \`vela test:server\` instead.`
     );
     process48.exit(1);
   }
@@ -16352,11 +16477,11 @@ var testHarness = new Command111("test:harness").description("start the servers
   });
   try {
     harness = await startTestHarness(cwd, {
-      log: (message) => console.log(`${pc39.greenBright("\u2713")} ${message}`)
+      log: (message) => console.log(`${pc40.greenBright("\u2713")} ${message}`)
     });
   } catch (e) {
     const message = e instanceof HarnessError ? e.message : `Failed to start the test servers: ${e.message}`;
-    console.error(`${pc39.redBright("\u2717")} ${message}`);
+    console.error(`${pc40.redBright("\u2717")} ${message}`);
     process48.send({ type: "error", message });
     process48.exit(1);
   }
@@ -16492,7 +16617,7 @@ import { Command as Command119 } from "commander";
 import process50 from "node:process";
 import { Command as Command114 } from "commander";
 import * as p68 from "@clack/prompts";
-import pc40 from "picocolors";
+import pc41 from "picocolors";
 var POLL_INTERVAL2 = 5e3;
 var POLL_TIMEOUT = 30 * 6e4;
 var inFlight = (run) => run?.status === "pending" || run?.status === "building";
@@ -16508,18 +16633,18 @@ var deploy2 = new Command114("deploy").description("rebuild the hosted site with
       throw new Error(
         `This project has no hosted site to rebuild.
 
-A site deployed with ${pc40.cyan("vela deploy")} is updated by deploying again.`
+A site deployed with ${pc41.cyan("vela deploy")} is updated by deploying again.`
       );
     }
     const url = state.site?.url ?? "";
     if (inFlight(state.latest)) {
-      p68.log.info(`A deploy of ${pc40.cyan(url)} is already in progress.`);
+      p68.log.info(`A deploy of ${pc41.cyan(url)} is already in progress.`);
     } else {
       state = await startSiteDeploy(apiKey, projectId);
     }
     if (!options.wait) {
       p68.log.success(
-        `Build started for ${pc40.cyan(url)} (deployment ${pc40.dim(state.latest?.id ?? "")}).
+        `Build started for ${pc41.cyan(url)} (deployment ${pc41.dim(state.latest?.id ?? "")}).
 It goes live when the build finishes.`
       );
       return;
@@ -16545,7 +16670,7 @@ It goes live on its own if it does; the deployments page on velastack.dev shows
       spinner9.stop(`Deploy of ${url} failed.`);
       throw new Error(latest.error || "the build did not finish");
     }
-    spinner9.stop(`Deployed ${pc40.cyan(url)}`);
+    spinner9.stop(`Deployed ${pc41.cyan(url)}`);
   }, "Failed to deploy the site.")
 );
 function resolveProjectId(explicit) {
@@ -16561,7 +16686,7 @@ function resolveProjectId(explicit) {
     throw new Error(
       `This project is not linked to velastack.dev.
 
-Run ${pc40.cyan("vela link")}, or pass ${pc40.cyan("--project <id>")}.`
+Run ${pc41.cyan("vela link")}, or pass ${pc41.cyan("--project <id>")}.`
     );
   }
   return link2.projectId;
@@ -16591,14 +16716,14 @@ import { Command as Command118 } from "commander";
 import { randomBytes } from "node:crypto";
 import { Command as Command115 } from "commander";
 import * as p69 from "@clack/prompts";
-import pc42 from "picocolors";
+import pc43 from "picocolors";
 
 // src/lib/cms-backend.ts
 import { createRequire as createRequire5 } from "node:module";
 import path68 from "node:path";
 import process51 from "node:process";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
-import pc41 from "picocolors";
+import pc42 from "picocolors";
 var DEFAULT_PROJECT = "default";
 async function loadBackendModule(root) {
   let entry;
@@ -16608,7 +16733,7 @@ async function loadBackendModule(root) {
     throw new Error(
       `@velastack/cms is not installed in this project.
 
-Run ${pc41.cyan("vela enable cms")} first.`
+Run ${pc42.cyan("vela enable cms")} first.`
     );
   }
   return await import(pathToFileURL2(entry).href);
@@ -16639,13 +16764,13 @@ var editorAdd = new Command115("add").description("create an editor who can sign
     const editor2 = await withCmsBackend(
       (cms3) => cms3.editors.create({ email: email2, password: password8, projects: [options.project] })
     );
-    const lines = [`Added ${pc42.cyan(editor2.email)} as an editor of ${pc42.cyan(options.project)}.`];
+    const lines = [`Added ${pc43.cyan(editor2.email)} as an editor of ${pc43.cyan(options.project)}.`];
     if (generated) {
-      lines.push("", `Password: ${pc42.bold(password8)}`, "", "It is shown once; copy it now.");
+      lines.push("", `Password: ${pc43.bold(password8)}`, "", "It is shown once; copy it now.");
     }
     p69.log.success(lines.join("\n"));
     p69.log.info(
-      `Run ${pc42.cyan("vela dev")}, open any page with ${pc42.cyan("?edit")} on the URL (or press ${pc42.cyan("Ctrl+E")}), and sign in.`
+      `Run ${pc43.cyan("vela dev")}, open any page with ${pc43.cyan("?edit")} on the URL (or press ${pc43.cyan("Ctrl+E")}), and sign in.`
     );
   }, "Failed to add the editor.")
 );
@@ -16653,12 +16778,12 @@ var editorAdd = new Command115("add").description("create an editor who can sign
 // src/commands/cms/editor/password.ts
 import { Command as Command116 } from "commander";
 import * as p70 from "@clack/prompts";
-import pc43 from "picocolors";
+import pc44 from "picocolors";
 var editorPassword = new Command116("password").description("set an editor's password").argument("<email>", "email of the editor").argument("<password>", "new password").configureHelp(helpConfig).action(
   (email2, password8) => runCommand(async () => {
     await withCmsBackend((cms3) => cms3.editors.setPassword(email2, password8));
     p70.log.success(
-      `Updated the password for ${pc43.cyan(email2)}. Existing sessions were signed out.`
+      `Updated the password for ${pc44.cyan(email2)}. Existing sessions were signed out.`
     );
   }, "Failed to set the password.")
 );
@@ -16666,7 +16791,7 @@ var editorPassword = new Command116("password").description("set an editor's pas
 // src/commands/cms/editor/list.ts
 import { Command as Command117 } from "commander";
 import * as p71 from "@clack/prompts";
-import pc44 from "picocolors";
+import pc45 from "picocolors";
 var editorList = new Command117("list").description("list editors and the projects they may edit").configureHelp(helpConfig).action(
   () => runCommand(async () => {
     const rows = await withCmsBackend(
@@ -16676,7 +16801,7 @@ var editorList = new Command117("list").description("list editors and the projec
       }))
     );
     if (rows.length === 0) {
-      p71.log.info(`No editors yet. Add one with ${pc44.cyan("vela cms editor add <email>")}.`);
+      p71.log.info(`No editors yet. Add one with ${pc45.cyan("vela cms editor add <email>")}.`);
       return;
     }
     const width = Math.max(...rows.map((row) => row.email.length));
@@ -16684,7 +16809,7 @@ var editorList = new Command117("list").description("list editors and the projec
       `Editors
 
 ` + rows.map(
-        (row) => `  ${row.email.padEnd(width)}  ${pc44.dim(row.projects.join(", ") || "no projects")}`
+        (row) => `  ${row.email.padEnd(width)}  ${pc45.dim(row.projects.join(", ") || "no projects")}`
       ).join("\n")
     );
   }, "Failed to list editors.")
@@ -16703,7 +16828,7 @@ import { Command as Command123 } from "commander";
 import process52 from "node:process";
 import { Command as Command120, InvalidArgumentError as InvalidArgumentError5 } from "commander";
 import * as p72 from "@clack/prompts";
-import pc45 from "picocolors";
+import pc46 from "picocolors";
 
 // src/lib/workflows-api.ts
 var NAMESPACE = "default";
@@ -16763,17 +16888,17 @@ function parseLimit(value) {
   return n;
 }
 var STATUS_COLOR = {
-  pending: pc45.yellow,
-  running: pc45.cyan,
-  completed: pc45.green,
-  failed: pc45.red,
-  canceled: pc45.dim
+  pending: pc46.yellow,
+  running: pc46.cyan,
+  completed: pc46.green,
+  failed: pc46.red,
+  canceled: pc46.dim
 };
 function formatRun(run, nameWidth) {
   const status3 = STATUS_COLOR[run.status](run.status.padEnd(9));
-  const when = pc45.dim((run.finishedAt ?? run.updatedAt).replace("T", " ").slice(0, 19));
-  const attempts = run.attempts > 1 ? pc45.dim(` \xD7${run.attempts}`) : "";
-  const error = run.status === "failed" && run.error?.message ? pc45.red(`  ${run.error.message}`) : "";
+  const when = pc46.dim((run.finishedAt ?? run.updatedAt).replace("T", " ").slice(0, 19));
+  const attempts = run.attempts > 1 ? pc46.dim(` \xD7${run.attempts}`) : "";
+  const error = run.status === "failed" && run.error?.message ? pc46.red(`  ${run.error.message}`) : "";
   return `${run.id}  ${run.workflowName.padEnd(nameWidth)}  ${status3}${attempts}  ${when}${error}`;
 }
 var workflowsList = new Command120("list").description("list recent workflow runs").option("--status <status>", `only runs in this state (${STATUSES.join(", ")})`, parseStatus).option("--name <workflow>", "only runs of this workflow").option("--limit <n>", "how many to show", parseLimit, 50).configureHelp(helpConfig).action(
@@ -16788,7 +16913,7 @@ var workflowsList = new Command120("list").description("list recent workflow run
         p72.log.info(
           `No workflow runs yet.
 
-Start one from server code with ${pc45.cyan("<workflow>.run(input)")}, or with ${pc45.cyan("vela workflows run <name>")}.`
+Start one from server code with ${pc46.cyan("<workflow>.run(input)")}, or with ${pc46.cyan("vela workflows run <name>")}.`
         );
         return;
       }
@@ -16802,7 +16927,7 @@ Start one from server code with ${pc45.cyan("<workflow>.run(input)")}, or with $
 import process53 from "node:process";
 import { Command as Command121, InvalidArgumentError as InvalidArgumentError6 } from "commander";
 import * as p73 from "@clack/prompts";
-import pc46 from "picocolors";
+import pc47 from "picocolors";
 function parseInput(value) {
   try {
     return JSON.parse(value);
@@ -16815,9 +16940,9 @@ var workflowsRun = new Command121("run").description("start a run of a workflow;
     await withPocketbase(process53.cwd(), async (pb) => {
       const run = await createRun(pb, name, input);
       p73.log.success(
-        `Queued ${pc46.cyan(name)} as run ${pc46.bold(run.id)}.
+        `Queued ${pc47.cyan(name)} as run ${pc47.bold(run.id)}.
 
-It runs once the app is up (${pc46.cyan("vela dev")}); ${pc46.cyan("vela workflows list")} shows its state.`
+It runs once the app is up (${pc47.cyan("vela dev")}); ${pc47.cyan("vela workflows list")} shows its state.`
       );
     });
   }, "Failed to start the workflow run.")
@@ -16827,12 +16952,12 @@ It runs once the app is up (${pc46.cyan("vela dev")}); ${pc46.cyan("vela workflo
 import process54 from "node:process";
 import { Command as Command122 } from "commander";
 import * as p74 from "@clack/prompts";
-import pc47 from "picocolors";
+import pc48 from "picocolors";
 var workflowsCancel = new Command122("cancel").description("cancel a pending or running workflow run").argument("<run-id>", "the run id from `vela workflows list`").configureHelp(helpConfig).action(
   (id) => runCommand(async () => {
     await withPocketbase(process54.cwd(), async (pb) => {
       const run = await cancelRun(pb, id);
-      p74.log.success(`Canceled run ${pc47.bold(run.id)} of ${pc47.cyan(run.workflowName)}.`);
+      p74.log.success(`Canceled run ${pc48.bold(run.id)} of ${pc48.cyan(run.workflowName)}.`);
     });
   }, "Failed to cancel the workflow run.")
 );
@@ -16901,6 +17026,7 @@ var NO_BACKEND_COMMMANDS = /* @__PURE__ */ new Set([
   // own credentials rather than requiring them in this process.
   "backup",
   "restore",
+  "seeds load",
   // Removes a copy from its server. `destroy resource` and `destroy scaffold`
   // drop collections and stay gated.
   "destroy deployment"