@actuate-media/cli 0.1.3 → 0.2.0

package/.turbo/turbo-build.log

@@ -1,5 +1,4 @@
- WARN  Issue while reading "/home/runner/work/actuatecms/actuatecms/.npmrc". Failed to replace env in config: ${NPM_TOKEN}
 
-> @actuate-media/cli@0.1.3 build /home/runner/work/actuatecms/actuatecms/packages/cli
+> @actuate-media/cli@0.2.0 build /home/runner/work/actuatecms/actuatecms/packages/cli
 > tsc
 

package/CHANGELOG.md

@@ -1,5 +1,56 @@
 # @actuate-media/cli
 
+## 0.2.0
+
+### Minor Changes
+
+- 4e3a5eb: RC2-RC4 and hardening release.
+
+  **cms-core:**
+  - Replace isomorphic-dompurify with sanitize-html (eliminates Vercel ESM crash)
+  - Remove cms-core from serverExternalPackages, move to transpilePackages
+  - Add GET /api/cms/health endpoint with model probing and diagnostics
+  - Harden db() Proxy with try/catch on property access and rawDb()
+  - Harden safeCount/safeFindMany against Proxy throws
+  - Add startup validation for missing CMS_SECRET (503 instead of 500)
+  - Bypass auth on /stats when secret is missing (returns zero-data)
+  - Loosen NextConfigLike types (experimental/images/webpack as unknown)
+  - Implement login anomaly detection (new IP, brute force, unusual hours)
+  - Implement webhook DNS resolution with private range checking
+  - Implement TOTP reauth verification
+  - Add Zod validation for secret in defineConfig (min 32 chars)
+  - Read CMS_CORE_VERSION from package.json at runtime instead of hardcoding '0.1.0'
+
+  **cms-admin:**
+  - Ship pre-compiled CSS (dist/actuate-admin.css) with all 48 responsive classes
+  - New export: @actuate-media/cms-admin/styles/precompiled.css
+  - Add CSS containment (`contain: layout style`) on .actuate-admin
+  - Fix ShortcutHelp modal using React state instead of DOM manipulation
+  - Add fixed-position layout isolation wrapper to AdminRoot
+  - Add useApiData retry limits (maxRetries=3) with exponential backoff
+  - Dashboard shows health-aware "Database Setup Required" banner
+
+  **cli:**
+  - Add `actuate db:init` command (injects CMS models into Prisma schema)
+  - Add `actuate db:status` command (checks model presence and DB connectivity)
+
+  **create-actuate-cms:**
+  - Embed full CMS schema (9 models + enum) in generated schema.prisma
+  - Add @actuate-media/cli to scaffolded devDependencies
+  - Use pre-compiled CSS import in scaffolded admin layout
+
+### Patch Changes
+
+- Updated dependencies [4e3a5eb]
+  - @actuate-media/cms-core@0.3.0
+
+## 0.1.4
+
+### Patch Changes
+
+- Updated dependencies
+  - @actuate-media/cms-core@0.2.3
+
 ## 0.1.3
 
 ### Patch Changes

package/dist/commands/db-init.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare function registerDbInitCommand(program: Command): void;
+//# sourceMappingURL=db-init.d.ts.map

package/dist/commands/db-init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-init.d.ts","sourceRoot":"","sources":["../../src/commands/db-init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgOpC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4E5D"}

package/dist/commands/db-init.js

@@ -0,0 +1,294 @@
+import { readFile, writeFile, access } from "node:fs/promises";
+import { resolve } from "node:path";
+import { execSync } from "node:child_process";
+import ora from "ora";
+import { logger } from "../utils/logger.js";
+const CMS_SCHEMA_MARKER = "// ── Actuate CMS models";
+async function fileExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function getCmsSchemaFragment() {
+    return `
+// ── Actuate CMS models ─────────────────────────────────────────────────────
+// Auto-injected by \`actuate db:init\`. Do not remove this marker comment.
+// Schema version: 1
+
+enum DocumentStatus {
+  DRAFT
+  PUBLISHED
+  ARCHIVED
+  SCHEDULED
+}
+
+model User {
+  id            String    @id @default(cuid())
+  email         String    @unique
+  name          String    @default("")
+  role          String    @default("EDITOR")
+  passwordHash  String?
+  isActive      Boolean   @default(true)
+  isApproved    Boolean   @default(false)
+  emailVerified Boolean   @default(false)
+  totpEnabled   Boolean   @default(false)
+  totpSecret    String?
+  backupCodes   Json?
+  oauthProvider String?
+  oauthId       String?
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+
+  sessions          Session[]
+  documentsCreated  Document[] @relation("DocumentCreatedBy")
+  documentsUpdated  Document[] @relation("DocumentUpdatedBy")
+  documentsReviewed Document[] @relation("DocumentReviewer")
+  versions          Version[]
+  mediaUploaded     Media[]    @relation("MediaUploadedBy")
+  auditLogs         AuditLog[]
+
+  @@index([role])
+  @@index([isActive])
+}
+
+model Session {
+  id        String    @id @default(cuid())
+  userId    String
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  token     String?   @unique
+  expiresAt DateTime
+  revokedAt DateTime?
+  ipAddress String?
+  userAgent String?
+  createdAt DateTime  @default(now())
+
+  @@index([userId])
+  @@index([expiresAt])
+}
+
+model Document {
+  id                   String          @id @default(cuid())
+  collection           String
+  slug                 String?
+  title                String?
+  data                 Json
+  status               DocumentStatus  @default(DRAFT)
+  plainText            String?         @db.Text
+  locale               String?
+  folderId             String?
+  structuredData       Json?
+  workflowStage        String?
+  reviewerId           String?
+  reviewNote           String?         @db.Text
+  publishedAt          DateTime?
+  scheduledAt          DateTime?
+  scheduledUnpublishAt DateTime?
+  deletedAt            DateTime?
+  contentHash          String?
+  siteId               String?
+  templateId           String?
+  createdById          String
+  updatedById          String
+  createdAt            DateTime        @default(now())
+  updatedAt            DateTime        @updatedAt
+
+  createdBy       User             @relation("DocumentCreatedBy", fields: [createdById], references: [id], onDelete: Restrict)
+  updatedBy       User             @relation("DocumentUpdatedBy", fields: [updatedById], references: [id], onDelete: Restrict)
+  reviewer        User?            @relation("DocumentReviewer", fields: [reviewerId], references: [id], onDelete: SetNull)
+  folder          Folder?          @relation(fields: [folderId], references: [id], onDelete: SetNull)
+  versions        Version[]
+  formSubmissions FormSubmission[]
+
+  @@unique([collection, slug], name: "collection_slug")
+  @@index([collection])
+  @@index([status])
+  @@index([deletedAt])
+  @@index([publishedAt])
+  @@index([folderId])
+  @@index([locale])
+  @@index([scheduledAt])
+  @@index([scheduledUnpublishAt])
+  @@index([createdById])
+  @@index([updatedById])
+}
+
+model Media {
+  id           String   @id @default(cuid())
+  filename     String
+  storageKey   String   @unique
+  mimeType     String
+  fileSize     Int
+  width        Int?
+  height       Int?
+  altText      String?
+  title        String?
+  blurHash     String?
+  focalPointX  Float?
+  focalPointY  Float?
+  folderId     String?
+  uploadedById String
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  uploadedBy User    @relation("MediaUploadedBy", fields: [uploadedById], references: [id], onDelete: Restrict)
+  folder     Folder? @relation(fields: [folderId], references: [id], onDelete: SetNull)
+
+  @@index([folderId])
+  @@index([mimeType])
+  @@index([createdAt])
+}
+
+model Version {
+  id          String   @id @default(cuid())
+  documentId  String
+  document    Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
+  data        Json
+  changedById String
+  changedBy   User     @relation(fields: [changedById], references: [id], onDelete: Restrict)
+  changeType  String   @default("UPDATE")
+  createdAt   DateTime @default(now())
+
+  @@index([documentId])
+  @@index([createdAt])
+}
+
+model Folder {
+  id        String   @id @default(cuid())
+  name      String
+  scope     String
+  parentId  String?
+  position  Int      @default(0)
+  createdAt DateTime @default(now())
+
+  parent    Folder?    @relation("FolderTree", fields: [parentId], references: [id], onDelete: Cascade)
+  children  Folder[]   @relation("FolderTree")
+  documents Document[]
+  media     Media[]
+
+  @@index([scope])
+  @@index([parentId])
+  @@index([scope, parentId, position])
+}
+
+model Redirect {
+  id          String   @id @default(cuid())
+  source      String
+  destination String
+  statusCode  Int      @default(301)
+  isRegex     Boolean  @default(false)
+  notes       String?
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@unique([source])
+  @@index([createdAt])
+}
+
+model FormSubmission {
+  id           String   @id @default(cuid())
+  formId       String
+  form         Document @relation(fields: [formId], references: [id], onDelete: Cascade)
+  data         Json
+  attribution  Json?
+  submittedAt  DateTime @default(now())
+  createdAt    DateTime @default(now())
+
+  @@index([formId])
+  @@index([submittedAt])
+  @@index([createdAt])
+}
+
+model AuditLog {
+  id        String   @id @default(cuid())
+  event     String
+  userId    String?
+  user      User?    @relation(fields: [userId], references: [id], onDelete: SetNull)
+  details   Json?
+  ipAddress String?
+  userAgent String?
+  createdAt DateTime @default(now())
+
+  @@index([event])
+  @@index([userId])
+  @@index([createdAt])
+}
+`;
+}
+export function registerDbInitCommand(program) {
+    program
+        .command("db:init")
+        .description("Add Actuate CMS models to your Prisma schema and generate the client")
+        .option("--schema <path>", "Path to schema.prisma", "prisma/schema.prisma")
+        .option("--migrate", "Run prisma migrate dev after adding models")
+        .option("--force", "Overwrite existing CMS models if present")
+        .action(async (opts) => {
+        const schemaPath = resolve(process.cwd(), opts.schema);
+        if (!(await fileExists(schemaPath))) {
+            logger.error(`Schema file not found at ${schemaPath}`);
+            logger.info("Run `npx prisma init` first, or specify --schema <path>.");
+            process.exitCode = 1;
+            return;
+        }
+        const spinner = ora("Reading Prisma schema...").start();
+        let content;
+        try {
+            content = await readFile(schemaPath, "utf-8");
+        }
+        catch (err) {
+            spinner.fail("Failed to read schema file.");
+            logger.error(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+            return;
+        }
+        if (content.includes(CMS_SCHEMA_MARKER)) {
+            if (!opts.force) {
+                spinner.info("Actuate CMS models already present in schema. Use --force to overwrite.");
+                return;
+            }
+            spinner.text = "Removing existing CMS models...";
+            const markerIndex = content.indexOf(CMS_SCHEMA_MARKER);
+            content = content.substring(0, markerIndex).trimEnd() + "\n";
+        }
+        spinner.text = "Adding Actuate CMS models...";
+        const updatedContent = content.trimEnd() + "\n" + getCmsSchemaFragment();
+        try {
+            await writeFile(schemaPath, updatedContent);
+            spinner.succeed("Actuate CMS models added to schema.");
+        }
+        catch (err) {
+            spinner.fail("Failed to write schema file.");
+            logger.error(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+            return;
+        }
+        const execOpts = { stdio: "inherit", cwd: process.cwd() };
+        const genSpinner = ora("Running prisma generate...").start();
+        try {
+            genSpinner.stop();
+            execSync("npx prisma generate", execOpts);
+            logger.success("Prisma client generated.");
+        }
+        catch {
+            logger.warn("prisma generate failed. You may need to set DATABASE_URL first.");
+        }
+        if (opts.migrate) {
+            const migSpinner = ora("Running prisma migrate dev...").start();
+            try {
+                migSpinner.stop();
+                execSync("npx prisma migrate dev --name actuate-cms-init", execOpts);
+                logger.success("Migration created and applied.");
+            }
+            catch {
+                logger.warn("prisma migrate dev failed. Run it manually after setting DATABASE_URL.");
+            }
+        }
+        else {
+            logger.info("Run `npx prisma migrate dev --name actuate-cms` to create the migration.");
+        }
+    });
+}
+//# sourceMappingURL=db-init.js.map

package/dist/commands/db-init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-init.js","sourceRoot":"","sources":["../../src/commands/db-init.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAQ,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAwB,MAAM,oBAAoB,CAAC;AACpE,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0MR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,sEAAsE,CAAC;SACnF,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,sBAAsB,CAAC;SAC1E,MAAM,CAAC,WAAW,EAAE,4CAA4C,CAAC;SACjE,MAAM,CAAC,SAAS,EAAE,0CAA0C,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,IAA4D,EAAE,EAAE;QAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC;QAExD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,GAAG,iCAAiC,CAAC;YACjD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACvD,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;QAC/D,CAAC;QAED,OAAO,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC9C,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,oBAAoB,EAAE,CAAC;QAEzE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAC5C,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAoB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAE3E,MAAM,UAAU,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,QAAQ,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,GAAG,CAAC,+BAA+B,CAAC,CAAC,KAAK,EAAE,CAAC;YAChE,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,CAAC;gBAClB,QAAQ,CAAC,gDAAgD,EAAE,QAAQ,CAAC,CAAC;gBACrE,MAAM,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/db-status.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare function registerDbStatusCommand(program: Command): void;
+//# sourceMappingURL=db-status.d.ts.map

package/dist/commands/db-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-status.d.ts","sourceRoot":"","sources":["../../src/commands/db-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmG9D"}

package/dist/commands/db-status.js

@@ -0,0 +1,118 @@
+import { execSync } from "node:child_process";
+import { readFile, access } from "node:fs/promises";
+import { resolve } from "node:path";
+import ora from "ora";
+import chalk from "chalk";
+import { logger } from "../utils/logger.js";
+const CMS_EXPECTED_MODELS = [
+    "User",
+    "Session",
+    "Document",
+    "Media",
+    "Version",
+    "Folder",
+    "Redirect",
+    "FormSubmission",
+    "AuditLog",
+];
+const CMS_SCHEMA_MARKER = "// ── Actuate CMS models";
+async function fileExists(filePath) {
+    try {
+        await access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function registerDbStatusCommand(program) {
+    program
+        .command("db:status")
+        .description("Check which Actuate CMS models are present in your Prisma schema")
+        .option("--schema <path>", "Path to schema.prisma", "prisma/schema.prisma")
+        .action(async (opts) => {
+        const schemaPath = resolve(process.cwd(), opts.schema);
+        if (!(await fileExists(schemaPath))) {
+            logger.error(`Schema file not found at ${schemaPath}`);
+            logger.info("Run `npx prisma init` first, or specify --schema <path>.");
+            process.exitCode = 1;
+            return;
+        }
+        const spinner = ora("Checking schema...").start();
+        let content;
+        try {
+            content = await readFile(schemaPath, "utf-8");
+        }
+        catch (err) {
+            spinner.fail("Failed to read schema file.");
+            logger.error(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+            return;
+        }
+        spinner.stop();
+        const hasMarker = content.includes(CMS_SCHEMA_MARKER);
+        const modelRegex = /^model\s+(\w+)\s*\{/gm;
+        const schemaModels = new Set();
+        let match;
+        while ((match = modelRegex.exec(content)) !== null) {
+            schemaModels.add(match[1]);
+        }
+        console.log();
+        console.log(chalk.bold("  Actuate CMS Model Status"));
+        console.log(chalk.dim("  ─────────────────────────────────"));
+        console.log();
+        let present = 0;
+        let missing = 0;
+        for (const model of CMS_EXPECTED_MODELS) {
+            if (schemaModels.has(model)) {
+                console.log(`  ${chalk.green("✓")} ${model}`);
+                present++;
+            }
+            else {
+                console.log(`  ${chalk.red("✗")} ${model} ${chalk.dim("— missing")}`);
+                missing++;
+            }
+        }
+        console.log();
+        console.log(chalk.dim("  ─────────────────────────────────"));
+        console.log(`  ${chalk.green(present)} present, ${missing > 0 ? chalk.red(missing) : chalk.green(missing)} missing`);
+        if (!hasMarker) {
+            console.log();
+            logger.warn("CMS schema marker not found. Models may have been added manually.");
+            logger.info("Run `actuate db:init` to add CMS models with proper markers.");
+        }
+        if (missing > 0) {
+            console.log();
+            logger.info("Run `actuate db:init` to add missing models.");
+        }
+        let dbConnected = false;
+        try {
+            spinner.start("Checking database connection...");
+            execSync("npx prisma db execute --stdin --schema " + JSON.stringify(schemaPath), {
+                input: "SELECT 1;",
+                stdio: ["pipe", "pipe", "pipe"],
+                cwd: process.cwd(),
+            });
+            spinner.succeed("Database connection OK.");
+            dbConnected = true;
+        }
+        catch {
+            spinner.warn("Could not connect to database. Check DATABASE_URL.");
+        }
+        if (dbConnected && missing === 0) {
+            try {
+                spinner.start("Checking migration status...");
+                spinner.stop();
+                execSync("npx prisma migrate status", {
+                    stdio: "inherit",
+                    cwd: process.cwd(),
+                });
+            }
+            catch {
+                logger.warn("Could not check migration status.");
+            }
+        }
+        console.log();
+    });
+}
+//# sourceMappingURL=db-status.js.map

package/dist/commands/db-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-status.js","sourceRoot":"","sources":["../../src/commands/db-status.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,mBAAmB,GAAG;IAC1B,MAAM;IACN,SAAS;IACT,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,UAAU;IACV,gBAAgB;IAChB,UAAU;CACX,CAAC;AAEF,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAgB;IACtD,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,sBAAsB,CAAC;SAC1E,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC,KAAK,EAAE,CAAC;QAElD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,IAAI,EAAE,CAAC;QAEf,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,uBAAuB,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnD,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBACtE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAErH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACjD,QAAQ,CAAC,yCAAyC,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;gBAC/E,KAAK,EAAE,WAAW;gBAClB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;aACnB,CAAC,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YAC3C,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,WAAW,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,EAAE,CAAC;gBACf,QAAQ,CAAC,2BAA2B,EAAE;oBACpC,KAAK,EAAE,SAAS;oBAChB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;iBACnB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.js

@@ -7,6 +7,8 @@ import { registerImportCommand } from "./commands/import.js";
 import { registerExportCommand } from "./commands/export.js";
 import { registerUpgradeCommand } from "./commands/upgrade.js";
 import { registerUpdateCheckCommand } from "./commands/update-check.js";
+import { registerDbInitCommand } from "./commands/db-init.js";
+import { registerDbStatusCommand } from "./commands/db-status.js";
 const program = new Command();
 program
     .name("actuate")
@@ -19,5 +21,7 @@ registerImportCommand(program);
 registerExportCommand(program);
 registerUpgradeCommand(program);
 registerUpdateCheckCommand(program);
+registerDbInitCommand(program);
+registerDbStatusCommand(program);
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAEpC,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AAEjC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actuate-media/cli",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "CLI for Actuate CMS — migrations, codegen, imports, exports, and upgrades",
   "repository": {
     "type": "git",
@@ -19,7 +19,7 @@
     "commander": "^13.1.0",
     "chalk": "^5.4.1",
     "ora": "^8.2.0",
-    "@actuate-media/cms-core": "0.2.2"
+    "@actuate-media/cms-core": "0.3.0"
   },
   "devDependencies": {
     "typescript": "^5.7.0"

package/src/commands/db-init.ts

@@ -0,0 +1,301 @@
+import { Command } from "commander";
+import { readFile, writeFile, access } from "node:fs/promises";
+import { resolve, join } from "node:path";
+import { execSync, type ExecSyncOptions } from "node:child_process";
+import ora from "ora";
+import { logger } from "../utils/logger.js";
+
+const CMS_SCHEMA_MARKER = "// ── Actuate CMS models";
+
+async function fileExists(filePath: string): Promise<boolean> {
+  try {
+    await access(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function getCmsSchemaFragment(): string {
+  return `
+// ── Actuate CMS models ─────────────────────────────────────────────────────
+// Auto-injected by \`actuate db:init\`. Do not remove this marker comment.
+// Schema version: 1
+
+enum DocumentStatus {
+  DRAFT
+  PUBLISHED
+  ARCHIVED
+  SCHEDULED
+}
+
+model User {
+  id            String    @id @default(cuid())
+  email         String    @unique
+  name          String    @default("")
+  role          String    @default("EDITOR")
+  passwordHash  String?
+  isActive      Boolean   @default(true)
+  isApproved    Boolean   @default(false)
+  emailVerified Boolean   @default(false)
+  totpEnabled   Boolean   @default(false)
+  totpSecret    String?
+  backupCodes   Json?
+  oauthProvider String?
+  oauthId       String?
+  createdAt     DateTime  @default(now())
+  updatedAt     DateTime  @updatedAt
+
+  sessions          Session[]
+  documentsCreated  Document[] @relation("DocumentCreatedBy")
+  documentsUpdated  Document[] @relation("DocumentUpdatedBy")
+  documentsReviewed Document[] @relation("DocumentReviewer")
+  versions          Version[]
+  mediaUploaded     Media[]    @relation("MediaUploadedBy")
+  auditLogs         AuditLog[]
+
+  @@index([role])
+  @@index([isActive])
+}
+
+model Session {
+  id        String    @id @default(cuid())
+  userId    String
+  user      User      @relation(fields: [userId], references: [id], onDelete: Cascade)
+  token     String?   @unique
+  expiresAt DateTime
+  revokedAt DateTime?
+  ipAddress String?
+  userAgent String?
+  createdAt DateTime  @default(now())
+
+  @@index([userId])
+  @@index([expiresAt])
+}
+
+model Document {
+  id                   String          @id @default(cuid())
+  collection           String
+  slug                 String?
+  title                String?
+  data                 Json
+  status               DocumentStatus  @default(DRAFT)
+  plainText            String?         @db.Text
+  locale               String?
+  folderId             String?
+  structuredData       Json?
+  workflowStage        String?
+  reviewerId           String?
+  reviewNote           String?         @db.Text
+  publishedAt          DateTime?
+  scheduledAt          DateTime?
+  scheduledUnpublishAt DateTime?
+  deletedAt            DateTime?
+  contentHash          String?
+  siteId               String?
+  templateId           String?
+  createdById          String
+  updatedById          String
+  createdAt            DateTime        @default(now())
+  updatedAt            DateTime        @updatedAt
+
+  createdBy       User             @relation("DocumentCreatedBy", fields: [createdById], references: [id], onDelete: Restrict)
+  updatedBy       User             @relation("DocumentUpdatedBy", fields: [updatedById], references: [id], onDelete: Restrict)
+  reviewer        User?            @relation("DocumentReviewer", fields: [reviewerId], references: [id], onDelete: SetNull)
+  folder          Folder?          @relation(fields: [folderId], references: [id], onDelete: SetNull)
+  versions        Version[]
+  formSubmissions FormSubmission[]
+
+  @@unique([collection, slug], name: "collection_slug")
+  @@index([collection])
+  @@index([status])
+  @@index([deletedAt])
+  @@index([publishedAt])
+  @@index([folderId])
+  @@index([locale])
+  @@index([scheduledAt])
+  @@index([scheduledUnpublishAt])
+  @@index([createdById])
+  @@index([updatedById])
+}
+
+model Media {
+  id           String   @id @default(cuid())
+  filename     String
+  storageKey   String   @unique
+  mimeType     String
+  fileSize     Int
+  width        Int?
+  height       Int?
+  altText      String?
+  title        String?
+  blurHash     String?
+  focalPointX  Float?
+  focalPointY  Float?
+  folderId     String?
+  uploadedById String
+  createdAt    DateTime @default(now())
+  updatedAt    DateTime @updatedAt
+
+  uploadedBy User    @relation("MediaUploadedBy", fields: [uploadedById], references: [id], onDelete: Restrict)
+  folder     Folder? @relation(fields: [folderId], references: [id], onDelete: SetNull)
+
+  @@index([folderId])
+  @@index([mimeType])
+  @@index([createdAt])
+}
+
+model Version {
+  id          String   @id @default(cuid())
+  documentId  String
+  document    Document @relation(fields: [documentId], references: [id], onDelete: Cascade)
+  data        Json
+  changedById String
+  changedBy   User     @relation(fields: [changedById], references: [id], onDelete: Restrict)
+  changeType  String   @default("UPDATE")
+  createdAt   DateTime @default(now())
+
+  @@index([documentId])
+  @@index([createdAt])
+}
+
+model Folder {
+  id        String   @id @default(cuid())
+  name      String
+  scope     String
+  parentId  String?
+  position  Int      @default(0)
+  createdAt DateTime @default(now())
+
+  parent    Folder?    @relation("FolderTree", fields: [parentId], references: [id], onDelete: Cascade)
+  children  Folder[]   @relation("FolderTree")
+  documents Document[]
+  media     Media[]
+
+  @@index([scope])
+  @@index([parentId])
+  @@index([scope, parentId, position])
+}
+
+model Redirect {
+  id          String   @id @default(cuid())
+  source      String
+  destination String
+  statusCode  Int      @default(301)
+  isRegex     Boolean  @default(false)
+  notes       String?
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@unique([source])
+  @@index([createdAt])
+}
+
+model FormSubmission {
+  id           String   @id @default(cuid())
+  formId       String
+  form         Document @relation(fields: [formId], references: [id], onDelete: Cascade)
+  data         Json
+  attribution  Json?
+  submittedAt  DateTime @default(now())
+  createdAt    DateTime @default(now())
+
+  @@index([formId])
+  @@index([submittedAt])
+  @@index([createdAt])
+}
+
+model AuditLog {
+  id        String   @id @default(cuid())
+  event     String
+  userId    String?
+  user      User?    @relation(fields: [userId], references: [id], onDelete: SetNull)
+  details   Json?
+  ipAddress String?
+  userAgent String?
+  createdAt DateTime @default(now())
+
+  @@index([event])
+  @@index([userId])
+  @@index([createdAt])
+}
+`;
+}
+
+export function registerDbInitCommand(program: Command): void {
+  program
+    .command("db:init")
+    .description("Add Actuate CMS models to your Prisma schema and generate the client")
+    .option("--schema <path>", "Path to schema.prisma", "prisma/schema.prisma")
+    .option("--migrate", "Run prisma migrate dev after adding models")
+    .option("--force", "Overwrite existing CMS models if present")
+    .action(async (opts: { schema: string; migrate?: boolean; force?: boolean }) => {
+      const schemaPath = resolve(process.cwd(), opts.schema);
+
+      if (!(await fileExists(schemaPath))) {
+        logger.error(`Schema file not found at ${schemaPath}`);
+        logger.info("Run `npx prisma init` first, or specify --schema <path>.");
+        process.exitCode = 1;
+        return;
+      }
+
+      const spinner = ora("Reading Prisma schema...").start();
+
+      let content: string;
+      try {
+        content = await readFile(schemaPath, "utf-8");
+      } catch (err) {
+        spinner.fail("Failed to read schema file.");
+        logger.error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+      }
+
+      if (content.includes(CMS_SCHEMA_MARKER)) {
+        if (!opts.force) {
+          spinner.info("Actuate CMS models already present in schema. Use --force to overwrite.");
+          return;
+        }
+        spinner.text = "Removing existing CMS models...";
+        const markerIndex = content.indexOf(CMS_SCHEMA_MARKER);
+        content = content.substring(0, markerIndex).trimEnd() + "\n";
+      }
+
+      spinner.text = "Adding Actuate CMS models...";
+      const updatedContent = content.trimEnd() + "\n" + getCmsSchemaFragment();
+
+      try {
+        await writeFile(schemaPath, updatedContent);
+        spinner.succeed("Actuate CMS models added to schema.");
+      } catch (err) {
+        spinner.fail("Failed to write schema file.");
+        logger.error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+      }
+
+      const execOpts: ExecSyncOptions = { stdio: "inherit", cwd: process.cwd() };
+
+      const genSpinner = ora("Running prisma generate...").start();
+      try {
+        genSpinner.stop();
+        execSync("npx prisma generate", execOpts);
+        logger.success("Prisma client generated.");
+      } catch {
+        logger.warn("prisma generate failed. You may need to set DATABASE_URL first.");
+      }
+
+      if (opts.migrate) {
+        const migSpinner = ora("Running prisma migrate dev...").start();
+        try {
+          migSpinner.stop();
+          execSync("npx prisma migrate dev --name actuate-cms-init", execOpts);
+          logger.success("Migration created and applied.");
+        } catch {
+          logger.warn("prisma migrate dev failed. Run it manually after setting DATABASE_URL.");
+        }
+      } else {
+        logger.info("Run `npx prisma migrate dev --name actuate-cms` to create the migration.");
+      }
+    });
+}

package/src/commands/db-status.ts

@@ -0,0 +1,131 @@
+import { Command } from "commander";
+import { execSync } from "node:child_process";
+import { readFile, access } from "node:fs/promises";
+import { resolve } from "node:path";
+import ora from "ora";
+import chalk from "chalk";
+import { logger } from "../utils/logger.js";
+
+const CMS_EXPECTED_MODELS = [
+  "User",
+  "Session",
+  "Document",
+  "Media",
+  "Version",
+  "Folder",
+  "Redirect",
+  "FormSubmission",
+  "AuditLog",
+];
+
+const CMS_SCHEMA_MARKER = "// ── Actuate CMS models";
+
+async function fileExists(filePath: string): Promise<boolean> {
+  try {
+    await access(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export function registerDbStatusCommand(program: Command): void {
+  program
+    .command("db:status")
+    .description("Check which Actuate CMS models are present in your Prisma schema")
+    .option("--schema <path>", "Path to schema.prisma", "prisma/schema.prisma")
+    .action(async (opts: { schema: string }) => {
+      const schemaPath = resolve(process.cwd(), opts.schema);
+
+      if (!(await fileExists(schemaPath))) {
+        logger.error(`Schema file not found at ${schemaPath}`);
+        logger.info("Run `npx prisma init` first, or specify --schema <path>.");
+        process.exitCode = 1;
+        return;
+      }
+
+      const spinner = ora("Checking schema...").start();
+
+      let content: string;
+      try {
+        content = await readFile(schemaPath, "utf-8");
+      } catch (err) {
+        spinner.fail("Failed to read schema file.");
+        logger.error(err instanceof Error ? err.message : String(err));
+        process.exitCode = 1;
+        return;
+      }
+
+      spinner.stop();
+
+      const hasMarker = content.includes(CMS_SCHEMA_MARKER);
+      const modelRegex = /^model\s+(\w+)\s*\{/gm;
+      const schemaModels = new Set<string>();
+      let match;
+      while ((match = modelRegex.exec(content)) !== null) {
+        schemaModels.add(match[1]!);
+      }
+
+      console.log();
+      console.log(chalk.bold("  Actuate CMS Model Status"));
+      console.log(chalk.dim("  ─────────────────────────────────"));
+      console.log();
+
+      let present = 0;
+      let missing = 0;
+
+      for (const model of CMS_EXPECTED_MODELS) {
+        if (schemaModels.has(model)) {
+          console.log(`  ${chalk.green("✓")} ${model}`);
+          present++;
+        } else {
+          console.log(`  ${chalk.red("✗")} ${model} ${chalk.dim("— missing")}`);
+          missing++;
+        }
+      }
+
+      console.log();
+      console.log(chalk.dim("  ─────────────────────────────────"));
+      console.log(`  ${chalk.green(present)} present, ${missing > 0 ? chalk.red(missing) : chalk.green(missing)} missing`);
+
+      if (!hasMarker) {
+        console.log();
+        logger.warn("CMS schema marker not found. Models may have been added manually.");
+        logger.info("Run `actuate db:init` to add CMS models with proper markers.");
+      }
+
+      if (missing > 0) {
+        console.log();
+        logger.info("Run `actuate db:init` to add missing models.");
+      }
+
+      let dbConnected = false;
+      try {
+        spinner.start("Checking database connection...");
+        execSync("npx prisma db execute --stdin --schema " + JSON.stringify(schemaPath), {
+          input: "SELECT 1;",
+          stdio: ["pipe", "pipe", "pipe"],
+          cwd: process.cwd(),
+        });
+        spinner.succeed("Database connection OK.");
+        dbConnected = true;
+      } catch {
+        spinner.warn("Could not connect to database. Check DATABASE_URL.");
+      }
+
+      if (dbConnected && missing === 0) {
+        try {
+          spinner.start("Checking migration status...");
+          spinner.stop();
+          execSync("npx prisma migrate status", {
+            stdio: "inherit",
+            cwd: process.cwd(),
+          });
+        } catch {
+          logger.warn("Could not check migration status.");
+        }
+      }
+
+      console.log();
+    });
+}

package/src/index.ts

@@ -7,6 +7,8 @@ import { registerImportCommand } from "./commands/import.js";
 import { registerExportCommand } from "./commands/export.js";
 import { registerUpgradeCommand } from "./commands/upgrade.js";
 import { registerUpdateCheckCommand } from "./commands/update-check.js";
+import { registerDbInitCommand } from "./commands/db-init.js";
+import { registerDbStatusCommand } from "./commands/db-status.js";
 
 const program = new Command();
 
@@ -22,5 +24,7 @@ registerImportCommand(program);
 registerExportCommand(program);
 registerUpgradeCommand(program);
 registerUpdateCheckCommand(program);
+registerDbInitCommand(program);
+registerDbStatusCommand(program);
 
 program.parse();