@actuate-media/cli 0.3.0 → 0.4.0

package/dist/deployment/diagnostics.js

@@ -0,0 +1,154 @@
+export const REQUIRED_CMS_MODELS = [
+    'User',
+    'Session',
+    'Document',
+    'Media',
+    'Version',
+    'Folder',
+    'Redirect',
+    'FormSubmission',
+    'AuditLog',
+    'PasswordResetToken',
+    'MediaUsage',
+    'ScriptTag',
+    'PageTemplate',
+    'SavedSection',
+];
+export const REQUIRED_ENV_VARS = [
+    'DATABASE_URL',
+    'CMS_SECRET',
+    'CMS_ENCRYPTION_KEY',
+    'NEXT_PUBLIC_SITE_URL',
+];
+export function missingModels(schemaModels) {
+    return REQUIRED_CMS_MODELS.filter((model) => !schemaModels.has(model));
+}
+export function missingEnvVars(env) {
+    return REQUIRED_ENV_VARS.filter((name) => !env[name]);
+}
+export function detectPackageManager(lockfiles) {
+    if (lockfiles.has('pnpm-lock.yaml'))
+        return 'pnpm';
+    if (lockfiles.has('yarn.lock'))
+        return 'yarn';
+    if (lockfiles.has('package-lock.json'))
+        return 'npm';
+    return 'npm';
+}
+export function createDiagnosticReport(input) {
+    const checks = [];
+    const models = missingModels(input.schemaModels);
+    const envVars = input.mode === 'deploy'
+        ? [...missingEnvVars(input.env), ...(!input.env.DIRECT_DATABASE_URL ? ['DIRECT_DATABASE_URL'] : [])]
+        : missingEnvVars(input.env);
+    const fieldProblems = input.schemaContent ? missingCriticalFields(input.schemaContent) : [];
+    checks.push({
+        id: 'schema-models',
+        label: 'Prisma schema models',
+        status: models.length === 0 ? 'pass' : 'fail',
+        message: models.length === 0
+            ? 'All deploy-critical Actuate models are present.'
+            : `Missing deploy-critical Actuate models: ${models.join(', ')}.`,
+        fix: models.length === 0
+            ? undefined
+            : `Run \`actuate db:init --schema ${input.schemaPath}\` for new schemas, or update the existing Actuate block from the database setup docs, then create and apply a Prisma migration.`,
+        docs: 'https://actuatecms.dev/docs/database-setup',
+    });
+    checks.push({
+        id: 'schema-fields',
+        label: 'Prisma schema fields',
+        status: fieldProblems.length === 0 ? 'pass' : 'fail',
+        message: fieldProblems.length === 0
+            ? 'Deploy-critical model fields are present.'
+            : `Missing deploy-critical model fields: ${fieldProblems.join(', ')}.`,
+        fix: fieldProblems.length === 0
+            ? undefined
+            : 'Update the Actuate Prisma models from the database setup docs, then create and apply a Prisma migration.',
+        docs: 'https://actuatecms.dev/docs/database-setup',
+    });
+    checks.push({
+        id: 'environment',
+        label: 'Required environment variables',
+        status: envVars.length === 0 ? 'pass' : 'fail',
+        message: envVars.length === 0
+            ? 'Required deployment environment variables are set.'
+            : `Missing required environment variables: ${envVars.join(', ')}.`,
+        fix: envVars.length === 0
+            ? undefined
+            : `Set missing environment variables before deploying: ${envVars.join(', ')}.`,
+        docs: 'https://actuatecms.dev/docs/environment-variables',
+    });
+    checks.push({
+        id: 'package-manager',
+        label: 'Package manager',
+        status: 'pass',
+        message: `Detected ${input.packageManager}. Use the same package manager for install, build, and deploy checks.`,
+    });
+    const status = checks.some((check) => check.status === 'fail')
+        ? 'fail'
+        : checks.some((check) => check.status === 'warn')
+            ? 'warn'
+            : 'pass';
+    return { status, checks };
+}
+export function buildDeploymentManifest() {
+    return {
+        schemaVersion: 1,
+        packageScope: '@actuate-media',
+        registry: 'https://registry.npmjs.org',
+        requiredModels: [...REQUIRED_CMS_MODELS],
+        requiredEnv: [...REQUIRED_ENV_VARS],
+        optionalEnv: [
+            'DIRECT_DATABASE_URL',
+            'CMS_ADMIN_EMAIL',
+            'CMS_ADMIN_PASSWORD',
+            'BLOB_READ_WRITE_TOKEN',
+            'UPSTASH_REDIS_REST_URL',
+            'UPSTASH_REDIS_REST_TOKEN',
+            'RESEND_API_KEY',
+        ],
+        routes: {
+            apiHealth: '/api/cms/health',
+            apiBase: '/api/cms',
+            adminDefault: '/admin',
+        },
+        crons: {
+            scheduledPublish: '/api/cms/cron/publish',
+            cleanup: '/api/cms/cron/cleanup',
+            seoScan: '/api/cms/cron/seo-scan',
+        },
+        verification: {
+            preflight: 'actuate doctor',
+            production: 'actuate deploy:check',
+            postDeploy: 'actuate verify --full',
+        },
+        docs: {
+            deployment: 'https://actuatecms.dev/docs/deployment',
+            databaseSetup: 'https://actuatecms.dev/docs/database-setup',
+            environmentVariables: 'https://actuatecms.dev/docs/environment-variables',
+            aiRunbook: 'https://actuatecms.dev/docs/ai-runbook',
+        },
+    };
+}
+export function missingCriticalFields(schemaContent) {
+    const requiredFields = {
+        ScriptTag: ['targetPaths', 'priority', 'enabled'],
+        PageTemplate: ['tree', 'builtIn', 'category'],
+        SavedSection: ['tree', 'usageCount', 'category'],
+        PasswordResetToken: ['tokenHash', 'expiresAt', 'usedAt'],
+        MediaUsage: ['mediaId', 'documentId', 'fieldPath'],
+    };
+    const missing = [];
+    for (const [model, fields] of Object.entries(requiredFields)) {
+        const body = schemaContent.match(new RegExp(`model\\s+${model}\\s+\\{([\\s\\S]*?)\\n\\}`))?.[1] ?? '';
+        if (!body)
+            continue;
+        for (const field of fields) {
+            if (!new RegExp(`^\\s*${field}\\s+`, 'm').test(body)) {
+                missing.push(`${model}.${field}`);
+            }
+        }
+    }
+    return missing;
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/deployment/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/deployment/diagnostics.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,MAAM;IACN,SAAS;IACT,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,oBAAoB;IACpB,YAAY;IACZ,WAAW;IACX,cAAc;IACd,cAAc;CACN,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,sBAAsB;CACd,CAAC;AAWX,MAAM,UAAU,aAAa,CAAC,YAAyB;IACrD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAuC;IACpE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAsB;IACzD,IAAI,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAAE,OAAO,MAAM,CAAC;IACnD,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ;QACrC,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5F,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,iDAAiD;YACnD,CAAC,CAAC,2CAA2C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACnE,GAAG,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YACtB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kCAAkC,KAAK,CAAC,UAAU,kIAAkI;QACxL,IAAI,EAAE,4CAA4C;KACnD,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACpD,OAAO,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;YACjC,CAAC,CAAC,2CAA2C;YAC7C,CAAC,CAAC,yCAAyC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACxE,GAAG,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;YAC7B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0GAA0G;QAC9G,IAAI,EAAE,4CAA4C;KACnD,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,aAAa;QACjB,KAAK,EAAE,gCAAgC;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC9C,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC3B,CAAC,CAAC,oDAAoD;YACtD,CAAC,CAAC,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACpE,GAAG,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uDAAuD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAChF,IAAI,EAAE,mDAAmD;KAC1D,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,KAAK,CAAC,cAAc,uEAAuE;KACjH,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;QAC9E,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;YACjD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC;IAEX,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,gBAAgB;QAC9B,QAAQ,EAAE,4BAA4B;QACtC,cAAc,EAAE,CAAC,GAAG,mBAAmB,CAAC;QACxC,WAAW,EAAE,CAAC,GAAG,iBAAiB,CAAC;QACnC,WAAW,EAAE;YACX,qBAAqB;YACrB,iBAAiB;YACjB,oBAAoB;YACpB,uBAAuB;YACvB,wBAAwB;YACxB,0BAA0B;YAC1B,gBAAgB;SACjB;QACD,MAAM,EAAE;YACN,SAAS,EAAE,iBAAiB;YAC5B,OAAO,EAAE,UAAU;YACnB,YAAY,EAAE,QAAQ;SACvB;QACD,KAAK,EAAE;YACL,gBAAgB,EAAE,uBAAuB;YACzC,OAAO,EAAE,uBAAuB;YAChC,OAAO,EAAE,wBAAwB;SAClC;QACD,YAAY,EAAE;YACZ,SAAS,EAAE,gBAAgB;YAC3B,UAAU,EAAE,sBAAsB;YAClC,UAAU,EAAE,uBAAuB;SACpC;QACD,IAAI,EAAE;YACJ,UAAU,EAAE,wCAAwC;YACpD,aAAa,EAAE,4CAA4C;YAC3D,oBAAoB,EAAE,mDAAmD;YACzE,SAAS,EAAE,wCAAwC;SACpD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,MAAM,cAAc,GAA6B;QAC/C,SAAS,EAAE,CAAC,aAAa,EAAE,UAAU,EAAE,SAAS,CAAC;QACjD,YAAY,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;QAC7C,YAAY,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC;QAChD,kBAAkB,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC;QACxD,UAAU,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC;KACnD,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,2BAA2B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtG,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/index.js

@@ -10,6 +10,7 @@ import { registerUpdateCheckCommand } from "./commands/update-check.js";
 import { registerDbInitCommand } from "./commands/db-init.js";
 import { registerDbStatusCommand } from "./commands/db-status.js";
 import { registerInitCommand } from "./commands/init.js";
+import { registerDeployCheckCommand, registerDoctorCommand, registerVerifyCommand, } from "./commands/doctor.js";
 const program = new Command();
 program
     .name("actuate")
@@ -25,5 +26,8 @@ registerUpdateCheckCommand(program);
 registerDbInitCommand(program);
 registerDbStatusCommand(program);
 registerInitCommand(program);
+registerDoctorCommand(program);
+registerDeployCheckCommand(program);
+registerVerifyCommand(program);
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAE7B,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,0BAA0B,CAAC,OAAO,CAAC,CAAC;AACpC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAE/B,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actuate-media/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "CLI for Actuate CMS — migrations, codegen, imports, exports, and upgrades",
   "repository": {
     "type": "git",
@@ -28,7 +28,7 @@
   "devDependencies": {
     "typescript": "^5.7.0",
     "vitest": "^3.0.0",
-    "@actuate-media/cms-core": "0.10.0"
+    "@actuate-media/cms-core": "0.10.3"
   },
   "scripts": {
     "build": "tsc",

package/src/__tests__/deployment-diagnostics.test.ts

@@ -0,0 +1,88 @@
+import { describe, expect, it } from 'vitest';
+
+import {
+  buildDeploymentManifest,
+  createDiagnosticReport,
+  REQUIRED_CMS_MODELS,
+  REQUIRED_ENV_VARS,
+} from '../deployment/diagnostics.js';
+
+describe('deployment diagnostics', () => {
+  it('tracks deploy-critical models used by first-run admin features', () => {
+    expect(REQUIRED_CMS_MODELS).toEqual(expect.arrayContaining([
+      'User',
+      'Session',
+      'Document',
+      'Media',
+      'Version',
+      'Folder',
+      'Redirect',
+      'FormSubmission',
+      'AuditLog',
+      'PasswordResetToken',
+      'MediaUsage',
+      'ScriptTag',
+      'PageTemplate',
+      'SavedSection',
+    ]));
+  });
+
+  it('reports missing models and env vars with exact fix commands', () => {
+    const report = createDiagnosticReport({
+      schemaModels: new Set(['User', 'Session', 'Document']),
+      schemaContent: '',
+      env: {
+        DATABASE_URL: 'postgresql://example',
+      },
+      packageManager: 'pnpm',
+      schemaPath: 'prisma/schema.prisma',
+    });
+
+    expect(report.status).toBe('fail');
+    expect(report.checks).toEqual(expect.arrayContaining([
+      expect.objectContaining({
+        id: 'schema-models',
+        status: 'fail',
+        fix: 'Run `actuate db:init --schema prisma/schema.prisma` for new schemas, or update the existing Actuate block from the database setup docs, then create and apply a Prisma migration.',
+      }),
+      expect.objectContaining({
+        id: 'environment',
+        status: 'fail',
+        fix: 'Set missing environment variables before deploying: CMS_SECRET, CMS_ENCRYPTION_KEY, NEXT_PUBLIC_SITE_URL.',
+      }),
+    ]));
+  });
+
+  it('requires migration connection details for deploy checks', () => {
+    const report = createDiagnosticReport({
+      schemaModels: new Set(REQUIRED_CMS_MODELS),
+      schemaContent: '',
+      env: {
+        DATABASE_URL: 'postgresql://example',
+        CMS_SECRET: 'secret',
+        CMS_ENCRYPTION_KEY: 'a'.repeat(64),
+        NEXT_PUBLIC_SITE_URL: 'https://example.com',
+      },
+      packageManager: 'pnpm',
+      schemaPath: 'prisma/schema.prisma',
+      mode: 'deploy',
+    });
+
+    expect(report.status).toBe('fail');
+    expect(report.checks).toEqual(expect.arrayContaining([
+      expect.objectContaining({
+        id: 'environment',
+        message: expect.stringContaining('DIRECT_DATABASE_URL'),
+      }),
+    ]));
+  });
+
+  it('exposes machine-readable deployment metadata', () => {
+    const manifest = buildDeploymentManifest();
+
+    expect(manifest.requiredModels).toEqual(REQUIRED_CMS_MODELS);
+    expect(manifest.requiredEnv).toEqual(REQUIRED_ENV_VARS);
+    expect(manifest.routes.apiHealth).toBe('/api/cms/health');
+    expect(manifest.crons.scheduledPublish).toBe('/api/cms/cron/publish');
+  });
+});

package/src/__tests__/schema-fragment.test.ts

@@ -0,0 +1,47 @@
+import { Command } from 'commander';
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+import { registerDbInitCommand, resetDbInitCommandRunner, setDbInitCommandRunner } from '../commands/db-init.js';
+import { REQUIRED_CMS_MODELS } from '../deployment/diagnostics.js';
+
+function baseSchema() {
+  return `generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "postgresql"
+  url      = env("DATABASE_URL")
+}
+`;
+}
+
+describe('db:init schema fragment', () => {
+  afterEach(() => {
+    resetDbInitCommandRunner();
+    vi.restoreAllMocks();
+  });
+
+  it('injects all deploy-critical Actuate models', async () => {
+    const tempRoot = await mkdtemp(path.join(tmpdir(), 'actuate-db-init-'));
+    const schemaPath = path.join(tempRoot, 'schema.prisma');
+    await writeFile(schemaPath, baseSchema());
+
+    vi.spyOn(process, 'cwd').mockReturnValue(tempRoot);
+    setDbInitCommandRunner(() => undefined);
+    const command = new Command();
+    registerDbInitCommand(command);
+
+    await command.parseAsync(['node', 'actuate', 'db:init', '--schema', 'schema.prisma']);
+
+    const schema = await readFile(schemaPath, 'utf-8');
+    for (const model of REQUIRED_CMS_MODELS) {
+      expect(schema).toContain(`model ${model} `);
+    }
+
+    await rm(tempRoot, { recursive: true, force: true });
+  });
+});

package/src/__tests__/seed.test.ts

@@ -1,6 +1,17 @@
-import { describe, expect, it } from 'vitest';
+import { afterEach, describe, expect, it, vi } from 'vitest';
 
-import { normalizeSeedPayload } from '../commands/seed.js';
+vi.mock('@actuate-media/cms-core', () => ({
+  extractPlainText: vi.fn((value: string) => value.replace(/<[^>]+>/g, ' ')),
+  hashContent: vi.fn(async () => 'hash-1'),
+  sanitizeHtml: vi.fn((value: string) => value.replace(/<script[\s\S]*?<\/script>/gi, '')),
+  createInitialAdmin: vi.fn(),
+}));
+
+import { createSeedDocument, ensureSeedAdmin, normalizeSeedPayload } from '../commands/seed.js';
+
+afterEach(() => {
+  vi.unstubAllEnvs();
+});
 
 describe('seed payload normalization', () => {
   it('separates globals from collection documents', () => {
@@ -51,3 +62,65 @@ describe('seed payload normalization', () => {
     ]);
   });
 });
+
+describe('seed admin handling', () => {
+  it('refuses to create a first admin without credentials', async () => {
+    const db = {
+      user: {
+        findFirst: vi.fn().mockResolvedValue(null),
+      },
+    };
+
+    await expect(ensureSeedAdmin(db)).rejects.toThrow('CMS_ADMIN_EMAIL and CMS_ADMIN_PASSWORD');
+  });
+});
+
+describe('seed document creation', () => {
+  it('creates documents with versions, content hashes, and sanitized HTML', async () => {
+    const tx = {
+      document: {
+        create: vi.fn().mockResolvedValue({ id: 'doc-1' }),
+      },
+      version: {
+        create: vi.fn(),
+      },
+    };
+    const db = {
+      $transaction: vi.fn(async (fn) => fn(tx)),
+    };
+
+    await createSeedDocument(db, 'admin-1', {
+      collection: 'pages',
+      status: 'PUBLISHED',
+      data: {
+        title: 'Home',
+        slug: 'home',
+        content: '<p>Hello</p><script>alert(1)</script>',
+      },
+    });
+
+    expect(tx.document.create).toHaveBeenCalledWith({
+      data: expect.objectContaining({
+        collection: 'pages',
+        title: 'Home',
+        slug: 'home',
+        status: 'PUBLISHED',
+        publishedAt: expect.any(Date),
+        createdById: 'admin-1',
+        updatedById: 'admin-1',
+        plainText: expect.any(String),
+        contentHash: expect.any(String),
+        data: expect.objectContaining({
+          content: '<p>Hello</p>',
+        }),
+      }),
+    });
+    expect(tx.version.create).toHaveBeenCalledWith({
+      data: expect.objectContaining({
+        documentId: 'doc-1',
+        changedById: 'admin-1',
+        changeType: 'CREATE',
+      }),
+    });
+  });
+});

package/src/commands/db-init.ts

@@ -7,6 +7,20 @@ import { logger } from "../utils/logger.js";
 
 const CMS_SCHEMA_MARKER = "// ── Actuate CMS models";
 
+export let runDbInitCommand = (command: string, options: ExecSyncOptions): void => {
+  execSync(command, options);
+};
+
+const defaultDbInitCommandRunner = runDbInitCommand;
+
+export function setDbInitCommandRunner(runner: typeof runDbInitCommand): void {
+  runDbInitCommand = runner;
+}
+
+export function resetDbInitCommandRunner(): void {
+  runDbInitCommand = defaultDbInitCommandRunner;
+}
+
 async function fileExists(filePath: string): Promise<boolean> {
   try {
     await access(filePath);
@@ -219,6 +233,75 @@ model AuditLog {
   @@index([userId])
   @@index([createdAt])
 }
+
+model PasswordResetToken {
+  id        String    @id @default(cuid())
+  userId    String
+  tokenHash String
+  expiresAt DateTime
+  usedAt    DateTime?
+  createdAt DateTime  @default(now())
+
+  @@index([tokenHash])
+  @@index([userId])
+}
+
+model MediaUsage {
+  id          String   @id @default(cuid())
+  mediaId     String
+  documentId  String
+  fieldPath   String?
+  createdAt   DateTime @default(now())
+
+  @@unique([mediaId, documentId, fieldPath])
+  @@index([mediaId])
+  @@index([documentId])
+}
+
+model ScriptTag {
+  id          String   @id @default(cuid())
+  name        String
+  code        String   @db.Text
+  placement   String
+  scope       String
+  targetPaths String[]
+  priority    Int      @default(100)
+  enabled     Boolean  @default(true)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([enabled])
+  @@index([placement])
+}
+
+model PageTemplate {
+  id          String   @id @default(cuid())
+  name        String
+  description String?
+  category    String   @default("content")
+  tree        Json
+  thumbnail   String?
+  builtIn     Boolean  @default(false)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([category])
+  @@index([builtIn])
+}
+
+model SavedSection {
+  id          String   @id @default(cuid())
+  name        String
+  description String?
+  category    String   @default("content")
+  tree        Json
+  thumbnail   String?
+  usageCount  Int      @default(0)
+  createdAt   DateTime @default(now())
+  updatedAt   DateTime @updatedAt
+
+  @@index([category])
+}
 `;
 }
 
@@ -279,7 +362,7 @@ export function registerDbInitCommand(program: Command): void {
       const genSpinner = ora("Running prisma generate...").start();
       try {
         genSpinner.stop();
-        execSync("npx prisma generate", execOpts);
+        runDbInitCommand("npx prisma generate", execOpts);
         logger.success("Prisma client generated.");
       } catch {
         logger.warn("prisma generate failed. You may need to set DATABASE_URL first.");
@@ -289,7 +372,7 @@ export function registerDbInitCommand(program: Command): void {
         const migSpinner = ora("Running prisma migrate dev...").start();
         try {
           migSpinner.stop();
-          execSync("npx prisma migrate dev --name actuate-cms-init", execOpts);
+          runDbInitCommand("npx prisma migrate dev --name actuate-cms-init", execOpts);
           logger.success("Migration created and applied.");
         } catch {
           logger.warn("prisma migrate dev failed. Run it manually after setting DATABASE_URL.");

package/src/commands/db-status.ts

@@ -5,18 +5,7 @@ import { resolve } from "node:path";
 import ora from "ora";
 import chalk from "chalk";
 import { logger } from "../utils/logger.js";
-
-const CMS_EXPECTED_MODELS = [
-  "User",
-  "Session",
-  "Document",
-  "Media",
-  "Version",
-  "Folder",
-  "Redirect",
-  "FormSubmission",
-  "AuditLog",
-];
+import { REQUIRED_CMS_MODELS } from "../deployment/diagnostics.js";
 
 const CMS_SCHEMA_MARKER = "// ── Actuate CMS models";
 
@@ -74,7 +63,7 @@ export function registerDbStatusCommand(program: Command): void {
       let present = 0;
       let missing = 0;
 
-      for (const model of CMS_EXPECTED_MODELS) {
+      for (const model of REQUIRED_CMS_MODELS) {
         if (schemaModels.has(model)) {
           console.log(`  ${chalk.green("✓")} ${model}`);
           present++;