@base44-preview/cli 0.1.15-pr.632.1a53729 → 0.1.16-pr.626.47e8953

package/dist/cli/index.js

@@ -31177,7 +31177,7 @@ function cleanDoc(doc) {
   return mapDoc(doc, (currentDoc) => cleanDocFn(currentDoc));
 }
 function replaceEndOfLine(doc, replacement = literalline) {
-  return mapDoc(doc, (currentDoc) => typeof currentDoc === "string" ? join28(replacement, currentDoc.split(`
+  return mapDoc(doc, (currentDoc) => typeof currentDoc === "string" ? join30(replacement, currentDoc.split(`
 `)) : currentDoc);
 }
 function canBreakFn(doc) {
@@ -31257,7 +31257,7 @@ function indentIfBreak(contents, options) {
     negate: options.negate
   };
 }
-function join28(separator, docs) {
+function join30(separator, docs) {
   assertDoc(separator);
   assertDocArray(docs);
   const parts = [];
@@ -31968,7 +31968,7 @@ var init_doc = __esm(() => {
   MODE_FLAT = Symbol("MODE_FLAT");
   DOC_FILL_PRINTED_LENGTH = Symbol("DOC_FILL_PRINTED_LENGTH");
   builders = {
-    join: join28,
+    join: join30,
     line,
     softline,
     hardline,
@@ -228657,6 +228657,20 @@ function isCLIError(error) {
 function isUserError(error) {
   return error instanceof UserError;
 }
+var STEP = Symbol.for("base44.commandStep");
+async function tagStep(step, run) {
+  try {
+    return await run();
+  } catch (error) {
+    if (error !== null && typeof error === "object" && !(STEP in error) && Object.isExtensible(error)) {
+      Object.defineProperty(error, STEP, { value: step, enumerable: false });
+    }
+    throw error;
+  }
+}
+function stepOf(error) {
+  return error !== null && typeof error === "object" && STEP in error ? error[STEP] : undefined;
+}
 
 // src/core/utils/fs.ts
 async function pathExists(path) {
@@ -228783,7 +228797,7 @@ function normalizeBase44Env() {
 loadProjectEnvFiles();
 
 // src/cli/index.ts
-import { dirname as dirname28, join as join37 } from "node:path";
+import { dirname as dirname29, join as join39 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 
 // ../../node_modules/@clack/core/dist/index.mjs
@@ -239236,7 +239250,7 @@ import { join as join13 } from "node:path";
 // package.json
 var package_default = {
   name: "base44",
-  version: "0.1.15",
+  version: "0.1.16",
   description: "Base44 CLI - Unified interface for managing Base44 applications",
   type: "module",
   bin: {
@@ -239590,91 +239604,8 @@ async function createArchive(pathToArchive, targetArchivePath) {
 import { readFile as readFile3 } from "node:fs/promises";
 import { join as join18 } from "node:path";
 
-// src/core/site/manifest.ts
-import { createHash } from "node:crypto";
-import { createReadStream } from "node:fs";
-import { stat } from "node:fs/promises";
-import { basename as basename5, extname, join as join16 } from "node:path";
-var MAX_ASSET_COUNT = 1e5;
-var ASSETS_IGNORE_FILE = ".assetsignore";
-var ALWAYS_IGNORED = new Set([
-  ASSETS_IGNORE_FILE,
-  "wrangler.json",
-  ".dev.vars"
-]);
-var MIME_TYPES = {
-  ".html": "text/html",
-  ".htm": "text/html",
-  ".css": "text/css",
-  ".js": "text/javascript",
-  ".mjs": "text/javascript",
-  ".json": "application/json",
-  ".map": "application/json",
-  ".txt": "text/plain",
-  ".xml": "application/xml",
-  ".svg": "image/svg+xml",
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".webp": "image/webp",
-  ".avif": "image/avif",
-  ".ico": "image/x-icon",
-  ".woff": "font/woff",
-  ".woff2": "font/woff2",
-  ".ttf": "font/ttf",
-  ".otf": "font/otf",
-  ".eot": "application/vnd.ms-fontobject",
-  ".mp3": "audio/mpeg",
-  ".mp4": "video/mp4",
-  ".webm": "video/webm",
-  ".pdf": "application/pdf",
-  ".wasm": "application/wasm",
-  ".webmanifest": "application/manifest+json"
-};
-function getAssetContentType(filePath) {
-  return MIME_TYPES[extname(filePath).toLowerCase()] ?? "application/octet-stream";
-}
-async function hashAssetFile(appId, absolutePath) {
-  const hash = createHash("sha256").update(Buffer.from(appId, "utf8"));
-  for await (const chunk of createReadStream(absolutePath)) {
-    hash.update(chunk);
-  }
-  return hash.digest("hex").slice(0, 32);
-}
-async function buildAssetManifest(assetsDir, appId) {
-  const manifest = {};
-  const filesByHash = new Map;
-  const found = await globby("**/*", {
-    cwd: assetsDir,
-    dot: true,
-    onlyFiles: true,
-    followSymbolicLinks: false,
-    ignoreFiles: [ASSETS_IGNORE_FILE]
-  });
-  const relativeFilePaths = found.filter((path) => !ALWAYS_IGNORED.has(basename5(path)));
-  if (relativeFilePaths.length > MAX_ASSET_COUNT) {
-    throw new InvalidInputError(`Too many static assets: found ${relativeFilePaths.length}, the limit is ${MAX_ASSET_COUNT} files.`);
-  }
-  for (const relativePath of relativeFilePaths.sort()) {
-    const absolutePath = join16(assetsDir, ...relativePath.split("/"));
-    const { size } = await stat(absolutePath);
-    const hash = await hashAssetFile(appId, absolutePath);
-    manifest[`/${relativePath}`] = { hash, size };
-    if (!filesByHash.has(hash)) {
-      filesByHash.set(hash, {
-        absolutePath,
-        hash,
-        size,
-        contentType: getAssetContentType(absolutePath)
-      });
-    }
-  }
-  return { manifest, filesByHash };
-}
-
 // src/core/site/modules.ts
-import { stat as stat2 } from "node:fs/promises";
+import { stat } from "node:fs/promises";
 import { relative as relative5, resolve as resolve3, sep } from "node:path";
 var MAX_TOTAL_MODULE_BYTES = 40 * 1024 * 1024;
 var MODULE_IGNORE = ["wrangler.json", ".dev.vars"];
@@ -239749,7 +239680,7 @@ async function collectModules(config) {
   const modules = [...modulesByName.values()];
   let totalBytes = 0;
   for (const module of modules) {
-    module.size = (await stat2(module.absolutePath)).size;
+    module.size = (await stat(module.absolutePath)).size;
     totalBytes += module.size;
   }
   if (totalBytes > MAX_TOTAL_MODULE_BYTES) {
@@ -239768,8 +239699,104 @@ function addSourcemap(modulesByName, configDir, name) {
   });
 }
 
-// src/core/site/upload.ts
-import { readFile as readFile2 } from "node:fs/promises";
+// src/core/site/wrangler-config.ts
+import { dirname as dirname12, join as join16, resolve as resolve4 } from "node:path";
+var WRANGLER_REDIRECT_PATH = join16(".wrangler", "deploy", "config.json");
+var RedirectConfigSchema = looseObject({
+  configPath: string2().min(1)
+});
+var WranglerConfigSchema = looseObject({
+  main: string2().min(1, "wrangler config is missing a 'main' entry module"),
+  no_bundle: boolean2().optional(),
+  rules: array(looseObject({ type: string2(), globs: array(string2()) })).optional(),
+  assets: looseObject({
+    directory: string2().optional(),
+    html_handling: string2().optional(),
+    not_found_handling: string2().optional(),
+    run_worker_first: union([boolean2(), array(string2())]).optional(),
+    headers: string2().optional(),
+    redirects: string2().optional()
+  }).optional(),
+  compatibility_date: string2().optional(),
+  compatibility_flags: array(string2()).optional(),
+  vars: record(string2(), unknown()).optional(),
+  upload_source_maps: boolean2().optional()
+});
+async function detectFullStackArtifact(projectRoot) {
+  const redirectPath = join16(projectRoot, WRANGLER_REDIRECT_PATH);
+  return await pathExists(redirectPath) ? redirectPath : null;
+}
+async function resolveWranglerConfig(redirectPath) {
+  const configPath = await resolveRedirectedConfigPath(redirectPath);
+  const parsed = await readJsonFile(configPath);
+  const result = WranglerConfigSchema.safeParse(parsed);
+  if (!result.success) {
+    throw new ConfigInvalidError(`Invalid wrangler config: ${prettifyError(result.error)}`, configPath);
+  }
+  const config = result.data;
+  if (config.no_bundle !== true) {
+    throw new InvalidInputError("This framework's output requires bundling; not yet supported. Base44 only deploys pre-bundled Workers output (no_bundle: true).");
+  }
+  const configDir = dirname12(configPath);
+  const assetsDirectory = config.assets?.directory ? resolve4(configDir, config.assets.directory) : null;
+  return {
+    configPath,
+    configDir,
+    main: config.main,
+    assetsDirectory,
+    assetsConfig: config.assets ? toResolvedAssetsConfig(config.assets) : null,
+    compatibilityDate: config.compatibility_date ?? null,
+    compatibilityFlags: config.compatibility_flags ?? [],
+    rules: (config.rules ?? []).map((rule) => ({
+      type: rule.type,
+      globs: rule.globs
+    })),
+    uploadSourceMaps: config.upload_source_maps ?? false
+  };
+}
+async function resolveRedirectedConfigPath(redirectPath) {
+  const parsed = await readJsonFile(redirectPath);
+  const result = RedirectConfigSchema.safeParse(parsed);
+  if (!result.success) {
+    throw new ConfigInvalidError(`Invalid deploy redirect file: ${prettifyError(result.error)}`, redirectPath);
+  }
+  const configPath = resolve4(dirname12(redirectPath), result.data.configPath);
+  if (!await pathExists(configPath)) {
+    throw new ConfigInvalidError(`Wrangler config referenced by ${redirectPath} does not exist: ${configPath}`, redirectPath, {
+      hints: [{ message: "Rebuild the project to regenerate the artifact" }]
+    });
+  }
+  return configPath;
+}
+function toResolvedAssetsConfig(assets) {
+  return {
+    htmlHandling: assets.html_handling,
+    notFoundHandling: assets.not_found_handling,
+    runWorkerFirst: assets.run_worker_first,
+    headers: assets.headers,
+    redirects: assets.redirects
+  };
+}
+
+// src/core/site/full-stack.ts
+async function resolveFullStackBuild(projectRoot) {
+  const redirectPath = await detectFullStackArtifact(projectRoot);
+  if (!redirectPath) {
+    return null;
+  }
+  const config = await resolveWranglerConfig(redirectPath);
+  return {
+    config,
+    modules: await collectModules(config),
+    assetsDir: config.assetsDirectory && await pathExists(config.assetsDirectory) ? config.assetsDirectory : null
+  };
+}
+
+// src/core/site/manifest.ts
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { stat as stat2 } from "node:fs/promises";
+import { basename as basename5, extname, join as join17 } from "node:path";
 
 // ../../node_modules/p-map/index.js
 async function pMap(iterable, mapper, {
@@ -239895,7 +239922,99 @@ async function pMap(iterable, mapper, {
 }
 var pMapSkip = Symbol("skip");
 
+// src/core/site/manifest.ts
+var MAX_ASSET_COUNT = 1e5;
+var ASSETS_IGNORE_FILE = ".assetsignore";
+var ALWAYS_IGNORED = new Set([
+  ASSETS_IGNORE_FILE,
+  "wrangler.json",
+  ".dev.vars"
+]);
+var MIME_TYPES = {
+  ".html": "text/html",
+  ".htm": "text/html",
+  ".css": "text/css",
+  ".js": "text/javascript",
+  ".mjs": "text/javascript",
+  ".json": "application/json",
+  ".map": "application/json",
+  ".txt": "text/plain",
+  ".xml": "application/xml",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".avif": "image/avif",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".otf": "font/otf",
+  ".eot": "application/vnd.ms-fontobject",
+  ".mp3": "audio/mpeg",
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
+  ".pdf": "application/pdf",
+  ".wasm": "application/wasm",
+  ".webmanifest": "application/manifest+json"
+};
+function getAssetContentType(filePath) {
+  return MIME_TYPES[extname(filePath).toLowerCase()] ?? "application/octet-stream";
+}
+async function walkBuildOutput(outputDir) {
+  const found = await globby("**/*", {
+    cwd: outputDir,
+    dot: true,
+    onlyFiles: true,
+    followSymbolicLinks: false,
+    ignoreFiles: [ASSETS_IGNORE_FILE]
+  });
+  return found.filter((path) => !ALWAYS_IGNORED.has(basename5(path))).sort();
+}
+var STAT_CONCURRENCY = 32;
+async function describeBuildOutput(outputDir) {
+  const relativePaths = await walkBuildOutput(outputDir);
+  return await pMap(relativePaths, async (path) => {
+    const absolutePath = join17(outputDir, ...path.split("/"));
+    return { path, absolutePath, size: (await stat2(absolutePath)).size };
+  }, { concurrency: STAT_CONCURRENCY });
+}
+async function hashFileInto(hash, absolutePath) {
+  for await (const chunk of createReadStream(absolutePath)) {
+    hash.update(chunk);
+  }
+  return hash;
+}
+async function hashAssetFile(appId, absolutePath) {
+  const hash = await hashFileInto(createHash("sha256").update(Buffer.from(appId, "utf8")), absolutePath);
+  return hash.digest("hex").slice(0, 32);
+}
+async function buildAssetManifest(assetsDir, appId) {
+  const manifest = {};
+  const filesByHash = new Map;
+  const files = await describeBuildOutput(assetsDir);
+  if (files.length > MAX_ASSET_COUNT) {
+    throw new InvalidInputError(`Too many static assets: found ${files.length}, the limit is ${MAX_ASSET_COUNT} files.`);
+  }
+  for (const { path: relativePath, absolutePath, size } of files) {
+    const hash = await hashAssetFile(appId, absolutePath);
+    manifest[`/${relativePath}`] = { hash, size };
+    if (!filesByHash.has(hash)) {
+      filesByHash.set(hash, {
+        absolutePath,
+        hash,
+        size,
+        contentType: getAssetContentType(absolutePath)
+      });
+    }
+  }
+  return { manifest, filesByHash };
+}
+
 // src/core/site/upload.ts
+import { readFile as readFile2 } from "node:fs/promises";
 var DEFAULT_UPLOAD_CONCURRENCY = 3;
 var MAX_UPLOAD_CONCURRENCY = 50;
 var MAX_UPLOAD_ATTEMPTS = 3;
@@ -239994,11 +240113,17 @@ async function uploadPresignedAsset(upload, assets) {
   if (!file) {
     throw new InternalError(`Server requested upload of unknown asset path: ${upload.path}`);
   }
-  const content = await readFile2(file.absolutePath);
+  await putPresigned(upload, file.absolutePath);
+}
+async function putPresigned(upload, absolutePath) {
+  const content = await readFile2(absolutePath);
   try {
     await distribution_default.put(upload.url, {
       body: new Uint8Array(content),
-      headers: { "Content-Type": upload.contentType },
+      headers: {
+        "Content-Type": upload.contentType,
+        ...upload.checksumSha256 ? { "x-amz-checksum-sha256": upload.checksumSha256 } : {}
+      },
       timeout: 120000,
       retry: UPLOAD_RETRY
     });
@@ -240007,85 +240132,6 @@ async function uploadPresignedAsset(upload, assets) {
   }
 }
 
-// src/core/site/wrangler-config.ts
-import { dirname as dirname12, join as join17, resolve as resolve4 } from "node:path";
-var WRANGLER_REDIRECT_PATH = join17(".wrangler", "deploy", "config.json");
-var RedirectConfigSchema = looseObject({
-  configPath: string2().min(1)
-});
-var WranglerConfigSchema = looseObject({
-  main: string2().min(1, "wrangler config is missing a 'main' entry module"),
-  no_bundle: boolean2().optional(),
-  rules: array(looseObject({ type: string2(), globs: array(string2()) })).optional(),
-  assets: looseObject({
-    directory: string2().optional(),
-    html_handling: string2().optional(),
-    not_found_handling: string2().optional(),
-    run_worker_first: union([boolean2(), array(string2())]).optional(),
-    headers: string2().optional(),
-    redirects: string2().optional()
-  }).optional(),
-  compatibility_date: string2().optional(),
-  compatibility_flags: array(string2()).optional(),
-  vars: record(string2(), unknown()).optional(),
-  upload_source_maps: boolean2().optional()
-});
-async function detectFullStackArtifact(projectRoot) {
-  const redirectPath = join17(projectRoot, WRANGLER_REDIRECT_PATH);
-  return await pathExists(redirectPath) ? redirectPath : null;
-}
-async function resolveWranglerConfig(redirectPath) {
-  const configPath = await resolveRedirectedConfigPath(redirectPath);
-  const parsed = await readJsonFile(configPath);
-  const result = WranglerConfigSchema.safeParse(parsed);
-  if (!result.success) {
-    throw new ConfigInvalidError(`Invalid wrangler config: ${prettifyError(result.error)}`, configPath);
-  }
-  const config = result.data;
-  if (config.no_bundle !== true) {
-    throw new InvalidInputError("This framework's output requires bundling; not yet supported. Base44 only deploys pre-bundled Workers output (no_bundle: true).");
-  }
-  const configDir = dirname12(configPath);
-  const assetsDirectory = config.assets?.directory ? resolve4(configDir, config.assets.directory) : null;
-  return {
-    configPath,
-    configDir,
-    main: config.main,
-    assetsDirectory,
-    assetsConfig: config.assets ? toResolvedAssetsConfig(config.assets) : null,
-    compatibilityDate: config.compatibility_date ?? null,
-    compatibilityFlags: config.compatibility_flags ?? [],
-    rules: (config.rules ?? []).map((rule) => ({
-      type: rule.type,
-      globs: rule.globs
-    })),
-    uploadSourceMaps: config.upload_source_maps ?? false
-  };
-}
-async function resolveRedirectedConfigPath(redirectPath) {
-  const parsed = await readJsonFile(redirectPath);
-  const result = RedirectConfigSchema.safeParse(parsed);
-  if (!result.success) {
-    throw new ConfigInvalidError(`Invalid deploy redirect file: ${prettifyError(result.error)}`, redirectPath);
-  }
-  const configPath = resolve4(dirname12(redirectPath), result.data.configPath);
-  if (!await pathExists(configPath)) {
-    throw new ConfigInvalidError(`Wrangler config referenced by ${redirectPath} does not exist: ${configPath}`, redirectPath, {
-      hints: [{ message: "Rebuild the project to regenerate the artifact" }]
-    });
-  }
-  return configPath;
-}
-function toResolvedAssetsConfig(assets) {
-  return {
-    htmlHandling: assets.html_handling,
-    notFoundHandling: assets.not_found_handling,
-    runWorkerFirst: assets.run_worker_first,
-    headers: assets.headers,
-    redirects: assets.redirects
-  };
-}
-
 // src/core/site/deployment.ts
 var NO_ASSETS = { manifest: {}, filesByHash: new Map };
 var DEPLOYMENTS_API_ENV = "BASE44_DEPLOYMENTS_API";
@@ -240112,12 +240158,11 @@ async function deployToDeployments(options) {
   return { deploymentId: finalized.deploymentId, gitHash };
 }
 async function resolveWorkerBuild(projectRoot, progress) {
-  const redirectPath = await detectFullStackArtifact(projectRoot);
-  if (!redirectPath) {
+  const built = await resolveFullStackBuild(projectRoot);
+  if (!built) {
     return null;
   }
-  const config = await resolveWranglerConfig(redirectPath);
-  const assetsDir = config.assetsDirectory && await pathExists(config.assetsDirectory) ? config.assetsDirectory : null;
+  const { config, modules, assetsDir } = built;
   return {
     config: {
       main: config.main,
@@ -240125,7 +240170,7 @@ async function resolveWorkerBuild(projectRoot, progress) {
       compatibility_flags: config.compatibilityFlags,
       assets: buildAssetsConfig(config.assetsConfig, progress)
     },
-    modules: await collectModules(config),
+    modules,
     assetsDir
   };
 }
@@ -246669,6 +246714,13 @@ async function resolveGitHash(projectRoot, explicit) {
   }
   return hash;
 }
+async function resolveProvenanceCommit(projectRoot, explicit) {
+  if (explicit) {
+    return await resolveGitHash(projectRoot, explicit);
+  }
+  const hash = await gitHead(projectRoot);
+  return hash && isGitCommitHash(hash) ? hash : undefined;
+}
 async function gitHead(projectRoot) {
   try {
     const { stdout } = await execa("git", ["rev-parse", "HEAD"], {
@@ -246757,6 +246809,49 @@ async function deployAll(projectData, options) {
   }
   return { connectorResults };
 }
+// src/core/project/target.ts
+import { dirname as dirname13, join as join19, resolve as resolve6 } from "node:path";
+var DEFAULT_BUILD_COMMAND = "npm run build";
+var DEFAULT_OUTPUT_DIRECTORY = "dist";
+async function resolveBuildTarget(projectRoot, overrides = {}) {
+  const project = await readSettingsIfPresent(projectRoot);
+  const root = project?.root ?? projectRoot ?? process.cwd();
+  return {
+    root,
+    configDir: project ? dirname13(project.configPath) : join19(root, PROJECT_SUBDIR),
+    buildCommand: project ? project.site?.buildCommand : DEFAULT_BUILD_COMMAND,
+    outputDir: outputDirectory(project, root, overrides.outputDir),
+    entitiesDir: project?.entitiesDir ?? "entities",
+    agentsDir: project?.agentsDir ?? "agents"
+  };
+}
+function outputDirectory(project, root, override) {
+  const configured = override ?? (project ? project.site?.outputDirectory : DEFAULT_OUTPUT_DIRECTORY);
+  return configured ? resolve6(root, configured) : null;
+}
+function requireOutputDir(target) {
+  if (target.outputDir === null) {
+    throw new ConfigNotFoundError("No site configuration found.", {
+      hints: [
+        {
+          message: `Add 'site.outputDirectory' to your config.jsonc (e.g., "site": { "outputDirectory": "dist" })`
+        },
+        { message: `Or pass --output-dir <dir>, relative to ${target.root}` }
+      ]
+    });
+  }
+  return target.outputDir;
+}
+async function readSettingsIfPresent(projectRoot) {
+  try {
+    return await readProjectSettings(projectRoot);
+  } catch (error) {
+    if (error instanceof ConfigNotFoundError) {
+      return null;
+    }
+    throw error;
+  }
+}
 // src/core/clients/base44-client.ts
 var retriedRequests = new WeakSet;
 async function captureRequestBody(request, options) {
@@ -247038,6 +247133,12 @@ async function ensureAppContext(ctx, options = {}) {
   ctx.app = appContext;
   ctx.errorReporter.setContext({ appId: appContext.id });
 }
+function requireApp(ctx) {
+  if (!ctx.app) {
+    throw new InternalError("This command read an app context it never resolved — it is declared with requireAppContext: false.");
+  }
+  return ctx.app;
+}
 
 // src/cli/utils/version-check.ts
 async function checkForUpgrade() {
@@ -247221,6 +247322,10 @@ function writeJsonError(error) {
   const envelope = {
     error: error instanceof Error ? error.message : String(error)
   };
+  const step = stepOf(error);
+  if (step !== undefined) {
+    envelope.step = step;
+  }
   if (isCLIError(error)) {
     envelope.code = error.code;
     if (error.details.length > 0) {
@@ -247590,7 +247695,7 @@ function getActorsCommand() {
 }
 
 // src/cli/commands/agent-skills/pull.ts
-import { dirname as dirname13, join as join19 } from "node:path";
+import { dirname as dirname14, join as join20 } from "node:path";
 // src/core/utils/dependencies.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
 function verifyDenoInstalled(context) {
@@ -247679,7 +247784,7 @@ async function pullAction({
   runTask
 }) {
   const { project } = await readProjectConfig();
-  const dir = join19(dirname13(project.configPath), project.agentSkillsDir);
+  const dir = join20(dirname14(project.configPath), project.agentSkillsDir);
   const remote = await runTask("Fetching agent skills from Base44", () => fetchAgentSkills(), {
     successMessage: "Agent skills fetched successfully",
     errorMessage: "Failed to fetch agent skills"
@@ -247735,14 +247840,14 @@ function getAgentSkillsCommand() {
 }
 
 // src/cli/commands/agents/pull.ts
-import { dirname as dirname14, join as join20 } from "node:path";
+import { dirname as dirname15, join as join21 } from "node:path";
 async function pullAgentsAction({
   log,
   runTask
 }) {
   const { project } = await readProjectConfig();
-  const configDir = dirname14(project.configPath);
-  const agentsDir = join20(configDir, project.agentsDir);
+  const configDir = dirname15(project.configPath);
+  const agentsDir = join21(configDir, project.agentsDir);
   const remoteAgents = await runTask("Fetching agents from Base44", async () => {
     return await fetchAgents();
   }, {
@@ -247812,12 +247917,12 @@ function getAgentsCommand() {
 }
 
 // src/cli/commands/auth/password-login.ts
-import { dirname as dirname15, join as join21 } from "node:path";
+import { dirname as dirname16, join as join22 } from "node:path";
 async function passwordLoginAction({ log, runTask }, action) {
   const shouldEnable = action === "enable";
   const { project } = await readProjectConfig();
-  const configDir = dirname15(project.configPath);
-  const authDir = join21(configDir, project.authDir);
+  const configDir = dirname16(project.configPath);
+  const authDir = join22(configDir, project.authDir);
   const updated = await runTask("Updating local auth config", async () => {
     const current = await readAuthConfig(authDir) ?? DEFAULT_AUTH_CONFIG;
     const merged = { ...current, enableUsernamePassword: shouldEnable };
@@ -247837,14 +247942,14 @@ function getPasswordLoginCommand() {
 }
 
 // src/cli/commands/auth/pull.ts
-import { dirname as dirname16, join as join22 } from "node:path";
+import { dirname as dirname17, join as join23 } from "node:path";
 async function pullAuthAction({
   log,
   runTask
 }) {
   const { project } = await readProjectConfig();
-  const configDir = dirname16(project.configPath);
-  const authDir = join22(configDir, project.authDir);
+  const configDir = dirname17(project.configPath);
+  const authDir = join23(configDir, project.authDir);
   const remoteConfig = await runTask("Fetching auth config from Base44", async () => {
     return await pullAuthConfig();
   }, {
@@ -247908,7 +248013,7 @@ function getAuthPushCommand() {
 }
 
 // src/cli/commands/auth/social-login.ts
-import { dirname as dirname17, join as join23, resolve as resolve6 } from "node:path";
+import { dirname as dirname18, join as join24, resolve as resolve7 } from "node:path";
 var PROVIDER_LABELS = {
   google: "Google",
   microsoft: "Microsoft",
@@ -247948,7 +248053,7 @@ async function socialLoginAction({ log, isNonInteractive, runTask }, provider, a
   let clientSecret;
   if (useCustomOAuth && oauth && oauthCli && hasSecretOptions(options)) {
     if (options.envFile) {
-      const secrets = await parseEnvFile(resolve6(options.envFile));
+      const secrets = await parseEnvFile(resolve7(options.envFile));
       const value = secrets[oauthCli.envVar];
       if (!value) {
         throw new InvalidInputError(`Key "${oauthCli.envVar}" not found in ${options.envFile}.`);
@@ -247978,8 +248083,8 @@ async function socialLoginAction({ log, isNonInteractive, runTask }, provider, a
     }
   }
   const { project } = await readProjectConfig();
-  const configDir = dirname17(project.configPath);
-  const authDir = join23(configDir, project.authDir);
+  const configDir = dirname18(project.configPath);
+  const authDir = join24(configDir, project.authDir);
   const { config: updated } = await runTask("Updating local auth config", async () => updateSocialLoginConfig(authDir, provider, shouldEnable, useCustomOAuth && options.clientId ? { clientId: options.clientId } : undefined));
   if (clientSecret) {
     await runTask("Saving client secret", async () => pushCustomOAuthSecret(provider, clientSecret));
@@ -248004,7 +248109,7 @@ function getSocialLoginCommand() {
 }
 
 // src/cli/commands/auth/sso.ts
-import { dirname as dirname18, join as join24, resolve as resolve7 } from "node:path";
+import { dirname as dirname19, join as join25, resolve as resolve8 } from "node:path";
 var SSOConfigFileSchema = object({
   provider: _enum(Object.values(KNOWN_SSO_PROVIDERS)),
   clientId: string2(),
@@ -248020,7 +248125,7 @@ var SSOConfigFileSchema = object({
   ssoName: string2().optional()
 });
 async function loadSSOConfigFile(filePath) {
-  const resolved = resolve7(filePath);
+  const resolved = resolve8(filePath);
   const raw = await readJsonFile(resolved);
   const result = SSOConfigFileSchema.safeParse(raw);
   if (!result.success) {
@@ -248108,7 +248213,7 @@ async function ssoEnableAction({ isNonInteractive, runTask }, options) {
   }
   let clientSecret;
   if (merged.envFile && !merged.clientSecret) {
-    const secrets = await parseEnvFile(resolve7(merged.envFile));
+    const secrets = await parseEnvFile(resolve8(merged.envFile));
     const value = secrets.sso_client_secret;
     if (!value) {
       throw new InvalidInputError(`Key "sso_client_secret" not found in ${merged.envFile}.`);
@@ -248167,8 +248272,8 @@ async function ssoEnableAction({ isNonInteractive, runTask }, options) {
     throw error;
   }
   const { project } = await readProjectConfig();
-  const configDir = dirname18(project.configPath);
-  const authDir = join24(configDir, project.authDir);
+  const configDir = dirname19(project.configPath);
+  const authDir = join25(configDir, project.authDir);
   await runTask("Updating local auth config", async () => updateSSOConfig(authDir, provider, true));
   await runTask("Saving SSO credentials", async () => pushSSOSecrets(secrets));
   return {
@@ -248183,8 +248288,8 @@ async function ssoDisableAction({ log, runTask }, options) {
     throw new InvalidInputError("Configuration options cannot be used with disable. To disable SSO: base44 auth sso disable");
   }
   const { project } = await readProjectConfig();
-  const configDir = dirname18(project.configPath);
-  const authDir = join24(configDir, project.authDir);
+  const configDir = dirname19(project.configPath);
+  const authDir = join25(configDir, project.authDir);
   const updated = await runTask("Updating local auth config", async () => updateSSOConfig(authDir, null, false));
   await runTask("Removing SSO credentials", async () => deleteSSOSecrets());
   if (!hasAnyLoginMethod(updated)) {
@@ -249066,13 +249171,13 @@ function getConnectorsListAvailableCommand() {
 }
 
 // src/cli/commands/connectors/pull.ts
-import { dirname as dirname19, join as join25, resolve as resolve8 } from "node:path";
+import { dirname as dirname20, join as join26, resolve as resolve9 } from "node:path";
 async function resolveConnectorsDir(options) {
   if (!getAppContext().projectRoot) {
-    return resolve8(options.dir ?? "connectors");
+    return resolve9(options.dir ?? "connectors");
   }
   const { project } = await readProjectConfig();
-  return join25(dirname19(project.configPath), project.connectorsDir);
+  return join26(dirname20(project.configPath), project.connectorsDir);
 }
 async function pullConnectorsAction({ log, runTask, jsonMode }, options) {
   const connectorsDir = await resolveConnectorsDir(options);
@@ -249113,10 +249218,10 @@ function getConnectorsPullCommand() {
 }
 
 // src/cli/commands/connectors/push.ts
-import { resolve as resolve9 } from "node:path";
+import { resolve as resolve10 } from "node:path";
 async function readConnectorsToPush(options) {
   if (!getAppContext().projectRoot) {
-    return readAllConnectors(resolve9(options.dir ?? "connectors"));
+    return readAllConnectors(resolve10(options.dir ?? "connectors"));
   }
   const { connectors } = await readProjectConfig();
   return connectors;
@@ -249459,11 +249564,11 @@ function getListCommand() {
 }
 
 // src/cli/commands/functions/pull.ts
-import { dirname as dirname20, join as join26 } from "node:path";
+import { dirname as dirname21, join as join27 } from "node:path";
 async function pullFunctionsAction({ log, runTask }, name) {
   const { project, functions } = await readProjectConfig();
-  const configDir = dirname20(project.configPath);
-  const functionsDir = join26(configDir, project.functionsDir);
+  const configDir = dirname21(project.configPath);
+  const functionsDir = join27(configDir, project.functionsDir);
   const pluginFunctionNames = new Set(functions.filter((fn) => fn.source.type === "plugin").map((fn) => fn.name));
   const remoteFunctions = await runTask("Fetching functions from Base44", async () => {
     const { functions } = await listDeployedFunctions();
@@ -249566,14 +249671,11 @@ async function maybeAskToBuild(isNonInteractive, buildCommand) {
 
 // src/cli/commands/project/build.ts
 async function buildAction(ctx) {
-  const { app } = ctx;
-  if (!app?.projectRoot) {
-    throw new ConfigInvalidError("base44 build requires a linked local project. Run it from a project with base44/.app.jsonc.");
-  }
-  const { project } = await readProjectConfig(app.projectRoot);
+  const app = requireApp(ctx);
+  const target = await resolveBuildTarget(app.projectRoot);
   await runSiteBuild(ctx, {
-    root: project.root,
-    buildCommand: project.site?.buildCommand,
+    root: target.root,
+    buildCommand: target.buildCommand,
     appId: app.id
   });
   return {
@@ -249581,15 +249683,15 @@ async function buildAction(ctx) {
   };
 }
 function getBuildCommand() {
-  return new Base44Command("build").description("Build the site with the Base44 app id injected").action(buildAction);
+  return new Base44Command("build", { requireAuth: false }).description("Build the site with the Base44 app id injected").action(buildAction);
 }
 
 // src/cli/commands/project/create.ts
-import { basename as basename6, resolve as resolve10 } from "node:path";
+import { basename as basename6, resolve as resolve11 } from "node:path";
 var import_kebabCase = __toESM(require_kebabCase(), 1);
 
 // src/cli/commands/project/scaffold-shared.ts
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 var DEFAULT_TEMPLATE_ID = "backend-only";
 async function getTemplateById(templateId) {
   const templates = await listTemplates();
@@ -249652,7 +249754,7 @@ async function completeProjectSetup({
           env: { VITE_BASE44_APP_ID: projectId }
         })`${buildCommand}`;
         updateMessage("Deploying site...");
-        return await deploySite(join27(resolvedPath, outputDirectory));
+        return await deploySite(join28(resolvedPath, outputDirectory));
       }, {
         successMessage: theme.colors.base44Orange("Site deployed successfully"),
         errorMessage: "Failed to deploy site"
@@ -249781,7 +249883,7 @@ async function createInteractive(options, ctx) {
   }, ctx);
 }
 async function createNonInteractive(options, ctx) {
-  ctx.log.info(`Creating a new project at ${resolve10(options.path)}`);
+  ctx.log.info(`Creating a new project at ${resolve11(options.path)}`);
   const template = await getTemplateById(options.template ?? DEFAULT_TEMPLATE_ID);
   return await executeCreate({
     template,
@@ -249805,7 +249907,7 @@ async function executeCreate({
 }, ctx) {
   const { log, runTask } = ctx;
   const name = rawName.trim();
-  const resolvedPath = resolve10(projectPath);
+  const resolvedPath = resolve11(projectPath);
   const organizationId = await resolveWorkspaceId(ctx, flagWorkspaceId, isInteractive);
   const { projectId } = await runTask("Setting up your project...", async () => {
     return await createProjectFiles({
@@ -250446,7 +250548,7 @@ function getLogsCommand() {
 }
 
 // src/cli/commands/project/scaffold.ts
-import { basename as basename7, resolve as resolve11 } from "node:path";
+import { basename as basename7, resolve as resolve12 } from "node:path";
 function resolveAppId(options) {
   const appId = options.appId;
   if (!appId) {
@@ -250462,7 +250564,7 @@ function resolveAppId(options) {
 async function scaffoldAction(ctx, name, options, command) {
   const { log, runTask } = ctx;
   const appId = resolveAppId(command.optsWithGlobals());
-  const resolvedPath = resolve11("./");
+  const resolvedPath = resolve12("./");
   const projectName = (name ?? basename7(resolvedPath)).trim();
   const template = await getTemplateById("backend-only");
   log.info(`Scaffolding project at ${resolvedPath}`);
@@ -250510,6 +250612,321 @@ function getVisibilityCommand() {
   ])).action(setVisibility);
 }
 
+// src/core/version/schema.ts
+var DeclareVersionResponseSchema = object({
+  session_id: string2(),
+  uploads: array(object({
+    path: string2(),
+    url: string2(),
+    content_type: string2(),
+    content_length: number2(),
+    checksum_sha256: string2()
+  }))
+}).transform((data) => ({
+  sessionId: data.session_id,
+  uploads: data.uploads.map((upload) => ({
+    path: upload.path,
+    url: upload.url,
+    contentType: upload.content_type,
+    contentLength: upload.content_length,
+    checksumSha256: upload.checksum_sha256
+  }))
+}));
+var CreateVersionResponseSchema = object({
+  version_id: string2(),
+  manifest_hash: string2()
+}).transform((data) => ({
+  versionId: data.version_id,
+  manifestHash: data.manifest_hash
+}));
+var EnvironmentResponseSchema = object({
+  name: string2(),
+  version_id: string2(),
+  manifest_hash: string2(),
+  deployment_id: string2()
+}).transform((data) => ({
+  name: data.name,
+  versionId: data.version_id,
+  manifestHash: data.manifest_hash,
+  deploymentId: data.deployment_id
+}));
+
+// src/core/version/api.ts
+var DEFAULT_VERSION_UPLOAD_CONCURRENCY = 8;
+var MAX_VERSION_UPLOAD_CONCURRENCY = 16;
+function declaredFile({ path, size, digest }) {
+  return { path, size, digest };
+}
+function declaredModule(module) {
+  return { ...declaredFile(module), type: module.type };
+}
+function declaredAssetsConfig(config) {
+  const stated = {
+    html_handling: config?.htmlHandling ?? null,
+    not_found_handling: config?.notFoundHandling ?? null,
+    run_worker_first: config?.runWorkerFirst ?? null,
+    headers: config?.headers ?? null,
+    redirects: config?.redirects ?? null
+  };
+  return Object.values(stated).every((v) => v === null) ? null : stated;
+}
+async function post(path, json, doing) {
+  try {
+    return await getAppClient().post(path, { json, timeout: 180000 });
+  } catch (error) {
+    throw await ApiError.fromHttpError(error, doing);
+  }
+}
+var KEYED_RETRY = {
+  limit: 3,
+  methods: ["patch"],
+  statusCodes: [408, 500, 502, 503, 504],
+  retryOnTimeout: true
+};
+async function patch(path, json, doing, retry) {
+  try {
+    return await getAppClient().patch(path, {
+      json,
+      timeout: 180000,
+      ...retry ? { retry } : {}
+    });
+  } catch (error) {
+    throw await ApiError.fromHttpError(error, doing);
+  }
+}
+function parse10(schema, body, what) {
+  const result = schema.safeParse(body);
+  if (!result.success) {
+    throw new SchemaValidationError(`Invalid ${what} response from server`, result.error);
+  }
+  return result.data;
+}
+async function createVersion(artifacts, options = {}) {
+  const declared = parse10(DeclareVersionResponseSchema, await (await post("versions", {
+    static_bundle: artifacts.files.map(declaredFile),
+    ...artifacts.siteWorker ? {
+      site_worker: {
+        main: artifacts.siteWorker.main,
+        modules: artifacts.siteWorker.modules.map(declaredModule),
+        assets: artifacts.siteWorker.assets.map(declaredFile),
+        compatibility_date: artifacts.siteWorker.compatibilityDate,
+        compatibility_flags: artifacts.siteWorker.compatibilityFlags,
+        assets_config: declaredAssetsConfig(artifacts.siteWorker.assetsConfig)
+      }
+    } : {},
+    entities: artifacts.entities,
+    agents: artifacts.agents,
+    source_commit: options.sourceCommit
+  }, "declaring a version")).json(), "declare");
+  const declaredFiles = [
+    ...artifacts.files,
+    ...artifacts.siteWorker?.modules ?? [],
+    ...artifacts.siteWorker?.assets ?? []
+  ];
+  options.progress?.onDeclared?.({ fileCount: declaredFiles.length });
+  if (declared.uploads.length !== declaredFiles.length) {
+    throw new InternalError(`Declared ${declaredFiles.length} files but the server signed ${declared.uploads.length} upload URLs.`);
+  }
+  const drifted = declared.uploads.findIndex((upload, index) => upload.path !== declaredFiles[index].path);
+  if (drifted !== -1) {
+    throw new InternalError(`Upload ${drifted} is signed for ${declared.uploads[drifted].path}, but that slot declared ${declaredFiles[drifted].path}.`);
+  }
+  let uploadedFiles = 0;
+  await pMap(declared.uploads, async (upload, index) => {
+    await putPresigned(upload, declaredFiles[index].absolutePath);
+    uploadedFiles++;
+    options.progress?.onUpload?.({
+      uploadedFiles,
+      totalFiles: declared.uploads.length
+    });
+  }, { concurrency: options.concurrency ?? DEFAULT_VERSION_UPLOAD_CONCURRENCY });
+  return parse10(CreateVersionResponseSchema, await (await post(`versions/${encodeURIComponent(declared.sessionId)}/finalize`, {}, "creating a version")).json(), "create version");
+}
+async function setEnvironmentVersion(environment, versionId, options = {}) {
+  return parse10(EnvironmentResponseSchema, await (await patch(`environments/${encodeURIComponent(environment)}`, {
+    version_id: versionId,
+    ...options.idempotencyKey ? { idempotency_key: options.idempotencyKey } : {}
+  }, "setting the environment's version", options.idempotencyKey ? KEYED_RETRY : undefined)).json(), "environment");
+}
+// src/core/version/artifacts.ts
+import { createHash as createHash2 } from "node:crypto";
+import { join as join29, resolve as resolve13 } from "node:path";
+var MAX_FILE_COUNT = 50000;
+var HASH_CONCURRENCY = 32;
+var ENTRY2 = "index.html";
+async function digestFile(absolutePath) {
+  const hash = await hashFileInto(createHash2("sha256"), absolutePath);
+  return `sha256:${hash.digest("hex")}`;
+}
+async function collectBuildOutput(outputDir, options = {}) {
+  const found = await describeBuildOutput(outputDir);
+  if (found.length > MAX_FILE_COUNT) {
+    throw new InvalidInputError(`Too many files: found ${found.length}, the limit is ${MAX_FILE_COUNT}.`);
+  }
+  if (options.entryFile) {
+    if (found.length === 0) {
+      throw new InvalidInputError(`No files found in ${outputDir}. Build the site before creating a version.`, {
+        hints: [
+          { message: "Run 'base44 build' first", command: "base44 build" }
+        ]
+      });
+    }
+    if (!found.some((f) => f.path === options.entryFile)) {
+      throw new InvalidInputError(`${outputDir} has no ${options.entryFile}, so nothing could enter the site.`);
+    }
+  }
+  return await pMap(found, async (file) => ({ ...file, digest: await digestFile(file.absolutePath) }), { concurrency: HASH_CONCURRENCY });
+}
+async function collectSiteWorker(projectRoot) {
+  const built = await resolveFullStackBuild(projectRoot);
+  if (!built) {
+    return null;
+  }
+  const { config, modules, assetsDir } = built;
+  const entry = resolve13(config.configDir, config.main);
+  const main = modules.find((m) => m.absolutePath === entry)?.name;
+  if (!main) {
+    throw new InvalidInputError(`The Worker's entry module ${config.main} is not among the ${modules.length} modules collected from ${config.configDir}.`);
+  }
+  return {
+    main,
+    modules: await pMap(modules, async ({ name, absolutePath, size, type }) => ({
+      path: name,
+      absolutePath,
+      size,
+      digest: await digestFile(absolutePath),
+      type
+    }), { concurrency: HASH_CONCURRENCY }),
+    assets: assetsDir ? await collectBuildOutput(assetsDir) : [],
+    compatibilityDate: config.compatibilityDate,
+    compatibilityFlags: config.compatibilityFlags,
+    assetsConfig: config.assetsConfig
+  };
+}
+async function readRawResources(dir) {
+  if (!await pathExists(dir)) {
+    return {};
+  }
+  const files = await globby(`**/*.${CONFIG_FILE_EXTENSION_GLOB}`, {
+    cwd: dir,
+    onlyFiles: true,
+    followSymbolicLinks: false
+  });
+  const payloads = {};
+  for (const relativePath of files.sort()) {
+    const name = relativePath.replace(/\.jsonc?$/, "");
+    payloads[name] = await readJsonFile(join29(dir, ...relativePath.split("/")));
+  }
+  return payloads;
+}
+async function collectResources(configDir, dirs) {
+  const [entities, agents] = await Promise.all([
+    readRawResources(join29(configDir, dirs.entitiesDir)),
+    readRawResources(join29(configDir, dirs.agentsDir))
+  ]);
+  return { entities, agents };
+}
+async function collectArtifacts(target) {
+  const siteWorker = await collectSiteWorker(target.root);
+  return {
+    files: siteWorker ? [] : await collectBuildOutput(requireOutputDir(target), {
+      entryFile: ENTRY2
+    }),
+    ...siteWorker ? { siteWorker } : {},
+    ...await collectResources(target.configDir, target)
+  };
+}
+// src/core/version/gate.ts
+var VERSIONS_API_ENV = "BASE44_VERSIONS_API";
+function versionsApiEnabled(env = process.env) {
+  const value = env[VERSIONS_API_ENV];
+  return value === "1" || value === "true";
+}
+// src/core/version/publish.ts
+import { randomUUID as randomUUID4 } from "node:crypto";
+var DEFAULT_ENVIRONMENT = "production";
+async function tagStep2(step, run) {
+  return await tagStep(step, run);
+}
+async function publishVersion(artifacts, options = {}) {
+  const version = await tagStep2("create_version", () => createVersion(artifacts, {
+    sourceCommit: options.sourceCommit,
+    concurrency: options.concurrency,
+    progress: options.progress
+  }));
+  const environment = await tagStep2("deploy", () => setEnvironmentVersion(options.target ?? DEFAULT_ENVIRONMENT, version.versionId, {
+    idempotencyKey: randomUUID4()
+  }));
+  return {
+    environment: environment.name,
+    versionId: environment.versionId,
+    manifestHash: environment.manifestHash,
+    deploymentId: environment.deploymentId
+  };
+}
+// src/cli/commands/versions/options.ts
+function outputDirOption() {
+  return new Option2("--output-dir <dir>", "Build output directory (defaults to the project's, else dist)");
+}
+function targetOption() {
+  return new Option2("--target <name>", "Environment to serve the version at");
+}
+function gitHashOption() {
+  return new Option2("--git-hash <hash>", "Commit the build came from (defaults to the checkout's HEAD)").argParser((value) => {
+    if (!isGitCommitHash(value)) {
+      throw new InvalidArgumentError2("Expected a git commit hash (7-64 hex chars).");
+    }
+    return value;
+  });
+}
+function concurrencyOption() {
+  return new Option2("--concurrency <n>", "Parallel file uploads").default(DEFAULT_VERSION_UPLOAD_CONCURRENCY).argParser((value) => {
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < 1 || parsed > MAX_VERSION_UPLOAD_CONCURRENCY) {
+      throw new InvalidArgumentError2(`Expected a whole number between 1 and ${MAX_VERSION_UPLOAD_CONCURRENCY}.`);
+    }
+    return parsed;
+  });
+}
+
+// src/cli/commands/publish.ts
+async function publishAction(ctx, options) {
+  const { runTask, log, jsonMode } = ctx;
+  const app = requireApp(ctx);
+  const target = await tagStep2("create_version", () => resolveBuildTarget(app.projectRoot, { outputDir: options.outputDir }));
+  if (options.build !== false) {
+    await tagStep2("build", () => runSiteBuild(ctx, {
+      root: target.root,
+      buildCommand: target.buildCommand,
+      appId: app.id
+    }));
+  }
+  const gitHash = await resolveProvenanceCommit(target.root, options.gitHash);
+  const result = await runTask("Publishing...", async (updateMessage) => {
+    const artifacts = await tagStep2("create_version", () => collectArtifacts(target));
+    return await publishVersion(artifacts, {
+      sourceCommit: gitHash,
+      target: options.target,
+      concurrency: options.concurrency,
+      progress: {
+        onDeclared: ({ fileCount }) => updateMessage(`Uploading ${fileCount} files`),
+        onUpload: ({ uploadedFiles, totalFiles }) => updateMessage(`Uploaded ${uploadedFiles} of ${totalFiles} files`)
+      }
+    });
+  }, { successMessage: "Published", errorMessage: "Publish failed" });
+  if (!jsonMode) {
+    log.message(theme.styles.dim(`version ${result.versionId}`));
+  }
+  return {
+    outroMessage: `${result.environment} now serves ${result.versionId}`,
+    stdout: jsonMode ? `${JSON.stringify(result, null, 2)}
+` : undefined
+  };
+}
+function getPublishCommand() {
+  return new Base44Command("publish").description("Build the app, record it as a version, and serve that version").option("--no-build", "Publish the existing build output without rebuilding").addOption(outputDirOption()).addOption(targetOption()).addOption(gitHashOption()).addOption(concurrencyOption()).action(publishAction);
+}
+
 // src/core/resources/sandbox/schema.ts
 var FileErrorSchema = object({
   code: string2(),
@@ -250895,7 +251312,7 @@ function getSecretsListCommand() {
 }
 
 // src/cli/commands/secrets/set.ts
-import { resolve as resolve12 } from "node:path";
+import { resolve as resolve14 } from "node:path";
 function parseEntries(entries) {
   const secrets = {};
   for (const entry of entries) {
@@ -250926,7 +251343,7 @@ async function setSecretsAction({ log, runTask }, entries, options) {
   validateInput(entries, options);
   let secrets;
   if (options.envFile) {
-    secrets = await parseEnvFile(resolve12(options.envFile));
+    secrets = await parseEnvFile(resolve14(options.envFile));
     if (Object.keys(secrets).length === 0) {
       throw new InvalidInputError("The env file contains no valid KEY=VALUE entries.");
     }
@@ -250955,7 +251372,7 @@ function getSecretsCommand() {
 }
 
 // src/cli/commands/site/deploy.ts
-import { resolve as resolve13 } from "node:path";
+import { resolve as resolve15 } from "node:path";
 async function deployAction2(ctx, options) {
   const { isNonInteractive } = ctx;
   if (isNonInteractive && !options.yes) {
@@ -251033,7 +251450,7 @@ async function deployTarball({ runTask }, project) {
 }
 function siteOutputDir(project) {
   const outputDirectory = project.site?.outputDirectory;
-  return outputDirectory ? resolve13(project.root, outputDirectory) : null;
+  return outputDirectory ? resolve15(project.root, outputDirectory) : null;
 }
 function getSiteDeployCommand() {
   const command = new Base44Command("deploy").description("Deploy built site files to Base44 hosting").option("-y, --yes", "Skip confirmation prompt").option("--build", "Build the site before deploying (skips the prompt)").option("--no-build", "Deploy without building (skips the prompt)");
@@ -251165,10 +251582,10 @@ function toPascalCase(name) {
   return name.split(/[-_\s]+/).map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join("");
 }
 // src/core/types/update-project.ts
-import { join as join30 } from "node:path";
+import { join as join33 } from "node:path";
 var TYPES_INCLUDE_PATH = `${PROJECT_SUBDIR}/${TYPES_OUTPUT_SUBDIR}/*.d.ts`;
 async function updateProjectConfig(projectRoot) {
-  const tsconfigPath = join30(projectRoot, "tsconfig.json");
+  const tsconfigPath = join33(projectRoot, "tsconfig.json");
   if (!await pathExists(tsconfigPath)) {
     return false;
   }
@@ -251217,6 +251634,59 @@ function getTypesCommand() {
   return new Command2("types").description("Manage TypeScript type generation").addCommand(getTypesGenerateCommand());
 }
 
+// src/cli/commands/versions/create.ts
+async function createAction2(ctx, options) {
+  const { runTask, jsonMode } = ctx;
+  const target = await resolveBuildTarget(requireApp(ctx).projectRoot, {
+    outputDir: options.outputDir
+  });
+  const gitHash = await resolveProvenanceCommit(target.root, options.gitHash);
+  const version = await runTask("Creating version...", async (updateMessage) => await createVersion(await collectArtifacts(target), {
+    sourceCommit: gitHash,
+    concurrency: options.concurrency,
+    progress: {
+      onDeclared: ({ fileCount }) => updateMessage(`Uploading ${fileCount} files`),
+      onUpload: ({ uploadedFiles, totalFiles }) => updateMessage(`Uploaded ${uploadedFiles} of ${totalFiles} files`)
+    }
+  }), {
+    successMessage: "Version created",
+    errorMessage: "Create version failed"
+  });
+  return {
+    outroMessage: `Version ${version.versionId} (${version.manifestHash})`,
+    stdout: jsonMode ? `${JSON.stringify(version, null, 2)}
+` : undefined
+  };
+}
+function getVersionCreateCommand() {
+  return new Base44Command("create").description("Record the built output as a version, without deploying it").addOption(outputDirOption()).addOption(gitHashOption()).addOption(concurrencyOption()).action(createAction2);
+}
+
+// src/cli/commands/versions/deploy.ts
+import { randomUUID as randomUUID5 } from "node:crypto";
+async function deployAction3({ runTask, jsonMode }, versionId, options) {
+  const environment = options.target ?? DEFAULT_ENVIRONMENT;
+  const result = await runTask(`Pointing ${environment} at ${versionId}...`, async () => await setEnvironmentVersion(environment, versionId, {
+    idempotencyKey: randomUUID5()
+  }), {
+    successMessage: "Environment updated",
+    errorMessage: "Could not update the environment"
+  });
+  return {
+    outroMessage: `${result.name} now serves ${result.versionId}`,
+    stdout: jsonMode ? `${JSON.stringify(result, null, 2)}
+` : undefined
+  };
+}
+function getVersionDeployCommand() {
+  return new Base44Command("deploy").description("Point an environment at an already-recorded version (also the rollback)").argument("<version-id>", "The version to serve").addOption(targetOption()).action(deployAction3);
+}
+
+// src/cli/commands/versions/index.ts
+function getVersionsCommand() {
+  return new Command2("versions").description("Record app versions and serve them").addCommand(getVersionCreateCommand()).addCommand(getVersionDeployCommand());
+}
+
 // src/core/resources/workflow/schema.ts
 var WorkflowRunStatusSchema = _enum([
   "running",
@@ -251633,7 +252103,7 @@ function createDevLogger(label, labelColor = theme.styles.dim) {
 // src/cli/dev/dev-server/main.ts
 var import_cors = __toESM(require_lib4(), 1);
 var import_express6 = __toESM(require_express(), 1);
-import { dirname as dirname26, join as join36 } from "node:path";
+import { dirname as dirname27, join as join38 } from "node:path";
 
 // ../../node_modules/get-port/index.js
 import net from "node:net";
@@ -251763,7 +252233,7 @@ var $tmpName = promisify11(tmp.tmpName);
 
 // src/cli/dev/dev-server/function-manager.ts
 import { spawn as spawn2 } from "node:child_process";
-import { dirname as dirname23, join as join31 } from "node:path";
+import { dirname as dirname24, join as join34 } from "node:path";
 import { pathToFileURL } from "node:url";
 
 // src/cli/dev/dev-server/base-function-manager.ts
@@ -251868,7 +252338,7 @@ class FunctionManager extends BaseFunctionManager {
   }
   spawnFunction(func, port) {
     this.logger.log(`Spawning function "${func.name}" on port ${port}`);
-    const importMapPath = join31(dirname23(this.wrapperPath), "import-map.json");
+    const importMapPath = join34(dirname24(this.wrapperPath), "import-map.json");
     const process2 = spawn2("deno", ["run", "--allow-all", "--import-map", importMapPath, this.wrapperPath], {
       env: {
         ...globalThis.process.env,
@@ -251942,7 +252412,7 @@ class FunctionManager extends BaseFunctionManager {
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { isBuiltin } from "node:module";
 import { homedir as homedir3 } from "node:os";
-import { join as join33 } from "node:path";
+import { join as join35 } from "node:path";
 import { pathToFileURL as pathToFileURL6 } from "node:url";
 var depsPromise;
 function loadDeps() {
@@ -252063,9 +252533,9 @@ export default {
 };
 `;
 function ensureBundlerConfig() {
-  const dir = join33(homedir3(), ".base44", "function-bundler");
+  const dir = join35(homedir3(), ".base44", "function-bundler");
   mkdirSync2(dir, { recursive: true });
-  const configPath = join33(dir, "deno.json");
+  const configPath = join35(dir, "deno.json");
   writeFileSync2(configPath, `${JSON.stringify({ nodeModulesDir: "auto" }, null, 2)}
 `);
   return configPath;
@@ -253446,11 +253916,11 @@ async function createEntityRoutes(db, logger, broadcast) {
 // src/cli/dev/dev-server/routes/integrations.ts
 var import_express5 = __toESM(require_express(), 1);
 var import_multer = __toESM(require_multer(), 1);
-import { createHash as createHash2, randomUUID as randomUUID4 } from "node:crypto";
+import { createHash as createHash3, randomUUID as randomUUID6 } from "node:crypto";
 import fs28 from "node:fs";
 import path18 from "node:path";
 function createFileToken(fileUri) {
-  return createHash2("sha256").update(fileUri).digest("hex");
+  return createHash3("sha256").update(fileUri).digest("hex");
 }
 function createIntegrationRoutes(mediaFilesDir, baseUrl, remoteProxy, logger) {
   const router = import_express5.Router({ mergeParams: true });
@@ -253463,14 +253933,14 @@ function createIntegrationRoutes(mediaFilesDir, baseUrl, remoteProxy, logger) {
     destination: mediaFilesDir,
     filename: (_req, file, cb) => {
       const ext = path18.extname(file.originalname);
-      cb(null, `${randomUUID4()}${ext}`);
+      cb(null, `${randomUUID6()}${ext}`);
     }
   });
   const privateStorage = import_multer.default.diskStorage({
     destination: privateFilesDir,
     filename: (_req, file, cb) => {
       const ext = path18.extname(file.originalname);
-      cb(null, `${randomUUID4()}${ext}`);
+      cb(null, `${randomUUID6()}${ext}`);
     }
   });
   const upload = import_multer.default({ storage, limits: { fileSize: MAX_FILE_SIZE } });
@@ -255332,8 +255802,8 @@ async function createDevServer(options) {
     broadcastEntityEvent(io, appId, entityName, event);
   };
   const base44ConfigWatcher = new WatchBase44({
-    functions: join36(dirname26(project.configPath), project.functionsDir),
-    entities: join36(dirname26(project.configPath), project.entitiesDir)
+    functions: join38(dirname27(project.configPath), project.functionsDir),
+    entities: join38(dirname27(project.configPath), project.entitiesDir)
   }, devLogger);
   base44ConfigWatcher.on("change", async (name) => {
     try {
@@ -255730,7 +256200,7 @@ Examples:
 }
 
 // src/cli/commands/project/eject.ts
-import { resolve as resolve17 } from "node:path";
+import { resolve as resolve19 } from "node:path";
 var import_kebabCase2 = __toESM(require_kebabCase(), 1);
 async function eject(ctx, options, command) {
   const { log, runTask, isNonInteractive } = ctx;
@@ -255794,7 +256264,7 @@ async function eject(ctx, options, command) {
     Ne("Operation cancelled.");
     throw new CLIExitError(0);
   }
-  const resolvedPath = resolve17(selectedPath);
+  const resolvedPath = resolve19(selectedPath);
   await runTask("Downloading your project's code...", async (updateMessage) => {
     await createProjectFilesForExistingProject({
       projectId,
@@ -255878,6 +256348,10 @@ function createProgram(context) {
   program.addCommand(getBranchesCommand());
   program.addCommand(getAuthCommand());
   program.addCommand(getSiteCommand());
+  if (versionsApiEnabled()) {
+    program.addCommand(getPublishCommand());
+    program.addCommand(getVersionsCommand());
+  }
   program.addCommand(getTypesCommand());
   program.addCommand(getExecCommand());
   program.addCommand(getDevCommand());
@@ -255890,7 +256364,7 @@ var import_detect_agent = __toESM(require_dist5(), 1);
 import { release, type } from "node:os";
 
 // ../../node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname as dirname27, posix, sep as sep2 } from "path";
+import { dirname as dirname28, posix, sep as sep2 } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -255899,7 +256373,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname27(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname28(process.argv[1]) : process.cwd(), isWindows = sep2 === "\\") {
   const normalizedBase = isWindows ? normalizeWindowsPath2(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -259888,9 +260362,9 @@ function addCommandInfoToErrorReporter(program, errorReporter) {
   });
 }
 // src/cli/index.ts
-var __dirname4 = dirname28(fileURLToPath6(import.meta.url));
+var __dirname4 = dirname29(fileURLToPath6(import.meta.url));
 async function runCLI(options) {
-  ensureNpmAssets(join37(__dirname4, "../assets"));
+  ensureNpmAssets(join39(__dirname4, "../assets"));
   const errorReporter = new ErrorReporter;
   errorReporter.registerProcessErrorHandlers();
   const jsonMode = process.argv.includes("--json");
@@ -259929,4 +260403,4 @@ export {
   runCLI
 };
 
-//# debugId=3CF1426A84AA996C64756E2164756E21
+//# debugId=4A0444E0B8A1C5CD64756E2164756E21