@base44-preview/cli 0.1.8-pr.589.9d22ef2 → 0.1.9-pr.584.ee1769c

package/dist/cli/index.js

@@ -23352,15 +23352,15 @@ var require_windows = __commonJS((exports, module) => {
     }
     return false;
   }
-  function checkStat(stat2, path11, options) {
-    if (!stat2.isSymbolicLink() && !stat2.isFile()) {
+  function checkStat(stat3, path11, options) {
+    if (!stat3.isSymbolicLink() && !stat3.isFile()) {
       return false;
     }
     return checkPathExt(path11, options);
   }
   function isexe(path11, options, cb) {
-    fs14.stat(path11, function(er, stat2) {
-      cb(er, er ? false : checkStat(stat2, path11, options));
+    fs14.stat(path11, function(er, stat3) {
+      cb(er, er ? false : checkStat(stat3, path11, options));
     });
   }
   function sync(path11, options) {
@@ -23374,20 +23374,20 @@ var require_mode = __commonJS((exports, module) => {
   isexe.sync = sync;
   var fs14 = __require("fs");
   function isexe(path11, options, cb) {
-    fs14.stat(path11, function(er, stat2) {
-      cb(er, er ? false : checkStat(stat2, options));
+    fs14.stat(path11, function(er, stat3) {
+      cb(er, er ? false : checkStat(stat3, options));
     });
   }
   function sync(path11, options) {
     return checkStat(fs14.statSync(path11), options);
   }
-  function checkStat(stat2, options) {
-    return stat2.isFile() && checkMode(stat2, options);
+  function checkStat(stat3, options) {
+    return stat3.isFile() && checkMode(stat3, options);
   }
-  function checkMode(stat2, options) {
-    var mod = stat2.mode;
-    var uid = stat2.uid;
-    var gid = stat2.gid;
+  function checkMode(stat3, options) {
+    var mod = stat3.mode;
+    var uid = stat3.uid;
+    var gid = stat3.gid;
     var myUid = options.uid !== undefined ? options.uid : process.getuid && process.getuid();
     var myGid = options.gid !== undefined ? options.gid : process.getgid && process.getgid();
     var u = parseInt("100", 8);
@@ -23419,12 +23419,12 @@ var require_isexe = __commonJS((exports, module) => {
       if (typeof Promise !== "function") {
         throw new TypeError("callback not provided");
       }
-      return new Promise(function(resolve4, reject) {
+      return new Promise(function(resolve6, reject) {
         isexe(path11, options || {}, function(er, is) {
           if (er) {
             reject(er);
           } else {
-            resolve4(is);
+            resolve6(is);
           }
         });
       });
@@ -23486,27 +23486,27 @@ var require_which = __commonJS((exports, module) => {
       opt = {};
     const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
     const found = [];
-    const step = (i) => new Promise((resolve4, reject) => {
+    const step = (i) => new Promise((resolve6, reject) => {
       if (i === pathEnv.length)
-        return opt.all && found.length ? resolve4(found) : reject(getNotFoundError(cmd));
+        return opt.all && found.length ? resolve6(found) : reject(getNotFoundError(cmd));
       const ppRaw = pathEnv[i];
       const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
       const pCmd = path11.join(pathPart, cmd);
       const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
-      resolve4(subStep(p, i, 0));
+      resolve6(subStep(p, i, 0));
     });
-    const subStep = (p, i, ii) => new Promise((resolve4, reject) => {
+    const subStep = (p, i, ii) => new Promise((resolve6, reject) => {
       if (ii === pathExt.length)
-        return resolve4(step(i + 1));
+        return resolve6(step(i + 1));
       const ext = pathExt[ii];
       isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
         if (!er && is) {
           if (opt.all)
             found.push(p + ext);
           else
-            return resolve4(p + ext);
+            return resolve6(p + ext);
         }
-        return resolve4(subStep(p, i, ii + 1));
+        return resolve6(subStep(p, i, ii + 1));
       });
     });
     return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
@@ -27034,7 +27034,7 @@ var require_lodash8 = __commonJS((exports, module) => {
         }
         return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
       });
-      function join17(array2, separator) {
+      function join18(array2, separator) {
         return array2 == null ? "" : nativeJoin.call(array2, separator);
       }
       function last(array2) {
@@ -28966,7 +28966,7 @@ __p += '`;
       lodash.isUndefined = isUndefined;
       lodash.isWeakMap = isWeakMap;
       lodash.isWeakSet = isWeakSet;
-      lodash.join = join17;
+      lodash.join = join18;
       lodash.kebabCase = kebabCase;
       lodash.last = last;
       lodash.lastIndexOf = lastIndexOf;
@@ -31176,7 +31176,7 @@ function cleanDoc(doc2) {
   return mapDoc(doc2, (currentDoc) => cleanDocFn(currentDoc));
 }
 function replaceEndOfLine(doc2, replacement = literalline) {
-  return mapDoc(doc2, (currentDoc) => typeof currentDoc === "string" ? join26(replacement, currentDoc.split(`
+  return mapDoc(doc2, (currentDoc) => typeof currentDoc === "string" ? join27(replacement, currentDoc.split(`
 `)) : currentDoc);
 }
 function canBreakFn(doc2) {
@@ -31256,7 +31256,7 @@ function indentIfBreak(contents, options) {
     negate: options.negate
   };
 }
-function join26(separator, docs) {
+function join27(separator, docs) {
   assertDoc(separator);
   assertDocArray(docs);
   const parts = [];
@@ -31967,7 +31967,7 @@ var init_doc = __esm(() => {
   MODE_FLAT = Symbol("MODE_FLAT");
   DOC_FILL_PRINTED_LENGTH = Symbol("DOC_FILL_PRINTED_LENGTH");
   builders = {
-    join: join26,
+    join: join27,
     line,
     softline,
     hardline,
@@ -120385,7 +120385,7 @@ function skipVoid(str, ptr, banNewLines, banComments) {
     ptr++;
   return banComments || c24 !== "#" ? ptr : skipVoid(str, skipComment(str, ptr), banNewLines);
 }
-function skipUntil(str, ptr, sep, end, banNewLines = false) {
+function skipUntil(str, ptr, sep2, end, banNewLines = false) {
   if (!end) {
     ptr = indexOfNewline(str, ptr);
     return ptr < 0 ? str.length : ptr;
@@ -120394,7 +120394,7 @@ function skipUntil(str, ptr, sep, end, banNewLines = false) {
     let c24 = str[i5];
     if (c24 === "#") {
       i5 = indexOfNewline(str, i5);
-    } else if (c24 === sep) {
+    } else if (c24 === sep2) {
       return i5 + 1;
     } else if (c24 === end || banNewLines && (c24 === `
 ` || c24 === "\r" && str[i5 + 1] === `
@@ -121174,7 +121174,7 @@ function getDataProtocolModuleFormat(parsed) {
   const { 1: mime } = /^([^/]+\/[^;,]+)[^,]*?(;base64)?,/.exec(parsed.pathname) || [null, null, null];
   return mimeToFormat(mime);
 }
-function extname(url3) {
+function extname2(url3) {
   const pathname = url3.pathname;
   let index = pathname.length;
   while (index--) {
@@ -121189,7 +121189,7 @@ function extname(url3) {
   return "";
 }
 function getFileProtocolModuleFormat(url3, _context, ignoreErrors) {
-  const value = extname(url3);
+  const value = extname2(url3);
   if (value === ".js") {
     const packageType = getPackageType(url3);
     if (packageType !== "none") {
@@ -123904,14 +123904,14 @@ async function printToDoc(originalText, options8) {
 async function printDocToString2(doc2, options8) {
   return printDocToStringWithoutNormalizeOptions(doc2, await normalize_format_options_default(options8));
 }
-function createParsersAndPrinters(modules) {
+function createParsersAndPrinters(modules2) {
   const parsers2 = /* @__PURE__ */ Object.create(null);
   const printers2 = /* @__PURE__ */ Object.create(null);
   for (const {
     importPlugin: importPlugin2,
     parsers: parserNames = [],
     printers: printerNames = []
-  } of modules) {
+  } of modules2) {
     const loadPlugin2 = async () => {
       const plugin = await importPlugin2();
       Object.assign(parsers2, plugin.parsers);
@@ -136881,7 +136881,7 @@ Expected it to be ${EXPECTED_TYPE_VALUES}.`;
       return mapDoc2(doc2, (currentDoc) => cleanDocFn2(currentDoc));
     }
     function replaceEndOfLine2(doc2, replacement = literalline2) {
-      return mapDoc2(doc2, (currentDoc) => typeof currentDoc === "string" ? join28(replacement, currentDoc.split(`
+      return mapDoc2(doc2, (currentDoc) => typeof currentDoc === "string" ? join29(replacement, currentDoc.split(`
 `)) : currentDoc);
     }
     function canBreakFn2(doc2) {
@@ -136967,7 +136967,7 @@ Expected it to be ${EXPECTED_TYPE_VALUES}.`;
         negate: options8.negate
       };
     }
-    function join28(separator, docs) {
+    function join29(separator, docs) {
       assertDoc2(separator);
       assertDocArray2(docs);
       const parts = [];
@@ -137632,7 +137632,7 @@ Expected it to be ${EXPECTED_TYPE_VALUES}.`;
       }
     }
     var builders2 = {
-      join: join28,
+      join: join29,
       line: line3,
       softline: softline2,
       hardline: hardline4,
@@ -138287,11 +138287,11 @@ var require_prettier = __commonJS((exports, module) => {
 var require_formatter = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve13) {
-        resolve13(value);
+      return value instanceof P9 ? value : new P9(function(resolve15) {
+        resolve15(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve13, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve15, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -138307,7 +138307,7 @@ var require_formatter = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve13(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve15(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -142960,7 +142960,7 @@ var require_url = __commonJS((exports) => {
   };
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.parse = undefined;
-  exports.resolve = resolve13;
+  exports.resolve = resolve15;
   exports.cwd = cwd;
   exports.getProtocol = getProtocol;
   exports.getExtension = getExtension;
@@ -142972,7 +142972,7 @@ var require_url = __commonJS((exports) => {
   exports.fromFileSystemPath = fromFileSystemPath;
   exports.toFileSystemPath = toFileSystemPath;
   exports.safePointerToPath = safePointerToPath;
-  exports.relative = relative4;
+  exports.relative = relative5;
   var convert_path_to_posix_1 = __importDefault(require_convert_path_to_posix());
   var path_1 = __importStar(__require("path"));
   var forwardSlashPattern = /\//g;
@@ -142988,7 +142988,7 @@ var require_url = __commonJS((exports) => {
   var urlDecodePatterns = [/%23/g, "#", /%24/g, "$", /%26/g, "&", /%2C/g, ",", /%40/g, "@"];
   var parse11 = (u4) => new URL(u4);
   exports.parse = parse11;
-  function resolve13(from, to5) {
+  function resolve15(from, to5) {
     const fromUrl = new URL((0, convert_path_to_posix_1.default)(from), "https://aaa.nonexistanturl.com");
     const resolvedUrl = new URL((0, convert_path_to_posix_1.default)(to5), fromUrl);
     const endSpaces = to5.match(/(\s*)$/)?.[1] || "";
@@ -143122,9 +143122,9 @@ var require_url = __commonJS((exports) => {
       return decodeURIComponent(value).replace(jsonPointerSlash, "/").replace(jsonPointerTilde, "~");
     });
   }
-  function relative4(from, to5) {
+  function relative5(from, to5) {
     if (!isFileSystemPath(from) || !isFileSystemPath(to5)) {
-      return resolve13(from, to5);
+      return resolve15(from, to5);
     }
     const fromDir = path_1.default.dirname(stripHash(from));
     const toPath4 = stripHash(to5);
@@ -143800,7 +143800,7 @@ var require_plugins = __commonJS((exports) => {
     let plugin;
     let lastError;
     let index = 0;
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       runNextPlugin();
       function runNextPlugin() {
         plugin = plugins[index++];
@@ -143828,7 +143828,7 @@ var require_plugins = __commonJS((exports) => {
         }
       }
       function onSuccess(result) {
-        resolve13({
+        resolve15({
           plugin,
           result
         });
@@ -145161,11 +145161,11 @@ var require_lib3 = __commonJS((exports) => {
 var require_resolver = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve13) {
-        resolve13(value);
+      return value instanceof P9 ? value : new P9(function(resolve15) {
+        resolve15(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve13, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve15, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -145181,7 +145181,7 @@ var require_resolver = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve13(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve15(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -145302,11 +145302,11 @@ var require_optionValidator = __commonJS((exports) => {
 var require_src3 = __commonJS((exports) => {
   var __awaiter = exports && exports.__awaiter || function(thisArg, _arguments, P9, generator) {
     function adopt(value) {
-      return value instanceof P9 ? value : new P9(function(resolve13) {
-        resolve13(value);
+      return value instanceof P9 ? value : new P9(function(resolve15) {
+        resolve15(value);
       });
     }
-    return new (P9 || (P9 = Promise))(function(resolve13, reject) {
+    return new (P9 || (P9 = Promise))(function(resolve15, reject) {
       function fulfilled(value) {
         try {
           step(generator.next(value));
@@ -145322,7 +145322,7 @@ var require_src3 = __commonJS((exports) => {
         }
       }
       function step(result) {
-        result.done ? resolve13(result.value) : adopt(result.value).then(fulfilled, rejected);
+        result.done ? resolve15(result.value) : adopt(result.value).then(fulfilled, rejected);
       }
       step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
@@ -146451,7 +146451,7 @@ var require_depd = __commonJS((exports, module) => {
    * Copyright(c) 2014-2018 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var relative4 = __require("path").relative;
+  var relative5 = __require("path").relative;
   module.exports = depd;
   var basePath = process.cwd();
   function containsNamespace(str, namespace) {
@@ -146647,7 +146647,7 @@ var require_depd = __commonJS((exports, module) => {
     return formatted;
   }
   function formatLocation(callSite) {
-    return relative4(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
+    return relative5(basePath, callSite[0]) + ":" + callSite[1] + ":" + callSite[2];
   }
   function getStack() {
     var limit = Error.stackTraceLimit;
@@ -150643,7 +150643,7 @@ var require_dbcs_data = __commonJS((exports, module) => {
 // ../../node_modules/iconv-lite/encodings/index.js
 var require_encodings = __commonJS((exports, module) => {
   var mergeModules = require_merge_exports();
-  var modules = [
+  var modules2 = [
     require_internal(),
     require_utf32(),
     require_utf16(),
@@ -150654,8 +150654,8 @@ var require_encodings = __commonJS((exports, module) => {
     require_dbcs_codec(),
     require_dbcs_data()
   ];
-  for (i5 = 0;i5 < modules.length; i5++) {
-    module = modules[i5];
+  for (i5 = 0;i5 < modules2.length; i5++) {
+    module = modules2[i5];
     mergeModules(exports, module);
   }
   var module;
@@ -150984,11 +150984,11 @@ var require_raw_body = __commonJS((exports, module) => {
     if (done) {
       return readStream(stream, encoding, length, limit, wrap(done));
     }
-    return new Promise(function executor(resolve13, reject) {
+    return new Promise(function executor(resolve15, reject) {
       readStream(stream, encoding, length, limit, function onRead2(err, buf) {
         if (err)
           return reject(err);
-        resolve13(buf);
+        resolve15(buf);
       });
     });
   }
@@ -160792,7 +160792,7 @@ var require_mime_types = __commonJS((exports) => {
    * MIT Licensed
    */
   var db2 = require_db();
-  var extname2 = __require("path").extname;
+  var extname3 = __require("path").extname;
   var mimeScore = require_mimeScore();
   var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/;
   var TEXT_TYPE_REGEXP = /^text\//i;
@@ -160849,7 +160849,7 @@ var require_mime_types = __commonJS((exports) => {
     if (!path18 || typeof path18 !== "string") {
       return false;
     }
-    var extension2 = extname2("x." + path18).toLowerCase().slice(1);
+    var extension2 = extname3("x." + path18).toLowerCase().slice(1);
     if (!extension2) {
       return false;
     }
@@ -164109,16 +164109,16 @@ var require_view = __commonJS((exports, module) => {
   var debug = require_src4()("express:view");
   var path18 = __require("node:path");
   var fs28 = __require("node:fs");
-  var dirname20 = path18.dirname;
+  var dirname21 = path18.dirname;
   var basename7 = path18.basename;
-  var extname2 = path18.extname;
-  var join29 = path18.join;
-  var resolve13 = path18.resolve;
+  var extname3 = path18.extname;
+  var join30 = path18.join;
+  var resolve15 = path18.resolve;
   module.exports = View;
   function View(name2, options8) {
     var opts = options8 || {};
     this.defaultEngine = opts.defaultEngine;
-    this.ext = extname2(name2);
+    this.ext = extname3(name2);
     this.name = name2;
     this.root = opts.root;
     if (!this.ext && !this.defaultEngine) {
@@ -164147,8 +164147,8 @@ var require_view = __commonJS((exports, module) => {
     debug('lookup "%s"', name2);
     for (var i5 = 0;i5 < roots.length && !path19; i5++) {
       var root2 = roots[i5];
-      var loc = resolve13(root2, name2);
-      var dir = dirname20(loc);
+      var loc = resolve15(root2, name2);
+      var dir = dirname21(loc);
       var file2 = basename7(loc);
       path19 = this.resolve(dir, file2);
     }
@@ -164172,16 +164172,16 @@ var require_view = __commonJS((exports, module) => {
     });
     sync = false;
   };
-  View.prototype.resolve = function resolve14(dir, file2) {
+  View.prototype.resolve = function resolve16(dir, file2) {
     var ext = this.ext;
-    var path19 = join29(dir, file2);
-    var stat3 = tryStat(path19);
-    if (stat3 && stat3.isFile()) {
+    var path19 = join30(dir, file2);
+    var stat4 = tryStat(path19);
+    if (stat4 && stat4.isFile()) {
       return path19;
     }
-    path19 = join29(dir, basename7(file2, ext), "index" + ext);
-    stat3 = tryStat(path19);
-    if (stat3 && stat3.isFile()) {
+    path19 = join30(dir, basename7(file2, ext), "index" + ext);
+    stat4 = tryStat(path19);
+    if (stat4 && stat4.isFile()) {
       return path19;
     }
   };
@@ -164232,9 +164232,9 @@ var require_etag = __commonJS((exports, module) => {
     }
     return obj && typeof obj === "object" && "ctime" in obj && toString2.call(obj.ctime) === "[object Date]" && "mtime" in obj && toString2.call(obj.mtime) === "[object Date]" && "ino" in obj && typeof obj.ino === "number" && "size" in obj && typeof obj.size === "number";
   }
-  function stattag(stat3) {
-    var mtime = stat3.mtime.getTime().toString(16);
-    var size = stat3.size.toString(16);
+  function stattag(stat4) {
+    var mtime = stat4.mtime.getTime().toString(16);
+    var size = stat4.size.toString(16);
     return '"' + size + "-" + mtime + '"';
   }
 });
@@ -166331,7 +166331,7 @@ var require_application = __commonJS((exports, module) => {
   var compileETag = require_utils10().compileETag;
   var compileQueryParser = require_utils10().compileQueryParser;
   var compileTrust = require_utils10().compileTrust;
-  var resolve13 = __require("node:path").resolve;
+  var resolve15 = __require("node:path").resolve;
   var once9 = require_once();
   var Router = require_router();
   var slice = Array.prototype.slice;
@@ -166385,7 +166385,7 @@ var require_application = __commonJS((exports, module) => {
     this.mountpath = "/";
     this.locals.settings = this.settings;
     this.set("view", View);
-    this.set("views", resolve13("views"));
+    this.set("views", resolve15("views"));
     this.set("jsonp callback name", "callback");
     if (env4 === "production") {
       this.enable("view cache");
@@ -167873,11 +167873,11 @@ var require_send = __commonJS((exports, module) => {
   var statuses = require_statuses();
   var Stream2 = __require("stream");
   var util2 = __require("util");
-  var extname2 = path18.extname;
-  var join29 = path18.join;
+  var extname3 = path18.extname;
+  var join30 = path18.join;
   var normalize2 = path18.normalize;
-  var resolve13 = path18.resolve;
-  var sep = path18.sep;
+  var resolve15 = path18.resolve;
+  var sep2 = path18.sep;
   var BYTES_RANGE_REGEXP = /^ *bytes=/;
   var MAX_MAXAGE = 60 * 60 * 24 * 365 * 1000;
   var UP_PATH_REGEXP = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
@@ -167905,7 +167905,7 @@ var require_send = __commonJS((exports, module) => {
     this._maxage = opts.maxAge || opts.maxage;
     this._maxage = typeof this._maxage === "string" ? ms9(this._maxage) : Number(this._maxage);
     this._maxage = !isNaN(this._maxage) ? Math.min(Math.max(0, this._maxage), MAX_MAXAGE) : 0;
-    this._root = opts.root ? resolve13(opts.root) : null;
+    this._root = opts.root ? resolve15(opts.root) : null;
   }
   util2.inherits(SendStream, Stream2);
   SendStream.prototype.error = function error48(status, err) {
@@ -168038,23 +168038,23 @@ var require_send = __commonJS((exports, module) => {
     var parts;
     if (root2 !== null) {
       if (path19) {
-        path19 = normalize2("." + sep + path19);
+        path19 = normalize2("." + sep2 + path19);
       }
       if (UP_PATH_REGEXP.test(path19)) {
         debug('malicious path "%s"', path19);
         this.error(403);
         return res;
       }
-      parts = path19.split(sep);
-      path19 = normalize2(join29(root2, path19));
+      parts = path19.split(sep2);
+      path19 = normalize2(join30(root2, path19));
     } else {
       if (UP_PATH_REGEXP.test(path19)) {
         debug('malicious path "%s"', path19);
         this.error(403);
         return res;
       }
-      parts = normalize2(path19).split(sep);
-      path19 = resolve13(path19);
+      parts = normalize2(path19).split(sep2);
+      path19 = resolve15(path19);
     }
     if (containsDotFile(parts)) {
       debug('%s dotfile "%s"', this._dotfiles, path19);
@@ -168077,8 +168077,8 @@ var require_send = __commonJS((exports, module) => {
     this.sendFile(path19);
     return res;
   };
-  SendStream.prototype.send = function send2(path19, stat3) {
-    var len = stat3.size;
+  SendStream.prototype.send = function send2(path19, stat4) {
+    var len = stat4.size;
     var options8 = this.options;
     var opts = {};
     var res = this.res;
@@ -168090,7 +168090,7 @@ var require_send = __commonJS((exports, module) => {
       return;
     }
     debug('pipe "%s"', path19);
-    this.setHeader(path19, stat3);
+    this.setHeader(path19, stat4);
     this.type(path19);
     if (this.isConditionalGET()) {
       if (this.isPreconditionFailure()) {
@@ -168147,19 +168147,19 @@ var require_send = __commonJS((exports, module) => {
     var i5 = 0;
     var self2 = this;
     debug('stat "%s"', path19);
-    fs28.stat(path19, function onstat(err, stat3) {
-      var pathEndsWithSep = path19[path19.length - 1] === sep;
-      if (err && err.code === "ENOENT" && !extname2(path19) && !pathEndsWithSep) {
+    fs28.stat(path19, function onstat(err, stat4) {
+      var pathEndsWithSep = path19[path19.length - 1] === sep2;
+      if (err && err.code === "ENOENT" && !extname3(path19) && !pathEndsWithSep) {
         return next(err);
       }
       if (err)
         return self2.onStatError(err);
-      if (stat3.isDirectory())
+      if (stat4.isDirectory())
         return self2.redirect(path19);
       if (pathEndsWithSep)
         return self2.error(404);
-      self2.emit("file", path19, stat3);
-      self2.send(path19, stat3);
+      self2.emit("file", path19, stat4);
+      self2.send(path19, stat4);
     });
     function next(err) {
       if (self2._extensions.length <= i5) {
@@ -168167,13 +168167,13 @@ var require_send = __commonJS((exports, module) => {
       }
       var p4 = path19 + "." + self2._extensions[i5++];
       debug('stat "%s"', p4);
-      fs28.stat(p4, function(err2, stat3) {
+      fs28.stat(p4, function(err2, stat4) {
         if (err2)
           return next(err2);
-        if (stat3.isDirectory())
+        if (stat4.isDirectory())
           return next();
-        self2.emit("file", p4, stat3);
-        self2.send(p4, stat3);
+        self2.emit("file", p4, stat4);
+        self2.send(p4, stat4);
       });
     }
   };
@@ -168186,15 +168186,15 @@ var require_send = __commonJS((exports, module) => {
           return self2.onStatError(err);
         return self2.error(404);
       }
-      var p4 = join29(path19, self2._index[i5]);
+      var p4 = join30(path19, self2._index[i5]);
       debug('stat "%s"', p4);
-      fs28.stat(p4, function(err2, stat3) {
+      fs28.stat(p4, function(err2, stat4) {
         if (err2)
           return next(err2);
-        if (stat3.isDirectory())
+        if (stat4.isDirectory())
           return next();
-        self2.emit("file", p4, stat3);
-        self2.send(p4, stat3);
+        self2.emit("file", p4, stat4);
+        self2.send(p4, stat4);
       });
     }
     next();
@@ -168221,14 +168221,14 @@ var require_send = __commonJS((exports, module) => {
     var res = this.res;
     if (res.getHeader("Content-Type"))
       return;
-    var ext = extname2(path19);
+    var ext = extname3(path19);
     var type2 = mime.contentType(ext) || "application/octet-stream";
     debug("content-type %s", type2);
     res.setHeader("Content-Type", type2);
   };
-  SendStream.prototype.setHeader = function setHeader(path19, stat3) {
+  SendStream.prototype.setHeader = function setHeader(path19, stat4) {
     var res = this.res;
-    this.emit("headers", res, path19, stat3);
+    this.emit("headers", res, path19, stat4);
     if (this._acceptRanges && !res.getHeader("Accept-Ranges")) {
       debug("accept ranges");
       res.setHeader("Accept-Ranges", "bytes");
@@ -168242,12 +168242,12 @@ var require_send = __commonJS((exports, module) => {
       res.setHeader("Cache-Control", cacheControl);
     }
     if (this._lastModified && !res.getHeader("Last-Modified")) {
-      var modified = stat3.mtime.toUTCString();
+      var modified = stat4.mtime.toUTCString();
       debug("modified %s", modified);
       res.setHeader("Last-Modified", modified);
     }
     if (this._etag && !res.getHeader("ETag")) {
-      var val = etag(stat3);
+      var val = etag(stat4);
       debug("etag %s", val);
       res.setHeader("ETag", val);
     }
@@ -168381,8 +168381,8 @@ var require_response = __commonJS((exports, module) => {
   var setCharset = require_utils10().setCharset;
   var cookie = require_cookie();
   var send = require_send();
-  var extname2 = path18.extname;
-  var resolve13 = path18.resolve;
+  var extname3 = path18.extname;
+  var resolve15 = path18.resolve;
   var vary = require_vary();
   var { Buffer: Buffer7 } = __require("node:buffer");
   var res = Object.create(http.ServerResponse.prototype);
@@ -168591,7 +168591,7 @@ var require_response = __commonJS((exports, module) => {
     }
     opts = Object.create(opts);
     opts.headers = headers;
-    var fullPath = !opts.root ? resolve13(path19) : path19;
+    var fullPath = !opts.root ? resolve15(path19) : path19;
     return this.sendFile(fullPath, opts, done);
   };
   res.contentType = res.type = function contentType(type) {
@@ -168622,7 +168622,7 @@ var require_response = __commonJS((exports, module) => {
   };
   res.attachment = function attachment(filename) {
     if (filename) {
-      this.type(extname2(filename));
+      this.type(extname3(filename));
     }
     this.set("Content-Disposition", contentDisposition(filename));
     return this;
@@ -168852,7 +168852,7 @@ var require_serve_static = __commonJS((exports, module) => {
   var encodeUrl = require_encodeurl();
   var escapeHtml = require_escape_html();
   var parseUrl = require_parseurl();
-  var resolve13 = __require("path").resolve;
+  var resolve15 = __require("path").resolve;
   var send = require_send();
   var url3 = __require("url");
   module.exports = serveStatic;
@@ -168871,7 +168871,7 @@ var require_serve_static = __commonJS((exports, module) => {
       throw new TypeError("option setHeaders must be function");
     }
     opts.maxage = opts.maxage || opts.maxAge || 0;
-    opts.root = resolve13(root2);
+    opts.root = resolve15(root2);
     var onDirectory = redirect ? createRedirectDirectoryListener() : createNotFoundDirectoryListener();
     return function serveStatic2(req, res, next) {
       if (req.method !== "GET" && req.method !== "HEAD") {
@@ -169795,8 +169795,8 @@ var require_follow_redirects = __commonJS((exports, module) => {
     }
     return parsed;
   }
-  function resolveUrl(relative4, base) {
-    return useNativeURL ? new URL2(relative4, base) : parseUrl(url3.resolve(base, relative4));
+  function resolveUrl(relative5, base) {
+    return useNativeURL ? new URL2(relative5, base) : parseUrl(url3.resolve(base, relative5));
   }
   function validateUrl(input) {
     if (/^\[/.test(input.hostname) && !/^\[[:0-9a-f]+\]$/i.test(input.hostname)) {
@@ -172245,8 +172245,8 @@ var require_executor = __commonJS((exports, module) => {
     }
     resetBuffer() {
       this.buffer = new Waterfall;
-      this.buffer.chain(new Promise((resolve13) => {
-        this._triggerBuffer = resolve13;
+      this.buffer.chain(new Promise((resolve15) => {
+        this._triggerBuffer = resolve15;
       }));
       if (this.ready)
         this._triggerBuffer();
@@ -173266,7 +173266,7 @@ var require_storage = __commonJS((exports, module) => {
       throw e8;
     }
   };
-  var writeFileLinesAsync = (filename, lines, mode = DEFAULT_FILE_MODE) => new Promise((resolve13, reject) => {
+  var writeFileLinesAsync = (filename, lines, mode = DEFAULT_FILE_MODE) => new Promise((resolve15, reject) => {
     try {
       const stream = writeFileStream(filename, { mode });
       const readable2 = Readable6.from(lines);
@@ -173283,7 +173283,7 @@ var require_storage = __commonJS((exports, module) => {
           if (err)
             reject(err);
           else
-            resolve13();
+            resolve15();
         });
       });
       readable2.on("error", (err) => {
@@ -173454,7 +173454,7 @@ var require_persistence = __commonJS((exports, module) => {
       return { data: tdata, indexes };
     }
     treatRawStreamAsync(rawStream) {
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         const dataById = {};
         const indexes = {};
         let corruptItems = 0;
@@ -173497,7 +173497,7 @@ var require_persistence = __commonJS((exports, module) => {
             }
           }
           const data = Object.values(dataById);
-          resolve13({ data, indexes });
+          resolve15({ data, indexes });
         });
         lineStream.on("error", function(err) {
           reject(err, null);
@@ -183030,7 +183030,7 @@ var require_mime_types2 = __commonJS((exports) => {
    * MIT Licensed
    */
   var db2 = require_db2();
-  var extname2 = __require("path").extname;
+  var extname3 = __require("path").extname;
   var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/;
   var TEXT_TYPE_REGEXP = /^text\//i;
   exports.charset = charset;
@@ -183085,7 +183085,7 @@ var require_mime_types2 = __commonJS((exports) => {
     if (!path18 || typeof path18 !== "string") {
       return false;
     }
-    var extension2 = extname2("x." + path18).toLowerCase().substr(1);
+    var extension2 = extname3("x." + path18).toLowerCase().substr(1);
     if (!extension2) {
       return false;
     }
@@ -193077,7 +193077,7 @@ var require_mime_types3 = __commonJS((exports) => {
    * MIT Licensed
    */
   var db2 = require_db3();
-  var extname2 = __require("path").extname;
+  var extname3 = __require("path").extname;
   var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/;
   var TEXT_TYPE_REGEXP = /^text\//i;
   exports.charset = charset;
@@ -193132,7 +193132,7 @@ var require_mime_types3 = __commonJS((exports) => {
     if (!path18 || typeof path18 !== "string") {
       return false;
     }
-    var extension2 = extname2("x." + path18).toLowerCase().substr(1);
+    var extension2 = extname3("x." + path18).toLowerCase().substr(1);
     if (!extension2) {
       return false;
     }
@@ -199108,13 +199108,13 @@ var require_broadcast_operator = __commonJS((exports) => {
       return true;
     }
     emitWithAck(ev2, ...args) {
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         args.push((err, responses) => {
           if (err) {
             err.responses = responses;
             return reject(err);
           } else {
-            return resolve13(responses);
+            return resolve15(responses);
           }
         });
         this.emit(ev2, ...args);
@@ -199302,12 +199302,12 @@ var require_socket2 = __commonJS((exports) => {
     }
     emitWithAck(ev2, ...args) {
       const withErr = this.flags.timeout !== undefined;
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         args.push((arg1, arg2) => {
           if (withErr) {
-            return arg1 ? reject(arg1) : resolve13(arg2);
+            return arg1 ? reject(arg1) : resolve15(arg2);
           } else {
-            return resolve13(arg1);
+            return resolve15(arg1);
           }
         });
         this.emit(ev2, ...args);
@@ -199762,13 +199762,13 @@ var require_namespace = __commonJS((exports) => {
       return true;
     }
     serverSideEmitWithAck(ev2, ...args) {
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         args.push((err, responses) => {
           if (err) {
             err.responses = responses;
             return reject(err);
           } else {
-            return resolve13(responses);
+            return resolve15(responses);
           }
         });
         this.serverSideEmit(ev2, ...args);
@@ -203303,7 +203303,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         return localSockets;
       }
       const requestId = randomId();
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         const timeout3 = setTimeout(() => {
           const storedRequest2 = this.requests.get(requestId);
           if (storedRequest2) {
@@ -203313,7 +203313,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         }, opts.flags.timeout || DEFAULT_TIMEOUT);
         const storedRequest = {
           type: MessageType.FETCH_SOCKETS,
-          resolve: resolve13,
+          resolve: resolve15,
           timeout: timeout3,
           current: 0,
           expected: expectedResponseCount,
@@ -203523,7 +203523,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         return localSockets;
       }
       const requestId = randomId();
-      return new Promise((resolve13, reject) => {
+      return new Promise((resolve15, reject) => {
         const timeout3 = setTimeout(() => {
           const storedRequest2 = this.customRequests.get(requestId);
           if (storedRequest2) {
@@ -203533,7 +203533,7 @@ var require_cluster_adapter = __commonJS((exports) => {
         }, opts.flags.timeout || DEFAULT_TIMEOUT);
         const storedRequest = {
           type: MessageType.FETCH_SOCKETS,
-          resolve: resolve13,
+          resolve: resolve15,
           timeout: timeout3,
           missingUids: new Set([...this.nodesMap.keys()]),
           responses: localSockets
@@ -204262,13 +204262,13 @@ var require_dist4 = __commonJS((exports, module) => {
       this.engine.close();
       (0, uws_1.restoreAdapter)();
       if (this.httpServer) {
-        return new Promise((resolve13) => {
+        return new Promise((resolve15) => {
           this.httpServer.close((err) => {
             fn9 && fn9(err);
             if (err) {
               debug("server was not running");
             }
-            resolve13();
+            resolve15();
           });
         });
       } else {
@@ -213004,7 +213004,7 @@ var require_mime_types4 = __commonJS((exports) => {
    * MIT Licensed
    */
   var db2 = require_db4();
-  var extname2 = __require("path").extname;
+  var extname3 = __require("path").extname;
   var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/;
   var TEXT_TYPE_REGEXP = /^text\//i;
   exports.charset = charset;
@@ -213059,7 +213059,7 @@ var require_mime_types4 = __commonJS((exports) => {
     if (!path18 || typeof path18 !== "string") {
       return false;
     }
-    var extension2 = extname2("x." + path18).toLowerCase().substr(1);
+    var extension2 = extname3("x." + path18).toLowerCase().substr(1);
     if (!extension2) {
       return false;
     }
@@ -217391,8 +217391,8 @@ var require_mkdirp = __commonJS((exports, module) => {
           });
           break;
         default:
-          xfs.stat(p4, function(er22, stat3) {
-            if (er22 || !stat3.isDirectory())
+          xfs.stat(p4, function(er22, stat4) {
+            if (er22 || !stat4.isDirectory())
               cb2(er10, made);
             else
               cb2(null, made);
@@ -217423,13 +217423,13 @@ var require_mkdirp = __commonJS((exports, module) => {
           sync(p4, opts, made);
           break;
         default:
-          var stat3;
+          var stat4;
           try {
-            stat3 = xfs.statSync(p4);
+            stat4 = xfs.statSync(p4);
           } catch (err1) {
             throw err0;
           }
-          if (!stat3.isDirectory())
+          if (!stat4.isDirectory())
             throw err0;
           break;
       }
@@ -217632,7 +217632,7 @@ var require_buffer_list = __commonJS((exports, module) => {
       }
     }, {
       key: "join",
-      value: function join31(s5) {
+      value: function join33(s5) {
         if (this.length === 0)
           return "";
         var p4 = this.head;
@@ -218930,14 +218930,14 @@ var require_async_iterator = __commonJS((exports, module) => {
     };
   }
   function readAndResolve(iter) {
-    var resolve13 = iter[kLastResolve];
-    if (resolve13 !== null) {
+    var resolve15 = iter[kLastResolve];
+    if (resolve15 !== null) {
       var data = iter[kStream].read();
       if (data !== null) {
         iter[kLastPromise] = null;
         iter[kLastResolve] = null;
         iter[kLastReject] = null;
-        resolve13(createIterResult(data, false));
+        resolve15(createIterResult(data, false));
       }
     }
   }
@@ -218945,13 +218945,13 @@ var require_async_iterator = __commonJS((exports, module) => {
     process.nextTick(readAndResolve, iter);
   }
   function wrapForNext(lastPromise, iter) {
-    return function(resolve13, reject) {
+    return function(resolve15, reject) {
       lastPromise.then(function() {
         if (iter[kEnded]) {
-          resolve13(createIterResult(undefined, true));
+          resolve15(createIterResult(undefined, true));
           return;
         }
-        iter[kHandlePromise](resolve13, reject);
+        iter[kHandlePromise](resolve15, reject);
       }, reject);
     };
   }
@@ -218970,12 +218970,12 @@ var require_async_iterator = __commonJS((exports, module) => {
         return Promise.resolve(createIterResult(undefined, true));
       }
       if (this[kStream].destroyed) {
-        return new Promise(function(resolve13, reject) {
+        return new Promise(function(resolve15, reject) {
           process.nextTick(function() {
             if (_this[kError]) {
               reject(_this[kError]);
             } else {
-              resolve13(createIterResult(undefined, true));
+              resolve15(createIterResult(undefined, true));
             }
           });
         });
@@ -218998,13 +218998,13 @@ var require_async_iterator = __commonJS((exports, module) => {
     return this;
   }), _defineProperty(_Object$setPrototypeO, "return", function _return() {
     var _this2 = this;
-    return new Promise(function(resolve13, reject) {
+    return new Promise(function(resolve15, reject) {
       _this2[kStream].destroy(null, function(err) {
         if (err) {
           reject(err);
           return;
         }
-        resolve13(createIterResult(undefined, true));
+        resolve15(createIterResult(undefined, true));
       });
     });
   }), _Object$setPrototypeO), AsyncIteratorPrototype);
@@ -219026,15 +219026,15 @@ var require_async_iterator = __commonJS((exports, module) => {
       value: stream._readableState.endEmitted,
       writable: true
     }), _defineProperty(_Object$create, kHandlePromise, {
-      value: function value(resolve13, reject) {
+      value: function value(resolve15, reject) {
         var data = iterator[kStream].read();
         if (data) {
           iterator[kLastPromise] = null;
           iterator[kLastResolve] = null;
           iterator[kLastReject] = null;
-          resolve13(createIterResult(data, false));
+          resolve15(createIterResult(data, false));
         } else {
-          iterator[kLastResolve] = resolve13;
+          iterator[kLastResolve] = resolve15;
           iterator[kLastReject] = reject;
         }
       },
@@ -219053,12 +219053,12 @@ var require_async_iterator = __commonJS((exports, module) => {
         iterator[kError] = err;
         return;
       }
-      var resolve13 = iterator[kLastResolve];
-      if (resolve13 !== null) {
+      var resolve15 = iterator[kLastResolve];
+      if (resolve15 !== null) {
         iterator[kLastPromise] = null;
         iterator[kLastResolve] = null;
         iterator[kLastReject] = null;
-        resolve13(createIterResult(undefined, true));
+        resolve15(createIterResult(undefined, true));
       }
       iterator[kEnded] = true;
     });
@@ -219070,7 +219070,7 @@ var require_async_iterator = __commonJS((exports, module) => {
 
 // ../../node_modules/readable-stream/lib/internal/streams/from.js
 var require_from = __commonJS((exports, module) => {
-  function asyncGeneratorStep(gen, resolve13, reject, _next, _throw, key2, arg) {
+  function asyncGeneratorStep(gen, resolve15, reject, _next, _throw, key2, arg) {
     try {
       var info = gen[key2](arg);
       var value = info.value;
@@ -219079,7 +219079,7 @@ var require_from = __commonJS((exports, module) => {
       return;
     }
     if (info.done) {
-      resolve13(value);
+      resolve15(value);
     } else {
       Promise.resolve(value).then(_next, _throw);
     }
@@ -219087,13 +219087,13 @@ var require_from = __commonJS((exports, module) => {
   function _asyncToGenerator(fn9) {
     return function() {
       var self2 = this, args = arguments;
-      return new Promise(function(resolve13, reject) {
+      return new Promise(function(resolve15, reject) {
         var gen = fn9.apply(self2, args);
         function _next(value) {
-          asyncGeneratorStep(gen, resolve13, reject, _next, _throw, "next", value);
+          asyncGeneratorStep(gen, resolve15, reject, _next, _throw, "next", value);
         }
         function _throw(err) {
-          asyncGeneratorStep(gen, resolve13, reject, _next, _throw, "throw", err);
+          asyncGeneratorStep(gen, resolve15, reject, _next, _throw, "throw", err);
         }
         _next(undefined);
       });
@@ -221220,7 +221220,7 @@ var require_dist5 = __commonJS((exports, module) => {
     determineAgent: () => determineAgent
   });
   module.exports = __toCommonJS2(src_exports);
-  var import_promises25 = __require("node:fs/promises");
+  var import_promises26 = __require("node:fs/promises");
   var import_node_fs24 = __require("node:fs");
   var DEVIN_LOCAL_PATH = "/opt/.devin";
   var CURSOR2 = "cursor";
@@ -221278,7 +221278,7 @@ var require_dist5 = __commonJS((exports, module) => {
       return { isAgent: true, agent: { name: REPLIT } };
     }
     try {
-      await (0, import_promises25.access)(DEVIN_LOCAL_PATH, import_node_fs24.constants.F_OK);
+      await (0, import_promises26.access)(DEVIN_LOCAL_PATH, import_node_fs24.constants.F_OK);
       return { isAgent: true, agent: { name: DEVIN } };
     } catch (error48) {}
     return { isAgent: false, agent: undefined };
@@ -237840,7 +237840,7 @@ function normalizeBase44Env() {
 loadProjectEnvFiles();
 
 // src/cli/index.ts
-import { dirname as dirname25, join as join36 } from "node:path";
+import { dirname as dirname26, join as join37 } from "node:path";
 import { fileURLToPath as fileURLToPath6 } from "node:url";
 
 // ../../node_modules/@clack/core/dist/index.mjs
@@ -239048,7 +239048,7 @@ var {
 } = import__.default;
 
 // src/cli/commands/agent-skills/pull.ts
-import { dirname as dirname10, join as join17 } from "node:path";
+import { dirname as dirname11, join as join18 } from "node:path";
 // ../../node_modules/chalk/source/vendor/ansi-styles/index.js
 var ANSI_BACKGROUND_OFFSET = 10;
 var wrapAnsi16 = (offset = 0) => (code) => `\x1B[${code + offset}m`;
@@ -245663,18 +245663,26 @@ var PublishedUrlResponseSchema = exports_external.object({
 });
 var CreateDeploymentResponseSchema = exports_external.object({
   deployment_id: exports_external.string(),
-  asset_uploads: exports_external.object({
-    type: exports_external.literal("s3"),
-    uploads: exports_external.array(exports_external.object({
-      path: exports_external.string(),
-      content_type: exports_external.string(),
-      content_length: exports_external.number(),
-      url: exports_external.string()
-    }))
-  }).nullable().optional()
+  asset_uploads: exports_external.discriminatedUnion("type", [
+    exports_external.object({
+      type: exports_external.literal("cf"),
+      url: exports_external.string(),
+      jwt: exports_external.string(),
+      buckets: exports_external.array(exports_external.array(exports_external.string()))
+    }),
+    exports_external.object({
+      type: exports_external.literal("s3"),
+      uploads: exports_external.array(exports_external.object({
+        path: exports_external.string(),
+        content_type: exports_external.string(),
+        content_length: exports_external.number(),
+        url: exports_external.string()
+      }))
+    })
+  ]).nullable().optional()
 }).transform((data) => ({
   deploymentId: data.deployment_id,
-  assetUploads: data.asset_uploads == null ? null : {
+  assetUploads: data.asset_uploads == null ? null : data.asset_uploads.type === "cf" ? data.asset_uploads : {
     type: "s3",
     uploads: data.asset_uploads.uploads.map((upload) => ({
       path: upload.path,
@@ -245684,6 +245692,9 @@ var CreateDeploymentResponseSchema = exports_external.object({
     }))
   }
 }));
+var AssetUploadResponseSchema = exports_external.looseObject({
+  result: exports_external.looseObject({ jwt: exports_external.string().nullable().optional() }).nullable().optional()
+});
 var FinalizeDeploymentResponseSchema = exports_external.object({
   deployment_id: exports_external.string()
 }).transform((data) => ({
@@ -247201,24 +247212,33 @@ var ResourceSourceSchema = exports_external.discriminatedUnion("type", [
 ]);
 
 // src/core/resources/entity/schema.ts
-var FieldConditionSchema = exports_external.union([
-  exports_external.string(),
-  exports_external.number(),
-  exports_external.boolean(),
-  exports_external.null(),
-  exports_external.looseObject({
-    $in: exports_external.unknown().optional(),
-    $nin: exports_external.unknown().optional(),
-    $ne: exports_external.unknown().optional(),
-    $all: exports_external.unknown().optional()
-  })
+var fieldConditionOperators = new Set([
+  "$eq",
+  "$ne",
+  "$in",
+  "$nin",
+  "$gt",
+  "$gte",
+  "$lt",
+  "$lte",
+  "$exists",
+  "$all",
+  "$size",
+  "$elemMatch"
 ]);
-var userConditionAllowedKeys = new Set(["role", "email", "id"]);
-var UserConditionSchema = exports_external.looseObject({
-  role: exports_external.string().optional(),
-  email: exports_external.string().optional(),
-  id: exports_external.string().optional()
-}).refine((val) => Object.keys(val).every((key) => userConditionAllowedKeys.has(key) || key.startsWith("data.")), "Keys must be role, email, id, or match data.* pattern");
+var isScalar = (value) => value === null || ["string", "number", "boolean"].includes(typeof value);
+var isValidFieldCondition = (value) => {
+  if (isScalar(value)) {
+    return true;
+  }
+  if (typeof value === "object" && !Array.isArray(value)) {
+    return Object.keys(value).every((k2) => fieldConditionOperators.has(k2));
+  }
+  return false;
+};
+var supportedOperators = [...fieldConditionOperators].sort().join(", ");
+var FieldConditionSchema = exports_external.union([exports_external.string(), exports_external.number(), exports_external.boolean(), exports_external.null(), exports_external.looseObject({})]).refine(isValidFieldCondition, `Field condition values must be a primitive or an operator object (${supportedOperators})`);
+var UserConditionSchema = exports_external.looseObject({}).refine((val) => Object.keys(val).length > 0 && Object.entries(val).every(([key, value]) => !key.startsWith("$") && isScalar(value)), "user_condition compares user attributes by exact equality: a non-empty object of attribute: scalar pairs, no operators");
 var rlsConditionAllowedKeys = new Set([
   "user_condition",
   "created_by",
@@ -247250,18 +247270,13 @@ var RLSConditionSchema = exports_external.looseObject({
     return exports_external.array(RefineRLSConditionSchema).optional();
   }
 });
-var fieldConditionOperators = new Set(["$in", "$nin", "$ne", "$all"]);
-var isValidFieldCondition = (value) => {
-  if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
-    return true;
-  }
-  if (typeof value === "object") {
-    return Object.keys(value).every((k2) => fieldConditionOperators.has(k2));
-  }
-  return false;
-};
-var RefineRLSConditionSchema = RLSConditionSchema.refine((val) => Object.entries(val).every(([key, value]) => rlsConditionAllowedKeys.has(key) || isValidFieldCondition(value)), "Field condition values must be a primitive or an operator object ($in, $nin, $ne, $all)");
-var RLSRuleSchema = exports_external.union([exports_external.boolean(), RefineRLSConditionSchema]);
+var RefineRLSConditionSchema = RLSConditionSchema.refine((val) => Object.entries(val).every(([key, value]) => rlsConditionAllowedKeys.has(key) || isValidFieldCondition(value)), `Field condition values must be a primitive or an operator object (${supportedOperators})`);
+var RLSRuleSchema = exports_external.union([
+  exports_external.boolean(),
+  exports_external.null(),
+  exports_external.literal(""),
+  RefineRLSConditionSchema
+]);
 var EntityRLSSchema = exports_external.looseObject({
   create: RLSRuleSchema.optional(),
   read: RLSRuleSchema.optional(),
@@ -247277,7 +247292,7 @@ var FieldRLSSchema = exports_external.looseObject({
   delete: RLSRuleSchema.optional()
 });
 var PropertyDefinitionSchema = exports_external.looseObject({
-  type: exports_external.string(),
+  type: exports_external.union([exports_external.string(), exports_external.array(exports_external.string())]),
   title: exports_external.string().optional(),
   description: exports_external.string().optional(),
   minLength: exports_external.number().int().min(0).optional(),
@@ -247301,7 +247316,7 @@ var PropertyDefinitionSchema = exports_external.looseObject({
 });
 var EntitySchema = exports_external.looseObject({
   type: exports_external.literal("object").default("object"),
-  name: exports_external.string().min(1).regex(/^[a-zA-Z0-9]+$/, "Entity name must be alphanumeric only"),
+  name: exports_external.string().min(1).regex(/^\w+$/, "Entity name must contain only letters, numbers, and underscores"),
   title: exports_external.string().optional(),
   description: exports_external.string().optional(),
   properties: exports_external.record(exports_external.string(), PropertyDefinitionSchema).default({}),
@@ -247871,10 +247886,15 @@ var functionResource = {
 // src/core/project/config.ts
 class ProjectConfigReader {
   pluginSourceByNamespace = new Map;
-  async readProjectConfig(projectRoot) {
+  async readProjectSettings(projectRoot) {
     const { root, configPath } = await this.findConfigOrThrow(projectRoot);
     const project = await this.readConfigFile(configPath);
     this.assertPluginProjectDoesNotLoadPlugins(project, configPath);
+    return { ...project, root, configPath };
+  }
+  async readProjectConfig(projectRoot) {
+    const project = await this.readProjectSettings(projectRoot);
+    const { configPath } = project;
     const localResources = await this.readProjectResources(configPath, project);
     const pluginResources = await this.readPlugins(project.plugins, configPath);
     const entities = mergeProjectAndPluginEntities(localResources.entities, pluginResources.entities, configPath);
@@ -247884,7 +247904,7 @@ class ProjectConfigReader {
     ];
     this.validateFunctionNames(functions, configPath);
     return {
-      project: { ...project, root, configPath },
+      project,
       entities,
       functions,
       agents: localResources.agents,
@@ -248022,6 +248042,10 @@ async function readProjectConfig(projectRoot) {
   const reader = new ProjectConfigReader;
   return await reader.readProjectConfig(projectRoot);
 }
+async function readProjectSettings(projectRoot) {
+  const reader = new ProjectConfigReader;
+  return await reader.readProjectSettings(projectRoot);
+}
 // src/core/project/template.ts
 var import_ejs = __toESM(require_ejs(), 1);
 var import_front_matter2 = __toESM(require_front_matter(), 1);
@@ -248034,7 +248058,7 @@ import { join as join12 } from "node:path";
 // package.json
 var package_default = {
   name: "base44",
-  version: "0.1.8",
+  version: "0.1.9",
   description: "Base44 CLI - Unified interface for managing Base44 applications",
   type: "module",
   bin: {
@@ -248259,7 +248283,7 @@ async function createProjectFilesForExistingProject(options) {
   };
 }
 // src/core/project/deploy.ts
-import { resolve as resolve3 } from "node:path";
+import { resolve as resolve6 } from "node:path";
 
 // src/core/site/api.ts
 async function uploadSite(archivePath) {
@@ -248283,6 +248307,13 @@ async function uploadSite(archivePath) {
   }
   return result.data;
 }
+var MODULE_CONTENT_TYPES = {
+  esm: "application/javascript+module",
+  sourcemap: "application/source-map",
+  wasm: "application/wasm",
+  text: "text/plain",
+  data: "application/octet-stream"
+};
 async function createDeployment(request) {
   const appClient = getAppClient();
   let response;
@@ -248300,6 +248331,17 @@ async function createDeployment(request) {
   }
   return result.data;
 }
+async function finalizeDeployment(deploymentId, completionJwt, modules) {
+  const formData = new FormData;
+  formData.append("payload", JSON.stringify({ completion_jwt: completionJwt }));
+  for (const module of modules) {
+    const content = await readFile(module.absolutePath);
+    formData.append(module.name, new File([new Uint8Array(content)], module.name, {
+      type: MODULE_CONTENT_TYPES[module.type]
+    }));
+  }
+  return await postFinalize(deploymentId, formData);
+}
 async function finalizeStaticDeployment(deploymentId, indexHtml) {
   const formData = new FormData;
   formData.append("index.html", new File([indexHtml], "index.html", { type: "text/html" }));
@@ -248335,7 +248377,9 @@ async function deploySite(siteOutputDir) {
   if (!await pathExists(siteOutputDir)) {
     throw new InvalidInputError(`Output directory does not exist: ${siteOutputDir}. Make sure to build your project first.`, {
       hints: [
-        { message: "Run your build command (e.g., 'npm run build') first" }
+        {
+          message: "Run 'base44 build' first (it injects your app id; a bare 'npm run build' does not)"
+        }
       ]
     });
   }
@@ -248343,7 +248387,9 @@ async function deploySite(siteOutputDir) {
   if (filePaths.length === 0) {
     throw new ConfigInvalidError(`No files found in output directory: ${siteOutputDir}. Make sure to build your project first.`, siteOutputDir, {
       hints: [
-        { message: "Run your build command (e.g., 'npm run build') first" }
+        {
+          message: "Run 'base44 build' first (it injects your app id; a bare 'npm run build' does not)"
+        }
       ]
     });
   }
@@ -248362,10 +248408,17 @@ async function createArchive(pathToArchive, targetArchivePath) {
     cwd: pathToArchive
   }, ["."]);
 }
+// src/core/site/deploy-app.ts
+import { resolve as resolve4 } from "node:path";
+
+// src/core/site/static-site.ts
+import { readFile as readFile4 } from "node:fs/promises";
+import { join as join16 } from "node:path";
+
 // src/core/site/manifest.ts
 import { createHash } from "node:crypto";
 import { readFile as readFile2, stat } from "node:fs/promises";
-import { basename as basename4, join as join15 } from "node:path";
+import { basename as basename4, extname, join as join15 } from "node:path";
 var MAX_ASSET_SIZE_BYTES = 25 * 1024 * 1024;
 var MAX_ASSET_COUNT = 1e5;
 var ASSETS_IGNORE_FILE = ".assetsignore";
@@ -248374,6 +248427,39 @@ var ALWAYS_IGNORED = new Set([
   "wrangler.json",
   ".dev.vars"
 ]);
+var MIME_TYPES = {
+  ".html": "text/html",
+  ".htm": "text/html",
+  ".css": "text/css",
+  ".js": "text/javascript",
+  ".mjs": "text/javascript",
+  ".json": "application/json",
+  ".map": "application/json",
+  ".txt": "text/plain",
+  ".xml": "application/xml",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".avif": "image/avif",
+  ".ico": "image/x-icon",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".otf": "font/otf",
+  ".eot": "application/vnd.ms-fontobject",
+  ".mp3": "audio/mpeg",
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
+  ".pdf": "application/pdf",
+  ".wasm": "application/wasm",
+  ".webmanifest": "application/manifest+json"
+};
+function getAssetContentType(filePath) {
+  return MIME_TYPES[extname(filePath).toLowerCase()] ?? "application/octet-stream";
+}
 function hashAsset(appId, content) {
   return createHash("sha256").update(Buffer.from(appId, "utf8")).update(content).digest("hex").slice(0, 32);
 }
@@ -248401,14 +248487,16 @@ async function buildAssetManifest(assetsDir, appId) {
     const hash2 = hashAsset(appId, content);
     manifest[`/${relativePath}`] = { hash: hash2, size };
     if (!filesByHash.has(hash2)) {
-      filesByHash.set(hash2, { absolutePath, hash: hash2, size });
+      filesByHash.set(hash2, {
+        absolutePath,
+        hash: hash2,
+        size,
+        contentType: getAssetContentType(absolutePath)
+      });
     }
   }
   return { manifest, filesByHash };
 }
-// src/core/site/static-site.ts
-import { readFile as readFile4 } from "node:fs/promises";
-import { join as join16 } from "node:path";
 
 // src/core/site/upload.ts
 import { readFile as readFile3 } from "node:fs/promises";
@@ -248542,6 +248630,62 @@ var DEFAULT_UPLOAD_CONCURRENCY = 3;
 var MAX_UPLOAD_CONCURRENCY = 50;
 var MAX_UPLOAD_ATTEMPTS = 3;
 var RETRY_BASE_DELAY_MS = 500;
+var UPLOAD_RETRY = {
+  limit: MAX_UPLOAD_ATTEMPTS - 1,
+  delay: (attempt) => RETRY_BASE_DELAY_MS * 2 ** (attempt - 1)
+};
+async function uploadAssetBuckets(target, filesByHash, options = {}) {
+  const { concurrency = DEFAULT_UPLOAD_CONCURRENCY, onProgress } = options;
+  const { buckets } = target;
+  const totalFiles = buckets.reduce((sum, bucket) => sum + bucket.length, 0);
+  let uploadedFiles = 0;
+  let completionJwt = null;
+  await pMap(buckets, async (bucket) => {
+    const jwt3 = await uploadAssetBucket(target, bucket, filesByHash);
+    if (jwt3) {
+      completionJwt = jwt3;
+    }
+    uploadedFiles += bucket.length;
+    onProgress?.({ uploadedFiles, totalFiles });
+  }, { concurrency });
+  if (!completionJwt) {
+    throw new ApiError("Asset upload finished but the server did not return a completion token.");
+  }
+  return completionJwt;
+}
+async function uploadAssetBucket(target, bucket, filesByHash) {
+  const formData = await buildBucketForm(bucket, filesByHash);
+  let response;
+  try {
+    response = await distribution_default.post(target.url, {
+      searchParams: { base64: "true" },
+      headers: { Authorization: `Bearer ${target.jwt}` },
+      body: formData,
+      timeout: 120000,
+      retry: { ...UPLOAD_RETRY, methods: ["post"] }
+    });
+  } catch (error48) {
+    if (error48 instanceof HTTPError && (error48.response.status === 401 || error48.response.status === 403)) {
+      throw new ApiError("This deploy's upload session has expired — rerun deploy. Already-uploaded assets are skipped on the next attempt.", { statusCode: error48.response.status, cause: error48 });
+    }
+    throw await ApiError.fromHttpError(error48, "uploading assets to Cloudflare");
+  }
+  const parsed = AssetUploadResponseSchema.safeParse(await response.json());
+  const jwt3 = parsed.success ? parsed.data.result?.jwt : null;
+  return jwt3 || null;
+}
+async function buildBucketForm(bucket, filesByHash) {
+  const formData = new FormData;
+  for (const hash2 of bucket) {
+    const file2 = filesByHash.get(hash2);
+    if (!file2) {
+      throw new InternalError(`Server requested upload of unknown asset hash: ${hash2}`);
+    }
+    const content = await readFile3(file2.absolutePath);
+    formData.append(hash2, new File([content.toString("base64")], hash2, { type: file2.contentType }));
+  }
+  return formData;
+}
 async function uploadPresignedAssets(uploads, assets, options = {}) {
   const { concurrency = DEFAULT_UPLOAD_CONCURRENCY, onProgress } = options;
   let uploadedFiles = 0;
@@ -248563,10 +248707,7 @@ async function uploadPresignedAsset(upload, assets) {
       body: new Uint8Array(content),
       headers: { "Content-Type": upload.contentType },
       timeout: 120000,
-      retry: {
-        limit: MAX_UPLOAD_ATTEMPTS - 1,
-        delay: (attempt) => RETRY_BASE_DELAY_MS * 2 ** (attempt - 1)
-      }
+      retry: UPLOAD_RETRY
     });
   } catch (error48) {
     throw await ApiError.fromHttpError(error48, "uploading static assets");
@@ -248574,6 +248715,11 @@ async function uploadPresignedAsset(upload, assets) {
 }
 
 // src/core/site/static-site.ts
+var STATIC_DEPLOYMENTS_ENV = "BASE44_STATIC_DEPLOYMENTS";
+function staticDeploymentsEnabled(env2 = process.env) {
+  const value = env2[STATIC_DEPLOYMENTS_ENV];
+  return value === "1" || value === "true";
+}
 async function deployStaticSite(options) {
   const { outputDir, gitHash, concurrency, progress } = options;
   const assets = await buildAssetManifest(outputDir, getAppContext().id);
@@ -248584,6 +248730,9 @@ async function deployStaticSite(options) {
     git_hash: gitHash,
     asset_manifest: assets.manifest
   });
+  if (created.assetUploads && created.assetUploads.type !== "s3") {
+    throw new ApiError(`The server answered a static-site deploy with the "${created.assetUploads.type}" upload target.`);
+  }
   progress?.onAssets?.({
     totalAssets: Object.keys(assets.manifest).length,
     newAssets: created.assetUploads?.uploads.length ?? 0
@@ -248596,342 +248745,259 @@ async function deployStaticSite(options) {
   }
   const indexHtml = await readFile4(join16(outputDir, "index.html"));
   const finalized = await finalizeStaticDeployment(created.deploymentId, new Uint8Array(indexHtml));
-  return { deploymentId: finalized.deploymentId };
-}
-// src/core/project/deploy.ts
-function hasResourcesToDeploy(projectData) {
-  const {
-    project,
-    entities,
-    functions,
-    agents,
-    agentSkills,
-    connectors,
-    authConfig
-  } = projectData;
-  const hasSite = Boolean(project.site?.outputDirectory);
-  const hasEntities = entities.length > 0;
-  const hasFunctions = functions.length > 0;
-  const hasAgents = agents.length > 0;
-  const hasAgentSkills = agentSkills.length > 0;
-  const hasConnectors = connectors.length > 0;
-  const hasAuthConfig = authConfig.length > 0;
-  const hasVisibility = Boolean(project.visibility);
-  return hasEntities || hasFunctions || hasAgents || hasAgentSkills || hasConnectors || hasAuthConfig || hasVisibility || hasSite;
-}
-async function deployAll(projectData, options) {
-  const {
-    project,
-    entities,
-    functions,
-    agents,
-    agentSkills,
-    connectors,
-    authConfig
-  } = projectData;
-  await setAppVisibility(project.visibility);
-  if (project.visibility) {
-    options?.onVisibilitySet?.(project.visibility);
+  return { deploymentId: finalized.deploymentId, gitHash };
+}
+
+// src/core/site/wrangler-config.ts
+import { dirname as dirname10, join as join17, resolve as resolve3 } from "node:path";
+var WRANGLER_REDIRECT_PATH = join17(".wrangler", "deploy", "config.json");
+var RedirectConfigSchema = exports_external.looseObject({
+  configPath: exports_external.string().min(1)
+});
+var WranglerConfigSchema = exports_external.looseObject({
+  main: exports_external.string().min(1, "wrangler config is missing a 'main' entry module"),
+  no_bundle: exports_external.boolean().optional(),
+  rules: exports_external.array(exports_external.looseObject({ type: exports_external.string(), globs: exports_external.array(exports_external.string()) })).optional(),
+  assets: exports_external.looseObject({
+    directory: exports_external.string().optional(),
+    html_handling: exports_external.string().optional(),
+    not_found_handling: exports_external.string().optional(),
+    run_worker_first: exports_external.union([exports_external.boolean(), exports_external.array(exports_external.string())]).optional(),
+    headers: exports_external.string().optional(),
+    redirects: exports_external.string().optional()
+  }).optional(),
+  compatibility_date: exports_external.string().optional(),
+  compatibility_flags: exports_external.array(exports_external.string()).optional(),
+  vars: exports_external.record(exports_external.string(), exports_external.unknown()).optional(),
+  upload_source_maps: exports_external.boolean().optional()
+});
+async function detectFullStackArtifact(projectRoot) {
+  const redirectPath = join17(projectRoot, WRANGLER_REDIRECT_PATH);
+  return await pathExists(redirectPath) ? redirectPath : null;
+}
+async function resolveWranglerConfig(projectRoot) {
+  const redirectPath = await detectFullStackArtifact(projectRoot);
+  if (!redirectPath) {
+    throw new InvalidInputError("No full-stack build artifact found. Expected a .wrangler/deploy/config.json redirect file.", {
+      hints: [{ message: "Run your framework's build command first" }]
+    });
   }
-  await entityResource.push(entities);
-  await deployFunctionsSequentially(functions, {
-    onStart: options?.onFunctionStart,
-    onResult: options?.onFunctionResult
-  });
-  await agentSkillResource.push(agentSkills);
-  await agentResource.push(agents);
-  await authConfigResource.push(authConfig);
-  const skipConnectorSync = connectors.length === 0 && hasWorkspaceApiKeyAuth();
-  const connectorResults = skipConnectorSync ? [] : (await pushConnectors(connectors)).results;
-  if (project.site?.outputDirectory) {
-    const outputDir = resolve3(project.root, project.site.outputDirectory);
-    const { appUrl } = await deploySite(outputDir);
-    return { appUrl, connectorResults };
+  const configPath = await resolveRedirectedConfigPath(redirectPath);
+  const parsed = await readJsonFile(configPath);
+  const result = WranglerConfigSchema.safeParse(parsed);
+  if (!result.success) {
+    throw new ConfigInvalidError(`Invalid wrangler config: ${exports_external.prettifyError(result.error)}`, configPath);
   }
-  return { connectorResults };
-}
-// src/core/clients/base44-client.ts
-var retriedRequests = new WeakSet;
-async function captureRequestBody(request, options) {
-  if (request.body == null) {
-    return;
+  const config9 = result.data;
+  if (config9.no_bundle !== true) {
+    throw new InvalidInputError("This framework's output requires bundling; not yet supported. Base44 full-stack deploys only support pre-bundled Workers output (no_bundle: true).");
   }
-  try {
-    const cloned = request.clone();
-    const text = await cloned.text();
-    options.context.__requestBody = text;
-  } catch {}
+  const configDir = dirname10(configPath);
+  const assetsDirectory = config9.assets?.directory ? resolve3(configDir, config9.assets.directory) : null;
+  return {
+    configPath,
+    configDir,
+    main: config9.main,
+    assetsDirectory,
+    assetsConfig: config9.assets ? toResolvedAssetsConfig(config9.assets) : null,
+    compatibilityDate: config9.compatibility_date ?? null,
+    compatibilityFlags: config9.compatibility_flags ?? [],
+    vars: config9.vars ?? {},
+    rules: (config9.rules ?? []).map((rule) => ({
+      type: rule.type,
+      globs: rule.globs
+    })),
+    uploadSourceMaps: config9.upload_source_maps ?? false
+  };
 }
-async function handleUnauthorized(request, _options, response) {
-  if (response.status !== 401) {
-    return;
-  }
-  if (hasWorkspaceApiKeyAuth()) {
-    return;
-  }
-  if (retriedRequests.has(request)) {
-    return;
-  }
-  const newAccessToken = await refreshAndSaveTokens();
-  if (!newAccessToken) {
-    return;
+async function resolveRedirectedConfigPath(redirectPath) {
+  const parsed = await readJsonFile(redirectPath);
+  const result = RedirectConfigSchema.safeParse(parsed);
+  if (!result.success) {
+    throw new ConfigInvalidError(`Invalid deploy redirect file: ${exports_external.prettifyError(result.error)}`, redirectPath);
   }
-  retriedRequests.add(request);
-  const requestId = request.headers.get("X-Request-ID");
-  return distribution_default(request.clone(), {
-    headers: {
-      ...requestId && { "X-Request-ID": requestId },
-      Authorization: `Bearer ${newAccessToken}`
-    }
-  });
-}
-var base44Client = distribution_default.create({
-  prefixUrl: getBase44ApiUrl(),
-  headers: {
-    "User-Agent": "Base44 CLI"
-  },
-  hooks: {
-    beforeRequest: [
-      (request) => {
-        request.headers.set("X-Request-ID", randomUUID2());
-      },
-      captureRequestBody,
-      async (request) => {
-        const workspaceApiKey = getWorkspaceApiKeyFromEnv();
-        if (workspaceApiKey && isWorkspaceApiKey(workspaceApiKey)) {
-          request.headers.set("api_key", workspaceApiKey);
-          return;
-        }
-        try {
-          const auth = await readAuth();
-          if (isTokenExpired(auth)) {
-            const newAccessToken = await refreshAndSaveTokens();
-            if (newAccessToken) {
-              request.headers.set("Authorization", `Bearer ${newAccessToken}`);
-              return;
-            }
-          }
-          request.headers.set("Authorization", `Bearer ${auth.accessToken}`);
-        } catch {}
-      }
-    ],
-    afterResponse: [handleUnauthorized]
+  const configPath = resolve3(dirname10(redirectPath), result.data.configPath);
+  if (!await pathExists(configPath)) {
+    throw new ConfigInvalidError(`Wrangler config referenced by ${redirectPath} does not exist: ${configPath}`, redirectPath, {
+      hints: [{ message: "Rebuild the project to regenerate the artifact" }]
+    });
   }
-});
-function getAppClient() {
-  const { id } = getAppContext();
-  return base44Client.extend({
-    prefixUrl: new URL(`/api/apps/${id}/`, getBase44ApiUrl()).href
-  });
+  return configPath;
 }
-function getSandboxClient(appId) {
-  return base44Client.extend({
-    prefixUrl: new URL(`/api/apps/${appId}/sandbox-bridge/`, getBase44ApiUrl()).href
-  });
+function toResolvedAssetsConfig(assets) {
+  return {
+    htmlHandling: assets.html_handling,
+    notFoundHandling: assets.not_found_handling,
+    runWorkerFirst: assets.run_worker_first,
+    headers: assets.headers,
+    redirects: assets.redirects
+  };
 }
-// src/core/clients/oauth-client.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
-var oauthClient = distribution_default.create({
-  prefixUrl: getBase44ApiUrl(),
-  headers: {
-    "User-Agent": "Base44 CLI"
-  },
-  hooks: {
-    beforeRequest: [
-      (request) => {
-        request.headers.set("X-Request-ID", randomUUID3());
-      }
-    ]
-  }
-});
-// src/core/auth/api.ts
-async function generateDeviceCode() {
-  const response = await oauthClient.post("oauth/device/code", {
-    json: {
-      client_id: AUTH_CLIENT_ID,
-      scope: "apps:read apps:write sandbox:write"
-    },
-    throwHttpErrors: false
-  });
-  if (!response.ok) {
-    throw new ApiError(`Failed to generate device code: ${response.status} ${response.statusText}`, { statusCode: response.status });
-  }
-  const result = DeviceCodeResponseSchema.safeParse(await response.json());
-  if (!result.success) {
-    throw new SchemaValidationError("Invalid device code response from server", result.error);
+
+// src/core/site/deploy-app.ts
+async function planAppDeploy(target) {
+  if (await detectFullStackArtifact(target.root)) {
+    return { kind: "full-stack" };
   }
-  return result.data;
+  const outputDirectory = target.site?.outputDirectory;
+  if (!outputDirectory) {
+    return { kind: "none" };
+  }
+  const outputDir = resolve4(target.root, outputDirectory);
+  return staticDeploymentsEnabled() ? { kind: "static-deployment", outputDir } : { kind: "static", outputDir };
+}
+// src/core/site/modules.ts
+import { stat as stat2 } from "node:fs/promises";
+import { relative as relative3, resolve as resolve5, sep } from "node:path";
+var MAX_TOTAL_MODULE_BYTES = 40 * 1024 * 1024;
+var MODULE_IGNORE = ["wrangler.json", ".dev.vars"];
+var RULE_TYPE_TO_MODULE_TYPE = {
+  ESModule: "esm",
+  CompiledWasm: "wasm",
+  Text: "text",
+  Data: "data"
+};
+function toPosix(path11) {
+  return path11.split(sep).join("/");
 }
-async function getTokenFromDeviceCode(deviceCode) {
-  const searchParams = new URLSearchParams;
-  searchParams.set("grant_type", "urn:ietf:params:oauth:grant-type:device_code");
-  searchParams.set("device_code", deviceCode);
-  searchParams.set("client_id", AUTH_CLIENT_ID);
-  const response = await oauthClient.post("oauth/token", {
-    body: searchParams.toString(),
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded"
-    },
-    throwHttpErrors: false
-  });
-  const json2 = await response.json();
-  if (!response.ok) {
-    const errorResult = OAuthErrorSchema.safeParse(json2);
-    if (!errorResult.success) {
-      throw new SchemaValidationError("Token request failed", errorResult.error);
-    }
-    const { error: error48, error_description } = errorResult.data;
-    if (error48 === "authorization_pending" || error48 === "slow_down") {
-      return null;
-    }
-    throw new ApiError(error_description ?? `OAuth error: ${error48}`, {
-      statusCode: response.status
+async function collectModules(config9) {
+  const entryPath = resolve5(config9.configDir, config9.main);
+  if (!await pathExists(entryPath)) {
+    throw new InvalidInputError(`Worker entry module does not exist: ${entryPath} (from "main" in ${config9.configPath})`, {
+      hints: [{ message: "Rebuild the project to regenerate the artifact" }]
     });
   }
-  const result = TokenResponseSchema.safeParse(json2);
-  if (!result.success) {
-    throw new SchemaValidationError("Invalid token response from server", result.error);
-  }
-  return result.data;
-}
-async function renewAccessToken(refreshToken) {
-  const searchParams = new URLSearchParams;
-  searchParams.set("grant_type", "refresh_token");
-  searchParams.set("refresh_token", refreshToken);
-  searchParams.set("client_id", AUTH_CLIENT_ID);
-  const response = await oauthClient.post("oauth/token", {
-    body: searchParams.toString(),
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded"
-    },
-    throwHttpErrors: false
-  });
-  const json2 = await response.json();
-  if (!response.ok) {
-    const errorResult = OAuthErrorSchema.safeParse(json2);
-    if (!errorResult.success) {
-      throw new ApiError(`Token refresh failed: ${response.statusText}`, {
-        statusCode: response.status
-      });
-    }
-    const { error: error48, error_description } = errorResult.data;
-    throw new ApiError(error_description ?? `OAuth error: ${error48}`, {
-      statusCode: response.status
+  const modulesByName = new Map;
+  const entryName = toPosix(relative3(config9.configDir, entryPath));
+  modulesByName.set(entryName, {
+    name: entryName,
+    absolutePath: entryPath,
+    size: 0,
+    type: "esm"
+  });
+  const ignore = [...MODULE_IGNORE];
+  if (config9.assetsDirectory?.startsWith(config9.configDir + sep)) {
+    ignore.push(`${toPosix(relative3(config9.configDir, config9.assetsDirectory))}/**`);
+  }
+  for (const rule of config9.rules) {
+    const type = RULE_TYPE_TO_MODULE_TYPE[rule.type];
+    if (!type) {
+      throw new InvalidInputError(`Unsupported module rule type "${rule.type}" in ${config9.configPath}. Supported: ${Object.keys(RULE_TYPE_TO_MODULE_TYPE).join(", ")}.`);
+    }
+    const matches = await globby(rule.globs, {
+      cwd: config9.configDir,
+      onlyFiles: true,
+      dot: true,
+      ignore
     });
+    for (const match of matches.sort()) {
+      if (!modulesByName.has(match)) {
+        modulesByName.set(match, {
+          name: match,
+          absolutePath: resolve5(config9.configDir, match),
+          size: 0,
+          type
+        });
+      }
+    }
   }
-  const result = TokenResponseSchema.safeParse(json2);
-  if (!result.success) {
-    throw new SchemaValidationError("Invalid token response from server", result.error);
-  }
-  return result.data;
-}
-async function getUserInfo(accessToken) {
-  const response = await oauthClient.get("oauth/userinfo", {
-    headers: { Authorization: `Bearer ${accessToken}` }
-  });
-  if (!response.ok) {
-    throw new ApiError(`Failed to fetch user info: ${response.status}`, {
-      statusCode: response.status
+  if (config9.uploadSourceMaps) {
+    const maps = await globby("**/*.map", {
+      cwd: config9.configDir,
+      onlyFiles: true,
+      dot: true,
+      ignore
     });
+    for (const map2 of maps.sort()) {
+      addSourcemap(modulesByName, config9.configDir, map2);
+    }
+  } else {
+    for (const name2 of [...modulesByName.keys()]) {
+      const mapName = `${name2}.map`;
+      if (await pathExists(resolve5(config9.configDir, mapName))) {
+        addSourcemap(modulesByName, config9.configDir, mapName);
+      }
+    }
   }
-  const result = UserInfoSchema.safeParse(await response.json());
-  if (!result.success) {
-    throw new SchemaValidationError("Invalid UserInfo response from server", result.error);
+  const modules = [...modulesByName.values()];
+  let totalBytes = 0;
+  for (const module of modules) {
+    module.size = (await stat2(module.absolutePath)).size;
+    totalBytes += module.size;
   }
-  return result.data;
+  if (totalBytes > MAX_TOTAL_MODULE_BYTES) {
+    throw new InvalidInputError(`Worker modules total ${totalBytes} bytes, which exceeds the 40 MB limit for Base44 full-stack deploys.`);
+  }
+  return modules;
 }
-// src/cli/commands/auth/login-flow.ts
-async function generateAndDisplayDeviceCode(log, runTask) {
-  const deviceCodeResponse = await runTask("Generating device code...", async () => {
-    return await generateDeviceCode();
-  }, {
-    successMessage: "Device code generated",
-    errorMessage: "Failed to generate device code"
+function addSourcemap(modulesByName, configDir, name2) {
+  if (modulesByName.has(name2))
+    return;
+  modulesByName.set(name2, {
+    name: name2,
+    absolutePath: resolve5(configDir, name2),
+    size: 0,
+    type: "sourcemap"
   });
-  log.info(`Verification code: ${theme.styles.bold(deviceCodeResponse.userCode)}` + `
-Please confirm this code at: ${deviceCodeResponse.verificationUri}`);
-  return deviceCodeResponse;
 }
-async function waitForAuthentication(deviceCode, expiresIn, interval, runTask) {
-  let tokenResponse;
-  try {
-    await runTask("Waiting for authentication...", async () => {
-      await pWaitFor(async () => {
-        const result = await getTokenFromDeviceCode(deviceCode);
-        if (result !== null) {
-          tokenResponse = result;
-          return true;
-        }
-        return false;
-      }, {
-        interval: interval * 1000,
-        timeout: expiresIn * 1000
-      });
-    }, {
-      successMessage: "Authentication completed!",
-      errorMessage: "Authentication failed"
-    });
-  } catch (error48) {
-    if (error48 instanceof Error && error48.message.includes("timed out")) {
-      throw new AuthExpiredError("Authentication timed out. Please try again.");
-    }
-    throw error48;
+
+// src/core/site/full-stack.ts
+async function deployFullStack(options) {
+  const { projectRoot, gitHash, concurrency, progress } = options;
+  const config9 = await resolveWranglerConfig(projectRoot);
+  if (!config9.compatibilityFlags.includes("nodejs_compat")) {
+    progress?.onWarning?.("The wrangler config has no 'nodejs_compat' compatibility flag; Node.js built-ins will be unavailable at runtime. Enable it in your framework's Cloudflare adapter settings if your server code needs Node APIs.");
   }
-  if (tokenResponse === undefined) {
-    throw new InternalError("Failed to retrieve authentication token.");
+  if (config9.vars && Object.keys(config9.vars).length > 0) {
+    progress?.onWarning?.("wrangler 'vars' are not supported and were ignored — a worker's environment comes from the app's secrets (base44 secrets set).");
   }
-  return tokenResponse;
-}
-async function saveAuthData(response, userInfo) {
-  const expiresAt = Date.now() + response.expiresIn * 1000;
-  await writeAuth({
-    accessToken: response.accessToken,
-    refreshToken: response.refreshToken,
-    expiresAt,
-    email: userInfo.email,
-    name: userInfo.name
+  const modules = await collectModules(config9);
+  let assets = { manifest: {}, filesByHash: new Map };
+  if (config9.assetsDirectory && await pathExists(config9.assetsDirectory)) {
+    assets = await buildAssetManifest(config9.assetsDirectory, getAppContext().id);
+  }
+  const created = await createDeployment({
+    git_hash: gitHash,
+    config: {
+      main: config9.main,
+      compatibility_date: config9.compatibilityDate,
+      compatibility_flags: config9.compatibilityFlags,
+      assets: buildAssetsConfig(config9.assetsConfig, progress)
+    },
+    asset_manifest: assets.manifest
   });
+  if (created.assetUploads && created.assetUploads.type !== "cf") {
+    throw new ApiError(`The server answered a full-stack deploy with the "${created.assetUploads.type}" upload target.`);
+  }
+  const totalAssets = Object.keys(assets.manifest).length;
+  const newAssets = created.assetUploads ? new Set(created.assetUploads.buckets.flat()).size : 0;
+  progress?.onAssets?.({ totalAssets, newAssets });
+  const completionJwt = created.assetUploads ? await uploadAssetBuckets(created.assetUploads, assets.filesByHash, {
+    concurrency,
+    onProgress: progress?.onAssetUpload
+  }) : null;
+  progress?.onWorker?.({ moduleCount: modules.length });
+  const finalized = await finalizeDeployment(created.deploymentId, completionJwt, modules);
+  return { deploymentId: finalized.deploymentId, gitHash };
 }
-async function login({
-  log,
-  runTask
-}) {
-  const deviceCodeResponse = await generateAndDisplayDeviceCode(log, runTask);
-  const token = await waitForAuthentication(deviceCodeResponse.deviceCode, deviceCodeResponse.expiresIn, deviceCodeResponse.interval, runTask);
-  const userInfo = await getUserInfo(token.accessToken);
-  await saveAuthData(token, userInfo);
-  return {
-    outroMessage: `Successfully logged in as ${theme.styles.bold(userInfo.email)}`
-  };
-}
-
-// src/cli/utils/command/middleware.ts
-async function ensureAuth(ctx) {
-  if (hasWorkspaceApiKeyAuth()) {
-    ctx.errorReporter.setContext({
-      user: { email: "workspace-api-key", name: "Workspace API key" }
-    });
-    return;
+function buildAssetsConfig(assetsConfig, progress) {
+  if (!assetsConfig)
+    return null;
+  if (assetsConfig.headers || assetsConfig.redirects) {
+    progress?.onWarning?.("_headers/_redirects files are not supported yet and were ignored for this deploy.");
   }
-  await seedAuthFromEnv();
-  const loggedIn = await isLoggedIn();
-  if (!loggedIn) {
-    ctx.log.info("You need to login first to continue.");
-    await login(ctx);
+  let runWorkerFirst;
+  if (Array.isArray(assetsConfig.runWorkerFirst)) {
+    progress?.onWarning?.("'run_worker_first' route patterns are not supported yet and were ignored for this deploy.");
+  } else {
+    runWorkerFirst = assetsConfig.runWorkerFirst;
   }
-  try {
-    const userInfo = await readAuth();
-    ctx.errorReporter.setContext({
-      user: { email: userInfo.email, name: userInfo.name }
-    });
-  } catch {}
-}
-async function ensureAppContext(ctx, options = {}) {
-  const appContext = await initAppContext(options);
-  ctx.app = appContext;
-  ctx.errorReporter.setContext({ appId: appContext.id });
+  return {
+    html_handling: assetsConfig.htmlHandling,
+    not_found_handling: assetsConfig.notFoundHandling,
+    run_worker_first: runWorkerFirst
+  };
 }
-
 // ../../node_modules/is-plain-obj/index.js
 function isPlainObject2(value) {
   if (typeof value !== "object" || value === null) {
@@ -249029,13 +249095,13 @@ var getJoinLength = (uint8Arrays) => {
 var isTemplateString = (templates) => Array.isArray(templates) && Array.isArray(templates.raw);
 var parseTemplates = (templates, expressions) => {
   let tokens = [];
-  for (const [index, template2] of templates.entries()) {
+  for (const [index, template] of templates.entries()) {
     tokens = parseTemplate({
       templates,
       expressions,
       tokens,
       index,
-      template: template2
+      template
     });
   }
   if (tokens.length === 0) {
@@ -249044,11 +249110,11 @@ var parseTemplates = (templates, expressions) => {
   const [file2, ...commandArguments] = tokens;
   return [file2, commandArguments, {}];
 };
-var parseTemplate = ({ templates, expressions, tokens, index, template: template2 }) => {
-  if (template2 === undefined) {
+var parseTemplate = ({ templates, expressions, tokens, index, template }) => {
+  if (template === undefined) {
     throw new TypeError(`Invalid backslash sequence: ${templates.raw[index]}`);
   }
-  const { nextTokens, leadingWhitespaces, trailingWhitespaces } = splitByWhitespaces(template2, templates.raw[index]);
+  const { nextTokens, leadingWhitespaces, trailingWhitespaces } = splitByWhitespaces(template, templates.raw[index]);
   const newTokens = concatTokens(tokens, nextTokens, leadingWhitespaces);
   if (index === expressions.length) {
     return newTokens;
@@ -249057,18 +249123,18 @@ var parseTemplate = ({ templates, expressions, tokens, index, template: template
   const expressionTokens = Array.isArray(expression) ? expression.map((expression2) => parseExpression(expression2)) : [parseExpression(expression)];
   return concatTokens(newTokens, expressionTokens, trailingWhitespaces);
 };
-var splitByWhitespaces = (template2, rawTemplate) => {
+var splitByWhitespaces = (template, rawTemplate) => {
   if (rawTemplate.length === 0) {
     return { nextTokens: [], leadingWhitespaces: false, trailingWhitespaces: false };
   }
   const nextTokens = [];
   let templateStart = 0;
   const leadingWhitespaces = DELIMITERS.has(rawTemplate[0]);
-  for (let templateIndex = 0, rawIndex = 0;templateIndex < template2.length; templateIndex += 1, rawIndex += 1) {
+  for (let templateIndex = 0, rawIndex = 0;templateIndex < template.length; templateIndex += 1, rawIndex += 1) {
     const rawCharacter = rawTemplate[rawIndex];
     if (DELIMITERS.has(rawCharacter)) {
       if (templateStart !== templateIndex) {
-        nextTokens.push(template2.slice(templateStart, templateIndex));
+        nextTokens.push(template.slice(templateStart, templateIndex));
       }
       templateStart = templateIndex + 1;
     } else if (rawCharacter === "\\") {
@@ -249084,9 +249150,9 @@ var splitByWhitespaces = (template2, rawTemplate) => {
       }
     }
   }
-  const trailingWhitespaces = templateStart === template2.length;
+  const trailingWhitespaces = templateStart === template.length;
   if (!trailingWhitespaces) {
-    nextTokens.push(template2.slice(templateStart));
+    nextTokens.push(template.slice(templateStart));
   }
   return { nextTokens, leadingWhitespaces, trailingWhitespaces };
 };
@@ -250480,8 +250546,8 @@ var disconnect = (anyProcess) => {
 // ../../node_modules/execa/lib/utils/deferred.js
 var createDeferred = () => {
   const methods = {};
-  const promise2 = new Promise((resolve4, reject) => {
-    Object.assign(methods, { resolve: resolve4, reject });
+  const promise2 = new Promise((resolve6, reject) => {
+    Object.assign(methods, { resolve: resolve6, reject });
   });
   return Object.assign(promise2, methods);
 };
@@ -254845,11 +254911,11 @@ var addConcurrentStream = (concurrentStreams, stream, waitName) => {
   const promises = weakMap.get(stream);
   const promise2 = createDeferred();
   promises.push(promise2);
-  const resolve4 = promise2.resolve.bind(promise2);
-  return { resolve: resolve4, promises };
+  const resolve6 = promise2.resolve.bind(promise2);
+  return { resolve: resolve6, promises };
 };
-var waitForConcurrentStreams = async ({ resolve: resolve4, promises }, subprocess) => {
-  resolve4();
+var waitForConcurrentStreams = async ({ resolve: resolve6, promises }, subprocess) => {
+  resolve6();
   const [isSubprocessExit] = await Promise.race([
     Promise.allSettled([true, subprocess]),
     Promise.all([false, ...promises])
@@ -255428,6 +255494,370 @@ var {
   getCancelSignal: getCancelSignal2
 } = getIpcExport();
 
+// src/core/utils/git.ts
+var GIT_HASH_PATTERN = /^[a-fA-F0-9]{7,64}$/;
+function isGitCommitHash(value) {
+  return GIT_HASH_PATTERN.test(value);
+}
+
+// src/core/site/git-hash.ts
+async function resolveGitHash(projectRoot, explicit) {
+  const hash2 = explicit ?? await gitHead(projectRoot);
+  if (!hash2 || !isGitCommitHash(hash2)) {
+    throw new InvalidInputError(explicit ? `'${explicit}' is not a git commit hash.` : "Deployments are addressed by the commit that produced the build, and no git commit was found.", {
+      hints: [
+        {
+          message: "Run the deploy from a git checkout, or pass the commit explicitly with --git-hash."
+        }
+      ]
+    });
+  }
+  return hash2;
+}
+async function gitHead(projectRoot) {
+  try {
+    const { stdout } = await execa("git", ["rev-parse", "HEAD"], {
+      cwd: projectRoot
+    });
+    return stdout.trim();
+  } catch {
+    return null;
+  }
+}
+// src/core/project/deploy.ts
+function hasResourcesToDeploy(projectData) {
+  const {
+    project,
+    entities,
+    functions,
+    agents,
+    agentSkills,
+    connectors,
+    authConfig
+  } = projectData;
+  const hasSite = Boolean(project.site?.outputDirectory);
+  const hasEntities = entities.length > 0;
+  const hasFunctions = functions.length > 0;
+  const hasAgents = agents.length > 0;
+  const hasAgentSkills = agentSkills.length > 0;
+  const hasConnectors = connectors.length > 0;
+  const hasAuthConfig = authConfig.length > 0;
+  const hasVisibility = Boolean(project.visibility);
+  return hasEntities || hasFunctions || hasAgents || hasAgentSkills || hasConnectors || hasAuthConfig || hasVisibility || hasSite;
+}
+async function deployAll(projectData, options) {
+  const {
+    project,
+    entities,
+    functions,
+    agents,
+    agentSkills,
+    connectors,
+    authConfig
+  } = projectData;
+  await setAppVisibility(project.visibility);
+  if (project.visibility) {
+    options?.onVisibilitySet?.(project.visibility);
+  }
+  await entityResource.push(entities);
+  await deployFunctionsSequentially(functions, {
+    onStart: options?.onFunctionStart,
+    onResult: options?.onFunctionResult
+  });
+  await agentSkillResource.push(agentSkills);
+  await agentResource.push(agents);
+  await authConfigResource.push(authConfig);
+  const skipConnectorSync = connectors.length === 0 && hasWorkspaceApiKeyAuth();
+  const connectorResults = skipConnectorSync ? [] : (await pushConnectors(connectors)).results;
+  if (project.site?.outputDirectory) {
+    const outputDir = resolve6(project.root, project.site.outputDirectory);
+    const { appUrl } = await deploySite(outputDir);
+    return { appUrl, connectorResults };
+  }
+  return { connectorResults };
+}
+// src/core/clients/base44-client.ts
+var retriedRequests = new WeakSet;
+async function captureRequestBody(request, options) {
+  if (request.body == null) {
+    return;
+  }
+  try {
+    const cloned = request.clone();
+    const text = await cloned.text();
+    options.context.__requestBody = text;
+  } catch {}
+}
+async function handleUnauthorized(request, _options, response) {
+  if (response.status !== 401) {
+    return;
+  }
+  if (hasWorkspaceApiKeyAuth()) {
+    return;
+  }
+  if (retriedRequests.has(request)) {
+    return;
+  }
+  const newAccessToken = await refreshAndSaveTokens();
+  if (!newAccessToken) {
+    return;
+  }
+  retriedRequests.add(request);
+  const requestId = request.headers.get("X-Request-ID");
+  return distribution_default(request.clone(), {
+    headers: {
+      ...requestId && { "X-Request-ID": requestId },
+      Authorization: `Bearer ${newAccessToken}`
+    }
+  });
+}
+var base44Client = distribution_default.create({
+  prefixUrl: getBase44ApiUrl(),
+  headers: {
+    "User-Agent": "Base44 CLI"
+  },
+  hooks: {
+    beforeRequest: [
+      (request) => {
+        request.headers.set("X-Request-ID", randomUUID2());
+      },
+      captureRequestBody,
+      async (request) => {
+        const workspaceApiKey = getWorkspaceApiKeyFromEnv();
+        if (workspaceApiKey && isWorkspaceApiKey(workspaceApiKey)) {
+          request.headers.set("api_key", workspaceApiKey);
+          return;
+        }
+        try {
+          const auth = await readAuth();
+          if (isTokenExpired(auth)) {
+            const newAccessToken = await refreshAndSaveTokens();
+            if (newAccessToken) {
+              request.headers.set("Authorization", `Bearer ${newAccessToken}`);
+              return;
+            }
+          }
+          request.headers.set("Authorization", `Bearer ${auth.accessToken}`);
+        } catch {}
+      }
+    ],
+    afterResponse: [handleUnauthorized]
+  }
+});
+function getAppClient() {
+  const { id } = getAppContext();
+  return base44Client.extend({
+    prefixUrl: new URL(`/api/apps/${id}/`, getBase44ApiUrl()).href
+  });
+}
+function getSandboxClient(appId) {
+  return base44Client.extend({
+    prefixUrl: new URL(`/api/apps/${appId}/sandbox-bridge/`, getBase44ApiUrl()).href
+  });
+}
+// src/core/clients/oauth-client.ts
+import { randomUUID as randomUUID3 } from "node:crypto";
+var oauthClient = distribution_default.create({
+  prefixUrl: getBase44ApiUrl(),
+  headers: {
+    "User-Agent": "Base44 CLI"
+  },
+  hooks: {
+    beforeRequest: [
+      (request) => {
+        request.headers.set("X-Request-ID", randomUUID3());
+      }
+    ]
+  }
+});
+// src/core/auth/api.ts
+async function generateDeviceCode() {
+  const response = await oauthClient.post("oauth/device/code", {
+    json: {
+      client_id: AUTH_CLIENT_ID,
+      scope: "apps:read apps:write sandbox:write"
+    },
+    throwHttpErrors: false
+  });
+  if (!response.ok) {
+    throw new ApiError(`Failed to generate device code: ${response.status} ${response.statusText}`, { statusCode: response.status });
+  }
+  const result = DeviceCodeResponseSchema.safeParse(await response.json());
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid device code response from server", result.error);
+  }
+  return result.data;
+}
+async function getTokenFromDeviceCode(deviceCode) {
+  const searchParams = new URLSearchParams;
+  searchParams.set("grant_type", "urn:ietf:params:oauth:grant-type:device_code");
+  searchParams.set("device_code", deviceCode);
+  searchParams.set("client_id", AUTH_CLIENT_ID);
+  const response = await oauthClient.post("oauth/token", {
+    body: searchParams.toString(),
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    throwHttpErrors: false
+  });
+  const json2 = await response.json();
+  if (!response.ok) {
+    const errorResult = OAuthErrorSchema.safeParse(json2);
+    if (!errorResult.success) {
+      throw new SchemaValidationError("Token request failed", errorResult.error);
+    }
+    const { error: error48, error_description } = errorResult.data;
+    if (error48 === "authorization_pending" || error48 === "slow_down") {
+      return null;
+    }
+    throw new ApiError(error_description ?? `OAuth error: ${error48}`, {
+      statusCode: response.status
+    });
+  }
+  const result = TokenResponseSchema.safeParse(json2);
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid token response from server", result.error);
+  }
+  return result.data;
+}
+async function renewAccessToken(refreshToken) {
+  const searchParams = new URLSearchParams;
+  searchParams.set("grant_type", "refresh_token");
+  searchParams.set("refresh_token", refreshToken);
+  searchParams.set("client_id", AUTH_CLIENT_ID);
+  const response = await oauthClient.post("oauth/token", {
+    body: searchParams.toString(),
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    throwHttpErrors: false
+  });
+  const json2 = await response.json();
+  if (!response.ok) {
+    const errorResult = OAuthErrorSchema.safeParse(json2);
+    if (!errorResult.success) {
+      throw new ApiError(`Token refresh failed: ${response.statusText}`, {
+        statusCode: response.status
+      });
+    }
+    const { error: error48, error_description } = errorResult.data;
+    throw new ApiError(error_description ?? `OAuth error: ${error48}`, {
+      statusCode: response.status
+    });
+  }
+  const result = TokenResponseSchema.safeParse(json2);
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid token response from server", result.error);
+  }
+  return result.data;
+}
+async function getUserInfo(accessToken) {
+  const response = await oauthClient.get("oauth/userinfo", {
+    headers: { Authorization: `Bearer ${accessToken}` }
+  });
+  if (!response.ok) {
+    throw new ApiError(`Failed to fetch user info: ${response.status}`, {
+      statusCode: response.status
+    });
+  }
+  const result = UserInfoSchema.safeParse(await response.json());
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid UserInfo response from server", result.error);
+  }
+  return result.data;
+}
+// src/cli/commands/auth/login-flow.ts
+async function generateAndDisplayDeviceCode(log, runTask) {
+  const deviceCodeResponse = await runTask("Generating device code...", async () => {
+    return await generateDeviceCode();
+  }, {
+    successMessage: "Device code generated",
+    errorMessage: "Failed to generate device code"
+  });
+  log.info(`Verification code: ${theme.styles.bold(deviceCodeResponse.userCode)}` + `
+Please confirm this code at: ${deviceCodeResponse.verificationUri}`);
+  return deviceCodeResponse;
+}
+async function waitForAuthentication(deviceCode, expiresIn, interval, runTask) {
+  let tokenResponse;
+  try {
+    await runTask("Waiting for authentication...", async () => {
+      await pWaitFor(async () => {
+        const result = await getTokenFromDeviceCode(deviceCode);
+        if (result !== null) {
+          tokenResponse = result;
+          return true;
+        }
+        return false;
+      }, {
+        interval: interval * 1000,
+        timeout: expiresIn * 1000
+      });
+    }, {
+      successMessage: "Authentication completed!",
+      errorMessage: "Authentication failed"
+    });
+  } catch (error48) {
+    if (error48 instanceof Error && error48.message.includes("timed out")) {
+      throw new AuthExpiredError("Authentication timed out. Please try again.");
+    }
+    throw error48;
+  }
+  if (tokenResponse === undefined) {
+    throw new InternalError("Failed to retrieve authentication token.");
+  }
+  return tokenResponse;
+}
+async function saveAuthData(response, userInfo) {
+  const expiresAt = Date.now() + response.expiresIn * 1000;
+  await writeAuth({
+    accessToken: response.accessToken,
+    refreshToken: response.refreshToken,
+    expiresAt,
+    email: userInfo.email,
+    name: userInfo.name
+  });
+}
+async function login({
+  log,
+  runTask
+}) {
+  const deviceCodeResponse = await generateAndDisplayDeviceCode(log, runTask);
+  const token = await waitForAuthentication(deviceCodeResponse.deviceCode, deviceCodeResponse.expiresIn, deviceCodeResponse.interval, runTask);
+  const userInfo = await getUserInfo(token.accessToken);
+  await saveAuthData(token, userInfo);
+  return {
+    outroMessage: `Successfully logged in as ${theme.styles.bold(userInfo.email)}`
+  };
+}
+
+// src/cli/utils/command/middleware.ts
+async function ensureAuth(ctx) {
+  if (hasWorkspaceApiKeyAuth()) {
+    ctx.errorReporter.setContext({
+      user: { email: "workspace-api-key", name: "Workspace API key" }
+    });
+    return;
+  }
+  await seedAuthFromEnv();
+  const loggedIn = await isLoggedIn();
+  if (!loggedIn) {
+    ctx.log.info("You need to login first to continue.");
+    await login(ctx);
+  }
+  try {
+    const userInfo = await readAuth();
+    ctx.errorReporter.setContext({
+      user: { email: userInfo.email, name: userInfo.name }
+    });
+  } catch {}
+}
+async function ensureAppContext(ctx, options = {}) {
+  const appContext = await initAppContext(options);
+  ctx.app = appContext;
+  ctx.errorReporter.setContext({ appId: appContext.id });
+}
+
 // src/cli/utils/version-check.ts
 async function checkForUpgrade() {
   const testLatestVersion = getTestOverrides()?.latestVersion;
@@ -255586,6 +256016,14 @@ function writeJsonError(error48) {
       envelope.hints = error48.hints;
     }
   }
+  if (error48 instanceof ApiError) {
+    if (error48.statusCode !== undefined) {
+      envelope.statusCode = error48.statusCode;
+    }
+    if (error48.requestId !== undefined) {
+      envelope.requestId = error48.requestId;
+    }
+  }
   process.stdout.write(`${JSON.stringify(envelope)}
 `);
 }
@@ -255682,6 +256120,18 @@ async function confirmPush({
   });
   return !Ct(proceed) && proceed;
 }
+// src/cli/utils/datetime.ts
+var import_ms2 = __toESM(require_ms(), 1);
+var HAS_TIMEZONE_SUFFIX = /Z$|[+-]\d{2}:\d{2}$/;
+function normalizeDatetime(value) {
+  const duration3 = import_ms2.default(value);
+  if (duration3 !== undefined) {
+    return new Date(Date.now() - duration3).toISOString();
+  }
+  if (HAS_TIMEZONE_SUFFIX.test(value))
+    return value;
+  return `${value}Z`;
+}
 // src/cli/utils/json.ts
 function toJsonStdout(result) {
   return `${JSON.stringify(result, null, 2)}
@@ -255820,11 +256270,6 @@ function verifyDenoInstalled(context) {
     });
   }
 }
-// src/core/utils/git.ts
-var GIT_HASH_PATTERN = /^[a-fA-F0-9]{7,64}$/;
-function isGitCommitHash(value) {
-  return GIT_HASH_PATTERN.test(value);
-}
 // src/core/workspace/schema.ts
 var WorkspaceSchema = exports_external.object({
   id: exports_external.string(),
@@ -255899,7 +256344,7 @@ async function pullAction({
   runTask: runTask2
 }) {
   const { project: project2 } = await readProjectConfig();
-  const dir = join17(dirname10(project2.configPath), project2.agentSkillsDir);
+  const dir = join18(dirname11(project2.configPath), project2.agentSkillsDir);
   const remote = await runTask2("Fetching agent skills from Base44", () => fetchAgentSkills(), {
     successMessage: "Agent skills fetched successfully",
     errorMessage: "Failed to fetch agent skills"
@@ -255955,14 +256400,14 @@ function getAgentSkillsCommand() {
 }
 
 // src/cli/commands/agents/pull.ts
-import { dirname as dirname11, join as join18 } from "node:path";
+import { dirname as dirname12, join as join19 } from "node:path";
 async function pullAgentsAction({
   log,
   runTask: runTask2
 }) {
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname11(project2.configPath);
-  const agentsDir = join18(configDir, project2.agentsDir);
+  const configDir = dirname12(project2.configPath);
+  const agentsDir = join19(configDir, project2.agentsDir);
   const remoteAgents = await runTask2("Fetching agents from Base44", async () => {
     return await fetchAgents();
   }, {
@@ -256032,12 +256477,12 @@ function getAgentsCommand() {
 }
 
 // src/cli/commands/auth/password-login.ts
-import { dirname as dirname12, join as join19 } from "node:path";
+import { dirname as dirname13, join as join20 } from "node:path";
 async function passwordLoginAction({ log, runTask: runTask2 }, action) {
   const shouldEnable = action === "enable";
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname12(project2.configPath);
-  const authDir = join19(configDir, project2.authDir);
+  const configDir = dirname13(project2.configPath);
+  const authDir = join20(configDir, project2.authDir);
   const updated = await runTask2("Updating local auth config", async () => {
     const current = await readAuthConfig(authDir) ?? DEFAULT_AUTH_CONFIG;
     const merged = { ...current, enableUsernamePassword: shouldEnable };
@@ -256057,14 +256502,14 @@ function getPasswordLoginCommand() {
 }
 
 // src/cli/commands/auth/pull.ts
-import { dirname as dirname13, join as join20 } from "node:path";
+import { dirname as dirname14, join as join21 } from "node:path";
 async function pullAuthAction({
   log,
   runTask: runTask2
 }) {
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname13(project2.configPath);
-  const authDir = join20(configDir, project2.authDir);
+  const configDir = dirname14(project2.configPath);
+  const authDir = join21(configDir, project2.authDir);
   const remoteConfig = await runTask2("Fetching auth config from Base44", async () => {
     return await pullAuthConfig();
   }, {
@@ -256128,7 +256573,7 @@ function getAuthPushCommand() {
 }
 
 // src/cli/commands/auth/social-login.ts
-import { dirname as dirname14, join as join21, resolve as resolve4 } from "node:path";
+import { dirname as dirname15, join as join22, resolve as resolve7 } from "node:path";
 var PROVIDER_LABELS = {
   google: "Google",
   microsoft: "Microsoft",
@@ -256168,7 +256613,7 @@ async function socialLoginAction({ log, isNonInteractive, runTask: runTask2 }, p
   let clientSecret;
   if (useCustomOAuth && oauth && oauthCli && hasSecretOptions(options)) {
     if (options.envFile) {
-      const secrets = await parseEnvFile(resolve4(options.envFile));
+      const secrets = await parseEnvFile(resolve7(options.envFile));
       const value = secrets[oauthCli.envVar];
       if (!value) {
         throw new InvalidInputError(`Key "${oauthCli.envVar}" not found in ${options.envFile}.`);
@@ -256198,8 +256643,8 @@ async function socialLoginAction({ log, isNonInteractive, runTask: runTask2 }, p
     }
   }
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname14(project2.configPath);
-  const authDir = join21(configDir, project2.authDir);
+  const configDir = dirname15(project2.configPath);
+  const authDir = join22(configDir, project2.authDir);
   const { config: updated } = await runTask2("Updating local auth config", async () => updateSocialLoginConfig(authDir, provider, shouldEnable, useCustomOAuth && options.clientId ? { clientId: options.clientId } : undefined));
   if (clientSecret) {
     await runTask2("Saving client secret", async () => pushCustomOAuthSecret(provider, clientSecret));
@@ -256224,7 +256669,7 @@ function getSocialLoginCommand() {
 }
 
 // src/cli/commands/auth/sso.ts
-import { dirname as dirname15, join as join22, resolve as resolve5 } from "node:path";
+import { dirname as dirname16, join as join23, resolve as resolve8 } from "node:path";
 var SSOConfigFileSchema = exports_external.object({
   provider: exports_external.enum(Object.values(KNOWN_SSO_PROVIDERS)),
   clientId: exports_external.string(),
@@ -256240,7 +256685,7 @@ var SSOConfigFileSchema = exports_external.object({
   ssoName: exports_external.string().optional()
 });
 async function loadSSOConfigFile(filePath) {
-  const resolved = resolve5(filePath);
+  const resolved = resolve8(filePath);
   const raw2 = await readJsonFile(resolved);
   const result = SSOConfigFileSchema.safeParse(raw2);
   if (!result.success) {
@@ -256328,7 +256773,7 @@ async function ssoEnableAction({ isNonInteractive, runTask: runTask2 }, options)
   }
   let clientSecret;
   if (merged.envFile && !merged.clientSecret) {
-    const secrets2 = await parseEnvFile(resolve5(merged.envFile));
+    const secrets2 = await parseEnvFile(resolve8(merged.envFile));
     const value = secrets2.sso_client_secret;
     if (!value) {
       throw new InvalidInputError(`Key "sso_client_secret" not found in ${merged.envFile}.`);
@@ -256387,8 +256832,8 @@ async function ssoEnableAction({ isNonInteractive, runTask: runTask2 }, options)
     throw error48;
   }
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname15(project2.configPath);
-  const authDir = join22(configDir, project2.authDir);
+  const configDir = dirname16(project2.configPath);
+  const authDir = join23(configDir, project2.authDir);
   await runTask2("Updating local auth config", async () => updateSSOConfig(authDir, provider, true));
   await runTask2("Saving SSO credentials", async () => pushSSOSecrets(secrets));
   return {
@@ -256403,8 +256848,8 @@ async function ssoDisableAction({ log, runTask: runTask2 }, options) {
     throw new InvalidInputError("Configuration options cannot be used with disable. To disable SSO: base44 auth sso disable");
   }
   const { project: project2 } = await readProjectConfig();
-  const configDir = dirname15(project2.configPath);
-  const authDir = join22(configDir, project2.authDir);
+  const configDir = dirname16(project2.configPath);
+  const authDir = join23(configDir, project2.authDir);
   const updated = await runTask2("Updating local auth config", async () => updateSSOConfig(authDir, null, false));
   await runTask2("Removing SSO credentials", async () => deleteSSOSecrets());
   if (!hasAnyLoginMethod(updated)) {
@@ -256966,19 +257411,19 @@ var baseOpen = async (options) => {
   }
   const subprocess = childProcess3.spawn(command2, cliArguments, childProcessOptions);
   if (options.wait) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve9, reject) => {
       subprocess.once("error", reject);
       subprocess.once("close", (exitCode) => {
         if (!options.allowNonzeroExitCode && exitCode !== 0) {
           reject(new Error(`Exited with code ${exitCode}`));
           return;
         }
-        resolve6(subprocess);
+        resolve9(subprocess);
       });
     });
   }
   if (isFallbackAttempt) {
-    return new Promise((resolve6, reject) => {
+    return new Promise((resolve9, reject) => {
       subprocess.once("error", reject);
       subprocess.once("spawn", () => {
         subprocess.once("close", (exitCode) => {
@@ -256988,17 +257433,17 @@ var baseOpen = async (options) => {
             return;
           }
           subprocess.unref();
-          resolve6(subprocess);
+          resolve9(subprocess);
         });
       });
     });
   }
   subprocess.unref();
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve9, reject) => {
     subprocess.once("error", reject);
     subprocess.once("spawn", () => {
       subprocess.off("error", reject);
-      resolve6(subprocess);
+      resolve9(subprocess);
     });
   });
 };
@@ -257261,13 +257706,13 @@ function getConnectorsListAvailableCommand() {
 }
 
 // src/cli/commands/connectors/pull.ts
-import { dirname as dirname16, join as join23, resolve as resolve6 } from "node:path";
+import { dirname as dirname17, join as join24, resolve as resolve9 } from "node:path";
 async function resolveConnectorsDir(options) {
   if (!getAppContext().projectRoot) {
-    return resolve6(options.dir ?? "connectors");
+    return resolve9(options.dir ?? "connectors");
   }
   const { project: project2 } = await readProjectConfig();
-  return join23(dirname16(project2.configPath), project2.connectorsDir);
+  return join24(dirname17(project2.configPath), project2.connectorsDir);
 }
 async function pullConnectorsAction({ log, runTask: runTask2, jsonMode }, options) {
   const connectorsDir = await resolveConnectorsDir(options);
@@ -257308,10 +257753,10 @@ function getConnectorsPullCommand() {
 }
 
 // src/cli/commands/connectors/push.ts
-import { resolve as resolve7 } from "node:path";
+import { resolve as resolve10 } from "node:path";
 async function readConnectorsToPush(options) {
   if (!getAppContext().projectRoot) {
-    return readAllConnectors(resolve7(options.dir ?? "connectors"));
+    return readAllConnectors(resolve10(options.dir ?? "connectors"));
   }
   const { connectors } = await readProjectConfig();
   return connectors;
@@ -257539,8 +257984,8 @@ function getDeleteCommand() {
 }
 
 // src/cli/commands/functions/formatDeployResult.ts
-function formatDuration(ms) {
-  return `${(ms / 1000).toFixed(1)}s`;
+function formatDuration(ms2) {
+  return `${(ms2 / 1000).toFixed(1)}s`;
 }
 function formatDeployResult(result, log) {
   const label = result.name.padEnd(25);
@@ -257675,11 +258120,11 @@ function getListCommand() {
 }
 
 // src/cli/commands/functions/pull.ts
-import { dirname as dirname17, join as join24 } from "node:path";
+import { dirname as dirname18, join as join25 } from "node:path";
 async function pullFunctionsAction({ log, runTask: runTask2 }, name2) {
   const { project: project2, functions } = await readProjectConfig();
-  const configDir = dirname17(project2.configPath);
-  const functionsDir = join24(configDir, project2.functionsDir);
+  const configDir = dirname18(project2.configPath);
+  const functionsDir = join25(configDir, project2.functionsDir);
   const pluginFunctionNames = new Set(functions.filter((fn) => fn.source.type === "plugin").map((fn) => fn.name));
   const remoteFunctions = await runTask2("Fetching functions from Base44", async () => {
     const { functions: functions2 } = await listDeployedFunctions();
@@ -257812,11 +258257,11 @@ function getBuildCommand() {
 }
 
 // src/cli/commands/project/create.ts
-import { basename as basename5, resolve as resolve8 } from "node:path";
+import { basename as basename5, resolve as resolve11 } from "node:path";
 var import_kebabCase = __toESM(require_kebabCase(), 1);
 
 // src/cli/commands/project/scaffold-shared.ts
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 var DEFAULT_TEMPLATE_ID = "backend-only";
 async function getTemplateById(templateId) {
   const templates = await listTemplates();
@@ -257873,9 +258318,13 @@ async function completeProjectSetup({
       const { appUrl } = await runTask2("Installing dependencies...", async (updateMessage) => {
         await execa({ cwd: resolvedPath, shell: true })`${installCommand}`;
         updateMessage("Building project...");
-        await execa({ cwd: resolvedPath, shell: true })`${buildCommand}`;
+        await execa({
+          cwd: resolvedPath,
+          shell: true,
+          env: { VITE_BASE44_APP_ID: projectId }
+        })`${buildCommand}`;
         updateMessage("Deploying site...");
-        return await deploySite(join25(resolvedPath, outputDirectory));
+        return await deploySite(join26(resolvedPath, outputDirectory));
       }, {
         successMessage: theme.colors.base44Orange("Site deployed successfully"),
         errorMessage: "Failed to deploy site"
@@ -258004,7 +258453,7 @@ async function createInteractive(options, ctx) {
   }, ctx);
 }
 async function createNonInteractive(options, ctx) {
-  ctx.log.info(`Creating a new project at ${resolve8(options.path)}`);
+  ctx.log.info(`Creating a new project at ${resolve11(options.path)}`);
   const template2 = await getTemplateById(options.template ?? DEFAULT_TEMPLATE_ID);
   return await executeCreate({
     template: template2,
@@ -258028,7 +258477,7 @@ async function executeCreate({
 }, ctx) {
   const { log, runTask: runTask2 } = ctx;
   const name2 = rawName.trim();
-  const resolvedPath = resolve8(projectPath);
+  const resolvedPath = resolve11(projectPath);
   const organizationId = await resolveWorkspaceId(ctx, flagWorkspaceId, isInteractive);
   const { projectId } = await runTask2("Setting up your project...", async () => {
     return await createProjectFiles({
@@ -258353,7 +258802,6 @@ function getLinkCommand() {
 }
 
 // src/cli/commands/project/logs.ts
-var import_ms2 = __toESM(require_ms(), 1);
 function parseFunctionFilters(options) {
   const filters = {};
   if (options.since) {
@@ -258381,15 +258829,6 @@ function parseFunctionNames(option) {
     return [];
   return option.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
 }
-function normalizeDatetime(value) {
-  const duration3 = import_ms2.default(value);
-  if (duration3 !== undefined) {
-    return new Date(Date.now() - duration3).toISOString();
-  }
-  if (/Z$|[+-]\d{2}:\d{2}$/.test(value))
-    return value;
-  return `${value}Z`;
-}
 function formatEntry(entry) {
   const time3 = entry.time.substring(0, 19).replace("T", " ");
   const level = entry.level.toUpperCase().padEnd(5);
@@ -258435,7 +258874,7 @@ async function followLogs(functionNames, options, availableFunctionNames, jsonMo
     for (const entry of fresh)
       writeFollowLine(entry, jsonMode);
     first = false;
-    await new Promise((resolve9) => setTimeout(resolve9, 2000));
+    await new Promise((resolve12) => setTimeout(resolve12, 2000));
   }
 }
 function formatLogs(entries, env3) {
@@ -258551,7 +258990,7 @@ function getLogsCommand() {
 }
 
 // src/cli/commands/project/scaffold.ts
-import { basename as basename6, resolve as resolve9 } from "node:path";
+import { basename as basename6, resolve as resolve12 } from "node:path";
 function resolveAppId(options) {
   const appId = options.appId;
   if (!appId) {
@@ -258567,7 +259006,7 @@ function resolveAppId(options) {
 async function scaffoldAction(ctx, name2, options, command2) {
   const { log, runTask: runTask2 } = ctx;
   const appId = resolveAppId(command2.optsWithGlobals());
-  const resolvedPath = resolve9("./");
+  const resolvedPath = resolve12("./");
   const projectName = (name2 ?? basename6(resolvedPath)).trim();
   const template2 = await getTemplateById("backend-only");
   log.info(`Scaffolding project at ${resolvedPath}`);
@@ -258964,7 +259403,7 @@ function getSecretsListCommand() {
 }
 
 // src/cli/commands/secrets/set.ts
-import { resolve as resolve10 } from "node:path";
+import { resolve as resolve13 } from "node:path";
 function parseEntries(entries) {
   const secrets = {};
   for (const entry of entries) {
@@ -258995,7 +259434,7 @@ async function setSecretsAction({ log, runTask: runTask2 }, entries, options) {
   validateInput(entries, options);
   let secrets;
   if (options.envFile) {
-    secrets = await parseEnvFile(resolve10(options.envFile));
+    secrets = await parseEnvFile(resolve13(options.envFile));
     if (Object.keys(secrets).length === 0) {
       throw new InvalidInputError("The env file contains no valid KEY=VALUE entries.");
     }
@@ -259024,81 +259463,123 @@ function getSecretsCommand() {
 }
 
 // src/cli/commands/site/deploy.ts
-import { resolve as resolve11 } from "node:path";
 async function deployAction2(ctx, options) {
   const { isNonInteractive } = ctx;
   if (isNonInteractive && !options.yes) {
     throw new InvalidInputError("--yes is required in non-interactive mode");
   }
-  const { project: project2 } = await readProjectConfig();
-  const outputDirectory = project2.site?.outputDirectory;
-  if (!outputDirectory) {
+  const project2 = await readProjectSettings();
+  const planned = await planAppDeploy(project2);
+  if (planned.kind === "none") {
     throw new ConfigNotFoundError("No site configuration found.", {
       hints: [
         {
           message: `Add 'site.outputDirectory' to your config.jsonc (e.g., "site": { "outputDirectory": "dist" })`
+        },
+        {
+          message: "Full-stack apps ship from their build artifact — run your framework's build first"
         }
       ]
     });
   }
   if (!options.yes) {
     const shouldDeploy = await Re({
-      message: `Deploy site from ${outputDirectory}?`
+      message: planned.kind === "full-stack" ? "Deploy full-stack app?" : `Deploy site from ${project2.site?.outputDirectory}?`
     });
     if (Ct(shouldDeploy) || !shouldDeploy) {
       return { outroMessage: "Deployment cancelled" };
     }
   }
   await maybeBuildBeforeDeploy(ctx, project2, options.build);
-  const outputDir = resolve11(project2.root, outputDirectory);
-  const { gitHash, concurrency } = options;
-  return gitHash ? await deployToDeploymentsApi(ctx, outputDir, gitHash, concurrency) : await deployTarball(ctx, outputDir);
-}
-async function deployToDeploymentsApi({ runTask: runTask2, log, jsonMode }, outputDir, gitHash, concurrency) {
-  const progressLines = [];
-  const { deploymentId } = await runTask2("Deploying site...", async (updateMessage) => await deployStaticSite({
+  const plan = await planAppDeploy(project2);
+  switch (plan.kind) {
+    case "full-stack":
+      return await deployFullStackApp(ctx, project2.root, options);
+    case "static-deployment":
+      return await deployToDeploymentsApi(ctx, project2.root, plan.outputDir, options);
+    case "static":
+      return await deployTarball(ctx, plan.outputDir);
+    case "none":
+      return { outroMessage: "Nothing to deploy" };
+  }
+}
+async function deployFullStackApp(ctx, projectRoot, options) {
+  const gitHash = await resolveGitHash(projectRoot, options.gitHash);
+  const { deploymentId } = await runDeployTask(ctx, {
+    start: "Deploying full-stack app...",
+    success: theme.colors.base44Orange("Full-stack app deployed"),
+    error: "Full-stack deploy failed"
+  }, async (progress) => await deployFullStack({
+    projectRoot,
+    gitHash,
+    concurrency: options.concurrency,
+    progress
+  }));
+  return deploymentResult(ctx, deploymentId, gitHash);
+}
+async function deployToDeploymentsApi(ctx, projectRoot, outputDir, options) {
+  const gitHash = await resolveGitHash(projectRoot, options.gitHash);
+  const { deploymentId } = await runDeployTask(ctx, {
+    start: "Deploying site...",
+    success: "Site deployed",
+    error: "Site deploy failed"
+  }, async (progress) => await deployStaticSite({
     outputDir,
     gitHash,
-    concurrency,
-    progress: {
-      onAssets: ({ totalAssets, newAssets }) => {
-        const line = `Found ${totalAssets} static assets (${newAssets} new)`;
-        progressLines.push(line);
-        updateMessage(line);
-      },
-      onAssetUpload: ({ uploadedFiles, totalFiles }) => {
-        updateMessage(`Uploaded ${uploadedFiles} of ${totalFiles} assets`);
-      }
+    concurrency: options.concurrency,
+    progress
+  }));
+  return deploymentResult(ctx, deploymentId, gitHash);
+}
+async function deployTarball({ runTask: runTask2 }, outputDir) {
+  const { appUrl } = await runTask2("Creating archive and deploying site...", async () => await deploySite(outputDir), {
+    successMessage: "Site deployed successfully",
+    errorMessage: "Deployment failed"
+  });
+  return { outroMessage: `Visit your site at: ${appUrl}` };
+}
+async function runDeployTask({ runTask: runTask2, log }, labels, deploy5) {
+  const progressLines = [];
+  const warnings = [];
+  const result = await runTask2(labels.start, async (updateMessage) => await deploy5({
+    onWarning: (message) => {
+      warnings.push(message);
+    },
+    onAssets: ({ totalAssets, newAssets }) => {
+      const line = `Found ${totalAssets} static assets (${newAssets} new)`;
+      progressLines.push(line);
+      updateMessage(line);
+    },
+    onAssetUpload: ({ uploadedFiles, totalFiles }) => {
+      updateMessage(`Uploaded ${uploadedFiles} of ${totalFiles} assets`);
+    },
+    onWorker: ({ moduleCount }) => {
+      updateMessage(`Deploying worker (${moduleCount} modules)…`);
     }
-  }), { successMessage: "Site deployed", errorMessage: "Site deploy failed" });
+  }), { successMessage: labels.success, errorMessage: labels.error });
   for (const line of progressLines) {
     log.message(theme.styles.dim(line));
   }
+  for (const warning of warnings) {
+    log.warn(warning);
+  }
+  return result;
+}
+function deploymentResult({ jsonMode }, deploymentId, gitHash) {
   return {
     outroMessage: `Deployment ${deploymentId} (commit ${gitHash.slice(0, 12)})`,
     stdout: jsonMode ? `${JSON.stringify({ deploymentId, gitHash }, null, 2)}
 ` : undefined
   };
 }
-async function deployTarball({ runTask: runTask2 }, outputDir) {
-  const { appUrl } = await runTask2("Creating archive and deploying site...", async () => await deploySite(outputDir), {
-    successMessage: "Site deployed successfully",
-    errorMessage: "Deployment failed"
-  });
-  return { outroMessage: `Visit your site at: ${appUrl}` };
-}
 function getSiteDeployCommand() {
-  const command2 = new Base44Command("deploy").description("Deploy built site files to Base44 hosting").option("-y, --yes", "Skip confirmation prompt").option("--build", "Build the site before deploying (skips the prompt)").option("--no-build", "Deploy without building (skips the prompt)");
-  if (staticDeploymentsEnabled()) {
-    command2.addOption(new Option("--git-hash <hash>", "Commit the build came from — deploys through the deployments API").argParser((value) => {
-      if (!isGitCommitHash(value)) {
-        throw new InvalidArgumentError("Expected a git commit hash (7-64 hex chars).");
-      }
-      return value;
-    }));
-    command2.addOption(new Option("--concurrency <n>", "Parallel asset uploads").default(DEFAULT_UPLOAD_CONCURRENCY).argParser(parseConcurrency));
+  return new Base44Command("deploy").description("Deploy the built site to Base44 hosting (full-stack apps deploy their Workers build)").option("-y, --yes", "Skip confirmation prompt").option("--build", "Build the site before deploying (skips the prompt)").option("--no-build", "Deploy without building (skips the prompt)").addOption(new Option("--git-hash <hash>", "Commit the build came from (defaults to the checkout's HEAD)").argParser(parseGitHash)).addOption(new Option("--concurrency <n>", "Parallel asset uploads").default(DEFAULT_UPLOAD_CONCURRENCY).argParser(parseConcurrency)).action(deployAction2);
+}
+function parseGitHash(value) {
+  if (!isGitCommitHash(value)) {
+    throw new InvalidArgumentError("Expected a git commit hash (7-64 hex chars).");
   }
-  return command2.action(deployAction2);
+  return value;
 }
 function parseConcurrency(value) {
   const parsed = Number(value);
@@ -259107,10 +259588,6 @@ function parseConcurrency(value) {
   }
   return parsed;
 }
-function staticDeploymentsEnabled(env3 = process.env) {
-  const value = env3.BASE44_STATIC_DEPLOYMENTS;
-  return value === "1" || value === "true";
-}
 
 // src/cli/commands/site/open.ts
 async function openAction({
@@ -259216,10 +259693,10 @@ function toPascalCase(name2) {
   return name2.split(/[-_\s]+/).map((w8) => w8.charAt(0).toUpperCase() + w8.slice(1)).join("");
 }
 // src/core/types/update-project.ts
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 var TYPES_INCLUDE_PATH = `${PROJECT_SUBDIR}/${TYPES_OUTPUT_SUBDIR}/*.d.ts`;
 async function updateProjectConfig(projectRoot) {
-  const tsconfigPath = join28(projectRoot, "tsconfig.json");
+  const tsconfigPath = join29(projectRoot, "tsconfig.json");
   if (!await pathExists(tsconfigPath)) {
     return false;
   }
@@ -259267,6 +259744,235 @@ function getTypesCommand() {
   return new Command("types").description("Manage TypeScript type generation").addCommand(getTypesGenerateCommand());
 }
 
+// src/core/resources/workflow/schema.ts
+var WorkflowRunStatusSchema = exports_external.enum([
+  "running",
+  "completed",
+  "failed",
+  "cancelled"
+]);
+var WorkflowListItemSchema = exports_external.object({
+  id: exports_external.string(),
+  name: exports_external.string(),
+  description: exports_external.string().nullable().optional(),
+  status: exports_external.string(),
+  status_reason: exports_external.string().nullable().optional(),
+  total_runs: exports_external.number().default(0),
+  consecutive_failures: exports_external.number().default(0),
+  last_run_at: exports_external.string().nullable().optional(),
+  last_run_status: exports_external.string().nullable().optional()
+}).transform((data) => ({
+  id: data.id,
+  name: data.name,
+  description: data.description ?? null,
+  status: data.status,
+  statusReason: data.status_reason ?? null,
+  totalRuns: data.total_runs,
+  consecutiveFailures: data.consecutive_failures,
+  lastRunAt: data.last_run_at ?? null,
+  lastRunStatus: data.last_run_status ?? null
+}));
+var ListWorkflowsResponseSchema = exports_external.array(WorkflowListItemSchema);
+var WorkflowRunSchema = exports_external.object({
+  run_id: exports_external.string(),
+  workflow_id: exports_external.string(),
+  workflow_name: exports_external.string().default(""),
+  trigger_type: exports_external.string().default(""),
+  status: exports_external.string(),
+  started_at: exports_external.string().nullable().optional(),
+  completed_at: exports_external.string().nullable().optional(),
+  duration_ms: exports_external.number().default(0),
+  steps_count: exports_external.number().default(0),
+  error_message: exports_external.string().nullable().optional(),
+  is_test_run: exports_external.boolean().default(false),
+  status_reason: exports_external.string().default("")
+}).transform((data) => ({
+  runId: data.run_id,
+  workflowId: data.workflow_id,
+  workflowName: data.workflow_name,
+  triggerType: data.trigger_type,
+  status: data.status,
+  startedAt: data.started_at ?? null,
+  completedAt: data.completed_at ?? null,
+  durationMs: data.duration_ms,
+  stepsCount: data.steps_count,
+  errorMessage: data.error_message ?? null,
+  isTestRun: data.is_test_run,
+  statusReason: data.status_reason
+}));
+var ListWorkflowRunsResponseSchema = exports_external.array(WorkflowRunSchema);
+
+// src/core/resources/workflow/api.ts
+async function listWorkflows(limit) {
+  const appClient = getAppClient();
+  const searchParams = new URLSearchParams;
+  if (limit !== undefined) {
+    searchParams.set("limit", String(limit));
+  }
+  let response;
+  try {
+    response = await appClient.get("workflows", { searchParams });
+  } catch (error48) {
+    throw await ApiError.fromHttpError(error48, "listing workflows");
+  }
+  const result = ListWorkflowsResponseSchema.safeParse(await response.json());
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid workflows response from server", result.error);
+  }
+  return result.data;
+}
+function buildRunsQueryString(filters) {
+  const params = new URLSearchParams;
+  if (filters.status) {
+    params.set("status", filters.status);
+  }
+  if (filters.since) {
+    params.set("since", filters.since);
+  }
+  if (filters.limit !== undefined) {
+    params.set("limit", String(filters.limit));
+  }
+  return params;
+}
+async function listWorkflowRuns(filters = {}) {
+  const appClient = getAppClient();
+  let response;
+  try {
+    response = await appClient.get("workflows/runs", {
+      searchParams: buildRunsQueryString(filters)
+    });
+  } catch (error48) {
+    throw await ApiError.fromHttpError(error48, "listing workflow runs");
+  }
+  const result = ListWorkflowRunsResponseSchema.safeParse(await response.json());
+  if (!result.success) {
+    throw new SchemaValidationError("Invalid workflow runs response from server", result.error);
+  }
+  return result.data;
+}
+// src/cli/commands/workflows/legacy-app.ts
+var isWorkflowsNotEnabled = (error48) => error48 instanceof ApiError && error48.statusCode === 403;
+function rethrowLegacyAppAsExplanation(error48) {
+  if (isWorkflowsNotEnabled(error48)) {
+    throw new InvalidInputError("Workflows are not enabled for this app — it predates the Workflows system, so its automation runs are not readable via this command.");
+  }
+  throw error48;
+}
+
+// src/cli/commands/workflows/limit.ts
+var MAX_LIMIT = 200;
+function parseLimit(limit) {
+  if (limit === undefined)
+    return;
+  const parsed = Number.parseInt(limit, 10);
+  if (Number.isNaN(parsed) || parsed < 1 || parsed > MAX_LIMIT) {
+    throw new InvalidInputError(`Invalid limit: "${limit}". Must be a number between 1 and ${MAX_LIMIT}.`);
+  }
+  return parsed;
+}
+
+// src/cli/commands/workflows/list.ts
+function formatWorkflowLine(workflow) {
+  const lastRun = workflow.lastRunAt ? `last run ${workflow.lastRunStatus ?? "unknown"} at ${workflow.lastRunAt}` : "never ran";
+  const failures = workflow.consecutiveFailures > 0 ? ` (${workflow.consecutiveFailures} consecutive failures)` : "";
+  return `${workflow.name}  [${workflow.status}]  runs: ${workflow.totalRuns}, ${lastRun}${failures}`;
+}
+async function listAction({ log, runTask: runTask2, jsonMode }, options8) {
+  const limit = parseLimit(options8.limit);
+  const workflows = await runTask2("Fetching workflows from Base44", async () => listWorkflows(limit).catch(rethrowLegacyAppAsExplanation), {
+    successMessage: "Workflows fetched successfully",
+    errorMessage: "Failed to fetch workflows"
+  });
+  if (jsonMode) {
+    return {
+      outroMessage: `Found ${workflows.length} workflows.`,
+      stdout: `${JSON.stringify({ workflows }, null, 2)}
+`
+    };
+  }
+  if (workflows.length === 0) {
+    return { outroMessage: "This app has no workflows." };
+  }
+  for (const workflow of workflows) {
+    log.info(formatWorkflowLine(workflow));
+  }
+  return { outroMessage: `Found ${workflows.length} workflows.` };
+}
+function getWorkflowsListCommand() {
+  return new Base44Command("list").description("List this app's workflows").option("-n, --limit <n>", `Number of workflows to return (1-${MAX_LIMIT}, default: 30)`).action(listAction);
+}
+
+// src/cli/commands/workflows/runs.ts
+function formatDuration2(durationMs) {
+  if (durationMs === 0)
+    return "";
+  return `  ${(durationMs / 1000).toFixed(1)}s`;
+}
+function formatRunTags(run) {
+  const tags = [run.triggerType, run.isTestRun ? "test" : null].filter(Boolean);
+  return tags.length > 0 ? `  (${tags.join(", ")})` : "";
+}
+function formatFailureDetail(run) {
+  const reason = run.statusReason ? ` [${run.statusReason}]` : "";
+  const message = run.errorMessage ? `
+    ${run.errorMessage}` : "";
+  return `${reason}${message}`;
+}
+function formatRunLine(run) {
+  const time3 = (run.startedAt ?? "").substring(0, 19).replace("T", " ");
+  const status = run.status.toUpperCase().padEnd(9);
+  const base = `${time3} ${status} ${run.workflowName}${formatRunTags(run)}${formatDuration2(run.durationMs)}`;
+  const failureDetail = run.status === "failed" || run.status === "cancelled" ? formatFailureDetail(run) : "";
+  return `${base}${failureDetail}`;
+}
+async function describeEmptyResult(hasFilters) {
+  const workflows = await listWorkflows().catch(() => null);
+  if (workflows === null) {
+    return "No runs found.";
+  }
+  if (workflows.length === 0) {
+    return "This app has no workflows, so there are no runs.";
+  }
+  const names = workflows.map((workflow) => workflow.name).join(", ");
+  return hasFilters ? `No runs match your filters. Workflows in this app: ${names}.` : `No runs yet. Workflows in this app: ${names}.`;
+}
+async function runsAction(ctx, options8) {
+  const limit = parseLimit(options8.limit);
+  const runs = await ctx.runTask("Fetching workflow runs from Base44", async () => listWorkflowRuns({
+    status: options8.status,
+    since: options8.since,
+    limit
+  }).catch(rethrowLegacyAppAsExplanation), {
+    successMessage: "Workflow runs fetched successfully",
+    errorMessage: "Failed to fetch workflow runs"
+  });
+  if (ctx.jsonMode) {
+    return {
+      outroMessage: `Found ${runs.length} runs.`,
+      stdout: `${JSON.stringify({ runs }, null, 2)}
+`
+    };
+  }
+  if (runs.length === 0) {
+    const hasFilters = Boolean(options8.status || options8.since);
+    return { outroMessage: await describeEmptyResult(hasFilters) };
+  }
+  for (const run of runs) {
+    ctx.log.info(formatRunLine(run));
+  }
+  return { outroMessage: `Found ${runs.length} runs.` };
+}
+function getWorkflowsRunsCommand() {
+  return new Base44Command("runs").description("List workflow runs for this app, newest first (includes scheduled, manual, and test runs)").addOption(new Option("--status <status>", "Filter by run status").choices([
+    ...WorkflowRunStatusSchema.options
+  ])).option("--since <datetime>", "Show runs started after this time. ISO datetime or relative shorthand (e.g. 1h, 30m, 2d)", normalizeDatetime).option("-n, --limit <n>", `Number of runs to return (1-${MAX_LIMIT}, default: 30)`).action(runsAction);
+}
+
+// src/cli/commands/workflows/index.ts
+function getWorkflowsCommand() {
+  return new Command("workflows").description("Inspect this app's workflows and their runs").addCommand(getWorkflowsListCommand()).addCommand(getWorkflowsRunsCommand());
+}
+
 // src/cli/commands/workspace/shared.ts
 function workspaceTag(workspace2) {
   const role = workspace2.userRole ?? "member";
@@ -259454,7 +260160,7 @@ function createDevLogger(label2, labelColor = theme.styles.dim) {
 // src/cli/dev/dev-server/main.ts
 var import_cors = __toESM(require_lib4(), 1);
 var import_express6 = __toESM(require_express(), 1);
-import { dirname as dirname23, join as join35 } from "node:path";
+import { dirname as dirname24, join as join36 } from "node:path";
 
 // ../../node_modules/get-port/index.js
 import net from "node:net";
@@ -259481,14 +260187,14 @@ var getLocalHosts = () => {
   }
   return results;
 };
-var checkAvailablePort = (options8) => new Promise((resolve13, reject) => {
+var checkAvailablePort = (options8) => new Promise((resolve15, reject) => {
   const server = net.createServer();
   server.unref();
   server.on("error", reject);
   server.listen(options8, () => {
     const { port } = server.address();
     server.close(() => {
-      resolve13(port);
+      resolve15(port);
     });
   });
 });
@@ -259589,7 +260295,7 @@ var $setGracefulCleanup = tmp.setGracefulCleanup;
 
 // src/cli/dev/dev-server/function-manager.ts
 import { spawn as spawn2 } from "node:child_process";
-import { dirname as dirname20, join as join29 } from "node:path";
+import { dirname as dirname21, join as join30 } from "node:path";
 import { pathToFileURL } from "node:url";
 
 // src/cli/dev/dev-server/base-function-manager.ts
@@ -259694,7 +260400,7 @@ class FunctionManager extends BaseFunctionManager {
   }
   spawnFunction(func, port) {
     this.logger.log(`Spawning function "${func.name}" on port ${port}`);
-    const importMapPath = join29(dirname20(this.wrapperPath), "import-map.json");
+    const importMapPath = join30(dirname21(this.wrapperPath), "import-map.json");
     const process23 = spawn2("deno", ["run", "--allow-all", "--import-map", importMapPath, this.wrapperPath], {
       env: {
         ...globalThis.process.env,
@@ -259733,7 +260439,7 @@ class FunctionManager extends BaseFunctionManager {
     });
   }
   waitForReady(name2, runningFunc) {
-    return new Promise((resolve13, reject) => {
+    return new Promise((resolve15, reject) => {
       runningFunc.process.on("exit", (code2) => {
         if (!runningFunc.ready) {
           clearTimeout(timeout3);
@@ -259756,7 +260462,7 @@ class FunctionManager extends BaseFunctionManager {
           runningFunc.ready = true;
           clearTimeout(timeout3);
           runningFunc.process.stdout?.off("data", onData);
-          resolve13(runningFunc.port);
+          resolve15(runningFunc.port);
         }
       };
       runningFunc.process.stdout?.on("data", onData);
@@ -259768,7 +260474,7 @@ class FunctionManager extends BaseFunctionManager {
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { isBuiltin } from "node:module";
 import { homedir as homedir3 } from "node:os";
-import { join as join30 } from "node:path";
+import { join as join31 } from "node:path";
 import { pathToFileURL as pathToFileURL6 } from "node:url";
 var depsPromise;
 function loadDeps() {
@@ -259889,9 +260595,9 @@ export default {
 };
 `;
 function ensureBundlerConfig() {
-  const dir = join30(homedir3(), ".base44", "function-bundler");
+  const dir = join31(homedir3(), ".base44", "function-bundler");
   mkdirSync2(dir, { recursive: true });
-  const configPath = join30(dir, "deno.json");
+  const configPath = join31(dir, "deno.json");
   writeFileSync2(configPath, `${JSON.stringify({ nodeModulesDir: "auto" }, null, 2)}
 `);
   return configPath;
@@ -260261,7 +260967,8 @@ var fieldTypes = [
   "number",
   "boolean",
   "array",
-  "object"
+  "object",
+  "null"
 ];
 
 class Validator {
@@ -260321,6 +261028,14 @@ class Validator {
     if (!property) {
       return { hasError: false };
     }
+    if (Array.isArray(property.type)) {
+      const types = property.type;
+      const matched = types.some((type) => !this.validateValue(value, { ...property, type }, fieldPath).hasError);
+      return matched ? { hasError: false } : {
+        hasError: true,
+        error: this.createValidationError(`Error in field ${fieldPath}: Input should be a valid ${types.join(" or ")}`)
+      };
+    }
     const propertyType = property.type;
     if (!fieldTypes.includes(propertyType)) {
       return {
@@ -260361,6 +261076,14 @@ class Validator {
           }
         }
         break;
+      case "null":
+        if (value !== null) {
+          return {
+            hasError: true,
+            error: this.createValidationError(`Error in field ${fieldPath}: Input should be null`)
+          };
+        }
+        break;
       case "integer":
         if (!Number.isInteger(value)) {
           return {
@@ -260780,7 +261503,9 @@ function evaluateCondition(condition, record2, user) {
 function checkRLS(rule, record2, user) {
   if (user?.is_service === true)
     return true;
-  if (rule === undefined)
+  if (rule === undefined || rule === null || rule === "")
+    return true;
+  if (typeof rule === "object" && Object.keys(rule).length === 0)
     return true;
   if (typeof rule === "boolean")
     return rule;
@@ -261342,16 +262067,16 @@ function createCustomIntegrationRoutes(remoteProxy, logger2) {
 
 // src/cli/dev/dev-server/watcher.ts
 import { EventEmitter as EventEmitter4 } from "node:events";
-import { relative as relative6 } from "node:path";
+import { relative as relative7 } from "node:path";
 
 // ../../node_modules/chokidar/index.js
 import { EventEmitter as EventEmitter3 } from "node:events";
 import { stat as statcb, Stats } from "node:fs";
-import { readdir as readdir3, stat as stat5 } from "node:fs/promises";
+import { readdir as readdir3, stat as stat6 } from "node:fs/promises";
 import * as sp3 from "node:path";
 
 // ../../node_modules/readdirp/index.js
-import { lstat as lstat2, readdir as readdir2, realpath, stat as stat3 } from "node:fs/promises";
+import { lstat as lstat2, readdir as readdir2, realpath, stat as stat4 } from "node:fs/promises";
 import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "node:path";
 import { Readable as Readable6 } from "node:stream";
 var EntryTypes = {
@@ -261433,7 +262158,7 @@ class ReaddirpStream extends Readable6 {
     const { root: root2, type } = opts;
     this._fileFilter = normalizeFilter(opts.fileFilter);
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
-    const statMethod = opts.lstat ? lstat2 : stat3;
+    const statMethod = opts.lstat ? lstat2 : stat4;
     if (wantBigintFsStats) {
       this._stat = (path19) => statMethod(path19, { bigint: true });
     } else {
@@ -261586,7 +262311,7 @@ function readdirp(root2, options8 = {}) {
 
 // ../../node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
-import { realpath as fsrealpath, lstat as lstat3, open as open2, stat as stat4 } from "node:fs/promises";
+import { realpath as fsrealpath, lstat as lstat3, open as open2, stat as stat5 } from "node:fs/promises";
 import { type as osType } from "node:os";
 import * as sp2 from "node:path";
 var STR_DATA = "data";
@@ -261612,7 +262337,7 @@ var EVENTS = {
 };
 var EV = EVENTS;
 var THROTTLE_MODE_WATCH = "watch";
-var statMethods = { lstat: lstat3, stat: stat4 };
+var statMethods = { lstat: lstat3, stat: stat5 };
 var KEY_LISTENERS = "listeners";
 var KEY_ERR = "errHandlers";
 var KEY_RAW = "rawEmitters";
@@ -262072,9 +262797,9 @@ class NodeFsHandler {
     if (this.fsw.closed) {
       return;
     }
-    const dirname22 = sp2.dirname(file2);
+    const dirname23 = sp2.dirname(file2);
     const basename8 = sp2.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname22);
+    const parent = this.fsw._getWatchedDir(dirname23);
     let prevStats = stats;
     if (parent.has(basename8))
       return;
@@ -262083,7 +262808,7 @@ class NodeFsHandler {
         return;
       if (!newStats || newStats.mtimeMs === 0) {
         try {
-          const newStats2 = await stat4(file2);
+          const newStats2 = await stat5(file2);
           if (this.fsw.closed)
             return;
           const at13 = newStats2.atimeMs;
@@ -262101,7 +262826,7 @@ class NodeFsHandler {
             prevStats = newStats2;
           }
         } catch (error48) {
-          this.fsw._remove(dirname22, basename8);
+          this.fsw._remove(dirname23, basename8);
         }
       } else if (parent.has(basename8)) {
         const at13 = newStats.atimeMs;
@@ -262190,7 +262915,7 @@ class NodeFsHandler {
         this._addToNodeFs(path19, initialAdd, wh2, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
-    return new Promise((resolve14, reject) => {
+    return new Promise((resolve16, reject) => {
       if (!stream)
         return reject();
       stream.once(STR_END, () => {
@@ -262199,7 +262924,7 @@ class NodeFsHandler {
           return;
         }
         const wasThrottled = throttler ? throttler.clear() : false;
-        resolve14(undefined);
+        resolve16(undefined);
         previous.getChildren().filter((item) => {
           return item !== directory && !current.has(item);
         }).forEach((item) => {
@@ -262324,11 +263049,11 @@ function createPattern(matcher) {
       if (matcher.path === string4)
         return true;
       if (matcher.recursive) {
-        const relative6 = sp3.relative(matcher.path, string4);
-        if (!relative6) {
+        const relative7 = sp3.relative(matcher.path, string4);
+        if (!relative7) {
           return false;
         }
-        return !relative6.startsWith("..") && !sp3.isAbsolute(relative6);
+        return !relative7.startsWith("..") && !sp3.isAbsolute(relative7);
       }
       return false;
     };
@@ -262755,7 +263480,7 @@ class FSWatcher extends EventEmitter3 {
       const fullPath = opts.cwd ? sp3.join(opts.cwd, path19) : path19;
       let stats2;
       try {
-        stats2 = await stat5(fullPath);
+        stats2 = await stat6(fullPath);
       } catch (err) {}
       if (!stats2 || this.closed)
         return;
@@ -262859,8 +263584,8 @@ class FSWatcher extends EventEmitter3 {
     }
     return this._userIgnored(path19, stats);
   }
-  _isntIgnored(path19, stat6) {
-    return !this._isIgnored(path19, stat6);
+  _isntIgnored(path19, stat7) {
+    return !this._isIgnored(path19, stat7);
   }
   _getWatchHelpers(path19) {
     return new WatchHelper(path19, this.options.followSymlinks, this);
@@ -263027,7 +263752,7 @@ class WatchBase44 extends EventEmitter4 {
       ignoreInitial: true
     });
     watcher.on("all", import_debounce.default(async (_event, path19) => {
-      this.emit("change", name2, relative6(targetPath, path19));
+      this.emit("change", name2, relative7(targetPath, path19));
     }, WATCH_DEBOUNCE_MS));
     watcher.on("error", (err) => {
       this.logger.error(`Watch handler failed for ${targetPath}`, err);
@@ -263116,7 +263841,7 @@ async function createDevServer(options8) {
     }
     remoteProxy(req, res, next);
   });
-  const server = await new Promise((resolve15, reject) => {
+  const server = await new Promise((resolve17, reject) => {
     const s5 = app.listen(port, "127.0.0.1", (err) => {
       if (err) {
         if ("code" in err && err.code === "EADDRINUSE") {
@@ -263125,7 +263850,7 @@ async function createDevServer(options8) {
           reject(err);
         }
       } else {
-        resolve15(s5);
+        resolve17(s5);
       }
     });
   });
@@ -263134,8 +263859,8 @@ async function createDevServer(options8) {
     broadcastEntityEvent(io6, appId, entityName, event);
   };
   const base44ConfigWatcher = new WatchBase44({
-    functions: join35(dirname23(project2.configPath), project2.functionsDir),
-    entities: join35(dirname23(project2.configPath), project2.entitiesDir)
+    functions: join36(dirname24(project2.configPath), project2.functionsDir),
+    entities: join36(dirname24(project2.configPath), project2.entitiesDir)
   }, devLogger);
   base44ConfigWatcher.on("change", async (name2) => {
     try {
@@ -263175,13 +263900,13 @@ async function createDevServer(options8) {
     if (!server.listening) {
       return;
     }
-    await new Promise((resolve15, reject) => {
+    await new Promise((resolve17, reject) => {
       server.close((error48) => {
         if (error48) {
           reject(error48);
           return;
         }
-        resolve15();
+        resolve17();
       });
     });
   };
@@ -263252,15 +263977,15 @@ class ServeRunner {
       return;
     }
     this.stopping = true;
-    const exited = new Promise((resolve15) => child.once("exit", () => resolve15()));
+    const exited = new Promise((resolve17) => child.once("exit", () => resolve17()));
     if (process23.platform === "win32" && child.pid) {
       const taskkill = spawn3("taskkill", ["/pid", String(child.pid), "/T", "/F"], {
         stdio: "ignore",
         windowsHide: true
       });
-      await new Promise((resolve15) => {
-        taskkill.once("exit", () => resolve15());
-        taskkill.once("error", () => resolve15());
+      await new Promise((resolve17) => {
+        taskkill.once("exit", () => resolve17());
+        taskkill.once("error", () => resolve17());
       });
     } else if (child.pid) {
       try {
@@ -263331,6 +264056,10 @@ function validateDevOptions(command2) {
   if (appId !== undefined) {
     command2.error(`base44 dev cannot be used with --app-id or ${BASE44_APP_ID_ENV_VAR}.`);
   }
+  const { port, remote } = command2.opts();
+  if (remote && port !== undefined) {
+    command2.error("--port applies to the local backend, which --remote does not start.");
+  }
 }
 function requireLinkedProject({ app }) {
   if (!app?.projectRoot) {
@@ -263338,31 +264067,44 @@ function requireLinkedProject({ app }) {
   }
   return { id: app.id, projectRoot: app.projectRoot };
 }
-async function createConfiguredServeRunner(app, backendUrl) {
+async function resolveConfiguredSite(app) {
   const { project: project2 } = await readProjectConfig(app.projectRoot);
   const serveCommand = project2.site?.serveCommand;
-  if (!serveCommand) {
-    return;
-  }
-  return createServeCommandRunner({
-    serveCommand,
-    projectRoot: project2.root,
-    appId: app.id,
-    appBaseUrl: backendUrl
-  });
+  return serveCommand ? { serveCommand, projectRoot: project2.root } : undefined;
 }
-function startServeCommand(runner, backend) {
+function stopRunnerOnProcessSignals(runner) {
   const stop2 = () => void runner.stop();
   process.on("SIGINT", stop2);
   process.on("SIGTERM", stop2);
+}
+function startServeCommand(runner, backend) {
+  stopRunnerOnProcessSignals(runner);
   runner.onExit(() => {
     backend.shutdown().finally(() => process.exit(1));
   });
   createDevLogger("backend", theme.styles.info).log(`Backend running on ${backend.url}`);
   runner.start();
 }
-async function devAction(ctx, options8) {
-  const app = requireLinkedProject(ctx);
+async function remoteDevAction(app) {
+  const site2 = await resolveConfiguredSite(app);
+  if (!site2) {
+    throw new ConfigInvalidError("base44 dev --remote serves the frontend against the production backend, but this project has no site.serveCommand in base44/config.jsonc.");
+  }
+  const appBaseUrl = await getSiteUrl();
+  const runner = createServeCommandRunner({
+    ...site2,
+    appId: app.id,
+    appBaseUrl
+  });
+  stopRunnerOnProcessSignals(runner);
+  runner.onExit((code2) => process.exit(code2 ?? 1));
+  runner.start();
+  return {
+    outroMessage: `Frontend dev server targets ${theme.styles.bold(appBaseUrl)} — every write hits your live app`
+  };
+}
+async function localDevAction(ctx, app, options8) {
+  const site2 = await resolveConfiguredSite(app);
   const siteUrlPromise = getSiteUrl().catch(() => {
     return;
   });
@@ -263377,15 +264119,23 @@ async function devAction(ctx, options8) {
     }
   });
   const backendUrl = localServerUrl(backend.port);
-  const runner = await createConfiguredServeRunner(app, backendUrl);
-  if (runner) {
+  if (site2) {
+    const runner = createServeCommandRunner({
+      ...site2,
+      appId: app.id,
+      appBaseUrl: backendUrl
+    });
     startServeCommand(runner, { url: backendUrl, shutdown: backend.shutdown });
   }
-  const outroMessage = runner ? "Open your app using the frontend dev server URL" : `Dev server is available at ${theme.colors.links(backendUrl)}`;
+  const outroMessage = site2 ? "Open your app using the frontend dev server URL" : `Dev server is available at ${theme.colors.links(backendUrl)}`;
   return { outroMessage };
 }
+async function devAction(ctx, options8) {
+  const app = requireLinkedProject(ctx);
+  return options8.remote ? remoteDevAction(app) : localDevAction(ctx, app, options8);
+}
 function getDevCommand() {
-  return new Base44Command("dev").description("Start the development server").option("-p, --port <number>", "Port for the development server").hook("preAction", validateDevOptions).action(devAction);
+  return new Base44Command("dev").description("Start the development server").option("-p, --port <number>", "Port for the development server").option("--remote", "Serve the frontend against the production backend instead of a local one").hook("preAction", validateDevOptions).action(devAction);
 }
 
 // src/core/exec/run-script.ts
@@ -263430,13 +264180,13 @@ async function runScript(options8) {
 }
 // src/cli/commands/exec.ts
 function readStdin2() {
-  return new Promise((resolve15, reject) => {
+  return new Promise((resolve17, reject) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
-    process.stdin.on("end", () => resolve15(data));
+    process.stdin.on("end", () => resolve17(data));
     process.stdin.on("error", reject);
   });
 }
@@ -263507,7 +264257,7 @@ Examples:
 }
 
 // src/cli/commands/project/eject.ts
-import { resolve as resolve15 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 var import_kebabCase2 = __toESM(require_kebabCase(), 1);
 async function eject(ctx, options8, command2) {
   const { log, runTask: runTask2, isNonInteractive } = ctx;
@@ -263571,7 +264321,7 @@ async function eject(ctx, options8, command2) {
     Ne("Operation cancelled.");
     throw new CLIExitError(0);
   }
-  const resolvedPath = resolve15(selectedPath);
+  const resolvedPath = resolve17(selectedPath);
   await runTask2("Downloading your project's code...", async (updateMessage) => {
     await createProjectFilesForExistingProject({
       projectId,
@@ -263648,6 +264398,7 @@ function createProgram(context) {
   program2.addCommand(getAgentSkillsCommand());
   program2.addCommand(getConnectorsCommand());
   program2.addCommand(getFunctionsCommand());
+  program2.addCommand(getWorkflowsCommand());
   program2.addCommand(getSecretsCommand());
   program2.addCommand(getSandboxCommand());
   program2.addCommand(getAuthCommand());
@@ -263664,7 +264415,7 @@ var import_detect_agent = __toESM(require_dist5(), 1);
 import { release, type } from "node:os";
 
 // ../../node_modules/posthog-node/dist/extensions/error-tracking/modifiers/module.node.mjs
-import { dirname as dirname24, posix, sep } from "path";
+import { dirname as dirname25, posix, sep as sep2 } from "path";
 function createModulerModifier() {
   const getModuleFromFileName = createGetModuleFromFilename();
   return async (frames) => {
@@ -263673,7 +264424,7 @@ function createModulerModifier() {
     return frames;
   };
 }
-function createGetModuleFromFilename(basePath = process.argv[1] ? dirname24(process.argv[1]) : process.cwd(), isWindows5 = sep === "\\") {
+function createGetModuleFromFilename(basePath = process.argv[1] ? dirname25(process.argv[1]) : process.cwd(), isWindows5 = sep2 === "\\") {
   const normalizedBase = isWindows5 ? normalizeWindowsPath2(basePath) : basePath;
   return (filename) => {
     if (!filename)
@@ -265951,14 +266702,14 @@ async function addSourceContext(frames) {
   return frames;
 }
 function getContextLinesFromFile(path19, ranges, output) {
-  return new Promise((resolve16) => {
+  return new Promise((resolve18) => {
     const stream = createReadStream2(path19);
     const lineReaded = createInterface2({
       input: stream
     });
     function destroyStreamAndResolve() {
       stream.destroy();
-      resolve16();
+      resolve18();
     }
     let lineNumber = 0;
     let currentRangeIndex = 0;
@@ -267070,15 +267821,15 @@ class PostHogBackendClient extends PostHogCoreStateless {
       return true;
     if (this.featureFlagsPoller === undefined)
       return false;
-    return new Promise((resolve16) => {
+    return new Promise((resolve18) => {
       const timeout3 = setTimeout(() => {
         cleanup();
-        resolve16(false);
+        resolve18(false);
       }, timeoutMs);
       const cleanup = this._events.on("localEvaluationFlagsLoaded", (count2) => {
         clearTimeout(timeout3);
         cleanup();
-        resolve16(count2 > 0);
+        resolve18(count2 > 0);
       });
     });
   }
@@ -267862,9 +268613,9 @@ function addCommandInfoToErrorReporter(program2, errorReporter) {
   });
 }
 // src/cli/index.ts
-var __dirname4 = dirname25(fileURLToPath6(import.meta.url));
+var __dirname4 = dirname26(fileURLToPath6(import.meta.url));
 async function runCLI(options8) {
-  ensureNpmAssets(join36(__dirname4, "../assets"));
+  ensureNpmAssets(join37(__dirname4, "../assets"));
   const errorReporter = new ErrorReporter;
   errorReporter.registerProcessErrorHandlers();
   const jsonMode = process.argv.includes("--json");
@@ -267903,4 +268654,4 @@ export {
   CLIExitError
 };
 
-//# debugId=D124AF9A61B7AEE264756E2164756E21
+//# debugId=E23804C9C857B3A464756E2164756E21