@flaredev/cli 0.12.2 → 0.14.0

package/dist/index.js

@@ -414,7 +414,11 @@ var CLOUDFLARE_ONLY = [
   ".dev.vars.example",
   "worker-configuration.d.ts",
   // The engine's Drizzle adapter; the Next.js overlay brings prisma-rows.ts instead.
-  "lib/resource/drizzle-rows.ts"
+  "lib/resource/drizzle-rows.ts",
+  // Estimates Workers, D1 and R2 bills from Cloudflare's own price sheet — numbers that
+  // mean nothing to an app on Vercel and Neon, so a Next.js app doesn't get the page.
+  "app/dashboard/costs",
+  "components/dashboard/cost-estimator.tsx"
 ];
 
 // src/stack.ts
@@ -519,6 +523,9 @@ function installArgs(pm) {
 
 // src/commands/create.ts
 var SEED_ADMIN = { email: "admin@example.com", password: "Password", name: "Admin" };
+function toAppTitle(name) {
+  return name.split("-").map((word) => word ? word[0].toUpperCase() + word.slice(1) : word).join(" ");
+}
 var ALLOW_BUILDS = [
   "'@prisma/engines': false",
   "esbuild: true",
@@ -568,13 +575,14 @@ function createApp(target, options2 = {}) {
   const compatibilityDate = options2.compatibilityDate ?? COMPATIBILITY_DATE;
   const files = copyTemplate(join4(templatesDir, "app"), dir, {
     APP_NAME: name,
+    APP_TITLE: toAppTitle(name),
     COMPAT_DATE: compatibilityDate,
     PM: packageManager,
     THEME: theme,
     SIGNUP: signup
   });
   if (stack === "next") {
-    copyTemplate(join4(templatesDir, "next"), dir, { APP_NAME: name, PM: packageManager, THEME: theme, SIGNUP: signup });
+    copyTemplate(join4(templatesDir, "next"), dir, { APP_NAME: name, APP_TITLE: toAppTitle(name), PM: packageManager, THEME: theme, SIGNUP: signup });
     for (const path of CLOUDFLARE_ONLY) rmSync(join4(dir, path), { recursive: true, force: true });
   }
   writeFileSync3(join4(dir, "lib", "auth-config.ts"), renderAuthConfig(authMethods, authProviders, signup));
@@ -610,10 +618,15 @@ storage/
       start: "next start",
       deploy: "vercel deploy --prod",
       "db:generate": "prisma generate",
-      "db:migrate": "prisma migrate dev",
+      // Thin aliases for the flare commands, so the scripts and the printed steps
+      // can never say different things. `flare migrate` is `prisma migrate dev`
+      // plus `prisma generate` — the generate is not optional; Prisma 7 removed
+      // generator runs from `migrate dev`, and a client without the new model
+      // fails the very next command, usually `flare seed:resource`.
+      "db:migrate": "flare migrate",
       // An account to sign in with, so the app is reachable the moment the tables
       // exist. Safe to run twice: --skip-existing makes a second run a no-op.
-      "db:seed": `flare user:add ${SEED_ADMIN.email} --password ${SEED_ADMIN.password} --name ${SEED_ADMIN.name} --role admin --skip-existing`,
+      "db:seed": "flare db:seed",
       "db:studio": "prisma studio"
     } : {
       dev: "flare dev",
@@ -690,30 +703,34 @@ function printNextSteps(result, installed) {
   const pm = result.packageManager;
   const database = result.stack === "next" ? [
     ["docker compose up -d", "Postgres, on the address .env already has"],
-    [`${pm} run db:migrate`, "create the tables"],
-    [`${pm} run db:seed`, "an account to sign in with"]
+    ["npx flare migrate", "create the tables"],
+    ["npx flare db:seed", "an account to sign in with"]
   ] : [];
   const commands = [
     [`cd ${rel}`, "your new app"],
     ...installed ? [] : [[`${pm} install`, "dependencies first"]],
     ...database,
-    [`${pm} run dev`, "http://localhost:3000"],
+    ["npx flare dev", "http://localhost:3000"]
+  ];
+  const firstResource = [
     ["npx flare gen resource Contact", "a table, API and admin screens"],
+    ["npx flare migrate", "create its table"],
     ["npx flare seed:resource Contact 1000", "fill it with sample rows"]
   ];
-  const width = Math.max(...commands.map(([command]) => command.length)) + 2;
-  const steps = commands.map(([command, note2]) => `${pc.cyan(command.padEnd(width))}${pc.dim(note2)}`);
-  prompts.note(steps.join("\n"), "Next");
+  const width = Math.max(...[...commands, ...firstResource].map(([command]) => command.length)) + 2;
+  const line = ([command, note2]) => `${pc.cyan(command.padEnd(width))}${pc.dim(note2)}`;
+  prompts.note(commands.map(line).join("\n"), "Next");
+  prompts.note(firstResource.map(line).join("\n"), "Your first resource");
   const storage = storageSetupSteps(result.storage, result.stack, { local: true });
   if (storage.length > 0) {
-    prompts.note(storage.map((line) => line.startsWith("http") ? pc.cyan(line) : line).join("\n"), `Uploads \xB7 ${result.storage}`);
+    prompts.note(storage.map((line2) => line2.startsWith("http") ? pc.cyan(line2) : line2).join("\n"), `Uploads \xB7 ${result.storage}`);
   }
   if (result.stack === "next") {
     prompts.note(
       [
         `${pc.cyan(SEED_ADMIN.email)}  ${pc.dim("\xB7")}  ${pc.cyan(SEED_ADMIN.password)}`,
         "",
-        pc.dim(`Made by ${pm} run db:seed, as an admin. Change it before this app is anywhere but your machine.`)
+        pc.dim("Made by npx flare db:seed, as an admin. Change it before this app is anywhere but your machine.")
       ].join("\n"),
       "Sign in with"
     );
@@ -2703,12 +2720,20 @@ async function migrate(options2 = {}) {
   const appRoot = findAppRoot(options2.cwd ?? process.cwd());
   const log2 = options2.log ?? ((message) => console.log(message));
   if (readStack(appRoot) === "next") {
+    const prisma = resolveBin(appRoot, "prisma", "prisma");
+    if (options2.deploy) {
+      log2(`${pc6.cyan("prisma")} migrate deploy`);
+      return runNode([prisma, "migrate", "deploy"], appRoot);
+    }
     if (options2.remote) {
-      log2(pc6.dim("On Next.js, `--remote` is whichever database DATABASE_URL points at."));
+      log2(pc6.dim("On Next.js, the database is whichever one DATABASE_URL points at."));
     }
-    const prisma = resolveBin(appRoot, "prisma", "prisma");
-    log2(`${pc6.cyan("prisma")} migrate deploy`);
-    return runNode([prisma, "migrate", "deploy"], appRoot);
+    const args = ["migrate", "dev", ...options2.name ? ["--name", options2.name] : []];
+    log2(`${pc6.cyan("prisma")} ${args.join(" ")}`);
+    const code = await runNode([prisma, ...args], appRoot);
+    if (code !== 0) return code;
+    log2(`${pc6.cyan("prisma")} generate`);
+    return runNode([prisma, "generate"], appRoot);
   }
   const { db, target, wrangler } = context(options2);
   const result = await runWrangler(wrangler, ["d1", "migrations", "apply", db.binding, ...target], appRoot);
@@ -3091,7 +3116,7 @@ async function diagnose(options2 = {}) {
     }
   }
   if (stack === "next") {
-    findings.push({ check: "Migrations", verdict: "skip", detail: "Prisma tracks these in the database; run `npx prisma migrate status`." });
+    findings.push({ check: "Migrations", verdict: "skip", detail: "Prisma tracks these in the database; run `npx flare migrate --deploy` to apply any that are pending." });
   } else if (options2.offline) {
     findings.push({ check: "Migrations", verdict: "skip", detail: "Skipped (--offline)." });
   } else {
@@ -3269,7 +3294,7 @@ async function addUser(email, options2 = {}) {
 async function addOnD1(appRoot, rows, options2, log2) {
   if (options2.role) {
     const roles = await listRoles(options2);
-    if (roles && !roles.includes(options2.role)) {
+    if (roles && roles.length > 0 && !roles.includes(options2.role)) {
       log2(pc9.red(`No role "${options2.role}" is registered. Known roles: ${roles.join(", ") || "none"}.`));
       log2(pc9.dim(`Register it with: flare role:add ${options2.role}${options2.remote ? " --remote" : ""}`));
       return 1;
@@ -3864,7 +3889,7 @@ async function genApiKeys(options2 = {}) {
   }
   const steps = [
     ...installed ? [`${pc10.bold("install")} (pnpm install) to fetch ${API_KEY_PACKAGE}.`] : [],
-    stack === "next" ? `${pc10.bold("npx prisma migrate dev --name apikeys")} to create the table.` : `${pc10.bold("flare migrate")} to create the apikey table.`,
+    stack === "next" ? `${pc10.bold("npx flare migrate --name apikeys")} to create the table.` : `${pc10.bold("flare migrate")} to create the apikey table.`,
     `${pc10.bold("flare dev")}, then ${pc10.bold("/dashboard/api-keys")} to mint one.`,
     `Call the API with it: ${pc10.bold("-H 'Authorization: Bearer <key>'")} (or ${pc10.bold("x-api-key")}).`
   ];
@@ -4216,15 +4241,20 @@ function renderFieldsBlock(fields) {
 function renderDescriptor(name, fields, options2 = {}) {
   defineResource({ name, fields: Object.fromEntries(fields.map((f) => [f.key, toField(f)])) });
   const block = renderFieldsBlock(fields);
-  const heading = [
-    options2.icon ? `  icon: ${literal(options2.icon)},
-` : "",
-    options2.group ? `  group: ${literal(options2.group)},
-` : "",
-    options2.softDelete ? `  // A delete stamps deletedAt instead of removing the row; the dashboard grows a Trash view.
+  const set = (key, value) => `  ${key}: ${value},
+`;
+  const suggestion = (code, note2 = "") => {
+    const line = `  // ${code}`;
+    return note2 && line.length <= 52 ? `${line.padEnd(53)}// ${note2}
+` : `${line}
+`;
+  };
+  const heading = (options2.icon ? set("icon", literal(options2.icon)) : suggestion(`icon: "file-text",`, "any lucide-react name")) + (options2.group ? set("group", literal(options2.group)) : suggestion(`group: "Sales",`, "sidebar heading")) + suggestion(`titleField: "${fields[0]?.key ?? "name"}",`, "what lists and pickers show") + suggestion(`defaultSort: { field: "createdAt", direction: "desc" },`) + suggestion(`perPage: 25,`, "rows per page") + (options2.softDelete ? `  // A delete stamps deletedAt instead of removing the row; the dashboard grows a Trash view.
   softDelete: true,
-` : ""
-  ].join("");
+` : suggestion(`softDelete: true,`, "keep deleted rows, with a Trash view")) + suggestion(`rateLimit: { create: "10/min", "*": "120/min" },`) + `  // Uncomment what you need. Hooks, computed values, table and slug:
+  // https://flare-docs.codetotech.com/concepts/resource-descriptor/
+
+`;
   return joinMarkers({
     before: `import { defineResource, field } from "@flaredev/core";
 
@@ -5736,7 +5766,7 @@ async function askCreateQuestions(given, appName) {
 }
 
 // src/commands/gen.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync8, writeFileSync as writeFileSync14 } from "fs";
+import { existsSync as existsSync20, mkdirSync as mkdirSync8, readFileSync as readFileSync15, writeFileSync as writeFileSync14 } from "fs";
 import { dirname as dirname9, join as join20 } from "path";
 import { AUTH_USER as AUTH_USER2, camelCase as camelCase5, defineResource as defineResource2, relationGraph as relationGraph2 } from "@flaredev/core";
 import pc15 from "picocolors";
@@ -5760,11 +5790,37 @@ async function genResource(rawName, options2) {
   const relativePath = descriptorPath(name);
   const path = join20(appRoot, relativePath);
   const exists = existsSync20(path);
-  if (!exists && !options2.fields) {
+  if (!exists && !options2.fields && !options2.add) {
     throw new Error(`--fields is required, e.g. flare gen resource ${name} --fields "name:string, email:string"`);
   }
+  if (options2.add && options2.fields) {
+    throw new Error("--add appends to the fields you have; --fields replaces them. Use one or the other.");
+  }
+  if (options2.add && !exists) {
+    throw new Error(`There is no ${relativePath} to add to. Create it first: flare gen resource ${name} --fields "${options2.add}"`);
+  }
   const existing = await loadResources(appRoot);
   const others = existing.filter(({ resource }) => resource.name !== name).map(({ resource }) => resource);
+  if (options2.add) {
+    const additions = parseFields(options2.add);
+    const current = existing.find(({ resource }) => resource.name === name)?.resource;
+    const taken = new Set(Object.keys(current?.fields ?? {}));
+    const clash = additions.find((candidate) => taken.has(candidate.key));
+    if (clash) {
+      throw new Error(
+        `${name} already has a field called "${clash.key}". Edit it in ${relativePath}, or rename it there with \`${clash.key}: field.string({ rename: { from: "old" } })\`.`
+      );
+    }
+    validateFields(name, additions, others, log2);
+    const source = readFileSync15(path, "utf8");
+    const marked = splitMarkers(source);
+    if (!marked) throw new Error(`${relativePath} has no generated block to add to. Add the field by hand.`);
+    const existingBlock = marked.block === "" || marked.block.endsWith("\n") ? marked.block : `${marked.block}
+`;
+    const appended = `${existingBlock}${renderFieldsBlock(additions)}`;
+    const outcome = writeGenerated(path, appended, { force: true });
+    log2(`${pc15.yellow(outcome.padEnd(9))} ${relativePath} ${pc15.dim(`(+${additions.map((f) => f.key).join(", ")})`)}`);
+  }
   if (options2.fields) {
     const fields = parseFields(options2.fields);
     validateFields(name, fields, others, log2);
@@ -5817,7 +5873,7 @@ Skipped ${skipped.length} hand-edited file(s); run \`flare sync-types\` for deta
   if (!options2.skipMigration) {
     if (readStack(appRoot) === "next") {
       log2(`
-Next: ${pc15.bold("npx prisma migrate dev")} to turn the schema into a migration and apply it.`);
+Next: ${pc15.bold("npx flare migrate")} to turn the schema into a migration and apply it.`);
     } else {
       const renamed = await applyDeclaredRenames(appRoot, await loadResources(appRoot));
       for (const [index, file] of renamed.files.entries()) {
@@ -5912,7 +5968,7 @@ ${body}
 }
 
 // src/commands/gen-migration.ts
-import { existsSync as existsSync22, mkdirSync as mkdirSync10, readFileSync as readFileSync15, readdirSync as readdirSync8, writeFileSync as writeFileSync16 } from "fs";
+import { existsSync as existsSync22, mkdirSync as mkdirSync10, readFileSync as readFileSync16, readdirSync as readdirSync8, writeFileSync as writeFileSync16 } from "fs";
 import { basename as basename2, join as join22 } from "path";
 import { snakeCase } from "@flaredev/core";
 import pc17 from "picocolors";
@@ -6107,7 +6163,7 @@ ${applied.output.trim()}`);
     const relative3 = `prisma/migrations/${entry}/migration.sql`;
     written.push(relative3);
     log2(`${pc17.green("create".padEnd(9))} ${relative3}`);
-    const found = destructiveStatements(readFileSync15(file, "utf8"));
+    const found = destructiveStatements(readFileSync16(file, "utf8"));
     if (found.length > 0) destructive.push({ file: relative3, found });
   }
   if (destructive.length > 0) {
@@ -6221,16 +6277,19 @@ ${pc18.dim("Roles come from `flare role:add`; the API and the admin both enforce
 }
 
 // src/commands/rm.ts
-import { existsSync as existsSync24, readdirSync as readdirSync9, readFileSync as readFileSync16, rmdirSync, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync as existsSync24, readdirSync as readdirSync9, readFileSync as readFileSync17, rmdirSync, unlinkSync as unlinkSync2 } from "fs";
 import { dirname as dirname11, join as join24 } from "path";
 import { relationGraph as relationGraph3 } from "@flaredev/core";
 import pc19 from "picocolors";
 var squash = (text) => text.replace(/\r\n/g, "\n").replace(/\s+/g, " ").trim();
+var squashCode = (text) => squash(
+  text.replace(/\r\n/g, "\n").split("\n").filter((line) => !line.trim().startsWith("//")).join("\n")
+);
 function handWrittenReason(source, header2, options2 = {}) {
   const parts = splitMarkers(source);
   if (!parts) return "has no generated block (entirely hand-written)";
   if (options2.descriptorWrapper) {
-    if (squash(parts.before) !== squash(options2.descriptorWrapper.before) || squash(parts.after) !== squash(options2.descriptorWrapper.after)) {
+    if (squashCode(parts.before) !== squashCode(options2.descriptorWrapper.before) || squashCode(parts.after) !== squashCode(options2.descriptorWrapper.after)) {
       return "has hand-written changes outside the fields block";
     }
     return null;
@@ -6282,7 +6341,7 @@ async function rmResource(rawName, options2 = {}) {
   if (!entry && owned.size === 0) throw new Error(`No resource "${name}" (no ${descriptorPath(name)} and no generated files).`);
   const findings = [];
   for (const path of owned) {
-    const source = readFileSync16(join24(appRoot, path), "utf8");
+    const source = readFileSync17(join24(appRoot, path), "utf8");
     let wrapper;
     if (entry && path === entry.file) {
       const standard = splitMarkers(renderDescriptor(name, [{ key: "placeholder", kind: "string", required: true, unique: false }]));
@@ -6311,7 +6370,7 @@ Move what you want to keep, or pass --force to delete anyway.`);
   const table = entry ? tableExport(entry.resource) : void 0;
   if (table && existsSync24(join24(appRoot, "seeds"))) {
     const seeds = readdirSync9(join24(appRoot, "seeds")).filter(
-      (file) => new RegExp(`\\b${table}\\b`).test(readFileSync16(join24(appRoot, "seeds", file), "utf8"))
+      (file) => new RegExp(`\\b${table}\\b`).test(readFileSync17(join24(appRoot, "seeds", file), "utf8"))
     );
     if (seeds.length) log2(pc19.yellow(`
 These seeds still use ${table}: ${seeds.map((s) => `seeds/${s}`).join(", ")}.`));
@@ -6319,7 +6378,7 @@ These seeds still use ${table}: ${seeds.map((s) => `seeds/${s}`).join(", ")}.`))
   let migrations = [];
   if (readStack(appRoot) === "next") {
     if (entry) log2(`
-Next: ${pc19.bold("npx prisma migrate dev")} to drop the table.`);
+Next: ${pc19.bold("npx flare migrate")} to drop the table.`);
     return { removed, migrations };
   }
   if (!options2.skipMigration && entry) {
@@ -6334,17 +6393,17 @@ Next: ${pc19.bold("flare migrate")} to drop the table locally.`);
 }
 
 // src/commands/eject.ts
-import { existsSync as existsSync25, mkdirSync as mkdirSync12, readFileSync as readFileSync17, readdirSync as readdirSync10, writeFileSync as writeFileSync18 } from "fs";
+import { existsSync as existsSync25, mkdirSync as mkdirSync12, readFileSync as readFileSync18, readdirSync as readdirSync10, writeFileSync as writeFileSync18 } from "fs";
 import { dirname as dirname12, join as join25, relative as relative2 } from "path";
 import pc20 from "picocolors";
 var TRACKED = ["app", "lib", "components"];
-var PER_APP = /__APP_NAME__|__PM__|__THEME__|__COMPAT_DATE__/;
+var PER_APP = /__APP_NAME__|__APP_TITLE__|__PM__|__THEME__|__COMPAT_DATE__/;
 var WRITTEN_PER_APP = /* @__PURE__ */ new Set(["lib/auth-config.ts"]);
 var prunedOn = (path, stack) => stack === "next" && CLOUDFLARE_ONLY.some((only) => path === only || path.startsWith(`${only}/`));
 function upstreamFile(path, stack) {
   if (prunedOn(path, stack) || WRITTEN_PER_APP.has(path)) return void 0;
   const found = locate(path, stack);
-  if (found && PER_APP.test(readFileSync17(found, "utf8"))) return void 0;
+  if (found && PER_APP.test(readFileSync18(found, "utf8"))) return void 0;
   return found;
 }
 function locate(path, stack) {
@@ -6371,10 +6430,10 @@ function trackedPaths(appRoot, stack) {
 function compareTracked(appRoot, stack, filter) {
   return trackedPaths(appRoot, stack).filter((path) => !filter || path.includes(filter)).map((path) => {
     const source = upstreamFile(path, stack);
-    const theirs = readFileSync17(source, "utf8");
+    const theirs = readFileSync18(source, "utf8");
     const target = join25(appRoot, path);
     if (!existsSync25(target)) return { path, state: "missing", theirs };
-    const mine = readFileSync17(target, "utf8");
+    const mine = readFileSync18(target, "utf8");
     if (mine === theirs) return { path, state: "same", mine, theirs };
     const merged = mergeGeneratedBlock(mine, theirs);
     if (merged !== void 0) {
@@ -6564,7 +6623,7 @@ function createInsertMany(sink, drizzle, onProgress) {
 }
 
 // src/seed/local-d1.ts
-import { readFileSync as readFileSync18, rmSync as rmSync5, writeFileSync as writeFileSync19 } from "fs";
+import { readFileSync as readFileSync19, rmSync as rmSync5, writeFileSync as writeFileSync19 } from "fs";
 import { createRequire } from "module";
 import { join as join26 } from "path";
 import { pathToFileURL } from "url";
@@ -6597,7 +6656,7 @@ async function openLocalD1(appRoot, binding) {
 }
 function seedConfig(appRoot) {
   const source = join26(appRoot, "wrangler.jsonc");
-  const config = parseJsonc3(readFileSync18(source, "utf8")) ?? {};
+  const config = parseJsonc3(readFileSync19(source, "utf8")) ?? {};
   delete config.durable_objects;
   delete config.migrations;
   const path = join26(appRoot, ".flare-seed.wrangler.json");
@@ -7146,7 +7205,7 @@ function* seedRows(resource, count, options2 = {}) {
 
 // src/commands/seed-resource-prisma.ts
 import { createWriteStream } from "fs";
-import { mkdtempSync as mkdtempSync3, readFileSync as readFileSync19, rmSync as rmSync8, writeFileSync as writeFileSync22 } from "fs";
+import { mkdtempSync as mkdtempSync3, readFileSync as readFileSync20, rmSync as rmSync8, writeFileSync as writeFileSync22 } from "fs";
 import { tmpdir as tmpdir3 } from "os";
 import { join as join29 } from "path";
 import { once } from "events";
@@ -7270,7 +7329,7 @@ async function seedResourceWithPrisma(appRoot, resource, options2, log2) {
       const { code: code2, output } = await runNodeCapturing([tsx, runner, "probe", planFile], appRoot);
       if (code2 !== 0) throw new Error(`Could not read the database before seeding.
 ${output.trim()}`);
-      probe = JSON.parse(readFileSync19(outFile, "utf8"));
+      probe = JSON.parse(readFileSync20(outFile, "utf8"));
     }
     const parentIds = new Map(Object.entries(probe.parents));
     for (const target of options2.parentTargets) {
@@ -7283,7 +7342,7 @@ ${output.trim()}`);
     writeFileSync22(planFile, JSON.stringify({ model, table: resource.table, out: outFile, rows: rowsFile, truncate: !!options2.truncate, total: options2.count }));
     const code = await runNode([tsx, runner, "insert", planFile], appRoot);
     if (code !== 0) throw new Error("Seeding stopped; the reason is above.");
-    const { written } = JSON.parse(readFileSync19(outFile, "utf8"));
+    const { written } = JSON.parse(readFileSync20(outFile, "utf8"));
     return written;
   } finally {
     rmSync8(runner, { force: true });
@@ -7465,7 +7524,7 @@ ${result.output.trim()}`);
 
 // src/commands/billing-sync.ts
 import { createRequire as createRequire2 } from "module";
-import { existsSync as existsSync27, mkdtempSync as mkdtempSync5, readFileSync as readFileSync20, rmSync as rmSync10, writeFileSync as writeFileSync24 } from "fs";
+import { existsSync as existsSync27, mkdtempSync as mkdtempSync5, readFileSync as readFileSync21, rmSync as rmSync10, writeFileSync as writeFileSync24 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
 import { join as join31 } from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
@@ -7475,7 +7534,7 @@ function stripeKeys(appRoot) {
   const map = {};
   const path = join31(appRoot, ".dev.vars");
   if (existsSync27(path)) {
-    for (const line of readFileSync20(path, "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync21(path, "utf8").split(/\r?\n/)) {
       const match = /^\s*([A-Z][A-Z0-9_]*)=(.*)$/.exec(line);
       if (match) map[match[1]] = match[2].trim();
     }
@@ -7561,7 +7620,7 @@ async function syncPlans(options2 = {}) {
   const appRequire = createRequire2(join31(appRoot, "package.json"));
   const stripeModule = await import(pathToFileURL2(appRequire.resolve("stripe")).href);
   const stripe = new stripeModule.default(key, { apiVersion: "2026-08-26.dahlia" });
-  const appName = JSON.parse(readFileSync20(join31(appRoot, "package.json"), "utf8")).name ?? "app";
+  const appName = JSON.parse(readFileSync21(join31(appRoot, "package.json"), "utf8")).name ?? "app";
   const everything = await stripe.products.list({ active: true, limit: 100 }).autoPagingToArray({ limit: 1e4 });
   const products = options2.all ? everything : everything.filter((product) => product.metadata?.flare_app === appName);
   if (products.length === 0) {
@@ -7736,13 +7795,13 @@ async function setUserRoleOnPrisma(appRoot, email, role, log2) {
 
 // src/utils/install.ts
 import { spawn as spawn5 } from "child_process";
-import { existsSync as existsSync29, readFileSync as readFileSync21, readdirSync as readdirSync12 } from "fs";
+import { existsSync as existsSync29, readFileSync as readFileSync22, readdirSync as readdirSync12 } from "fs";
 import { join as join34 } from "path";
 function expectedPackages(dir) {
   const npmLock = join34(dir, "package-lock.json");
   if (existsSync29(npmLock)) {
     try {
-      const lock = JSON.parse(readFileSync21(npmLock, "utf8"));
+      const lock = JSON.parse(readFileSync22(npmLock, "utf8"));
       return Math.max(0, Object.keys(lock.packages ?? {}).length - 1);
     } catch {
       return 0;
@@ -7751,7 +7810,7 @@ function expectedPackages(dir) {
   const pnpmLock = join34(dir, "pnpm-lock.yaml");
   if (existsSync29(pnpmLock)) {
     try {
-      const text = readFileSync21(pnpmLock, "utf8");
+      const text = readFileSync22(pnpmLock, "utf8");
       const packages = text.slice(text.indexOf("\npackages:"));
       return (packages.match(/\n {2}[^\s:]+:/g) ?? []).length;
     } catch {
@@ -7857,7 +7916,7 @@ function createCli() {
       printNextSteps(result, installed);
     }
   );
-  cli.command("gen <generator> [name] [second]", `Generate code. Generators: ${GENERATORS.join(", ")}`).option("--fields <fields>", "resource: fields, e.g. 'name:string, email:string!, status:enum(lead,customer)' (single quotes: bash treats ! in double quotes as history)").option("--group <name>", "resource: sidebar heading to file it under, e.g. Sales").option("--icon <name>", "resource: lucide icon for the sidebar, e.g. users").option("--soft-delete", "resource: keep deleted rows and hide them, with a Trash view in the dashboard").option("--method <verb>", "endpoint: GET (default), POST, PATCH, PUT or DELETE").option("--action <action>", "endpoint: policy action to require (read, create, update, delete)").option("--record", "endpoint: put it under one record, /api/<resource>/[id]/<name>").option("--force", "resource/policy/billing/security: overwrite hand-edited generated blocks").option("--from-schema", "migration: diff the current tables instead of a blank migration; on Next.js, also apply declared renames").example("flare gen migration add_phone --from-schema         # Cloudflare: diff the Drizzle tables").example("flare gen migration add_phone                       # Next.js: prisma migrate dev, refusing a drop").option("--roles <roles>", "policy: roles allowed to read, create and update, e.g. admin,staff").option("--delete-roles <roles>", "policy: roles allowed to delete (default: the first --roles entry)").option("--own <field>", "policy: confine each user to rows whose field holds their id, e.g. --own userId").option("--own-except <roles>", "policy: roles that see every row despite --own, e.g. admin").option("--provider <provider>", "billing: payment provider (default: stripe)").option("--mode <mode>", "billing: subscriptions (the default; includes one-time checkout)").option("--skip-install", "billing/apikeys: write files without adding the dependency").option("--skip-migration", "billing/security/apikeys: skip generating the schema migration").example("flare gen resource Contact --fields 'name:string, email:string!, company:belongsTo(Company)?'").example("flare gen resource Invoice --fields 'number:string!' --soft-delete   # a delete goes to the Trash").example("flare gen endpoint Order publish --method POST --record").example("flare gen migration backfill_contact_status").example("flare gen migration add_phone_to_contacts --from-schema").example("flare gen policy Invoice --roles admin,staff --delete-roles admin").example("flare gen policy Invoice --roles staff --own userId --own-except admin   # each user sees only their own").example("flare gen billing --provider stripe --mode subscriptions").example("flare gen security").example("flare gen apikeys                                   # API keys for cron jobs, scripts and mobile apps").example("flare gen apikeys                                     # bearer keys for crons, scripts and mobile apps").action(
+  cli.command("gen <generator> [name] [second]", `Generate code. Generators: ${GENERATORS.join(", ")}`).option("--fields <fields>", "resource: fields, e.g. 'name:string, email:string!, status:enum(lead,customer)' (single quotes: bash treats ! in double quotes as history)").option("--add <fields>", "resource: add fields to one that exists, in the same grammar as --fields").option("--group <name>", "resource: sidebar heading to file it under, e.g. Sales").option("--icon <name>", "resource: lucide icon for the sidebar, e.g. users").option("--soft-delete", "resource: keep deleted rows and hide them, with a Trash view in the dashboard").option("--method <verb>", "endpoint: GET (default), POST, PATCH, PUT or DELETE").option("--action <action>", "endpoint: policy action to require (read, create, update, delete)").option("--record", "endpoint: put it under one record, /api/<resource>/[id]/<name>").option("--force", "resource/policy/billing/security: overwrite hand-edited generated blocks").option("--from-schema", "migration: diff the current tables instead of a blank migration; on Next.js, also apply declared renames").example("flare gen migration add_phone --from-schema         # Cloudflare: diff the Drizzle tables").example("flare gen migration add_phone                       # Next.js: prisma migrate dev, refusing a drop").option("--roles <roles>", "policy: roles allowed to read, create and update, e.g. admin,staff").option("--delete-roles <roles>", "policy: roles allowed to delete (default: the first --roles entry)").option("--own <field>", "policy: confine each user to rows whose field holds their id, e.g. --own userId").option("--own-except <roles>", "policy: roles that see every row despite --own, e.g. admin").option("--provider <provider>", "billing: payment provider (default: stripe)").option("--mode <mode>", "billing: subscriptions (the default; includes one-time checkout)").option("--skip-install", "billing/apikeys: write files without adding the dependency").option("--skip-migration", "billing/security/apikeys: skip generating the schema migration").example("flare gen resource Contact --fields 'name:string, email:string!, company:belongsTo(Company)?'").example("flare gen resource Contact --add 'phone:phone?, notes:text?'     # add columns to one you have").example("flare gen resource Invoice --fields 'number:string!' --soft-delete   # a delete goes to the Trash").example("flare gen endpoint Order publish --method POST --record").example("flare gen migration backfill_contact_status").example("flare gen migration add_phone_to_contacts --from-schema").example("flare gen policy Invoice --roles admin,staff --delete-roles admin").example("flare gen policy Invoice --roles staff --own userId --own-except admin   # each user sees only their own").example("flare gen billing --provider stripe --mode subscriptions").example("flare gen security").example("flare gen apikeys                                   # API keys for cron jobs, scripts and mobile apps").example("flare gen apikeys                                     # bearer keys for crons, scripts and mobile apps").action(
     async (generator, name, second, options2) => {
       if (generator === "billing")
         return genBilling({ provider: options2.provider, mode: options2.mode, force: options2.force, skipInstall: options2.skipInstall, skipMigration: options2.skipMigration });
@@ -7870,6 +7929,7 @@ function createCli() {
       if (generator === "resource")
         return genResource(name, {
           fields: options2.fields,
+          add: options2.add,
           force: options2.force,
           group: options2.group,
           icon: options2.icon,
@@ -7919,10 +7979,10 @@ function createCli() {
     "migrate",
     perStack(
       "Apply pending D1 migrations (local database unless --remote)",
-      "Apply pending Prisma migrations to the database in DATABASE_URL (prisma migrate deploy)",
-      "Apply pending migrations: D1 on the Cloudflare stack, Prisma on the Next.js one"
+      "Make the database match the schema: prisma migrate dev + prisma generate (--deploy: apply committed migrations only)",
+      "Make the database match the schema: D1 migrations on Cloudflare; prisma migrate dev + generate on Next.js"
     )
-  ).option("--remote", cloudflareOnly("Target the deployed database")).option("--env <name>", cloudflareOnly("Wrangler environment")).option("--database <binding>", cloudflareOnly("D1 binding, when the app has several")).action(async (options2) => {
+  ).option("--remote", cloudflareOnly("Target the deployed database")).option("--env <name>", cloudflareOnly("Wrangler environment")).option("--database <binding>", cloudflareOnly("D1 binding, when the app has several")).option("--name <name>", "Next.js: name the migration, so Prisma doesn't have to ask").option("--deploy", "Next.js: apply committed migrations and invent nothing (CI, production)").example("flare migrate                      # local, writes a migration if the schema changed").example("flare migrate --deploy             # production: apply what is committed, nothing else").action(async (options2) => {
     process.exitCode = await migrate(options2);
   });
   cli.command(
@@ -7981,6 +8041,15 @@ function createCli() {
   cli.command("sync-types", "Regenerate schema, routes, clients, and validators from resource descriptors; report drift").option("--check", "Change nothing; exit 1 if anything is out of sync (CI)").option("--force", "Overwrite generated blocks that were edited by hand").action(async (options2) => {
     process.exitCode = await syncTypes(options2);
   });
+  cli.command("db:seed", "Seed the development admin account (admin@example.com / Password, role admin)").option("--remote", "Against the deployed database rather than the local one (Cloudflare)").example("flare db:seed").action(async (options2) => {
+    process.exitCode = await addUser(SEED_ADMIN.email, {
+      password: SEED_ADMIN.password,
+      name: SEED_ADMIN.name,
+      role: "admin",
+      skipExisting: true,
+      remote: options2.remote
+    });
+  });
   cli.command("user:add <email>", "Create an account from the command line (the way in when signup is closed)").option("--role <role>", "Role to give them, e.g. admin").option("--password <password>", "Their password (generated and printed when omitted)").option("--name <name>", "Display name (default: the part before the @)").option("--remote", "Against the deployed database rather than the local one").option("--env <name>", "Wrangler environment").option("--skip-existing", "Succeed quietly if the account is already there (for seeds)").example("flare user:add ada@example.com --role admin").action(
     async (email, options2) => {
       process.exitCode = await addUser(email, options2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaredev/cli",
-  "version": "0.12.2",
+  "version": "0.14.0",
   "description": "The flare command-line tool: create, generate, migrate, and deploy Flare apps",
   "license": "MIT",
   "author": "Muke Johnbaptist",
@@ -41,7 +41,7 @@
     "jiti": "^2.7.0",
     "jsonc-parser": "^3.3.1",
     "picocolors": "^1.1.1",
-    "@flaredev/core": "0.12.2"
+    "@flaredev/core": "0.14.0"
   },
   "engines": {
     "node": ">=22"

package/templates/app/README.md

@@ -1,4 +1,4 @@
-# __APP_NAME__
+# __APP_TITLE__
 
 A [Flare](https://flare-docs.codetotech.com) app running on Cloudflare Workers via vinext.
 

package/templates/app/app/dashboard/error.tsx

@@ -4,33 +4,46 @@ import { useEffect } from "react";
 import { RefreshCwIcon, TriangleAlertIcon } from "lucide-react";
 import { Button } from "@/components/ui/button";
 import { Empty, EmptyDescription, EmptyHeader, EmptyMedia, EmptyTitle } from "@/components/ui/empty";
+import { hardReload, isStaleChunkError } from "@/lib/stale-chunk";
 
 /**
  * A dashboard page that threw.
  *
  * Inside the layout, so the sidebar stays and `reset` retries just this page — no
  * sign-out, no lost place in the app.
+ *
+ * Except when the tab is running stale JavaScript, where `reset` re-renders the same
+ * stale modules and can only fail again. That case gets a reload instead, which is the
+ * thing that actually works. See lib/stale-chunk.ts.
  */
 export default function DashboardError({ error, reset }: { error: Error & { digest?: string }; reset: () => void }) {
   useEffect(() => {
     console.error(error);
   }, [error]);
 
+  const stale = isStaleChunkError(error);
+
   return (
     <Empty className="min-h-[60vh]">
       <EmptyHeader>
         <EmptyMedia variant="icon">
           <TriangleAlertIcon />
         </EmptyMedia>
-        <EmptyTitle>This page didn&apos;t load</EmptyTitle>
+        <EmptyTitle>{stale ? "This tab is running old code" : "This page didn't load"}</EmptyTitle>
         <EmptyDescription>
-          Something went wrong fetching it.
-          {error.digest && <> Reference: <span className="font-mono select-all">{error.digest}</span>.</>}
+          {stale ? (
+            "Nothing is wrong with the app. This tab loaded one build and the server is serving another — usually after an update, or after starting a different app on this port. Reloading fixes it."
+          ) : (
+            <>
+              Something went wrong fetching it.
+              {error.digest && <> Reference: <span className="font-mono select-all">{error.digest}</span>.</>}
+            </>
+          )}
         </EmptyDescription>
       </EmptyHeader>
-      <Button onClick={reset}>
+      <Button onClick={stale ? hardReload : reset}>
         <RefreshCwIcon data-icon="inline-start" />
-        Try again
+        {stale ? "Reload the page" : "Try again"}
       </Button>
     </Empty>
   );

package/templates/app/app/dashboard/layout.tsx

@@ -55,9 +55,9 @@ export default async function DashboardLayout({ children }: { children: React.Re
 
   return (
     <SidebarProvider defaultOpen={!collapsed}>
-      <DashboardSidebar appName="__APP_NAME__" resources={resources} links={dashboardLinks} isAdmin={ADMIN_ROLES.includes(role)} user={account} />
+      <DashboardSidebar appName="__APP_TITLE__" resources={resources} links={dashboardLinks} isAdmin={ADMIN_ROLES.includes(role)} user={account} />
       <SidebarInset>
-        <DashboardHeader user={account} initialTheme={theme} notices={notices} />
+        <DashboardHeader user={account} initialTheme={theme} notices={notices} isAdmin={ADMIN_ROLES.includes(role)} />
         <main className="flex flex-1 flex-col gap-6 p-4 md:p-6 lg:p-8">{children}</main>
       </SidebarInset>
       <Toaster theme={theme} />