@flaredev/cli 0.3.0 → 0.4.1

package/dist/index.js

@@ -1,8 +1,9 @@
 // src/index.ts
-import pc21 from "picocolors";
+import pc24 from "picocolors";
 
 // src/cli.ts
 import { cac } from "cac";
+import pc23 from "picocolors";
 import * as prompts3 from "@clack/prompts";
 import { FLARE_VERSION as FLARE_VERSION3 } from "@flaredev/core";
 
@@ -138,6 +139,7 @@ function parseTheme(value) {
 }
 
 // src/versions.ts
+var COMPATIBILITY_DATE = "2026-09-15";
 var APP_DEPENDENCIES = {
   "@better-auth/drizzle-adapter": "1.7.5",
   "@better-auth/passkey": "1.7.5",
@@ -185,43 +187,6 @@ var APP_DEV_DEPENDENCIES = {
   wrangler: "^4.132.0"
 };
 
-// src/terminal.ts
-var isTTY = () => Boolean(process.stdout.isTTY);
-function formatDuration(ms) {
-  const seconds = Math.round(ms / 1e3);
-  if (seconds < 60) return `${seconds}s`;
-  if (seconds < 3600) return `${Math.floor(seconds / 60)}m ${String(seconds % 60).padStart(2, "0")}s`;
-  return `${Math.floor(seconds / 3600)}h ${String(Math.floor(seconds % 3600 / 60)).padStart(2, "0")}m`;
-}
-var formatCount = (value) => value.toLocaleString();
-function formatRate(count, ms, unit = "rows") {
-  if (ms <= 0) return `${formatCount(count)} ${unit}/s`;
-  return `${formatCount(Math.round(count / ms * 1e3))} ${unit}/s`;
-}
-function progressLine(everyMs = 120) {
-  if (!isTTY()) return { update: () => {
-  }, done: () => {
-  } };
-  let last = 0;
-  let width = 0;
-  const write = (message) => {
-    process.stdout.write(`\r${message.padEnd(width)}`);
-    width = Math.max(width, message.length);
-  };
-  return {
-    update(message) {
-      const now = Date.now();
-      if (now - last < everyMs) return;
-      last = now;
-      write(message);
-    },
-    done() {
-      if (width > 0) process.stdout.write(`\r${" ".repeat(width)}\r`);
-      width = 0;
-    }
-  };
-}
-
 // src/utils/fs.ts
 import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "fs";
 import { dirname, join, resolve } from "path";
@@ -281,11 +246,6 @@ function childEnv(env = process.env) {
   }
   return next;
 }
-function runQuiet(command, args, cwd) {
-  const env = childEnv();
-  const result = process.platform === "win32" ? spawnSync([command, ...args].join(" "), { cwd, env, shell: true, encoding: "utf8" }) : spawnSync(command, args, { cwd, env, encoding: "utf8" });
-  return { code: result.status ?? 1, output: `${result.stdout ?? ""}${result.stderr ?? ""}` };
-}
 function installArgs(pm) {
   if (pm === "npm") return ["install", "--no-audit", "--no-fund", "--loglevel=error"];
   return ["install"];
@@ -321,7 +281,7 @@ function createApp(target, options2 = {}) {
   const authMethods = parseAuthMethods(options2.auth);
   const theme = parseTheme(options2.theme);
   const inWorkspace = findUp("pnpm-workspace.yaml", dirname2(dir)) !== void 0;
-  const compatibilityDate = options2.compatibilityDate ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const compatibilityDate = options2.compatibilityDate ?? COMPATIBILITY_DATE;
   const files = copyTemplate(join2(templatesDir, "app"), dir, {
     APP_NAME: name,
     COMPAT_DATE: compatibilityDate,
@@ -361,16 +321,10 @@ ${devVarsEntries(authProviders)}`
   if (pinned) copyLockfile(packageManager, dir);
   const log2 = options2.log ?? ((message) => console.log(message));
   log2(`${pc.green("\u2714")} Wrote ${files} files to ${relative(process.cwd(), dir) || "."}`);
-  if (options2.install !== false) {
-    const started = Date.now();
-    const code = (options2.installer ?? run)(packageManager, installArgs(packageManager), dir);
-    if (code !== 0) throw new Error(`${packageManager} install failed (exit code ${code}).`);
-    if (!options2.installer) log2(`${pc.green("\u2714")} Installed dependencies ${pc.dim(`(${formatDuration(Date.now() - started)})`)}`);
-  }
   return { dir, name, packageManager, inWorkspace };
 }
 function copyLockfile(packageManager, dir) {
-  const file = packageManager === "npm" ? "package-lock.json" : packageManager === "pnpm" ? "pnpm-lock.yaml" : void 0;
+  const file = packageManager === "pnpm" ? "pnpm-lock.yaml" : packageManager === "yarn" ? "yarn.lock" : "package-lock.json";
   if (!file) return false;
   const source = join2(templatesDir, "locks", file);
   if (!existsSync2(source)) return false;
@@ -426,6 +380,20 @@ function splitTopLevel(input) {
   parts.push(current);
   return parts.map((part) => part.trim()).filter(Boolean);
 }
+var MAX_UPLOAD_BYTES = 100 * 1024 * 1024;
+var SIZE_UNITS = { b: 1, kb: 1024, mb: 1024 * 1024, gb: 1024 * 1024 * 1024 };
+function parseSize(text, spec) {
+  const match = /^(\d+(?:\.\d+)?)\s*(b|kb|mb|gb)$/i.exec(text.trim());
+  if (!match) {
+    throw new FieldGrammarError(`"${spec}": "${text}" isn't a size. Write it like "file:[image]:5mb".`);
+  }
+  const bytes = Math.round(Number(match[1]) * SIZE_UNITS[match[2].toLowerCase()]);
+  if (bytes < 1) throw new FieldGrammarError(`"${spec}": a size limit has to be at least one byte.`);
+  if (bytes > MAX_UPLOAD_BYTES) {
+    throw new FieldGrammarError(`"${spec}": ${text} is more than a Worker will carry in one request; the most is 100mb.`);
+  }
+  return bytes;
+}
 function editDistance(a, b) {
   const dp = Array.from({ length: a.length + 1 }, (_, i) => [i, ...Array(b.length).fill(0)]);
   for (let j = 1; j <= b.length; j++) dp[0][j] = j;
@@ -486,11 +454,14 @@ function parseField(spec) {
     }
     if (new Set(options2).size !== options2.length) throw new FieldGrammarError(`"${spec}": duplicate ${choice} options.`);
     field.options = options2;
-  } else if (match = /^file(?::\[(.*)\])?$/.exec(type)) {
+  } else if (/^file\[/.test(type)) {
+    throw new FieldGrammarError(`"${spec}": file fields need a colon before the list, e.g. "${field.key}:file:[${type.slice(5, -1) || "image"}]".`);
+  } else if (match = /^file(?::\[(.*)\])?(?::([^:]*))?$/.exec(type)) {
     field.kind = "file";
     if (match[1] === void 0) {
       throw new FieldGrammarError(`"${spec}": file fields list accepted types, e.g. "file:[image,pdf]".`);
     }
+    if (match[2] !== void 0) field.maxBytes = parseSize(match[2], spec);
     const categories = Object.keys(FILE_CATEGORIES);
     const accept = list(match[1], "file type", spec).map((category) => category.toLowerCase());
     for (const category of accept) {
@@ -639,6 +610,7 @@ function options(field) {
   if (field.format) opts.format = field.format;
   if (field.widget) opts.widget = field.widget;
   if (field.kind === "belongsTo" && !field.required) opts.onDelete = "set null";
+  if (field.maxBytes !== void 0) opts.maxBytes = field.maxBytes;
   return opts;
 }
 function toField(field) {
@@ -685,15 +657,21 @@ function renderFieldsBlock(fields) {
   return fields.map((f) => `${renderField(f)}
 `).join("");
 }
-function renderDescriptor(name, fields) {
+function renderDescriptor(name, fields, options2 = {}) {
   defineResource({ name, fields: Object.fromEntries(fields.map((f) => [f.key, toField(f)])) });
   const block = renderFieldsBlock(fields);
+  const heading = [
+    options2.icon ? `  icon: ${literal(options2.icon)},
+` : "",
+    options2.group ? `  group: ${literal(options2.group)},
+` : ""
+  ].join("");
   return joinMarkers({
     before: `import { defineResource, field } from "@flaredev/core";
 
 export default defineResource({
   name: ${literal(name)},
-  fields: {
+${heading}  fields: {
 `,
     block,
     after: `  },
@@ -1375,7 +1353,7 @@ async function loadResources(root) {
   const appRoot = resolve3(root);
   const dir = join3(appRoot, "resources");
   if (!existsSync4(dir)) return [];
-  const jiti = createJiti(join3(appRoot, "package.json"), { moduleCache: false, fsCache: false });
+  const jiti = createJiti(join3(appRoot, "package.json"), { alias: { "@": appRoot }, moduleCache: false, fsCache: false });
   const loaded = [];
   for (const file of readdirSync3(dir).filter((name) => name.endsWith(".resource.ts")).sort()) {
     const path = join3(dir, file);
@@ -1575,6 +1553,7 @@ function parseDeployArgs(args) {
     if (arg === "--skip-migrations") skipMigrations = true;
     else if (arg === "--skip-secrets") skipSecrets = true;
     else if (arg === "--skip-security") skipSecurity = true;
+    else if (arg === "--yes" || arg === "-y") continue;
     else {
       forwarded.push(arg);
       if (arg === "--env" && args[i + 1]) env = args[i + 1];
@@ -2007,13 +1986,24 @@ function renderTableModule(entry, all) {
   const name = tableExport(resource);
   const columns = fields.map(([key, def]) => `    ${key}: ${columnExpression(key, def, resources, resource.name)},`);
   const extras = [];
+  const indexed = /* @__PURE__ */ new Set();
+  const addIndex = (key, column) => {
+    if (indexed.has(key)) return;
+    indexed.add(key);
+    extras.push(`    index(${q(`${resource.table}_${columnName(column)}_idx`)}).on(table.${key}),`);
+  };
   for (const [key, def] of fields) {
     if (def.kind === "enum") {
       const options2 = def.options.map(sqlString).join(", ");
       extras.push(`    check(${q(`${resource.table}_${columnName(key)}_check`)}, sql\`\${table.${key}} in (${options2})\`),`);
+      if (def.filterable !== false) addIndex(key, key);
     }
-    if (def.kind === "belongsTo") extras.push(`    index(${q(`${resource.table}_${columnName(key)}_idx`)}).on(table.${key}),`);
+    if (def.kind === "belongsTo") addIndex(key, key);
   }
+  const sortKey = resource.defaultSort.field;
+  if (sortKey === "createdAt" || sortKey === "updatedAt") addIndex(sortKey, sortKey === "createdAt" ? "created_at" : "updated_at");
+  else if (fields.some(([key]) => key === sortKey)) addIndex(sortKey, sortKey);
+  addIndex("createdAt", "created_at");
   const targets = [...new Set(fields.flatMap(([, def]) => def.kind === "belongsTo" ? [resources.get(def.target)] : []))].filter((target) => target.name !== resource.name).sort((a, b) => a.table.localeCompare(b.table));
   const coreImports = ["integer", "sqliteTable", "text"];
   if (fields.some(([, def]) => def.kind === "float")) coreImports.push("real");
@@ -2089,7 +2079,7 @@ var handlerImports = (entry) => [
   `import { createResourceHandlers } from "@flaredev/core/server";`,
   `import { getDb } from "@/db";`,
   `import { ${tableExport(entry.resource)} } from "@/db/schema";`,
-  `import { authorize } from "@/lib/api";`,
+  `import { authorize, currentUser } from "@/lib/api";`,
   `import { revalidateResource } from "@/lib/cache";`,
   `import ${resourceLocal(entry.stem)} from "@/resources/${entry.stem}.resource";`,
   "",
@@ -2098,6 +2088,7 @@ var handlerImports = (entry) => [
   `  table: ${tableExport(entry.resource)},`,
   `  getDb,`,
   `  authorize,`,
+  `  currentUser,`,
   `  onChange: revalidateResource,`,
   `});`,
   ""
@@ -2124,6 +2115,7 @@ function renderAdminListPage(entry) {
   const local = resourceLocal(entry.stem);
   return [
     `import { PageHeader } from "@/components/dashboard/page-header";`,
+    `import { ResourceChart } from "@/components/dashboard/resource-chart";`,
     `import { ResourceStats } from "@/components/dashboard/resource-stats";`,
     `import { ResourceTable } from "@/components/dashboard/resource-table";`,
     `import type { SearchParams } from "@/components/dashboard/query";`,
@@ -2139,6 +2131,7 @@ function renderAdminListPage(entry) {
     `        crumbs={[{ label: "Dashboard", href: "/dashboard" }, { label: ${local}.pluralLabel }]}`,
     "      />",
     `      <ResourceStats resource={${local}} />`,
+    `      <ResourceChart resource={${local}} />`,
     `      <ResourceTable resource={${local}} searchParams={await searchParams} />`,
     "    </>",
     "  );",
@@ -2146,6 +2139,17 @@ function renderAdminListPage(entry) {
     ""
   ].join("\n");
 }
+function renderAdminDetailPage(entry) {
+  return [
+    `import { RecordDetail } from "@/components/dashboard/record-detail";`,
+    ...adminImports(entry),
+    "",
+    `export default async function ${entry.resource.name}DetailPage({ params }: { params: Promise<{ id: string }> }) {`,
+    `  return <RecordDetail resource={${resourceLocal(entry.stem)}} id={(await params).id} />;`,
+    "}",
+    ""
+  ].join("\n");
+}
 function renderAdminNewPage(entry) {
   return [
     `import { ResourceFormPage } from "@/components/dashboard/resource-form-page";`,
@@ -2228,6 +2232,7 @@ function resourceFiles(entry, all) {
     { path: `resources/${stem}.client.ts`, content: renderClient(entry) },
     { path: `resources/${stem}.validators.ts`, content: renderValidators(entry) },
     { path: `app/dashboard/${resource.slug}/page.tsx`, content: renderAdminListPage(entry) },
+    { path: `app/dashboard/${resource.slug}/[id]/page.tsx`, content: renderAdminDetailPage(entry) },
     { path: `app/dashboard/${resource.slug}/new/page.tsx`, content: renderAdminNewPage(entry) },
     { path: `app/dashboard/${resource.slug}/[id]/edit/page.tsx`, content: renderAdminEditPage(entry) }
   ];
@@ -2290,7 +2295,7 @@ function findOrphans(appRoot, all) {
     for (const file of [`${dir}/route.ts`, `${dir}/[id]/route.ts`]) if (existsSync11(join10(appRoot, file))) candidates.push(file);
   }
   for (const dir of list2("app/dashboard", () => true)) {
-    for (const file of [`${dir}/page.tsx`, `${dir}/new/page.tsx`, `${dir}/[id]/edit/page.tsx`]) {
+    for (const file of [`${dir}/page.tsx`, `${dir}/new/page.tsx`, `${dir}/[id]/page.tsx`, `${dir}/[id]/edit/page.tsx`]) {
       if (existsSync11(join10(appRoot, file))) candidates.push(file);
     }
   }
@@ -3168,7 +3173,7 @@ async function genResource(rawName, options2) {
     validateFields(name, fields, others, log2);
     if (!exists) {
       mkdirSync7(dirname8(path), { recursive: true });
-      writeFileSync9(path, renderDescriptor(name, fields));
+      writeFileSync9(path, renderDescriptor(name, fields, { group: options2.group, icon: options2.icon }));
       log2(`${pc10.green("create".padEnd(9))} ${relativePath}`);
     } else {
       try {
@@ -3216,11 +3221,74 @@ Next: ${pc10.bold("flare migrate")} to apply it locally.`);
   return { name, mode: exists ? "update" : "create", written: [descriptor, ...written], migrations };
 }
 
-// src/commands/gen-migration.ts
+// src/commands/gen-endpoint.ts
 import { existsSync as existsSync16, mkdirSync as mkdirSync8, writeFileSync as writeFileSync10 } from "fs";
-import { basename as basename2, join as join15 } from "path";
-import { snakeCase } from "@flaredev/core";
+import { join as join15 } from "path";
+import { kebabCase as kebabCase3, pascalCase as pascalCase2 } from "@flaredev/core";
 import pc11 from "picocolors";
+var METHODS = ["GET", "POST", "PATCH", "PUT", "DELETE"];
+var ACTIONS = ["read", "create", "update", "delete"];
+async function genEndpoint(resourceName2, rawName, options2 = {}) {
+  const log2 = options2.log ?? ((message) => console.log(message));
+  const appRoot = findAppRoot(options2.cwd ?? process.cwd());
+  const method = (options2.method ?? "GET").toUpperCase();
+  if (!METHODS.includes(method)) throw new Error(`Unknown method "${method}". Use one of ${METHODS.join(", ")}.`);
+  const name = kebabCase3(rawName);
+  if (!name) throw new Error(`Invalid endpoint name "${rawName}".`);
+  const resources = await loadResources(appRoot);
+  const wanted = pascalCase2(resourceName2);
+  const entry = resources.find(({ resource: resource2 }) => resource2.name === wanted);
+  if (!entry) {
+    throw new Error(`No resource "${resourceName2}". Available: ${resources.map(({ resource: resource2 }) => resource2.name).join(", ") || "none"}.`);
+  }
+  const action = options2.action ?? (method === "GET" ? "read" : "update");
+  if (!ACTIONS.includes(action)) throw new Error(`Unknown action "${action}". Use one of ${ACTIONS.join(", ")}.`);
+  const { resource, stem } = entry;
+  const relative2 = options2.record ? `app/api/${resource.slug}/[id]/${name}/route.ts` : `app/api/${resource.slug}/${name}/route.ts`;
+  const path = join15(appRoot, relative2);
+  if (existsSync16(path)) throw new Error(`${relative2} already exists.`);
+  mkdirSync8(join15(path, ".."), { recursive: true });
+  const route = options2.record ? `/api/${resource.slug}/[id]/${name}` : `/api/${resource.slug}/${name}`;
+  writeFileSync10(path, renderEndpoint({ resource: resource.name, stem, method, action, record: Boolean(options2.record), name, route }));
+  log2(`${pc11.green("create".padEnd(9))} ${relative2}`);
+  log2(`
+It's an ordinary route handler \u2014 edit it freely; regeneration leaves it alone.`);
+  return relative2;
+}
+function renderEndpoint({ resource, stem, method, action, record, route }) {
+  const body = method === "GET" || method === "DELETE" ? "" : "  const body = (await request.json()) as Record<string, unknown>;\n";
+  const params = record ? ", { params }: { params: Promise<{ id: string }> }" : "";
+  const id = record ? "  const { id } = await params;\n" : "";
+  return `import { authorize, currentUser } from "@/lib/api";
+import { dashboardStore } from "@/lib/dashboard";
+import ${stem.replace(/-([a-z])/g, (_match, letter) => letter.toUpperCase())}Resource from "@/resources/${stem}.resource";
+
+/**
+ * ${method} ${route}
+ *
+ * Yours to change. The session and the policy are checked the same way the generated
+ * CRUD routes check them, and \`store\` is the same store they use \u2014 so hooks, validation
+ * and cache invalidation all still apply.
+ */
+export async function ${method}(request: Request${params}) {
+${id}  const denied = await authorize({ request, resource: ${stem.replace(/-([a-z])/g, (_match, letter) => letter.toUpperCase())}Resource, action: "${action}" });
+  if (denied) return denied;
+
+  const user = await currentUser();
+  const store = dashboardStore("${resource}");
+${body}
+  // Your logic here. \`store.list\`, \`store.get\`, \`store.create\`, \`store.update\` and
+  // \`store.delete\` are available, or reach for Drizzle directly with \`getDb()\`.
+  return Response.json({ ok: true, ${record ? "id, " : ""}${method === "GET" || method === "DELETE" ? "" : "received: body, "}user: user?.email ?? null });
+}
+`;
+}
+
+// src/commands/gen-migration.ts
+import { existsSync as existsSync17, mkdirSync as mkdirSync9, writeFileSync as writeFileSync11 } from "fs";
+import { basename as basename2, join as join16 } from "path";
+import { snakeCase } from "@flaredev/core";
+import pc12 from "picocolors";
 var DOWN_TEMPLATE = (up) => `-- Rollback for ${up}, run by \`flare migrate:rollback\`.
 -- Write SQL that undoes the up migration, e.g.:
 --   DROP INDEX IF EXISTS \`contacts_phone_idx\`;
@@ -3236,31 +3304,31 @@ async function genMigration(rawName, options2 = {}) {
     log2(options2.fromSchema ? "No schema changes, so no migration was created." : "drizzle-kit didn't create a migration.");
     return [];
   }
-  for (const file of files) log2(`${pc11.green("create".padEnd(9))} ${file}`);
-  for (const repair of repairs) log2(pc11.dim(`repaired  ${repair}`));
+  for (const file of files) log2(`${pc12.green("create".padEnd(9))} ${file}`);
+  for (const repair of repairs) log2(pc12.dim(`repaired  ${repair}`));
   if (!options2.fromSchema) {
-    const downDir = join15(appRoot, "migrations", "down");
-    mkdirSync8(downDir, { recursive: true });
+    const downDir = join16(appRoot, "migrations", "down");
+    mkdirSync9(downDir, { recursive: true });
     for (const file of files) {
-      const down = join15(downDir, basename2(file));
-      if (existsSync16(down)) continue;
-      writeFileSync10(down, DOWN_TEMPLATE(basename2(file)));
-      log2(`${pc11.green("create".padEnd(9))} migrations/down/${basename2(file)}`);
+      const down = join16(downDir, basename2(file));
+      if (existsSync17(down)) continue;
+      writeFileSync11(down, DOWN_TEMPLATE(basename2(file)));
+      log2(`${pc12.green("create".padEnd(9))} migrations/down/${basename2(file)}`);
     }
     log2(`
-Write your SQL in ${files[0]} (and its rollback in migrations/down/), then run ${pc11.bold("flare migrate")}.`);
+Write your SQL in ${files[0]} (and its rollback in migrations/down/), then run ${pc12.bold("flare migrate")}.`);
   } else {
     log2(`
-Next: ${pc11.bold("flare migrate")}.`);
+Next: ${pc12.bold("flare migrate")}.`);
   }
   return files;
 }
 
 // src/commands/gen-policy.ts
-import { existsSync as existsSync17, mkdirSync as mkdirSync9, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname9, join as join16 } from "path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync10, writeFileSync as writeFileSync12 } from "fs";
+import { dirname as dirname9, join as join17 } from "path";
 import { definePolicy } from "@flaredev/core";
-import pc12 from "picocolors";
+import pc13 from "picocolors";
 function parseRoles(input, what = "--roles") {
   const roles = (input ?? "").split(",").map((role) => role.trim()).filter(Boolean);
   if (roles.length === 0) throw new Error(`${what} is required, e.g. ${what} admin,staff`);
@@ -3276,8 +3344,8 @@ async function genPolicy(rawName, options2) {
     throw new Error(`No resource "${name}". Generate it first. Known resources: ${known}.`);
   }
   const relative2 = policyPath(name);
-  const path = join16(appRoot, relative2);
-  const exists = existsSync17(path);
+  const path = join17(appRoot, relative2);
+  const exists = existsSync18(path);
   let roles;
   let deleteRoles;
   if (options2.roles || !exists) {
@@ -3288,13 +3356,13 @@ async function genPolicy(rawName, options2) {
   if (roles && deleteRoles) {
     const block = renderPolicyBlock({ read: roles, create: roles, update: roles, delete: deleteRoles });
     if (!exists) {
-      mkdirSync9(dirname9(path), { recursive: true });
-      writeFileSync11(path, renderPolicy(name, { read: roles, create: roles, update: roles, delete: deleteRoles }));
-      log2(`${pc12.green("create".padEnd(9))} ${relative2}`);
+      mkdirSync10(dirname9(path), { recursive: true });
+      writeFileSync12(path, renderPolicy(name, { read: roles, create: roles, update: roles, delete: deleteRoles }));
+      log2(`${pc13.green("create".padEnd(9))} ${relative2}`);
     } else {
       try {
         const outcome = writeGenerated(path, block, { force: options2.force });
-        log2(`${(outcome === "identical" ? pc12.dim : pc12.yellow)(outcome.padEnd(9))} ${relative2}`);
+        log2(`${(outcome === "identical" ? pc13.dim : pc13.yellow)(outcome.padEnd(9))} ${relative2}`);
       } catch (error) {
         if (error instanceof DriftError) {
           throw new Error(`The roles in ${relative2} were edited by hand, so --roles won't overwrite them. Edit the file directly, or pass --force.`);
@@ -3306,15 +3374,15 @@ async function genPolicy(rawName, options2) {
   const policies = await loadPolicies(appRoot);
   logResults(applyPlan(appRoot, planFiles(resources, policies)), log2);
   log2(`
-${pc12.dim("Roles come from `flare role:add`; the API and the admin both enforce this policy.")}`);
+${pc13.dim("Roles come from `flare role:add`; the API and the admin both enforce this policy.")}`);
   return { name, path: relative2 };
 }
 
 // src/commands/migrate.ts
-import { existsSync as existsSync18, mkdtempSync, readFileSync as readFileSync11, rmSync as rmSync2, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync19, mkdtempSync, readFileSync as readFileSync11, rmSync as rmSync2, writeFileSync as writeFileSync13 } from "fs";
 import { tmpdir } from "os";
-import { join as join17 } from "path";
-import pc13 from "picocolors";
+import { join as join18 } from "path";
+import pc14 from "picocolors";
 
 // src/generator/down.ts
 var IDENT = '(`[^`]+`|"[^"]+"|\\[[^\\]]+\\]|[A-Za-z_][\\w$]*)';
@@ -3431,7 +3499,7 @@ async function rollback(options2 = {}) {
   const steps = options2.steps ?? 1;
   if (!Number.isInteger(steps) || steps < 1) throw new Error("--steps must be a positive integer.");
   const { appRoot, db, target, where, wrangler, log: log2 } = context(options2);
-  const migrationsDir = join17(appRoot, db.migrations_dir ?? "migrations");
+  const migrationsDir = join18(appRoot, db.migrations_dir ?? "migrations");
   const applied = await appliedMigrations(options2, steps);
   if (applied.length === 0) {
     log2("Nothing to roll back.");
@@ -3440,8 +3508,8 @@ async function rollback(options2 = {}) {
   const plan = [];
   for (const { name } of applied) {
     if (!/^[\w.-]+\.sql$/.test(name)) throw new Error(`Unexpected migration name "${name}" in d1_migrations.`);
-    const handWritten = join17(migrationsDir, "down", name);
-    if (existsSync18(handWritten)) {
+    const handWritten = join18(migrationsDir, "down", name);
+    if (existsSync19(handWritten)) {
       const sql2 = readFileSync11(handWritten, "utf8");
       if (splitStatements(sql2).length === 0) {
         throw new Error(`Can't roll back ${name}: migrations/down/${name} has no SQL statements yet. Write the rollback SQL, then run the rollback again. Nothing was changed.`);
@@ -3449,8 +3517,8 @@ async function rollback(options2 = {}) {
       plan.push({ name, sql: sql2, source: `migrations/down/${name}` });
       continue;
     }
-    const upPath = join17(migrationsDir, name);
-    if (!existsSync18(upPath)) throw new Error(`${name} was applied but migrations/${name} is missing, so it can't be reversed.`);
+    const upPath = join18(migrationsDir, name);
+    if (!existsSync19(upPath)) throw new Error(`${name} was applied but migrations/${name} is missing, so it can't be reversed.`);
     const down = deriveDown(readFileSync11(upPath, "utf8"));
     if (!down.reversible) {
       throw new Error(
@@ -3460,37 +3528,37 @@ Write the reverse SQL to migrations/down/${name} and run the rollback again. Not
     }
     plan.push({ name, sql: down.sql, source: "derived" });
   }
-  log2(`${pc13.bold(`Rolling back ${plan.length} migration(s) on ${db.database_name} (${where}):`)}`);
+  log2(`${pc14.bold(`Rolling back ${plan.length} migration(s) on ${db.database_name} (${where}):`)}`);
   for (const step of plan) {
-    log2(`  ${step.name} ${pc13.dim(`(${step.source})`)}`);
-    for (const line of step.sql.trim().split("\n")) log2(pc13.dim(`    ${line}`));
+    log2(`  ${step.name} ${pc14.dim(`(${step.source})`)}`);
+    for (const line of step.sql.trim().split("\n")) log2(pc14.dim(`    ${line}`));
   }
   if (options2.remote && !options2.yes) {
-    log2(pc13.yellow("\nThis changes the remote database. Re-run with --yes to proceed."));
+    log2(pc14.yellow("\nThis changes the remote database. Re-run with --yes to proceed."));
     return 1;
   }
   const script = plan.map(({ name, sql: sql2 }) => `${sql2.trim()}
 DELETE FROM d1_migrations WHERE name = '${name.replace(/'/g, "''")}';`).join("\n") + "\n";
-  const dir = mkdtempSync(join17(tmpdir(), "flare-rollback-"));
+  const dir = mkdtempSync(join18(tmpdir(), "flare-rollback-"));
   try {
-    const file = join17(dir, "rollback.sql");
-    writeFileSync12(file, script);
+    const file = join18(dir, "rollback.sql");
+    writeFileSync13(file, script);
     const result = await runWrangler(wrangler, ["d1", "execute", db.binding, ...target, "--file", file], appRoot, { capture: true });
     if (result.code !== 0) throw new Error(`Rollback failed:
 ${result.output.trim()}`);
   } finally {
     rmSync2(dir, { recursive: true, force: true });
   }
-  log2(pc13.green(`
+  log2(pc14.green(`
 Rolled back ${plan.map((step) => step.name).join(", ")}.`));
   return 0;
 }
 
 // src/commands/rm.ts
-import { existsSync as existsSync19, readdirSync as readdirSync7, readFileSync as readFileSync12, rmdirSync, unlinkSync as unlinkSync2 } from "fs";
-import { dirname as dirname10, join as join18 } from "path";
+import { existsSync as existsSync20, readdirSync as readdirSync7, readFileSync as readFileSync12, rmdirSync, unlinkSync as unlinkSync2 } from "fs";
+import { dirname as dirname10, join as join19 } from "path";
 import { relationGraph as relationGraph3 } from "@flaredev/core";
-import pc14 from "picocolors";
+import pc15 from "picocolors";
 var squash = (text) => text.replace(/\r\n/g, "\n").replace(/\s+/g, " ").trim();
 function handWrittenReason(source, header, options2 = {}) {
   const parts = splitMarkers(source);
@@ -3507,10 +3575,10 @@ function handWrittenReason(source, header, options2 = {}) {
   return null;
 }
 function removeEmptyDirs(appRoot, start) {
-  let dir = dirname10(join18(appRoot, start));
-  const roots = [join18(appRoot, "app", "api"), join18(appRoot, "app", "dashboard")];
+  let dir = dirname10(join19(appRoot, start));
+  const roots = [join19(appRoot, "app", "api"), join19(appRoot, "app", "dashboard")];
   const inside = () => roots.some((root) => dir.startsWith(root) && dir !== root);
-  while (inside() && existsSync19(dir) && readdirSync7(dir).length === 0) {
+  while (inside() && existsSync20(dir) && readdirSync7(dir).length === 0) {
     rmdirSync(dir);
     dir = dirname10(dir);
   }
@@ -3539,7 +3607,7 @@ async function rmResource(rawName, options2 = {}) {
   if (entry) {
     owned.add(entry.file);
     for (const file of planFiles(all)) {
-      if (existsSync19(join18(appRoot, file.path)) && file.header === resourceHeader(name)) owned.add(file.path);
+      if (existsSync20(join19(appRoot, file.path)) && file.header === resourceHeader(name)) owned.add(file.path);
     }
   }
   for (const orphan of findOrphans(appRoot, remaining)) if (orphan.resource === name) owned.add(orphan.path);
@@ -3548,7 +3616,7 @@ async function rmResource(rawName, options2 = {}) {
   if (!entry && owned.size === 0) throw new Error(`No resource "${name}" (no ${descriptorPath(name)} and no generated files).`);
   const findings = [];
   for (const path of owned) {
-    const source = readFileSync12(join18(appRoot, path), "utf8");
+    const source = readFileSync12(join19(appRoot, path), "utf8");
     let wrapper;
     if (entry && path === entry.file) {
       const standard = splitMarkers(renderDescriptor(name, [{ key: "placeholder", kind: "string", required: true, unique: false }]));
@@ -3569,34 +3637,34 @@ Move what you want to keep, or pass --force to delete anyway.`);
   }
   const removed = [...owned].sort();
   for (const path of removed) {
-    unlinkSync2(join18(appRoot, path));
+    unlinkSync2(join19(appRoot, path));
     removeEmptyDirs(appRoot, path);
-    log2(`${pc14.red("remove".padEnd(9))} ${path}`);
+    log2(`${pc15.red("remove".padEnd(9))} ${path}`);
   }
   logResults(applyPlan(appRoot, planFiles(remaining, policy ? await loadPolicies(appRoot) : void 0)), log2);
   const table = entry ? tableExport(entry.resource) : void 0;
-  if (table && existsSync19(join18(appRoot, "seeds"))) {
-    const seeds = readdirSync7(join18(appRoot, "seeds")).filter(
-      (file) => new RegExp(`\\b${table}\\b`).test(readFileSync12(join18(appRoot, "seeds", file), "utf8"))
+  if (table && existsSync20(join19(appRoot, "seeds"))) {
+    const seeds = readdirSync7(join19(appRoot, "seeds")).filter(
+      (file) => new RegExp(`\\b${table}\\b`).test(readFileSync12(join19(appRoot, "seeds", file), "utf8"))
     );
-    if (seeds.length) log2(pc14.yellow(`
+    if (seeds.length) log2(pc15.yellow(`
 These seeds still use ${table}: ${seeds.map((s) => `seeds/${s}`).join(", ")}.`));
   }
   let migrations = [];
   if (!options2.skipMigration && entry) {
     const result = await generateSchemaMigration(appRoot, `drop_${entry.resource.table}`);
     migrations = result.files;
-    for (const file of migrations) log2(`${pc14.green("create".padEnd(9))} ${file}`);
-    for (const repair of result.repairs) log2(pc14.dim(`repaired  ${repair}`));
+    for (const file of migrations) log2(`${pc15.green("create".padEnd(9))} ${file}`);
+    for (const repair of result.repairs) log2(pc15.dim(`repaired  ${repair}`));
     if (migrations.length) log2(`
-Next: ${pc14.bold("flare migrate")} to drop the table locally.`);
+Next: ${pc15.bold("flare migrate")} to drop the table locally.`);
   }
   return { removed, migrations };
 }
 
 // src/commands/role.ts
 import { humanize } from "@flaredev/core";
-import pc15 from "picocolors";
+import pc16 from "picocolors";
 var ROLE_NAME = /^[a-z][a-z0-9_-]{0,31}$/;
 function roleInsertSql(name, label) {
   if (!ROLE_NAME.test(name)) throw new Error(`Invalid role "${name}". Use lowercase letters, digits, _ or -, e.g. admin or support-agent.`);
@@ -3641,17 +3709,17 @@ ${result.output.trim()}`);
   }
   const [first] = extractJson(result.output);
   const added = first?.results?.[0];
-  log2(pc15.green(`Role "${added?.name ?? name}" registered (${options2.remote ? "remote" : "local"}).`));
-  log2(pc15.dim(`Assign it with: flare user:role <email> ${added?.name ?? name}${options2.remote ? " --remote" : ""}`));
+  log2(pc16.green(`Role "${added?.name ?? name}" registered (${options2.remote ? "remote" : "local"}).`));
+  log2(pc16.dim(`Assign it with: flare user:role <email> ${added?.name ?? name}${options2.remote ? " --remote" : ""}`));
   return 0;
 }
 
 // src/commands/seed.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync10, readdirSync as readdirSync8, writeFileSync as writeFileSync13 } from "fs";
-import { join as join20 } from "path";
-import { createFake, kebabCase as kebabCase3, storedFields as storedFields2 } from "@flaredev/core";
+import { existsSync as existsSync21, mkdirSync as mkdirSync11, readdirSync as readdirSync8, writeFileSync as writeFileSync14 } from "fs";
+import { join as join21 } from "path";
+import { createFake, kebabCase as kebabCase4, storedFields as storedFields2 } from "@flaredev/core";
 import { createJiti as createJiti4 } from "jiti";
-import pc16 from "picocolors";
+import pc17 from "picocolors";
 
 // src/seed/bulk.ts
 var MAX_STATEMENT_BYTES = 8e4;
@@ -3746,16 +3814,16 @@ function createInsertMany(sink, drizzle, onProgress) {
 
 // src/seed/local-d1.ts
 import { createRequire } from "module";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 import { pathToFileURL } from "url";
 var LOCAL_STATE = ".wrangler/state/v3";
 async function openLocalD1(appRoot, binding) {
   process.env.WRANGLER_LOG ??= "error";
-  const appRequire = createRequire(join19(appRoot, "package.json"));
+  const appRequire = createRequire(join20(appRoot, "package.json"));
   const wrangler = await import(pathToFileURL(appRequire.resolve("wrangler")).href);
   const { env, dispose } = await wrangler.getPlatformProxy({
-    configPath: join19(appRoot, "wrangler.jsonc"),
-    persist: { path: join19(appRoot, LOCAL_STATE) }
+    configPath: join20(appRoot, "wrangler.jsonc"),
+    persist: { path: join20(appRoot, LOCAL_STATE) }
   });
   const bindings = env;
   const name = binding ?? "DB";
@@ -3770,8 +3838,8 @@ async function openLocalD1(appRoot, binding) {
 // src/commands/seed.ts
 var SEEDS_DIR = "seeds";
 function seedFiles(appRoot, names) {
-  const dir = join20(appRoot, SEEDS_DIR);
-  const all = existsSync20(dir) ? readdirSync8(dir).filter((file) => file.endsWith(".seed.ts")).sort() : [];
+  const dir = join21(appRoot, SEEDS_DIR);
+  const all = existsSync21(dir) ? readdirSync8(dir).filter((file) => file.endsWith(".seed.ts")).sort() : [];
   if (!names?.length) return all;
   return names.map((name) => {
     const file = `${name.replace(/\.seed\.ts$/, "")}.seed.ts`;
@@ -3786,24 +3854,24 @@ async function runSeeds(options2 = {}) {
   const appRoot = findAppRoot(options2.cwd ?? process.cwd());
   const files = seedFiles(appRoot, options2.names);
   if (files.length === 0) {
-    log2(`No seeds found. Create one with ${pc16.bold("flare seed:make <name>")}.`);
+    log2(`No seeds found. Create one with ${pc17.bold("flare seed:make <name>")}.`);
     return;
   }
-  const jiti = createJiti4(join20(appRoot, "package.json"), { alias: { "@": appRoot }, moduleCache: false, fsCache: false });
+  const jiti = createJiti4(join21(appRoot, "package.json"), { alias: { "@": appRoot }, moduleCache: false, fsCache: false });
   const { drizzle } = await jiti.import("drizzle-orm/d1");
   const drizzleHelpers = await jiti.import("drizzle-orm");
-  const schema = await jiti.import(join20(appRoot, "db/schema.ts"));
+  const schema = await jiti.import(join21(appRoot, "db/schema.ts"));
   const local = await openLocalD1(appRoot);
   try {
     const db = drizzle(local.db, { schema });
     const insertMany = createInsertMany(local.db, drizzleHelpers);
     for (const file of files) {
-      const mod = await jiti.import(join20(appRoot, SEEDS_DIR, file));
+      const mod = await jiti.import(join21(appRoot, SEEDS_DIR, file));
       if (typeof mod.default !== "function") throw new Error(`${SEEDS_DIR}/${file} must \`export default defineSeed(async ({ db }) => { ... })\`.`);
-      log2(`${pc16.cyan("seed")} ${file}`);
+      log2(`${pc17.cyan("seed")} ${file}`);
       await mod.default({ db, env: local.env, insertMany, fake: createFake(), log: (message) => log2(`  ${message}`) });
     }
-    log2(pc16.green(`
+    log2(pc17.green(`
 Ran ${files.length} seed(s) against the local database.`));
   } finally {
     await local.dispose();
@@ -3885,32 +3953,141 @@ ${[...lines, ...todos].join("\n")}
 async function makeSeed(rawName, options2 = {}) {
   const log2 = options2.log ?? ((message) => console.log(message));
   const appRoot = findAppRoot(options2.cwd ?? process.cwd());
-  const name = kebabCase3(rawName);
+  const name = kebabCase4(rawName);
   if (!name) throw new Error(`Invalid seed name "${rawName}".`);
   const relative2 = `${SEEDS_DIR}/${name}.seed.ts`;
-  const path = join20(appRoot, relative2);
-  if (existsSync20(path)) throw new Error(`${relative2} already exists.`);
+  const path = join21(appRoot, relative2);
+  if (existsSync21(path)) throw new Error(`${relative2} already exists.`);
   const resources = (await loadResources(appRoot)).map(({ resource: resource2 }) => resource2);
   let resource;
   if (options2.resource) {
     resource = resources.find((r) => r.name.toLowerCase() === options2.resource.toLowerCase());
     if (!resource) throw new Error(`No resource "${options2.resource}". Available: ${resources.map((r) => r.name).join(", ") || "none"}.`);
   } else {
-    resource = resources.find((r) => [kebabCase3(r.name), r.slug].includes(name));
+    resource = resources.find((r) => [kebabCase4(r.name), r.slug].includes(name));
   }
-  mkdirSync10(join20(appRoot, SEEDS_DIR), { recursive: true });
-  writeFileSync13(path, renderSeed(resource));
-  log2(`${pc16.green("create".padEnd(9))} ${relative2}`);
+  mkdirSync11(join21(appRoot, SEEDS_DIR), { recursive: true });
+  writeFileSync14(path, renderSeed(resource));
+  log2(`${pc17.green("create".padEnd(9))} ${relative2}`);
   log2(`
-Run it with ${pc16.bold(`flare seed ${name}`)}.`);
+Run it with ${pc17.bold(`flare seed ${name}`)}.`);
   return relative2;
 }
 
-// src/commands/seed-resource.ts
-import { mkdtempSync as mkdtempSync2, rmSync as rmSync3, writeFileSync as writeFileSync14 } from "fs";
+// src/commands/db-push.ts
+import { mkdtempSync as mkdtempSync2, rmSync as rmSync3, writeFileSync as writeFileSync15 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join21 } from "path";
-import pc17 from "picocolors";
+import { join as join22 } from "path";
+import pc18 from "picocolors";
+
+// src/terminal.ts
+var isTTY = () => Boolean(process.stdout.isTTY);
+function formatDuration(ms) {
+  const seconds = Math.round(ms / 1e3);
+  if (seconds < 60) return `${seconds}s`;
+  if (seconds < 3600) return `${Math.floor(seconds / 60)}m ${String(seconds % 60).padStart(2, "0")}s`;
+  return `${Math.floor(seconds / 3600)}h ${String(Math.floor(seconds % 3600 / 60)).padStart(2, "0")}m`;
+}
+var formatCount = (value) => value.toLocaleString();
+function formatRate(count, ms, unit = "rows") {
+  if (ms <= 0) return `${formatCount(count)} ${unit}/s`;
+  return `${formatCount(Math.round(count / ms * 1e3))} ${unit}/s`;
+}
+function progressLine(everyMs = 120) {
+  if (!isTTY()) return { update: () => {
+  }, done: () => {
+  } };
+  let last = 0;
+  let width = 0;
+  const write = (message) => {
+    process.stdout.write(`\r${message.padEnd(width)}`);
+    width = Math.max(width, message.length);
+  };
+  return {
+    update(message) {
+      const now = Date.now();
+      if (now - last < everyMs) return;
+      last = now;
+      write(message);
+    },
+    done() {
+      if (width > 0) process.stdout.write(`\r${" ".repeat(width)}\r`);
+      width = 0;
+    }
+  };
+}
+
+// src/commands/db-push.ts
+var PAGE = 2e3;
+function pickDatabase(databases, wanted) {
+  if (databases.length === 0) throw new Error("No d1_databases in wrangler.jsonc.");
+  if (wanted) {
+    const match = databases.find((db) => db.binding === wanted || db.database_name === wanted);
+    if (!match) throw new Error(`No D1 database "${wanted}". Available: ${databases.map((db) => db.binding).join(", ")}.`);
+    return match;
+  }
+  if (databases.length > 1) throw new Error(`Several D1 databases; pick one with --database (${databases.map((db) => db.binding).join(", ")}).`);
+  return databases[0];
+}
+async function dbPush(tables, options2 = {}) {
+  const log2 = options2.log ?? ((message) => console.log(message));
+  const appRoot = findAppRoot(options2.cwd ?? process.cwd());
+  if (tables.length === 0) throw new Error("Name at least one table, e.g. flare db:push products categories --yes");
+  const bad = tables.find((table) => !/^[A-Za-z_][A-Za-z0-9_]*$/.test(table));
+  if (bad) throw new Error(`"${bad}" isn't a table name.`);
+  if (!options2.yes) {
+    throw new Error(`This writes ${tables.join(", ")} to the deployed database. Re-run with --yes to confirm.`);
+  }
+  const db = pickDatabase(readD1Databases(appRoot), options2.database);
+  const wrangler = resolveBin(appRoot, "wrangler", "wrangler");
+  const started = Date.now();
+  const local = await openLocalD1(appRoot, options2.database);
+  const dir = mkdtempSync2(join22(tmpdir2(), "flare-push-"));
+  try {
+    const statements = [];
+    const counts = [];
+    for (const table of tables) {
+      if (options2.truncate) statements.push(`DELETE FROM "${table}";`);
+      let offset = 0;
+      let rows = 0;
+      for (; ; ) {
+        const page = await local.db.prepare(`SELECT * FROM "${table}" LIMIT ${PAGE} OFFSET ${offset}`).all();
+        const results = page.results ?? [];
+        if (results.length === 0) break;
+        const columns = Object.keys(results[0]);
+        for (const statement of insertStatements(table, columns, results)) statements.push(statement.sql);
+        rows += results.length;
+        if (results.length < PAGE) break;
+        offset += PAGE;
+      }
+      counts.push({ table, rows });
+      log2(`${pc18.cyan("read")} ${table} ${pc18.dim(`(${formatCount(rows)} rows)`)}`);
+    }
+    const total = counts.reduce((sum, entry) => sum + entry.rows, 0);
+    if (total === 0) {
+      log2("Nothing to push: those tables are empty locally.");
+      return { tables: counts, ms: Date.now() - started };
+    }
+    const file = join22(dir, "push.sql");
+    writeFileSync15(file, statements.join("\n"));
+    const target = ["--remote", ...options2.env ? ["--env", options2.env] : []];
+    const result = await runWrangler(wrangler, ["d1", "execute", db.binding, ...target, "--yes", "--file", file], appRoot, { capture: true });
+    if (result.code !== 0) throw new Error(`Pushing to ${db.database_name} failed:
+${result.output.trim()}`);
+    const ms = Date.now() - started;
+    log2(`${pc18.green("\u2714")} Pushed ${pc18.bold(formatCount(total))} rows to ${pc18.bold(db.database_name)} ${pc18.dim(`(${formatDuration(ms)})`)}`);
+    return { tables: counts, ms };
+  } finally {
+    rmSync3(dir, { recursive: true, force: true });
+    await local.dispose();
+  }
+}
+
+// src/commands/seed-resource.ts
+import { mkdtempSync as mkdtempSync3, rmSync as rmSync4, writeFileSync as writeFileSync16 } from "fs";
+import { tmpdir as tmpdir3 } from "os";
+import { join as join23 } from "path";
+import pc19 from "picocolors";
 
 // src/seed/rows.ts
 import { columnName as columnName2, createFake as createFake2, storedFields as storedFields3 } from "@flaredev/core";
@@ -3933,7 +4110,9 @@ function stringValue(key, def, fake, resource, index) {
       return fake.slug();
   }
   const name = key.toLowerCase();
-  const organisation = has(resource.name.toLowerCase(), "company", "vendor", "supplier", "organisation", "organization", "account", "team", "store", "brand");
+  const resourceName2 = resource.name.toLowerCase();
+  const organisation = has(resourceName2, "company", "vendor", "supplier", "organisation", "organization", "account", "team", "store", "brand");
+  const catalogue = has(resourceName2, "product", "item", "article", "sku", "listing", "merch", "book", "course", "plan", "service");
   let value;
   if (has(name, "email")) value = fake.email();
   else if (has(name, "phone", "mobile", "tel", "whatsapp")) value = fake.phone();
@@ -3948,7 +4127,7 @@ function stringValue(key, def, fake, resource, index) {
   else if (has(name, "colour", "color")) value = fake.color();
   else if (has(name, "code", "sku", "reference", "number")) value = `${fake.words(1).slice(0, 3).toUpperCase()}-${String(index + 1).padStart(6, "0")}`;
   else if (has(name, "title", "position", "role", "job")) value = fake.jobTitle();
-  else if (has(name, "name")) value = organisation ? fake.company() : fake.fullName();
+  else if (has(name, "name")) value = organisation ? fake.company() : catalogue ? fake.product(digitalish(resource)) : fake.fullName();
   else if (has(name, "description", "summary", "note", "bio", "about", "message", "comment")) value = fake.sentence();
   else value = `${fake.words(2)}`.replace(/^./, (letter) => letter.toUpperCase());
   if (def.maxLength && value.length > def.maxLength) value = value.slice(0, def.maxLength);
@@ -4010,6 +4189,11 @@ function uniquify(value, row) {
   if (/^[a-z0-9.-]+$/.test(value)) return `${value}-${row}`;
   return `${value} ${row}`;
 }
+function digitalish(resource) {
+  return Object.entries(resource.fields).some(
+    ([key, def]) => def.kind === "enum" && /kind|type/.test(key) && def.options.some((option) => /digital|download|licence|license/i.test(option))
+  );
+}
 function seedColumns(resource) {
   return ["id", ...storedFields3(resource).map(([key]) => columnName2(key)), "created_at", "updated_at"];
 }
@@ -4018,11 +4202,13 @@ function* seedRows(resource, count, options2 = {}) {
   const parentIds = options2.parentIds ?? /* @__PURE__ */ new Map();
   const fields = storedFields3(resource);
   const now = options2.now ?? Date.now();
+  const start = options2.startIndex ?? 0;
   for (let i = 0; i < count; i++) {
+    const number = start + i;
     const row = { id: fake.id() };
     for (const [key, def] of fields) {
-      let value = fieldValue(key, def, fake, resource, parentIds, i);
-      if (typeof value === "string" && "unique" in def && def.unique) value = uniquify(value, i + 1);
+      let value = fieldValue(key, def, fake, resource, parentIds, number);
+      if (typeof value === "string" && "unique" in def && def.unique) value = uniquify(value, number + 1);
       row[columnName2(key)] = value;
     }
     const created = now - fake.int(0, 365) * 864e5 - fake.int(0, 86399999);
@@ -4033,6 +4219,10 @@ function* seedRows(resource, count, options2 = {}) {
 }
 
 // src/commands/seed-resource.ts
+async function countRows(db, table) {
+  const row = await db.prepare(`SELECT count(*) AS total FROM "${table}"`).first();
+  return row?.total ?? 0;
+}
 var PARENT_SAMPLE = 5e3;
 function parseCount(value, fallback = 25) {
   if (value === void 0 || value === "") return fallback;
@@ -4052,7 +4242,7 @@ function pickResource(resources, name) {
   }
   return match;
 }
-function pickDatabase(databases, wanted) {
+function pickDatabase2(databases, wanted) {
   if (databases.length === 0) throw new Error("No d1_databases in wrangler.jsonc.");
   if (wanted) {
     const match = databases.find((db) => db.binding === wanted || db.database_name === wanted);
@@ -4081,13 +4271,13 @@ async function seedResourceCommand(name, options2 = {}) {
       ...options2,
       onProgress: (written, total) => {
         const elapsed = Date.now() - started;
-        progress.update(`  ${pc17.cyan(formatCount(written))} of ${formatCount(total)} rows  ${pc17.dim(formatRate(written, elapsed))}`);
+        progress.update(`  ${pc19.cyan(formatCount(written))} of ${formatCount(total)} rows  ${pc19.dim(formatRate(written, elapsed))}`);
       }
     });
     progress.done();
     const { rows, ms, where } = result;
     console.log(
-      `${pc17.green("\u2714")} Seeded ${pc17.bold(formatCount(rows))} ${result.resource.pluralLabel.toLowerCase()} into the ${where} database ` + pc17.dim(`(${formatDuration(ms)}, ${formatRate(rows, ms)})`)
+      `${pc19.green("\u2714")} Seeded ${pc19.bold(formatCount(rows))} ${result.resource.pluralLabel.toLowerCase()} into the ${where} database ` + pc19.dim(`(${formatDuration(ms)}, ${formatRate(rows, ms)})`)
     );
     return result;
   } catch (error) {
@@ -4108,9 +4298,10 @@ async function seedResource(name, options2 = {}) {
   const columns = seedColumns(resource);
   const started = Date.now();
   let parents = /* @__PURE__ */ new Map();
-  const rows = () => seedRows(resource, total, { seed: options2.seed, parentIds: parents });
+  let startIndex = 0;
+  const rows = () => seedRows(resource, total, { seed: options2.seed, parentIds: parents, startIndex });
   if (options2.remote) {
-    const db = pickDatabase(readD1Databases(appRoot), options2.database);
+    const db = pickDatabase2(readD1Databases(appRoot), options2.database);
     const wrangler = resolveBin(appRoot, "wrangler", "wrangler");
     const target = ["--remote", ...options2.env ? ["--env", options2.env] : []];
     const query = async (sql2) => {
@@ -4125,8 +4316,12 @@ ${result.output.trim()}`);
       const found = await query(`SELECT id FROM "${table}" LIMIT ${PARENT_SAMPLE}`);
       return found.map((row) => row.id);
     });
-    const dir = mkdtempSync2(join21(tmpdir2(), "flare-seed-"));
-    const file = join21(dir, `${resource.table}.sql`);
+    if (!options2.truncate) {
+      const [counted] = await query(`SELECT count(*) AS total FROM "${resource.table}"`);
+      startIndex = counted?.total ?? 0;
+    }
+    const dir = mkdtempSync3(join23(tmpdir3(), "flare-seed-"));
+    const file = join23(dir, `${resource.table}.sql`);
     try {
       const statements = [];
       if (options2.truncate) statements.push(`DELETE FROM "${resource.table}";`);
@@ -4136,13 +4331,13 @@ ${result.output.trim()}`);
         written += statement.rows;
         options2.onProgress?.(written, total);
       }
-      writeFileSync14(file, statements.join("\n"));
-      log2(`${pc17.cyan("\u25CF")} Uploading ${total.toLocaleString()} rows to ${pc17.bold(db.database_name)}`);
+      writeFileSync16(file, statements.join("\n"));
+      log2(`${pc19.cyan("\u25CF")} Uploading ${total.toLocaleString()} rows to ${pc19.bold(db.database_name)}`);
       const result = await runWrangler(wrangler, ["d1", "execute", db.binding, ...target, "--yes", "--file", file], appRoot, { capture: true });
       if (result.code !== 0) throw new Error(`Seeding the remote database failed:
 ${result.output.trim()}`);
     } finally {
-      rmSync3(dir, { recursive: true, force: true });
+      rmSync4(dir, { recursive: true, force: true });
     }
     return { resource, rows: total, ms: Date.now() - started, where };
   }
@@ -4153,6 +4348,7 @@ ${result.output.trim()}`);
       return (found.results ?? []).map((row) => row.id);
     });
     if (options2.truncate) await local.db.exec(`DELETE FROM "${resource.table}";`);
+    else startIndex = await countRows(local.db, resource.table);
     const sink = { exec: (sql2) => local.db.exec(sql2) };
     const written = await bulkInsert(sink, {
       table: resource.table,
@@ -4168,16 +4364,16 @@ ${result.output.trim()}`);
 
 // src/commands/billing-sync.ts
 import { createRequire as createRequire2 } from "module";
-import { existsSync as existsSync21, mkdtempSync as mkdtempSync3, readFileSync as readFileSync13, rmSync as rmSync4, writeFileSync as writeFileSync15 } from "fs";
-import { tmpdir as tmpdir3 } from "os";
-import { join as join22 } from "path";
+import { existsSync as existsSync22, mkdtempSync as mkdtempSync4, readFileSync as readFileSync13, rmSync as rmSync5, writeFileSync as writeFileSync17 } from "fs";
+import { tmpdir as tmpdir4 } from "os";
+import { join as join24 } from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
-import { kebabCase as kebabCase4 } from "@flaredev/core";
-import pc18 from "picocolors";
+import { kebabCase as kebabCase5 } from "@flaredev/core";
+import pc20 from "picocolors";
 function stripeKeys(appRoot) {
   const map = {};
-  const path = join22(appRoot, ".dev.vars");
-  if (existsSync21(path)) {
+  const path = join24(appRoot, ".dev.vars");
+  if (existsSync22(path)) {
     for (const line of readFileSync13(path, "utf8").split(/\r?\n/)) {
       const match = /^\s*([A-Z][A-Z0-9_]*)=(.*)$/.exec(line);
       if (match) map[match[1]] = match[2].trim();
@@ -4198,7 +4394,7 @@ function planRows(catalog) {
       return ok;
     });
     const currencies = new Set(usable.map((price) => price.currency));
-    const base = product.metadata?.slug || kebabCase4(product.name);
+    const base = product.metadata?.slug || kebabCase5(product.name);
     for (const price of usable) {
       const interval = price.recurring?.interval ?? null;
       const parts = [base];
@@ -4261,10 +4457,10 @@ async function syncPlans(options2 = {}) {
   if (!key) throw new Error("STRIPE_SECRET_KEY is not set in .dev.vars or the environment.");
   const db = readD1Databases(appRoot)[0];
   if (!db) throw new Error("No d1_databases in wrangler.jsonc.");
-  const appRequire = createRequire2(join22(appRoot, "package.json"));
+  const appRequire = createRequire2(join24(appRoot, "package.json"));
   const stripeModule = await import(pathToFileURL2(appRequire.resolve("stripe")).href);
   const stripe = new stripeModule.default(key, { apiVersion: "2026-08-26.dahlia" });
-  const appName = JSON.parse(readFileSync13(join22(appRoot, "package.json"), "utf8")).name ?? "app";
+  const appName = JSON.parse(readFileSync13(join24(appRoot, "package.json"), "utf8")).name ?? "app";
   const everything = await stripe.products.list({ active: true, limit: 100 }).autoPagingToArray({ limit: 1e4 });
   const products = options2.all ? everything : everything.filter((product) => product.metadata?.flare_app === appName);
   if (products.length === 0) {
@@ -4285,41 +4481,41 @@ async function syncPlans(options2 = {}) {
 ${existingResult.output.trim()}`);
   }
   const known = new Set(extractJson(existingResult.output)[0]?.results.map((row) => row.stripe_price_id));
-  const dir = mkdtempSync3(join22(tmpdir3(), "flare-sync-"));
+  const dir = mkdtempSync4(join24(tmpdir4(), "flare-sync-"));
   try {
-    const file = join22(dir, "sync-plans.sql");
-    writeFileSync15(file, renderSyncSql(rows));
+    const file = join24(dir, "sync-plans.sql");
+    writeFileSync17(file, renderSyncSql(rows));
     const result = await runWrangler(wrangler, ["d1", "execute", db.binding, ...target, "--file", file], appRoot, { capture: true });
     if (result.code !== 0) throw new Error(`Could not write plans:
 ${result.output.trim()}`);
   } finally {
-    rmSync4(dir, { recursive: true, force: true });
+    rmSync5(dir, { recursive: true, force: true });
   }
   let created = 0;
   for (const row of rows) {
     const isNew = !known.has(row.stripePriceId);
     if (isNew) created++;
     const price = `${row.currency.toUpperCase()} ${(row.amount / 100).toFixed(2)}${row.interval ? `/${row.interval}` : " once"}`;
-    log2(`${(isNew ? pc18.green("create") : pc18.dim("update")).padEnd(18)} ${row.name} (${row.slug}) ${pc18.dim(price)}`);
+    log2(`${(isNew ? pc20.green("create") : pc20.dim("update")).padEnd(18)} ${row.name} (${row.slug}) ${pc20.dim(price)}`);
   }
-  for (const name of skipped) log2(pc18.yellow(`skipped  ${name}: only monthly, yearly and one-time prices become plans`));
+  for (const name of skipped) log2(pc20.yellow(`skipped  ${name}: only monthly, yearly and one-time prices become plans`));
   const configuration = await syncPortalConfiguration(stripe, rows, appName);
-  if (configuration) log2(`${pc18.dim("portal".padEnd(9))} plan changes enabled for ${new Set(rows.filter((row) => row.interval).map((row) => row.stripeProductId)).size} product(s) (${configuration})`);
-  log2(pc18.green(`
+  if (configuration) log2(`${pc20.dim("portal".padEnd(9))} plan changes enabled for ${new Set(rows.filter((row) => row.interval).map((row) => row.stripeProductId)).size} product(s) (${configuration})`);
+  log2(pc20.green(`
 ${rows.length} plan(s) synced to the ${options2.remote ? "remote" : "local"} database; plans no longer active in Stripe were deactivated.`));
   return { created, updated: rows.length - created, skipped };
 }
 
 // src/commands/sync.ts
-import { existsSync as existsSync22 } from "fs";
-import { join as join23 } from "path";
-import pc19 from "picocolors";
+import { existsSync as existsSync23 } from "fs";
+import { join as join25 } from "path";
+import pc21 from "picocolors";
 async function syncTypes(options2 = {}) {
   const log2 = options2.log ?? ((message) => console.log(message));
   const appRoot = findAppRoot(options2.cwd ?? process.cwd());
   const all = await loadResources(appRoot);
   const policies = await loadPolicies(appRoot);
-  const tracksPolicies = policies.length > 0 || existsSync22(join23(appRoot, "policies/index.ts"));
+  const tracksPolicies = policies.length > 0 || existsSync23(join25(appRoot, "policies/index.ts"));
   const plan = planFiles(all, tracksPolicies ? policies : void 0);
   if (!options2.check) ensureSupportFiles(appRoot, log2);
   const results = applyPlan(appRoot, plan, { force: options2.force, dryRun: options2.check });
@@ -4331,42 +4527,42 @@ async function syncTypes(options2 = {}) {
   if (drift.length) {
     log2(
       `
-${pc19.red("Drift:")} ${drift.length} generated block(s) were edited by hand and were ${options2.check ? "not checked further" : "left unchanged"}.
+${pc21.red("Drift:")} ${drift.length} generated block(s) were edited by hand and were ${options2.check ? "not checked further" : "left unchanged"}.
 Move custom code outside the // generated:start \u2026 // generated:end block, or re-run with --force to overwrite.`
     );
   }
   if (unmarked.length) {
     log2(`
-${pc19.red("Conflict:")} ${unmarked.map((r) => r.path).join(", ")} exist without a generated block (hand-written). Rename or remove them.`);
+${pc21.red("Conflict:")} ${unmarked.map((r) => r.path).join(", ")} exist without a generated block (hand-written). Rename or remove them.`);
   }
   if (orphans.length) {
     const resources = [...new Set(orphans.map((o) => o.resource))];
     log2(`
-${pc19.yellow("Orphaned:")} generated files the descriptors no longer produce (${resources.join(", ")}):`);
+${pc21.yellow("Orphaned:")} generated files the descriptors no longer produce (${resources.join(", ")}):`);
     for (const orphan of orphans) log2(`  ${orphan.path}`);
     log2(
-      `If the resource was deleted, remove them with ${pc19.bold(`flare rm resource ${resources[0]}`)}; if it was renamed (table or slug), delete the old files.`
+      `If the resource was deleted, remove them with ${pc21.bold(`flare rm resource ${resources[0]}`)}; if it was renamed (table or slug), delete the old files.`
     );
   }
   const tablesChanged = changed.some((r) => r.path.startsWith("db/schema/") && (r.status === "outdated" || r.status === "missing"));
   if (tablesChanged && !options2.check) {
     log2(`
-${pc19.cyan("Tables changed.")} Create a migration with ${pc19.bold("flare gen migration <name> --from-schema")}, then ${pc19.bold("flare migrate")}.`);
+${pc21.cyan("Tables changed.")} Create a migration with ${pc21.bold("flare gen migration <name> --from-schema")}, then ${pc21.bold("flare migrate")}.`);
   }
   const problems = drift.length + unmarked.length + orphans.length;
   if (options2.check) {
     const stale = changed.length;
-    if (stale === 0 && problems === 0) log2(pc19.green("Generated files are in sync with the resource descriptors."));
+    if (stale === 0 && problems === 0) log2(pc21.green("Generated files are in sync with the resource descriptors."));
     else log2(`
-${pc19.red("Out of sync:")} ${stale} file(s) would change. Run ${pc19.bold("flare sync-types")}.`);
+${pc21.red("Out of sync:")} ${stale} file(s) would change. Run ${pc21.bold("flare sync-types")}.`);
     return stale + problems > 0 ? 1 : 0;
   }
-  if (changed.length === 0 && problems === 0) log2(pc19.green("Everything is in sync."));
+  if (changed.length === 0 && problems === 0) log2(pc21.green("Everything is in sync."));
   return problems > 0 ? 1 : 0;
 }
 
 // src/commands/user-role.ts
-import pc20 from "picocolors";
+import pc22 from "picocolors";
 var ROLE = /^[a-z][a-z0-9_-]{0,31}$/;
 var EMAIL = /^[^\s@'"\\]+@[^\s@'"\\]+\.[^\s@'"\\]+$/;
 function userRoleSql(email, role) {
@@ -4380,8 +4576,8 @@ async function setUserRole(email, role, options2 = {}) {
   const sql2 = userRoleSql(email, role);
   const roles = await listRoles(options2);
   if (roles && !roles.includes(role)) {
-    log2(pc20.red(`No role "${role}" is registered. Known roles: ${roles.join(", ") || "none"}.`));
-    log2(pc20.dim(`Register it with: flare role:add ${role}${options2.remote ? " --remote" : ""}`));
+    log2(pc22.red(`No role "${role}" is registered. Known roles: ${roles.join(", ") || "none"}.`));
+    log2(pc22.dim(`Register it with: flare role:add ${role}${options2.remote ? " --remote" : ""}`));
     return 1;
   }
   const db = readD1Databases(appRoot)[0];
@@ -4395,51 +4591,130 @@ ${result.output.trim()}`);
   const [first] = extractJson(result.output);
   const updated = first?.results ?? [];
   if (updated.length === 0) {
-    log2(pc20.red(`No user with email ${email} in the ${options2.remote ? "remote" : "local"} database. Sign up first, then run this again.`));
+    log2(pc22.red(`No user with email ${email} in the ${options2.remote ? "remote" : "local"} database. Sign up first, then run this again.`));
     return 1;
   }
-  log2(pc20.green(`${updated[0].email} now has role "${updated[0].role}" (${options2.remote ? "remote" : "local"}).`));
+  log2(pc22.green(`${updated[0].email} now has role "${updated[0].role}" (${options2.remote ? "remote" : "local"}).`));
+  return 0;
+}
+
+// src/utils/install.ts
+import { spawn as spawn5 } from "child_process";
+import { existsSync as existsSync24, readFileSync as readFileSync14, readdirSync as readdirSync9 } from "fs";
+import { join as join26 } from "path";
+function expectedPackages(dir) {
+  const npmLock = join26(dir, "package-lock.json");
+  if (existsSync24(npmLock)) {
+    try {
+      const lock = JSON.parse(readFileSync14(npmLock, "utf8"));
+      return Math.max(0, Object.keys(lock.packages ?? {}).length - 1);
+    } catch {
+      return 0;
+    }
+  }
+  const pnpmLock = join26(dir, "pnpm-lock.yaml");
+  if (existsSync24(pnpmLock)) {
+    try {
+      const text = readFileSync14(pnpmLock, "utf8");
+      const packages = text.slice(text.indexOf("\npackages:"));
+      return (packages.match(/\n {2}[^\s:]+:/g) ?? []).length;
+    } catch {
+      return 0;
+    }
+  }
   return 0;
 }
+function installedPackages(dir) {
+  const root = join26(dir, "node_modules");
+  if (!existsSync24(root)) return 0;
+  let total = 0;
+  try {
+    for (const entry of readdirSync9(root, { withFileTypes: true })) {
+      if (!entry.isDirectory() || entry.name === ".bin") continue;
+      if (entry.name.startsWith("@")) {
+        try {
+          total += readdirSync9(join26(root, entry.name)).length;
+        } catch {
+        }
+      } else if (entry.name !== ".pnpm" && entry.name !== ".vite") {
+        total += 1;
+      }
+    }
+  } catch {
+    return total;
+  }
+  return total;
+}
+function install(packageManager, dir, onProgress) {
+  const args = installArgs(packageManager);
+  const started = Date.now();
+  const expected = expectedPackages(dir);
+  return new Promise((resolve6, reject) => {
+    const child = process.platform === "win32" ? spawn5([packageManager, ...args].join(" "), { cwd: dir, shell: true, env: childEnv(), stdio: ["ignore", "pipe", "pipe"] }) : spawn5(packageManager, args, { cwd: dir, env: childEnv(), stdio: ["ignore", "pipe", "pipe"] });
+    let output = "";
+    child.stdout?.on("data", (chunk) => output += chunk);
+    child.stderr?.on("data", (chunk) => output += chunk);
+    const timer = onProgress ? setInterval(() => {
+      const installed = installedPackages(dir);
+      onProgress({
+        installed,
+        expected,
+        percent: expected > 0 ? Math.min(99, Math.round(installed / expected * 100)) : void 0,
+        elapsedMs: Date.now() - started
+      });
+    }, 500) : void 0;
+    child.on("error", (error) => {
+      clearInterval(timer);
+      reject(error);
+    });
+    child.on("close", (code) => {
+      clearInterval(timer);
+      resolve6({ code: code ?? 1, output, ms: Date.now() - started });
+    });
+  });
+}
 
 // src/cli.ts
 function createCli() {
   const cli = cac("flare");
   cli.command("create <dir>", "Scaffold a new Flare app").option("--pm <manager>", "Package manager: pnpm, npm, yarn, or bun (default: detected)").option("--theme <name>", "Look of the app: default, coral, amber, sky, mono or emerald").option("--auth <list>", "Sign-in methods: magic-link, email-otp, passkeys, 2fa-app, 2fa-email, all or none (default: all)").option("--auth-providers <list>", "Social sign-in, comma-separated: google, github, apple, microsoft").option("-y, --yes", "Don't ask: use the flags given and the defaults for the rest").option("--skip-install", "Write files without installing dependencies").example("flare create shop").example("flare create shop --theme mono --auth passkeys,2fa-app --auth-providers google,github --yes").action(async (dir, options2) => {
-    const install = !options2.skipInstall;
+    const wanted = !options2.skipInstall;
     let answers = { theme: options2.theme, auth: options2.auth, authProviders: options2.authProviders };
     if (canPrompt(options2.yes)) answers = await askCreateQuestions(answers, toAppName(dir));
-    const result = createApp(dir, {
-      pm: options2.pm,
-      install,
-      ...answers,
-      log: (message) => prompts3.log.message(message),
-      // The install is the long part of `flare create`, so it gets a timer rather
-      // than a wall of package manager output. Output is kept for when it fails.
-      installer: (packageManager, args, cwd) => {
-        const spin = prompts3.spinner({ indicator: "timer" });
-        spin.start(`Installing dependencies with ${packageManager}`);
-        const { code, output } = runQuiet(packageManager, args, cwd);
-        if (code === 0) {
-          spin.stop(`Installed dependencies with ${packageManager}`);
-        } else {
-          spin.error(`${packageManager} install failed`);
-          process.stderr.write(output);
-        }
-        return code;
+    const result = createApp(dir, { pm: options2.pm, install: false, ...answers, log: (message) => prompts3.log.message(message) });
+    let installed = false;
+    if (wanted) {
+      const spin = prompts3.spinner({ indicator: "timer" });
+      spin.start(`Installing dependencies with ${result.packageManager}`);
+      const outcome = await install(result.packageManager, result.dir, ({ installed: done, expected, percent }) => {
+        spin.message(
+          percent === void 0 ? `Installing dependencies with ${result.packageManager} \xB7 ${formatCount(done)} packages` : `Installing dependencies with ${result.packageManager} \xB7 ${percent}% (${formatCount(done)} of ${formatCount(expected)})`
+        );
+      });
+      installed = outcome.code === 0;
+      if (installed) {
+        spin.stop(`Installed ${formatCount(expectedPackages(result.dir) || 0)} packages with ${result.packageManager} ${pc23.dim(`(${formatDuration(outcome.ms)})`)}`);
+      } else {
+        spin.error(`${result.packageManager} install failed`);
+        process.stderr.write(outcome.output);
+        process.exitCode = 1;
       }
-    });
-    printNextSteps(result, install);
+    }
+    printNextSteps(result, installed);
   });
-  cli.command("gen <generator> [name]", "Generate code. Generators: resource, migration, policy, billing, security").option("--fields <fields>", "resource: fields, e.g. 'name:string, email:string!, status:enum(lead,customer)' (single quotes: bash treats ! in double quotes as history)").option("--force", "resource/policy/billing/security: overwrite hand-edited generated blocks").option("--from-schema", "migration: diff the current tables instead of a blank migration").option("--roles <roles>", "policy: roles allowed to read, create and update, e.g. admin,staff").option("--delete-roles <roles>", "policy: roles allowed to delete (default: the first --roles entry)").option("--provider <provider>", "billing: payment provider (default: stripe)").option("--mode <mode>", "billing: subscriptions (the default; includes one-time checkout)").option("--skip-install", "billing: write files without installing the stripe dependency").option("--skip-migration", "billing/security: skip generating the schema migration").example("flare gen resource Contact --fields 'name:string, email:string!, company:belongsTo(Company)?'").example("flare gen migration backfill_contact_status").example("flare gen migration add_phone_to_contacts --from-schema").example("flare gen policy Invoice --roles admin,staff --delete-roles admin").example("flare gen billing --provider stripe --mode subscriptions").example("flare gen security").action(
-    async (generator, name, options2) => {
+  cli.command("gen <generator> [name] [second]", "Generate code. Generators: resource, endpoint, migration, policy, billing, security").option("--fields <fields>", "resource: fields, e.g. 'name:string, email:string!, status:enum(lead,customer)' (single quotes: bash treats ! in double quotes as history)").option("--group <name>", "resource: sidebar heading to file it under, e.g. Sales").option("--icon <name>", "resource: lucide icon for the sidebar, e.g. users").option("--method <verb>", "endpoint: GET (default), POST, PATCH, PUT or DELETE").option("--action <action>", "endpoint: policy action to require (read, create, update, delete)").option("--record", "endpoint: put it under one record, /api/<resource>/[id]/<name>").option("--force", "resource/policy/billing/security: overwrite hand-edited generated blocks").option("--from-schema", "migration: diff the current tables instead of a blank migration").option("--roles <roles>", "policy: roles allowed to read, create and update, e.g. admin,staff").option("--delete-roles <roles>", "policy: roles allowed to delete (default: the first --roles entry)").option("--provider <provider>", "billing: payment provider (default: stripe)").option("--mode <mode>", "billing: subscriptions (the default; includes one-time checkout)").option("--skip-install", "billing: write files without installing the stripe dependency").option("--skip-migration", "billing/security: skip generating the schema migration").example("flare gen resource Contact --fields 'name:string, email:string!, company:belongsTo(Company)?'").example("flare gen endpoint Order publish --method POST --record").example("flare gen migration backfill_contact_status").example("flare gen migration add_phone_to_contacts --from-schema").example("flare gen policy Invoice --roles admin,staff --delete-roles admin").example("flare gen billing --provider stripe --mode subscriptions").example("flare gen security").action(
+    async (generator, name, second, options2) => {
       if (generator === "billing")
         return genBilling({ provider: options2.provider, mode: options2.mode, force: options2.force, skipInstall: options2.skipInstall, skipMigration: options2.skipMigration });
       if (generator === "security") return genSecurity({ force: options2.force, skipMigration: options2.skipMigration });
       if (["resource", "migration", "policy"].includes(generator) && !name) {
         throw new Error(`flare gen ${generator} needs a name, e.g. flare gen ${generator} ${generator === "migration" ? "add_phone_to_contacts" : "Contact"}`);
       }
-      if (generator === "resource") return genResource(name, { fields: options2.fields, force: options2.force });
+      if (generator === "resource") return genResource(name, { fields: options2.fields, force: options2.force, group: options2.group, icon: options2.icon });
+      if (generator === "endpoint") {
+        if (!name || !second) throw new Error("flare gen endpoint needs a resource and a name, e.g. flare gen endpoint Order publish");
+        return genEndpoint(name, second, { method: options2.method, action: options2.action, record: options2.record });
+      }
       if (generator === "migration") return genMigration(name, { fromSchema: options2.fromSchema });
       if (generator === "policy") return genPolicy(name, { roles: options2.roles, deleteRoles: options2.deleteRoles, force: options2.force });
       throw new Error(`Unknown generator "${generator}". Available: resource, migration, policy, billing, security.`);
@@ -4467,6 +4742,9 @@ function createCli() {
   cli.command("seed:resource <resource> [count]", "Fill a resource's table with sample rows built from its descriptor").option("--count <rows>", "How many rows: 1000, 25k, 1m (default: 25)").option("--remote", "Seed the deployed database instead of the local one (needs --yes)").option("--truncate", "Delete the table's rows first").option("--seed <number>", "Same number, same rows").option("--env <name>", "Wrangler environment").option("--database <binding>", "D1 binding, when the app has several").option("-y, --yes", "Confirm writing to the remote database").example("flare seed:resource Contact --count 1000").example("flare seed:resource Contact 1m            # a million rows").example("flare seed:resource Contact 5k --remote --yes").action(async (resource, count, options2) => {
     await seedResourceCommand(resource, { ...options2, count: options2.count ?? count });
   });
+  cli.command("db:push [...tables]", "Copy rows from the local database to the deployed one (seeded catalogues, reference data)").option("--truncate", "Delete the remote rows of those tables first").option("--database <binding>", "D1 binding, when the app has several").option("--env <name>", "Wrangler environment").option("-y, --yes", "Confirm writing to the deployed database").example("flare db:push products categories --yes").example("flare db:push plans --truncate --yes").action(async (tables, options2) => {
+    await dbPush(tables, options2);
+  });
   cli.command("seed:make <name>", "Create seeds/<name>.seed.ts (with example rows for a matching resource)").option("--resource <name>", "Resource to write example rows for").action(async (name, options2) => {
     await makeSeed(name, options2);
   });
@@ -4512,6 +4790,6 @@ try {
     }
   }
 } catch (error) {
-  console.error(pc21.red(`\u2716 ${error instanceof Error ? error.message : String(error)}`));
+  console.error(pc24.red(`\u2716 ${error instanceof Error ? error.message : String(error)}`));
   process.exitCode = 1;
 }