@insforge/cli 0.1.41 → 0.1.44

package/dist/index.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { readFileSync as readFileSync6 } from "fs";
-import { join as join7, dirname } from "path";
+import { readFileSync as readFileSync7 } from "fs";
+import { join as join9, dirname } from "path";
 import { fileURLToPath } from "url";
 import { Command } from "commander";
 import * as clack14 from "@clack/prompts";
@@ -204,8 +204,8 @@ function startCallbackServer() {
   return new Promise((resolveServer) => {
     let resolveResult;
     let rejectResult;
-    const resultPromise = new Promise((resolve2, reject) => {
-      resolveResult = resolve2;
+    const resultPromise = new Promise((resolve4, reject) => {
+      resolveResult = resolve4;
       rejectResult = reject;
     });
     const server = createServer((req, res) => {
@@ -383,7 +383,7 @@ async function refreshAccessToken(apiUrl) {
 }
 
 // src/lib/api/platform.ts
-async function platformFetch(path4, options = {}, apiUrl) {
+async function platformFetch(path5, options = {}, apiUrl) {
   const baseUrl = getPlatformApiUrl(apiUrl);
   const token = getAccessToken();
   if (!token) {
@@ -394,11 +394,11 @@ async function platformFetch(path4, options = {}, apiUrl) {
     Authorization: `Bearer ${token}`,
     ...options.headers ?? {}
   };
-  const res = await fetch(`${baseUrl}${path4}`, { ...options, headers });
+  const res = await fetch(`${baseUrl}${path5}`, { ...options, headers });
   if (res.status === 401) {
     const newToken = await refreshAccessToken(apiUrl);
     headers.Authorization = `Bearer ${newToken}`;
-    const retryRes = await fetch(`${baseUrl}${path4}`, { ...options, headers });
+    const retryRes = await fetch(`${baseUrl}${path5}`, { ...options, headers });
     if (!retryRes.ok) {
       const err = await retryRes.json().catch(() => ({}));
       throw new CLIError(err.error ?? `Request failed: ${retryRes.status}`, retryRes.status === 403 ? 5 : 1);
@@ -696,7 +696,11 @@ function registerProjectsCommands(projectsCmd2) {
 }
 
 // src/commands/projects/link.ts
-import * as clack6 from "@clack/prompts";
+import { exec as exec3 } from "child_process";
+import { promisify as promisify3 } from "util";
+import * as fs4 from "fs/promises";
+import * as path4 from "path";
+import * as clack8 from "@clack/prompts";
 
 // src/lib/skills.ts
 import { exec } from "child_process";
@@ -797,142 +801,54 @@ async function reportCliUsage(toolName, success, maxRetries = 1) {
   }
 }
 
-// src/commands/projects/link.ts
-function buildOssHost(appkey, region) {
-  return `https://${appkey}.${region}.insforge.app`;
+// src/lib/analytics.ts
+import { PostHog } from "posthog-node";
+var POSTHOG_API_KEY = "phc_ueV1ii62wdBTkH7E70ugyeqHIHu8dFDdjs0qq3TZhJz";
+var POSTHOG_HOST = process.env.POSTHOG_HOST || "https://us.i.posthog.com";
+var client = null;
+function getClient() {
+  if (!POSTHOG_API_KEY) return null;
+  if (!client) {
+    client = new PostHog(POSTHOG_API_KEY, { host: POSTHOG_HOST });
+  }
+  return client;
 }
-function registerProjectLinkCommand(program2) {
-  program2.command("link").description("Link current directory to an InsForge project").option("--project-id <id>", "Project ID to link").option("--org-id <id>", "Organization ID").option("--api-base-url <url>", "API Base URL for direct linking (OSS/Self-hosted)").option("--api-key <key>", "API Key for direct linking (OSS/Self-hosted)").action(async (opts, cmd) => {
-    const { json, apiUrl } = getRootOpts(cmd);
-    try {
-      if (opts.apiBaseUrl || opts.apiKey) {
-        try {
-          if (!opts.apiBaseUrl || !opts.apiKey) {
-            throw new CLIError("Both --api-base-url and --api-key must be provided together for direct linking.");
-          }
-          try {
-            new URL(opts.apiBaseUrl);
-          } catch {
-            throw new CLIError("Invalid --api-base-url. Please provide a valid URL.");
-          }
-          const projectConfig2 = {
-            project_id: "oss-project",
-            project_name: "oss-project",
-            org_id: "oss-org",
-            appkey: "oss",
-            region: "local",
-            api_key: opts.apiKey,
-            oss_host: opts.apiBaseUrl.replace(/\/$/, "")
-            // remove trailing slash if any
-          };
-          saveProjectConfig(projectConfig2);
-          if (json) {
-            outputJson({ success: true, project: { id: projectConfig2.project_id, name: projectConfig2.project_name, region: projectConfig2.region } });
-          } else {
-            outputSuccess(`Linked to direct project at ${projectConfig2.oss_host}`);
-          }
-          await installSkills(json);
-          await reportCliUsage("cli.link_direct", true, 6);
-          try {
-            const urlMatch = opts.apiBaseUrl.match(/^https?:\/\/([^.]+)\.[^.]+\.insforge\.app/);
-            if (urlMatch) {
-              await reportAgentConnected({ app_key: urlMatch[1] }, apiUrl);
-            }
-          } catch {
-          }
-          return;
-        } catch (err) {
-          await reportCliUsage("cli.link_direct", false);
-          handleError(err, json);
-        }
-      }
-      const creds = await requireAuth(apiUrl, false);
-      let orgId = opts.orgId;
-      let projectId = opts.projectId;
-      if (!orgId && !projectId) {
-        const orgs = await listOrganizations(apiUrl);
-        if (orgs.length === 0) {
-          throw new CLIError("No organizations found.");
-        }
-        if (json) {
-          throw new CLIError("Specify --org-id in JSON mode.");
-        }
-        const selected = await clack6.select({
-          message: "Select an organization:",
-          options: orgs.map((o) => ({
-            value: o.id,
-            label: o.name
-          }))
-        });
-        if (clack6.isCancel(selected)) process.exit(0);
-        orgId = selected;
-      }
-      const config = getGlobalConfig();
-      config.default_org_id = orgId;
-      saveGlobalConfig(config);
-      if (!projectId) {
-        const projects = await listProjects(orgId, apiUrl);
-        if (projects.length === 0) {
-          throw new CLIError("No projects found in this organization.");
-        }
-        if (json) {
-          throw new CLIError("Specify --project-id in JSON mode.");
-        }
-        const selected = await clack6.select({
-          message: "Select a project to link:",
-          options: projects.map((p) => ({
-            value: p.id,
-            label: `${p.name} (${p.region}, ${p.status})`
-          }))
-        });
-        if (clack6.isCancel(selected)) process.exit(0);
-        projectId = selected;
-      }
-      let project;
-      let apiKey;
-      try {
-        [project, apiKey] = await Promise.all([
-          getProject(projectId, apiUrl),
-          getProjectApiKey(projectId, apiUrl)
-        ]);
-      } catch (err) {
-        if (err instanceof CLIError && (err.exitCode === 5 || err.exitCode === 4 || err.message.includes("not found"))) {
-          const identity = creds.user?.email ?? creds.user?.name ?? "unknown user";
-          throw new CLIError(
-            `You're logged in as ${identity}, and you don't have access to project ${projectId}. Check that the project ID is correct and belongs to one of your organizations.`,
-            5,
-            "PERMISSION_DENIED"
-          );
-        }
-        throw err;
-      }
-      const projectConfig = {
-        project_id: project.id,
-        project_name: project.name,
-        org_id: project.organization_id,
-        appkey: project.appkey,
-        region: project.region,
-        api_key: apiKey,
-        oss_host: buildOssHost(project.appkey, project.region)
-      };
-      saveProjectConfig(projectConfig);
-      if (json) {
-        outputJson({ success: true, project: { id: project.id, name: project.name, region: project.region } });
-      } else {
-        outputSuccess(`Linked to project "${project.name}" (${project.appkey}.${project.region})`);
-      }
-      await installSkills(json);
-      await reportCliUsage("cli.link", true, 6);
-      try {
-        await reportAgentConnected({ project_id: project.id }, apiUrl);
-      } catch {
-      }
-    } catch (err) {
-      await reportCliUsage("cli.link", false);
-      handleError(err, json);
-    }
+function captureEvent(distinctId, event, properties) {
+  try {
+    getClient()?.capture({ distinctId, event, properties });
+  } catch {
+  }
+}
+function trackCommand(command, distinctId, properties) {
+  captureEvent(distinctId, "cli_command_invoked", {
+    command,
+    ...properties
+  });
+}
+function trackDiagnose(subcommand, config) {
+  captureEvent(config.project_id, "cli_diagnose_invoked", {
+    subcommand,
+    project_id: config.project_id,
+    project_name: config.project_name,
+    org_id: config.org_id,
+    region: config.region,
+    oss_mode: config.project_id === "oss-project"
   });
 }
+async function shutdownAnalytics() {
+  try {
+    if (client) await client.shutdown();
+  } catch {
+  }
+}
+
+// src/commands/create.ts
+import { exec as exec2 } from "child_process";
+import { tmpdir } from "os";
+import { promisify as promisify2 } from "util";
+import * as fs3 from "fs/promises";
+import * as path3 from "path";
+import * as clack7 from "@clack/prompts";
 
 // src/lib/api/oss.ts
 function requireProjectConfig() {
@@ -957,755 +873,1240 @@ async function getAnonKey() {
   const data = await res.json();
   return data.accessToken;
 }
-async function ossFetch(path4, options = {}) {
+async function ossFetch(path5, options = {}) {
   const config = requireProjectConfig();
   const headers = {
     "Content-Type": "application/json",
     Authorization: `Bearer ${config.api_key}`,
     ...options.headers ?? {}
   };
-  const res = await fetch(`${config.oss_host}${path4}`, { ...options, headers });
+  const res = await fetch(`${config.oss_host}${path5}`, { ...options, headers });
   if (!res.ok) {
     const err = await res.json().catch(() => ({}));
-    throw new CLIError(err.error ?? `OSS request failed: ${res.status}`);
+    let message = err.message ?? err.error ?? `OSS request failed: ${res.status}`;
+    if (err.nextActions) {
+      message += `
+${err.nextActions}`;
+    }
+    if (res.status === 404 && path5.startsWith("/api/compute")) {
+      message = "Compute services are not available on this backend.\nSelf-hosted: upgrade your InsForge instance. Cloud: contact your InsForge admin to enable compute.";
+    }
+    throw new CLIError(message);
   }
   return res;
 }
 
-// src/commands/db/query.ts
-function registerDbCommands(dbCmd2) {
-  dbCmd2.command("query <sql>").description("Execute a SQL query against the database").option("--unrestricted", "Use unrestricted mode (allows system table access)").action(async (sql, opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      const { rows, raw } = await runRawSql(sql, !!opts.unrestricted);
-      if (json) {
-        outputJson(raw);
-      } else {
-        if (rows.length > 0) {
-          const headers = Object.keys(rows[0]);
-          outputTable(
-            headers,
-            rows.map((row) => headers.map((h) => String(row[h] ?? "")))
-          );
-          console.log(`${rows.length} row(s) returned.`);
-        } else {
-          console.log("Query executed successfully.");
-          if (rows.length === 0) {
-            console.log("No rows returned.");
-          }
-        }
-      }
-      await reportCliUsage("cli.db.query", true);
-    } catch (err) {
-      await reportCliUsage("cli.db.query", false);
-      handleError(err, json);
-    }
-  });
-}
-
-// src/commands/db/tables.ts
-function registerDbTablesCommand(dbCmd2) {
-  dbCmd2.command("tables").description("List all database tables").action(async (_opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      const res = await ossFetch("/api/database/tables");
-      const tables = await res.json();
-      if (json) {
-        outputJson(tables);
-      } else {
-        if (tables.length === 0) {
-          console.log("No tables found.");
-          return;
-        }
-        outputTable(
-          ["Table Name"],
-          tables.map((t) => [t])
-        );
+// src/lib/env.ts
+import * as fs from "fs/promises";
+import * as path from "path";
+async function readEnvFile(cwd) {
+  const candidates = [".env.local", ".env.production", ".env"];
+  for (const name of candidates) {
+    const filePath = path.join(cwd, name);
+    const exists = await fs.stat(filePath).catch(() => null);
+    if (!exists) continue;
+    const content = await fs.readFile(filePath, "utf-8");
+    const vars = [];
+    for (const line of content.split("\n")) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const eqIndex = trimmed.indexOf("=");
+      if (eqIndex === -1) continue;
+      const key = trimmed.slice(0, eqIndex).trim();
+      let value = trimmed.slice(eqIndex + 1).trim();
+      if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+        value = value.slice(1, -1);
       }
-      await reportCliUsage("cli.db.tables", true);
-    } catch (err) {
-      await reportCliUsage("cli.db.tables", false);
-      handleError(err, json);
+      if (key) vars.push({ key, value });
     }
-  });
+    return vars;
+  }
+  return [];
 }
 
-// src/commands/db/functions.ts
-function registerDbFunctionsCommand(dbCmd2) {
-  dbCmd2.command("functions").description("List all database functions").action(async (_opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      const res = await ossFetch("/api/database/functions");
-      const raw = await res.json();
-      const functions = Array.isArray(raw) ? raw : raw.functions ?? [];
-      if (json) {
-        outputJson(raw);
-      } else {
-        if (functions.length === 0) {
-          console.log("No database functions found.");
-          return;
-        }
-        outputTable(
-          ["Name", "Definition", "Kind"],
-          functions.map((f) => [f.functionName, f.functionDef, f.kind])
-        );
-      }
-      await reportCliUsage("cli.db.functions", true);
-    } catch (err) {
-      await reportCliUsage("cli.db.functions", false);
-      handleError(err, json);
+// src/commands/deployments/deploy.ts
+import * as path2 from "path";
+import * as fs2 from "fs/promises";
+import * as clack6 from "@clack/prompts";
+import archiver from "archiver";
+var POLL_INTERVAL_MS = 5e3;
+var POLL_TIMEOUT_MS = 3e5;
+var EXCLUDE_PATTERNS = [
+  "node_modules",
+  ".git",
+  ".next",
+  ".env",
+  ".env.local",
+  "dist",
+  "build",
+  ".DS_Store",
+  ".insforge",
+  // IDE and AI agent configs
+  ".claude",
+  ".agents",
+  ".augment",
+  ".kilocode",
+  ".kiro",
+  ".qoder",
+  ".qwen",
+  ".roo",
+  ".trae",
+  ".windsurf",
+  ".vercel",
+  ".turbo",
+  ".cache",
+  "skills",
+  "coverage"
+];
+function shouldExclude(name) {
+  const normalized = name.replace(/\\/g, "/");
+  for (const pattern of EXCLUDE_PATTERNS) {
+    if (normalized === pattern || normalized.startsWith(pattern + "/") || normalized.endsWith("/" + pattern) || normalized.includes("/" + pattern + "/")) {
+      return true;
     }
+  }
+  if (normalized.endsWith(".log")) return true;
+  return false;
+}
+async function createZipBuffer(sourceDir) {
+  return new Promise((resolve4, reject) => {
+    const archive = archiver("zip", { zlib: { level: 9 } });
+    const chunks = [];
+    archive.on("data", (chunk) => chunks.push(chunk));
+    archive.on("end", () => resolve4(Buffer.concat(chunks)));
+    archive.on("error", (err) => reject(err));
+    archive.directory(sourceDir, false, (entry) => {
+      if (shouldExclude(entry.name)) return false;
+      return entry;
+    });
+    void archive.finalize();
   });
 }
-
-// src/commands/db/indexes.ts
-function registerDbIndexesCommand(dbCmd2) {
-  dbCmd2.command("indexes").description("List all database indexes").action(async (_opts, cmd) => {
-    const { json } = getRootOpts(cmd);
+async function deployProject(opts) {
+  const { sourceDir, startBody = {}, spinner: s } = opts;
+  s?.start("Creating deployment...");
+  const createRes = await ossFetch("/api/deployments", { method: "POST" });
+  const { id: deploymentId, uploadUrl, uploadFields } = await createRes.json();
+  s?.message("Compressing source files...");
+  const zipBuffer = await createZipBuffer(sourceDir);
+  s?.message("Uploading...");
+  const formData = new FormData();
+  for (const [key, value] of Object.entries(uploadFields)) {
+    formData.append(key, value);
+  }
+  formData.append(
+    "file",
+    new Blob([zipBuffer], { type: "application/zip" }),
+    "deployment.zip"
+  );
+  const uploadRes = await fetch(uploadUrl, { method: "POST", body: formData });
+  if (!uploadRes.ok) {
+    const uploadErr = await uploadRes.text();
+    throw new CLIError(`Failed to upload: ${uploadErr}`);
+  }
+  s?.message("Starting deployment...");
+  const startRes = await ossFetch(`/api/deployments/${deploymentId}/start`, {
+    method: "POST",
+    body: JSON.stringify(startBody)
+  });
+  await startRes.json();
+  s?.message("Building and deploying...");
+  const startTime = Date.now();
+  let deployment = null;
+  while (Date.now() - startTime < POLL_TIMEOUT_MS) {
+    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
     try {
-      await requireAuth();
-      const res = await ossFetch("/api/database/indexes");
-      const raw = await res.json();
-      const indexes = Array.isArray(raw) ? raw : raw.indexes ?? [];
-      if (json) {
-        outputJson(raw);
-      } else {
-        if (indexes.length === 0) {
-          console.log("No database indexes found.");
-          return;
-        }
-        outputTable(
-          ["Table", "Index Name", "Definition", "Unique", "Primary"],
-          indexes.map((i) => [
-            i.tableName,
-            i.indexName,
-            i.indexDef,
-            i.isUnique ? "Yes" : "No",
-            i.isPrimary ? "Yes" : "No"
-          ])
-        );
+      const statusRes = await ossFetch(`/api/deployments/${deploymentId}`);
+      deployment = await statusRes.json();
+      const status = deployment.status.toUpperCase();
+      if (status === "READY") {
+        break;
       }
-      await reportCliUsage("cli.db.indexes", true);
+      if (status === "ERROR" || status === "CANCELED") {
+        s?.stop("Deployment failed");
+        throw new CLIError(getDeploymentError(deployment.metadata) ?? `Deployment failed with status: ${deployment.status}`);
+      }
+      const elapsed = Math.round((Date.now() - startTime) / 1e3);
+      s?.message(`Building and deploying... (${elapsed}s, status: ${deployment.status})`);
     } catch (err) {
-      await reportCliUsage("cli.db.indexes", false);
-      handleError(err, json);
+      if (err instanceof CLIError) throw err;
     }
-  });
+  }
+  const isReady = deployment?.status.toUpperCase() === "READY";
+  const liveUrl = isReady ? deployment?.url ?? null : null;
+  return { deploymentId, deployment, isReady, liveUrl };
 }
-
-// src/commands/db/policies.ts
-function registerDbPoliciesCommand(dbCmd2) {
-  dbCmd2.command("policies").description("List all RLS policies").action(async (_opts, cmd) => {
+function registerDeploymentsDeployCommand(deploymentsCmd2) {
+  deploymentsCmd2.command("deploy [directory]").description("Deploy a frontend project to Vercel").option("--env <vars>", `Environment variables as JSON (e.g. '{"KEY":"value"}')`).option("--meta <meta>", "Deployment metadata as JSON").action(async (directory, opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const res = await ossFetch("/api/database/policies");
-      const raw = await res.json();
-      const policies = Array.isArray(raw) ? raw : raw.policies ?? [];
-      if (json) {
-        outputJson(raw);
-      } else {
-        if (policies.length === 0) {
-          console.log("No RLS policies found.");
-          return;
+      const config = getProjectConfig();
+      if (!config) throw new ProjectNotLinkedError();
+      const sourceDir = path2.resolve(directory ?? ".");
+      const stats = await fs2.stat(sourceDir).catch(() => null);
+      if (!stats?.isDirectory()) {
+        throw new CLIError(`"${sourceDir}" is not a valid directory.`);
+      }
+      const dirName = path2.basename(sourceDir);
+      if (EXCLUDE_PATTERNS.includes(dirName)) {
+        throw new CLIError(`"${dirName}" is an excluded directory and cannot be used as a deploy source. Please specify your project root or output directory instead.`);
+      }
+      const s = !json ? clack6.spinner() : null;
+      const startBody = {};
+      if (opts.env) {
+        try {
+          const parsed = JSON.parse(opts.env);
+          if (Array.isArray(parsed)) {
+            startBody.envVars = parsed;
+          } else {
+            startBody.envVars = Object.entries(parsed).map(([key, value]) => ({ key, value }));
+          }
+        } catch {
+          throw new CLIError("Invalid --env JSON.");
         }
-        outputTable(
-          ["Table", "Policy Name", "Command", "Roles", "Qual", "With Check"],
-          policies.map((p) => [
-            String(p.tableName ?? "-"),
-            String(p.policyName ?? "-"),
-            String(p.cmd ?? "-"),
-            Array.isArray(p.roles) ? p.roles.join(", ") : String(p.roles ?? "-"),
-            String(p.qual ?? "-"),
-            String(p.withCheck ?? "-")
-          ])
-        );
       }
-      await reportCliUsage("cli.db.policies", true);
-    } catch (err) {
-      await reportCliUsage("cli.db.policies", false);
-      handleError(err, json);
-    }
-  });
-}
-
-// src/commands/db/triggers.ts
-function registerDbTriggersCommand(dbCmd2) {
-  dbCmd2.command("triggers").description("List all database triggers").action(async (_opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      const res = await ossFetch("/api/database/triggers");
-      const raw = await res.json();
-      const triggers = Array.isArray(raw) ? raw : raw.triggers ?? [];
-      if (json) {
-        outputJson(raw);
+      if (opts.meta) {
+        try {
+          startBody.meta = JSON.parse(opts.meta);
+        } catch {
+          throw new CLIError("Invalid --meta JSON.");
+        }
+      }
+      const result = await deployProject({ sourceDir, startBody, spinner: s });
+      if (result.isReady) {
+        s?.stop("Deployment complete");
+        if (json) {
+          outputJson(result.deployment);
+        } else {
+          if (result.liveUrl) {
+            clack6.log.success(`Live at: ${result.liveUrl}`);
+          }
+          clack6.log.info(`Deployment ID: ${result.deploymentId}`);
+        }
       } else {
-        if (triggers.length === 0) {
-          console.log("No database triggers found.");
-          return;
+        s?.stop("Deployment is still building");
+        if (json) {
+          outputJson({ id: result.deploymentId, status: result.deployment?.status ?? "building", timedOut: true });
+        } else {
+          clack6.log.info(`Deployment ID: ${result.deploymentId}`);
+          clack6.log.warn("Deployment did not finish within 5 minutes.");
+          clack6.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
         }
-        outputTable(
-          ["Name", "Table", "Timing", "Events", "ActionOrientation", "ActionCondition", "ActionStatement"],
-          triggers.map((t) => [
-            t.triggerName,
-            t.tableName,
-            t.actionTiming,
-            t.eventManipulation,
-            t.actionOrientation,
-            t.actionCondition ?? "-",
-            t.actionStatement
-          ])
-        );
       }
-      await reportCliUsage("cli.db.triggers", true);
+      await reportCliUsage("cli.deployments.deploy", true);
     } catch (err) {
-      await reportCliUsage("cli.db.triggers", false);
+      await reportCliUsage("cli.deployments.deploy", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/db/rpc.ts
-function registerDbRpcCommand(dbCmd2) {
-  dbCmd2.command("rpc <functionName>").description("Call a database function via RPC").option("--data <json>", "JSON body to pass as function parameters").action(async (functionName, opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      const body = opts.data ? JSON.stringify(JSON.parse(opts.data)) : void 0;
-      const res = await ossFetch(`/api/database/rpc/${encodeURIComponent(functionName)}`, {
-        method: body ? "POST" : "GET",
-        ...body ? { body } : {}
-      });
-      const result = await res.json();
-      if (json) {
-        outputJson(result);
-      } else {
-        console.log(JSON.stringify(result, null, 2));
+// src/commands/create.ts
+var execAsync2 = promisify2(exec2);
+function buildOssHost(appkey, region) {
+  return `https://${appkey}.${region}.insforge.app`;
+}
+async function waitForProjectActive(projectId, apiUrl, timeoutMs = 12e4) {
+  const start = Date.now();
+  while (Date.now() - start < timeoutMs) {
+    const project = await getProject(projectId, apiUrl);
+    if (project.status === "active") return;
+    await new Promise((r) => setTimeout(r, 3e3));
+  }
+  throw new CLIError("Project creation timed out. Check the dashboard for status.");
+}
+var INSFORGE_BANNER = [
+  "\u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
+  "\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D",
+  "\u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  ",
+  "\u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551\u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  ",
+  "\u2588\u2588\u2551\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551     \u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
+  "\u255A\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D      \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D"
+];
+async function animateBanner() {
+  const isTTY = process.stderr.isTTY;
+  if (!isTTY || process.env.CI) {
+    for (const line of INSFORGE_BANNER) {
+      process.stderr.write(`${line}
+`);
+    }
+    process.stderr.write("\n");
+    return;
+  }
+  const totalLines = INSFORGE_BANNER.length;
+  const maxLen = Math.max(...INSFORGE_BANNER.map((l) => l.length));
+  const cols = process.stderr.columns ?? 0;
+  if (cols > 0 && cols < maxLen) {
+    for (const line of INSFORGE_BANNER) {
+      process.stderr.write(`\x1B[97m${line}\x1B[0m
+`);
+    }
+    process.stderr.write("\n");
+    return;
+  }
+  const REVEAL_STEPS = 10;
+  const REVEAL_DELAY = 30;
+  for (let lineIdx = 0; lineIdx < totalLines; lineIdx++) {
+    const line = INSFORGE_BANNER[lineIdx];
+    for (let step = 0; step <= REVEAL_STEPS; step++) {
+      const pos = Math.floor(step / REVEAL_STEPS * line.length);
+      let rendered = "";
+      for (let i = 0; i < line.length; i++) {
+        if (i < pos) {
+          rendered += `\x1B[97m${line[i]}\x1B[0m`;
+        } else if (i === pos) {
+          rendered += `\x1B[1;37m${line[i]}\x1B[0m`;
+        } else {
+          rendered += `\x1B[90m${line[i]}\x1B[0m`;
+        }
       }
-      await reportCliUsage("cli.db.rpc", true);
-    } catch (err) {
-      handleError(err, json);
+      process.stderr.write(`\r${rendered}`);
+      await new Promise((r) => setTimeout(r, REVEAL_DELAY));
     }
-  });
+    process.stderr.write("\n");
+  }
+  const SHIMMER_STEPS = 16;
+  const SHIMMER_DELAY = 40;
+  const SHIMMER_WIDTH = 4;
+  for (let step = 0; step < SHIMMER_STEPS; step++) {
+    const shimmerPos = Math.floor(step / SHIMMER_STEPS * (maxLen + SHIMMER_WIDTH));
+    process.stderr.write(`\x1B[${totalLines}A`);
+    for (const line of INSFORGE_BANNER) {
+      let rendered = "";
+      for (let i = 0; i < line.length; i++) {
+        const dist = Math.abs(i - shimmerPos);
+        if (dist === 0) {
+          rendered += `\x1B[1;97m${line[i]}\x1B[0m`;
+        } else if (dist <= SHIMMER_WIDTH) {
+          rendered += `\x1B[37m${line[i]}\x1B[0m`;
+        } else {
+          rendered += `\x1B[90m${line[i]}\x1B[0m`;
+        }
+      }
+      process.stderr.write(`${rendered}
+`);
+    }
+    await new Promise((r) => setTimeout(r, SHIMMER_DELAY));
+  }
+  process.stderr.write(`\x1B[${totalLines}A`);
+  for (const line of INSFORGE_BANNER) {
+    process.stderr.write(`\x1B[97m${line}\x1B[0m
+`);
+  }
+  process.stderr.write("\n");
 }
-
-// src/commands/db/export.ts
-import { writeFileSync as writeFileSync2 } from "fs";
-function registerDbExportCommand(dbCmd2) {
-  dbCmd2.command("export").description("Export database schema and/or data").option("--format <format>", "Export format: sql or json", "sql").option("--tables <tables>", "Comma-separated list of tables to export (default: all)").option("--no-data", "Exclude table data (schema only)").option("--include-functions", "Include database functions").option("--include-sequences", "Include sequences").option("--include-views", "Include views").option("--row-limit <n>", "Maximum rows per table").option("-o, --output <file>", "Output file path (default: stdout)").action(async (opts, cmd) => {
-    const { json } = getRootOpts(cmd);
+function getDefaultProjectName() {
+  const dirName = path3.basename(process.cwd());
+  const sanitized = dirName.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+  return sanitized.length >= 2 ? sanitized : "";
+}
+async function copyDir(src, dest) {
+  const entries = await fs3.readdir(src, { withFileTypes: true });
+  for (const entry of entries) {
+    const srcPath = path3.join(src, entry.name);
+    const destPath = path3.join(dest, entry.name);
+    if (entry.isDirectory()) {
+      await fs3.mkdir(destPath, { recursive: true });
+      await copyDir(srcPath, destPath);
+    } else {
+      await fs3.copyFile(srcPath, destPath);
+    }
+  }
+}
+function registerCreateCommand(program2) {
+  program2.command("create").description("Create a new InsForge project").option("--name <name>", "Project name").option("--org-id <id>", "Organization ID").option("--region <region>", "Deployment region (us-east, us-west, eu-central, ap-southeast)").option("--template <template>", "Template to use: react, nextjs, chatbot, crm, e-commerce, or empty").action(async (opts, cmd) => {
+    const { json, apiUrl } = getRootOpts(cmd);
     try {
-      await requireAuth();
-      const body = {
-        format: opts.format,
-        includeData: opts.data !== false
-      };
-      if (opts.tables) {
-        body.tables = opts.tables.split(",").map((t) => t.trim());
+      await requireAuth(apiUrl, false);
+      if (!json) {
+        await animateBanner();
+        clack7.intro("Let's build something great");
       }
-      if (opts.includeFunctions) body.includeFunctions = true;
-      if (opts.includeSequences) body.includeSequences = true;
-      if (opts.includeViews) body.includeViews = true;
-      if (opts.rowLimit) body.rowLimit = parseInt(opts.rowLimit, 10);
-      const res = await ossFetch("/api/database/advance/export", {
-        method: "POST",
-        body: JSON.stringify(body)
+      let orgId = opts.orgId;
+      if (!orgId) {
+        const orgs = await listOrganizations(apiUrl);
+        if (orgs.length === 0) {
+          throw new CLIError("No organizations found.");
+        }
+        if (orgs.length === 1) {
+          orgId = orgs[0].id;
+          if (!json) clack7.log.info(`Using organization: ${orgs[0].name}`);
+        } else {
+          if (json) {
+            throw new CLIError("Multiple organizations found. Specify --org-id.");
+          }
+          const selected = await clack7.select({
+            message: "Select an organization:",
+            options: orgs.map((o) => ({
+              value: o.id,
+              label: o.name
+            }))
+          });
+          if (clack7.isCancel(selected)) process.exit(0);
+          orgId = selected;
+        }
+      }
+      const globalConfig = getGlobalConfig();
+      globalConfig.default_org_id = orgId;
+      saveGlobalConfig(globalConfig);
+      let projectName = opts.name;
+      if (!projectName) {
+        if (json) throw new CLIError("--name is required in JSON mode.");
+        const defaultName = getDefaultProjectName();
+        const name = await clack7.text({
+          message: "Project name:",
+          ...defaultName ? { initialValue: defaultName } : {},
+          validate: (v) => v.length >= 2 ? void 0 : "Name must be at least 2 characters"
+        });
+        if (clack7.isCancel(name)) process.exit(0);
+        projectName = name;
+      }
+      projectName = path3.basename(projectName).replace(/[^a-zA-Z0-9._-]/g, "-").replace(/\.+/g, ".");
+      if (projectName.length < 2 || projectName === "." || projectName === "..") {
+        throw new CLIError("Project name must be at least 2 safe characters (letters, numbers, hyphens).");
+      }
+      const validTemplates = ["react", "nextjs", "chatbot", "crm", "e-commerce", "empty"];
+      let template = opts.template;
+      if (template && !validTemplates.includes(template)) {
+        throw new CLIError(`Invalid template "${template}". Valid options: ${validTemplates.join(", ")}`);
+      }
+      if (!template) {
+        if (json) {
+          template = "empty";
+        } else {
+          const approach = await clack7.select({
+            message: "How would you like to start?",
+            options: [
+              { value: "blank", label: "Blank project", hint: "Start from scratch with .env.local ready" },
+              { value: "template", label: "Start from a template", hint: "Pre-built starter apps" }
+            ]
+          });
+          if (clack7.isCancel(approach)) process.exit(0);
+          captureEvent(orgId, "create_approach_selected", {
+            approach
+          });
+          if (approach === "blank") {
+            template = "empty";
+          } else {
+            const selected = await clack7.select({
+              message: "Choose a starter template:",
+              options: [
+                { value: "react", label: "Web app template with React" },
+                { value: "nextjs", label: "Web app template with Next.js" },
+                { value: "chatbot", label: "AI Chatbot with Next.js" },
+                { value: "crm", label: "CRM with Next.js" },
+                { value: "e-commerce", label: "E-Commerce store with Next.js" }
+              ]
+            });
+            if (clack7.isCancel(selected)) process.exit(0);
+            template = selected;
+          }
+        }
+      }
+      captureEvent(orgId, "template_selected", {
+        template,
+        approach: template === "empty" ? "blank" : "template"
       });
-      const raw = await res.text();
-      let content;
-      let meta = null;
+      const hasTemplate = template !== "empty";
+      let dirName = null;
+      const originalCwd = process.cwd();
+      let projectDir = originalCwd;
+      if (hasTemplate) {
+        dirName = projectName;
+        if (!json) {
+          const inputDir = await clack7.text({
+            message: "Directory name:",
+            initialValue: projectName,
+            validate: (v) => {
+              if (v.length < 1) return "Directory name is required";
+              const normalized = path3.basename(v).replace(/[^a-zA-Z0-9._-]/g, "-");
+              if (!normalized || normalized === "." || normalized === "..") return "Invalid directory name";
+              return void 0;
+            }
+          });
+          if (clack7.isCancel(inputDir)) process.exit(0);
+          dirName = path3.basename(inputDir).replace(/[^a-zA-Z0-9._-]/g, "-");
+        }
+        if (!dirName || dirName === "." || dirName === "..") {
+          throw new CLIError("Invalid directory name.");
+        }
+        projectDir = path3.resolve(originalCwd, dirName);
+        const dirExists = await fs3.stat(projectDir).catch(() => null);
+        if (dirExists) {
+          throw new CLIError(`Directory "${dirName}" already exists.`);
+        }
+        await fs3.mkdir(projectDir);
+        process.chdir(projectDir);
+      }
+      let projectLinked = false;
+      const s = !json ? clack7.spinner() : null;
       try {
-        const parsed = JSON.parse(raw);
-        if (typeof parsed.content === "string") {
-          content = parsed.content;
-          meta = { format: parsed.format, tables: parsed.tables };
+        s?.start("Creating project...");
+        const project = await createProject(orgId, projectName, opts.region, apiUrl);
+        s?.message("Waiting for project to become active...");
+        await waitForProjectActive(project.id, apiUrl);
+        const apiKey = await getProjectApiKey(project.id, apiUrl);
+        const projectConfig = {
+          project_id: project.id,
+          project_name: project.name,
+          org_id: project.organization_id,
+          appkey: project.appkey,
+          region: project.region,
+          api_key: apiKey,
+          oss_host: buildOssHost(project.appkey, project.region)
+        };
+        saveProjectConfig(projectConfig);
+        projectLinked = true;
+        s?.stop(`Project "${project.name}" created and linked`);
+        const githubTemplates = ["chatbot", "crm", "e-commerce", "nextjs", "react"];
+        if (githubTemplates.includes(template)) {
+          await downloadGitHubTemplate(template, projectConfig, json);
+        } else if (hasTemplate) {
+          await downloadTemplate(template, projectConfig, projectName, json, apiUrl);
         } else {
-          content = raw;
+          try {
+            const anonKey = await getAnonKey();
+            if (!anonKey) {
+              if (!json) clack7.log.warn("Could not retrieve anon key. You can add it to .env.local manually.");
+            } else {
+              const envPath = path3.join(process.cwd(), ".env.local");
+              const envContent = [
+                "# InsForge",
+                `NEXT_PUBLIC_INSFORGE_URL=${projectConfig.oss_host}`,
+                `NEXT_PUBLIC_INSFORGE_ANON_KEY=${anonKey}`,
+                ""
+              ].join("\n");
+              await fs3.writeFile(envPath, envContent, { flag: "wx" });
+              if (!json) {
+                clack7.log.success("Created .env.local with your InsForge credentials");
+              }
+            }
+          } catch (err) {
+            const error = err;
+            if (!json) {
+              if (error.code === "EEXIST") {
+                clack7.log.warn(".env.local already exists; skipping InsForge key seeding.");
+              } else {
+                clack7.log.warn(`Failed to create .env.local: ${error.message}`);
+              }
+            }
+          }
+        }
+        await installSkills(json);
+        trackCommand("create", orgId);
+        await reportCliUsage("cli.create", true, 6);
+        const templateDownloaded = hasTemplate ? await fs3.stat(path3.join(process.cwd(), "package.json")).catch(() => null) : null;
+        if (templateDownloaded) {
+          const installSpinner = !json ? clack7.spinner() : null;
+          installSpinner?.start("Installing dependencies...");
+          try {
+            await execAsync2("npm install", { cwd: process.cwd(), maxBuffer: 10 * 1024 * 1024 });
+            installSpinner?.stop("Dependencies installed");
+          } catch (err) {
+            installSpinner?.stop("Failed to install dependencies");
+            if (!json) {
+              clack7.log.warn(`npm install failed: ${err.message}`);
+              clack7.log.info("Run `npm install` manually to install dependencies.");
+            }
+          }
+        }
+        let liveUrl = null;
+        if (templateDownloaded && !json) {
+          const shouldDeploy = await clack7.confirm({
+            message: "Would you like to deploy now?"
+          });
+          if (!clack7.isCancel(shouldDeploy) && shouldDeploy) {
+            try {
+              const envVars = await readEnvFile(process.cwd());
+              const startBody = {};
+              if (envVars.length > 0) {
+                startBody.envVars = envVars;
+              }
+              const deploySpinner = clack7.spinner();
+              const result = await deployProject({
+                sourceDir: process.cwd(),
+                startBody,
+                spinner: deploySpinner
+              });
+              if (result.isReady) {
+                deploySpinner.stop("Deployment complete");
+                liveUrl = result.liveUrl;
+              } else {
+                deploySpinner.stop("Deployment is still building");
+                clack7.log.info(`Deployment ID: ${result.deploymentId}`);
+                clack7.log.warn("Deployment did not finish within 2 minutes.");
+                clack7.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
+              }
+            } catch (err) {
+              clack7.log.warn(`Deploy failed: ${err.message}`);
+            }
+          }
+        }
+        const dashboardUrl = `${getFrontendUrl()}/dashboard/project/${project.id}`;
+        if (json) {
+          outputJson({
+            success: true,
+            project: { id: project.id, name: project.name, appkey: project.appkey, region: project.region },
+            template,
+            ...dirName ? { directory: dirName } : {},
+            urls: {
+              dashboard: dashboardUrl,
+              ...liveUrl ? { liveSite: liveUrl } : {}
+            }
+          });
+        } else {
+          clack7.log.step(`Dashboard: ${dashboardUrl}`);
+          if (liveUrl) {
+            clack7.log.success(`Live site: ${liveUrl}`);
+          }
+          if (templateDownloaded) {
+            const steps = [
+              `cd ${dirName}`,
+              "npm run dev"
+            ];
+            clack7.note(steps.join("\n"), "Next steps");
+            clack7.note("Open your coding agent (Claude Code, Codex, Cursor, etc.) to add new features.", "Keep building");
+          } else if (hasTemplate && !templateDownloaded) {
+            clack7.log.warn("Template download failed. You can retry or set up manually.");
+          } else {
+            const prompts = [
+              "Build a todo app with Google OAuth sign-in",
+              "Build an Instagram clone where users can upload photos, like, and comment",
+              "Build an AI chatbot with conversation history"
+            ];
+            clack7.note(
+              `Open your coding agent (Claude Code, Codex, Cursor, etc.) and try:
+
+${prompts.map((p) => `\u2022 "${p}"`).join("\n")}`,
+              "Start building"
+            );
+          }
+          clack7.outro("Done!");
         }
-      } catch {
-        content = raw;
-      }
-      if (json) {
-        outputJson(meta ?? { content });
-        return;
-      }
-      if (opts.output) {
-        writeFileSync2(opts.output, content);
-        const tableCount = meta?.tables?.length;
-        const suffix = tableCount ? ` (${tableCount} tables, format: ${meta?.format ?? opts.format})` : "";
-        outputSuccess(`Exported to ${opts.output}${suffix}`);
-      } else {
-        console.log(content);
+      } catch (err) {
+        if (!projectLinked && hasTemplate && projectDir !== originalCwd) {
+          process.chdir(originalCwd);
+          await fs3.rm(projectDir, { recursive: true, force: true }).catch(() => {
+          });
+        }
+        throw err;
       }
     } catch (err) {
       handleError(err, json);
+    } finally {
+      await shutdownAnalytics();
     }
   });
 }
-
-// src/commands/db/import.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { basename } from "path";
-function registerDbImportCommand(dbCmd2) {
-  dbCmd2.command("import <file>").description("Import database from a local SQL file").option("--truncate", "Truncate existing tables before import").action(async (file, opts, cmd) => {
-    const { json } = getRootOpts(cmd);
+async function downloadTemplate(framework, projectConfig, projectName, json, _apiUrl) {
+  const s = !json ? clack7.spinner() : null;
+  s?.start("Downloading template...");
+  try {
+    const anonKey = await getAnonKey();
+    if (!anonKey) {
+      throw new Error("Failed to retrieve anon key from backend");
+    }
+    const tempDir = tmpdir();
+    const targetDir = projectName;
+    const templatePath = path3.join(tempDir, targetDir);
     try {
-      await requireAuth();
-      const config = getProjectConfig();
-      if (!config) throw new ProjectNotLinkedError();
-      const fileContent = readFileSync3(file);
-      const fileName = basename(file);
-      const formData = new FormData();
-      formData.append("file", new Blob([fileContent]), fileName);
-      if (opts.truncate) {
-        formData.append("truncate", "true");
-      }
-      const res = await fetch(`${config.oss_host}/api/database/advance/import`, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${config.api_key}`
-        },
-        body: formData
-      });
-      if (!res.ok) {
-        const err = await res.json().catch(() => ({}));
-        throw new CLIError(err.error ?? `Import failed: ${res.status}`);
+      await fs3.rm(templatePath, { recursive: true, force: true });
+    } catch {
+    }
+    const frame = framework === "nextjs" ? "nextjs" : "react";
+    const esc = (s2) => process.platform === "win32" ? `"${s2.replace(/"/g, '\\"')}"` : `'${s2.replace(/'/g, "'\\''")}'`;
+    const command = `npx --yes create-insforge-app@latest ${esc(targetDir)} --frame ${frame} --base-url ${esc(projectConfig.oss_host)} --anon-key ${esc(anonKey)} --skip-install`;
+    s?.message(`Running create-insforge-app (${frame})...`);
+    await execAsync2(command, {
+      maxBuffer: 10 * 1024 * 1024,
+      cwd: tempDir
+    });
+    s?.message("Copying template files...");
+    const cwd = process.cwd();
+    await copyDir(templatePath, cwd);
+    await fs3.rm(templatePath, { recursive: true, force: true }).catch(() => {
+    });
+    s?.stop("Template files downloaded");
+  } catch (err) {
+    s?.stop("Template download failed");
+    if (!json) {
+      clack7.log.warn(`Failed to download template: ${err.message}`);
+      clack7.log.info("You can manually set up the template later.");
+    }
+  }
+}
+async function downloadGitHubTemplate(templateName, projectConfig, json) {
+  const s = !json ? clack7.spinner() : null;
+  s?.start(`Downloading ${templateName} template...`);
+  const tempDir = path3.join(tmpdir(), `insforge-template-${Date.now()}`);
+  try {
+    await fs3.mkdir(tempDir, { recursive: true });
+    await execAsync2(
+      "git clone --depth 1 https://github.com/InsForge/insforge-templates.git .",
+      { cwd: tempDir, maxBuffer: 10 * 1024 * 1024, timeout: 6e4 }
+    );
+    const templateDir = path3.join(tempDir, templateName);
+    const stat5 = await fs3.stat(templateDir).catch(() => null);
+    if (!stat5?.isDirectory()) {
+      throw new Error(`Template "${templateName}" not found in repository`);
+    }
+    s?.message("Copying template files...");
+    const cwd = process.cwd();
+    await copyDir(templateDir, cwd);
+    const envExamplePath = path3.join(cwd, ".env.example");
+    const envExampleExists = await fs3.stat(envExamplePath).catch(() => null);
+    if (envExampleExists) {
+      const anonKey = await getAnonKey();
+      const envExample = await fs3.readFile(envExamplePath, "utf-8");
+      const envContent = envExample.replace(
+        /^([A-Z][A-Z0-9_]*=)(.*)$/gm,
+        (_, prefix, _value) => {
+          const key = prefix.slice(0, -1);
+          if (/INSFORGE.*(URL|BASE_URL)$/.test(key)) return `${prefix}${projectConfig.oss_host}`;
+          if (/INSFORGE.*ANON_KEY$/.test(key)) return `${prefix}${anonKey}`;
+          if (key === "NEXT_PUBLIC_APP_URL") return `${prefix}https://${projectConfig.appkey}.insforge.site`;
+          return `${prefix}${_value}`;
+        }
+      );
+      const envLocalPath = path3.join(cwd, ".env.local");
+      try {
+        await fs3.writeFile(envLocalPath, envContent, { flag: "wx" });
+      } catch (e) {
+        if (e.code === "EEXIST") {
+          if (!json) clack7.log.warn(".env.local already exists; skipping env seeding.");
+        } else {
+          throw e;
+        }
       }
-      const data = await res.json();
-      if (json) {
-        outputJson(data);
-      } else {
-        outputSuccess(`Imported ${data.filename} (${data.tables.length} tables, ${data.rowsImported} rows)`);
+    }
+    s?.stop(`${templateName} template downloaded`);
+    const migrationPath = path3.join(cwd, "migrations", "db_init.sql");
+    const migrationExists = await fs3.stat(migrationPath).catch(() => null);
+    if (migrationExists) {
+      const dbSpinner = !json ? clack7.spinner() : null;
+      dbSpinner?.start("Running database migrations...");
+      try {
+        const sql = await fs3.readFile(migrationPath, "utf-8");
+        await runRawSql(sql, true);
+        dbSpinner?.stop("Database migrations applied");
+      } catch (err) {
+        dbSpinner?.stop("Database migration failed");
+        if (!json) {
+          clack7.log.warn(`Migration failed: ${err.message}`);
+          clack7.log.info('You can run the migration manually: npx @insforge/cli db query --unrestricted "$(cat migrations/db_init.sql)"');
+        } else {
+          throw err;
+        }
       }
-    } catch (err) {
-      handleError(err, json);
     }
-  });
+  } catch (err) {
+    s?.stop(`${templateName} template download failed`);
+    if (!json) {
+      clack7.log.warn(`Failed to download ${templateName} template: ${err.message}`);
+      clack7.log.info("You can manually clone from: https://github.com/InsForge/insforge-templates");
+    }
+  } finally {
+    await fs3.rm(tempDir, { recursive: true, force: true }).catch(() => {
+    });
+  }
 }
 
-// src/commands/records/list.ts
-function registerRecordsCommands(recordsCmd2) {
-  recordsCmd2.command("list <table>").description("List records from a table").option("--select <columns>", "Columns to select (comma-separated)").option("--filter <filter>", 'Filter expression (e.g. "name=eq.John")').option("--order <order>", 'Order by (e.g. "created_at.desc")').option("--limit <n>", "Limit number of records", parseInt).option("--offset <n>", "Offset for pagination", parseInt).action(async (table, opts, cmd) => {
-    const { json } = getRootOpts(cmd);
+// src/commands/projects/link.ts
+var execAsync3 = promisify3(exec3);
+function buildOssHost2(appkey, region) {
+  return `https://${appkey}.${region}.insforge.app`;
+}
+function registerProjectLinkCommand(program2) {
+  program2.command("link").description("Link current directory to an InsForge project").option("--project-id <id>", "Project ID to link").option("--org-id <id>", "Organization ID").option("--template <template>", "Download a template after linking: react, nextjs, chatbot, crm, e-commerce").option("--api-base-url <url>", "API Base URL for direct linking (OSS/Self-hosted)").option("--api-key <key>", "API Key for direct linking (OSS/Self-hosted)").action(async (opts, cmd) => {
+    const { json, apiUrl } = getRootOpts(cmd);
     try {
-      await requireAuth();
-      const params = new URLSearchParams();
-      if (opts.select) params.set("select", opts.select);
-      if (opts.filter) params.set(opts.filter.split("=")[0], opts.filter.split("=").slice(1).join("="));
-      if (opts.order) params.set("order", opts.order);
-      if (opts.limit) params.set("limit", String(opts.limit));
-      if (opts.offset) params.set("offset", String(opts.offset));
-      const query = params.toString();
-      const path4 = `/api/database/records/${encodeURIComponent(table)}${query ? `?${query}` : ""}`;
-      const res = await ossFetch(path4);
-      const data = await res.json();
-      const records = data.data ?? [];
-      if (json) {
-        outputJson(data);
-      } else {
-        if (records.length === 0) {
-          console.log("No records found.");
+      if (opts.apiBaseUrl || opts.apiKey) {
+        try {
+          if (!opts.apiBaseUrl || !opts.apiKey) {
+            throw new CLIError("Both --api-base-url and --api-key must be provided together for direct linking.");
+          }
+          try {
+            new URL(opts.apiBaseUrl);
+          } catch {
+            throw new CLIError("Invalid --api-base-url. Please provide a valid URL.");
+          }
+          const projectConfig2 = {
+            project_id: "oss-project",
+            project_name: "oss-project",
+            org_id: "oss-org",
+            appkey: "oss",
+            region: "local",
+            api_key: opts.apiKey,
+            oss_host: opts.apiBaseUrl.replace(/\/$/, "")
+            // remove trailing slash if any
+          };
+          saveProjectConfig(projectConfig2);
+          if (json) {
+            outputJson({ success: true, project: { id: projectConfig2.project_id, name: projectConfig2.project_name, region: projectConfig2.region } });
+          } else {
+            outputSuccess(`Linked to direct project at ${projectConfig2.oss_host}`);
+          }
+          trackCommand("link", "oss-org", { direct: true });
+          await installSkills(json);
+          await reportCliUsage("cli.link_direct", true, 6);
+          try {
+            const urlMatch = opts.apiBaseUrl.match(/^https?:\/\/([^.]+)\.[^.]+\.insforge\.app/);
+            if (urlMatch) {
+              await reportAgentConnected({ app_key: urlMatch[1] }, apiUrl);
+            }
+          } catch {
+          }
           return;
+        } catch (err) {
+          await reportCliUsage("cli.link_direct", false);
+          handleError(err, json);
         }
-        const headers = Object.keys(records[0]);
-        outputTable(
-          headers,
-          records.map((r) => headers.map((h) => {
-            const val = r[h];
-            if (val === null || val === void 0) return "";
-            if (typeof val === "object") return JSON.stringify(val);
-            return String(val);
+      }
+      const creds = await requireAuth(apiUrl, false);
+      let orgId = opts.orgId;
+      let projectId = opts.projectId;
+      if (!orgId && !projectId) {
+        const orgs = await listOrganizations(apiUrl);
+        if (orgs.length === 0) {
+          throw new CLIError("No organizations found.");
+        }
+        if (orgs.length === 1) {
+          orgId = orgs[0].id;
+          if (!json) clack8.log.info(`Using organization: ${orgs[0].name}`);
+        } else {
+          if (json) {
+            throw new CLIError("Multiple organizations found. Specify --org-id.");
+          }
+          const selected = await clack8.select({
+            message: "Select an organization:",
+            options: orgs.map((o) => ({
+              value: o.id,
+              label: o.name
+            }))
+          });
+          if (clack8.isCancel(selected)) process.exit(0);
+          orgId = selected;
+        }
+      }
+      const config = getGlobalConfig();
+      config.default_org_id = orgId;
+      saveGlobalConfig(config);
+      if (!projectId) {
+        const projects = await listProjects(orgId, apiUrl);
+        if (projects.length === 0) {
+          throw new CLIError("No projects found in this organization.");
+        }
+        if (json) {
+          throw new CLIError("Specify --project-id in JSON mode.");
+        }
+        const selected = await clack8.select({
+          message: "Select a project to link:",
+          options: projects.map((p) => ({
+            value: p.id,
+            label: `${p.name} (${p.region}, ${p.status})`
           }))
-        );
-        console.log(`${records.length} record(s).`);
-      }
-    } catch (err) {
-      handleError(err, json);
-    }
-  });
-}
-
-// src/commands/records/create.ts
-function registerRecordsCreateCommand(recordsCmd2) {
-  recordsCmd2.command("create <table>").description("Create record(s) in a table").option("--data <json>", "JSON data to insert (object or array of objects)").action(async (table, opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      if (!opts.data) {
-        throw new CLIError(`--data is required. Example: --data '{"name":"John"}'`);
+        });
+        if (clack8.isCancel(selected)) process.exit(0);
+        projectId = selected;
       }
-      let records;
+      let project;
+      let apiKey;
       try {
-        const parsed = JSON.parse(opts.data);
-        records = Array.isArray(parsed) ? parsed : [parsed];
-      } catch {
-        throw new CLIError("Invalid JSON in --data. Provide a JSON object or array.");
-      }
-      const res = await ossFetch(
-        `/api/database/records/${encodeURIComponent(table)}?return=representation`,
-        {
-          method: "POST",
-          body: JSON.stringify(records)
+        [project, apiKey] = await Promise.all([
+          getProject(projectId, apiUrl),
+          getProjectApiKey(projectId, apiUrl)
+        ]);
+      } catch (err) {
+        if (err instanceof CLIError && (err.exitCode === 5 || err.exitCode === 4 || err.message.includes("not found"))) {
+          const identity = creds.user?.email ?? creds.user?.name ?? "unknown user";
+          throw new CLIError(
+            `You're logged in as ${identity}, and you don't have access to project ${projectId}. Check that the project ID is correct and belongs to one of your organizations.`,
+            5,
+            "PERMISSION_DENIED"
+          );
         }
-      );
-      const data = await res.json();
-      if (json) {
-        outputJson(data);
-      } else {
-        const created = data.data ?? [];
-        outputSuccess(`Created ${created.length || records.length} record(s) in "${table}".`);
+        throw err;
       }
-    } catch (err) {
-      handleError(err, json);
-    }
-  });
-}
-
-// src/commands/records/update.ts
-function registerRecordsUpdateCommand(recordsCmd2) {
-  recordsCmd2.command("update <table>").description("Update records in a table matching a filter").option("--filter <filter>", 'Filter expression (e.g. "id=eq.123")').option("--data <json>", "JSON data to update").action(async (table, opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      if (!opts.filter) {
-        throw new CLIError("--filter is required to prevent accidental updates to all rows.");
+      const projectConfig = {
+        project_id: project.id,
+        project_name: project.name,
+        org_id: project.organization_id,
+        appkey: project.appkey,
+        region: project.region,
+        api_key: apiKey,
+        oss_host: buildOssHost2(project.appkey, project.region)
+      };
+      if (!opts.template) {
+        saveProjectConfig(projectConfig);
       }
-      if (!opts.data) {
-        throw new CLIError(`--data is required. Example: --data '{"name":"Jane"}'`);
+      trackCommand("link", project.organization_id);
+      if (json) {
+        outputJson({ success: true, project: { id: project.id, name: project.name, region: project.region } });
+      } else {
+        outputSuccess(`Linked to project "${project.name}" (${project.appkey}.${project.region})`);
       }
-      let body;
+      await installSkills(json);
+      await reportCliUsage("cli.link", true, 6);
       try {
-        body = JSON.parse(opts.data);
+        await reportAgentConnected({ project_id: project.id }, apiUrl);
       } catch {
-        throw new CLIError("Invalid JSON in --data.");
       }
-      const params = new URLSearchParams();
-      params.set(opts.filter.split("=")[0], opts.filter.split("=").slice(1).join("="));
-      params.set("return", "representation");
-      const res = await ossFetch(
-        `/api/database/records/${encodeURIComponent(table)}?${params}`,
-        {
-          method: "PATCH",
-          body: JSON.stringify(body)
+      const template = opts.template;
+      if (template) {
+        const validTemplates = ["react", "nextjs", "chatbot", "crm", "e-commerce"];
+        if (!validTemplates.includes(template)) {
+          throw new CLIError(`Invalid template "${template}". Valid options: ${validTemplates.join(", ")}`);
         }
-      );
-      const data = await res.json();
-      if (json) {
-        outputJson(data);
-      } else {
-        const updated = data.data ?? [];
-        outputSuccess(`Updated ${updated.length} record(s) in "${table}".`);
-      }
-    } catch (err) {
-      handleError(err, json);
-    }
-  });
-}
-
-// src/commands/records/delete.ts
-function registerRecordsDeleteCommand(recordsCmd2) {
-  recordsCmd2.command("delete <table>").description("Delete records from a table matching a filter").option("--filter <filter>", 'Filter expression (e.g. "id=eq.123")').action(async (table, opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      if (!opts.filter) {
-        throw new CLIError("--filter is required to prevent accidental deletion of all rows.");
-      }
-      const params = new URLSearchParams();
-      params.set(opts.filter.split("=")[0], opts.filter.split("=").slice(1).join("="));
-      params.set("return", "representation");
-      const res = await ossFetch(
-        `/api/database/records/${encodeURIComponent(table)}?${params}`,
-        { method: "DELETE" }
-      );
-      const data = await res.json();
-      if (json) {
-        outputJson(data);
-      } else {
-        const deleted = data.data ?? [];
-        outputSuccess(`Deleted ${deleted.length} record(s) from "${table}".`);
-      }
-    } catch (err) {
-      handleError(err, json);
-    }
-  });
-}
-
-// src/commands/functions/list.ts
-function registerFunctionsCommands(functionsCmd2) {
-  functionsCmd2.command("list").description("List all edge functions").action(async (_opts, cmd) => {
-    const { json } = getRootOpts(cmd);
-    try {
-      await requireAuth();
-      const res = await ossFetch("/api/functions");
-      const raw = await res.json();
-      const functions = Array.isArray(raw) ? raw : raw && typeof raw === "object" && "functions" in raw ? raw.functions ?? [] : [];
-      if (json) {
-        outputJson(raw);
-      } else {
-        if (functions.length === 0) {
-          console.log("No functions found.");
-          return;
+        let dirName = project.name;
+        if (!json) {
+          const inputDir = await clack8.text({
+            message: "Directory name:",
+            initialValue: project.name,
+            validate: (v) => {
+              if (v.length < 1) return "Directory name is required";
+              const normalized = path4.basename(v).replace(/[^a-zA-Z0-9._-]/g, "-");
+              if (!normalized || normalized === "." || normalized === "..") return "Invalid directory name";
+              return void 0;
+            }
+          });
+          if (clack8.isCancel(inputDir)) process.exit(0);
+          dirName = path4.basename(inputDir).replace(/[^a-zA-Z0-9._-]/g, "-");
         }
-        outputTable(
-          ["Slug", "Name", "Status", "Created At"],
-          functions.map((f) => [
-            f.slug,
-            f.name ?? "-",
-            f.status ?? "-",
-            f.createdAt ? new Date(f.createdAt).toLocaleString() : "-"
-          ])
+        if (!dirName || dirName === "." || dirName === "..") {
+          throw new CLIError("Invalid directory name.");
+        }
+        const templateDir = path4.resolve(process.cwd(), dirName);
+        const dirExists = await fs4.stat(templateDir).catch(() => null);
+        if (dirExists) {
+          throw new CLIError(`Directory "${dirName}" already exists.`);
+        }
+        await fs4.mkdir(templateDir);
+        process.chdir(templateDir);
+        saveProjectConfig(projectConfig);
+        captureEvent(orgId ?? project.organization_id, "template_selected", { template, source: "link" });
+        const githubTemplates = ["chatbot", "crm", "e-commerce", "nextjs", "react"];
+        if (githubTemplates.includes(template)) {
+          await downloadGitHubTemplate(template, projectConfig, json);
+        } else {
+          await downloadTemplate(template, projectConfig, project.name, json, apiUrl);
+        }
+        const templateDownloaded = await fs4.stat(path4.join(process.cwd(), "package.json")).catch(() => null);
+        if (templateDownloaded && !json) {
+          const installSpinner = clack8.spinner();
+          installSpinner.start("Installing dependencies...");
+          try {
+            await execAsync3("npm install", { cwd: process.cwd(), maxBuffer: 10 * 1024 * 1024 });
+            installSpinner.stop("Dependencies installed");
+          } catch (err) {
+            installSpinner.stop("Failed to install dependencies");
+            clack8.log.warn(`npm install failed: ${err.message}`);
+            clack8.log.info("Run `npm install` manually to install dependencies.");
+          }
+        }
+        if (!json) {
+          const dashboardUrl = `${getFrontendUrl()}/dashboard/project/${project.id}`;
+          clack8.log.step(`Dashboard: ${dashboardUrl}`);
+          if (templateDownloaded) {
+            const steps = [`cd ${dirName}`, "npm run dev"];
+            clack8.note(steps.join("\n"), "Next steps");
+            clack8.note("Open your coding agent (Claude Code, Codex, Cursor, etc.) to add new features.", "Keep building");
+          } else {
+            clack8.log.warn("Template download failed. You can retry or set up manually.");
+          }
+        }
+      } else if (!json) {
+        const dashboardUrl = `${getFrontendUrl()}/dashboard/project/${project.id}`;
+        clack8.log.step(`Dashboard: ${dashboardUrl}`);
+        const prompts = [
+          "Build a todo app with Google OAuth sign-in",
+          "Build an Instagram clone where users can upload photos, like, and comment",
+          "Build an AI chatbot with conversation history"
+        ];
+        clack8.note(
+          `Open your coding agent (Claude Code, Codex, Cursor, etc.) and try:
+
+${prompts.map((p) => `\u2022 "${p}"`).join("\n")}`,
+          "Start building"
         );
       }
-      await reportCliUsage("cli.functions.list", true);
     } catch (err) {
-      await reportCliUsage("cli.functions.list", false);
+      await reportCliUsage("cli.link", false);
       handleError(err, json);
+    } finally {
+      await shutdownAnalytics();
     }
   });
 }
 
-// src/commands/functions/deploy.ts
-import { readFileSync as readFileSync4, existsSync as existsSync3 } from "fs";
-import { join as join3 } from "path";
-function registerFunctionsDeployCommand(functionsCmd2) {
-  functionsCmd2.command("deploy <slug>").description("Deploy an edge function (create or update)").option("--file <path>", "Path to the function source file").option("--name <name>", "Function display name").option("--description <desc>", "Function description").action(async (slug, opts, cmd) => {
+// src/commands/db/query.ts
+function registerDbCommands(dbCmd2) {
+  dbCmd2.command("query <sql>").description("Execute a SQL query against the database").option("--unrestricted", "Use unrestricted mode (allows system table access)").action(async (sql, opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const filePath = opts.file ?? join3(process.cwd(), "insforge", "functions", slug, "index.ts");
-      if (!existsSync3(filePath)) {
-        throw new CLIError(
-          `Source file not found: ${filePath}
-Specify --file <path> or create ${join3("insforge", "functions", slug, "index.ts")}`
-        );
-      }
-      const code = readFileSync4(filePath, "utf-8");
-      const name = opts.name ?? slug;
-      const description = opts.description ?? "";
-      let exists = false;
-      try {
-        await ossFetch(`/api/functions/${encodeURIComponent(slug)}`);
-        exists = true;
-      } catch {
-        exists = false;
-      }
-      let res;
-      if (exists) {
-        res = await ossFetch(`/api/functions/${encodeURIComponent(slug)}`, {
-          method: "PUT",
-          body: JSON.stringify({ name, description, code })
-        });
-      } else {
-        res = await ossFetch("/api/functions", {
-          method: "POST",
-          body: JSON.stringify({ slug, name, description, code })
-        });
-      }
-      const result = await res.json();
-      const deployFailed = result.deployment?.status === "failed";
+      const { rows, raw } = await runRawSql(sql, !!opts.unrestricted);
       if (json) {
-        outputJson(result);
+        outputJson(raw);
       } else {
-        const action = exists ? "updation" : "creation";
-        const resultStatus = result.success ? "success" : "failed";
-        outputSuccess(`Function "${result.function.slug}" ${action} ${resultStatus}.`);
-        if (result.deployment) {
-          if (result.deployment.status === "success") {
-            console.log(`  Deployment: ${result.deployment.status}${result.deployment.url ? ` \u2192 ${result.deployment.url}` : ""}`);
-          } else {
-            console.log(`  Deployment: ${result.deployment.status}`);
-            if (result.deployment.buildLogs?.length) {
-              console.log("  Build logs:");
-              for (const line of result.deployment.buildLogs) {
-                console.log(`    ${line}`);
-              }
-            }
+        if (rows.length > 0) {
+          const headers = Object.keys(rows[0]);
+          outputTable(
+            headers,
+            rows.map((row) => headers.map((h) => String(row[h] ?? "")))
+          );
+          console.log(`${rows.length} row(s) returned.`);
+        } else {
+          console.log("Query executed successfully.");
+          if (rows.length === 0) {
+            console.log("No rows returned.");
           }
         }
-      }
-      if (deployFailed) throw new CLIError("Function deployment failed");
-      await reportCliUsage("cli.functions.deploy", true);
+      }
+      await reportCliUsage("cli.db.query", true);
     } catch (err) {
-      await reportCliUsage("cli.functions.deploy", false);
+      await reportCliUsage("cli.db.query", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/functions/invoke.ts
-function registerFunctionsInvokeCommand(functionsCmd2) {
-  functionsCmd2.command("invoke <slug>").description("Invoke an edge function").option("--data <json>", "JSON body to send to the function").option("--method <method>", "HTTP method (GET, POST, PUT, PATCH, DELETE)", "POST").action(async (slug, opts, cmd) => {
+// src/commands/db/tables.ts
+function registerDbTablesCommand(dbCmd2) {
+  dbCmd2.command("tables").description("List all database tables").action(async (_opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const config = getProjectConfig();
-      if (!config) throw new ProjectNotLinkedError();
-      const method = opts.method.toUpperCase();
-      const headers = {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${config.api_key}`
-      };
-      const fetchOpts = { method, headers };
-      if (opts.data && ["POST", "PUT", "PATCH"].includes(method)) {
-        fetchOpts.body = opts.data;
-      }
-      const res = await fetch(
-        `${config.oss_host}/functions/${encodeURIComponent(slug)}`,
-        fetchOpts
-      );
-      const contentType = res.headers.get("content-type") ?? "";
-      const status = res.status;
-      if (contentType.includes("application/json")) {
-        const data = await res.json();
-        if (json) {
-          outputJson({ status, body: data });
-        } else {
-          console.log(JSON.stringify(data, null, 2));
-        }
+      const res = await ossFetch("/api/database/tables");
+      const tables = await res.json();
+      if (json) {
+        outputJson(tables);
       } else {
-        const text3 = await res.text();
-        console.log(text3);
-      }
-      if (status >= 400) {
-        throw new CLIError(`HTTP ${status}`, 1, "HTTP_ERROR");
+        if (tables.length === 0) {
+          console.log("No tables found.");
+          return;
+        }
+        outputTable(
+          ["Table Name"],
+          tables.map((t) => [t])
+        );
       }
+      await reportCliUsage("cli.db.tables", true);
     } catch (err) {
+      await reportCliUsage("cli.db.tables", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/functions/code.ts
-function registerFunctionsCodeCommand(functionsCmd2) {
-  functionsCmd2.command("code <slug>").description("Fetch and display the source code of an edge function").action(async (slug, _opts, cmd) => {
+// src/commands/db/functions.ts
+function registerDbFunctionsCommand(dbCmd2) {
+  dbCmd2.command("functions").description("List all database functions").action(async (_opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const res = await ossFetch(`/api/functions/${encodeURIComponent(slug)}`);
-      const fn = await res.json();
+      const res = await ossFetch("/api/database/functions");
+      const raw = await res.json();
+      const functions = Array.isArray(raw) ? raw : raw.functions ?? [];
       if (json) {
-        outputJson(fn);
+        outputJson(raw);
       } else {
-        console.log(`Function: ${fn.name} (${fn.slug})`);
-        console.log(`Status:   ${fn.status}`);
-        if (fn.description) console.log(`Desc:     ${fn.description}`);
-        if (fn.deployed_at) console.log(`Deployed: ${fn.deployed_at}`);
-        console.log("---");
-        console.log(fn.code);
+        if (functions.length === 0) {
+          console.log("No database functions found.");
+          return;
+        }
+        outputTable(
+          ["Name", "Definition", "Kind"],
+          functions.map((f) => [f.functionName, f.functionDef, f.kind])
+        );
       }
+      await reportCliUsage("cli.db.functions", true);
     } catch (err) {
+      await reportCliUsage("cli.db.functions", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/functions/delete.ts
-import * as clack7 from "@clack/prompts";
-function registerFunctionsDeleteCommand(functionsCmd2) {
-  functionsCmd2.command("delete <slug>").description("Delete an edge function").action(async (slug, _opts, cmd) => {
-    const { json, yes } = getRootOpts(cmd);
+// src/commands/db/indexes.ts
+function registerDbIndexesCommand(dbCmd2) {
+  dbCmd2.command("indexes").description("List all database indexes").action(async (_opts, cmd) => {
+    const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      if (!yes && !json) {
-        const confirmed = await clack7.confirm({
-          message: `Delete function "${slug}"? This cannot be undone.`
-        });
-        if (clack7.isCancel(confirmed) || !confirmed) {
-          clack7.log.info("Cancelled.");
+      const res = await ossFetch("/api/database/indexes");
+      const raw = await res.json();
+      const indexes = Array.isArray(raw) ? raw : raw.indexes ?? [];
+      if (json) {
+        outputJson(raw);
+      } else {
+        if (indexes.length === 0) {
+          console.log("No database indexes found.");
           return;
         }
+        outputTable(
+          ["Table", "Index Name", "Definition", "Unique", "Primary"],
+          indexes.map((i) => [
+            i.tableName,
+            i.indexName,
+            i.indexDef,
+            i.isUnique ? "Yes" : "No",
+            i.isPrimary ? "Yes" : "No"
+          ])
+        );
       }
-      const res = await ossFetch(`/api/functions/${encodeURIComponent(slug)}`, {
-        method: "DELETE"
-      });
-      const result = await res.json();
+      await reportCliUsage("cli.db.indexes", true);
+    } catch (err) {
+      await reportCliUsage("cli.db.indexes", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/db/policies.ts
+function registerDbPoliciesCommand(dbCmd2) {
+  dbCmd2.command("policies").description("List all RLS policies").action(async (_opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const res = await ossFetch("/api/database/policies");
+      const raw = await res.json();
+      const policies = Array.isArray(raw) ? raw : raw.policies ?? [];
       if (json) {
-        outputJson(result);
+        outputJson(raw);
       } else {
-        if (result.success) {
-          outputSuccess(`Function "${slug}" deleted successfully.`);
-        } else {
-          outputSuccess(`Failed to delete function "${slug}".`);
+        if (policies.length === 0) {
+          console.log("No RLS policies found.");
+          return;
         }
+        outputTable(
+          ["Table", "Policy Name", "Command", "Roles", "Qual", "With Check"],
+          policies.map((p) => [
+            String(p.tableName ?? "-"),
+            String(p.policyName ?? "-"),
+            String(p.cmd ?? "-"),
+            Array.isArray(p.roles) ? p.roles.join(", ") : String(p.roles ?? "-"),
+            String(p.qual ?? "-"),
+            String(p.withCheck ?? "-")
+          ])
+        );
       }
-      await reportCliUsage("cli.functions.delete", true);
+      await reportCliUsage("cli.db.policies", true);
     } catch (err) {
-      await reportCliUsage("cli.functions.delete", false);
+      await reportCliUsage("cli.db.policies", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/storage/buckets.ts
-function registerStorageBucketsCommand(storageCmd2) {
-  storageCmd2.command("buckets").description("List all storage buckets").action(async (_opts, cmd) => {
+// src/commands/db/triggers.ts
+function registerDbTriggersCommand(dbCmd2) {
+  dbCmd2.command("triggers").description("List all database triggers").action(async (_opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const res = await ossFetch("/api/storage/buckets");
+      const res = await ossFetch("/api/database/triggers");
       const raw = await res.json();
-      const buckets = Array.isArray(raw) ? raw : raw && typeof raw === "object" && "buckets" in raw ? raw.buckets ?? [] : [];
+      const triggers = Array.isArray(raw) ? raw : raw.triggers ?? [];
       if (json) {
         outputJson(raw);
       } else {
-        if (buckets.length === 0) {
-          console.log("No buckets found.");
+        if (triggers.length === 0) {
+          console.log("No database triggers found.");
           return;
         }
         outputTable(
-          ["Bucket Name", "Public"],
-          buckets.map((b) => [b.name, b.public ? "Yes" : "No"])
+          ["Name", "Table", "Timing", "Events", "ActionOrientation", "ActionCondition", "ActionStatement"],
+          triggers.map((t) => [
+            t.triggerName,
+            t.tableName,
+            t.actionTiming,
+            t.eventManipulation,
+            t.actionOrientation,
+            t.actionCondition ?? "-",
+            t.actionStatement
+          ])
         );
       }
-      await reportCliUsage("cli.storage.buckets", true);
+      await reportCliUsage("cli.db.triggers", true);
     } catch (err) {
-      await reportCliUsage("cli.storage.buckets", false);
+      await reportCliUsage("cli.db.triggers", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/storage/upload.ts
-import { readFileSync as readFileSync5, existsSync as existsSync4 } from "fs";
-import { basename as basename2 } from "path";
-function registerStorageUploadCommand(storageCmd2) {
-  storageCmd2.command("upload <file>").description("Upload a file to a storage bucket").requiredOption("--bucket <name>", "Target bucket name").option("--key <objectKey>", "Object key (defaults to filename)").action(async (file, opts, cmd) => {
+// src/commands/db/rpc.ts
+function registerDbRpcCommand(dbCmd2) {
+  dbCmd2.command("rpc <functionName>").description("Call a database function via RPC").option("--data <json>", "JSON body to pass as function parameters").action(async (functionName, opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const config = getProjectConfig();
-      if (!config) throw new ProjectNotLinkedError();
-      if (!existsSync4(file)) {
-        throw new CLIError(`File not found: ${file}`);
+      const body = opts.data ? JSON.stringify(JSON.parse(opts.data)) : void 0;
+      const res = await ossFetch(`/api/database/rpc/${encodeURIComponent(functionName)}`, {
+        method: body ? "POST" : "GET",
+        ...body ? { body } : {}
+      });
+      const result = await res.json();
+      if (json) {
+        outputJson(result);
+      } else {
+        console.log(JSON.stringify(result, null, 2));
       }
-      const fileContent = readFileSync5(file);
-      const objectKey = opts.key ?? basename2(file);
-      const bucketName = opts.bucket;
-      const formData = new FormData();
-      const blob = new Blob([fileContent]);
-      formData.append("file", blob, objectKey);
-      const url = `${config.oss_host}/api/storage/buckets/${encodeURIComponent(bucketName)}/objects/${encodeURIComponent(objectKey)}`;
-      const res = await fetch(url, {
-        method: "PUT",
-        headers: {
-          Authorization: `Bearer ${config.api_key}`
-        },
-        body: formData
+      await reportCliUsage("cli.db.rpc", true);
+    } catch (err) {
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/db/export.ts
+import { writeFileSync as writeFileSync2 } from "fs";
+function registerDbExportCommand(dbCmd2) {
+  dbCmd2.command("export").description("Export database schema and/or data").option("--format <format>", "Export format: sql or json", "sql").option("--tables <tables>", "Comma-separated list of tables to export (default: all)").option("--no-data", "Exclude table data (schema only)").option("--include-functions", "Include database functions").option("--include-sequences", "Include sequences").option("--include-views", "Include views").option("--row-limit <n>", "Maximum rows per table").option("-o, --output <file>", "Output file path (default: stdout)").action(async (opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const body = {
+        format: opts.format,
+        includeData: opts.data !== false
+      };
+      if (opts.tables) {
+        body.tables = opts.tables.split(",").map((t) => t.trim());
+      }
+      if (opts.includeFunctions) body.includeFunctions = true;
+      if (opts.includeSequences) body.includeSequences = true;
+      if (opts.includeViews) body.includeViews = true;
+      if (opts.rowLimit) body.rowLimit = parseInt(opts.rowLimit, 10);
+      const res = await ossFetch("/api/database/advance/export", {
+        method: "POST",
+        body: JSON.stringify(body)
       });
-      if (!res.ok) {
-        const err = await res.json().catch(() => ({}));
-        throw new CLIError(err.error ?? `Upload failed: ${res.status}`);
+      const raw = await res.text();
+      let content;
+      let meta = null;
+      try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.content === "string") {
+          content = parsed.content;
+          meta = { format: parsed.format, tables: parsed.tables };
+        } else {
+          content = raw;
+        }
+      } catch {
+        content = raw;
       }
-      const data = await res.json();
       if (json) {
-        outputJson(data);
+        outputJson(meta ?? { content });
+        return;
+      }
+      if (opts.output) {
+        writeFileSync2(opts.output, content);
+        const tableCount = meta?.tables?.length;
+        const suffix = tableCount ? ` (${tableCount} tables, format: ${meta?.format ?? opts.format})` : "";
+        outputSuccess(`Exported to ${opts.output}${suffix}`);
       } else {
-        outputSuccess(`Uploaded "${basename2(file)}" to bucket "${bucketName}".`);
+        console.log(content);
       }
     } catch (err) {
       handleError(err, json);
@@ -1713,34 +2114,39 @@ function registerStorageUploadCommand(storageCmd2) {
   });
 }
 
-// src/commands/storage/download.ts
-import { writeFileSync as writeFileSync3 } from "fs";
-import { join as join4, basename as basename3 } from "path";
-function registerStorageDownloadCommand(storageCmd2) {
-  storageCmd2.command("download <objectKey>").description("Download a file from a storage bucket").requiredOption("--bucket <name>", "Source bucket name").option("--output <path>", "Output file path (defaults to current directory)").action(async (objectKey, opts, cmd) => {
+// src/commands/db/import.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { basename as basename4 } from "path";
+function registerDbImportCommand(dbCmd2) {
+  dbCmd2.command("import <file>").description("Import database from a local SQL file").option("--truncate", "Truncate existing tables before import").action(async (file, opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
       const config = getProjectConfig();
       if (!config) throw new ProjectNotLinkedError();
-      const bucketName = opts.bucket;
-      const url = `${config.oss_host}/api/storage/buckets/${encodeURIComponent(bucketName)}/objects/${encodeURIComponent(objectKey)}`;
-      const res = await fetch(url, {
+      const fileContent = readFileSync3(file);
+      const fileName = basename4(file);
+      const formData = new FormData();
+      formData.append("file", new Blob([fileContent]), fileName);
+      if (opts.truncate) {
+        formData.append("truncate", "true");
+      }
+      const res = await fetch(`${config.oss_host}/api/database/advance/import`, {
+        method: "POST",
         headers: {
           Authorization: `Bearer ${config.api_key}`
-        }
+        },
+        body: formData
       });
       if (!res.ok) {
         const err = await res.json().catch(() => ({}));
-        throw new CLIError(err.error ?? `Download failed: ${res.status}`);
+        throw new CLIError(err.error ?? `Import failed: ${res.status}`);
       }
-      const buffer = Buffer.from(await res.arrayBuffer());
-      const outputPath = opts.output ?? join4(process.cwd(), basename3(objectKey));
-      writeFileSync3(outputPath, buffer);
+      const data = await res.json();
       if (json) {
-        outputJson({ success: true, path: outputPath, size: buffer.length });
+        outputJson(data);
       } else {
-        outputSuccess(`Downloaded "${objectKey}" to ${outputPath} (${buffer.length} bytes).`);
+        outputSuccess(`Imported ${data.filename} (${data.tables.length} tables, ${data.rowsImported} rows)`);
       }
     } catch (err) {
       handleError(err, json);
@@ -1748,54 +2154,77 @@ function registerStorageDownloadCommand(storageCmd2) {
   });
 }
 
-// src/commands/storage/create-bucket.ts
-function registerStorageCreateBucketCommand(storageCmd2) {
-  storageCmd2.command("create-bucket <name>").description("Create a new storage bucket").option("--public", "Make the bucket publicly accessible (default)").option("--private", "Make the bucket private").action(async (name, opts, cmd) => {
+// src/commands/records/list.ts
+function registerRecordsCommands(recordsCmd2) {
+  recordsCmd2.command("list <table>").description("List records from a table").option("--select <columns>", "Columns to select (comma-separated)").option("--filter <filter>", 'Filter expression (e.g. "name=eq.John")').option("--order <order>", 'Order by (e.g. "created_at.desc")').option("--limit <n>", "Limit number of records", parseInt).option("--offset <n>", "Offset for pagination", parseInt).action(async (table, opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const isPublic = !opts.private;
-      const res = await ossFetch("/api/storage/buckets", {
-        method: "POST",
-        body: JSON.stringify({ bucketName: name, isPublic })
-      });
+      const params = new URLSearchParams();
+      if (opts.select) params.set("select", opts.select);
+      if (opts.filter) params.set(opts.filter.split("=")[0], opts.filter.split("=").slice(1).join("="));
+      if (opts.order) params.set("order", opts.order);
+      if (opts.limit) params.set("limit", String(opts.limit));
+      if (opts.offset) params.set("offset", String(opts.offset));
+      const query = params.toString();
+      const path5 = `/api/database/records/${encodeURIComponent(table)}${query ? `?${query}` : ""}`;
+      const res = await ossFetch(path5);
       const data = await res.json();
+      const records = data.data ?? [];
       if (json) {
         outputJson(data);
       } else {
-        outputSuccess(`Bucket "${name}" created (${isPublic ? "public" : "private"}).`);
+        if (records.length === 0) {
+          console.log("No records found.");
+          return;
+        }
+        const headers = Object.keys(records[0]);
+        outputTable(
+          headers,
+          records.map((r) => headers.map((h) => {
+            const val = r[h];
+            if (val === null || val === void 0) return "";
+            if (typeof val === "object") return JSON.stringify(val);
+            return String(val);
+          }))
+        );
+        console.log(`${records.length} record(s).`);
       }
-      await reportCliUsage("cli.storage.create-bucket", true);
     } catch (err) {
-      await reportCliUsage("cli.storage.create-bucket", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/storage/delete-bucket.ts
-import * as clack8 from "@clack/prompts";
-function registerStorageDeleteBucketCommand(storageCmd2) {
-  storageCmd2.command("delete-bucket <name>").description("Delete a storage bucket and all its objects").action(async (name, _opts, cmd) => {
-    const { json, yes } = getRootOpts(cmd);
+// src/commands/records/create.ts
+function registerRecordsCreateCommand(recordsCmd2) {
+  recordsCmd2.command("create <table>").description("Create record(s) in a table").option("--data <json>", "JSON data to insert (object or array of objects)").action(async (table, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      if (!yes && !json) {
-        const confirm8 = await clack8.confirm({
-          message: `Delete bucket "${name}" and all its objects? This cannot be undone.`
-        });
-        if (!confirm8 || clack8.isCancel(confirm8)) {
-          process.exit(0);
-        }
+      if (!opts.data) {
+        throw new CLIError(`--data is required. Example: --data '{"name":"John"}'`);
       }
-      const res = await ossFetch(`/api/storage/buckets/${encodeURIComponent(name)}`, {
-        method: "DELETE"
-      });
+      let records;
+      try {
+        const parsed = JSON.parse(opts.data);
+        records = Array.isArray(parsed) ? parsed : [parsed];
+      } catch {
+        throw new CLIError("Invalid JSON in --data. Provide a JSON object or array.");
+      }
+      const res = await ossFetch(
+        `/api/database/records/${encodeURIComponent(table)}?return=representation`,
+        {
+          method: "POST",
+          body: JSON.stringify(records)
+        }
+      );
       const data = await res.json();
       if (json) {
         outputJson(data);
       } else {
-        outputSuccess(`Bucket "${name}" deleted.`);
+        const created = data.data ?? [];
+        outputSuccess(`Created ${created.length || records.length} record(s) in "${table}".`);
       }
     } catch (err) {
       handleError(err, json);
@@ -1803,749 +2232,499 @@ function registerStorageDeleteBucketCommand(storageCmd2) {
   });
 }
 
-// src/commands/storage/list-objects.ts
-function formatSize(bytes) {
-  if (bytes < 1024) return `${bytes} B`;
-  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
-  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
-}
-function registerStorageListObjectsCommand(storageCmd2) {
-  storageCmd2.command("list-objects <bucket>").description("List objects in a storage bucket").option("--limit <n>", "Maximum number of objects to return", "100").option("--offset <n>", "Number of objects to skip", "0").option("--prefix <prefix>", "Filter objects by key prefix").option("--search <term>", "Search objects by key (partial match)").option("--sort <field>", "Sort by field: key, size, uploadedAt (default: key)").action(async (bucket, opts, cmd) => {
+// src/commands/records/update.ts
+function registerRecordsUpdateCommand(recordsCmd2) {
+  recordsCmd2.command("update <table>").description("Update records in a table matching a filter").option("--filter <filter>", 'Filter expression (e.g. "id=eq.123")').option("--data <json>", "JSON data to update").action(async (table, opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
+      if (!opts.filter) {
+        throw new CLIError("--filter is required to prevent accidental updates to all rows.");
+      }
+      if (!opts.data) {
+        throw new CLIError(`--data is required. Example: --data '{"name":"Jane"}'`);
+      }
+      let body;
+      try {
+        body = JSON.parse(opts.data);
+      } catch {
+        throw new CLIError("Invalid JSON in --data.");
+      }
       const params = new URLSearchParams();
-      params.set("limit", opts.limit);
-      params.set("offset", opts.offset);
-      if (opts.prefix) params.set("prefix", opts.prefix);
-      if (opts.search) params.set("search", opts.search);
+      params.set(opts.filter.split("=")[0], opts.filter.split("=").slice(1).join("="));
+      params.set("return", "representation");
       const res = await ossFetch(
-        `/api/storage/buckets/${encodeURIComponent(bucket)}/objects?${params.toString()}`
+        `/api/database/records/${encodeURIComponent(table)}?${params}`,
+        {
+          method: "PATCH",
+          body: JSON.stringify(body)
+        }
       );
-      const raw = await res.json();
-      const objects = Array.isArray(raw) ? raw : raw.data ?? [];
-      const sortField = opts.sort ?? "key";
-      objects.sort((a, b) => {
-        if (sortField === "size") return a.size - b.size;
-        if (sortField === "uploadedAt") return a.uploadedAt.localeCompare(b.uploadedAt);
-        return a.key.localeCompare(b.key);
-      });
+      const data = await res.json();
       if (json) {
-        outputJson(raw);
-      } else {
-        if (objects.length === 0) {
-          console.log(`No objects found in bucket "${bucket}".`);
-          return;
-        }
-        const total = raw.pagination?.total;
-        if (total !== void 0) {
-          console.log(`Showing ${objects.length} of ${total} objects:
-`);
-        }
-        outputTable(
-          ["Key", "Size", "Type", "Uploaded At"],
-          objects.map((o) => [
-            o.key,
-            formatSize(o.size),
-            o.mimeType ?? "-",
-            o.uploadedAt
-          ])
-        );
-      }
-      await reportCliUsage("cli.storage.list-objects", true);
-    } catch (err) {
-      await reportCliUsage("cli.storage.list-objects", false);
-      handleError(err, json);
-    }
-  });
-}
-
-// src/commands/create.ts
-import { exec as exec2 } from "child_process";
-import { tmpdir } from "os";
-import { promisify as promisify2 } from "util";
-import * as fs3 from "fs/promises";
-import * as path3 from "path";
-import * as clack10 from "@clack/prompts";
-
-// src/lib/env.ts
-import * as fs from "fs/promises";
-import * as path from "path";
-async function readEnvFile(cwd) {
-  const candidates = [".env.local", ".env.production", ".env"];
-  for (const name of candidates) {
-    const filePath = path.join(cwd, name);
-    const exists = await fs.stat(filePath).catch(() => null);
-    if (!exists) continue;
-    const content = await fs.readFile(filePath, "utf-8");
-    const vars = [];
-    for (const line of content.split("\n")) {
-      const trimmed = line.trim();
-      if (!trimmed || trimmed.startsWith("#")) continue;
-      const eqIndex = trimmed.indexOf("=");
-      if (eqIndex === -1) continue;
-      const key = trimmed.slice(0, eqIndex).trim();
-      let value = trimmed.slice(eqIndex + 1).trim();
-      if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
-        value = value.slice(1, -1);
-      }
-      if (key) vars.push({ key, value });
-    }
-    return vars;
-  }
-  return [];
-}
-
-// src/lib/analytics.ts
-import { PostHog } from "posthog-node";
-var POSTHOG_API_KEY = "phc_ueV1ii62wdBTkH7E70ugyeqHIHu8dFDdjs0qq3TZhJz";
-var POSTHOG_HOST = process.env.POSTHOG_HOST || "https://us.i.posthog.com";
-var client = null;
-function getClient() {
-  if (!POSTHOG_API_KEY) return null;
-  if (!client) {
-    client = new PostHog(POSTHOG_API_KEY, { host: POSTHOG_HOST });
-  }
-  return client;
-}
-function captureEvent(distinctId, event, properties) {
-  try {
-    getClient()?.capture({ distinctId, event, properties });
-  } catch {
-  }
-}
-function trackDiagnose(subcommand, config) {
-  captureEvent(config.project_id, "cli_diagnose_invoked", {
-    subcommand,
-    project_id: config.project_id,
-    project_name: config.project_name,
-    org_id: config.org_id,
-    region: config.region,
-    oss_mode: config.project_id === "oss-project"
+        outputJson(data);
+      } else {
+        const updated = data.data ?? [];
+        outputSuccess(`Updated ${updated.length} record(s) in "${table}".`);
+      }
+    } catch (err) {
+      handleError(err, json);
+    }
   });
 }
-async function shutdownAnalytics() {
-  try {
-    if (client) await client.shutdown();
-  } catch {
-  }
-}
 
-// src/commands/deployments/deploy.ts
-import * as path2 from "path";
-import * as fs2 from "fs/promises";
-import * as clack9 from "@clack/prompts";
-import archiver from "archiver";
-var POLL_INTERVAL_MS = 5e3;
-var POLL_TIMEOUT_MS = 3e5;
-var EXCLUDE_PATTERNS = [
-  "node_modules",
-  ".git",
-  ".next",
-  ".env",
-  ".env.local",
-  "dist",
-  "build",
-  ".DS_Store",
-  ".insforge",
-  // IDE and AI agent configs
-  ".claude",
-  ".agents",
-  ".augment",
-  ".kilocode",
-  ".kiro",
-  ".qoder",
-  ".qwen",
-  ".roo",
-  ".trae",
-  ".windsurf",
-  ".vercel",
-  ".turbo",
-  ".cache",
-  "skills",
-  "coverage"
-];
-function shouldExclude(name) {
-  const normalized = name.replace(/\\/g, "/");
-  for (const pattern of EXCLUDE_PATTERNS) {
-    if (normalized === pattern || normalized.startsWith(pattern + "/") || normalized.endsWith("/" + pattern) || normalized.includes("/" + pattern + "/")) {
-      return true;
+// src/commands/records/delete.ts
+function registerRecordsDeleteCommand(recordsCmd2) {
+  recordsCmd2.command("delete <table>").description("Delete records from a table matching a filter").option("--filter <filter>", 'Filter expression (e.g. "id=eq.123")').action(async (table, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      if (!opts.filter) {
+        throw new CLIError("--filter is required to prevent accidental deletion of all rows.");
+      }
+      const params = new URLSearchParams();
+      params.set(opts.filter.split("=")[0], opts.filter.split("=").slice(1).join("="));
+      params.set("return", "representation");
+      const res = await ossFetch(
+        `/api/database/records/${encodeURIComponent(table)}?${params}`,
+        { method: "DELETE" }
+      );
+      const data = await res.json();
+      if (json) {
+        outputJson(data);
+      } else {
+        const deleted = data.data ?? [];
+        outputSuccess(`Deleted ${deleted.length} record(s) from "${table}".`);
+      }
+    } catch (err) {
+      handleError(err, json);
     }
-  }
-  if (normalized.endsWith(".log")) return true;
-  return false;
-}
-async function createZipBuffer(sourceDir) {
-  return new Promise((resolve2, reject) => {
-    const archive = archiver("zip", { zlib: { level: 9 } });
-    const chunks = [];
-    archive.on("data", (chunk) => chunks.push(chunk));
-    archive.on("end", () => resolve2(Buffer.concat(chunks)));
-    archive.on("error", (err) => reject(err));
-    archive.directory(sourceDir, false, (entry) => {
-      if (shouldExclude(entry.name)) return false;
-      return entry;
-    });
-    void archive.finalize();
   });
 }
-async function deployProject(opts) {
-  const { sourceDir, startBody = {}, spinner: s } = opts;
-  s?.start("Creating deployment...");
-  const createRes = await ossFetch("/api/deployments", { method: "POST" });
-  const { id: deploymentId, uploadUrl, uploadFields } = await createRes.json();
-  s?.message("Compressing source files...");
-  const zipBuffer = await createZipBuffer(sourceDir);
-  s?.message("Uploading...");
-  const formData = new FormData();
-  for (const [key, value] of Object.entries(uploadFields)) {
-    formData.append(key, value);
-  }
-  formData.append(
-    "file",
-    new Blob([zipBuffer], { type: "application/zip" }),
-    "deployment.zip"
-  );
-  const uploadRes = await fetch(uploadUrl, { method: "POST", body: formData });
-  if (!uploadRes.ok) {
-    const uploadErr = await uploadRes.text();
-    throw new CLIError(`Failed to upload: ${uploadErr}`);
-  }
-  s?.message("Starting deployment...");
-  const startRes = await ossFetch(`/api/deployments/${deploymentId}/start`, {
-    method: "POST",
-    body: JSON.stringify(startBody)
-  });
-  await startRes.json();
-  s?.message("Building and deploying...");
-  const startTime = Date.now();
-  let deployment = null;
-  while (Date.now() - startTime < POLL_TIMEOUT_MS) {
-    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+
+// src/commands/functions/list.ts
+function registerFunctionsCommands(functionsCmd2) {
+  functionsCmd2.command("list").description("List all edge functions").action(async (_opts, cmd) => {
+    const { json } = getRootOpts(cmd);
     try {
-      const statusRes = await ossFetch(`/api/deployments/${deploymentId}`);
-      deployment = await statusRes.json();
-      const status = deployment.status.toUpperCase();
-      if (status === "READY") {
-        break;
-      }
-      if (status === "ERROR" || status === "CANCELED") {
-        s?.stop("Deployment failed");
-        throw new CLIError(getDeploymentError(deployment.metadata) ?? `Deployment failed with status: ${deployment.status}`);
+      await requireAuth();
+      const res = await ossFetch("/api/functions");
+      const raw = await res.json();
+      const functions = Array.isArray(raw) ? raw : raw && typeof raw === "object" && "functions" in raw ? raw.functions ?? [] : [];
+      if (json) {
+        outputJson(raw);
+      } else {
+        if (functions.length === 0) {
+          console.log("No functions found.");
+          return;
+        }
+        outputTable(
+          ["Slug", "Name", "Status", "Created At"],
+          functions.map((f) => [
+            f.slug,
+            f.name ?? "-",
+            f.status ?? "-",
+            f.createdAt ? new Date(f.createdAt).toLocaleString() : "-"
+          ])
+        );
       }
-      const elapsed = Math.round((Date.now() - startTime) / 1e3);
-      s?.message(`Building and deploying... (${elapsed}s, status: ${deployment.status})`);
+      await reportCliUsage("cli.functions.list", true);
     } catch (err) {
-      if (err instanceof CLIError) throw err;
+      await reportCliUsage("cli.functions.list", false);
+      handleError(err, json);
     }
-  }
-  const isReady = deployment?.status.toUpperCase() === "READY";
-  const liveUrl = isReady ? deployment?.url ?? null : null;
-  return { deploymentId, deployment, isReady, liveUrl };
+  });
 }
-function registerDeploymentsDeployCommand(deploymentsCmd2) {
-  deploymentsCmd2.command("deploy [directory]").description("Deploy a frontend project to Vercel").option("--env <vars>", `Environment variables as JSON (e.g. '{"KEY":"value"}')`).option("--meta <meta>", "Deployment metadata as JSON").action(async (directory, opts, cmd) => {
+
+// src/commands/functions/deploy.ts
+import { readFileSync as readFileSync4, existsSync as existsSync3 } from "fs";
+import { join as join6 } from "path";
+function registerFunctionsDeployCommand(functionsCmd2) {
+  functionsCmd2.command("deploy <slug>").description("Deploy an edge function (create or update)").option("--file <path>", "Path to the function source file").option("--name <name>", "Function display name").option("--description <desc>", "Function description").action(async (slug, opts, cmd) => {
     const { json } = getRootOpts(cmd);
     try {
       await requireAuth();
-      const config = getProjectConfig();
-      if (!config) throw new ProjectNotLinkedError();
-      const sourceDir = path2.resolve(directory ?? ".");
-      const stats = await fs2.stat(sourceDir).catch(() => null);
-      if (!stats?.isDirectory()) {
-        throw new CLIError(`"${sourceDir}" is not a valid directory.`);
+      const filePath = opts.file ?? join6(process.cwd(), "insforge", "functions", slug, "index.ts");
+      if (!existsSync3(filePath)) {
+        throw new CLIError(
+          `Source file not found: ${filePath}
+Specify --file <path> or create ${join6("insforge", "functions", slug, "index.ts")}`
+        );
       }
-      const dirName = path2.basename(sourceDir);
-      if (EXCLUDE_PATTERNS.includes(dirName)) {
-        throw new CLIError(`"${dirName}" is an excluded directory and cannot be used as a deploy source. Please specify your project root or output directory instead.`);
+      const code = readFileSync4(filePath, "utf-8");
+      const name = opts.name ?? slug;
+      const description = opts.description ?? "";
+      let exists = false;
+      try {
+        await ossFetch(`/api/functions/${encodeURIComponent(slug)}`);
+        exists = true;
+      } catch {
+        exists = false;
       }
-      const s = !json ? clack9.spinner() : null;
-      const startBody = {};
-      if (opts.env) {
-        try {
-          const parsed = JSON.parse(opts.env);
-          if (Array.isArray(parsed)) {
-            startBody.envVars = parsed;
+      let res;
+      if (exists) {
+        res = await ossFetch(`/api/functions/${encodeURIComponent(slug)}`, {
+          method: "PUT",
+          body: JSON.stringify({ name, description, code })
+        });
+      } else {
+        res = await ossFetch("/api/functions", {
+          method: "POST",
+          body: JSON.stringify({ slug, name, description, code })
+        });
+      }
+      const result = await res.json();
+      const deployFailed = result.deployment?.status === "failed";
+      if (json) {
+        outputJson(result);
+      } else {
+        const action = exists ? "updation" : "creation";
+        const resultStatus = result.success ? "success" : "failed";
+        outputSuccess(`Function "${result.function.slug}" ${action} ${resultStatus}.`);
+        if (result.deployment) {
+          if (result.deployment.status === "success") {
+            console.log(`  Deployment: ${result.deployment.status}${result.deployment.url ? ` \u2192 ${result.deployment.url}` : ""}`);
           } else {
-            startBody.envVars = Object.entries(parsed).map(([key, value]) => ({ key, value }));
+            console.log(`  Deployment: ${result.deployment.status}`);
+            if (result.deployment.buildLogs?.length) {
+              console.log("  Build logs:");
+              for (const line of result.deployment.buildLogs) {
+                console.log(`    ${line}`);
+              }
+            }
           }
-        } catch {
-          throw new CLIError("Invalid --env JSON.");
         }
       }
-      if (opts.meta) {
-        try {
-          startBody.meta = JSON.parse(opts.meta);
-        } catch {
-          throw new CLIError("Invalid --meta JSON.");
-        }
+      if (deployFailed) throw new CLIError("Function deployment failed");
+      await reportCliUsage("cli.functions.deploy", true);
+    } catch (err) {
+      await reportCliUsage("cli.functions.deploy", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/functions/invoke.ts
+function registerFunctionsInvokeCommand(functionsCmd2) {
+  functionsCmd2.command("invoke <slug>").description("Invoke an edge function").option("--data <json>", "JSON body to send to the function").option("--method <method>", "HTTP method (GET, POST, PUT, PATCH, DELETE)", "POST").action(async (slug, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const config = getProjectConfig();
+      if (!config) throw new ProjectNotLinkedError();
+      const method = opts.method.toUpperCase();
+      const headers = {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${config.api_key}`
+      };
+      const fetchOpts = { method, headers };
+      if (opts.data && ["POST", "PUT", "PATCH"].includes(method)) {
+        fetchOpts.body = opts.data;
       }
-      const result = await deployProject({ sourceDir, startBody, spinner: s });
-      if (result.isReady) {
-        s?.stop("Deployment complete");
+      const res = await fetch(
+        `${config.oss_host}/functions/${encodeURIComponent(slug)}`,
+        fetchOpts
+      );
+      const contentType = res.headers.get("content-type") ?? "";
+      const status = res.status;
+      if (contentType.includes("application/json")) {
+        const data = await res.json();
         if (json) {
-          outputJson(result.deployment);
+          outputJson({ status, body: data });
         } else {
-          if (result.liveUrl) {
-            clack9.log.success(`Live at: ${result.liveUrl}`);
-          }
-          clack9.log.info(`Deployment ID: ${result.deploymentId}`);
+          console.log(JSON.stringify(data, null, 2));
         }
       } else {
-        s?.stop("Deployment is still building");
-        if (json) {
-          outputJson({ id: result.deploymentId, status: result.deployment?.status ?? "building", timedOut: true });
-        } else {
-          clack9.log.info(`Deployment ID: ${result.deploymentId}`);
-          clack9.log.warn("Deployment did not finish within 5 minutes.");
-          clack9.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
-        }
+        const text4 = await res.text();
+        console.log(text4);
+      }
+      if (status >= 400) {
+        throw new CLIError(`HTTP ${status}`, 1, "HTTP_ERROR");
       }
-      await reportCliUsage("cli.deployments.deploy", true);
     } catch (err) {
-      await reportCliUsage("cli.deployments.deploy", false);
       handleError(err, json);
     }
   });
 }
 
-// src/commands/create.ts
-var execAsync2 = promisify2(exec2);
-function buildOssHost2(appkey, region) {
-  return `https://${appkey}.${region}.insforge.app`;
-}
-async function waitForProjectActive(projectId, apiUrl, timeoutMs = 12e4) {
-  const start = Date.now();
-  while (Date.now() - start < timeoutMs) {
-    const project = await getProject(projectId, apiUrl);
-    if (project.status === "active") return;
-    await new Promise((r) => setTimeout(r, 3e3));
-  }
-  throw new CLIError("Project creation timed out. Check the dashboard for status.");
-}
-var INSFORGE_BANNER = [
-  "\u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
-  "\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D",
-  "\u2588\u2588\u2551\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2557  ",
-  "\u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551\u255A\u2550\u2550\u2550\u2550\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  \u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551   \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u255D  ",
-  "\u2588\u2588\u2551\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551\u2588\u2588\u2551     \u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551  \u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
-  "\u255A\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D      \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D"
-];
-async function animateBanner() {
-  const isTTY = process.stderr.isTTY;
-  if (!isTTY || process.env.CI) {
-    for (const line of INSFORGE_BANNER) {
-      process.stderr.write(`${line}
-`);
-    }
-    process.stderr.write("\n");
-    return;
-  }
-  const totalLines = INSFORGE_BANNER.length;
-  const maxLen = Math.max(...INSFORGE_BANNER.map((l) => l.length));
-  const cols = process.stderr.columns ?? 0;
-  if (cols > 0 && cols < maxLen) {
-    for (const line of INSFORGE_BANNER) {
-      process.stderr.write(`\x1B[97m${line}\x1B[0m
-`);
+// src/commands/functions/code.ts
+function registerFunctionsCodeCommand(functionsCmd2) {
+  functionsCmd2.command("code <slug>").description("Fetch and display the source code of an edge function").action(async (slug, _opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const res = await ossFetch(`/api/functions/${encodeURIComponent(slug)}`);
+      const fn = await res.json();
+      if (json) {
+        outputJson(fn);
+      } else {
+        console.log(`Function: ${fn.name} (${fn.slug})`);
+        console.log(`Status:   ${fn.status}`);
+        if (fn.description) console.log(`Desc:     ${fn.description}`);
+        if (fn.deployed_at) console.log(`Deployed: ${fn.deployed_at}`);
+        console.log("---");
+        console.log(fn.code);
+      }
+    } catch (err) {
+      handleError(err, json);
     }
-    process.stderr.write("\n");
-    return;
-  }
-  const REVEAL_STEPS = 10;
-  const REVEAL_DELAY = 30;
-  for (let lineIdx = 0; lineIdx < totalLines; lineIdx++) {
-    const line = INSFORGE_BANNER[lineIdx];
-    for (let step = 0; step <= REVEAL_STEPS; step++) {
-      const pos = Math.floor(step / REVEAL_STEPS * line.length);
-      let rendered = "";
-      for (let i = 0; i < line.length; i++) {
-        if (i < pos) {
-          rendered += `\x1B[97m${line[i]}\x1B[0m`;
-        } else if (i === pos) {
-          rendered += `\x1B[1;37m${line[i]}\x1B[0m`;
-        } else {
-          rendered += `\x1B[90m${line[i]}\x1B[0m`;
+  });
+}
+
+// src/commands/functions/delete.ts
+import * as clack9 from "@clack/prompts";
+function registerFunctionsDeleteCommand(functionsCmd2) {
+  functionsCmd2.command("delete <slug>").description("Delete an edge function").action(async (slug, _opts, cmd) => {
+    const { json, yes } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      if (!yes && !json) {
+        const confirmed = await clack9.confirm({
+          message: `Delete function "${slug}"? This cannot be undone.`
+        });
+        if (clack9.isCancel(confirmed) || !confirmed) {
+          clack9.log.info("Cancelled.");
+          return;
         }
       }
-      process.stderr.write(`\r${rendered}`);
-      await new Promise((r) => setTimeout(r, REVEAL_DELAY));
-    }
-    process.stderr.write("\n");
-  }
-  const SHIMMER_STEPS = 16;
-  const SHIMMER_DELAY = 40;
-  const SHIMMER_WIDTH = 4;
-  for (let step = 0; step < SHIMMER_STEPS; step++) {
-    const shimmerPos = Math.floor(step / SHIMMER_STEPS * (maxLen + SHIMMER_WIDTH));
-    process.stderr.write(`\x1B[${totalLines}A`);
-    for (const line of INSFORGE_BANNER) {
-      let rendered = "";
-      for (let i = 0; i < line.length; i++) {
-        const dist = Math.abs(i - shimmerPos);
-        if (dist === 0) {
-          rendered += `\x1B[1;97m${line[i]}\x1B[0m`;
-        } else if (dist <= SHIMMER_WIDTH) {
-          rendered += `\x1B[37m${line[i]}\x1B[0m`;
+      const res = await ossFetch(`/api/functions/${encodeURIComponent(slug)}`, {
+        method: "DELETE"
+      });
+      const result = await res.json();
+      if (json) {
+        outputJson(result);
+      } else {
+        if (result.success) {
+          outputSuccess(`Function "${slug}" deleted successfully.`);
         } else {
-          rendered += `\x1B[90m${line[i]}\x1B[0m`;
+          outputSuccess(`Failed to delete function "${slug}".`);
         }
       }
-      process.stderr.write(`${rendered}
-`);
-    }
-    await new Promise((r) => setTimeout(r, SHIMMER_DELAY));
-  }
-  process.stderr.write(`\x1B[${totalLines}A`);
-  for (const line of INSFORGE_BANNER) {
-    process.stderr.write(`\x1B[97m${line}\x1B[0m
-`);
-  }
-  process.stderr.write("\n");
-}
-function getDefaultProjectName() {
-  const dirName = path3.basename(process.cwd());
-  const sanitized = dirName.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
-  return sanitized.length >= 2 ? sanitized : "";
-}
-async function copyDir(src, dest) {
-  const entries = await fs3.readdir(src, { withFileTypes: true });
-  for (const entry of entries) {
-    const srcPath = path3.join(src, entry.name);
-    const destPath = path3.join(dest, entry.name);
-    if (entry.isDirectory()) {
-      await fs3.mkdir(destPath, { recursive: true });
-      await copyDir(srcPath, destPath);
-    } else {
-      await fs3.copyFile(srcPath, destPath);
+      await reportCliUsage("cli.functions.delete", true);
+    } catch (err) {
+      await reportCliUsage("cli.functions.delete", false);
+      handleError(err, json);
     }
-  }
+  });
 }
-function registerCreateCommand(program2) {
-  program2.command("create").description("Create a new InsForge project").option("--name <name>", "Project name").option("--org-id <id>", "Organization ID").option("--region <region>", "Deployment region (us-east, us-west, eu-central, ap-southeast)").option("--template <template>", "Template to use: react, nextjs, chatbot, crm, e-commerce, or empty").action(async (opts, cmd) => {
-    const { json, apiUrl } = getRootOpts(cmd);
+
+// src/commands/storage/buckets.ts
+function registerStorageBucketsCommand(storageCmd2) {
+  storageCmd2.command("buckets").description("List all storage buckets").action(async (_opts, cmd) => {
+    const { json } = getRootOpts(cmd);
     try {
-      await requireAuth(apiUrl, false);
-      if (!json) {
-        await animateBanner();
-        clack10.intro("Let's build something great");
-      }
-      let orgId = opts.orgId;
-      if (!orgId) {
-        const orgs = await listOrganizations(apiUrl);
-        if (orgs.length === 0) {
-          throw new CLIError("No organizations found.");
-        }
-        if (json) {
-          throw new CLIError("Specify --org-id in JSON mode.");
+      await requireAuth();
+      const res = await ossFetch("/api/storage/buckets");
+      const raw = await res.json();
+      const buckets = Array.isArray(raw) ? raw : raw && typeof raw === "object" && "buckets" in raw ? raw.buckets ?? [] : [];
+      if (json) {
+        outputJson(raw);
+      } else {
+        if (buckets.length === 0) {
+          console.log("No buckets found.");
+          return;
         }
-        const selected = await clack10.select({
-          message: "Select an organization:",
-          options: orgs.map((o) => ({
-            value: o.id,
-            label: o.name
-          }))
-        });
-        if (clack10.isCancel(selected)) process.exit(0);
-        orgId = selected;
+        outputTable(
+          ["Bucket Name", "Public"],
+          buckets.map((b) => [b.name, b.public ? "Yes" : "No"])
+        );
       }
-      const globalConfig = getGlobalConfig();
-      globalConfig.default_org_id = orgId;
-      saveGlobalConfig(globalConfig);
-      let projectName = opts.name;
-      if (!projectName) {
-        if (json) throw new CLIError("--name is required in JSON mode.");
-        const defaultName = getDefaultProjectName();
-        const name = await clack10.text({
-          message: "Project name:",
-          ...defaultName ? { initialValue: defaultName } : {},
-          validate: (v) => v.length >= 2 ? void 0 : "Name must be at least 2 characters"
-        });
-        if (clack10.isCancel(name)) process.exit(0);
-        projectName = name;
+      await reportCliUsage("cli.storage.buckets", true);
+    } catch (err) {
+      await reportCliUsage("cli.storage.buckets", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/storage/upload.ts
+import { readFileSync as readFileSync5, existsSync as existsSync4 } from "fs";
+import { basename as basename5 } from "path";
+function registerStorageUploadCommand(storageCmd2) {
+  storageCmd2.command("upload <file>").description("Upload a file to a storage bucket").requiredOption("--bucket <name>", "Target bucket name").option("--key <objectKey>", "Object key (defaults to filename)").action(async (file, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const config = getProjectConfig();
+      if (!config) throw new ProjectNotLinkedError();
+      if (!existsSync4(file)) {
+        throw new CLIError(`File not found: ${file}`);
       }
-      projectName = path3.basename(projectName).replace(/[^a-zA-Z0-9._-]/g, "-").replace(/\.+/g, ".");
-      if (projectName.length < 2 || projectName === "." || projectName === "..") {
-        throw new CLIError("Project name must be at least 2 safe characters (letters, numbers, hyphens).");
+      const fileContent = readFileSync5(file);
+      const objectKey = opts.key ?? basename5(file);
+      const bucketName = opts.bucket;
+      const formData = new FormData();
+      const blob = new Blob([fileContent]);
+      formData.append("file", blob, objectKey);
+      const url = `${config.oss_host}/api/storage/buckets/${encodeURIComponent(bucketName)}/objects/${encodeURIComponent(objectKey)}`;
+      const res = await fetch(url, {
+        method: "PUT",
+        headers: {
+          Authorization: `Bearer ${config.api_key}`
+        },
+        body: formData
+      });
+      if (!res.ok) {
+        const err = await res.json().catch(() => ({}));
+        throw new CLIError(err.error ?? `Upload failed: ${res.status}`);
       }
-      const validTemplates = ["react", "nextjs", "chatbot", "crm", "e-commerce", "empty"];
-      let template = opts.template;
-      if (template && !validTemplates.includes(template)) {
-        throw new CLIError(`Invalid template "${template}". Valid options: ${validTemplates.join(", ")}`);
+      const data = await res.json();
+      if (json) {
+        outputJson(data);
+      } else {
+        outputSuccess(`Uploaded "${basename5(file)}" to bucket "${bucketName}".`);
       }
-      if (!template) {
-        if (json) {
-          template = "empty";
-        } else {
-          const approach = await clack10.select({
-            message: "How would you like to start?",
-            options: [
-              { value: "blank", label: "Blank project", hint: "Start from scratch with .env.local ready" },
-              { value: "template", label: "Start from a template", hint: "Pre-built starter apps" }
-            ]
-          });
-          if (clack10.isCancel(approach)) process.exit(0);
-          captureEvent(orgId, "create_approach_selected", {
-            approach
-          });
-          if (approach === "blank") {
-            template = "empty";
-          } else {
-            const selected = await clack10.select({
-              message: "Choose a starter template:",
-              options: [
-                { value: "react", label: "Web app template with React" },
-                { value: "nextjs", label: "Web app template with Next.js" },
-                { value: "chatbot", label: "AI Chatbot with Next.js" },
-                { value: "crm", label: "CRM with Next.js" },
-                { value: "e-commerce", label: "E-Commerce store with Next.js" }
-              ]
-            });
-            if (clack10.isCancel(selected)) process.exit(0);
-            template = selected;
-          }
+    } catch (err) {
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/storage/download.ts
+import { writeFileSync as writeFileSync3 } from "fs";
+import { join as join7, basename as basename6 } from "path";
+function registerStorageDownloadCommand(storageCmd2) {
+  storageCmd2.command("download <objectKey>").description("Download a file from a storage bucket").requiredOption("--bucket <name>", "Source bucket name").option("--output <path>", "Output file path (defaults to current directory)").action(async (objectKey, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const config = getProjectConfig();
+      if (!config) throw new ProjectNotLinkedError();
+      const bucketName = opts.bucket;
+      const url = `${config.oss_host}/api/storage/buckets/${encodeURIComponent(bucketName)}/objects/${encodeURIComponent(objectKey)}`;
+      const res = await fetch(url, {
+        headers: {
+          Authorization: `Bearer ${config.api_key}`
         }
-      }
-      captureEvent(orgId, "template_selected", {
-        template,
-        approach: template === "empty" ? "blank" : "template"
       });
-      const s = !json ? clack10.spinner() : null;
-      s?.start("Creating project...");
-      const project = await createProject(orgId, projectName, opts.region, apiUrl);
-      s?.message("Waiting for project to become active...");
-      await waitForProjectActive(project.id, apiUrl);
-      const apiKey = await getProjectApiKey(project.id, apiUrl);
-      const projectConfig = {
-        project_id: project.id,
-        project_name: project.name,
-        org_id: project.organization_id,
-        appkey: project.appkey,
-        region: project.region,
-        api_key: apiKey,
-        oss_host: buildOssHost2(project.appkey, project.region)
-      };
-      saveProjectConfig(projectConfig);
-      s?.stop(`Project "${project.name}" created and linked`);
-      const hasTemplate = template !== "empty";
-      const githubTemplates = ["chatbot", "crm", "e-commerce", "nextjs", "react"];
-      if (githubTemplates.includes(template)) {
-        await downloadGitHubTemplate(template, projectConfig, json);
-      } else if (hasTemplate) {
-        await downloadTemplate(template, projectConfig, projectName, json, apiUrl);
+      if (!res.ok) {
+        const err = await res.json().catch(() => ({}));
+        throw new CLIError(err.error ?? `Download failed: ${res.status}`);
+      }
+      const buffer = Buffer.from(await res.arrayBuffer());
+      const outputPath = opts.output ?? join7(process.cwd(), basename6(objectKey));
+      writeFileSync3(outputPath, buffer);
+      if (json) {
+        outputJson({ success: true, path: outputPath, size: buffer.length });
       } else {
-        try {
-          const anonKey = await getAnonKey();
-          if (!anonKey) {
-            if (!json) clack10.log.warn("Could not retrieve anon key. You can add it to .env.local manually.");
-          } else {
-            const envPath = path3.join(process.cwd(), ".env.local");
-            const envContent = [
-              "# InsForge",
-              `NEXT_PUBLIC_INSFORGE_URL=${projectConfig.oss_host}`,
-              `NEXT_PUBLIC_INSFORGE_ANON_KEY=${anonKey}`,
-              ""
-            ].join("\n");
-            await fs3.writeFile(envPath, envContent, { flag: "wx" });
-            if (!json) {
-              clack10.log.success("Created .env.local with your InsForge credentials");
-            }
-          }
-        } catch (err) {
-          const error = err;
-          if (!json) {
-            if (error.code === "EEXIST") {
-              clack10.log.warn(".env.local already exists; skipping InsForge key seeding.");
-            } else {
-              clack10.log.warn(`Failed to create .env.local: ${error.message}`);
-            }
-          }
-        }
+        outputSuccess(`Downloaded "${objectKey}" to ${outputPath} (${buffer.length} bytes).`);
       }
-      await installSkills(json);
-      await reportCliUsage("cli.create", true, 6);
-      if (hasTemplate) {
-        const installSpinner = !json ? clack10.spinner() : null;
-        installSpinner?.start("Installing dependencies...");
-        try {
-          await execAsync2("npm install", { cwd: process.cwd(), maxBuffer: 10 * 1024 * 1024 });
-          installSpinner?.stop("Dependencies installed");
-        } catch (err) {
-          installSpinner?.stop("Failed to install dependencies");
-          if (!json) {
-            clack10.log.warn(`npm install failed: ${err.message}`);
-            clack10.log.info("Run `npm install` manually to install dependencies.");
-          }
-        }
+    } catch (err) {
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/storage/create-bucket.ts
+function registerStorageCreateBucketCommand(storageCmd2) {
+  storageCmd2.command("create-bucket <name>").description("Create a new storage bucket").option("--public", "Make the bucket publicly accessible (default)").option("--private", "Make the bucket private").action(async (name, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const isPublic = !opts.private;
+      const res = await ossFetch("/api/storage/buckets", {
+        method: "POST",
+        body: JSON.stringify({ bucketName: name, isPublic })
+      });
+      const data = await res.json();
+      if (json) {
+        outputJson(data);
+      } else {
+        outputSuccess(`Bucket "${name}" created (${isPublic ? "public" : "private"}).`);
       }
-      let liveUrl = null;
-      if (hasTemplate && !json) {
-        const shouldDeploy = await clack10.confirm({
-          message: "Would you like to deploy now?"
+      await reportCliUsage("cli.storage.create-bucket", true);
+    } catch (err) {
+      await reportCliUsage("cli.storage.create-bucket", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/storage/delete-bucket.ts
+import * as clack10 from "@clack/prompts";
+function registerStorageDeleteBucketCommand(storageCmd2) {
+  storageCmd2.command("delete-bucket <name>").description("Delete a storage bucket and all its objects").action(async (name, _opts, cmd) => {
+    const { json, yes } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      if (!yes && !json) {
+        const confirm8 = await clack10.confirm({
+          message: `Delete bucket "${name}" and all its objects? This cannot be undone.`
         });
-        if (!clack10.isCancel(shouldDeploy) && shouldDeploy) {
-          try {
-            const envVars = await readEnvFile(process.cwd());
-            const startBody = {};
-            if (envVars.length > 0) {
-              startBody.envVars = envVars;
-            }
-            const deploySpinner = clack10.spinner();
-            const result = await deployProject({
-              sourceDir: process.cwd(),
-              startBody,
-              spinner: deploySpinner
-            });
-            if (result.isReady) {
-              deploySpinner.stop("Deployment complete");
-              liveUrl = result.liveUrl;
-            } else {
-              deploySpinner.stop("Deployment is still building");
-              clack10.log.info(`Deployment ID: ${result.deploymentId}`);
-              clack10.log.warn("Deployment did not finish within 2 minutes.");
-              clack10.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
-            }
-          } catch (err) {
-            clack10.log.warn(`Deploy failed: ${err.message}`);
-          }
+        if (!confirm8 || clack10.isCancel(confirm8)) {
+          process.exit(0);
         }
       }
-      const dashboardUrl = `${getFrontendUrl()}/dashboard/project/${project.id}`;
+      const res = await ossFetch(`/api/storage/buckets/${encodeURIComponent(name)}`, {
+        method: "DELETE"
+      });
+      const data = await res.json();
       if (json) {
-        outputJson({
-          success: true,
-          project: { id: project.id, name: project.name, appkey: project.appkey, region: project.region },
-          template,
-          urls: {
-            dashboard: dashboardUrl,
-            ...liveUrl ? { liveSite: liveUrl } : {}
-          }
-        });
+        outputJson(data);
       } else {
-        clack10.log.step(`Dashboard: ${dashboardUrl}`);
-        if (liveUrl) {
-          clack10.log.success(`Live site: ${liveUrl}`);
-        }
-        clack10.outro("Done!");
+        outputSuccess(`Bucket "${name}" deleted.`);
       }
     } catch (err) {
       handleError(err, json);
-    } finally {
-      await shutdownAnalytics();
     }
   });
 }
-async function downloadTemplate(framework, projectConfig, projectName, json, _apiUrl) {
-  const s = !json ? clack10.spinner() : null;
-  s?.start("Downloading template...");
-  try {
-    const anonKey = await getAnonKey();
-    if (!anonKey) {
-      throw new Error("Failed to retrieve anon key from backend");
-    }
-    const tempDir = tmpdir();
-    const targetDir = projectName;
-    const templatePath = path3.join(tempDir, targetDir);
-    try {
-      await fs3.rm(templatePath, { recursive: true, force: true });
-    } catch {
-    }
-    const frame = framework === "nextjs" ? "nextjs" : "react";
-    const esc = (s2) => process.platform === "win32" ? `"${s2.replace(/"/g, '\\"')}"` : `'${s2.replace(/'/g, "'\\''")}'`;
-    const command = `npx --yes create-insforge-app@latest ${esc(targetDir)} --frame ${frame} --base-url ${esc(projectConfig.oss_host)} --anon-key ${esc(anonKey)} --skip-install`;
-    s?.message(`Running create-insforge-app (${frame})...`);
-    await execAsync2(command, {
-      maxBuffer: 10 * 1024 * 1024,
-      cwd: tempDir
-    });
-    s?.message("Copying template files...");
-    const cwd = process.cwd();
-    await copyDir(templatePath, cwd);
-    await fs3.rm(templatePath, { recursive: true, force: true }).catch(() => {
-    });
-    s?.stop("Template files downloaded");
-  } catch (err) {
-    s?.stop("Template download failed");
-    if (!json) {
-      clack10.log.warn(`Failed to download template: ${err.message}`);
-      clack10.log.info("You can manually set up the template later.");
-    }
-  }
+
+// src/commands/storage/list-objects.ts
+function formatSize(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
 }
-async function downloadGitHubTemplate(templateName, projectConfig, json) {
-  const s = !json ? clack10.spinner() : null;
-  s?.start(`Downloading ${templateName} template...`);
-  const tempDir = path3.join(tmpdir(), `insforge-template-${Date.now()}`);
-  try {
-    await fs3.mkdir(tempDir, { recursive: true });
-    await execAsync2(
-      "git clone --depth 1 https://github.com/InsForge/insforge-templates.git .",
-      { cwd: tempDir, maxBuffer: 10 * 1024 * 1024, timeout: 6e4 }
-    );
-    const templateDir = path3.join(tempDir, templateName);
-    const stat4 = await fs3.stat(templateDir).catch(() => null);
-    if (!stat4?.isDirectory()) {
-      throw new Error(`Template "${templateName}" not found in repository`);
-    }
-    s?.message("Copying template files...");
-    const cwd = process.cwd();
-    await copyDir(templateDir, cwd);
-    const envExamplePath = path3.join(cwd, ".env.example");
-    const envExampleExists = await fs3.stat(envExamplePath).catch(() => null);
-    if (envExampleExists) {
-      const anonKey = await getAnonKey();
-      const envExample = await fs3.readFile(envExamplePath, "utf-8");
-      const envContent = envExample.replace(
-        /^([A-Z][A-Z0-9_]*=)(.*)$/gm,
-        (_, prefix, _value) => {
-          const key = prefix.slice(0, -1);
-          if (/INSFORGE.*(URL|BASE_URL)$/.test(key)) return `${prefix}${projectConfig.oss_host}`;
-          if (/INSFORGE.*ANON_KEY$/.test(key)) return `${prefix}${anonKey}`;
-          if (key === "NEXT_PUBLIC_APP_URL") return `${prefix}https://${projectConfig.appkey}.insforge.site`;
-          return `${prefix}${_value}`;
-        }
+function registerStorageListObjectsCommand(storageCmd2) {
+  storageCmd2.command("list-objects <bucket>").description("List objects in a storage bucket").option("--limit <n>", "Maximum number of objects to return", "100").option("--offset <n>", "Number of objects to skip", "0").option("--prefix <prefix>", "Filter objects by key prefix").option("--search <term>", "Search objects by key (partial match)").option("--sort <field>", "Sort by field: key, size, uploadedAt (default: key)").action(async (bucket, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const params = new URLSearchParams();
+      params.set("limit", opts.limit);
+      params.set("offset", opts.offset);
+      if (opts.prefix) params.set("prefix", opts.prefix);
+      if (opts.search) params.set("search", opts.search);
+      const res = await ossFetch(
+        `/api/storage/buckets/${encodeURIComponent(bucket)}/objects?${params.toString()}`
       );
-      const envLocalPath = path3.join(cwd, ".env.local");
-      try {
-        await fs3.writeFile(envLocalPath, envContent, { flag: "wx" });
-      } catch (e) {
-        if (e.code === "EEXIST") {
-          if (!json) clack10.log.warn(".env.local already exists; skipping env seeding.");
-        } else {
-          throw e;
+      const raw = await res.json();
+      const objects = Array.isArray(raw) ? raw : raw.data ?? [];
+      const sortField = opts.sort ?? "key";
+      objects.sort((a, b) => {
+        if (sortField === "size") return a.size - b.size;
+        if (sortField === "uploadedAt") return a.uploadedAt.localeCompare(b.uploadedAt);
+        return a.key.localeCompare(b.key);
+      });
+      if (json) {
+        outputJson(raw);
+      } else {
+        if (objects.length === 0) {
+          console.log(`No objects found in bucket "${bucket}".`);
+          return;
         }
-      }
-    }
-    s?.stop(`${templateName} template downloaded`);
-    const migrationPath = path3.join(cwd, "migrations", "db_init.sql");
-    const migrationExists = await fs3.stat(migrationPath).catch(() => null);
-    if (migrationExists) {
-      const dbSpinner = !json ? clack10.spinner() : null;
-      dbSpinner?.start("Running database migrations...");
-      try {
-        const sql = await fs3.readFile(migrationPath, "utf-8");
-        await runRawSql(sql, true);
-        dbSpinner?.stop("Database migrations applied");
-      } catch (err) {
-        dbSpinner?.stop("Database migration failed");
-        if (!json) {
-          clack10.log.warn(`Migration failed: ${err.message}`);
-          clack10.log.info('You can run the migration manually: npx @insforge/cli db query --unrestricted "$(cat migrations/db_init.sql)"');
-        } else {
-          throw err;
+        const total = raw.pagination?.total;
+        if (total !== void 0) {
+          console.log(`Showing ${objects.length} of ${total} objects:
+`);
         }
+        outputTable(
+          ["Key", "Size", "Type", "Uploaded At"],
+          objects.map((o) => [
+            o.key,
+            formatSize(o.size),
+            o.mimeType ?? "-",
+            o.uploadedAt
+          ])
+        );
       }
+      await reportCliUsage("cli.storage.list-objects", true);
+    } catch (err) {
+      await reportCliUsage("cli.storage.list-objects", false);
+      handleError(err, json);
     }
-  } catch (err) {
-    s?.stop(`${templateName} template download failed`);
-    if (!json) {
-      clack10.log.warn(`Failed to download ${templateName} template: ${err.message}`);
-      clack10.log.info("You can manually clone from: https://github.com/InsForge/insforge-templates");
-    }
-  } finally {
-    await fs3.rm(tempDir, { recursive: true, force: true }).catch(() => {
-    });
-  }
+  });
 }
 
 // src/commands/info.ts
@@ -2883,8 +3062,8 @@ async function listDocs(json) {
     );
   }
 }
-async function fetchDoc(path4, label, json) {
-  const res = await ossFetch(path4);
+async function fetchDoc(path5, label, json) {
+  const res = await ossFetch(path5);
   const data = await res.json();
   const doc = data.data ?? data;
   if (json) {
@@ -3271,6 +3450,445 @@ function registerSchedulesLogsCommand(schedulesCmd2) {
   });
 }
 
+// src/commands/compute/list.ts
+function registerComputeListCommand(computeCmd2) {
+  computeCmd2.command("list").description("List all compute services").action(async (_opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const res = await ossFetch("/api/compute/services");
+      const raw = await res.json();
+      const services = Array.isArray(raw) ? raw : [];
+      if (json) {
+        outputJson(services);
+      } else {
+        if (services.length === 0) {
+          console.log("No compute services found.");
+          await reportCliUsage("cli.compute.list", true);
+          return;
+        }
+        outputTable(
+          ["Name", "Status", "Image", "CPU", "Memory", "Endpoint"],
+          services.map((s) => [
+            String(s.name ?? "-"),
+            String(s.status ?? "-"),
+            String(s.imageUrl ?? "-"),
+            String(s.cpu ?? "-"),
+            s.memory ? `${s.memory}MB` : "-",
+            String(s.endpointUrl ?? "-")
+          ])
+        );
+      }
+      await reportCliUsage("cli.compute.list", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.list", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/get.ts
+function registerComputeGetCommand(computeCmd2) {
+  computeCmd2.command("get <id>").description("Get details of a compute service").action(async (id, _opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const res = await ossFetch(`/api/compute/services/${encodeURIComponent(id)}`);
+      const service = await res.json();
+      if (json) {
+        outputJson(service);
+      } else {
+        outputInfo(`Name:      ${service.name}`);
+        outputInfo(`ID:        ${service.id}`);
+        outputInfo(`Status:    ${service.status}`);
+        outputInfo(`Image:     ${service.imageUrl}`);
+        outputInfo(`CPU:       ${service.cpu}`);
+        outputInfo(`Memory:    ${service.memory}MB`);
+        outputInfo(`Region:    ${service.region}`);
+        outputInfo(`Endpoint:  ${service.endpointUrl ?? "n/a"}`);
+        outputInfo(`Created:   ${service.createdAt}`);
+      }
+      await reportCliUsage("cli.compute.get", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.get", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/create.ts
+function registerComputeCreateCommand(computeCmd2) {
+  computeCmd2.command("create").description("Create and deploy a compute service").requiredOption("--name <name>", "Service name (DNS-safe, e.g. my-api)").requiredOption("--image <image>", "Docker image URL (e.g. nginx:alpine)").option("--port <port>", "Container port", "8080").option("--cpu <tier>", "CPU tier (shared-1x, shared-2x, performance-1x, performance-2x, performance-4x)", "shared-1x").option("--memory <mb>", "Memory in MB (256, 512, 1024, 2048, 4096, 8192)", "512").option("--region <region>", "Fly.io region", "iad").option("--env <json>", "Environment variables as JSON object").action(async (opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const body = {
+        name: opts.name,
+        imageUrl: opts.image,
+        port: Number(opts.port),
+        cpu: opts.cpu,
+        memory: Number(opts.memory),
+        region: opts.region
+      };
+      if (opts.env) {
+        try {
+          body.envVars = JSON.parse(opts.env);
+        } catch {
+          throw new CLIError("Invalid JSON for --env");
+        }
+      }
+      const res = await ossFetch("/api/compute/services", {
+        method: "POST",
+        body: JSON.stringify(body)
+      });
+      const service = await res.json();
+      if (json) {
+        outputJson(service);
+      } else {
+        outputSuccess(`Service "${service.name}" created [${service.status}]`);
+        if (service.endpointUrl) {
+          console.log(`  Endpoint: ${service.endpointUrl}`);
+        }
+      }
+      await reportCliUsage("cli.compute.create", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.create", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/update.ts
+function registerComputeUpdateCommand(computeCmd2) {
+  computeCmd2.command("update <id>").description("Update a compute service").option("--image <image>", "Docker image URL").option("--port <port>", "Container port").option("--cpu <tier>", "CPU tier").option("--memory <mb>", "Memory in MB").option("--region <region>", "Fly.io region").option("--env <json>", "Environment variables as JSON object").action(async (id, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const body = {};
+      if (opts.image) body.imageUrl = opts.image;
+      if (opts.port) {
+        if (!Number.isFinite(Number(opts.port))) {
+          throw new CLIError("Invalid value for --port: must be a number");
+        }
+        body.port = Number(opts.port);
+      }
+      if (opts.cpu) body.cpu = opts.cpu;
+      if (opts.memory) {
+        if (!Number.isFinite(Number(opts.memory))) {
+          throw new CLIError("Invalid value for --memory: must be a number");
+        }
+        body.memory = Number(opts.memory);
+      }
+      if (opts.region) body.region = opts.region;
+      if (opts.env) {
+        try {
+          body.envVars = JSON.parse(opts.env);
+        } catch {
+          throw new CLIError("Invalid JSON for --env");
+        }
+      }
+      if (Object.keys(body).length === 0) {
+        throw new CLIError("No update fields provided. Use --image, --port, --cpu, --memory, --region, or --env.");
+      }
+      const res = await ossFetch(`/api/compute/services/${encodeURIComponent(id)}`, {
+        method: "PATCH",
+        body: JSON.stringify(body)
+      });
+      const service = await res.json();
+      if (json) {
+        outputJson(service);
+      } else {
+        outputSuccess(`Service "${service.name}" updated [${service.status}]`);
+      }
+      await reportCliUsage("cli.compute.update", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.update", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/delete.ts
+function registerComputeDeleteCommand(computeCmd2) {
+  computeCmd2.command("delete <id>").description("Delete a compute service and its Fly.io resources").action(async (id, _opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const res = await ossFetch(`/api/compute/services/${encodeURIComponent(id)}`, {
+        method: "DELETE"
+      });
+      const data = await res.json();
+      if (json) {
+        outputJson(data);
+      } else {
+        outputSuccess("Service deleted.");
+      }
+      await reportCliUsage("cli.compute.delete", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.delete", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/start.ts
+function registerComputeStartCommand(computeCmd2) {
+  computeCmd2.command("start <id>").description("Start a stopped compute service").action(async (id, _opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const res = await ossFetch(`/api/compute/services/${encodeURIComponent(id)}/start`, {
+        method: "POST"
+      });
+      const service = await res.json();
+      if (json) {
+        outputJson(service);
+      } else {
+        outputSuccess(`Service "${service.name}" started [${service.status}]`);
+        if (service.endpointUrl) {
+          console.log(`  Endpoint: ${service.endpointUrl}`);
+        }
+      }
+      await reportCliUsage("cli.compute.start", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.start", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/stop.ts
+function registerComputeStopCommand(computeCmd2) {
+  computeCmd2.command("stop <id>").description("Stop a running compute service").action(async (id, _opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const res = await ossFetch(`/api/compute/services/${encodeURIComponent(id)}/stop`, {
+        method: "POST"
+      });
+      const service = await res.json();
+      if (json) {
+        outputJson(service);
+      } else {
+        outputSuccess(`Service "${service.name}" stopped.`);
+      }
+      await reportCliUsage("cli.compute.stop", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.stop", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/logs.ts
+function registerComputeLogsCommand(computeCmd2) {
+  computeCmd2.command("logs <id>").description("Get compute service logs (machine events)").option("--limit <n>", "Max number of log entries", "50").action(async (id, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      const limit = Math.max(1, Math.min(Number(opts.limit) || 50, 1e3));
+      const res = await ossFetch(
+        `/api/compute/services/${encodeURIComponent(id)}/logs?limit=${limit}`
+      );
+      const logs = await res.json();
+      if (json) {
+        outputJson(logs);
+      } else {
+        if (!Array.isArray(logs) || logs.length === 0) {
+          console.log("No logs found.");
+          await reportCliUsage("cli.compute.logs", true);
+          return;
+        }
+        for (const entry of logs) {
+          const ts = new Date(entry.timestamp).toISOString();
+          console.log(`${ts}  ${entry.message}`);
+        }
+      }
+      await reportCliUsage("cli.compute.logs", true);
+    } catch (err) {
+      await reportCliUsage("cli.compute.logs", false);
+      handleError(err, json);
+    }
+  });
+}
+
+// src/commands/compute/deploy.ts
+import { existsSync as existsSync5, readFileSync as readFileSync6, writeFileSync as writeFileSync4, unlinkSync as unlinkSync2, renameSync } from "fs";
+import { join as join8 } from "path";
+import { execSync, spawn } from "child_process";
+function parseFlyToml(dir) {
+  const tomlPath = join8(dir, "fly.toml");
+  if (!existsSync5(tomlPath)) return {};
+  const content = readFileSync6(tomlPath, "utf-8");
+  const config = {};
+  const portMatch = content.match(/internal_port\s*=\s*(\d+)/);
+  if (portMatch) config.internalPort = Number(portMatch[1]);
+  const regionMatch = content.match(/primary_region\s*=\s*'([^']+)'/);
+  if (regionMatch) config.region = regionMatch[1];
+  const memoryMatch = content.match(/memory\s*=\s*'(\d+)/);
+  if (memoryMatch) config.memory = memoryMatch[1];
+  const cpuKindMatch = content.match(/cpu_kind\s*=\s*'([^']+)'/);
+  if (cpuKindMatch) config.cpuKind = cpuKindMatch[1];
+  const cpusMatch = content.match(/cpus\s*=\s*(\d+)/);
+  if (cpusMatch) config.cpus = Number(cpusMatch[1]);
+  return config;
+}
+function memoryToCpuTier(cpuKind, cpus) {
+  if (!cpuKind) return void 0;
+  const kind = cpuKind === "performance" ? "performance" : "shared";
+  const count = cpus ?? 1;
+  return `${kind}-${count}x`;
+}
+function generateFlyToml(appName, opts) {
+  const cpuParts = opts.cpu.split("-");
+  const cpuKind = cpuParts[0] ?? "shared";
+  const cpuCount = parseInt(cpuParts[1] ?? "1", 10);
+  return `# Auto-generated by InsForge CLI
+app = '${appName}'
+primary_region = '${opts.region}'
+
+[build]
+  dockerfile = 'Dockerfile'
+
+[http_service]
+  internal_port = ${opts.port}
+  force_https = true
+  auto_stop_machines = 'stop'
+  auto_start_machines = true
+  min_machines_running = 0
+
+[[vm]]
+  memory = '${opts.memory}mb'
+  cpu_kind = '${cpuKind}'
+  cpus = ${cpuCount}
+`;
+}
+function checkFlyctl() {
+  try {
+    execSync("flyctl version", { stdio: "pipe" });
+  } catch {
+    throw new CLIError(
+      "flyctl is not installed.\nInstall it with: curl -L https://fly.io/install.sh | sh\nOr: brew install flyctl"
+    );
+  }
+}
+function getFlyToken() {
+  const token = process.env.FLY_API_TOKEN;
+  if (!token) {
+    throw new CLIError(
+      "FLY_API_TOKEN environment variable is required for compute deploy.\nSet it with: export FLY_API_TOKEN=<your-fly-token>"
+    );
+  }
+  return token;
+}
+function registerComputeDeployCommand(computeCmd2) {
+  computeCmd2.command("deploy [directory]").description("Build and deploy a Dockerfile as a compute service").requiredOption("--name <name>", "Service name").option("--port <port>", "Container port").option("--cpu <tier>", "CPU tier (shared-1x, shared-2x, performance-1x, etc.)").option("--memory <mb>", "Memory in MB (256, 512, 1024, 2048, 4096, 8192)").option("--region <region>", "Fly.io region").option("--env <json>", "Environment variables as JSON object").action(async (directory, opts, cmd) => {
+    const { json } = getRootOpts(cmd);
+    try {
+      await requireAuth();
+      checkFlyctl();
+      const flyToken = getFlyToken();
+      const dir = directory ?? process.cwd();
+      const dockerfilePath = join8(dir, "Dockerfile");
+      if (!existsSync5(dockerfilePath)) {
+        throw new CLIError(`No Dockerfile found in ${dir}`);
+      }
+      const flyTomlDefaults = parseFlyToml(dir);
+      const port = Number(opts.port) || flyTomlDefaults.internalPort || 8080;
+      const cpu = opts.cpu || memoryToCpuTier(flyTomlDefaults.cpuKind, flyTomlDefaults.cpus) || "shared-1x";
+      const memory = Number(opts.memory) || Number(flyTomlDefaults.memory) || 512;
+      const region = opts.region || flyTomlDefaults.region || "iad";
+      let envVars;
+      if (opts.env) {
+        try {
+          envVars = JSON.parse(opts.env);
+        } catch {
+          throw new CLIError("Invalid JSON for --env");
+        }
+      }
+      if (!json) outputInfo(`Checking for existing service "${opts.name}"...`);
+      const listRes = await ossFetch("/api/compute/services");
+      const services = await listRes.json();
+      const existing = services.find((s) => s.name === opts.name);
+      let serviceId;
+      let flyAppId;
+      if (existing) {
+        serviceId = existing.id;
+        flyAppId = existing.flyAppId;
+        if (!json) outputInfo(`Found existing service, redeploying...`);
+      } else {
+        if (!json) outputInfo(`Creating service "${opts.name}"...`);
+        const body = {
+          name: opts.name,
+          imageUrl: "dockerfile",
+          port,
+          cpu,
+          memory,
+          region
+        };
+        if (envVars) body.envVars = envVars;
+        const deployRes = await ossFetch("/api/compute/services/deploy", {
+          method: "POST",
+          body: JSON.stringify(body)
+        });
+        const service = await deployRes.json();
+        serviceId = service.id;
+        flyAppId = service.flyAppId;
+      }
+      const existingTomlPath = join8(dir, "fly.toml");
+      const backupTomlPath = join8(dir, "fly.toml.insforge-backup");
+      let hadExistingToml = false;
+      if (existsSync5(existingTomlPath)) {
+        hadExistingToml = true;
+        renameSync(existingTomlPath, backupTomlPath);
+      }
+      const tomlContent = generateFlyToml(flyAppId, { port, memory, cpu, region });
+      writeFileSync4(existingTomlPath, tomlContent);
+      try {
+        if (!json) outputInfo("Building and deploying (this may take a few minutes)...");
+        await new Promise((resolve4, reject) => {
+          const child = spawn(
+            "flyctl",
+            ["deploy", "--remote-only", "--app", flyAppId, "--access-token", flyToken, "--yes"],
+            { cwd: dir, stdio: json ? "pipe" : "inherit" }
+          );
+          child.on("close", (code) => {
+            if (code === 0) resolve4();
+            else reject(new CLIError(`flyctl deploy failed with exit code ${code}`));
+          });
+          child.on("error", (err) => reject(new CLIError(`flyctl deploy error: ${err.message}`)));
+        });
+        if (!json) outputInfo("Syncing deployment info...");
+        const syncRes = await ossFetch(
+          `/api/compute/services/${encodeURIComponent(serviceId)}/sync`,
+          { method: "PATCH" }
+        );
+        const synced = await syncRes.json();
+        if (json) {
+          outputJson(synced);
+        } else {
+          outputSuccess(`Service "${synced.name}" deployed [${synced.status}]`);
+          if (synced.endpointUrl) {
+            console.log(`  Endpoint: ${synced.endpointUrl}`);
+          }
+        }
+        await reportCliUsage("cli.compute.deploy", true);
+      } finally {
+        try {
+          unlinkSync2(existingTomlPath);
+          if (hadExistingToml) {
+            renameSync(backupTomlPath, existingTomlPath);
+          }
+        } catch {
+        }
+      }
+    } catch (err) {
+      await reportCliUsage("cli.compute.deploy", false);
+      handleError(err, json);
+    }
+  });
+}
+
 // src/commands/logs.ts
 var VALID_SOURCES = ["insforge.logs", "postgREST.logs", "postgres.logs", "function.logs", "function-deploy.logs"];
 var SOURCE_LOOKUP = new Map(VALID_SOURCES.map((s) => [s.toLowerCase(), s]));
@@ -4019,7 +4637,7 @@ function formatBytesCompact(bytes) {
 
 // src/index.ts
 var __dirname = dirname(fileURLToPath(import.meta.url));
-var pkg = JSON.parse(readFileSync6(join7(__dirname, "../package.json"), "utf-8"));
+var pkg = JSON.parse(readFileSync7(join9(__dirname, "../package.json"), "utf-8"));
 var INSFORGE_LOGO = `
 \u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557
 \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D
@@ -4087,6 +4705,16 @@ registerLogsCommand(program);
 registerMetadataCommand(program);
 var diagnoseCmd = program.command("diagnose");
 registerDiagnoseCommands(diagnoseCmd);
+var computeCmd = program.command("compute").description("Manage compute services (Docker containers on Fly.io)");
+registerComputeListCommand(computeCmd);
+registerComputeGetCommand(computeCmd);
+registerComputeCreateCommand(computeCmd);
+registerComputeDeployCommand(computeCmd);
+registerComputeUpdateCommand(computeCmd);
+registerComputeDeleteCommand(computeCmd);
+registerComputeStartCommand(computeCmd);
+registerComputeStopCommand(computeCmd);
+registerComputeLogsCommand(computeCmd);
 var schedulesCmd = program.command("schedules").description("Manage scheduled tasks (cron jobs)");
 registerSchedulesListCommand(schedulesCmd);
 registerSchedulesGetCommand(schedulesCmd);