@insforge/cli 0.1.82 → 0.1.84

package/dist/index.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { readFileSync as readFileSync12 } from "fs";
-import { join as join14, dirname as dirname2 } from "path";
+import { readFileSync as readFileSync13 } from "fs";
+import { join as join15, dirname as dirname2 } from "path";
 import { fileURLToPath } from "url";
 import { Command } from "commander";
-import * as clack18 from "@clack/prompts";
+import * as clack19 from "@clack/prompts";
 
 // src/lib/prompts.ts
 import * as readline from "readline";
@@ -1215,6 +1215,17 @@ function trackPayments(subcommand, config, properties) {
     ...properties
   });
 }
+function trackPosthog(subcommand, config, properties) {
+  captureEvent(config.project_id, "cli_posthog_invoked", {
+    subcommand,
+    project_id: config.project_id,
+    project_name: config.project_name,
+    org_id: config.org_id,
+    region: config.region,
+    oss_mode: config.project_id === FAKE_PROJECT_ID,
+    ...properties
+  });
+}
 function trackConfig(subcommand, config, properties) {
   const distinctId = config?.project_id ?? FAKE_PROJECT_ID;
   captureEvent(distinctId, "cli_config_invoked", {
@@ -1707,15 +1718,91 @@ import { exec as exec3 } from "child_process";
 import { promisify as promisify4 } from "util";
 import * as fs5 from "fs/promises";
 import * as path5 from "path";
-import * as clack13 from "@clack/prompts";
+import * as clack14 from "@clack/prompts";
 import pc2 from "picocolors";
 
 // src/lib/skills.ts
 import { exec } from "child_process";
-import { existsSync as existsSync3, readFileSync as readFileSync2, appendFileSync } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync3, appendFileSync } from "fs";
+import { join as join3 } from "path";
 import { promisify } from "util";
+import * as clack10 from "@clack/prompts";
+
+// src/lib/agents-md.ts
+import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "fs";
+import { join as join2 } from "path";
 import * as clack9 from "@clack/prompts";
+var AGENTS_MD_START = "<!-- INSFORGE:START -->";
+var AGENTS_MD_END = "<!-- INSFORGE:END -->";
+function buildInsforgeBlock(config) {
+  const lines = [
+    AGENTS_MD_START,
+    "## InsForge backend",
+    "",
+    "This project uses [InsForge](https://insforge.dev): an all-in-one, open-source Postgres-based backend (BaaS) that gives this app a database, authentication, file storage, edge functions, realtime, an AI model gateway, and payments through one platform.",
+    ""
+  ];
+  if (config?.project_name || config?.oss_host) {
+    const name = config.project_name ? `**${config.project_name}**` : "This project";
+    const host = config.oss_host ? ` (API base \`${config.oss_host}\`)` : "";
+    lines.push(`- **Project:** ${name}${host}`);
+  }
+  lines.push(
+    "- **Skills:** these InsForge skills are installed for supported coding agents. Reach for them before implementing any InsForge feature instead of guessing the API:",
+    "  - `insforge`: app code with the `@insforge/sdk` client (database CRUD, auth, storage, edge functions, realtime, AI, email, and Stripe payments).",
+    "  - `insforge-cli`: backend and infrastructure via the `insforge` CLI (projects, SQL, migrations, RLS policies, storage buckets, functions, secrets, payment setup, schedules, deploys).",
+    "  - `insforge-debug`: diagnosing failures (SDK/HTTP errors, RLS denials, auth and OAuth issues) and running security or performance audits.",
+    "  - `insforge-integrations`: wiring external auth providers (Clerk, Auth0, WorkOS, Better Auth, etc.) for JWT-based RLS, or the OKX x402 payment facilitator.",
+    "  - `find-skills`: discovering additional skills on demand.",
+    "- **Credentials:** app code reads keys from `.env.local`; the CLI reads `.insforge/project.json`. Never hardcode or commit keys.",
+    "",
+    "Key patterns:",
+    "",
+    "- Database inserts take an array: `insert([{ ... }])`.",
+    "- Reference users with `auth.users(id)`; use `auth.uid()` in RLS policies.",
+    "- For storage uploads, persist both the returned `url` and `key`.",
+    AGENTS_MD_END
+  );
+  return lines.join("\n");
+}
+function mergeAgentsMd(existing, config) {
+  const block = buildInsforgeBlock(config);
+  if (existing === null || existing.trim() === "") {
+    return `# AGENTS.md
+
+${block}
+`;
+  }
+  const startIdx = existing.indexOf(AGENTS_MD_START);
+  if (startIdx !== -1) {
+    const endMarkerIdx = existing.indexOf(AGENTS_MD_END, startIdx + AGENTS_MD_START.length);
+    let before = existing.slice(0, startIdx);
+    if (before.length > 0 && !before.endsWith("\n")) before += "\n";
+    const after = endMarkerIdx === -1 ? "\n" : existing.slice(endMarkerIdx + AGENTS_MD_END.length);
+    return `${before}${block}${after}`;
+  }
+  return `${existing.replace(/\s+$/, "")}
+
+${block}
+`;
+}
+function writeLocalAgentsMd(json, opts) {
+  const cwd = opts?.cwd ?? process.cwd();
+  const config = opts?.config !== void 0 ? opts.config : getProjectConfig();
+  const path6 = join2(cwd, "AGENTS.md");
+  const existed = existsSync3(path6);
+  const existing = existed ? readFileSync2(path6, "utf-8") : null;
+  const next = mergeAgentsMd(existing, config);
+  if (existing === next) return;
+  writeFileSync3(path6, next);
+  if (!json) {
+    clack9.log.success(
+      existed ? "Updated AGENTS.md with InsForge guidance." : "Created AGENTS.md with InsForge guidance."
+    );
+  }
+}
+
+// src/lib/skills.ts
 var execAsync = promisify(exec);
 var SKILL_INSTALL_TIMEOUT_MS = 6e4;
 function describeExecError(err) {
@@ -1755,8 +1842,8 @@ var GITIGNORE_ENTRIES = [
   ".windsurf"
 ];
 function updateGitignore() {
-  const gitignorePath = join2(process.cwd(), ".gitignore");
-  const existing = existsSync3(gitignorePath) ? readFileSync2(gitignorePath, "utf-8") : "";
+  const gitignorePath = join3(process.cwd(), ".gitignore");
+  const existing = existsSync4(gitignorePath) ? readFileSync3(gitignorePath, "utf-8") : "";
   const lines = new Set(existing.split("\n").map((l) => l.trim()));
   const missing = GITIGNORE_ENTRIES.filter((entry) => !lines.has(entry));
   if (!missing.length) return;
@@ -1772,44 +1859,44 @@ var PROVIDER_SKILLS = {
 };
 async function installSkills(json, authProvider) {
   try {
-    if (!json) clack9.log.info("Installing InsForge agent skills (global)...");
+    if (!json) clack10.log.info("Installing InsForge agent skills (global)...");
     await execAsync(`npx skills add insforge/agent-skills -g -y ${AGENT_FLAGS}`, {
       cwd: process.cwd(),
       timeout: SKILL_INSTALL_TIMEOUT_MS
     });
-    if (!json) clack9.log.success("InsForge agent skills installed.");
+    if (!json) clack10.log.success("InsForge agent skills installed.");
   } catch (err) {
     if (!json) {
-      clack9.log.warn(`Could not install agent skills: ${describeExecError(err)}`);
-      clack9.log.info("Run `npx skills add insforge/agent-skills` once resolved to see the full output.");
+      clack10.log.warn(`Could not install agent skills: ${describeExecError(err)}`);
+      clack10.log.info("Run `npx skills add insforge/agent-skills` once resolved to see the full output.");
     }
   }
   try {
-    if (!json) clack9.log.info("Installing find-skills (global)...");
+    if (!json) clack10.log.info("Installing find-skills (global)...");
     await execAsync("npx skills add https://github.com/vercel-labs/skills --skill find-skills -g -y", {
       cwd: process.cwd(),
       timeout: SKILL_INSTALL_TIMEOUT_MS
     });
-    if (!json) clack9.log.success("find-skills installed.");
+    if (!json) clack10.log.success("find-skills installed.");
   } catch (err) {
     if (!json) {
-      clack9.log.warn(`Could not install find-skills: ${describeExecError(err)}`);
-      clack9.log.info("Run `npx skills add https://github.com/vercel-labs/skills --skill find-skills` once resolved.");
+      clack10.log.warn(`Could not install find-skills: ${describeExecError(err)}`);
+      clack10.log.info("Run `npx skills add https://github.com/vercel-labs/skills --skill find-skills` once resolved.");
     }
   }
   const providerEntry = authProvider ? PROVIDER_SKILLS[authProvider] : void 0;
   if (providerEntry) {
     try {
-      if (!json) clack9.log.info(`Installing ${providerEntry.label} (global)...`);
+      if (!json) clack10.log.info(`Installing ${providerEntry.label} (global)...`);
       await execAsync(`npx skills add ${providerEntry.repo} -g -y ${AGENT_FLAGS}`, {
         cwd: process.cwd(),
         timeout: SKILL_INSTALL_TIMEOUT_MS
       });
-      if (!json) clack9.log.success(`${providerEntry.label} installed.`);
+      if (!json) clack10.log.success(`${providerEntry.label} installed.`);
     } catch (err) {
       if (!json) {
-        clack9.log.warn(`Could not install ${providerEntry.label}: ${describeExecError(err)}`);
-        clack9.log.info(`Run \`npx skills add ${providerEntry.repo}\` once resolved to see the full output.`);
+        clack10.log.warn(`Could not install ${providerEntry.label}: ${describeExecError(err)}`);
+        clack10.log.info(`Run \`npx skills add ${providerEntry.repo}\` once resolved to see the full output.`);
       }
     }
   }
@@ -1817,6 +1904,10 @@ async function installSkills(json, authProvider) {
     updateGitignore();
   } catch {
   }
+  try {
+    writeLocalAgentsMd(json);
+  } catch {
+  }
 }
 async function reportCliUsage(toolName, success, maxRetries = 1, explicitConfig) {
   let config = explicitConfig;
@@ -1866,7 +1957,7 @@ import { tmpdir } from "os";
 import { execFile } from "child_process";
 import { promisify as promisify2 } from "util";
 import { randomBytes as randomBytes2 } from "crypto";
-import * as clack10 from "@clack/prompts";
+import * as clack11 from "@clack/prompts";
 
 // src/lib/api/oss.ts
 function requireProjectConfig() {
@@ -2107,7 +2198,7 @@ async function applyAuthProvider(provider, cwd, projectConfig, json) {
   if (!VALID_AUTH_PROVIDERS.includes(provider)) {
     throw new Error(`Unknown auth provider: ${provider}`);
   }
-  const fetchSpinner = !json ? clack10.spinner() : null;
+  const fetchSpinner = !json ? clack11.spinner() : null;
   fetchSpinner?.start(`Fetching ${provider} scaffold from templates repo...`);
   const { dir: providerDir, cleanup } = await fetchProviderTree(provider);
   fetchSpinner?.stop(`${provider} scaffold ready`);
@@ -2206,15 +2297,15 @@ async function applyAuthProvider(provider, cwd, projectConfig, json) {
       result.envKeysRefreshed = Array.from(/* @__PURE__ */ new Set([...result.envKeysRefreshed, ...refreshed]));
     }
     if (!jwtSecret && !json) {
-      clack10.log.warn("Could not auto-fill JWT_SECRET \u2014 run `npx @insforge/cli secrets get JWT_SECRET` and paste it into .env.local.");
+      clack11.log.warn("Could not auto-fill JWT_SECRET \u2014 run `npx @insforge/cli secrets get JWT_SECRET` and paste it into .env.local.");
     }
     if (result.envKeysSkipped.length > 0 && !json) {
-      clack10.log.warn(
+      clack11.log.warn(
         `Kept your existing values for: ${result.envKeysSkipped.join(", ")}. If any of these need the auth-provider's defaults, see .env.example for reference.`
       );
     }
     if (result.envKeysRefreshed.length > 0 && !json) {
-      clack10.log.info(
+      clack11.log.info(
         `Refreshed stale platform defaults: ${result.envKeysRefreshed.join(", ")}. Your value matched the manifest's default, so we replaced it with the live one.`
       );
     }
@@ -2230,7 +2321,7 @@ import { tmpdir as tmpdir2 } from "os";
 import { promisify as promisify3 } from "util";
 import * as fs4 from "fs/promises";
 import * as path4 from "path";
-import * as clack12 from "@clack/prompts";
+import * as clack13 from "@clack/prompts";
 
 // src/lib/env.ts
 import * as fs2 from "fs/promises";
@@ -2265,7 +2356,7 @@ import * as path3 from "path";
 import * as fs3 from "fs/promises";
 import { createReadStream } from "fs";
 import { createHash as createHash2 } from "crypto";
-import * as clack11 from "@clack/prompts";
+import * as clack12 from "@clack/prompts";
 import archiver from "archiver";
 var POLL_INTERVAL_MS3 = 5e3;
 var POLL_TIMEOUT_MS3 = 3e5;
@@ -2565,7 +2656,7 @@ function registerDeploymentsDeployCommand(deploymentsCmd2) {
           `"${dirName}" is an excluded directory and cannot be used as a deploy source. Please specify your project root or output directory instead.`
         );
       }
-      const spinner11 = !json ? clack11.spinner() : null;
+      const spinner11 = !json ? clack12.spinner() : null;
       const startBody = {};
       if (opts.env) {
         try {
@@ -2598,9 +2689,9 @@ function registerDeploymentsDeployCommand(deploymentsCmd2) {
           outputJson(result.deployment);
         } else {
           if (result.liveUrl) {
-            clack11.log.success(`Live at: ${result.liveUrl}`);
+            clack12.log.success(`Live at: ${result.liveUrl}`);
           }
-          clack11.log.info(`Deployment ID: ${result.deploymentId}`);
+          clack12.log.info(`Deployment ID: ${result.deploymentId}`);
         }
       } else {
         spinner11?.stop("Deployment is still building");
@@ -2611,9 +2702,9 @@ function registerDeploymentsDeployCommand(deploymentsCmd2) {
             timedOut: true
           });
         } else {
-          clack11.log.info(`Deployment ID: ${result.deploymentId}`);
-          clack11.log.warn("Deployment did not finish within 5 minutes.");
-          clack11.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
+          clack12.log.info(`Deployment ID: ${result.deploymentId}`);
+          clack12.log.warn("Deployment did not finish within 5 minutes.");
+          clack12.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
         }
       }
       await reportCliUsage("cli.deployments.deploy", true);
@@ -2753,7 +2844,7 @@ Browse available templates: https://insforge.dev/templates`
       await requireAuth(apiUrl, false);
       if (!json) {
         await animateBanner();
-        clack12.intro("Let's build something great");
+        clack13.intro("Let's build something great");
       }
       let orgId = opts.orgId;
       if (!orgId) {
@@ -2763,7 +2854,7 @@ Browse available templates: https://insforge.dev/templates`
         }
         if (orgs.length === 1) {
           orgId = orgs[0].id;
-          if (!json) clack12.log.info(`Using organization: ${orgs[0].name}`);
+          if (!json) clack13.log.info(`Using organization: ${orgs[0].name}`);
         } else {
           if (json) {
             throw new CLIError("Multiple organizations found. Specify --org-id.");
@@ -2879,7 +2970,7 @@ Browse available templates: https://insforge.dev/templates`
         process.chdir(projectDir);
       }
       let projectLinked = false;
-      const s = !json ? clack12.spinner() : null;
+      const s = !json ? clack13.spinner() : null;
       try {
         s?.start("Creating project...");
         const project = await createProject(orgId, projectName, opts.region, apiUrl);
@@ -2906,10 +2997,7 @@ Browse available templates: https://insforge.dev/templates`
             json
           );
           if (downloaded) {
-            void reportMarketplaceDownload(
-              opts.marketplace,
-              apiUrl ?? "https://api.insforge.dev"
-            );
+            void reportMarketplaceDownload(opts.marketplace);
           }
         } else if (githubTemplates.includes(template)) {
           await downloadGitHubTemplate(template, projectConfig, json);
@@ -2919,7 +3007,7 @@ Browse available templates: https://insforge.dev/templates`
           try {
             const anonKey = await getAnonKey();
             if (!anonKey) {
-              if (!json) clack12.log.warn("Could not retrieve anon key. You can add it to .env.local manually.");
+              if (!json) clack13.log.warn("Could not retrieve anon key. You can add it to .env.local manually.");
             } else {
               const envPath = path4.join(process.cwd(), ".env.local");
               const envContent = [
@@ -2930,16 +3018,16 @@ Browse available templates: https://insforge.dev/templates`
               ].join("\n");
               await fs4.writeFile(envPath, envContent, { flag: "wx" });
               if (!json) {
-                clack12.log.success("Created .env.local with your InsForge credentials");
+                clack13.log.success("Created .env.local with your InsForge credentials");
               }
             }
           } catch (err) {
             const error = err;
             if (!json) {
               if (error.code === "EEXIST") {
-                clack12.log.warn(".env.local already exists; skipping InsForge key seeding.");
+                clack13.log.warn(".env.local already exists; skipping InsForge key seeding.");
               } else {
-                clack12.log.warn(`Failed to create .env.local: ${error.message}`);
+                clack13.log.warn(`Failed to create .env.local: ${error.message}`);
               }
             }
           }
@@ -2948,12 +3036,12 @@ Browse available templates: https://insforge.dev/templates`
           try {
             const result = await applyAuthProvider(opts.auth, process.cwd(), projectConfig, json);
             if (!json) {
-              clack12.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
+              clack13.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
             }
           } catch (err) {
             const msg = `Failed to apply --auth ${opts.auth}: ${err.message}`;
             if (json) console.error(JSON.stringify({ warning: msg }));
-            else clack12.log.warn(msg);
+            else clack13.log.warn(msg);
           }
         }
         await installSkills(json, opts.auth);
@@ -2961,7 +3049,7 @@ Browse available templates: https://insforge.dev/templates`
         await reportCliUsage("cli.create", true, 6);
         const templateDownloaded = hasTemplate ? await fs4.stat(path4.join(process.cwd(), "package.json")).catch(() => null) : null;
         if (templateDownloaded) {
-          const installSpinner = !json ? clack12.spinner() : null;
+          const installSpinner = !json ? clack13.spinner() : null;
           installSpinner?.start("Installing dependencies...");
           try {
             await execAsync2("npm install", { cwd: process.cwd(), maxBuffer: 10 * 1024 * 1024 });
@@ -2969,8 +3057,8 @@ Browse available templates: https://insforge.dev/templates`
           } catch (err) {
             installSpinner?.stop("Failed to install dependencies");
             if (!json) {
-              clack12.log.warn(`npm install failed: ${err.message}`);
-              clack12.log.info("Run `npm install` manually to install dependencies.");
+              clack13.log.warn(`npm install failed: ${err.message}`);
+              clack13.log.info("Run `npm install` manually to install dependencies.");
             }
           }
         }
@@ -2986,7 +3074,7 @@ Browse available templates: https://insforge.dev/templates`
               if (envVars.length > 0) {
                 startBody.envVars = envVars;
               }
-              const deploySpinner = clack12.spinner();
+              const deploySpinner = clack13.spinner();
               const result = await deployProject({
                 sourceDir: process.cwd(),
                 startBody,
@@ -2997,12 +3085,12 @@ Browse available templates: https://insforge.dev/templates`
                 liveUrl = result.liveUrl;
               } else {
                 deploySpinner.stop("Deployment is still building");
-                clack12.log.info(`Deployment ID: ${result.deploymentId}`);
-                clack12.log.warn("Deployment did not finish within 2 minutes.");
-                clack12.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
+                clack13.log.info(`Deployment ID: ${result.deploymentId}`);
+                clack13.log.warn("Deployment did not finish within 2 minutes.");
+                clack13.log.info(`Check status with: npx @insforge/cli deployments status ${result.deploymentId}`);
               }
             } catch (err) {
-              clack12.log.warn(`Deploy failed: ${err.message}`);
+              clack13.log.warn(`Deploy failed: ${err.message}`);
             }
           }
         }
@@ -3019,33 +3107,33 @@ Browse available templates: https://insforge.dev/templates`
             }
           });
         } else {
-          clack12.log.step(`Dashboard: ${dashboardUrl}`);
+          clack13.log.step(`Dashboard: ${dashboardUrl}`);
           if (liveUrl) {
-            clack12.log.success(`Live site: ${liveUrl}`);
+            clack13.log.success(`Live site: ${liveUrl}`);
           }
           if (templateDownloaded) {
             const steps = [
               `cd ${dirName}`,
               "npm run dev"
             ];
-            clack12.note(steps.join("\n"), "Next steps");
-            clack12.note("Open your coding agent (Claude Code, Codex, Cursor, etc.) to add new features.", "Keep building");
+            clack13.note(steps.join("\n"), "Next steps");
+            clack13.note("Open your coding agent (Claude Code, Codex, Cursor, etc.) to add new features.", "Keep building");
           } else if (hasTemplate && !templateDownloaded) {
-            clack12.log.warn("Template download failed. You can retry or set up manually.");
+            clack13.log.warn("Template download failed. You can retry or set up manually.");
           } else {
             const prompts = [
               "Build a todo app with Google OAuth sign-in",
               "Build an Instagram clone where users can upload photos, like, and comment",
               "Build an AI chatbot with conversation history"
             ];
-            clack12.note(
+            clack13.note(
               `Open your coding agent (Claude Code, Codex, Cursor, etc.) and try:
 
 ${prompts.map((p3) => `\u2022 "${p3}"`).join("\n")}`,
               "Start building"
             );
           }
-          clack12.outro("Done!");
+          clack13.outro("Done!");
         }
       } catch (err) {
         if (!projectLinked && hasTemplate && projectDir !== originalCwd) {
@@ -3064,7 +3152,7 @@ ${prompts.map((p3) => `\u2022 "${p3}"`).join("\n")}`,
   });
 }
 async function downloadTemplate(framework, projectConfig, projectName, json, _apiUrl) {
-  const s = !json ? clack12.spinner() : null;
+  const s = !json ? clack13.spinner() : null;
   s?.start("Downloading template...");
   try {
     const anonKey = await getAnonKey();
@@ -3095,13 +3183,13 @@ async function downloadTemplate(framework, projectConfig, projectName, json, _ap
   } catch (err) {
     s?.stop("Template download failed");
     if (!json) {
-      clack12.log.warn(`Failed to download template: ${err.message}`);
-      clack12.log.info("You can manually set up the template later.");
+      clack13.log.warn(`Failed to download template: ${err.message}`);
+      clack13.log.info("You can manually set up the template later.");
     }
   }
 }
 async function downloadGitHubTemplate(templateName, projectConfig, json) {
-  const s = !json ? clack12.spinner() : null;
+  const s = !json ? clack13.spinner() : null;
   s?.start(`Downloading ${templateName} template...`);
   const tempDir = path4.join(tmpdir2(), `insforge-template-${Date.now()}`);
   try {
@@ -3150,7 +3238,7 @@ async function downloadGitHubTemplate(templateName, projectConfig, json) {
         await fs4.writeFile(envLocalPath, envFinal, { flag: "wx" });
       } catch (e) {
         if (e.code === "EEXIST") {
-          if (!json) clack12.log.warn(".env.local already exists; skipping env seeding.");
+          if (!json) clack13.log.warn(".env.local already exists; skipping env seeding.");
         } else {
           throw e;
         }
@@ -3160,7 +3248,7 @@ async function downloadGitHubTemplate(templateName, projectConfig, json) {
     const migrationPath = path4.join(cwd, "migrations", "db_init.sql");
     const migrationExists = await fs4.stat(migrationPath).catch(() => null);
     if (migrationExists) {
-      const dbSpinner = !json ? clack12.spinner() : null;
+      const dbSpinner = !json ? clack13.spinner() : null;
       dbSpinner?.start("Running database migrations...");
       try {
         const sql = await fs4.readFile(migrationPath, "utf-8");
@@ -3169,8 +3257,8 @@ async function downloadGitHubTemplate(templateName, projectConfig, json) {
       } catch (err) {
         dbSpinner?.stop("Database migration failed");
         if (!json) {
-          clack12.log.warn(`Migration failed: ${err.message}`);
-          clack12.log.info('You can run the migration manually: npx @insforge/cli db query --unrestricted "$(cat migrations/db_init.sql)"');
+          clack13.log.warn(`Migration failed: ${err.message}`);
+          clack13.log.info('You can run the migration manually: npx @insforge/cli db query --unrestricted "$(cat migrations/db_init.sql)"');
         } else {
           throw err;
         }
@@ -3183,8 +3271,8 @@ async function downloadGitHubTemplate(templateName, projectConfig, json) {
     if (json) {
       console.error(JSON.stringify({ warning: msg }));
     } else {
-      clack12.log.warn(msg);
-      clack12.log.info("You can manually clone from: https://github.com/InsForge/insforge-templates");
+      clack13.log.warn(msg);
+      clack13.log.info("You can manually clone from: https://github.com/InsForge/insforge-templates");
     }
     return false;
   } finally {
@@ -3192,12 +3280,14 @@ async function downloadGitHubTemplate(templateName, projectConfig, json) {
     });
   }
 }
-async function reportMarketplaceDownload(slug, apiUrl) {
+var MARKETPLACE_REPORT_URL = process.env.INSFORGE_MARKETPLACE_REPORT_URL ?? "https://p8n7m7ci.us-east.insforge.app/functions/report-download";
+async function reportMarketplaceDownload(slug) {
   try {
-    const res = await fetch(`${apiUrl}/templates/v1/${encodeURIComponent(slug)}/downloads`, {
+    const res = await fetch(MARKETPLACE_REPORT_URL, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
-      body: "{}"
+      body: JSON.stringify({ slug }),
+      signal: AbortSignal.timeout(5e3)
     });
     if (!res.ok) {
       return;
@@ -3209,15 +3299,15 @@ async function reportMarketplaceDownload(slug, apiUrl) {
 // src/commands/projects/link.ts
 var execAsync3 = promisify4(exec3);
 async function runNpmInstall(startMessage = "Installing dependencies...") {
-  const spinner11 = clack13.spinner();
+  const spinner11 = clack14.spinner();
   spinner11.start(startMessage);
   try {
     await execAsync3("npm install", { cwd: process.cwd(), maxBuffer: 10 * 1024 * 1024 });
     spinner11.stop("Dependencies installed");
   } catch (err) {
     spinner11.stop("Failed to install dependencies");
-    clack13.log.warn(`npm install failed: ${err.message}`);
-    clack13.log.info("Run `npm install` manually to install dependencies.");
+    clack14.log.warn(`npm install failed: ${err.message}`);
+    clack14.log.info("Run `npm install` manually to install dependencies.");
   }
 }
 async function runNpmSetupIfPresent() {
@@ -3229,15 +3319,15 @@ async function runNpmSetupIfPresent() {
   } catch {
   }
   if (!hasSetup) return;
-  const spinner11 = clack13.spinner();
+  const spinner11 = clack14.spinner();
   spinner11.start("Running setup (schema + migrations)...");
   try {
     await execAsync3("npm run setup", { cwd: process.cwd(), maxBuffer: 20 * 1024 * 1024 });
     spinner11.stop("Setup complete");
   } catch (err) {
     spinner11.stop("Setup failed");
-    clack13.log.warn(`npm run setup failed: ${err.message.split("\n")[0]}`);
-    clack13.log.info("Inspect the error, fix DATABASE_URL or network access, then run `npm run setup` manually.");
+    clack14.log.warn(`npm run setup failed: ${err.message.split("\n")[0]}`);
+    clack14.log.info("Inspect the error, fix DATABASE_URL or network access, then run `npm run setup` manually.");
   }
 }
 function registerProjectLinkCommand(program2) {
@@ -3260,7 +3350,7 @@ function registerProjectLinkCommand(program2) {
           if (json) {
             outputJson({ success: true, skills_only: true });
           } else {
-            clack13.note(
+            clack14.note(
               `Open your coding agent (Claude Code, Codex, Cursor, etc.) and ask it to build something. It will walk you through provisioning an InsForge project when needed. If you're not signed in yet, your browser will open for sign-in at that point.`,
               "What's next"
             );
@@ -3338,11 +3428,11 @@ function registerProjectLinkCommand(program2) {
             if (opts.auth) {
               try {
                 const result = await applyAuthProvider(opts.auth, process.cwd(), projectConfig2, json);
-                if (!json) clack13.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
+                if (!json) clack14.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
               } catch (err) {
                 const msg = `Failed to apply --auth ${opts.auth}: ${err.message}`;
                 if (json) console.error(JSON.stringify({ warning: msg }));
-                else clack13.log.warn(msg);
+                else clack14.log.warn(msg);
               }
             }
             if (templateDownloaded && !json) {
@@ -3368,9 +3458,9 @@ function registerProjectLinkCommand(program2) {
                   `${pc2.bold("1.")} ${runCommand}`,
                   `${pc2.bold("2.")} Open ${pc2.cyan("Claude Code")} or ${pc2.cyan("Cursor")} and prompt your agent to add more features`
                 ];
-                clack13.note(steps.join("\n"), "What's next");
+                clack14.note(steps.join("\n"), "What's next");
               } else {
-                clack13.log.warn("Template download failed. You can retry or set up manually.");
+                clack14.log.warn("Template download failed. You can retry or set up manually.");
               }
             }
             return;
@@ -3385,7 +3475,7 @@ function registerProjectLinkCommand(program2) {
             try {
               const result = await applyAuthProvider(opts.auth, process.cwd(), projectConfig2, json);
               if (!json) {
-                clack13.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
+                clack14.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
               }
               if (result.packageJsonPatched && !json) {
                 await runNpmInstall("Installing new dependencies...");
@@ -3394,7 +3484,7 @@ function registerProjectLinkCommand(program2) {
             } catch (err) {
               const msg = `Failed to apply --auth ${opts.auth}: ${err.message}`;
               if (json) console.error(JSON.stringify({ warning: msg }));
-              else clack13.log.warn(msg);
+              else clack14.log.warn(msg);
             }
           }
           trackCommand("link", "oss-org", { direct: true });
@@ -3424,7 +3514,7 @@ function registerProjectLinkCommand(program2) {
         }
         if (orgs.length === 1) {
           orgId = orgs[0].id;
-          if (!json) clack13.log.info(`Using organization: ${orgs[0].name}`);
+          if (!json) clack14.log.info(`Using organization: ${orgs[0].name}`);
         } else {
           if (json) {
             throw new CLIError("Multiple organizations found. Specify --org-id.");
@@ -3535,11 +3625,11 @@ function registerProjectLinkCommand(program2) {
         if (opts.auth) {
           try {
             const result = await applyAuthProvider(opts.auth, process.cwd(), projectConfig, json);
-            if (!json) clack13.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
+            if (!json) clack14.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
           } catch (err) {
             const msg = `Failed to apply --auth ${opts.auth}: ${err.message}`;
             if (json) console.error(JSON.stringify({ warning: msg }));
-            else clack13.log.warn(msg);
+            else clack14.log.warn(msg);
           }
         }
         if (templateDownloaded && !json) {
@@ -3552,16 +3642,16 @@ function registerProjectLinkCommand(program2) {
         await reportCliUsage("cli.link", true, 6, projectConfig);
         if (!json) {
           const dashboardUrl = `${getFrontendUrl()}/dashboard/project/${project.id}`;
-          clack13.log.step(`Dashboard: ${pc2.underline(dashboardUrl)}`);
+          clack14.log.step(`Dashboard: ${pc2.underline(dashboardUrl)}`);
           if (templateDownloaded) {
             const runCommand = `${pc2.cyan("cd")} ${pc2.green(dirName)} ${pc2.dim("&&")} ${pc2.cyan("npm run dev")}`;
             const steps = [
               `${pc2.bold("1.")} ${runCommand}`,
               `${pc2.bold("2.")} Open ${pc2.cyan("Claude Code")} or ${pc2.cyan("Cursor")} and prompt your agent to add more features`
             ];
-            clack13.note(steps.join("\n"), "What's next");
+            clack14.note(steps.join("\n"), "What's next");
           } else {
-            clack13.log.warn("Template download failed. You can retry or set up manually.");
+            clack14.log.warn("Template download failed. You can retry or set up manually.");
           }
         }
       } else {
@@ -3569,7 +3659,7 @@ function registerProjectLinkCommand(program2) {
           try {
             const result = await applyAuthProvider(opts.auth, process.cwd(), projectConfig, json);
             if (!json) {
-              clack13.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
+              clack14.log.success(`Wired in ${opts.auth}: ${result.written.length} new, ${result.overwritten.length} replaced`);
             }
             if (result.packageJsonPatched && !json) {
               await runNpmInstall("Installing new dependencies...");
@@ -3578,20 +3668,20 @@ function registerProjectLinkCommand(program2) {
           } catch (err) {
             const msg = `Failed to apply --auth ${opts.auth}: ${err.message}`;
             if (json) console.error(JSON.stringify({ warning: msg }));
-            else clack13.log.warn(msg);
+            else clack14.log.warn(msg);
           }
         }
         await installSkills(json, opts.auth);
         await reportCliUsage("cli.link", true, 6, projectConfig);
         if (!json) {
           const dashboardUrl = `${getFrontendUrl()}/dashboard/project/${project.id}`;
-          clack13.log.step(`Dashboard: ${dashboardUrl}`);
+          clack14.log.step(`Dashboard: ${dashboardUrl}`);
           const prompts = [
             "Build a todo app with Google OAuth sign-in",
             "Build an Instagram clone where users can upload photos, like, and comment",
             "Build an AI chatbot with conversation history and deploy it to a live URL"
           ];
-          clack13.note(
+          clack14.note(
             `Open your coding agent (Claude Code, Codex, Cursor, etc.) and try:
 
 ${prompts.map((p3) => `\u2022 "${p3}"`).join("\n")}`,
@@ -3831,7 +3921,7 @@ function registerDbRpcCommand(dbCmd2) {
 }
 
 // src/commands/db/export.ts
-import { writeFileSync as writeFileSync3 } from "fs";
+import { writeFileSync as writeFileSync4 } from "fs";
 function registerDbExportCommand(dbCmd2) {
   dbCmd2.command("export").description("Export database schema and/or data").option("--format <format>", "Export format: sql or json", "sql").option("--tables <tables>", "Comma-separated list of tables to export (default: all)").option("--no-data", "Exclude table data (schema only)").option("--include-functions", "Include database functions").option("--include-sequences", "Include sequences").option("--include-views", "Include views").option("--row-limit <n>", "Maximum rows per table").option("-o, --output <file>", "Output file path (default: stdout)").action(async (opts, cmd) => {
     const { json } = getRootOpts(cmd);
@@ -3871,7 +3961,7 @@ function registerDbExportCommand(dbCmd2) {
         return;
       }
       if (opts.output) {
-        writeFileSync3(opts.output, content);
+        writeFileSync4(opts.output, content);
         const tableCount = meta?.tables?.length;
         const suffix = tableCount ? ` (${tableCount} tables, format: ${meta?.format ?? opts.format})` : "";
         outputSuccess(`Exported to ${opts.output}${suffix}`);
@@ -3885,7 +3975,7 @@ function registerDbExportCommand(dbCmd2) {
 }
 
 // src/commands/db/import.ts
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 import { basename as basename5 } from "path";
 function registerDbImportCommand(dbCmd2) {
   dbCmd2.command("import <file>").description("Import database from a local SQL file").option("--truncate", "Truncate existing tables before import").action(async (file, opts, cmd) => {
@@ -3894,7 +3984,7 @@ function registerDbImportCommand(dbCmd2) {
       await requireAuth();
       const config = getProjectConfig();
       if (!config) throw new ProjectNotLinkedError();
-      const fileContent = readFileSync3(file);
+      const fileContent = readFileSync4(file);
       const fileName = basename5(file);
       const formData = new FormData();
       formData.append("file", new Blob([fileContent]), fileName);
@@ -3925,12 +4015,12 @@ function registerDbImportCommand(dbCmd2) {
 }
 
 // src/commands/db/migrations.ts
-import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
-import { join as join9 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { join as join10 } from "path";
 
 // src/lib/migrations.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync2, readdirSync } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2, readdirSync } from "fs";
+import { join as join9 } from "path";
 var MIGRATION_VERSION_REGEX = /^\d{1,64}$/u;
 var MIGRATION_FILENAME_REGEX = /^(\d{1,64})_([a-z0-9-]+)\.sql$/u;
 function assertValidMigrationVersion(version) {
@@ -3994,18 +4084,18 @@ function incrementMigrationVersion(version) {
   return formatMigrationVersion(new Date(nextTimestamp));
 }
 function getMigrationsDir(cwd = process.cwd()) {
-  return join8(cwd, "migrations");
+  return join9(cwd, "migrations");
 }
 function ensureMigrationsDir(cwd = process.cwd()) {
   const migrationsDir = getMigrationsDir(cwd);
-  if (!existsSync4(migrationsDir)) {
+  if (!existsSync5(migrationsDir)) {
     mkdirSync2(migrationsDir, { recursive: true });
   }
   return migrationsDir;
 }
 function listLocalMigrationFilenames(cwd = process.cwd()) {
   const migrationsDir = getMigrationsDir(cwd);
-  if (!existsSync4(migrationsDir)) {
+  if (!existsSync5(migrationsDir)) {
     return [];
   }
   return readdirSync(migrationsDir).sort((left, right) => left.localeCompare(right));
@@ -4193,12 +4283,12 @@ function registerDbMigrationsCommand(dbCmd2) {
           migration.version,
           migration.name
         );
-        const filePath = join9(migrationsDir, filename);
-        if (existingLocalVersions.has(migration.version) || existsSync5(filePath)) {
+        const filePath = join10(migrationsDir, filename);
+        if (existingLocalVersions.has(migration.version) || existsSync6(filePath)) {
           skippedFiles.push(filename);
           continue;
         }
-        writeFileSync4(filePath, formatMigrationSql(migration.statements));
+        writeFileSync5(filePath, formatMigrationSql(migration.statements));
         createdFiles.push(filename);
         existingLocalVersions.add(migration.version);
       }
@@ -4236,9 +4326,9 @@ function registerDbMigrationsCommand(dbCmd2) {
       );
       const filename = buildMigrationFilename(nextVersion, migrationName);
       const migrationsDir = ensureMigrationsDir();
-      const filePath = join9(migrationsDir, filename);
+      const filePath = join10(migrationsDir, filename);
       try {
-        writeFileSync4(filePath, "", { flag: "wx" });
+        writeFileSync5(filePath, "", { flag: "wx" });
       } catch (error) {
         if (error.code === "EEXIST") {
           throw new CLIError(`Migration file already exists: ${filename}`);
@@ -4294,11 +4384,11 @@ function registerDbMigrationsCommand(dbCmd2) {
             `Migration ${targetMigration.filename} is not the next pending local migration. Apply ${earlierPendingMigration.filename} first, or fix/delete it locally if it is invalid or no longer needed.`
           );
         }
-        const filePath = join9(getMigrationsDir(), targetMigration.filename);
-        if (!existsSync5(filePath)) {
+        const filePath = join10(getMigrationsDir(), targetMigration.filename);
+        if (!existsSync6(filePath)) {
           throw new CLIError(`Local migration file not found: ${targetMigration.filename}`);
         }
-        const sql = readFileSync4(filePath, "utf-8");
+        const sql = readFileSync5(filePath, "utf-8");
         if (!sql.trim()) {
           throw new CLIError(`Migration file is empty: ${targetMigration.filename}`);
         }
@@ -4360,11 +4450,11 @@ function registerDbMigrationsCommand(dbCmd2) {
           }
         }
         for (const migration of migrationsToApply) {
-          const filePath = join9(getMigrationsDir(), migration.filename);
-          if (!existsSync5(filePath)) {
+          const filePath = join10(getMigrationsDir(), migration.filename);
+          if (!existsSync6(filePath)) {
             throw new CLIError(`Local migration file not found: ${migration.filename}`);
           }
-          const sql = readFileSync4(filePath, "utf-8");
+          const sql = readFileSync5(filePath, "utf-8");
           if (!sql.trim()) {
             throw new CLIError(`Migration file is empty: ${migration.filename}`);
           }
@@ -4593,12 +4683,12 @@ function registerFunctionsCommands(functionsCmd2) {
 }
 
 // src/commands/functions/deploy.ts
-import { readFileSync as readFileSync5, existsSync as existsSync6 } from "fs";
+import { readFileSync as readFileSync6, existsSync as existsSync7 } from "fs";
 function resolveDeployFilePath(opts) {
   if (!opts.file) {
     throw new CLIError("Missing required option: --file <path>");
   }
-  if (!existsSync6(opts.file)) {
+  if (!existsSync7(opts.file)) {
     throw new CLIError(`Source file not found: ${opts.file}`);
   }
   return opts.file;
@@ -4609,7 +4699,7 @@ function registerFunctionsDeployCommand(functionsCmd2) {
     try {
       await requireAuth();
       const filePath = resolveDeployFilePath(opts);
-      const code = readFileSync5(filePath, "utf-8");
+      const code = readFileSync6(filePath, "utf-8");
       const name = opts.name ?? slug;
       const description = opts.description ?? "";
       let exists = false;
@@ -4730,7 +4820,7 @@ function registerFunctionsCodeCommand(functionsCmd2) {
 }
 
 // src/commands/functions/delete.ts
-import * as clack14 from "@clack/prompts";
+import * as clack15 from "@clack/prompts";
 function registerFunctionsDeleteCommand(functionsCmd2) {
   functionsCmd2.command("delete <slug>").description("Delete an edge function").action(async (slug, _opts, cmd) => {
     const { json, yes } = getRootOpts(cmd);
@@ -4741,7 +4831,7 @@ function registerFunctionsDeleteCommand(functionsCmd2) {
           message: `Delete function "${slug}"? This cannot be undone.`
         });
         if (isCancel2(confirmed) || !confirmed) {
-          clack14.log.info("Cancelled.");
+          clack15.log.info("Cancelled.");
           return;
         }
       }
@@ -4796,7 +4886,7 @@ function registerStorageBucketsCommand(storageCmd2) {
 }
 
 // src/commands/storage/upload.ts
-import { readFileSync as readFileSync6, existsSync as existsSync7 } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync8 } from "fs";
 import { basename as basename6 } from "path";
 function registerStorageUploadCommand(storageCmd2) {
   storageCmd2.command("upload <file>").description("Upload a file to a storage bucket").requiredOption("--bucket <name>", "Target bucket name").option("--key <objectKey>", "Object key (defaults to filename)").action(async (file, opts, cmd) => {
@@ -4805,10 +4895,10 @@ function registerStorageUploadCommand(storageCmd2) {
       await requireAuth();
       const config = getProjectConfig();
       if (!config) throw new ProjectNotLinkedError();
-      if (!existsSync7(file)) {
+      if (!existsSync8(file)) {
         throw new CLIError(`File not found: ${file}`);
       }
-      const fileContent = readFileSync6(file);
+      const fileContent = readFileSync7(file);
       const objectKey = opts.key ?? basename6(file);
       const bucketName = opts.bucket;
       const formData = new FormData();
@@ -4839,8 +4929,8 @@ function registerStorageUploadCommand(storageCmd2) {
 }
 
 // src/commands/storage/download.ts
-import { writeFileSync as writeFileSync5 } from "fs";
-import { join as join10, basename as basename7 } from "path";
+import { writeFileSync as writeFileSync6 } from "fs";
+import { join as join11, basename as basename7 } from "path";
 function registerStorageDownloadCommand(storageCmd2) {
   storageCmd2.command("download <objectKey>").description("Download a file from a storage bucket").requiredOption("--bucket <name>", "Source bucket name").option("--output <path>", "Output file path (defaults to current directory)").action(async (objectKey, opts, cmd) => {
     const { json } = getRootOpts(cmd);
@@ -4860,8 +4950,8 @@ function registerStorageDownloadCommand(storageCmd2) {
         throw new CLIError(err.error ?? `Download failed: ${res.status}`);
       }
       const buffer = Buffer.from(await res.arrayBuffer());
-      const outputPath = opts.output ?? join10(process.cwd(), basename7(objectKey));
-      writeFileSync5(outputPath, buffer);
+      const outputPath = opts.output ?? join11(process.cwd(), basename7(objectKey));
+      writeFileSync6(outputPath, buffer);
       if (json) {
         outputJson({ success: true, path: outputPath, size: buffer.length });
       } else {
@@ -5991,16 +6081,16 @@ function registerComputeEventsCommand(computeCmd2) {
 }
 
 // src/commands/compute/deploy.ts
-import { existsSync as existsSync9 } from "fs";
-import { join as join12, resolve as resolve4 } from "path";
+import { existsSync as existsSync10 } from "fs";
+import { join as join13, resolve as resolve4 } from "path";
 
 // src/lib/env-file.ts
-import { readFileSync as readFileSync7 } from "fs";
+import { readFileSync as readFileSync8 } from "fs";
 var ENV_KEY_REGEX2 = /^[A-Z_][A-Z0-9_]*$/;
 function parseEnvFile(path6) {
   let raw;
   try {
-    raw = readFileSync7(path6, "utf-8");
+    raw = readFileSync8(path6, "utf-8");
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new CLIError(`Could not read --env-file at ${path6}: ${msg}`);
@@ -6036,8 +6126,8 @@ function parseEnvFile(path6) {
 
 // src/lib/flyctl.ts
 import { spawn, spawnSync } from "child_process";
-import { existsSync as existsSync8, writeFileSync as writeFileSync6, unlinkSync as unlinkSync3 } from "fs";
-import { join as join11 } from "path";
+import { existsSync as existsSync9, writeFileSync as writeFileSync7, unlinkSync as unlinkSync3 } from "fs";
+import { join as join12 } from "path";
 function ensureFlyctlAvailable() {
   const r = spawnSync("flyctl", ["version"], {
     encoding: "utf8",
@@ -6050,8 +6140,8 @@ function ensureFlyctlAvailable() {
   }
 }
 function ensureFlyTomlStub(opts) {
-  const path6 = join11(opts.dir, "fly.toml");
-  if (existsSync8(path6)) {
+  const path6 = join12(opts.dir, "fly.toml");
+  if (existsSync9(path6)) {
     return () => {
     };
   }
@@ -6068,7 +6158,7 @@ primary_region = "${opts.region}"
   auto_start_machines = true
   min_machines_running = 0
 `;
-  writeFileSync6(path6, stub, "utf8");
+  writeFileSync7(path6, stub, "utf8");
   return () => {
     try {
       unlinkSync3(path6);
@@ -6238,8 +6328,8 @@ function registerComputeDeployCommand(computeCmd2) {
         return;
       }
       const absDir = resolve4(dir);
-      const dockerfilePath = join12(absDir, "Dockerfile");
-      if (!existsSync9(dockerfilePath)) {
+      const dockerfilePath = join13(absDir, "Dockerfile");
+      if (!existsSync10(dockerfilePath)) {
         throw new CLIError(
           `No Dockerfile at ${dockerfilePath}.
   Either:
@@ -6474,7 +6564,7 @@ function formatSize2(gb) {
 
 // src/commands/diagnose/index.ts
 import * as os from "os";
-import * as clack15 from "@clack/prompts";
+import * as clack16 from "@clack/prompts";
 
 // src/commands/diagnose/metrics.ts
 var METRIC_LABELS = {
@@ -7015,10 +7105,10 @@ function registerDiagnoseCommands(diagnoseCmd2) {
         if (question.length === 0 || question.length > 2e3) {
           throw new CLIError("Question must be between 1 and 2000 characters.");
         }
-        const s = !json ? clack15.spinner() : null;
+        const s = !json ? clack16.spinner() : null;
         s?.start("Collecting diagnostic data...");
         const data2 = await collectDiagnosticData(projectId, ossMode, apiUrl);
-        const cliVersion = "0.1.82";
+        const cliVersion = "0.1.84";
         s?.stop("Data collected");
         if (!json) {
           console.log(`
@@ -7151,9 +7241,9 @@ function registerDiagnoseCommands(diagnoseCmd2) {
                 void 0,
                 apiUrl
               );
-              clack15.log.success("Thanks for your feedback!");
+              clack16.log.success("Thanks for your feedback!");
             } catch {
-              clack15.log.warn("Failed to submit rating.");
+              clack16.log.warn("Failed to submit rating.");
             }
           }
         }
@@ -8382,7 +8472,7 @@ function registerPaymentsCommands(paymentsCmd2) {
 }
 
 // src/commands/posthog/setup.ts
-import * as clack16 from "@clack/prompts";
+import * as clack17 from "@clack/prompts";
 import pc3 from "picocolors";
 
 // src/lib/api/posthog.ts
@@ -8567,6 +8657,8 @@ function registerPosthogSetupCommand(program2) {
       }
     } catch (err) {
       handleError(err, json);
+    } finally {
+      await shutdownAnalytics();
     }
   });
 }
@@ -8579,13 +8671,14 @@ async function runSetup(opts) {
   if (!token) {
     throw new AuthError("Not logged in. Run `insforge login` first.");
   }
+  trackPosthog("setup", proj);
   if (!opts.json) {
-    clack16.intro("PostHog setup");
+    clack17.intro("PostHog setup");
     outputSuccess(`Linked to InsForge project: ${proj.project_name} (${proj.project_id})`);
   }
   const dashboardConnection = await ensureDashboardConnection(proj.project_id, token, opts);
   if (!opts.json) {
-    clack16.note(
+    clack17.note(
       `Run this in your terminal to wire PostHog into your app code:
 
   ${WIZARD_COMMAND}
@@ -8623,13 +8716,13 @@ async function runConnectFlow(projectId, token, authorizeUrl, opts) {
 `);
     process.stderr.write("Your browser should open automatically. If not, copy the URL above.\n");
   } else {
-    clack16.log.info("PostHog is not yet connected to your InsForge dashboard.");
+    clack17.log.info("PostHog is not yet connected to your InsForge dashboard.");
     if (opts.skipBrowser) {
-      clack16.log.info(`Open this URL to authorize PostHog:
+      clack17.log.info(`Open this URL to authorize PostHog:
 ${pc3.cyan(pc3.underline(authorizeUrl))}`);
     } else {
-      clack16.log.info("Opening browser to authorize PostHog...");
-      clack16.log.info(`If browser doesn't open, visit:
+      clack17.log.info("Opening browser to authorize PostHog...");
+      clack17.log.info(`If browser doesn't open, visit:
 ${pc3.cyan(pc3.underline(authorizeUrl))}`);
     }
   }
@@ -8640,11 +8733,11 @@ ${pc3.cyan(pc3.underline(authorizeUrl))}`);
     } catch {
     }
   }
-  const spinner11 = !opts.json && isInteractive ? clack16.spinner() : null;
+  const spinner11 = !opts.json && isInteractive ? clack17.spinner() : null;
   if (spinner11) {
     spinner11.start("Waiting for InsForge dashboard connection... (timeout: 15 minutes)");
   } else if (!opts.json) {
-    clack16.log.info("Waiting for InsForge dashboard connection (up to 15 minutes)...");
+    clack17.log.info("Waiting for InsForge dashboard connection (up to 15 minutes)...");
   }
   try {
     await pollPosthogConnection(
@@ -8668,20 +8761,20 @@ ${pc3.cyan(pc3.underline(authorizeUrl))}`);
     if (spinner11) {
       spinner11.stop("InsForge dashboard connection received.");
     } else if (!opts.json) {
-      clack16.log.success("InsForge dashboard connection received.");
+      clack17.log.success("InsForge dashboard connection received.");
     }
   } catch (err) {
     if (spinner11) {
       spinner11.stop("InsForge dashboard connection wait failed.");
     } else if (!opts.json) {
-      clack16.log.error("InsForge dashboard connection wait failed.");
+      clack17.log.error("InsForge dashboard connection wait failed.");
     }
     throw err;
   }
 }
 
 // src/commands/config/export.ts
-import { writeFileSync as writeFileSync7, existsSync as existsSync10 } from "fs";
+import { writeFileSync as writeFileSync8, existsSync as existsSync11 } from "fs";
 import { resolve as resolve5 } from "path";
 import * as p from "@clack/prompts";
 import pc4 from "picocolors";
@@ -9167,7 +9260,7 @@ function registerConfigExportCommand(cfg) {
       projectConfig = getProjectConfig();
       await requireAuth();
       const target = resolve5(process.cwd(), opts.out);
-      if (existsSync10(target) && !opts.force) {
+      if (existsSync11(target) && !opts.force) {
         if (json) {
           throw new CLIError(
             `${opts.out} exists. Re-run with --force to overwrite.`,
@@ -9194,7 +9287,7 @@ function registerConfigExportCommand(cfg) {
       const raw = await res.json();
       const { config, skipped } = configFromMetadata(raw);
       const toml = stringifyConfigToml(config);
-      writeFileSync7(target, toml, "utf8");
+      writeFileSync8(target, toml, "utf8");
       if (json) {
         console.log(JSON.stringify({ written: target, config, skipped }, null, 2));
       } else {
@@ -9230,7 +9323,7 @@ function registerConfigExportCommand(cfg) {
 }
 
 // src/commands/config/plan.ts
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync9 } from "fs";
 import { resolve as resolve6 } from "path";
 import pc5 from "picocolors";
 
@@ -9538,7 +9631,7 @@ function registerConfigPlanCommand(cfg) {
       projectConfig = getProjectConfig();
       await requireAuth();
       const tomlPath = resolve6(process.cwd(), opts.file);
-      const tomlSource = readFileSync8(tomlPath, "utf8");
+      const tomlSource = readFileSync9(tomlPath, "utf8");
       const file = parseConfigToml(tomlSource);
       const res = await ossFetch("/api/metadata");
       const raw = await res.json();
@@ -9582,7 +9675,7 @@ function registerConfigPlanCommand(cfg) {
 }
 
 // src/commands/config/apply.ts
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 import { resolve as resolve7 } from "path";
 import * as p2 from "@clack/prompts";
 import pc6 from "picocolors";
@@ -9594,7 +9687,7 @@ function registerConfigApplyCommand(cfg) {
       projectConfig = getProjectConfig();
       await requireAuth();
       const tomlPath = resolve7(process.cwd(), opts.file);
-      const tomlSource = readFileSync9(tomlPath, "utf8");
+      const tomlSource = readFileSync10(tomlPath, "utf8");
       const file = parseConfigToml(tomlSource);
       const res = await ossFetch("/api/metadata");
       const raw = await res.json();
@@ -9783,9 +9876,9 @@ function registerConfigCommand(program2) {
 }
 
 // src/commands/ai/setup.ts
-import { appendFileSync as appendFileSync2, existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
-import { isAbsolute, join as join13, relative as relative3, resolve as resolve8 } from "path";
-import * as clack17 from "@clack/prompts";
+import { appendFileSync as appendFileSync2, existsSync as existsSync13, readFileSync as readFileSync12 } from "fs";
+import { isAbsolute, join as join14, relative as relative3, resolve as resolve8 } from "path";
+import * as clack18 from "@clack/prompts";
 import pc7 from "picocolors";
 
 // src/lib/api/ai.ts
@@ -9806,7 +9899,7 @@ async function getOpenRouterApiKey() {
 }
 
 // src/lib/env-writer.ts
-import { existsSync as existsSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync11, writeFileSync as writeFileSync9 } from "fs";
 var KEY_LINE_RE = (key) => (
   // Match `KEY=...` at the start of a line (allowing leading whitespace).
   // Captures the value side; we only need the value portion to compare.
@@ -9821,8 +9914,8 @@ function stripQuotes(v) {
   return hash >= 0 ? t.slice(0, hash).trimEnd() : t;
 }
 function upsertEnvFile(path6, entries) {
-  const exists = existsSync11(path6);
-  let content = exists ? readFileSync10(path6, "utf-8") : "";
+  const exists = existsSync12(path6);
+  let content = exists ? readFileSync11(path6, "utf-8") : "";
   const result = { added: [], skipped: [], mismatched: [] };
   const additions = [];
   for (const [key, value] of Object.entries(entries)) {
@@ -9845,7 +9938,7 @@ function upsertEnvFile(path6, entries) {
       content += "\n";
     }
     content += additions.join("\n") + "\n";
-    writeFileSync8(path6, content);
+    writeFileSync9(path6, content);
   } else if (!exists) {
   }
   return result;
@@ -9878,10 +9971,10 @@ async function runAiSetup(opts) {
     throw new ProjectNotLinkedError();
   }
   if (!opts.json) {
-    clack17.intro("AI setup");
+    clack18.intro("AI setup");
     outputSuccess(`Linked to InsForge project: ${project.project_name} (${project.project_id})`);
   }
-  const spinner11 = !opts.json && isInteractive ? clack17.spinner() : null;
+  const spinner11 = !opts.json && isInteractive ? clack18.spinner() : null;
   spinner11?.start("Fetching OpenRouter key...");
   let key;
   try {
@@ -9914,7 +10007,7 @@ async function runAiSetup(opts) {
       outputInfo(pc7.dim(`${envLabel}: ${update.skipped.join(", ")} already set (matching) - left as-is.`));
     }
     for (const m of update.mismatched) {
-      clack17.log.warn(
+      clack18.log.warn(
         `${envLabel} already has ${m.key}; left existing value untouched. Remove it or pass --env-file to write elsewhere.`
       );
     }
@@ -9922,7 +10015,7 @@ async function runAiSetup(opts) {
       outputInfo(pc7.dim("Added .env*.local to .gitignore."));
     }
     if (!isLocalEnvFile(envFile)) {
-      clack17.log.warn(
+      clack18.log.warn(
         `${envLabel} may be committed unless it is listed in .gitignore. Keep ${OPENROUTER_ENV_KEY} server-only.`
       );
     }
@@ -9930,7 +10023,7 @@ async function runAiSetup(opts) {
     outputInfo("Use this key only from server-side code as process.env.OPENROUTER_API_KEY.");
     outputInfo("For deployment, add OPENROUTER_API_KEY to your hosting provider environment.");
     outputInfo(`Do not rename it to ${pc7.bold("NEXT_PUBLIC_")}, ${pc7.bold("VITE_")}, or ${pc7.bold("PUBLIC_")}.`);
-    clack17.outro("Done.");
+    clack18.outro("Done.");
   }
   return {
     envFile: envLabel,
@@ -9960,8 +10053,8 @@ function ensureLocalEnvIgnored(cwd, envFile) {
   if (!relEnvPath || relEnvPath.startsWith("..") || isAbsolute(relEnvPath)) {
     return false;
   }
-  const gitignorePath = join13(cwd, ".gitignore");
-  const existing = existsSync12(gitignorePath) ? readFileSync11(gitignorePath, "utf-8") : "";
+  const gitignorePath = join14(cwd, ".gitignore");
+  const existing = existsSync13(gitignorePath) ? readFileSync12(gitignorePath, "utf-8") : "";
   const lines = new Set(existing.split(/\r?\n/).map((line) => line.trim()));
   const envBasename = envFile.replace(/\\/g, "/").split("/").pop() ?? envFile;
   if (lines.has(".env*") || lines.has(".env.*") || lines.has(".env*.local") || lines.has(".env.local") && envBasename === ".env.local") {
@@ -9982,7 +10075,7 @@ function registerAiCommands(aiCmd2) {
 
 // src/index.ts
 var __dirname = dirname2(fileURLToPath(import.meta.url));
-var pkg = JSON.parse(readFileSync12(join14(__dirname, "../package.json"), "utf-8"));
+var pkg = JSON.parse(readFileSync13(join15(__dirname, "../package.json"), "utf-8"));
 var INSFORGE_LOGO = `
 \u2588\u2588\u2557\u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557
 \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D
@@ -10093,7 +10186,7 @@ async function showInteractiveMenu() {
   } catch {
   }
   console.log(INSFORGE_LOGO);
-  clack18.intro(`InsForge CLI v${pkg.version}`);
+  clack19.intro(`InsForge CLI v${pkg.version}`);
   const options = [];
   if (!isLoggedIn) {
     options.push({ value: "login", label: "Log in to InsForge" });
@@ -10114,7 +10207,7 @@ async function showInteractiveMenu() {
     options
   });
   if (isCancel2(action)) {
-    clack18.cancel("Bye!");
+    clack19.cancel("Bye!");
     process.exit(0);
   }
   switch (action) {