npm - @miosa/cli - Versions diffs - 1.0.35 → 1.0.37 - Mend

@miosa/cli 1.0.35 → 1.0.37

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/dist/app-manifest.d.ts +31 -0
package/dist/app-manifest.d.ts.map +1 -0
package/dist/app-manifest.js +122 -0
package/dist/app-manifest.js.map +1 -0
package/dist/bin/miosa.js +1 -0
package/dist/bin/miosa.js.map +1 -1
package/dist/commands/capabilities.d.ts.map +1 -1
package/dist/commands/capabilities.js +12 -0
package/dist/commands/capabilities.js.map +1 -1
package/dist/commands/db.d.ts.map +1 -1
package/dist/commands/db.js +4 -34
package/dist/commands/db.js.map +1 -1
package/dist/commands/new.d.ts +3 -0
package/dist/commands/new.d.ts.map +1 -0
package/dist/commands/new.js +296 -0
package/dist/commands/new.js.map +1 -0
package/dist/commands/sandbox.d.ts.map +1 -1
package/dist/commands/sandbox.js +173 -26
package/dist/commands/sandbox.js.map +1 -1
package/package.json +1 -1

package/dist/commands/new.js ADDED Viewed

@@ -0,0 +1,296 @@
+import fs from "node:fs";
+import path from "node:path";
+import chalk from "chalk";
+import { isJsonMode } from "./util.js";
+import { UserError } from "../errors.js";
+const STARTERS = {
+    nextjs: {
+        id: "nextjs",
+        name: "Next.js App",
+        description: "App Router starter for page/template based apps",
+        files: [
+            {
+                path: "miosa.app.yml",
+                content: `template: nextjs
+workdir: /workspace
+install: npm install
+dev: npm run dev -- -H 0.0.0.0 -p 3000
+build: npm run build
+start: npm start
+port: 3000
+readiness:
+  path: /
+`,
+            },
+            {
+                path: "package.json",
+                content: JSON.stringify({
+                    scripts: {
+                        dev: "next dev",
+                        build: "next build",
+                        start: "next start -H 0.0.0.0 -p 3000",
+                    },
+                    dependencies: {
+                        "@types/node": "latest",
+                        "@types/react": "latest",
+                        "@types/react-dom": "latest",
+                        next: "latest",
+                        react: "latest",
+                        "react-dom": "latest",
+                        typescript: "latest",
+                    },
+                    devDependencies: {},
+                }, null, 2) + "\n",
+            },
+            {
+                path: "app/page.tsx",
+                content: `export default function Page() {
+  return (
+    <main style={{ fontFamily: "Inter, system-ui, sans-serif", padding: 40 }}>
+      <h1>MIOSA app</h1>
+      <p>Build in a sandbox, preview instantly, publish when ready.</p>
+    </main>
+  );
+}
+`,
+            },
+            {
+                path: "app/layout.tsx",
+                content: `export const metadata = { title: "MIOSA app" };
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="en">
+      <body>{children}</body>
+    </html>
+  );
+}
+`,
+            },
+            { path: "tsconfig.json", content: "{}\n" },
+        ],
+        next: [
+            "miosa sandbox deploy . --wait",
+            "miosa sandbox publish <sandbox-id> --slug my-app --wait",
+        ],
+    },
+    "nextjs-postgres": {
+        id: "nextjs-postgres",
+        name: "Next.js + Postgres App",
+        description: "Next.js starter that expects DATABASE_URL at runtime",
+        files: [
+            {
+                path: "miosa.app.yml",
+                content: `template: nextjs-postgres
+workdir: /workspace
+install: npm install
+dev: npm run dev -- -H 0.0.0.0 -p 3000
+build: npm run build
+start: npm start
+port: 3000
+readiness:
+  path: /
+`,
+            },
+            {
+                path: "package.json",
+                content: JSON.stringify({
+                    scripts: {
+                        dev: "next dev",
+                        build: "next build",
+                        start: "next start -H 0.0.0.0 -p 3000",
+                    },
+                    dependencies: {
+                        "@types/node": "latest",
+                        "@types/react": "latest",
+                        "@types/react-dom": "latest",
+                        next: "latest",
+                        pg: "latest",
+                        react: "latest",
+                        "react-dom": "latest",
+                        typescript: "latest",
+                    },
+                    devDependencies: {},
+                }, null, 2) + "\n",
+            },
+            {
+                path: "app/page.tsx",
+                content: `export default function Page() {
+  return (
+    <main style={{ fontFamily: "Inter, system-ui, sans-serif", padding: 40 }}>
+      <h1>MIOSA Next.js + Postgres</h1>
+      <p>DATABASE_URL is {process.env.DATABASE_URL ? "configured" : "not configured"}.</p>
+    </main>
+  );
+}
+`,
+            },
+            {
+                path: "app/layout.tsx",
+                content: `export const metadata = { title: "MIOSA Postgres app" };
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="en">
+      <body>{children}</body>
+    </html>
+  );
+}
+`,
+            },
+            { path: "tsconfig.json", content: "{}\n" },
+        ],
+        next: [
+            "miosa databases create --engine postgres --wait",
+            "miosa sandbox deploy . --template nextjs-postgres --wait",
+            "miosa sandbox publish <sandbox-id> --database existing:<db-id> --slug my-app --wait",
+        ],
+    },
+    "vite-react": {
+        id: "vite-react",
+        name: "Vite React App",
+        description: "Fast frontend app starter",
+        files: [
+            {
+                path: "miosa.app.yml",
+                content: `template: vite-react
+workdir: /workspace
+install: npm install
+dev: npm run dev -- --host 0.0.0.0 --port 5173
+build: npm run build
+output: dist
+port: 5173
+readiness:
+  path: /
+`,
+            },
+            {
+                path: "package.json",
+                content: JSON.stringify({
+                    scripts: { dev: "vite", build: "vite build", preview: "vite preview" },
+                    dependencies: {
+                        "@vitejs/plugin-react": "latest",
+                        vite: "latest",
+                        react: "latest",
+                        "react-dom": "latest",
+                        typescript: "latest",
+                    },
+                    devDependencies: {},
+                }, null, 2) + "\n",
+            },
+            { path: "index.html", content: `<div id="root"></div><script type="module" src="/src/App.tsx"></script>\n` },
+            {
+                path: "src/App.tsx",
+                content: `import { createRoot } from "react-dom/client";
+function App() {
+  return <main style={{ padding: 40, fontFamily: "system-ui" }}>MIOSA Vite app</main>;
+}
+createRoot(document.getElementById("root")!).render(<App />);
+`,
+            },
+        ],
+        next: ["miosa sandbox deploy . --wait"],
+    },
+    fastapi: {
+        id: "fastapi",
+        name: "FastAPI App",
+        description: "Python API starter",
+        files: [
+            {
+                path: "miosa.app.yml",
+                content: `template: fastapi
+workdir: /workspace
+install: pip install -r requirements.txt
+dev: uvicorn main:app --host 0.0.0.0 --port 8000
+build: "true"
+start: uvicorn main:app --host 0.0.0.0 --port 8000
+port: 8000
+readiness:
+  path: /
+`,
+            },
+            { path: "requirements.txt", content: "fastapi\nuvicorn[standard]\n" },
+            {
+                path: "main.py",
+                content: `from fastapi import FastAPI
+app = FastAPI()
+@app.get("/")
+def read_root():
+    return {"ok": True, "app": "miosa-fastapi"}
+`,
+            },
+        ],
+        next: ["miosa sandbox deploy . --wait"],
+    },
+    static: {
+        id: "static",
+        name: "Static Site",
+        description: "Plain HTML/CSS/JS starter",
+        files: [
+            {
+                path: "miosa.app.yml",
+                content: `template: static-site
+workdir: /workspace
+dev: python3 -m http.server 5173 --bind 0.0.0.0
+output: /workspace
+port: 5173
+readiness:
+  path: /
+`,
+            },
+            { path: "index.html", content: "<h1>MIOSA static site</h1>\n" },
+        ],
+        next: ["miosa sandbox deploy . --wait"],
+    },
+};
+export function register(program) {
+    program
+        .command("new <template> [dir]")
+        .description("Create a MIOSA app starter with miosa.app.yml defaults")
+        .option("--force", "Write into a non-empty directory")
+        .option("--json", "Output as JSON")
+        .action((template, dir = template, opts) => {
+        const starter = STARTERS[template];
+        if (!starter) {
+            throw new UserError(`Unknown app starter: ${template}`, `Use one of: ${Object.keys(STARTERS).join(", ")}`);
+        }
+        const target = path.resolve(dir);
+        if (fs.existsSync(target) && fs.readdirSync(target).length > 0 && !opts.force) {
+            throw new UserError(`Directory is not empty: ${target}`, "Pass --force to write starter files anyway.");
+        }
+        for (const file of starter.files) {
+            const fullPath = path.join(target, file.path);
+            fs.mkdirSync(path.dirname(fullPath), { recursive: true });
+            if (fs.existsSync(fullPath) && !opts.force) {
+                throw new UserError(`File already exists: ${fullPath}`);
+            }
+            fs.writeFileSync(fullPath, file.content);
+        }
+        const result = {
+            ok: true,
+            data: {
+                template: starter.id,
+                name: starter.name,
+                dir: target,
+                files: starter.files.map((file) => file.path),
+                next: starter.next,
+            },
+        };
+        if (isJsonMode(opts)) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.log();
+        console.log(chalk.green(`Created ${starter.name}`));
+        console.log(chalk.dim(target));
+        console.log();
+        for (const cmd of starter.next)
+            console.log(`  ${chalk.cyan(cmd)}`);
+        console.log();
+    });
+}
+//# sourceMappingURL=new.js.map

package/dist/commands/new.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"new.js","sourceRoot":"","sources":["../../src/commands/new.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAoBzC,MAAM,QAAQ,GAA4B;IACxC,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,iDAAiD;QAC9D,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;;;;;;;;;CAShB;aACM;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,SAAS,CACrB;oBACE,OAAO,EAAE;wBACP,GAAG,EAAE,UAAU;wBACf,KAAK,EAAE,YAAY;wBACnB,KAAK,EAAE,+BAA+B;qBACvC;oBACD,YAAY,EAAE;wBACZ,aAAa,EAAE,QAAQ;wBACvB,cAAc,EAAE,QAAQ;wBACxB,kBAAkB,EAAE,QAAQ;wBAC5B,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,QAAQ;wBACrB,UAAU,EAAE,QAAQ;qBACrB;oBACD,eAAe,EAAE,EAAE;iBACpB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI;aACT;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE;;;;;;;;CAQhB;aACM;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE;;;;;;;;;CAShB;aACM;YACD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE;SAC3C;QACD,IAAI,EAAE;YACJ,+BAA+B;YAC/B,yDAAyD;SAC1D;KACF;IACD,iBAAiB,EAAE;QACjB,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;;;;;;;;;CAShB;aACM;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,SAAS,CACrB;oBACE,OAAO,EAAE;wBACP,GAAG,EAAE,UAAU;wBACf,KAAK,EAAE,YAAY;wBACnB,KAAK,EAAE,+BAA+B;qBACvC;oBACD,YAAY,EAAE;wBACZ,aAAa,EAAE,QAAQ;wBACvB,cAAc,EAAE,QAAQ;wBACxB,kBAAkB,EAAE,QAAQ;wBAC5B,IAAI,EAAE,QAAQ;wBACd,EAAE,EAAE,QAAQ;wBACZ,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,QAAQ;wBACrB,UAAU,EAAE,QAAQ;qBACrB;oBACD,eAAe,EAAE,EAAE;iBACpB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI;aACT;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE;;;;;;;;CAQhB;aACM;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE;;;;;;;;;CAShB;aACM;YACD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE;SAC3C;QACD,IAAI,EAAE;YACJ,iDAAiD;YACjD,0DAA0D;YAC1D,qFAAqF;SACtF;KACF;IACD,YAAY,EAAE;QACZ,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;;;;;;;;;CAShB;aACM;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,SAAS,CACrB;oBACE,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE;oBACtE,YAAY,EAAE;wBACZ,sBAAsB,EAAE,QAAQ;wBAChC,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,QAAQ;wBACrB,UAAU,EAAE,QAAQ;qBACrB;oBACD,eAAe,EAAE,EAAE;iBACpB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI;aACT;YACD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,2EAA2E,EAAE;YAC5G;gBACE,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE;;;;;;;CAOhB;aACM;SACF;QACD,IAAI,EAAE,CAAC,+BAA+B,CAAC;KACxC;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,oBAAoB;QACjC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;;;;;;;;;CAShB;aACM;YACD,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8BAA8B,EAAE;YACrE;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE;;;;;;;CAOhB;aACM;SACF;QACD,IAAI,EAAE,CAAC,+BAA+B,CAAC;KACxC;IACD,MAAM,EAAE;QACN,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,2BAA2B;QACxC,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE;;;;;;;CAOhB;aACM;YACD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,8BAA8B,EAAE;SAChE;QACD,IAAI,EAAE,CAAC,+BAA+B,CAAC;KACxC;CACF,CAAC;AAEF,MAAM,UAAU,QAAQ,CAAC,OAAgB;IACvC,OAAO;SACJ,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,wDAAwD,CAAC;SACrE,MAAM,CAAC,SAAS,EAAE,kCAAkC,CAAC;SACrD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,CAAC,QAAgB,EAAE,GAAG,GAAG,QAAQ,EAAE,IAAgB,EAAE,EAAE;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CACjB,wBAAwB,QAAQ,EAAE,EAClC,eAAe,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClD,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CACjB,2BAA2B,MAAM,EAAE,EACnC,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC3C,MAAM,IAAI,SAAS,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,IAAI;YACR,IAAI,EAAE;gBACJ,QAAQ,EAAE,OAAO,CAAC,EAAE;gBACpB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,EAAE,MAAM;gBACX,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB;SACF,CAAC;QAEF,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/sandbox.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;~~AAwCzC~~,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,~~CA2zD~~/C"}
1	+ {"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/commands/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgDzC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA67D/C"}

package/dist/commands/sandbox.js CHANGED Viewed

@@ -7,6 +7,7 @@ import * as http from "node:http";
 import * as https from "node:https";
 import chalk from "chalk";
 import WebSocket from "ws";
+import { loadAppManifest, manifestPort, manifestProbePath, manifestStartCommand, parseAppManifest, } from "../app-manifest.js";
 import { detectFramework } from "../framework-detector.js";
 import { addDataOption, client, apiPath, deleteAndPrint, enc, getAndPrint, postAndPrint, printValue, runAction, unwrap, } from "./enterprise-util.js";
 import { loadConfig } from "../config.js";
@@ -491,9 +492,12 @@ export function register(program) {
         .option("--start <command>", "Start command to run inside /workspace")
         .option("--install-command <command>", "Install command to run before start")
         .option("--no-install", "Skip automatic dependency install")
+        .option("--source <source>", "Source: git:https://... or tarball:https://... for repo-backed preview deploy")
+        .option("--revision <revision>", "Git revision/branch for --source git:...")
+        .option("--depth <n>", "Git clone depth for --source git:...", parseIntegerOption)
         .option("--wait", "Wait until the public preview returns a good HTTP status")
         .option("--timeout <duration>", "Wait timeout, e.g. 180s or 3m", parseDurationSec, 180)
-        .option("--probe-path <path>", "HTTP path to probe", "/")
+        .option("--probe-path <path>", "HTTP path to probe")
         .option("--json", "Output as JSON")
         .action((localDir = ".", opts) => runAction(async () => {
         const result = await deploySandbox(localDir, opts);
@@ -723,6 +727,91 @@ export function register(program) {
         const lines = Array.isArray(result["lines"]) ? result["lines"] : [];
         process.stdout.write(lines.join("\n") + (lines.length > 0 ? "\n" : ""));
     }));
+    const env = sandbox
+        .command("env")
+        .description("Manage encrypted environment variables for a sandbox");
+    env
+        .command("list <sandbox-id>")
+        .description("List sandbox env var names and masked previews")
+        .option("--json", "Output as JSON")
+        .action((id, opts) => runAction(async () => {
+        const result = unwrap(await client().apiGet(apiPath(`/sandboxes/${enc(id)}/env`)));
+        if (isJsonMode(opts)) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        const rows = Array.isArray(result) ? result : [];
+        if (rows.length === 0) {
+            console.log(chalk.dim("No sandbox env vars."));
+            return;
+        }
+        renderTable(rows, [
+            { header: "NAME", key: "name", width: 32 },
+            { header: "VALUE", key: "preview", width: 24 },
+            { header: "UPDATED", key: "updated_at", width: 28 },
+        ]);
+    }));
+    env
+        .command("set <sandbox-id> <pairs...>")
+        .description("Set encrypted sandbox env vars as KEY=VALUE")
+        .option("--json", "Output as JSON")
+        .action((id, pairs, opts) => runAction(async () => {
+        const vars = Object.entries(parseEnvPairs(pairs)).map(([key, value]) => ({
+            key,
+            value,
+        }));
+        const result = unwrap(await client().apiPut(apiPath(`/sandboxes/${enc(id)}/env`), {
+            vars,
+        }));
+        if (isJsonMode(opts)) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.log(chalk.green(`Set ${vars.length} sandbox env var(s).`));
+    }));
+    env
+        .command("delete <sandbox-id> <key>")
+        .alias("unset")
+        .description("Delete an encrypted sandbox env var")
+        .option("--json", "Output as JSON")
+        .action((id, key, opts) => runAction(async () => {
+        const result = unwrap(await client().apiDelete(apiPath(`/sandboxes/${enc(id)}/env/${enc(key)}`)));
+        if (isJsonMode(opts)) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.log(chalk.green(`Deleted ${key}.`));
+    }));
+    env
+        .command("sync <sandbox-id>")
+        .description("Sync encrypted sandbox env vars into the running VM")
+        .option("--json", "Output as JSON")
+        .action((id, opts) => runAction(async () => {
+        const result = unwrap(await client().apiPost(apiPath(`/sandboxes/${enc(id)}/env/sync`), {}));
+        if (isJsonMode(opts)) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        const status = result && typeof result === "object" && "status" in result
+            ? String(result["status"])
+            : "ok";
+        console.log(chalk.green(`Sandbox env sync ${status}.`));
+    }));
+    const sandboxDb = sandbox
+        .command("db")
+        .description("Attach managed databases to sandboxes");
+    sandboxDb
+        .command("attach <sandbox-id> <database-id>")
+        .description("Attach a managed database and persist DATABASE_URL env vars")
+        .option("--json", "Output as JSON")
+        .action((id, databaseId, opts) => runAction(async () => {
+        const result = unwrap(await client().apiPost(apiPath(`/sandboxes/${enc(id)}/database`), { database_id: databaseId }));
+        if (isJsonMode(opts)) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.log(chalk.green(`Attached database ${databaseId} to sandbox ${id}.`));
+    }));
     sandbox
         .command("doctor <sandbox-id>")
         .description("Diagnose sandbox app readiness across sandbox state, internal HTTP, public route, and TLS/edge reachability")
@@ -1464,42 +1553,66 @@ function validateServiceName(name) {
 }
 async function deploySandbox(localDir, opts) {
     const sourceDir = path.resolve(localDir);
-    if (!fs.existsSync(sourceDir) || !fs.statSync(sourceDir).isDirectory()) {
+    const sourceBacked = !!opts.source;
+    if (!sourceBacked && (!fs.existsSync(sourceDir) || !fs.statSync(sourceDir).isDirectory())) {
         throw new UserError(`Local directory not found: ${sourceDir}`);
     }
     const c = client();
-    const detection = detectFramework(sourceDir);
-    const port = opts.port ?? opts.publishPort ?? detection?.port ?? 5173;
-    const start = opts.start ?? defaultStartCommand(detection?.framework, port);
-    const installCommand = opts.install === false
-        ? null
-        : (opts.installCommand ?? defaultInstallCommand(sourceDir));
+    let appManifest = sourceBacked ? null : loadAppManifest(sourceDir)?.manifest ?? null;
+    const detection = sourceBacked ? null : detectFramework(sourceDir);
+    const port = opts.port ?? opts.publishPort ?? manifestPort(appManifest) ?? detection?.port ?? 5173;
+    const probePath = opts.probePath ?? manifestProbePath(appManifest) ?? "/";
+    let remoteWorkdir = normalizeRemoteWorkdir(appManifest?.workdir ?? "/workspace");
+    const start = opts.start ??
+        manifestStartCommand(appManifest) ??
+        defaultStartCommand(detection?.framework ?? appManifest?.framework, port);
     const sandboxId = opts.sandbox ??
         (deployStep(opts, "Creating sandbox"),
-            await createSandboxForDeploy(c, opts.template ?? "miosa-sandbox", opts.name));
+            await createSandboxForDeploy(c, opts.template ?? appManifest?.template ?? "miosa-sandbox", opts.name, {
+                source: opts.source,
+                revision: opts.revision,
+                depth: opts.depth,
+            }));
     deployStep(opts, "Waiting for sandbox");
     await waitForSandboxRunning(c, sandboxId, Math.min(opts.timeout, 120));
-    deployStep(opts, "Uploading files");
-    const archivePath = createDeployArchive(sourceDir);
-    const remoteArchive = `/tmp/miosa-deploy-${Date.now()}.tgz`;
-    try {
-        await uploadFileToSandbox(c, sandboxId, archivePath, remoteArchive);
+    if (sourceBacked) {
+        deployStep(opts, "Waiting for source import");
+        appManifest = await readRemoteAppManifest(c, sandboxId, opts.timeout);
+        remoteWorkdir = normalizeRemoteWorkdir(appManifest?.workdir ?? "/workspace");
     }
-    finally {
-        fs.rmSync(archivePath, { force: true });
+    else {
+        deployStep(opts, "Uploading files");
+        const archivePath = createDeployArchive(sourceDir);
+        const remoteArchive = `/tmp/miosa-deploy-${Date.now()}.tgz`;
+        try {
+            await uploadFileToSandbox(c, sandboxId, archivePath, remoteArchive);
+            deployStep(opts, "Extracting workspace");
+            await execSandbox(c, sandboxId, `mkdir -p ${shellQuote(remoteWorkdir)} && tar -xzf ${shellQuote(remoteArchive)} -C ${shellQuote(remoteWorkdir)}`, "/");
+        }
+        finally {
+            fs.rmSync(archivePath, { force: true });
+        }
     }
-    deployStep(opts, "Extracting workspace");
-    await execSandbox(c, sandboxId, `mkdir -p /workspace && tar -xzf ${shellQuote(remoteArchive)} -C /workspace`, "/");
+    const resolvedPort = opts.port ?? opts.publishPort ?? manifestPort(appManifest) ?? port;
+    const resolvedProbePath = opts.probePath ?? manifestProbePath(appManifest) ?? probePath;
+    const resolvedStart = opts.start ??
+        manifestStartCommand(appManifest) ??
+        start;
+    const installCommand = opts.install === false
+        ? null
+        : (opts.installCommand ??
+            (appManifest?.install === false ? null : appManifest?.install) ??
+            (sourceBacked ? "npm install" : defaultInstallCommand(sourceDir)));
     if (installCommand) {
         deployStep(opts, `Installing dependencies: ${installCommand}`);
-        await execSandbox(c, sandboxId, installCommand, "/workspace", opts.timeout);
+        await execSandbox(c, sandboxId, installCommand, remoteWorkdir, opts.timeout);
     }
-    deployStep(opts, `Starting app on port ${port}`);
-    await execSandbox(c, sandboxId, `fuser -k ${port}/tcp >/dev/null 2>&1 || true; nohup sh -lc ${shellQuote(start)} > ${shellQuote(`/tmp/miosa-app-${port}.log`)} 2>&1 & echo $!`, "/workspace");
+    deployStep(opts, `Starting app on port ${resolvedPort}`);
+    await execSandbox(c, sandboxId, `fuser -k ${resolvedPort}/tcp >/dev/null 2>&1 || true; nohup sh -lc ${shellQuote(resolvedStart)} > ${shellQuote(`/tmp/miosa-app-${resolvedPort}.log`)} 2>&1 & echo $!`, remoteWorkdir);
     deployStep(opts, "Checking internal app readiness");
-    const internal = await waitForInternalHttp(c, sandboxId, port, opts.probePath, Math.min(opts.timeout, 60));
+    const internal = await waitForInternalHttp(c, sandboxId, resolvedPort, resolvedProbePath, Math.min(opts.timeout, 60));
     deployStep(opts, "Creating public preview route");
-    const exposed = await c.apiPost(apiPath(`/sandboxes/${enc(sandboxId)}/expose`), { port, title: "app preview" });
+    const exposed = await c.apiPost(apiPath(`/sandboxes/${enc(sandboxId)}/expose`), { port: resolvedPort, title: "app preview" });
     const previewUrl = extractUrl(unwrap(exposed));
     if (!previewUrl) {
         throw new UserError("Sandbox expose did not return a preview URL.");
@@ -1507,11 +1620,11 @@ async function deploySandbox(localDir, opts) {
     if (opts.wait)
         deployStep(opts, "Checking public preview readiness");
     const edge = opts.wait
-        ? await waitForPublicPreview(previewUrl, opts.probePath, opts.timeout)
+        ? await waitForPublicPreview(previewUrl, resolvedProbePath, opts.timeout)
         : { ok: false, status: null };
     return {
         sandbox_id: sandboxId,
-        port,
+        port: resolvedPort,
         preview_url: previewUrl,
         preview_ready: edge.ok,
         internal_status: internal.status,
@@ -1688,16 +1801,43 @@ function renderDoctorReport(report) {
         console.log();
     }
 }
-async function createSandboxForDeploy(c, template, name) {
+async function createSandboxForDeploy(c, template, name, source) {
     const body = { template_id: template };
     if (name)
         body["name"] = name;
+    if (source?.source)
+        body["source"] = source.source;
+    if (source?.revision)
+        body["revision"] = source.revision;
+    if (source?.depth != null)
+        body["depth"] = source.depth;
     const created = unwrap(await c.apiPost(apiPath("/sandboxes"), body));
     const sandboxId = typeof created["id"] === "string" ? created["id"] : "";
     if (!sandboxId)
         throw new UserError("Sandbox create did not return an id.");
     return sandboxId;
 }
+async function readRemoteAppManifest(c, sandboxId, timeoutSec) {
+    const deadline = Date.now() + Math.min(timeoutSec, 120) * 1000;
+    while (Date.now() < deadline) {
+        for (const filename of ["miosa.app.yml", "miosa.app.yaml", "miosa.app.json"]) {
+            const result = await c
+                .apiPost(apiPath(`/sandboxes/${enc(sandboxId)}/exec`), {
+                command: `test -f /workspace/${filename} && cat /workspace/${filename}`,
+                cwd: "/workspace",
+                timeout: 10,
+            })
+                .then(unwrap)
+                .catch(() => null);
+            const row = asRecord(result);
+            if (Number(row?.["exit_code"] ?? 1) === 0 && typeof row?.["stdout"] === "string") {
+                return parseAppManifest(filename, row["stdout"]);
+            }
+        }
+        await sleep(1500);
+    }
+    return null;
+}
 async function waitForSandboxRunning(c, sandboxId, timeoutSec) {
     const deadline = Date.now() + timeoutSec * 1000;
     while (Date.now() < deadline) {
@@ -1879,6 +2019,13 @@ function defaultStartCommand(framework, port) {
         return `python3 -m http.server ${port} --bind 0.0.0.0`;
     return `npm run dev -- --host 0.0.0.0 --port ${port}`;
 }
+function normalizeRemoteWorkdir(value) {
+    if (!value || value === ".")
+        return "/workspace";
+    if (!value.startsWith("/"))
+        return `/workspace/${value.replace(/^\.\//, "")}`;
+    return value;
+}
 function extractUrl(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return null;