@supacloud/cli 0.38.0 → 0.40.0

package/dist/index.js

@@ -238452,20 +238452,20 @@ async function runCli(cliTools, args, options = {}) {
     const shape = getSchemaShape(tool2.schema);
     const actionField = shape.action;
     const actionOptions = getEnumOptions(actionField);
+    const actionless = toolName2 === "deploy";
     const otherFields = Object.entries(shape).filter(([name]) => name !== "action");
     const actionLines = actionOptions.length ? `Available actions:
   ${actionOptions.join(`
-  `)}` : "This command does not declare action metadata.";
+  `)}` : actionless ? "" : "This command does not declare action metadata.";
     const argLines = otherFields.length ? otherFields.map(([name, field]) => {
       const description = getDescription(field) || "(no description)";
       return `  --${name}  ${description}`;
     }).join(`
 `) : "  (no additional flags)";
     return [
-      `Usage: ${commandName} ${toolName2} <action> [--flags]`,
-      "",
-      actionLines,
+      `Usage: ${commandName} ${toolName2}${actionless ? "" : " <action>"} [--flags]`,
       "",
+      ...actionLines ? [actionLines, ""] : [],
       "Flags:",
       argLines
     ].join(`
@@ -238764,6 +238764,7 @@ function resolveSupaCloudContext(env = process.env, cwd = process.cwd(), selecti
 
 // src/shared/execution-policy.ts
 var ACTION_POLICY = {
+  deploy: { write: ["deploy"] },
   project: {
     read: ["get", "endpoints", "health", "logs", "api_keys", "settings", "tasks", "task_detail", "task_stats", "dlq", "background_settings"],
     write: ["pause", "restore", "task_cancel", "task_retry", "update_background_settings"],
@@ -238850,6 +238851,8 @@ function declaredMode(moduleName, action) {
   return;
 }
 function executionMode(moduleName, action, args) {
+  if (moduleName === "deploy" && args.dry_run === true)
+    return "read";
   if (moduleName === "database" && ["push_migrations", "baseline_migrations"].includes(action) && args.dry_run === true)
     return "read";
   if (moduleName === "supabase" && action === "push" && args.dry_run === true)
@@ -238857,7 +238860,7 @@ function executionMode(moduleName, action, args) {
   return declaredMode(moduleName, action);
 }
 function authorizeExecution(moduleName, args, authorization) {
-  const action = typeof args.action === "string" ? args.action : "";
+  const action = typeof args.action === "string" ? args.action : moduleName === "deploy" ? "deploy" : "";
   if (!action)
     return;
   const mode = executionMode(moduleName, action, args);
@@ -248354,10 +248357,35 @@ async function runExplain2(args, root) {
   const text = explainObject(manifest, target);
   return textResult2(text, text.startsWith("未找到对象"));
 }
-async function runModuleCheckAction(args, root, environment) {
+var defaultLiteSpawn = async (command, cwd) => {
+  const proc = Bun.spawn({ cmd: command, cwd, stdout: "pipe", stderr: "pipe" });
+  const [exitCode, stdout, stderr] = await Promise.all([
+    proc.exited,
+    new Response(proc.stdout).text(),
+    new Response(proc.stderr).text()
+  ]);
+  return { exitCode, stdout, stderr };
+};
+async function runModuleCheckLite(args, root, spawn3, liteBinary) {
+  const projectDir = resolve8(args.project_dir?.trim() || root);
+  const binary = liteBinary === undefined ? Bun.which("supacloud-lite") : liteBinary;
+  if (!binary) {
+    throw new Error("db module_check --lite 需要本机可用的 supacloud-lite（npm i -g @supacloud/lite，或加入 PATH）");
+  }
+  const command = [binary, "db", "check", "--project-dir", projectDir];
+  if (args.module_file?.trim())
+    command.push("--module-file", resolve8(root, args.module_file.trim()));
+  const result = await spawn3(command, projectDir);
+  const output = [result.stdout.trim(), result.stderr.trim()].filter(Boolean).join(`
+`);
+  return textResult2(output || "lite db check 无输出", result.exitCode !== 0);
+}
+async function runModuleCheckAction(args, root, environment, spawn3, liteBinary) {
+  if (args.lite)
+    return runModuleCheckLite(args, root, spawn3, liteBinary);
   const databaseUrl = args.database_url?.trim() || environment.DATABASE_URL?.trim();
   if (!databaseUrl) {
-    throw new Error("db module_check requires --database_url 或环境变量 DATABASE_URL");
+    throw new Error("db module_check requires --database_url、环境变量 DATABASE_URL 或 --lite");
   }
   const modules = await loadDatabaseModules(root, args.module_file);
   const schemas = parseSchemas(args.schema);
@@ -248385,14 +248413,17 @@ async function runModuleCheckAction(args, root, environment) {
 function registerDbGovernanceTools(server2, options = {}) {
   const environment = options.environment || process.env;
   const fallbackRoot = options.currentWorkingDirectory || process.cwd();
-  server2.tool("db", "Local database governance (@supacloud/db): lint declared modules, explain objects, reconcile against a live catalog. Actions: lint, explain, module_check", {
+  const liteSpawn = options.liteSpawn || defaultLiteSpawn;
+  server2.tool("db", "Local database governance (@supacloud/db): lint declared modules, explain objects, reconcile against a live catalog or a local SupaCloud Lite project. Actions: lint, explain, module_check", {
     action: withDescription(stringEnum(["lint", "explain", "module_check"]), "Database governance action"),
     module: optional(Type.String(), "[lint] Only lint this manifest module (default: all)"),
     root: optional(Type.String(), "[*] Project root (default: current directory)"),
     module_file: optional(Type.String(), "[*] File exporting defineDatabaseModule(...) (default: <root>/db/modules.ts)"),
     target: optional(Type.String(), "[explain] Policy / function / table name to explain"),
     database_url: optional(Type.String(), "[module_check] Postgres connection URL (default: DATABASE_URL)"),
-    schema: optional(Type.String(), "[module_check] Comma-separated schemas to inspect (default: public)")
+    schema: optional(Type.String(), "[module_check] Comma-separated schemas to inspect (default: public)"),
+    lite: optional(Type.Boolean(), "[module_check] Reconcile against a local SupaCloud Lite project (runs supacloud-lite db check)"),
+    project_dir: optional(Type.String(), "[module_check] Lite project directory (with --lite; default: --root)")
   }, async (request) => {
     const root = resolve8(request.root || fallbackRoot);
     switch (request.action) {
@@ -248401,7 +248432,7 @@ function registerDbGovernanceTools(server2, options = {}) {
       case "explain":
         return runExplain2(request, root);
       case "module_check":
-        return runModuleCheckAction(request, root, environment);
+        return runModuleCheckAction(request, root, environment, liteSpawn, options.liteBinary);
       default:
         return textResult2(`Unknown db action: ${String(request.action)}`, true);
     }
@@ -249451,10 +249482,1166 @@ function registerReleaseTools(server2, http, options = {}) {
     });
   });
 }
+
+// src/shared/tools/deploy-tools.ts
+import { access, lstat, mkdtemp, opendir, readFile as readFile2, rm, writeFile as writeFile3 } from "node:fs/promises";
+import { createHash as createHash4 } from "node:crypto";
+import { tmpdir as tmpdir2 } from "node:os";
+import { basename as basename4, dirname as dirname4, join as join9, relative as relative4, resolve as resolve10, sep as sep4 } from "node:path";
+import { spawn as spawn3 } from "node:child_process";
+
+// node_modules/fflate/esm/index.mjs
+import { createRequire as createRequire2 } from "module";
+var require2 = createRequire2("/");
+var _a;
+var Worker;
+var isMarkedAsUntransferable;
+try {
+  _a = require2("worker_threads"), Worker = _a.Worker, isMarkedAsUntransferable = _a.isMarkedAsUntransferable;
+} catch (e) {}
+var u8 = Uint8Array;
+var u16 = Uint16Array;
+var i32 = Int32Array;
+var fleb = new u8([0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3, 4, 4, 4, 4, 5, 5, 5, 5, 0, 0, 0, 0]);
+var fdeb = new u8([0, 0, 0, 0, 1, 1, 2, 2, 3, 3, 4, 4, 5, 5, 6, 6, 7, 7, 8, 8, 9, 9, 10, 10, 11, 11, 12, 12, 13, 13, 0, 0]);
+var clim = new u8([16, 17, 18, 0, 8, 7, 9, 6, 10, 5, 11, 4, 12, 3, 13, 2, 14, 1, 15]);
+var freb = function(eb, start) {
+  var b = new u16(31);
+  for (var i = 0;i < 31; ++i) {
+    b[i] = start += 1 << eb[i - 1];
+  }
+  var r = new i32(b[30]);
+  for (var i = 1;i < 30; ++i) {
+    for (var j = b[i];j < b[i + 1]; ++j) {
+      r[j] = j - b[i] << 5 | i;
+    }
+  }
+  return { b, r };
+};
+var _a = freb(fleb, 2);
+var fl = _a.b;
+var revfl = _a.r;
+fl[28] = 258, revfl[258] = 28;
+var _b = freb(fdeb, 0);
+var fd = _b.b;
+var revfd = _b.r;
+var rev = new u16(32768);
+for (i = 0;i < 32768; ++i) {
+  x = (i & 43690) >> 1 | (i & 21845) << 1;
+  x = (x & 52428) >> 2 | (x & 13107) << 2;
+  x = (x & 61680) >> 4 | (x & 3855) << 4;
+  rev[i] = ((x & 65280) >> 8 | (x & 255) << 8) >> 1;
+}
+var x;
+var i;
+var hMap = function(cd, mb, r) {
+  var s = cd.length;
+  var i2 = 0;
+  var l = new u16(mb);
+  for (;i2 < s; ++i2) {
+    if (cd[i2])
+      ++l[cd[i2] - 1];
+  }
+  var le = new u16(mb);
+  for (i2 = 1;i2 < mb; ++i2) {
+    le[i2] = le[i2 - 1] + l[i2 - 1] << 1;
+  }
+  var co;
+  if (r) {
+    co = new u16(1 << mb);
+    var rvb = 15 - mb;
+    for (i2 = 0;i2 < s; ++i2) {
+      if (cd[i2]) {
+        var sv = i2 << 4 | cd[i2];
+        var r_1 = mb - cd[i2];
+        var v = le[cd[i2] - 1]++ << r_1;
+        for (var m = v | (1 << r_1) - 1;v <= m; ++v) {
+          co[rev[v] >> rvb] = sv;
+        }
+      }
+    }
+  } else {
+    co = new u16(s);
+    for (i2 = 0;i2 < s; ++i2) {
+      if (cd[i2]) {
+        co[i2] = rev[le[cd[i2] - 1]++] >> 15 - cd[i2];
+      }
+    }
+  }
+  return co;
+};
+var flt = new u8(288);
+for (i = 0;i < 144; ++i)
+  flt[i] = 8;
+var i;
+for (i = 144;i < 256; ++i)
+  flt[i] = 9;
+var i;
+for (i = 256;i < 280; ++i)
+  flt[i] = 7;
+var i;
+for (i = 280;i < 288; ++i)
+  flt[i] = 8;
+var i;
+var fdt = new u8(32);
+for (i = 0;i < 32; ++i)
+  fdt[i] = 5;
+var i;
+var flm = /* @__PURE__ */ hMap(flt, 9, 0);
+var fdm = /* @__PURE__ */ hMap(fdt, 5, 0);
+var shft = function(p) {
+  return (p + 7) / 8 | 0;
+};
+var slc = function(v, s, e) {
+  if (s == null || s < 0)
+    s = 0;
+  if (e == null || e > v.length)
+    e = v.length;
+  return new u8(v.subarray(s, e));
+};
+var ec = [
+  "unexpected EOF",
+  "invalid block type",
+  "invalid length/literal",
+  "invalid distance",
+  "stream finished",
+  "no stream handler",
+  ,
+  "no callback",
+  "invalid UTF-8 data",
+  "extra field too long",
+  "date not in range 1980-2099",
+  "filename too long",
+  "stream finishing",
+  "invalid zip data"
+];
+var err = function(ind, msg, nt) {
+  var e = new Error(msg || ec[ind]);
+  e.code = ind;
+  if (Error.captureStackTrace)
+    Error.captureStackTrace(e, err);
+  if (!nt)
+    throw e;
+  return e;
+};
+var wbits = function(d, p, v) {
+  v <<= p & 7;
+  var o = p / 8 | 0;
+  d[o] |= v;
+  d[o + 1] |= v >> 8;
+};
+var wbits16 = function(d, p, v) {
+  v <<= p & 7;
+  var o = p / 8 | 0;
+  d[o] |= v;
+  d[o + 1] |= v >> 8;
+  d[o + 2] |= v >> 16;
+};
+var hTree = function(d, mb) {
+  var t = [];
+  for (var i2 = 0;i2 < d.length; ++i2) {
+    if (d[i2])
+      t.push({ s: i2, f: d[i2] });
+  }
+  var s = t.length;
+  var t2 = t.slice();
+  if (!s)
+    return { t: et, l: 0 };
+  if (s == 1) {
+    var v = new u8(t[0].s + 1);
+    v[t[0].s] = 1;
+    return { t: v, l: 1 };
+  }
+  t.sort(function(a, b) {
+    return a.f - b.f;
+  });
+  t.push({ s: -1, f: 25001 });
+  var l = t[0], r = t[1], i0 = 0, i1 = 1, i22 = 2;
+  t[0] = { s: -1, f: l.f + r.f, l, r };
+  while (i1 != s - 1) {
+    l = t[t[i0].f < t[i22].f ? i0++ : i22++];
+    r = t[i0 != i1 && t[i0].f < t[i22].f ? i0++ : i22++];
+    t[i1++] = { s: -1, f: l.f + r.f, l, r };
+  }
+  var maxSym = t2[0].s;
+  for (var i2 = 1;i2 < s; ++i2) {
+    if (t2[i2].s > maxSym)
+      maxSym = t2[i2].s;
+  }
+  var tr = new u16(maxSym + 1);
+  var mbt = ln(t[i1 - 1], tr, 0);
+  if (mbt > mb) {
+    var i2 = 0, dt = 0;
+    var lft = mbt - mb, cst = 1 << lft;
+    t2.sort(function(a, b) {
+      return tr[b.s] - tr[a.s] || a.f - b.f;
+    });
+    for (;i2 < s; ++i2) {
+      var i2_1 = t2[i2].s;
+      if (tr[i2_1] > mb) {
+        dt += cst - (1 << mbt - tr[i2_1]);
+        tr[i2_1] = mb;
+      } else
+        break;
+    }
+    dt >>= lft;
+    while (dt > 0) {
+      var i2_2 = t2[i2].s;
+      if (tr[i2_2] < mb)
+        dt -= 1 << mb - tr[i2_2]++ - 1;
+      else
+        ++i2;
+    }
+    for (;i2 >= 0 && dt; --i2) {
+      var i2_3 = t2[i2].s;
+      if (tr[i2_3] == mb) {
+        --tr[i2_3];
+        ++dt;
+      }
+    }
+    mbt = mb;
+  }
+  return { t: new u8(tr), l: mbt };
+};
+var ln = function(n, l, d) {
+  return n.s == -1 ? Math.max(ln(n.l, l, d + 1), ln(n.r, l, d + 1)) : l[n.s] = d;
+};
+var lc = function(c) {
+  var s = c.length;
+  while (s && !c[--s])
+    ;
+  var cl = new u16(++s);
+  var cli = 0, cln = c[0], cls = 1;
+  var w = function(v) {
+    cl[cli++] = v;
+  };
+  for (var i2 = 1;i2 <= s; ++i2) {
+    if (c[i2] == cln && i2 != s)
+      ++cls;
+    else {
+      if (!cln && cls > 2) {
+        for (;cls > 138; cls -= 138)
+          w(32754);
+        if (cls > 2) {
+          w(cls > 10 ? cls - 11 << 5 | 28690 : cls - 3 << 5 | 12305);
+          cls = 0;
+        }
+      } else if (cls > 3) {
+        w(cln), --cls;
+        for (;cls > 6; cls -= 6)
+          w(8304);
+        if (cls > 2)
+          w(cls - 3 << 5 | 8208), cls = 0;
+      }
+      while (cls--)
+        w(cln);
+      cls = 1;
+      cln = c[i2];
+    }
+  }
+  return { c: cl.subarray(0, cli), n: s };
+};
+var clen = function(cf, cl) {
+  var l = 0;
+  for (var i2 = 0;i2 < cl.length; ++i2)
+    l += cf[i2] * cl[i2];
+  return l;
+};
+var wfblk = function(out, pos, dat) {
+  var s = dat.length;
+  var o = shft(pos + 2);
+  out[o] = s & 255;
+  out[o + 1] = s >> 8;
+  out[o + 2] = out[o] ^ 255;
+  out[o + 3] = out[o + 1] ^ 255;
+  for (var i2 = 0;i2 < s; ++i2)
+    out[o + i2 + 4] = dat[i2];
+  return (o + 4 + s) * 8;
+};
+var wblk = function(dat, out, final, syms, lf, df, eb, li, bs, bl, p) {
+  wbits(out, p++, final);
+  ++lf[256];
+  var _a2 = hTree(lf, 15), dlt = _a2.t, mlb = _a2.l;
+  var _b2 = hTree(df, 15), ddt = _b2.t, mdb = _b2.l;
+  var _c = lc(dlt), lclt = _c.c, nlc = _c.n;
+  var _d = lc(ddt), lcdt = _d.c, ndc = _d.n;
+  var lcfreq = new u16(19);
+  for (var i2 = 0;i2 < lclt.length; ++i2)
+    ++lcfreq[lclt[i2] & 31];
+  for (var i2 = 0;i2 < lcdt.length; ++i2)
+    ++lcfreq[lcdt[i2] & 31];
+  var _e = hTree(lcfreq, 7), lct = _e.t, mlcb = _e.l;
+  var nlcc = 19;
+  for (;nlcc > 4 && !lct[clim[nlcc - 1]]; --nlcc)
+    ;
+  var flen = bl + 5 << 3;
+  var ftlen = clen(lf, flt) + clen(df, fdt) + eb;
+  var dtlen = clen(lf, dlt) + clen(df, ddt) + eb + 14 + 3 * nlcc + clen(lcfreq, lct) + 2 * lcfreq[16] + 3 * lcfreq[17] + 7 * lcfreq[18];
+  if (bs >= 0 && flen <= ftlen && flen <= dtlen)
+    return wfblk(out, p, dat.subarray(bs, bs + bl));
+  var lm, ll, dm, dl;
+  wbits(out, p, 1 + (dtlen < ftlen)), p += 2;
+  if (dtlen < ftlen) {
+    lm = hMap(dlt, mlb, 0), ll = dlt, dm = hMap(ddt, mdb, 0), dl = ddt;
+    var llm = hMap(lct, mlcb, 0);
+    wbits(out, p, nlc - 257);
+    wbits(out, p + 5, ndc - 1);
+    wbits(out, p + 10, nlcc - 4);
+    p += 14;
+    for (var i2 = 0;i2 < nlcc; ++i2)
+      wbits(out, p + 3 * i2, lct[clim[i2]]);
+    p += 3 * nlcc;
+    var lcts = [lclt, lcdt];
+    for (var it = 0;it < 2; ++it) {
+      var clct = lcts[it];
+      for (var i2 = 0;i2 < clct.length; ++i2) {
+        var len = clct[i2] & 31;
+        wbits(out, p, llm[len]), p += lct[len];
+        if (len > 15)
+          wbits(out, p, clct[i2] >> 5 & 127), p += clct[i2] >> 12;
+      }
+    }
+  } else {
+    lm = flm, ll = flt, dm = fdm, dl = fdt;
+  }
+  for (var i2 = 0;i2 < li; ++i2) {
+    var sym = syms[i2];
+    if (sym > 255) {
+      var len = sym >> 18 & 31;
+      wbits16(out, p, lm[len + 257]), p += ll[len + 257];
+      if (len > 7)
+        wbits(out, p, sym >> 23 & 31), p += fleb[len];
+      var dst = sym & 31;
+      wbits16(out, p, dm[dst]), p += dl[dst];
+      if (dst > 3)
+        wbits16(out, p, sym >> 5 & 8191), p += fdeb[dst];
+    } else {
+      wbits16(out, p, lm[sym]), p += ll[sym];
+    }
+  }
+  wbits16(out, p, lm[256]);
+  return p + ll[256];
+};
+var deo = /* @__PURE__ */ new i32([65540, 131080, 131088, 131104, 262176, 1048704, 1048832, 2114560, 2117632]);
+var et = /* @__PURE__ */ new u8(0);
+var dflt = function(dat, lvl, plvl, pre, post, st) {
+  var s = st.z || dat.length;
+  var o = new u8(pre + s + 5 * (1 + Math.ceil(s / 7000)) + post);
+  var w = o.subarray(pre, o.length - post);
+  var lst = st.l;
+  var pos = (st.r || 0) & 7;
+  if (lvl) {
+    if (pos)
+      w[0] = st.r >> 3;
+    var opt = deo[lvl - 1];
+    var n = opt >> 13, c = opt & 8191;
+    var msk_1 = (1 << plvl) - 1;
+    var prev = st.p || new u16(32768), head = st.h || new u16(msk_1 + 1);
+    var bs1_1 = Math.ceil(plvl / 3), bs2_1 = 2 * bs1_1;
+    var hsh = function(i3) {
+      return (dat[i3] ^ dat[i3 + 1] << bs1_1 ^ dat[i3 + 2] << bs2_1) & msk_1;
+    };
+    var syms = new i32(25000);
+    var lf = new u16(288), df = new u16(32);
+    var lc_1 = 0, eb = 0, i2 = st.i || 0, li = 0, wi = st.w || 0, bs = 0;
+    for (;i2 + 2 < s; ++i2) {
+      var hv = hsh(i2);
+      var imod = i2 & 32767, pimod = head[hv];
+      prev[imod] = pimod;
+      head[hv] = imod;
+      if (wi <= i2) {
+        var rem = s - i2;
+        if ((lc_1 > 7000 || li > 24576) && (rem > 423 || !lst)) {
+          pos = wblk(dat, w, 0, syms, lf, df, eb, li, bs, i2 - bs, pos);
+          li = lc_1 = eb = 0, bs = i2;
+          for (var j = 0;j < 286; ++j)
+            lf[j] = 0;
+          for (var j = 0;j < 30; ++j)
+            df[j] = 0;
+        }
+        var l = 2, d = 0, ch_1 = c, dif = imod - pimod & 32767;
+        if (rem > 2 && hv == hsh(i2 - dif)) {
+          var maxn = Math.min(n, rem) - 1;
+          var maxd = Math.min(32767, i2);
+          var ml = Math.min(258, rem);
+          while (dif <= maxd && --ch_1 && imod != pimod) {
+            if (dat[i2 + l] == dat[i2 + l - dif]) {
+              var nl = 0;
+              for (;nl < ml && dat[i2 + nl] == dat[i2 + nl - dif]; ++nl)
+                ;
+              if (nl > l) {
+                l = nl, d = dif;
+                if (nl > maxn)
+                  break;
+                var mmd = Math.min(dif, nl - 2);
+                var md = 0;
+                for (var j = 0;j < mmd; ++j) {
+                  var ti = i2 - dif + j & 32767;
+                  var pti = prev[ti];
+                  var cd = ti - pti & 32767;
+                  if (cd > md)
+                    md = cd, pimod = ti;
+                }
+              }
+            }
+            imod = pimod, pimod = prev[imod];
+            dif += imod - pimod & 32767;
+          }
+        }
+        if (d) {
+          syms[li++] = 268435456 | revfl[l] << 18 | revfd[d];
+          var lin = revfl[l] & 31, din = revfd[d] & 31;
+          eb += fleb[lin] + fdeb[din];
+          ++lf[257 + lin];
+          ++df[din];
+          wi = i2 + l;
+          ++lc_1;
+        } else {
+          syms[li++] = dat[i2];
+          ++lf[dat[i2]];
+        }
+      }
+    }
+    for (i2 = Math.max(i2, wi);i2 < s; ++i2) {
+      syms[li++] = dat[i2];
+      ++lf[dat[i2]];
+    }
+    pos = wblk(dat, w, lst, syms, lf, df, eb, li, bs, i2 - bs, pos);
+    if (!lst) {
+      st.r = pos & 7 | w[pos / 8 | 0] << 3;
+      pos -= 7;
+      st.h = head, st.p = prev, st.i = i2, st.w = wi;
+    }
+  } else {
+    for (var i2 = st.w || 0;i2 < s + lst; i2 += 65535) {
+      var e = i2 + 65535;
+      if (e >= s) {
+        w[pos / 8 | 0] = lst;
+        e = s;
+      }
+      pos = wfblk(w, pos + 1, dat.subarray(i2, e));
+    }
+    st.i = s;
+  }
+  return slc(o, 0, pre + shft(pos) + post);
+};
+var crct = /* @__PURE__ */ function() {
+  var t = new Int32Array(256);
+  for (var i2 = 0;i2 < 256; ++i2) {
+    var c = i2, k = 9;
+    while (--k)
+      c = (c & 1 && -306674912) ^ c >>> 1;
+    t[i2] = c;
+  }
+  return t;
+}();
+var crc = function() {
+  var c = -1;
+  return {
+    p: function(d) {
+      var cr = c;
+      for (var i2 = 0;i2 < d.length; ++i2)
+        cr = crct[cr & 255 ^ d[i2]] ^ cr >>> 8;
+      c = cr;
+    },
+    d: function() {
+      return ~c;
+    }
+  };
+};
+var dopt = function(dat, opt, pre, post, st) {
+  if (!st) {
+    st = { l: 1 };
+    if (opt.dictionary) {
+      var dict = opt.dictionary.subarray(-32768);
+      var newDat = new u8(dict.length + dat.length);
+      newDat.set(dict);
+      newDat.set(dat, dict.length);
+      dat = newDat;
+      st.w = dict.length;
+    }
+  }
+  return dflt(dat, opt.level == null ? 6 : opt.level, opt.mem == null ? st.l ? Math.ceil(Math.max(8, Math.min(13, Math.log(dat.length))) * 1.5) : 20 : 12 + opt.mem, pre, post, st);
+};
+var mrg = function(a, b) {
+  var o = {};
+  for (var k in a)
+    o[k] = a[k];
+  for (var k in b)
+    o[k] = b[k];
+  return o;
+};
+var wbytes = function(d, b, v) {
+  for (;v; ++b)
+    d[b] = v, v >>>= 8;
+};
+function deflateSync(data, opts) {
+  return dopt(data, opts || {}, 0, 0);
+}
+var fltn = function(d, p, t, o) {
+  for (var k in d) {
+    var val = d[k], n = p + k, op = o;
+    if (Array.isArray(val))
+      op = mrg(o, val[1]), val = val[0];
+    if (ArrayBuffer.isView(val))
+      t[n] = [val, op];
+    else {
+      t[n += "/"] = [new u8(0), op];
+      fltn(val, n, t, o);
+    }
+  }
+};
+var te = typeof TextEncoder != "undefined" && /* @__PURE__ */ new TextEncoder;
+var td = typeof TextDecoder != "undefined" && /* @__PURE__ */ new TextDecoder;
+var tds = 0;
+try {
+  td.decode(et, { stream: true });
+  tds = 1;
+} catch (e) {}
+function strToU8(str, latin1) {
+  if (latin1) {
+    var ar_1 = new u8(str.length);
+    for (var i2 = 0;i2 < str.length; ++i2)
+      ar_1[i2] = str.charCodeAt(i2);
+    return ar_1;
+  }
+  if (te)
+    return te.encode(str);
+  var l = str.length;
+  var ar = new u8(str.length + (str.length >> 1));
+  var ai = 0;
+  var w = function(v) {
+    ar[ai++] = v;
+  };
+  for (var i2 = 0;i2 < l; ++i2) {
+    if (ai + 5 > ar.length) {
+      var n = new u8(ai + 8 + (l - i2 << 1));
+      n.set(ar);
+      ar = n;
+    }
+    var c = str.charCodeAt(i2);
+    if (c < 128 || latin1)
+      w(c);
+    else if (c < 2048)
+      w(192 | c >> 6), w(128 | c & 63);
+    else if (c > 55295 && c < 57344)
+      c = 65536 + (c & 1023 << 10) | str.charCodeAt(++i2) & 1023, w(240 | c >> 18), w(128 | c >> 12 & 63), w(128 | c >> 6 & 63), w(128 | c & 63);
+    else
+      w(224 | c >> 12), w(128 | c >> 6 & 63), w(128 | c & 63);
+  }
+  return slc(ar, 0, ai);
+}
+var exfl = function(ex) {
+  var le = 0;
+  if (ex) {
+    for (var k in ex) {
+      var l = ex[k].length;
+      if (l > 65535)
+        err(9);
+      le += l + 4;
+    }
+  }
+  return le;
+};
+var wzh = function(d, b, f, fn, u, c, ce, co) {
+  var fl2 = fn.length, ex = f.extra, col = co && co.length;
+  var exl = exfl(ex);
+  wbytes(d, b, ce != null ? 33639248 : 67324752), b += 4;
+  if (ce != null)
+    d[b++] = 20, d[b++] = f.os;
+  d[b] = 20, b += 2;
+  d[b++] = f.flag << 1 | (c < 0 && 8), d[b++] = u && 8;
+  d[b++] = f.compression & 255, d[b++] = f.compression >> 8;
+  var dt = new Date(f.mtime == null ? Date.now() : f.mtime), y = dt.getFullYear() - 1980;
+  if (y < 0 || y > 119)
+    err(10);
+  wbytes(d, b, y << 25 | dt.getMonth() + 1 << 21 | dt.getDate() << 16 | dt.getHours() << 11 | dt.getMinutes() << 5 | dt.getSeconds() >> 1), b += 4;
+  if (c != -1) {
+    wbytes(d, b, f.crc);
+    wbytes(d, b + 4, c < 0 ? -c - 2 : c);
+    wbytes(d, b + 8, f.size);
+  }
+  wbytes(d, b + 12, fl2);
+  wbytes(d, b + 14, exl), b += 16;
+  if (ce != null) {
+    wbytes(d, b, col);
+    wbytes(d, b + 6, f.attrs);
+    wbytes(d, b + 10, ce), b += 14;
+  }
+  d.set(fn, b);
+  b += fl2;
+  if (exl) {
+    for (var k in ex) {
+      var exf = ex[k], l = exf.length;
+      wbytes(d, b, +k);
+      wbytes(d, b + 2, l);
+      d.set(exf, b + 4), b += 4 + l;
+    }
+  }
+  if (col)
+    d.set(co, b), b += col;
+  return b;
+};
+var wzf = function(o, b, c, d, e) {
+  wbytes(o, b, 101010256);
+  wbytes(o, b + 8, c);
+  wbytes(o, b + 10, c);
+  wbytes(o, b + 12, d);
+  wbytes(o, b + 16, e);
+};
+function zipSync(data, opts) {
+  if (!opts)
+    opts = {};
+  var r = {};
+  var files = [];
+  fltn(data, "", r, opts);
+  var o = 0;
+  var tot = 0;
+  for (var fn in r) {
+    var _a2 = r[fn], file = _a2[0], p = _a2[1];
+    var compression = p.level == 0 ? 0 : 8;
+    var f = strToU8(fn), s = f.length;
+    var com = p.comment, m = com && strToU8(com), ms = m && m.length;
+    var exl = exfl(p.extra);
+    if (s > 65535)
+      err(11);
+    var d = compression ? deflateSync(file, p) : file, l = d.length;
+    var c = crc();
+    c.p(file);
+    files.push(mrg(p, {
+      size: file.length,
+      crc: c.d(),
+      c: d,
+      f,
+      m,
+      u: s != fn.length || m && com.length != ms,
+      o,
+      compression
+    }));
+    o += 30 + s + exl + l;
+    tot += 76 + 2 * (s + exl) + (ms || 0) + l;
+  }
+  var out = new u8(tot + 22), oe = o, cdl = tot - o;
+  for (var i2 = 0;i2 < files.length; ++i2) {
+    var f = files[i2];
+    wzh(out, f.o, f, f.f, f.u, f.c.length);
+    var badd = 30 + f.f.length + exfl(f.extra);
+    out.set(f.c, f.o + badd);
+    wzh(out, o, f, f.f, f.u, f.c.length, f.o, f.m), o += 16 + badd + (f.m ? f.m.length : 0);
+  }
+  wzf(out, o, files.length, cdl, oe);
+  return out;
+}
+
+// src/shared/tools/deploy-tools.ts
+var FIXED_ZIP_MTIME = new Date("1980-01-01T00:00:00.000Z");
+var MAX_SOURCE_BYTES = 256 * 1024 * 1024;
+var deployToolSchema = {
+  ref: optional(Type.String(), "Project ref (defaults to the linked project)"),
+  target: optional(Type.String(), "Named deploy target from supacloud.json"),
+  id: optional(Type.String(), "Frontend deployment ID (auto-selected when unambiguous)"),
+  cwd: optional(Type.String(), "Project directory (default: current directory)"),
+  build_command: optional(Type.String(), "Build command override"),
+  output_dir: optional(Type.String(), "Build output directory override"),
+  skip_build: optional(Type.Boolean(), "Use an existing output directory without building"),
+  dry_run: optional(Type.Boolean(), "Resolve and validate the deployment without building or publishing"),
+  json: optional(Type.Boolean(), "Print only the final JSON result")
+};
+function record(candidate) {
+  return candidate && typeof candidate === "object" && !Array.isArray(candidate) ? candidate : null;
+}
+function requiredString(candidate, field) {
+  if (typeof candidate !== "string" || !candidate.trim()) {
+    throw new Error(`Invalid frontend deployment response: missing ${field}`);
+  }
+  return candidate.trim();
+}
+function frontendDeployment(candidate) {
+  const value = record(candidate);
+  if (!value)
+    throw new Error("Invalid frontend deployment response");
+  return {
+    id: requiredString(value.id, "id"),
+    name: typeof value.name === "string" && value.name.trim() ? value.name.trim() : requiredString(value.id, "id"),
+    framework: typeof value.framework === "string" ? value.framework.trim() : "static",
+    buildCommand: typeof value.build_command === "string" ? value.build_command.trim() : "",
+    outputDirectory: typeof value.output_dir === "string" ? value.output_dir.trim() : "",
+    deploymentUrl: typeof value.deployment_url === "string" && value.deployment_url.trim() ? value.deployment_url.trim() : null
+  };
+}
+async function readJson(path) {
+  try {
+    return JSON.parse(await readFile2(path, "utf8"));
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT")
+      return null;
+    throw new Error(`Invalid JSON file ${path}: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+async function findDeployConfigRoot(startDirectory) {
+  let directory = resolve10(startDirectory);
+  while (true) {
+    if (await pathExists(join9(directory, "supacloud.json")))
+      return directory;
+    const parent = dirname4(directory);
+    if (parent === directory)
+      return resolve10(startDirectory);
+    directory = parent;
+  }
+}
+function optionalText(value, field) {
+  if (value === undefined)
+    return;
+  if (typeof value !== "string" || !value.trim()) {
+    throw new Error(`supacloud.json ${field} must be a non-empty string`);
+  }
+  return value.trim();
+}
+function optionalBoolean(value, field) {
+  if (value === undefined)
+    return;
+  if (typeof value !== "boolean")
+    throw new Error(`supacloud.json ${field} must be a boolean`);
+  return value;
+}
+function deployTargetConfig(candidate, name) {
+  const value = record(candidate);
+  if (!value || value.type !== "frontend" && value.type !== "edge_function") {
+    throw new Error(`supacloud.json targets.${name}.type must be 'frontend' or 'edge_function'`);
+  }
+  const framework = optionalText(value.framework, `targets.${name}.framework`);
+  if (framework && !["fetch", "elysia", "hono", "sveltekit-function"].includes(framework)) {
+    throw new Error(`supacloud.json targets.${name}.framework is invalid`);
+  }
+  return {
+    type: value.type,
+    root: optionalText(value.root, `targets.${name}.root`),
+    id: optionalText(value.id, `targets.${name}.id`),
+    slug: optionalText(value.slug, `targets.${name}.slug`),
+    buildCommand: optionalText(value.buildCommand, `targets.${name}.buildCommand`),
+    outputDirectory: optionalText(value.outputDirectory, `targets.${name}.outputDirectory`),
+    bundleDirectory: optionalText(value.bundleDirectory, `targets.${name}.bundleDirectory`),
+    entrypoint: optionalText(value.entrypoint, `targets.${name}.entrypoint`),
+    verifyJwt: optionalBoolean(value.verifyJwt, `targets.${name}.verifyJwt`),
+    minify: optionalBoolean(value.minify, `targets.${name}.minify`),
+    framework
+  };
+}
+async function readDeployConfig(configRoot) {
+  const configPath = join9(configRoot, "supacloud.json");
+  const candidate = await readJson(configPath);
+  if (candidate === null)
+    return {};
+  const config = record(candidate);
+  const frontend = record(config?.frontend);
+  const targetValues = record(config?.targets);
+  if (!config || config.frontend !== undefined && !frontend || config.targets !== undefined && !targetValues) {
+    throw new Error("supacloud.json must contain object-valued 'frontend' or 'targets' configuration");
+  }
+  return {
+    defaultTarget: optionalText(config.defaultTarget, "defaultTarget"),
+    targets: targetValues ? Object.fromEntries(Object.entries(targetValues).map(([name, value]) => [name, deployTargetConfig(value, name)])) : undefined,
+    frontend: frontend ? {
+      id: optionalText(frontend.id, "frontend.id"),
+      root: optionalText(frontend.root, "frontend.root"),
+      buildCommand: optionalText(frontend.buildCommand, "frontend.buildCommand"),
+      outputDirectory: optionalText(frontend.outputDirectory, "frontend.outputDirectory")
+    } : undefined
+  };
+}
+async function packageName(projectDirectory) {
+  const candidate = record(await readJson(join9(projectDirectory, "package.json")));
+  return typeof candidate?.name === "string" && candidate.name.trim() ? candidate.name.trim() : null;
+}
+async function pathExists(path) {
+  return access(path).then(() => true, () => false);
+}
+async function defaultBuildCommand(projectDirectory, configRoot) {
+  const packageJson = record(await readJson(join9(projectDirectory, "package.json")));
+  const scripts = record(packageJson?.scripts);
+  if (typeof scripts?.build !== "string" || !scripts.build.trim()) {
+    throw new Error("No build command was configured and package.json has no build script");
+  }
+  let directory = projectDirectory;
+  while (true) {
+    if (await pathExists(join9(directory, "bun.lock")) || await pathExists(join9(directory, "bun.lockb")))
+      return "bun run build";
+    if (await pathExists(join9(directory, "pnpm-lock.yaml")))
+      return "pnpm run build";
+    if (await pathExists(join9(directory, "yarn.lock")))
+      return "yarn build";
+    if (directory === configRoot)
+      break;
+    const parent = dirname4(directory);
+    if (parent === directory || !directory.startsWith(`${configRoot}${sep4}`))
+      break;
+    directory = parent;
+  }
+  return "npm run build";
+}
+function deploymentList(candidate) {
+  const values = Array.isArray(candidate) ? candidate : Array.isArray(record(candidate)?.deployments) ? record(candidate)?.deployments : null;
+  if (!values)
+    throw new Error("Invalid frontend deployment list response");
+  return values.map(frontendDeployment);
+}
+function selectDeployment(deployments, requestedId, projectName) {
+  if (requestedId) {
+    const selected = deployments.find((deployment) => deployment.id === requestedId);
+    if (!selected)
+      throw new Error(`Frontend deployment '${requestedId}' was not found`);
+    return selected;
+  }
+  if (deployments.length === 1)
+    return deployments[0];
+  if (projectName) {
+    const matches = deployments.filter((deployment) => deployment.id === projectName || deployment.name === projectName);
+    if (matches.length === 1)
+      return matches[0];
+  }
+  const ids = deployments.map((deployment) => deployment.id).sort().join(", ");
+  throw new Error(deployments.length === 0 ? "No frontend deployments exist for this project" : `Multiple frontend deployments found (${ids}). Set frontend.id in supacloud.json or pass --id`);
+}
+function targetRoot(configRoot, target, name) {
+  const root = resolve10(configRoot, target.root || (name === "frontend" ? "." : name));
+  const prefix = `${resolve10(configRoot)}${sep4}`;
+  if (root !== resolve10(configRoot) && !root.startsWith(prefix)) {
+    throw new Error(`Deploy target '${name}' root must stay inside the repository root`);
+  }
+  return root;
+}
+function selectTarget(configRoot, invocationDirectory, config, requestedName) {
+  const targets = config.targets ? Object.entries(config.targets) : [["frontend", {
+    type: "frontend",
+    root: config.frontend?.root,
+    id: config.frontend?.id,
+    buildCommand: config.frontend?.buildCommand,
+    outputDirectory: config.frontend?.outputDirectory
+  }]];
+  if (targets.length === 0)
+    throw new Error("supacloud.json defines no deploy targets");
+  if (requestedName) {
+    const selected = targets.find(([name]) => name === requestedName);
+    if (!selected)
+      throw new Error(`Deploy target '${requestedName}' was not found in supacloud.json`);
+    return { name: selected[0], config: selected[1], root: targetRoot(configRoot, selected[1], selected[0]) };
+  }
+  const containing = targets.map(([name, target]) => ({ name, target, root: targetRoot(configRoot, target, name) })).filter((candidate) => invocationDirectory === candidate.root || invocationDirectory.startsWith(`${candidate.root}${sep4}`)).sort((left, right) => right.root.length - left.root.length);
+  if (containing.length === 1 || containing.length > 1 && containing[0].root !== containing[1].root) {
+    const selected = containing[0];
+    return { name: selected.name, config: selected.target, root: selected.root };
+  }
+  if (config.defaultTarget) {
+    const selected = targets.find(([name]) => name === config.defaultTarget);
+    if (!selected)
+      throw new Error(`supacloud.json defaultTarget '${config.defaultTarget}' was not found`);
+    return { name: selected[0], config: selected[1], root: targetRoot(configRoot, selected[1], selected[0]) };
+  }
+  if (targets.length === 1) {
+    const selected = targets[0];
+    return { name: selected[0], config: selected[1], root: targetRoot(configRoot, selected[1], selected[0]) };
+  }
+  throw new Error(`Multiple deploy targets found (${targets.map(([name]) => name).sort().join(", ")}). Pass --target`);
+}
+function defaultOutputDirectory(framework) {
+  switch (framework) {
+    case "sveltekit-static":
+      return "build";
+    case "nextjs":
+      return "out";
+    case "static":
+      return "dist";
+    default:
+      return "dist";
+  }
+}
+function resolveInsideProject(projectDirectory, candidate, allowRoot = false) {
+  const resolved = resolve10(projectDirectory, candidate);
+  const projectRoot = resolve10(projectDirectory);
+  const projectPrefix = `${projectRoot}${sep4}`;
+  if (!allowRoot && resolved === projectRoot || resolved !== projectRoot && !resolved.startsWith(projectPrefix)) {
+    throw new Error("Frontend output directory must stay inside the project directory");
+  }
+  return resolved;
+}
+async function runBuild(command, cwd) {
+  await new Promise((resolvePromise, reject) => {
+    const child = spawn3(command, { cwd, env: process.env, shell: true, stdio: "inherit" });
+    child.once("error", reject);
+    child.once("exit", (code, signal) => {
+      if (code === 0)
+        resolvePromise();
+      else
+        reject(new Error(`Build command failed (${signal ? `signal ${signal}` : `exit ${code ?? "unknown"}`}): ${command}`));
+    });
+  });
+}
+async function collectArchiveFiles(root) {
+  const rootStat = await lstat(root).catch(() => null);
+  if (!rootStat?.isDirectory() || rootStat.isSymbolicLink()) {
+    throw new Error(`Frontend output directory does not exist or is not a regular directory: ${root}`);
+  }
+  const paths = [];
+  const visit = async (directory) => {
+    const entries = [];
+    for await (const entry of await opendir(directory))
+      entries.push(entry);
+    entries.sort((left, right) => left.name.localeCompare(right.name, "en"));
+    for (const entry of entries) {
+      const path = join9(directory, entry.name);
+      const stats = await lstat(path);
+      if (stats.isSymbolicLink())
+        throw new Error(`Frontend output cannot contain symbolic links: ${path}`);
+      if (stats.isDirectory())
+        await visit(path);
+      else if (stats.isFile())
+        paths.push(path);
+      else
+        throw new Error(`Frontend output contains an unsupported file type: ${path}`);
+    }
+  };
+  await visit(root);
+  if (paths.length === 0)
+    throw new Error(`Frontend output directory is empty: ${root}`);
+  let bytes = 0;
+  const files = {};
+  for (const path of paths) {
+    const data = new Uint8Array(await readFile2(path));
+    bytes += data.byteLength;
+    if (bytes > MAX_SOURCE_BYTES)
+      throw new Error(`Frontend output exceeds ${MAX_SOURCE_BYTES} bytes`);
+    const archivePath = relative4(root, path).split(sep4).join("/");
+    files[archivePath] = [data, { mtime: FIXED_ZIP_MTIME }];
+  }
+  return { files, bytes, count: paths.length };
+}
+async function createFrontendArchive(outputDirectory) {
+  const collected = await collectArchiveFiles(outputDirectory);
+  const temporaryDirectory = await mkdtemp(join9(tmpdir2(), "supacloud-deploy-"));
+  const archivePath = join9(temporaryDirectory, `${basename4(outputDirectory)}.zip`);
+  try {
+    const archiveBytes = zipSync(collected.files, { level: 6, mtime: FIXED_ZIP_MTIME });
+    await writeFile3(archivePath, archiveBytes);
+    const sha256 = createHash4("sha256").update(archiveBytes).digest("hex");
+    return {
+      archivePath,
+      sha256,
+      sourceBytes: collected.bytes,
+      fileCount: collected.count,
+      cleanup: () => rm(temporaryDirectory, { recursive: true, force: true })
+    };
+  } catch (error) {
+    await rm(temporaryDirectory, { recursive: true, force: true });
+    throw error;
+  }
+}
+function payload(response) {
+  if (response.isError)
+    throw new Error(response.content[0]?.text || "Deployment operation failed");
+  const text = response.content.find((chunk) => chunk.type === "text")?.text;
+  const parsed = text ? record(JSON.parse(text)) : null;
+  if (!parsed)
+    throw new Error("Deployment operation returned an invalid response");
+  return parsed;
+}
+function phaseReporter(json) {
+  const started = performance.now();
+  return (phase, detail) => {
+    if (!json)
+      console.error(`  ${phase.padEnd(10)} ${detail}`);
+    return Math.round(performance.now() - started);
+  };
+}
+function deployResponse(result, json) {
+  if (json)
+    return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+  const lines = [
+    result.unchanged === true ? "Already up to date." : `Deployed ${String(result.target || result.deployment_id || result.slug)}.`,
+    result.url ? `URL: ${String(result.url)}` : null,
+    result.release_id ? `Release: ${String(result.release_id)}` : null,
+    result.active_version ? `Active version: ${String(result.active_version)}` : null,
+    result.file_count ? `Files: ${String(result.file_count)}` : null,
+    `Duration: ${(Number(result.duration_ms) / 1000).toFixed(1)}s`
+  ].filter((line) => Boolean(line));
+  return { content: [{ type: "text", text: lines.join(`
+`) }] };
+}
+function registerDeployTools(server2, http, options = {}) {
+  server2.tool("deploy", "Build and publish the linked frontend with one command", deployToolSchema, async (args) => {
+    const invocationDirectory = resolve10(String(args.cwd || options.cwd || process.cwd()));
+    const projectRef2 = String(args.ref || options.projectRef || "").trim();
+    if (!projectRef2)
+      throw new Error("A linked project ref is required. Set SUPACLOUD_PROJECT_REF or pass --ref");
+    const configRoot = await findDeployConfigRoot(invocationDirectory);
+    const config = await readDeployConfig(configRoot);
+    const target = selectTarget(configRoot, invocationDirectory, config, String(args.target || "").trim() || undefined);
+    const projectDirectory = target.root;
+    const targetState = await lstat(projectDirectory).catch(() => null);
+    if (!targetState?.isDirectory() || targetState.isSymbolicLink()) {
+      throw new Error(`Deploy target '${target.name}' root is not a regular directory: ${projectDirectory}`);
+    }
+    const requestedId = String(args.id || target.config.id || "").trim() || undefined;
+    const report = phaseReporter(args.json === true);
+    report("inspect", `${target.name} (${projectRef2})`);
+    if (target.config.type === "edge_function") {
+      if (!options.edgeFunctionDeploy)
+        throw new Error("Edge Function deploy support is unavailable in this CLI context");
+      const slug = target.config.slug || requestedId || target.name;
+      const functionListResponse2 = await options.edgeFunctionDeploy({
+        action: "list",
+        ref: projectRef2
+      });
+      if (functionListResponse2.isError) {
+        throw new Error(`Unable to read the current identity for Edge Function '${slug}'`);
+      }
+      const functionListText = functionListResponse2.content.find((chunk) => chunk.type === "text")?.text;
+      if (!functionListText)
+        throw new Error(`Unable to read the current identity for Edge Function '${slug}'`);
+      const functions = projectedFunctionList(JSON.parse(functionListText));
+      if (!functions)
+        throw new Error(`Invalid current identity for Edge Function '${slug}'`);
+      const current = functions?.find((candidate) => candidate.slug === slug);
+      const activeVersion = current && typeof current.version === "number" ? String(current.version) : "absent";
+      const activationId = current && typeof current.activation_id === "string" ? current.activation_id : "legacy";
+      if (!activeVersion || !activationId)
+        throw new Error(`Edge Function '${slug}' has an invalid active identity`);
+      const buildCommand2 = String(args.build_command || target.config.buildCommand || "").trim() || (args.skip_build === true ? "" : await defaultBuildCommand(projectDirectory, configRoot));
+      const bundleDirectory = resolveInsideProject(projectDirectory, String(args.output_dir || target.config.bundleDirectory || target.config.outputDirectory || "dist"), true);
+      if (args.dry_run === true) {
+        return { content: [{ type: "text", text: JSON.stringify({
+          ok: true,
+          dry_run: true,
+          type: target.config.type,
+          target: target.name,
+          project_ref: projectRef2,
+          slug,
+          build_command: args.skip_build === true ? null : buildCommand2,
+          bundle_directory: bundleDirectory,
+          expected_active_version: activeVersion,
+          expected_activation_id: activationId
+        }, null, 2) }] };
+      }
+      if (args.skip_build !== true) {
+        report("build", buildCommand2);
+        await runBuild(buildCommand2, projectDirectory);
+      } else {
+        report("build", "skipped");
+      }
+      report("deploy", `edge function ${slug}`);
+      const deployed = await options.edgeFunctionDeploy({
+        action: "deploy_bundle",
+        ref: projectRef2,
+        slug,
+        "bundle-dir": bundleDirectory,
+        entrypoint: target.config.entrypoint || "index.ts",
+        minify: target.config.minify,
+        verify_jwt: target.config.verifyJwt,
+        framework: target.config.framework,
+        "expected-active-version": activeVersion,
+        "expected-activation-id": activationId
+      });
+      if (deployed.isError)
+        return deployed;
+      const deployedText = deployed.content.find((chunk) => chunk.type === "text")?.text;
+      const deployedPayload = deployedText ? record(JSON.parse(deployedText)) : null;
+      const durationMs = report("done", slug);
+      return deployResponse({
+        ok: true,
+        unchanged: false,
+        type: target.config.type,
+        target: target.name,
+        project_ref: projectRef2,
+        slug,
+        active_version: deployedPayload?.active_version,
+        activation_id: deployedPayload?.activation_id,
+        duration_ms: durationMs
+      }, args.json === true);
+    }
+    const listResponse2 = await http.get(`/v1/projects/${encodeURIComponent(projectRef2)}/frontend/deployments`);
+    if (!listResponse2.ok)
+      throw new Error(`Failed to list frontend deployments (HTTP ${listResponse2.status})`);
+    const selected = selectDeployment(deploymentList(listResponse2.data), requestedId, await packageName(projectDirectory));
+    const configuredBuildCommand = String(args.build_command || target.config.buildCommand || selected.buildCommand || "").trim();
+    const buildCommand = configuredBuildCommand || (args.skip_build === true ? "" : await defaultBuildCommand(projectDirectory, configRoot));
+    const configuredOutput = String(args.output_dir || target.config.outputDirectory || "").trim();
+    const remoteOutput = selected.outputDirectory && selected.outputDirectory !== "." ? selected.outputDirectory : "";
+    const outputDirectory = resolveInsideProject(projectDirectory, configuredOutput || remoteOutput || defaultOutputDirectory(selected.framework));
+    if (args.dry_run === true) {
+      return { content: [{ type: "text", text: JSON.stringify({
+        ok: true,
+        dry_run: true,
+        project_ref: projectRef2,
+        deployment_id: selected.id,
+        build_command: args.skip_build === true ? null : buildCommand,
+        output_directory: outputDirectory
+      }, null, 2) }] };
+    }
+    if (args.skip_build !== true) {
+      report("build", buildCommand);
+      await runBuild(buildCommand, projectDirectory);
+    } else {
+      report("build", "skipped");
+    }
+    report("package", relative4(projectDirectory, outputDirectory) || ".");
+    const archive = await createFrontendArchive(outputDirectory);
+    try {
+      const inventory = payload(await listFrontendReleases(http, projectRef2, selected.id, undefined, 100));
+      const activeReleaseId = typeof inventory.active_release_id === "string" ? inventory.active_release_id : null;
+      const activeActivationId = typeof inventory.active_activation_id === "string" ? inventory.active_activation_id : null;
+      if (archive.sha256 === activeReleaseId) {
+        const durationMs2 = report("done", "already current");
+        return deployResponse({
+          ok: true,
+          unchanged: true,
+          project_ref: projectRef2,
+          deployment_id: selected.id,
+          release_id: archive.sha256,
+          url: selected.deploymentUrl,
+          file_count: archive.fileCount,
+          source_bytes: archive.sourceBytes,
+          duration_ms: durationMs2
+        }, args.json === true);
+      }
+      report("upload", `${archive.fileCount} files`);
+      const uploaded = payload(await uploadFrontendRelease(http, projectRef2, selected.id, archive.archivePath));
+      const release = record(uploaded.release);
+      const releaseId = requiredString(release?.release_id, "release.release_id");
+      if (releaseId !== archive.sha256)
+        throw new Error("Uploaded release identity does not match the local archive");
+      report("activate", releaseId.slice(0, 12));
+      const mutationId = crypto.randomUUID();
+      const activated = payload(await activateFrontendRelease(http, {
+        projectRef: projectRef2,
+        deploymentId: selected.id,
+        releaseId,
+        expectedActiveReleaseId: activeReleaseId || "absent",
+        expectedActivationId: activeActivationId || "absent",
+        mutationId
+      }));
+      const finalResponse = await http.get(`/v1/projects/${encodeURIComponent(projectRef2)}/frontend/deployments/${encodeURIComponent(selected.id)}`);
+      const finalDeployment = finalResponse.ok ? frontendDeployment(finalResponse.data) : selected;
+      const durationMs = report("done", finalDeployment.deploymentUrl || selected.id);
+      return deployResponse({
+        ok: true,
+        unchanged: false,
+        project_ref: projectRef2,
+        deployment_id: selected.id,
+        release_id: activated.active_release_id,
+        activation_id: activated.activation_id,
+        url: finalDeployment.deploymentUrl,
+        file_count: archive.fileCount,
+        source_bytes: archive.sourceBytes,
+        duration_ms: durationMs
+      }, args.json === true);
+    } finally {
+      await archive.cleanup();
+    }
+  });
+}
 // package.json
 var package_default = {
   name: "@supacloud/cli",
-  version: "0.38.0",
+  version: "0.40.0",
   description: "Project-scoped CLI for SupaCloud users",
   type: "module",
   main: "./dist/index.js",
@@ -249487,7 +250674,8 @@ var package_default = {
   dependencies: {
     "@sinclair/typebox": "^0.34.52",
     "@supacloud/compiler": "^0.1.0",
-    "@supacloud/db": "^0.1.0"
+    "@supacloud/db": "^0.1.0",
+    fflate: "^0.8.3"
   },
   devDependencies: {
     "@types/bun": "^1.4.0",
@@ -249666,6 +250854,7 @@ function printHelp(context) {
 
 USAGE
 
+  ${preferredCommand} [global flags] deploy [--flags]
   ${preferredCommand} [global flags] <module> <action> [--flags]
   ${preferredCommand} [global flags] status
   ${preferredCommand} --help
@@ -249700,6 +250889,9 @@ DEFAULT CONTEXT
 EXAMPLES
 
   ${preferredCommand} status
+  ${preferredCommand} deploy
+  ${preferredCommand} deploy --target web
+  ${preferredCommand} deploy --target api
   ${preferredCommand} project get
   ${preferredCommand} project logs --log_type database
   ${preferredCommand} project task_stats
@@ -249738,6 +250930,7 @@ EXAMPLES
   ${preferredCommand} db lint --root . --module_file db/modules.ts
   ${preferredCommand} db explain --target public.cases --module_file db/modules.ts
   ${preferredCommand} db module_check --module_file db/modules.ts --database_url "postgresql://..."
+  ${preferredCommand} db module_check --lite --project_dir .
   ${preferredCommand} edge_functions get_config --ref abc123 --slug hello
   ${preferredCommand} edge_functions deploy --ref abc123 --slug hello --path ./supabase/functions/hello --expected-active-version absent --expected-activation-id legacy
   ${preferredCommand} edge_functions deploy --ref abc123 --slug hello --prebundled-path ./dist/hello.js --expected-sha256 <sha256> --expected-active-version 4 --expected-activation-id <uuid>
@@ -249852,6 +251045,16 @@ function createCliTools(context, confirmProduction) {
   };
   if (context.credentialScope !== "management" || !context.apiUrl || !context.apiToken) {
     registerContextAwareHelp();
+    tools.deploy = {
+      schema: deployToolSchema,
+      callback: async () => ({
+        isError: true,
+        content: [{
+          type: "text",
+          text: `⚠️ Deploy requires Management API context. Run \`${preferredCommand} status\` to inspect current detection.`
+        }]
+      })
+    };
     Object.assign(tools, captureTools((server2) => registerDatabaseTools(server2, undefined, {
       localOnly: true
     })));
@@ -249910,9 +251113,10 @@ function createCliTools(context, confirmProduction) {
   assign(captureTools((server2) => registerAuthTools(server2, http)));
   assign(captureTools((server2) => registerOAuthClientTools(server2, http)));
   assign(captureTools((server2) => registerStorageTools(server2, http)));
-  assign(captureTools((server2) => registerAdvancedTools(server2, http, process.env, {
+  const advancedTools = captureTools((server2) => registerAdvancedTools(server2, http, process.env, {
     readOnly: context.readOnly
-  })));
+  }));
+  assign(advancedTools);
   assign(captureTools((server2) => registerScheduledFunctionTools(server2, http, process.env, {
     readOnly: context.readOnly
   })));
@@ -249923,6 +251127,11 @@ function createCliTools(context, confirmProduction) {
     applicationOrigin: context.inferredSupabaseUrl || undefined
   })));
   assign(captureTools((server2) => registerFrontendTools(server2, http)));
+  assign(captureTools((server2) => registerDeployTools(server2, http, {
+    projectRef: context.projectRef || undefined,
+    cwd: process.cwd(),
+    edgeFunctionDeploy: advancedTools.edge_functions?.callback
+  })));
   assign(captureTools((server2) => registerGatewayTools(server2, http, {
     projectRef: context.projectRef || undefined
   })));
@@ -249944,7 +251153,8 @@ async function main() {
   }
   const globalOptions = parseGlobalOptions(rawArgs);
   const args = globalOptions.args;
-  const context = resolveSupaCloudContext(process.env, process.cwd(), {
+  const contextDirectory = args[0] === "deploy" ? await findDeployConfigRoot(process.cwd()) : process.cwd();
+  const context = resolveSupaCloudContext(process.env, contextDirectory, {
     environmentName: globalOptions.environmentName,
     envFile: globalOptions.envFile
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.38.0",
+  "version": "0.40.0",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",
@@ -33,7 +33,8 @@
   "dependencies": {
     "@sinclair/typebox": "^0.34.52",
     "@supacloud/compiler": "^0.1.0",
-    "@supacloud/db": "^0.1.0"
+    "@supacloud/db": "^0.1.0",
+    "fflate": "^0.8.3"
   },
   "devDependencies": {
     "@types/bun": "^1.4.0",