@supatype/cli 0.1.1 → 0.1.2

package/dist/ui/theme.js

@@ -0,0 +1,34 @@
+/**
+ * Supatype terminal design tokens — shared by Ink components and plain CI output.
+ */
+export const RESET = "\x1b[0m";
+export const DIM = "\x1b[2m";
+export const BOLD = "\x1b[1m";
+export const theme = {
+    brand: "magenta",
+    brandHex: "#c084fc",
+    info: "cyan",
+    warn: "yellow",
+    error: "red",
+    success: "green",
+    dim: "gray",
+    muted: "gray",
+};
+/** Legacy ANSI exports used by dev-logo / dev-task-colors. */
+export const BRAND_COLOR = "\x1b[35m";
+export function brandStyle(text) {
+    return `${BRAND_COLOR}${BOLD}${text}${RESET}`;
+}
+export function plainInfo(message) {
+    return `${theme.info === "cyan" ? "\x1b[36m" : ""}ℹ ${message}${RESET}`;
+}
+export function plainWarn(message) {
+    return `\x1b[33m⚠ ${message}${RESET}`;
+}
+export function plainError(message) {
+    return `\x1b[31m✗ ${message}${RESET}`;
+}
+export function plainSuccess(message) {
+    return `\x1b[32m✓ ${message}${RESET}`;
+}
+//# sourceMappingURL=theme.js.map

package/dist/ui/theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/ui/theme.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,SAAS,CAAA;AAC9B,MAAM,CAAC,MAAM,GAAG,GAAG,SAAS,CAAA;AAC5B,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,CAAA;AAE7B,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,SAAkB;IACzB,QAAQ,EAAE,SAAS;IACnB,IAAI,EAAE,MAAe;IACrB,IAAI,EAAE,QAAiB;IACvB,KAAK,EAAE,KAAc;IACrB,OAAO,EAAE,OAAgB;IACzB,GAAG,EAAE,MAAe;IACpB,KAAK,EAAE,MAAe;CACd,CAAA;AAEV,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,UAAU,CAAA;AAErC,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,GAAG,WAAW,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,EAAE,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,GAAG,KAAK,EAAE,CAAA;AACzE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,aAAa,OAAO,GAAG,KAAK,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,aAAa,OAAO,GAAG,KAAK,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,aAAa,OAAO,GAAG,KAAK,EAAE,CAAA;AACvC,CAAC"}

package/dist/valkey-sidecar.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Lightweight Valkey container for native `supatype dev` (REST response cache).
+ */
+export interface ValkeySidecarResult {
+    addr: string;
+    containerName: string | null;
+    started: boolean;
+}
+/**
+ * Ensure Valkey is reachable at 127.0.0.1:6379 for native dev.
+ * Starts a named Docker container when Docker is available and nothing is listening.
+ */
+export declare function ensureValkeySidecar(projectName: string): ValkeySidecarResult;
+export declare function stopValkeySidecar(containerName: string | null): void;
+/** @internal Test helper — probe without subprocess. */
+export declare function probeTcp(host: string, port: number): Promise<boolean>;
+//# sourceMappingURL=valkey-sidecar.d.ts.map

package/dist/valkey-sidecar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"valkey-sidecar.d.ts","sourceRoot":"","sources":["../src/valkey-sidecar.ts"],"names":[],"mappings":"AAAA;;GAEG;AA4CH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAgD5E;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGpE;AAED,wDAAwD;AACxD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAarE"}

package/dist/valkey-sidecar.js

@@ -0,0 +1,94 @@
+/**
+ * Lightweight Valkey container for native `supatype dev` (REST response cache).
+ */
+import { spawnSync } from "node:child_process";
+import { createConnection } from "node:net";
+const DEFAULT_HOST = "127.0.0.1";
+const DEFAULT_PORT = 6379;
+const IMAGE = "valkey/valkey:8-alpine";
+function containerName(projectName) {
+    const safe = projectName.replace(/[^a-zA-Z0-9_-]/g, "-").slice(0, 48);
+    return `supatype-valkey-dev-${safe}`;
+}
+function dockerAvailable() {
+    const r = spawnSync("docker", ["info"], { stdio: "ignore" });
+    return r.status === 0;
+}
+function isAddrReachable(host, port, timeoutMs = 800) {
+    try {
+        const r = spawnSync(process.execPath, [
+            "-e",
+            `const n=require('net');const s=n.createConnection({host:${JSON.stringify(host)},port:${port}});` +
+                `s.on('connect',()=>{s.end();process.exit(0)});s.on('error',()=>process.exit(1));` +
+                `setTimeout(()=>process.exit(1),${timeoutMs})`,
+        ], { stdio: "ignore" });
+        return r.status === 0;
+    }
+    catch {
+        return false;
+    }
+}
+function sleepMs(ms) {
+    const end = Date.now() + ms;
+    while (Date.now() < end) {
+        /* spin */
+    }
+}
+/**
+ * Ensure Valkey is reachable at 127.0.0.1:6379 for native dev.
+ * Starts a named Docker container when Docker is available and nothing is listening.
+ */
+export function ensureValkeySidecar(projectName) {
+    const envAddr = process.env["SUPATYPE_VALKEY_ADDR"]?.trim();
+    if (envAddr) {
+        return { addr: envAddr, containerName: null, started: false };
+    }
+    const addr = `${DEFAULT_HOST}:${DEFAULT_PORT}`;
+    if (isAddrReachable(DEFAULT_HOST, DEFAULT_PORT)) {
+        return { addr, containerName: null, started: false };
+    }
+    if (!dockerAvailable()) {
+        console.warn("[supatype] ⚠  Valkey not available (Docker not running). " +
+            "REST server cache (`cache({ server: true })`) will bypass until Valkey is reachable.");
+        return { addr: "", containerName: null, started: false };
+    }
+    const name = containerName(projectName);
+    spawnSync("docker", ["rm", "-f", name], { stdio: "ignore" });
+    const run = spawnSync("docker", ["run", "-d", "--name", name, "-p", `${DEFAULT_PORT}:6379`, IMAGE], { encoding: "utf8" });
+    if (run.status !== 0) {
+        const detail = (run.stderr || run.stdout || "").trim();
+        console.warn(`[supatype] ⚠  Could not start Valkey sidecar: ${detail || `exit ${run.status}`}\n` +
+            "  REST server cache will bypass until Valkey is available.");
+        return { addr: "", containerName: null, started: false };
+    }
+    for (let i = 0; i < 30; i++) {
+        if (isAddrReachable(DEFAULT_HOST, DEFAULT_PORT)) {
+            console.log(`[supatype] Valkey sidecar running (${addr})`);
+            return { addr, containerName: name, started: true };
+        }
+        sleepMs(100);
+    }
+    console.warn("[supatype] ⚠  Valkey sidecar started but not reachable yet — cache may bypass initially.");
+    return { addr, containerName: name, started: true };
+}
+export function stopValkeySidecar(containerName) {
+    if (!containerName)
+        return;
+    spawnSync("docker", ["rm", "-f", containerName], { stdio: "ignore" });
+}
+/** @internal Test helper — probe without subprocess. */
+export function probeTcp(host, port) {
+    return new Promise((resolve) => {
+        const s = createConnection({ host, port });
+        s.once("connect", () => {
+            s.destroy();
+            resolve(true);
+        });
+        s.once("error", () => resolve(false));
+        setTimeout(() => {
+            s.destroy();
+            resolve(false);
+        }, 800);
+    });
+}
+//# sourceMappingURL=valkey-sidecar.js.map

package/dist/valkey-sidecar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"valkey-sidecar.js","sourceRoot":"","sources":["../src/valkey-sidecar.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAE3C,MAAM,YAAY,GAAG,WAAW,CAAA;AAChC,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,KAAK,GAAG,wBAAwB,CAAA;AAEtC,SAAS,aAAa,CAAC,WAAmB;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrE,OAAO,uBAAuB,IAAI,EAAE,CAAA;AACtC,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC5D,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,SAAS,GAAG,GAAG;IAClE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CACjB,OAAO,CAAC,QAAQ,EAChB;YACE,IAAI;YACJ,2DAA2D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK;gBAC/F,kFAAkF;gBAClF,kCAAkC,SAAS,GAAG;SACjD,EACD,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;QACD,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;IAC3B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QACxB,UAAU;IACZ,CAAC;AACH,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAA;IAC3D,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC/D,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,YAAY,IAAI,YAAY,EAAE,CAAA;IAE9C,IAAI,eAAe,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACtD,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CACV,2DAA2D;YACzD,sFAAsF,CACzF,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IACvC,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAE5D,MAAM,GAAG,GAAG,SAAS,CACnB,QAAQ,EACR,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,YAAY,OAAO,EAAE,KAAK,CAAC,EAClE,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAA;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,OAAO,CAAC,IAAI,CACV,iDAAiD,MAAM,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,IAAI;YACjF,4DAA4D,CAC/D,CAAA;QACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC1D,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,eAAe,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,sCAAsC,IAAI,GAAG,CAAC,CAAA;YAC1D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;QACrD,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAA;IACd,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAA;IACxG,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,aAA4B;IAC5D,IAAI,CAAC,aAAa;QAAE,OAAM;IAC1B,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,CAAC,CAAC,OAAO,EAAE,CAAA;YACX,OAAO,CAAC,IAAI,CAAC,CAAA;QACf,CAAC,CAAC,CAAA;QACF,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QACrC,UAAU,CAAC,GAAG,EAAE;YACd,CAAC,CAAC,OAAO,EAAE,CAAA;YACX,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,EAAE,GAAG,CAAC,CAAA;IACT,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supatype/cli",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Supatype CLI — schema push, introspect, generate",
   "type": "module",
   "bin": {
@@ -19,8 +19,12 @@
     }
   },
   "dependencies": {
-    "@clack/prompts": "^1.6.0",
     "bcryptjs": "^3.0.2",
+    "ink": "^5.2.1",
+    "ink-select-input": "^6.2.0",
+    "ink-spinner": "^5.0.0",
+    "ink-text-input": "^6.0.0",
+    "react": "^18.3.1",
     "commander": "^12.1.0",
     "pg": "^8.13.0",
     "ts-morph": "^28.0.0",
@@ -29,6 +33,7 @@
   },
   "devDependencies": {
     "@types/bcryptjs": "^2.4.6",
+    "@types/react": "^18.3.18",
     "@types/node": "^22",
     "@types/pg": "^8",
     "vitest": "^4.0.18"
@@ -36,7 +41,8 @@
   "scripts": {
     "build": "tsc --project tsconfig.json && node --input-type=module -e \"import{cpSync,mkdirSync}from'node:fs';const a='dist/assets';mkdirSync(a,{recursive:true});cpSync('assets/supatype-logo-wordmark.ascii.txt',a+'/supatype-logo-wordmark.ascii.txt')\"",
     "dev": "tsc --project tsconfig.json --watch",
-    "typecheck": "tsc --project tsconfig.json --noEmit",
+    "typecheck": "tsc --project tsconfig.json --noEmit && tsc --project tests/tsconfig.json --noEmit",
+    "typecheck:tests": "tsc --project tests/tsconfig.json --noEmit",
     "postinstall": "node --input-type=module --eval \"import{existsSync}from'node:fs';import{resolve}from'node:path';import{pathToFileURL}from'node:url';const f=resolve(process.cwd(),'dist/scripts/postinstall.js');if(existsSync(f))await import(pathToFileURL(f).href)\"",
     "test": "vitest run",
     "clean": "rm -rf dist *.tsbuildinfo"

package/src/binary-cache.ts

@@ -37,6 +37,12 @@ import { basename, join, resolve, isAbsolute } from "node:path"
 import type { SupatypeProjectConfig } from "./project-config.js"
 import { loadProjectLink, migrateLegacyLinkFiles } from "./link.js"
 import { releasePublicKey } from "./release-public-key.js"
+import {
+  isDownloadInProgress,
+  releaseDownloadLock,
+  tryAcquireDownloadLock,
+  waitForComponentDownload,
+} from "./binary-download-lock.js"
 
 /**
  * Set `versions.{engine|server|postgres|deno}: VERSION_PIN_LOCAL` to mean “use `overrides.*` only”
@@ -167,6 +173,16 @@ export function cachedBinaryPath(component: Component, version: string, platform
   return join(cachePath(component, version), binaryName(component, version, platform))
 }
 
+/** True when the platform binary for `version` is present and passes format checks. */
+export function isCachedBinaryReady(
+  component: Component,
+  version: string,
+  platform: PlatformId = currentPlatform(),
+): boolean {
+  const destPath = cachedBinaryPath(component, version, platform)
+  return existsSync(destPath) && cachedArtifactLooksValid(component, destPath)
+}
+
 function binaryName(component: Component, version: string, platform: PlatformId): string {
   const win = platform.os === "windows"
   switch (component) {
@@ -299,6 +315,45 @@ export async function ensureCachedBinary(
   return download(component, version, platform)
 }
 
+async function acquireDownloadSlot(
+  component: Component,
+  version: string,
+  platform: PlatformId,
+): Promise<void> {
+  const isReady = () => isCachedBinaryReady(component, version, platform)
+
+  for (let attempt = 0; attempt < 3; attempt++) {
+    if (isReady()) return
+
+    if (tryAcquireDownloadLock(component, version)) return
+
+    if (isDownloadInProgress(component, version)) {
+      console.log(
+        `[supatype] ${component} v${version} is downloading in another process — waiting...`,
+      )
+      const outcome = await waitForComponentDownload(component, version, isReady, (c) => {
+        console.log(`[supatype] Still waiting for ${c} download...`)
+      })
+      if (outcome === "ready") return
+      if (outcome === "timeout") {
+        throw new Error(
+          `Timed out waiting for ${component} v${version} download. Run: supatype update`,
+        )
+      }
+      console.warn(
+        `[supatype] ${component} v${version} download did not finish in the other process — retrying.`,
+      )
+      continue
+    }
+
+    if (tryAcquireDownloadLock(component, version)) return
+  }
+
+  throw new Error(
+    `Could not acquire download lock for ${component} v${version}. Run: supatype update`,
+  )
+}
+
 export async function download(
   component: Component,
   version: string,
@@ -327,6 +382,11 @@ export async function download(
     unlinkSync(destPath)
   }
 
+  await acquireDownloadSlot(component, version, platform)
+  if (isCachedBinaryReady(component, version, platform)) {
+    return destPath
+  }
+
   const binaryUrl = `${CDN_BASE}${CDN_PATHS[component](version, platform)}`
   const checksumsUrl = `${CDN_BASE}${checksumsDirPath(component, version)}`
   const minisigUrl = `${checksumsUrl}.minisig`
@@ -361,6 +421,7 @@ export async function download(
       `Failed to download ${component} v${version} from ${CDN_BASE}: ${(err as Error).message}`,
     )
   } finally {
+    releaseDownloadLock(component, version)
     if (existsSync(tmpPath)) {
       try { unlinkSync(tmpPath) } catch { /* ignore */ }
     }

package/src/binary-download-lock.ts

@@ -0,0 +1,124 @@
+/**
+ * Coordinates concurrent component-binary downloads (postinstall, init, dev).
+ * A second CLI process waits for an in-flight download instead of racing the CDN.
+ */
+
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs"
+import { join } from "node:path"
+import { cachePath, type Component } from "./binary-cache.js"
+
+const LOCK_VERSION = 1 as const
+const STALE_MS = 30 * 60 * 1000
+const POLL_MS = 500
+const WAIT_NOTICE_MS = 3000
+
+interface DownloadLockPayload {
+  version: typeof LOCK_VERSION
+  pid: number
+  component: Component
+  semver: string
+  startedAt: string
+}
+
+function lockPath(component: Component, version: string): string {
+  return join(cachePath(component, version), ".downloading")
+}
+
+function sleep(ms: number): Promise<void> {
+  return new Promise((resolve) => setTimeout(resolve, ms))
+}
+
+function isPidAlive(pid: number): boolean {
+  try {
+    process.kill(pid, 0)
+    return true
+  } catch {
+    return false
+  }
+}
+
+function readLock(component: Component, version: string): DownloadLockPayload | null {
+  const path = lockPath(component, version)
+  if (!existsSync(path)) return null
+  try {
+    const data = JSON.parse(readFileSync(path, "utf8")) as DownloadLockPayload
+    if (data.version !== LOCK_VERSION) return null
+    return data
+  } catch {
+    return null
+  }
+}
+
+function isLockStale(lock: DownloadLockPayload): boolean {
+  if (!isPidAlive(lock.pid)) return true
+  const age = Date.now() - Date.parse(lock.startedAt)
+  return Number.isNaN(age) || age > STALE_MS
+}
+
+export function clearDownloadLock(component: Component, version: string): void {
+  const path = lockPath(component, version)
+  if (existsSync(path)) unlinkSync(path)
+}
+
+/** Atomically claim the download lock for this process, or return false if another live holder exists. */
+export function tryAcquireDownloadLock(component: Component, version: string): boolean {
+  mkdirSync(cachePath(component, version), { recursive: true })
+  const existing = readLock(component, version)
+  if (existing && !isLockStale(existing)) return false
+  if (existing) clearDownloadLock(component, version)
+
+  const payload: DownloadLockPayload = {
+    version: LOCK_VERSION,
+    pid: process.pid,
+    component,
+    semver: version,
+    startedAt: new Date().toISOString(),
+  }
+  try {
+    writeFileSync(lockPath(component, version), JSON.stringify(payload), { flag: "wx" })
+    return true
+  } catch {
+    return false
+  }
+}
+
+export function releaseDownloadLock(component: Component, version: string): void {
+  const lock = readLock(component, version)
+  if (!lock || lock.pid !== process.pid) return
+  clearDownloadLock(component, version)
+}
+
+export function isDownloadInProgress(component: Component, version: string): boolean {
+  const lock = readLock(component, version)
+  return lock !== null && !isLockStale(lock)
+}
+
+export async function waitForComponentDownload(
+  component: Component,
+  version: string,
+  isReady: () => boolean,
+  onWait?: (component: Component) => void,
+): Promise<"ready" | "failed" | "timeout"> {
+  const deadline = Date.now() + STALE_MS
+  let lastNotice = 0
+
+  while (Date.now() < deadline) {
+    if (isReady()) return "ready"
+
+    const lock = readLock(component, version)
+    if (!lock || isLockStale(lock)) {
+      if (isReady()) return "ready"
+      return "failed"
+    }
+
+    const now = Date.now()
+    if (onWait && now - lastNotice >= WAIT_NOTICE_MS) {
+      onWait(component)
+      lastNotice = now
+    }
+
+    await sleep(POLL_MS)
+  }
+
+  return isReady() ? "ready" : "timeout"
+}

package/src/cli-package-version.ts

@@ -0,0 +1,15 @@
+import { readFileSync } from "node:fs"
+import { dirname, join } from "node:path"
+import { fileURLToPath } from "node:url"
+
+const CLI_PACKAGE_JSON = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json")
+
+/** Installed @supatype/cli version from package.json (used by --version and init scaffolding). */
+export function cliPackageVersion(): string {
+  try {
+    const pkg = JSON.parse(readFileSync(CLI_PACKAGE_JSON, "utf8")) as { version?: string }
+    return pkg.version ?? "0.0.0"
+  } catch {
+    return "0.0.0"
+  }
+}

package/src/cli.ts

@@ -29,13 +29,15 @@ import { registerPlugins } from "./commands/plugins.js"
 import { registerTypes } from "./commands/types.js"
 import { registerMigrateFromV1 } from "./commands/migrate-from-v1.js"
 import { registerSelfUpdate } from "./commands/self-update.js"
+import { cliPackageVersion } from "./cli-package-version.js"
 import { reportCliFatal } from "./ui/fatal.js"
+import { wrapProgramActionsWithChrome } from "./ui/runtime/command-chrome.js"
 
 export async function run(): Promise<void> {
   const program = new Command()
     .name("supatype")
-    .description("Supatype — schema-first Postgres API")
-    .version("0.1.0")
+    .description("Supatype — type-first platform for PostgreSQL")
+    .version(cliPackageVersion())
 
   registerInit(program)
   registerDev(program)
@@ -68,6 +70,8 @@ export async function run(): Promise<void> {
   registerTypes(program)
   registerMigrateFromV1(program)
 
+  wrapProgramActionsWithChrome(program)
+
   try {
     await program.parseAsync(process.argv)
   } catch (err) {

package/src/commands/add.ts

@@ -1,9 +1,9 @@
 import type { Command } from "commander"
-import * as p from "@clack/prompts"
+import { p, runClackFlow } from "../ui/clack.js"
 import { loadConfig } from "../config.js"
 import { selfHostTlsEnabled } from "../project-config.js"
 import { updateServerConfigInProject } from "../app-config.js"
-import { ensureNotCancelled, printLogo } from "../ui/prompts.js"
+import { ensureNotCancelled } from "../ui/prompts.js"
 import { file, error, info, plain } from "../ui/messages.js"
 import { nextSteps } from "../ui/next-steps.js"
 
@@ -49,26 +49,33 @@ async function addDomain(domainArg?: string, emailArg?: string): Promise<void> {
   const cwd = process.cwd()
   const interactive = !domainArg?.trim() || !emailArg?.trim()
 
-  if (interactive) {
-    printLogo()
-    p.intro("Add a custom domain")
-  }
-
-  const domain = await promptDomain(domainArg)
-  const email = await promptEmail(emailArg)
+  const run = async (): Promise<void> => {
+    const domain = await promptDomain(domainArg)
+    const email = await promptEmail(emailArg)
 
-  try {
-    const configPath = updateServerConfigInProject(cwd, { domain, tlsEmail: email })
-    if (interactive) {
-      p.outro(`Updated ${configPath}`)
-    } else {
-      file("updated", configPath)
+    try {
+      const configPath = updateServerConfigInProject(cwd, { domain, tlsEmail: email })
+      if (interactive) {
+        p.outro(`Updated ${configPath}`)
+      } else {
+        file("updated", configPath)
+      }
+      printDomainNextSteps(cwd, domain)
+    } catch (err) {
+      error((err as Error).message)
+      process.exit(1)
     }
-    printDomainNextSteps(cwd, domain)
-  } catch (err) {
-    error((err as Error).message)
-    process.exit(1)
   }
+
+  if (interactive) {
+    await runClackFlow(async () => {
+      p.intro("Add a custom domain")
+      await run()
+    })
+    return
+  }
+
+  await run()
 }
 
 function printDomainNextSteps(cwd: string, domain: string): void {

package/src/commands/admin.ts

@@ -19,8 +19,11 @@ import { readEnvValue, upsertEnvFile } from "../env-file.js"
 import { hasEngineOverride } from "../binary-cache.js"
 import { confirm as uiConfirm } from "../ui/confirm.js"
 import { error, info, plain } from "../ui/messages.js"
-import { promptText } from "../ui/prompts.js"
+import { promptPassword, promptText } from "../ui/prompts.js"
 import { isInteractive } from "../ui/interactive.js"
+import {
+  getActiveDevSession,
+} from "../dev-session.js"
 
 export const ADMIN_EMAIL_ENV = "SUPATYPE_ADMIN_EMAIL"
 export const ADMIN_PASSWORD_ENV = "SUPATYPE_ADMIN_PASSWORD"
@@ -284,9 +287,24 @@ async function ensureFirstAdminWithQuery(
   }
 
   const role = options.role ?? "admin"
-  await createAdminUser(query, credentials.email, credentials.password, role, { quiet: true })
+  try {
+    await createAdminUser(query, credentials.email, credentials.password, role, { quiet: true })
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err)
+    error(`Failed to create admin user: ${message}`)
+    return
+  }
   clearAdminSeedPassword(cwd)
-  info(`Admin user "${credentials.email}" created (role: ${role}).`)
+  logFirstAdminCreated(credentials.email, role)
+}
+
+function logFirstAdminCreated(email: string, role: string): void {
+  if (getActiveDevSession()?.isTui()) {
+    console.log(`Admin user "${email}" created (role: ${role}).`)
+    console.log("Log in at /admin after starting the dev server.")
+    return
+  }
+  info(`Admin user "${email}" created (role: ${role}).`)
   info("Log in at /admin after starting the dev server.")
 }
 
@@ -325,7 +343,7 @@ async function resolveAdminCredentials(
     return null
   }
 
-  const password = await promptText("Admin password (min 8 chars)")
+  const password = await promptPassword("Admin password (min 8 chars)")
   if (!password || password.length < 8) {
     info("Password too short. Skipping admin user creation.")
     return null
@@ -372,11 +390,11 @@ async function createAdminUser(
 
   const result = await query(
     `INSERT INTO auth.users (
-      email, encrypted_password, role, aud,
+      id, email, encrypted_password, role, aud,
       raw_app_meta_data, raw_user_meta_data,
       email_confirmed_at, created_at, updated_at
     ) VALUES (
-      $1, $2, 'authenticated', 'authenticated',
+      gen_random_uuid(), $1, $2, 'authenticated', 'authenticated',
       $3::jsonb, $4::jsonb,
       now(), now(), now()
     ) RETURNING id, email`,