@sylphx/cli 0.5.1 → 0.5.2

package/dist/main.js

@@ -15,7 +15,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@sylphx/cli",
-      version: "0.5.1",
+      version: "0.5.2",
       description: "Sylphx Platform CLI \u2014 deploy and manage your applications from the terminal. 63 commands across deployment, logs, env vars, domains, databases, storage, monitoring, self-service (user), admin (users/quotas/audit/invitations/jwt-keys/project-migrate), and more.",
       type: "module",
       homepage: "https://sylphx.com",
@@ -71,7 +71,7 @@ var init_package = __esm({
         "@effect/cli": "0.75.1",
         "@effect/platform": "0.96.0",
         "@effect/platform-bun": "0.89.0",
-        "@sylphx/sdk": "0.8.0",
+        "@sylphx/sdk": "0.9.0",
         chalk: "^5.3.0",
         effect: "3.21.0",
         eventsource: "^2.0.2",
@@ -3993,10 +3993,11 @@ var init_ids = __esm({
 
 // ../contract/dist/schemas/auth.js
 import { Schema as Schema34 } from "effect";
-var AuthTokens, SessionUser, SignInInput, SignInResult, SignUpInput, SignUpResult, SessionResult, AuthUser, LoginRequest, LoginResponse, RegisterRequest, RegisterResponse, AuthTokensResponse, TwoFactorVerifyRequest, UserFullProfile, DeviceInitRequest, DeviceInitResponse, DevicePollResponse, DeviceApproveRequest, DeviceApproveResponse, DeviceDenyRequest, DeviceDenyResponse, OAuthTokenAuthorizationCodeRequest, OAuthTokenRefreshRequest, OAuthTokenDeviceCodeRequest, OAuthTokenClientCredentialsRequest, OAuthTokenRequest, OAuthTokenResponse, OAuthClientCredentialsResponse, OAuthTokenErrorCode, OAuthTokenErrorResponse, OAuthRevokeRequest, OAuthRevokeResponse, OAuthIntrospectRequest, OAuthIntrospectResponse, PlatformSession, PlatformSessionsListResponse, PlatformSessionRevokeRequest, PlatformSessionRevokeResponse, PlatformSessionRevokeOtherResponse, PlatformSessionRevokeAllResponse, PlatformSessionRenameRequest, PlatformSessionRenameResponse, PlatformPasswordStatusResponse, PlatformPasswordSetRequest, PlatformPasswordSetResponse, PlatformPasswordChangeRequest, PlatformPasswordChangeResponse, AuthUserExportResponse, AuthUserDeleteRequest, AuthUserDeleteResponse, AuditScopeLiteral, PlatformAuditQueryRequest, PlatformAuditEvent, PlatformAuditQueryResponse, RateLimitScopeLiteral, RateLimitStrategyLiteral, NamespaceString, PlatformRateLimitStatusRequest, PlatformRateLimitStatusRow, PlatformRateLimitStatusResponse, PlatformRateLimitStrategiesListRequest, PlatformRateLimitStrategyRow, PlatformRateLimitStrategiesListResponse, PlatformRateLimitNamespaceParams, PlatformRateLimitStrategyUpsertRequest, PlatformRateLimitStrategyUpsertResponse, PlatformRateLimitStrategyDeleteRequest, PlatformRateLimitStrategyDeleteResponse, PasskeySignupChallengeRequest, PasskeySignupChallengeResponse, PasskeySignupVerifyRequest, PasskeySignupVerifyResponse, PasskeyPolicyViolationResponse, PrimaryAuthMethodResponse, OrgAuthPolicy, OrgAuthPolicyUpdateRequest;
+var AuthTokens, SessionUser, SignInInput, SignInResult, SignUpInput, SignUpResult, SessionResult, AuthUser, LoginRequest, LoginResponse, RegisterRequest, RegisterResponse, ResendEmailVerificationRequest, ResendEmailVerificationResponse, AuthTokensResponse, TwoFactorVerifyRequest, UserFullProfile, DeviceInitRequest, DeviceInitResponse, DevicePollResponse, DeviceApproveRequest, DeviceApproveResponse, DeviceDenyRequest, DeviceDenyResponse, OAuthTokenAuthorizationCodeRequest, OAuthTokenRefreshRequest, OAuthTokenDeviceCodeRequest, OAuthTokenClientCredentialsRequest, OAuthTokenRequest, OAuthTokenResponse, OAuthClientCredentialsResponse, OAuthTokenErrorCode, OAuthTokenErrorResponse, OAuthRevokeRequest, OAuthRevokeResponse, OAuthIntrospectRequest, OAuthIntrospectResponse, PlatformSession, PlatformSessionsListResponse, PlatformSessionRevokeRequest, PlatformSessionRevokeResponse, PlatformSessionRevokeOtherResponse, PlatformSessionRevokeAllResponse, PlatformSessionRenameRequest, PlatformSessionRenameResponse, PlatformPasswordStatusResponse, PlatformPasswordSetRequest, PlatformPasswordSetResponse, PlatformPasswordChangeRequest, PlatformPasswordChangeResponse, AuthUserExportResponse, AuthUserDeleteRequest, AuthUserDeleteResponse, AuditScopeLiteral, PlatformAuditQueryRequest, PlatformAuditEvent, PlatformAuditQueryResponse, RateLimitScopeLiteral, RateLimitStrategyLiteral, NamespaceString, PlatformRateLimitStatusRequest, PlatformRateLimitStatusRow, PlatformRateLimitStatusResponse, PlatformRateLimitStrategiesListRequest, PlatformRateLimitStrategyRow, PlatformRateLimitStrategiesListResponse, PlatformRateLimitNamespaceParams, PlatformRateLimitStrategyUpsertRequest, PlatformRateLimitStrategyUpsertResponse, PlatformRateLimitStrategyDeleteRequest, PlatformRateLimitStrategyDeleteResponse, PasskeySignupChallengeRequest, PasskeySignupChallengeResponse, PasskeySignupVerifyRequest, PasskeySignupVerifyResponse, PasskeyPolicyViolationResponse, PrimaryAuthMethodResponse, OrgAuthPolicy, OrgAuthPolicyUpdateRequest;
 var init_auth = __esm({
   "../contract/dist/schemas/auth.js"() {
     "use strict";
+    init_primitives();
     init_ids();
     AuthTokens = Schema34.Struct({
       accessToken: Schema34.String,
@@ -4076,6 +4077,13 @@ var init_auth = __esm({
         name: Schema34.NullOr(Schema34.String)
       })
     });
+    ResendEmailVerificationRequest = Schema34.Struct({
+      email: Email
+    });
+    ResendEmailVerificationResponse = Schema34.Struct({
+      success: Schema34.Literal(true),
+      message: Schema34.String
+    });
     AuthTokensResponse = Schema34.Struct({
       accessToken: Schema34.String,
       refreshToken: Schema34.String,
@@ -5307,7 +5315,7 @@ var init_database = __esm({
 
 // ../contract/dist/endpoints/databases.js
 import { Schema as Schema45 } from "effect";
-var IdPath, BindingPath, KindQuery, CreateResourceBody, MetricsResponse, databasesEndpoints;
+var IdPath, BindingPath, KindQuery, CreateResourceBody, MetricsResponse, databasesEndpoints, resourcesEndpoints;
 var init_databases = __esm({
   "../contract/dist/endpoints/databases.js"() {
     "use strict";
@@ -5343,7 +5351,7 @@ var init_databases = __esm({
         query: KindQuery,
         response: Schema45.Struct({ data: Schema45.Array(Database) }),
         summary: "List resources (filter via ?kind=database|kv|blob|search|volume)",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       create: defineEndpoint({
         method: "POST",
@@ -5351,7 +5359,7 @@ var init_databases = __esm({
         body: CreateResourceBody,
         response: Database,
         summary: "Provision a new resource (database|kv|blob|search|volume \u2014 async, 202)",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       get: defineEndpoint({
         method: "GET",
@@ -5359,7 +5367,7 @@ var init_databases = __esm({
         params: IdPath,
         response: Database,
         summary: "Get a resource (includes live status)",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       update: defineEndpoint({
         method: "PATCH",
@@ -5368,7 +5376,7 @@ var init_databases = __esm({
         body: Schema45.Record({ key: Schema45.String, value: Schema45.Unknown }),
         response: Database,
         summary: "Update resource name and/or config patch",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       delete: defineEndpoint({
         method: "DELETE",
@@ -5376,7 +5384,7 @@ var init_databases = __esm({
         params: IdPath,
         response: Schema45.Struct({ success: Schema45.optional(Schema45.Boolean) }),
         summary: "Deprovision a resource (204 on success, 409 when bindings exist)",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       metrics: defineEndpoint({
         method: "GET",
@@ -5384,7 +5392,7 @@ var init_databases = __esm({
         params: IdPath,
         response: MetricsResponse,
         summary: "Prometheus metrics snapshot (adapts by resource kind)",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       backups: defineEndpoint({
         method: "GET",
@@ -5427,7 +5435,7 @@ var init_databases = __esm({
         params: IdPath,
         response: Schema45.Struct({ bindings: Schema45.Array(DatabaseResourceBinding) }),
         summary: "List environment bindings for a resource",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       createBinding: defineEndpoint({
         method: "POST",
@@ -5436,7 +5444,7 @@ var init_databases = __esm({
         body: CreateBindingInput,
         response: DatabaseResourceBinding,
         summary: "Bind a resource to an environment",
-        tags: ["databases"]
+        tags: ["resources"]
       }),
       deleteBinding: defineEndpoint({
         method: "DELETE",
@@ -5444,9 +5452,10 @@ var init_databases = __esm({
         params: BindingPath,
         response: Schema45.Struct({ success: Schema45.Boolean }),
         summary: "Unbind a resource from an environment",
-        tags: ["databases"]
+        tags: ["resources"]
       })
     };
+    resourcesEndpoints = databasesEndpoints;
   }
 });
 
@@ -9944,7 +9953,7 @@ var init_privacy = __esm({
 
 // ../contract/dist/schemas/project-manifest.js
 import { Schema as Schema80 } from "effect";
-var Slug2, ManifestEnvName, ManifestRegion, MachineSize, BuildMachineSize, BuildpackName, ServiceType, DeployStrategy, WwwRedirect, ManifestProjectSection, ManifestBuildSection, ManifestDeploySection, ManifestServiceSection, ManifestEnvValue, ManifestDomainSection, PostgresTier, RedisTier, PostgresVersion, BlobVisibility, VolumeAccess, SearchTier, ManifestPostgresResource, ManifestRedisResource, ManifestBlobResource, ManifestVolumeResource, ManifestSearchResource, ManifestResourcesSection, ManifestCiSection, ManifestServiceOverride, ManifestEnvironmentOverride, ManifestEnvironmentsMap, SylphxManifest, SCALE_TO_ZERO_DEFAULTS;
+var Slug2, ManifestEnvName, ManifestRegion, MachineSize, BuildMachineSize, BuildpackName, ServiceType, DeployStrategy, WwwRedirect, ManifestProjectSection, ManifestBuildSection, ManifestDeploySection, ManifestServiceSection, ManifestEnvValue, ManifestDomainSection, PostgresTier, RedisTier, PostgresVersion, BlobVisibility, VolumeAccess, SearchTier, ManifestDatabaseEngine, ManifestSearchEngine, ManifestDatabaseResource, ManifestRedisResource, ManifestBlobResource, ManifestVolumeResource, ManifestSearchResource, ManifestResourcesSection, ManifestCiSection, ManifestServiceOverride, ManifestEnvironmentOverride, ManifestEnvironmentsMap, SylphxManifest, SCALE_TO_ZERO_DEFAULTS;
 var init_project_manifest = __esm({
   "../contract/dist/schemas/project-manifest.js"() {
     "use strict";
@@ -10068,7 +10077,11 @@ var init_project_manifest = __esm({
     BlobVisibility = Schema80.Literal("private", "public");
     VolumeAccess = Schema80.Literal("ReadWriteOnce", "ReadWriteMany");
     SearchTier = Schema80.Literal("micro", "standard");
-    ManifestPostgresResource = Schema80.Struct({
+    ManifestDatabaseEngine = Schema80.Literal("postgres");
+    ManifestSearchEngine = Schema80.Literal("typesense");
+    ManifestDatabaseResource = Schema80.Struct({
+      /** Capability-specific engine. PostgreSQL is the first supported database engine. */
+      engine: Schema80.optional(ManifestDatabaseEngine),
       /** CNPG tier; IMMUTABLE after creation. */
       tier: PostgresTier,
       storage_gb: Schema80.optional(Schema80.Number.pipe(Schema80.int(), Schema80.between(1, 1e4))),
@@ -10094,10 +10107,14 @@ var init_project_manifest = __esm({
       mount: Schema80.String
     });
     ManifestSearchResource = Schema80.Struct({
-      tier: SearchTier
+      /** Capability-specific engine. Typesense is the first supported search engine. */
+      engine: Schema80.optional(ManifestSearchEngine),
+      tier: SearchTier,
+      storage_gb: Schema80.optional(Schema80.Number.pipe(Schema80.int(), Schema80.between(1, 1e4))),
+      nodes: Schema80.optional(Schema80.Number.pipe(Schema80.int(), Schema80.between(1, 9)))
     });
     ManifestResourcesSection = Schema80.Struct({
-      postgres: Schema80.optional(ManifestPostgresResource),
+      database: Schema80.optional(ManifestDatabaseResource),
       redis: Schema80.optional(ManifestRedisResource),
       blob: Schema80.optional(ManifestBlobResource),
       volume: Schema80.optional(Schema80.Array(ManifestVolumeResource)),
@@ -10975,7 +10992,7 @@ var init_secret = __esm({
       updatedAt: Schema91.String
     });
     CreateSecretInput = Schema91.Struct({
-      projectId: Schema91.String,
+      projectId: ProjectId,
       key: SecretKey,
       value: SecretValue,
       description: Schema91.optional(Schema91.String),
@@ -11019,18 +11036,19 @@ var init_secrets = __esm({
   "../contract/dist/endpoints/secrets.js"() {
     "use strict";
     init_endpoint();
+    init_ids();
     init_secret();
     ListQuery = Schema92.Struct({
-      projectId: Schema92.String,
-      environmentId: Schema92.optional(Schema92.String),
+      projectId: ProjectId,
+      environmentId: Schema92.optional(EnvironmentId),
       includeInactive: Schema92.optional(Schema92.String)
     });
     DetailQuery = Schema92.Struct({
-      id: Schema92.String,
+      id: SecretId,
       reveal: Schema92.optional(Schema92.String)
     });
-    StatsQuery = Schema92.Struct({ projectId: Schema92.String });
-    DeleteBody = Schema92.Struct({ id: Schema92.String });
+    StatsQuery = Schema92.Struct({ projectId: ProjectId });
+    DeleteBody = Schema92.Struct({ id: SecretId });
     secretsEndpoints = {
       list: defineEndpoint({
         method: "GET",
@@ -11813,7 +11831,7 @@ var init_session_replay = __esm({
 
 // ../contract/dist/schemas/storage.js
 import { Schema as Schema96 } from "effect";
-var FileId, FileInfo, UploadTokenInput, UploadTokenResult, UploadUrlInput, UploadUrlResult, ListFilesQuery, ListFilesResult, DeleteFileResult, SignedUrlInput, SignedUrlResult, StorageFileVersion, ListFileVersionsResult, RestoreVersionResult, SoftDeleteFileResult, RestoreFileResult;
+var FileId, FileInfo, UploadTokenInput, UploadTokenResult, UploadUrlInput, UploadUrlResult, ListFilesQuery, ListFilesResult, DeleteFileResult, SignedUrlInput, SignedUrlResult, StorageFileVersion, ListFileVersionsResult, RestoreVersionResult, RestoreFileResult;
 var init_storage = __esm({
   "../contract/dist/schemas/storage.js"() {
     "use strict";
@@ -11937,10 +11955,6 @@ var init_storage = __esm({
       success: Schema96.Literal(true),
       version: StorageFileVersion
     });
-    SoftDeleteFileResult = Schema96.Struct({
-      success: Schema96.Literal(true),
-      isDeleted: Schema96.Literal(true)
-    });
     RestoreFileResult = Schema96.Struct({
       success: Schema96.Literal(true),
       file: FileInfo
@@ -14758,21 +14772,45 @@ var init_resourceBindings = __esm({
   }
 });
 
+// ../management/dist/resources.js
+var resources_exports = {};
+__export(resources_exports, {
+  get: () => get6,
+  list: () => list18
+});
+var list18, get6;
+var init_resources2 = __esm({
+  "../management/dist/resources.js"() {
+    "use strict";
+    init_dist();
+    init_http();
+    list18 = async (client, options = {}) => {
+      const { method, path: path6 } = resourcesEndpoints.list;
+      const res = await request(client, method, path6, options.kind ? { query: { kind: options.kind } } : void 0);
+      return Array.isArray(res) ? res : res.data ?? [];
+    };
+    get6 = (client, id) => {
+      const { method, path: path6 } = resourcesEndpoints.get;
+      return request(client, method, interpolatePath(path6, { id }));
+    };
+  }
+});
+
 // ../management/dist/runners.js
 var runners_exports = {};
 __export(runners_exports, {
-  list: () => list18,
+  list: () => list19,
   listJobs: () => listJobs,
   register: () => register,
   unregister: () => unregister
 });
-var register, list18, listJobs, unregister;
+var register, list19, listJobs, unregister;
 var init_runners2 = __esm({
   "../management/dist/runners.js"() {
     "use strict";
     init_http();
     register = (client, input) => request(client, "POST", "/runners", { body: input });
-    list18 = (client) => request(client, "GET", "/runners");
+    list19 = (client) => request(client, "GET", "/runners");
     listJobs = (client, runnerId) => request(client, "GET", `/runners/${encodeURIComponent(runnerId)}/jobs`);
     unregister = (client, runnerId) => request(client, "DELETE", `/runners/${encodeURIComponent(runnerId)}`);
   }
@@ -14783,7 +14821,7 @@ var saml_exports = {};
 __export(saml_exports, {
   create: () => create11,
   delete: () => _delete12,
-  get: () => get6,
+  get: () => get7,
   logs: () => logs2,
   metadata: () => metadata,
   nameIdFormats: () => nameIdFormats,
@@ -14793,13 +14831,13 @@ __export(saml_exports, {
   testConfig: () => testConfig,
   update: () => update4
 });
-var get6, create11, update4, setStatus, _delete12, metadata, logs2, testConfig, templates, nameIdFormats, signatureAlgorithms;
+var get7, create11, update4, setStatus, _delete12, metadata, logs2, testConfig, templates, nameIdFormats, signatureAlgorithms;
 var init_saml3 = __esm({
   "../management/dist/saml.js"() {
     "use strict";
     init_dist();
     init_http();
-    get6 = (client, organizationId) => {
+    get7 = (client, organizationId) => {
       const { method, path: path6 } = samlEndpoints.getProvider;
       return request(client, method, path6, { query: { organizationId } });
     };
@@ -14852,21 +14890,21 @@ var init_saml3 = __esm({
 var sandboxes_exports = {};
 __export(sandboxes_exports, {
   create: () => create12,
-  get: () => get7,
-  list: () => list19,
+  get: () => get8,
+  list: () => list20,
   terminate: () => terminate
 });
-var create12, list19, get7, terminate;
+var create12, list20, get8, terminate;
 var init_sandboxes = __esm({
   "../management/dist/sandboxes.js"() {
     "use strict";
     init_http();
     create12 = (client, projectId, body) => request(client, "POST", `/projects/${encodeURIComponent(projectId)}/sandboxes`, { body });
-    list19 = async (client, projectId) => {
+    list20 = async (client, projectId) => {
       const res = await request(client, "GET", `/projects/${encodeURIComponent(projectId)}/sandboxes`);
       return Array.isArray(res) ? res : res.sandboxes ?? [];
     };
-    get7 = (client, sandboxId) => request(client, "GET", `/sandboxes/${encodeURIComponent(sandboxId)}`);
+    get8 = (client, sandboxId) => request(client, "GET", `/sandboxes/${encodeURIComponent(sandboxId)}`);
     terminate = async (client, sandboxId) => {
       await request(client, "DELETE", `/sandboxes/${encodeURIComponent(sandboxId)}`);
     };
@@ -14910,19 +14948,19 @@ var secrets_exports = {};
 __export(secrets_exports, {
   create: () => create13,
   delete: () => _delete13,
-  get: () => get8,
-  list: () => list20,
+  get: () => get9,
+  list: () => list21,
   rollback: () => rollback2,
   stats: () => stats5,
   update: () => update5
 });
-var list20, get8, create13, update5, _delete13, rollback2, stats5;
+var list21, get9, create13, update5, _delete13, rollback2, stats5;
 var init_secrets2 = __esm({
   "../management/dist/secrets.js"() {
     "use strict";
     init_dist();
     init_http();
-    list20 = (client, projectId, options) => {
+    list21 = (client, projectId, options) => {
       const { method, path: path6 } = secretsEndpoints.list;
       return request(client, method, path6, {
         query: {
@@ -14932,7 +14970,7 @@ var init_secrets2 = __esm({
         }
       });
     };
-    get8 = (client, id, options) => {
+    get9 = (client, id, options) => {
       const { method, path: path6 } = secretsEndpoints.get;
       return request(client, method, path6, {
         query: { id, reveal: options?.reveal ? "true" : void 0 }
@@ -14989,20 +15027,20 @@ var services_exports = {};
 __export(services_exports, {
   delete: () => _delete14,
   deploy: () => deploy2,
-  get: () => get9,
-  list: () => list21
+  get: () => get10,
+  list: () => list22
 });
-var list21, get9, deploy2, _delete14;
+var list22, get10, deploy2, _delete14;
 var init_services = __esm({
   "../management/dist/services.js"() {
     "use strict";
     init_environments2();
     init_http();
-    list21 = async (client, projectId) => {
+    list22 = async (client, projectId) => {
       const res = await request(client, "GET", `/projects/${encodeURIComponent(projectId)}/services`);
       return Array.isArray(res) ? res : res.data ?? [];
     };
-    get9 = (client, projectId, name) => request(client, "GET", `/projects/${encodeURIComponent(projectId)}/services/${encodeURIComponent(name)}`);
+    get10 = (client, projectId, name) => request(client, "GET", `/projects/${encodeURIComponent(projectId)}/services/${encodeURIComponent(name)}`);
     deploy2 = async (client, projectId, name, envType) => {
       const environmentId = await resolveId(client, projectId, envType);
       return request(client, "POST", `/projects/${encodeURIComponent(projectId)}/services/${encodeURIComponent(name)}/deploy`, { body: environmentId ? { environmentId } : {} });
@@ -15022,21 +15060,21 @@ var init_serviceTokenRequests = __esm({
 var serviceTokens_exports = {};
 __export(serviceTokens_exports, {
   create: () => create14,
-  get: () => get10,
-  list: () => list22,
+  get: () => get11,
+  list: () => list23,
   revoke: () => revoke,
   rotate: () => rotate2
 });
-var list22, create14, get10, revoke, rotate2;
+var list23, create14, get11, revoke, rotate2;
 var init_serviceTokens = __esm({
   "../management/dist/serviceTokens.js"() {
     "use strict";
     init_http();
-    list22 = (client, orgId, options) => request(client, "GET", `/orgs/${encodeURIComponent(orgId)}/service-tokens`, {
+    list23 = (client, orgId, options) => request(client, "GET", `/orgs/${encodeURIComponent(orgId)}/service-tokens`, {
       query: { includeRevoked: options?.includeRevoked ? "true" : void 0 }
     });
     create14 = (client, orgId, input) => request(client, "POST", `/orgs/${encodeURIComponent(orgId)}/service-tokens`, { body: input });
-    get10 = (client, orgId, tokenId) => request(client, "GET", `/orgs/${encodeURIComponent(orgId)}/service-tokens/${encodeURIComponent(tokenId)}`);
+    get11 = (client, orgId, tokenId) => request(client, "GET", `/orgs/${encodeURIComponent(orgId)}/service-tokens/${encodeURIComponent(tokenId)}`);
     revoke = (client, orgId, tokenId) => request(client, "DELETE", `/orgs/${encodeURIComponent(orgId)}/service-tokens/${encodeURIComponent(tokenId)}`);
     rotate2 = (client, orgId, tokenId) => request(client, "POST", `/orgs/${encodeURIComponent(orgId)}/service-tokens/${encodeURIComponent(tokenId)}/rotate`);
   }
@@ -15046,16 +15084,16 @@ var init_serviceTokens = __esm({
 var sessionReplay_exports = {};
 __export(sessionReplay_exports, {
   delete: () => _delete15,
-  get: () => get11,
-  list: () => list23,
+  get: () => get12,
+  list: () => list24,
   stats: () => stats6
 });
-var list23, stats6, get11, _delete15;
+var list24, stats6, get12, _delete15;
 var init_sessionReplay = __esm({
   "../management/dist/sessionReplay.js"() {
     "use strict";
     init_http();
-    list23 = (client, projectId, options) => request(client, "GET", `/session-replay/projects/${encodeURIComponent(projectId)}/sessions`, {
+    list24 = (client, projectId, options) => request(client, "GET", `/session-replay/projects/${encodeURIComponent(projectId)}/sessions`, {
       query: {
         limit: options?.limit !== void 0 ? String(options.limit) : void 0,
         offset: options?.offset !== void 0 ? String(options.offset) : void 0,
@@ -15068,7 +15106,7 @@ var init_sessionReplay = __esm({
       }
     });
     stats6 = (client, projectId) => request(client, "GET", `/session-replay/projects/${encodeURIComponent(projectId)}/sessions/stats`);
-    get11 = (client, projectId, sessionId) => request(client, "GET", `/session-replay/projects/${encodeURIComponent(projectId)}/sessions/${encodeURIComponent(sessionId)}`);
+    get12 = (client, projectId, sessionId) => request(client, "GET", `/session-replay/projects/${encodeURIComponent(projectId)}/sessions/${encodeURIComponent(sessionId)}`);
     _delete15 = (client, projectId, sessionId) => request(client, "DELETE", `/session-replay/projects/${encodeURIComponent(projectId)}/sessions/${encodeURIComponent(sessionId)}`);
   }
 });
@@ -15078,14 +15116,14 @@ var storage_exports = {};
 __export(storage_exports, {
   create: () => create15,
   delete: () => _delete16,
-  list: () => list24
+  list: () => list25
 });
-var list24, create15, _delete16;
+var list25, create15, _delete16;
 var init_storage2 = __esm({
   "../management/dist/storage.js"() {
     "use strict";
     init_http();
-    list24 = async (client, projectId, envType) => {
+    list25 = async (client, projectId, envType) => {
       const res = await request(client, "GET", `/projects/${encodeURIComponent(projectId)}/storage`);
       const arr = Array.isArray(res) ? res : [];
       return envType ? arr.filter((r) => !r.envType || r.envType === envType) : arr;
@@ -15100,17 +15138,17 @@ var tasks_exports = {};
 __export(tasks_exports, {
   create: () => create16,
   delete: () => _delete17,
-  get: () => get12,
-  list: () => list25,
+  get: () => get13,
+  list: () => list26,
   update: () => update6
 });
-var list25, create16, get12, update6, _delete17;
+var list26, create16, get13, update6, _delete17;
 var init_tasks2 = __esm({
   "../management/dist/tasks.js"() {
     "use strict";
     init_environments2();
     init_http();
-    list25 = async (client, projectId, envType) => {
+    list26 = async (client, projectId, envType) => {
       const envId = envType ? await resolveId(client, projectId, envType) : void 0;
       const res = await request(client, "GET", `/projects/${encodeURIComponent(projectId)}/tasks`, envId ? { query: { envId } } : {});
       return res.tasks ?? [];
@@ -15124,7 +15162,7 @@ var init_tasks2 = __esm({
       const res = await request(client, "POST", `/projects/${encodeURIComponent(projectId)}/tasks`, { body: { ...rest, envId } });
       return res.task;
     };
-    get12 = async (client, projectId, taskId) => {
+    get13 = async (client, projectId, taskId) => {
       const res = await request(client, "GET", `/projects/${encodeURIComponent(projectId)}/tasks/${encodeURIComponent(taskId)}`);
       return res.task;
     };
@@ -15234,14 +15272,14 @@ var volumes_exports = {};
 __export(volumes_exports, {
   create: () => create17,
   delete: () => _delete18,
-  list: () => list26
+  list: () => list27
 });
-var list26, create17, _delete18;
+var list27, create17, _delete18;
 var init_volumes = __esm({
   "../management/dist/volumes.js"() {
     "use strict";
     init_http();
-    list26 = async (client, projectId) => {
+    list27 = async (client, projectId) => {
       const res = await request(client, "GET", `/projects/${encodeURIComponent(projectId)}/volumes`);
       return Array.isArray(res) ? res : res.volumes ?? [];
     };
@@ -15335,6 +15373,7 @@ var init_dist2 = __esm({
     init_refresh2();
     init_remoteConfig();
     init_resourceBindings();
+    init_resources2();
     init_runners2();
     init_saml3();
     init_sandboxes();
@@ -15770,12 +15809,13 @@ var init_config = __esm({
 });
 
 // src/lib/ids.ts
-var asEnvId, asDeploymentId, asServiceId, asSecretId;
+var asEnvId, asDeploymentId, asProjectId, asServiceId, asSecretId;
 var init_ids2 = __esm({
   "src/lib/ids.ts"() {
     "use strict";
     asEnvId = (s) => s;
     asDeploymentId = (s) => s;
+    asProjectId = (s) => s;
     asServiceId = (s) => s;
     asSecretId = (s) => s;
   }
@@ -16224,8 +16264,10 @@ var init_api = __esm({
       removeOrgMember: (orgId, userId) => withClient((c2) => organizations_exports.removeMember(c2, orgId, userId)),
       // ── Databases ──────────────────────────────────────────────────────────
       listDatabases: () => withClient((c2) => databases_exports.list(c2)),
+      listResources: (kind) => withClient((c2) => resources_exports.list(c2, { kind })),
       createDatabase: (data) => withClient((c2) => databases_exports.create(c2, data)),
       getDatabase: (id) => withClient((c2) => databases_exports.get(c2, id)),
+      getResource: (id) => withClient((c2) => resources_exports.get(c2, id)),
       deleteDatabase: (id) => withClient((c2) => databases_exports.delete(c2, id)),
       branchDatabase: (id, data) => withClient((c2) => databases_exports.branch(c2, id, data)),
       // ── Services ───────────────────────────────────────────────────────────
@@ -16855,6 +16897,10 @@ var ApiServiceLive = Layer2.succeed(ApiService, {
     try: () => withAuthedSdk((c2) => databases_exports.list(c2)),
     catch: mapApiError("db")
   }),
+  listResources: (kind) => Effect6.tryPromise({
+    try: () => withAuthedSdk((c2) => resources_exports.list(c2, { kind })),
+    catch: mapApiError("resources")
+  }),
   createDatabase: (data) => Effect6.tryPromise({
     try: () => withAuthedSdk((c2) => databases_exports.create(c2, data)),
     catch: mapApiError("db")
@@ -16863,6 +16909,10 @@ var ApiServiceLive = Layer2.succeed(ApiService, {
     try: () => withAuthedSdk((c2) => databases_exports.get(c2, id)),
     catch: mapApiError("db")
   }),
+  getResource: (id) => Effect6.tryPromise({
+    try: () => withAuthedSdk((c2) => resources_exports.get(c2, id)),
+    catch: mapApiError("resources")
+  }),
   deleteDatabase: (id) => Effect6.tryPromise({
     try: () => withAuthedSdk((c2) => databases_exports.delete(c2, id)),
     catch: mapApiError("db")
@@ -20525,9 +20575,9 @@ function renderManifestToml(manifest) {
   }
   if (manifest.resources) {
     const r = manifest.resources;
-    if (r.postgres) {
-      parts.push("[resources.postgres]");
-      parts.push(...kv(r.postgres));
+    if (r.database) {
+      parts.push("[resources.database]");
+      parts.push(...kv(r.database));
       parts.push("");
     }
     if (r.redis) {
@@ -24684,8 +24734,8 @@ function flagsDeleteEffect(opts) {
     yield* requireAuthEffect;
     const api2 = yield* ApiService;
     const projectId = yield* resolveProjectEffect(opts.project);
-    const list27 = yield* api2.listFlags(projectId, { limit: 100 });
-    const match = list27.flags.find((f) => f.key === opts.key);
+    const list28 = yield* api2.listFlags(projectId, { limit: 100 });
+    const match = list28.flags.find((f) => f.key === opts.key);
     if (!match) {
       return yield* Effect35.fail(
         new CliCommandError({
@@ -24714,8 +24764,8 @@ function flagsToggleEffect(opts) {
     yield* requireAuthEffect;
     const api2 = yield* ApiService;
     const projectId = yield* resolveProjectEffect(opts.project);
-    const list27 = yield* api2.listFlags(projectId, { limit: 100 });
-    const match = list27.flags.find((f) => f.key === opts.key);
+    const list28 = yield* api2.listFlags(projectId, { limit: 100 });
+    const match = list28.flags.find((f) => f.key === opts.key);
     if (!match) {
       return yield* Effect35.fail(
         new CliCommandError({
@@ -29098,35 +29148,40 @@ import { Args as Args34, Command as Command48, Options as Options47 } from "@eff
 import { Console as Console48, Effect as Effect58 } from "effect";
 init_chalk();
 init_spinner();
-var resourcesListEffect = Effect58.gen(function* () {
-  yield* requireAuthEffect;
-  const api2 = yield* ApiService;
-  const resources = yield* withSpinner("Fetching resources...", api2.listDatabases);
-  if (resources.length === 0) {
-    yield* Console48.log(chalk_default.dim("  No resources found."));
-    return;
-  }
-  yield* Console48.log("");
-  yield* Console48.log(
-    `  ${chalk_default.bold("NAME".padEnd(24))}  ${"KIND".padEnd(12)}  ${"STATUS".padEnd(14)}  ID`
-  );
-  yield* Console48.log(`  ${"\u2500".repeat(72)}`);
-  for (const r of resources) {
-    const statusColor2 = r.status === "ready" ? chalk_default.green((r.status ?? "unknown").padEnd(14)) : chalk_default.yellow((r.status ?? "unknown").padEnd(14));
+function resourcesListEffect(input = {}) {
+  return Effect58.gen(function* () {
+    yield* requireAuthEffect;
+    const api2 = yield* ApiService;
+    const resources = yield* withSpinner("Fetching resources...", api2.listResources(input.kind));
+    if (resources.length === 0) {
+      yield* Console48.log(chalk_default.dim("  No resources found."));
+      return;
+    }
+    yield* Console48.log("");
     yield* Console48.log(
-      `  ${chalk_default.cyan(r.name.padEnd(24))}  ${"database".padEnd(12)}  ${statusColor2}  ${chalk_default.dim(r.id)}`
+      `  ${chalk_default.bold("NAME".padEnd(24))}  ${"KIND".padEnd(12)}  ${"STATUS".padEnd(14)}  ID`
     );
-  }
-  yield* Console48.log("");
-});
+    yield* Console48.log(`  ${"\u2500".repeat(72)}`);
+    for (const r of resources) {
+      const kind = (r.kind ?? "resource").padEnd(12);
+      const status3 = r.status ?? r.reconcileStatus ?? "unknown";
+      const statusColor2 = status3 === "ready" ? chalk_default.green(status3.padEnd(14)) : chalk_default.yellow(status3.padEnd(14));
+      yield* Console48.log(
+        `  ${chalk_default.cyan(r.name.padEnd(24))}  ${kind}  ${statusColor2}  ${chalk_default.dim(r.id)}`
+      );
+    }
+    yield* Console48.log("");
+  });
+}
 function resourcesGetEffect(id) {
   return Effect58.gen(function* () {
     yield* requireAuthEffect;
     const api2 = yield* ApiService;
-    const r = yield* withSpinner(`Fetching resource ${id}...`, api2.getDatabase(id));
+    const r = yield* withSpinner(`Fetching resource ${id}...`, api2.getResource(id));
     yield* Console48.log("");
     yield* Console48.log(`  ${chalk_default.bold("Name:")}     ${chalk_default.cyan(r.name)}`);
     yield* Console48.log(`  ${chalk_default.bold("ID:")}       ${r.id}`);
+    if (r.kind) yield* Console48.log(`  ${chalk_default.bold("Kind:")}     ${r.kind}`);
     yield* Console48.log(
       `  ${chalk_default.bold("Status:")}   ${r.status === "ready" ? chalk_default.green(r.status) : chalk_default.yellow(r.status ?? "unknown")}`
     );
@@ -29207,12 +29262,12 @@ var listCmd17 = Command48.make(
   "list",
   {
     kind: Options47.text("kind").pipe(
-      Options47.withDescription("Filter by kind: database, volume, storage"),
+      Options47.withDescription("Filter by kind: database, kv, blob, search, volume"),
       Options47.optional
     )
   },
-  () => resourcesListEffect
-).pipe(Command48.withDescription("List managed resources (databases, volumes, storage)"));
+  ({ kind }) => resourcesListEffect({ kind: kind._tag === "Some" ? kind.value : void 0 })
+).pipe(Command48.withDescription("List managed resources (database, kv, blob, search, volume)"));
 var getCmd6 = Command48.make(
   "get",
   { id: Args34.text({ name: "id" }) },
@@ -31119,7 +31174,7 @@ function secretsSetEffect(opts) {
       Effect68.tryPromise({
         try: () => withAuthedSdk(
           (c2) => secrets_exports.create(c2, {
-            projectId,
+            projectId: asProjectId(projectId),
             key: opts.key,
             value: opts.value,
             ...opts.description ? { description: opts.description } : {},