@usenaive-sdk/cli 0.15.1 → 1.0.0

package/dist/commands/apps.js

@@ -1,844 +0,0 @@
-import { Command } from "commander";
-import { execFileSync } from "node:child_process";
-import { readFileSync, existsSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join, resolve } from "node:path";
-import { apiRequest, apiUploadGzip, handleApiError } from "../client.js";
-import { agentError, agentOutput } from "../output.js";
-export const appsCmd = new Command("apps")
-    .description("Web apps — create, deploy, manage Vercel-backed web applications with dedicated engineer agents")
-    .addHelpText("after", `
-Subcommands:
-  naive apps list                              List all apps
-  naive apps create                            Create a new app
-  naive apps templates                         List starter templates (GitHub repo + clone commands)
-  naive apps show <id>                         Show app details
-  naive apps delete <id>                       Delete an app
-  naive apps deploy <id> [--dir <path>]        Deploy (local directory upload, or agent workspace inside containers)
-  naive apps publish <id> --deployment <id>    Promote a deployment to production
-  naive apps deployments <id>                  List deployment history
-  naive apps retry <id>                        Retry failed provisioning (noop if healthy)
-  naive apps secrets list <id>                 List env variable keys
-  naive apps secrets set <id> <KEY> <VALUE>    Set an env variable
-  naive apps secrets delete <id> <KEY>         Delete an env variable
-  naive apps secrets reveal <id> <KEY>         Reveal env variable value
-  naive apps domains list <id>                 List app domains
-  naive apps domains add <id> <domain>         Add a custom domain
-  naive apps domains remove <id> <domainId>    Remove a domain
-  naive apps domains set-primary <id> <domainId> Set the primary production domain
-  naive apps domains connect <id> <domainId>   Connect a company domain
-  naive apps domains disconnect <id> <domainId> Disconnect a company domain
-  naive apps domains verify-dns <id> <domainId> Verify DNS for connected domain
-  naive apps db tables <id>                    List database tables (fullstack only)
-  naive apps db query <id> "<sql>"             Run SQL query (fullstack only)
-  naive apps vercel <id> <method> <path>       Call any Vercel API operation (scoped to the app)
-  naive apps supabase <id> <method> <path>     Call any Supabase Management API operation (scoped to the app)
-
-Typical Workflow (direct — no orchestration needed):
-  1. naive apps create --name "My Site" --type frontend_only
-     → Creates Vercel project, returns the starter template clone command
-  2. git clone the starter template, build it locally
-  3. naive apps deploy <id>             (run inside your project directory)
-     → Uploads your code to Vercel, returns preview URL
-  4. naive apps publish <id> --deployment <deploymentId>
-     → Promotes preview to production
-  5. naive apps domains connect <id> <domainId>
-     → Points a custom domain to the production app
-
-Orchestrated Workflow (CEO / engineer agents):
-  Same commands run inside the agent container deploy from the agent's
-  workspace automatically — the engineer builds via the task system.
-
-Fullstack Workflow (adds Supabase):
-  1. naive apps create --name "My App" --type fullstack
-     → Creates Vercel + Supabase project
-  2. naive apps db tables <id>        → inspect database schema
-  3. naive apps db query <id> "..."   → run ad-hoc queries
-  4. naive apps secrets set <id> KEY VALUE --target production
-     → configure environment variables
-
-Direct Provider Access (advanced):
-  Any operation supported by the Vercel REST API or Supabase Management API
-  can be called through the scoped proxies — Naive injects the credentials:
-    naive apps vercel <id> GET v6/deployments
-    naive apps vercel <id> GET "v9/projects/<projectId>/domains"
-    naive apps supabase <id> GET "v1/projects/<ref>/config/auth"
-    naive apps supabase <id> POST "v1/projects/<ref>/database/query" --body '{"query":"select 1"}'
-  Consult the official Vercel / Supabase API docs for endpoints and payloads.
-
-Each app gets a dedicated engineer agent that can build, deploy, and iterate
-on the code autonomously via the kanban task system.
-`);
-// ─── List ────────────────────────────────────────────────────────────────────
-appsCmd
-    .command("list")
-    .description("List all apps for the current company")
-    .action(async () => {
-    const resp = await apiRequest("GET", "/v1/apps");
-    handleApiError("apps.list", resp);
-    const data = resp.data;
-    const count = data.apps?.length ?? 0;
-    agentOutput({
-        action: "apps.list",
-        result: resp.data,
-        next_steps: [
-            ...(count > 0
-                ? [{ command: `naive apps show ${data.apps[0].id}`, description: "View details of the first app" }]
-                : []),
-            { command: "naive apps create --name <name> --type frontend_only", description: "Create a new app" },
-        ],
-        hints: [`${count} app${count !== 1 ? "s" : ""} found`],
-        related_commands: ["naive apps create", "naive apps show", "naive apps deploy"],
-    });
-});
-// ─── Create ──────────────────────────────────────────────────────────────────
-appsCmd
-    .command("create")
-    .description("Create a new web app with a dedicated engineer agent")
-    .requiredOption("--name <name>", "App name")
-    .option("--type <type>", "App type: frontend_only or fullstack (default: frontend_only)", "frontend_only")
-    .option("--variant <variant>", "Template variant: dark-premium, clean-minimal, bold-energetic, warm-human")
-    // <desc...> so unquoted multi-word descriptions are not excess args
-    .option("--description <desc...>", "Short description (unquoted multi-word OK)")
-    .action(async (opts) => {
-    const type = String(opts.type ?? "frontend_only").trim() || "frontend_only";
-    if (type !== "frontend_only" && type !== "fullstack") {
-        agentError({
-            action: "apps.create",
-            error: {
-                code: "invalid_input",
-                message: `Invalid --type "${type}". Use frontend_only or fullstack.`,
-            },
-            recovery_steps: [
-                {
-                    command: 'naive apps create --name <name> --type frontend_only',
-                    description: "Create a frontend-only app (default)",
-                },
-                {
-                    command: 'naive apps create --name <name> --type fullstack',
-                    description: "Create a fullstack app with Supabase",
-                },
-            ],
-        });
-    }
-    // `--description <desc...>` is variadic, so commander hands back a string[]
-    // for an unquoted multi-word description and a string for a quoted one.
-    const descriptionRaw = opts.description;
-    const description = Array.isArray(descriptionRaw)
-        ? descriptionRaw.join(" ").trim() || undefined
-        : descriptionRaw
-            ? String(descriptionRaw).trim() || undefined
-            : undefined;
-    const resp = await apiRequest("POST", "/v1/apps", {
-        name: opts.name,
-        type,
-        ...(opts.variant && { variant: opts.variant }),
-        ...(description && { description }),
-    });
-    handleApiError("apps.create", resp);
-    const data = resp.data;
-    const directMode = data.workspaceMode !== "container";
-    agentOutput({
-        action: "apps.create",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps show ${data.id}`, description: "View app details" },
-            ...(directMode && data.template?.cloneCommand
-                ? [{ command: data.template.cloneCommand, description: "Clone the starter template to build locally" }]
-                : []),
-            { command: `naive apps deploy ${data.id}`, description: directMode ? "Deploy from your project directory" : "Trigger first deployment" },
-        ],
-        hints: [
-            `App "${data.name}" created with status: ${data.status}`,
-            ...(directMode
-                ? [
-                    "Direct mode: clone the starter template, build locally, then run 'naive apps deploy' inside the project directory.",
-                    ...(data.template?.repoUrl ? [`Templates repo: ${data.template.repoUrl}`] : []),
-                ]
-                : ["An engineer agent has been provisioned and can build the app"]),
-        ],
-        related_commands: ["naive apps templates", "naive apps deploy", "naive apps secrets set", "naive apps show"],
-    });
-});
-// ─── Templates ───────────────────────────────────────────────────────────────
-appsCmd
-    .command("templates")
-    .description("List starter templates — clone, customize, then 'naive apps deploy'")
-    .action(async () => {
-    const resp = await apiRequest("GET", "/v1/apps/templates");
-    handleApiError("apps.templates", resp);
-    agentOutput({
-        action: "apps.templates",
-        result: resp.data,
-        next_steps: [
-            { command: "naive apps create --name <name> --type frontend_only", description: "Create an app for your template" },
-        ],
-        hints: ["Clone a template, build it, then run 'naive apps deploy <app-id>' from the project directory"],
-        related_commands: ["naive apps create", "naive apps deploy"],
-    });
-});
-// ─── Show ────────────────────────────────────────────────────────────────────
-appsCmd
-    .command("show <id>")
-    .description("Show full details of an app")
-    .action(async (id) => {
-    const resp = await apiRequest("GET", `/v1/apps/${id}`);
-    handleApiError("apps.show", resp);
-    agentOutput({
-        action: "apps.show",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps deploy ${id}`, description: "Deploy latest code" },
-            { command: `naive apps deployments ${id}`, description: "View deployment history" },
-            { command: `naive apps secrets list ${id}`, description: "View environment variables" },
-        ],
-        related_commands: ["naive apps deploy", "naive apps publish", "naive apps secrets set", "naive apps delete"],
-    });
-});
-// ─── Delete ──────────────────────────────────────────────────────────────────
-appsCmd
-    .command("delete <id>")
-    .description("Permanently delete an app and all infrastructure")
-    .action(async (id) => {
-    const resp = await apiRequest("DELETE", `/v1/apps/${id}`);
-    handleApiError("apps.delete", resp);
-    agentOutput({
-        action: "apps.delete",
-        result: resp.data,
-        next_steps: [{ command: "naive apps list", description: "View remaining apps" }],
-        hints: ["App and all associated resources have been deleted"],
-    });
-});
-// ─── Deploy ──────────────────────────────────────────────────────────────────
-/** Pack a local project directory into a gzipped tarball (node_modules etc. excluded). */
-function packDirectory(dir) {
-    const tarball = join(tmpdir(), `naive-deploy-${Date.now()}.tgz`);
-    try {
-        execFileSync("tar", [
-            "czf", tarball,
-            "--exclude", "node_modules",
-            "--exclude", ".next",
-            "--exclude", ".git",
-            "--exclude", ".vercel",
-            "-C", dir,
-            ".",
-        ], { stdio: "ignore" });
-        return readFileSync(tarball);
-    }
-    finally {
-        rmSync(tarball, { force: true });
-    }
-}
-function looksLikeProject(dir) {
-    return existsSync(join(dir, "package.json")) || existsSync(join(dir, "index.html"));
-}
-appsCmd
-    .command("deploy <id>")
-    .description("Deploy the app — uploads your local project directory, or deploys the agent workspace when run inside a container")
-    .option("--dir <path>", "Local project directory to upload (default: current directory when outside a container)")
-    .option("--workspace-path <path>", "Container workspace path override (orchestrated mode, relative to hermes home)")
-    .action(async (id, opts) => {
-    const hermesHome = process.env.HERMES_HOME;
-    const cwd = process.cwd();
-    const insideContainer = Boolean(hermesHome && cwd.startsWith(hermesHome));
-    // ── Direct mode: pack & upload a local directory ──
-    if (opts.dir || (!insideContainer && !opts.workspacePath)) {
-        const dir = resolve(opts.dir ?? cwd);
-        if (!looksLikeProject(dir)) {
-            agentOutput({
-                action: "apps.deploy",
-                result: { error: `No package.json or index.html found in ${dir}` },
-                next_steps: [
-                    { command: "naive apps templates", description: "Get the starter template clone command" },
-                    { command: `naive apps deploy ${id} --dir <project-path>`, description: "Point at your project directory" },
-                ],
-                hints: ["Run this command inside your project directory (or pass --dir)."],
-            });
-            process.exit(1);
-        }
-        const tarball = packDirectory(dir);
-        const resp = await apiUploadGzip(`/v1/apps/${id}/deploy`, tarball);
-        handleApiError("apps.deploy", resp);
-        const data = resp.data;
-        agentOutput({
-            action: "apps.deploy",
-            result: resp.data,
-            next_steps: [
-                { command: `naive apps publish ${id} --deployment ${data.id}`, description: "Promote to production" },
-                { command: `naive apps deployments ${id}`, description: "View all deployments" },
-            ],
-            hints: [
-                `Uploaded ${Math.round(tarball.length / 1024)}KB from ${dir}`,
-                `Preview deployment: ${data.url}`,
-            ],
-            related_commands: ["naive apps publish", "naive apps deployments"],
-        });
-        return;
-    }
-    // ── Orchestrated mode: deploy from the container workspace ──
-    const body = {};
-    if (opts.workspacePath) {
-        body.workspacePath = opts.workspacePath;
-    }
-    else if (insideContainer) {
-        // Auto-detect: if CWD contains an app/ dir, send the relative path so
-        // the API deploys from the right location
-        if (existsSync(join(cwd, "app"))) {
-            body.workspacePath = cwd.slice(hermesHome.length + 1);
-        }
-    }
-    const resp = await apiRequest("POST", `/v1/apps/${id}/deploy`, Object.keys(body).length > 0 ? body : undefined);
-    handleApiError("apps.deploy", resp);
-    const data = resp.data;
-    agentOutput({
-        action: "apps.deploy",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps publish ${id} --deployment ${data.id}`, description: "Promote to production" },
-            { command: `naive apps deployments ${id}`, description: "View all deployments" },
-        ],
-        hints: [`Preview deployment: ${data.url}`],
-        related_commands: ["naive apps publish", "naive apps deployments"],
-    });
-});
-// ─── Publish ─────────────────────────────────────────────────────────────────
-appsCmd
-    .command("publish <id>")
-    .description("Promote a deployment to production")
-    .requiredOption("--deployment <deploymentId>", "Deployment ID to promote")
-    .action(async (id, opts) => {
-    const resp = await apiRequest("POST", `/v1/apps/${id}/publish`, {
-        deploymentId: opts.deployment,
-    });
-    handleApiError("apps.publish", resp);
-    const data = resp.data;
-    agentOutput({
-        action: "apps.publish",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps show ${id}`, description: "View updated app details" },
-            { command: `naive apps domains connect ${id} <domainId>`, description: "Connect a custom domain" },
-        ],
-        hints: [`Production URL: ${data.url}`],
-    });
-});
-// ─── Deployments ─────────────────────────────────────────────────────────────
-appsCmd
-    .command("deployments <id>")
-    .description("List deployment history for an app")
-    .action(async (id) => {
-    const resp = await apiRequest("GET", `/v1/apps/${id}/deployments`);
-    handleApiError("apps.deployments", resp);
-    const data = resp.data;
-    const count = data.deployments?.length ?? 0;
-    agentOutput({
-        action: "apps.deployments",
-        result: resp.data,
-        next_steps: count > 0
-            ? [{ command: `naive apps publish ${id} --deployment ${data.deployments[0].id}`, description: "Promote latest to production" }]
-            : [{ command: `naive apps deploy ${id}`, description: "Trigger a deployment" }],
-        hints: [`${count} deployment${count !== 1 ? "s" : ""}`],
-    });
-});
-// ─── Secrets ─────────────────────────────────────────────────────────────────
-const secretsCmd = appsCmd
-    .command("secrets")
-    .description("Manage app environment variables");
-secretsCmd
-    .command("list <appId>")
-    .description("List environment variable keys (values are hidden)")
-    .action(async (appId) => {
-    const resp = await apiRequest("GET", `/v1/apps/${appId}/secrets`);
-    handleApiError("apps.secrets.list", resp);
-    agentOutput({
-        action: "apps.secrets.list",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps secrets set ${appId} MY_KEY my_value --target preview`, description: "Add a variable" },
-        ],
-        related_commands: ["naive apps secrets set", "naive apps secrets delete", "naive apps secrets reveal"],
-    });
-});
-secretsCmd
-    .command("set <appId> <key> <value>")
-    .description("Create or update an environment variable")
-    .requiredOption("--target <target>", "Target: preview or production")
-    .action(async (appId, key, value, opts) => {
-    const resp = await apiRequest("POST", `/v1/apps/${appId}/secrets`, {
-        key,
-        value,
-        target: opts.target,
-    });
-    handleApiError("apps.secrets.set", resp);
-    agentOutput({
-        action: "apps.secrets.set",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps secrets list ${appId}`, description: "View all variables" },
-            { command: `naive apps deploy ${appId}`, description: "Redeploy to apply changes" },
-        ],
-        hints: [`Set ${key} for ${opts.target}. Redeploy for changes to take effect.`],
-    });
-});
-secretsCmd
-    .command("delete <appId> <key>")
-    .description("Delete an environment variable")
-    .requiredOption("--target <target>", "Target: preview or production")
-    .action(async (appId, key, opts) => {
-    const resp = await apiRequest("DELETE", `/v1/apps/${appId}/secrets/${encodeURIComponent(key)}?target=${opts.target}`);
-    handleApiError("apps.secrets.delete", resp);
-    agentOutput({
-        action: "apps.secrets.delete",
-        result: resp.data,
-        next_steps: [{ command: `naive apps secrets list ${appId}`, description: "View remaining variables" }],
-        hints: [`Deleted ${key} from ${opts.target}`],
-    });
-});
-secretsCmd
-    .command("reveal <appId> <key>")
-    .description("Reveal the value of an environment variable")
-    .option("--target <target>", "Target: preview or production (default: production)", "production")
-    .action(async (appId, key, opts) => {
-    // A typo must NOT silently fall through to production. `reveal` is the one
-    // secrets verb with plaintext egress, so `--target prevew` answering with the
-    // PRODUCTION value would hand the caller a secret it did not ask for.
-    const target = String(opts.target ?? "production");
-    if (target !== "preview" && target !== "production") {
-        agentError({
-            action: "apps.secrets.reveal",
-            error: {
-                code: "invalid_input",
-                message: `Invalid --target "${target}". Use preview or production.`,
-            },
-            recovery_steps: [
-                {
-                    command: `naive apps secrets reveal ${appId} ${key} --target production`,
-                    description: "Reveal the production value (default)",
-                },
-                {
-                    command: `naive apps secrets reveal ${appId} ${key} --target preview`,
-                    description: "Reveal the preview value",
-                },
-            ],
-        });
-    }
-    const resp = await apiRequest("GET", `/v1/apps/${appId}/secrets/${encodeURIComponent(key)}/reveal?target=${target}`);
-    handleApiError("apps.secrets.reveal", resp);
-    agentOutput({
-        action: "apps.secrets.reveal",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps secrets set ${appId} ${key} <new-value> --target ${target}`, description: "Update this variable" },
-        ],
-    });
-});
-// ─── Domains ─────────────────────────────────────────────────────────────────
-const domainsCmd = appsCmd
-    .command("domains")
-    .description("Manage app domains");
-domainsCmd
-    .command("list <appId>")
-    .description("List domains attached to an app")
-    .action(async (appId) => {
-    const resp = await apiRequest("GET", `/v1/apps/${appId}/domains`);
-    handleApiError("apps.domains.list", resp);
-    agentOutput({
-        action: "apps.domains.list",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps domains add ${appId} example.com`, description: "Add a custom domain" },
-            { command: `naive apps domains connect ${appId} <domainId>`, description: "Connect a company domain" },
-        ],
-    });
-});
-domainsCmd
-    .command("add <appId> <domain>")
-    .description("Add a custom domain to an app")
-    .action(async (appId, domain) => {
-    const resp = await apiRequest("POST", `/v1/apps/${appId}/domains`, { domain });
-    handleApiError("apps.domains.add", resp);
-    agentOutput({
-        action: "apps.domains.add",
-        result: resp.data,
-        next_steps: [{ command: `naive apps domains list ${appId}`, description: "View all domains" }],
-        hints: [`Added domain ${domain}. Configure DNS records to point to Vercel.`],
-    });
-});
-domainsCmd
-    .command("remove <appId> <domainId>")
-    .description("Remove a domain from an app")
-    .action(async (appId, domainId) => {
-    const resp = await apiRequest("DELETE", `/v1/apps/${appId}/domains/${domainId}`);
-    handleApiError("apps.domains.remove", resp);
-    agentOutput({
-        action: "apps.domains.remove",
-        result: resp.data,
-        next_steps: [{ command: `naive apps domains list ${appId}`, description: "View remaining domains" }],
-    });
-});
-domainsCmd
-    .command("set-primary <appId> <domainId>")
-    .description("Set a domain as the app's primary production domain")
-    .action(async (appId, domainId) => {
-    const resp = await apiRequest("POST", `/v1/apps/${appId}/domains/${domainId}/set-primary`);
-    handleApiError("apps.domains.set-primary", resp);
-    agentOutput({
-        action: "apps.domains.set-primary",
-        result: resp.data,
-        next_steps: [{ command: `naive apps domains list ${appId}`, description: "View updated domains" }],
-        hints: ["Primary domain updated. The next publish will alias production to this domain."],
-    });
-});
-domainsCmd
-    .command("connect <appId> <domainId>")
-    .description("Connect a company-owned domain to an app as its production domain")
-    .action(async (appId, domainId) => {
-    const resp = await apiRequest("POST", `/v1/apps/${appId}/connect-domain`, { domainId });
-    handleApiError("apps.domains.connect", resp);
-    const data = resp.data;
-    const isSystem = /\.usenaive\.ai$/i.test(data.domain ?? "");
-    agentOutput({
-        action: "apps.domains.connect",
-        result: resp.data,
-        next_steps: data.pendingDns
-            ? [{ command: `naive apps domains verify-dns ${appId} ${domainId}`, description: "Verify DNS after configuring records" }]
-            : [{ command: `naive apps show ${appId}`, description: "View updated app" }],
-        hints: data.pendingDns
-            ? isSystem
-                ? [`System domain ${data.domain}: platform writes DNS on usenaive.ai. Retry verify-dns shortly if still pending.`]
-                : [`DNS records required for ${data.domain}. Add A and CNAME records, then verify.`]
-            : [`Domain ${data.domain} connected successfully`],
-    });
-});
-domainsCmd
-    .command("disconnect <appId> <domainId>")
-    .description("Disconnect a company domain from an app")
-    .action(async (appId, domainId) => {
-    const resp = await apiRequest("DELETE", `/v1/apps/${appId}/connect-domain/${domainId}`);
-    handleApiError("apps.domains.disconnect", resp);
-    agentOutput({
-        action: "apps.domains.disconnect",
-        result: resp.data,
-        next_steps: [{ command: `naive apps show ${appId}`, description: "View updated app" }],
-    });
-});
-domainsCmd
-    .command("verify-dns <appId> <domainId>")
-    .description("Verify DNS configuration for a connected domain")
-    .action(async (appId, domainId) => {
-    const resp = await apiRequest("POST", `/v1/apps/${appId}/verify-domain-dns`, { domainId });
-    handleApiError("apps.domains.verify-dns", resp);
-    const data = resp.data;
-    agentOutput({
-        action: "apps.domains.verify-dns",
-        result: resp.data,
-        next_steps: data.verified
-            ? [{ command: `naive apps show ${appId}`, description: "View app with verified domain" }]
-            : [{ command: `naive apps domains verify-dns ${appId} ${domainId}`, description: "Try again after DNS propagation (up to 48h)" }],
-        hints: data.verified
-            ? [`Domain ${data.domain} verified and connected`]
-            : [`DNS not ready for ${data.domain}. Propagation can take up to 48 hours.`],
-    });
-});
-// ─── Retry ──────────────────────────────────────────────────────────────────
-appsCmd
-    .command("retry <id>")
-    .description("Retry failed provisioning (Vercel/Supabase); no-op success if the app is already healthy")
-    .action(async (id) => {
-    const resp = await apiRequest("POST", `/v1/apps/${id}/retry`);
-    handleApiError("apps.retry", resp);
-    agentOutput({
-        action: "apps.retry",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps show ${id}`, description: "Check provisioning status" },
-        ],
-        hints: ["Retrying provisioning — check status in a few seconds"],
-        related_commands: ["naive apps show", "naive apps deploy"],
-    });
-});
-// ─── Database (fullstack apps) ──────────────────────────────────────────────
-const dbCmd = appsCmd
-    .command("db")
-    .description("Database operations for fullstack apps (Supabase)");
-dbCmd
-    .command("tables <appId>")
-    .description("List database tables for a fullstack app")
-    .action(async (appId) => {
-    const resp = await apiRequest("GET", `/v1/apps/${appId}/db/tables`);
-    handleApiError("apps.db.tables", resp);
-    agentOutput({
-        action: "apps.db.tables",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps db query ${appId} "SELECT * FROM <table> LIMIT 10"`, description: "Query a table" },
-        ],
-        related_commands: ["naive apps db query"],
-    });
-});
-dbCmd
-    // [sqlParts...] so unquoted multi-word SQL (agents / probe wrappers that
-    // word-split) still reaches the API as one query string.
-    .command("query <appId> [sqlParts...]")
-    .description("Run a SQL query against the app's Supabase database")
-    .action(async (appId, sqlParts) => {
-    const sql = (sqlParts ?? []).join(" ").trim();
-    if (!sql) {
-        agentError({
-            action: "apps.db.query",
-            error: {
-                code: "invalid_input",
-                message: "Missing SQL. Usage: naive apps db query <appId> \"<sql>\"",
-            },
-            recovery_steps: [
-                { command: `naive apps db query ${appId} "SELECT 1"`, description: "Run a quoted SQL query" },
-            ],
-        });
-    }
-    const resp = await apiRequest("POST", `/v1/apps/${appId}/db/query`, { sql });
-    handleApiError("apps.db.query", resp);
-    agentOutput({
-        action: "apps.db.query",
-        result: resp.data,
-        next_steps: [
-            { command: `naive apps db tables ${appId}`, description: "List available tables" },
-        ],
-        related_commands: ["naive apps db tables"],
-    });
-});
-// ─── Provider Proxies (advanced) ─────────────────────────────────────────────
-/**
- * Scan an unquoted JSON value that may contain nested `()`, `{}`, `[]` and
- * embedded quotes (e.g. edge-function `content:Deno.serve(() => …)` after
- * shlex strips outer quotes — dogfood f877 B64).
- *
- * Agents often leave JSON-style `\"` inside the unquoted blob
- * (`run:\"f877\"`). Treat those as literal `"` in the value — do not enter
- * string mode on the escaped quote, or brace/paren depth tracking breaks.
- */
-function scanUnquotedValue(input, start) {
-    let i = start;
-    let depthParen = 0;
-    let depthBrace = 0;
-    let depthBracket = 0;
-    let inStr = null;
-    let escape = false;
-    while (i < input.length) {
-        const c = input[i];
-        if (inStr) {
-            if (escape) {
-                escape = false;
-                i++;
-                continue;
-            }
-            if (c === "\\") {
-                escape = true;
-                i++;
-                continue;
-            }
-            if (c === inStr)
-                inStr = null;
-            i++;
-            continue;
-        }
-        // JSON-escaped quotes left after shlex strip → literal quote chars
-        if (c === "\\" && (input[i + 1] === '"' || input[i + 1] === "'")) {
-            i += 2;
-            continue;
-        }
-        if (c === '"' || c === "'") {
-            inStr = c;
-            i++;
-            continue;
-        }
-        if (c === "(") {
-            depthParen++;
-            i++;
-            continue;
-        }
-        if (c === ")") {
-            depthParen--;
-            i++;
-            continue;
-        }
-        if (c === "{") {
-            depthBrace++;
-            i++;
-            continue;
-        }
-        if (c === "}") {
-            if (depthBrace === 0 && depthParen === 0 && depthBracket === 0)
-                break;
-            depthBrace--;
-            i++;
-            continue;
-        }
-        if (c === "[") {
-            depthBracket++;
-            i++;
-            continue;
-        }
-        if (c === "]") {
-            if (depthBrace === 0 && depthParen === 0 && depthBracket === 0)
-                break;
-            depthBracket--;
-            i++;
-            continue;
-        }
-        if (c === "," && depthBrace === 0 && depthParen === 0 && depthBracket === 0)
-            break;
-        i++;
-    }
-    const raw = input.slice(start, i).trimEnd();
-    // Turn leftover `\"` / `\'` into real quotes in the scalar value
-    const value = raw.replace(/\\"/g, '"').replace(/\\'/g, "'");
-    return { value, end: i };
-}
-/**
- * After quoting keys, quote remaining unquoted scalar values — including
- * code blobs with parens/braces that the simple `\w` regex cannot match.
- */
-function quoteUnquotedValues(input) {
-    const out = [];
-    let i = 0;
-    let inString = false;
-    let escape = false;
-    while (i < input.length) {
-        const c = input[i];
-        if (inString) {
-            out.push(c);
-            if (escape)
-                escape = false;
-            else if (c === "\\")
-                escape = true;
-            else if (c === '"')
-                inString = false;
-            i++;
-            continue;
-        }
-        if (c === '"') {
-            inString = true;
-            out.push(c);
-            i++;
-            continue;
-        }
-        if (c === ":") {
-            out.push(c);
-            i++;
-            while (i < input.length && /\s/.test(input[i])) {
-                out.push(input[i]);
-                i++;
-            }
-            if (i >= input.length)
-                break;
-            const rest = input.slice(i);
-            if (rest.startsWith('"') ||
-                rest.startsWith("{") ||
-                rest.startsWith("[") ||
-                /^(true|false|null)(?=[,}\]\s]|$)/.test(rest) ||
-                /^-?\d+(\.\d+)?([eE][+-]?\d+)?(?=[,}\]\s]|$)/.test(rest)) {
-                continue;
-            }
-            const { value, end } = scanUnquotedValue(input, i);
-            out.push(JSON.stringify(value));
-            i = end;
-            continue;
-        }
-        out.push(c);
-        i++;
-    }
-    return out.join("");
-}
-/**
- * Parse --body JSON. Agents / shlex often strip quotes from
- * `{"a":"b"}` → `{a:b}`, and word-split leave `{` `a:b` `}` tokens.
- * Join tokens, try JSON.parse, then repair unquoted keys/values (including
- * nested edge-function `files[].content` source strings).
- */
-export function parseJsonBody(raw, flag) {
-    if (raw == null)
-        return undefined;
-    const text = (Array.isArray(raw) ? raw.join(" ") : String(raw)).trim();
-    if (!text)
-        return undefined;
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        // no-op — try repair below
-    }
-    try {
-        const withQuotedKeys = text.replace(/([{\[,]\s*)([A-Za-z_][\w]*)(\s*:)/g, '$1"$2"$3');
-        const repaired = quoteUnquotedValues(withQuotedKeys);
-        return JSON.parse(repaired);
-    }
-    catch {
-        console.error(`Invalid JSON passed to ${flag}`);
-        process.exit(1);
-    }
-}
-appsCmd
-    .command("vercel <appId> <method> <path>")
-    .description("Call any Vercel REST API operation, scoped to the app's Vercel project (credentials injected by Naive)")
-    .option("--body <json...>", "JSON request body (unquoted / word-split OK for flat objects)")
-    .addHelpText("after", `
-Examples:
-  naive apps vercel <id> GET v6/deployments                       List deployments
-  naive apps vercel <id> GET "v13/deployments/<deploymentId>"     Deployment status
-  naive apps vercel <id> GET "v3/deployments/<deploymentId>/events"  Build logs
-  naive apps vercel <id> GET "v9/projects/<projectId>/domains"    Project domains
-  naive apps vercel <id> PATCH "v9/projects/<projectId>" --body '{"buildCommand":"next build"}'
-
-Scope: only this app's project (vN/projects/{projectId}/**) and its
-deployments (vN/deployments/**) are reachable. Deleting the project itself is
-blocked — use 'naive apps delete'. See https://vercel.com/docs/rest-api.
-`)
-    .action(async (appId, method, path, opts) => {
-    const body = parseJsonBody(opts.body, "--body");
-    const resp = await apiRequest(method.toUpperCase(), `/v1/apps/${appId}/vercel/proxy/${path.replace(/^\/+/, "")}`, body);
-    handleApiError("apps.vercel", resp);
-    agentOutput({
-        action: "apps.vercel",
-        result: resp.data,
-        next_steps: [{ command: `naive apps show ${appId}`, description: "View app details" }],
-        hints: [`Proxied ${method.toUpperCase()} ${path} to the Vercel API`],
-        related_commands: ["naive apps supabase", "naive apps show"],
-    });
-});
-appsCmd
-    .command("supabase <appId> <method> <path>")
-    .description("Call any Supabase Management API operation, scoped to the app's Supabase project (fullstack apps only)")
-    .option("--body <json...>", "JSON request body (unquoted / word-split OK for flat objects)")
-    .addHelpText("after", `
-Examples:
-  naive apps supabase <id> GET "v1/projects/<ref>"                       Project details
-  naive apps supabase <id> GET "v1/projects/<ref>/config/auth"           Auth config
-  naive apps supabase <id> PATCH "v1/projects/<ref>/config/auth" --body '{"site_url":"https://example.com"}'
-  naive apps supabase <id> GET "v1/projects/<ref>/functions"             List edge functions
-  naive apps supabase <id> POST "v1/projects/<ref>/functions" --body '{"slug":"hello","name":"hello","verify_jwt":false,"body":"Deno.serve(() => new Response(\\"ok\\"))"}'
-  naive apps supabase <id> POST "v1/projects/<ref>/functions/deploy?slug=hello" --body '{"name":"hello","verify_jwt":false,"files":[{"name":"index.ts","content":"Deno.serve(() => new Response(\\"ok\\"))"}]}'
-  naive apps supabase <id> POST "v1/projects/<ref>/database/query" --body '{"query":"select * from users limit 10"}'
-
-Edge functions:
-  - Create (JSON): POST …/functions with slug, name, and a source \`body\` string.
-  - Deploy/update (preferred): POST …/functions/deploy?slug=<slug> with files:[{name,content}].
-    The proxy converts that JSON into multipart file parts (one per source file).
-  Docs: /docs/api-reference/functions/overview
-
-Scope: only this app's project (v1/projects/{ref}/**) is reachable. Deleting
-the project itself is blocked — use 'naive apps delete'. See
-https://supabase.com/docs/reference/api.
-`)
-    .action(async (appId, method, path, opts) => {
-    const body = parseJsonBody(opts.body, "--body");
-    const resp = await apiRequest(method.toUpperCase(), `/v1/apps/${appId}/supabase/proxy/${path.replace(/^\/+/, "")}`, body);
-    handleApiError("apps.supabase", resp);
-    agentOutput({
-        action: "apps.supabase",
-        result: resp.data,
-        next_steps: [{ command: `naive apps show ${appId}`, description: "View app details" }],
-        hints: [`Proxied ${method.toUpperCase()} ${path} to the Supabase Management API`],
-        related_commands: ["naive apps vercel", "naive apps db query"],
-    });
-});
-//# sourceMappingURL=apps.js.map