@vaiftech/cli 1.9.3 → 1.9.5

package/README.md

@@ -3,7 +3,7 @@
 [![npm version](https://img.shields.io/npm/v/@vaiftech/cli)](https://www.npmjs.com/package/@vaiftech/cli)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 
-Command-line tools for [VAIF Studio](https://vaif.studio) (v1.9.3) — scaffold full projects from templates with feature selection, browser-based authentication, manage schemas, deploy functions, generate TypeScript types, and more.
+Command-line tools for [VAIF Studio](https://vaif.studio) (v1.9.5) — scaffold full projects from templates with feature selection, browser-based authentication, manage schemas, deploy functions, generate TypeScript types, and more.
 
 ## Installation
 

package/dist/cli.cjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
-'use strict';require('dotenv/config');var commander=require('commander'),f=require('chalk'),U=require('fs'),_=require('path'),Tt=require('pg'),Q=require('ora'),Ft=require('prettier'),ht=require('dotenv'),yt=require('os'),child_process=require('child_process'),Ee=require('readline');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var f__default=/*#__PURE__*/_interopDefault(f);var U__default=/*#__PURE__*/_interopDefault(U);var ___default=/*#__PURE__*/_interopDefault(_);var Tt__default=/*#__PURE__*/_interopDefault(Tt);var Q__default=/*#__PURE__*/_interopDefault(Q);var Ft__default=/*#__PURE__*/_interopDefault(Ft);var ht__default=/*#__PURE__*/_interopDefault(ht);var yt__default=/*#__PURE__*/_interopDefault(yt);var Ee__default=/*#__PURE__*/_interopDefault(Ee);ht__default.default.config();async function A(t){let e=___default.default.resolve(t);if(!U__default.default.existsSync(e))return null;try{let n=U__default.default.readFileSync(e,"utf-8"),o=JSON.parse(n);return o.database?.url&&(o.database.url=Se(o.database.url)),o.api?.apiKey&&(o.api.apiKey=Se(o.api.apiKey)),o}catch{throw new Error(`Failed to parse config file: ${t}`)}}function Se(t){return t.replace(/\$\{([^}]+)\}/g,(e,n)=>process.env[n]||e)}var se=___default.default.join(yt__default.default.homedir(),".vaif"),M=___default.default.join(se,"auth.json"),H=process.env.VAIF_API_URL||"https://api.vaif.studio";function bt(){U__default.default.existsSync(se)||U__default.default.mkdirSync(se,{recursive:true});}function xe(t){bt(),U__default.default.writeFileSync(M,JSON.stringify(t,null,2),"utf-8"),U__default.default.chmodSync(M,384);}function I(){if(!U__default.default.existsSync(M))return null;try{let t=U__default.default.readFileSync(M,"utf-8");return JSON.parse(t)}catch{return null}}function It(t){let e=Ee__default.default.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{e.question(t,o=>{e.close(),n(o);});})}function At(t){return new Promise(e=>{let n=Ee__default.default.createInterface({input:process.stdin,output:process.stdout});process.stdin;let r=process.stdout.write.bind(process.stdout),i=false;process.stdout.write=((...s)=>i?true:r(...s)),n.question(t,s=>{i=false,process.stdout.write=r,console.log(""),n.close(),e(s);}),i=true;})}function wt(t){let e=process.platform,n;e==="darwin"?n=`open "${t}"`:e==="win32"?n=`start "" "${t}"`:n=`xdg-open "${t}"`,child_process.exec(n,o=>{});}function St(t){return new Promise(e=>setTimeout(e,t))}async function _t(t){try{let e=await fetch(`${H}/auth/me`,{headers:{Authorization:`Bearer ${t}`}});if(e.ok){let n=await e.json();return {valid:!0,email:n.user?.email||n.email}}return {valid:!1}}catch{return {valid:false}}}async function Et(t){let e=Q__default.default();e.start("Setting up authentication...");let n,o;try{let a=await fetch(`${H}/auth/cli/authorize`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({})});a.ok||(e.fail("Failed to initiate authentication"),console.log(f__default.default.red(`
+'use strict';require('dotenv/config');var commander=require('commander'),f=require('chalk'),U=require('fs'),_=require('path'),Tt=require('pg'),Q=require('ora'),Ft=require('prettier'),ht=require('dotenv'),yt=require('os'),child_process=require('child_process'),Ee=require('readline');function _interopDefault(e){return e&&e.__esModule?e:{default:e}}var f__default=/*#__PURE__*/_interopDefault(f);var U__default=/*#__PURE__*/_interopDefault(U);var ___default=/*#__PURE__*/_interopDefault(_);var Tt__default=/*#__PURE__*/_interopDefault(Tt);var Q__default=/*#__PURE__*/_interopDefault(Q);var Ft__default=/*#__PURE__*/_interopDefault(Ft);var ht__default=/*#__PURE__*/_interopDefault(ht);var yt__default=/*#__PURE__*/_interopDefault(yt);var Ee__default=/*#__PURE__*/_interopDefault(Ee);ht__default.default.config();async function A(t){let e=___default.default.resolve(t);if(!U__default.default.existsSync(e))return null;try{let n=U__default.default.readFileSync(e,"utf-8"),o=JSON.parse(n);return o.database?.url&&(o.database.url=Se(o.database.url)),o.api?.apiKey&&(o.api.apiKey=Se(o.api.apiKey)),o}catch{throw new Error(`Failed to parse config file: ${t}`)}}function Se(t){return t.replace(/\$\{([^}]+)\}/g,(e,n)=>process.env[n]||e)}var se=___default.default.join(yt__default.default.homedir(),".vaif"),K=___default.default.join(se,"auth.json"),H=process.env.VAIF_API_URL||"https://api.vaif.studio";function bt(){U__default.default.existsSync(se)||U__default.default.mkdirSync(se,{recursive:true});}function xe(t){bt(),U__default.default.writeFileSync(K,JSON.stringify(t,null,2),"utf-8"),U__default.default.chmodSync(K,384);}function I(){if(!U__default.default.existsSync(K))return null;try{let t=U__default.default.readFileSync(K,"utf-8");return JSON.parse(t)}catch{return null}}function It(t){let e=Ee__default.default.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{e.question(t,o=>{e.close(),n(o);});})}function At(t){return new Promise(e=>{let n=Ee__default.default.createInterface({input:process.stdin,output:process.stdout});process.stdin;let r=process.stdout.write.bind(process.stdout),i=false;process.stdout.write=((...s)=>i?true:r(...s)),n.question(t,s=>{i=false,process.stdout.write=r,console.log(""),n.close(),e(s);}),i=true;})}function wt(t){let e=process.platform,n;e==="darwin"?n=`open "${t}"`:e==="win32"?n=`start "" "${t}"`:n=`xdg-open "${t}"`,child_process.exec(n,o=>{});}function St(t){return new Promise(e=>setTimeout(e,t))}async function _t(t){try{let e=await fetch(`${H}/auth/me`,{headers:{Authorization:`Bearer ${t}`}});if(e.ok){let n=await e.json();return {valid:!0,email:n.user?.email||n.email}}return {valid:!1}}catch{return {valid:false}}}async function Et(t){let e=Q__default.default();e.start("Setting up authentication...");let n,o;try{let a=await fetch(`${H}/auth/cli/authorize`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({})});a.ok||(e.fail("Failed to initiate authentication"),console.log(f__default.default.red(`
 Could not connect to VAIF API. Please try again later.`)),process.exit(1));let l=await a.json();n=l.code,o=l.url;}catch{e.fail("Failed to connect to VAIF API"),console.log(f__default.default.red(`
 Could not connect to VAIF API.`)),console.log(f__default.default.gray("Check your internet connection or try: vaif login --email")),process.exit(1);}e.stop(),console.log(f__default.default.cyan("  Opening browser for authentication...")),console.log(""),console.log(f__default.default.gray("  If the browser doesn't open, visit this URL:")),console.log(f__default.default.white(`  ${o}`)),console.log(""),wt(o),e.start("Waiting for browser authentication...");let r=12e4,i=2e3,s=Date.now();for(;Date.now()-s<r;){await St(i);try{let a=await fetch(`${H}/auth/cli/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({code:n})});if(!a.ok){let d=await a.json();(d.error==="ExpiredCode"||d.error==="InvalidCode")&&(e.fail("Authentication expired"),console.log(f__default.default.red(`
-The authentication session expired. Please try again.`)),process.exit(1));continue}let l=await a.json();if(l.ok&&l.accessToken){let d={token:l.accessToken,email:l.user?.email,projectId:t,expiresAt:new Date(Date.now()+l.expiresIn*1e3).toISOString()};xe(d),e.succeed("Logged in successfully"),console.log(""),l.user?.email&&console.log(f__default.default.green(`  Authenticated as: ${l.user.email}`)),console.log(f__default.default.gray(`  Config saved to: ${M}`)),console.log("");return}}catch{}}e.fail("Authentication timed out"),console.log(f__default.default.red(`
+The authentication session expired. Please try again.`)),process.exit(1));continue}let l=await a.json();if(l.ok&&l.accessToken){let d={token:l.accessToken,email:l.user?.email,projectId:t,expiresAt:new Date(Date.now()+l.expiresIn*1e3).toISOString()};xe(d),e.succeed("Logged in successfully"),console.log(""),l.user?.email&&console.log(f__default.default.green(`  Authenticated as: ${l.user.email}`)),console.log(f__default.default.gray(`  Config saved to: ${K}`)),console.log("");return}}catch{}}e.fail("Authentication timed out"),console.log(f__default.default.red(`
 Timed out waiting for browser authentication.`)),console.log(f__default.default.gray("Try again or use: vaif login --email")),process.exit(1);}async function xt(t){console.log(""),console.log(f__default.default.bold("VAIF CLI Login")),console.log(f__default.default.gray("Enter your VAIF account credentials")),console.log("");let e=await It(f__default.default.cyan("  Email: "));(!e||e.trim()==="")&&(console.log(f__default.default.red(`
 No email provided. Login cancelled.`)),process.exit(1));let n=await At(f__default.default.cyan("  Password: "));(!n||n.trim()==="")&&(console.log(f__default.default.red(`
 No password provided. Login cancelled.`)),process.exit(1));let o=Q__default.default("Authenticating...").start();try{let r=await fetch(`${H}/auth/cli/login`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({email:e.trim(),password:n})}),i=await r.json();(!r.ok||!i.ok)&&(o.fail("Login failed"),console.log(f__default.default.red(`
-${i.message||"Invalid email or password."}`)),process.exit(1));let s={token:i.accessToken,email:i.user?.email,projectId:t,expiresAt:new Date(Date.now()+i.expiresIn*1e3).toISOString()};xe(s),o.succeed("Logged in successfully"),console.log(""),i.user?.email&&console.log(f__default.default.green(`  Authenticated as: ${i.user.email}`)),console.log(f__default.default.gray(`  Config saved to: ${M}`)),console.log("");}catch{o.fail("Failed to connect to VAIF API"),console.log(f__default.default.red(`
-Could not connect to VAIF API. Please try again later.`)),process.exit(1);}}async function Te(t){console.log(""),console.log(f__default.default.bold("Welcome to VAIF CLI")),console.log(f__default.default.gray("Authenticate to access your VAIF projects")),console.log(""),t.email?await xt(t.projectId):await Et(t.projectId),console.log(f__default.default.gray("You can now use VAIF CLI commands like:")),console.log(f__default.default.gray("  vaif pull    - Pull remote schema")),console.log(f__default.default.gray("  vaif push    - Push schema changes")),console.log(f__default.default.gray("  vaif generate - Generate TypeScript types")),console.log("");}async function Pe(){U__default.default.existsSync(M)?(U__default.default.unlinkSync(M),console.log(f__default.default.green("Logged out successfully"))):console.log(f__default.default.yellow("Not currently logged in"));}async function Fe(){let t=I();(!t||!t.token)&&(console.log(f__default.default.yellow("Not logged in")),console.log(f__default.default.gray("Run `vaif login` to authenticate")),process.exit(1));let e=Q__default.default("Checking authentication...").start(),{valid:n,email:o}=await _t(t.token);n||(e.fail("Session expired"),console.log(f__default.default.yellow(`
-Your session has expired. Please login again.`)),process.exit(1)),e.succeed("Authenticated"),console.log(""),console.log(f__default.default.green(`  Email: ${o||t.email||"Unknown"}`)),t.projectId&&console.log(f__default.default.green(`  Project: ${t.projectId}`)),console.log("");}var Ct=process.env.VAIF_API_URL||"https://api.vaif.studio";async function jt(t,e){let n=await fetch(`${Ct}/schema-engine/introspect/${e}`,{headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"}});if(!n.ok){let a=await n.text();throw new Error(`API introspection failed: ${a}`)}let o=await n.json();if(!o.ok||!o.schemaExists)throw new Error("Project schema does not exist yet. Push a migration first with `vaif db push`.");let r=new Map,i=[];for(let a of o.tables){let l=a.columns.map(d=>({column_name:d.name,data_type:d.type,is_nullable:d.nullable?"YES":"NO",column_default:d.default,udt_name:d.type,is_identity:d.primaryKey&&d.default?.includes("gen_random_uuid")?"YES":"NO",character_maximum_length:null,numeric_precision:null,numeric_scale:null}));r.set(a.name,l);for(let d of a.foreignKeys)i.push({constraint_name:d.constraintName,table_name:a.name,column_name:d.columnName,foreign_table_name:d.refTable,foreign_column_name:d.refColumn});}return {tables:r,enums:new Map,foreignKeys:i}}async function Rt(t,e){let n=await t.query(`
+${i.message||"Invalid email or password."}`)),process.exit(1));let s={token:i.accessToken,email:i.user?.email,projectId:t,expiresAt:new Date(Date.now()+i.expiresIn*1e3).toISOString()};xe(s),o.succeed("Logged in successfully"),console.log(""),i.user?.email&&console.log(f__default.default.green(`  Authenticated as: ${i.user.email}`)),console.log(f__default.default.gray(`  Config saved to: ${K}`)),console.log("");}catch{o.fail("Failed to connect to VAIF API"),console.log(f__default.default.red(`
+Could not connect to VAIF API. Please try again later.`)),process.exit(1);}}async function Te(t){console.log(""),console.log(f__default.default.bold("Welcome to VAIF CLI")),console.log(f__default.default.gray("Authenticate to access your VAIF projects")),console.log(""),t.email?await xt(t.projectId):await Et(t.projectId),console.log(f__default.default.gray("You can now use VAIF CLI commands like:")),console.log(f__default.default.gray("  vaif pull    - Pull remote schema")),console.log(f__default.default.gray("  vaif push    - Push schema changes")),console.log(f__default.default.gray("  vaif generate - Generate TypeScript types")),console.log("");}async function Pe(){U__default.default.existsSync(K)?(U__default.default.unlinkSync(K),console.log(f__default.default.green("Logged out successfully"))):console.log(f__default.default.yellow("Not currently logged in"));}async function Fe(){let t=I();(!t||!t.token)&&(console.log(f__default.default.yellow("Not logged in")),console.log(f__default.default.gray("Run `vaif login` to authenticate")),process.exit(1));let e=Q__default.default("Checking authentication...").start(),{valid:n,email:o}=await _t(t.token);n||(e.fail("Session expired"),console.log(f__default.default.yellow(`
+Your session has expired. Please login again.`)),process.exit(1)),e.succeed("Authenticated"),console.log(""),console.log(f__default.default.green(`  Email: ${o||t.email||"Unknown"}`)),t.projectId&&console.log(f__default.default.green(`  Project: ${t.projectId}`)),console.log("");}var jt=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Ct(t,e){let n=await fetch(`${jt}/schema-engine/introspect/${e}`,{headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"}});if(!n.ok){let a=await n.text();throw new Error(`API introspection failed: ${a}`)}let o=await n.json();if(!o.ok||!o.schemaExists)throw new Error("Project schema does not exist yet. Push a migration first with `vaif db push`.");let r=new Map,i=[];for(let a of o.tables){let l=a.columns.map(d=>({column_name:d.name,data_type:d.type,is_nullable:d.nullable?"YES":"NO",column_default:d.default,udt_name:d.type,is_identity:d.primaryKey&&d.default?.includes("gen_random_uuid")?"YES":"NO",character_maximum_length:null,numeric_precision:null,numeric_scale:null}));r.set(a.name,l);for(let d of a.foreignKeys)i.push({constraint_name:d.constraintName,table_name:a.name,column_name:d.columnName,foreign_table_name:d.refTable,foreign_column_name:d.refColumn});}return {tables:r,enums:new Map,foreignKeys:i}}async function Rt(t,e){let n=await t.query(`
     SELECT table_name, table_type
     FROM information_schema.tables
     WHERE table_schema = $1
@@ -54,9 +54,9 @@ Your session has expired. Please login again.`)),process.exit(1)),e.succeed("Aut
     JOIN pg_namespace n ON n.oid = t.typnamespace
     WHERE n.nspname = $1
     ORDER BY t.typname, e.enumsortorder
-  `,[e]),s=new Map;for(let l of n.rows)s.set(l.table_name,[]);for(let l of o.rows){let d=s.get(l.table_name);d&&d.push(l);}let a=new Map;for(let l of i.rows){let d=a.get(l.enum_name)||[];d.push(l.enum_value),a.set(l.enum_name,d);}return {tables:s,enums:a,foreignKeys:r.rows}}var ce={smallint:"number",integer:"number",bigint:"string",int2:"number",int4:"number",int8:"string",decimal:"string",numeric:"string",real:"number",float4:"number",float8:"number","double precision":"number",money:"string",boolean:"boolean",bool:"boolean",text:"string",varchar:"string",char:"string",character:"string","character varying":"string",name:"string",citext:"string",date:"string",time:"string",timetz:"string","time without time zone":"string","time with time zone":"string",timestamp:"string",timestamptz:"string","timestamp without time zone":"string","timestamp with time zone":"string",interval:"string",bytea:"Buffer",uuid:"string",json:"unknown",jsonb:"unknown",inet:"string",cidr:"string",macaddr:"string",macaddr8:"string",point:"{ x: number; y: number }",line:"string",lseg:"string",box:"string",path:"string",polygon:"string",circle:"string",ARRAY:"unknown[]"};function kt(t,e){let{data_type:n,udt_name:o,is_nullable:r}=t;if(e.has(o)){let a=e.get(o).map(l=>`"${l}"`).join(" | ");return r==="YES"?`(${a}) | null`:a}if(n==="ARRAY"){let s=o.replace(/^_/,"");if(e.has(s)){let d=e.get(s).map(u=>`"${u}"`).join(" | ");return r==="YES"?`(${d})[] | null`:`(${d})[]`}let a=ce[s]||"unknown";return r==="YES"?`${a}[] | null`:`${a}[]`}let i=ce[n]||ce[o]||"unknown";return r==="YES"&&(i=`${i} | null`),i}function de(t){return t.split(/[_\-\s]+/).map(e=>e.charAt(0).toUpperCase()+e.slice(1).toLowerCase()).join("")}function Lt(t,e){let n=de(t),o=e.map(r=>`  | "${r}"`).join(`
+  `,[e]),s=new Map;for(let l of n.rows)s.set(l.table_name,[]);for(let l of o.rows){let d=s.get(l.table_name);d&&d.push(l);}let a=new Map;for(let l of i.rows){let d=a.get(l.enum_name)||[];d.push(l.enum_value),a.set(l.enum_name,d);}return {tables:s,enums:a,foreignKeys:r.rows}}var ce={smallint:"number",integer:"number",bigint:"string",int2:"number",int4:"number",int8:"string",decimal:"string",numeric:"string",real:"number",float4:"number",float8:"number","double precision":"number",money:"string",boolean:"boolean",bool:"boolean",text:"string",varchar:"string",char:"string",character:"string","character varying":"string",name:"string",citext:"string",date:"string",time:"string",timetz:"string","time without time zone":"string","time with time zone":"string",timestamp:"string",timestamptz:"string","timestamp without time zone":"string","timestamp with time zone":"string",interval:"string",bytea:"Buffer",uuid:"string",json:"unknown",jsonb:"unknown",inet:"string",cidr:"string",macaddr:"string",macaddr8:"string",point:"{ x: number; y: number }",line:"string",lseg:"string",box:"string",path:"string",polygon:"string",circle:"string",ARRAY:"unknown[]"};function kt(t,e){let{data_type:n,udt_name:o,is_nullable:r}=t;if(e.has(o)){let a=e.get(o).map(l=>`"${l}"`).join(" | ");return r==="YES"?`(${a}) | null`:a}if(n==="ARRAY"){let s=o.replace(/^_/,"");if(e.has(s)){let d=e.get(s).map(u=>`"${u}"`).join(" | ");return r==="YES"?`(${d})[] | null`:`(${d})[]`}let a=ce[s]||"unknown";return r==="YES"?`${a}[] | null`:`${a}[]`}let i=ce[n]||ce[o]||"unknown";return r==="YES"&&(i=`${i} | null`),i}function de(t){return t.split(/[_\-\s]+/).map(e=>e.charAt(0).toUpperCase()+e.slice(1).toLowerCase()).join("")}function Nt(t,e){let n=de(t),o=e.map(r=>`  | "${r}"`).join(`
 `);return `export type ${n} =
-${o};`}function Nt(t,e,n){let o=de(t),r=[],i=[],s=[];for(let u of e){let p=kt(u,n),c=u.column_name,g=u.column_default!==null||u.is_identity==="YES",h=u.is_nullable==="YES";r.push(`  ${c}: ${p};`),g||u.column_name==="id"?i.push(`  ${c}?: ${p.replace(" | null","")} | null;`):h?i.push(`  ${c}?: ${p};`):i.push(`  ${c}: ${p.replace(" | null","")};`),s.push(`  ${c}?: ${p.replace(" | null","")} | null;`);}let a=`export interface ${o} {
+${o};`}function Lt(t,e,n){let o=de(t),r=[],i=[],s=[];for(let u of e){let p=kt(u,n),c=u.column_name,g=u.column_default!==null||u.is_identity==="YES",h=u.is_nullable==="YES";r.push(`  ${c}: ${p};`),g||u.column_name==="id"?i.push(`  ${c}?: ${p.replace(" | null","")} | null;`):h?i.push(`  ${c}?: ${p};`):i.push(`  ${c}: ${p.replace(" | null","")};`),s.push(`  ${c}?: ${p.replace(" | null","")} | null;`);}let a=`export interface ${o} {
 ${r.join(`
 `)}
 }`,l=`export interface ${o}Insert {
@@ -65,11 +65,11 @@ ${i.join(`
 }`,d=`export interface ${o}Update {
 ${s.join(`
 `)}
-}`;return {base:a,insert:l,update:d}}function Vt(t,e,n){let o=["/**"," * Auto-generated TypeScript types from database schema"," * Generated by @vaiftech/cli",` * Generated at: ${new Date().toISOString()}`," * "," * DO NOT EDIT MANUALLY - changes will be overwritten"," */",""];if(e.size>0){o.push("// ============ ENUMS ============"),o.push("");for(let[i,s]of e)o.push(Lt(i,s)),o.push("");}o.push("// ============ TABLES ============"),o.push("");let r=[];for(let[i,s]of t){let{base:a,insert:l,update:d}=Nt(i,s,e);r.push(i),o.push(a),o.push(""),o.push(l),o.push(""),o.push(d),o.push("");}o.push("// ============ DATABASE SCHEMA ============"),o.push(""),o.push("export interface Database {");for(let i of r){let s=de(i);o.push(`  ${i}: {`),o.push(`    Row: ${s};`),o.push(`    Insert: ${s}Insert;`),o.push(`    Update: ${s}Update;`),o.push("  };");}return o.push("}"),o.push(""),o.push("export type TableName = keyof Database;"),o.push(""),o.push("// ============ HELPER TYPES ============"),o.push(""),o.push('export type Row<T extends TableName> = Database[T]["Row"];'),o.push('export type Insert<T extends TableName> = Database[T]["Insert"];'),o.push('export type Update<T extends TableName> = Database[T]["Update"];'),o.push(""),o.join(`
-`)}async function je(t){let e=Q__default.default("Loading configuration...").start();try{let n=await A(t.config),o=t.connection||n?.database?.url||process.env.DATABASE_URL,r=o&&!o.includes("${"),i,s,a;if(r){e.text="Connecting to database...";let c=new Tt__default.default.Client({connectionString:o});await c.connect(),e.text="Introspecting schema...",{tables:i,enums:s,foreignKeys:a}=await Rt(c,t.schema),await c.end();}else {let c=I();(!c||!c.token)&&(e.fail("No database connection and not logged in"),console.log(f__default.default.yellow(`
+}`;return {base:a,insert:l,update:d}}function Dt(t,e,n){let o=["/**"," * Auto-generated TypeScript types from database schema"," * Generated by @vaiftech/cli",` * Generated at: ${new Date().toISOString()}`," * "," * DO NOT EDIT MANUALLY - changes will be overwritten"," */",""];if(e.size>0){o.push("// ============ ENUMS ============"),o.push("");for(let[i,s]of e)o.push(Nt(i,s)),o.push("");}o.push("// ============ TABLES ============"),o.push("");let r=[];for(let[i,s]of t){let{base:a,insert:l,update:d}=Lt(i,s,e);r.push(i),o.push(a),o.push(""),o.push(l),o.push(""),o.push(d),o.push("");}o.push("// ============ DATABASE SCHEMA ============"),o.push(""),o.push("export interface Database {");for(let i of r){let s=de(i);o.push(`  ${i}: {`),o.push(`    Row: ${s};`),o.push(`    Insert: ${s}Insert;`),o.push(`    Update: ${s}Update;`),o.push("  };");}return o.push("}"),o.push(""),o.push("export type TableName = keyof Database;"),o.push(""),o.push("// ============ HELPER TYPES ============"),o.push(""),o.push('export type Row<T extends TableName> = Database[T]["Row"];'),o.push('export type Insert<T extends TableName> = Database[T]["Insert"];'),o.push('export type Update<T extends TableName> = Database[T]["Update"];'),o.push(""),o.join(`
+`)}async function Ce(t){let e=Q__default.default("Loading configuration...").start();try{let n=await A(t.config),o=t.connection||n?.database?.url||process.env.DATABASE_URL,r=o&&!o.includes("${"),i,s,a;if(r){e.text="Connecting to database...";let c=new Tt__default.default.Client({connectionString:o});await c.connect(),e.text="Introspecting schema...",{tables:i,enums:s,foreignKeys:a}=await Rt(c,t.schema),await c.end();}else {let c=I();(!c||!c.token)&&(e.fail("No database connection and not logged in"),console.log(f__default.default.yellow(`
 Either:`)),console.log(f__default.default.gray("  1. Run `vaif login` to authenticate (no DATABASE_URL needed)")),console.log(f__default.default.gray("  2. Set DATABASE_URL in your .env file")),console.log(f__default.default.gray("  3. Pass --connection postgresql://user:pass@host:5432/db")),process.exit(1));let g=n?.projectId||process.env.VAIF_PROJECT_ID||c.projectId;g||(e.fail("No project ID specified"),console.log(f__default.default.yellow(`
-Set projectId in vaif.config.json or use VAIF_PROJECT_ID env var.`)),process.exit(1)),e.text="Introspecting schema via API...",{tables:i,enums:s,foreignKeys:a}=await jt(c.token,g);}if(i.size===0){e.warn("No tables found"),console.log(f__default.default.yellow(`
-Push a migration first: vaif db push`));return}e.text=`Generating types for ${i.size} tables...`;let l=Vt(i,s,a),d=await Ft__default.default.format(l,{parser:"typescript",semi:!0,singleQuote:!1,trailingComma:"es5",printWidth:100});if(t.dryRun){e.succeed("Generated types (dry run):"),console.log(""),console.log(f__default.default.gray("\u2500".repeat(60))),console.log(d),console.log(f__default.default.gray("\u2500".repeat(60)));return}let u=___default.default.resolve(t.output),p=___default.default.dirname(u);U__default.default.existsSync(p)||U__default.default.mkdirSync(p,{recursive:!0}),U__default.default.writeFileSync(u,d,"utf-8"),e.succeed(`Generated types for ${i.size} tables \u2192 ${f__default.default.cyan(t.output)}`),console.log(""),console.log(f__default.default.green("Generated:")),console.log(f__default.default.gray(`  Tables: ${i.size}`)),console.log(f__default.default.gray(`  Enums: ${s.size}`)),console.log(""),console.log(f__default.default.gray("Import in your code:")),console.log(f__default.default.cyan(`  import type { Database, Row, Insert, Update } from "${t.output.replace(/\.ts$/,"")}";`));}catch(n){e.fail("Failed to generate types"),n instanceof Error&&(console.error(f__default.default.red(`
+Set projectId in vaif.config.json or use VAIF_PROJECT_ID env var.`)),process.exit(1)),e.text="Introspecting schema via API...",{tables:i,enums:s,foreignKeys:a}=await Ct(c.token,g);}if(i.size===0){e.warn("No tables found"),console.log(f__default.default.yellow(`
+Push a migration first: vaif db push`));return}e.text=`Generating types for ${i.size} tables...`;let l=Dt(i,s,a),d=await Ft__default.default.format(l,{parser:"typescript",semi:!0,singleQuote:!1,trailingComma:"es5",printWidth:100});if(t.dryRun){e.succeed("Generated types (dry run):"),console.log(""),console.log(f__default.default.gray("\u2500".repeat(60))),console.log(d),console.log(f__default.default.gray("\u2500".repeat(60)));return}let u=___default.default.resolve(t.output),p=___default.default.dirname(u);U__default.default.existsSync(p)||U__default.default.mkdirSync(p,{recursive:!0}),U__default.default.writeFileSync(u,d,"utf-8"),e.succeed(`Generated types for ${i.size} tables \u2192 ${f__default.default.cyan(t.output)}`),console.log(""),console.log(f__default.default.green("Generated:")),console.log(f__default.default.gray(`  Tables: ${i.size}`)),console.log(f__default.default.gray(`  Enums: ${s.size}`)),console.log(""),console.log(f__default.default.gray("Import in your code:")),console.log(f__default.default.cyan(`  import type { Database, Row, Insert, Update } from "${t.output.replace(/\.ts$/,"")}";`));}catch(n){e.fail("Failed to generate types"),n instanceof Error&&(console.error(f__default.default.red(`
 Error: ${n.message}`)),n.message.includes("ECONNREFUSED")&&console.log(f__default.default.yellow(`
 Make sure your database is running and accessible.`))),process.exit(1);}}var q=[{name:"database",label:"Database",description:"CRUD queries, type-safe operations"},{name:"auth",label:"Authentication",description:"login, signup, OAuth, sessions"},{name:"realtime",label:"Realtime",description:"live subscriptions, presence"},{name:"storage",label:"Storage",description:"file uploads, signed URLs"},{name:"functions",label:"Functions",description:"serverless function calls"}],ke={"nextjs-fullstack":{name:"Next.js Full-Stack",description:"Next.js app with server/client VAIF client, auth middleware, and React hooks",tag:"Next.js",defaultFeatures:["database","auth"],files:[{path:"package.json",content:`{
   "name": "my-vaif-app",
@@ -3775,19 +3775,19 @@ export const posts = pgTable("posts", {
 
   return Response.json({ message: \`Hello, \${name}!\` });
 }
-`}]},dependencies:["@vaiftech/client","@vaiftech/auth"],postInstructions:["Copy .env.example to .env.local and fill in your project credentials","Create a 'product-images' storage bucket in your VAIF dashboard","Import storage helpers from '@/lib/storage' in your API routes","Use uploadProductImage() in your product creation flow","Run: npx vaif generate  to generate TypeScript types"]}};function Le(){console.log(""),console.log(f__default.default.bold("Available project templates")),console.log("");let t=26,e=22;console.log(`  ${f__default.default.gray("Template".padEnd(t))}${f__default.default.gray("Stack".padEnd(e))}${f__default.default.gray("Description")}`),console.log(f__default.default.gray("  "+"-".repeat(t+e+40)));for(let[n,o]of Object.entries(ke))console.log(`  ${f__default.default.cyan(n.padEnd(t))}${f__default.default.yellow(o.tag.padEnd(e))}${f__default.default.white(o.description)}`);console.log(""),console.log(f__default.default.gray("Usage:")),console.log(f__default.default.gray("  npx @vaiftech/cli init --template <name>")),console.log(f__default.default.gray("  npx @vaiftech/cli init -t nextjs-fullstack")),console.log(f__default.default.gray("  npx @vaiftech/cli init -t react-spa --features auth,database,realtime")),console.log(""),console.log(f__default.default.gray("Available features: auth, database, realtime, storage, functions")),console.log("");}async function Dt(t){if(!process.stdin.isTTY||!process.stdout.isTTY)return t;let e=new Set(t.map(o=>q.findIndex(r=>r.name===o)).filter(o=>o>=0)),n=0;return new Promise(o=>{let r=Ee__default.default.createInterface({input:process.stdin,output:process.stdout});Ee__default.default.emitKeypressEvents(process.stdin,r),process.stdin.setRawMode&&process.stdin.setRawMode(true);function i(){let a=q.length+2;process.stdout.write(`\x1B[${a}A`),s();}function s(){console.log(f__default.default.bold(`
+`}]},dependencies:["@vaiftech/client","@vaiftech/auth"],postInstructions:["Copy .env.example to .env.local and fill in your project credentials","Create a 'product-images' storage bucket in your VAIF dashboard","Import storage helpers from '@/lib/storage' in your API routes","Use uploadProductImage() in your product creation flow","Run: npx vaif generate  to generate TypeScript types"]}};function Ne(){console.log(""),console.log(f__default.default.bold("Available project templates")),console.log("");let t=26,e=22;console.log(`  ${f__default.default.gray("Template".padEnd(t))}${f__default.default.gray("Stack".padEnd(e))}${f__default.default.gray("Description")}`),console.log(f__default.default.gray("  "+"-".repeat(t+e+40)));for(let[n,o]of Object.entries(ke))console.log(`  ${f__default.default.cyan(n.padEnd(t))}${f__default.default.yellow(o.tag.padEnd(e))}${f__default.default.white(o.description)}`);console.log(""),console.log(f__default.default.gray("Usage:")),console.log(f__default.default.gray("  npx @vaiftech/cli init --template <name>")),console.log(f__default.default.gray("  npx @vaiftech/cli init -t nextjs-fullstack")),console.log(f__default.default.gray("  npx @vaiftech/cli init -t react-spa --features auth,database,realtime")),console.log(""),console.log(f__default.default.gray("Available features: auth, database, realtime, storage, functions")),console.log("");}async function Vt(t){if(!process.stdin.isTTY||!process.stdout.isTTY)return t;let e=new Set(t.map(o=>q.findIndex(r=>r.name===o)).filter(o=>o>=0)),n=0;return new Promise(o=>{let r=Ee__default.default.createInterface({input:process.stdin,output:process.stdout});Ee__default.default.emitKeypressEvents(process.stdin,r),process.stdin.setRawMode&&process.stdin.setRawMode(true);function i(){let a=q.length+2;process.stdout.write(`\x1B[${a}A`),s();}function s(){console.log(f__default.default.bold(`
 ? Which VAIF features do you want to include?`)),q.forEach((a,l)=>{let d=e.has(l)?f__default.default.green("[x]"):"[ ]",u=l===n?f__default.default.cyan("> "):"  ";console.log(`${u}${d} ${a.label} ${f__default.default.gray(`(${a.description})`)}`);}),console.log(f__default.default.gray("  (up/down to move, space to toggle, enter to confirm)"));}s(),process.stdin.on("keypress",(a,l)=>{if(l.name==="up"&&n>0)n--,i();else if(l.name==="down"&&n<q.length-1)n++,i();else if(l.name==="space")e.has(n)?e.delete(n):e.add(n),i();else if(l.name==="return"){process.stdin.setRawMode&&process.stdin.setRawMode(false),r.close();let d=[...e].sort().map(u=>q[u].name);o(d.length>0?d:t);}else l.name==="c"&&l.ctrl&&(process.stdin.setRawMode&&process.stdin.setRawMode(false),r.close(),process.exit(0));});})}async function ue(t,e={}){let n=ke[t];n||(console.log(f__default.default.red(`
 Unknown template: ${t}`)),console.log(f__default.default.yellow(`Run 'vaif templates' to see available templates.
 `)),process.exit(1));let o;e.features&&e.features.length>0?o=e.features.filter(c=>q.some(g=>g.name===c)):e.addOnly?(console.log(f__default.default.red(`
-No features specified.`)),console.log(f__default.default.yellow("Usage: vaif init --template <name> --add-features <features>")),console.log(f__default.default.gray("Available features: auth, database, realtime, storage, functions")),process.exit(1)):n.featureFiles&&Object.keys(n.featureFiles).length>0?o=await Dt(n.defaultFeatures??["database","auth"]):o=n.defaultFeatures??[],e.addOnly?(console.log(""),console.log(f__default.default.bold(`Adding features to ${f__default.default.cyan(n.name)} project...`)),console.log(f__default.default.gray(`  Features: ${o.join(", ")}`)),console.log("")):(console.log(""),console.log(f__default.default.bold(`Scaffolding ${f__default.default.cyan(n.name)} template...`)),o.length>0&&console.log(f__default.default.gray(`  Features: ${o.join(", ")}`)),console.log(""));let r=e.addOnly?[]:[...n.files],i=new Set,s=[];if(n.featureFiles)for(let c of o){let g=n.featureFiles[c];if(g)for(let h of g)i.add(h.path),s.push(h);}let a=r.filter(c=>!i.has(c.path)).concat(s),l=0,d=0;for(let c of a){let g=___default.default.resolve(c.path),h=___default.default.dirname(g);if(U__default.default.existsSync(h)||U__default.default.mkdirSync(h,{recursive:true}),c.path==="package.json"&&U__default.default.existsSync(g)&&!e.force)try{let x=JSON.parse(U__default.default.readFileSync(g,"utf-8")),V=JSON.parse(c.content),$=Ie=>{if(!Ie)return {};let Ae={};for(let[gt,W]of Object.entries(Ie))!W.startsWith("workspace:")&&!W.startsWith("link:")&&!W.startsWith("file:")&&(Ae[gt]=W);return Ae};x.dependencies={...$(x.dependencies),...V.dependencies||{}},x.devDependencies={...$(x.devDependencies),...V.devDependencies||{}},V.scripts&&(x.scripts={...x.scripts||{},...V.scripts}),U__default.default.writeFileSync(g,JSON.stringify(x,null,2)+`
-`,"utf-8"),console.log(f__default.default.green(`  merge   ${c.path}  (added dependencies)`)),l++;continue}catch{}if(U__default.default.existsSync(g)&&!e.force){console.log(f__default.default.yellow(`  skip  ${c.path}  (already exists)`)),d++;continue}U__default.default.writeFileSync(g,c.content,"utf-8"),console.log(f__default.default.green(`  create  ${c.path}`)),l++;}console.log(""),l>0&&console.log(f__default.default.green(`Created ${l} file${l!==1?"s":""}.`)),d>0&&console.log(f__default.default.yellow(`Skipped ${d} file${d!==1?"s":""} (use --force to overwrite).`));let u={auth:{"@vaiftech/auth":"^1.0.0"},database:{},realtime:{},storage:{},functions:{}},p=___default.default.resolve("package.json");if(U__default.default.existsSync(p)&&o.length>0)try{let c=JSON.parse(U__default.default.readFileSync(p,"utf-8")),g=!1;for(let h of o){let x=u[h];if(x)for(let[V,$]of Object.entries(x))c.dependencies?.[V]||(c.dependencies=c.dependencies||{},c.dependencies[V]=$,g=!0);}g&&U__default.default.writeFileSync(p,JSON.stringify(c,null,2)+`
-`,"utf-8");}catch{}(n.dependencies?.length||n.devDependencies?.length)&&(console.log(""),console.log(f__default.default.bold("Install dependencies:")),n.dependencies?.length&&console.log(f__default.default.cyan(`  npm install ${n.dependencies.join(" ")}`)),n.devDependencies?.length&&console.log(f__default.default.cyan(`  npm install -D ${n.devDependencies.join(" ")}`))),console.log(""),console.log(f__default.default.bold.green("Project scaffolded successfully!")),console.log(""),console.log(f__default.default.bold("  Next steps:")),n.postInstructions.forEach(c=>{console.log(f__default.default.gray(`    ${c}`));}),console.log(""),console.log(f__default.default.gray("  Get your project credentials at https://vaif.studio/app/security/api-keys")),console.log("");}var $t={$schema:"https://vaif.studio/schemas/config.json",projectId:"",database:{url:"${DATABASE_URL}",schema:"public"},types:{output:"./src/types/database.ts"},api:{baseUrl:"https://api.vaif.studio"}};async function Ne(t){if(t.addFeatures){t.template||(console.log(f__default.default.red(`
+No features specified.`)),console.log(f__default.default.yellow("Usage: vaif init --template <name> --add-features <features>")),console.log(f__default.default.gray("Available features: auth, database, realtime, storage, functions")),process.exit(1)):n.featureFiles&&Object.keys(n.featureFiles).length>0?o=await Vt(n.defaultFeatures??["database","auth"]):o=n.defaultFeatures??[],e.addOnly?(console.log(""),console.log(f__default.default.bold(`Adding features to ${f__default.default.cyan(n.name)} project...`)),console.log(f__default.default.gray(`  Features: ${o.join(", ")}`)),console.log("")):(console.log(""),console.log(f__default.default.bold(`Scaffolding ${f__default.default.cyan(n.name)} template...`)),o.length>0&&console.log(f__default.default.gray(`  Features: ${o.join(", ")}`)),console.log(""));let r=e.addOnly?[]:[...n.files],i=new Set,s=[];if(n.featureFiles)for(let c of o){let g=n.featureFiles[c];if(g)for(let h of g)i.add(h.path),s.push(h);}let a=r.filter(c=>!i.has(c.path)).concat(s),l=0,d=0;for(let c of a){let g=___default.default.resolve(c.path),h=___default.default.dirname(g);if(U__default.default.existsSync(h)||U__default.default.mkdirSync(h,{recursive:true}),c.path==="package.json"&&U__default.default.existsSync(g)&&!e.force)try{let x=JSON.parse(U__default.default.readFileSync(g,"utf-8")),D=JSON.parse(c.content),$=Ie=>{if(!Ie)return {};let Ae={};for(let[gt,W]of Object.entries(Ie))!W.startsWith("workspace:")&&!W.startsWith("link:")&&!W.startsWith("file:")&&(Ae[gt]=W);return Ae};x.dependencies={...$(x.dependencies),...D.dependencies||{}},x.devDependencies={...$(x.devDependencies),...D.devDependencies||{}},D.scripts&&(x.scripts={...x.scripts||{},...D.scripts}),U__default.default.writeFileSync(g,JSON.stringify(x,null,2)+`
+`,"utf-8"),console.log(f__default.default.green(`  merge   ${c.path}  (added dependencies)`)),l++;continue}catch{}if(U__default.default.existsSync(g)&&!e.force){console.log(f__default.default.yellow(`  skip  ${c.path}  (already exists)`)),d++;continue}U__default.default.writeFileSync(g,c.content,"utf-8"),console.log(f__default.default.green(`  create  ${c.path}`)),l++;}console.log(""),l>0&&console.log(f__default.default.green(`Created ${l} file${l!==1?"s":""}.`)),d>0&&console.log(f__default.default.yellow(`Skipped ${d} file${d!==1?"s":""} (use --force to overwrite).`));let u={auth:{"@vaiftech/auth":"^1.0.0"},database:{},realtime:{},storage:{},functions:{}},p=___default.default.resolve("package.json");if(U__default.default.existsSync(p)&&o.length>0)try{let c=JSON.parse(U__default.default.readFileSync(p,"utf-8")),g=!1;for(let h of o){let x=u[h];if(x)for(let[D,$]of Object.entries(x))c.dependencies?.[D]||(c.dependencies=c.dependencies||{},c.dependencies[D]=$,g=!0);}g&&U__default.default.writeFileSync(p,JSON.stringify(c,null,2)+`
+`,"utf-8");}catch{}(n.dependencies?.length||n.devDependencies?.length)&&(console.log(""),console.log(f__default.default.bold("Install dependencies:")),n.dependencies?.length&&console.log(f__default.default.cyan(`  npm install ${n.dependencies.join(" ")}`)),n.devDependencies?.length&&console.log(f__default.default.cyan(`  npm install -D ${n.devDependencies.join(" ")}`))),console.log(""),console.log(f__default.default.bold.green("Project scaffolded successfully!")),console.log(""),console.log(f__default.default.bold("  Next steps:")),n.postInstructions.forEach(c=>{console.log(f__default.default.gray(`    ${c}`));}),console.log(""),console.log(f__default.default.gray("  Get your project credentials at https://vaif.studio/app/security/api-keys")),console.log("");}var $t={$schema:"https://vaif.studio/schemas/config.json",projectId:"",database:{url:"${DATABASE_URL}",schema:"public"},types:{output:"./src/types/database.ts"},api:{baseUrl:"https://api.vaif.studio"}};async function Le(t){if(t.addFeatures){t.template||(console.log(f__default.default.red(`
 --add-features requires --template to know which template to use.`)),console.log(f__default.default.gray("Example: vaif init --template react-spa --add-features functions,storage")),process.exit(1));let o=t.addFeatures.split(",").map(r=>r.trim());await ue(t.template,{force:t.force,features:o,addOnly:true});return}let e=Q__default.default("Initializing VAIF configuration...").start(),n=___default.default.resolve("vaif.config.json");U__default.default.existsSync(n)&&!t.force&&(e.fail("vaif.config.json already exists"),console.log(f__default.default.yellow(`
 Use --force to overwrite existing configuration.`)),process.exit(1));try{if(U__default.default.writeFileSync(n,JSON.stringify($t,null,2),"utf-8"),e.succeed("Created vaif.config.json"),t.template){let o=t.features?t.features.split(",").map(r=>r.trim()):void 0;await ue(t.template,{force:t.force,features:o});}else {let o=___default.default.resolve(".env.example");if(U__default.default.existsSync(o)||(U__default.default.writeFileSync(o,`# VAIF Configuration
 DATABASE_URL=postgresql://user:password@localhost:5432/database
 VAIF_API_KEY=your-api-key
 `,"utf-8"),console.log(f__default.default.gray("Created .env.example"))),t.typescript){let r=___default.default.resolve("src/types");U__default.default.existsSync(r)||(U__default.default.mkdirSync(r,{recursive:!0}),console.log(f__default.default.gray("Created src/types directory")));}console.log(""),console.log(f__default.default.green("VAIF initialized successfully!")),console.log(""),console.log(f__default.default.gray("Next steps:")),console.log(f__default.default.gray("  1. Update vaif.config.json with your project ID")),console.log(f__default.default.gray("  2. Set DATABASE_URL in your environment")),console.log(f__default.default.gray("  3. Run: npx vaif generate")),console.log("");}}catch(o){e.fail("Failed to initialize"),o instanceof Error&&console.error(f__default.default.red(`
-Error: ${o.message}`)),process.exit(1);}}var zt=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Bt(t,e,n="public"){let o=await fetch(`${zt}/projects/${e}/schema?schema=${n}`,{headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"}});if(!o.ok){let r=await o.text();throw new Error(`Failed to fetch schema: ${r}`)}return o.json()}async function Ve(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;e.start("Loading configuration...");try{r=await A(o);}catch(s){e.fail("Failed to load config"),console.log(f__default.default.red(`
+Error: ${o.message}`)),process.exit(1);}}var zt=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Bt(t,e,n="public"){let o=await fetch(`${zt}/projects/${e}/schema?schema=${n}`,{headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"}});if(!o.ok){let r=await o.text();throw new Error(`Failed to fetch schema: ${r}`)}return o.json()}async function De(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;e.start("Loading configuration...");try{r=await A(o);}catch(s){e.fail("Failed to load config"),console.log(f__default.default.red(`
 Error: ${s}`)),process.exit(1);}r||(e.fail("No configuration found"),console.log(f__default.default.yellow("\nRun `vaif init` to create a configuration file.")),process.exit(1));let i=t.projectId||r.projectId||process.env.VAIF_PROJECT_ID||n.projectId;i||(e.fail("No project ID specified"),console.log(f__default.default.yellow(`
 Set projectId in vaif.config.json or use --project-id flag.`)),process.exit(1)),e.text="Fetching remote schema...";try{let s=t.schema||r.database?.schema||"public",a=await Bt(n.token,i,s);e.succeed("Schema fetched successfully");let l=t.output||___default.default.resolve("vaif.schema.json"),d={$schema:"https://vaif.studio/schemas/schema.json",projectId:i,schema:s,pulledAt:new Date().toISOString(),...a};U__default.default.writeFileSync(l,JSON.stringify(d,null,2),"utf-8"),console.log(""),console.log(f__default.default.green(`Schema saved to: ${l}`)),console.log(""),console.log(f__default.default.gray("Schema summary:")),console.log(f__default.default.gray(`  Tables: ${(a.tables||[]).length}`)),console.log(f__default.default.gray(`  Enums: ${(a.enums||[]).length}`)),console.log(f__default.default.gray(`  Functions: ${(a.functions||[]).length}`)),console.log(""),console.log(f__default.default.gray("Next steps:")),console.log(f__default.default.gray("  - Run `vaif generate` to generate TypeScript types")),console.log(f__default.default.gray("  - Edit the schema and run `vaif push` to deploy changes")),console.log("");}catch(s){e.fail("Failed to fetch schema"),s instanceof Error&&console.log(f__default.default.red(`
 Error: ${s.message}`)),process.exit(1);}}var Ue=process.env.VAIF_API_URL||"https://api.vaif.studio";function Gt(t){let e=Ee__default.default.createInterface({input:process.stdin,output:process.stdout});return new Promise(n=>{e.question(t,o=>{e.close(),n(o);});})}async function Wt(t,e,n){let o=await fetch(`${Ue}/projects/${e}/schema/preview`,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({schema:n})});if(!o.ok){let r=await o.text();throw new Error(`Failed to preview changes: ${r}`)}return o.json()}async function Ht(t,e,n){let o=await fetch(`${Ue}/projects/${e}/schema/apply`,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({schema:n})});if(!o.ok){let r=await o.text();throw new Error(`Failed to apply changes: ${r}`)}return o.json()}function Xt(t){if(console.log(""),console.log(f__default.default.bold("Schema Changes:")),console.log(""),t.added.length===0&&t.modified.length===0&&t.removed.length===0){console.log(f__default.default.gray("  No changes detected. Schema is up to date."));return}if(t.added.length>0){console.log(f__default.default.green.bold("  + Added:"));for(let e of t.added)console.log(f__default.default.green(`    + ${e.type}: ${e.name}`));console.log("");}if(t.modified.length>0){console.log(f__default.default.yellow.bold("  ~ Modified:"));for(let e of t.modified){console.log(f__default.default.yellow(`    ~ ${e.type}: ${e.name}`));for(let n of e.changes)console.log(f__default.default.gray(`        ${n}`));}console.log("");}if(t.removed.length>0){console.log(f__default.default.red.bold("  - Removed:"));for(let e of t.removed)console.log(f__default.default.red(`    - ${e.type}: ${e.name}`));console.log("");}}async function $e(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;e.start("Loading configuration...");try{r=await A(o);}catch(l){e.fail("Failed to load config"),console.log(f__default.default.red(`
@@ -3796,10 +3796,10 @@ Set projectId in vaif.config.json or use --project-id flag.`)),process.exit(1));
 Expected schema file at: ${s}`)),console.log(f__default.default.gray("Run `vaif pull` first to fetch the current schema.")),process.exit(1));let a;try{let l=U__default.default.readFileSync(s,"utf-8");a=JSON.parse(l);}catch(l){e.fail("Failed to parse schema file"),l instanceof Error&&console.log(f__default.default.red(`
 Error: ${l.message}`)),process.exit(1);}e.text="Calculating schema changes...";try{let{diff:l,sql:d}=await Wt(n.token,i,a);if(e.stop(),Xt(l),l.added.length===0&&l.modified.length===0&&l.removed.length===0){console.log("");return}if(d.length>0){console.log(f__default.default.bold("SQL Migrations:")),console.log("");for(let p of d)console.log(f__default.default.gray(`  ${p}`));console.log("");}if(t.dryRun){console.log(f__default.default.yellow("Dry run mode - no changes applied.")),console.log(f__default.default.gray("Remove --dry-run to apply these changes."));return}if(!t.force){l.removed.length>0&&(console.log(f__default.default.red.bold("\u26A0\uFE0F  Warning: This will remove tables/columns from your database.")),console.log(f__default.default.red("    This action cannot be undone!")),console.log(""));let c=await Gt(f__default.default.cyan("Apply these changes? [y/N] "));if(c.toLowerCase()!=="y"&&c.toLowerCase()!=="yes"){console.log(f__default.default.yellow(`
 Cancelled. No changes applied.`));return}}e.start("Applying schema changes...");let u=await Ht(n.token,i,a);if(u.success){if(e.succeed("Schema changes applied successfully"),console.log(""),u.migrations.length>0){console.log(f__default.default.gray("Migrations applied:"));for(let p of u.migrations)console.log(f__default.default.gray(`  - ${p}`));console.log("");}console.log(f__default.default.green("Your database schema is now up to date.")),console.log(f__default.default.gray("Run `vaif generate` to update your TypeScript types.")),console.log("");}else e.fail("Failed to apply some changes");}catch(l){e.fail("Failed to push schema changes"),l instanceof Error&&console.log(f__default.default.red(`
-Error: ${l.message}`)),process.exit(1);}}var X=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Qt(t,e,n,o){let r=new URL(`${X}/functions/project/${e}`);o&&r.searchParams.set("envId",o);let i=await fetch(r.toString(),{headers:{Authorization:`Bearer ${t}`}});if(!i.ok)return null;let s=await i.json(),a=s.functions||s;return Array.isArray(a)&&a.find(l=>l.name===n)||null}async function Zt(t,e,n){let o=await fetch(`${X}/functions/`,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({projectId:e,name:n.name,runtime:n.runtime,entrypoint:n.entrypoint,envId:n.envId})});if(!o.ok){let r=await o.text();throw new Error(`Failed to create function: ${r}`)}return o.json()}async function eo(t,e,n){let o=await fetch(`${X}/functions/${e}/source`,{method:"PUT",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({sourceCode:n})});if(!o.ok){let r=await o.text();throw new Error(`Failed to deploy source: ${r}`)}}async function to(t,e,n){let o=new URL(`${X}/functions/project/${e}`);n&&o.searchParams.set("envId",n);let r=await fetch(o.toString(),{headers:{Authorization:`Bearer ${t}`}});if(!r.ok){let s=await r.text();throw new Error(`Failed to list functions: ${s}`)}let i=await r.json();return i.functions||i}function Oe(t){switch(___default.default.extname(t).toLowerCase()){case ".ts":return "typescript";case ".js":case ".mjs":return "nodejs";case ".py":return "python";case ".go":return "go";case ".rs":return "rust";default:return "nodejs"}}function Ke(t){let e=[],n=[".ts",".js",".mjs",".py",".go",".rs"],o=["drizzle.config.ts","tsconfig.json","package.json"];if(!U__default.default.existsSync(t))return e;let r=U__default.default.readdirSync(t,{withFileTypes:true});for(let i of r){let s=___default.default.join(t,i.name);if(i.isDirectory()){if(i.name!=="node_modules"&&!i.name.startsWith(".")){let a=U__default.default.readdirSync(s,{withFileTypes:true});for(let l of a)if(l.isFile()){let d=___default.default.extname(l.name).toLowerCase();if(n.includes(d)){e.push(___default.default.join(s,l.name));break}}}}else if(i.isFile()){let a=___default.default.extname(i.name).toLowerCase();n.includes(a)&&!o.includes(i.name)&&e.push(s);}}return e}async function ze(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;try{r=await A(o);}catch{}let i=t.projectId||r?.projectId||process.env.VAIF_PROJECT_ID||n.projectId;i||(console.log(f__default.default.red("No project ID specified")),console.log(f__default.default.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(f__default.default.bold("VAIF Functions Deploy")),console.log(""),e.start("Scanning for function files...");let s=___default.default.resolve("functions"),a=___default.default.resolve("src/functions"),l=[];if(t.entrypoint){let c=___default.default.resolve(t.entrypoint);U__default.default.existsSync(c)||(e.fail(`File not found: ${t.entrypoint}`),process.exit(1)),l=[c];}else l=[...Ke(s),...Ke(a)];l.length===0&&(e.fail("No function files found"),console.log(f__default.default.yellow(`
+Error: ${l.message}`)),process.exit(1);}}var X=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Qt(t,e,n,o){let r=new URL(`${X}/functions/project/${e}`);o&&r.searchParams.set("envId",o);let i=await fetch(r.toString(),{headers:{Authorization:`Bearer ${t}`}});if(!i.ok)return null;let s=await i.json(),a=s.functions||s;return Array.isArray(a)&&a.find(l=>l.name===n)||null}async function Zt(t,e,n){let o=await fetch(`${X}/functions/`,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({projectId:e,name:n.name,runtime:n.runtime,entrypoint:n.entrypoint,envId:n.envId})});if(!o.ok){let r=await o.text();throw new Error(`Failed to create function: ${r}`)}return o.json()}async function eo(t,e,n){let o=await fetch(`${X}/functions/${e}/source`,{method:"PUT",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({sourceCode:n})});if(!o.ok){let r=await o.text();throw new Error(`Failed to deploy source: ${r}`)}}async function to(t,e,n){let o=new URL(`${X}/functions/project/${e}`);n&&o.searchParams.set("envId",n);let r=await fetch(o.toString(),{headers:{Authorization:`Bearer ${t}`}});if(!r.ok){let s=await r.text();throw new Error(`Failed to list functions: ${s}`)}let i=await r.json();return i.functions||i}function Oe(t){switch(___default.default.extname(t).toLowerCase()){case ".ts":return "typescript";case ".js":case ".mjs":return "nodejs";case ".py":return "python";case ".go":return "go";case ".rs":return "rust";default:return "nodejs"}}function Me(t){let e=[],n=[".ts",".js",".mjs",".py",".go",".rs"],o=["drizzle.config.ts","tsconfig.json","package.json"];if(!U__default.default.existsSync(t))return e;let r=U__default.default.readdirSync(t,{withFileTypes:true});for(let i of r){let s=___default.default.join(t,i.name);if(i.isDirectory()){if(i.name!=="node_modules"&&!i.name.startsWith(".")){let a=U__default.default.readdirSync(s,{withFileTypes:true});for(let l of a)if(l.isFile()){let d=___default.default.extname(l.name).toLowerCase();if(n.includes(d)){e.push(___default.default.join(s,l.name));break}}}}else if(i.isFile()){let a=___default.default.extname(i.name).toLowerCase();n.includes(a)&&!o.includes(i.name)&&e.push(s);}}return e}async function ze(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;try{r=await A(o);}catch{}let i=t.projectId||r?.projectId||process.env.VAIF_PROJECT_ID||n.projectId;i||(console.log(f__default.default.red("No project ID specified")),console.log(f__default.default.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(f__default.default.bold("VAIF Functions Deploy")),console.log(""),e.start("Scanning for function files...");let s=___default.default.resolve("functions"),a=___default.default.resolve("src/functions"),l=[];if(t.entrypoint){let c=___default.default.resolve(t.entrypoint);U__default.default.existsSync(c)||(e.fail(`File not found: ${t.entrypoint}`),process.exit(1)),l=[c];}else l=[...Me(s),...Me(a)];l.length===0&&(e.fail("No function files found"),console.log(f__default.default.yellow(`
 Place your functions in:`)),console.log(f__default.default.gray("  - ./functions/")),console.log(f__default.default.gray("  - ./src/functions/")),console.log(f__default.default.gray(`
 Or specify an entrypoint with --entrypoint`)),process.exit(1)),e.succeed(`Found ${l.length} function(s)`),t.name&&(l=l.filter(c=>___default.default.basename(c,___default.default.extname(c)).includes(t.name)),l.length===0&&(console.log(f__default.default.yellow(`
-No functions matching "${t.name}" found`)),process.exit(1))),console.log(""),console.log(f__default.default.gray("Functions to deploy:"));for(let c of l){let g=___default.default.basename(___default.default.dirname(c)),h=g==="functions"||g==="src"?___default.default.basename(c,___default.default.extname(c)):g,x=t.runtime||Oe(c);console.log(f__default.default.gray(`  - ${h} (${x})`));}if(console.log(""),t.dryRun){console.log(f__default.default.yellow("Dry run mode - no functions deployed."));return}let d=[];for(let c of l){let g=___default.default.basename(___default.default.dirname(c)),h=g==="functions"||g==="src"?___default.default.basename(c,___default.default.extname(c)):g,x=t.runtime||Oe(c);e.start(`Deploying ${h}...`);try{let V=U__default.default.readFileSync(c,"utf-8"),$=await Qt(n.token,i,h,t.envId);$||(e.text=`Creating ${h}...`,$=await Zt(n.token,i,{name:h,runtime:x,entrypoint:___default.default.basename(c),envId:t.envId})),e.text=`Deploying ${h}...`,await eo(n.token,$.id,V),e.succeed(`Deployed ${h}`),d.push({name:h,success:!0});}catch(V){let $=V instanceof Error?V.message:"Unknown error";e.fail(`Failed to deploy ${h}`),d.push({name:h,success:false,error:$});}}console.log("");let u=d.filter(c=>c.success).length;if(d.filter(c=>!c.success).length===0)console.log(f__default.default.green(`\u2713 Successfully deployed ${u} function(s)`));else {console.log(f__default.default.yellow(`Deployed ${u}/${d.length} function(s)`)),console.log(""),console.log(f__default.default.red("Failed deployments:"));for(let c of d.filter(g=>!g.success))console.log(f__default.default.red(`  - ${c.name}: ${c.error}`));}console.log("");}async function Be(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;try{r=await A(o);}catch{}let i=t.projectId||r?.projectId||process.env.VAIF_PROJECT_ID||n.projectId;i||(console.log(f__default.default.red("No project ID specified")),process.exit(1)),e.start("Fetching functions...");try{let s=await to(n.token,i,t.envId);if(e.stop(),s.length===0){console.log(f__default.default.yellow(`
+No functions matching "${t.name}" found`)),process.exit(1))),console.log(""),console.log(f__default.default.gray("Functions to deploy:"));for(let c of l){let g=___default.default.basename(___default.default.dirname(c)),h=g==="functions"||g==="src"?___default.default.basename(c,___default.default.extname(c)):g,x=t.runtime||Oe(c);console.log(f__default.default.gray(`  - ${h} (${x})`));}if(console.log(""),t.dryRun){console.log(f__default.default.yellow("Dry run mode - no functions deployed."));return}let d=[];for(let c of l){let g=___default.default.basename(___default.default.dirname(c)),h=g==="functions"||g==="src"?___default.default.basename(c,___default.default.extname(c)):g,x=t.runtime||Oe(c);e.start(`Deploying ${h}...`);try{let D=U__default.default.readFileSync(c,"utf-8"),$=await Qt(n.token,i,h,t.envId);$||(e.text=`Creating ${h}...`,$=await Zt(n.token,i,{name:h,runtime:x,entrypoint:___default.default.basename(c),envId:t.envId})),e.text=`Deploying ${h}...`,await eo(n.token,$.id,D),e.succeed(`Deployed ${h}`),d.push({name:h,success:!0});}catch(D){let $=D instanceof Error?D.message:"Unknown error";e.fail(`Failed to deploy ${h}`),d.push({name:h,success:false,error:$});}}console.log("");let u=d.filter(c=>c.success).length;if(d.filter(c=>!c.success).length===0)console.log(f__default.default.green(`\u2713 Successfully deployed ${u} function(s)`));else {console.log(f__default.default.yellow(`Deployed ${u}/${d.length} function(s)`)),console.log(""),console.log(f__default.default.red("Failed deployments:"));for(let c of d.filter(g=>!g.success))console.log(f__default.default.red(`  - ${c.name}: ${c.error}`));}console.log("");}async function Be(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;try{r=await A(o);}catch{}let i=t.projectId||r?.projectId||process.env.VAIF_PROJECT_ID||n.projectId;i||(console.log(f__default.default.red("No project ID specified")),process.exit(1)),e.start("Fetching functions...");try{let s=await to(n.token,i,t.envId);if(e.stop(),s.length===0){console.log(f__default.default.yellow(`
 No functions found`)),console.log(f__default.default.gray("Deploy your first function with: vaif functions deploy"));return}console.log(""),console.log(f__default.default.bold(`Functions (${s.length}):`)),console.log(""),console.log(f__default.default.gray("  "+"NAME".padEnd(25)+"RUNTIME".padEnd(15)+"STATUS".padEnd(12)+"INVOCATIONS".padEnd(14)+"LAST DEPLOYED")),console.log(f__default.default.gray("  "+"-".repeat(80)));for(let a of s){let l=a.deployStatus==="deployed"?f__default.default.green:a.deployStatus==="deploying"?f__default.default.yellow:a.deployStatus==="failed"?f__default.default.red:f__default.default.gray;console.log("  "+a.name.padEnd(25)+a.runtime.padEnd(15)+l(a.deployStatus.padEnd(12))+String(a.invocationCount??0).padEnd(14)+(a.deployedAt?new Date(a.deployedAt).toLocaleDateString():"-"));}console.log("");}catch(s){e.fail("Failed to fetch functions"),s instanceof Error&&console.log(f__default.default.red(`
 Error: ${s.message}`)),process.exit(1);}}var Z=process.env.VAIF_API_URL||"https://api.vaif.studio";async function oo(t,e,n,o,r){let i=await fetch(`${Z}/projects/${e}/db/seed`,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"},body:JSON.stringify({table:n,records:o,truncate:r?.truncate??false})});if(!i.ok){let s=await i.text();throw new Error(`Failed to seed ${n}: ${s}`)}return i.json()}async function no(t,e){let n=await fetch(`${Z}/projects/${e}/db/reset`,{method:"POST",headers:{Authorization:`Bearer ${t}`,"Content-Type":"application/json"}});if(!n.ok){let o=await n.text();throw new Error(`Failed to reset database: ${o}`)}return n.json()}function ge(t){let e=[];if(!U__default.default.existsSync(t))return e;let n=U__default.default.readdirSync(t,{withFileTypes:true});for(let o of n)if(o.isFile()){let r=___default.default.extname(o.name).toLowerCase();(r===".json"||r===".ts"||r===".js")&&e.push(___default.default.join(t,o.name));}return e.sort()}async function qe(t){let e=___default.default.extname(t).toLowerCase();if(e===".json"){let n=U__default.default.readFileSync(t,"utf-8"),o=JSON.parse(n);return Array.isArray(o)?[{table:___default.default.basename(t,e),data:o}]:o.table&&o.data?[o]:Object.entries(o).map(([r,i])=>({table:r,data:i}))}else if(e===".ts"||e===".js"){let n=await import(t),o=n.default||n;return typeof o=="function"?o():o}throw new Error(`Unsupported file format: ${e}`)}async function Ye(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;try{r=await A(o);}catch{}let i=t.projectId||r?.projectId||process.env.VAIF_PROJECT_ID||n.projectId;i||(console.log(f__default.default.red("No project ID specified")),console.log(f__default.default.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(f__default.default.bold("VAIF Database Seed")),console.log("");let s=[];if(t.file){let u=___default.default.resolve(t.file);U__default.default.existsSync(u)||(console.log(f__default.default.red(`File not found: ${t.file}`)),process.exit(1)),s=[u];}else {let u=___default.default.resolve("seeds"),p=___default.default.resolve("prisma/seed"),c=___default.default.resolve("db/seeds");s=[...ge(u),...ge(p),...ge(c)];}s.length===0&&(console.log(f__default.default.yellow("No seed files found")),console.log(f__default.default.gray(`
 Place your seed files in one of these directories:`)),console.log(f__default.default.gray("  - ./seeds/")),console.log(f__default.default.gray("  - ./prisma/seed/")),console.log(f__default.default.gray("  - ./db/seeds/")),console.log(f__default.default.gray(`
@@ -3875,41 +3875,75 @@ ${s}
 
 ${a}
 
-## Authentication
+## Authentication (End-User Auth)
 
-\`\`\`typescript
-import { createAuthClient } from "@vaiftech/auth";
+VAIF provides **project-scoped** authentication for your app's end-users. All auth routes are scoped to your project ID.
 
-const auth = createAuthClient({
-  url: "${o}",
-  apiKey: "${n}",
+### API Routes
+
+| Route | Method | Auth | Description |
+|-------|--------|------|-------------|
+| \`/projects/${e}/auth/signup\` | POST | None (public) | Register a new user |
+| \`/projects/${e}/auth/login\` | POST | None (public) | Login with email/password |
+| \`/projects/${e}/auth/refresh\` | POST | Cookie | Refresh access token |
+
+### Signup
+
+\`\`\`typescript
+const res = await fetch("${o}/projects/${e}/auth/signup", {
+  method: "POST",
+  headers: { "Content-Type": "application/json" },
+  body: JSON.stringify({
+    email: "user@example.com",
+    password: "securePassword123",
+    metadata: { displayName: "Jane Doe" },  // optional
+  }),
 });
+const { accessToken, expiresIn, user } = await res.json();
+// accessToken: JWT with { sub: userId, email, projectId, type: "project_user" }
+\`\`\`
 
-// Sign up
-const { user, session } = await auth.signUp({
-  email: "user@example.com",
-  password: "securePassword123",
+### Login
+
+\`\`\`typescript
+const res = await fetch("${o}/projects/${e}/auth/login", {
+  method: "POST",
+  headers: { "Content-Type": "application/json" },
+  body: JSON.stringify({
+    email: "user@example.com",
+    password: "securePassword123",
+  }),
 });
+const { accessToken, expiresIn, user } = await res.json();
+\`\`\`
 
-// Sign in with password
-const { session } = await auth.signInWithPassword({
-  email: "user@example.com",
-  password: "securePassword123",
+### Token Refresh
+
+\`\`\`typescript
+// Refresh token is stored as httpOnly cookie (project_refresh_token)
+// and sent automatically with same-origin requests
+const res = await fetch("${o}/projects/${e}/auth/refresh", {
+  method: "POST",
+  credentials: "include",  // sends the httpOnly cookie
 });
+const { accessToken, expiresIn, user } = await res.json();
+\`\`\`
 
-// Sign in with OAuth
-await auth.signInWithOAuth({ provider: "google" });
+### Using Auth in Your App
 
-// Session management
-const currentSession = await auth.getSession();
-await auth.signOut();
+\`\`\`typescript
+// Store the access token and use it for authenticated requests
+const headers = {
+  Authorization: \\\`Bearer \\\${accessToken}\\\`,
+  "x-api-key": "${n}",
+};
 
-// Listen for auth state changes
-auth.onAuthStateChange((event) => {
-  console.log("Auth event:", event.event, event.session);
-});
+// The JWT contains: { sub: userId, email, projectId, type: "project_user" }
+// Use this with RLS to scope data to the current user
 \`\`\`
 
+> **Important**: Auth routes are at \`/projects/{projectId}/auth/*\`, NOT \`/auth/*\`. The \`/auth/*\` routes are for VAIF Studio platform accounts, not your app's end-users.
+
 ## Storage
 
 \`\`\`typescript
@@ -3934,11 +3968,13 @@ const files = await vaif.storage.list("avatars", { limit: 100 });
 
 \`\`\`typescript
 // Invoke a serverless function
-const result = await vaif.functions.invoke("send-welcome-email", {
+const result = await vaif.functions.invoke("send_welcome_email", {
   body: { userId: "user_123", template: "welcome" },
 });
 \`\`\`
 
+> **Function naming**: Names must be alphanumeric and underscores only (\`^[a-zA-Z0-9_]+$\`). Use \`send_email\` not \`send-email\`.
+
 ## Realtime
 
 \`\`\`typescript
@@ -4225,11 +4261,30 @@ const page2 = await vaif.from("posts").select().limit(20).offset(20);
 
 ### Auth Headers
 
-All authenticated requests require:
-- \`Authorization: Bearer <jwt_token>\` \u2014 for user-scoped requests
-- \`x-api-key: <api_key>\` \u2014 for server-side / service-role requests
-- \`x-project-id: ${e}\` \u2014 identifies the project
+VAIF uses **two auth modes** \u2014 choose the right one for each operation:
+
+| Auth Mode | Header | Used For |
+|-----------|--------|----------|
+| **API Key** | \`x-api-key: vk_xxx\` | Data-plane: CRUD (\`/generated/*\`), storage uploads/downloads, function invocation |
+| **JWT Token** | \`Authorization: Bearer <jwt>\` | Control-plane: schema introspection, project management, function CRUD, bucket creation |
+
+> **Important**: API keys do NOT work for control-plane endpoints (creating functions, managing buckets, schema changes). Those require a JWT session token. The MCP server handles this automatically by using both auth modes.
+
+### MCP Tools (via .mcp.json)
+
+The \`.mcp.json\` file configures an MCP server that gives Claude Code direct access to your VAIF project. Available tools:
+
+| Tool | What it does |
+|------|-------------|
+| \`list_tables\`, \`describe_table\` | Inspect database schema |
+| \`query_rows\`, \`insert_row\`, \`update_row\`, \`delete_row\` | CRUD operations on any table |
+| \`create_function\`, \`deploy_function\`, \`invoke_function\` | Create, deploy, and call serverless functions |
+| \`create_bucket\`, \`list_buckets\`, \`list_files\`, \`get_signed_url\` | Storage management |
+| \`enable_realtime\`, \`realtime_status\` | Enable/check realtime subscriptions |
+| \`get_schema\` | Full schema as JSON |
+
+> **Note**: MCP tools are only available to the main Claude Code session, not to spawned sub-agents (Task tool). The main session should handle all VAIF backend operations directly.
 `}async function dt(t){let e=Q__default.default(),n=I();(!n||!n.token)&&(console.log(f__default.default.red("Not logged in")),console.log(f__default.default.gray("Run `vaif login` first to authenticate")),process.exit(1));let o=t.config||"vaif.config.json",r=null;try{r=await A(o);}catch{}let i=fo(t,r,n);i||(console.log(f__default.default.yellow(`No project ID specified \u2014 fetching your projects...
 `)),i=await go(n.token),i||(console.log(f__default.default.gray(`
   Tip: pass --project-id <id> or set projectId in vaif.config.json`)),process.exit(1)));let s=___default.default.resolve(t.outputDir||".");console.log(""),console.log(f__default.default.bold("VAIF Claude Code Setup")),console.log(f__default.default.gray(`  Project: ${i}`)),console.log(""),e.start("Fetching database schema...");let a={tables:[]};try{let p=await fetch(`${J}/schema-engine/introspect/${i}`,{headers:{Authorization:`Bearer ${n.token}`}});p.ok?(a=await p.json(),e.succeed(`Fetched schema (${a.tables?.length||0} tables)`)):e.warn("Could not fetch schema \u2014 continuing without it");}catch{e.warn("Could not fetch schema \u2014 continuing without it");}e.start("Fetching project info...");let l=i,d=J;try{let p=await fetch(`${J}/projects/${i}`,{headers:{Authorization:`Bearer ${n.token}`}});if(p.ok){let c=await p.json(),g=c.project||c;l=g.name||i,d=g.apiUrl||J,e.succeed(`Project: ${l}`);}else e.warn("Could not fetch project info \u2014 using defaults");}catch{e.warn("Could not fetch project info \u2014 using defaults");}let u=t.apiKey||r?.api?.apiKey||"";if(!u){e.start("Generating API key for Claude Code...");try{let p=`claude-code-${Date.now()}`,c=await fetch(`${J}/projects/${i}/api-keys`,{method:"POST",headers:{Authorization:`Bearer ${n.token}`,"Content-Type":"application/json"},body:JSON.stringify({name:p,scopes:["crud","realtime","functions","storage"]})});if(c.ok){let g=await c.json();u=g.apiKey||g.key,e.succeed(`Generated API key: ${p}`);}else e.fail("Could not auto-generate API key"),console.log(f__default.default.yellow("  Pass one with --api-key or generate via `vaif keys generate`")),process.exit(1);}catch{e.fail("Could not auto-generate API key"),console.log(f__default.default.yellow("  Pass one with --api-key or generate via `vaif keys generate`")),process.exit(1);}}if(!t.skipMcp){e.start("Writing .mcp.json...");let p={mcpServers:{"vaif-studio":{command:"npx",args:["@vaiftech/mcp"],env:{VAIF_API_KEY:u,VAIF_PROJECT_ID:i,VAIF_API_URL:d,VAIF_AUTH_TOKEN:n.token}}}},c=___default.default.join(s,".mcp.json");U__default.default.writeFileSync(c,JSON.stringify(p,null,2)+`
-`,"utf-8"),e.succeed(`Written ${f__default.default.cyan(".mcp.json")}`);}if(!t.skipClaudeMd){e.start("Writing CLAUDE.md...");let p=vo({projectId:i,apiKey:u,apiUrl:d,projectName:l,schema:a}),c=___default.default.join(s,"CLAUDE.md");U__default.default.writeFileSync(c,p,"utf-8"),e.succeed(`Written ${f__default.default.cyan("CLAUDE.md")}`);}console.log(""),console.log(f__default.default.green.bold("  Claude Code integration configured!")),console.log(""),t.skipMcp||console.log(f__default.default.gray("  MCP Server:  ")+f__default.default.white(".mcp.json")),t.skipClaudeMd||console.log(f__default.default.gray("  Context:     ")+f__default.default.white("CLAUDE.md")),console.log(""),console.log(f__default.default.bold("  Next steps:")),console.log(f__default.default.gray("  1. Open this project in Claude Code")),console.log(f__default.default.gray("  2. The MCP server auto-connects to your VAIF project")),console.log(f__default.default.gray("  3. Ask Claude to query, modify, or build against your schema")),console.log("");}var pt="1.9.3",he=f__default.default.hex("#00f0ff"),ye=f__default.default.hex("#7b61ff"),ve=f__default.default.hex("#ff3dff"),be=f__default.default.hex("#00ff9d"),S=f__default.default.hex("#555570"),B=f__default.default.hex("#00f0ff");function bo(){console.log(""),console.log(he("  \u2566  \u2566")+ye("\u2554\u2550\u2557\u2566")+ve("\u2554\u2550\u2557  ")+be("\u2554\u2550\u2557\u2566  \u2566")),console.log(he("  \u255A\u2557\u2554\u255D")+ye("\u2560\u2550\u2563\u2551")+ve("\u2560\u2563   ")+be("\u2551  \u2551  \u2551")),console.log(he("   \u255A\u255D ")+ye("\u2569 \u2569\u2569")+ve("\u255A    ")+be("\u255A\u2550\u255D\u2569\u2550\u255D\u2569")),console.log(""),console.log(S("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(B("  VAIF Studio CLI")+S(` v${pt}`)),console.log(S("  Build full-stack apps at lightning speed")),console.log(S("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(""),console.log(f__default.default.bold("  Quick Start")),console.log(S("  $ ")+B("vaif login")+S("                    Authenticate")),console.log(S("  $ ")+B("vaif init -t react-spa")+S("       Scaffold project")),console.log(S("  $ ")+B("vaif db push")+S("                 Push migrations")),console.log(S("  $ ")+B("vaif generate")+S("                Generate types")),console.log(S("  $ ")+B("vaif functions deploy")+S("        Deploy functions")),console.log(""),console.log(f__default.default.bold("  Categories")),console.log(S("    auth     ")+f__default.default.white("login, logout, whoami")),console.log(S("    project  ")+f__default.default.white("init, templates, info, status")),console.log(S("    schema   ")+f__default.default.white("pull, push, generate")),console.log(S("    database ")+f__default.default.white("db push, db pull, db seed, db reset")),console.log(S("    deploy   ")+f__default.default.white("functions deploy, functions list")),console.log(S("    security ")+f__default.default.white("keys, secrets")),console.log(S("    ai       ")+f__default.default.white("claude-setup")),console.log(""),console.log(S("  Run ")+B("vaif <command> --help")+S(" for details")),console.log(S("  Docs: ")+f__default.default.underline("https://docs.vaif.studio")),console.log("");}commander.program.name("vaif").description("VAIF CLI - Type generation and development tools").version(pt);commander.program.command("login").description("Authenticate with VAIF (opens browser)").option("-e, --email","Login with email/password instead of browser").option("-p, --project-id <id>","Default project ID").action(Te);commander.program.command("logout").description("Log out and remove stored credentials").action(Pe);commander.program.command("whoami").description("Show current authenticated user").action(Fe);commander.program.command("init").description("Initialize VAIF configuration in your project").option("--typescript","Setup for TypeScript project").option("-f, --force","Overwrite existing config").option("-t, --template <name>","Scaffold from a template (run vaif templates for list)").option("--features <features>","Comma-separated features to include: auth,database,realtime,storage,functions").option("--add-features <features>","Add features to an existing project (requires --template)").action(Ne);commander.program.command("templates").alias("tpl").description("List available project templates").action(Le);commander.program.command("info").description("Show project information (name, region, URLs)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(st);commander.program.command("status").description("Show project status (tables, functions, storage, connections)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(rt);commander.program.command("pull").description("Pull database schema from your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-o, --output <path>","Output file path","vaif.schema.json").option("-s, --schema <name>","Schema name","public").option("-p, --project-id <id>","Project ID (overrides config)").action(Ve);commander.program.command("push").description("Push local schema changes to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-s, --schema <path>","Schema file path","vaif.schema.json").option("-p, --project-id <id>","Project ID (overrides config)").option("--dry-run","Preview changes without applying").option("-f, --force","Apply changes without confirmation").action($e);commander.program.command("generate").alias("gen").description("Generate TypeScript types from your database schema").option("-c, --connection <url>","Database connection string").option("-o, --output <path>","Output file path","./src/types/database.ts").option("--schema <name>","Schema name","public").option("--config <path>","Config file path","vaif.config.json").option("--dry-run","Preview generated types without writing").action(je);var ut=commander.program.command("functions").alias("fn").description("Manage serverless functions");ut.command("deploy").description("Deploy functions to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").option("-n, --name <name>","Function name filter").option("-r, --runtime <runtime>","Runtime (nodejs, typescript, python)").option("--entrypoint <file>","Specific entrypoint file").option("--dry-run","Preview deployment without deploying").action(ze);ut.command("list").alias("ls").description("List deployed functions").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").action(Be);var ae=commander.program.command("db").description("Database management commands");ae.command("push").description("Push local Drizzle migrations to VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-d, --dir <path>","Migrations directory","./drizzle").option("--dry-run","Preview without applying").action(Je);ae.command("pull").description("Pull schema from VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-o, --output <path>","Output file","vaif.schema.json").action(Ge);ae.command("seed").description("Seed your database with test data").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --file <path>","Specific seed file").option("-t, --table <name>","Seed specific table only").option("--truncate","Truncate tables before seeding").option("--dry-run","Preview seeding without inserting data").action(Ye);ae.command("reset").description("Reset database (drop all tables and data)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --force","Confirm reset (required)").action(We);var ft=commander.program.command("keys").description("Manage API keys");ft.command("generate").description("Generate a new API key").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-n, --name <name>","Key name").action(Ze);ft.command("list").alias("ls").description("List API keys").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(et);var ie=commander.program.command("secrets").alias("sec").description("Manage function secrets");ie.command("set <name> [value]").description("Create or update a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").option("--from-file <path>","Read secret value from a file").action(tt);ie.command("list").alias("ls").description("List all secrets (names only)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(ot);ie.command("get <name>").description("Reveal a secret value").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(nt);ie.command("delete <name>").description("Delete a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(at);commander.program.command("claude-setup").description("Configure Claude Code integration (MCP server + CLAUDE.md)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID").option("-k, --api-key <key>","API key for MCP server").option("--skip-mcp","Skip generating .mcp.json").option("--skip-claude-md","Skip generating CLAUDE.md").option("-o, --output-dir <dir>","Output directory",".").action(dt);process.argv.slice(2).length||(bo(),process.exit(0));commander.program.parse(process.argv);
+`,"utf-8"),e.succeed(`Written ${f__default.default.cyan(".mcp.json")}`);}if(!t.skipClaudeMd){e.start("Writing CLAUDE.md...");let p=vo({projectId:i,apiKey:u,apiUrl:d,projectName:l,schema:a}),c=___default.default.join(s,"CLAUDE.md");U__default.default.writeFileSync(c,p,"utf-8"),e.succeed(`Written ${f__default.default.cyan("CLAUDE.md")}`);}console.log(""),console.log(f__default.default.green.bold("  Claude Code integration configured!")),console.log(""),t.skipMcp||console.log(f__default.default.gray("  MCP Server:  ")+f__default.default.white(".mcp.json")),t.skipClaudeMd||console.log(f__default.default.gray("  Context:     ")+f__default.default.white("CLAUDE.md")),console.log(""),console.log(f__default.default.bold("  Next steps:")),console.log(f__default.default.gray("  1. Open this project in Claude Code")),console.log(f__default.default.gray("  2. The MCP server auto-connects to your VAIF project")),console.log(f__default.default.gray("  3. Ask Claude to query, modify, or build against your schema")),console.log("");}var pt="1.9.5",he=f__default.default.hex("#00f0ff"),ye=f__default.default.hex("#7b61ff"),ve=f__default.default.hex("#ff3dff"),be=f__default.default.hex("#00ff9d"),S=f__default.default.hex("#555570"),B=f__default.default.hex("#00f0ff");function bo(){console.log(""),console.log(he("  \u2566  \u2566")+ye("\u2554\u2550\u2557\u2566")+ve("\u2554\u2550\u2557  ")+be("\u2554\u2550\u2557\u2566  \u2566")),console.log(he("  \u255A\u2557\u2554\u255D")+ye("\u2560\u2550\u2563\u2551")+ve("\u2560\u2563   ")+be("\u2551  \u2551  \u2551")),console.log(he("   \u255A\u255D ")+ye("\u2569 \u2569\u2569")+ve("\u255A    ")+be("\u255A\u2550\u255D\u2569\u2550\u255D\u2569")),console.log(""),console.log(S("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(B("  VAIF Studio CLI")+S(` v${pt}`)),console.log(S("  Build full-stack apps at lightning speed")),console.log(S("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(""),console.log(f__default.default.bold("  Quick Start")),console.log(S("  $ ")+B("vaif login")+S("                    Authenticate")),console.log(S("  $ ")+B("vaif init -t react-spa")+S("       Scaffold project")),console.log(S("  $ ")+B("vaif db push")+S("                 Push migrations")),console.log(S("  $ ")+B("vaif generate")+S("                Generate types")),console.log(S("  $ ")+B("vaif functions deploy")+S("        Deploy functions")),console.log(""),console.log(f__default.default.bold("  Categories")),console.log(S("    auth     ")+f__default.default.white("login, logout, whoami")),console.log(S("    project  ")+f__default.default.white("init, templates, info, status")),console.log(S("    schema   ")+f__default.default.white("pull, push, generate")),console.log(S("    database ")+f__default.default.white("db push, db pull, db seed, db reset")),console.log(S("    deploy   ")+f__default.default.white("functions deploy, functions list")),console.log(S("    security ")+f__default.default.white("keys, secrets")),console.log(S("    ai       ")+f__default.default.white("claude-setup")),console.log(""),console.log(S("  Run ")+B("vaif <command> --help")+S(" for details")),console.log(S("  Docs: ")+f__default.default.underline("https://docs.vaif.studio")),console.log("");}commander.program.name("vaif").description("VAIF CLI - Type generation and development tools").version(pt);commander.program.command("login").description("Authenticate with VAIF (opens browser)").option("-e, --email","Login with email/password instead of browser").option("-p, --project-id <id>","Default project ID").action(Te);commander.program.command("logout").description("Log out and remove stored credentials").action(Pe);commander.program.command("whoami").description("Show current authenticated user").action(Fe);commander.program.command("init").description("Initialize VAIF configuration in your project").option("--typescript","Setup for TypeScript project").option("-f, --force","Overwrite existing config").option("-t, --template <name>","Scaffold from a template (run vaif templates for list)").option("--features <features>","Comma-separated features to include: auth,database,realtime,storage,functions").option("--add-features <features>","Add features to an existing project (requires --template)").action(Le);commander.program.command("templates").alias("tpl").description("List available project templates").action(Ne);commander.program.command("info").description("Show project information (name, region, URLs)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(st);commander.program.command("status").description("Show project status (tables, functions, storage, connections)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(rt);commander.program.command("pull").description("Pull database schema from your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-o, --output <path>","Output file path","vaif.schema.json").option("-s, --schema <name>","Schema name","public").option("-p, --project-id <id>","Project ID (overrides config)").action(De);commander.program.command("push").description("Push local schema changes to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-s, --schema <path>","Schema file path","vaif.schema.json").option("-p, --project-id <id>","Project ID (overrides config)").option("--dry-run","Preview changes without applying").option("-f, --force","Apply changes without confirmation").action($e);commander.program.command("generate").alias("gen").description("Generate TypeScript types from your database schema").option("-c, --connection <url>","Database connection string").option("-o, --output <path>","Output file path","./src/types/database.ts").option("--schema <name>","Schema name","public").option("--config <path>","Config file path","vaif.config.json").option("--dry-run","Preview generated types without writing").action(Ce);var ut=commander.program.command("functions").alias("fn").description("Manage serverless functions");ut.command("deploy").description("Deploy functions to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").option("-n, --name <name>","Function name filter").option("-r, --runtime <runtime>","Runtime (nodejs, typescript, python)").option("--entrypoint <file>","Specific entrypoint file").option("--dry-run","Preview deployment without deploying").action(ze);ut.command("list").alias("ls").description("List deployed functions").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").action(Be);var ae=commander.program.command("db").description("Database management commands");ae.command("push").description("Push local Drizzle migrations to VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-d, --dir <path>","Migrations directory","./drizzle").option("--dry-run","Preview without applying").action(Je);ae.command("pull").description("Pull schema from VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-o, --output <path>","Output file","vaif.schema.json").action(Ge);ae.command("seed").description("Seed your database with test data").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --file <path>","Specific seed file").option("-t, --table <name>","Seed specific table only").option("--truncate","Truncate tables before seeding").option("--dry-run","Preview seeding without inserting data").action(Ye);ae.command("reset").description("Reset database (drop all tables and data)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --force","Confirm reset (required)").action(We);var ft=commander.program.command("keys").description("Manage API keys");ft.command("generate").description("Generate a new API key").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-n, --name <name>","Key name").action(Ze);ft.command("list").alias("ls").description("List API keys").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(et);var ie=commander.program.command("secrets").alias("sec").description("Manage function secrets");ie.command("set <name> [value]").description("Create or update a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").option("--from-file <path>","Read secret value from a file").action(tt);ie.command("list").alias("ls").description("List all secrets (names only)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(ot);ie.command("get <name>").description("Reveal a secret value").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(nt);ie.command("delete <name>").description("Delete a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(at);commander.program.command("claude-setup").description("Configure Claude Code integration (MCP server + CLAUDE.md)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID").option("-k, --api-key <key>","API key for MCP server").option("--skip-mcp","Skip generating .mcp.json").option("--skip-claude-md","Skip generating CLAUDE.md").option("-o, --output-dir <dir>","Output directory",".").action(dt);process.argv.slice(2).length||(bo(),process.exit(0));commander.program.parse(process.argv);

package/dist/cli.js

@@ -1,37 +1,37 @@
 #!/usr/bin/env node
-import {c,d as d$1,e,h,g,f,b,a}from'./chunk-T7GOLIY4.js';import'dotenv/config';import {program}from'commander';import d from'chalk';import F from'fs';import $ from'path';import K from'ora';import We from'readline';var Be=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Je(o,e,t="public"){let n=await fetch(`${Be}/projects/${e}/schema?schema=${t}`,{headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"}});if(!n.ok){let a=await n.text();throw new Error(`Failed to fetch schema: ${a}`)}return n.json()}async function ce(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;e.start("Loading configuration...");try{a$1=await a(n);}catch(i){e.fail("Failed to load config"),console.log(d.red(`
-Error: ${i}`)),process.exit(1);}a$1||(e.fail("No configuration found"),console.log(d.yellow("\nRun `vaif init` to create a configuration file.")),process.exit(1));let r=o.projectId||a$1.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(e.fail("No project ID specified"),console.log(d.yellow(`
-Set projectId in vaif.config.json or use --project-id flag.`)),process.exit(1)),e.text="Fetching remote schema...";try{let i=o.schema||a$1.database?.schema||"public",s=await Je(t.token,r,i);e.succeed("Schema fetched successfully");let c=o.output||$.resolve("vaif.schema.json"),f={$schema:"https://vaif.studio/schemas/schema.json",projectId:r,schema:i,pulledAt:new Date().toISOString(),...s};F.writeFileSync(c,JSON.stringify(f,null,2),"utf-8"),console.log(""),console.log(d.green(`Schema saved to: ${c}`)),console.log(""),console.log(d.gray("Schema summary:")),console.log(d.gray(`  Tables: ${(s.tables||[]).length}`)),console.log(d.gray(`  Enums: ${(s.enums||[]).length}`)),console.log(d.gray(`  Functions: ${(s.functions||[]).length}`)),console.log(""),console.log(d.gray("Next steps:")),console.log(d.gray("  - Run `vaif generate` to generate TypeScript types")),console.log(d.gray("  - Edit the schema and run `vaif push` to deploy changes")),console.log("");}catch(i){e.fail("Failed to fetch schema"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}var ge=process.env.VAIF_API_URL||"https://api.vaif.studio";function Ge(o){let e=We.createInterface({input:process.stdin,output:process.stdout});return new Promise(t=>{e.question(o,n=>{e.close(),t(n);});})}async function Ye(o,e,t){let n=await fetch(`${ge}/projects/${e}/schema/preview`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({schema:t})});if(!n.ok){let a=await n.text();throw new Error(`Failed to preview changes: ${a}`)}return n.json()}async function He(o,e,t){let n=await fetch(`${ge}/projects/${e}/schema/apply`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({schema:t})});if(!n.ok){let a=await n.text();throw new Error(`Failed to apply changes: ${a}`)}return n.json()}function Qe(o){if(console.log(""),console.log(d.bold("Schema Changes:")),console.log(""),o.added.length===0&&o.modified.length===0&&o.removed.length===0){console.log(d.gray("  No changes detected. Schema is up to date."));return}if(o.added.length>0){console.log(d.green.bold("  + Added:"));for(let e of o.added)console.log(d.green(`    + ${e.type}: ${e.name}`));console.log("");}if(o.modified.length>0){console.log(d.yellow.bold("  ~ Modified:"));for(let e of o.modified){console.log(d.yellow(`    ~ ${e.type}: ${e.name}`));for(let t of e.changes)console.log(d.gray(`        ${t}`));}console.log("");}if(o.removed.length>0){console.log(d.red.bold("  - Removed:"));for(let e of o.removed)console.log(d.red(`    - ${e.type}: ${e.name}`));console.log("");}}async function de(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;e.start("Loading configuration...");try{a$1=await a(n);}catch(c){e.fail("Failed to load config"),console.log(d.red(`
-Error: ${c}`)),process.exit(1);}a$1||(e.fail("No configuration found"),console.log(d.yellow("\nRun `vaif init` to create a configuration file.")),process.exit(1));let r=o.projectId||a$1.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(e.fail("No project ID specified"),console.log(d.yellow(`
-Set projectId in vaif.config.json or use --project-id flag.`)),process.exit(1));let i=o.schema||$.resolve("vaif.schema.json");F.existsSync(i)||(e.fail("No local schema found"),console.log(d.yellow(`
-Expected schema file at: ${i}`)),console.log(d.gray("Run `vaif pull` first to fetch the current schema.")),process.exit(1));let s;try{let c=F.readFileSync(i,"utf-8");s=JSON.parse(c);}catch(c){e.fail("Failed to parse schema file"),c instanceof Error&&console.log(d.red(`
-Error: ${c.message}`)),process.exit(1);}e.text="Calculating schema changes...";try{let{diff:c,sql:f}=await Ye(t.token,r,s);if(e.stop(),Qe(c),c.added.length===0&&c.modified.length===0&&c.removed.length===0){console.log("");return}if(f.length>0){console.log(d.bold("SQL Migrations:")),console.log("");for(let g of f)console.log(d.gray(`  ${g}`));console.log("");}if(o.dryRun){console.log(d.yellow("Dry run mode - no changes applied.")),console.log(d.gray("Remove --dry-run to apply these changes."));return}if(!o.force){c.removed.length>0&&(console.log(d.red.bold("\u26A0\uFE0F  Warning: This will remove tables/columns from your database.")),console.log(d.red("    This action cannot be undone!")),console.log(""));let l=await Ge(d.cyan("Apply these changes? [y/N] "));if(l.toLowerCase()!=="y"&&l.toLowerCase()!=="yes"){console.log(d.yellow(`
-Cancelled. No changes applied.`));return}}e.start("Applying schema changes...");let p=await He(t.token,r,s);if(p.success){if(e.succeed("Schema changes applied successfully"),console.log(""),p.migrations.length>0){console.log(d.gray("Migrations applied:"));for(let g of p.migrations)console.log(d.gray(`  - ${g}`));console.log("");}console.log(d.green("Your database schema is now up to date.")),console.log(d.gray("Run `vaif generate` to update your TypeScript types.")),console.log("");}else e.fail("Failed to apply some changes");}catch(c){e.fail("Failed to push schema changes"),c instanceof Error&&console.log(d.red(`
-Error: ${c.message}`)),process.exit(1);}}var z=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Xe(o,e,t,n){let a=new URL(`${z}/functions/project/${e}`);n&&a.searchParams.set("envId",n);let r=await fetch(a.toString(),{headers:{Authorization:`Bearer ${o}`}});if(!r.ok)return null;let i=await r.json(),s=i.functions||i;return Array.isArray(s)&&s.find(c=>c.name===t)||null}async function Ze(o,e,t){let n=await fetch(`${z}/functions/`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({projectId:e,name:t.name,runtime:t.runtime,entrypoint:t.entrypoint,envId:t.envId})});if(!n.ok){let a=await n.text();throw new Error(`Failed to create function: ${a}`)}return n.json()}async function eo(o,e,t){let n=await fetch(`${z}/functions/${e}/source`,{method:"PUT",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({sourceCode:t})});if(!n.ok){let a=await n.text();throw new Error(`Failed to deploy source: ${a}`)}}async function oo(o,e,t){let n=new URL(`${z}/functions/project/${e}`);t&&n.searchParams.set("envId",t);let a=await fetch(n.toString(),{headers:{Authorization:`Bearer ${o}`}});if(!a.ok){let i=await a.text();throw new Error(`Failed to list functions: ${i}`)}let r=await a.json();return r.functions||r}function fe(o){switch($.extname(o).toLowerCase()){case ".ts":return "typescript";case ".js":case ".mjs":return "nodejs";case ".py":return "python";case ".go":return "go";case ".rs":return "rust";default:return "nodejs"}}function pe(o){let e=[],t=[".ts",".js",".mjs",".py",".go",".rs"],n=["drizzle.config.ts","tsconfig.json","package.json"];if(!F.existsSync(o))return e;let a=F.readdirSync(o,{withFileTypes:true});for(let r of a){let i=$.join(o,r.name);if(r.isDirectory()){if(r.name!=="node_modules"&&!r.name.startsWith(".")){let s=F.readdirSync(i,{withFileTypes:true});for(let c of s)if(c.isFile()){let f=$.extname(c.name).toLowerCase();if(t.includes(f)){e.push($.join(i,c.name));break}}}}else if(r.isFile()){let s=$.extname(r.name).toLowerCase();t.includes(s)&&!n.includes(r.name)&&e.push(i);}}return e}async function he(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(d.bold("VAIF Functions Deploy")),console.log(""),e.start("Scanning for function files...");let i=$.resolve("functions"),s=$.resolve("src/functions"),c=[];if(o.entrypoint){let l=$.resolve(o.entrypoint);F.existsSync(l)||(e.fail(`File not found: ${o.entrypoint}`),process.exit(1)),c=[l];}else c=[...pe(i),...pe(s)];c.length===0&&(e.fail("No function files found"),console.log(d.yellow(`
-Place your functions in:`)),console.log(d.gray("  - ./functions/")),console.log(d.gray("  - ./src/functions/")),console.log(d.gray(`
-Or specify an entrypoint with --entrypoint`)),process.exit(1)),e.succeed(`Found ${c.length} function(s)`),o.name&&(c=c.filter(l=>$.basename(l,$.extname(l)).includes(o.name)),c.length===0&&(console.log(d.yellow(`
-No functions matching "${o.name}" found`)),process.exit(1))),console.log(""),console.log(d.gray("Functions to deploy:"));for(let l of c){let u=$.basename($.dirname(l)),y=u==="functions"||u==="src"?$.basename(l,$.extname(l)):u,D=o.runtime||fe(l);console.log(d.gray(`  - ${y} (${D})`));}if(console.log(""),o.dryRun){console.log(d.yellow("Dry run mode - no functions deployed."));return}let f=[];for(let l of c){let u=$.basename($.dirname(l)),y=u==="functions"||u==="src"?$.basename(l,$.extname(l)):u,D=o.runtime||fe(l);e.start(`Deploying ${y}...`);try{let U=F.readFileSync(l,"utf-8"),L=await Xe(t.token,r,y,o.envId);L||(e.text=`Creating ${y}...`,L=await Ze(t.token,r,{name:y,runtime:D,entrypoint:$.basename(l),envId:o.envId})),e.text=`Deploying ${y}...`,await eo(t.token,L.id,U),e.succeed(`Deployed ${y}`),f.push({name:y,success:!0});}catch(U){let L=U instanceof Error?U.message:"Unknown error";e.fail(`Failed to deploy ${y}`),f.push({name:y,success:false,error:L});}}console.log("");let p=f.filter(l=>l.success).length;if(f.filter(l=>!l.success).length===0)console.log(d.green(`\u2713 Successfully deployed ${p} function(s)`));else {console.log(d.yellow(`Deployed ${p}/${f.length} function(s)`)),console.log(""),console.log(d.red("Failed deployments:"));for(let l of f.filter(u=>!u.success))console.log(d.red(`  - ${l.name}: ${l.error}`));}console.log("");}async function me(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),process.exit(1)),e.start("Fetching functions...");try{let i=await oo(t.token,r,o.envId);if(e.stop(),i.length===0){console.log(d.yellow(`
-No functions found`)),console.log(d.gray("Deploy your first function with: vaif functions deploy"));return}console.log(""),console.log(d.bold(`Functions (${i.length}):`)),console.log(""),console.log(d.gray("  "+"NAME".padEnd(25)+"RUNTIME".padEnd(15)+"STATUS".padEnd(12)+"INVOCATIONS".padEnd(14)+"LAST DEPLOYED")),console.log(d.gray("  "+"-".repeat(80)));for(let s of i){let c=s.deployStatus==="deployed"?d.green:s.deployStatus==="deploying"?d.yellow:s.deployStatus==="failed"?d.red:d.gray;console.log("  "+s.name.padEnd(25)+s.runtime.padEnd(15)+c(s.deployStatus.padEnd(12))+String(s.invocationCount??0).padEnd(14)+(s.deployedAt?new Date(s.deployedAt).toLocaleDateString():"-"));}console.log("");}catch(i){e.fail("Failed to fetch functions"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}var B=process.env.VAIF_API_URL||"https://api.vaif.studio";async function to(o,e,t,n,a){let r=await fetch(`${B}/projects/${e}/db/seed`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({table:t,records:n,truncate:a?.truncate??false})});if(!r.ok){let i=await r.text();throw new Error(`Failed to seed ${t}: ${i}`)}return r.json()}async function no(o,e){let t=await fetch(`${B}/projects/${e}/db/reset`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"}});if(!t.ok){let n=await t.text();throw new Error(`Failed to reset database: ${n}`)}return t.json()}function H(o){let e=[];if(!F.existsSync(o))return e;let t=F.readdirSync(o,{withFileTypes:true});for(let n of t)if(n.isFile()){let a=$.extname(n.name).toLowerCase();(a===".json"||a===".ts"||a===".js")&&e.push($.join(o,n.name));}return e.sort()}async function ye(o){let e=$.extname(o).toLowerCase();if(e===".json"){let t=F.readFileSync(o,"utf-8"),n=JSON.parse(t);return Array.isArray(n)?[{table:$.basename(o,e),data:n}]:n.table&&n.data?[n]:Object.entries(n).map(([a,r])=>({table:a,data:r}))}else if(e===".ts"||e===".js"){let t=await import(o),n=t.default||t;return typeof n=="function"?n():n}throw new Error(`Unsupported file format: ${e}`)}async function we(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(d.bold("VAIF Database Seed")),console.log("");let i=[];if(o.file){let p=$.resolve(o.file);F.existsSync(p)||(console.log(d.red(`File not found: ${o.file}`)),process.exit(1)),i=[p];}else {let p=$.resolve("seeds"),g=$.resolve("prisma/seed"),l=$.resolve("db/seeds");i=[...H(p),...H(g),...H(l)];}i.length===0&&(console.log(d.yellow("No seed files found")),console.log(d.gray(`
-Place your seed files in one of these directories:`)),console.log(d.gray("  - ./seeds/")),console.log(d.gray("  - ./prisma/seed/")),console.log(d.gray("  - ./db/seeds/")),console.log(d.gray(`
-Or specify a file with --file`)),console.log(d.gray(`
-Example seed file (seeds/users.json):`)),console.log(d.gray("  [")),console.log(d.gray('    { "name": "John Doe", "email": "john@example.com" },')),console.log(d.gray('    { "name": "Jane Doe", "email": "jane@example.com" }')),console.log(d.gray("  ]")),process.exit(1)),console.log(d.gray("Seed files found:"));for(let p of i)console.log(d.gray(`  - ${$.relative(process.cwd(),p)}`));if(console.log(""),o.truncate&&(console.log(d.yellow("\u26A0\uFE0F  Tables will be truncated before seeding")),console.log("")),o.dryRun){console.log(d.yellow("Dry run mode - no data will be inserted.")),console.log("");for(let p of i){e.start(`Loading ${$.basename(p)}...`);try{let g=await ye(p);e.stop();for(let l of g)o.table&&l.table!==o.table||(console.log(d.cyan(`Table: ${l.table}`)),console.log(d.gray(`  Records: ${l.data.length}`)),l.data.length>0&&console.log(d.gray(`  Sample: ${JSON.stringify(l.data[0],null,2).slice(0,100)}...`)),console.log(""));}catch(g){e.fail(`Failed to load ${$.basename(p)}`),g instanceof Error&&console.log(d.red(`  Error: ${g.message}`));}}return}let s=[];for(let p of i){e.start(`Processing ${$.basename(p)}...`);try{let g=await ye(p);e.stop();for(let l of g)if(!(o.table&&l.table!==o.table)){if(l.data.length===0){console.log(d.gray(`  Skipping ${l.table} (no records)`));continue}e.start(`Seeding ${l.table} (${l.data.length} records)...`);try{let u=await to(t.token,r,l.table,l.data,{truncate:o.truncate});e.succeed(`Seeded ${l.table}: ${u.inserted} records`),s.push({table:l.table,inserted:u.inserted});}catch(u){let y=u instanceof Error?u.message:"Unknown error";e.fail(`Failed to seed ${l.table}`),s.push({table:l.table,inserted:0,error:y});}}}catch(g){e.fail(`Failed to load ${$.basename(p)}`),g instanceof Error&&console.log(d.red(`  Error: ${g.message}`));}}console.log("");let c=s.reduce((p,g)=>p+g.inserted,0),f=s.filter(p=>p.error).length;if(f===0)console.log(d.green(`\u2713 Successfully seeded ${c} records across ${s.length} table(s)`));else {console.log(d.yellow(`Seeded ${c} records with ${f} error(s)`)),console.log(""),console.log(d.red("Errors:"));for(let p of s.filter(g=>g.error))console.log(d.red(`  - ${p.table}: ${p.error}`));}console.log("");}async function je(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1));let i=$.resolve(o.dir||"./drizzle");if(console.log(""),console.log(d.bold("VAIF Database Push")),console.log(""),!F.existsSync(i)){let g=$.resolve("./migrations");F.existsSync(g)?console.log(d.gray(`Using migrations from: ${g}`)):(console.log(d.red(`Migrations directory not found: ${i}`)),console.log(d.gray(`
-Expected one of:`)),console.log(d.gray("  - ./drizzle/")),console.log(d.gray("  - ./migrations/")),console.log(d.gray(`
-Or specify with: vaif db push --dir <path>`)),process.exit(1));}let s=[],c=F.readdirSync(i,{withFileTypes:true});for(let g of c)if(g.isFile()&&g.name.endsWith(".sql"))s.push($.join(i,g.name));else if(g.isDirectory()){let l=F.readdirSync($.join(i,g.name),{withFileTypes:true});for(let u of l)u.isFile()&&u.name.endsWith(".sql")&&s.push($.join(i,g.name,u.name));}s.sort(),s.length===0&&(console.log(d.yellow("No SQL migration files found")),process.exit(1)),console.log(d.gray(`Found ${s.length} migration(s):`));for(let g of s)console.log(d.gray(`  - ${$.relative(process.cwd(),g)}`));if(console.log(""),o.dryRun){console.log(d.yellow("Dry run mode - no migrations will be applied.")),console.log("");for(let g of s){let l=F.readFileSync(g,"utf-8");console.log(d.cyan(`--- ${$.basename(g)} ---`)),console.log(d.gray(l.slice(0,500))),l.length>500&&console.log(d.gray("...")),console.log("");}return}let f=0,p=0;for(let g of s){let l=F.readFileSync(g,"utf-8"),u=$.relative(process.cwd(),g);e.start(`Applying ${u}...`);try{let y=await fetch(`${B}/schema-engine/query/${r}`,{method:"POST",headers:{Authorization:`Bearer ${t.token}`,"Content-Type":"application/json"},body:JSON.stringify({sql:l})});if(!y.ok){let D=await y.text();throw new Error(D)}e.succeed(`Applied ${u}`),f++;}catch(y){let D=y instanceof Error?y.message:"Unknown error";e.fail(`Failed ${u}: ${D}`),p++;}}console.log(""),console.log(p===0?d.green(`Successfully applied ${f} migration(s)`):d.yellow(`Applied ${f}, failed ${p} migration(s)`)),console.log("");}async function ve(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1));let i=$.resolve(o.output||"vaif.schema.json");console.log(""),console.log(d.bold("VAIF Database Pull")),console.log(""),e.start("Pulling schema from remote...");try{let s=await fetch(`${B}/schema-engine/introspect/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});if(!s.ok){let p=await s.text();throw new Error(`Failed to pull schema: ${p}`)}let c=await s.json();F.writeFileSync(i,JSON.stringify(c,null,2),"utf-8"),e.succeed(`Schema written to ${$.relative(process.cwd(),i)}`);let f=c.tables?.length??Object.keys(c).length;console.log(d.gray(`  ${f} table(s) pulled`)),console.log("");}catch(s){e.fail("Failed to pull schema"),s instanceof Error&&console.log(d.red(`
-Error: ${s.message}`)),process.exit(1);}}async function Ie(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),process.exit(1)),console.log(""),console.log(d.red.bold("\u26A0\uFE0F  DATABASE RESET")),console.log(""),console.log(d.red("This will:")),console.log(d.red("  - Drop all tables")),console.log(d.red("  - Delete all data")),console.log(d.red("  - Reset migrations")),console.log(""),console.log(d.red.bold("This action cannot be undone!")),console.log(""),o.force||(console.log(d.yellow("Use --force to confirm this action.")),process.exit(1)),e.start("Resetting database...");try{await no(t.token,r),e.succeed("Database reset complete"),console.log(""),console.log(d.gray("Your database is now empty.")),console.log(d.gray("Run `vaif push` to apply your schema, then `vaif db seed` to seed data.")),console.log("");}catch(i){e.fail("Failed to reset database"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}var Se=process.env.VAIF_API_URL||"https://api.vaif.studio";function be(o,e,t){return o.projectId||e?.projectId||process.env.VAIF_PROJECT_ID||t.projectId||null}async function Ae(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=be(o,a$1,t);r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1));let i=o.name||`cli-key-${Date.now()}`;console.log(""),console.log(d.bold("VAIF Generate API Key")),console.log(""),e.start("Generating API key...");try{let s=await fetch(`${Se}/projects/${r}/api-keys`,{method:"POST",headers:{Authorization:`Bearer ${t.token}`,"Content-Type":"application/json"},body:JSON.stringify({name:i})});if(!s.ok){let f=await s.text();throw new Error(`Failed to generate key: ${f}`)}let c=await s.json();e.succeed("API key generated"),console.log(""),console.log(d.green(`  Name: ${c.name}`)),console.log(d.green(`  Key:  ${c.key}`)),console.log(""),console.log(d.yellow.bold("  Save this key now - it will not be shown again!")),console.log("");}catch(s){e.fail("Failed to generate API key"),s instanceof Error&&console.log(d.red(`
-Error: ${s.message}`)),process.exit(1);}}async function ke(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=be(o,a$1,t);r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(d.bold("VAIF API Keys")),console.log(""),e.start("Fetching API keys...");try{let i=await fetch(`${Se}/projects/${r}/api-keys`,{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok){let g=await i.text();throw new Error(`Failed to list keys: ${g}`)}let s=await i.json(),c=s.keys||s;if(e.stop(),!Array.isArray(c)||c.length===0){console.log(d.yellow("No API keys found")),console.log(d.gray(`
-Generate one with: vaif keys generate`));return}let f=Math.max(8,...c.map(g=>(g.name||"").length)),p=`  ${"Name".padEnd(f)}  ${"Key".padEnd(24)}  Created`;console.log(d.gray(p)),console.log(d.gray("  "+"-".repeat(p.length-2)));for(let g of c){let l=(g.name||"unnamed").padEnd(f),u=g.maskedKey||g.prefix||`${(g.key||"").slice(0,12)}...`,y=g.createdAt?new Date(g.createdAt).toLocaleDateString():"N/A";console.log(`  ${l}  ${u.padEnd(24)}  ${y}`);}console.log(""),console.log(d.gray(`  ${c.length} key(s) total`)),console.log("");}catch(i){e.fail("Failed to list API keys"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}var O=process.env.VAIF_API_URL||"https://api.vaif.studio";function io(o,e,t){return o.projectId||e?.projectId||process.env.VAIF_PROJECT_ID||t.projectId||null}function q(){let o=b();return (!o||!o.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1)),o}async function M(o){try{return await a(o||"vaif.config.json")}catch{return null}}function W(o,e,t){let n=io(o,e,t);return n||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),n}async function Pe(o,e,t){let n=K(),a=q(),r=await M(t.config),i=W(t,r,a),s=e;if(t.fromFile)try{s=F.readFileSync(t.fromFile,"utf-8");}catch(c){console.log(d.red(`Failed to read file: ${t.fromFile}`)),c instanceof Error&&console.log(d.gray(c.message)),process.exit(1);}s||(console.log(d.red("No value provided")),console.log(d.gray("Provide a value as argument or use --from-file <path>")),process.exit(1)),console.log(""),console.log(d.bold("VAIF Set Secret")),console.log(""),n.start("Checking for existing secret...");try{let c=new URL(`${O}/functions/secrets/project/${i}`);t.envId&&c.searchParams.set("envId",t.envId);let f=await fetch(c.toString(),{headers:{Authorization:`Bearer ${a.token}`}});if(!f.ok)throw new Error(`Failed to check existing secrets: ${await f.text()}`);let g=(await f.json()).find(l=>l.key===o);if(g){n.text=`Updating secret "${o}"...`;let l=await fetch(`${O}/functions/secrets/${g.id}`,{method:"PUT",headers:{Authorization:`Bearer ${a.token}`,"Content-Type":"application/json"},body:JSON.stringify({value:s})});if(!l.ok)throw new Error(`Failed to update secret: ${await l.text()}`);n.succeed(`Updated secret "${o}"`);}else {n.text=`Creating secret "${o}"...`;let l=await fetch(`${O}/functions/secrets`,{method:"POST",headers:{Authorization:`Bearer ${a.token}`,"Content-Type":"application/json"},body:JSON.stringify({projectId:i,envId:t.envId,key:o,value:s})});if(!l.ok)throw new Error(`Failed to create secret: ${await l.text()}`);n.succeed(`Created secret "${o}"`);}console.log("");}catch(c){n.fail("Failed to set secret"),c instanceof Error&&console.log(d.red(`
-Error: ${c.message}`)),process.exit(1);}}async function Ce(o){let e=K(),t=q(),n=await M(o.config),a=W(o,n,t);console.log(""),console.log(d.bold("VAIF Secrets")),console.log(""),e.start("Fetching secrets...");try{let r=new URL(`${O}/functions/secrets/project/${a}`);o.envId&&r.searchParams.set("envId",o.envId);let i=await fetch(r.toString(),{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok)throw new Error(`Failed to list secrets: ${await i.text()}`);let s=await i.json();if(e.stop(),s.length===0){console.log(d.yellow("No secrets found")),console.log(d.gray(`
-Create one with: vaif secrets set <name> <value>`));return}let c=Math.max(8,...s.map(p=>p.key.length)),f=`  ${"Name".padEnd(c)}  Created`;console.log(d.gray(f)),console.log(d.gray("  "+"-".repeat(f.length-2)));for(let p of s){let g=p.key.padEnd(c),l=p.createdAt?new Date(p.createdAt).toLocaleDateString():"N/A";console.log(`  ${g}  ${l}`);}console.log(""),console.log(d.gray(`  ${s.length} secret(s) total`)),console.log(d.gray("  Values are hidden. Use `vaif secrets get <name>` to reveal.")),console.log("");}catch(r){e.fail("Failed to list secrets"),r instanceof Error&&console.log(d.red(`
-Error: ${r.message}`)),process.exit(1);}}async function Ee(o,e){let t=K(),n=q(),a=await M(e.config),r=W(e,a,n);console.log(""),t.start("Fetching secret...");try{let i=new URL(`${O}/functions/secrets/project/${r}`);e.envId&&i.searchParams.set("envId",e.envId);let s=await fetch(i.toString(),{headers:{Authorization:`Bearer ${n.token}`}});if(!s.ok)throw new Error(`Failed to fetch secrets: ${await s.text()}`);let f=(await s.json()).find(l=>l.key===o);f||(t.fail(`Secret "${o}" not found`),process.exit(1));let p=await fetch(`${O}/functions/secrets/${f.id}/value`,{headers:{Authorization:`Bearer ${n.token}`}});if(!p.ok)throw new Error(`Failed to get secret value: ${await p.text()}`);let g=await p.json();t.stop(),console.log(g.value);}catch(i){t.fail("Failed to get secret"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}async function xe(o,e){let t=K(),n=q(),a=await M(e.config),r=W(e,a,n);console.log(""),console.log(d.bold("VAIF Delete Secret")),console.log(""),t.start("Finding secret...");try{let i=new URL(`${O}/functions/secrets/project/${r}`);e.envId&&i.searchParams.set("envId",e.envId);let s=await fetch(i.toString(),{headers:{Authorization:`Bearer ${n.token}`}});if(!s.ok)throw new Error(`Failed to fetch secrets: ${await s.text()}`);let f=(await s.json()).find(g=>g.key===o);f||(t.fail(`Secret "${o}" not found`),process.exit(1)),t.text=`Deleting secret "${o}"...`;let p=await fetch(`${O}/functions/secrets/${f.id}`,{method:"DELETE",headers:{Authorization:`Bearer ${n.token}`}});if(!p.ok)throw new Error(`Failed to delete secret: ${await p.text()}`);t.succeed(`Deleted secret "${o}"`),console.log("");}catch(i){t.fail("Failed to delete secret"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}var Fe=process.env.VAIF_API_URL||"https://api.vaif.studio";function ao(o){try{let e=new URL(o);return e.password&&(e.password="****"),e.toString()}catch{return o.replace(/:[^@/]+@/,":****@")}}async function De(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),e.start("Fetching project info...");try{let i=await fetch(`${Fe}/projects/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok){let p=await i.text();throw new Error(`Failed to fetch project: ${p}`)}let s=await i.json();e.stop(),console.log(""),console.log(d.bold("VAIF Project Info")),console.log("");let c=16,f=(p,g)=>{console.log(`  ${d.gray(p.padEnd(c))} ${g}`);};f("Name:",d.white(s.name||"N/A")),f("Project ID:",d.white(r)),f("Region:",d.white(s.region||"us-east-1")),f("Plan:",d.white(s.plan||s.tier||"free")),f("Created:",d.white(s.createdAt?new Date(s.createdAt).toLocaleDateString():"N/A")),console.log(""),f("API URL:",d.cyan(s.apiUrl||`${Fe}/v1`)),f("WS URL:",d.cyan(s.wsUrl||s.realtimeUrl||"N/A")),f("DB URL:",d.cyan(s.databaseUrl?ao(s.databaseUrl):"N/A")),f("Storage URL:",d.cyan(s.storageUrl||"N/A")),console.log("");}catch(i){e.fail("Failed to fetch project info"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}var lo=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Re(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(d.red("No project ID specified")),console.log(d.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),e.start("Fetching project status...");try{let i=await fetch(`${lo}/projects/${r}?include=tables,functions,storage,connections`,{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok){let y=await i.text();throw new Error(`Failed to fetch project status: ${y}`)}let s=await i.json();e.stop(),console.log(""),console.log(d.bold("VAIF Project Status")),console.log("");let c=22,f=(y,D)=>{console.log(`  ${d.gray(y.padEnd(c))} ${D}`);};f("Project:",d.white(s.name||r)),f("Plan:",d.white(s.plan||s.tier||"free")),console.log(""),console.log(d.gray("  --- Resources ---")),console.log("");let p=s.tableCount??s.tables?.length??"N/A",g=s.functionCount??s.functions?.length??"N/A",l=s.bucketCount??s.storage?.buckets?.length??"N/A",u=s.activeConnections??s.connections??"N/A";f("Tables:",d.white(String(p))),f("Functions:",d.white(String(g))),f("Storage Buckets:",d.white(String(l))),f("Active Connections:",d.white(String(u))),s.usage&&(console.log(""),console.log(d.gray("  --- Usage ---")),console.log(""),s.usage.dbSize&&f("Database Size:",d.white(s.usage.dbSize)),s.usage.storageSize&&f("Storage Size:",d.white(s.usage.storageSize)),s.usage.bandwidth&&f("Bandwidth:",d.white(s.usage.bandwidth)),s.usage.functionInvocations!=null&&f("Function Invocations:",d.white(String(s.usage.functionInvocations)))),console.log("");}catch(i){e.fail("Failed to fetch project status"),i instanceof Error&&console.log(d.red(`
-Error: ${i.message}`)),process.exit(1);}}var _=process.env.VAIF_API_URL||"https://api.vaif.studio";function fo(o){let e=We.createInterface({input:process.stdin,output:process.stdout});return new Promise(t=>{e.question(o,n=>{e.close(),t(n.trim());});})}function po(o,e,t){return o.projectId||e?.projectId||process.env.VAIF_PROJECT_ID||t.projectId||null}async function uo(o){let e=K("Fetching your projects...").start();try{let t=await fetch(`${_}/projects`,{headers:{Authorization:`Bearer ${o}`}});if(!t.ok)return e.fail("Could not fetch projects"),null;let n=await t.json();if(!n||n.length===0)return e.fail("No projects found. Create a project at https://vaif.studio first."),null;if(n.length===1)return e.succeed(`Found project: ${d.cyan(n[0].name)} (${n[0].id})`),n[0].id;e.succeed(`Found ${n.length} projects
-`);for(let i=0;i<n.length;i++)console.log(d.gray(`  ${i+1}.`)+` ${d.white(n[i].name)} ${d.gray(`(${n[i].id})`)}`);console.log("");let a=await fo(d.cyan(`  Select a project [1-${n.length}]: `)),r=parseInt(a,10)-1;return isNaN(r)||r<0||r>=n.length?(console.log(d.red(`
+import {c,d,e,h,g,f as f$1,b,a}from'./chunk-T7GOLIY4.js';import'dotenv/config';import {program}from'commander';import f from'chalk';import F from'fs';import $ from'path';import B from'ora';import We from'readline';var Je=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Ke(o,e,t="public"){let n=await fetch(`${Je}/projects/${e}/schema?schema=${t}`,{headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"}});if(!n.ok){let a=await n.text();throw new Error(`Failed to fetch schema: ${a}`)}return n.json()}async function ce(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;e.start("Loading configuration...");try{a$1=await a(n);}catch(i){e.fail("Failed to load config"),console.log(f.red(`
+Error: ${i}`)),process.exit(1);}a$1||(e.fail("No configuration found"),console.log(f.yellow("\nRun `vaif init` to create a configuration file.")),process.exit(1));let r=o.projectId||a$1.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(e.fail("No project ID specified"),console.log(f.yellow(`
+Set projectId in vaif.config.json or use --project-id flag.`)),process.exit(1)),e.text="Fetching remote schema...";try{let i=o.schema||a$1.database?.schema||"public",s=await Ke(t.token,r,i);e.succeed("Schema fetched successfully");let c=o.output||$.resolve("vaif.schema.json"),g={$schema:"https://vaif.studio/schemas/schema.json",projectId:r,schema:i,pulledAt:new Date().toISOString(),...s};F.writeFileSync(c,JSON.stringify(g,null,2),"utf-8"),console.log(""),console.log(f.green(`Schema saved to: ${c}`)),console.log(""),console.log(f.gray("Schema summary:")),console.log(f.gray(`  Tables: ${(s.tables||[]).length}`)),console.log(f.gray(`  Enums: ${(s.enums||[]).length}`)),console.log(f.gray(`  Functions: ${(s.functions||[]).length}`)),console.log(""),console.log(f.gray("Next steps:")),console.log(f.gray("  - Run `vaif generate` to generate TypeScript types")),console.log(f.gray("  - Edit the schema and run `vaif push` to deploy changes")),console.log("");}catch(i){e.fail("Failed to fetch schema"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}var de=process.env.VAIF_API_URL||"https://api.vaif.studio";function Ge(o){let e=We.createInterface({input:process.stdin,output:process.stdout});return new Promise(t=>{e.question(o,n=>{e.close(),t(n);});})}async function Ye(o,e,t){let n=await fetch(`${de}/projects/${e}/schema/preview`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({schema:t})});if(!n.ok){let a=await n.text();throw new Error(`Failed to preview changes: ${a}`)}return n.json()}async function He(o,e,t){let n=await fetch(`${de}/projects/${e}/schema/apply`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({schema:t})});if(!n.ok){let a=await n.text();throw new Error(`Failed to apply changes: ${a}`)}return n.json()}function Qe(o){if(console.log(""),console.log(f.bold("Schema Changes:")),console.log(""),o.added.length===0&&o.modified.length===0&&o.removed.length===0){console.log(f.gray("  No changes detected. Schema is up to date."));return}if(o.added.length>0){console.log(f.green.bold("  + Added:"));for(let e of o.added)console.log(f.green(`    + ${e.type}: ${e.name}`));console.log("");}if(o.modified.length>0){console.log(f.yellow.bold("  ~ Modified:"));for(let e of o.modified){console.log(f.yellow(`    ~ ${e.type}: ${e.name}`));for(let t of e.changes)console.log(f.gray(`        ${t}`));}console.log("");}if(o.removed.length>0){console.log(f.red.bold("  - Removed:"));for(let e of o.removed)console.log(f.red(`    - ${e.type}: ${e.name}`));console.log("");}}async function fe(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;e.start("Loading configuration...");try{a$1=await a(n);}catch(c){e.fail("Failed to load config"),console.log(f.red(`
+Error: ${c}`)),process.exit(1);}a$1||(e.fail("No configuration found"),console.log(f.yellow("\nRun `vaif init` to create a configuration file.")),process.exit(1));let r=o.projectId||a$1.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(e.fail("No project ID specified"),console.log(f.yellow(`
+Set projectId in vaif.config.json or use --project-id flag.`)),process.exit(1));let i=o.schema||$.resolve("vaif.schema.json");F.existsSync(i)||(e.fail("No local schema found"),console.log(f.yellow(`
+Expected schema file at: ${i}`)),console.log(f.gray("Run `vaif pull` first to fetch the current schema.")),process.exit(1));let s;try{let c=F.readFileSync(i,"utf-8");s=JSON.parse(c);}catch(c){e.fail("Failed to parse schema file"),c instanceof Error&&console.log(f.red(`
+Error: ${c.message}`)),process.exit(1);}e.text="Calculating schema changes...";try{let{diff:c,sql:g}=await Ye(t.token,r,s);if(e.stop(),Qe(c),c.added.length===0&&c.modified.length===0&&c.removed.length===0){console.log("");return}if(g.length>0){console.log(f.bold("SQL Migrations:")),console.log("");for(let d of g)console.log(f.gray(`  ${d}`));console.log("");}if(o.dryRun){console.log(f.yellow("Dry run mode - no changes applied.")),console.log(f.gray("Remove --dry-run to apply these changes."));return}if(!o.force){c.removed.length>0&&(console.log(f.red.bold("\u26A0\uFE0F  Warning: This will remove tables/columns from your database.")),console.log(f.red("    This action cannot be undone!")),console.log(""));let l=await Ge(f.cyan("Apply these changes? [y/N] "));if(l.toLowerCase()!=="y"&&l.toLowerCase()!=="yes"){console.log(f.yellow(`
+Cancelled. No changes applied.`));return}}e.start("Applying schema changes...");let p=await He(t.token,r,s);if(p.success){if(e.succeed("Schema changes applied successfully"),console.log(""),p.migrations.length>0){console.log(f.gray("Migrations applied:"));for(let d of p.migrations)console.log(f.gray(`  - ${d}`));console.log("");}console.log(f.green("Your database schema is now up to date.")),console.log(f.gray("Run `vaif generate` to update your TypeScript types.")),console.log("");}else e.fail("Failed to apply some changes");}catch(c){e.fail("Failed to push schema changes"),c instanceof Error&&console.log(f.red(`
+Error: ${c.message}`)),process.exit(1);}}var z=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Xe(o,e,t,n){let a=new URL(`${z}/functions/project/${e}`);n&&a.searchParams.set("envId",n);let r=await fetch(a.toString(),{headers:{Authorization:`Bearer ${o}`}});if(!r.ok)return null;let i=await r.json(),s=i.functions||i;return Array.isArray(s)&&s.find(c=>c.name===t)||null}async function Ze(o,e,t){let n=await fetch(`${z}/functions/`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({projectId:e,name:t.name,runtime:t.runtime,entrypoint:t.entrypoint,envId:t.envId})});if(!n.ok){let a=await n.text();throw new Error(`Failed to create function: ${a}`)}return n.json()}async function eo(o,e,t){let n=await fetch(`${z}/functions/${e}/source`,{method:"PUT",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({sourceCode:t})});if(!n.ok){let a=await n.text();throw new Error(`Failed to deploy source: ${a}`)}}async function oo(o,e,t){let n=new URL(`${z}/functions/project/${e}`);t&&n.searchParams.set("envId",t);let a=await fetch(n.toString(),{headers:{Authorization:`Bearer ${o}`}});if(!a.ok){let i=await a.text();throw new Error(`Failed to list functions: ${i}`)}let r=await a.json();return r.functions||r}function ge(o){switch($.extname(o).toLowerCase()){case ".ts":return "typescript";case ".js":case ".mjs":return "nodejs";case ".py":return "python";case ".go":return "go";case ".rs":return "rust";default:return "nodejs"}}function pe(o){let e=[],t=[".ts",".js",".mjs",".py",".go",".rs"],n=["drizzle.config.ts","tsconfig.json","package.json"];if(!F.existsSync(o))return e;let a=F.readdirSync(o,{withFileTypes:true});for(let r of a){let i=$.join(o,r.name);if(r.isDirectory()){if(r.name!=="node_modules"&&!r.name.startsWith(".")){let s=F.readdirSync(i,{withFileTypes:true});for(let c of s)if(c.isFile()){let g=$.extname(c.name).toLowerCase();if(t.includes(g)){e.push($.join(i,c.name));break}}}}else if(r.isFile()){let s=$.extname(r.name).toLowerCase();t.includes(s)&&!n.includes(r.name)&&e.push(i);}}return e}async function he(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(f.bold("VAIF Functions Deploy")),console.log(""),e.start("Scanning for function files...");let i=$.resolve("functions"),s=$.resolve("src/functions"),c=[];if(o.entrypoint){let l=$.resolve(o.entrypoint);F.existsSync(l)||(e.fail(`File not found: ${o.entrypoint}`),process.exit(1)),c=[l];}else c=[...pe(i),...pe(s)];c.length===0&&(e.fail("No function files found"),console.log(f.yellow(`
+Place your functions in:`)),console.log(f.gray("  - ./functions/")),console.log(f.gray("  - ./src/functions/")),console.log(f.gray(`
+Or specify an entrypoint with --entrypoint`)),process.exit(1)),e.succeed(`Found ${c.length} function(s)`),o.name&&(c=c.filter(l=>$.basename(l,$.extname(l)).includes(o.name)),c.length===0&&(console.log(f.yellow(`
+No functions matching "${o.name}" found`)),process.exit(1))),console.log(""),console.log(f.gray("Functions to deploy:"));for(let l of c){let u=$.basename($.dirname(l)),y=u==="functions"||u==="src"?$.basename(l,$.extname(l)):u,D=o.runtime||ge(l);console.log(f.gray(`  - ${y} (${D})`));}if(console.log(""),o.dryRun){console.log(f.yellow("Dry run mode - no functions deployed."));return}let g=[];for(let l of c){let u=$.basename($.dirname(l)),y=u==="functions"||u==="src"?$.basename(l,$.extname(l)):u,D=o.runtime||ge(l);e.start(`Deploying ${y}...`);try{let U=F.readFileSync(l,"utf-8"),L=await Xe(t.token,r,y,o.envId);L||(e.text=`Creating ${y}...`,L=await Ze(t.token,r,{name:y,runtime:D,entrypoint:$.basename(l),envId:o.envId})),e.text=`Deploying ${y}...`,await eo(t.token,L.id,U),e.succeed(`Deployed ${y}`),g.push({name:y,success:!0});}catch(U){let L=U instanceof Error?U.message:"Unknown error";e.fail(`Failed to deploy ${y}`),g.push({name:y,success:false,error:L});}}console.log("");let p=g.filter(l=>l.success).length;if(g.filter(l=>!l.success).length===0)console.log(f.green(`\u2713 Successfully deployed ${p} function(s)`));else {console.log(f.yellow(`Deployed ${p}/${g.length} function(s)`)),console.log(""),console.log(f.red("Failed deployments:"));for(let l of g.filter(u=>!u.success))console.log(f.red(`  - ${l.name}: ${l.error}`));}console.log("");}async function me(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),process.exit(1)),e.start("Fetching functions...");try{let i=await oo(t.token,r,o.envId);if(e.stop(),i.length===0){console.log(f.yellow(`
+No functions found`)),console.log(f.gray("Deploy your first function with: vaif functions deploy"));return}console.log(""),console.log(f.bold(`Functions (${i.length}):`)),console.log(""),console.log(f.gray("  "+"NAME".padEnd(25)+"RUNTIME".padEnd(15)+"STATUS".padEnd(12)+"INVOCATIONS".padEnd(14)+"LAST DEPLOYED")),console.log(f.gray("  "+"-".repeat(80)));for(let s of i){let c=s.deployStatus==="deployed"?f.green:s.deployStatus==="deploying"?f.yellow:s.deployStatus==="failed"?f.red:f.gray;console.log("  "+s.name.padEnd(25)+s.runtime.padEnd(15)+c(s.deployStatus.padEnd(12))+String(s.invocationCount??0).padEnd(14)+(s.deployedAt?new Date(s.deployedAt).toLocaleDateString():"-"));}console.log("");}catch(i){e.fail("Failed to fetch functions"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}var J=process.env.VAIF_API_URL||"https://api.vaif.studio";async function to(o,e,t,n,a){let r=await fetch(`${J}/projects/${e}/db/seed`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"},body:JSON.stringify({table:t,records:n,truncate:a?.truncate??false})});if(!r.ok){let i=await r.text();throw new Error(`Failed to seed ${t}: ${i}`)}return r.json()}async function no(o,e){let t=await fetch(`${J}/projects/${e}/db/reset`,{method:"POST",headers:{Authorization:`Bearer ${o}`,"Content-Type":"application/json"}});if(!t.ok){let n=await t.text();throw new Error(`Failed to reset database: ${n}`)}return t.json()}function H(o){let e=[];if(!F.existsSync(o))return e;let t=F.readdirSync(o,{withFileTypes:true});for(let n of t)if(n.isFile()){let a=$.extname(n.name).toLowerCase();(a===".json"||a===".ts"||a===".js")&&e.push($.join(o,n.name));}return e.sort()}async function ye(o){let e=$.extname(o).toLowerCase();if(e===".json"){let t=F.readFileSync(o,"utf-8"),n=JSON.parse(t);return Array.isArray(n)?[{table:$.basename(o,e),data:n}]:n.table&&n.data?[n]:Object.entries(n).map(([a,r])=>({table:a,data:r}))}else if(e===".ts"||e===".js"){let t=await import(o),n=t.default||t;return typeof n=="function"?n():n}throw new Error(`Unsupported file format: ${e}`)}async function we(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(f.bold("VAIF Database Seed")),console.log("");let i=[];if(o.file){let p=$.resolve(o.file);F.existsSync(p)||(console.log(f.red(`File not found: ${o.file}`)),process.exit(1)),i=[p];}else {let p=$.resolve("seeds"),d=$.resolve("prisma/seed"),l=$.resolve("db/seeds");i=[...H(p),...H(d),...H(l)];}i.length===0&&(console.log(f.yellow("No seed files found")),console.log(f.gray(`
+Place your seed files in one of these directories:`)),console.log(f.gray("  - ./seeds/")),console.log(f.gray("  - ./prisma/seed/")),console.log(f.gray("  - ./db/seeds/")),console.log(f.gray(`
+Or specify a file with --file`)),console.log(f.gray(`
+Example seed file (seeds/users.json):`)),console.log(f.gray("  [")),console.log(f.gray('    { "name": "John Doe", "email": "john@example.com" },')),console.log(f.gray('    { "name": "Jane Doe", "email": "jane@example.com" }')),console.log(f.gray("  ]")),process.exit(1)),console.log(f.gray("Seed files found:"));for(let p of i)console.log(f.gray(`  - ${$.relative(process.cwd(),p)}`));if(console.log(""),o.truncate&&(console.log(f.yellow("\u26A0\uFE0F  Tables will be truncated before seeding")),console.log("")),o.dryRun){console.log(f.yellow("Dry run mode - no data will be inserted.")),console.log("");for(let p of i){e.start(`Loading ${$.basename(p)}...`);try{let d=await ye(p);e.stop();for(let l of d)o.table&&l.table!==o.table||(console.log(f.cyan(`Table: ${l.table}`)),console.log(f.gray(`  Records: ${l.data.length}`)),l.data.length>0&&console.log(f.gray(`  Sample: ${JSON.stringify(l.data[0],null,2).slice(0,100)}...`)),console.log(""));}catch(d){e.fail(`Failed to load ${$.basename(p)}`),d instanceof Error&&console.log(f.red(`  Error: ${d.message}`));}}return}let s=[];for(let p of i){e.start(`Processing ${$.basename(p)}...`);try{let d=await ye(p);e.stop();for(let l of d)if(!(o.table&&l.table!==o.table)){if(l.data.length===0){console.log(f.gray(`  Skipping ${l.table} (no records)`));continue}e.start(`Seeding ${l.table} (${l.data.length} records)...`);try{let u=await to(t.token,r,l.table,l.data,{truncate:o.truncate});e.succeed(`Seeded ${l.table}: ${u.inserted} records`),s.push({table:l.table,inserted:u.inserted});}catch(u){let y=u instanceof Error?u.message:"Unknown error";e.fail(`Failed to seed ${l.table}`),s.push({table:l.table,inserted:0,error:y});}}}catch(d){e.fail(`Failed to load ${$.basename(p)}`),d instanceof Error&&console.log(f.red(`  Error: ${d.message}`));}}console.log("");let c=s.reduce((p,d)=>p+d.inserted,0),g=s.filter(p=>p.error).length;if(g===0)console.log(f.green(`\u2713 Successfully seeded ${c} records across ${s.length} table(s)`));else {console.log(f.yellow(`Seeded ${c} records with ${g} error(s)`)),console.log(""),console.log(f.red("Errors:"));for(let p of s.filter(d=>d.error))console.log(f.red(`  - ${p.table}: ${p.error}`));}console.log("");}async function je(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1));let i=$.resolve(o.dir||"./drizzle");if(console.log(""),console.log(f.bold("VAIF Database Push")),console.log(""),!F.existsSync(i)){let d=$.resolve("./migrations");F.existsSync(d)?console.log(f.gray(`Using migrations from: ${d}`)):(console.log(f.red(`Migrations directory not found: ${i}`)),console.log(f.gray(`
+Expected one of:`)),console.log(f.gray("  - ./drizzle/")),console.log(f.gray("  - ./migrations/")),console.log(f.gray(`
+Or specify with: vaif db push --dir <path>`)),process.exit(1));}let s=[],c=F.readdirSync(i,{withFileTypes:true});for(let d of c)if(d.isFile()&&d.name.endsWith(".sql"))s.push($.join(i,d.name));else if(d.isDirectory()){let l=F.readdirSync($.join(i,d.name),{withFileTypes:true});for(let u of l)u.isFile()&&u.name.endsWith(".sql")&&s.push($.join(i,d.name,u.name));}s.sort(),s.length===0&&(console.log(f.yellow("No SQL migration files found")),process.exit(1)),console.log(f.gray(`Found ${s.length} migration(s):`));for(let d of s)console.log(f.gray(`  - ${$.relative(process.cwd(),d)}`));if(console.log(""),o.dryRun){console.log(f.yellow("Dry run mode - no migrations will be applied.")),console.log("");for(let d of s){let l=F.readFileSync(d,"utf-8");console.log(f.cyan(`--- ${$.basename(d)} ---`)),console.log(f.gray(l.slice(0,500))),l.length>500&&console.log(f.gray("...")),console.log("");}return}let g=0,p=0;for(let d of s){let l=F.readFileSync(d,"utf-8"),u=$.relative(process.cwd(),d);e.start(`Applying ${u}...`);try{let y=await fetch(`${J}/schema-engine/query/${r}`,{method:"POST",headers:{Authorization:`Bearer ${t.token}`,"Content-Type":"application/json"},body:JSON.stringify({sql:l})});if(!y.ok){let D=await y.text();throw new Error(D)}e.succeed(`Applied ${u}`),g++;}catch(y){let D=y instanceof Error?y.message:"Unknown error";e.fail(`Failed ${u}: ${D}`),p++;}}console.log(""),console.log(p===0?f.green(`Successfully applied ${g} migration(s)`):f.yellow(`Applied ${g}, failed ${p} migration(s)`)),console.log("");}async function Ie(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1));let i=$.resolve(o.output||"vaif.schema.json");console.log(""),console.log(f.bold("VAIF Database Pull")),console.log(""),e.start("Pulling schema from remote...");try{let s=await fetch(`${J}/schema-engine/introspect/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});if(!s.ok){let p=await s.text();throw new Error(`Failed to pull schema: ${p}`)}let c=await s.json();F.writeFileSync(i,JSON.stringify(c,null,2),"utf-8"),e.succeed(`Schema written to ${$.relative(process.cwd(),i)}`);let g=c.tables?.length??Object.keys(c).length;console.log(f.gray(`  ${g} table(s) pulled`)),console.log("");}catch(s){e.fail("Failed to pull schema"),s instanceof Error&&console.log(f.red(`
+Error: ${s.message}`)),process.exit(1);}}async function ve(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),process.exit(1)),console.log(""),console.log(f.red.bold("\u26A0\uFE0F  DATABASE RESET")),console.log(""),console.log(f.red("This will:")),console.log(f.red("  - Drop all tables")),console.log(f.red("  - Delete all data")),console.log(f.red("  - Reset migrations")),console.log(""),console.log(f.red.bold("This action cannot be undone!")),console.log(""),o.force||(console.log(f.yellow("Use --force to confirm this action.")),process.exit(1)),e.start("Resetting database...");try{await no(t.token,r),e.succeed("Database reset complete"),console.log(""),console.log(f.gray("Your database is now empty.")),console.log(f.gray("Run `vaif push` to apply your schema, then `vaif db seed` to seed data.")),console.log("");}catch(i){e.fail("Failed to reset database"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}var be=process.env.VAIF_API_URL||"https://api.vaif.studio";function Se(o,e,t){return o.projectId||e?.projectId||process.env.VAIF_PROJECT_ID||t.projectId||null}async function ke(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=Se(o,a$1,t);r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1));let i=o.name||`cli-key-${Date.now()}`;console.log(""),console.log(f.bold("VAIF Generate API Key")),console.log(""),e.start("Generating API key...");try{let s=await fetch(`${be}/projects/${r}/api-keys`,{method:"POST",headers:{Authorization:`Bearer ${t.token}`,"Content-Type":"application/json"},body:JSON.stringify({name:i})});if(!s.ok){let g=await s.text();throw new Error(`Failed to generate key: ${g}`)}let c=await s.json();e.succeed("API key generated"),console.log(""),console.log(f.green(`  Name: ${c.name}`)),console.log(f.green(`  Key:  ${c.key}`)),console.log(""),console.log(f.yellow.bold("  Save this key now - it will not be shown again!")),console.log("");}catch(s){e.fail("Failed to generate API key"),s instanceof Error&&console.log(f.red(`
+Error: ${s.message}`)),process.exit(1);}}async function Ae(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=Se(o,a$1,t);r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),console.log(""),console.log(f.bold("VAIF API Keys")),console.log(""),e.start("Fetching API keys...");try{let i=await fetch(`${be}/projects/${r}/api-keys`,{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok){let d=await i.text();throw new Error(`Failed to list keys: ${d}`)}let s=await i.json(),c=s.keys||s;if(e.stop(),!Array.isArray(c)||c.length===0){console.log(f.yellow("No API keys found")),console.log(f.gray(`
+Generate one with: vaif keys generate`));return}let g=Math.max(8,...c.map(d=>(d.name||"").length)),p=`  ${"Name".padEnd(g)}  ${"Key".padEnd(24)}  Created`;console.log(f.gray(p)),console.log(f.gray("  "+"-".repeat(p.length-2)));for(let d of c){let l=(d.name||"unnamed").padEnd(g),u=d.maskedKey||d.prefix||`${(d.key||"").slice(0,12)}...`,y=d.createdAt?new Date(d.createdAt).toLocaleDateString():"N/A";console.log(`  ${l}  ${u.padEnd(24)}  ${y}`);}console.log(""),console.log(f.gray(`  ${c.length} key(s) total`)),console.log("");}catch(i){e.fail("Failed to list API keys"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}var _=process.env.VAIF_API_URL||"https://api.vaif.studio";function io(o,e,t){return o.projectId||e?.projectId||process.env.VAIF_PROJECT_ID||t.projectId||null}function M(){let o=b();return (!o||!o.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1)),o}async function q(o){try{return await a(o||"vaif.config.json")}catch{return null}}function W(o,e,t){let n=io(o,e,t);return n||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),n}async function Pe(o,e,t){let n=B(),a=M(),r=await q(t.config),i=W(t,r,a),s=e;if(t.fromFile)try{s=F.readFileSync(t.fromFile,"utf-8");}catch(c){console.log(f.red(`Failed to read file: ${t.fromFile}`)),c instanceof Error&&console.log(f.gray(c.message)),process.exit(1);}s||(console.log(f.red("No value provided")),console.log(f.gray("Provide a value as argument or use --from-file <path>")),process.exit(1)),console.log(""),console.log(f.bold("VAIF Set Secret")),console.log(""),n.start("Checking for existing secret...");try{let c=new URL(`${_}/functions/secrets/project/${i}`);t.envId&&c.searchParams.set("envId",t.envId);let g=await fetch(c.toString(),{headers:{Authorization:`Bearer ${a.token}`}});if(!g.ok)throw new Error(`Failed to check existing secrets: ${await g.text()}`);let d=(await g.json()).find(l=>l.key===o);if(d){n.text=`Updating secret "${o}"...`;let l=await fetch(`${_}/functions/secrets/${d.id}`,{method:"PUT",headers:{Authorization:`Bearer ${a.token}`,"Content-Type":"application/json"},body:JSON.stringify({value:s})});if(!l.ok)throw new Error(`Failed to update secret: ${await l.text()}`);n.succeed(`Updated secret "${o}"`);}else {n.text=`Creating secret "${o}"...`;let l=await fetch(`${_}/functions/secrets`,{method:"POST",headers:{Authorization:`Bearer ${a.token}`,"Content-Type":"application/json"},body:JSON.stringify({projectId:i,envId:t.envId,key:o,value:s})});if(!l.ok)throw new Error(`Failed to create secret: ${await l.text()}`);n.succeed(`Created secret "${o}"`);}console.log("");}catch(c){n.fail("Failed to set secret"),c instanceof Error&&console.log(f.red(`
+Error: ${c.message}`)),process.exit(1);}}async function Ce(o){let e=B(),t=M(),n=await q(o.config),a=W(o,n,t);console.log(""),console.log(f.bold("VAIF Secrets")),console.log(""),e.start("Fetching secrets...");try{let r=new URL(`${_}/functions/secrets/project/${a}`);o.envId&&r.searchParams.set("envId",o.envId);let i=await fetch(r.toString(),{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok)throw new Error(`Failed to list secrets: ${await i.text()}`);let s=await i.json();if(e.stop(),s.length===0){console.log(f.yellow("No secrets found")),console.log(f.gray(`
+Create one with: vaif secrets set <name> <value>`));return}let c=Math.max(8,...s.map(p=>p.key.length)),g=`  ${"Name".padEnd(c)}  Created`;console.log(f.gray(g)),console.log(f.gray("  "+"-".repeat(g.length-2)));for(let p of s){let d=p.key.padEnd(c),l=p.createdAt?new Date(p.createdAt).toLocaleDateString():"N/A";console.log(`  ${d}  ${l}`);}console.log(""),console.log(f.gray(`  ${s.length} secret(s) total`)),console.log(f.gray("  Values are hidden. Use `vaif secrets get <name>` to reveal.")),console.log("");}catch(r){e.fail("Failed to list secrets"),r instanceof Error&&console.log(f.red(`
+Error: ${r.message}`)),process.exit(1);}}async function Ee(o,e){let t=B(),n=M(),a=await q(e.config),r=W(e,a,n);console.log(""),t.start("Fetching secret...");try{let i=new URL(`${_}/functions/secrets/project/${r}`);e.envId&&i.searchParams.set("envId",e.envId);let s=await fetch(i.toString(),{headers:{Authorization:`Bearer ${n.token}`}});if(!s.ok)throw new Error(`Failed to fetch secrets: ${await s.text()}`);let g=(await s.json()).find(l=>l.key===o);g||(t.fail(`Secret "${o}" not found`),process.exit(1));let p=await fetch(`${_}/functions/secrets/${g.id}/value`,{headers:{Authorization:`Bearer ${n.token}`}});if(!p.ok)throw new Error(`Failed to get secret value: ${await p.text()}`);let d=await p.json();t.stop(),console.log(d.value);}catch(i){t.fail("Failed to get secret"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}async function xe(o,e){let t=B(),n=M(),a=await q(e.config),r=W(e,a,n);console.log(""),console.log(f.bold("VAIF Delete Secret")),console.log(""),t.start("Finding secret...");try{let i=new URL(`${_}/functions/secrets/project/${r}`);e.envId&&i.searchParams.set("envId",e.envId);let s=await fetch(i.toString(),{headers:{Authorization:`Bearer ${n.token}`}});if(!s.ok)throw new Error(`Failed to fetch secrets: ${await s.text()}`);let g=(await s.json()).find(d=>d.key===o);g||(t.fail(`Secret "${o}" not found`),process.exit(1)),t.text=`Deleting secret "${o}"...`;let p=await fetch(`${_}/functions/secrets/${g.id}`,{method:"DELETE",headers:{Authorization:`Bearer ${n.token}`}});if(!p.ok)throw new Error(`Failed to delete secret: ${await p.text()}`);t.succeed(`Deleted secret "${o}"`),console.log("");}catch(i){t.fail("Failed to delete secret"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}var Fe=process.env.VAIF_API_URL||"https://api.vaif.studio";function ao(o){try{let e=new URL(o);return e.password&&(e.password="****"),e.toString()}catch{return o.replace(/:[^@/]+@/,":****@")}}async function De(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),e.start("Fetching project info...");try{let i=await fetch(`${Fe}/projects/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok){let p=await i.text();throw new Error(`Failed to fetch project: ${p}`)}let s=await i.json();e.stop(),console.log(""),console.log(f.bold("VAIF Project Info")),console.log("");let c=16,g=(p,d)=>{console.log(`  ${f.gray(p.padEnd(c))} ${d}`);};g("Name:",f.white(s.name||"N/A")),g("Project ID:",f.white(r)),g("Region:",f.white(s.region||"us-east-1")),g("Plan:",f.white(s.plan||s.tier||"free")),g("Created:",f.white(s.createdAt?new Date(s.createdAt).toLocaleDateString():"N/A")),console.log(""),g("API URL:",f.cyan(s.apiUrl||`${Fe}/v1`)),g("WS URL:",f.cyan(s.wsUrl||s.realtimeUrl||"N/A")),g("DB URL:",f.cyan(s.databaseUrl?ao(s.databaseUrl):"N/A")),g("Storage URL:",f.cyan(s.storageUrl||"N/A")),console.log("");}catch(i){e.fail("Failed to fetch project info"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}var lo=process.env.VAIF_API_URL||"https://api.vaif.studio";async function Te(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=o.projectId||a$1?.projectId||process.env.VAIF_PROJECT_ID||t.projectId;r||(console.log(f.red("No project ID specified")),console.log(f.yellow("Set projectId in vaif.config.json or use --project-id flag.")),process.exit(1)),e.start("Fetching project status...");try{let i=await fetch(`${lo}/projects/${r}?include=tables,functions,storage,connections`,{headers:{Authorization:`Bearer ${t.token}`}});if(!i.ok){let y=await i.text();throw new Error(`Failed to fetch project status: ${y}`)}let s=await i.json();e.stop(),console.log(""),console.log(f.bold("VAIF Project Status")),console.log("");let c=22,g=(y,D)=>{console.log(`  ${f.gray(y.padEnd(c))} ${D}`);};g("Project:",f.white(s.name||r)),g("Plan:",f.white(s.plan||s.tier||"free")),console.log(""),console.log(f.gray("  --- Resources ---")),console.log("");let p=s.tableCount??s.tables?.length??"N/A",d=s.functionCount??s.functions?.length??"N/A",l=s.bucketCount??s.storage?.buckets?.length??"N/A",u=s.activeConnections??s.connections??"N/A";g("Tables:",f.white(String(p))),g("Functions:",f.white(String(d))),g("Storage Buckets:",f.white(String(l))),g("Active Connections:",f.white(String(u))),s.usage&&(console.log(""),console.log(f.gray("  --- Usage ---")),console.log(""),s.usage.dbSize&&g("Database Size:",f.white(s.usage.dbSize)),s.usage.storageSize&&g("Storage Size:",f.white(s.usage.storageSize)),s.usage.bandwidth&&g("Bandwidth:",f.white(s.usage.bandwidth)),s.usage.functionInvocations!=null&&g("Function Invocations:",f.white(String(s.usage.functionInvocations)))),console.log("");}catch(i){e.fail("Failed to fetch project status"),i instanceof Error&&console.log(f.red(`
+Error: ${i.message}`)),process.exit(1);}}var N=process.env.VAIF_API_URL||"https://api.vaif.studio";function go(o){let e=We.createInterface({input:process.stdin,output:process.stdout});return new Promise(t=>{e.question(o,n=>{e.close(),t(n.trim());});})}function po(o,e,t){return o.projectId||e?.projectId||process.env.VAIF_PROJECT_ID||t.projectId||null}async function uo(o){let e=B("Fetching your projects...").start();try{let t=await fetch(`${N}/projects`,{headers:{Authorization:`Bearer ${o}`}});if(!t.ok)return e.fail("Could not fetch projects"),null;let n=await t.json();if(!n||n.length===0)return e.fail("No projects found. Create a project at https://vaif.studio first."),null;if(n.length===1)return e.succeed(`Found project: ${f.cyan(n[0].name)} (${n[0].id})`),n[0].id;e.succeed(`Found ${n.length} projects
+`);for(let i=0;i<n.length;i++)console.log(f.gray(`  ${i+1}.`)+` ${f.white(n[i].name)} ${f.gray(`(${n[i].id})`)}`);console.log("");let a=await go(f.cyan(`  Select a project [1-${n.length}]: `)),r=parseInt(a,10)-1;return isNaN(r)||r<0||r>=n.length?(console.log(f.red(`
   Invalid selection.`)),null):n[r].id}catch{return e.fail("Could not fetch projects"),null}}function ho(o){if(!o||o.length===0)return "*No tables found. Create tables in the VAIF Studio dashboard.*";let e="";for(let t of o){e+=`### \`${t.name}\`
 
 `,e+=`| Column | Type | Nullable | Default | Constraints |
@@ -87,41 +87,75 @@ ${i}
 
 ${s}
 
-## Authentication
+## Authentication (End-User Auth)
 
-\`\`\`typescript
-import { createAuthClient } from "@vaiftech/auth";
+VAIF provides **project-scoped** authentication for your app's end-users. All auth routes are scoped to your project ID.
 
-const auth = createAuthClient({
-  url: "${n}",
-  apiKey: "${t}",
-});
+### API Routes
 
-// Sign up
-const { user, session } = await auth.signUp({
-  email: "user@example.com",
-  password: "securePassword123",
-});
+| Route | Method | Auth | Description |
+|-------|--------|------|-------------|
+| \`/projects/${e}/auth/signup\` | POST | None (public) | Register a new user |
+| \`/projects/${e}/auth/login\` | POST | None (public) | Login with email/password |
+| \`/projects/${e}/auth/refresh\` | POST | Cookie | Refresh access token |
 
-// Sign in with password
-const { session } = await auth.signInWithPassword({
-  email: "user@example.com",
-  password: "securePassword123",
+### Signup
+
+\`\`\`typescript
+const res = await fetch("${n}/projects/${e}/auth/signup", {
+  method: "POST",
+  headers: { "Content-Type": "application/json" },
+  body: JSON.stringify({
+    email: "user@example.com",
+    password: "securePassword123",
+    metadata: { displayName: "Jane Doe" },  // optional
+  }),
 });
+const { accessToken, expiresIn, user } = await res.json();
+// accessToken: JWT with { sub: userId, email, projectId, type: "project_user" }
+\`\`\`
 
-// Sign in with OAuth
-await auth.signInWithOAuth({ provider: "google" });
+### Login
+
+\`\`\`typescript
+const res = await fetch("${n}/projects/${e}/auth/login", {
+  method: "POST",
+  headers: { "Content-Type": "application/json" },
+  body: JSON.stringify({
+    email: "user@example.com",
+    password: "securePassword123",
+  }),
+});
+const { accessToken, expiresIn, user } = await res.json();
+\`\`\`
 
-// Session management
-const currentSession = await auth.getSession();
-await auth.signOut();
+### Token Refresh
 
-// Listen for auth state changes
-auth.onAuthStateChange((event) => {
-  console.log("Auth event:", event.event, event.session);
+\`\`\`typescript
+// Refresh token is stored as httpOnly cookie (project_refresh_token)
+// and sent automatically with same-origin requests
+const res = await fetch("${n}/projects/${e}/auth/refresh", {
+  method: "POST",
+  credentials: "include",  // sends the httpOnly cookie
 });
+const { accessToken, expiresIn, user } = await res.json();
+\`\`\`
+
+### Using Auth in Your App
+
+\`\`\`typescript
+// Store the access token and use it for authenticated requests
+const headers = {
+  Authorization: \\\`Bearer \\\${accessToken}\\\`,
+  "x-api-key": "${t}",
+};
+
+// The JWT contains: { sub: userId, email, projectId, type: "project_user" }
+// Use this with RLS to scope data to the current user
 \`\`\`
 
+> **Important**: Auth routes are at \`/projects/{projectId}/auth/*\`, NOT \`/auth/*\`. The \`/auth/*\` routes are for VAIF Studio platform accounts, not your app's end-users.
+
 ## Storage
 
 \`\`\`typescript
@@ -146,11 +180,13 @@ const files = await vaif.storage.list("avatars", { limit: 100 });
 
 \`\`\`typescript
 // Invoke a serverless function
-const result = await vaif.functions.invoke("send-welcome-email", {
+const result = await vaif.functions.invoke("send_welcome_email", {
   body: { userId: "user_123", template: "welcome" },
 });
 \`\`\`
 
+> **Function naming**: Names must be alphanumeric and underscores only (\`^[a-zA-Z0-9_]+$\`). Use \`send_email\` not \`send-email\`.
+
 ## Realtime
 
 \`\`\`typescript
@@ -437,11 +473,30 @@ const page2 = await vaif.from("posts").select().limit(20).offset(20);
 
 ### Auth Headers
 
-All authenticated requests require:
-- \`Authorization: Bearer <jwt_token>\` \u2014 for user-scoped requests
-- \`x-api-key: <api_key>\` \u2014 for server-side / service-role requests
-- \`x-project-id: ${e}\` \u2014 identifies the project
-`}async function Ne(o){let e=K(),t=b();(!t||!t.token)&&(console.log(d.red("Not logged in")),console.log(d.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=po(o,a$1,t);r||(console.log(d.yellow(`No project ID specified \u2014 fetching your projects...
-`)),r=await uo(t.token),r||(console.log(d.gray(`
-  Tip: pass --project-id <id> or set projectId in vaif.config.json`)),process.exit(1)));let i=$.resolve(o.outputDir||".");console.log(""),console.log(d.bold("VAIF Claude Code Setup")),console.log(d.gray(`  Project: ${r}`)),console.log(""),e.start("Fetching database schema...");let s={tables:[]};try{let g=await fetch(`${_}/schema-engine/introspect/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});g.ok?(s=await g.json(),e.succeed(`Fetched schema (${s.tables?.length||0} tables)`)):e.warn("Could not fetch schema \u2014 continuing without it");}catch{e.warn("Could not fetch schema \u2014 continuing without it");}e.start("Fetching project info...");let c=r,f=_;try{let g=await fetch(`${_}/projects/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});if(g.ok){let l=await g.json(),u=l.project||l;c=u.name||r,f=u.apiUrl||_,e.succeed(`Project: ${c}`);}else e.warn("Could not fetch project info \u2014 using defaults");}catch{e.warn("Could not fetch project info \u2014 using defaults");}let p=o.apiKey||a$1?.api?.apiKey||"";if(!p){e.start("Generating API key for Claude Code...");try{let g=`claude-code-${Date.now()}`,l=await fetch(`${_}/projects/${r}/api-keys`,{method:"POST",headers:{Authorization:`Bearer ${t.token}`,"Content-Type":"application/json"},body:JSON.stringify({name:g,scopes:["crud","realtime","functions","storage"]})});if(l.ok){let u=await l.json();p=u.apiKey||u.key,e.succeed(`Generated API key: ${g}`);}else e.fail("Could not auto-generate API key"),console.log(d.yellow("  Pass one with --api-key or generate via `vaif keys generate`")),process.exit(1);}catch{e.fail("Could not auto-generate API key"),console.log(d.yellow("  Pass one with --api-key or generate via `vaif keys generate`")),process.exit(1);}}if(!o.skipMcp){e.start("Writing .mcp.json...");let g={mcpServers:{"vaif-studio":{command:"npx",args:["@vaiftech/mcp"],env:{VAIF_API_KEY:p,VAIF_PROJECT_ID:r,VAIF_API_URL:f,VAIF_AUTH_TOKEN:t.token}}}},l=$.join(i,".mcp.json");F.writeFileSync(l,JSON.stringify(g,null,2)+`
-`,"utf-8"),e.succeed(`Written ${d.cyan(".mcp.json")}`);}if(!o.skipClaudeMd){e.start("Writing CLAUDE.md...");let g=wo({projectId:r,apiKey:p,apiUrl:f,projectName:c,schema:s}),l=$.join(i,"CLAUDE.md");F.writeFileSync(l,g,"utf-8"),e.succeed(`Written ${d.cyan("CLAUDE.md")}`);}console.log(""),console.log(d.green.bold("  Claude Code integration configured!")),console.log(""),o.skipMcp||console.log(d.gray("  MCP Server:  ")+d.white(".mcp.json")),o.skipClaudeMd||console.log(d.gray("  Context:     ")+d.white("CLAUDE.md")),console.log(""),console.log(d.bold("  Next steps:")),console.log(d.gray("  1. Open this project in Claude Code")),console.log(d.gray("  2. The MCP server auto-connects to your VAIF project")),console.log(d.gray("  3. Ask Claude to query, modify, or build against your schema")),console.log("");}var _e="1.9.3",X=d.hex("#00f0ff"),Z=d.hex("#7b61ff"),ee=d.hex("#ff3dff"),oe=d.hex("#00ff9d"),j=d.hex("#555570"),N=d.hex("#00f0ff");function jo(){console.log(""),console.log(X("  \u2566  \u2566")+Z("\u2554\u2550\u2557\u2566")+ee("\u2554\u2550\u2557  ")+oe("\u2554\u2550\u2557\u2566  \u2566")),console.log(X("  \u255A\u2557\u2554\u255D")+Z("\u2560\u2550\u2563\u2551")+ee("\u2560\u2563   ")+oe("\u2551  \u2551  \u2551")),console.log(X("   \u255A\u255D ")+Z("\u2569 \u2569\u2569")+ee("\u255A    ")+oe("\u255A\u2550\u255D\u2569\u2550\u255D\u2569")),console.log(""),console.log(j("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(N("  VAIF Studio CLI")+j(` v${_e}`)),console.log(j("  Build full-stack apps at lightning speed")),console.log(j("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(""),console.log(d.bold("  Quick Start")),console.log(j("  $ ")+N("vaif login")+j("                    Authenticate")),console.log(j("  $ ")+N("vaif init -t react-spa")+j("       Scaffold project")),console.log(j("  $ ")+N("vaif db push")+j("                 Push migrations")),console.log(j("  $ ")+N("vaif generate")+j("                Generate types")),console.log(j("  $ ")+N("vaif functions deploy")+j("        Deploy functions")),console.log(""),console.log(d.bold("  Categories")),console.log(j("    auth     ")+d.white("login, logout, whoami")),console.log(j("    project  ")+d.white("init, templates, info, status")),console.log(j("    schema   ")+d.white("pull, push, generate")),console.log(j("    database ")+d.white("db push, db pull, db seed, db reset")),console.log(j("    deploy   ")+d.white("functions deploy, functions list")),console.log(j("    security ")+d.white("keys, secrets")),console.log(j("    ai       ")+d.white("claude-setup")),console.log(""),console.log(j("  Run ")+N("vaif <command> --help")+j(" for details")),console.log(j("  Docs: ")+d.underline("https://docs.vaif.studio")),console.log("");}program.name("vaif").description("VAIF CLI - Type generation and development tools").version(_e);program.command("login").description("Authenticate with VAIF (opens browser)").option("-e, --email","Login with email/password instead of browser").option("-p, --project-id <id>","Default project ID").action(c);program.command("logout").description("Log out and remove stored credentials").action(d$1);program.command("whoami").description("Show current authenticated user").action(e);program.command("init").description("Initialize VAIF configuration in your project").option("--typescript","Setup for TypeScript project").option("-f, --force","Overwrite existing config").option("-t, --template <name>","Scaffold from a template (run vaif templates for list)").option("--features <features>","Comma-separated features to include: auth,database,realtime,storage,functions").option("--add-features <features>","Add features to an existing project (requires --template)").action(h);program.command("templates").alias("tpl").description("List available project templates").action(g);program.command("info").description("Show project information (name, region, URLs)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(De);program.command("status").description("Show project status (tables, functions, storage, connections)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(Re);program.command("pull").description("Pull database schema from your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-o, --output <path>","Output file path","vaif.schema.json").option("-s, --schema <name>","Schema name","public").option("-p, --project-id <id>","Project ID (overrides config)").action(ce);program.command("push").description("Push local schema changes to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-s, --schema <path>","Schema file path","vaif.schema.json").option("-p, --project-id <id>","Project ID (overrides config)").option("--dry-run","Preview changes without applying").option("-f, --force","Apply changes without confirmation").action(de);program.command("generate").alias("gen").description("Generate TypeScript types from your database schema").option("-c, --connection <url>","Database connection string").option("-o, --output <path>","Output file path","./src/types/database.ts").option("--schema <name>","Schema name","public").option("--config <path>","Config file path","vaif.config.json").option("--dry-run","Preview generated types without writing").action(f);var Le=program.command("functions").alias("fn").description("Manage serverless functions");Le.command("deploy").description("Deploy functions to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").option("-n, --name <name>","Function name filter").option("-r, --runtime <runtime>","Runtime (nodejs, typescript, python)").option("--entrypoint <file>","Specific entrypoint file").option("--dry-run","Preview deployment without deploying").action(he);Le.command("list").alias("ls").description("List deployed functions").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").action(me);var G=program.command("db").description("Database management commands");G.command("push").description("Push local Drizzle migrations to VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-d, --dir <path>","Migrations directory","./drizzle").option("--dry-run","Preview without applying").action(je);G.command("pull").description("Pull schema from VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-o, --output <path>","Output file","vaif.schema.json").action(ve);G.command("seed").description("Seed your database with test data").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --file <path>","Specific seed file").option("-t, --table <name>","Seed specific table only").option("--truncate","Truncate tables before seeding").option("--dry-run","Preview seeding without inserting data").action(we);G.command("reset").description("Reset database (drop all tables and data)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --force","Confirm reset (required)").action(Ie);var Ve=program.command("keys").description("Manage API keys");Ve.command("generate").description("Generate a new API key").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-n, --name <name>","Key name").action(Ae);Ve.command("list").alias("ls").description("List API keys").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(ke);var Y=program.command("secrets").alias("sec").description("Manage function secrets");Y.command("set <name> [value]").description("Create or update a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").option("--from-file <path>","Read secret value from a file").action(Pe);Y.command("list").alias("ls").description("List all secrets (names only)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(Ce);Y.command("get <name>").description("Reveal a secret value").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(Ee);Y.command("delete <name>").description("Delete a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(xe);program.command("claude-setup").description("Configure Claude Code integration (MCP server + CLAUDE.md)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID").option("-k, --api-key <key>","API key for MCP server").option("--skip-mcp","Skip generating .mcp.json").option("--skip-claude-md","Skip generating CLAUDE.md").option("-o, --output-dir <dir>","Output directory",".").action(Ne);process.argv.slice(2).length||(jo(),process.exit(0));program.parse(process.argv);
+VAIF uses **two auth modes** \u2014 choose the right one for each operation:
+
+| Auth Mode | Header | Used For |
+|-----------|--------|----------|
+| **API Key** | \`x-api-key: vk_xxx\` | Data-plane: CRUD (\`/generated/*\`), storage uploads/downloads, function invocation |
+| **JWT Token** | \`Authorization: Bearer <jwt>\` | Control-plane: schema introspection, project management, function CRUD, bucket creation |
+
+> **Important**: API keys do NOT work for control-plane endpoints (creating functions, managing buckets, schema changes). Those require a JWT session token. The MCP server handles this automatically by using both auth modes.
+
+### MCP Tools (via .mcp.json)
+
+The \`.mcp.json\` file configures an MCP server that gives Claude Code direct access to your VAIF project. Available tools:
+
+| Tool | What it does |
+|------|-------------|
+| \`list_tables\`, \`describe_table\` | Inspect database schema |
+| \`query_rows\`, \`insert_row\`, \`update_row\`, \`delete_row\` | CRUD operations on any table |
+| \`create_function\`, \`deploy_function\`, \`invoke_function\` | Create, deploy, and call serverless functions |
+| \`create_bucket\`, \`list_buckets\`, \`list_files\`, \`get_signed_url\` | Storage management |
+| \`enable_realtime\`, \`realtime_status\` | Enable/check realtime subscriptions |
+| \`get_schema\` | Full schema as JSON |
+
+> **Note**: MCP tools are only available to the main Claude Code session, not to spawned sub-agents (Task tool). The main session should handle all VAIF backend operations directly.
+`}async function Oe(o){let e=B(),t=b();(!t||!t.token)&&(console.log(f.red("Not logged in")),console.log(f.gray("Run `vaif login` first to authenticate")),process.exit(1));let n=o.config||"vaif.config.json",a$1=null;try{a$1=await a(n);}catch{}let r=po(o,a$1,t);r||(console.log(f.yellow(`No project ID specified \u2014 fetching your projects...
+`)),r=await uo(t.token),r||(console.log(f.gray(`
+  Tip: pass --project-id <id> or set projectId in vaif.config.json`)),process.exit(1)));let i=$.resolve(o.outputDir||".");console.log(""),console.log(f.bold("VAIF Claude Code Setup")),console.log(f.gray(`  Project: ${r}`)),console.log(""),e.start("Fetching database schema...");let s={tables:[]};try{let d=await fetch(`${N}/schema-engine/introspect/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});d.ok?(s=await d.json(),e.succeed(`Fetched schema (${s.tables?.length||0} tables)`)):e.warn("Could not fetch schema \u2014 continuing without it");}catch{e.warn("Could not fetch schema \u2014 continuing without it");}e.start("Fetching project info...");let c=r,g=N;try{let d=await fetch(`${N}/projects/${r}`,{headers:{Authorization:`Bearer ${t.token}`}});if(d.ok){let l=await d.json(),u=l.project||l;c=u.name||r,g=u.apiUrl||N,e.succeed(`Project: ${c}`);}else e.warn("Could not fetch project info \u2014 using defaults");}catch{e.warn("Could not fetch project info \u2014 using defaults");}let p=o.apiKey||a$1?.api?.apiKey||"";if(!p){e.start("Generating API key for Claude Code...");try{let d=`claude-code-${Date.now()}`,l=await fetch(`${N}/projects/${r}/api-keys`,{method:"POST",headers:{Authorization:`Bearer ${t.token}`,"Content-Type":"application/json"},body:JSON.stringify({name:d,scopes:["crud","realtime","functions","storage"]})});if(l.ok){let u=await l.json();p=u.apiKey||u.key,e.succeed(`Generated API key: ${d}`);}else e.fail("Could not auto-generate API key"),console.log(f.yellow("  Pass one with --api-key or generate via `vaif keys generate`")),process.exit(1);}catch{e.fail("Could not auto-generate API key"),console.log(f.yellow("  Pass one with --api-key or generate via `vaif keys generate`")),process.exit(1);}}if(!o.skipMcp){e.start("Writing .mcp.json...");let d={mcpServers:{"vaif-studio":{command:"npx",args:["@vaiftech/mcp"],env:{VAIF_API_KEY:p,VAIF_PROJECT_ID:r,VAIF_API_URL:g,VAIF_AUTH_TOKEN:t.token}}}},l=$.join(i,".mcp.json");F.writeFileSync(l,JSON.stringify(d,null,2)+`
+`,"utf-8"),e.succeed(`Written ${f.cyan(".mcp.json")}`);}if(!o.skipClaudeMd){e.start("Writing CLAUDE.md...");let d=wo({projectId:r,apiKey:p,apiUrl:g,projectName:c,schema:s}),l=$.join(i,"CLAUDE.md");F.writeFileSync(l,d,"utf-8"),e.succeed(`Written ${f.cyan("CLAUDE.md")}`);}console.log(""),console.log(f.green.bold("  Claude Code integration configured!")),console.log(""),o.skipMcp||console.log(f.gray("  MCP Server:  ")+f.white(".mcp.json")),o.skipClaudeMd||console.log(f.gray("  Context:     ")+f.white("CLAUDE.md")),console.log(""),console.log(f.bold("  Next steps:")),console.log(f.gray("  1. Open this project in Claude Code")),console.log(f.gray("  2. The MCP server auto-connects to your VAIF project")),console.log(f.gray("  3. Ask Claude to query, modify, or build against your schema")),console.log("");}var Ne="1.9.5",X=f.hex("#00f0ff"),Z=f.hex("#7b61ff"),ee=f.hex("#ff3dff"),oe=f.hex("#00ff9d"),j=f.hex("#555570"),O=f.hex("#00f0ff");function jo(){console.log(""),console.log(X("  \u2566  \u2566")+Z("\u2554\u2550\u2557\u2566")+ee("\u2554\u2550\u2557  ")+oe("\u2554\u2550\u2557\u2566  \u2566")),console.log(X("  \u255A\u2557\u2554\u255D")+Z("\u2560\u2550\u2563\u2551")+ee("\u2560\u2563   ")+oe("\u2551  \u2551  \u2551")),console.log(X("   \u255A\u255D ")+Z("\u2569 \u2569\u2569")+ee("\u255A    ")+oe("\u255A\u2550\u255D\u2569\u2550\u255D\u2569")),console.log(""),console.log(j("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(O("  VAIF Studio CLI")+j(` v${Ne}`)),console.log(j("  Build full-stack apps at lightning speed")),console.log(j("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500")),console.log(""),console.log(f.bold("  Quick Start")),console.log(j("  $ ")+O("vaif login")+j("                    Authenticate")),console.log(j("  $ ")+O("vaif init -t react-spa")+j("       Scaffold project")),console.log(j("  $ ")+O("vaif db push")+j("                 Push migrations")),console.log(j("  $ ")+O("vaif generate")+j("                Generate types")),console.log(j("  $ ")+O("vaif functions deploy")+j("        Deploy functions")),console.log(""),console.log(f.bold("  Categories")),console.log(j("    auth     ")+f.white("login, logout, whoami")),console.log(j("    project  ")+f.white("init, templates, info, status")),console.log(j("    schema   ")+f.white("pull, push, generate")),console.log(j("    database ")+f.white("db push, db pull, db seed, db reset")),console.log(j("    deploy   ")+f.white("functions deploy, functions list")),console.log(j("    security ")+f.white("keys, secrets")),console.log(j("    ai       ")+f.white("claude-setup")),console.log(""),console.log(j("  Run ")+O("vaif <command> --help")+j(" for details")),console.log(j("  Docs: ")+f.underline("https://docs.vaif.studio")),console.log("");}program.name("vaif").description("VAIF CLI - Type generation and development tools").version(Ne);program.command("login").description("Authenticate with VAIF (opens browser)").option("-e, --email","Login with email/password instead of browser").option("-p, --project-id <id>","Default project ID").action(c);program.command("logout").description("Log out and remove stored credentials").action(d);program.command("whoami").description("Show current authenticated user").action(e);program.command("init").description("Initialize VAIF configuration in your project").option("--typescript","Setup for TypeScript project").option("-f, --force","Overwrite existing config").option("-t, --template <name>","Scaffold from a template (run vaif templates for list)").option("--features <features>","Comma-separated features to include: auth,database,realtime,storage,functions").option("--add-features <features>","Add features to an existing project (requires --template)").action(h);program.command("templates").alias("tpl").description("List available project templates").action(g);program.command("info").description("Show project information (name, region, URLs)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(De);program.command("status").description("Show project status (tables, functions, storage, connections)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(Te);program.command("pull").description("Pull database schema from your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-o, --output <path>","Output file path","vaif.schema.json").option("-s, --schema <name>","Schema name","public").option("-p, --project-id <id>","Project ID (overrides config)").action(ce);program.command("push").description("Push local schema changes to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-s, --schema <path>","Schema file path","vaif.schema.json").option("-p, --project-id <id>","Project ID (overrides config)").option("--dry-run","Preview changes without applying").option("-f, --force","Apply changes without confirmation").action(fe);program.command("generate").alias("gen").description("Generate TypeScript types from your database schema").option("-c, --connection <url>","Database connection string").option("-o, --output <path>","Output file path","./src/types/database.ts").option("--schema <name>","Schema name","public").option("--config <path>","Config file path","vaif.config.json").option("--dry-run","Preview generated types without writing").action(f$1);var Le=program.command("functions").alias("fn").description("Manage serverless functions");Le.command("deploy").description("Deploy functions to your VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").option("-n, --name <name>","Function name filter").option("-r, --runtime <runtime>","Runtime (nodejs, typescript, python)").option("--entrypoint <file>","Specific entrypoint file").option("--dry-run","Preview deployment without deploying").action(he);Le.command("list").alias("ls").description("List deployed functions").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID").action(me);var G=program.command("db").description("Database management commands");G.command("push").description("Push local Drizzle migrations to VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-d, --dir <path>","Migrations directory","./drizzle").option("--dry-run","Preview without applying").action(je);G.command("pull").description("Pull schema from VAIF project").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-o, --output <path>","Output file","vaif.schema.json").action(Ie);G.command("seed").description("Seed your database with test data").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --file <path>","Specific seed file").option("-t, --table <name>","Seed specific table only").option("--truncate","Truncate tables before seeding").option("--dry-run","Preview seeding without inserting data").action(we);G.command("reset").description("Reset database (drop all tables and data)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-f, --force","Confirm reset (required)").action(ve);var Ve=program.command("keys").description("Manage API keys");Ve.command("generate").description("Generate a new API key").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-n, --name <name>","Key name").action(ke);Ve.command("list").alias("ls").description("List API keys").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").action(Ae);var Y=program.command("secrets").alias("sec").description("Manage function secrets");Y.command("set <name> [value]").description("Create or update a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").option("--from-file <path>","Read secret value from a file").action(Pe);Y.command("list").alias("ls").description("List all secrets (names only)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(Ce);Y.command("get <name>").description("Reveal a secret value").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(Ee);Y.command("delete <name>").description("Delete a secret").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID (overrides config)").option("-e, --env-id <id>","Environment ID or name").action(xe);program.command("claude-setup").description("Configure Claude Code integration (MCP server + CLAUDE.md)").option("-c, --config <path>","Config file path","vaif.config.json").option("-p, --project-id <id>","Project ID").option("-k, --api-key <key>","API key for MCP server").option("--skip-mcp","Skip generating .mcp.json").option("--skip-claude-md","Skip generating CLAUDE.md").option("-o, --output-dir <dir>","Output directory",".").action(Oe);process.argv.slice(2).length||(jo(),process.exit(0));program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaiftech/cli",
-  "version": "1.9.3",
+  "version": "1.9.5",
   "description": "VAIF CLI - Type generation and development tools",
   "type": "module",
   "main": "dist/index.js",