@videan/cli 0.1.1 → 0.3.0

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command17 } from "commander";
+import { Command as Command18 } from "commander";
 
 // src/commands/login.ts
 import { Command } from "commander";
@@ -120,8 +120,8 @@ var CloudClient = class {
     const res = await this.request("GET", "/plans");
     return res.data;
   }
-  async request(method, path4, body) {
-    const url = `${this.baseUrl}${path4}`;
+  async request(method, path6, body) {
+    const url = `${this.baseUrl}${path6}`;
     const headers = {
       "Authorization": `Bearer ${this.apiKey}`,
       "Content-Type": "application/json"
@@ -290,8 +290,8 @@ var AppsNamespace = class {
     if (opts?.instance) params.set("instance", opts.instance);
     if (opts?.nextToken) params.set("next_token", opts.nextToken);
     const query = params.toString();
-    const path4 = `/apps/${appId}/logs${query ? `?${query}` : ""}`;
-    const res = await this.client.request("GET", path4);
+    const path6 = `/apps/${appId}/logs${query ? `?${query}` : ""}`;
+    const res = await this.client.request("GET", path6);
     return res.data;
   }
   /**
@@ -934,35 +934,100 @@ var logoutCommand = new Command2("logout").description("Forget the saved key, or
 import { Command as Command3 } from "commander";
 import inquirer2 from "inquirer";
 import chalk3 from "chalk";
+import fs2 from "fs-extra";
+import path2 from "node:path";
+
+// src/videan-md.ts
 import fs from "fs-extra";
 import path from "node:path";
-var initCommand = new Command3("init").description("Initialize a new Cloud app in the current directory").action(async () => {
-  const configPath2 = path.join(process.cwd(), CONFIG_FILE_NAME);
-  if (await fs.pathExists(configPath2)) {
-    console.log(chalk3.yellow(`${CONFIG_FILE_NAME} already exists in this directory.`));
-    const { overwrite } = await inquirer2.prompt([
-      { type: "confirm", name: "overwrite", message: "Overwrite?", default: false }
-    ]);
-    if (!overwrite) return;
+var VIDEAN_MD = `# This project deploys to Videan
+
+Deploy: \`videan deploy\` (from this directory). Logs: \`videan logs -f\`.
+Undo a bad deploy: \`videan rollback\`. Full agent guide: https://videan.xyz/llms.txt
+
+The contract: serve HTTP on **port 3000**. Runtime (Node/Python/Next.js/Go/
+Dockerfile) is detected from the files \u2014 no config needed. If the app has a
+managed database, read \`DATABASE_URL\` from the environment. Log to stdout.
+
+## Auth \u2014 read this before writing any login code
+
+This platform puts a sign-in gate in front of apps unless they are public.
+
+- **Gated app (visibility private/org/authenticated \u2014 the default): DO NOT
+  build a login page.** Every request arrives with the visitor already
+  authenticated: read \`X-User-Id\`, \`X-User-Email\`, \`X-User-Roles\`. If the
+  app needs its own user records, find-or-create a local user from
+  \`X-User-Email\` and start your session from that \u2014 never render a login
+  form when the header is present.
+- **Public app** (\`videan apps set --public\`): the gate is out of the path,
+  no headers arrive, bring your own auth if the app needs any. Required for
+  anything that must receive webhooks from external services.
+
+Secrets: \`videan secrets set KEY=value\` (UPPERCASE keys) \u2014 injected as env
+vars on the next deploy. Never commit credentials to this repo instead.
+`;
+var POINTER = "\n## Videan\n\nThis project deploys to Videan \u2014 see VIDEAN.md for the platform contract (port 3000, auth headers, deploy commands) before writing server or login code.\n";
+async function writeVideanMd(dir) {
+  const wrote = [];
+  const target = path.join(dir, "VIDEAN.md");
+  if (!await fs.pathExists(target)) {
+    await fs.writeFile(target, VIDEAN_MD, "utf-8");
+    wrote.push("VIDEAN.md");
+  }
+  for (const name of ["CLAUDE.md", "AGENTS.md"]) {
+    const p = path.join(dir, name);
+    if (!await fs.pathExists(p)) continue;
+    const body = await fs.readFile(p, "utf-8");
+    if (body.includes("VIDEAN.md")) continue;
+    await fs.appendFile(p, POINTER, "utf-8");
+    wrote.push(`${name} (pointer)`);
+  }
+  return wrote;
+}
+
+// src/commands/init.ts
+var initCommand = new Command3("init").description("Initialize a new Cloud app in the current directory").option("--name <name>", "App name (defaults to the directory name)").option("--runtime <runtime>", "One of: " + SUPPORTED_RUNTIMES.join(", ")).option("--entrypoint <file>", "Entry file", "index.ts").option("--yes", "Take the defaults without prompting").action(async (opts) => {
+  const configPath2 = path2.join(process.cwd(), CONFIG_FILE_NAME);
+  const interactive = process.stdin.isTTY && !opts.yes;
+  if (await fs2.pathExists(configPath2)) {
+    if (!interactive) {
+      console.log(chalk3.yellow(`${CONFIG_FILE_NAME} already exists; leaving it alone.`));
+    } else {
+      console.log(chalk3.yellow(`${CONFIG_FILE_NAME} already exists in this directory.`));
+      const { overwrite } = await inquirer2.prompt([
+        { type: "confirm", name: "overwrite", message: "Overwrite?", default: false }
+      ]);
+      if (!overwrite) {
+        for (const f of await writeVideanMd(process.cwd())) console.log(chalk3.green(`Wrote ${f}`));
+        return;
+      }
+    }
   }
-  const answers = await inquirer2.prompt([
-    { type: "input", name: "name", message: "App name:", default: path.basename(process.cwd()) },
-    {
-      type: "list",
-      name: "runtime",
-      message: "Runtime:",
-      choices: SUPPORTED_RUNTIMES
-    },
-    { type: "input", name: "entrypoint", message: "Entrypoint:", default: "index.ts" }
-  ]);
-  const config2 = [
-    `name: ${answers.name}`,
-    `runtime: ${answers.runtime}`,
-    `entrypoint: ${answers.entrypoint}`,
-    ""
-  ].join("\n");
-  await fs.writeFile(configPath2, config2, "utf-8");
-  console.log(chalk3.green(`Created ${CONFIG_FILE_NAME}`));
+  if (!await fs2.pathExists(configPath2) || interactive) {
+    const answers = interactive ? await inquirer2.prompt([
+      { type: "input", name: "name", message: "App name:", default: opts.name || path2.basename(process.cwd()) },
+      {
+        type: "list",
+        name: "runtime",
+        message: "Runtime:",
+        choices: SUPPORTED_RUNTIMES
+      },
+      { type: "input", name: "entrypoint", message: "Entrypoint:", default: opts.entrypoint }
+    ]) : {
+      name: opts.name || path2.basename(process.cwd()),
+      runtime: opts.runtime || SUPPORTED_RUNTIMES[0],
+      entrypoint: opts.entrypoint
+    };
+    const config2 = [
+      `name: ${answers.name}`,
+      `runtime: ${answers.runtime}`,
+      `entrypoint: ${answers.entrypoint}`,
+      ""
+    ].join("\n");
+    await fs2.writeFile(configPath2, config2, "utf-8");
+    console.log(chalk3.green(`Created ${CONFIG_FILE_NAME}`));
+  }
+  for (const f of await writeVideanMd(process.cwd())) console.log(chalk3.green(`Wrote ${f}`));
 });
 
 // src/commands/deploy.ts
@@ -971,8 +1036,8 @@ import chalk5 from "chalk";
 import ora2 from "ora";
 
 // src/util.ts
-import fs2 from "fs-extra";
-import path2 from "node:path";
+import fs3 from "fs-extra";
+import path3 from "node:path";
 import ignore from "ignore";
 import chalk4 from "chalk";
 var MAX_FILE_BYTES = 10 * 1024 * 1024;
@@ -989,30 +1054,30 @@ async function collectFiles(dir) {
     ".DS_Store",
     "*.log"
   ]);
-  const gitignorePath = path2.join(dir, ".gitignore");
-  if (await fs2.pathExists(gitignorePath)) {
-    const content = await fs2.readFile(gitignorePath, "utf-8");
+  const gitignorePath = path3.join(dir, ".gitignore");
+  if (await fs3.pathExists(gitignorePath)) {
+    const content = await fs3.readFile(gitignorePath, "utf-8");
     ig.add(content);
   }
-  const cloudignorePath = path2.join(dir, ".cloudignore");
-  if (await fs2.pathExists(cloudignorePath)) {
-    const content = await fs2.readFile(cloudignorePath, "utf-8");
+  const cloudignorePath = path3.join(dir, ".cloudignore");
+  if (await fs3.pathExists(cloudignorePath)) {
+    const content = await fs3.readFile(cloudignorePath, "utf-8");
     ig.add(content);
   }
   const files = {};
   const binaryFiles = {};
   const skipped = [];
   async function walk(currentDir) {
-    const entries = await fs2.readdir(currentDir, { withFileTypes: true });
+    const entries = await fs3.readdir(currentDir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = path2.join(currentDir, entry.name);
-      const relativePath = path2.relative(dir, fullPath);
+      const fullPath = path3.join(currentDir, entry.name);
+      const relativePath = path3.relative(dir, fullPath);
       const ignorePath = entry.isDirectory() ? `${relativePath}/` : relativePath;
       if (ig.ignores(ignorePath)) continue;
       if (entry.isDirectory()) {
         await walk(fullPath);
       } else if (entry.isFile()) {
-        const buffer = await fs2.readFile(fullPath);
+        const buffer = await fs3.readFile(fullPath);
         if (buffer.byteLength > MAX_FILE_BYTES) {
           skipped.push({
             path: relativePath,
@@ -1118,6 +1183,16 @@ var deployCommand = new Command4("deploy").description("Deploy the current direc
   }
   if (current.status === "running") {
     spinner.succeed(chalk5.green(`Deployed successfully!`));
+    try {
+      const app = await client4.apps.get(appId);
+      const gated = app.visibility ? app.visibility !== "public" : app.authRequired !== false;
+      console.log(
+        gated ? chalk5.gray(
+          `  Access: ${app.visibility || "org"} \u2014 visitors sign in once at the edge; your app receives X-User-Id / X-User-Email on every request. Don't build a login page.`
+        ) : chalk5.gray(`  Access: public \u2014 reachable by anyone; bring your own auth if it needs any.`)
+      );
+    } catch {
+    }
     if (current.url) {
       const url = /^https?:\/\//.test(current.url) ? current.url : `https://${current.url}`;
       console.log(chalk5.cyan(`  URL: ${url}`));
@@ -1135,19 +1210,94 @@ var deployCommand = new Command4("deploy").description("Deploy the current direc
   }
 });
 
-// src/commands/logs.ts
+// src/commands/pull.ts
 import { Command as Command5 } from "commander";
 import chalk6 from "chalk";
-var logsCommand = new Command5("logs").description("View app logs").option("-a, --app <id>", "App ID").option("-f, --follow", "Follow log output").option("-n, --lines <n>", "Number of lines to show", "50").option("-s, --since <when>", "Start of the window: ISO timestamp or an offset like 15m, 2h, 7d", "1h").option("--until <when>", "End of the window (same formats as --since)").option("-q, --search <text>", "Only lines containing this text").option("--pattern <pattern>", "CloudWatch filter pattern, for the real syntax").option("--instance <prefix>", "Only one instance, by log stream prefix").action(async (opts) => {
+import ora3 from "ora";
+import fs4 from "fs-extra";
+import path4 from "node:path";
+var pullCommand = new Command5("pull").description("Download a snapshot's files into a directory").argument("[snapshot]", "Snapshot id (defaults to the newest)").option("-a, --app <id>", "App ID to pull from").option("-o, --out <dir>", "Directory to write into", ".").option("--force", "Write into a non-empty directory").action(async (snapshotArg, opts) => {
+  const apiKey = getApiKey();
+  requireApiKey(apiKey);
+  const baseUrl = getBaseUrl();
+  const get = async (p) => {
+    const res = await fetch(`${baseUrl}${p}`, {
+      headers: { authorization: `Bearer ${apiKey}` }
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => null);
+      throw new Error(body?.error?.message || `${res.status} from ${p}`);
+    }
+    return (await res.json()).data;
+  };
+  const spinner = ora3("Resolving snapshot...").start();
+  try {
+    let snapshotId = snapshotArg ?? "";
+    if (!snapshotId) {
+      const appId = opts.app || getCurrentApp();
+      if (!appId) {
+        spinner.fail(chalk6.red("No app specified. Use --app, VIDEAN_APP_ID, or name a snapshot id."));
+        process.exit(1);
+      }
+      const [latest] = await get(
+        `/v1/apps/${appId}/snapshots?limit=1`
+      );
+      if (!latest) {
+        spinner.fail(chalk6.red("This app has no snapshots yet."));
+        process.exit(1);
+      }
+      snapshotId = latest.id;
+    }
+    const detail = await get(
+      `/v1/snapshots/${snapshotId}`
+    );
+    const outDir = path4.resolve(opts.out);
+    await fs4.ensureDir(outDir);
+    const existing = await fs4.readdir(outDir);
+    if (existing.length > 0 && !opts.force) {
+      spinner.fail(chalk6.red(`${outDir} is not empty. Pass --force to write into it anyway.`));
+      process.exit(1);
+    }
+    spinner.text = `Pulling ${detail.manifest.length} files...`;
+    let written = 0;
+    for (const file of detail.manifest) {
+      const body = await get(
+        `/v1/snapshots/${snapshotId}/files/${file}`
+      );
+      const target = path4.join(outDir, file);
+      if (!target.startsWith(outDir + path4.sep) && target !== outDir) continue;
+      await fs4.ensureDir(path4.dirname(target));
+      await fs4.writeFile(
+        target,
+        body.encoding === "base64" ? Buffer.from(body.content, "base64") : body.content
+      );
+      written++;
+      spinner.text = `Pulling ${written}/${detail.manifest.length}...`;
+    }
+    spinner.succeed(
+      chalk6.green(
+        `Pulled snapshot ${detail.seq ? `#${detail.seq}` : snapshotId} \u2014 ${written} files into ${outDir}`
+      )
+    );
+  } catch (err) {
+    spinner.fail(chalk6.red(err instanceof Error ? err.message : String(err)));
+    process.exit(1);
+  }
+});
+
+// src/commands/logs.ts
+import { Command as Command6 } from "commander";
+import chalk7 from "chalk";
+var logsCommand = new Command6("logs").description("View app logs").option("-a, --app <id>", "App ID").option("-f, --follow", "Follow log output").option("-n, --lines <n>", "Number of lines to show", "50").option("-s, --since <when>", "Start of the window: ISO timestamp or an offset like 15m, 2h, 7d", "1h").option("--until <when>", "End of the window (same formats as --since)").option("-q, --search <text>", "Only lines containing this text").option("--pattern <pattern>", "CloudWatch filter pattern, for the real syntax").option("--instance <prefix>", "Only one instance, by log stream prefix").action(async (opts) => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
   const appId = opts.app || getCurrentApp();
   if (!appId) {
-    console.error(chalk6.red("No app specified. Use --app or link an app."));
+    console.error(chalk7.red("No app specified. Use --app or link an app."));
     process.exit(1);
   }
   if (opts.search && opts.pattern) {
-    console.error(chalk6.red("Use either --search or --pattern, not both."));
+    console.error(chalk7.red("Use either --search or --pattern, not both."));
     process.exit(1);
   }
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
@@ -1170,43 +1320,43 @@ var logsCommand = new Command5("logs").description("View app logs").option("-a,
   });
   for (const entry of page.events) print(entry);
   if (page.events.length === 0) {
-    console.log(chalk6.gray(`No log lines since ${page.start}.`));
+    console.log(chalk7.gray(`No log lines since ${page.start}.`));
   }
   if (page.truncated) {
     console.log(
-      chalk6.yellow(
+      chalk7.yellow(
         "\nThis is part of the window -- there are more lines than one request reads. Narrow --since or add --search."
       )
     );
   }
 });
 function print(entry) {
-  console.log(`${chalk6.gray(entry.timestamp)} ${formatLevel(entry.level)} ${entry.message}`);
+  console.log(`${chalk7.gray(entry.timestamp)} ${formatLevel(entry.level)} ${entry.message}`);
 }
 function formatLevel(level) {
   switch (level) {
     case "error":
-      return chalk6.red("[ERR]");
+      return chalk7.red("[ERR]");
     case "warn":
-      return chalk6.yellow("[WRN]");
+      return chalk7.yellow("[WRN]");
     case "info":
-      return chalk6.blue("[INF]");
+      return chalk7.blue("[INF]");
     case "debug":
-      return chalk6.gray("[DBG]");
+      return chalk7.gray("[DBG]");
     default:
-      return chalk6.gray("[LOG]");
+      return chalk7.gray("[LOG]");
   }
 }
 
 // src/commands/metrics.ts
-import { Command as Command6 } from "commander";
-import chalk7 from "chalk";
-var metricsCommand = new Command6("metrics").description("Traffic, latency and resource use for an app").option("-a, --app <id>", "App ID").option("-s, --since <when>", "Start of the window: ISO timestamp or an offset like 15m, 2h, 7d", "1h").option("--until <when>", "End of the window (same formats as --since)").option("--series", "Print each bucket instead of just the summary").option("--json", "Print the raw response").action(async (opts) => {
+import { Command as Command7 } from "commander";
+import chalk8 from "chalk";
+var metricsCommand = new Command7("metrics").description("Traffic, latency and resource use for an app").option("-a, --app <id>", "App ID").option("-s, --since <when>", "Start of the window: ISO timestamp or an offset like 15m, 2h, 7d", "1h").option("--until <when>", "End of the window (same formats as --since)").option("--series", "Print each bucket instead of just the summary").option("--json", "Print the raw response").action(async (opts) => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
   const appId = opts.app || getCurrentApp();
   if (!appId) {
-    console.error(chalk7.red("No app specified. Use --app or link an app."));
+    console.error(chalk8.red("No app specified. Use --app or link an app."));
     process.exit(1);
   }
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
@@ -1217,7 +1367,7 @@ var metricsCommand = new Command6("metrics").description("Traffic, latency and r
   }
   const t = metrics.totals;
   console.log(
-    chalk7.dim(`${metrics.start} \u2192 ${metrics.end}  (${metrics.period}s buckets)`)
+    chalk8.dim(`${metrics.start} \u2192 ${metrics.end}  (${metrics.period}s buckets)`)
   );
   console.log();
   console.log(`  ${label("Requests")} ${t.requests}`);
@@ -1225,76 +1375,76 @@ var metricsCommand = new Command6("metrics").description("Traffic, latency and r
   console.log(`  ${label("5xx")} ${count(t.serverErrors, true)}`);
   console.log(`  ${label("Gate denied")} ${count(t.gateDenied)}`);
   console.log(`  ${label("Latency avg")} ${ms(t.latencyAvgMs)}`);
-  console.log(`  ${label("Latency p95")} ${ms(t.latencyP95Ms)} ${chalk7.dim("(sampled)")}`);
+  console.log(`  ${label("Latency p95")} ${ms(t.latencyP95Ms)} ${chalk8.dim("(sampled)")}`);
   console.log(`  ${label("CPU avg")} ${units(t.cpuAvg)}`);
   console.log(`  ${label("Memory avg")} ${mb(t.memoryAvgMb)}`);
   if (t.requests === 0) {
     console.log();
-    console.log(chalk7.dim("No requests recorded in this window."));
+    console.log(chalk8.dim("No requests recorded in this window."));
   }
   if (opts.series) {
     console.log();
     for (const [name, points] of Object.entries(metrics.series)) {
       if (points.length === 0) continue;
-      console.log(chalk7.bold(name));
-      for (const p of points) console.log(`  ${chalk7.dim(p.t)}  ${p.v}`);
+      console.log(chalk8.bold(name));
+      for (const p of points) console.log(`  ${chalk8.dim(p.t)}  ${p.v}`);
     }
   }
 });
 function label(text) {
-  return chalk7.dim(text.padEnd(13));
+  return chalk8.dim(text.padEnd(13));
 }
 function count(n, severe = false) {
-  if (n === 0) return chalk7.dim("0");
-  return severe ? chalk7.red(String(n)) : chalk7.yellow(String(n));
+  if (n === 0) return chalk8.dim("0");
+  return severe ? chalk8.red(String(n)) : chalk8.yellow(String(n));
 }
 function ms(v) {
-  return v === null ? chalk7.dim("\u2014") : `${v} ms`;
+  return v === null ? chalk8.dim("\u2014") : `${v} ms`;
 }
 function mb(v) {
-  return v === null ? chalk7.dim("\u2014") : `${v} MB`;
+  return v === null ? chalk8.dim("\u2014") : `${v} MB`;
 }
 function units(v) {
-  return v === null ? chalk7.dim("\u2014") : `${v} CPU units`;
+  return v === null ? chalk8.dim("\u2014") : `${v} CPU units`;
 }
 
 // src/commands/rollback.ts
-import { Command as Command7 } from "commander";
-import chalk8 from "chalk";
-import ora3 from "ora";
-var rollbackCommand = new Command7("rollback").description("Rollback to the previous production deployment").option("-a, --app <id>", "App ID").action(async (opts) => {
+import { Command as Command8 } from "commander";
+import chalk9 from "chalk";
+import ora4 from "ora";
+var rollbackCommand = new Command8("rollback").description("Rollback to the previous production deployment").option("-a, --app <id>", "App ID").action(async (opts) => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
   const appId = opts.app || getCurrentApp();
   if (!appId) {
-    console.error(chalk8.red("No app specified. Use --app or link an app."));
+    console.error(chalk9.red("No app specified. Use --app or link an app."));
     process.exit(1);
   }
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
-  const spinner = ora3("Rolling back...").start();
+  const spinner = ora4("Rolling back...").start();
   try {
     const deployment = await client4.apps.rollback(appId);
-    spinner.succeed(chalk8.green("Rollback successful!"));
+    spinner.succeed(chalk9.green("Rollback successful!"));
     if (deployment.url) {
-      console.log(chalk8.cyan(`  URL: ${deployment.url}`));
+      console.log(chalk9.cyan(`  URL: ${deployment.url}`));
     }
   } catch (error) {
-    spinner.fail(chalk8.red(`Rollback failed: ${error.message}`));
+    spinner.fail(chalk9.red(`Rollback failed: ${error.message}`));
     process.exit(1);
   }
 });
 
 // src/commands/secrets.ts
-import { Command as Command8 } from "commander";
-import chalk9 from "chalk";
+import { Command as Command9 } from "commander";
+import chalk10 from "chalk";
 import inquirer3 from "inquirer";
-var secretsCommand = new Command8("secrets").description("Manage app secrets");
+var secretsCommand = new Command9("secrets").description("Manage app secrets");
 secretsCommand.command("set <key> [value]").description("Set a secret").option("-a, --app <id>", "App ID").action(async (key, value, opts) => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
   const appId = opts.app || getCurrentApp();
   if (!appId) {
-    console.error(chalk9.red("No app specified."));
+    console.error(chalk10.red("No app specified."));
     process.exit(1);
   }
   if (!value) {
@@ -1305,20 +1455,20 @@ secretsCommand.command("set <key> [value]").description("Set a secret").option("
   }
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   await client4.secrets.set(appId, key, value);
-  console.log(chalk9.green(`Secret "${key}" set successfully.`));
+  console.log(chalk10.green(`Secret "${key}" set successfully.`));
 });
 secretsCommand.command("list").description("List all secrets").option("-a, --app <id>", "App ID").action(async (opts) => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
   const appId = opts.app || getCurrentApp();
   if (!appId) {
-    console.error(chalk9.red("No app specified."));
+    console.error(chalk10.red("No app specified."));
     process.exit(1);
   }
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   const secrets = await client4.secrets.list(appId);
   if (secrets.length === 0) {
-    console.log(chalk9.gray("No secrets configured."));
+    console.log(chalk10.gray("No secrets configured."));
     return;
   }
   console.log(formatRow(["KEY", "UPDATED"], [30, 24]));
@@ -1331,24 +1481,24 @@ secretsCommand.command("remove <key>").description("Remove a secret").option("-a
   requireApiKey(apiKey);
   const appId = opts.app || getCurrentApp();
   if (!appId) {
-    console.error(chalk9.red("No app specified."));
+    console.error(chalk10.red("No app specified."));
     process.exit(1);
   }
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   await client4.secrets.delete(appId, key);
-  console.log(chalk9.green(`Secret "${key}" removed.`));
+  console.log(chalk10.green(`Secret "${key}" removed.`));
 });
 
 // src/commands/apps.ts
-import { Command as Command9 } from "commander";
-import chalk10 from "chalk";
+import { Command as Command10 } from "commander";
+import chalk11 from "chalk";
 import inquirer4 from "inquirer";
-var appsCommand = new Command9("apps").description("Manage apps");
+var appsCommand = new Command10("apps").description("Manage apps");
 function accessOption(value) {
   if (value === void 0) return void 0;
   const tier = value.trim().toLowerCase();
   if (!isVisibility(tier)) {
-    console.error(chalk10.red(`Unknown --access value "${value}". Use one of: ${VISIBILITIES.join(", ")}`));
+    console.error(chalk11.red(`Unknown --access value "${value}". Use one of: ${VISIBILITIES.join(", ")}`));
     process.exit(1);
   }
   return tier;
@@ -1364,7 +1514,7 @@ appsCommand.command("list").description("List all apps").option("-o, --org <id>"
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   const apps = await client4.apps.list(orgId);
   if (apps.length === 0) {
-    console.log(chalk10.gray("No apps yet. Create one with `videan apps create`."));
+    console.log(chalk11.gray("No apps yet. Create one with `videan apps create`."));
     return;
   }
   const widths = [20, 24, 10, 44];
@@ -1386,7 +1536,7 @@ appsCommand.command("create").description("Create a new app").option("-n, --name
       name = answers.name;
     }
     if (!name) {
-      console.error(chalk10.red("An app name is required."));
+      console.error(chalk11.red("An app name is required."));
       process.exit(1);
     }
     const visibility = accessOption(opts.access) ?? (opts.public ? "public" : void 0);
@@ -1400,10 +1550,10 @@ appsCommand.command("create").description("Create a new app").option("-n, --name
       visibility
     });
     setCurrentApp(app.id);
-    console.log(chalk10.green(`App "${app.name}" created (${app.id})`));
-    console.log(chalk10.gray(`  Access: ${describeAccess(app)}`));
-    console.log(chalk10.gray(`  URL after first deploy: ${appUrl(app.slug)}`));
-    console.log(chalk10.gray("  Push code with `videan deploy` \u2014 the runtime is auto-detected."));
+    console.log(chalk11.green(`App "${app.name}" created (${app.id})`));
+    console.log(chalk11.gray(`  Access: ${describeAccess(app)}`));
+    console.log(chalk11.gray(`  URL after first deploy: ${appUrl(app.slug)}`));
+    console.log(chalk11.gray("  Push code with `videan deploy` \u2014 the runtime is auto-detected."));
   }
 );
 appsCommand.command("set").description("Change an app's settings (scale, rate limit, gate, capabilities)").option("-a, --app <id>", "App ID").option("-n, --name <name>", "Rename the app (the URL keeps its original slug)").option("--cpu <units>", "CPU units per instance (256 = 0.25 vCPU)").option("--memory <mib>", "Memory per instance, in MiB").option("--instances <n>", "Number of instances to run").option("--rate-limit <rpm>", "Requests per minute per client").option("--no-rate-limit", "Remove the rate limit").option("--access <tier>", `Who may open the app: ${VISIBILITIES.join(" | ")}`).option("--public", "Serve without the platform login gate (same as --access public)").option("--private", "Require platform login (leaves the tier alone if it is already gated)").option("--postgres", "Provision a managed Postgres database").option("--storage", "Give the app an object-storage prefix").option("--email", "Let the app send mail through the platform").option("--json", "Print the raw response").action(
@@ -1412,16 +1562,16 @@ appsCommand.command("set").description("Change an app's settings (scale, rate li
     requireApiKey(apiKey);
     const appId = opts.app || getCurrentApp();
     if (!appId) {
-      console.error(chalk10.red("No app specified. Use --app or link an app."));
+      console.error(chalk11.red("No app specified. Use --app or link an app."));
       process.exit(1);
     }
     if (opts.public && opts.private) {
-      console.error(chalk10.red("--public and --private contradict each other."));
+      console.error(chalk11.red("--public and --private contradict each other."));
       process.exit(1);
     }
     const access = accessOption(opts.access);
     if (access && (opts.public || opts.private)) {
-      console.error(chalk10.red("--access already says who may open the app; drop --public/--private."));
+      console.error(chalk11.red("--access already says who may open the app; drop --public/--private."));
       process.exit(1);
     }
     const changes = {};
@@ -1442,7 +1592,7 @@ appsCommand.command("set").description("Change an app's settings (scale, rate li
     if (opts.storage) changes.storage = true;
     if (opts.email) changes.email = true;
     if (Object.keys(changes).length === 0) {
-      console.error(chalk10.red("Nothing to change. Pass at least one option."));
+      console.error(chalk11.red("Nothing to change. Pass at least one option."));
       process.exit(1);
     }
     const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
@@ -1451,7 +1601,7 @@ appsCommand.command("set").description("Change an app's settings (scale, rate li
       console.log(JSON.stringify(app, null, 2));
       return;
     }
-    console.log(chalk10.green(`Updated ${app.name} (${app.id})`));
+    console.log(chalk11.green(`Updated ${app.name} (${app.id})`));
     console.log(`  Access:      ${describeAccess(app)}`);
     console.log(`  Scale:       ${app.cpu ?? "default"} CPU / ${app.memory ?? "default"} MiB`);
     console.log(
@@ -1459,7 +1609,7 @@ appsCommand.command("set").description("Change an app's settings (scale, rate li
     );
     if (app.restartRequired) {
       console.log(
-        chalk10.yellow("\n  These settings apply to the next deploy. Run `videan deploy` to pick them up.")
+        chalk11.yellow("\n  These settings apply to the next deploy. Run `videan deploy` to pick them up.")
       );
     }
   }
@@ -1467,7 +1617,7 @@ appsCommand.command("set").description("Change an app's settings (scale, rate li
 function intOption(flag, raw) {
   const n = Number(raw);
   if (!Number.isInteger(n) || n <= 0) {
-    console.error(chalk10.red(`${flag} expects a positive whole number, got "${raw}".`));
+    console.error(chalk11.red(`${flag} expects a positive whole number, got "${raw}".`));
     process.exit(1);
   }
   return n;
@@ -1486,64 +1636,64 @@ appsCommand.command("delete <id>").description("Delete an app and all its resour
   if (!confirm) return;
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   const { warnings } = await client4.apps.delete(id);
-  console.log(chalk10.green("App deleted."));
+  console.log(chalk11.green("App deleted."));
   if (warnings.length > 0) {
-    console.log(chalk10.yellow("\nSome resources could not be released:"));
+    console.log(chalk11.yellow("\nSome resources could not be released:"));
     for (const w of warnings) {
-      console.log(chalk10.yellow(`  ${w.step}: ${w.error || "unknown error"}`));
+      console.log(chalk11.yellow(`  ${w.step}: ${w.error || "unknown error"}`));
     }
   }
 });
 
 // src/commands/status.ts
-import { Command as Command10 } from "commander";
-import chalk11 from "chalk";
+import { Command as Command11 } from "commander";
+import chalk12 from "chalk";
 function accessLine(app) {
   const tier = app.visibility ? visibilityOf(app.visibility) : app.authRequired ? "org" : "public";
   return `${tier} \u2014 ${VISIBILITY_LABELS[tier].toLowerCase()}`;
 }
-var statusCommand = new Command10("status").description("Show current app status").option("-a, --app <id>", "App ID").action(async (opts) => {
+var statusCommand = new Command11("status").description("Show current app status").option("-a, --app <id>", "App ID").action(async (opts) => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
   const appId = opts.app || getCurrentApp();
   if (!appId) {
-    console.error(chalk11.red("No app specified. Use --app or link an app."));
+    console.error(chalk12.red("No app specified. Use --app or link an app."));
     process.exit(1);
   }
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   const app = await client4.apps.get(appId);
   const health = await client4.apps.health(appId);
-  console.log(chalk11.bold(app.name));
+  console.log(chalk12.bold(app.name));
   console.log(`  ID:        ${app.id}`);
   console.log(`  Created:   ${app.createdAt}`);
   console.log(`  Postgres:  ${app.postgresEnabled ? "enabled" : "disabled"}`);
   console.log(`  Access:    ${accessLine(app)}`);
   console.log(`  State:     ${formatStatus(health.state)}`);
-  console.log(`  Healthy:   ${health.healthy ? chalk11.green("yes") : chalk11.red("no")}`);
-  console.log(`  URL:       ${chalk11.cyan(health.url || appUrl(app.slug))}`);
+  console.log(`  Healthy:   ${health.healthy ? chalk12.green("yes") : chalk12.red("no")}`);
+  console.log(`  URL:       ${chalk12.cyan(health.url || appUrl(app.slug))}`);
   const task = health.task;
   if (task) {
     if (task.exit_code !== void 0 && task.exit_code !== null) {
       const code = String(task.exit_code);
-      console.log(`  Exit code: ${task.exit_code === 0 ? code : chalk11.red(code)}`);
+      console.log(`  Exit code: ${task.exit_code === 0 ? code : chalk12.red(code)}`);
     }
     if (task.stopped_reason) {
-      console.log(`  Stopped:   ${chalk11.yellow(task.stopped_reason)}`);
+      console.log(`  Stopped:   ${chalk12.yellow(task.stopped_reason)}`);
     }
     if (task.container_reason) {
-      console.log(`  Detail:    ${chalk11.yellow(task.container_reason)}`);
+      console.log(`  Detail:    ${chalk12.yellow(task.container_reason)}`);
     }
   }
   if (!health.healthy) {
-    console.log(chalk11.gray("\nRun `videan logs` to see why."));
+    console.log(chalk12.gray("\nRun `videan logs` to see why."));
   }
 });
 
 // src/commands/keys.ts
-import { Command as Command11 } from "commander";
-import chalk12 from "chalk";
+import { Command as Command12 } from "commander";
+import chalk13 from "chalk";
 import inquirer5 from "inquirer";
-var keysCommand = new Command11("keys").description("Manage API keys for programmatic access");
+var keysCommand = new Command12("keys").description("Manage API keys for programmatic access");
 keysCommand.command("create <name>").description("Create an API key").option("-o, --org <id>", "Organization ID").option("-e, --expires <days>", "Expire the key after N days").option(
   "--app <id>",
   "Pin the key to one app (a service token, for code running inside it)"
@@ -1555,7 +1705,7 @@ keysCommand.command("create <name>").description("Create an API key").option("-o
   if (opts.expires !== void 0) {
     expiresInDays = Number(opts.expires);
     if (!Number.isInteger(expiresInDays) || expiresInDays < 1) {
-      console.error(chalk12.red("--expires must be a whole number of days, at least 1."));
+      console.error(chalk13.red("--expires must be a whole number of days, at least 1."));
       process.exit(1);
     }
   }
@@ -1566,22 +1716,22 @@ keysCommand.command("create <name>").description("Create an API key").option("-o
     expiresInDays,
     appId: opts.app
   });
-  console.log(chalk12.green(`Created key "${key.name}" (${key.id})`));
+  console.log(chalk13.green(`Created key "${key.name}" (${key.id})`));
   console.log(`
-  ${chalk12.bold(key.key)}
+  ${chalk13.bold(key.key)}
 `);
-  console.log(chalk12.yellow("Copy it now. It cannot be shown again."));
+  console.log(chalk13.yellow("Copy it now. It cannot be shown again."));
   if (key.appId) {
     console.log(
-      chalk12.gray(`Service token, scoped to app ${key.appId}. It cannot reach anything else.`)
+      chalk13.gray(`Service token, scoped to app ${key.appId}. It cannot reach anything else.`)
     );
   } else {
     console.log(
-      chalk12.gray("Acts as you across every app in the org -- do not deploy it inside an app.")
+      chalk13.gray("Acts as you across every app in the org -- do not deploy it inside an app.")
     );
   }
   if (key.expiresAt) {
-    console.log(chalk12.gray(`Expires ${key.expiresAt}`));
+    console.log(chalk13.gray(`Expires ${key.expiresAt}`));
   }
 });
 keysCommand.command("list").description("List API keys").option("-o, --org <id>", "Organization ID").action(async (opts) => {
@@ -1591,13 +1741,13 @@ keysCommand.command("list").description("List API keys").option("-o, --org <id>"
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   const keys = await client4.apiKeys.list(orgId);
   if (keys.length === 0) {
-    console.log(chalk12.gray("No API keys. Create one with `videan keys create <name>`."));
+    console.log(chalk13.gray("No API keys. Create one with `videan keys create <name>`."));
     return;
   }
   const widths = [24, 24, 16, 22, 12, 24];
   console.log(formatRow(["NAME", "ID", "PREFIX", "LAST USED", "STATE", "SCOPE"], widths));
   for (const key of keys) {
-    const state = key.revokedAt ? chalk12.red("revoked") : key.expiresAt && new Date(key.expiresAt) < /* @__PURE__ */ new Date() ? chalk12.yellow("expired") : chalk12.green("active");
+    const state = key.revokedAt ? chalk13.red("revoked") : key.expiresAt && new Date(key.expiresAt) < /* @__PURE__ */ new Date() ? chalk13.yellow("expired") : chalk13.green("active");
     console.log(formatRow(
       [
         key.name,
@@ -1620,13 +1770,13 @@ keysCommand.command("revoke <id>").description("Revoke an API key").action(async
   if (!confirm) return;
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   await client4.apiKeys.revoke(id);
-  console.log(chalk12.green("Key revoked."));
+  console.log(chalk13.green("Key revoked."));
 });
 
 // src/commands/orgs.ts
-import { Command as Command12 } from "commander";
-import chalk13 from "chalk";
-var orgsCommand = new Command12("orgs").description("Manage organizations");
+import { Command as Command13 } from "commander";
+import chalk14 from "chalk";
+var orgsCommand = new Command13("orgs").description("Manage organizations");
 orgsCommand.command("list").description("List your organizations").action(async () => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
@@ -1634,14 +1784,14 @@ orgsCommand.command("list").description("List your organizations").action(async
   const orgs = await client4.orgs.list();
   const current = getDefaultOrg();
   if (orgs.length === 0) {
-    console.log(chalk13.gray("No organizations. Create one with `videan orgs create <name>`."));
+    console.log(chalk14.gray("No organizations. Create one with `videan orgs create <name>`."));
     return;
   }
   const widths = [24, 24, 10, 8];
   console.log(formatRow(["NAME", "ID", "PLAN", ""], widths));
   for (const org of orgs) {
     console.log(formatRow(
-      [org.name, org.id, org.plan, org.id === current ? chalk13.green("default") : ""],
+      [org.name, org.id, org.plan, org.id === current ? chalk14.green("default") : ""],
       widths
     ));
   }
@@ -1652,7 +1802,7 @@ orgsCommand.command("create <name>").description("Create an organization").actio
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   const org = await client4.orgs.create(name);
   if (!getDefaultOrg()) setDefaultOrg(org.id);
-  console.log(chalk13.green(`Organization "${org.name}" created (${org.id})`));
+  console.log(chalk14.green(`Organization "${org.name}" created (${org.id})`));
 });
 orgsCommand.command("use <id>").description("Set the default organization for this machine").action(async (id) => {
   const apiKey = getApiKey();
@@ -1660,7 +1810,7 @@ orgsCommand.command("use <id>").description("Set the default organization for th
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   const org = await client4.orgs.get(id);
   setDefaultOrg(org.id);
-  console.log(chalk13.green(`Default organization set to "${org.name}".`));
+  console.log(chalk14.green(`Default organization set to "${org.name}".`));
 });
 orgsCommand.command("members").description("List organization members").option("-o, --org <id>", "Organization ID").action(async (opts) => {
   const apiKey = getApiKey();
@@ -1683,15 +1833,15 @@ orgsCommand.command("invite <email>").description("Invite a member by email").op
   const orgId = requireOrg(opts.org || getDefaultOrg());
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
   await client4.orgs.invite(orgId, email);
-  console.log(chalk13.green(`Invited ${email}.`));
+  console.log(chalk14.green(`Invited ${email}.`));
 });
 
 // src/commands/storage.ts
-import { Command as Command13 } from "commander";
-import chalk14 from "chalk";
-import fs3 from "fs-extra";
-import path3 from "node:path";
-var storageCommand = new Command13("storage").description("Store files for an app");
+import { Command as Command14 } from "commander";
+import chalk15 from "chalk";
+import fs5 from "fs-extra";
+import path5 from "node:path";
+var storageCommand = new Command14("storage").description("Store files for an app");
 function client() {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
@@ -1700,7 +1850,7 @@ function client() {
 function requireApp(opt) {
   const appId = opt || getCurrentApp();
   if (!appId) {
-    console.error(chalk14.red("No app specified. Use --app or link an app."));
+    console.error(chalk15.red("No app specified. Use --app or link an app."));
     process.exit(1);
   }
   return appId;
@@ -1723,7 +1873,7 @@ storageCommand.command("ls [prefix]").description("List stored objects").option(
     return;
   }
   if (objects.length === 0) {
-    console.log(chalk14.gray("No objects stored. Upload one with `videan storage put <file>`."));
+    console.log(chalk15.gray("No objects stored. Upload one with `videan storage put <file>`."));
     return;
   }
   const widths = [52, 12, 24];
@@ -1732,42 +1882,42 @@ storageCommand.command("ls [prefix]").description("List stored objects").option(
     console.log(formatRow([o.key, human(o.size), o.lastModified || "-"], widths));
   }
   const total = objects.reduce((sum, o) => sum + o.size, 0);
-  console.log(chalk14.dim(`
+  console.log(chalk15.dim(`
 ${objects.length} object(s), ${human(total)}`));
 });
 storageCommand.command("put <file> [key]").description("Upload a file (key defaults to the file's name)").option("-a, --app <id>", "App ID").option("-t, --type <mime>", "Content type").action(async (file, key, opts) => {
   const appId = requireApp(opts.app);
-  if (!await fs3.pathExists(file)) {
-    console.error(chalk14.red(`No such file: ${file}`));
+  if (!await fs5.pathExists(file)) {
+    console.error(chalk15.red(`No such file: ${file}`));
     process.exit(1);
   }
-  const body = await fs3.readFile(file);
-  const objectKey = key || path3.basename(file);
+  const body = await fs5.readFile(file);
+  const objectKey = key || path5.basename(file);
   const stored = await client().storage.upload(appId, objectKey, body, {
     contentType: opts.type
   });
   console.log(
-    chalk14.green(`Uploaded ${objectKey}`) + chalk14.dim(` (${human(body.length)})`)
+    chalk15.green(`Uploaded ${objectKey}`) + chalk15.dim(` (${human(body.length)})`)
   );
-  if (stored.etag) console.log(chalk14.dim(`etag ${stored.etag}`));
+  if (stored.etag) console.log(chalk15.dim(`etag ${stored.etag}`));
 });
 storageCommand.command("get <key> [file]").description("Download an object (defaults to the key's basename)").option("-a, --app <id>", "App ID").action(async (key, file, opts) => {
   const appId = requireApp(opts.app);
   const bytes = await client().storage.download(appId, key);
-  const dest = file || path3.basename(key);
-  await fs3.writeFile(dest, bytes);
-  console.log(chalk14.green(`Wrote ${dest}`) + chalk14.dim(` (${human(bytes.length)})`));
+  const dest = file || path5.basename(key);
+  await fs5.writeFile(dest, bytes);
+  console.log(chalk15.green(`Wrote ${dest}`) + chalk15.dim(` (${human(bytes.length)})`));
 });
 storageCommand.command("rm <key>").description("Delete an object").option("-a, --app <id>", "App ID").action(async (key, opts) => {
   const appId = requireApp(opts.app);
   await client().storage.delete(appId, key);
-  console.log(chalk14.green(`Deleted ${key}`));
+  console.log(chalk15.green(`Deleted ${key}`));
 });
 storageCommand.command("url <key>").description("Print a temporary link to an object").option("-a, --app <id>", "App ID").option("-e, --expires <seconds>", "Lifetime in seconds (30-3600)", "900").option("--upload", "Sign an upload (PUT) URL instead of a download").option("-d, --download <filename>", "Serve as a download with this filename").action(async (key, opts) => {
   const appId = requireApp(opts.app);
   const expiresIn = Number(opts.expires);
   if (!Number.isInteger(expiresIn) || expiresIn < 30 || expiresIn > 3600) {
-    console.error(chalk14.red("--expires must be a whole number of seconds between 30 and 3600."));
+    console.error(chalk15.red("--expires must be a whole number of seconds between 30 and 3600."));
     process.exit(1);
   }
   const signed = await client().storage.presign(appId, key, {
@@ -1777,7 +1927,7 @@ storageCommand.command("url <key>").description("Print a temporary link to an ob
   });
   console.log(signed.url);
   console.error(
-    chalk14.yellow(
+    chalk15.yellow(
       `This ${signed.method} link works for ${expiresIn}s for anyone who has it.`
     )
   );
@@ -1789,10 +1939,10 @@ storageCommand.command("usage").description("Total objects and bytes stored").op
 });
 
 // src/commands/email.ts
-import { Command as Command14 } from "commander";
-import chalk15 from "chalk";
-import fs4 from "fs-extra";
-var emailCommand = new Command14("email").description("Send email from an app");
+import { Command as Command15 } from "commander";
+import chalk16 from "chalk";
+import fs6 from "fs-extra";
+var emailCommand = new Command15("email").description("Send email from an app");
 function client2() {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
@@ -1801,7 +1951,7 @@ function client2() {
 function requireApp2(opt) {
   const appId = opt || getCurrentApp();
   if (!appId) {
-    console.error(chalk15.red("No app specified. Use --app or link an app."));
+    console.error(chalk16.red("No app specified. Use --app or link an app."));
     process.exit(1);
   }
   return appId;
@@ -1812,12 +1962,12 @@ emailCommand.command("send").description("Send an email").requiredOption("-t, --
     let text = opts.text;
     let html = opts.html;
     if (opts.bodyFile) {
-      const contents = await fs4.readFile(opts.bodyFile, "utf-8");
+      const contents = await fs6.readFile(opts.bodyFile, "utf-8");
       if (/\.html?$/i.test(opts.bodyFile)) html = contents;
       else text = contents;
     }
     if (!text && !html) {
-      console.error(chalk15.red("Nothing to send. Pass --text, --html or --body-file."));
+      console.error(chalk16.red("Nothing to send. Pass --text, --html or --body-file."));
       process.exit(1);
     }
     const sent = await client2().email.send(appId, {
@@ -1831,12 +1981,12 @@ emailCommand.command("send").description("Send an email").requiredOption("-t, --
       console.log(JSON.stringify(sent, null, 2));
       return;
     }
-    console.log(chalk15.green("Sent"));
+    console.log(chalk16.green("Sent"));
     console.log(`  From:    ${sent.from}`);
     console.log(`  To:      ${sent.to.join(", ")}`);
     console.log(`  Message: ${sent.messageId ?? "(no id returned)"}`);
     console.log(
-      chalk15.dim(
+      chalk16.dim(
         `  Quota:   ${sent.quota.sent}/${sent.quota.quota} today, resets ${sent.quota.resetsAt}`
       )
     );
@@ -1851,14 +2001,14 @@ emailCommand.command("quota").description("Show today's sending allowance").opti
   console.log(`Sent today:  ${quota.sent}`);
   console.log(`Daily quota: ${quota.quota}`);
   console.log(`Remaining:   ${quota.remaining}`);
-  console.log(chalk15.dim(`Resets at:   ${quota.resetsAt}`));
+  console.log(chalk16.dim(`Resets at:   ${quota.resetsAt}`));
 });
 
 // src/commands/jobs.ts
-import { Command as Command15 } from "commander";
-import chalk16 from "chalk";
-import fs5 from "fs-extra";
-var jobsCommand = new Command15("jobs").description("Enqueue and inspect background jobs");
+import { Command as Command16 } from "commander";
+import chalk17 from "chalk";
+import fs7 from "fs-extra";
+var jobsCommand = new Command16("jobs").description("Enqueue and inspect background jobs");
 function client3() {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
@@ -1867,7 +2017,7 @@ function client3() {
 function requireApp3(opt) {
   const appId = opt || getCurrentApp();
   if (!appId) {
-    console.error(chalk16.red("No app specified. Use --app or run `videan init` first."));
+    console.error(chalk17.red("No app specified. Use --app or run `videan init` first."));
     process.exit(1);
   }
   return appId;
@@ -1875,30 +2025,30 @@ function requireApp3(opt) {
 function intOption2(flag, raw) {
   const n = Number(raw);
   if (!Number.isInteger(n) || n < 0) {
-    console.error(chalk16.red(`${flag} expects a whole number, got "${raw}".`));
+    console.error(chalk17.red(`${flag} expects a whole number, got "${raw}".`));
     process.exit(1);
   }
   return n;
 }
 var STATUS_COLOR = {
-  queued: chalk16.yellow,
-  running: chalk16.cyan,
-  succeeded: chalk16.green,
-  dead: chalk16.red,
-  cancelled: chalk16.gray
+  queued: chalk17.yellow,
+  running: chalk17.cyan,
+  succeeded: chalk17.green,
+  dead: chalk17.red,
+  cancelled: chalk17.gray
 };
 function statusLabel(status) {
-  return (STATUS_COLOR[status] ?? chalk16.white)(status);
+  return (STATUS_COLOR[status] ?? chalk17.white)(status);
 }
 jobsCommand.command("enqueue").description("Queue a job for the app to run").option("-a, --app <id>", "App ID").option("-q, --queue <name>", "Queue name (default: default)").option("-p, --path <path>", "Path on the app to POST to (default: /jobs)").option("-d, --data <json>", "JSON payload").option("-f, --file <path>", "Read the JSON payload from a file").option("--delay <seconds>", "Run no earlier than this many seconds from now").option("--attempts <n>", "Attempts before the job is given up on (default: 3)").option("--timeout <seconds>", "How long the handler gets per attempt (default: 60)").option("--key <key>", "Idempotency key -- a repeat returns the same job").option("--json", "Print the raw response").action(async (opts) => {
   const appId = requireApp3(opts.app);
   let payload;
-  const raw = opts.file ? await fs5.readFile(opts.file, "utf-8") : opts.data;
+  const raw = opts.file ? await fs7.readFile(opts.file, "utf-8") : opts.data;
   if (raw !== void 0) {
     try {
       payload = JSON.parse(raw);
     } catch (e) {
-      console.error(chalk16.red(`--${opts.file ? "file" : "data"} is not valid JSON: ${e.message}`));
+      console.error(chalk17.red(`--${opts.file ? "file" : "data"} is not valid JSON: ${e.message}`));
       process.exit(1);
     }
   }
@@ -1916,13 +2066,13 @@ jobsCommand.command("enqueue").description("Queue a job for the app to run").opt
     return;
   }
   if (job.deduplicated) {
-    console.log(chalk16.yellow(`Already queued as ${job.id} (idempotency key "${opts.key}")`));
+    console.log(chalk17.yellow(`Already queued as ${job.id} (idempotency key "${opts.key}")`));
   } else {
-    console.log(chalk16.green(`Queued ${job.id}`));
+    console.log(chalk17.green(`Queued ${job.id}`));
   }
-  console.log(chalk16.gray(`  ${job.method} ${job.path} on queue "${job.queue}"`));
+  console.log(chalk17.gray(`  ${job.method} ${job.path} on queue "${job.queue}"`));
   if (job.runAt && Date.parse(job.runAt) > Date.now() + 1e3) {
-    console.log(chalk16.gray(`  Runs at ${new Date(job.runAt).toLocaleString()}`));
+    console.log(chalk17.gray(`  Runs at ${new Date(job.runAt).toLocaleString()}`));
   }
 });
 jobsCommand.command("list").description("List jobs, newest first").option("-a, --app <id>", "App ID").option("-s, --status <status>", "queued, running, succeeded, dead or cancelled").option("-q, --queue <name>", "Only this queue").option("-n, --limit <n>", "How many to show (default: 20)").option("--json", "Print the raw response").action(async (opts) => {
@@ -1937,17 +2087,17 @@ jobsCommand.command("list").description("List jobs, newest first").option("-a, -
     return;
   }
   const depth = Object.entries(counts).map(([status, n]) => `${statusLabel(status)} ${n}`).join("  ");
-  console.log(depth || chalk16.gray("No jobs yet."));
+  console.log(depth || chalk17.gray("No jobs yet."));
   if (jobs.length === 0) return;
   console.log();
   for (const job of jobs) {
-    const attempts = job.attempts > 0 ? chalk16.gray(` ${job.attempts}/${job.maxAttempts}`) : "";
+    const attempts = job.attempts > 0 ? chalk17.gray(` ${job.attempts}/${job.maxAttempts}`) : "";
     console.log(
-      `${statusLabel(job.status).padEnd(20)} ${chalk16.white(job.id)}  ${chalk16.gray(
+      `${statusLabel(job.status).padEnd(20)} ${chalk17.white(job.id)}  ${chalk17.gray(
         `${job.queue} ${job.path}`
       )}${attempts}`
     );
-    if (job.error) console.log(chalk16.red(`    ${job.error}`));
+    if (job.error) console.log(chalk17.red(`    ${job.error}`));
   }
 });
 jobsCommand.command("get <job-id>").description("Show one job in full").option("-a, --app <id>", "App ID").option("--json", "Print the raw response").action(async (jobId, opts) => {
@@ -1956,17 +2106,17 @@ jobsCommand.command("get <job-id>").description("Show one job in full").option("
     console.log(JSON.stringify(job, null, 2));
     return;
   }
-  console.log(`${chalk16.white(job.id)}  ${statusLabel(job.status)}`);
-  console.log(chalk16.gray(`  ${job.method} ${job.path} on queue "${job.queue}"`));
-  console.log(chalk16.gray(`  Attempts: ${job.attempts}/${job.maxAttempts}`));
-  if (job.statusCode) console.log(chalk16.gray(`  Last response: HTTP ${job.statusCode}`));
-  if (job.durationMs) console.log(chalk16.gray(`  Took: ${job.durationMs}ms`));
-  if (job.error) console.log(chalk16.red(`  Error: ${job.error}`));
+  console.log(`${chalk17.white(job.id)}  ${statusLabel(job.status)}`);
+  console.log(chalk17.gray(`  ${job.method} ${job.path} on queue "${job.queue}"`));
+  console.log(chalk17.gray(`  Attempts: ${job.attempts}/${job.maxAttempts}`));
+  if (job.statusCode) console.log(chalk17.gray(`  Last response: HTTP ${job.statusCode}`));
+  if (job.durationMs) console.log(chalk17.gray(`  Took: ${job.durationMs}ms`));
+  if (job.error) console.log(chalk17.red(`  Error: ${job.error}`));
   if (job.status === "queued" && job.attempts > 0) {
-    console.log(chalk16.yellow(`  Retrying at ${new Date(job.runAt).toLocaleString()}`));
+    console.log(chalk17.yellow(`  Retrying at ${new Date(job.runAt).toLocaleString()}`));
   }
   if (job.payload !== null && job.payload !== void 0) {
-    console.log(chalk16.gray("  Payload:"));
+    console.log(chalk17.gray("  Payload:"));
     console.log(
       JSON.stringify(job.payload, null, 2).split("\n").map((l) => `    ${l}`).join("\n")
     );
@@ -1974,17 +2124,17 @@ jobsCommand.command("get <job-id>").description("Show one job in full").option("
 });
 jobsCommand.command("retry <job-id>").description("Run a dead job again, from a clean attempt count").option("-a, --app <id>", "App ID").action(async (jobId, opts) => {
   const job = await client3().jobs.retry(requireApp3(opts.app), jobId);
-  console.log(chalk16.green(`Requeued ${job.id}`));
+  console.log(chalk17.green(`Requeued ${job.id}`));
 });
 jobsCommand.command("cancel <job-id>").description("Cancel a job that has not started yet").option("-a, --app <id>", "App ID").action(async (jobId, opts) => {
   const job = await client3().jobs.cancel(requireApp3(opts.app), jobId);
-  console.log(chalk16.green(`Cancelled ${job.id}`));
+  console.log(chalk17.green(`Cancelled ${job.id}`));
 });
 
 // src/commands/usage.ts
-import { Command as Command16 } from "commander";
-import chalk17 from "chalk";
-var usageCommand = new Command16("usage").description("Metered usage and cost for the current month").option("-o, --org <id>", "Organization ID").option("-a, --app <id>", "Show one app's share instead of the whole org").option("-p, --period <YYYY-MM>", "Month to report on (default: the month in progress)").option("--json", "Print the raw response").action(async (opts) => {
+import { Command as Command17 } from "commander";
+import chalk18 from "chalk";
+var usageCommand = new Command17("usage").description("Metered usage and cost for the current month").option("-o, --org <id>", "Organization ID").option("-a, --app <id>", "Show one app's share instead of the whole org").option("-p, --period <YYYY-MM>", "Month to report on (default: the month in progress)").option("--json", "Print the raw response").action(async (opts) => {
   const apiKey = getApiKey();
   requireApiKey(apiKey);
   const client4 = new CloudClient({ apiKey, baseUrl: getBaseUrl() });
@@ -1992,61 +2142,61 @@ var usageCommand = new Command16("usage").description("Metered usage and cost fo
     const appId = opts.app || getCurrentApp();
     const report2 = await client4.apps.usage(appId, opts.period);
     if (opts.json) return void console.log(JSON.stringify(report2, null, 2));
-    console.log(chalk17.dim(`${period(report2.periodStart, report2.periodEnd)}  app ${appId}`));
+    console.log(chalk18.dim(`${period(report2.periodStart, report2.periodEnd)}  app ${appId}`));
     console.log();
     printMetrics(report2.metrics);
     console.log();
     for (const line of report2.lines) {
-      console.log(`  ${chalk17.dim(line.label.padEnd(22))} ${money(line.cents)}`);
+      console.log(`  ${chalk18.dim(line.label.padEnd(22))} ${money(line.cents)}`);
     }
-    console.log(`  ${chalk17.bold("Share of the bill".padEnd(22))} ${chalk17.bold(report2.cost)}`);
+    console.log(`  ${chalk18.bold("Share of the bill".padEnd(22))} ${chalk18.bold(report2.cost)}`);
     console.log();
     console.log(
-      chalk17.dim("At list price, with no plan allowance applied \u2014 see `videan usage` for the org total.")
+      chalk18.dim("At list price, with no plan allowance applied \u2014 see `videan usage` for the org total.")
     );
     return;
   }
   const orgId = opts.org || getDefaultOrg();
   if (!orgId) {
-    console.error(chalk17.red("No org specified. Use --org, or --app for a single app."));
+    console.error(chalk18.red("No org specified. Use --org, or --app for a single app."));
     process.exit(1);
   }
   const report = await client4.orgs.usage(orgId, opts.period);
   if (opts.json) return void console.log(JSON.stringify(report, null, 2));
   const inv = report.invoice;
   console.log(
-    chalk17.dim(`${period(report.periodStart, report.periodEnd)}  org ${orgId}  plan ${report.plan}`)
+    chalk18.dim(`${period(report.periodStart, report.periodEnd)}  org ${orgId}  plan ${report.plan}`)
   );
   console.log();
   printMetrics(report.metrics);
   if (report.apps.length > 0) {
     console.log();
-    console.log(chalk17.bold("By app"));
+    console.log(chalk18.bold("By app"));
     for (const app of [...report.apps].sort((a, b) => b.cents - a.cents)) {
       const name = app.slug || app.name || app.appId || "(deleted apps)";
-      console.log(`  ${chalk17.dim(String(name).padEnd(24))} ${money(app.cents)}`);
+      console.log(`  ${chalk18.dim(String(name).padEnd(24))} ${money(app.cents)}`);
     }
   }
   console.log();
   for (const line of inv.lines) {
     console.log(
-      `  ${chalk17.dim(line.label.padEnd(22))} ${money(line.cents)} ${chalk17.dim(
+      `  ${chalk18.dim(line.label.padEnd(22))} ${money(line.cents)} ${chalk18.dim(
         `(${line.quantity} \xD7 ${line.unitPriceCents}\xA2)`
       )}`
     );
   }
-  console.log(`  ${chalk17.dim("Usage".padEnd(22))} ${money(inv.usageCents)}`);
+  console.log(`  ${chalk18.dim("Usage".padEnd(22))} ${money(inv.usageCents)}`);
   if (inv.includedUsageCents > 0) {
     console.log(
-      `  ${chalk17.dim("Included".padEnd(22))} ${chalk17.green(`-${money(Math.min(inv.usageCents, inv.includedUsageCents))}`)}`
+      `  ${chalk18.dim("Included".padEnd(22))} ${chalk18.green(`-${money(Math.min(inv.usageCents, inv.includedUsageCents))}`)}`
     );
   }
   if (inv.baseCents > 0) {
-    console.log(`  ${chalk17.dim("Plan".padEnd(22))} ${money(inv.baseCents)}`);
+    console.log(`  ${chalk18.dim("Plan".padEnd(22))} ${money(inv.baseCents)}`);
   }
-  console.log(`  ${chalk17.bold("Total".padEnd(22))} ${chalk17.bold(report.total)}`);
+  console.log(`  ${chalk18.bold("Total".padEnd(22))} ${chalk18.bold(report.total)}`);
   console.log();
-  console.log(chalk17.dim("Usage to date. The period is priced as it stands right now."));
+  console.log(chalk18.dim("Usage to date. The period is priced as it stands right now."));
 });
 usageCommand.command("plans").description("The plan catalogue and what each one allows").option("--json", "Print the raw response").action(async (opts) => {
   const client4 = new CloudClient({ apiKey: getApiKey() || "", baseUrl: getBaseUrl() });
@@ -2054,11 +2204,11 @@ usageCommand.command("plans").description("The plan catalogue and what each one
   if (opts.json) return void console.log(JSON.stringify(plans, null, 2));
   for (const plan of plans) {
     console.log(
-      `${chalk17.bold(plan.name)} ${chalk17.dim(`(${plan.id})`)}  ${plan.base}/mo` + (plan.includedUsageCents > 0 ? chalk17.dim(`, ${plan.includedUsage} usage included`) : "")
+      `${chalk18.bold(plan.name)} ${chalk18.dim(`(${plan.id})`)}  ${plan.base}/mo` + (plan.includedUsageCents > 0 ? chalk18.dim(`, ${plan.includedUsage} usage included`) : "")
     );
     const l = plan.limits;
     console.log(
-      chalk17.dim(
+      chalk18.dim(
         `  ${l.apps} apps \xB7 ${l.instancesPerApp} instances/app \xB7 up to ${l.maxCpu} CPU / ${l.maxMemory} MB \xB7 ${l.maxStorageMb} MB storage${l.postgres ? " \xB7 postgres" : ""}${l.customDomains ? " \xB7 custom domains" : ""}`
       )
     );
@@ -2067,11 +2217,11 @@ usageCommand.command("plans").description("The plan catalogue and what each one
 });
 function printMetrics(metrics) {
   if (metrics.length === 0) {
-    console.log(chalk17.dim("  Nothing metered in this period yet."));
+    console.log(chalk18.dim("  Nothing metered in this period yet."));
     return;
   }
   for (const m of metrics) {
-    console.log(`  ${chalk17.dim(m.metric.padEnd(22))} ${round(m.quantity)}`);
+    console.log(`  ${chalk18.dim(m.metric.padEnd(22))} ${round(m.quantity)}`);
   }
 }
 function round(n) {
@@ -2086,12 +2236,13 @@ function period(start, end) {
 }
 
 // src/index.ts
-var program = new Command17();
+var program = new Command18();
 program.name("videan").description("Videan CLI \u2014 deploy apps in seconds").version("0.1.0");
 program.addCommand(loginCommand);
 program.addCommand(logoutCommand);
 program.addCommand(initCommand);
 program.addCommand(deployCommand);
+program.addCommand(pullCommand);
 program.addCommand(logsCommand);
 program.addCommand(metricsCommand);
 program.addCommand(rollbackCommand);