blodemd 0.0.13 → 0.0.15

package/dist/cli.mjs

@@ -1,45 +1,23 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module";
-import { spawn, spawnSync } from "node:child_process";
-import fs, { mkdir, readFile, rm, writeFile } from "node:fs/promises";
-import path, { join } from "node:path";
+import { Command, InvalidArgumentError } from "commander";
 import { confirm, intro, isCancel, log, select, spinner, text } from "@clack/prompts";
 import chalk from "chalk";
-import { Command, InvalidArgumentError } from "commander";
-import open from "open";
 import { homedir } from "node:os";
+import path, { join } from "node:path";
+import fs, { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { z } from "zod";
+import "yaml";
+import open from "open";
+import { spawn, spawnSync } from "node:child_process";
+import { createServer } from "node:http";
+import { createHash, randomBytes } from "node:crypto";
 import { once } from "node:events";
-import { createServer } from "node:net";
+import { createServer as createServer$1 } from "node:net";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { fileURLToPath } from "node:url";
-import { z } from "zod";
-import "yaml";
 import { watch } from "chokidar";
-import { createServer as createServer$1 } from "node:http";
-import { createHash, randomBytes } from "node:crypto";
 import { readFileSync } from "node:fs";
-//#region ../../packages/common/dist/index.js
-const BACKSLASH_TO_SLASH_REGEX = /\\/g;
-const TRAILING_SLASHES_REGEX = /\/+$/g;
-const LEADING_SLASHES_REGEX = /^\/+/;
-const normalizePath = (value) => {
-	return value.replace(BACKSLASH_TO_SLASH_REGEX, "/").replace(TRAILING_SLASHES_REGEX, "").replace(LEADING_SLASHES_REGEX, "");
-};
-const slugify = (value) => value.toLowerCase().trim().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/(^-|-$)+/g, "");
-const IGNORED_ROOT_DOCS_FILES = new Set([
-	".gitignore",
-	"AGENTS.md",
-	"CLAUDE.md",
-	"LICENSE",
-	"LICENSE.md",
-	"README.md"
-]);
-const shouldIgnoreRootDocsFile = (value) => {
-	const normalized = normalizePath(value);
-	if (!normalized || normalized.includes("/")) return false;
-	return IGNORED_ROOT_DOCS_FILES.has(normalized);
-};
-//#endregion
 //#region src/constants.ts
 const CLI_NAME = "blodemd";
 const BLODE_PROJECT_ENV = "BLODEMD_PROJECT";
@@ -300,24 +278,31 @@ const resolveTokenStatus = (token) => {
 	};
 };
 //#endregion
-//#region src/validation.ts
-const MAX_PORT = 65535;
-const parsePositiveInteger = (value, label) => {
-	const trimmed = value.trim();
-	if (!/^\d+$/u.test(trimmed)) throw new CliError(`${label} must be a positive integer.`, EXIT_CODES.VALIDATION);
-	const parsed = Number(trimmed);
-	if (!Number.isSafeInteger(parsed) || parsed <= 0) throw new CliError(`${label} must be a positive integer.`, EXIT_CODES.VALIDATION);
-	return parsed;
+//#region ../../packages/common/dist/index.js
+const BACKSLASH_TO_SLASH_REGEX = /\\/g;
+const TRAILING_SLASHES_REGEX = /\/+$/g;
+const LEADING_SLASHES_REGEX = /^\/+/;
+const normalizePath = (value) => {
+	return value.replace(BACKSLASH_TO_SLASH_REGEX, "/").replace(TRAILING_SLASHES_REGEX, "").replace(LEADING_SLASHES_REGEX, "");
 };
-const parsePort = (value, label = "Port") => {
-	const parsed = parsePositiveInteger(value, label);
-	if (parsed > MAX_PORT) throw new CliError(`${label} must be between 1 and ${MAX_PORT}.`, EXIT_CODES.VALIDATION);
-	return parsed;
+const slugify = (value) => value.toLowerCase().trim().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/(^-|-$)+/g, "");
+const IGNORED_ROOT_DOCS_FILES = new Set([
+	".gitignore",
+	"AGENTS.md",
+	"CLAUDE.md",
+	"LICENSE",
+	"LICENSE.md",
+	"README.md"
+]);
+const shouldIgnoreRootDocsFile = (value) => {
+	const normalized = normalizePath(value);
+	if (!normalized || normalized.includes("/")) return false;
+	return IGNORED_ROOT_DOCS_FILES.has(normalized);
 };
 //#endregion
 //#region ../../packages/models/dist/docs-config.js
 const UrlOrPathSchema = z.string().min(1);
-const SlugSchema = z.string().min(1).regex(/^[a-z0-9-]+$/);
+const SlugSchema = z.string().min(1).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/);
 const DocsColorsSchema = z.object({
 	background: z.string().optional(),
 	border: z.string().optional(),
@@ -740,69 +725,10 @@ const validateDocsConfig = (input) => {
 	};
 };
 //#endregion
-//#region ../../packages/previewing/dist/fs-source.js
-const IGNORED_DIRECTORIES = new Set([
-	"app",
-	"lib",
-	"node_modules",
-	"public"
-]);
-const isNotFoundError = (error) => Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
-const isWithinRoot = (root, candidate) => candidate === root || candidate.startsWith(`${root}${path.sep}`);
-const resolveWithinRoot = (root, relativePath) => {
-	const normalized = normalizePath(relativePath);
-	const absolutePath = path.resolve(root, normalized);
-	if (!isWithinRoot(root, absolutePath)) throw new Error(`Path "${relativePath}" escapes the content source root.`);
-	return absolutePath;
-};
-const walkFiles = async (directory, prefix) => {
-	const entries = await fs.readdir(directory, { withFileTypes: true });
-	const files = [];
-	for (const entry of entries) {
-		if (entry.name.startsWith(".")) continue;
-		const absolutePath = path.join(directory, entry.name);
-		const relativePath = prefix ? path.join(prefix, entry.name) : entry.name;
-		if (entry.isDirectory()) {
-			if (IGNORED_DIRECTORIES.has(entry.name)) continue;
-			files.push(...await walkFiles(absolutePath, relativePath));
-			continue;
-		}
-		if (entry.isFile()) {
-			if (!prefix && shouldIgnoreRootDocsFile(entry.name)) continue;
-			files.push(normalizePath(relativePath));
-		}
-	}
-	return files;
-};
-var FsContentSource = class {
-	root;
-	constructor(root) {
-		this.root = path.resolve(root);
-	}
-	async readFile(relativePath) {
-		return await fs.readFile(resolveWithinRoot(this.root, relativePath), "utf8");
-	}
-	async listFiles(directory) {
-		return await walkFiles(resolveWithinRoot(this.root, directory), "");
-	}
-	async exists(relativePath) {
-		try {
-			await fs.access(resolveWithinRoot(this.root, relativePath));
-			return true;
-		} catch (error) {
-			if (isNotFoundError(error)) return false;
-			throw error;
-		}
-	}
-	resolveUrl() {
-		return null;
-	}
-};
-const createFsSource = (root) => new FsContentSource(root);
-//#endregion
-//#region ../../packages/previewing/dist/index.js
+//#region ../../packages/previewing/dist/constants.js
 const LEGACY_PROJECT_NAME_FALLBACK_WARNING$1 = "docs.json.slug is recommended. Falling back to docs.json.name as the deployment slug is deprecated.";
-new Set(PageModeSchema.options);
+//#endregion
+//#region ../../packages/previewing/dist/config-loader.js
 const DOCS_CONFIG_FILE = "docs.json";
 const defaultLinkLabel = (input) => {
 	if (input.label) return input.label;
@@ -950,6 +876,81 @@ const loadSiteConfig = async (source) => {
 		ok: false
 	};
 };
+new Set(PageModeSchema.options);
+//#endregion
+//#region ../../packages/previewing/dist/fs-source.js
+const IGNORED_DIRECTORIES = new Set([
+	"app",
+	"lib",
+	"node_modules",
+	"public"
+]);
+const isNotFoundError = (error) => Boolean(error && typeof error === "object" && "code" in error && error.code === "ENOENT");
+const isWithinRoot = (root, candidate) => candidate === root || candidate.startsWith(`${root}${path.sep}`);
+const resolveWithinRoot = (root, relativePath) => {
+	const normalized = normalizePath(relativePath);
+	const absolutePath = path.resolve(root, normalized);
+	if (!isWithinRoot(root, absolutePath)) throw new Error(`Path "${relativePath}" escapes the content source root.`);
+	return absolutePath;
+};
+const walkFiles = async (directory, prefix) => {
+	const entries = await fs.readdir(directory, { withFileTypes: true });
+	const files = [];
+	for (const entry of entries) {
+		if (entry.name.startsWith(".")) continue;
+		const absolutePath = path.join(directory, entry.name);
+		const relativePath = prefix ? path.join(prefix, entry.name) : entry.name;
+		if (entry.isDirectory()) {
+			if (IGNORED_DIRECTORIES.has(entry.name)) continue;
+			files.push(...await walkFiles(absolutePath, relativePath));
+			continue;
+		}
+		if (entry.isFile()) {
+			if (!prefix && shouldIgnoreRootDocsFile(entry.name)) continue;
+			files.push(normalizePath(relativePath));
+		}
+	}
+	return files;
+};
+var FsContentSource = class {
+	root;
+	constructor(root) {
+		this.root = path.resolve(root);
+	}
+	async readFile(relativePath) {
+		return await fs.readFile(resolveWithinRoot(this.root, relativePath), "utf8");
+	}
+	async listFiles(directory) {
+		return await walkFiles(resolveWithinRoot(this.root, directory), "");
+	}
+	async exists(relativePath) {
+		try {
+			await fs.access(resolveWithinRoot(this.root, relativePath));
+			return true;
+		} catch (error) {
+			if (isNotFoundError(error)) return false;
+			throw error;
+		}
+	}
+	resolveUrl() {
+		return null;
+	}
+};
+const createFsSource = (root) => new FsContentSource(root);
+//#endregion
+//#region ../../packages/previewing/dist/markdown/links.js
+const PLACEHOLDER_URL_PATTERN = [
+	"https?://(?:[a-z0-9-]+\\.)*example\\.(?:com|org|net)\\b[^\\s)\\]\"'<>]*",
+	"https?://discord\\.gg/example\\b[^\\s)\\]\"'<>]*",
+	"https?://(?:[a-z0-9-]+\\.)+(?:test|invalid)(?:[/?#:][^\\s)\\]\"'<>]*)?",
+	"https?://localhost(?::\\d+)?[^\\s)\\]\"'<>]*",
+	"https?://(?:[a-z0-9-]+\\.)*your[-_]?domain\\.[a-z]+\\b[^\\s)\\]\"'<>]*",
+	"https?://acme\\.blode\\.md\\b[^\\s)\\]\"'<>]*",
+	"https?://github\\.com/example/[^\\s)\\]\"'<>]*",
+	"https?://(?:us|eu)\\.i\\.posthog\\.com\\b[^\\s)\\]\"'<>]*"
+].join("|");
+new RegExp(PLACEHOLDER_URL_PATTERN, "gi");
+new RegExp(`\\[([^\\]]+)\\]\\((?:${PLACEHOLDER_URL_PATTERN})\\)`, "gi");
 //#endregion
 //#region src/site-config.ts
 const CONFIG_FILE$2 = "docs.json";
@@ -1007,513 +1008,226 @@ const resolveDocsRoot = async (dir, cwd = process.cwd()) => {
 };
 const validateDocsRoot = loadValidatedSiteConfig;
 //#endregion
-//#region src/dev/watcher.ts
-const INVALIDATE_ENDPOINT = "/blodemd-dev/invalidate";
-const WATCH_DEBOUNCE_MS = 100;
-const normalizeRelativePath$1 = (root, filePath) => path.relative(root, filePath).split(path.sep).join("/");
-const isDirectoryEvent = (event) => event === "addDir" || event === "unlinkDir";
-const createDevWatcher = ({ port, root }) => {
-	const watcher = watch(root, {
-		ignoreInitial: true,
-		ignored: [
-			"**/.git/**",
-			"**/.next/**",
-			"**/dist/**",
-			"**/node_modules/**"
-		]
-	});
-	let flushTimer = null;
-	let pendingKind = "content";
-	const pendingPaths = /* @__PURE__ */ new Set();
-	const flush = async () => {
-		flushTimer = null;
-		const paths = [...pendingPaths];
-		const kind = pendingKind;
-		pendingPaths.clear();
-		pendingKind = "content";
-		if (!paths.length) return;
-		try {
-			const response = await fetch(`http://127.0.0.1:${port}${INVALIDATE_ENDPOINT}`, {
-				body: JSON.stringify({
-					kind,
-					paths
-				}),
-				headers: { "Content-Type": "application/json" },
-				method: "POST"
-			});
-			if (!response.ok) throw new Error(`HTTP ${response.status}`);
-		} catch (error) {
-			log.error(`Failed to invalidate preview cache: ${error instanceof Error ? error.message : "unknown error"}`);
-		}
+//#region src/project-config.ts
+const LEGACY_PROJECT_NAME_FALLBACK_WARNING = "docs.json.slug is recommended. Falling back to docs.json.name as the deployment slug is deprecated.";
+const validateProjectSlug = (value) => {
+	const trimmed = value?.trim();
+	if (!trimmed) return "Project slug is required.";
+	const normalized = slugify(trimmed);
+	if (!normalized) return "Use at least one letter or number.";
+	if (normalized !== trimmed) return `Use lowercase letters, numbers, and hyphens. Try "${normalized}".`;
+};
+const deriveDisplayNameFromProjectSlug = (projectSlug) => projectSlug.split("-").filter(Boolean).map((segment) => segment[0]?.toUpperCase() + segment.slice(1)).join(" ");
+const resolveProjectTarget = (options) => {
+	if (options.cliProject) return {
+		project: options.cliProject,
+		usedLegacyNameFallback: false
+	};
+	if (options.envProject) return {
+		project: options.envProject,
+		usedLegacyNameFallback: false
+	};
+	if (options.config.slug) return {
+		project: options.config.slug,
+		usedLegacyNameFallback: false
+	};
+	if (options.config.name) return {
+		project: options.config.name,
+		usedLegacyNameFallback: true
+	};
+	return {
+		project: void 0,
+		usedLegacyNameFallback: false
 	};
-	watcher.on("all", (event, changedPath) => {
-		if (isDirectoryEvent(event)) return;
-		const relativePath = normalizeRelativePath$1(root, changedPath);
-		pendingPaths.add(relativePath);
-		if (path.basename(changedPath) === "docs.json") pendingKind = "config";
-		if (flushTimer) clearTimeout(flushTimer);
-		flushTimer = setTimeout(() => {
-			flush();
-		}, WATCH_DEBOUNCE_MS);
-	});
-	return { async close() {
-		if (flushTimer) {
-			clearTimeout(flushTimer);
-			await flush();
-		}
-		await watcher.close();
-	} };
-};
-//#endregion
-//#region src/dev/command.ts
-const DEV_READY_ENDPOINT = "/blodemd-dev/version";
-const DEV_READY_TIMEOUT_MS = 45e3;
-const DEV_PORT_SCAN_LIMIT = 10;
-const DEV_SHUTDOWN_TIMEOUT_MS = 5e3;
-const LOCALHOST = "127.0.0.1";
-const RUNTIME_EXCLUDE_DIRS = new Set([
-	".next",
-	".turbo",
-	"node_modules"
-]);
-const STANDALONE_RUNTIME_MAX_AGE_MS = 1440 * 60 * 1e3;
-const STANDALONE_RUNTIME_PREFIX = "standalone-runtime-";
-const TURBOPACK_ARGS = ["dev", "--turbopack"];
-const fileExists = async (filePath) => {
-	try {
-		await fs.access(filePath);
-		return true;
-	} catch {
-		return false;
-	}
-};
-const resolveCommonAncestor = (pathsToCompare) => {
-	const [firstPath, ...restPaths] = pathsToCompare;
-	if (!firstPath) return path.sep;
-	const first = path.resolve(firstPath);
-	const { root } = path.parse(first);
-	const firstSegments = first.slice(root.length).split(path.sep).filter(Boolean);
-	const sharedSegments = [];
-	for (const [index, segment] of firstSegments.entries()) {
-		if (!restPaths.every((candidatePath) => {
-			const candidate = path.resolve(candidatePath);
-			if (path.parse(candidate).root !== root) return false;
-			return candidate.slice(root.length).split(path.sep).filter(Boolean)[index] === segment;
-		})) break;
-		sharedSegments.push(segment);
-	}
-	return path.join(root, ...sharedSegments);
 };
-const cleanupStandaloneRuntimeRoots = async (configDir, maxAgeMs = STANDALONE_RUNTIME_MAX_AGE_MS) => {
-	const cutoff = Date.now() - maxAgeMs;
-	const entries = await fs.readdir(configDir, { withFileTypes: true });
-	await Promise.all(entries.filter((entry) => entry.isDirectory() && entry.name.startsWith(STANDALONE_RUNTIME_PREFIX)).map(async (entry) => {
-		const entryPath = path.join(configDir, entry.name);
-		if ((await fs.stat(entryPath)).mtimeMs >= cutoff) return;
-		await fs.rm(entryPath, {
-			force: true,
-			recursive: true
-		});
-	}));
+const getProjectSlugError = (project) => {
+	if (!project) return;
+	return validateProjectSlug(project);
 };
-const probePortAvailability = async (port) => {
-	const server = createServer();
-	const listening = (async () => {
-		await once(server, "listening");
-		return { kind: "listening" };
-	})();
-	const errored = (async () => {
-		const [error] = await once(server, "error");
-		return {
-			error,
-			kind: "error"
-		};
-	})();
-	server.listen({
-		exclusive: true,
-		host: LOCALHOST,
-		port
-	});
-	const outcome = await Promise.race([listening, errored]);
-	if (outcome.kind === "error") {
-		if (outcome.error.code === "EADDRINUSE" || outcome.error.code === "EACCES") return false;
-		throw outcome.error;
-	}
-	server.close();
-	await once(server, "close");
-	return true;
+//#endregion
+//#region src/analytics/validators.ts
+const GA4_MEASUREMENT_ID_REGEX = /^G-[A-Z0-9]{4,20}$/;
+const POSTHOG_PROJECT_KEY_REGEX = /^phc_[A-Za-z0-9]{20,}$/;
+const parseGa4MeasurementId = (value) => {
+	const trimmed = value.trim();
+	if (!GA4_MEASUREMENT_ID_REGEX.test(trimmed)) throw new InvalidArgumentError("GA4 measurement IDs look like G-XXXXXXXXXX.");
+	return trimmed;
 };
-const resolveDevPort = async (requestedPort, probePort = probePortAvailability) => {
-	for (let offset = 0; offset < DEV_PORT_SCAN_LIMIT; offset += 1) {
-		const candidate = requestedPort + offset;
-		if (candidate > 65535) break;
-		if (await probePort(candidate)) return candidate;
-	}
-	throw new CliError(`No available port found within ${DEV_PORT_SCAN_LIMIT} attempts starting at ${requestedPort}.`, EXIT_CODES.ERROR, "Close the process using the port or pass a different --port value.");
+const parsePosthogProjectKey = (value) => {
+	const trimmed = value.trim();
+	if (trimmed.startsWith("phx_")) throw new InvalidArgumentError("Personal API keys (phx_) are not supported. Use the project API key (phc_).");
+	if (!POSTHOG_PROJECT_KEY_REGEX.test(trimmed)) throw new InvalidArgumentError("PostHog project keys start with phc_ followed by 20+ characters.");
+	return trimmed;
 };
-const shutdownChildProcess = async (child, timeoutMs = DEV_SHUTDOWN_TIMEOUT_MS) => {
-	if (child.exitCode !== null) return;
-	const timer = setTimeout(() => {
-		if (child.exitCode === null) child.kill("SIGKILL");
-	}, timeoutMs);
-	const exitPromise = once(child, "exit");
+const parsePosthogHost = (value) => {
+	const trimmed = value.trim();
 	try {
-		child.kill("SIGTERM");
+		if (new URL(trimmed).protocol !== "https:") throw new InvalidArgumentError("PostHog host must use https://");
 	} catch (error) {
-		clearTimeout(timer);
-		if (error.code === "ESRCH") return;
-		throw error;
+		if (error instanceof InvalidArgumentError) throw error;
+		throw new InvalidArgumentError("PostHog host must be a valid URL.");
 	}
-	await exitPromise.finally(() => {
-		clearTimeout(timer);
-	});
+	return trimmed;
 };
-/**
-* Derive the CLI npm package root from the running script path.
-* The CLI entry point is at `<pkg-root>/dist/cli.mjs`.
-*/
-const resolveCliPackageRoot = (cliFilePath) => path.dirname(path.dirname(cliFilePath));
-const copyStandaloneTree = async (sourceDir, targetDir) => {
-	await fs.cp(sourceDir, targetDir, {
-		filter: (source) => {
-			const relative = path.relative(sourceDir, source);
-			if (!relative) return true;
-			const topSegment = relative.split(path.sep)[0] ?? "";
-			return !RUNTIME_EXCLUDE_DIRS.has(topSegment);
-		},
-		recursive: true
-	});
+const parseProvider = (value) => {
+	const normalized = value.trim().toLowerCase();
+	if (normalized === "ga4" || normalized === "posthog") return normalized;
+	throw new InvalidArgumentError(`Unknown provider "${value}". Expected "ga4" or "posthog".`);
 };
-const isStandaloneCliInstall = async (cliPackageRoot) => {
+//#endregion
+//#region src/analytics/command.ts
+const apiBase = (options) => options.apiUrl ?? process.env["BLODEMD_API_URL"] ?? "https://api.blode.md";
+const resolveAuthorization = async () => {
+	const resolved = await resolveAuthToken();
+	if (!resolved?.token) throw new CliError("Not logged in. Run \"blodemd login\" to authenticate.", EXIT_CODES.AUTH_REQUIRED);
+	return `Bearer ${resolved.token}`;
+};
+const tryLoadDocsSlug = async () => {
 	try {
-		return (await fs.realpath(cliPackageRoot)).split(path.sep).includes("node_modules");
+		const { config } = await loadValidatedSiteConfig(await resolveDocsRoot());
+		return config.slug ?? config.name;
 	} catch {
-		return cliPackageRoot.split(path.sep).includes("node_modules");
+		return;
 	}
 };
-const createStandaloneRuntimeRoot = async (configDir = CONFIG_DIR) => {
-	await fs.mkdir(configDir, { recursive: true });
-	await cleanupStandaloneRuntimeRoots(configDir);
-	return await fs.mkdtemp(path.join(configDir, STANDALONE_RUNTIME_PREFIX));
+const resolveSlug = async (options) => {
+	if (options.project) return options.project;
+	const envSlug = process.env[BLODE_PROJECT_ENV];
+	if (envSlug) return envSlug;
+	const { project } = resolveProjectTarget({
+		cliProject: void 0,
+		config: { slug: await tryLoadDocsSlug() },
+		envProject: void 0
+	});
+	if (!project) throw new CliError("Could not resolve project. Pass --project <slug>, set BLODEMD_PROJECT, or run from a directory with docs.json.", EXIT_CODES.VALIDATION);
+	return project;
 };
-/**
-* Locate the `node_modules` directory that actually contains the CLI's
-* transitive dependencies. Package managers like npm/yarn-classic (and
-* `npx` caches) hoist shared deps above the package directory, so
-* `<cliPackageRoot>/node_modules` may not exist or may not contain `next`.
-* Resolve `next/package.json` and use the directory that owns it.
-*/
-const resolveRuntimeNodeModules = async (cliPackageRoot) => {
-	const localNodeModules = path.join(cliPackageRoot, "node_modules");
-	if (await fileExists(path.join(localNodeModules, "next", "package.json"))) return localNodeModules;
-	const nextPkgPath = createRequire(path.join(cliPackageRoot, "package.json")).resolve("next/package.json");
-	return path.dirname(path.dirname(nextPkgPath));
+const getProjectBySlug = async (apiUrl, authorization, slug) => {
+	const response = await fetch(`${apiUrl}/projects/by-slug/${slug}`, { headers: { Authorization: authorization } });
+	if (response.status === 404) throw new CliError(`Project "${slug}" not found or not accessible.`, EXIT_CODES.ERROR);
+	if (!response.ok) throw new CliError(`Failed to fetch project: ${response.status} ${await response.text()}`, EXIT_CODES.ERROR);
+	return await response.json();
 };
-const materializeStandaloneRuntime = async (cliPackageRoot) => {
-	const runtimeRoot = await createStandaloneRuntimeRoot();
-	try {
-		for (const dir of [
-			"dev-server",
-			"docs",
-			"packages"
-		]) await copyStandaloneTree(path.join(cliPackageRoot, dir), path.join(runtimeRoot, dir));
-		const runtimeNodeModules = await resolveRuntimeNodeModules(cliPackageRoot);
-		await fs.symlink(runtimeNodeModules, path.join(runtimeRoot, "node_modules"), process.platform === "win32" ? "junction" : "dir");
-		const linkTarget = path.join(runtimeRoot, "packages", "@repo");
-		for (const consumer of [
-			"dev-server",
-			"docs",
-			"packages"
-		]) {
-			await fs.mkdir(path.join(runtimeRoot, consumer, "node_modules"), { recursive: true });
-			await fs.symlink(linkTarget, path.join(runtimeRoot, consumer, "node_modules", "@repo"), process.platform === "win32" ? "junction" : "dir");
-		}
-		await fs.writeFile(path.join(runtimeRoot, "dev-server", "package.json"), `${JSON.stringify({
-			dependencies: {
-				next: "16.2.1",
-				react: "^19.2.0",
-				"react-dom": "^19.2.0"
-			},
-			devDependencies: {
-				"@types/node": "^22.19.15",
-				"@types/react": "19.2.14",
-				"@types/react-dom": "19.2.3",
-				typescript: "6.0.2"
-			},
-			name: "blodemd-dev-server",
-			private: true,
-			type: "module"
+const patchAnalytics = async (apiUrl, authorization, projectId, analytics) => {
+	const response = await fetch(`${apiUrl}/projects/${projectId}`, {
+		body: JSON.stringify({ analytics }),
+		headers: {
+			Authorization: authorization,
+			"Content-Type": "application/json"
+		},
+		method: "PATCH"
+	});
+	if (!response.ok) throw new CliError(`Failed to update analytics: ${response.status} ${await response.text()}`, EXIT_CODES.ERROR);
+	return await response.json();
+};
+const normalizeAnalytics = (analytics) => {
+	if (!analytics) return null;
+	const next = {};
+	if (analytics.ga4?.measurementId) next.ga4 = { measurementId: analytics.ga4.measurementId };
+	if (analytics.posthog?.projectKey) next.posthog = {
+		projectKey: analytics.posthog.projectKey,
+		...analytics.posthog.host ? { host: analytics.posthog.host } : {}
+	};
+	return next.ga4 || next.posthog ? next : null;
+};
+const printAnalytics = (project, format) => {
+	const analytics = normalizeAnalytics(project.analytics);
+	if (format === "json") {
+		process.stdout.write(`${JSON.stringify({
+			analytics,
+			project: project.slug
 		}, null, 2)}\n`);
-		return {
-			devServerDir: path.join(runtimeRoot, "dev-server"),
-			runtimeRoot
-		};
-	} catch (error) {
-		await fs.rm(runtimeRoot, {
-			force: true,
-			recursive: true
-		});
-		throw error;
+		return;
+	}
+	log.info(`Project: ${chalk.cyan(project.slug)}`);
+	if (!analytics) {
+		log.info("  No analytics configured.");
+		return;
+	}
+	if (analytics.ga4) log.info(`  GA4:     ${chalk.cyan(analytics.ga4.measurementId)}`);
+	if (analytics.posthog) {
+		log.info(`  PostHog: ${chalk.cyan(analytics.posthog.projectKey)}`);
+		if (analytics.posthog.host) log.info(`           host: ${analytics.posthog.host}`);
 	}
 };
-/**
-* Check if a shipped dev-server exists alongside an installed CLI package.
-* We only use standalone mode when the package root lives under `node_modules`.
-*/
-const findStandaloneDevServer = async (cliPackageRoot) => {
-	const devServerDir = path.join(cliPackageRoot, "dev-server");
-	if (!await fileExists(path.join(devServerDir, "next.config.js"))) return null;
-	if (!await isStandaloneCliInstall(cliPackageRoot)) return null;
+const runGet = async (options) => {
+	const authorization = await resolveAuthorization();
+	printAnalytics(await getProjectBySlug(apiBase(options), authorization, await resolveSlug(options)), options.json ? "json" : "text");
+};
+const runSetGa4 = async (measurementId, options) => {
+	const authorization = await resolveAuthorization();
+	const apiUrl = apiBase(options);
+	const project = await getProjectBySlug(apiUrl, authorization, await resolveSlug(options));
+	const next = {
+		...project.analytics,
+		ga4: { measurementId }
+	};
+	const updated = await patchAnalytics(apiUrl, authorization, project.id, next);
+	log.success(`Updated GA4 for ${chalk.cyan(updated.slug)}.`);
+	printAnalytics(updated, "text");
+};
+const runSetPosthog = async (projectKey, options) => {
+	const authorization = await resolveAuthorization();
+	const apiUrl = apiBase(options);
+	const project = await getProjectBySlug(apiUrl, authorization, await resolveSlug(options));
+	const next = {
+		...project.analytics,
+		posthog: {
+			projectKey,
+			...options.host ? { host: options.host } : {}
+		}
+	};
+	const updated = await patchAnalytics(apiUrl, authorization, project.id, next);
+	log.success(`Updated PostHog for ${chalk.cyan(updated.slug)}.`);
+	printAnalytics(updated, "text");
+};
+const runUnset = async (provider, options) => {
+	const authorization = await resolveAuthorization();
+	const apiUrl = apiBase(options);
+	const project = await getProjectBySlug(apiUrl, authorization, await resolveSlug(options));
+	const next = normalizeAnalytics({
+		...project.analytics,
+		[provider]: void 0
+	});
+	const updated = await patchAnalytics(apiUrl, authorization, project.id, next);
+	log.success(`Removed ${provider.toUpperCase()} for ${chalk.cyan(updated.slug)}.`);
+	printAnalytics(updated, "text");
+};
+const runAction = async (label, action) => {
 	try {
-		createRequire(path.join(cliPackageRoot, "package.json")).resolve("next/package.json");
-	} catch {
-		return null;
+		await action();
+	} catch (error) {
+		const cliError = toCliError(error);
+		log.error(`${label}: ${cliError.message}`);
+		if (cliError.hint) log.info(cliError.hint);
+		process.exitCode = cliError.exitCode;
 	}
-	const runtime = await materializeStandaloneRuntime(cliPackageRoot);
-	return {
-		devServerDir: runtime.devServerDir,
-		mode: "standalone",
-		nextPackageRoot: cliPackageRoot,
-		runtimeRoot: runtime.runtimeRoot
-	};
 };
-/**
-* Resolve the `next` CLI binary from the blodemd package's own dependencies.
-*/
-const resolveNextBin = (cliPackageRoot) => {
-	const nextPkgPath = createRequire(path.join(cliPackageRoot, "package.json")).resolve("next/package.json");
-	return path.join(path.dirname(nextPkgPath), "dist", "bin", "next");
-};
-const findMonorepoRoot = async (start) => {
-	let current = start;
-	while (true) {
-		const packageJsonPath = path.join(current, "package.json");
-		if (await fileExists(packageJsonPath)) {
-			const raw = await fs.readFile(packageJsonPath, "utf8");
-			const workspaces = JSON.parse(raw).workspaces ?? [];
-			if (workspaces.includes("apps/*") && workspaces.includes("packages/*")) return current;
-		}
-		const parent = path.dirname(current);
-		if (parent === current) break;
-		current = parent;
-	}
-	throw new CliError("Could not locate the blodemd dev server.", EXIT_CODES.ERROR, "Make sure blodemd is installed correctly (npm i blodemd).");
-};
-const resolveDevServer = async (cliFilePath) => {
-	const standalone = await findStandaloneDevServer(resolveCliPackageRoot(cliFilePath));
-	if (standalone) return standalone;
-	return {
-		mode: "monorepo",
-		repoRoot: await findMonorepoRoot(path.dirname(cliFilePath))
-	};
-};
-const buildDevServerLaunch = (server, { root, port }) => {
-	if (server.mode === "standalone") return {
-		args: [resolveNextBin(server.nextPackageRoot), ...TURBOPACK_ARGS],
-		command: process.execPath,
-		cwd: server.devServerDir,
-		env: {
-			...process.env,
-			BLODEMD_PACKAGES_DIR: path.join(server.runtimeRoot, "packages"),
-			BLODEMD_TURBOPACK_ROOT: resolveCommonAncestor([server.nextPackageRoot, server.runtimeRoot]),
-			DOCS_ROOT: root,
-			PORT: String(port)
-		}
-	};
-	return {
-		args: [
-			"run",
-			"dev",
-			"--workspace=dev-server"
-		],
-		command: process.platform === "win32" ? "npm.cmd" : "npm",
-		cwd: server.repoRoot,
-		env: {
-			...process.env,
-			DOCS_ROOT: root,
-			PORT: String(port)
-		}
-	};
-};
-const spawnDevServer = (server, options) => {
-	const launch = buildDevServerLaunch(server, options);
-	return spawn(launch.command, launch.args, {
-		cwd: launch.cwd,
-		env: launch.env,
-		stdio: "inherit"
-	});
-};
-const waitForServer = async ({ child, port }) => {
-	const url = `http://localhost:${port}${DEV_READY_ENDPOINT}`;
-	const startedAt = Date.now();
-	while (Date.now() - startedAt < DEV_READY_TIMEOUT_MS) {
-		if (child.exitCode !== null) throw new CliError("The local dev server exited before it became ready.", EXIT_CODES.ERROR);
-		try {
-			if ((await fetch(url, {
-				cache: "no-store",
-				headers: { accept: "application/json" }
-			})).ok) return;
-		} catch {}
-		await setTimeout$1(500);
-	}
-	throw new CliError("Timed out waiting for the local dev server to start.", EXIT_CODES.ERROR);
-};
-const defaultDevCommandDependencies = {
-	createWatcher: createDevWatcher,
-	getCliFilePath: () => fileURLToPath(import.meta.url),
-	getIntro: intro,
-	getLog: log,
-	getOpen: open,
-	parsePortValue: parsePort,
-	removeDirectory: fs.rm,
-	resolveDevPortValue: resolveDevPort,
-	resolveDocsRootValue: resolveDocsRoot,
-	resolveServer: resolveDevServer,
-	shutdownChild: shutdownChildProcess,
-	spawnServer: spawnDevServer,
-	validateDocsRootValue: validateDocsRoot,
-	waitForServerReady: waitForServer
-};
-const devCommand = async ({ dir, openBrowser, port: portValue }, dependencies = defaultDevCommandDependencies) => {
-	const cliLog = dependencies.getLog;
-	dependencies.getIntro(chalk.bold("blodemd dev"));
-	try {
-		const port = dependencies.parsePortValue(portValue);
-		const resolvedPort = await dependencies.resolveDevPortValue(port);
-		const root = await dependencies.resolveDocsRootValue(dir);
-		await dependencies.validateDocsRootValue(root);
-		const cliFilePath = dependencies.getCliFilePath();
-		const server = await dependencies.resolveServer(cliFilePath);
-		const localUrl = `http://localhost:${resolvedPort}`;
-		cliLog.info(`Docs root: ${chalk.cyan(root)}`);
-		const child = dependencies.spawnServer(server, {
-			port: resolvedPort,
-			root
-		});
-		let watcher = null;
-		let shuttingDown = false;
-		const closeAll = async () => {
-			if (shuttingDown) return;
-			shuttingDown = true;
-			if (watcher) {
-				await watcher.close();
-				watcher = null;
-			}
-			await dependencies.shutdownChild(child);
-			if (server.mode === "standalone") await dependencies.removeDirectory(server.runtimeRoot, {
-				force: true,
-				recursive: true
-			});
-		};
-		process.once("SIGINT", closeAll);
-		process.once("SIGTERM", closeAll);
-		try {
-			await dependencies.waitForServerReady({
-				child,
-				port: resolvedPort
-			});
-			watcher = await dependencies.createWatcher({
-				port: resolvedPort,
-				root
-			});
-			cliLog.success(`Dev server running at ${chalk.cyan(localUrl)}`);
-			if (openBrowser) await dependencies.getOpen(localUrl);
-			const [code, signal] = await once(child, "exit");
-			if (shuttingDown || signal === "SIGINT" || signal === "SIGTERM") return;
-			if (code !== 0) throw new CliError(`The local dev server exited with code ${code ?? "unknown"}.`, EXIT_CODES.ERROR);
-		} finally {
-			await closeAll();
-			process.removeListener("SIGINT", closeAll);
-			process.removeListener("SIGTERM", closeAll);
-		}
-	} catch (error) {
-		const cliError = toCliError(error);
-		cliLog.error(cliError.message);
-		if (cliError.hint) cliLog.info(cliError.hint);
-		process.exitCode = cliError.exitCode;
-	}
-};
-//#endregion
-//#region src/fs-utils.ts
-const writeFileIfMissing = async (filePath, content) => {
-	try {
-		await fs.writeFile(filePath, content, { flag: "wx" });
-	} catch (error) {
-		const { code } = error;
-		if (code === "EEXIST") {
-			if ((await fs.stat(filePath).catch(() => null))?.isFile()) return;
-		}
-		throw error;
-	}
-};
-const writeSymlinkIfMissing = async (filePath, target, options) => {
-	const lstat = options?.lstat ?? fs.lstat;
-	const symlink = options?.symlink ?? fs.symlink;
-	try {
-		await symlink(target, filePath);
-	} catch (error) {
-		const { code } = error;
-		if (code === "EEXIST") {
-			const existing = await lstat(filePath).catch(() => null);
-			if (existing?.isFile() || existing?.isSymbolicLink()) return;
-		}
-		if (options?.fallbackContent && (code === "EINVAL" || code === "ENOTSUP" || code === "EPERM" || code === "UNKNOWN")) {
-			await writeFileIfMissing(filePath, options.fallbackContent);
-			return;
-		}
-		throw error;
-	}
-};
-const findExistingPaths = async (root, relativePaths) => {
-	return (await Promise.all(relativePaths.map(async (relativePath) => {
-		return await fs.lstat(path.join(root, relativePath)).catch(() => null) ? relativePath : null;
-	}))).filter((relativePath) => relativePath !== null).toSorted((left, right) => left.localeCompare(right));
-};
-//#endregion
-//#region src/project-config.ts
-const LEGACY_PROJECT_NAME_FALLBACK_WARNING = "docs.json.slug is recommended. Falling back to docs.json.name as the deployment slug is deprecated.";
-const validateProjectSlug = (value) => {
-	const trimmed = value?.trim();
-	if (!trimmed) return "Project slug is required.";
-	const normalized = slugify(trimmed);
-	if (!normalized) return "Use at least one letter or number.";
-	if (normalized !== trimmed) return `Use lowercase letters, numbers, and hyphens. Try "${normalized}".`;
-};
-const deriveDisplayNameFromProjectSlug = (projectSlug) => projectSlug.split("-").filter(Boolean).map((segment) => segment[0]?.toUpperCase() + segment.slice(1)).join(" ");
-const resolveProjectTarget = (options) => {
-	if (options.cliProject) return {
-		project: options.cliProject,
-		usedLegacyNameFallback: false
-	};
-	if (options.envProject) return {
-		project: options.envProject,
-		usedLegacyNameFallback: false
-	};
-	if (options.config.slug) return {
-		project: options.config.slug,
-		usedLegacyNameFallback: false
-	};
-	if (options.config.name) return {
-		project: options.config.name,
-		usedLegacyNameFallback: true
-	};
-	return {
-		project: void 0,
-		usedLegacyNameFallback: false
-	};
-};
-const getProjectSlugError = (project) => {
-	if (!project) return;
-	return validateProjectSlug(project);
+const registerAnalyticsCommand = (program) => {
+	const analytics = program.command("analytics").description("Manage tenant analytics integrations (GA4, PostHog)");
+	analytics.command("get").description("Show the analytics config for a project").option("--project <slug>", "project slug (env: BLODEMD_PROJECT)").option("--api-url <url>", "API URL (env: BLODEMD_API_URL)").option("--json", "print as JSON").action(async (options) => {
+		await runAction("Analytics get failed", () => runGet(options));
+	});
+	const set = analytics.command("set").description("Set an analytics integration");
+	set.command("ga4").description("Set the Google Analytics 4 measurement ID").argument("<measurementId>", "GA4 measurement ID (G-XXXXXXXXXX)", parseGa4MeasurementId).option("--project <slug>", "project slug (env: BLODEMD_PROJECT)").option("--api-url <url>", "API URL (env: BLODEMD_API_URL)").action(async (measurementId, options) => {
+		await runAction("Set GA4 failed", () => runSetGa4(measurementId, options));
+	});
+	set.command("posthog").description("Set the PostHog project key").argument("<projectKey>", "PostHog project key (phc_...)", parsePosthogProjectKey).option("--host <url>", "PostHog host (default: https://us.i.posthog.com)", parsePosthogHost).option("--project <slug>", "project slug (env: BLODEMD_PROJECT)").option("--api-url <url>", "API URL (env: BLODEMD_API_URL)").action(async (projectKey, options) => {
+		await runAction("Set PostHog failed", () => runSetPosthog(projectKey, options));
+	});
+	analytics.command("unset").description("Remove an analytics integration").argument("<provider>", "provider to remove (ga4 | posthog)", parseProvider).option("--project <slug>", "project slug (env: BLODEMD_PROJECT)").option("--api-url <url>", "API URL (env: BLODEMD_API_URL)").action(async (provider, options) => {
+		await runAction("Unset failed", () => runUnset(provider, options));
+	});
 };
 //#endregion
 //#region src/scaffold.ts
 const SCAFFOLD_TEMPLATES = ["minimal", "starter"];
 const DEFAULT_SCAFFOLD_DIRECTORY = "docs";
+const DEFAULT_PROJECT_SLUG = "my-project";
 const stringifyJson = (value) => `${JSON.stringify(value, null, 2)}\n`;
 const escapeXmlText = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&apos;");
 const isScaffoldTemplate = (value) => SCAFFOLD_TEMPLATES.includes(value);
-const normalizeProjectSlug = (value) => slugify(value) || "my-project";
+const normalizeProjectSlug = (value) => slugify(value) || DEFAULT_PROJECT_SLUG;
 const resolveScaffoldDirectory = (directory) => directory?.trim() || "docs";
 const deriveDefaultProjectSlug = (directory, cwd) => {
 	const resolvedDirectory = resolveScaffoldDirectory(directory);
@@ -1866,42 +1580,87 @@ const createStarterFiles = (projectSlug, displayName) => {
 	];
 };
 const getScaffoldFiles = (template, options) => {
-	const projectSlug = options?.projectSlug ?? "my-project";
+	const projectSlug = options?.projectSlug ?? DEFAULT_PROJECT_SLUG;
 	const displayName = options?.displayName ?? deriveDisplayNameFromProjectSlug(projectSlug);
 	return template === "starter" ? createStarterFiles(projectSlug, displayName) : createMinimalFiles(projectSlug, displayName);
 };
 //#endregion
-//#region src/new-flow.ts
-const CREATE_IN_SUBDIRECTORY = "create-in-subdirectory";
-const SCAFFOLD_CURRENT_DIRECTORY = "scaffold-current-directory";
-const CANCEL_SCAFFOLD = "cancel";
-const resolveInitialDirectory = (options) => {
-	if (options.directory) return {
-		directory: options.directory,
-		kind: "target"
-	};
-	if (!options.interactive) return {
-		directory: DEFAULT_SCAFFOLD_DIRECTORY,
-		kind: "target"
-	};
-	if (options.currentDirectoryEntries.length === 0) return {
-		directory: ".",
-		kind: "target"
-	};
-	return { kind: "prompt" };
-};
-const resolveDirectoryFromAction = (action, subdirectory) => {
-	if (action === "scaffold-current-directory") return ".";
-	if (action === "create-in-subdirectory") return subdirectory?.trim() || "docs";
+//#region src/command-utils.ts
+const readGitValue = (gitArgs) => {
+	const result = spawnSync("git", gitArgs, {
+		encoding: "utf8",
+		stdio: [
+			"ignore",
+			"pipe",
+			"ignore"
+		]
+	});
+	if (result.status !== 0) return;
+	return result.stdout.trim() || void 0;
 };
-//#endregion
-//#region src/oauth-callback.ts
-const SUCCESS_HTML = "<!doctype html><html><head><meta charset=\"utf-8\"/><title>Blode.md CLI</title></head><body><h2>Logged in! You can close this tab.</h2></body></html>";
-const escapeHtml = (text) => text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;");
-const errorHtml = (message) => `<!doctype html><html><head><meta charset="utf-8"/><title>Blode.md CLI</title></head><body><h2>Login failed</h2><p>${escapeHtml(message)}</p></body></html>`;
-const waitForOAuthCode = (options) => {
-	const host = options.redirectUrl.hostname;
-	const port = Number(options.redirectUrl.port);
+const shouldSkipEntry = (name) => name.startsWith(".") || name === "node_modules";
+const collectFiles = async (root, directory = root) => {
+	const entries = await fs.readdir(directory, { withFileTypes: true });
+	const files = [];
+	for (const entry of entries) {
+		if (shouldSkipEntry(entry.name)) continue;
+		const absolutePath = path.join(directory, entry.name);
+		const relativePath = path.relative(root, absolutePath).split(path.sep).join("/");
+		if (entry.isDirectory()) {
+			files.push(...await collectFiles(root, absolutePath));
+			continue;
+		}
+		if (entry.isFile()) {
+			if (shouldIgnoreRootDocsFile(relativePath)) continue;
+			files.push(absolutePath);
+		}
+	}
+	return files.toSorted((left, right) => left.localeCompare(right));
+};
+const reportCommandError = (prefix, error) => {
+	const cliError = toCliError(error);
+	log.error(`${prefix}: ${cliError.message}`);
+	if (cliError.hint) log.info(cliError.hint);
+	log.info("Failed");
+	process.exitCode = cliError.exitCode;
+};
+const parseScaffoldTemplate = (value) => {
+	if (isScaffoldTemplate(value)) return value;
+	throw new InvalidArgumentError(`Expected one of: ${SCAFFOLD_TEMPLATES.join(", ")}.`);
+};
+const parseProjectSlug = (value) => {
+	const validationError = validateProjectSlug(value);
+	if (validationError) throw new InvalidArgumentError(validationError);
+	return value.trim();
+};
+//#endregion
+//#region src/http.ts
+const readJson = async (response) => {
+	const responseText = await response.text();
+	if (!responseText) return null;
+	try {
+		return JSON.parse(responseText);
+	} catch {
+		return responseText;
+	}
+};
+const requestJson = async (url, init, message) => {
+	const response = await fetch(url, init);
+	const data = await readJson(response);
+	if (!response.ok) {
+		const detail = typeof data === "string" ? data : JSON.stringify(data ?? {}, null, 2);
+		throw new Error(`${message}: ${response.status} ${detail}`);
+	}
+	return data;
+};
+//#endregion
+//#region src/oauth-callback.ts
+const SUCCESS_HTML = "<!doctype html><html><head><meta charset=\"utf-8\"/><title>Blode.md CLI</title></head><body><h2>Logged in! You can close this tab.</h2></body></html>";
+const escapeHtml = (text) => text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;");
+const errorHtml = (message) => `<!doctype html><html><head><meta charset="utf-8"/><title>Blode.md CLI</title></head><body><h2>Login failed</h2><p>${escapeHtml(message)}</p></body></html>`;
+const waitForOAuthCode = (options) => {
+	const host = options.redirectUrl.hostname;
+	const port = Number(options.redirectUrl.port);
 	const { pathname } = options.redirectUrl;
 	if (!Number.isInteger(port) || port <= 0) return Promise.reject(new CliError("OAuth redirect URL requires an explicit port", EXIT_CODES.ERROR));
 	return new Promise((resolve, reject) => {
@@ -1917,7 +1676,7 @@ const waitForOAuthCode = (options) => {
 			});
 			for (const socket of sockets) socket.destroy();
 		};
-		const httpServer = createServer$1((request, response) => {
+		const httpServer = createServer((request, response) => {
 			if (!request.url) {
 				response.writeHead(400, { "content-type": "text/html; charset=utf-8" });
 				response.end(errorHtml("Missing request URL"));
@@ -1974,160 +1733,610 @@ const createOAuthState = () => randomBytes(24).toString("hex");
 const createCodeVerifier = () => randomBytes(64).toString("base64url");
 const createCodeChallenge = (verifier) => createHash("sha256").update(verifier).digest().toString("base64url");
 //#endregion
-//#region src/runtime.ts
-const MIN_SUPPORTED_NODE_VERSION = [
-	20,
-	17,
-	0
-];
-const SUPPORTED_NODE_RANGE = ">=20.17.0";
-const parseVersion = (input) => {
-	const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(input.trim());
-	if (!match) return null;
-	const [, majorText = "", minorText = "", patchText = ""] = match;
-	if (!majorText || !minorText || !patchText) return null;
-	const major = Number.parseInt(majorText, 10);
-	const minor = Number.parseInt(minorText, 10);
-	const patch = Number.parseInt(patchText, 10);
-	if ([
-		major,
-		minor,
-		patch
-	].some((value) => Number.isNaN(value))) return null;
-	return [
-		major,
-		minor,
-		patch
-	];
-};
-const isSupportedNodeVersion = (version) => {
-	const parsed = parseVersion(version);
-	if (!parsed) return false;
-	const [major, minor, patch] = parsed;
-	const [minMajor, minMinor, minPatch] = MIN_SUPPORTED_NODE_VERSION;
-	if (major !== minMajor) return major > minMajor;
-	if (minor !== minMinor) return minor > minMinor;
-	return patch >= minPatch;
-};
-const assertSupportedNodeVersion = (version = process.versions.node) => {
-	if (isSupportedNodeVersion(version)) return;
-	throw new CliError(`blodemd requires Node.js ${SUPPORTED_NODE_RANGE}. Current version: ${version}.`, EXIT_CODES.VALIDATION, "Install a supported Node.js version and try again.");
+//#region src/validation.ts
+const MAX_PORT = 65535;
+const parsePositiveInteger = (value, label) => {
+	const trimmed = value.trim();
+	if (!/^\d+$/u.test(trimmed)) throw new CliError(`${label} must be a positive integer.`, EXIT_CODES.VALIDATION);
+	const parsed = Number(trimmed);
+	if (!Number.isSafeInteger(parsed) || parsed <= 0) throw new CliError(`${label} must be a positive integer.`, EXIT_CODES.VALIDATION);
+	return parsed;
 };
-const readCliVersion = (moduleUrl) => {
-	const moduleDir = path.dirname(fileURLToPath(moduleUrl));
-	const raw = readFileSync(path.resolve(moduleDir, "..", "package.json"), "utf8");
-	return JSON.parse(raw).version ?? "0.0.0";
+const parsePort = (value, label = "Port") => {
+	const parsed = parsePositiveInteger(value, label);
+	if (parsed > MAX_PORT) throw new CliError(`${label} must be between 1 and ${MAX_PORT}.`, EXIT_CODES.VALIDATION);
+	return parsed;
 };
 //#endregion
-//#region src/upload.ts
-const TEXT_CONTENT_TYPES = {
-	".css": "text/css; charset=utf-8",
-	".html": "text/html; charset=utf-8",
-	".js": "text/javascript; charset=utf-8",
-	".json": "application/json; charset=utf-8",
-	".md": "text/markdown; charset=utf-8",
-	".mdx": "text/markdown; charset=utf-8",
-	".svg": "image/svg+xml",
-	".txt": "text/plain; charset=utf-8",
-	".yaml": "application/yaml; charset=utf-8",
-	".yml": "application/yaml; charset=utf-8"
-};
-const normalizeRelativePath = (root, filePath) => path.relative(root, filePath).split(path.sep).join("/");
-const getContentType = (filePath) => TEXT_CONTENT_TYPES[path.extname(filePath).toLowerCase()] ?? "application/octet-stream";
-const estimateUploadItemBytes = (item) => item.contentBase64.length + item.path.length + 64;
-const createUploadBatchItem = async (filePath, root, readFile) => {
-	return {
-		contentBase64: (await readFile(filePath)).toString("base64"),
-		contentType: getContentType(filePath),
-		path: normalizeRelativePath(root, filePath)
-	};
+//#region src/commands/auth.ts
+const fetchUserEmail = async (apiUrl, token) => {
+	try {
+		return (await requestJson(`${apiUrl}/auth/me`, { headers: { Authorization: `Bearer ${token}` } }, "Failed to fetch user info")).email;
+	} catch {
+		return null;
+	}
 };
-const createUploadBatches = async function* createUploadBatchesGenerator({ files, maxBatchBytes, readFile = fs.readFile, root }) {
-	let currentBatch = [];
-	let currentBatchBytes = 0;
-	for (const filePath of files) {
-		const item = await createUploadBatchItem(filePath, root, readFile);
-		if (shouldIgnoreRootDocsFile(item.path)) continue;
-		const itemBytes = estimateUploadItemBytes(item);
-		if (itemBytes > maxBatchBytes) throw new CliError(`File "${item.path}" is too large to upload in a single request.`, EXIT_CODES.VALIDATION, "Split the file into smaller pieces or raise the server request limit.");
-		if (currentBatch.length > 0 && currentBatchBytes + itemBytes > maxBatchBytes) {
-			yield currentBatch;
-			currentBatch = [];
-			currentBatchBytes = 0;
+const registerAuthCommands = (program) => {
+	program.command("login").description("Authenticate with Blode.md via GitHub in your browser").option("--port <port>", "Loopback callback port", String(DEFAULT_OAUTH_CALLBACK_PORT)).option("--timeout <seconds>", "OAuth timeout in seconds", String(180)).option("--no-open", "Print URL instead of opening the browser").action(async (options) => {
+		intro(chalk.bold("blodemd login"));
+		try {
+			const { authorizeUrl, tokenUrl } = buildOAuthUrls(resolveSupabaseConfig());
+			const clientId = OAUTH_CLIENT_ID;
+			const port = parsePort(options.port);
+			const timeoutSeconds = parsePositiveInteger(options.timeout, "Timeout");
+			const redirectUrl = new URL(`http://127.0.0.1:${port}${DEFAULT_OAUTH_CALLBACK_PATH}`);
+			const state = createOAuthState();
+			const codeVerifier = createCodeVerifier();
+			const codeChallenge = createCodeChallenge(codeVerifier);
+			const authUrl = new URL(authorizeUrl);
+			authUrl.searchParams.set("response_type", "code");
+			authUrl.searchParams.set("client_id", clientId);
+			authUrl.searchParams.set("redirect_uri", redirectUrl.toString());
+			authUrl.searchParams.set("code_challenge", codeChallenge);
+			authUrl.searchParams.set("code_challenge_method", "S256");
+			authUrl.searchParams.set("state", state);
+			authUrl.searchParams.set("scope", "openid email profile");
+			authUrl.searchParams.set("provider", "github");
+			const callbackPromise = waitForOAuthCode({
+				expectedState: state,
+				redirectUrl,
+				timeoutMs: timeoutSeconds * 1e3
+			});
+			if (options.open) {
+				log.info("Opening browser for authentication...");
+				log.info(`If the browser doesn't open, visit: ${chalk.cyan(authUrl.toString())}`);
+				await open(authUrl.toString());
+			} else {
+				log.info("Open this URL to continue authentication:");
+				log.info(chalk.cyan(authUrl.toString()));
+			}
+			const code = await callbackPromise;
+			const storedSession = tokenResponseToStoredSession(await exchangeAuthorizationCode({
+				clientId,
+				tokenUrl
+			}, code, codeVerifier, redirectUrl.toString()));
+			await writeStoredAuthSession(storedSession);
+			const email = storedSession.user?.email ?? await fetchUserEmail(process.env["BLODEMD_API_URL"] ?? "https://api.blode.md", storedSession.accessToken);
+			if (email) log.success(`Logged in as ${chalk.cyan(email)}`);
+			else log.success("Logged in successfully.");
+			log.info("Done");
+		} catch (error) {
+			reportCommandError("Login failed", error);
 		}
-		currentBatch.push(item);
-		currentBatchBytes += itemBytes;
-	}
-	if (currentBatch.length > 0) yield currentBatch;
+	});
+	program.command("logout").description("Remove stored credentials").action(async () => {
+		intro(chalk.bold("blodemd logout"));
+		try {
+			let existing = false;
+			try {
+				await fs.access(CREDENTIALS_FILE);
+				existing = true;
+			} catch {
+				existing = false;
+			}
+			await clearStoredCredentials();
+			if (existing) log.success("Credentials removed.");
+			else log.info("No stored credentials found.");
+			log.info("Done");
+		} catch (error) {
+			reportCommandError("Logout failed", error);
+		}
+	});
+	program.command("whoami").description("Show current authentication").action(async () => {
+		try {
+			const resolved = await resolveAuthToken();
+			if (!resolved) {
+				log.warn("Not logged in. Run \"blodemd login\" to authenticate.");
+				return;
+			}
+			const status = resolveTokenStatus(resolved);
+			const email = resolved.user?.email ?? await fetchUserEmail(process.env["BLODEMD_API_URL"] ?? "https://api.blode.md", resolved.token);
+			if (email) log.info(`Logged in as ${chalk.cyan(email)}`);
+			else log.info("Logged in (could not fetch user details).");
+			if (resolved.expiresAt && status.expired) log.warn("Session has expired. Run \"blodemd login\" to re-authenticate.");
+		} catch (error) {
+			reportCommandError("Whoami failed", error);
+		}
+	});
 };
 //#endregion
-//#region src/cli.ts
-const CONFIG_FILE = "docs.json";
-const readGitValue = (gitArgs) => {
-	const result = spawnSync("git", gitArgs, {
-		encoding: "utf8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"ignore"
+//#region src/dev/watcher.ts
+const INVALIDATE_ENDPOINT = "/blodemd-dev/invalidate";
+const WATCH_DEBOUNCE_MS = 100;
+const normalizeRelativePath$1 = (root, filePath) => path.relative(root, filePath).split(path.sep).join("/");
+const isDirectoryEvent = (event) => event === "addDir" || event === "unlinkDir";
+const createDevWatcher = ({ port, root }) => {
+	const watcher = watch(root, {
+		ignoreInitial: true,
+		ignored: [
+			"**/.git/**",
+			"**/.next/**",
+			"**/dist/**",
+			"**/node_modules/**"
 		]
 	});
-	if (result.status !== 0) return;
-	return result.stdout.trim() || void 0;
-};
-const shouldSkipEntry = (name) => name.startsWith(".") || name === "node_modules";
-const collectFiles = async (root, directory = root) => {
-	const entries = await fs.readdir(directory, { withFileTypes: true });
-	const files = [];
-	for (const entry of entries) {
-		if (shouldSkipEntry(entry.name)) continue;
-		const absolutePath = path.join(directory, entry.name);
-		const relativePath = path.relative(root, absolutePath).split(path.sep).join("/");
-		if (entry.isDirectory()) {
-			files.push(...await collectFiles(root, absolutePath));
-			continue;
+	let flushTimer = null;
+	let pendingKind = "content";
+	const pendingPaths = /* @__PURE__ */ new Set();
+	const flush = async () => {
+		flushTimer = null;
+		const paths = [...pendingPaths];
+		const kind = pendingKind;
+		pendingPaths.clear();
+		pendingKind = "content";
+		if (!paths.length) return;
+		try {
+			const response = await fetch(`http://127.0.0.1:${port}${INVALIDATE_ENDPOINT}`, {
+				body: JSON.stringify({
+					kind,
+					paths
+				}),
+				headers: { "Content-Type": "application/json" },
+				method: "POST"
+			});
+			if (!response.ok) throw new Error(`HTTP ${response.status}`);
+		} catch (error) {
+			log.error(`Failed to invalidate preview cache: ${error instanceof Error ? error.message : "unknown error"}`);
 		}
-		if (entry.isFile()) {
-			if (shouldIgnoreRootDocsFile(relativePath)) continue;
-			files.push(absolutePath);
+	};
+	watcher.on("all", (event, changedPath) => {
+		if (isDirectoryEvent(event)) return;
+		const relativePath = normalizeRelativePath$1(root, changedPath);
+		pendingPaths.add(relativePath);
+		if (path.basename(changedPath) === "docs.json") pendingKind = "config";
+		if (flushTimer) clearTimeout(flushTimer);
+		flushTimer = setTimeout(() => {
+			flush();
+		}, WATCH_DEBOUNCE_MS);
+	});
+	return { async close() {
+		if (flushTimer) {
+			clearTimeout(flushTimer);
+			await flush();
 		}
-	}
-	return files.toSorted((left, right) => left.localeCompare(right));
-};
-const readJson = async (response) => {
-	const responseText = await response.text();
-	if (!responseText) return null;
-	try {
-		return JSON.parse(responseText);
-	} catch {
-		return responseText;
-	}
+		await watcher.close();
+	} };
 };
-const requestJson = async (url, init, message) => {
-	const response = await fetch(url, init);
-	const data = await readJson(response);
-	if (!response.ok) {
-		const detail = typeof data === "string" ? data : JSON.stringify(data ?? {}, null, 2);
-		throw new Error(`${message}: ${response.status} ${detail}`);
+//#endregion
+//#region src/dev/command.ts
+const DEV_READY_ENDPOINT = "/blodemd-dev/version";
+const DEV_READY_TIMEOUT_MS = 45e3;
+const DEV_PORT_SCAN_LIMIT = 10;
+const DEV_SHUTDOWN_TIMEOUT_MS = 5e3;
+const LOCALHOST = "127.0.0.1";
+const RUNTIME_EXCLUDE_DIRS = new Set([
+	".next",
+	".turbo",
+	"node_modules"
+]);
+const STANDALONE_RUNTIME_MAX_AGE_MS = 1440 * 60 * 1e3;
+const STANDALONE_RUNTIME_PREFIX = "standalone-runtime-";
+const TURBOPACK_ARGS = ["dev", "--turbopack"];
+const fileExists = async (filePath) => {
+	try {
+		await fs.access(filePath);
+		return true;
+	} catch {
+		return false;
 	}
-	return data;
 };
-const reportCommandError = (prefix, error) => {
-	const cliError = toCliError(error);
-	log.error(`${prefix}: ${cliError.message}`);
-	if (cliError.hint) log.info(cliError.hint);
-	log.info("Failed");
-	process.exitCode = cliError.exitCode;
+const resolveCommonAncestor = (pathsToCompare) => {
+	const [firstPath, ...restPaths] = pathsToCompare;
+	if (!firstPath) return path.sep;
+	const first = path.resolve(firstPath);
+	const { root } = path.parse(first);
+	const firstSegments = first.slice(root.length).split(path.sep).filter(Boolean);
+	const sharedSegments = [];
+	for (const [index, segment] of firstSegments.entries()) {
+		if (!restPaths.every((candidatePath) => {
+			const candidate = path.resolve(candidatePath);
+			if (path.parse(candidate).root !== root) return false;
+			return candidate.slice(root.length).split(path.sep).filter(Boolean)[index] === segment;
+		})) break;
+		sharedSegments.push(segment);
+	}
+	return path.join(root, ...sharedSegments);
 };
-const parseScaffoldTemplate = (value) => {
-	if (isScaffoldTemplate(value)) return value;
-	throw new InvalidArgumentError(`Expected one of: ${SCAFFOLD_TEMPLATES.join(", ")}.`);
+const cleanupStandaloneRuntimeRoots = async (configDir, maxAgeMs = STANDALONE_RUNTIME_MAX_AGE_MS) => {
+	const cutoff = Date.now() - maxAgeMs;
+	const entries = await fs.readdir(configDir, { withFileTypes: true });
+	await Promise.all(entries.filter((entry) => entry.isDirectory() && entry.name.startsWith(STANDALONE_RUNTIME_PREFIX)).map(async (entry) => {
+		const entryPath = path.join(configDir, entry.name);
+		if ((await fs.stat(entryPath)).mtimeMs >= cutoff) return;
+		await fs.rm(entryPath, {
+			force: true,
+			recursive: true
+		});
+	}));
+};
+const probePortAvailability = async (port) => {
+	const server = createServer$1();
+	const listening = (async () => {
+		await once(server, "listening");
+		return { kind: "listening" };
+	})();
+	const errored = (async () => {
+		const [error] = await once(server, "error");
+		return {
+			error,
+			kind: "error"
+		};
+	})();
+	server.listen({
+		exclusive: true,
+		host: LOCALHOST,
+		port
+	});
+	const outcome = await Promise.race([listening, errored]);
+	if (outcome.kind === "error") {
+		if (outcome.error.code === "EADDRINUSE" || outcome.error.code === "EACCES") return false;
+		throw outcome.error;
+	}
+	server.close();
+	await once(server, "close");
+	return true;
+};
+const resolveDevPort = async (requestedPort, probePort = probePortAvailability) => {
+	for (let offset = 0; offset < DEV_PORT_SCAN_LIMIT; offset += 1) {
+		const candidate = requestedPort + offset;
+		if (candidate > 65535) break;
+		if (await probePort(candidate)) return candidate;
+	}
+	throw new CliError(`No available port found within ${DEV_PORT_SCAN_LIMIT} attempts starting at ${requestedPort}.`, EXIT_CODES.ERROR, "Close the process using the port or pass a different --port value.");
+};
+const shutdownChildProcess = async (child, timeoutMs = DEV_SHUTDOWN_TIMEOUT_MS) => {
+	if (child.exitCode !== null) return;
+	const timer = setTimeout(() => {
+		if (child.exitCode === null) child.kill("SIGKILL");
+	}, timeoutMs);
+	const exitPromise = once(child, "exit");
+	try {
+		child.kill("SIGTERM");
+	} catch (error) {
+		clearTimeout(timer);
+		if (error.code === "ESRCH") return;
+		throw error;
+	}
+	await exitPromise.finally(() => {
+		clearTimeout(timer);
+	});
+};
+/**
+* Derive the CLI npm package root from the running script path.
+* The CLI entry point is at `<pkg-root>/dist/cli.mjs`.
+*/
+const resolveCliPackageRoot = (cliFilePath) => path.dirname(path.dirname(cliFilePath));
+const copyStandaloneTree = async (sourceDir, targetDir) => {
+	await fs.cp(sourceDir, targetDir, {
+		filter: (source) => {
+			const relative = path.relative(sourceDir, source);
+			if (!relative) return true;
+			const topSegment = relative.split(path.sep)[0] ?? "";
+			return !RUNTIME_EXCLUDE_DIRS.has(topSegment);
+		},
+		recursive: true
+	});
+};
+const isStandaloneCliInstall = async (cliPackageRoot) => {
+	try {
+		return (await fs.realpath(cliPackageRoot)).split(path.sep).includes("node_modules");
+	} catch {
+		return cliPackageRoot.split(path.sep).includes("node_modules");
+	}
+};
+const createStandaloneRuntimeRoot = async (configDir = CONFIG_DIR) => {
+	await fs.mkdir(configDir, { recursive: true });
+	await cleanupStandaloneRuntimeRoots(configDir);
+	return await fs.mkdtemp(path.join(configDir, STANDALONE_RUNTIME_PREFIX));
+};
+/**
+* Locate the `node_modules` directory that actually contains the CLI's
+* transitive dependencies. Package managers like npm/yarn-classic (and
+* `npx` caches) hoist shared deps above the package directory, so
+* `<cliPackageRoot>/node_modules` may not exist or may not contain `next`.
+* Resolve `next/package.json` and use the directory that owns it.
+*/
+const resolveRuntimeNodeModules = async (cliPackageRoot) => {
+	const localNodeModules = path.join(cliPackageRoot, "node_modules");
+	if (await fileExists(path.join(localNodeModules, "next", "package.json"))) return localNodeModules;
+	const nextPkgPath = createRequire(path.join(cliPackageRoot, "package.json")).resolve("next/package.json");
+	return path.dirname(path.dirname(nextPkgPath));
+};
+const materializeStandaloneRuntime = async (cliPackageRoot) => {
+	const runtimeRoot = await createStandaloneRuntimeRoot();
+	try {
+		for (const dir of [
+			"dev-server",
+			"docs",
+			"packages"
+		]) await copyStandaloneTree(path.join(cliPackageRoot, dir), path.join(runtimeRoot, dir));
+		const runtimeNodeModules = await resolveRuntimeNodeModules(cliPackageRoot);
+		await fs.symlink(runtimeNodeModules, path.join(runtimeRoot, "node_modules"), process.platform === "win32" ? "junction" : "dir");
+		const linkTarget = path.join(runtimeRoot, "packages", "@repo");
+		for (const consumer of [
+			"dev-server",
+			"docs",
+			"packages"
+		]) {
+			await fs.mkdir(path.join(runtimeRoot, consumer, "node_modules"), { recursive: true });
+			await fs.symlink(linkTarget, path.join(runtimeRoot, consumer, "node_modules", "@repo"), process.platform === "win32" ? "junction" : "dir");
+		}
+		await fs.writeFile(path.join(runtimeRoot, "dev-server", "package.json"), `${JSON.stringify({
+			dependencies: {
+				next: "16.2.1",
+				react: "^19.2.0",
+				"react-dom": "^19.2.0"
+			},
+			devDependencies: {
+				"@types/node": "^24.12.2",
+				"@types/react": "19.2.14",
+				"@types/react-dom": "19.2.3",
+				typescript: "6.0.2"
+			},
+			name: "blodemd-dev-server",
+			private: true,
+			type: "module"
+		}, null, 2)}\n`);
+		return {
+			devServerDir: path.join(runtimeRoot, "dev-server"),
+			runtimeRoot
+		};
+	} catch (error) {
+		await fs.rm(runtimeRoot, {
+			force: true,
+			recursive: true
+		});
+		throw error;
+	}
+};
+/**
+* Check if a shipped dev-server exists alongside an installed CLI package.
+* We only use standalone mode when the package root lives under `node_modules`.
+*/
+const findStandaloneDevServer = async (cliPackageRoot) => {
+	const devServerDir = path.join(cliPackageRoot, "dev-server");
+	if (!await fileExists(path.join(devServerDir, "next.config.js"))) return null;
+	if (!await isStandaloneCliInstall(cliPackageRoot)) return null;
+	try {
+		createRequire(path.join(cliPackageRoot, "package.json")).resolve("next/package.json");
+	} catch {
+		return null;
+	}
+	const runtime = await materializeStandaloneRuntime(cliPackageRoot);
+	return {
+		devServerDir: runtime.devServerDir,
+		mode: "standalone",
+		nextPackageRoot: cliPackageRoot,
+		runtimeRoot: runtime.runtimeRoot
+	};
+};
+/**
+* Resolve the `next` CLI binary from the blodemd package's own dependencies.
+*/
+const resolveNextBin = (cliPackageRoot) => {
+	const nextPkgPath = createRequire(path.join(cliPackageRoot, "package.json")).resolve("next/package.json");
+	return path.join(path.dirname(nextPkgPath), "dist", "bin", "next");
+};
+const findMonorepoRoot = async (start) => {
+	let current = start;
+	while (true) {
+		const packageJsonPath = path.join(current, "package.json");
+		if (await fileExists(packageJsonPath)) {
+			const raw = await fs.readFile(packageJsonPath, "utf8");
+			const workspaces = JSON.parse(raw).workspaces ?? [];
+			if (workspaces.includes("apps/*") && workspaces.includes("packages/*")) return current;
+		}
+		const parent = path.dirname(current);
+		if (parent === current) break;
+		current = parent;
+	}
+	throw new CliError("Could not locate the blodemd dev server.", EXIT_CODES.ERROR, "Make sure blodemd is installed correctly (npm i blodemd).");
+};
+const resolveDevServer = async (cliFilePath) => {
+	const standalone = await findStandaloneDevServer(resolveCliPackageRoot(cliFilePath));
+	if (standalone) return standalone;
+	return {
+		mode: "monorepo",
+		repoRoot: await findMonorepoRoot(path.dirname(cliFilePath))
+	};
+};
+const buildDevServerLaunch = (server, { root, port }) => {
+	if (server.mode === "standalone") return {
+		args: [resolveNextBin(server.nextPackageRoot), ...TURBOPACK_ARGS],
+		command: process.execPath,
+		cwd: server.devServerDir,
+		env: {
+			...process.env,
+			BLODEMD_PACKAGES_DIR: path.join(server.runtimeRoot, "packages"),
+			BLODEMD_TURBOPACK_ROOT: resolveCommonAncestor([server.nextPackageRoot, server.runtimeRoot]),
+			DOCS_ROOT: root,
+			PORT: String(port)
+		}
+	};
+	return {
+		args: [
+			"run",
+			"dev",
+			"--workspace=dev-server"
+		],
+		command: process.platform === "win32" ? "npm.cmd" : "npm",
+		cwd: server.repoRoot,
+		env: {
+			...process.env,
+			DOCS_ROOT: root,
+			PORT: String(port)
+		}
+	};
+};
+const spawnDevServer = (server, options) => {
+	const launch = buildDevServerLaunch(server, options);
+	return spawn(launch.command, launch.args, {
+		cwd: launch.cwd,
+		env: launch.env,
+		stdio: "inherit"
+	});
+};
+const waitForServer = async ({ child, port }) => {
+	const url = `http://localhost:${port}${DEV_READY_ENDPOINT}`;
+	const startedAt = Date.now();
+	while (Date.now() - startedAt < DEV_READY_TIMEOUT_MS) {
+		if (child.exitCode !== null) throw new CliError("The local dev server exited before it became ready.", EXIT_CODES.ERROR);
+		try {
+			if ((await fetch(url, {
+				cache: "no-store",
+				headers: { accept: "application/json" }
+			})).ok) return;
+		} catch {}
+		await setTimeout$1(500);
+	}
+	throw new CliError("Timed out waiting for the local dev server to start.", EXIT_CODES.ERROR);
+};
+const defaultDevCommandDependencies = {
+	createWatcher: createDevWatcher,
+	getCliFilePath: () => fileURLToPath(import.meta.url),
+	getIntro: intro,
+	getLog: log,
+	getOpen: open,
+	parsePortValue: parsePort,
+	removeDirectory: fs.rm,
+	resolveDevPortValue: resolveDevPort,
+	resolveDocsRootValue: resolveDocsRoot,
+	resolveServer: resolveDevServer,
+	shutdownChild: shutdownChildProcess,
+	spawnServer: spawnDevServer,
+	validateDocsRootValue: validateDocsRoot,
+	waitForServerReady: waitForServer
+};
+const devCommand = async ({ dir, openBrowser, port: portValue }, dependencies = defaultDevCommandDependencies) => {
+	const cliLog = dependencies.getLog;
+	dependencies.getIntro(chalk.bold("blodemd dev"));
+	try {
+		const port = dependencies.parsePortValue(portValue);
+		const resolvedPort = await dependencies.resolveDevPortValue(port);
+		const root = await dependencies.resolveDocsRootValue(dir);
+		await dependencies.validateDocsRootValue(root);
+		const cliFilePath = dependencies.getCliFilePath();
+		const server = await dependencies.resolveServer(cliFilePath);
+		const localUrl = `http://localhost:${resolvedPort}`;
+		cliLog.info(`Docs root: ${chalk.cyan(root)}`);
+		const child = dependencies.spawnServer(server, {
+			port: resolvedPort,
+			root
+		});
+		let watcher = null;
+		let shuttingDown = false;
+		const closeAll = async () => {
+			if (shuttingDown) return;
+			shuttingDown = true;
+			if (watcher) {
+				await watcher.close();
+				watcher = null;
+			}
+			await dependencies.shutdownChild(child);
+			if (server.mode === "standalone") await dependencies.removeDirectory(server.runtimeRoot, {
+				force: true,
+				recursive: true
+			});
+		};
+		process.once("SIGINT", closeAll);
+		process.once("SIGTERM", closeAll);
+		try {
+			await dependencies.waitForServerReady({
+				child,
+				port: resolvedPort
+			});
+			watcher = await dependencies.createWatcher({
+				port: resolvedPort,
+				root
+			});
+			cliLog.success(`Dev server running at ${chalk.cyan(localUrl)}`);
+			if (openBrowser) await dependencies.getOpen(localUrl);
+			const [code, signal] = await once(child, "exit");
+			if (shuttingDown || signal === "SIGINT" || signal === "SIGTERM") return;
+			if (code !== 0) throw new CliError(`The local dev server exited with code ${code ?? "unknown"}.`, EXIT_CODES.ERROR);
+		} finally {
+			await closeAll();
+			process.removeListener("SIGINT", closeAll);
+			process.removeListener("SIGTERM", closeAll);
+		}
+	} catch (error) {
+		const cliError = toCliError(error);
+		cliLog.error(cliError.message);
+		if (cliError.hint) cliLog.info(cliError.hint);
+		process.exitCode = cliError.exitCode;
+	}
+};
+//#endregion
+//#region src/commands/dev.ts
+const registerDevCommand = (program) => {
+	program.command("dev").description("Start the local docs dev server").option("-p, --port <port>", "Port number", "3030").option("-d, --dir <dir>", "Docs directory").option("--no-open", "Don't open browser").action(async (options) => await devCommand({
+		dir: options.dir,
+		openBrowser: options.open ?? true,
+		port: options.port
+	}));
+};
+//#endregion
+//#region src/fs-utils.ts
+const writeFileIfMissing = async (filePath, content) => {
+	try {
+		await fs.writeFile(filePath, content, { flag: "wx" });
+	} catch (error) {
+		const { code } = error;
+		if (code === "EEXIST") {
+			if ((await fs.stat(filePath).catch(() => null))?.isFile()) return;
+		}
+		throw error;
+	}
+};
+const writeSymlinkIfMissing = async (filePath, target, options) => {
+	const lstat = options?.lstat ?? fs.lstat;
+	const symlink = options?.symlink ?? fs.symlink;
+	try {
+		await symlink(target, filePath);
+	} catch (error) {
+		const { code } = error;
+		if (code === "EEXIST") {
+			const existing = await lstat(filePath).catch(() => null);
+			if (existing?.isFile() || existing?.isSymbolicLink()) return;
+		}
+		if (options?.fallbackContent && (code === "EINVAL" || code === "ENOTSUP" || code === "EPERM" || code === "UNKNOWN")) {
+			await writeFileIfMissing(filePath, options.fallbackContent);
+			return;
+		}
+		throw error;
+	}
+};
+const findExistingPaths = async (root, relativePaths) => {
+	return (await Promise.all(relativePaths.map(async (relativePath) => {
+		return await fs.lstat(path.join(root, relativePath)).catch(() => null) ? relativePath : null;
+	}))).filter((relativePath) => relativePath !== null).toSorted((left, right) => left.localeCompare(right));
+};
+//#endregion
+//#region src/new-flow.ts
+const CREATE_IN_SUBDIRECTORY = "create-in-subdirectory";
+const SCAFFOLD_CURRENT_DIRECTORY = "scaffold-current-directory";
+const CANCEL_SCAFFOLD = "cancel";
+const resolveInitialDirectory = (options) => {
+	if (options.directory) return {
+		directory: options.directory,
+		kind: "target"
+	};
+	if (!options.interactive) return {
+		directory: DEFAULT_SCAFFOLD_DIRECTORY,
+		kind: "target"
+	};
+	if (options.currentDirectoryEntries.length === 0) return {
+		directory: ".",
+		kind: "target"
+	};
+	return { kind: "prompt" };
 };
-const parseProjectSlug = (value) => {
-	const validationError = validateProjectSlug(value);
-	if (validationError) throw new InvalidArgumentError(validationError);
-	return value.trim();
+const resolveDirectoryFromAction = (action, subdirectory) => {
+	if (action === "scaffold-current-directory") return ".";
+	if (action === "create-in-subdirectory") return subdirectory?.trim() || "docs";
 };
+//#endregion
+//#region src/commands/new.ts
 const isInteractiveTerminal = () => process.stdin.isTTY === true && process.stdout.isTTY === true;
 const promptForNoArgDirectoryAction = async () => {
 	const directoryAction = await select({
@@ -2240,12 +2449,125 @@ const writeScaffoldFiles = async (root, template, options) => {
 		await writeFileIfMissing(filePath, file.content);
 	}
 };
-const fetchUserEmail = async (apiUrl, token) => {
+const scaffoldDocsSite = async (directory, options) => {
+	intro(chalk.bold("blodemd new"));
+	if (options?.deprecatedCommand) log.warn(`"${options.deprecatedCommand}" is deprecated. Use ${chalk.cyan("blodemd new")} instead.`);
+	if (options?.name && !options.slug) log.warn(`"${chalk.cyan("--name")}" is deprecated. Use ${chalk.cyan("--slug")} instead.`);
 	try {
-		return (await requestJson(`${apiUrl}/auth/me`, { headers: { Authorization: `Bearer ${token}` } }, "Failed to fetch user info")).email;
-	} catch {
-		return null;
+		const template = options?.template ?? "minimal";
+		const shouldPrompt = isInteractiveTerminal() && !options?.yes;
+		const selectedDirectory = await resolveRequestedDirectory(directory, shouldPrompt);
+		if (!selectedDirectory) {
+			log.warn("Cancelled");
+			return;
+		}
+		const resolvedDirectory = resolveScaffoldDirectory(selectedDirectory.directory);
+		const root = path.resolve(process.cwd(), resolvedDirectory);
+		if (!await confirmScaffoldTarget(root, template, shouldPrompt, { skipNonEmptyConfirmation: selectedDirectory.skipNonEmptyConfirmation })) {
+			log.warn("Cancelled");
+			return;
+		}
+		const projectSlug = await resolveProjectSlug(options?.slug ?? options?.name, resolvedDirectory, shouldPrompt);
+		if (!projectSlug) {
+			log.warn("Cancelled");
+			return;
+		}
+		const displayName = await resolveDisplayName(options?.displayName, projectSlug, shouldPrompt);
+		if (!displayName) {
+			log.warn("Cancelled");
+			return;
+		}
+		await fs.mkdir(root, { recursive: true });
+		await writeScaffoldFiles(root, template, {
+			displayName,
+			projectSlug
+		});
+		log.success(`Docs scaffolded in ${chalk.cyan(root)}`);
+		if (template === "starter") log.info("Starter template includes brand assets and helper files.");
+		log.info(`Display name: ${chalk.cyan(displayName)}`);
+		log.info(`Project slug: ${chalk.cyan(projectSlug)}`);
+		log.info("Done");
+	} catch (error) {
+		reportCommandError("New failed", error);
+	}
+};
+const registerNewCommand = (program) => {
+	program.command("new").description("Create a new blode.md documentation site").argument("[directory]", "target directory").option("--slug <slug>", "project slug for docs.json", parseProjectSlug).option("--name <slug>", "deprecated alias for --slug", parseProjectSlug).option("--display-name <name>", "display name for docs.json").option("-t, --template <template>", `scaffold template (${SCAFFOLD_TEMPLATES.join(", ")})`, parseScaffoldTemplate, "minimal").option("-y, --yes", "accept defaults without prompting").action(async (directory, options) => {
+		await scaffoldDocsSite(directory, {
+			displayName: options.displayName,
+			name: options.name,
+			slug: options.slug ?? options.name,
+			template: options.template,
+			yes: options.yes
+		});
+	});
+	program.command("init", { hidden: true }).argument("[directory]", "target directory").option("--slug <slug>", "project slug for docs.json", parseProjectSlug).option("--name <slug>", "deprecated alias for --slug", parseProjectSlug).option("--display-name <name>", "display name for docs.json").option("-t, --template <template>", `scaffold template (${SCAFFOLD_TEMPLATES.join(", ")})`, parseScaffoldTemplate, "minimal").option("-y, --yes", "accept defaults without prompting").action(async (directory, options) => {
+		await scaffoldDocsSite(directory, {
+			deprecatedCommand: "blodemd init",
+			displayName: options.displayName,
+			name: options.name,
+			slug: options.slug ?? options.name,
+			template: options.template,
+			yes: options.yes
+		});
+	});
+};
+//#endregion
+//#region src/upload.ts
+const TEXT_CONTENT_TYPES = {
+	".css": "text/css; charset=utf-8",
+	".html": "text/html; charset=utf-8",
+	".js": "text/javascript; charset=utf-8",
+	".json": "application/json; charset=utf-8",
+	".md": "text/markdown; charset=utf-8",
+	".mdx": "text/markdown; charset=utf-8",
+	".svg": "image/svg+xml",
+	".txt": "text/plain; charset=utf-8",
+	".yaml": "application/yaml; charset=utf-8",
+	".yml": "application/yaml; charset=utf-8"
+};
+const normalizeRelativePath = (root, filePath) => path.relative(root, filePath).split(path.sep).join("/");
+const getContentType = (filePath) => TEXT_CONTENT_TYPES[path.extname(filePath).toLowerCase()] ?? "application/octet-stream";
+const estimateUploadItemBytes = (item) => item.contentBase64.length + item.path.length + 64;
+const createUploadBatchItem = async (filePath, root, readFile) => {
+	return {
+		contentBase64: (await readFile(filePath)).toString("base64"),
+		contentType: getContentType(filePath),
+		path: normalizeRelativePath(root, filePath)
+	};
+};
+const createUploadBatches = async function* createUploadBatchesGenerator({ files, maxBatchBytes, readFile = fs.readFile, root }) {
+	let currentBatch = [];
+	let currentBatchBytes = 0;
+	for (const filePath of files) {
+		const item = await createUploadBatchItem(filePath, root, readFile);
+		if (shouldIgnoreRootDocsFile(item.path)) continue;
+		const itemBytes = estimateUploadItemBytes(item);
+		if (itemBytes > maxBatchBytes) throw new CliError(`File "${item.path}" is too large to upload in a single request.`, EXIT_CODES.VALIDATION, "Split the file into smaller pieces or raise the server request limit.");
+		if (currentBatch.length > 0 && currentBatchBytes + itemBytes > maxBatchBytes) {
+			yield currentBatch;
+			currentBatch = [];
+			currentBatchBytes = 0;
+		}
+		currentBatch.push(item);
+		currentBatchBytes += itemBytes;
 	}
+	if (currentBatch.length > 0) yield currentBatch;
+};
+//#endregion
+//#region src/commands/push.ts
+const resolveAuthHeaders = async (apiKeyOption) => {
+	const apiKey = (apiKeyOption ?? process.env["BLODEMD_API_KEY"])?.trim();
+	if (apiKey) return {
+		canAutoCreate: false,
+		headers: { "x-admin-token": apiKey }
+	};
+	const resolved = await resolveAuthToken();
+	if (!resolved?.token) throw new Error("Not logged in. Run \"blodemd login\" to authenticate, pass --api-key, or set BLODEMD_API_KEY.");
+	return {
+		canAutoCreate: true,
+		headers: { Authorization: `Bearer ${resolved.token}` }
+	};
 };
 const resolvePushConfig = async (config, options) => {
 	const { project, usedLegacyNameFallback } = resolveProjectTarget({
@@ -2254,7 +2576,6 @@ const resolvePushConfig = async (config, options) => {
 		envProject: process.env[BLODE_PROJECT_ENV]
 	});
 	const apiUrl = options.apiUrl ?? process.env["BLODEMD_API_URL"] ?? "https://api.blode.md";
-	const authToken = (await resolveAuthToken())?.token;
 	const branch = options.branch ?? process.env["BLODEMD_BRANCH"] ?? process.env.GITHUB_REF_NAME ?? readGitValue([
 		"rev-parse",
 		"--abbrev-ref",
@@ -2271,19 +2592,20 @@ const resolvePushConfig = async (config, options) => {
 		if (usedLegacyNameFallback) throw new Error(`docs.json.name is not a valid deployment slug. Add "slug" to docs.json, pass --project, or set BLODEMD_PROJECT. ${projectSlugError}`);
 		throw new Error(`Invalid project slug "${project}". ${projectSlugError}`);
 	}
-	if (!authToken) throw new Error("Not logged in. Run \"blodemd login\" to authenticate.");
+	const { headers: authHeaders, canAutoCreate } = await resolveAuthHeaders(options.apiKey);
 	return {
 		apiUrl,
-		authToken,
+		authHeaders,
 		branch,
+		canAutoCreate,
 		commitMessage,
 		project,
 		projectDisplayName: config.name?.trim() || project,
 		usedLegacyNameFallback
 	};
 };
-const autoCreateProject = async (project, projectDisplayName, apiUrl, headers) => {
-	if (!(await readAuthFile())?.session) throw new Error(`Project "${project}" not found. Create it at blode.md or login with "blodemd login" to auto-create.`);
+const autoCreateProject = async (project, projectDisplayName, apiUrl, headers, canAutoCreate) => {
+	if (!canAutoCreate) throw new Error(`Project "${project}" not found. Create it at blode.md or login with "blodemd login" to auto-create.`);
 	const shouldCreate = await confirm({ message: `Project "${project}" doesn't exist. Create it?` });
 	if (isCancel(shouldCreate) || !shouldCreate) return false;
 	const createResult = await requestJson(new URL("/projects", apiUrl).toString(), {
@@ -2297,48 +2619,6 @@ const autoCreateProject = async (project, projectDisplayName, apiUrl, headers) =
 	log.success(`Project ${chalk.cyan(createResult.slug)} created`);
 	return true;
 };
-const scaffoldDocsSite = async (directory, options) => {
-	intro(chalk.bold("blodemd new"));
-	if (options?.deprecatedCommand) log.warn(`"${options.deprecatedCommand}" is deprecated. Use ${chalk.cyan("blodemd new")} instead.`);
-	if (options?.name && !options.slug) log.warn(`"${chalk.cyan("--name")}" is deprecated. Use ${chalk.cyan("--slug")} instead.`);
-	try {
-		const template = options?.template ?? "minimal";
-		const shouldPrompt = isInteractiveTerminal() && !options?.yes;
-		const selectedDirectory = await resolveRequestedDirectory(directory, shouldPrompt);
-		if (!selectedDirectory) {
-			log.warn("Cancelled");
-			return;
-		}
-		const resolvedDirectory = resolveScaffoldDirectory(selectedDirectory.directory);
-		const root = path.resolve(process.cwd(), resolvedDirectory);
-		if (!await confirmScaffoldTarget(root, template, shouldPrompt, { skipNonEmptyConfirmation: selectedDirectory.skipNonEmptyConfirmation })) {
-			log.warn("Cancelled");
-			return;
-		}
-		const projectSlug = await resolveProjectSlug(options?.slug ?? options?.name, resolvedDirectory, shouldPrompt);
-		if (!projectSlug) {
-			log.warn("Cancelled");
-			return;
-		}
-		const displayName = await resolveDisplayName(options?.displayName, projectSlug, shouldPrompt);
-		if (!displayName) {
-			log.warn("Cancelled");
-			return;
-		}
-		await fs.mkdir(root, { recursive: true });
-		await writeScaffoldFiles(root, template, {
-			displayName,
-			projectSlug
-		});
-		log.success(`Docs scaffolded in ${chalk.cyan(root)}`);
-		if (template === "starter") log.info("Starter template includes brand assets and helper files.");
-		log.info(`Display name: ${chalk.cyan(displayName)}`);
-		log.info(`Project slug: ${chalk.cyan(projectSlug)}`);
-		log.info("Done");
-	} catch (error) {
-		reportCommandError("New failed", error);
-	}
-};
 const MAX_BATCH_BYTES = 4 * 1024 * 1024;
 const uploadFiles = async (files, root, apiPath, deploymentId, headers, s) => {
 	s.start(`Uploading ${files.length} files`);
@@ -2358,192 +2638,140 @@ const uploadFiles = async (files, root, apiPath, deploymentId, headers, s) => {
 	}
 	s.stop(`Uploaded ${chalk.cyan(String(files.length))} files`);
 };
-const program = new Command();
-const cliVersion = readCliVersion(import.meta.url);
-program.name("blodemd").description("Blode.md CLI").version(cliVersion);
-program.hook("preAction", () => {
-	assertSupportedNodeVersion();
-});
-program.command("login").description("Authenticate with Blode.md via GitHub in your browser").option("--port <port>", "Loopback callback port", String(DEFAULT_OAUTH_CALLBACK_PORT)).option("--timeout <seconds>", "OAuth timeout in seconds", String(180)).option("--no-open", "Print URL instead of opening the browser").action(async (options) => {
-	intro(chalk.bold("blodemd login"));
-	try {
-		const { authorizeUrl, tokenUrl } = buildOAuthUrls(resolveSupabaseConfig());
-		const clientId = OAUTH_CLIENT_ID;
-		const port = parsePort(options.port);
-		const timeoutSeconds = parsePositiveInteger(options.timeout, "Timeout");
-		const redirectUrl = new URL(`http://127.0.0.1:${port}${DEFAULT_OAUTH_CALLBACK_PATH}`);
-		const state = createOAuthState();
-		const codeVerifier = createCodeVerifier();
-		const codeChallenge = createCodeChallenge(codeVerifier);
-		const authUrl = new URL(authorizeUrl);
-		authUrl.searchParams.set("response_type", "code");
-		authUrl.searchParams.set("client_id", clientId);
-		authUrl.searchParams.set("redirect_uri", redirectUrl.toString());
-		authUrl.searchParams.set("code_challenge", codeChallenge);
-		authUrl.searchParams.set("code_challenge_method", "S256");
-		authUrl.searchParams.set("state", state);
-		authUrl.searchParams.set("scope", "openid email profile");
-		authUrl.searchParams.set("provider", "github");
-		const callbackPromise = waitForOAuthCode({
-			expectedState: state,
-			redirectUrl,
-			timeoutMs: timeoutSeconds * 1e3
-		});
-		if (options.open) {
-			log.info("Opening browser for authentication...");
-			log.info(`If the browser doesn't open, visit: ${chalk.cyan(authUrl.toString())}`);
-			await open(authUrl.toString());
-		} else {
-			log.info("Open this URL to continue authentication:");
-			log.info(chalk.cyan(authUrl.toString()));
-		}
-		const code = await callbackPromise;
-		const storedSession = tokenResponseToStoredSession(await exchangeAuthorizationCode({
-			clientId,
-			tokenUrl
-		}, code, codeVerifier, redirectUrl.toString()));
-		await writeStoredAuthSession(storedSession);
-		const email = storedSession.user?.email ?? await fetchUserEmail(process.env["BLODEMD_API_URL"] ?? "https://api.blode.md", storedSession.accessToken);
-		if (email) log.success(`Logged in as ${chalk.cyan(email)}`);
-		else log.success("Logged in successfully.");
-		log.info("Done");
-	} catch (error) {
-		reportCommandError("Login failed", error);
-	}
-});
-program.command("logout").description("Remove stored credentials").action(async () => {
-	intro(chalk.bold("blodemd logout"));
-	try {
-		let existing = false;
+const registerPushCommand = (program) => {
+	program.command("push").description("Deploy docs").argument("[dir]", "docs directory").option("--project <slug>", "project slug (env: BLODEMD_PROJECT)").option("--api-key <token>", "API key (env: BLODEMD_API_KEY)").option("--api-url <url>", "API URL (env: BLODEMD_API_URL)").option("--branch <name>", "git branch (env: BLODEMD_BRANCH)").option("--message <msg>", "deploy message (env: BLODEMD_COMMIT_MESSAGE)").action(async (dir, options) => {
+		intro(chalk.bold("blodemd push"));
+		const s = spinner();
 		try {
-			await fs.access(CREDENTIALS_FILE);
-			existing = true;
-		} catch {
-			existing = false;
-		}
-		await clearStoredCredentials();
-		if (existing) log.success("Credentials removed.");
-		else log.info("No stored credentials found.");
-		log.info("Done");
-	} catch (error) {
-		reportCommandError("Logout failed", error);
-	}
-});
-program.command("whoami").description("Show current authentication").action(async () => {
-	try {
-		const resolved = await resolveAuthToken();
-		if (!resolved) {
-			log.warn("Not logged in. Run \"blodemd login\" to authenticate.");
-			return;
+			const root = await resolveDocsRoot(dir);
+			s.start("Validating configuration");
+			const { config, warnings } = await loadValidatedSiteConfig(root);
+			s.stop("Configuration valid");
+			for (const warning of warnings) log.warn(warning);
+			const { project, projectDisplayName, apiUrl, authHeaders, canAutoCreate, branch, commitMessage, usedLegacyNameFallback } = await resolvePushConfig(config, options);
+			if (usedLegacyNameFallback) log.warn(LEGACY_PROJECT_NAME_FALLBACK_WARNING);
+			s.start("Collecting files");
+			const files = await collectFiles(root);
+			if (files.length === 0) throw new Error("No files found to deploy.");
+			s.stop(`Found ${chalk.cyan(String(files.length))} files`);
+			const headers = {
+				...authHeaders,
+				"Content-Type": "application/json"
+			};
+			const apiPath = (suffix) => new URL(`/projects/slug/${project}/deployments${suffix}`, apiUrl).toString();
+			const createDeploymentBody = JSON.stringify({
+				branch,
+				commitMessage
+			});
+			s.start("Creating deployment");
+			let deployment;
+			try {
+				deployment = await requestJson(apiPath(""), {
+					body: createDeploymentBody,
+					headers,
+					method: "POST"
+				}, "Failed to create deployment");
+			} catch (error) {
+				if (!(error instanceof Error ? error.message : "").includes("404")) throw error;
+				s.stop("Project not found");
+				if (!await autoCreateProject(project, projectDisplayName, apiUrl, headers, canAutoCreate)) {
+					log.info("Cancelled");
+					return;
+				}
+				s.start("Creating deployment");
+				deployment = await requestJson(apiPath(""), {
+					body: createDeploymentBody,
+					headers,
+					method: "POST"
+				}, "Failed to create deployment");
+			}
+			s.stop(`Deployment ${chalk.cyan(deployment.id)} created`);
+			await uploadFiles(files, root, apiPath, deployment.id, headers, s);
+			s.start("Finalizing deployment");
+			const finalized = await requestJson(apiPath(`/${deployment.id}/finalize`), {
+				body: JSON.stringify({ promote: true }),
+				headers,
+				method: "POST"
+			}, "Failed to finalize deployment");
+			s.stop("Deployment finalized");
+			log.success(`Published ${chalk.cyan(finalized.id)}`);
+			if (finalized.manifestUrl) log.info(`Manifest: ${finalized.manifestUrl}`);
+			if (typeof finalized.fileCount === "number") log.info(`Files: ${finalized.fileCount}`);
+			log.info("Done");
+		} catch (error) {
+			s.stop("Failed");
+			reportCommandError("Push failed", error);
 		}
-		const status = resolveTokenStatus(resolved);
-		const email = resolved.user?.email ?? await fetchUserEmail(process.env["BLODEMD_API_URL"] ?? "https://api.blode.md", resolved.token);
-		if (email) log.info(`Logged in as ${chalk.cyan(email)}`);
-		else log.info("Logged in (could not fetch user details).");
-		if (resolved.expiresAt && status.expired) log.warn("Session has expired. Run \"blodemd login\" to re-authenticate.");
-	} catch (error) {
-		reportCommandError("Whoami failed", error);
-	}
-});
-program.command("new").description("Create a new blode.md documentation site").argument("[directory]", "target directory").option("--slug <slug>", "project slug for docs.json", parseProjectSlug).option("--name <slug>", "deprecated alias for --slug", parseProjectSlug).option("--display-name <name>", "display name for docs.json").option("-t, --template <template>", `scaffold template (${SCAFFOLD_TEMPLATES.join(", ")})`, parseScaffoldTemplate, "minimal").option("-y, --yes", "accept defaults without prompting").action(async (directory, options) => {
-	await scaffoldDocsSite(directory, {
-		displayName: options.displayName,
-		name: options.name,
-		slug: options.slug ?? options.name,
-		template: options.template,
-		yes: options.yes
-	});
-});
-program.command("init", { hidden: true }).argument("[directory]", "target directory").option("--slug <slug>", "project slug for docs.json", parseProjectSlug).option("--name <slug>", "deprecated alias for --slug", parseProjectSlug).option("--display-name <name>", "display name for docs.json").option("-t, --template <template>", `scaffold template (${SCAFFOLD_TEMPLATES.join(", ")})`, parseScaffoldTemplate, "minimal").option("-y, --yes", "accept defaults without prompting").action(async (directory, options) => {
-	await scaffoldDocsSite(directory, {
-		deprecatedCommand: "blodemd init",
-		displayName: options.displayName,
-		name: options.name,
-		slug: options.slug ?? options.name,
-		template: options.template,
-		yes: options.yes
 	});
-});
-program.command("validate").description("Validate docs.json").argument("[dir]", "docs directory").action(async (dir) => {
-	intro(chalk.bold("blodemd validate"));
-	try {
-		const { warnings } = await loadValidatedSiteConfig(await resolveDocsRoot(dir));
-		for (const warning of warnings) log.warn(warning);
-		log.success(`${chalk.cyan(CONFIG_FILE)} is valid.`);
-		log.info("Done");
-	} catch (error) {
-		reportCommandError("Validation failed", error);
-	}
-});
-program.command("push").description("Deploy docs").argument("[dir]", "docs directory").option("--project <slug>", "project slug (env: BLODEMD_PROJECT)").option("--api-url <url>", "API URL (env: BLODEMD_API_URL)").option("--branch <name>", "git branch (env: BLODEMD_BRANCH)").option("--message <msg>", "deploy message (env: BLODEMD_COMMIT_MESSAGE)").action(async (dir, options) => {
-	intro(chalk.bold("blodemd push"));
-	const s = spinner();
-	try {
-		const root = await resolveDocsRoot(dir);
-		s.start("Validating configuration");
-		const { config, warnings } = await loadValidatedSiteConfig(root);
-		s.stop("Configuration valid");
-		for (const warning of warnings) log.warn(warning);
-		const { project, projectDisplayName, apiUrl, authToken, branch, commitMessage, usedLegacyNameFallback } = await resolvePushConfig(config, options);
-		if (usedLegacyNameFallback) log.warn(LEGACY_PROJECT_NAME_FALLBACK_WARNING);
-		s.start("Collecting files");
-		const files = await collectFiles(root);
-		if (files.length === 0) throw new Error("No files found to deploy.");
-		s.stop(`Found ${chalk.cyan(String(files.length))} files`);
-		const headers = {
-			Authorization: `Bearer ${authToken}`,
-			"Content-Type": "application/json"
-		};
-		const apiPath = (suffix) => new URL(`/projects/slug/${project}/deployments${suffix}`, apiUrl).toString();
-		const createDeploymentBody = JSON.stringify({
-			branch,
-			commitMessage
-		});
-		s.start("Creating deployment");
-		let deployment;
+};
+//#endregion
+//#region src/commands/validate.ts
+const CONFIG_FILE = "docs.json";
+const registerValidateCommand = (program) => {
+	program.command("validate").description("Validate docs.json").argument("[dir]", "docs directory").action(async (dir) => {
+		intro(chalk.bold("blodemd validate"));
 		try {
-			deployment = await requestJson(apiPath(""), {
-				body: createDeploymentBody,
-				headers,
-				method: "POST"
-			}, "Failed to create deployment");
+			const { warnings } = await loadValidatedSiteConfig(await resolveDocsRoot(dir));
+			for (const warning of warnings) log.warn(warning);
+			log.success(`${chalk.cyan(CONFIG_FILE)} is valid.`);
+			log.info("Done");
 		} catch (error) {
-			if (!(error instanceof Error ? error.message : "").includes("404")) throw error;
-			s.stop("Project not found");
-			if (!await autoCreateProject(project, projectDisplayName, apiUrl, headers)) {
-				log.info("Cancelled");
-				return;
-			}
-			s.start("Creating deployment");
-			deployment = await requestJson(apiPath(""), {
-				body: createDeploymentBody,
-				headers,
-				method: "POST"
-			}, "Failed to create deployment");
+			reportCommandError("Validation failed", error);
 		}
-		s.stop(`Deployment ${chalk.cyan(deployment.id)} created`);
-		await uploadFiles(files, root, apiPath, deployment.id, headers, s);
-		s.start("Finalizing deployment");
-		const finalized = await requestJson(apiPath(`/${deployment.id}/finalize`), {
-			body: JSON.stringify({ promote: true }),
-			headers,
-			method: "POST"
-		}, "Failed to finalize deployment");
-		s.stop("Deployment finalized");
-		log.success(`Published ${chalk.cyan(finalized.id)}`);
-		if (finalized.manifestUrl) log.info(`Manifest: ${finalized.manifestUrl}`);
-		if (typeof finalized.fileCount === "number") log.info(`Files: ${finalized.fileCount}`);
-		log.info("Done");
-	} catch (error) {
-		s.stop("Failed");
-		reportCommandError("Push failed", error);
-	}
+	});
+};
+//#endregion
+//#region src/runtime.ts
+const SUPPORTED_NODE_MAJOR = 24;
+const SUPPORTED_NODE_RANGE = "24.x";
+const parseVersion = (input) => {
+	const match = /^v?(\d+)\.(\d+)\.(\d+)/.exec(input.trim());
+	if (!match) return null;
+	const [, majorText = "", minorText = "", patchText = ""] = match;
+	if (!majorText || !minorText || !patchText) return null;
+	const major = Number.parseInt(majorText, 10);
+	const minor = Number.parseInt(minorText, 10);
+	const patch = Number.parseInt(patchText, 10);
+	if ([
+		major,
+		minor,
+		patch
+	].some((value) => Number.isNaN(value))) return null;
+	return [
+		major,
+		minor,
+		patch
+	];
+};
+const isSupportedNodeVersion = (version) => {
+	const parsed = parseVersion(version);
+	if (!parsed) return false;
+	const [major] = parsed;
+	return major === SUPPORTED_NODE_MAJOR;
+};
+const assertSupportedNodeVersion = (version = process.versions.node) => {
+	if (isSupportedNodeVersion(version)) return;
+	throw new CliError(`blodemd requires Node.js ${SUPPORTED_NODE_RANGE}. Current version: ${version}.`, EXIT_CODES.VALIDATION, "Install a supported Node.js version and try again.");
+};
+const readCliVersion = (moduleUrl) => {
+	const moduleDir = path.dirname(fileURLToPath(moduleUrl));
+	const raw = readFileSync(path.resolve(moduleDir, "..", "package.json"), "utf8");
+	return JSON.parse(raw).version ?? "0.0.0";
+};
+//#endregion
+//#region src/cli.ts
+const program = new Command();
+const cliVersion = readCliVersion(import.meta.url);
+program.name("blodemd").description("Blode.md CLI").version(cliVersion);
+program.hook("preAction", () => {
+	assertSupportedNodeVersion();
 });
-program.command("dev").description("Start the local docs dev server").option("-p, --port <port>", "Port number", "3030").option("-d, --dir <dir>", "Docs directory").option("--no-open", "Don't open browser").action(async (options) => await devCommand({
-	dir: options.dir,
-	openBrowser: options.open ?? true,
-	port: options.port
-}));
+registerAuthCommands(program);
+registerNewCommand(program);
+registerValidateCommand(program);
+registerPushCommand(program);
+registerDevCommand(program);
+registerAnalyticsCommand(program);
 program.parse();
 //#endregion
 export {};