deepspace 0.4.3 → 0.4.5

package/dist/cli.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 
 // src/cli/cli.ts
-import { defineCommand as defineCommand19, runMain } from "citty";
+import { defineCommand as defineCommand18, runMain } from "citty";
 import { execSync as execSync5 } from "child_process";
-import { readFileSync as readFileSync11, existsSync as existsSync12 } from "fs";
-import { dirname as dirname3, join as join14 } from "path";
-import { fileURLToPath } from "url";
+import { readFileSync as readFileSync12, existsSync as existsSync13 } from "fs";
+import { dirname as dirname4, join as join14 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/cli/commands/login.ts
 import { defineCommand } from "citty";
@@ -581,8 +581,8 @@ import { join as join5 } from "path";
 import { homedir as homedir3 } from "os";
 
 // src/cli/jwt.ts
-function decodeJwtPayload(token2) {
-  const payloadSegment = token2.split(".")[1];
+function decodeJwtPayload(token) {
+  const payloadSegment = token.split(".")[1];
   if (!payloadSegment) {
     throw new Error("JWT payload is missing");
   }
@@ -605,13 +605,13 @@ async function ensureToken() {
     throw new Error("Not logged in. Run `deepspace login` first.");
   }
   const sessionToken = readFileSync4(SESSION_PATH2, "utf-8").trim();
-  const token2 = await exchangeSession(AUTH_URL3, sessionToken);
-  if (!token2) {
+  const token = await exchangeSession(AUTH_URL3, sessionToken);
+  if (!token) {
     throw new Error("Session expired. Run `deepspace login` to re-authenticate.");
   }
   mkdirSync2(DIR2, { recursive: true, mode: 448 });
-  writeFileSync3(TOKEN_PATH2, token2, { mode: 384 });
-  return token2;
+  writeFileSync3(TOKEN_PATH2, token, { mode: 384 });
+  return token;
 }
 function isTokenValid(jwt) {
   try {
@@ -794,16 +794,16 @@ var dev_default = defineCommand3({
     }
     writeLaunchConfigIfMissing(appDir, detectAppName(appDir) ?? basename(appDir), port);
     ensureInstallReady(appDir);
-    let token2;
+    let token;
     try {
-      token2 = await ensureToken();
+      token = await ensureToken();
     } catch (err) {
       console.error(err.message);
       process.exit(1);
     }
     let payload;
     try {
-      payload = decodeJwtPayload(token2);
+      payload = decodeJwtPayload(token);
     } catch {
       console.error("Malformed session token. Run `npx deepspace login`.");
       process.exit(1);
@@ -812,7 +812,7 @@ var dev_default = defineCommand3({
     console.log(`Platform: ${env}`);
     if (wranglerEnv) console.log(`Wrangler env: ${wranglerEnv}`);
     console.log(`Port: ${port}`);
-    await writeDevVars(appDir, env, payload.sub, token2, wranglerEnv);
+    await writeDevVars(appDir, env, payload.sub, token, wranglerEnv);
     preflightWindowsWorkerd(appDir);
     console.log("Starting dev server...\n");
     const vite = spawn(
@@ -1074,17 +1074,17 @@ var test_default = defineCommand5({
       process.exit(1);
     }
     ensureInstallReady(appDir);
-    let token2;
+    let token;
     let ownerId;
     try {
-      token2 = await ensureToken();
-      const payload = decodeJwtPayload(token2);
+      token = await ensureToken();
+      const payload = decodeJwtPayload(token);
       ownerId = payload.sub;
     } catch (err) {
       console.error("`deepspace test` requires you to be logged in. Run `deepspace login` first.");
       process.exit(1);
     }
-    await writeDevVars(appDir, "dev", ownerId, token2);
+    await writeDevVars(appDir, "dev", ownerId, token);
     if (suite !== "unit") {
       preflightWindowsWorkerd(appDir);
       ensurePlaywright(appDir);
@@ -1224,8 +1224,8 @@ function saveAccounts(accounts) {
   writeFileSync5(ACCOUNTS_PATH, JSON.stringify(accounts, null, 2), { mode: 384 });
 }
 function sessionCookie() {
-  const token2 = readFileSync7(SESSION_PATH2, "utf-8").trim();
-  return `${SESSION_COOKIE2}=${encodeURIComponent(token2)}`;
+  const token = readFileSync7(SESSION_PATH2, "utf-8").trim();
+  return `${SESSION_COOKIE2}=${encodeURIComponent(token)}`;
 }
 async function fetchRemoteAccounts() {
   const res = await fetch(`${AUTH_URL4}/api/auth/test-accounts`, {
@@ -1788,11 +1788,11 @@ async function postWithRetry(url, makeInit, { attempts = 4, retryServerErrors =
   if (lastRes) return lastRes;
   throw lastErr instanceof Error ? lastErr : new Error(String(lastErr));
 }
-async function abortStagedUpload(appName, uploadId, totalGroups, token2) {
+async function abortStagedUpload(appName, uploadId, totalGroups, token) {
   try {
     await fetch(
       `${DEPLOY_URL}/api/deploy/${appName}/assets?uploadId=${uploadId}&totalGroups=${totalGroups}`,
-      { method: "DELETE", headers: { Authorization: `Bearer ${token2}` } }
+      { method: "DELETE", headers: { Authorization: `Bearer ${token}` } }
     );
   } catch {
   }
@@ -1839,9 +1839,9 @@ var deploy_default = defineCommand8({
     }
     const appName = nameRes.name;
     p4.log.info(envName ? `App: ${appName}  (env: ${envName})` : `App: ${appName}`);
-    let token2;
+    let token;
     try {
-      token2 = await ensureToken();
+      token = await ensureToken();
     } catch (err) {
       p4.cancel(err.message);
       process.exit(1);
@@ -1979,7 +1979,7 @@ var deploy_default = defineCommand8({
             () => ({
               method: "POST",
               headers: {
-                Authorization: `Bearer ${token2}`,
+                Authorization: `Bearer ${token}`,
                 "Content-Type": "application/json"
               },
               body: groupJson
@@ -1987,7 +1987,7 @@ var deploy_default = defineCommand8({
           );
           if (!groupRes.ok) {
             const errBody = await groupRes.json().catch(() => ({}));
-            await abortStagedUpload(appName, uploadId, totalGroups, token2);
+            await abortStagedUpload(appName, uploadId, totalGroups, token);
             s.stop("Deploy failed");
             p4.cancel(
               `Asset upload failed on group ${i + 1}/${totalGroups}: ${errBody.error ?? `HTTP ${groupRes.status}`}`
@@ -1996,7 +1996,7 @@ var deploy_default = defineCommand8({
           }
         }
       } catch (err) {
-        await abortStagedUpload(appName, uploadId, totalGroups, token2);
+        await abortStagedUpload(appName, uploadId, totalGroups, token);
         s.stop("Deploy failed");
         p4.cancel(`Asset upload failed (network): ${err?.message ?? err}`);
         process.exit(1);
@@ -2032,7 +2032,7 @@ var deploy_default = defineCommand8({
         `${DEPLOY_URL}/api/deploy/${appName}`,
         () => ({
           method: "POST",
-          headers: { Authorization: `Bearer ${token2}` },
+          headers: { Authorization: `Bearer ${token}` },
           body: makeForm()
         }),
         // Commit runs a real deploy — don't retry its 5xx (could double-deploy);
@@ -2041,14 +2041,14 @@ var deploy_default = defineCommand8({
         { retryServerErrors: false }
       );
     } catch (err) {
-      if (uploadId) await abortStagedUpload(appName, uploadId, totalGroups, token2);
+      if (uploadId) await abortStagedUpload(appName, uploadId, totalGroups, token);
       s.stop("Deploy failed");
       p4.cancel(`Deploy request failed: ${err?.message ?? err}`);
       process.exit(1);
     }
     const body = await res.json().catch(() => ({}));
     if (!res.ok || !body.success) {
-      if (uploadId) await abortStagedUpload(appName, uploadId, totalGroups, token2);
+      if (uploadId) await abortStagedUpload(appName, uploadId, totalGroups, token);
       s.stop("Deploy failed");
       p4.cancel(formatDeployWorkerError(res.status, body.error));
       process.exit(1);
@@ -2060,20 +2060,20 @@ var deploy_default = defineCommand8({
         s.stop("Deployed (edge propagation still in progress after 90s)");
         p4.log.warn("First requests may briefly hit the assets transitional page; retry in a minute.");
         p4.log.success(`Live at: ${body.url}`);
-        await syncSubscriptionPlans(appDir, appName, token2);
-        await syncOneTimeProducts(appDir, appName, token2);
+        await syncSubscriptionPlans(appDir, appName, token);
+        await syncOneTimeProducts(appDir, appName, token);
         p4.outro("Done");
         return;
       }
     }
     s.stop("Deployed!");
     p4.log.success(`Live at: ${body.url}`);
-    await syncSubscriptionPlans(appDir, appName, token2);
-    await syncOneTimeProducts(appDir, appName, token2);
+    await syncSubscriptionPlans(appDir, appName, token);
+    await syncOneTimeProducts(appDir, appName, token);
     p4.outro("Done");
   }
 });
-async function syncSubscriptionPlans(appDir, appName, token2) {
+async function syncSubscriptionPlans(appDir, appName, token) {
   const subsPath = join9(appDir, "src", "subscriptions.ts");
   if (!existsSync9(subsPath)) return;
   const s = createSpinner();
@@ -2112,7 +2112,7 @@ async function syncSubscriptionPlans(appDir, appName, token2) {
     res = await fetch(`${API_URL}/api/subscriptions/sync`, {
       method: "POST",
       headers: {
-        Authorization: `Bearer ${token2}`,
+        Authorization: `Bearer ${token}`,
         "Content-Type": "application/json"
       },
       body: JSON.stringify({ appName, plans })
@@ -2132,7 +2132,7 @@ async function syncSubscriptionPlans(appDir, appName, token2) {
     }
     const changes = (body.planChanges ?? []).filter((c) => c.affectedSubscribers > 0);
     if (changes.length > 0) {
-      await promptAndCancelChangedPlans(appName, token2, changes);
+      await promptAndCancelChangedPlans(appName, token, changes);
     }
     return;
   }
@@ -2153,7 +2153,7 @@ function summaryLine(c) {
   const diffs = (c.intervals ?? []).map((i) => `${i.interval}: ${formatCents(i.oldCents)} \u2192 ${formatCents(i.newCents)}`).join("; ");
   return `  \u2022 ${c.slug} \u2014 repriced (${diffs}; ${suffix} grandfathered on old price)`;
 }
-async function promptAndCancelChangedPlans(appName, token2, changes) {
+async function promptAndCancelChangedPlans(appName, token, changes) {
   const summary = changes.map(summaryLine).join("\n");
   p4.log.warn(
     `Plan change${changes.length === 1 ? "" : "s"} from this deploy left subscribers stranded:
@@ -2184,7 +2184,7 @@ current billing period? (Skip to leave them grandfathered.)`
         const res = await fetch(`${API_URL}/api/subscriptions/admin-cancel`, {
           method: "POST",
           headers: {
-            Authorization: `Bearer ${token2}`,
+            Authorization: `Bearer ${token}`,
             "Content-Type": "application/json"
           },
           body: JSON.stringify({
@@ -2222,7 +2222,7 @@ current billing period? (Skip to leave them grandfathered.)`
     }
   }
 }
-async function syncOneTimeProducts(appDir, appName, token2) {
+async function syncOneTimeProducts(appDir, appName, token) {
   const productsPath = join9(appDir, "src", "products.ts");
   if (!existsSync9(productsPath)) return;
   const s = createSpinner();
@@ -2261,7 +2261,7 @@ async function syncOneTimeProducts(appDir, appName, token2) {
     res = await fetch(`${API_URL}/api/charges/products/sync`, {
       method: "POST",
       headers: {
-        Authorization: `Bearer ${token2}`,
+        Authorization: `Bearer ${token}`,
         "Content-Type": "application/json"
       },
       body: JSON.stringify({ appName, products })
@@ -2360,9 +2360,9 @@ var undeploy_default = defineCommand9({
       p5.cancel("Provide an app name or run from a DeepSpace app directory.");
       process.exit(1);
     }
-    let token2;
+    let token;
     try {
-      token2 = await ensureToken();
+      token = await ensureToken();
     } catch (err) {
       p5.cancel(err.message);
       process.exit(1);
@@ -2372,7 +2372,7 @@ var undeploy_default = defineCommand9({
     s.start("Removing...");
     const res = await fetch(`${DEPLOY_URL2}/api/deploy/${appName}`, {
       method: "DELETE",
-      headers: { Authorization: `Bearer ${token2}` }
+      headers: { Authorization: `Bearer ${token}` }
     });
     const body = await res.json().catch(() => ({}));
     if (!res.ok || !body.success) {
@@ -2591,25 +2591,25 @@ var skills_default = defineCommand12({
 import { defineCommand as defineCommand13 } from "citty";
 import { execSync as execSync4 } from "child_process";
 var API_URL2 = process.env.DEEPSPACE_API_URL ?? ENVS.prod.api;
-async function api(token2, path, init) {
+async function api(token, path, init) {
   const res = await fetch(`${API_URL2}${path}`, {
     ...init,
     headers: {
-      Authorization: `Bearer ${token2}`,
+      Authorization: `Bearer ${token}`,
       "Content-Type": "application/json",
       ...init?.headers ?? {}
     }
   });
-  const text = await res.text();
+  const text2 = await res.text();
   if (!res.ok) {
-    let msg = text;
+    let msg = text2;
     try {
-      msg = JSON.parse(text).error ?? text;
+      msg = JSON.parse(text2).error ?? text2;
     } catch {
     }
     throw new Error(`API ${path} (${res.status}): ${msg}`);
   }
-  return JSON.parse(text);
+  return JSON.parse(text2);
 }
 function scrubInternal(value) {
   if (Array.isArray(value)) return value.map(scrubInternal);
@@ -2652,10 +2652,10 @@ var search = defineCommand13({
     json: { type: "boolean", description: "Emit JSON instead of a table" }
   },
   async run({ args }) {
-    const token2 = await ensureToken();
+    const token = await ensureToken();
     const limit = parseInt(args.limit ?? "10", 10) || 10;
     const result = await api(
-      token2,
+      token,
       `/api/domains/search?q=${encodeURIComponent(args.query)}&limit=${limit}`
     );
     if (args.json) {
@@ -2685,9 +2685,9 @@ var buy = defineCommand13({
     json: { type: "boolean", description: "Emit JSON to stdout", default: false }
   },
   async run({ args }) {
-    const token2 = await ensureToken();
+    const token = await ensureToken();
     const appName = requireAppName(args.app);
-    const priceCheck = await api(token2, "/api/domains/check", {
+    const priceCheck = await api(token, "/api/domains/check", {
       method: "POST",
       body: JSON.stringify({ domains: [args.domain] })
     });
@@ -2708,7 +2708,7 @@ var buy = defineCommand13({
       }
     }
     const checkout = await api(
-      token2,
+      token,
       "/api/domains/checkout",
       {
         method: "POST",
@@ -2735,7 +2735,7 @@ var buy = defineCommand13({
       await new Promise((r) => setTimeout(r, 5e3));
       try {
         const detail = await api(
-          token2,
+          token,
           `/api/domains/${checkout.purchaseId}`
         );
         if (detail.domain.status !== lastStatus) {
@@ -2769,8 +2769,8 @@ var list2 = defineCommand13({
     json: { type: "boolean", description: "Emit JSON" }
   },
   async run({ args }) {
-    const token2 = await ensureToken();
-    const result = await api(token2, "/api/domains");
+    const token = await ensureToken();
+    const result = await api(token, "/api/domains");
     if (args.json) {
       process.stdout.write(JSON.stringify(scrubInternal(result), null, 2) + "\n");
       return;
@@ -2794,8 +2794,8 @@ var status = defineCommand13({
     json: { type: "boolean" }
   },
   async run({ args }) {
-    const token2 = await ensureToken();
-    const all = await api(token2, "/api/domains");
+    const token = await ensureToken();
+    const all = await api(token, "/api/domains");
     const found = all.domains.find((d) => d.domain === args.domain);
     if (!found) {
       console.error(`No domain ${args.domain} in your account`);
@@ -2823,16 +2823,16 @@ var attach = defineCommand13({
     json: { type: "boolean" }
   },
   async run({ args }) {
-    const token2 = await ensureToken();
+    const token = await ensureToken();
     const targetApp = requireAppName(args.app);
-    const all = await api(token2, "/api/domains");
+    const all = await api(token, "/api/domains");
     const found = all.domains.find((d) => d.domain === args.domain);
     if (!found) {
       console.error(`No domain ${args.domain} in your account`);
       process.exit(1);
     }
     const result = await api(
-      token2,
+      token,
       `/api/domains/${found.id}/reattach`,
       {
         method: "POST",
@@ -2856,8 +2856,8 @@ var detach = defineCommand13({
     yes: { type: "boolean", description: "Skip the confirmation prompt" }
   },
   async run({ args }) {
-    const token2 = await ensureToken();
-    const all = await api(token2, "/api/domains");
+    const token = await ensureToken();
+    const all = await api(token, "/api/domains");
     const found = all.domains.find((d) => d.domain === args.domain);
     if (!found) {
       console.error(`No domain ${args.domain} in your account`);
@@ -2872,7 +2872,7 @@ var detach = defineCommand13({
         return;
       }
     }
-    await api(token2, `/api/domains/${found.id}`, { method: "DELETE" });
+    await api(token, `/api/domains/${found.id}`, { method: "DELETE" });
     console.log(`\u2713 ${args.domain} detached. Use \`deepspace domain attach\` to re-route, or \`renew --auto off\` to stop auto-renewal.`);
   }
 });
@@ -2887,15 +2887,15 @@ var renew = defineCommand13({
       console.error('--auto must be "on" or "off"');
       process.exit(1);
     }
-    const token2 = await ensureToken();
-    const all = await api(token2, "/api/domains");
+    const token = await ensureToken();
+    const all = await api(token, "/api/domains");
     const found = all.domains.find((d) => d.domain === args.domain);
     if (!found) {
       console.error(`No domain ${args.domain} in your account`);
       process.exit(1);
     }
     const enabled = args.auto === "on";
-    await api(token2, `/api/domains/${found.id}/auto-renew`, {
+    await api(token, `/api/domains/${found.id}/auto-renew`, {
       method: "POST",
       body: JSON.stringify({ autoRenew: enabled })
     });
@@ -3277,257 +3277,14 @@ var invoke_default = defineCommand15({
   }
 });
 
-// src/cli/commands/managed-repos.ts
-import { defineCommand as defineCommand16 } from "citty";
-var API_URL4 = process.env.DEEPSPACE_API_URL ?? ENVS.prod.api;
-var SIMPLE_APP_ID = /^[a-z0-9][a-z0-9_.:-]{0,119}$/i;
-var SIMPLE_APP_NAME = /^[a-z0-9][a-z0-9_-]{0,119}$/i;
-async function api2(token2, path, init) {
-  const res = await fetch(`${API_URL4}${path}`, {
-    ...init,
-    headers: {
-      Authorization: `Bearer ${token2}`,
-      "Content-Type": "application/json",
-      ...init?.headers ?? {}
-    }
-  });
-  const text = await res.text();
-  if (!res.ok) {
-    let msg = text;
-    try {
-      msg = JSON.parse(text).error ?? text;
-    } catch {
-    }
-    throw new Error(`API ${path} (${res.status}): ${msg}`);
-  }
-  return JSON.parse(text);
-}
-function defaultAppId(appName) {
-  return `cli-${slugId(appName)}`;
-}
-function slugId(raw) {
-  return raw.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "") || "app";
-}
-function assertSimple(value, pattern, label) {
-  if (!pattern.test(value)) {
-    throw new Error(`${label} must start with a letter or number and contain only simple identifier characters.`);
-  }
-}
-function printQuota(quota) {
-  console.log(`Repo quota: ${quota.activeCount} / ${quota.limit} active (${quota.remaining} remaining)`);
-}
-function printRepo(repo) {
-  console.log(`${repo.fullName}`);
-  console.log(`  ID:       ${repo.id}`);
-  console.log(`  App:      ${repo.appName}`);
-  console.log(`  App ID:   ${repo.appId}`);
-  console.log(`  URL:      ${repo.htmlUrl}`);
-  console.log(`  Clone:    ${repo.cloneUrl}`);
-}
-async function confirm4(message) {
-  if (!process.stdin.isTTY) {
-    throw new Error(`${message} \u2014 pass --yes to confirm non-interactively`);
-  }
-  process.stdout.write(`${message} [y/N] `);
-  return new Promise((resolve9) => {
-    process.stdin.setEncoding("utf-8");
-    process.stdin.once("data", (data) => {
-      const answer = data.toString().trim().toLowerCase();
-      resolve9(answer === "y" || answer === "yes");
-    });
-  });
-}
-var list4 = defineCommand16({
-  meta: {
-    name: "list",
-    description: "List your DeepSpace-managed repos and quota"
-  },
-  args: {
-    json: {
-      type: "boolean",
-      description: "Emit JSON instead of human output",
-      default: false
-    }
-  },
-  async run({ args }) {
-    const token2 = await ensureToken();
-    const result = await api2(token2, "/api/github/repos");
-    if (args.json) {
-      process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-      return;
-    }
-    printQuota(result.quota);
-    if (result.repos.length === 0) {
-      console.log("No DeepSpace-managed repos. Create one with `deepspace managed-repos create <app-name>`.");
-      return;
-    }
-    console.log("");
-    for (const repo of result.repos) {
-      printRepo(repo);
-    }
-  }
-});
-var create2 = defineCommand16({
-  meta: {
-    name: "create",
-    description: "Create a private DeepSpace-managed GitHub repo"
-  },
-  args: {
-    appName: {
-      type: "positional",
-      description: "Working app name for this repo",
-      required: true
-    },
-    appId: {
-      type: "string",
-      description: "Stable DeepSpace repo app id (defaults to cli-<app-name>)",
-      required: false
-    },
-    nameHint: {
-      type: "string",
-      description: "Repo-name hint (defaults to app name)",
-      required: false
-    },
-    json: {
-      type: "boolean",
-      description: "Emit JSON instead of human output",
-      default: false
-    }
-  },
-  async run({ args }) {
-    const appName = String(args.appName);
-    const appId = args.appId ? String(args.appId) : defaultAppId(appName);
-    const nameHint = args.nameHint ? String(args.nameHint) : void 0;
-    try {
-      assertSimple(appName, SIMPLE_APP_NAME, "appName");
-      assertSimple(appId, SIMPLE_APP_ID, "appId");
-      if (nameHint) assertSimple(nameHint, SIMPLE_APP_NAME, "nameHint");
-    } catch (err) {
-      console.error(err.message);
-      process.exit(1);
-    }
-    const token2 = await ensureToken();
-    const result = await api2(token2, "/api/github/repos", {
-      method: "POST",
-      body: JSON.stringify({ appName, appId, ...nameHint ? { nameHint } : {} })
-    });
-    if (args.json) {
-      process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-      return;
-    }
-    console.log(result.alreadyExists ? "Existing DeepSpace-managed repo:" : "Created DeepSpace-managed repo:");
-    printRepo(result.repo);
-  }
-});
-var token = defineCommand16({
-  meta: {
-    name: "token",
-    description: "Mint a short-lived GitHub token for a DeepSpace-managed repo"
-  },
-  args: {
-    repoId: {
-      type: "positional",
-      description: "Repo id from `deepspace managed-repos list`",
-      required: true
-    },
-    json: {
-      type: "boolean",
-      description: "Emit JSON instead of human output",
-      default: false
-    }
-  },
-  async run({ args }) {
-    const jwt = await ensureToken();
-    const result = await api2(
-      jwt,
-      `/api/github/repos/${encodeURIComponent(String(args.repoId))}/agent-token`,
-      { method: "POST" }
-    );
-    if (args.json) {
-      process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-      return;
-    }
-    console.log(`Repo:      ${result.repo.fullName}`);
-    console.log(`Expires:   ${result.token.expiresAt}`);
-    console.log(`Token:     ${result.token.token}`);
-    console.log("");
-    console.log(`Clone:     git clone https://x-access-token:${encodeURIComponent(result.token.token)}@github.com/${result.repo.fullName}.git`);
-  }
-});
-var remove = defineCommand16({
-  meta: {
-    name: "delete",
-    description: "Delete a DeepSpace-managed GitHub repo"
-  },
-  args: {
-    repoId: {
-      type: "positional",
-      description: "Repo id from `deepspace managed-repos list`",
-      required: true
-    },
-    yes: {
-      type: "boolean",
-      description: "Skip the confirmation prompt",
-      default: false
-    },
-    json: {
-      type: "boolean",
-      description: "Emit JSON instead of human output",
-      default: false
-    }
-  },
-  async run({ args }) {
-    if (!args.yes) {
-      try {
-        const ok = await confirm4(
-          "Delete this DeepSpace-managed GitHub repo? This removes the GitHub repository and counts against your daily delete quota."
-        );
-        if (!ok) {
-          console.log("Cancelled.");
-          return;
-        }
-      } catch (err) {
-        console.error(err.message);
-        process.exit(1);
-      }
-    }
-    const jwt = await ensureToken();
-    const result = await api2(
-      jwt,
-      `/api/github/repos/${encodeURIComponent(String(args.repoId))}`,
-      { method: "DELETE" }
-    );
-    if (args.json) {
-      process.stdout.write(JSON.stringify(result, null, 2) + "\n");
-      return;
-    }
-    console.log(`Deleted ${result.repo.fullName}`);
-    console.log(
-      `Delete quota: ${result.deletionQuota.deletedCount} / ${result.deletionQuota.limit} used today (${result.deletionQuota.remaining} remaining)`
-    );
-  }
-});
-var managed_repos_default = defineCommand16({
-  meta: {
-    name: "managed-repos",
-    description: "Create and manage DeepSpace-owned GitHub repos"
-  },
-  subCommands: {
-    list: list4,
-    create: create2,
-    token,
-    delete: remove
-  }
-});
-
 // src/cli/commands/library.ts
-import { defineCommand as defineCommand17 } from "citty";
+import { defineCommand as defineCommand16 } from "citty";
 import { existsSync as existsSync11, readFileSync as readFileSync10 } from "fs";
 import { join as join12, resolve as resolve8 } from "path";
 import { parse as parseToml3 } from "smol-toml";
 import * as p6 from "@clack/prompts";
 var DEFAULT_LIBRARY_APP = "deepdotspace-site";
-var publish = defineCommand17({
+var publish = defineCommand16({
   meta: {
     name: "publish",
     description: "Publish the current app to the DeepSpace library"
@@ -3586,7 +3343,7 @@ var publish = defineCommand17({
   },
   async run({ args }) {
     const json = !!args.json;
-    const intro5 = (s) => {
+    const intro6 = (s) => {
       if (!json) p6.intro(s);
     };
     const info2 = (s) => {
@@ -3597,7 +3354,7 @@ var publish = defineCommand17({
       else p6.cancel(msg);
       process.exit(1);
     };
-    intro5("Publishing to the DeepSpace library");
+    intro6("Publishing to the DeepSpace library");
     let appName = typeof args.app === "string" && args.app.trim() ? args.app.trim() : void 0;
     if (!appName) {
       const appDir = resolve8(typeof args.dir === "string" && args.dir ? args.dir : ".");
@@ -3618,9 +3375,9 @@ var publish = defineCommand17({
     const tags = typeof args.tags === "string" && args.tags ? args.tags.split(",").map((t) => t.trim()).filter(Boolean) : void 0;
     const libraryApp = typeof args["library-app"] === "string" && args["library-app"] ? args["library-app"] : DEFAULT_LIBRARY_APP;
     const libraryHost = process.env.DEEPSPACE_LIBRARY_HOST ?? `https://${libraryApp}.app.space`;
-    let token2;
+    let token;
     try {
-      token2 = await ensureToken();
+      token = await ensureToken();
     } catch (err) {
       return die(err instanceof Error ? err.message : String(err));
     }
@@ -3640,7 +3397,7 @@ var publish = defineCommand17({
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          Authorization: `Bearer ${token2}`
+          Authorization: `Bearer ${token}`
         },
         body: JSON.stringify(payload)
       });
@@ -3666,7 +3423,7 @@ var publish = defineCommand17({
     p6.outro("Done");
   }
 });
-var unpublish = defineCommand17({
+var unpublish = defineCommand16({
   meta: {
     name: "unpublish",
     description: "Remove a library entry (owner or admin only)"
@@ -3696,9 +3453,9 @@ var unpublish = defineCommand17({
       process.exit(1);
     };
     if (!json) p6.intro("Unpublishing library entry");
-    let token2;
+    let token;
     try {
-      token2 = await ensureToken();
+      token = await ensureToken();
     } catch (err) {
       return die(err instanceof Error ? err.message : String(err));
     }
@@ -3706,7 +3463,7 @@ var unpublish = defineCommand17({
     const libraryHost = process.env.DEEPSPACE_LIBRARY_HOST ?? `https://${libraryApp}.app.space`;
     const res = await fetch(`${libraryHost}/api/actions/library.unpublish`, {
       method: "POST",
-      headers: { "Content-Type": "application/json", Authorization: `Bearer ${token2}` },
+      headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}` },
       body: JSON.stringify({ templateHandle: String(args.handle) })
     });
     const body = await res.text();
@@ -3725,7 +3482,7 @@ var unpublish = defineCommand17({
     p6.outro("Done");
   }
 });
-var library_default = defineCommand17({
+var library_default = defineCommand16({
   meta: {
     name: "library",
     description: "Manage your DeepSpace library entries"
@@ -3736,85 +3493,276 @@ var library_default = defineCommand17({
   }
 });
 
-// src/cli/commands/admin.ts
-import { defineCommand as defineCommand18 } from "citty";
-import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync6 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join13 } from "path";
-var AUTH_URL5 = process.env.DEEPSPACE_AUTH_URL ?? ENVS.prod.auth;
-var impersonate = defineCommand18({
+// src/cli/commands/feedback.ts
+import { defineCommand as defineCommand17 } from "citty";
+import * as p7 from "@clack/prompts";
+import { existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
+import { dirname as dirname3, join as join13 } from "path";
+import { fileURLToPath } from "url";
+import { release } from "os";
+var API_URL4 = process.env.DEEPSPACE_API_URL ?? ENVS.prod.api;
+var TYPES = ["bug", "feature", "other"];
+var TYPE_LABELS = {
+  bug: "Bug report",
+  feature: "Feature request",
+  other: "Other feedback"
+};
+var MAX_TITLE_LEN = 200;
+var MAX_BODY_LEN = 1e4;
+var MAX_CONTEXT_LEN = 200;
+async function api2(token, path, init) {
+  const res = await fetch(`${API_URL4}${path}`, {
+    ...init,
+    headers: {
+      Authorization: `Bearer ${token}`,
+      "Content-Type": "application/json",
+      ...init?.headers ?? {}
+    }
+  });
+  const text2 = await res.text();
+  if (!res.ok) {
+    let msg = text2;
+    try {
+      msg = JSON.parse(text2).error ?? text2;
+    } catch {
+    }
+    throw new Error(`API ${path} (${res.status}): ${msg}`);
+  }
+  return JSON.parse(text2);
+}
+function normalizeType(raw) {
+  const value = (raw ?? "bug").toLowerCase();
+  if (TYPES.includes(value)) return value;
+  throw new Error(`Invalid --type "${raw}". Use one of: ${TYPES.join(", ")}.`);
+}
+function readCliVersion() {
+  try {
+    const here = dirname3(fileURLToPath(import.meta.url));
+    const candidates = [
+      join13(here, "..", "package.json"),
+      join13(here, "..", "..", "..", "package.json")
+    ];
+    for (const path of candidates) {
+      if (!existsSync12(path)) continue;
+      const pkg2 = JSON.parse(readFileSync11(path, "utf-8"));
+      if (pkg2.name === "deepspace" && pkg2.version) return pkg2.version;
+    }
+  } catch {
+  }
+  return "unknown";
+}
+function detectAppName2() {
+  try {
+    const cwd = process.cwd();
+    if (!hasWranglerConfig(cwd)) return void 0;
+    const config = readWranglerConfig(cwd);
+    return typeof config.name === "string" ? config.name : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function clampContext(value) {
+  return value.length > MAX_CONTEXT_LEN ? value.slice(0, MAX_CONTEXT_LEN) : value;
+}
+function collectContext() {
+  const appName = detectAppName2();
+  return {
+    cliVersion: clampContext(readCliVersion()),
+    nodeVersion: clampContext(process.version),
+    platform: clampContext(`${process.platform} ${release()}`),
+    ...appName ? { appName: clampContext(appName) } : {}
+  };
+}
+function buildFeedbackPayload(input) {
+  const title = input.title.trim();
+  const body = input.body.trim();
+  if (!title) throw new Error("A title is required.");
+  if (!body) throw new Error("A message/description is required.");
+  if (title.length > MAX_TITLE_LEN) {
+    throw new Error(
+      `Title must be ${MAX_TITLE_LEN} characters or fewer (got ${title.length}).`
+    );
+  }
+  if (body.length > MAX_BODY_LEN) {
+    throw new Error(
+      `Description must be ${MAX_BODY_LEN} characters or fewer (got ${body.length}).`
+    );
+  }
+  return {
+    type: normalizeType(input.type),
+    title,
+    body,
+    ...input.context
+  };
+}
+var feedback_default = defineCommand17({
   meta: {
-    name: "impersonate",
-    description: "Store a short-lived CLI token for another user"
+    name: "feedback",
+    description: "Submit a bug report, feature request, or feedback to DeepSpace"
   },
   args: {
-    email: {
-      type: "string",
-      description: "Target user email",
+    title: {
+      type: "positional",
+      description: "Short summary (prompted if omitted in a terminal)",
       required: false
     },
-    userId: {
+    type: {
       type: "string",
-      description: "Target user id",
+      alias: "t",
+      description: `Report type: ${TYPES.join(" | ")} (default: bug)`,
       required: false
     },
-    secret: {
+    message: {
       type: "string",
-      description: "Admin secret; defaults to DEEPSPACE_ADMIN_SECRET",
+      alias: "m",
+      description: "Details / description (prompted if omitted in a terminal)",
       required: false
+    },
+    yes: {
+      type: "boolean",
+      description: "Skip the confirmation prompt",
+      default: false
+    },
+    json: {
+      type: "boolean",
+      description: "Emit JSON instead of human output",
+      default: false
     }
   },
   async run({ args }) {
-    const secret = args.secret ?? process.env.DEEPSPACE_ADMIN_SECRET;
-    if (!secret) {
-      console.error("Missing admin secret. Set DEEPSPACE_ADMIN_SECRET or pass --secret.");
+    const interactive = process.stdin.isTTY && !args.json;
+    const fail = (message) => {
+      if (args.json) {
+        process.stdout.write(JSON.stringify({ ok: false, error: message }) + "\n");
+      } else {
+        console.error(message);
+      }
       process.exit(1);
+    };
+    let type;
+    try {
+      type = normalizeType(args.type ? String(args.type) : void 0);
+    } catch (err) {
+      return fail(err.message);
     }
-    if (!args.email && !args.userId) {
-      console.error("Pass --email or --userId.");
-      process.exit(1);
+    let title = args.title ? String(args.title) : "";
+    let body = args.message ? String(args.message) : "";
+    if ((!title || !body) && !interactive) {
+      return fail(
+        'Provide a title and --message to submit non-interactively, e.g. `deepspace feedback "Title" --message "Details"`.'
+      );
     }
-    const res = await fetch(`${AUTH_URL5}/api/auth/admin/impersonate`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${secret}`
-      },
-      body: JSON.stringify({
-        email: args.email,
-        userId: args.userId
-      })
-    });
-    const data = await res.json().catch(() => ({}));
-    if (!res.ok || !data.token || !data.user) {
-      console.error(`Failed: ${data.error ?? `HTTP ${res.status}`}`);
-      process.exit(1);
+    if (interactive && (!args.type || !title || !body)) {
+      p7.intro("DeepSpace Feedback");
+      if (!args.type) {
+        const picked = await p7.select({
+          message: "What kind of feedback is this?",
+          options: TYPES.map((t) => ({ value: t, label: TYPE_LABELS[t] })),
+          initialValue: type
+        });
+        if (p7.isCancel(picked)) {
+          p7.cancel("Cancelled.");
+          process.exit(0);
+        }
+        type = picked;
+      }
+      if (!title) {
+        const t = await p7.text({
+          message: "Title",
+          placeholder: "Short summary of the issue",
+          validate: (v) => {
+            if (!v?.trim()) return "Title is required";
+            if (v.length > MAX_TITLE_LEN)
+              return `Title must be ${MAX_TITLE_LEN} characters or fewer`;
+            return void 0;
+          }
+        });
+        if (p7.isCancel(t)) {
+          p7.cancel("Cancelled.");
+          process.exit(0);
+        }
+        title = String(t);
+      }
+      if (!body) {
+        const m = await p7.text({
+          message: "Details",
+          placeholder: "What happened? Steps to reproduce, what you expected\u2026",
+          validate: (v) => {
+            if (!v?.trim()) return "A description is required";
+            if (v.length > MAX_BODY_LEN)
+              return `Description must be ${MAX_BODY_LEN} characters or fewer`;
+            return void 0;
+          }
+        });
+        if (p7.isCancel(m)) {
+          p7.cancel("Cancelled.");
+          process.exit(0);
+        }
+        body = String(m);
+      }
     }
-    const dir = join13(homedir6(), ".deepspace");
-    mkdirSync6(dir, { recursive: true });
-    writeFileSync6(TOKEN_PATH2, data.token, { mode: 384 });
-    console.log(`Impersonating ${data.user.name ?? data.user.email ?? data.user.id}`);
-    console.log(`Email:  ${data.user.email ?? "(none)"}`);
-    console.log(`UserID: ${data.user.id}`);
-  }
-});
-var admin_default = defineCommand18({
-  meta: {
-    name: "admin",
-    description: "Maintainer-only admin commands"
-  },
-  subCommands: {
-    impersonate
+    let payload;
+    try {
+      payload = buildFeedbackPayload({
+        type,
+        title,
+        body,
+        context: collectContext()
+      });
+    } catch (err) {
+      return fail(err.message);
+    }
+    if (interactive && !args.yes) {
+      p7.note(
+        `${TYPE_LABELS[payload.type]}
+${payload.title}
+
+${payload.body}
+
+Context: deepspace ${payload.cliVersion} \xB7 ${payload.nodeVersion} \xB7 ${payload.platform}` + (payload.appName ? ` \xB7 app ${payload.appName}` : ""),
+        "Review"
+      );
+      const ok = await p7.confirm({ message: "Send this to the DeepSpace team?" });
+      if (p7.isCancel(ok) || !ok) {
+        p7.cancel("Not sent.");
+        process.exit(0);
+      }
+    }
+    let token;
+    try {
+      token = await ensureToken();
+    } catch (err) {
+      return fail(err.message ?? "Not signed in. Run `deepspace login`.");
+    }
+    let result;
+    try {
+      result = await api2(token, "/api/feedback", {
+        method: "POST",
+        body: JSON.stringify(payload)
+      });
+    } catch (err) {
+      return fail(err.message);
+    }
+    if (args.json) {
+      process.stdout.write(JSON.stringify({ ok: true, report: result.report }) + "\n");
+      return;
+    }
+    if (interactive) {
+      p7.outro(`Thanks! Submitted as ${result.report.id}.`);
+    } else {
+      console.log(`Submitted feedback ${result.report.id} (${result.report.type}).`);
+    }
+    console.log(`Track triage status at ${DASHBOARD_URL}.`);
   }
 });
 
 // src/cli/cli.ts
-var __dirname = dirname3(fileURLToPath(import.meta.url));
-var pkg = JSON.parse(readFileSync11(join14(__dirname, "..", "package.json"), "utf-8"));
-if (process.platform === "linux" && !process.env.SSL_CERT_FILE && existsSync12("/etc/ssl/certs/ca-certificates.crt")) {
+var __dirname = dirname4(fileURLToPath2(import.meta.url));
+var pkg = JSON.parse(readFileSync12(join14(__dirname, "..", "package.json"), "utf-8"));
+if (process.platform === "linux" && !process.env.SSL_CERT_FILE && existsSync13("/etc/ssl/certs/ca-certificates.crt")) {
   process.env.SSL_CERT_FILE = "/etc/ssl/certs/ca-certificates.crt";
 }
-var create3 = defineCommand19({
+var create2 = defineCommand18({
   meta: {
     name: "create",
     description: "Create a new DeepSpace app"
@@ -3833,14 +3781,14 @@ var create3 = defineCommand19({
     execSync5(`npm create deepspace@latest${name}`, { stdio: "inherit" });
   }
 });
-var main = defineCommand19({
+var main = defineCommand18({
   meta: {
     name: "deepspace",
     version: pkg.version,
     description: "DeepSpace SDK CLI"
   },
   subCommands: {
-    create: create3,
+    create: create2,
     login: login_default,
     logout: logout_default,
     whoami: whoami_default,
@@ -3852,13 +3800,12 @@ var main = defineCommand19({
     add: add_default,
     skills: skills_default,
     integrations: integrations_default,
-    "managed-repos": managed_repos_default,
     invoke: invoke_default,
     deploy: deploy_default,
     undeploy: undeploy_default,
     domain: domain_default,
     library: library_default,
-    admin: admin_default
+    feedback: feedback_default
   }
   // No `run()` here — citty cascades parent run() AFTER subcommand finishes,
   // which corrupts agent-friendly output (`--json`) and prints noise on every