deepspace 0.6.1 → 0.7.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/cli/cli.ts
-import { defineCommand as defineCommand22, runMain } from "citty";
+import { defineCommand as defineCommand24, runMain } from "citty";
 import { spawnSync as spawnSync6 } from "child_process";
 import { readFileSync as readFileSync17, existsSync as existsSync15 } from "fs";
 import { dirname as dirname5, join as join16 } from "path";
@@ -3822,8 +3822,360 @@ var apps_default = defineCommand11({
   }
 });
 
-// src/cli/commands/add.ts
+// src/cli/commands/logs.ts
 import { defineCommand as defineCommand12 } from "citty";
+
+// src/shared/log-events.ts
+var LOG_LEVELS = ["debug", "log", "info", "warn", "error"];
+
+// src/cli/commands/logs.ts
+var DEPLOY_URL6 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
+var RETENTION_MS = 7 * 24 * 60 * 60 * 1e3;
+var DEFAULT_WINDOW_MS = 15 * 60 * 1e3;
+var MIN_POLL_MS = 2500;
+var FOLLOW_LAG_MS = 9e4;
+function followInitialLimit(limit, maxLimit) {
+  return limit ?? maxLimit;
+}
+function nextPollSince(cursor, floor, lagMs = FOLLOW_LAG_MS) {
+  return Math.max(cursor - lagMs, floor);
+}
+function parseSince(input, now = Date.now()) {
+  const trimmed = input.trim();
+  const rel = /^(\d+)([smhd])$/.exec(trimmed);
+  let ts;
+  if (rel) {
+    const unit = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 }[rel[2]];
+    ts = now - Number(rel[1]) * unit;
+  } else {
+    ts = Date.parse(trimmed);
+    if (Number.isNaN(ts)) {
+      throw new Error(`Invalid --since "${input}" \u2014 use 30s, 15m, 2h, 7d, or an ISO timestamp.`);
+    }
+  }
+  if (now - ts > RETENTION_MS) {
+    throw new Error("Logs are retained for 7 days \u2014 --since can reach back at most 7d.");
+  }
+  return ts;
+}
+var SeenEvents = class {
+  constructor(cap = 5e3) {
+    this.cap = cap;
+  }
+  ids = /* @__PURE__ */ new Set();
+  order = [];
+  /** Returns only the events not seen before, recording them. */
+  fresh(events) {
+    const out = [];
+    for (const e of events) {
+      if (this.ids.has(e.id)) continue;
+      this.ids.add(e.id);
+      this.order.push(e.id);
+      out.push(e);
+    }
+    while (this.order.length > this.cap) {
+      this.ids.delete(this.order.shift());
+    }
+    return out;
+  }
+};
+var stdoutColor = () => process.stdout.isTTY && !process.env.NO_COLOR;
+var stderrColor = () => process.stderr.isTTY && !process.env.NO_COLOR;
+var paint = (code, s, on) => on ? `\x1B[${code}m${s}\x1B[0m` : s;
+var LEVEL_STYLE = {
+  error: "31",
+  // red
+  warn: "33",
+  // yellow
+  debug: "2",
+  // dim
+  info: null,
+  log: null
+};
+function formatTime(ts, now) {
+  const d = new Date(ts);
+  const ref = new Date(now);
+  const hms = `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}:${String(d.getSeconds()).padStart(2, "0")}.${String(d.getMilliseconds()).padStart(3, "0")}`;
+  if (d.toDateString() === ref.toDateString()) return hms;
+  const ymd = `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, "0")}-${String(d.getDate()).padStart(2, "0")}`;
+  return `${ymd} ${hms}`;
+}
+function formatEvent(e, color, now = Date.now()) {
+  const time = paint("2", formatTime(e.timestamp, now), color);
+  let tag;
+  let body;
+  if (e.eventType === "exception" && e.exception) {
+    tag = paint("31", "ERROR", color);
+    const where = e.request ? ` \u2014 ${e.request.method} ${e.request.path}` : "";
+    body = `${e.exception.name}: ${e.exception.message}${where}`;
+    if (e.exception.stack) {
+      const lines = e.exception.stack.split("\n");
+      const firstIsHeader = lines.length > 0 && !/^\s*at\s/.test(lines[0]) && lines[0].includes(e.exception.message);
+      const frames = (firstIsHeader ? lines.slice(1) : lines).map((l) => "    " + l.trim()).filter((l) => l.trim().length > 0);
+      if (frames.length) body += "\n" + paint("2", frames.join("\n"), color);
+    }
+  } else if (e.eventType === "request" && e.request) {
+    tag = paint("36", "REQ  ", color);
+    const status3 = e.request.status !== void 0 ? ` ${e.request.status}` : "";
+    const outcome = e.outcome && e.outcome !== "ok" ? ` (${e.outcome})` : "";
+    body = `${e.request.method} ${e.request.path}${status3}${outcome}`;
+  } else {
+    const style = LEVEL_STYLE[e.level];
+    tag = (e.level.toUpperCase() + "     ").slice(0, 5);
+    if (style) tag = paint(style, tag, color);
+    body = style ? paint(style, e.message, color) : e.message;
+  }
+  const client = e.source === "client" ? paint("35", "CLIENT", color) + " " : "";
+  return `${time} ${client}${tag} ${body}`;
+}
+var sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
+var logs_default = defineCommand12({
+  meta: {
+    name: "logs",
+    description: "Show production logs for a deployed app (add --follow to tail)"
+  },
+  args: {
+    app: {
+      type: "string",
+      alias: "a",
+      description: "App id or name (default: DEEPSPACE_APP_ID from the nearest wrangler.toml)",
+      required: false
+    },
+    env: {
+      type: "string",
+      alias: "e",
+      description: "wrangler.toml [env.<name>] slot \u2014 reads that env\u2019s own app id",
+      required: false
+    },
+    follow: {
+      type: "boolean",
+      alias: "f",
+      description: "Keep polling for new logs until Ctrl+C (~3s cadence)",
+      default: false
+    },
+    since: {
+      type: "string",
+      description: "Window start: 30s, 15m, 2h, 24h, 7d, or an ISO timestamp (default 15m)",
+      required: false
+    },
+    level: {
+      type: "string",
+      description: `Only events at a level: ${LOG_LEVELS.join(", ")}`,
+      required: false
+    },
+    search: {
+      type: "string",
+      description: "Only events whose message contains this text",
+      required: false
+    },
+    limit: {
+      type: "string",
+      description: "Max events per fetch (default 100, max 500)",
+      required: false
+    },
+    json: {
+      type: "boolean",
+      description: "Emit NDJSON \u2014 one event object per line (for agents/pipes)",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const token = await ensureToken();
+    const wranglerEnv = args.env?.trim() || void 0;
+    if (args.app && wranglerEnv) {
+      throw new Error(
+        "Pass either --app or --env, not both \u2014 --env reads the [env.<name>] block\u2019s own app id, --app names an app directly."
+      );
+    }
+    let appId;
+    if (!args.app && wranglerEnv) {
+      const appDir = findAppDir();
+      const id = appDir ? readAppId(appDir, wranglerEnv) : null;
+      if (!id) {
+        throw new Error(
+          `No app id for env "${wranglerEnv}" \u2014 wrangler.toml has no [env.${wranglerEnv}] block with its own DEEPSPACE_APP_ID.`
+        );
+      }
+      appId = id;
+    } else {
+      appId = await resolveAppTarget(DEPLOY_URL6, token, args.app);
+    }
+    if (args.level && !LOG_LEVELS.includes(args.level)) {
+      throw new Error(`Invalid --level "${args.level}". Use: ${LOG_LEVELS.join(", ")}`);
+    }
+    let limit;
+    if (args.limit !== void 0) {
+      limit = Number(args.limit);
+      if (!Number.isInteger(limit) || limit < 1 || limit > 500) {
+        throw new Error("Invalid --limit \u2014 expected an integer between 1 and 500.");
+      }
+    }
+    const initialSince = args.since ? parseSince(args.since) : Date.now() - DEFAULT_WINDOW_MS;
+    const windowLabel = args.since?.trim() || "15m";
+    const MAX_LIMIT = 500;
+    const followLimit = followInitialLimit(limit, MAX_LIMIT);
+    const fetchPage = async (since, pageLimit, token2) => {
+      const params = new URLSearchParams({ since: String(since) });
+      if (pageLimit !== void 0) params.set("limit", String(pageLimit));
+      if (args.level) params.set("level", args.level);
+      if (args.search) params.set("search", args.search);
+      return apiFetch(DEPLOY_URL6, token2, `/api/apps/${appId}/logs?${params}`);
+    };
+    const print = (events) => {
+      for (const e of events) {
+        process.stdout.write(args.json ? JSON.stringify(e) + "\n" : formatEvent(e, stdoutColor()) + "\n");
+      }
+    };
+    const first = await fetchPage(initialSince, args.follow ? followLimit : limit, token);
+    print(first.events);
+    if (!args.follow) {
+      if (first.events.length === 0 && !args.json) {
+        console.log(
+          `No logs in the last ${windowLabel} for ${appId}. New logs can take up to a minute to appear; retention is 7 days.`
+        );
+      } else if (first.truncated) {
+        if (args.json) process.stdout.write(JSON.stringify({ type: "meta", truncated: true }) + "\n");
+        else console.error(`(showing the newest ${first.events.length} events \u2014 narrow with --since/--level/--search)`);
+      }
+      return;
+    }
+    process.on("SIGINT", () => process.exit(0));
+    if (!args.json) {
+      console.error(`Tailing logs for ${appId} \u2014 Ctrl+C to stop.`);
+    }
+    const seen = new SeenEvents();
+    seen.fresh(first.events);
+    let cursor = first.cursor ?? initialSince;
+    let interval = Math.max(first.pollIntervalMs || 0, MIN_POLL_MS);
+    let backoff = 0;
+    let warnedTruncated = false;
+    if (first.truncated) {
+      warnedTruncated = true;
+      if (args.json) {
+        process.stdout.write(JSON.stringify({ type: "meta", truncated: true }) + "\n");
+      } else {
+        console.error(
+          paint("33", `(more than ${followLimit} events in the initial ${windowLabel} window \u2014 some older events not shown; narrow with --since/--level/--search)`, stderrColor())
+        );
+      }
+    }
+    for (; ; ) {
+      await sleep2(backoff || interval);
+      const freshToken = await ensureToken();
+      let page;
+      try {
+        page = await fetchPage(nextPollSince(cursor, initialSince), followLimit, freshToken);
+      } catch (err) {
+        if (err instanceof ApiError && [401, 403, 404].includes(err.status)) throw err;
+        backoff = Math.min(backoff ? backoff * 2 : MIN_POLL_MS, 3e4);
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(paint("2", `(logs fetch failed: ${msg} \u2014 retrying in ${backoff / 1e3}s)`, stderrColor()));
+        continue;
+      }
+      backoff = 0;
+      interval = Math.max(page.pollIntervalMs || 0, MIN_POLL_MS);
+      const fresh = seen.fresh(page.events);
+      print(fresh);
+      const realDrop = fresh.length >= followLimit;
+      if (realDrop && !warnedTruncated) {
+        warnedTruncated = true;
+        if (args.json) {
+          process.stdout.write(JSON.stringify({ type: "meta", truncated: true }) + "\n");
+        } else {
+          console.error(
+            paint("33", `(burst exceeded ${followLimit} events/poll \u2014 some may be dropped; narrow with --level/--search)`, stderrColor())
+          );
+        }
+      } else if (!realDrop) {
+        warnedTruncated = false;
+      }
+      if (page.cursor !== null) cursor = page.cursor;
+    }
+  }
+});
+
+// src/cli/commands/usage.ts
+import { defineCommand as defineCommand13 } from "citty";
+var API_URL3 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
+function formatCredits(value) {
+  if (value > 0 && value < 1) return "<1";
+  if (value < 10) return value.toFixed(1).replace(/\.0$/, "");
+  return Math.round(value).toLocaleString("en-US");
+}
+function formatUsd(value) {
+  return `$${Math.abs(value) >= 0.01 || value === 0 ? value.toFixed(2) : value.toFixed(4)}`;
+}
+function formatDate(iso) {
+  return new Date(iso).toLocaleDateString("en-US", {
+    month: "short",
+    day: "numeric",
+    year: "numeric",
+    timeZone: "UTC"
+  });
+}
+function renderSummary(summary) {
+  const { credits, usageByIntegration } = summary;
+  const lines = [];
+  const renews = credits.subscription.renewsAt ? ` \xB7 renews ${formatDate(credits.subscription.renewsAt)}` : "";
+  lines.push(`Plan:     ${credits.subscription.tier}${renews}`);
+  lines.push(
+    `Credits:  ${formatCredits(credits.credits)} of ${formatCredits(credits.totalAllocation)} remaining (100 credits = $1)`
+  );
+  const bonusActive = credits.bonus.allocation > 0 || credits.bonus.expired;
+  const purchasedActive = credits.purchased.allocation > 0 || credits.purchased.used > 0;
+  if (bonusActive || purchasedActive) {
+    const bucket = (b) => `${formatCredits(b.remaining)} of ${formatCredits(b.allocation)} remaining`;
+    lines.push(`  Subscription:  ${bucket(credits.subscription)}`);
+    if (bonusActive) {
+      const expires = credits.bonus.expiresAt ? ` \xB7 expires ${formatDate(credits.bonus.expiresAt)}` : "";
+      lines.push(
+        `  Bonus:         ${credits.bonus.expired ? "expired" : bucket(credits.bonus) + expires}`
+      );
+    }
+    if (purchasedActive) {
+      lines.push(`  Purchased:     ${bucket(credits.purchased)}`);
+    }
+  }
+  lines.push("");
+  if (!usageByIntegration.length) {
+    lines.push("No integration usage in the last 30 days.");
+  } else {
+    lines.push("Usage by integration (last 30 days):");
+    const nameWidth = Math.max(11, ...usageByIntegration.map((u) => u.name.length));
+    lines.push(`${"INTEGRATION".padEnd(nameWidth)}  CALLS  COST`);
+    for (const u of usageByIntegration) {
+      lines.push(`${u.name.padEnd(nameWidth)}  ${String(u.count).padEnd(5)}  ${formatUsd(u.totalCost)}`);
+    }
+  }
+  lines.push("");
+  lines.push(`Dashboard: ${DASHBOARD_URL}`);
+  return lines.join("\n");
+}
+var usage_default = defineCommand13({
+  meta: {
+    name: "usage",
+    description: "Show credit balance, quota headroom, and per-integration spend"
+  },
+  args: {
+    json: {
+      type: "boolean",
+      description: "Emit the raw usage summary as JSON instead of human output",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const token = await ensureToken();
+    const summary = await apiFetch(API_URL3, token, "/api/usage/summary");
+    if (args.json) {
+      process.stdout.write(JSON.stringify(summary, null, 2) + "\n");
+      return;
+    }
+    console.log(renderSummary(summary));
+  }
+});
+
+// src/cli/commands/add.ts
+import { defineCommand as defineCommand14 } from "citty";
 import { existsSync as existsSync12, readFileSync as readFileSync12 } from "fs";
 import { resolve as resolve8, join as join13, dirname as dirname3 } from "path";
 import { fileURLToPath } from "url";
@@ -3859,7 +4211,7 @@ function runInstaller(script, passArgs, cwd) {
   }
   process.exit(res.status ?? 1);
 }
-var add_default = defineCommand12({
+var add_default = defineCommand14({
   meta: {
     name: "add",
     description: "Add a feature to your DeepSpace app"
@@ -3932,9 +4284,9 @@ var add_default = defineCommand12({
 });
 
 // src/cli/commands/domain.ts
-import { defineCommand as defineCommand13 } from "citty";
-var API_URL3 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
-var api = (token, path, init) => apiFetch(API_URL3, token, path, init);
+import { defineCommand as defineCommand15 } from "citty";
+var API_URL4 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
+var api = (token, path, init) => apiFetch(API_URL4, token, path, init);
 function scrubInternal(value) {
   if (Array.isArray(value)) return value.map(scrubInternal);
   if (value && typeof value === "object") {
@@ -3968,7 +4320,7 @@ async function confirm3(message) {
     });
   });
 }
-var search = defineCommand13({
+var search = defineCommand15({
   meta: { name: "search", description: "Search for available domains" },
   args: {
     query: { type: "positional", description: "Domain or keyword", required: true },
@@ -3998,7 +4350,7 @@ var search = defineCommand13({
     }
   }
 });
-var buy = defineCommand13({
+var buy = defineCommand15({
   meta: { name: "buy", description: "Buy a domain and attach it to an app" },
   args: {
     domain: { type: "positional", description: "Domain to buy", required: true },
@@ -4108,7 +4460,7 @@ var buy = defineCommand13({
     process.exit(1);
   }
 });
-var list2 = defineCommand13({
+var list2 = defineCommand15({
   meta: { name: "list", description: "List your domains" },
   args: {
     json: { type: "boolean", description: "Emit JSON" }
@@ -4134,7 +4486,7 @@ var list2 = defineCommand13({
     }
   }
 });
-var status = defineCommand13({
+var status = defineCommand15({
   meta: { name: "status", description: "Show details for one domain" },
   args: {
     domain: { type: "positional", description: "Domain", required: true },
@@ -4164,7 +4516,7 @@ var status = defineCommand13({
     console.log(`Charged:       ${fmtCents(found.chargedCents)}/yr`);
   }
 });
-var attach = defineCommand13({
+var attach = defineCommand15({
   meta: { name: "attach", description: "Re-point a domain at a different app" },
   args: {
     domain: { type: "positional", description: "Domain to re-point", required: true },
@@ -4195,7 +4547,7 @@ var attach = defineCommand13({
     console.log(`\u2713 ${args.domain} now points at ${targetApp}`);
   }
 });
-var detach = defineCommand13({
+var detach = defineCommand15({
   meta: {
     name: "detach",
     description: "Stop routing the domain (keeps the registration; auto-renew unchanged)"
@@ -4227,7 +4579,7 @@ var detach = defineCommand13({
     );
   }
 });
-var renew = defineCommand13({
+var renew = defineCommand15({
   meta: { name: "renew", description: "Toggle auto-renewal at the registrar" },
   args: {
     domain: { type: "positional", description: "Domain", required: true },
@@ -4253,13 +4605,13 @@ var renew = defineCommand13({
     console.log(`\u2713 ${args.domain} auto-renew ${enabled ? "enabled" : "disabled"}`);
   }
 });
-var domain_default = defineCommand13({
+var domain_default = defineCommand15({
   meta: { name: "domain", description: "Buy and manage custom domains" },
   subCommands: { search, buy, list: list2, status, attach, detach, renew }
 });
 
 // src/cli/commands/collaborators.ts
-import { defineCommand as defineCommand14 } from "citty";
+import { defineCommand as defineCommand16 } from "citty";
 
 // src/server/auth/testAccounts.ts
 var TEST_ACCOUNT_EMAIL_SUFFIX = "@deepspace.test";
@@ -4268,12 +4620,12 @@ function isTestAccountEmail(email) {
 }
 
 // src/cli/commands/collaborators.ts
-var API_URL4 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
-var DEPLOY_URL6 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
+var API_URL5 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
+var DEPLOY_URL7 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
 function api2(token, path, init) {
-  return apiFetch(API_URL4, token, path, init);
+  return apiFetch(API_URL5, token, path, init);
 }
-var list3 = defineCommand14({
+var list3 = defineCommand16({
   meta: { name: "list", description: "List collaborators on your app" },
   args: {
     app: { type: "string", alias: "a", description: "App id or name (defaults to ./wrangler.toml)" },
@@ -4281,7 +4633,7 @@ var list3 = defineCommand14({
   },
   async run({ args }) {
     const token = await ensureToken();
-    const app = await resolveAppTarget(DEPLOY_URL6, token, args.app);
+    const app = await resolveAppTarget(DEPLOY_URL7, token, args.app);
     const { collaborators, pending = [] } = await api2(token, `/api/app-collaborators/${encodeURIComponent(app)}`);
     if (args.json) {
       process.stdout.write(JSON.stringify({ collaborators, pending }, null, 2) + "\n");
@@ -4305,7 +4657,7 @@ var list3 = defineCommand14({
     }
   }
 });
-var add = defineCommand14({
+var add = defineCommand16({
   meta: { name: "add", description: "Authorize someone to deploy your app" },
   args: {
     email: {
@@ -4318,7 +4670,7 @@ var add = defineCommand14({
   },
   async run({ args }) {
     const token = await ensureToken();
-    const app = await resolveAppTarget(DEPLOY_URL6, token, args.app);
+    const app = await resolveAppTarget(DEPLOY_URL7, token, args.app);
     if (isTestAccountEmail(args.email)) {
       console.error(
         "Test accounts (@deepspace.test) cannot be added as collaborators. Use a real DeepSpace account."
@@ -4350,7 +4702,7 @@ var add = defineCommand14({
     console.log(`\u2713 ${res.collaborator.emailDisplay} can now deploy ${app}`);
   }
 });
-var remove = defineCommand14({
+var remove = defineCommand16({
   meta: { name: "remove", description: "Remove a collaborator from your app" },
   args: {
     email: { type: "positional", description: "Collaborator email", required: true },
@@ -4359,7 +4711,7 @@ var remove = defineCommand14({
   },
   async run({ args }) {
     const token = await ensureToken();
-    const app = await resolveAppTarget(DEPLOY_URL6, token, args.app);
+    const app = await resolveAppTarget(DEPLOY_URL7, token, args.app);
     const { collaborators } = await api2(
       token,
       `/api/app-collaborators/${encodeURIComponent(app)}`
@@ -4382,7 +4734,7 @@ var remove = defineCommand14({
     console.log(`\u2713 ${found.emailDisplay} can no longer deploy ${app}`);
   }
 });
-var cancel4 = defineCommand14({
+var cancel4 = defineCommand16({
   meta: { name: "cancel", description: "Cancel a pending (un-accepted) email invite" },
   args: {
     email: { type: "positional", description: "Invited email", required: true },
@@ -4391,7 +4743,7 @@ var cancel4 = defineCommand14({
   },
   async run({ args }) {
     const token = await ensureToken();
-    const app = await resolveAppTarget(DEPLOY_URL6, token, args.app);
+    const app = await resolveAppTarget(DEPLOY_URL7, token, args.app);
     const { pending = [] } = await api2(
       token,
       `/api/app-collaborators/${encodeURIComponent(app)}`
@@ -4414,17 +4766,17 @@ var cancel4 = defineCommand14({
     console.log(`\u2713 Cancelled the pending invite to ${found.email} on ${app}`);
   }
 });
-var collaborators_default = defineCommand14({
+var collaborators_default = defineCommand16({
   meta: { name: "collaborators", description: "Manage who can deploy your app" },
   subCommands: { list: list3, add, remove, cancel: cancel4 }
 });
 
 // src/cli/commands/transfer.ts
-import { defineCommand as defineCommand15 } from "citty";
+import { defineCommand as defineCommand17 } from "citty";
 import * as p6 from "@clack/prompts";
-var API_URL5 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
-var DEPLOY_URL7 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
-var offer = defineCommand15({
+var API_URL6 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
+var DEPLOY_URL8 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
+var offer = defineCommand17({
   meta: { name: "offer", description: "Offer this app to another DeepSpace user" },
   args: {
     email: { type: "positional", description: "Recipient email", required: true },
@@ -4436,9 +4788,9 @@ var offer = defineCommand15({
   },
   async run({ args }) {
     const token = await ensureToken();
-    const app = await resolveAppTarget(DEPLOY_URL7, token, args.app);
+    const app = await resolveAppTarget(DEPLOY_URL8, token, args.app);
     const pending = await apiFetch(
-      API_URL5,
+      API_URL6,
       token,
       `/api/app-transfers/${encodeURIComponent(app)}`
     );
@@ -4459,7 +4811,7 @@ var offer = defineCommand15({
       }
     }
     const { expiresAt } = await apiFetch(
-      API_URL5,
+      API_URL6,
       token,
       `/api/app-transfers/${encodeURIComponent(app)}`,
       { method: "POST", body: JSON.stringify({ email: args.email }) }
@@ -4473,15 +4825,15 @@ var offer = defineCommand15({
     );
   }
 });
-var status2 = defineCommand15({
+var status2 = defineCommand17({
   meta: { name: "status", description: "Show the pending transfer offer, if any" },
   args: {
     app: { type: "string", alias: "a", description: "App id or name (defaults to ./wrangler.toml)" }
   },
   async run({ args }) {
     const token = await ensureToken();
-    const app = await resolveAppTarget(DEPLOY_URL7, token, args.app);
-    const { transfer } = await apiFetch(API_URL5, token, `/api/app-transfers/${encodeURIComponent(app)}`);
+    const app = await resolveAppTarget(DEPLOY_URL8, token, args.app);
+    const { transfer } = await apiFetch(API_URL6, token, `/api/app-transfers/${encodeURIComponent(app)}`);
     if (!transfer) {
       console.log(`No pending transfer for ${app}.`);
       return;
@@ -4489,7 +4841,7 @@ var status2 = defineCommand15({
     console.log(`Pending: ${app} \u2192 ${transfer.toEmailDisplay} (expires ${transfer.expiresAt}).`);
   }
 });
-var accept = defineCommand15({
+var accept = defineCommand17({
   meta: { name: "accept", description: "Accept a transfer offered to you" },
   args: {
     app: { type: "string", alias: "a", description: "App id of the offered app", required: true }
@@ -4497,7 +4849,7 @@ var accept = defineCommand15({
   async run({ args }) {
     const token = await ensureToken();
     const app = requireAppIdArg(args.app);
-    await apiFetch(DEPLOY_URL7, token, `/api/apps/${encodeURIComponent(app)}/transfer/accept`, {
+    await apiFetch(DEPLOY_URL8, token, `/api/apps/${encodeURIComponent(app)}/transfer/accept`, {
       method: "POST"
     });
     console.log(
@@ -4505,30 +4857,30 @@ var accept = defineCommand15({
     );
   }
 });
-var cancel5 = defineCommand15({
+var cancel5 = defineCommand17({
   meta: { name: "cancel", description: "Cancel/decline the pending offer (either party)" },
   args: {
     app: { type: "string", alias: "a", description: "App id or name (defaults to ./wrangler.toml)" }
   },
   async run({ args }) {
     const token = await ensureToken();
-    const app = await resolveAppTarget(DEPLOY_URL7, token, args.app);
-    await apiFetch(API_URL5, token, `/api/app-transfers/${encodeURIComponent(app)}`, { method: "DELETE" });
+    const app = await resolveAppTarget(DEPLOY_URL8, token, args.app);
+    await apiFetch(API_URL6, token, `/api/app-transfers/${encodeURIComponent(app)}`, { method: "DELETE" });
     console.log(`\u2713 Transfer offer for ${app} cancelled.`);
   }
 });
-var transfer_default = defineCommand15({
+var transfer_default = defineCommand17({
   meta: { name: "transfer", description: "Transfer app ownership to another user" },
   subCommands: { offer, status: status2, accept, cancel: cancel5 }
 });
 
 // src/cli/commands/integrations.ts
-import { defineCommand as defineCommand16 } from "citty";
+import { defineCommand as defineCommand18 } from "citty";
 
 // src/cli/commands/_invoke-impl.ts
 import { readFileSync as readFileSync13 } from "fs";
 import * as p7 from "@clack/prompts";
-var API_URL6 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
+var API_URL7 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
 var DEFAULT_TIMEOUT_MS = 12e4;
 function parseTarget(target) {
   if (!target || typeof target !== "string") {
@@ -4570,7 +4922,7 @@ function flushAndExit(code) {
   });
 }
 async function fetchCatalog(opts = {}) {
-  const url = opts.summary ? `${API_URL6}/api/integrations?summary=1` : `${API_URL6}/api/integrations`;
+  const url = opts.summary ? `${API_URL7}/api/integrations?summary=1` : `${API_URL7}/api/integrations`;
   const res = await fetch(url);
   if (!res.ok) {
     throw new Error(`Failed to fetch integration catalog (${res.status})`);
@@ -4694,7 +5046,7 @@ async function runInvoke(args) {
   const startedAt = Date.now();
   let res;
   try {
-    res = await fetch(`${API_URL6}/api/integrations/${integration}/${endpoint}`, {
+    res = await fetch(`${API_URL7}/api/integrations/${integration}/${endpoint}`, {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
@@ -4745,7 +5097,7 @@ async function runInvoke(args) {
 }
 
 // src/cli/commands/integrations.ts
-var list4 = defineCommand16({
+var list4 = defineCommand18({
   meta: {
     name: "list",
     description: "List all available integrations"
@@ -4766,7 +5118,7 @@ var list4 = defineCommand16({
     }
   }
 });
-var info = defineCommand16({
+var info = defineCommand18({
   meta: {
     name: "info",
     description: "Print schema + example body for an integration endpoint"
@@ -4792,7 +5144,7 @@ var info = defineCommand16({
     }
   }
 });
-var invoke = defineCommand16({
+var invoke = defineCommand18({
   meta: {
     name: "invoke",
     description: "Invoke a platform integration as the logged-in user"
@@ -4852,7 +5204,7 @@ var invoke = defineCommand16({
     }
   }
 });
-var integrations_default = defineCommand16({
+var integrations_default = defineCommand18({
   meta: {
     name: "integrations",
     description: "List, inspect, and invoke platform integrations"
@@ -4865,8 +5217,8 @@ var integrations_default = defineCommand16({
 });
 
 // src/cli/commands/invoke.ts
-import { defineCommand as defineCommand17 } from "citty";
-var invoke_default = defineCommand17({
+import { defineCommand as defineCommand19 } from "citty";
+var invoke_default = defineCommand19({
   meta: {
     name: "invoke",
     description: "Invoke a platform integration as the logged-in user"
@@ -4946,13 +5298,13 @@ var invoke_default = defineCommand17({
 });
 
 // src/cli/commands/library.ts
-import { defineCommand as defineCommand18 } from "citty";
+import { defineCommand as defineCommand20 } from "citty";
 import { existsSync as existsSync13, readFileSync as readFileSync14 } from "fs";
 import { join as join14, resolve as resolve9 } from "path";
 import { parse as parseToml4 } from "smol-toml";
 import * as p8 from "@clack/prompts";
 var DEFAULT_LIBRARY_APP = "deepdotspace-site";
-var publish = defineCommand18({
+var publish = defineCommand20({
   meta: {
     name: "publish",
     description: "Publish the current app to the DeepSpace library"
@@ -5091,7 +5443,7 @@ var publish = defineCommand18({
     p8.outro("Done");
   }
 });
-var unpublish = defineCommand18({
+var unpublish = defineCommand20({
   meta: {
     name: "unpublish",
     description: "Remove a library entry (owner or admin only)"
@@ -5150,7 +5502,7 @@ var unpublish = defineCommand18({
     p8.outro("Done");
   }
 });
-var library_default = defineCommand18({
+var library_default = defineCommand20({
   meta: {
     name: "library",
     description: "Manage your DeepSpace library entries"
@@ -5162,13 +5514,13 @@ var library_default = defineCommand18({
 });
 
 // src/cli/commands/feedback.ts
-import { defineCommand as defineCommand19 } from "citty";
+import { defineCommand as defineCommand21 } from "citty";
 import * as p9 from "@clack/prompts";
 import { existsSync as existsSync14, readFileSync as readFileSync15 } from "fs";
 import { dirname as dirname4, join as join15 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { release } from "os";
-var API_URL7 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
+var API_URL8 = process.env.DEEPSPACE_API_URL ?? PLATFORM_URLS.api;
 var TYPES = ["bug", "feature", "other"];
 var TYPE_LABELS = {
   bug: "Bug report",
@@ -5178,7 +5530,7 @@ var TYPE_LABELS = {
 var MAX_TITLE_LEN = 200;
 var MAX_BODY_LEN = 1e4;
 var MAX_CONTEXT_LEN = 200;
-var api3 = (token, path, init) => apiFetch(API_URL7, token, path, init);
+var api3 = (token, path, init) => apiFetch(API_URL8, token, path, init);
 function normalizeType(raw) {
   const value = (raw ?? "bug").toLowerCase();
   if (TYPES.includes(value)) return value;
@@ -5240,7 +5592,7 @@ function buildFeedbackPayload(input) {
     ...input.context
   };
 }
-var feedback_default = defineCommand19({
+var feedback_default = defineCommand21({
   meta: {
     name: "feedback",
     description: "Submit a bug report, feature request, or feedback to DeepSpace"
@@ -5402,7 +5754,7 @@ Context: deepspace ${payload.cliVersion} \xB7 ${payload.nodeVersion} \xB7 ${payl
 });
 
 // src/cli/commands/secrets.ts
-import { defineCommand as defineCommand20 } from "citty";
+import { defineCommand as defineCommand22 } from "citty";
 import { readFileSync as readFileSync16 } from "fs";
 
 // src/cli/lib/citty-args.ts
@@ -5414,7 +5766,7 @@ function dedupePositionals(bound, rest) {
 }
 
 // src/cli/commands/secrets.ts
-var DEPLOY_URL8 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
+var DEPLOY_URL9 = process.env.DEEPSPACE_DEPLOY_URL ?? PLATFORM_URLS.deploy;
 var COMMON_ARGS = {
   app: {
     type: "string",
@@ -5472,7 +5824,7 @@ function warnIfDebugRoutesEnabled(secrets) {
 }
 var APPLY_HINT = "Run `deepspace deploy` to apply \u2014 secrets take effect at deploy time.";
 var LOCAL_DEV_HINT = "Running `deepspace dev`? Restart it to load the change locally.";
-var list5 = defineCommand20({
+var list5 = defineCommand22({
   meta: { name: "list", description: "List masked secrets in a config" },
   args: {
     ...COMMON_ARGS,
@@ -5486,7 +5838,7 @@ var list5 = defineCommand20({
   async run({ args }) {
     try {
       const t = await resolveTarget(args);
-      const { secrets } = await listSecrets(DEPLOY_URL8, t.token, t.appId, t.configName);
+      const { secrets } = await listSecrets(DEPLOY_URL9, t.token, t.appId, t.configName);
       if (args.json) {
         console.log(JSON.stringify({ appId: t.appId, config: t.configName, secrets }, null, 2));
         return;
@@ -5503,7 +5855,7 @@ var list5 = defineCommand20({
     }
   }
 });
-var set = defineCommand20({
+var set = defineCommand22({
   meta: { name: "set", description: "Set secrets from KEY=value pairs" },
   args: {
     ...COMMON_ARGS,
@@ -5531,9 +5883,9 @@ var set = defineCommand20({
       }
       if (Object.keys(secrets).length === 1) {
         const [[k, v]] = Object.entries(secrets);
-        await setSecret(DEPLOY_URL8, t.token, t.appId, t.configName, k, v);
+        await setSecret(DEPLOY_URL9, t.token, t.appId, t.configName, k, v);
       } else {
-        await uploadSecrets(DEPLOY_URL8, t.token, t.appId, t.configName, secrets, false);
+        await uploadSecrets(DEPLOY_URL9, t.token, t.appId, t.configName, secrets, false);
       }
       console.log(`Set ${Object.keys(secrets).length} secret${Object.keys(secrets).length === 1 ? "" : "s"} in ${t.configName}.`);
       if (!warnIfDebugRoutesEnabled(secrets)) {
@@ -5545,7 +5897,7 @@ var set = defineCommand20({
     }
   }
 });
-var get = defineCommand20({
+var get = defineCommand22({
   meta: { name: "get", description: "Get a secret; pass --plain to print the value" },
   args: {
     ...COMMON_ARGS,
@@ -5557,11 +5909,11 @@ var get = defineCommand20({
       const t = await resolveTarget(args);
       const key = validateSecretName(args.key);
       if (args.plain) {
-        const { value } = await getSecretPlain(DEPLOY_URL8, t.token, t.appId, t.configName, key);
+        const { value } = await getSecretPlain(DEPLOY_URL9, t.token, t.appId, t.configName, key);
         process.stdout.write(process.stdout.isTTY ? value + "\n" : value);
         return;
       }
-      const { secrets } = await listSecrets(DEPLOY_URL8, t.token, t.appId, t.configName);
+      const { secrets } = await listSecrets(DEPLOY_URL9, t.token, t.appId, t.configName);
       const item = secrets.find((s) => s.key === key);
       if (!item) fail(new Error(`Secret "${key}" not found in ${t.configName}`));
       console.log(`${item.key}  (v${item.version}, ${item.updatedAt})`);
@@ -5570,7 +5922,7 @@ var get = defineCommand20({
     }
   }
 });
-var del2 = defineCommand20({
+var del2 = defineCommand22({
   meta: { name: "delete", description: "Delete one or more secrets" },
   args: {
     ...COMMON_ARGS,
@@ -5585,7 +5937,7 @@ var del2 = defineCommand20({
       for (const key of keys) {
         const name = validateSecretName(key);
         try {
-          await deleteSecret(DEPLOY_URL8, t.token, t.appId, t.configName, name);
+          await deleteSecret(DEPLOY_URL9, t.token, t.appId, t.configName, name);
           deleted++;
         } catch (err) {
           if (err?.status === 404) absent++;
@@ -5600,7 +5952,7 @@ var del2 = defineCommand20({
     }
   }
 });
-var upload = defineCommand20({
+var upload = defineCommand22({
   meta: { name: "upload", description: "Upload secrets from a dotenv or JSON file" },
   args: {
     ...COMMON_ARGS,
@@ -5617,7 +5969,7 @@ var upload = defineCommand20({
       const content = args.file === "-" ? readFileSync16(0, "utf-8") : readFileSync16(args.file, "utf-8");
       const secrets = parseSecretsUpload(content);
       if (Object.keys(secrets).length === 0) fail(new Error("No secrets found in the input."));
-      await uploadSecrets(DEPLOY_URL8, t.token, t.appId, t.configName, secrets, args.replace);
+      await uploadSecrets(DEPLOY_URL9, t.token, t.appId, t.configName, secrets, args.replace);
       console.log(`Uploaded ${Object.keys(secrets).length} secrets to ${t.configName}.`);
       if (!warnIfDebugRoutesEnabled(secrets)) console.log(APPLY_HINT);
     } catch (err) {
@@ -5625,7 +5977,7 @@ var upload = defineCommand20({
     }
   }
 });
-var download = defineCommand20({
+var download = defineCommand22({
   meta: { name: "download", description: "Download a config\u2019s secrets (dotenv/json/shell)" },
   args: {
     ...COMMON_ARGS,
@@ -5642,14 +5994,14 @@ var download = defineCommand20({
       if (!["dotenv", "json", "shell"].includes(format)) {
         fail(new Error(`Unknown format "${args.format}" \u2014 use dotenv, json, or shell.`));
       }
-      const { secrets } = await fetchSecretsValues(DEPLOY_URL8, t.token, t.appId, t.configName);
+      const { secrets } = await fetchSecretsValues(DEPLOY_URL9, t.token, t.appId, t.configName);
       process.stdout.write(formatSecretsDownload(secrets, format));
     } catch (err) {
       fail(err);
     }
   }
 });
-var pull = defineCommand20({
+var pull = defineCommand22({
   meta: { name: "pull", description: "Refresh the .dev.vars cache from the app store" },
   args: { ...COMMON_ARGS },
   async run({ args }) {
@@ -5659,7 +6011,7 @@ var pull = defineCommand20({
       if (!appDir) fail(new Error("Run from a DeepSpace app directory (one containing wrangler.toml)."));
       const t = await resolveTarget(args);
       const ownerId = decodeJwtPayload(t.token).sub;
-      const pulled = await pullAppSecretsCache(DEPLOY_URL8, t.token, t.appId, t.configName);
+      const pulled = await pullAppSecretsCache(DEPLOY_URL9, t.token, t.appId, t.configName);
       if (!pulled) {
         console.log(`No secrets in ${t.configName} yet \u2014 nothing to pull.`);
         return;
@@ -5677,13 +6029,13 @@ var pull = defineCommand20({
     }
   }
 });
-var configsList = defineCommand20({
+var configsList = defineCommand22({
   meta: { name: "list", description: "List the app\u2019s configs" },
   args: { ...COMMON_ARGS },
   async run({ args }) {
     try {
       const t = await resolveTarget(args);
-      const { configs: configs2 } = await listConfigs(DEPLOY_URL8, t.token, t.appId);
+      const { configs: configs2 } = await listConfigs(DEPLOY_URL9, t.token, t.appId);
       if (configs2.length === 0) {
         console.log("No configs yet \u2014 the first `secrets set` creates one.");
         return;
@@ -5696,7 +6048,7 @@ var configsList = defineCommand20({
     }
   }
 });
-var configsCreate = defineCommand20({
+var configsCreate = defineCommand22({
   meta: { name: "create", description: "Create a config (optionally copying another)" },
   args: {
     ...COMMON_ARGS,
@@ -5708,7 +6060,7 @@ var configsCreate = defineCommand20({
       const t = await resolveTarget(args);
       const name = validateConfigName(args.name);
       const copyFrom = args["copy-from"] || void 0;
-      const { configs: configs2 } = await listConfigs(DEPLOY_URL8, t.token, t.appId);
+      const { configs: configs2 } = await listConfigs(DEPLOY_URL9, t.token, t.appId);
       if (configs2.some((c) => c.name === name)) {
         if (copyFrom) {
           fail(
@@ -5720,14 +6072,14 @@ var configsCreate = defineCommand20({
         console.log(`Config ${name} already exists.`);
         return;
       }
-      await createConfig(DEPLOY_URL8, t.token, t.appId, name, copyFrom);
+      await createConfig(DEPLOY_URL9, t.token, t.appId, name, copyFrom);
       console.log(`Created ${name}.`);
     } catch (err) {
       fail(err);
     }
   }
 });
-var configsDelete = defineCommand20({
+var configsDelete = defineCommand22({
   meta: { name: "delete", description: "Delete a config and all of its secrets" },
   args: {
     ...COMMON_ARGS,
@@ -5737,18 +6089,18 @@ var configsDelete = defineCommand20({
     try {
       const t = await resolveTarget(args);
       const name = validateConfigName(args.name);
-      await deleteConfig(DEPLOY_URL8, t.token, t.appId, name);
+      await deleteConfig(DEPLOY_URL9, t.token, t.appId, name);
       console.log(`Deleted ${name}.`);
     } catch (err) {
       fail(err);
     }
   }
 });
-var configs = defineCommand20({
+var configs = defineCommand22({
   meta: { name: "configs", description: "Manage the app\u2019s secrets configs" },
   subCommands: { list: configsList, create: configsCreate, delete: configsDelete }
 });
-var secrets_default = defineCommand20({
+var secrets_default = defineCommand22({
   meta: { name: "secrets", description: "Manage the app\u2019s secrets store" },
   subCommands: {
     list: list5,
@@ -5763,8 +6115,8 @@ var secrets_default = defineCommand20({
 });
 
 // src/cli/commands/init.ts
-import { defineCommand as defineCommand21 } from "citty";
-var init_default = defineCommand21({
+import { defineCommand as defineCommand23 } from "citty";
+var init_default = defineCommand23({
   meta: {
     name: "init",
     description: "Mint this app\u2019s immutable DEEPSPACE_APP_ID into wrangler.toml"
@@ -5814,7 +6166,7 @@ var pkg = JSON.parse(readFileSync17(join16(__dirname, "..", "package.json"), "ut
 if (process.platform === "linux" && !process.env.SSL_CERT_FILE && existsSync15("/etc/ssl/certs/ca-certificates.crt")) {
   process.env.SSL_CERT_FILE = "/etc/ssl/certs/ca-certificates.crt";
 }
-var create2 = defineCommand22({
+var create2 = defineCommand24({
   meta: {
     name: "create",
     description: "Create a new DeepSpace app (runs create-deepspace; all flags are forwarded)"
@@ -5841,7 +6193,7 @@ var create2 = defineCommand22({
     process.exit(res.status ?? 1);
   }
 });
-var main = defineCommand22({
+var main = defineCommand24({
   meta: {
     name: "deepspace",
     version: pkg.version,
@@ -5854,6 +6206,8 @@ var main = defineCommand22({
     logout: logout_default,
     whoami: whoami_default,
     apps: apps_default,
+    logs: logs_default,
+    usage: usage_default,
     dev: dev_default,
     kill: kill_default,
     test: test_default,