devflare 1.0.0-next.2 → 1.0.0-next.21

package/dist/index-rz7rx80s.js

@@ -0,0 +1,1410 @@
+import {
+  getPackageVersion
+} from "./index-627srx16.js";
+import {
+  accent,
+  createCliTheme,
+  cyan,
+  cyanBold,
+  dim,
+  formatBullet,
+  formatCommand,
+  logLine
+} from "./index-stgn34cr.js";
+import {
+  __require
+} from "./index-37x76zdn.js";
+
+// src/cli/index.ts
+import { createConsola } from "consola";
+
+// src/cli/help-pages/shared.ts
+var COMMANDS = ["init", "dev", "build", "deploy", "types", "doctor", "config", "account", "login", "previews", "productions", "worker", "tokens", "secrets", "ai", "remote", "help", "version"];
+var COMMAND_ALIASES = {};
+var COMMON_OPTIONS = [
+  { command: "--config <path>", description: "Select a specific devflare config file when the command supports it" },
+  { command: "--env <name>", description: "Resolve config.env[name] when the command supports environments" },
+  { command: "--debug", description: "Print extra stack traces and debug output for supported commands" },
+  { command: "--no-color", description: "Disable ANSI color output" },
+  { command: "-h, --help", description: "Show detailed help for the current command" },
+  { command: "-v, --version", description: "Show the installed devflare version" }
+];
+var ACCOUNT_OPTION = {
+  command: "--account <id>",
+  description: "Use a specific Cloudflare account instead of the workspace/global/default account"
+};
+var PREVIEWS_COMMON_OPTIONS = [
+  { command: "--account <id>", description: "Use a specific Cloudflare account for preview Worker and preview-resource operations" }
+];
+function entry(command, description) {
+  return { command, description };
+}
+function createSubcommandHelpPage(options) {
+  return {
+    path: [options.parentPath, options.subcommand],
+    summary: options.summary,
+    usage: options.usage,
+    description: options.description,
+    ...options.options !== undefined ? { options: options.options } : {},
+    ...options.examples !== undefined ? { examples: options.examples } : {},
+    ...options.notes !== undefined ? { notes: options.notes } : {}
+  };
+}
+function createOptionedSubcommandHelpPageFactory(parentPath) {
+  return (subcommand, summary, usage, description, options, examples, notes = []) => {
+    return createSubcommandHelpPage({
+      parentPath,
+      subcommand,
+      summary,
+      usage,
+      description,
+      options,
+      examples,
+      notes
+    });
+  };
+}
+function createAccountInventoryPage(subcommand, summary, description, exampleDescription) {
+  return createSubcommandHelpPage({
+    parentPath: "account",
+    subcommand,
+    summary,
+    usage: [
+      `devflare account ${subcommand} [--account <id>]`
+    ],
+    description: [description],
+    options: [ACCOUNT_OPTION],
+    examples: [
+      entry(`devflare account ${subcommand}`, exampleDescription)
+    ],
+    notes: [
+      "Omit --account to resolve the account from workspace preferences, CLOUDFLARE_ACCOUNT_ID, devflare.config.*, or the primary authenticated account."
+    ]
+  });
+}
+function createRemoteSubcommandPage(subcommand, summary, usage, description, examples, notes) {
+  return createSubcommandHelpPage({
+    parentPath: "remote",
+    subcommand,
+    summary,
+    usage,
+    description,
+    examples,
+    notes
+  });
+}
+var createPreviewSubcommandPage = createOptionedSubcommandHelpPageFactory("previews");
+var createProductionsSubcommandPage = createOptionedSubcommandHelpPageFactory("productions");
+
+// src/cli/help-pages/render.ts
+function createHelpPageMap(pages) {
+  return new Map(pages.map((page) => [page.path.join(" "), page]));
+}
+function canonicalizeHelpPath(path) {
+  const trimmedPath = path.map((segment) => segment.trim()).filter((segment) => segment.length > 0);
+  if (trimmedPath.length === 0) {
+    return [];
+  }
+  const [first, ...rest] = trimmedPath;
+  return [COMMAND_ALIASES[first] ?? first, ...rest];
+}
+function resolveHelpPage(path, helpPageMap) {
+  const canonicalPath = canonicalizeHelpPath(path);
+  if (canonicalPath.length === 0) {
+    return helpPageMap.get("");
+  }
+  if (!COMMANDS.includes(canonicalPath[0]) && !(canonicalPath[0] in COMMAND_ALIASES)) {
+    return;
+  }
+  for (let length = canonicalPath.length;length > 0; length--) {
+    const key = canonicalPath.slice(0, length).join(" ");
+    const page = helpPageMap.get(key);
+    if (page) {
+      return page;
+    }
+  }
+  return;
+}
+function appendSection(lines, title, sectionLines) {
+  if (sectionLines.length === 0) {
+    return;
+  }
+  if (lines.length > 0 && lines[lines.length - 1] !== "") {
+    lines.push("");
+  }
+  lines.push(title);
+  lines.push(...sectionLines);
+}
+function renderEntryList(entries, theme) {
+  return entries.map((item) => formatCommand(item.command, item.description, theme));
+}
+function renderBulletList(items, theme) {
+  return items.map((item) => formatBullet(item, theme));
+}
+function renderHelpPage(page, theme) {
+  const commandLabel = page.path.length === 0 ? "devflare" : `devflare ${page.path.join(" ")}`;
+  const lines = [
+    "",
+    `${cyanBold(commandLabel, theme)} ${dim(page.summary, theme)}`,
+    ""
+  ];
+  appendSection(lines, dim("usage", theme), page.usage.map((usageLine) => `  ${cyan(usageLine, theme)}`));
+  appendSection(lines, dim("overview", theme), renderBulletList(page.description ?? [], theme));
+  appendSection(lines, dim("arguments", theme), renderEntryList(page.arguments ?? [], theme));
+  appendSection(lines, dim("subcommands", theme), renderEntryList(page.subcommands ?? [], theme));
+  appendSection(lines, dim(page.optionSectionTitle ?? "options", theme), renderEntryList(page.options ?? [], theme));
+  if (page.aliases && page.aliases.length > 0) {
+    appendSection(lines, dim("aliases", theme), page.aliases.map((alias) => `  ${accent(alias, theme, "green")}`));
+  }
+  appendSection(lines, dim("examples", theme), renderEntryList(page.examples ?? [], theme));
+  appendSection(lines, dim("notes", theme), renderBulletList(page.notes ?? [], theme));
+  lines.push("");
+  return lines.join(`
+`);
+}
+function createThemes(options = {}) {
+  return {
+    styled: createCliTheme(options),
+    plain: { useColor: false }
+  };
+}
+
+// src/cli/help-pages/pages/account.ts
+var ACCOUNT_HELP_PAGES = [
+  {
+    path: ["account"],
+    summary: "Inspect Cloudflare accounts, resources, and usage data",
+    usage: [
+      "devflare account [info] [--account <id>]",
+      "devflare account <workers|kv|d1|r2|vectorize|usage> [--account <id>]",
+      "devflare account limits [set <limit-name> <value> | enable | disable] [--account <id>]",
+      "devflare account <global|workspace>"
+    ],
+    description: [
+      "The default view shows the selected account and the commands you can run against it.",
+      "Inventory subcommands list Cloudflare resources in the resolved account, while `limits` and `usage` focus on Devflare-managed usage controls."
+    ],
+    subcommands: [
+      entry("info", "Show account overview and available account commands (default)"),
+      entry("workers", "List Workers for the selected account"),
+      entry("kv", "List KV namespaces"),
+      entry("d1", "List D1 databases"),
+      entry("r2", "List R2 buckets"),
+      entry("vectorize", "List Vectorize indexes"),
+      entry("usage", "Show Devflare usage summaries"),
+      entry("limits", "Show or change Devflare usage limits"),
+      entry("global", "Choose the global default account interactively"),
+      entry("workspace", "Choose the workspace account interactively")
+    ],
+    options: [ACCOUNT_OPTION],
+    examples: [
+      entry("devflare account", "Show the account overview"),
+      entry("devflare account workers", "List Workers for the resolved account"),
+      entry("devflare account limits set ai-requests 50", "Set a daily AI request limit"),
+      entry("devflare account workspace", "Choose the account stored in the current workspace")
+    ],
+    notes: [
+      "Account resolution prefers `--account`, then workspace settings, then `CLOUDFLARE_ACCOUNT_ID`, then the loaded config, then the primary authenticated account.",
+      "The `global` and `workspace` subcommands are interactive selectors; they do not take `--account`."
+    ]
+  },
+  createAccountInventoryPage("info", "Show the selected account overview", "Displays the selected account plus shortcuts for other `account` subcommands.", "Show the account overview and suggested follow-up commands"),
+  createAccountInventoryPage("workers", "List Workers in the selected account", "Prints Worker names and last-modified timestamps for the resolved account.", "List Worker scripts in the selected account"),
+  createAccountInventoryPage("kv", "List KV namespaces in the selected account", "Prints namespace names and ids for the resolved account.", "List KV namespaces for the selected account"),
+  createAccountInventoryPage("d1", "List D1 databases in the selected account", "Prints database names, ids, and table counts for the resolved account.", "List D1 databases for the selected account"),
+  createAccountInventoryPage("r2", "List R2 buckets in the selected account", "Prints bucket names, creation dates, and locations for the resolved account.", "List R2 buckets for the selected account"),
+  createAccountInventoryPage("vectorize", "List Vectorize indexes in the selected account", "Prints Vectorize index names, dimensions, and metrics for the resolved account.", "List Vectorize indexes for the selected account"),
+  createAccountInventoryPage("usage", "Show Devflare usage summaries", "Prints Devflare-tracked usage totals and the currently configured usage limits.", "Show usage summaries for the selected account"),
+  {
+    path: ["account", "limits"],
+    summary: "Show or update Devflare usage limits",
+    usage: [
+      "devflare account limits [--account <id>]",
+      "devflare account limits set <ai-requests|ai-tokens|vectorize-ops> <value> [--account <id>]",
+      "devflare account limits <enable|disable> [--account <id>]"
+    ],
+    description: [
+      "Views the current Devflare usage limits for the selected account and optionally updates them.",
+      "Use `enable` or `disable` to toggle enforcement without changing the configured numeric thresholds."
+    ],
+    subcommands: [
+      entry("set <limit-name> <value>", "Set one numeric usage limit"),
+      entry("enable", "Enable limit enforcement without changing stored values"),
+      entry("disable", "Disable limit enforcement without changing stored values")
+    ],
+    options: [ACCOUNT_OPTION],
+    examples: [
+      entry("devflare account limits", "Show the current usage limits"),
+      entry("devflare account limits set ai-requests 50", "Set the daily AI request limit"),
+      entry("devflare account limits enable", "Enable limit enforcement"),
+      entry("devflare account limits disable", "Disable limit enforcement")
+    ],
+    notes: [
+      "Valid limit names are `ai-requests`, `ai-tokens`, and `vectorize-ops`.",
+      "Numeric values must be non-negative integers."
+    ]
+  },
+  {
+    path: ["account", "limits", "set"],
+    summary: "Set one Devflare usage limit",
+    usage: [
+      "devflare account limits set <ai-requests|ai-tokens|vectorize-ops> <value> [--account <id>]"
+    ],
+    description: [
+      "Updates one stored Devflare usage limit for the selected account.",
+      "Use `enable` separately when you want enforcement turned on after changing the threshold."
+    ],
+    arguments: [
+      entry("<ai-requests|ai-tokens|vectorize-ops>", "Which usage limit to update"),
+      entry("<value>", "Non-negative integer threshold for the selected limit")
+    ],
+    options: [ACCOUNT_OPTION],
+    examples: [
+      entry("devflare account limits set ai-requests 50", "Set the daily AI request limit to 50"),
+      entry("devflare account limits set ai-tokens 5000 --account <id>", "Set the daily AI token limit for a specific account")
+    ],
+    notes: [
+      "Changing a value does not automatically enable enforcement if limits are currently disabled."
+    ]
+  },
+  {
+    path: ["account", "limits", "enable"],
+    summary: "Enable Devflare usage-limit enforcement",
+    usage: [
+      "devflare account limits enable [--account <id>]"
+    ],
+    description: [
+      "Turns on Devflare usage-limit enforcement for the selected account without changing the stored numeric thresholds."
+    ],
+    options: [ACCOUNT_OPTION],
+    examples: [
+      entry("devflare account limits enable", "Enable usage-limit enforcement for the resolved account")
+    ],
+    notes: [
+      "Use `devflare account limits set ...` first when you need to change the stored thresholds."
+    ]
+  },
+  {
+    path: ["account", "limits", "disable"],
+    summary: "Disable Devflare usage-limit enforcement",
+    usage: [
+      "devflare account limits disable [--account <id>]"
+    ],
+    description: [
+      "Disables Devflare usage-limit enforcement for the selected account without deleting the stored thresholds."
+    ],
+    options: [ACCOUNT_OPTION],
+    examples: [
+      entry("devflare account limits disable", "Disable usage-limit enforcement for the resolved account")
+    ],
+    notes: [
+      "Re-enable later with `devflare account limits enable` to reuse the same stored values."
+    ]
+  },
+  {
+    path: ["account", "global"],
+    summary: "Choose the global default Cloudflare account",
+    usage: [
+      "devflare account global"
+    ],
+    description: [
+      "Opens an interactive selector and stores the chosen default account in Devflare preferences."
+    ],
+    examples: [
+      entry("devflare account global", "Choose the global default account interactively")
+    ],
+    notes: [
+      "The selected account is written to Devflare preferences and mirrored to cloud KV when available."
+    ]
+  },
+  {
+    path: ["account", "workspace"],
+    summary: "Choose the workspace Cloudflare account",
+    usage: [
+      "devflare account workspace"
+    ],
+    description: [
+      "Opens an interactive selector and stores the chosen account in the current workspace package metadata."
+    ],
+    examples: [
+      entry("devflare account workspace", "Choose the account pinned to the current workspace")
+    ],
+    notes: [
+      "The workspace account overrides the global default when Devflare resolves account context inside that workspace."
+    ]
+  }
+];
+
+// src/cli/help-pages/pages/core.ts
+var CORE_HELP_PAGES = [
+  {
+    path: [],
+    summary: "Config compiler + CLI orchestrator for Cloudflare Workers",
+    usage: [
+      "devflare <command> [options]"
+    ],
+    description: [
+      "Use `devflare <command> --help` or `devflare help <command>` to see a detailed command guide.",
+      "Devflare commands resolve local config first, then bridge that config to Wrangler-compatible Cloudflare workflows."
+    ],
+    subcommands: [
+      entry("init [name]", "Create a new devflare project"),
+      entry("dev", "Start the development server"),
+      entry("build", "Build for production"),
+      entry("deploy", "Deploy explicitly to production or preview"),
+      entry("types", "Generate TypeScript types"),
+      entry("doctor", "Check project configuration"),
+      entry("config", "Print resolved Devflare/Wrangler config"),
+      entry("account", "View Cloudflare account info and resource inventories"),
+      entry("login", "Authenticate with Cloudflare via Wrangler"),
+      entry("previews", "Inspect and clean dedicated preview Workers and scopes"),
+      entry("productions", "Inspect and manage live production Workers and deployments"),
+      entry("worker", "Rename and manage Worker control-plane operations"),
+      entry("tokens", "Manage Devflare-managed Cloudflare API tokens"),
+      entry("secrets", "Manage local Secrets Store values"),
+      entry("ai", "View Workers AI pricing information"),
+      entry("remote", "Manage remote test mode for paid Cloudflare features"),
+      entry("help", "Show command overview or a command-specific help page"),
+      entry("version", "Show the installed devflare version")
+    ],
+    options: COMMON_OPTIONS,
+    optionSectionTitle: "common options",
+    examples: [
+      entry("devflare dev", "Start worker-only or unified local development"),
+      entry("devflare deploy --prod", "Deploy explicitly to production"),
+      entry("devflare deploy --preview next", "Deploy a named preview scope directly"),
+      entry("devflare previews cleanup --scope next --apply", "Delete one dedicated preview scope and its preview-owned resources"),
+      entry("devflare productions", "Inspect live production Workers and active deployments"),
+      entry("devflare secrets --local --store store-123 --name api-token --value local-token", "Set a local Secrets Store value"),
+      entry("devflare help deploy", "Show the detailed deploy help page")
+    ],
+    notes: [
+      "Commands that support `--config` and `--env` document that explicitly in their own help pages."
+    ]
+  },
+  {
+    path: ["init"],
+    summary: "Create a new devflare project",
+    usage: [
+      "devflare init [name] [--template <minimal|api>]"
+    ],
+    description: [
+      "Scaffolds a new project directory with a starter `devflare.config.ts`, TypeScript config, and package.json scripts.",
+      "Use the `api` template when you want middleware and API routing structure out of the box."
+    ],
+    arguments: [
+      entry("[name]", "Project directory name (defaults to `my-devflare-app`)")
+    ],
+    options: [
+      entry("--template <minimal|api>", "Pick the starter template to scaffold")
+    ],
+    examples: [
+      entry("devflare init my-app", "Create a minimal starter called `my-app`"),
+      entry("devflare init edge-api --template api", "Create the API starter with middleware structure")
+    ],
+    notes: [
+      "The command writes files only; install dependencies afterward with `bun install`.",
+      "Generated starter scripts expect `devflare dev`, `devflare build`, `devflare deploy`, and `devflare types`."
+    ]
+  },
+  {
+    path: ["dev"],
+    summary: "Start the development server",
+    usage: [
+      "devflare dev [--config <path>] [--port <port>] [--persist] [--verbose] [--debug] [--log | --log-temp]"
+    ],
+    description: [
+      "Starts a worker-only Miniflare server by default, and automatically enables Vite when the current package has an effective local Vite setup.",
+      "Also watches Worker and Durable Object source files, rebuilding and hot-reloading them as they change."
+    ],
+    options: [
+      entry("--config <path>", "Use a specific devflare config file"),
+      entry("--port <port>", "Preferred Vite dev server port (defaults to 5173 when Vite is enabled)"),
+      entry("--persist", "Persist Miniflare storage between restarts"),
+      entry("--verbose", "Increase logging verbosity"),
+      entry("--debug", "Enable extra debug logging and stack traces"),
+      entry("--log", "Mirror dev output into a timestamped `.log-*` file"),
+      entry("--log-temp", "Mirror dev output into `.log`, overwriting the file each run")
+    ],
+    examples: [
+      entry("devflare dev", "Start local development with automatic Vite detection"),
+      entry("devflare dev --port 3000", "Use a custom Vite port when Vite is enabled"),
+      entry("devflare dev --persist --log-temp", "Keep Miniflare state and overwrite `.log` on each run")
+    ],
+    notes: [
+      "Worker-only mode is the default when no effective local `vite.config.*` is present.",
+      "`--log` and `--log-temp` still print to the terminal; they add a file mirror instead of redirecting output away."
+    ]
+  },
+  {
+    path: ["build"],
+    summary: "Build production deployment artifacts",
+    usage: [
+      "devflare build [--config <path>] [--env <name>] [--debug]"
+    ],
+    description: [
+      "Resolves your Devflare config locally, applies environment overrides, and generates the build artifacts used by deploy flows.",
+      "Build preserves named bindings instead of provisioning Cloudflare resources, so it is the safest way to inspect what Devflare will hand to deploy before you actually ship."
+    ],
+    options: [
+      entry("--config <path>", "Use a specific devflare config file"),
+      entry("--env <name>", "Resolve `config.env[name]` before building artifacts"),
+      entry("--debug", "Print stack traces when build preparation fails")
+    ],
+    examples: [
+      entry("devflare build", "Build the default environment"),
+      entry("devflare build --env production", "Build using `config.env.production`")
+    ],
+    notes: [
+      "Build currently writes `.devflare/wrangler.jsonc`, `.devflare/build/wrangler.jsonc`, and `.wrangler/deploy/config.json`.",
+      "Build does not query or provision Cloudflare account resources on its own; name-based bindings stay as names in the generated artifacts until deploy time.",
+      "`devflare deploy` runs the same artifact preparation step automatically before invoking Wrangler, unless you provide `--build <path>` to reuse an existing build artifact."
+    ]
+  },
+  {
+    path: ["deploy"],
+    summary: "Deploy explicitly to Cloudflare production or preview targets",
+    usage: [
+      "devflare deploy --prod [--config <path>] [--build <path>] [--message <text>] [--tag <text>] [--debug]",
+      "devflare deploy --production [--config <path>] [--build <path>] [--message <text>] [--tag <text>] [--debug]",
+      "devflare deploy --preview <name> [--config <path>] [--build <path>] [--message <text>] [--tag <text>]",
+      "devflare deploy --preview [--config <path>] [--build <path>] [--branch-name <branch>] [--message <text>] [--tag <text>]",
+      "devflare deploy --prod --dry-run [--config <path>]",
+      "devflare deploy --preview <name> --dry-run [--config <path>]",
+      "devflare deploy --preview --dry-run [--config <path>]"
+    ],
+    description: [
+      "Deploy requires an explicit target: production via `--prod` / `--production`, or preview via `--preview`.",
+      "Named preview deploys such as `--preview next` or `--preview pr-1` target `config.env.preview`, provision preview-scoped resources automatically, and deploy dedicated preview-scope Workers when your config is wired for them. Bare `--preview` keeps the same-worker preview upload flow and can still use `--branch-name` or CI/git metadata for preview-aware naming.",
+      "Production and named preview deploys also provision missing deploy-time resources such as KV namespaces, D1 databases, R2 buckets, and Queues when Devflare has enough information to create them."
+    ],
+    options: [
+      entry("--prod", "Deploy to the production environment explicitly"),
+      entry("--production", "Long-form alias for --prod"),
+      entry("--preview", "Deploy a same-worker preview upload"),
+      entry("--preview <name>", "Deploy a named preview scope such as `next` or `pr-1`"),
+      entry("--config <path>", "Use a specific devflare config file"),
+      entry("--build <path>", "Reuse an existing build artifact such as `.devflare/build` or `.wrangler/deploy/config.json` instead of rebuilding"),
+      entry("--env <name>", "Usually unnecessary because the explicit target already pins production vs preview. If you pass it, it must match that target"),
+      entry("--dry-run", "Print the synthesized Wrangler config and skip the actual deployment"),
+      entry("--branch-name <branch>", "Provide explicit branch metadata for preview-aware naming when your workflow needs it"),
+      entry("--message <text>", "Attach an explicit Wrangler deployment/version message"),
+      entry("--tag <text>", "Attach an explicit Wrangler version tag"),
+      entry("--debug", "Print stack traces when deployment orchestration fails")
+    ],
+    examples: [
+      entry("devflare deploy --prod", "Deploy explicitly to production"),
+      entry("devflare deploy --prod --build .devflare/build", "Deploy a previously built artifact without rebuilding the package"),
+      entry('devflare deploy --production --message "Release"', "Deploy to production with an explicit deployment message"),
+      entry("devflare deploy --preview next", "Deploy the named `next` preview scope and provision preview-scoped resources automatically"),
+      entry("devflare deploy --preview pr-1", "Deploy the named `pr-1` preview scope directly"),
+      entry("devflare deploy --preview --branch-name feature-branch", "Upload a same-worker preview version with explicit branch metadata"),
+      entry("devflare deploy --preview next --dry-run", "Inspect the generated named-preview Wrangler config without deploying")
+    ],
+    notes: [
+      "`devflare deploy` without an explicit target is rejected from the CLI so production and preview destinations stay unmistakable.",
+      "`--prod` / `--production` clear preview-scope environment overrides such as `DEVFLARE_PREVIEW_BRANCH` so production deploys stay pointed at stable Worker names.",
+      "Named preview deploys automatically provision preview-scoped resources before building and deploying.",
+      "When a build artifact still contains name-based bindings, deploy resolves or provisions the concrete Cloudflare resources and rewrites the generated Wrangler config with the IDs Wrangler requires.",
+      "Plain `--preview` still uses Cloudflare preview uploads, so it cannot be the first-ever upload for a brand-new Worker, preview URLs remain limited for Workers that implement Durable Objects, and preview uploads do not apply Durable Object migrations."
+    ]
+  },
+  {
+    path: ["secrets"],
+    summary: "Manage local Secrets Store values",
+    usage: [
+      "devflare secrets --local --store <id> --name <name> --value <value>",
+      "devflare secrets --local --store <id> --list",
+      "devflare secrets --local --store <id> --name <name> --delete"
+    ],
+    description: [
+      "Writes, lists, and deletes local values for Secrets Store bindings used by dev, createTestContext(), and createOfflineEnv({ cwd }).",
+      "The runtime side is read-only: Workers can read configured local values through the Secrets Store binding, but application code cannot mutate this file."
+    ],
+    options: [
+      entry("--local", "Use the project-local secret file instead of Cloudflare"),
+      entry("--store <id>", "Secrets Store ID, matching the Cloudflare account store ID when you have one"),
+      entry("--name <name>", "Secret name inside the store"),
+      entry("--value <value>", "Secret value to write locally"),
+      entry("--list", "List local secret names without printing values"),
+      entry("--delete", "Delete one local secret value")
+    ],
+    examples: [
+      entry("devflare secrets --local --store store-123 --name api-token --value local-token", "Create or replace one local secret value"),
+      entry("devflare secrets --local --store store-123 --list", "List names in one local store"),
+      entry("devflare secrets --local --store store-123 --name api-token --delete", "Delete one local secret value")
+    ],
+    notes: [
+      "Local values are stored in `.devflare/secrets.local.json`, which is ignored by the repository template.",
+      "Command output prints store/name references only; it does not echo secret values."
+    ]
+  },
+  {
+    path: ["types"],
+    summary: "Generate TypeScript bindings from your config",
+    usage: [
+      "devflare types [--config <path>] [--output <path>] [--debug]"
+    ],
+    description: [
+      "Generates `env.d.ts`-style bindings for KV, D1, R2, Durable Objects, Queues, service bindings, vars, and secrets.",
+      "Devflare also discovers entrypoints and cross-worker Durable Objects so service RPC bindings can stay strongly typed."
+    ],
+    options: [
+      entry("--config <path>", "Use a specific devflare config file"),
+      entry("--output <path>", "Write generated types to a custom path (defaults to `env.d.ts`)"),
+      entry("--debug", "Print stack traces when type generation fails")
+    ],
+    examples: [
+      entry("devflare types", "Generate `env.d.ts` next to the current project"),
+      entry("devflare types --output src/generated/env.d.ts", "Write generated bindings to a custom file")
+    ],
+    notes: [
+      "Type discovery respects configured file patterns and falls back to the default Durable Object and entrypoint glob patterns.",
+      "Re-run this command after adding or renaming bindings, Durable Objects, or cross-worker service references."
+    ]
+  },
+  {
+    path: ["doctor"],
+    summary: "Check project configuration",
+    usage: [
+      "devflare doctor [--config <path>]"
+    ],
+    description: [
+      "Checks for a loadable devflare config, package.json, TypeScript config, Vite integration, and generated Wrangler artifacts.",
+      "Useful when a project feels cursed but not cursed enough to throw a clear error yet."
+    ],
+    options: [
+      entry("--config <path>", "Check a specific config path instead of the default resolution path")
+    ],
+    examples: [
+      entry("devflare doctor", "Run diagnostics for the current package"),
+      entry("devflare doctor --config apps/docs/devflare.config.ts", "Check a specific config file")
+    ],
+    notes: [
+      "Warnings still return exit code 0; hard failures return exit code 1.",
+      "The command reports whether generated `.devflare` and `.wrangler/deploy` artifacts already exist."
+    ]
+  },
+  {
+    path: ["config"],
+    summary: "Print resolved Devflare or Wrangler config",
+    usage: [
+      "devflare config [print] [--config <path>] [--env <name>] [--format <devflare|wrangler>]"
+    ],
+    description: [
+      "Loads the effective config and prints it as JSON.",
+      "Use `--format wrangler` when you want to inspect the exact Wrangler-compatible config Devflare will emit."
+    ],
+    subcommands: [
+      entry("print", "Print the resolved config (default subcommand)")
+    ],
+    options: [
+      entry("--config <path>", "Use a specific devflare config file"),
+      entry("--env <name>", "Resolve `config.env[name]` before printing"),
+      entry("--format <devflare|wrangler>", "Choose whether to print raw Devflare config or compiled Wrangler JSON")
+    ],
+    examples: [
+      entry("devflare config", "Print the resolved Devflare config as JSON"),
+      entry("devflare config --env preview", "Print the preview environment config"),
+      entry("devflare config print --format wrangler", "Print the compiled Wrangler config JSON")
+    ],
+    notes: [
+      "`print` is the default subcommand, so `devflare config` and `devflare config print` behave the same."
+    ]
+  },
+  {
+    path: ["config", "print"],
+    summary: "Print the resolved config",
+    usage: [
+      "devflare config print [--config <path>] [--env <name>] [--format <devflare|wrangler>]"
+    ],
+    description: [
+      "Equivalent to `devflare config`, but spelled out explicitly when you want the subcommand in scripts or docs."
+    ],
+    options: [
+      entry("--config <path>", "Use a specific devflare config file"),
+      entry("--env <name>", "Resolve `config.env[name]` before printing"),
+      entry("--format <devflare|wrangler>", "Choose Devflare JSON or compiled Wrangler JSON output")
+    ],
+    examples: [
+      entry("devflare config print --format wrangler", "Print the compiled Wrangler config")
+    ]
+  },
+  {
+    path: ["login"],
+    summary: "Authenticate with Cloudflare via Wrangler",
+    usage: [
+      "devflare login [--force]"
+    ],
+    description: [
+      "Uses Wrangler login under the hood, then reports the resolved primary or configured account context."
+    ],
+    options: [
+      entry("--force", "Open Wrangler login even when Devflare already sees an authenticated session")
+    ],
+    examples: [
+      entry("devflare login", "Authenticate only when needed"),
+      entry("devflare login --force", "Re-open Wrangler login even if already authenticated")
+    ],
+    notes: [
+      "If you are already authenticated and omit `--force`, Devflare will reuse the current credentials instead of reopening login."
+    ]
+  },
+  {
+    path: ["help"],
+    summary: "Show command overview or command-specific help",
+    usage: [
+      "devflare help",
+      "devflare help <command> [subcommand]"
+    ],
+    description: [
+      "Prints the root command overview or the detailed help page for a specific command path."
+    ],
+    examples: [
+      entry("devflare help", "Show the root command overview"),
+      entry("devflare help previews", "Show the detailed previews help page"),
+      entry("devflare help previews cleanup", "Show nested help for a preview subcommand when available")
+    ],
+    notes: [
+      "`devflare <command> --help` resolves to the same detailed help page as `devflare help <command>`."
+    ]
+  },
+  {
+    path: ["version"],
+    summary: "Show the installed devflare version",
+    usage: [
+      "devflare version",
+      "devflare --version"
+    ],
+    description: [
+      "Prints the installed package version and exits."
+    ],
+    examples: [
+      entry("devflare version", "Show the installed version"),
+      entry("devflare --version", "Show the installed version using the global flag")
+    ]
+  }
+];
+
+// src/cli/help-pages/pages/misc.ts
+var MISC_HELP_PAGES = [
+  {
+    path: ["worker"],
+    summary: "Rename and manage Worker control-plane operations",
+    usage: [
+      "devflare worker rename <old-name> --to <new-name> [--config <path>] [--account <id>]"
+    ],
+    description: [
+      "Currently, `rename` is the supported worker control-plane operation.",
+      "Devflare renames the remote Worker when needed and updates the matching local config name when it can resolve it safely."
+    ],
+    subcommands: [
+      entry("rename", "Rename a Worker and sync the matching devflare config name")
+    ],
+    options: [
+      entry("--to <new-name>", "New Worker name for the `rename` subcommand"),
+      entry("--config <path>", "Choose the config file to update when multiple configs might match"),
+      entry("--account <id>", "Use a specific Cloudflare account when renaming the remote Worker")
+    ],
+    examples: [
+      entry("devflare worker rename documentation --to devflare-documentation", "Rename a Worker and sync the matching config")
+    ],
+    notes: [
+      "Devflare warns about local service binding and Durable Object references that still point at the old Worker name so you can update them manually if needed."
+    ]
+  },
+  {
+    path: ["worker", "rename"],
+    summary: "Rename a Worker and sync the matching config",
+    usage: [
+      "devflare worker rename <old-name> --to <new-name> [--config <path>] [--account <id>]"
+    ],
+    description: [
+      "Renames the remote Worker when necessary, updates the top-level `name` field in the selected config, and then warns about any remaining local references to the old Worker name."
+    ],
+    arguments: [
+      entry("<old-name>", "Current Worker name"),
+      entry("--to <new-name>", "Required new Worker name")
+    ],
+    options: [
+      entry("--config <path>", "Choose the config file to update when multiple configs may match"),
+      entry("--account <id>", "Use a specific Cloudflare account for the remote rename")
+    ],
+    examples: [
+      entry("devflare worker rename docs --to devflare-docs", "Rename the Worker and sync the selected config")
+    ]
+  },
+  {
+    path: ["tokens"],
+    summary: "Manage Devflare-managed Cloudflare API tokens",
+    usage: [
+      "devflare tokens <bootstrap-token> --list [--account <id>]",
+      "devflare tokens <bootstrap-token> --new [name] [--account <id>] [--all-flags]",
+      "devflare tokens <bootstrap-token> --roll [name] [--account <id>]",
+      "devflare tokens <bootstrap-token> --delete [name] [--account <id>]",
+      "devflare tokens <bootstrap-token> --delete-all [--account <id>]"
+    ],
+    description: [
+      "Creates, lists, rolls, and deletes Devflare-managed account-owned API tokens using a bootstrap token that already has token-management permissions.",
+      "Token names are normalized to the `devflare-` prefix automatically."
+    ],
+    arguments: [
+      entry("<bootstrap-token>", "Account-owned bootstrap token with Cloudflare API token-management permissions")
+    ],
+    options: [
+      entry("--list", "List Devflare-managed account-owned tokens"),
+      entry("--new [name]", "Create a Devflare-managed account-owned token"),
+      entry("--roll [name]", "Roll a Devflare-managed token secret"),
+      entry("--delete [name]", "Delete a Devflare-managed token by name"),
+      entry("--delete-all", "Delete every Devflare-managed token in the selected account"),
+      entry("--account <id>", "Use a specific Cloudflare account"),
+      entry("--all-flags", "With `--new`, include every reusable account-scoped permission group")
+    ],
+    examples: [
+      entry("devflare tokens $BOOTSTRAP --list", "List managed tokens"),
+      entry("devflare tokens $BOOTSTRAP --new preview", "Create a managed token named `devflare-preview`"),
+      entry("devflare tokens $BOOTSTRAP --roll preview", "Roll the secret for `devflare-preview`"),
+      entry("devflare tokens $BOOTSTRAP --delete-all", "Delete every Devflare-managed token for the selected account")
+    ],
+    notes: [
+      "Cloudflare only returns token secrets once for create and roll operations, so store them immediately."
+    ]
+  },
+  {
+    path: ["ai"],
+    summary: "Show Workers AI pricing information",
+    usage: [
+      "devflare ai"
+    ],
+    description: [
+      "Prints the built-in Workers AI pricing reference bundled with Devflare."
+    ],
+    examples: [
+      entry("devflare ai", "Print the bundled Workers AI pricing reference")
+    ],
+    notes: [
+      "This command does not currently query live account state; it prints the pricing table bundled with the current Devflare build."
+    ]
+  },
+  {
+    path: ["remote"],
+    summary: "Manage remote test mode for paid Cloudflare features",
+    usage: [
+      "devflare remote [status]",
+      "devflare remote enable [minutes]",
+      "devflare remote disable"
+    ],
+    description: [
+      "Remote mode enables tests that hit real Cloudflare infrastructure for services such as AI and Vectorize.",
+      "The default action is `status`."
+    ],
+    subcommands: [
+      entry("status", "Show the current effective remote-mode status"),
+      entry("enable [minutes]", "Enable remote mode for a bounded duration (defaults to 30 minutes)"),
+      entry("disable", "Disable remote mode immediately")
+    ],
+    examples: [
+      entry("devflare remote", "Show the current remote-mode status"),
+      entry("devflare remote enable 30", "Enable remote mode for 30 minutes"),
+      entry("devflare remote disable", "Disable remote mode")
+    ],
+    notes: [
+      "Remote tests use real Cloudflare services and may incur costs.",
+      "`DEVFLARE_REMOTE` can keep remote mode active even after you run `disable`."
+    ]
+  },
+  createRemoteSubcommandPage("status", "Show the current effective remote-mode status", [
+    "devflare remote status"
+  ], [
+    "Shows whether remote mode is active, where that state came from, and when it expires if it is time-limited."
+  ], [
+    entry("devflare remote status", "Inspect the current remote-mode status")
+  ], [
+    "`devflare remote` without a subcommand behaves the same way."
+  ]),
+  createRemoteSubcommandPage("enable", "Enable remote test mode", [
+    "devflare remote enable [minutes]"
+  ], [
+    "Enables remote test mode for the given duration, defaulting to 30 minutes when the duration is omitted or invalid."
+  ], [
+    entry("devflare remote enable", "Enable remote mode for the default 30 minutes"),
+    entry("devflare remote enable 90", "Enable remote mode for 90 minutes")
+  ], [
+    "Remote tests can incur real Cloudflare costs, so prefer the shortest useful duration."
+  ]),
+  createRemoteSubcommandPage("disable", "Disable remote test mode", [
+    "devflare remote disable"
+  ], [
+    "Disables the stored remote-mode window immediately."
+  ], [
+    entry("devflare remote disable", "Disable remote mode immediately")
+  ], [
+    "If `DEVFLARE_REMOTE` is still set in the environment, effective remote mode may remain active until you unset it."
+  ])
+];
+
+// src/cli/help-pages/pages/previews.ts
+var PREVIEW_HELP_PAGES = [
+  {
+    path: ["previews"],
+    summary: "Inspect and clean dedicated preview Worker scopes",
+    usage: [
+      "devflare previews [--config <path>] [--env <name>] [--account <id>]",
+      "devflare previews list [--config <path>] [--env <name>] [--account <id>]",
+      "devflare previews bindings [--config <path>] [--env <name>] [--scope <name>] [--account <id>] [--worker <name>]",
+      "devflare previews cleanup [--config <path>] [--env <name>] [--scope <name> | --all] [--account <id>] [--apply]"
+    ],
+    description: [
+      "The default view resolves the current worker family from local config, or scans child `devflare.config.*` files when you run it from a monorepo root, then inspects live Cloudflare Workers and groups dedicated preview Worker names into preview scopes such as `next` or `pr-42`.",
+      "Use `bindings` to inspect preview-scoped resource associations for one scope, or `cleanup` to delete dedicated preview Workers plus preview-only Cloudflare resources for one scope or every live scope Devflare can discover from Worker names."
+    ],
+    subcommands: [
+      entry("list", "List stable workers plus dedicated preview scopes for the current worker family (default)"),
+      entry("bindings", "Inspect resolved bindings/resources and how many deployed workers currently reference them"),
+      entry("cleanup", "Delete preview-only Worker scripts and preview-scoped Cloudflare resources")
+    ],
+    options: [
+      ...PREVIEWS_COMMON_OPTIONS,
+      entry("--config <path>", "Use a specific devflare config file for config-aware preview commands"),
+      entry("--env <name>", "Resolve a non-default `config.env[name]` before config-aware preview commands when your preview bindings live outside `env.preview`"),
+      entry("--scope <name>", "Resolve preview-scoped names for a specific identifier on config-aware preview commands"),
+      entry("--all", "Clean every live preview scope Devflare can discover for the current worker family when used with `cleanup`"),
+      entry("--apply", "Execute cleanup instead of doing a dry run"),
+      entry("--worker <name>", "Override the primary worker name shown in the `bindings` report header")
+    ],
+    examples: [
+      entry("devflare previews", "List preview scopes for the current package"),
+      entry("devflare previews --account <id>", "List preview scopes for every configured package when run from a monorepo root"),
+      entry("devflare previews bindings --scope next", "Inspect the `next` preview scope and its live worker associations"),
+      entry("devflare previews cleanup --scope next --apply", "Delete preview-only resources and dedicated Workers for the `next` scope"),
+      entry("devflare previews cleanup --all --apply", "Delete preview-only resources and dedicated Workers for every live discovered preview scope")
+    ],
+    notes: [
+      "The default `list` view can aggregate every configured package from a monorepo root. `bindings` and `cleanup` still need one configured package, so run them inside that package or pass `--config <path>`.",
+      "`bindings` and `cleanup` default to preview-oriented config resolution already, so `--env preview` is usually redundant unless your project stores preview bindings under a different env key.",
+      "`cleanup` removes preview-only Cloudflare resources for the targeted scope and also deletes dedicated preview-scope Worker scripts when that scope is deployed as its own Worker family. Service bindings, Durable Object bindings, and routes attached only to those dedicated preview Workers disappear with them.",
+      "`cleanup --all` only targets live preview scopes Devflare can discover from Worker names. Use `--scope <name>` when you need to clean one scope explicitly, even if its dedicated preview Workers are already gone.",
+      "Stable shared Workers are never deleted by `cleanup`."
+    ]
+  },
+  createPreviewSubcommandPage("list", "List stable workers and dedicated preview scopes", [
+    "devflare previews [--config <path>] [--env <name>] [--account <id>]",
+    "devflare previews list [--config <path>] [--env <name>] [--account <id>]"
+  ], [
+    "Resolves the current worker family from local config, or scans child `devflare.config.*` files when invoked from a monorepo root, then queries live Cloudflare Workers and groups dedicated preview Worker names into preview scopes."
+  ], [
+    entry("--config <path>", "Use a specific devflare config file"),
+    entry("--env <name>", "Resolve `config.env[name]` before discovering the worker family"),
+    entry("--account <id>", "Use a specific Cloudflare account")
+  ], [
+    entry("devflare previews", "List stable workers and active preview scopes for the current package"),
+    entry("devflare previews --account <id>", "Aggregate stable workers and preview scopes across every configured package in the current workspace root"),
+    entry("devflare previews list --env preview", "List preview scopes using a non-default config environment when needed")
+  ], [
+    "`list` is the default subcommand, so `devflare previews` and `devflare previews list` show the same view.",
+    "When more than one config is discovered, Devflare prints one worker-family block per configured package."
+  ]),
+  createPreviewSubcommandPage("bindings", "Inspect resolved bindings/resources and live worker associations", [
+    "devflare previews bindings [--config <path>] [--env <name>] [--scope <name>] [--account <id>] [--worker <name>]"
+  ], [
+    "Resolves the current config for one preview scope, inspects live worker deployments, and reports how many deployed workers reference each resource or binding target."
+  ], [
+    entry("--config <path>", "Use a specific devflare config file"),
+    entry("--env <name>", "Resolve `config.env[name]` before inspecting bindings"),
+    entry("--scope <name>", "Resolve preview-scoped names for a specific identifier instead of the default `preview` scope"),
+    entry("--account <id>", "Use a specific Cloudflare account"),
+    entry("--worker <name>", "Override the primary worker name shown in the report header")
+  ], [
+    entry("devflare previews bindings --scope next", "Inspect preview-scoped bindings for the `next` scope"),
+    entry("devflare previews bindings", "Inspect preview-scoped bindings for the default `preview` scope")
+  ], [
+    "This command is read-only; it does not delete Workers or resources.",
+    "Omit `--env preview` unless your project stores preview bindings under a different env key."
+  ]),
+  createPreviewSubcommandPage("cleanup", "Delete preview-only Worker scripts and preview-scoped Cloudflare resources", [
+    "devflare previews cleanup [--config <path>] [--env <name>] [--scope <name> | --all] [--account <id>] [--apply]"
+  ], [
+    "Resolves preview-scoped resource names from the current config, deletes dedicated preview Worker scripts for the targeted scope when they exist, and removes matching preview-only Cloudflare resources from the selected account. Preview-only service bindings, Durable Object bindings, and routes attached exclusively to those dedicated Workers disappear with them.",
+    "Use `--scope <name>` for one preview scope or `--all` to iterate every live preview scope Devflare can discover for the current worker family."
+  ], [
+    entry("--config <path>", "Use a specific devflare config file"),
+    entry("--env <name>", "Resolve a non-default `config.env[name]` before cleanup when your preview bindings live outside `env.preview`"),
+    entry("--scope <name>", "Clean one preview scope instead of the default `preview` scope"),
+    entry("--all", "Clean every live preview scope Devflare can discover for the current worker family"),
+    entry("--account <id>", "Use a specific Cloudflare account"),
+    entry("--apply", "Apply the cleanup instead of doing a dry run")
+  ], [
+    entry("devflare previews cleanup --scope next", "Show which dedicated Workers and preview-only resources belong to the `next` scope"),
+    entry("devflare previews cleanup --all", "Show the cleanup plan for every live discovered preview scope"),
+    entry("devflare previews cleanup --all --apply", "Delete dedicated preview Workers and preview-only resources for every live discovered preview scope")
+  ], [
+    "Dedicated preview Worker scripts are candidates only when their names resolve to the targeted preview scope. Stable shared Workers are never deleted.",
+    "Without `--scope`, the command defaults to the `preview` scope. Use `--all` when you want every live preview scope Devflare can discover instead of just that default.",
+    "Deleting dedicated preview Worker scripts removes preview-only service bindings, Durable Object bindings, and routes owned solely by those Workers.",
+    "Omit `--env preview` unless your config stores preview bindings under a different env key.",
+    "Analytics Engine datasets and Browser Rendering bindings are intentionally reported as warnings instead of deleted resources."
+  ])
+];
+
+// src/cli/help-pages/pages/productions.ts
+var PRODUCTION_HELP_PAGES = [
+  {
+    path: ["productions"],
+    summary: "Inspect and manage live production Workers and deployments",
+    usage: [
+      "devflare productions [--config <path>] [--env <name>] [--account <id>] [--worker <name>]",
+      "devflare productions versions [--config <path>] [--env <name>] [--account <id>] [--worker <name>]",
+      "devflare productions rollback [--config <path>] [--account <id>] [--worker <name>] [--version-id <id>] [--message <text>] [--apply]",
+      "devflare productions delete [--config <path>] [--account <id>] [--worker <name>] [--apply]"
+    ],
+    description: [
+      "The default view inspects live Cloudflare production deployment state for locally configured Workers, or for one explicitly selected Worker.",
+      "Other subcommands list recent production versions or mutate a single Worker by rolling back or deleting its live production script."
+    ],
+    subcommands: [
+      entry("list", "List live production Workers and their active deployments (default)"),
+      entry("versions", "Show recent stored production versions and which one is currently active"),
+      entry("rollback", "Roll a Worker back to the previous or specified production version"),
+      entry("delete", "Delete a live production Worker script")
+    ],
+    options: [
+      entry("--config <path>", "Use a specific devflare config file or scan the current tree when omitted"),
+      entry("--env <name>", "Resolve `config.env[name]` while discovering related production Workers (defaults to `production`)"),
+      entry("--account <id>", "Use a specific Cloudflare account"),
+      entry("--worker <name>", "Target a specific Worker instead of the locally configured set"),
+      entry("--version <id>", "Version selector shortcut for `rollback` (same as --version-id)"),
+      entry("--version-id <id>", "Target a specific production version when rolling back"),
+      entry("--message <text>", "Attach a rollback message when using `rollback`"),
+      entry("--apply", "Execute rollback or delete instead of doing a dry run")
+    ],
+    examples: [
+      entry("devflare productions", "Inspect active production deployments for the current package or monorepo tree"),
+      entry("devflare productions versions", "Show recent production versions for the resolved Workers"),
+      entry("devflare productions rollback --worker my-worker --apply", "Roll `my-worker` back to the previous production version"),
+      entry("devflare productions rollback --worker my-worker --version-id 1234abcd-... --apply", "Roll `my-worker` back to a specific production version"),
+      entry("devflare productions delete --worker my-worker --apply", "Delete the live production Worker script for `my-worker`")
+    ],
+    notes: [
+      "`productions` reads live Cloudflare control-plane state. It does not depend on the Devflare preview registry database.",
+      "`rollback` uses Wrangler under the hood because Cloudflare exposes production rollback through the Wrangler deployment flow.",
+      "`delete` removes the Worker script only. Review KV, D1, R2, queues, and other account resources separately before cleaning them up."
+    ]
+  },
+  createProductionsSubcommandPage("list", "List live production Workers and their active deployments", [
+    "devflare productions [--config <path>] [--env <name>] [--account <id>] [--worker <name>]"
+  ], [
+    "Inspects live Cloudflare production deployment state for locally configured Workers, or for one explicitly selected Worker when `--worker` is provided."
+  ], [
+    entry("--config <path>", "Use a specific devflare config file"),
+    entry("--env <name>", "Resolve `config.env[name]` while discovering related production Workers (defaults to `production`)"),
+    entry("--account <id>", "Use a specific Cloudflare account"),
+    entry("--worker <name>", "Target a specific Worker instead of the locally configured set")
+  ], [
+    entry("devflare productions", "Inspect the current package or monorepo production Workers"),
+    entry("devflare productions --worker my-worker", "Inspect one live production Worker directly")
+  ], [
+    "This view is read-only and is backed by live Cloudflare production deployment data."
+  ]),
+  createProductionsSubcommandPage("versions", "Show recent stored production versions and the current active version", [
+    "devflare productions versions [--config <path>] [--env <name>] [--account <id>] [--worker <name>]"
+  ], [
+    "Lists recent stored production versions for the selected Worker set and marks the version currently active in the latest production deployment."
+  ], [
+    entry("--config <path>", "Use a specific devflare config file"),
+    entry("--env <name>", "Resolve `config.env[name]` while discovering related production Workers (defaults to `production`)"),
+    entry("--account <id>", "Use a specific Cloudflare account"),
+    entry("--worker <name>", "Target a specific Worker instead of the locally configured set")
+  ], [
+    entry("devflare productions versions", "Show recent stored production versions for the resolved Workers"),
+    entry("devflare productions versions --worker my-worker", "Show recent stored production versions for `my-worker`")
+  ]),
+  createProductionsSubcommandPage("rollback", "Roll a Worker back to the previous or specified production version", [
+    "devflare productions rollback [--config <path>] [--account <id>] [--worker <name>] [--version-id <id>] [--message <text>] [--apply]"
+  ], [
+    "Uses Wrangler rollback to create a fresh production deployment that points at the previous or explicitly selected version."
+  ], [
+    entry("--config <path>", "Use a specific devflare config file"),
+    entry("--account <id>", "Use a specific Cloudflare account"),
+    entry("--worker <name>", "Worker to roll back (required unless the current package resolves to exactly one primary Worker)"),
+    entry("--version <id>", "Version selector shortcut for `rollback` (same as --version-id)"),
+    entry("--version-id <id>", "Roll back to a specific production version instead of the previous one"),
+    entry("--message <text>", "Attach an explicit rollback message"),
+    entry("--apply", "Apply the rollback instead of doing a dry run")
+  ], [
+    entry("devflare productions rollback --worker my-worker", "Preview a rollback for `my-worker`"),
+    entry("devflare productions rollback --worker my-worker --apply", "Roll `my-worker` back to the previous production version"),
+    entry("devflare productions rollback --worker my-worker --version-id 1234abcd-... --apply", "Roll `my-worker` back to a specific production version")
+  ], [
+    "Without `--apply`, this command is a dry run."
+  ]),
+  createProductionsSubcommandPage("delete", "Delete a live production Worker script", [
+    "devflare productions delete [--config <path>] [--account <id>] [--worker <name>] [--apply]"
+  ], [
+    "Deletes the selected live production Worker script from Cloudflare. This does not automatically remove independent account resources such as KV namespaces or D1 databases."
+  ], [
+    entry("--config <path>", "Use a specific devflare config file"),
+    entry("--account <id>", "Use a specific Cloudflare account"),
+    entry("--worker <name>", "Worker to delete (required unless the current package resolves to exactly one primary Worker)"),
+    entry("--apply", "Apply the deletion instead of doing a dry run")
+  ], [
+    entry("devflare productions delete --worker my-worker", "Preview deletion of `my-worker`"),
+    entry("devflare productions delete --worker my-worker --apply", "Delete the live production Worker script for `my-worker`")
+  ], [
+    "Without `--apply`, this command is a dry run.",
+    "Deleting the Worker script does not clean up shared Cloudflare account resources automatically."
+  ])
+];
+
+// src/cli/help-pages/pages/index.ts
+var HELP_PAGES = [
+  ...CORE_HELP_PAGES,
+  ...ACCOUNT_HELP_PAGES,
+  ...PREVIEW_HELP_PAGES,
+  ...PRODUCTION_HELP_PAGES,
+  ...MISC_HELP_PAGES
+];
+
+// src/cli/help.ts
+var HELP_PAGE_MAP = createHelpPageMap(HELP_PAGES);
+function renderHelp(path, options = {}) {
+  const page = resolveHelpPage(path, HELP_PAGE_MAP);
+  if (!page) {
+    return;
+  }
+  const themes = createThemes(options);
+  return {
+    styled: renderHelpPage(page, themes.styled),
+    plain: renderHelpPage(page, themes.plain),
+    path: page.path
+  };
+}
+
+// src/cli/workspace-build-guard.ts
+import { readdir, readFile, stat } from "node:fs/promises";
+import { dirname, join } from "pathe";
+import { fileURLToPath } from "node:url";
+function isTruthyEnvFlag(value) {
+  const normalized = value?.trim().toLowerCase();
+  return normalized !== undefined && ["1", "true", "yes", "on"].includes(normalized);
+}
+function isCiEnvironment(env) {
+  return isTruthyEnvFlag(env.CI) || isTruthyEnvFlag(env.GITHUB_ACTIONS);
+}
+async function pathExists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function readPackageName(packageRoot) {
+  try {
+    const packageJson = JSON.parse(await readFile(join(packageRoot, "package.json"), "utf8"));
+    return typeof packageJson.name === "string" ? packageJson.name : undefined;
+  } catch {
+    return;
+  }
+}
+async function findLocalDevflarePackageRoot(startDirectory) {
+  let currentDirectory = startDirectory;
+  while (true) {
+    if (await pathExists(join(currentDirectory, "package.json"))) {
+      const packageName = await readPackageName(currentDirectory);
+      if (packageName === "devflare") {
+        return currentDirectory;
+      }
+    }
+    const parentDirectory = dirname(currentDirectory);
+    if (parentDirectory === currentDirectory) {
+      return;
+    }
+    currentDirectory = parentDirectory;
+  }
+}
+async function getLatestModifiedTime(path) {
+  if (!await pathExists(path)) {
+    return;
+  }
+  const entry2 = await stat(path);
+  if (entry2.isFile()) {
+    return entry2.mtimeMs;
+  }
+  if (!entry2.isDirectory()) {
+    return;
+  }
+  let newestModifiedTime = 0;
+  const children = await readdir(path, { withFileTypes: true });
+  for (const child of children) {
+    if (child.name === "node_modules" || child.name === ".turbo") {
+      continue;
+    }
+    const childModifiedTime = await getLatestModifiedTime(join(path, child.name));
+    if (typeof childModifiedTime === "number" && childModifiedTime > newestModifiedTime) {
+      newestModifiedTime = childModifiedTime;
+    }
+  }
+  return newestModifiedTime > 0 ? newestModifiedTime : entry2.mtimeMs;
+}
+async function getLocalWorkspaceBuildStatus(options = {}) {
+  const packageRoot = options.packageRoot ?? await findLocalDevflarePackageRoot(dirname(fileURLToPath(import.meta.url)));
+  if (!packageRoot) {
+    return {
+      state: "not-applicable"
+    };
+  }
+  const sourceDirectory = join(packageRoot, "src");
+  if (!await pathExists(sourceDirectory)) {
+    return {
+      state: "not-applicable",
+      packageRoot
+    };
+  }
+  const distDirectory = join(packageRoot, "dist");
+  if (!await pathExists(distDirectory)) {
+    const sourceNewestAt2 = await getLatestModifiedTime(sourceDirectory);
+    return {
+      state: "missing-dist",
+      packageRoot,
+      ...typeof sourceNewestAt2 === "number" ? { sourceNewestAt: new Date(sourceNewestAt2) } : {}
+    };
+  }
+  const [sourceNewestAt, distNewestAt] = await Promise.all([
+    getLatestModifiedTime(sourceDirectory),
+    getLatestModifiedTime(distDirectory)
+  ]);
+  if (typeof sourceNewestAt !== "number" || typeof distNewestAt !== "number") {
+    return {
+      state: "not-applicable",
+      packageRoot
+    };
+  }
+  return {
+    state: sourceNewestAt > distNewestAt ? "stale" : "fresh",
+    packageRoot,
+    sourceNewestAt: new Date(sourceNewestAt),
+    distNewestAt: new Date(distNewestAt)
+  };
+}
+async function getLocalWorkspaceBuildGuardMessage(command, options = {}) {
+  if (!["build", "deploy", "types"].includes(command)) {
+    return;
+  }
+  const env = options.env ?? process.env;
+  if (isTruthyEnvFlag(env.DEVFLARE_SKIP_WORKSPACE_BUILD_GUARD)) {
+    return;
+  }
+  if (isCiEnvironment(env)) {
+    return;
+  }
+  const status = await getLocalWorkspaceBuildStatus({
+    packageRoot: options.packageRoot
+  });
+  if (status.state === "fresh" || status.state === "not-applicable") {
+    return;
+  }
+  const timestampSummary = status.sourceNewestAt ? ` Latest source change: ${status.sourceNewestAt.toISOString()}.` : "";
+  const distTimestampSummary = status.distNewestAt ? ` Latest dist build: ${status.distNewestAt.toISOString()}.` : "";
+  if (status.state === "missing-dist") {
+    return `Local Devflare workspace exports are missing. Running \`devflare ${command}\` from this repository can mix the live CLI source with missing runtime exports. Run \`bun run --cwd packages/devflare build\` first, or set DEVFLARE_SKIP_WORKSPACE_BUILD_GUARD=true to bypass this guard.${timestampSummary}`;
+  }
+  return `Local Devflare workspace exports are stale. Running \`devflare ${command}\` from this repository can mix newer CLI source with older \`devflare/runtime\` exports.${timestampSummary}${distTimestampSummary} Run \`bun run --cwd packages/devflare build\` first, or set DEVFLARE_SKIP_WORKSPACE_BUILD_GUARD=true to bypass this guard.`;
+}
+
+// src/cli/index.ts
+function parseArgs(argv) {
+  const args = [];
+  const options = {};
+  let command;
+  let unknownCommand;
+  let i = 0;
+  const shortOptionAliases = {
+    h: "help",
+    v: "version"
+  };
+  while (i < argv.length) {
+    const arg = argv[i];
+    if (arg.startsWith("-") && !/^-\d/.test(arg)) {
+      const isLongFlag = arg.startsWith("--");
+      const rawKey = isLongFlag ? arg.slice(2) : arg.slice(1);
+      const key = isLongFlag ? rawKey : shortOptionAliases[rawKey] ?? rawKey;
+      const nextArg = argv[i + 1];
+      if (nextArg && !nextArg.startsWith("-")) {
+        options[key] = nextArg;
+        i += 2;
+      } else {
+        options[key] = true;
+        i++;
+      }
+    } else if (!command) {
+      if (COMMANDS.includes(arg)) {
+        command = arg;
+      } else {
+        unknownCommand = arg;
+        break;
+      }
+      i++;
+    } else {
+      args.push(arg);
+      i++;
+    }
+  }
+  if (unknownCommand) {
+    return {
+      command: "help",
+      args: [],
+      options,
+      unknownCommand
+    };
+  }
+  if (!command) {
+    if (options.version === true) {
+      return { command: "version", args: [], options };
+    }
+    return { command: "help", args: [], options };
+  }
+  return { command, args, options, unknownCommand };
+}
+async function runCli(argv, options = {}) {
+  const logger = createConsola({
+    level: options.silent ? -999 : 3,
+    formatOptions: {
+      date: false
+    }
+  });
+  const parsed = parseArgs(argv);
+  const theme = createCliTheme(parsed.options);
+  if (parsed.unknownCommand) {
+    logger.error(`Unknown command: ${parsed.unknownCommand}`);
+    logLine(logger, dim("Run `devflare --help` for available commands", theme));
+    return { exitCode: 1 };
+  }
+  const wantsHelp = parsed.options.help === true;
+  const helpPath = parsed.command === "help" ? parsed.args : wantsHelp ? [parsed.command, ...parsed.args] : undefined;
+  if (helpPath) {
+    const renderedHelp = renderHelp(helpPath, parsed.options);
+    if (!renderedHelp) {
+      const requestedTopic = helpPath.join(" ");
+      logger.error(`Unknown help topic: ${requestedTopic}`);
+      logLine(logger, dim("Run `devflare --help` for available commands", theme));
+      return { exitCode: 1 };
+    }
+    logLine(logger, renderedHelp.styled);
+    return { exitCode: 0, output: renderedHelp.plain };
+  }
+  const workspaceBuildGuardMessage = await getLocalWorkspaceBuildGuardMessage(parsed.command);
+  if (workspaceBuildGuardMessage) {
+    logger.error(workspaceBuildGuardMessage);
+    return { exitCode: 1 };
+  }
+  switch (parsed.command) {
+    case "version":
+      const version = await getPackageVersion();
+      logLine(logger, `${cyanBold("devflare", theme)} ${dim(`v${version}`, theme)}`);
+      return { exitCode: 0, output: version };
+    case "init":
+      return runInit(parsed, logger, options);
+    case "dev":
+      return runDev(parsed, logger, options);
+    case "build":
+      return runBuild(parsed, logger, options);
+    case "deploy":
+      return runDeploy(parsed, logger, options);
+    case "types":
+      return runTypes(parsed, logger, options);
+    case "doctor":
+      return runDoctor(parsed, logger, options);
+    case "config":
+      return runConfig(parsed, logger, options);
+    case "account":
+      return runAccount(parsed, logger, options);
+    case "login":
+      return runLogin(parsed, logger, options);
+    case "previews":
+      return runPreviews(parsed, logger, options);
+    case "productions":
+      return runProductions(parsed, logger, options);
+    case "worker":
+      return runWorker(parsed, logger, options);
+    case "tokens":
+      return runToken(parsed, logger, options);
+    case "secrets":
+      return runSecrets(parsed, logger, options);
+    case "ai":
+      return runAI();
+    case "remote":
+      return runRemote(parsed, logger, options);
+    default:
+      logger.error(`Unknown command: ${parsed.command}`);
+      return { exitCode: 1 };
+  }
+}
+async function runInit(parsed, logger, options) {
+  const { runInitCommand } = await import("./init-cwpergap.js");
+  return runInitCommand(parsed, logger, options);
+}
+async function runDev(parsed, logger, options) {
+  const { runDevCommand } = await import("./dev-75acm2xj.js");
+  return runDevCommand(parsed, logger, options);
+}
+async function runBuild(parsed, logger, options) {
+  const { runBuildCommand } = await import("./build-yzkdqexs.js");
+  return runBuildCommand(parsed, logger, options);
+}
+async function runDeploy(parsed, logger, options) {
+  const { runDeployCommand } = await import("./deploy-2fzj68kq.js");
+  return runDeployCommand(parsed, logger, {
+    ...options,
+    requireExplicitDeployTarget: true
+  });
+}
+async function runTypes(parsed, logger, options) {
+  const { runTypesCommand } = await import("./types-7jkbm95a.js");
+  return runTypesCommand(parsed, logger, options);
+}
+async function runDoctor(parsed, logger, options) {
+  const { runDoctorCommand } = await import("./doctor-5g73w40j.js");
+  return runDoctorCommand(parsed, logger, options);
+}
+async function runConfig(parsed, logger, options) {
+  const { runConfigCommand } = await import("./config-7cf004ag.js");
+  return runConfigCommand(parsed, logger, options);
+}
+async function runAccount(parsed, logger, options) {
+  const { runAccountCommand } = await import("./account-b2ag1esh.js");
+  return runAccountCommand(parsed, logger, options);
+}
+async function runLogin(parsed, logger, options) {
+  const { runLoginCommand } = await import("./login-fe0brfcr.js");
+  return runLoginCommand(parsed, logger, options);
+}
+async function runPreviews(parsed, logger, options) {
+  const { runPreviewsCommand } = await import("./previews-3w4pxqby.js");
+  return runPreviewsCommand(parsed, logger, options);
+}
+async function runProductions(parsed, logger, options) {
+  const { runProductionsCommand } = await import("./productions-bn2q31my.js");
+  return runProductionsCommand(parsed, logger, options);
+}
+async function runWorker(parsed, logger, options) {
+  const { runWorkerCommand } = await import("./worker-yw3atfb1.js");
+  return runWorkerCommand(parsed, logger, options);
+}
+async function runToken(parsed, logger, options) {
+  const { runTokenCommand } = await import("./token-a2b38w0z.js");
+  return runTokenCommand(parsed, logger, options);
+}
+async function runSecrets(parsed, logger, options) {
+  const { runSecretsCommand } = await import("./secrets-b2ww34ta.js");
+  return runSecretsCommand(parsed, logger, options);
+}
+async function runAI() {
+  const { runAICommand } = await import("./ai-dx4fr9jh.js");
+  return runAICommand();
+}
+async function runRemote(parsed, logger, options) {
+  const { runRemoteCommand } = await import("./remote-q59qk463.js");
+  return runRemoteCommand(parsed, logger, options);
+}
+
+export { parseArgs, runCli };