percher 0.2.11 → 0.3.0

package/dist/src/index.js

@@ -1,799 +1,27 @@
 import * as core from "@percher/core";
 import cac from "cac";
-import pc from "picocolors";
+import { SilentExitError } from "./cli-utils";
+import { registerAccountCommands } from "./commands/account";
+import { registerAppsCommands } from "./commands/apps";
+import { registerAuthCommands } from "./commands/auth";
+import { registerDataCommands } from "./commands/data";
+import { registerDeploysCommands } from "./commands/deploys";
+import { registerEnvCommands } from "./commands/env";
+import { registerGithubCommands } from "./commands/github";
 import { createCliContext } from "./context";
 import { renderError } from "./output";
-import { showTelemetryNotice, trackEvent } from "./telemetry";
+import { VERSION, showTelemetryNotice, trackEvent } from "./telemetry";
 import { checkForUpdates } from "./version-check";
-const VERSION = "0.2.11";
-/** Thrown after output is already printed, to signal non-zero exit without an error message. */
-class SilentExitError {
-    exitCode;
-    constructor(exitCode = 1) {
-        this.exitCode = exitCode;
-    }
-}
-function parseKeyValue(pairs) {
-    const out = {};
-    for (const p of pairs) {
-        const idx = p.indexOf("=");
-        if (idx === -1)
-            throw new Error(`Expected KEY=VALUE, got "${p}"`);
-        out[p.slice(0, idx)] = p.slice(idx + 1);
-    }
-    return out;
-}
-async function writeLine(ctx, line) {
-    const writer = ctx.stdout.getWriter();
-    try {
-        await writer.write(new TextEncoder().encode(`${line}\n`));
-    }
-    finally {
-        writer.releaseLock();
-    }
-}
-/** ISO timestamp → "YYYY-MM-DD HH:MM:SS" in UTC for stable, sortable output. */
-function formatDeployTimestamp(iso) {
-    const d = new Date(iso);
-    if (Number.isNaN(d.getTime()))
-        return iso;
-    const pad = (n) => n.toString().padStart(2, "0");
-    return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())} ${pad(d.getUTCHours())}:${pad(d.getUTCMinutes())}:${pad(d.getUTCSeconds())}`;
-}
-function formatStatus(status) {
-    if (status === "live")
-        return pc.green(status);
-    if (status === "failed")
-        return pc.red(status);
-    return pc.yellow(status);
-}
-/**
- * Pick the first non-flag positional in `argv` after index `from`. Used by
- * the manual subcommand dispatch (cac doesn't natively support multi-token
- * command names) to find the user's app/id argument regardless of whether
- * flags came before or after it.
- *
- * `valueFlags` lists flags that consume the next argv token (e.g. `--app
- * my-app`). Without it, the walker would grab "my-app" as the positional
- * even though it's the value bound to `--app`. `--flag=value` is one
- * token and never causes that ambiguity. Boolean flags like `--reveal`
- * or `--latest-failed` don't need to be listed.
- */
-function firstNonFlagAfter(argv, from, valueFlags = new Set()) {
-    let i = from + 1;
-    while (i < argv.length) {
-        const t = argv[i];
-        if (!t) {
-            i += 1;
-            continue;
-        }
-        if (t.startsWith("-")) {
-            // For `--flag=value` the value is part of the token; skip just one.
-            // For `--flag value` where the flag is in our value-flag set, skip
-            // both the flag and the next token.
-            if (!t.includes("=") && valueFlags.has(t)) {
-                i += 2;
-            }
-            else {
-                i += 1;
-            }
-            continue;
-        }
-        return t;
-    }
-    return undefined;
-}
-/**
- * Print the result of a superuser rotation. The password is only present
- * when the user explicitly opted in with `--reveal`; without it the CLI
- * confirms the rotation but doesn't print any credential.
- */
-async function printSuperuserResetResult(ctx, result) {
-    await writeLine(ctx, `${pc.green("✓")} ${result.message}`);
-    if (result.password) {
-        await writeLine(ctx, "");
-        await writeLine(ctx, `  ${pc.bold("Email:")}    ${result.email}`);
-        await writeLine(ctx, `  ${pc.bold("Password:")} ${result.password}`);
-        await writeLine(ctx, "");
-        await writeLine(ctx, pc.yellow("  ⚠  This password is shown only once. Save it now if you need it."));
-    }
-}
-/**
- * Shared body of the `deploys inspect [id]` command. Extracted so the
- * subcommand-dispatch path in the parent `deploys` action can reuse it
- * without duplicating output formatting.
- */
-async function runDeploysInspect(ctx, input) {
-    const result = await core.deploysInspect(ctx, input);
-    const { deploy, buildLog } = result;
-    await writeLine(ctx, `${pc.bold("Deploy:")}    ${deploy.id}`);
-    await writeLine(ctx, `${pc.bold("Status:")}    ${formatStatus(deploy.status)}`);
-    if (deploy.type) {
-        await writeLine(ctx, `${pc.bold("Type:")}      ${deploy.type}`);
-    }
-    await writeLine(ctx, `${pc.bold("Created:")}   ${formatDeployTimestamp(deploy.createdAt)}`);
-    if (deploy.url) {
-        await writeLine(ctx, `${pc.bold("URL:")}       ${deploy.url}`);
-    }
-    if (deploy.previewUrl) {
-        await writeLine(ctx, `${pc.bold("Preview:")}   ${deploy.previewUrl}`);
-    }
-    if (deploy.errorMessage) {
-        await writeLine(ctx, "");
-        await writeLine(ctx, pc.bold(pc.red("Error:")));
-        for (const line of deploy.errorMessage.split("\n")) {
-            await writeLine(ctx, `  ${line}`);
-        }
-    }
-    if (buildLog) {
-        await writeLine(ctx, "");
-        const lines = buildLog.split("\n");
-        const tail = lines.slice(-200);
-        const header = lines.length > tail.length
-            ? `${pc.bold("Build log")} ${pc.dim(`(last 200 of ${lines.length} lines)`)}`
-            : pc.bold("Build log");
-        await writeLine(ctx, header);
-        for (const line of tail) {
-            await writeLine(ctx, `  ${line}`);
-        }
-    }
-    else if (deploy.status === "failed" || deploy.status === "live") {
-        await writeLine(ctx, "");
-        await writeLine(ctx, pc.dim("(no build log available for this deploy)"));
-    }
-}
 export async function run(argv, ctxOverride) {
     const cli = cac("percher");
-    cli
-        .command("init", "Generate percher.toml for this project")
-        .option("--force", "Overwrite existing percher.toml")
-        .option("--name <name>", "Override detected app name")
-        .action(async (options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.init(ctx, { force: options.force, name: options.name });
-        await writeLine(ctx, `${pc.green("✓")} wrote ${result.path}`);
-    });
-    cli
-        .command("publish", "Publish this project to Percher (recommended deploy command)")
-        .option("--force", "Skip size warnings")
-        .option("--preview", "Deploy as preview (does not replace the live version)")
-        .option("-m, --message <msg>", "Deploy note (visible in deploy history)")
-        .option("--dry-run", "Show what would be deployed (file count, bytes) without uploading")
-        .action(async (options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.publish(ctx, {
-            force: options.force,
-            preview: options.preview,
-            message: options.message,
-            dryRun: options.dryRun,
-        });
-        if (result.status === "dry_run") {
-            await writeLine(ctx, `Dry run: ${result.fileCount} files, ${(result.bytes / 1024).toFixed(1)} KB`);
-            return;
-        }
-        if (result.status === "needs_login") {
-            if (result.loginUrl) {
-                await writeLine(ctx, `${pc.yellow("!")} Not logged in. Authorize here:`);
-                await writeLine(ctx, `  ${result.loginUrl}`);
-            }
-            else {
-                await writeLine(ctx, `${pc.red("✗")} Not logged in. Run: percher login`);
-            }
-            throw new SilentExitError();
-        }
-        if (result.status === "failed") {
-            await writeLine(ctx, `${pc.red("✗")} ${result.error?.title ?? "Deployment failed"}`);
-            if (result.error?.explanation) {
-                await writeLine(ctx, `  ${result.error.explanation}`);
-            }
-            if (result.error?.rawErrorMessage) {
-                // The classifier turns "Worker /deployer/run failed (502): upstream
-                // timeout after 30s" into a friendly explanation; keep the raw
-                // string visible too because it carries the load-bearing details
-                // (status code, hostname) support will ask for.
-                await writeLine(ctx, `  ${pc.dim(`Details: ${result.error.rawErrorMessage}`)}`);
-            }
-            if (result.error?.suggestion) {
-                await writeLine(ctx, `  ${pc.dim(result.error.suggestion)}`);
-            }
-            if (result.error?.missingEnvVars && result.error.missingEnvVars.length > 0) {
-                await writeLine(ctx, "");
-                await writeLine(ctx, pc.bold("Missing env vars:"));
-                for (const k of result.error.missingEnvVars) {
-                    await writeLine(ctx, `  ${k}`);
-                }
-                await writeLine(ctx, pc.dim(`  Set with: percher env set ${result.error.missingEnvVars[0]}=...`));
-            }
-            if (result.error?.relevantFiles && result.error.relevantFiles.length > 0) {
-                await writeLine(ctx, "");
-                await writeLine(ctx, pc.bold("Check these files:"));
-                for (const f of result.error.relevantFiles) {
-                    await writeLine(ctx, `  ${f}`);
-                }
-            }
-            if (result.error?.buildLogTail) {
-                await writeLine(ctx, "");
-                const lines = result.error.buildLogTail.split("\n");
-                await writeLine(ctx, `${pc.bold("Build log")} ${pc.dim(`(last ${lines.length} lines)`)}`);
-                for (const line of lines) {
-                    await writeLine(ctx, `  ${line}`);
-                }
-                if (result.app?.id && result.deployment?.id) {
-                    await writeLine(ctx, "");
-                    await writeLine(ctx, pc.dim(`Full log: percher deploys inspect ${result.deployment.id} --app ${result.app.name}`));
-                }
-            }
-            throw new SilentExitError();
-        }
-        const timing = result.timing ? ` (${result.timing.totalSeconds}s)` : "";
-        await writeLine(ctx, `${pc.green("✓")} Published to ${result.url}${timing}`);
-        if (result.replacedPreview) {
-            await writeLine(ctx, pc.dim("  (replaced previous preview — free plan keeps 1 preview slot per app)"));
-        }
-        // Show QR code for preview deploys
-        if (options.preview && result.url) {
-            try {
-                const qr = await core.qrToTerminal(result.url);
-                await writeLine(ctx, "");
-                await writeLine(ctx, pc.dim("Scan to preview on mobile:"));
-                await writeLine(ctx, qr);
-            }
-            catch {
-                /* QR generation is nice-to-have */
-            }
-        }
-    });
-    cli
-        .command("push", "Package and deploy this project")
-        .option("--dry-run", "Show what would be deployed, don't upload")
-        .option("--force", "Skip size warnings")
-        .option("--preview", "Deploy as preview (does not replace the live version)")
-        .action(async (options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.push(ctx, {
-            dryRun: options.dryRun,
-            force: options.force,
-            preview: options.preview,
-        });
-        if (result.dryRun) {
-            await writeLine(ctx, `Dry run: ${result.fileCount} files, ${(result.bytes / 1024).toFixed(1)} KB`);
-        }
-        else {
-            const url = result.deployment?.previewUrl ?? result.deployment?.url ?? result.app.url;
-            const label = result.deployment?.previewUrl ? "preview live at" : "deployed to";
-            await writeLine(ctx, `${pc.green("✓")} ${label} ${url}`);
-        }
-    });
-    cli
-        .command("logs [app]", "Stream application logs")
-        .option("--tail <n>", "Return the last N lines and exit", { type: [Number] })
-        .option("--no-follow", "Don't stream new lines")
-        .option("--build [deployId]", "Show the BUILD log instead of runtime logs (defaults to latest failed deploy)")
-        .action(async (app, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        // --build routes to the same logic as `deploys inspect`. We default
-        // to latest-failed when no deploy id is given because that's the
-        // common case (debugging the build that just failed).
-        if (options.build !== undefined) {
-            const deployId = typeof options.build === "string" && options.build.length > 0 ? options.build : undefined;
-            const result = await core.deploysInspect(ctx, {
-                app,
-                id: deployId,
-                latestFailed: deployId ? undefined : true,
-            });
-            const { deploy, buildLog } = result;
-            await writeLine(ctx, `${pc.bold("Deploy:")}    ${deploy.id}`);
-            await writeLine(ctx, `${pc.bold("Status:")}    ${formatStatus(deploy.status)}`);
-            await writeLine(ctx, `${pc.bold("Created:")}   ${formatDeployTimestamp(deploy.createdAt)}`);
-            if (deploy.errorMessage) {
-                await writeLine(ctx, "");
-                await writeLine(ctx, pc.bold(pc.red("Error:")));
-                for (const line of deploy.errorMessage.split("\n")) {
-                    await writeLine(ctx, `  ${line}`);
-                }
-            }
-            if (buildLog) {
-                await writeLine(ctx, "");
-                const lines = buildLog.split("\n");
-                const tailN = options.tail ? Number(options.tail) : 200;
-                const tail = lines.slice(-tailN);
-                const header = lines.length > tail.length
-                    ? `${pc.bold("Build log")} ${pc.dim(`(last ${tail.length} of ${lines.length} lines)`)}`
-                    : pc.bold("Build log");
-                await writeLine(ctx, header);
-                for (const line of tail) {
-                    await writeLine(ctx, `  ${line}`);
-                }
-            }
-            else {
-                await writeLine(ctx, pc.dim("(no build log available for this deploy)"));
-            }
-            return;
-        }
-        await core.logs(ctx, {
-            app,
-            tail: options.tail ? Number(options.tail) : undefined,
-            follow: options.follow !== false,
-        });
-    });
-    cli
-        .command("env <action> [...args]", "Manage env vars (set KEY=VALUE | unset KEY | list)")
-        .option("--app <name>", "App name (overrides percher.toml)")
-        .action(async (action, args, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        if (action === "set") {
-            await core.envSet(ctx, { app: options.app, values: parseKeyValue(args) });
-            await writeLine(ctx, `${pc.green("✓")} env vars updated`);
-        }
-        else if (action === "unset") {
-            const key = args[0];
-            if (!key)
-                throw new Error("Expected key to unset");
-            await core.envUnset(ctx, { app: options.app, key });
-            await writeLine(ctx, `${pc.green("✓")} unset ${key}`);
-        }
-        else if (action === "list") {
-            const env = await core.envList(ctx, { app: options.app });
-            for (const [k, v] of Object.entries(env)) {
-                await writeLine(ctx, `${k}=${v}`);
-            }
-        }
-        else {
-            throw new Error(`Unknown env action "${action}". Use set | unset | list.`);
-        }
-    });
-    cli
-        .command("open [app]", "Open the app URL in your browser")
-        .action(async (app) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const url = await core.open(ctx, { app });
-        await writeLine(ctx, url);
-    });
-    cli
-        .command("login", "Authenticate with Percher")
-        .option("--token <token>", "Dev: skip browser, use a token")
-        .option("--api-url <url>", "Override API URL")
-        .action(async (options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        await core.login(ctx, { token: options.token, apiUrl: options.apiUrl });
-    });
-    cli
-        .command("rename <name> [app]", "Rename an app (changes its subdomain)")
-        .action(async (name, app) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.rename(ctx, { app, name });
-        await writeLine(ctx, `${pc.green("✓")} Renamed to ${result.name} — now live at ${result.url}`);
-        await writeLine(ctx, `  Previous name: ${result.previousName} (reserved for 60 days)`);
-        await writeLine(ctx, `  ${pc.dim(`Next rename available in ${result.cooldownDays} days`)}`);
-    });
-    cli
-        .command("versions [app]", "List deployed versions for an app")
-        .action(async (app) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const list = await core.versions(ctx, { app });
-        for (const v of list) {
-            await writeLine(ctx, `${v.sha.slice(0, 10)}  ${v.timestamp}  ${v.message}`);
-        }
-    });
-    cli
-        .command("mcp", "Print the MCP server config for AI assistants (Claude Code, Cursor, Windsurf)")
-        .option("--json", "Output JSON only (paste-ready)")
-        .action(async (options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = core.mcp(ctx, {});
-        if (options.json) {
-            await writeLine(ctx, JSON.stringify(result.config, null, 2));
-            return;
-        }
-        await writeLine(ctx, pc.bold("Percher MCP server"));
-        await writeLine(ctx, pc.dim("Add this entry to your MCP-aware client:"));
-        await writeLine(ctx, "");
-        await writeLine(ctx, JSON.stringify(result.config, null, 2));
-        await writeLine(ctx, "");
-        await writeLine(ctx, pc.bold("Where to paste:"));
-        for (const loc of result.installLocations) {
-            await writeLine(ctx, `  ${loc.client.padEnd(28)} ${pc.dim(loc.path)}`);
-        }
-        await writeLine(ctx, "");
-        await writeLine(ctx, pc.dim("Once installed, your assistant gets percher_publish + 28 other tools."));
-    });
-    cli
-        .command("deploys [app]", "List recent deploys (id, status, created, error) for an app")
-        .option("--limit <n>", "Number of deploys to show (default: 10, max: 100)")
-        // Parent must accept the inspect-subcommand's flags too, since cac
-        // matches `deploys inspect ...` here (see in-action dispatch below)
-        // and rejects unknown options at parse time.
-        .option("--app <name>", "(inspect only) App name (defaults to percher.toml in cwd)")
-        .option("--latest-failed", "(inspect only) Resolve to the most recent failed deploy")
-        .action(async (app, options) => {
-        // Subcommand collision: `percher deploys inspect <id>` would otherwise
-        // hit this handler with app="inspect" because cac matches on first
-        // token only. Dispatch the documented form to the inspect handler.
-        if (app === "inspect") {
-            // Same flag-skip rule as the data reset-superuser dispatch — both
-            // `deploys inspect <id> --latest-failed` and `deploys inspect
-            // --latest-failed` should work. `--app` consumes the next argv
-            // token as its value (e.g. `--app my-app`), so we tell the
-            // walker to skip those pairs and not mistake `my-app` for the
-            // deploy id.
-            const idx = argv.indexOf("inspect");
-            const id = idx >= 0 ? firstNonFlagAfter(argv, idx, new Set(["--app"])) : undefined;
-            const ctx = ctxOverride ?? (await createCliContext());
-            await runDeploysInspect(ctx, {
-                id,
-                // Forward --app + --latest-failed if the user passed them. Their
-                // flag values land in `options` even though we registered them
-                // on the sibling command, because cac merges argv flags onto the
-                // matched command's options.
-                app: options.app,
-                latestFailed: Boolean(options.latestFailed),
-            });
-            return;
-        }
-        const ctx = ctxOverride ?? (await createCliContext());
-        const limit = options.limit ? Number.parseInt(options.limit, 10) : undefined;
-        const list = await core.deploysList(ctx, { app, limit });
-        if (list.length === 0) {
-            await writeLine(ctx, pc.dim("No deploys yet."));
-            return;
-        }
-        await writeLine(ctx, `${pc.bold("ID".padEnd(22))}  ${pc.bold("STATUS".padEnd(10))}  ${pc.bold("CREATED".padEnd(20))}  ${pc.bold("ERROR")}`);
-        for (const d of list) {
-            const id = d.id.padEnd(22);
-            const status = d.status.padEnd(10);
-            const created = formatDeployTimestamp(d.createdAt).padEnd(20);
-            const err = d.errorMessage
-                ? (d.errorMessage.split("\n")[0]?.slice(0, 60) ?? "—")
-                : pc.dim("—");
-            const colored = d.status === "live"
-                ? pc.green(status)
-                : d.status === "failed"
-                    ? pc.red(status)
-                    : pc.yellow(status);
-            await writeLine(ctx, `${pc.dim(id)}  ${colored}  ${pc.dim(created)}  ${err}`);
-        }
-    });
-    cli
-        .command("deploys inspect [id]", "Inspect a deploy: status, error, build log")
-        .option("--app <name>", "App name (defaults to percher.toml in cwd)")
-        .option("--latest-failed", "Resolve to the most recent failed deploy")
-        .action(async (id, options) => {
-        // Reachable only via the in-action dispatch in the parent `deploys`
-        // command above. Kept registered so cac surfaces it in `--help`.
-        const ctx = ctxOverride ?? (await createCliContext());
-        await runDeploysInspect(ctx, { id, app: options.app, latestFailed: options.latestFailed });
-    });
-    cli
-        .command("rollback <sha> [app]", "Roll back to a previous version")
-        .action(async (sha, app) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.rollback(ctx, { app, commitSha: sha });
-        await writeLine(ctx, `${pc.green("✓")} rolled back to ${sha.slice(0, 10)} (status: ${result.status})`);
-    });
-    cli
-        .command("generate", "Generate .env.example and TypeScript types from percher.toml")
-        .action(async () => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.generate(ctx);
-        for (const f of result.files) {
-            await writeLine(ctx, `${pc.green("✓")} ${f}`);
-        }
-    });
-    cli
-        .command("data [app]", "Show app data status and collections")
-        .option("--json", "Output as JSON")
-        .option("--reveal", "(reset-superuser only) also print the plaintext password once")
-        .action(async (app, options) => {
-        // cac matches commands by single first-token equality, so
-        // `percher data reset-superuser <app>` would otherwise hit this
-        // handler with app="reset-superuser" and silently drop the real
-        // app name. Detect the documented subcommand here and dispatch
-        // to the reset-superuser handler instead. The separate
-        // `data reset-superuser [app]` registration below still exists
-        // so `--help` lists the subcommand, but its action body is
-        // unreachable in practice via that route.
-        if (app === "reset-superuser") {
-            // Skip flag tokens when looking for the app name so both orderings
-            // work: `... reset-superuser my-app --reveal` AND `... reset-superuser
-            // --reveal my-app`. cac would handle this if it parsed multi-token
-            // commands natively; since we route manually, we mirror cac's
-            // "first non-flag positional" rule here.
-            const idx = argv.indexOf("reset-superuser");
-            const realApp = idx >= 0 ? firstNonFlagAfter(argv, idx) : undefined;
-            const reveal = argv.includes("--reveal");
-            const ctx = ctxOverride ?? (await createCliContext());
-            const r = await core.resetSuperuser(ctx, { app: realApp, reveal });
-            await printSuperuserResetResult(ctx, r);
-            return;
-        }
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.data(ctx, { app, json: options.json });
-        if (options.json) {
-            await writeLine(ctx, JSON.stringify(result, null, 2));
-        }
-        else {
-            const version = result.version ? `  Version: ${result.version}` : "";
-            await writeLine(ctx, `${pc.bold("Data")}  Mode: ${result.mode}  Status: ${result.status}${version}`);
-            await writeLine(ctx, "");
-            if (result.collections.length > 0) {
-                await writeLine(ctx, pc.bold("Collections"));
-                for (const col of result.collections) {
-                    await writeLine(ctx, `  ${col.name.padEnd(20)} ${pc.dim(col.type)}`);
-                }
-                await writeLine(ctx, "");
-            }
-            await writeLine(ctx, `Collections: ${result.stats.collections}  Records: ${result.stats.totalRecords}`);
-            if (result.adminUrl) {
-                await writeLine(ctx, "");
-                await writeLine(ctx, `Admin: ${result.adminUrl}`);
-            }
-            if (result.warning) {
-                await writeLine(ctx, "");
-                await writeLine(ctx, pc.yellow(`⚠  ${result.warning}`));
-            }
-        }
-    });
-    cli
-        .command("data reset-superuser [app]", "Reset PocketBase superuser and inject new credentials")
-        .option("--reveal", "Also print the plaintext password once (default: hidden)")
-        .action(async (app, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.resetSuperuser(ctx, { app, reveal: options.reveal });
-        await printSuperuserResetResult(ctx, result);
-    });
-    cli
-        .command("dev [app]", "Watch files and deploy on changes")
-        .option("--confirm", "Prompt before each push (default: auto-push)")
-        .action(async (app, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const controller = new AbortController();
-        // Handle Ctrl+C gracefully
-        const onSignal = () => controller.abort();
-        process.on("SIGINT", onSignal);
-        process.on("SIGTERM", onSignal);
-        await writeLine(ctx, pc.bold("Percher Dev"));
-        await writeLine(ctx, "───────────");
-        await writeLine(ctx, "");
-        try {
-            await core.dev(ctx, { app }, {
-                signal: controller.signal,
-                async writeLine(line) {
-                    const timestamp = new Date().toLocaleTimeString("sv-SE", { hour12: false });
-                    await writeLine(ctx, `${pc.dim(`[${timestamp}]`)} ${line}`);
-                },
-                async onFilesChanged(_files) {
-                    if (options.confirm) {
-                        const answer = await ctx.prompt("Push changes? [Y/n]", { default: "y" });
-                        return /^y(es)?$|^$/i.test(answer.trim());
-                    }
-                    return true; // auto-push by default
-                },
-            });
-        }
-        finally {
-            process.removeListener("SIGINT", onSignal);
-            process.removeListener("SIGTERM", onSignal);
-        }
-        await writeLine(ctx, "");
-        await writeLine(ctx, pc.dim("Dev session ended."));
-    });
-    cli
-        .command("doctor [app]", "Check app health and connectivity")
-        .option("--json", "Output as JSON")
-        .action(async (app, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.doctor(ctx, { app, json: options.json });
-        if (options.json) {
-            await writeLine(ctx, JSON.stringify(result, null, 2));
-        }
-        else {
-            await writeLine(ctx, `${pc.bold("Percher Doctor")}`);
-            await writeLine(ctx, "──────────────");
-            await writeLine(ctx, "");
-            for (const check of result.checks) {
-                const icon = check.status === "pass"
-                    ? pc.green("✓")
-                    : check.status === "fail"
-                        ? pc.red("✗")
-                        : check.status === "warn"
-                            ? pc.yellow("!")
-                            : pc.dim("—");
-                await writeLine(ctx, `${icon} ${pc.bold(check.name.padEnd(20))} ${check.message}`);
-            }
-            await writeLine(ctx, "");
-            const summary = `${result.passed}/${result.total} checks passed`;
-            if (result.failed > 0) {
-                await writeLine(ctx, pc.red(summary));
-            }
-            else if (result.warned > 0) {
-                await writeLine(ctx, pc.yellow(summary));
-            }
-            else {
-                await writeLine(ctx, pc.green(summary));
-            }
-        }
-        // Signal non-zero exit for CI/agent use
-        if (result.failed > 0) {
-            throw new SilentExitError();
-        }
-    });
-    cli
-        .command("create [name]", "Create a new app from a template")
-        .option("--template <template>", "Template to use (node, python, static, nextjs, hono, express)")
-        .option("--force", "Overwrite existing files in target directory")
-        .option("--list-templates", "List available templates")
-        .action(async (name, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        if (options.listTemplates) {
-            const templates = core.listTemplates();
-            await writeLine(ctx, pc.bold("Available templates:"));
-            for (const t of templates) {
-                await writeLine(ctx, `  ${t}`);
-            }
-            return;
-        }
-        if (!name) {
-            throw new Error("App name is required. Usage: percher create <name> --template <template>");
-        }
-        if (!options.template) {
-            const templates = core.listTemplates();
-            await writeLine(ctx, `${pc.red("✗")} --template is required. Available: ${templates.join(", ")}`);
-            return;
-        }
-        const result = await core.create(ctx, {
-            name,
-            template: options.template,
-            force: options.force,
-        });
-        await writeLine(ctx, `${pc.green("✓")} created ${result.name} from ${result.template}`);
-        for (const f of result.files) {
-            await writeLine(ctx, `  ${pc.dim(f)}`);
-        }
-        await writeLine(ctx, "");
-        await writeLine(ctx, "Next steps:");
-        await writeLine(ctx, `  cd ${result.name}`);
-        await writeLine(ctx, "  bunx percher publish");
-    });
-    cli
-        .command("preview <action> [deployId]", "Manage preview deploys (promote | discard)")
-        .option("--app <name>", "App name (overrides percher.toml)")
-        .action(async (action, deployId, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const appRef = options.app ?? core.readPercherTomlAppName(ctx.cwd);
-        if (!appRef)
-            throw new Error("App name required. Use --app or run from a project directory.");
-        if (action === "promote") {
-            if (!deployId)
-                throw new Error("Deploy ID required. Usage: percher preview promote <id>");
-            const result = await ctx.client.apps.promotePreview(appRef, deployId);
-            await writeLine(ctx, `${pc.green("✓")} Preview promoted to live. Status: ${result.status}`);
-        }
-        else if (action === "discard") {
-            if (!deployId)
-                throw new Error("Deploy ID required. Usage: percher preview discard <id>");
-            await ctx.client.apps.discardPreview(appRef, deployId);
-            await writeLine(ctx, `${pc.green("✓")} Preview discarded.`);
-        }
-        else {
-            throw new Error(`Unknown preview action "${action}". Use promote | discard.`);
-        }
-    });
-    cli
-        .command("domains <action> [domain]", "Manage custom domains (add | verify | list | remove)")
-        .option("--app <name>", "App name (overrides percher.toml)")
-        .action(async (action, domain, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        if (action === "add") {
-            if (!domain)
-                throw new Error("Domain is required. Usage: percher domains add <domain>");
-            const result = await core.domainAdd(ctx, { app: options.app, domain });
-            await writeLine(ctx, `${pc.green("✓")} Domain ${result.domain} added.`);
-            await writeLine(ctx, "");
-            await writeLine(ctx, "Add these DNS records:");
-            await writeLine(ctx, `  TXT    ${result.dnsInstructions.txt.name}    ${result.dnsInstructions.txt.value}`);
-            await writeLine(ctx, `  CNAME  ${result.domain}    ${result.dnsInstructions.cname.value}`);
-            if (result.dnsInstructions.a) {
-                await writeLine(ctx, `  A      ${result.domain}    ${result.dnsInstructions.a.values.join(", ")}`);
-            }
-            await writeLine(ctx, "");
-            await writeLine(ctx, "Then run:");
-            await writeLine(ctx, `  percher domains verify ${result.domain}${options.app ? ` --app ${options.app}` : ""}`);
-        }
-        else if (action === "verify") {
-            if (!domain)
-                throw new Error("Domain is required. Usage: percher domains verify <domain>");
-            const result = await core.domainVerify(ctx, { app: options.app, domain });
-            if (result.status === "verified") {
-                await writeLine(ctx, `${pc.green("✓")} Domain verified. ${result.domain} is now live.`);
-            }
-            else {
-                await writeLine(ctx, `${pc.yellow("!")} ${result.domain}: ${result.failureReason}`);
-            }
-        }
-        else if (action === "list") {
-            const list = await core.domainList(ctx, { app: options.app });
-            if (list.length === 0) {
-                await writeLine(ctx, "No custom domains.");
-            }
-            else {
-                for (const d of list) {
-                    await writeLine(ctx, `${d.domain.padEnd(40)} ${d.status}`);
-                }
-            }
-        }
-        else if (action === "remove") {
-            if (!domain)
-                throw new Error("Domain is required. Usage: percher domains remove <domain>");
-            await core.domainRemove(ctx, { app: options.app, domain });
-            await writeLine(ctx, `${pc.green("✓")} Domain removed.`);
-        }
-        else {
-            throw new Error(`Unknown domains action "${action}". Use add | verify | list | remove.`);
-        }
-    });
-    cli
-        .command("resume [app]", "Resume an app suspended for inactivity")
-        .action(async (app) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.resume(ctx, { app });
-        await writeLine(ctx, `${pc.green("✓")} ${result.message}`);
-    });
-    cli
-        .command("import", "Convert Vercel or Netlify config to percher.toml")
-        .option("--from <provider>", "Provider: vercel | netlify (auto-detected if omitted)")
-        .action(async (options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const result = await core.importProject(ctx, {
-            from: options.from,
-        });
-        if (result.configGenerated) {
-            await writeLine(ctx, `${pc.green("✓")} Imported from ${result.provider} — percher.toml generated`);
-        }
-        for (const w of result.warnings) {
-            await writeLine(ctx, `${pc.yellow("!")} ${w}`);
-        }
-        if (result.envVars.length > 0) {
-            await writeLine(ctx, "");
-            await writeLine(ctx, "Set these env vars before publishing:");
-            for (const v of result.envVars) {
-                await writeLine(ctx, `  bunx percher env set ${v}=your-value`);
-            }
-        }
-        if (result.configGenerated) {
-            await writeLine(ctx, "");
-            await writeLine(ctx, "Next: review percher.toml, then run:");
-            await writeLine(ctx, "  bunx percher publish");
-        }
-    });
-    cli
-        .command("delete [app]", "Delete an app permanently")
-        .option("--yes", "Skip confirmation prompt")
-        .action(async (app, options) => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        const name = app ?? core.readPercherTomlAppName(ctx.cwd);
-        if (!name) {
-            await writeLine(ctx, `${pc.red("✗")} No app specified and no percher.toml found.`);
-            throw new SilentExitError();
-        }
-        if (!options.yes) {
-            const answer = await ctx.prompt(`${pc.red("!")} This will permanently delete ${pc.bold(name)} and all its data. Type the app name to confirm:`);
-            if (answer.trim() !== name) {
-                await writeLine(ctx, "Cancelled.");
-                return;
-            }
-        }
-        await core.deleteApp(ctx, { app: name, confirm: true });
-        await writeLine(ctx, `${pc.green("✓")} Deleted ${name}`);
-    });
-    cli.command("whoami", "Show the signed-in user").action(async () => {
-        const ctx = ctxOverride ?? (await createCliContext());
-        if (!ctx.client.token) {
-            await writeLine(ctx, `${pc.red("✗")} Not logged in. Run: percher login`);
-            throw new SilentExitError();
-        }
-        const me = await core.whoami(ctx);
-        await writeLine(ctx, `Signed in as ${me.email} (${me.userId})`);
-    });
+    const ctx = ctxOverride ?? (await createCliContext());
+    registerAppsCommands(cli, ctx);
+    registerDeploysCommands(cli, ctx, argv);
+    registerEnvCommands(cli, ctx);
+    registerDataCommands(cli, ctx, argv);
+    registerAuthCommands(cli, ctx);
+    registerAccountCommands(cli, ctx);
+    registerGithubCommands(cli, ctx);
     cli.help();
     cli.version(VERSION);
     const command = argv[0] ?? "help";
@@ -813,7 +41,6 @@ export async function run(argv, ctxOverride) {
         }
         const errName = err instanceof Error ? err.constructor.name : "unknown";
         trackEvent(command, "error", errName);
-        const ctx = ctxOverride ?? (await createCliContext());
         await renderError(ctx.stderr, err);
         return 1;
     }