@amerged/ohmyhost-cli 0.1.15 → 0.1.17

package/dist/{chunk-3BEMNNWB.js → chunk-IZZDZV6T.js}

@@ -15004,6 +15004,10 @@ var recognizedCommandLabel = (argv) => {
       return "project handle check";
     if (value === "project" && values[0] === "handle" && values[1] === "set")
       return "project handle set";
+    if (value === "project" && values[0] === "dev-share" && ["link", "rotate", "revoke"].includes(values[1] ?? ""))
+      return values[1] === "link" ? "project dev-share link" : values[1] === "rotate" ? "project dev-share rotate" : "project dev-share revoke";
+    if (value === "project" && values[0] === "dev-access" && values[1] === "mode")
+      return "project dev-access mode";
     if (value === "project" && values[0] === "dev-access" && values[1] === "create")
       return "project dev-access create";
     if (value === "database" && values[0] === "compute" && values[1] === "set")
@@ -15095,6 +15099,8 @@ var recognizedCommandLabel = (argv) => {
         return "mail domain set";
       if (values[1] === "status")
         return "mail domain status";
+      if (values[1] === "delete")
+        return "mail domain delete";
     }
     return "unknown";
   }
@@ -15493,6 +15499,40 @@ var parseProductCliCommand = (argv) => {
       const options2 = parseOptions(values, ["--handle"]);
       return { kind: "project-handle-check", handle: options2["--handle"], credentialStore };
     }
+    if (subcommand === "dev-share") {
+      const action = values.shift();
+      if (action === "link") {
+        if (yes || wait || follow || stdin)
+          throw new InvalidCommandError();
+        const options2 = parseOptions(values, ["--project"]);
+        return { kind: "project-dev-share-link", projectId: options2["--project"], credentialStore };
+      }
+      if ((action === "rotate" || action === "revoke") && yes && !wait && !follow && !stdin) {
+        const options2 = parseOptions(values, ["--project", "--idempotency-key"]);
+        return {
+          kind: action === "rotate" ? "project-dev-share-rotate" : "project-dev-share-revoke",
+          projectId: options2["--project"],
+          idempotencyKey: options2["--idempotency-key"],
+          credentialStore
+        };
+      }
+      throw new InvalidCommandError();
+    }
+    if (subcommand === "dev-access" && values[0] === "mode") {
+      values.shift();
+      if (!yes || wait || follow || stdin)
+        throw new InvalidCommandError();
+      const options2 = parseOptions(values, ["--project", "--mode", "--idempotency-key"]);
+      if (options2["--mode"] !== "protected" && options2["--mode"] !== "public")
+        throw new InvalidCommandError();
+      return {
+        kind: "project-dev-access-mode-set",
+        projectId: options2["--project"],
+        mode: options2["--mode"],
+        idempotencyKey: options2["--idempotency-key"],
+        credentialStore
+      };
+    }
     if (subcommand === "dev-access" && values.shift() === "create") {
       if (yes || wait || follow || stdin)
         throw new InvalidCommandError();
@@ -15559,17 +15599,20 @@ var parseProductCliCommand = (argv) => {
       "--name",
       "--idempotency-key",
       "--data-mode",
+      "--dev-access-mode",
       "--region"
     ]);
     const dataMode = options["--data-mode"];
+    const devAccessMode = options["--dev-access-mode"];
     const region = options["--region"];
-    if (!options["--organization"] || !options["--name"] || !options["--idempotency-key"] || dataMode !== void 0 && dataMode !== "shared" && dataMode !== "isolated" || region !== void 0 && region !== "us" && region !== "eu")
+    if (!options["--organization"] || !options["--name"] || !options["--idempotency-key"] || dataMode !== void 0 && dataMode !== "shared" && dataMode !== "isolated" || devAccessMode !== void 0 && devAccessMode !== "protected" && devAccessMode !== "public" || region !== void 0 && region !== "us" && region !== "eu")
       throw new InvalidCommandError();
     return {
       kind: "project-create",
       organizationId: options["--organization"],
       name: options["--name"],
       ...dataMode === void 0 ? {} : { dataMode },
+      ...devAccessMode === void 0 ? {} : { devAccessMode },
       ...region === void 0 ? {} : { region },
       idempotencyKey: options["--idempotency-key"],
       credentialStore
@@ -15814,23 +15857,42 @@ var parseProductCliCommand = (argv) => {
   if (first === "plan") {
     if (yes || wait || follow || stdin)
       throw new InvalidCommandError();
-    const options = parseOptions(values, ["--project", "--commit"]);
+    const options = parseOptionalOptions(values, ["--project", "--commit", "--environment"]);
+    const projectId = options["--project"];
+    const commitSha = options["--commit"];
+    if (projectId === void 0 || commitSha === void 0)
+      throw new InvalidCommandError();
     return {
       kind: "plan",
-      projectId: options["--project"],
-      commitSha: options["--commit"],
+      projectId,
+      commitSha,
+      environment: deploymentEnvironment(options["--environment"]),
       credentialStore
     };
   }
   if (first === "deploy") {
     if (!yes || follow || stdin)
       throw new InvalidCommandError();
-    const options = parseOptions(values, ["--project", "--plan-id", "--idempotency-key"]);
+    const options = parseOptionalOptions(values, [
+      "--project",
+      "--plan-id",
+      "--commit",
+      "--environment",
+      "--idempotency-key"
+    ]);
+    const projectId = options["--project"];
+    const idempotencyKey = options["--idempotency-key"];
+    const planId = options["--plan-id"] ?? null;
+    const commitSha = options["--commit"] ?? null;
+    if (projectId === void 0 || idempotencyKey === void 0 || planId === null === (commitSha === null) || planId !== null && options["--environment"] !== void 0)
+      throw new InvalidCommandError();
     return {
       kind: "deploy",
-      projectId: options["--project"],
-      planId: options["--plan-id"],
-      idempotencyKey: options["--idempotency-key"],
+      projectId,
+      planId,
+      commitSha,
+      environment: deploymentEnvironment(options["--environment"]),
+      idempotencyKey,
       yes,
       wait,
       credentialStore
@@ -16127,10 +16189,11 @@ var parseProductCliCommand = (argv) => {
     throw new InvalidCommandError();
   }
   if (first === "mail") {
-    if (yes || wait || follow || stdin)
-      throw new InvalidCommandError();
     const area = values.shift();
     const sub = area === "webhook" || area === "messages" || area === "domain" ? values.shift() : void 0;
+    const retiring = area === "domain" && sub === "delete";
+    if (yes !== retiring || wait || follow || stdin)
+      throw new InvalidCommandError();
     const options = parseOptionalOptions(values, [
       "--project",
       "--environment",
@@ -16166,6 +16229,13 @@ var parseProductCliCommand = (argv) => {
     } else if (area === "status" || area === "domain" && sub === "status") {
       request = { ...scope, action: "status" };
       label = area === "domain" ? "mail domain status" : "mail status";
+    } else if (retiring) {
+      request = {
+        ...scope,
+        action: "domain_delete",
+        idempotencyKey: required("--idempotency-key")
+      };
+      label = "mail domain delete";
     } else if (area === "webhook" && sub === "set") {
       request = {
         ...scope,
@@ -16230,6 +16300,13 @@ var parseOptions = (values, allowed) => {
     throw new InvalidCommandError();
   return result;
 };
+var deploymentEnvironment = (value) => {
+  if (value === void 0 || value === "dev")
+    return "dev";
+  if (value === "prod")
+    return "prod";
+  throw new InvalidCommandError();
+};
 var parseOptionalOptions = (values, allowed) => {
   const result = {};
   for (let index = 0; index < values.length; index += 2) {
@@ -16754,7 +16831,7 @@ var PROBLEM_POLICY = {
   cloudflare_zone_not_bound: {
     status: 409,
     retryable: false,
-    action: "Configure the project domain first with 'ohmyhost domain paid plan' then 'ohmyhost domain paid apply', or configure its sender domain with 'ohmyhost mail domain set'. Then request Cloudflare authorization for that domain's zone."
+    action: "Configure the project domain first with 'ohmyhost domain paid plan' then 'ohmyhost domain paid apply', or configure its sender domain with 'ohmyhost mail setup'. Then request Cloudflare authorization for that domain's zone."
   },
   github_connection_required: {
     status: 409,
@@ -16909,6 +16986,11 @@ var PROBLEM_POLICY = {
     retryable: false,
     action: "Select the current succeeded dev deployment and target prod."
   },
+  mail_capacity_unavailable: {
+    status: 503,
+    retryable: true,
+    action: "Report this request ID through feedback. The stored mail setup continues automatically once ohmyho.st has capacity; follow mail status and keep the original idempotency key."
+  },
   mail_domain_conflict: {
     status: 409,
     retryable: false,
@@ -16917,13 +16999,23 @@ var PROBLEM_POLICY = {
   mail_domain_required: {
     status: 409,
     retryable: false,
-    action: "Run 'ohmyhost mail domain set' for this project, then plan again."
+    action: "This app declares mail.enabled. Configure the project's own sender domain with 'ohmyhost mail setup' using its Prod environment ID, or set mail.enabled to false if the app sends no mail, then plan again."
   },
   storage_jurisdiction_conflict: {
     status: 409,
     retryable: false,
     action: "Set storage.jurisdiction in ohmyhost.yaml to the project's hosting region shown by project status, then plan again."
   },
+  shared_data_requires_promotion: {
+    status: 409,
+    retryable: false,
+    action: "Plan and deploy this commit to Dev, then run 'ohmyhost deployment promote plan' to reach Prod."
+  },
+  production_deployment_required: {
+    status: 409,
+    retryable: false,
+    action: "Deploy to Prod first: run 'ohmyhost plan --environment prod' and deploy that plan, or promote the current Dev deployment with 'ohmyhost deployment promote plan'. Then plan the domain again."
+  },
   framework_conversion_required: {
     status: 409,
     retryable: false,
@@ -17181,6 +17273,12 @@ var parseCloudflareDnsAuthorizationStatus = (value) => {
   }
   return input;
 };
+var parseDevAccessState = (value) => {
+  const input = exactRecord2(value, ["project_id", "mode", "share_url"]);
+  if (!isUlid(input["project_id"]) || input["mode"] !== "protected" && input["mode"] !== "public" || input["mode"] === "public" && input["share_url"] !== null || input["share_url"] !== null && (typeof input["share_url"] !== "string" || !/^https:\/\/dev-[a-z0-9]+(?:-[a-z0-9]+){0,4}\.(?:dev\.)?check\.omh\.st\/\.ohmyhost\/dev-access\/redeem\?stage=dev&ticket=[A-Za-z0-9_-]{43}$/u.test(input["share_url"])))
+    throw new ResponseContractError();
+  return input;
+};
 var parseDevAccessTicket = (value) => {
   const input = exactRecord2(value, [
     "ticket_id",
@@ -17336,6 +17434,7 @@ var parseProjectStatus = (value) => {
     "etag",
     "handle",
     "region",
+    "dev_access_mode",
     "lifecycle",
     "source",
     "default_environment",
@@ -17347,7 +17446,7 @@ var parseProjectStatus = (value) => {
     "cleanup_state"
   ]);
   const handle = input["handle"];
-  if (!isUlid(input["project_id"]) || typeof input["etag"] !== "string" || !/^"sha256-[a-f0-9]{64}"$/u.test(input["etag"]) || !boundedString(handle, 3, 59) || !/^[a-z0-9]+(?:-[a-z0-9]+){0,4}$/u.test(handle) || input["region"] !== "us" && input["region"] !== "eu" || input["lifecycle"] !== "active" && input["lifecycle"] !== "deleting" && input["lifecycle"] !== "deleted" || input["dev_url"] !== null && ![`https://dev-${handle}.dev.check.omh.st`, `https://dev-${handle}.check.omh.st`].includes(String(input["dev_url"])) || input["prod_url"] !== null && ![`https://${handle}.dev.check.omh.st`, `https://${handle}.check.omh.st`].includes(String(input["prod_url"])) || input["cleanup_state"] !== "not_started" && input["cleanup_state"] !== "pending" && input["cleanup_state"] !== "completed" && input["cleanup_state"] !== "reconciliation_required") {
+  if (!isUlid(input["project_id"]) || typeof input["etag"] !== "string" || !/^"sha256-[a-f0-9]{64}"$/u.test(input["etag"]) || !boundedString(handle, 3, 59) || !/^[a-z0-9]+(?:-[a-z0-9]+){0,4}$/u.test(handle) || input["region"] !== "us" && input["region"] !== "eu" || input["dev_access_mode"] !== "protected" && input["dev_access_mode"] !== "public" || input["lifecycle"] !== "active" && input["lifecycle"] !== "deleting" && input["lifecycle"] !== "deleted" || input["dev_url"] !== null && ![`https://dev-${handle}.dev.check.omh.st`, `https://dev-${handle}.check.omh.st`].includes(String(input["dev_url"])) || input["prod_url"] !== null && ![`https://${handle}.dev.check.omh.st`, `https://${handle}.check.omh.st`].includes(String(input["prod_url"])) || input["cleanup_state"] !== "not_started" && input["cleanup_state"] !== "pending" && input["cleanup_state"] !== "completed" && input["cleanup_state"] !== "reconciliation_required") {
     throw new ResponseContractError();
   }
   if (input["source"] !== null)
@@ -17518,6 +17617,7 @@ var parseDeploymentPlan = (value) => {
   const input = exactRecord2(value, [
     "id",
     "project_id",
+    "environment",
     "commit_sha",
     "source_digest",
     "build_plan_digest",
@@ -17539,11 +17639,12 @@ var parseDeploymentPlan = (value) => {
     "currency",
     "rate_card_version",
     "credit_micros",
+    "credits",
     "provider_cost_micros",
     "scope",
     "reserved_seconds"
   ]);
-  if (!isUlid(input["id"]) || !isUlid(input["project_id"]) || !isCommitSha(input["commit_sha"]) || !isDigest(input["source_digest"]) || !isDigest(input["build_plan_digest"]) || !isApplicationRoot(input["application_root"]) || input["artifact_digest"] !== void 0 && !isDigest(input["artifact_digest"]) || input["runtime"] !== "cloudflare_workers_static_assets" && input["runtime"] !== "cloudflare_workers_edge_ssr" || !isHttpsUrlValue(input["route"]) || !stringArray(input["resource_effects"]) || !stringArray(input["limits"]) || !stringArray(input["risks"]) || !stringArray(input["destructive_effects"]) || !stringArray(input["required_confirmations"]) || !isIsoInstant(input["created_at"]) || !isIsoInstant(input["expires_at"]) || !decimal(cost["amount_micros"]) || !boundedString(cost["currency"], 1, 16) || !boundedString(cost["rate_card_version"], 1, 128) || !decimal(cost["credit_micros"]) || !decimal(cost["provider_cost_micros"]) || cost["scope"] !== "build_compute" || !decimal(cost["reserved_seconds"]) || cost["reserved_seconds"] === "0")
+  if (!isUlid(input["id"]) || !isUlid(input["project_id"]) || input["environment"] !== "dev" && input["environment"] !== "prod" || !isCommitSha(input["commit_sha"]) || !isDigest(input["source_digest"]) || !isDigest(input["build_plan_digest"]) || !isApplicationRoot(input["application_root"]) || input["artifact_digest"] !== void 0 && !isDigest(input["artifact_digest"]) || input["runtime"] !== "cloudflare_workers_static_assets" && input["runtime"] !== "cloudflare_workers_edge_ssr" || !isHttpsUrlValue(input["route"]) || !stringArray(input["resource_effects"]) || !stringArray(input["limits"]) || !stringArray(input["risks"]) || !stringArray(input["destructive_effects"]) || !stringArray(input["required_confirmations"]) || !isIsoInstant(input["created_at"]) || !isIsoInstant(input["expires_at"]) || !decimal(cost["amount_micros"]) || !boundedString(cost["currency"], 1, 16) || !boundedString(cost["rate_card_version"], 1, 128) || !decimal(cost["credit_micros"]) || typeof cost["credits"] !== "string" || !/^[0-9]+(?:\.[0-9]{1,6})?$/u.test(cost["credits"]) || !decimal(cost["provider_cost_micros"]) || cost["scope"] !== "build_compute" || !decimal(cost["reserved_seconds"]) || cost["reserved_seconds"] === "0")
     throw new ResponseContractError();
   return input;
 };
@@ -17624,8 +17725,10 @@ var parseSafeProblem = (value) => {
   const retryAfter = input["retry_after_seconds"];
   if (retryAfter !== void 0 && (code !== "rate_limited" || typeof retryAfter !== "number" || !Number.isSafeInteger(retryAfter) || retryAfter < 1 || retryAfter > 86400))
     throw new ResponseContractError();
+  const docsUrl = String(input["type"]);
   return {
     requestId: input["request_id"],
+    ...docsUrl.startsWith("https://docs.ohmyho.st/errors/") ? { docsUrl } : {},
     code,
     retryable: policy.retryable,
     suggestedAction: (code === "framework_conversion_required" ? parseFrameworkConversionDetail(input["detail"]) ?? policy.action : policy.action) + (retryAfter === void 0 ? "" : ` Retry after ${String(retryAfter)} seconds.`),
@@ -17899,7 +18002,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.15",
+  version: "0.1.17",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -18256,12 +18359,16 @@ var HELP_USAGE = Object.freeze({
   "token list": "ohmyhost token list --organization ULID [--after KEY_ID] --json",
   "token revoke": "ohmyhost token revoke --organization ULID --key KEY_ID --yes --json",
   "feedback submit": "ohmyhost feedback submit --organization ULID --kind bug|issue|feature_request --title TITLE --description REDACTED_REPORT [--project ULID] [--environment ULID] [--operation ULID] [--error-code CODE] [--client-version VERSION] --idempotency-key KEY --json",
-  "project create": "ohmyhost project create --organization ULID --name NAME [--data-mode shared|isolated] [--region us|eu] --idempotency-key KEY --json (the region is chosen once: us is the default, eu places the database, files and builds in the EU; it cannot be changed later)",
+  "project create": "ohmyhost project create --organization ULID --name NAME [--data-mode shared|isolated] [--dev-access-mode protected|public] [--region us|eu] --idempotency-key KEY --json (the region is chosen once: us is the default, eu places the database, files and builds in the EU; it cannot be changed later)",
   "project list": "ohmyhost project list [--cursor ULID] [--limit LIMIT] --json",
   "project context": "ohmyhost project context --project ULID --json",
   "project notes set": "ohmyhost project notes set --project ULID --version NUMBER --markdown TEXT --idempotency-key KEY --json (no credentials or signed URLs)",
   "project status": "ohmyhost project status --project ULID --json",
   "project dev-access create": "ohmyhost project dev-access create --project ULID --json",
+  "project dev-share link": "ohmyhost project dev-share link --project ULID --json",
+  "project dev-share rotate": "ohmyhost project dev-share rotate --project ULID --idempotency-key KEY --yes --json",
+  "project dev-share revoke": "ohmyhost project dev-share revoke --project ULID --idempotency-key KEY --yes --json",
+  "project dev-access mode": "ohmyhost project dev-access mode --project ULID --mode protected|public --idempotency-key KEY --yes --json",
   "project handle check": "ohmyhost project handle check --handle HANDLE --json (is this address free? answers with a reason and free alternatives; the address becomes HANDLE.check.omh.st)",
   "project handle set": "ohmyhost project handle set --project ULID --handle HANDLE --if-match ETAG --idempotency-key KEY --json (moves the project to a free address; the old one stops working and anyone may claim it)",
   "database compute set": "ohmyhost database compute set --project ULID --environment dev|prod --profile standard|performance --idempotency-key KEY --yes [--wait] --json\n  standard: Free 0.25 CU/1 GB/60s idle, Paid 0.5 CU/2 GB/60s idle. performance: Paid 1 CU/4 GB/300s idle, 2.5x database compute credits per equal active minute; longer idle time also consumes credits.",
@@ -18282,8 +18389,8 @@ var HELP_USAGE = Object.freeze({
   "domain paid apply": "ohmyhost domain paid apply --project ULID --hostname HOST --idempotency-key KEY --yes --json",
   "domain paid status": "ohmyhost domain paid status --project ULID --json",
   "domain paid delete": "ohmyhost domain paid delete --project ULID --hostname HOST --idempotency-key KEY --yes --json",
-  plan: "ohmyhost plan --project ULID --commit SHA --json",
-  deploy: "ohmyhost deploy --project ULID --plan-id ULID --idempotency-key KEY --yes [--wait] --json",
+  plan: "ohmyhost plan --project ULID --commit SHA [--environment dev|prod] --json",
+  deploy: "ohmyhost deploy --project ULID (--plan-id ULID | --commit SHA [--environment dev|prod]) --idempotency-key KEY --yes [--wait] --json",
   logs: "ohmyhost logs OPERATION_ULID --follow --json",
   "deployment logs": "ohmyhost deployment logs --project ULID --deployment ULID --follow --json",
   "rollback plan": "ohmyhost rollback plan --project ULID --deployment DEPLOYMENT_ULID --json",
@@ -18305,7 +18412,8 @@ var HELP_USAGE = Object.freeze({
   "mail messages get": "ohmyhost mail messages get --project ULID --environment ULID --message ULID --json",
   "mail messages retry": "ohmyhost mail messages retry --project ULID --environment ULID --message ULID --idempotency-key KEY --json",
   "mail domain set": "ohmyhost mail domain set --project ULID --environment ULID --domain DOMAIN --sending true --receiving false --idempotency-key KEY --json",
-  "mail domain status": "ohmyhost mail domain status --project ULID --environment ULID --json"
+  "mail domain status": "ohmyhost mail domain status --project ULID --environment ULID --json",
+  "mail domain delete": "ohmyhost mail domain delete --project ULID --environment ULID --idempotency-key KEY --yes --json"
 });
 var HELP_COMMANDS = Object.freeze(Object.entries(HELP_USAGE).map(([command, usage]) => Object.freeze({ command, usage })));
 var cliMetadataResult = (kind, topic) => kind === "help" ? success("help", {
@@ -18581,12 +18689,17 @@ var ProductCli = class {
         return await this.getProjectStatus(command, signal);
       if (command.kind === "project-dev-access-create")
         return await this.createDevAccessTicket(command, signal);
+      if (command.kind === "project-dev-share-link" || command.kind === "project-dev-share-rotate" || command.kind === "project-dev-share-revoke" || command.kind === "project-dev-access-mode-set") {
+        const api = await this.authenticatedApi(command.credentialStore, signal);
+        const state = parseDevAccessState(command.kind === "project-dev-share-link" ? await api.ensureDevShareLink(command.projectId) : command.kind === "project-dev-share-rotate" ? await api.rotateDevShareLink(command.projectId, command.idempotencyKey) : command.kind === "project-dev-share-revoke" ? await api.revokeDevShareLink(command.projectId, command.idempotencyKey) : await api.setDevAccessMode(command.projectId, command.mode, command.idempotencyKey));
+        return success(command.kind === "project-dev-share-link" ? "project dev-share link" : command.kind === "project-dev-share-rotate" ? "project dev-share rotate" : command.kind === "project-dev-share-revoke" ? "project dev-share revoke" : "project dev-access mode", { status: "succeeded", state });
+      }
       if (command.kind === "database-write") {
         const file = await open2(command.statementFile, "r"), buffer = Buffer.alloc(65537);
         let statement;
         try {
-          const stat2 = await file.stat();
-          if (!stat2.isFile() || stat2.size > 65536)
+          const stat3 = await file.stat();
+          if (!stat3.isFile() || stat3.size > 65536)
             throw new InvalidCommandError();
           let length = 0;
           while (length < buffer.length) {
@@ -18878,6 +18991,7 @@ var ProductCli = class {
       organizationId: command.organizationId,
       name: command.name,
       ...command.dataMode === void 0 ? {} : { dataMode: command.dataMode },
+      ...command.devAccessMode === void 0 ? {} : { devAccessMode: command.devAccessMode },
       ...command.region === void 0 ? {} : { region: command.region },
       idempotencyKey: command.idempotencyKey
     }));
@@ -19069,7 +19183,10 @@ var ProductCli = class {
   async getAutoDeploy(command, signal) {
     const api = await this.authenticatedApi(command.credentialStore, signal);
     const autoDeploy = await api.getAutoDeploy(command.projectId);
-    return success("source auto-deploy status", { status: "ready", auto_deploy: autoDeploy });
+    return success("source auto-deploy status", {
+      status: autoDeploy.generation === 0 ? "not_configured" : "ready",
+      auto_deploy: autoDeploy
+    });
   }
   async authorizeCloudflareDns(command, signal) {
     const api = await this.authenticatedApi(command.credentialStore, signal);
@@ -19103,20 +19220,35 @@ var ProductCli = class {
   async planDeployment(command, signal) {
     const api = await this.authenticatedApi(command.credentialStore, signal);
     const plan = parseDeploymentPlan(await api.planDeployment(command));
-    return success("plan", { status: "planned", plan });
+    const notes = plan["environment"] === "prod" ? [
+      `This plan builds straight into Prod (${String(plan["route"])}); Prod traffic switches once it is activated.`
+    ] : [
+      `This plan updates Dev only (${String(plan["route"])}). To go live, deploy with --environment prod or promote the Dev deployment with '${this.dependencies.commandPrefix} deployment promote plan --project ULID --deployment DEV_DEPLOYMENT_ULID --json'.`
+    ];
+    return success("plan", { status: "planned", plan, notes });
   }
   async deploy(command, signal) {
     const api = await this.authenticatedApi(command.credentialStore, signal);
-    let operation = parseOperation(await api.createDeployment(command));
+    const plan = command.commitSha === null ? null : parseDeploymentPlan(await api.planDeployment({
+      projectId: command.projectId,
+      commitSha: command.commitSha,
+      environment: command.environment
+    }));
+    let operation = parseOperation(await api.createDeployment({
+      projectId: command.projectId,
+      planId: plan === null ? String(command.planId) : String(plan["id"]),
+      idempotencyKey: command.idempotencyKey
+    }));
     if (command.wait)
       operation = await this.waitForOperation(api, operation, signal);
     const notes = operation.state === "succeeded" ? [
-      `A Dev URL answers 404 until you redeem an access ticket: run '${this.dependencies.commandPrefix} project dev-access create --project ULID --json' and open its redeem_url once.`
+      `Check project status for dev_access_mode. For protected Dev, run '${this.dependencies.commandPrefix} project dev-share link --project ULID --json' and open or share its persistent share_url; public Dev opens directly.`
     ] : [];
     return success("deploy", {
       status: command.wait ? "completed" : "accepted",
       operation,
-      ...notes.length > 0 ? { notes } : {}
+      ...plan === null ? {} : { plan },
+      ...notes.length > 0 && plan?.["environment"] !== "prod" ? { notes } : {}
     });
   }
   async logs(command, signal) {
@@ -19396,7 +19528,7 @@ var classifyFailure = (command, error, signal) => {
   if (looksLikeProblem(error)) {
     try {
       const problem = parseSafeProblem(error);
-      return failure(command, 7, problem.code, problem.retryable, problem.suggestedAction, void 0, problem.retryAfterSeconds, problem.requestId);
+      return failure(command, 7, problem.code, problem.retryable, problem.suggestedAction, void 0, problem.retryAfterSeconds, problem.requestId, problem.docsUrl);
     } catch {
       return failure(command, 7, "response_contract_invalid", false, "Retry only after the client or server contract is repaired.");
     }
@@ -19416,7 +19548,7 @@ var success = (command, body) => ({
 `,
   stderr: ""
 });
-var failure = (command, exitCode, code, retryable, suggestedAction, operation, retryAfterSeconds, requestId) => {
+var failure = (command, exitCode, code, retryable, suggestedAction, operation, retryAfterSeconds, requestId, docsUrl) => {
   const document = {
     version: 1,
     command,
@@ -19428,6 +19560,7 @@ var failure = (command, exitCode, code, retryable, suggestedAction, operation, r
       suggested_action: suggestedAction,
       ...retryAfterSeconds === void 0 ? {} : { retry_after_seconds: retryAfterSeconds },
       ...requestId === void 0 ? {} : { request_id: requestId },
+      ...docsUrl === void 0 ? {} : { docs_url: docsUrl },
       ...operation?.error === void 0 ? {} : { message: operation.error.message }
     }
   };
@@ -19497,6 +19630,14 @@ var parsedCommandName = (command) => {
     return "project status";
   if (command.kind === "project-dev-access-create")
     return "project dev-access create";
+  if (command.kind === "project-dev-share-link")
+    return "project dev-share link";
+  if (command.kind === "project-dev-share-rotate")
+    return "project dev-share rotate";
+  if (command.kind === "project-dev-share-revoke")
+    return "project dev-share revoke";
+  if (command.kind === "project-dev-access-mode-set")
+    return "project dev-access mode";
   if (command.kind === "project-handle-check")
     return "project handle check";
   if (command.kind === "project-handle-set")
@@ -21046,6 +21187,83 @@ var getProjectHandleAvailability = (parameters, options) => {
     ...params
   });
 };
+var revokeProjectDevShareLink = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-share-link",
+    ...options,
+    ...params
+  });
+};
+var ensureProjectDevShareLink = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-share-link",
+    ...options,
+    ...params
+  });
+};
+var rotateProjectDevShareLink = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-share-link:rotate",
+    ...options,
+    ...params
+  });
+};
+var setProjectDevAccessMode = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { key: "setDevAccessModeRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).put({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-access-mode",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
 var createProjectDevAccessTicket = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -21783,6 +22001,25 @@ var streamOperationEvents = (parameters, options) => {
     ...params
   });
 };
+var deleteManagedMailDomain = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "environment_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/environments/{environment_id}/mail-domain",
+    ...options,
+    ...params
+  });
+};
 var getManagedMailDomain = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -22009,6 +22246,14 @@ function assertManagedMailResponse(value, input) {
       invalid3();
     return;
   }
+  if (input.action === "domain_delete") {
+    exact3(r, ["status", "domain", "dns_records"]);
+    if (r["status"] !== "deleted")
+      invalid3();
+    domain(r["domain"]);
+    records(r["dns_records"]);
+    return;
+  }
   if (input.action === "messages_list") {
     exact3(r, ["items"]);
     if (!Array.isArray(r["items"]) || r["items"].length > 50)
@@ -22137,6 +22382,8 @@ function requestManagedMail(client2, input) {
       return verifyManagedMailWebhook({ ...scope, "Idempotency-Key": input.idempotencyKey }, { client: client2 });
     case "webhook_disable":
       return disableManagedMailReceiving({ ...scope, "Idempotency-Key": input.idempotencyKey }, { client: client2 });
+    case "domain_delete":
+      return deleteManagedMailDomain({ ...scope, "Idempotency-Key": input.idempotencyKey }, { client: client2 });
     case "messages_list":
       return listManagedMailMessages({ ...scope, ...input.after ? { after: input.after } : {} }, { client: client2 });
     case "message_get":
@@ -22376,6 +22623,22 @@ var GeneratedSdkProductApi = class {
       paidDomainRequest: { hostname: input.hostname }
     }, { client: this.#client });
   }
+  async ensureDevShareLink(projectId) {
+    return ensureProjectDevShareLink({ project_id: projectId }, { client: this.#client });
+  }
+  async rotateDevShareLink(projectId, idempotencyKey) {
+    return rotateProjectDevShareLink({ project_id: projectId, "Idempotency-Key": idempotencyKey }, { client: this.#client });
+  }
+  async revokeDevShareLink(projectId, idempotencyKey) {
+    return revokeProjectDevShareLink({ project_id: projectId, "Idempotency-Key": idempotencyKey }, { client: this.#client });
+  }
+  async setDevAccessMode(projectId, mode, idempotencyKey) {
+    return setProjectDevAccessMode({
+      project_id: projectId,
+      "Idempotency-Key": idempotencyKey,
+      setDevAccessModeRequest: { mode }
+    }, { client: this.#client });
+  }
   async createDevAccessTicket(projectId) {
     return createProjectDevAccessTicket({ project_id: projectId }, { client: this.#client });
   }
@@ -22389,6 +22652,7 @@ var GeneratedSdkProductApi = class {
         organization_id: input.organizationId,
         name: input.name,
         ...input.dataMode === void 0 ? {} : { data_mode: input.dataMode },
+        ...input.devAccessMode === void 0 ? {} : { dev_access_mode: input.devAccessMode },
         ...input.region === void 0 ? {} : { region: input.region }
       }
     }, { client: this.#client });
@@ -22446,7 +22710,10 @@ var GeneratedSdkProductApi = class {
     return configureProjectDomains({ "Idempotency-Key": input.idempotencyKey, project_id: input.projectId }, { client: this.#client });
   }
   async planDeployment(input) {
-    return planDeployment({ project_id: input.projectId, planDeploymentRequest: { commit_sha: input.commitSha } }, { client: this.#client });
+    return planDeployment({
+      project_id: input.projectId,
+      planDeploymentRequest: { commit_sha: input.commitSha, environment: input.environment }
+    }, { client: this.#client });
   }
   async createDeployment(input) {
     return createDeployment({
@@ -22536,12 +22803,26 @@ var GeneratedSdkProductApi = class {
 };
 
 // apps/product-cli/dist/project-link-store.js
-import { chmod, mkdir as mkdir2, rename, writeFile } from "node:fs/promises";
+import { appendFile, chmod, mkdir as mkdir2, readFile, rename, stat, writeFile } from "node:fs/promises";
 import { join } from "node:path";
+async function readLinkedProjectId(directory, apiOrigin) {
+  try {
+    const link = JSON.parse(await readFile(join(directory, "link.json"), "utf8"));
+    if (typeof link !== "object" || link === null)
+      return null;
+    const { version: version2, api_origin, project_id } = link;
+    return version2 === 1 && api_origin === apiOrigin && typeof project_id === "string" && /^[0-9A-HJKMNP-TV-Z]{26}$/u.test(project_id) ? project_id : null;
+  } catch {
+    return null;
+  }
+}
 var OwnerOnlyProjectLinkStore = class {
   directory;
-  constructor(directory) {
+  repositoryRoot;
+  /** repositoryRoot: when it is a Git working tree, the link directory is kept out of Git. */
+  constructor(directory, repositoryRoot) {
     this.directory = directory;
+    this.repositoryRoot = repositoryRoot;
   }
   async save(metadata) {
     await mkdir2(this.directory, { mode: 448, recursive: true });
@@ -22553,12 +22834,33 @@ var OwnerOnlyProjectLinkStore = class {
     await chmod(temporary, 384);
     await rename(temporary, target);
     await chmod(target, 384);
+    if (this.repositoryRoot !== void 0)
+      await ignoreLinkDirectory(this.repositoryRoot);
   }
 };
+async function ignoreLinkDirectory(root) {
+  try {
+    await stat(join(root, ".git"));
+  } catch {
+    return;
+  }
+  const file = join(root, ".gitignore");
+  let current = "";
+  try {
+    current = await readFile(file, "utf8");
+  } catch {
+    current = "";
+  }
+  const lines = current.split(/\r?\n/u).map((line) => line.trim());
+  if (lines.some((line) => /^\/?\.ohmyhost\/?$/u.test(line)))
+    return;
+  await appendFile(file, `${current === "" || current.endsWith("\n") ? "" : "\n"}/.ohmyhost/
+`);
+}
 
 // apps/product-cli/dist/repository-init.js
 import { createHash } from "node:crypto";
-import { lstat as lstat2, open as open3, readFile, readdir, stat } from "node:fs/promises";
+import { lstat as lstat2, open as open3, readFile as readFile2, readdir, stat as stat2 } from "node:fs/promises";
 import { dirname as dirname2, posix, resolve as resolve2 } from "node:path";
 
 // packages/contracts/dist/application-root.js
@@ -23440,7 +23742,7 @@ async function initializeRepository(input) {
     })
   });
   const targetBetterAuth = existingConfiguration?.auth?.provider === "better-auth";
-  const targetMail = targetBetterAuth || existingConfiguration?.mail?.enabled === true;
+  const targetMail = existingConfiguration?.mail?.enabled === true;
   const targetStorage = r2 || supabaseStorage;
   const configuredCompanionRequired = existingConfiguration !== null && (existingConfiguration.database?.enabled === true || existingConfiguration.auth?.provider === "better-auth" || existingConfiguration.mail?.enabled === true || existingConfiguration.storage !== void 0 || (existingConfiguration.functions?.crons.length ?? 0) > 0);
   const companionRequired = framework === "vite" && (existingConfiguration === null ? databaseProvider !== "none" || targetBetterAuth || targetMail || targetStorage || edgeFunctionNames.size > 0 || applicationFiles.includes("src/ohmyhost/companion.ts") : configuredCompanionRequired);
@@ -23526,7 +23828,7 @@ async function cronBlockers(framework, config, applicationDirectory, files) {
     ];
   }
   const modulePath = framework === "vite" ? "src/ohmyhost/companion.ts" : WORKER_MODULE_PATH;
-  const source = files.includes(modulePath) ? await readFile(resolve2(applicationDirectory, modulePath), "utf8") : null;
+  const source = files.includes(modulePath) ? await readFile2(resolve2(applicationDirectory, modulePath), "utf8") : null;
   if (framework !== "functions" && source !== null && !DEFAULT_EXPORT_PATTERN.test(source)) {
     return [defaultExportBlocker(modulePath)];
   }
@@ -23547,10 +23849,10 @@ async function storageClientBlockers(config, applicationDirectory, files) {
     if (!SOURCE_MODULE_PATTERN.test(path))
       continue;
     const absolute = resolve2(applicationDirectory, path);
-    const information = await stat(absolute);
+    const information = await stat2(absolute);
     if (!information.isFile() || information.size > MAXIMUM_SOURCE_BYTES)
       continue;
-    if (callsStorageClient(await readFile(absolute, "utf8")))
+    if (callsStorageClient(await readFile2(absolute, "utf8")))
       return [];
   }
   return [
@@ -23568,10 +23870,10 @@ async function databaseContractBlockers(config, applicationDirectory, files) {
     if (!SOURCE_MODULE_PATTERN.test(path))
       continue;
     const absolute = resolve2(applicationDirectory, path);
-    const information = await stat(absolute);
+    const information = await stat2(absolute);
     if (!information.isFile() || information.size > MAXIMUM_SOURCE_BYTES)
       continue;
-    const source = (await readFile(absolute, "utf8")).replaceAll(INERT_SOURCE_PATTERN, " ");
+    const source = (await readFile2(absolute, "utf8")).replaceAll(INERT_SOURCE_PATTERN, " ");
     if (DATABASE_PRIVATE_BINDING_PATTERN.test(source)) {
       blockers.push({
         code: "database_binding_private",
@@ -23590,7 +23892,7 @@ async function databaseContractBlockers(config, applicationDirectory, files) {
 async function workerModuleBlockers(framework, applicationDirectory, files) {
   if (framework !== "functions" || !files.includes(WORKER_MODULE_PATH))
     return [];
-  const source = await readFile(resolve2(applicationDirectory, WORKER_MODULE_PATH), "utf8");
+  const source = await readFile2(resolve2(applicationDirectory, WORKER_MODULE_PATH), "utf8");
   return DEFAULT_EXPORT_PATTERN.test(source) ? [] : [defaultExportBlocker(WORKER_MODULE_PATH)];
 }
 function migrationFilenameBlockers(files, configuredPath, provider) {
@@ -23617,7 +23919,7 @@ async function migrationSqlBlockers(applicationDirectory, files, configuredPath,
   }
   const migrations = await Promise.all(migrationPaths.map(async (path) => Object.freeze({
     path,
-    body: new Uint8Array(await readFile(resolve2(applicationDirectory, root, path)))
+    body: new Uint8Array(await readFile2(resolve2(applicationDirectory, root, path)))
   })));
   const blockers = [];
   for (const migration of migrations) {
@@ -23652,11 +23954,11 @@ async function readExistingConfiguration(repositoryRoot, repositoryFiles, applic
   if (!repositoryFiles.includes("ohmyhost.yaml"))
     return null;
   const configurationPath = resolve2(repositoryRoot, "ohmyhost.yaml");
-  const information = await stat(configurationPath);
+  const information = await stat2(configurationPath);
   if (!information.isFile() || information.size > MAXIMUM_CONFIGURATION_BYTES) {
     throw new RepositoryInitError("repository_configuration_invalid", "Existing ohmyhost.yaml must be one bounded regular file.");
   }
-  const configuration = await readFile(configurationPath, "utf8");
+  const configuration = await readFile2(configurationPath, "utf8");
   let parsed;
   try {
     parsed = parseOhmyhostConfigYaml(configuration);
@@ -23857,7 +24159,7 @@ async function readPackageJson(root) {
   const path = resolve2(root, "package.json");
   let information;
   try {
-    information = await stat(path);
+    information = await stat2(path);
   } catch {
     throw new RepositoryInitError("package_manifest_missing", "package.json is required");
   }
@@ -23865,7 +24167,7 @@ async function readPackageJson(root) {
     throw new RepositoryInitError("package_manifest_invalid", "package.json is invalid");
   }
   try {
-    const value = JSON.parse(await readFile(path, "utf8"));
+    const value = JSON.parse(await readFile2(path, "utf8"));
     if (!isRecord2(value))
       throw new TypeError();
     return value;
@@ -24127,10 +24429,10 @@ async function detectNextStandaloneOutput(root, framework, nextConfigPath) {
   if (framework !== "nextjs" || nextConfigPath === null)
     return false;
   const path = resolve2(root, nextConfigPath);
-  const information = await stat(path);
+  const information = await stat2(path);
   if (!information.isFile() || information.size > MAXIMUM_CONFIGURATION_BYTES)
     return false;
-  return declaresStandaloneOutput(await readFile(path, "utf8"));
+  return declaresStandaloneOutput(await readFile2(path, "utf8"));
 }
 function declaresStandaloneOutput(source) {
   const tokens = sourceTokens(source);
@@ -24196,10 +24498,10 @@ async function detectTanStackRuntime(root, files, framework, packageJson, viteCo
   if (viteConfigPath === null)
     return "ambiguous";
   const path = resolve2(root, viteConfigPath);
-  const information = await stat(path);
+  const information = await stat2(path);
   if (!information.isFile() || information.size > MAXIMUM_PACKAGE_BYTES)
     return "ambiguous";
-  const source = await readFile(path, "utf8");
+  const source = await readFile2(path, "utf8");
   const tokens = sourceTokens(source);
   if (isCompleteTanStackStatic(tokens))
     return "static";
@@ -24305,10 +24607,10 @@ async function detectR2Storage(root, files) {
   const configs = files.filter((path) => /(?:^|\/)wrangler\.(?:jsonc?|toml)$/u.test(path));
   for (const config of configs) {
     const path = resolve2(root, config);
-    const information = await stat(path);
+    const information = await stat2(path);
     if (!information.isFile() || information.size > MAXIMUM_CONFIGURATION_BYTES)
       continue;
-    const source = await readFile(path, "utf8");
+    const source = await readFile2(path, "utf8");
     if (/\br2_buckets\b/u.test(source))
       return true;
   }
@@ -24661,7 +24963,14 @@ var runProductionCli = async (argv, environment, io, signal, overrides = {}) =>
   const diagnostics = new StderrDiagnosticSink(io);
   let command;
   try {
-    command = parseProductCliCommand(argv);
+    const parsed = await parseWithLinkedProject(argv, async () => {
+      const profile2 = resolveProductCliEnvironment(environment);
+      return readLinkedProjectId(join2(overrides.workingDirectory ?? process.cwd(), profile2.linkDirectory), profile2.apiOrigin);
+    });
+    command = parsed.command;
+    if (parsed.linkedProjectId !== null)
+      io.writeStderr(`ohmyhost: using linked project ${parsed.linkedProjectId}
+`);
   } catch (error) {
     const result2 = error instanceof InvalidCommandError ? invalidCommandFailure(recognizedCommandLabel(argv)) : errorDocument("unknown", 1, "internal_error", false, "Retry the command.");
     if (!(error instanceof InvalidCommandError)) {
@@ -24739,7 +25048,7 @@ var runProductionCli = async (argv, environment, io, signal, overrides = {}) =>
       }),
       signal
     }),
-    projectLinkStore: new OwnerOnlyProjectLinkStore(join2(process.cwd(), profile.linkDirectory)),
+    projectLinkStore: new OwnerOnlyProjectLinkStore(join2(process.cwd(), profile.linkDirectory), process.cwd()),
     productApiOrigin: profile.apiOrigin,
     tokenRefresher: new PublicWorkosTokenRefresher(environment),
     tokenRevoker: lifecycle,
@@ -24925,6 +25234,30 @@ var GeneratedSdkSessionRevoker = class {
     }
   }
 };
+async function parseWithLinkedProject(argv, linkedProjectId) {
+  try {
+    return { command: parseProductCliCommand(argv), linkedProjectId: null };
+  } catch (error) {
+    if (!(error instanceof InvalidCommandError) || argv.includes("--project"))
+      throw error;
+    let projectId;
+    try {
+      projectId = await linkedProjectId();
+    } catch {
+      projectId = null;
+    }
+    if (projectId === null)
+      throw error;
+    try {
+      return {
+        command: parseProductCliCommand([...argv, "--project", projectId]),
+        linkedProjectId: projectId
+      };
+    } catch {
+      throw error;
+    }
+  }
+}
 var StderrDiagnosticSink = class {
   io;
   constructor(io) {
@@ -25133,6 +25466,7 @@ export {
   parsePaidDomain,
   parseCloudflareDnsAuthorization,
   parseCloudflareDnsAuthorizationStatus,
+  parseDevAccessState,
   parseDevAccessTicket,
   parseCurrentIdentity,
   parseAccountProfile,
@@ -25149,6 +25483,7 @@ export {
   cliMetadataResult,
   ProductCli,
   GeneratedSdkProductApi,
+  readLinkedProjectId,
   OwnerOnlyProjectLinkStore,
   RepositoryInitError,
   RepositoryInitBlockedError,
@@ -25162,6 +25497,7 @@ export {
   StderrDeviceAuthorizationPresenter,
   PublicWorkosTokenRefresher,
   GeneratedSdkSessionRevoker,
+  parseWithLinkedProject,
   readBoundedResponseBody,
   createBoundedFetch,
   readSecretValueFromStandardInput