@amerged/ohmyhost-cli 0.1.20 → 0.1.21

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.20.
+ohmyho.st cli client, version 0.1.21.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-2VVAKEZO.js";
+} from "./chunk-EPTONNNW.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-2VVAKEZO.js → chunk-EPTONNNW.js}

@@ -15358,6 +15358,8 @@ var recognizedCommandLabel = (argv) => {
       return "operation get";
     if (value === "credits" && values[0] === "account")
       return "credits account";
+    if (value === "referral" && values[0] === "link")
+      return "referral link";
     if (value === "credits" && values[0] === "balance")
       return "credits balance";
     if (value === "billing" && values[0] === "recharge" && values[1] === "get")
@@ -15412,6 +15414,10 @@ var recognizedCommandLabel = (argv) => {
       return "project dev-access mode";
     if (value === "project" && values[0] === "dev-access" && values[1] === "create")
       return "project dev-access create";
+    if (value === "project" && values[0] === "flag" && values[1] === "status")
+      return "project flag status";
+    if (value === "project" && values[0] === "flag" && values[1] === "set")
+      return "project flag set";
     if (value === "database" && values[0] === "compute" && values[1] === "set")
       return "database compute set";
     if (value === "database" && values[0] === "compute" && values[1] === "get")
@@ -15756,6 +15762,13 @@ var parseProductCliCommand = (argv) => {
     const options = parseOptions(values, ["--organization"]);
     return { kind: "credits-account", organizationId: options["--organization"], credentialStore };
   }
+  if (first === "referral" && values[0] === "link") {
+    values.shift();
+    if (yes || wait || follow || stdin)
+      throw new InvalidCommandError();
+    const options = parseOptions(values, ["--organization"]);
+    return { kind: "referral-link", organizationId: options["--organization"], credentialStore };
+  }
   if (first === "credits" && values.shift() === "balance") {
     if (yes || wait || follow || stdin)
       throw new InvalidCommandError();
@@ -15952,6 +15965,28 @@ var parseProductCliCommand = (argv) => {
         credentialStore
       };
     }
+    if (subcommand === "flag") {
+      const action = values.shift();
+      if (yes || wait || follow || stdin)
+        throw new InvalidCommandError();
+      if (action === "status") {
+        const options2 = parseOptions(values, ["--project"]);
+        return { kind: "project-flag-status", projectId: options2["--project"], credentialStore };
+      }
+      if (action === "set") {
+        const options2 = parseOptions(values, ["--project", "--enabled", "--idempotency-key"]);
+        if (options2["--enabled"] !== "true" && options2["--enabled"] !== "false")
+          throw new InvalidCommandError();
+        return {
+          kind: "project-flag-set",
+          projectId: options2["--project"],
+          enabled: options2["--enabled"] === "true",
+          idempotencyKey: options2["--idempotency-key"],
+          credentialStore
+        };
+      }
+      throw new InvalidCommandError();
+    }
     if (subcommand === "dev-access" && values.shift() === "create") {
       if (yes || wait || follow || stdin)
         throw new InvalidCommandError();
@@ -17189,7 +17224,7 @@ function assertOrganizationAccount(value) {
 var failures = {
   operation_abandoned: [
     "The operation stopped renewing its execution lease and was ended.",
-    "Inspect project status and deployment diagnostics before creating a fresh plan. Keep this operation ID; the expired execution cannot resume."
+    "Inspect project status and, when this operation names a deployment_id, its diagnostics with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs before creating a fresh plan. Keep this operation ID; the expired execution cannot resume."
   ],
   database_write_rejected: [
     "The database rejected this write; it was not committed.",
@@ -17253,7 +17288,7 @@ var failures = {
   ],
   build_failed: [
     "The build did not produce a verified deployable artifact.",
-    "Inspect the deployment build diagnostics and verify the install and build commands for the admitted commit. Correct the reported failure before planning a new deployment."
+    "Read the BUILD_FAILED diagnostic of this operation's deployment_id with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs; its excerpt is the tail of the install and build output. Correct that failure and verify the commands for the admitted commit before planning a new deployment."
   ],
   insufficient_organization_credits: [
     "The organization does not have sufficient available credits for this operation.",
@@ -17269,7 +17304,7 @@ var failures = {
   ],
   runtime_candidate_failed: [
     "The deployed candidate failed its runtime checks.",
-    "Inspect deployment runtime diagnostics, required secrets and the health-check route before creating a new deployment plan."
+    "Read the HEALTH_CHECK_FAILED diagnostic of this operation's deployment_id with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs. Its route must answer 2xx to a cookieless GET without a redirect; status_code and, for owners, excerpt show what it answered. Fix that, often a missing secret or a redirect, then plan a new deployment."
   ],
   runtime_candidate_rejected: [
     "The runtime rejected the built Worker script.",
@@ -17526,6 +17561,11 @@ var PROBLEM_POLICY = {
     retryable: false,
     action: "Finish database provisioning, then request the export again. No backup was accepted."
   },
+  powered_by_flag_required: {
+    status: 409,
+    retryable: false,
+    action: "Keep the flag on, remove the custom domain with 'ohmyhost domain paid delete', or buy Paid, then switch the flag off."
+  },
   rate_limited: { status: 429, retryable: true, action: "Retry after the server delay." },
   insufficient_organization_credits: {
     status: 402,
@@ -17540,7 +17580,7 @@ var PROBLEM_POLICY = {
   paid_plan_required: {
     status: 402,
     retryable: false,
-    action: "Ask the organization Owner to activate Paid through billing checkout, then retry. Top-ups and signup credits do not activate Paid."
+    action: "Ask the organization Owner to activate Paid through billing checkout, then retry. Top-ups and signup credits do not activate Paid. For a website domain alone, a Free workspace may instead show the powered-by flag on the project."
   },
   interactive_login_required: {
     status: 403,
@@ -17758,6 +17798,18 @@ var parseDevAccessState = (value) => {
     throw new ResponseContractError();
   return input;
 };
+var parsePoweredByFlag = (value) => {
+  const input = exactRecord2(value, ["project_id", "enabled", "enabled_at"]);
+  if (!isUlid(input["project_id"]) || typeof input["enabled"] !== "boolean" || (input["enabled"] ? !isIsoInstant(input["enabled_at"]) : input["enabled_at"] !== null))
+    throw new ResponseContractError();
+  return input;
+};
+var parseOrganizationReferral = (value) => {
+  const input = exactRecord2(value, ["organization_id", "referral_url"]);
+  if (!isUlid(input["organization_id"]) || input["referral_url"] !== `https://ohmyho.st/?r=ref-${String(input["organization_id"]).toLowerCase()}`)
+    throw new ResponseContractError();
+  return input;
+};
 var parseDevAccessTicket = (value) => {
   const input = exactRecord2(value, [
     "ticket_id",
@@ -18217,6 +18269,7 @@ var parseSafeProblem = (value) => {
 var parseOperation = (value) => {
   const input = exactRecord2(value, [
     "blocking_operation_id",
+    "deployment_id",
     "id",
     "state",
     "created_at",
@@ -18232,7 +18285,8 @@ var parseOperation = (value) => {
   const updatedAt = input["updated_at"];
   const result = input["result"];
   const blockingOperationId = input["blocking_operation_id"];
-  if (blockingOperationId !== void 0 && (state !== "queued" || !isUlid(blockingOperationId) || blockingOperationId === id3))
+  const deploymentId = input["deployment_id"];
+  if (blockingOperationId !== void 0 && (state !== "queued" || !isUlid(blockingOperationId) || blockingOperationId === id3) || deploymentId !== void 0 && !isUlid(deploymentId))
     throw new ResponseContractError();
   if (!isUlid(id3) || !isOperationState(state) || !isIsoInstant(createdAt) || !isIsoInstant(updatedAt) || result !== void 0 && !isRecord2(result)) {
     throw new ResponseContractError();
@@ -18279,6 +18333,7 @@ var parseOperation = (value) => {
     created_at: createdAt,
     updated_at: updatedAt,
     ...blockingOperationId === void 0 ? {} : { blocking_operation_id: blockingOperationId },
+    ...deploymentId === void 0 ? {} : { deployment_id: deploymentId },
     ...progress === void 0 ? {} : { progress },
     ...result === void 0 ? {} : { result },
     ...error === void 0 ? {} : { error },
@@ -18554,7 +18609,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.20",
+  version: "0.1.21",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -18853,6 +18908,7 @@ var HELP_USAGE = Object.freeze({
   "export create": "ohmyhost export create --project ULID --idempotency-key KEY --stdin --json (password on stdin only; one accepted SQL ZIP per project per 24 hours)",
   "export get": "ohmyhost export get EXPORT_ULID --project ULID --json (poll the original job; signed ZIP download lasts 24 hours)",
   "credits account": "ohmyhost credits account --organization ULID --json",
+  "referral link": "ohmyhost referral link --organization ULID --json (the workspace's link to share; a new user who signs up through it starts with a free Paid month and 1,000 credits, and their first payment gives this workspace the same)",
   "credits balance": "ohmyhost credits balance --organization ULID --json",
   "billing recharge get": "ohmyhost billing recharge get --organization ULID --json",
   "billing recharge set": "ohmyhost billing recharge set --organization ULID --enabled true|false --monthly-limit-minor CENTS --revision N --idempotency-key KEY [--consent off_session_v1] --json (explicit Owner consent required before enabling)",
@@ -18882,6 +18938,8 @@ var HELP_USAGE = Object.freeze({
   "project dev-share rotate": "ohmyhost project dev-share rotate --project ULID --idempotency-key KEY --yes --json",
   "project dev-share revoke": "ohmyhost project dev-share revoke --project ULID --idempotency-key KEY --yes --json",
   "project dev-access mode": "ohmyhost project dev-access mode --project ULID --mode protected|public --idempotency-key KEY --yes --json",
+  "project flag status": "ohmyhost project flag status --project ULID --json",
+  "project flag set": "ohmyhost project flag set --project ULID --enabled true|false --idempotency-key KEY --json (shows the small Powered by ohmyho.st flag on the production site; while it shows, a Free workspace may connect its own domain without the domain fee and each Paid period adds 250 credits)",
   "project handle check": "ohmyhost project handle check --handle HANDLE --json (is this address free? answers with a reason and free alternatives; the address becomes HANDLE.check.omh.st)",
   "project handle set": "ohmyhost project handle set --project ULID --handle HANDLE --if-match ETAG --idempotency-key KEY --json (moves the project to a free address; the old one stops working and anyone may claim it)",
   "database compute set": "ohmyhost database compute set --project ULID --environment dev|prod --profile standard|performance --idempotency-key KEY --yes [--wait] --json\n  standard: Free 0.25 CU/1 GB/60s idle, Paid 0.5 CU/2 GB/60s idle. performance: Paid 1 CU/4 GB/300s idle, 2.5x database compute credits per equal active minute; longer idle time also consumes credits.",
@@ -19064,6 +19122,11 @@ var ProductCli = class {
         }
         return success(name, { status: "succeeded", billing: result });
       }
+      if (command.kind === "referral-link") {
+        const api = await this.authenticatedApi(command.credentialStore, signal);
+        const referral = parseOrganizationReferral(await api.getOrganizationReferral(command.organizationId));
+        return success("referral link", { status: "succeeded", referral });
+      }
       if (command.kind === "credits-account") {
         const api = await this.authenticatedApi(command.credentialStore, signal);
         const account = await api.getOrganizationAccount(command.organizationId);
@@ -19225,6 +19288,11 @@ var ProductCli = class {
         return await this.getProjectStatus(command, signal);
       if (command.kind === "project-dev-access-create")
         return await this.createDevAccessTicket(command, signal);
+      if (command.kind === "project-flag-status" || command.kind === "project-flag-set") {
+        const api = await this.authenticatedApi(command.credentialStore, signal);
+        const flag = parsePoweredByFlag(command.kind === "project-flag-status" ? await api.getPoweredByFlag(command.projectId) : await api.setPoweredByFlag(command.projectId, command.enabled, command.idempotencyKey));
+        return success(command.kind === "project-flag-status" ? "project flag status" : "project flag set", { status: "succeeded", flag });
+      }
       if (command.kind === "project-dev-share-link" || command.kind === "project-dev-share-rotate" || command.kind === "project-dev-share-revoke" || command.kind === "project-dev-access-mode-set") {
         const api = await this.authenticatedApi(command.credentialStore, signal);
         const state = parseDevAccessState(command.kind === "project-dev-share-link" ? await api.ensureDevShareLink(command.projectId) : command.kind === "project-dev-share-rotate" ? await api.rotateDevShareLink(command.projectId, command.idempotencyKey) : command.kind === "project-dev-share-revoke" ? await api.revokeDevShareLink(command.projectId, command.idempotencyKey) : await api.setDevAccessMode(command.projectId, command.mode, command.idempotencyKey));
@@ -20258,6 +20326,8 @@ var parsedCommandName = (command) => {
     return "billing portal";
   if (command.kind === "credits-account")
     return "credits account";
+  if (command.kind === "referral-link")
+    return "referral link";
   if (command.kind === "credits-balance")
     return "credits balance";
   if (command.kind === "credits-usage")
@@ -20308,6 +20378,10 @@ var parsedCommandName = (command) => {
     return "project dev-share revoke";
   if (command.kind === "project-dev-access-mode-set")
     return "project dev-access mode";
+  if (command.kind === "project-flag-status")
+    return "project flag status";
+  if (command.kind === "project-flag-set")
+    return "project flag set";
   if (command.kind === "project-handle-check")
     return "project handle check";
   if (command.kind === "project-handle-set")
@@ -21350,6 +21424,23 @@ var getGithubOrganizationConnection = (parameters, options) => {
     ...params
   });
 };
+var getOrganizationReferral = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "organization_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/referral",
+    ...options,
+    ...params
+  });
+};
 var getOrganizationAccount = (parameters, options) => {
   const params = buildClientParams([parameters], [{ args: [{ in: "path", key: "organization_id" }] }]);
   return (options?.client ?? client).get({
@@ -21971,6 +22062,47 @@ var setProjectDevAccessMode = (parameters, options) => {
     }
   });
 };
+var getProjectPoweredByFlag = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/powered-by-flag",
+    ...options,
+    ...params
+  });
+};
+var setProjectPoweredByFlag = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { key: "setPoweredByFlagRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).put({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/powered-by-flag",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
 var createProjectDevAccessTicket = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -23162,6 +23294,9 @@ var GeneratedSdkProductApi = class {
   async getAccountProfile() {
     return parseAccountProfile(await getAccountProfile({ client: this.#client }));
   }
+  getOrganizationReferral(organizationId) {
+    return getOrganizationReferral({ organization_id: organizationId }, { client: this.#client });
+  }
   getOrganizationAccount(organizationId) {
     return getOrganizationAccount({ organization_id: organizationId }, { client: this.#client });
   }
@@ -23335,6 +23470,16 @@ var GeneratedSdkProductApi = class {
       setDevAccessModeRequest: { mode }
     }, { client: this.#client });
   }
+  async getPoweredByFlag(projectId) {
+    return getProjectPoweredByFlag({ project_id: projectId }, { client: this.#client });
+  }
+  async setPoweredByFlag(projectId, enabled, idempotencyKey) {
+    return setProjectPoweredByFlag({
+      project_id: projectId,
+      "Idempotency-Key": idempotencyKey,
+      setPoweredByFlagRequest: { enabled }
+    }, { client: this.#client });
+  }
   async createDevAccessTicket(projectId) {
     return createProjectDevAccessTicket({ project_id: projectId }, { client: this.#client });
   }
@@ -26551,6 +26696,8 @@ export {
   parseCloudflareDnsAuthorization,
   parseCloudflareDnsAuthorizationStatus,
   parseDevAccessState,
+  parsePoweredByFlag,
+  parseOrganizationReferral,
   parseDevAccessTicket,
   parseCurrentIdentity,
   parseAccountProfile,

package/dist/index.js

@@ -54,8 +54,10 @@ import {
   parseDevAccessTicket,
   parseOperation,
   parseOperationEvent,
+  parseOrganizationReferral,
   parsePaidDomain,
   parsePaidDomainPlan,
+  parsePoweredByFlag,
   parseProductCliCommand,
   parseSafeProblem,
   parseWithLinkedProject,
@@ -78,7 +80,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-2VVAKEZO.js";
+} from "./chunk-EPTONNNW.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,
@@ -287,8 +289,10 @@ export {
   parseDevAccessTicket,
   parseOperation,
   parseOperationEvent,
+  parseOrganizationReferral,
   parsePaidDomain,
   parsePaidDomainPlan,
+  parsePoweredByFlag,
   parseProductCliCommand,
   parseSafeProblem,
   parseWithLinkedProject,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.20",
+  "version": "0.1.21",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/cli.ts

@@ -80,6 +80,8 @@ import {
   parseProjectCreditBudget,
   parseDevAccessTicket,
   parseDevAccessState,
+  parsePoweredByFlag,
+  parseOrganizationReferral,
   parseGuardedActionPlan,
   parseEnvironmentSecret,
   parseEnvironmentSecretDeletion,
@@ -304,6 +306,8 @@ const HELP_USAGE = Object.freeze({
   "export get":
     "ohmyhost export get EXPORT_ULID --project ULID --json (poll the original job; signed ZIP download lasts 24 hours)",
   "credits account": "ohmyhost credits account --organization ULID --json",
+  "referral link":
+    "ohmyhost referral link --organization ULID --json (the workspace's link to share; a new user who signs up through it starts with a free Paid month and 1,000 credits, and their first payment gives this workspace the same)",
   "credits balance": "ohmyhost credits balance --organization ULID --json",
   "billing recharge get": "ohmyhost billing recharge get --organization ULID --json",
   "billing recharge set":
@@ -350,6 +354,9 @@ const HELP_USAGE = Object.freeze({
     "ohmyhost project dev-share revoke --project ULID --idempotency-key KEY --yes --json",
   "project dev-access mode":
     "ohmyhost project dev-access mode --project ULID --mode protected|public --idempotency-key KEY --yes --json",
+  "project flag status": "ohmyhost project flag status --project ULID --json",
+  "project flag set":
+    "ohmyhost project flag set --project ULID --enabled true|false --idempotency-key KEY --json (shows the small Powered by ohmyho.st flag on the production site; while it shows, a Free workspace may connect its own domain without the domain fee and each Paid period adds 250 credits)",
   "project handle check":
     "ohmyhost project handle check --handle HANDLE --json (is this address free? answers with a reason and free alternatives; the address becomes HANDLE.check.omh.st)",
   "project handle set":
@@ -619,6 +626,13 @@ export class ProductCli {
         }
         return success(name, { status: "succeeded", billing: result });
       }
+      if (command.kind === "referral-link") {
+        const api = await this.authenticatedApi(command.credentialStore, signal);
+        const referral = parseOrganizationReferral(
+          await api.getOrganizationReferral(command.organizationId),
+        );
+        return success("referral link", { status: "succeeded", referral });
+      }
       if (command.kind === "credits-account") {
         const api = await this.authenticatedApi(command.credentialStore, signal);
         const account = await api.getOrganizationAccount(command.organizationId);
@@ -809,6 +823,22 @@ export class ProductCli {
       if (command.kind === "project-status") return await this.getProjectStatus(command, signal);
       if (command.kind === "project-dev-access-create")
         return await this.createDevAccessTicket(command, signal);
+      if (command.kind === "project-flag-status" || command.kind === "project-flag-set") {
+        const api = await this.authenticatedApi(command.credentialStore, signal);
+        const flag = parsePoweredByFlag(
+          command.kind === "project-flag-status"
+            ? await api.getPoweredByFlag(command.projectId)
+            : await api.setPoweredByFlag(
+                command.projectId,
+                command.enabled,
+                command.idempotencyKey,
+              ),
+        );
+        return success(
+          command.kind === "project-flag-status" ? "project flag status" : "project flag set",
+          { status: "succeeded", flag },
+        );
+      }
       if (
         command.kind === "project-dev-share-link" ||
         command.kind === "project-dev-share-rotate" ||
@@ -2450,6 +2480,7 @@ const parsedCommandName = (command: ProductCliCommand): CommandLabel => {
   if (command.kind === "billing-status") return "billing status";
   if (command.kind === "billing-portal") return "billing portal";
   if (command.kind === "credits-account") return "credits account";
+  if (command.kind === "referral-link") return "referral link";
   if (command.kind === "credits-balance") return "credits balance";
   if (command.kind === "credits-usage") return "credits usage";
   if (command.kind === "budget-get") return "budget get";
@@ -2475,6 +2506,8 @@ const parsedCommandName = (command: ProductCliCommand): CommandLabel => {
   if (command.kind === "project-dev-share-rotate") return "project dev-share rotate";
   if (command.kind === "project-dev-share-revoke") return "project dev-share revoke";
   if (command.kind === "project-dev-access-mode-set") return "project dev-access mode";
+  if (command.kind === "project-flag-status") return "project flag status";
+  if (command.kind === "project-flag-set") return "project flag set";
   if (command.kind === "project-handle-check") return "project handle check";
   if (command.kind === "project-handle-set") return "project handle set";
   if (command.kind === "database-write") return "database write";

package/src/apps/product-cli/command.ts

@@ -127,6 +127,11 @@ export type ProductCliCommand =
       readonly organizationId: string;
       readonly credentialStore: "native";
     }
+  | {
+      readonly kind: "referral-link";
+      readonly organizationId: string;
+      readonly credentialStore: "native";
+    }
   | {
       readonly kind: "credits-balance";
       readonly organizationId: string;
@@ -256,6 +261,18 @@ export type ProductCliCommand =
       readonly projectId: string;
       readonly credentialStore: "native";
     }
+  | {
+      readonly kind: "project-flag-status";
+      readonly projectId: string;
+      readonly credentialStore: "native";
+    }
+  | {
+      readonly kind: "project-flag-set";
+      readonly projectId: string;
+      readonly enabled: boolean;
+      readonly idempotencyKey: string;
+      readonly credentialStore: "native";
+    }
   | {
       readonly kind: "database-write";
       readonly projectId: string;
@@ -549,6 +566,7 @@ export type RecognizedCommandLabel =
   | "version"
   | "whoami"
   | "credits account"
+  | "referral link"
   | "credits balance"
   | "credits usage"
   | "budget get"
@@ -577,6 +595,8 @@ export type RecognizedCommandLabel =
   | "project dev-share rotate"
   | "project dev-share revoke"
   | "project dev-access mode"
+  | "project flag status"
+  | "project flag set"
   | "project handle check"
   | "project handle set"
   | "database write"
@@ -656,6 +676,7 @@ export const recognizedCommandLabel = (argv: readonly string[]): RecognizedComma
     if (value === "github" && values[0] === "status") return "github status";
     if (value === "operation" && values[0] === "get") return "operation get";
     if (value === "credits" && values[0] === "account") return "credits account";
+    if (value === "referral" && values[0] === "link") return "referral link";
     if (value === "credits" && values[0] === "balance") return "credits balance";
     if (value === "billing" && values[0] === "recharge" && values[1] === "get")
       return "billing recharge get";
@@ -701,6 +722,10 @@ export const recognizedCommandLabel = (argv: readonly string[]): RecognizedComma
       return "project dev-access mode";
     if (value === "project" && values[0] === "dev-access" && values[1] === "create")
       return "project dev-access create";
+    if (value === "project" && values[0] === "flag" && values[1] === "status")
+      return "project flag status";
+    if (value === "project" && values[0] === "flag" && values[1] === "set")
+      return "project flag set";
     if (value === "database" && values[0] === "compute" && values[1] === "set")
       return "database compute set";
     if (value === "database" && values[0] === "compute" && values[1] === "get")
@@ -1080,6 +1105,12 @@ export const parseProductCliCommand = (argv: readonly string[]): ProductCliComma
     const options = parseOptions(values, ["--organization"]);
     return { kind: "credits-account", organizationId: options["--organization"], credentialStore };
   }
+  if (first === "referral" && values[0] === "link") {
+    values.shift();
+    if (yes || wait || follow || stdin) throw new InvalidCommandError();
+    const options = parseOptions(values, ["--organization"]);
+    return { kind: "referral-link", organizationId: options["--organization"], credentialStore };
+  }
   if (first === "credits" && values.shift() === "balance") {
     if (yes || wait || follow || stdin) throw new InvalidCommandError();
     const options = parseOptions(values, ["--organization"]);
@@ -1266,6 +1297,27 @@ export const parseProductCliCommand = (argv: readonly string[]): ProductCliComma
         credentialStore,
       };
     }
+    if (subcommand === "flag") {
+      const action = values.shift();
+      if (yes || wait || follow || stdin) throw new InvalidCommandError();
+      if (action === "status") {
+        const options = parseOptions(values, ["--project"]);
+        return { kind: "project-flag-status", projectId: options["--project"], credentialStore };
+      }
+      if (action === "set") {
+        const options = parseOptions(values, ["--project", "--enabled", "--idempotency-key"]);
+        if (options["--enabled"] !== "true" && options["--enabled"] !== "false")
+          throw new InvalidCommandError();
+        return {
+          kind: "project-flag-set",
+          projectId: options["--project"],
+          enabled: options["--enabled"] === "true",
+          idempotencyKey: options["--idempotency-key"],
+          credentialStore,
+        };
+      }
+      throw new InvalidCommandError();
+    }
     if (subcommand === "dev-access" && values.shift() === "create") {
       if (yes || wait || follow || stdin) throw new InvalidCommandError();
       const options = parseOptions(values, ["--project"]);

package/src/apps/product-cli/index.ts

@@ -14,6 +14,8 @@ export {
   parseCurrentIdentity,
   parseDevAccessTicket,
   parseDevAccessState,
+  parsePoweredByFlag,
+  parseOrganizationReferral,
   parseCloudflareDnsAuthorization,
   parseCloudflareDnsAuthorizationStatus,
   parsePaidDomain,

package/src/apps/product-cli/product-api.ts

@@ -45,6 +45,7 @@ import {
   type BillingPortal,
   getOrganizationCredits,
   getOrganizationAccount,
+  getOrganizationReferral,
   type OrganizationAccount,
   getOrganizationCreditUsage,
   type OrganizationCreditUsage,
@@ -61,6 +62,8 @@ import {
   rotateProjectDevShareLink,
   revokeProjectDevShareLink,
   setProjectDevAccessMode,
+  getProjectPoweredByFlag,
+  setProjectPoweredByFlag,
   createDeployment,
   createProject,
   submitFeedback,
@@ -193,6 +196,9 @@ export interface ProductApi {
   }): Promise<import("@ohmyhost/sdk-ts").BillingRecharge>;
   createBillingPortal(organizationId: string): Promise<BillingPortal>;
   getOrganizationAccount(organizationId: string): Promise<OrganizationAccount>;
+  getOrganizationReferral(
+    organizationId: string,
+  ): Promise<import("@ohmyhost/sdk-ts").OrganizationReferral>;
   getOrganizationCredits(organizationId: string): Promise<OrganizationCredits>;
   getOrganizationCreditUsage(input: {
     organizationId: string;
@@ -277,6 +283,12 @@ export interface ProductApi {
     mode: "protected" | "public",
     idempotencyKey: string,
   ): Promise<import("@ohmyhost/sdk-ts").DevAccessState>;
+  getPoweredByFlag(projectId: string): Promise<import("@ohmyhost/sdk-ts").PoweredByFlag>;
+  setPoweredByFlag(
+    projectId: string,
+    enabled: boolean,
+    idempotencyKey: string,
+  ): Promise<import("@ohmyhost/sdk-ts").PoweredByFlag>;
   submitFeedback(input: {
     report: import("@ohmyhost/sdk-ts").FeedbackSubmission;
     idempotencyKey: string;
@@ -489,6 +501,9 @@ export class GeneratedSdkProductApi implements ProductApi {
     return parseAccountProfile(await getAccountProfile({ client: this.#client }));
   }
 
+  public getOrganizationReferral(organizationId: string) {
+    return getOrganizationReferral({ organization_id: organizationId }, { client: this.#client });
+  }
   public getOrganizationAccount(organizationId: string) {
     return getOrganizationAccount({ organization_id: organizationId }, { client: this.#client });
   }
@@ -790,6 +805,19 @@ export class GeneratedSdkProductApi implements ProductApi {
       { client: this.#client },
     );
   }
+  public async getPoweredByFlag(projectId: string) {
+    return getProjectPoweredByFlag({ project_id: projectId }, { client: this.#client });
+  }
+  public async setPoweredByFlag(projectId: string, enabled: boolean, idempotencyKey: string) {
+    return setProjectPoweredByFlag(
+      {
+        project_id: projectId,
+        "Idempotency-Key": idempotencyKey,
+        setPoweredByFlagRequest: { enabled },
+      },
+      { client: this.#client },
+    );
+  }
   public async createDevAccessTicket(projectId: string): Promise<DevAccessTicket> {
     return createProjectDevAccessTicket({ project_id: projectId }, { client: this.#client });
   }

package/src/apps/product-cli/runtime-contract.ts

@@ -273,6 +273,12 @@ export const PROBLEM_POLICY = {
     retryable: false,
     action: "Finish database provisioning, then request the export again. No backup was accepted.",
   },
+  powered_by_flag_required: {
+    status: 409,
+    retryable: false,
+    action:
+      "Keep the flag on, remove the custom domain with 'ohmyhost domain paid delete', or buy Paid, then switch the flag off.",
+  },
   rate_limited: { status: 429, retryable: true, action: "Retry after the server delay." },
   insufficient_organization_credits: {
     status: 402,
@@ -289,7 +295,7 @@ export const PROBLEM_POLICY = {
     status: 402,
     retryable: false,
     action:
-      "Ask the organization Owner to activate Paid through billing checkout, then retry. Top-ups and signup credits do not activate Paid.",
+      "Ask the organization Owner to activate Paid through billing checkout, then retry. Top-ups and signup credits do not activate Paid. For a website domain alone, a Free workspace may instead show the powered-by flag on the project.",
   },
   interactive_login_required: {
     status: 403,
@@ -740,6 +746,39 @@ export const parseDevAccessState = (value: unknown): PublicDevAccessState => {
   return input as unknown as PublicDevAccessState;
 };
 
+export interface PublicPoweredByFlag {
+  readonly project_id: string;
+  readonly enabled: boolean;
+  readonly enabled_at: string | null;
+}
+
+export const parsePoweredByFlag = (value: unknown): PublicPoweredByFlag => {
+  const input = exactRecord(value, ["project_id", "enabled", "enabled_at"]);
+  if (
+    !isUlid(input["project_id"]) ||
+    typeof input["enabled"] !== "boolean" ||
+    (input["enabled"] ? !isIsoInstant(input["enabled_at"]) : input["enabled_at"] !== null)
+  )
+    throw new ResponseContractError();
+  return input as unknown as PublicPoweredByFlag;
+};
+
+export interface PublicOrganizationReferral {
+  readonly organization_id: string;
+  readonly referral_url: string;
+}
+
+export const parseOrganizationReferral = (value: unknown): PublicOrganizationReferral => {
+  const input = exactRecord(value, ["organization_id", "referral_url"]);
+  if (
+    !isUlid(input["organization_id"]) ||
+    input["referral_url"] !==
+      `https://ohmyho.st/?r=ref-${String(input["organization_id"]).toLowerCase()}`
+  )
+    throw new ResponseContractError();
+  return input as unknown as PublicOrganizationReferral;
+};
+
 export const parseDevAccessTicket = (value: unknown): PublicDevAccessTicket => {
   const input = exactRecord(value, [
     "ticket_id",
@@ -1141,6 +1180,8 @@ const parseProjectDeployment = (value: unknown): void => {
 
 export interface PublicOperation {
   readonly blocking_operation_id?: string;
+  /** The deployment this operation created; its diagnostics explain a failure. */
+  readonly deployment_id?: string;
   readonly progress?: OperationDeploymentProgress;
   readonly id: string;
   readonly state: "queued" | "running" | "succeeded" | "failed" | "cancelled";
@@ -1580,6 +1621,7 @@ export const parseSafeProblem = (value: unknown): SafeProblem => {
 export const parseOperation = (value: unknown): PublicOperation => {
   const input = exactRecord(value, [
     "blocking_operation_id",
+    "deployment_id",
     "id",
     "state",
     "created_at",
@@ -1595,9 +1637,11 @@ export const parseOperation = (value: unknown): PublicOperation => {
   const updatedAt = input["updated_at"];
   const result = input["result"];
   const blockingOperationId = input["blocking_operation_id"];
+  const deploymentId = input["deployment_id"];
   if (
-    blockingOperationId !== undefined &&
-    (state !== "queued" || !isUlid(blockingOperationId) || blockingOperationId === id)
+    (blockingOperationId !== undefined &&
+      (state !== "queued" || !isUlid(blockingOperationId) || blockingOperationId === id)) ||
+    (deploymentId !== undefined && !isUlid(deploymentId))
   )
     throw new ResponseContractError();
   if (
@@ -1659,6 +1703,7 @@ export const parseOperation = (value: unknown): PublicOperation => {
     ...(blockingOperationId === undefined
       ? {}
       : { blocking_operation_id: blockingOperationId as string }),
+    ...(deploymentId === undefined ? {} : { deployment_id: deploymentId as string }),
     ...(progress === undefined ? {} : { progress }),
     ...(result === undefined ? {} : { result }),
     ...(error === undefined ? {} : { error }),

package/src/packages/contracts/operation-failure.ts

@@ -1,7 +1,7 @@
 const failures = {
   operation_abandoned: [
     "The operation stopped renewing its execution lease and was ended.",
-    "Inspect project status and deployment diagnostics before creating a fresh plan. Keep this operation ID; the expired execution cannot resume.",
+    "Inspect project status and, when this operation names a deployment_id, its diagnostics with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs before creating a fresh plan. Keep this operation ID; the expired execution cannot resume.",
   ],
   database_write_rejected: [
     "The database rejected this write; it was not committed.",
@@ -66,7 +66,7 @@ const failures = {
   ],
   build_failed: [
     "The build did not produce a verified deployable artifact.",
-    "Inspect the deployment build diagnostics and verify the install and build commands for the admitted commit. Correct the reported failure before planning a new deployment.",
+    "Read the BUILD_FAILED diagnostic of this operation's deployment_id with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs; its excerpt is the tail of the install and build output. Correct that failure and verify the commands for the admitted commit before planning a new deployment.",
   ],
   insufficient_organization_credits: [
     "The organization does not have sufficient available credits for this operation.",
@@ -82,7 +82,7 @@ const failures = {
   ],
   runtime_candidate_failed: [
     "The deployed candidate failed its runtime checks.",
-    "Inspect deployment runtime diagnostics, required secrets and the health-check route before creating a new deployment plan.",
+    "Read the HEALTH_CHECK_FAILED diagnostic of this operation's deployment_id with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs. Its route must answer 2xx to a cookieless GET without a redirect; status_code and, for owners, excerpt show what it answered. Fix that, often a missing secret or a redirect, then plan a new deployment.",
   ],
   runtime_candidate_rejected: [
     "The runtime rejected the built Worker script.",

package/src/packages/sdk-ts/generated/index.ts

@@ -45,12 +45,14 @@ export {
   getOrganizationAccount,
   getOrganizationCredits,
   getOrganizationCreditUsage,
+  getOrganizationReferral,
   getPaidProjectDomain,
   getProject,
   getProjectContext,
   getProjectCreditBudget,
   getProjectExport,
   getProjectHandleAvailability,
+  getProjectPoweredByFlag,
   getProjectSource,
   getProjectSourceAutoDeploy,
   getProjectStatus,
@@ -87,6 +89,7 @@ export {
   setProjectCreditBudget,
   setProjectDevAccessMode,
   setProjectNotes,
+  setProjectPoweredByFlag,
   streamDeploymentLogs,
   streamOperationEvents,
   submitContactRequest,
@@ -364,6 +367,11 @@ export type {
   GetOrganizationCreditUsageErrors,
   GetOrganizationCreditUsageResponse,
   GetOrganizationCreditUsageResponses,
+  GetOrganizationReferralData,
+  GetOrganizationReferralError,
+  GetOrganizationReferralErrors,
+  GetOrganizationReferralResponse,
+  GetOrganizationReferralResponses,
   GetPaidProjectDomainData,
   GetPaidProjectDomainError,
   GetPaidProjectDomainErrors,
@@ -392,6 +400,11 @@ export type {
   GetProjectHandleAvailabilityErrors,
   GetProjectHandleAvailabilityResponse,
   GetProjectHandleAvailabilityResponses,
+  GetProjectPoweredByFlagData,
+  GetProjectPoweredByFlagError,
+  GetProjectPoweredByFlagErrors,
+  GetProjectPoweredByFlagResponse,
+  GetProjectPoweredByFlagResponses,
   GetProjectResponse,
   GetProjectResponses,
   GetProjectSourceAutoDeployData,
@@ -493,6 +506,7 @@ export type {
   OrganizationAccount,
   OrganizationCredits,
   OrganizationCreditUsage,
+  OrganizationReferral,
   PaidDomain,
   PaidDomainPlan,
   PaidDomainRequest,
@@ -522,6 +536,7 @@ export type {
   PlanProjectDeletionErrors,
   PlanProjectDeletionResponse,
   PlanProjectDeletionResponses,
+  PoweredByFlag,
   PrepareManagedMailWebhookData,
   PrepareManagedMailWebhookError,
   PrepareManagedMailWebhookErrors,
@@ -623,6 +638,7 @@ export type {
   RotateProjectDevShareLinkResponses,
   SecretName,
   SetDevAccessModeRequest,
+  SetPoweredByFlagRequest,
   SetProjectCreditBudgetData,
   SetProjectCreditBudgetError,
   SetProjectCreditBudgetErrors,
@@ -639,6 +655,11 @@ export type {
   SetProjectNotesErrors,
   SetProjectNotesResponse,
   SetProjectNotesResponses,
+  SetProjectPoweredByFlagData,
+  SetProjectPoweredByFlagError,
+  SetProjectPoweredByFlagErrors,
+  SetProjectPoweredByFlagResponse,
+  SetProjectPoweredByFlagResponses,
   Sha256Digest,
   SourceAutoDeploy,
   SourceDeploymentId,

package/src/packages/sdk-ts/generated/sdk.gen.ts

@@ -106,6 +106,8 @@ import type {
   GetOrganizationCreditsResponses,
   GetOrganizationCreditUsageErrors,
   GetOrganizationCreditUsageResponses,
+  GetOrganizationReferralErrors,
+  GetOrganizationReferralResponses,
   GetPaidProjectDomainErrors,
   GetPaidProjectDomainResponses,
   GetProjectContextErrors,
@@ -117,6 +119,8 @@ import type {
   GetProjectExportResponses,
   GetProjectHandleAvailabilityErrors,
   GetProjectHandleAvailabilityResponses,
+  GetProjectPoweredByFlagErrors,
+  GetProjectPoweredByFlagResponses,
   GetProjectResponses,
   GetProjectSourceAutoDeployErrors,
   GetProjectSourceAutoDeployResponses,
@@ -192,6 +196,7 @@ import type {
   RotateProjectDevShareLinkErrors,
   RotateProjectDevShareLinkResponses,
   SetDevAccessModeRequest,
+  SetPoweredByFlagRequest,
   SetProjectCreditBudgetErrors,
   SetProjectCreditBudgetRequest,
   SetProjectCreditBudgetResponses,
@@ -199,6 +204,8 @@ import type {
   SetProjectDevAccessModeResponses,
   SetProjectNotesErrors,
   SetProjectNotesResponses,
+  SetProjectPoweredByFlagErrors,
+  SetProjectPoweredByFlagResponses,
   StreamDeploymentLogsErrors,
   StreamDeploymentLogsResponse,
   StreamDeploymentLogsResponses,
@@ -375,6 +382,48 @@ export const getGithubOrganizationConnection = <ThrowOnError extends boolean = t
   });
 };
 
+/**
+ * Read the workspace's referral link
+ *
+ * Any member may share it. A new user whose first workspace comes from this link starts with 30 days of Paid access and 1,000 credits; that workspace's first payment gives this workspace 1,000 credits and 30 more days of granted Paid access.
+ */
+export const getOrganizationReferral = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetOrganizationReferralResponses,
+  GetOrganizationReferralErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetOrganizationReferralResponses,
+    GetOrganizationReferralErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/referral",
+    ...options,
+    ...params,
+  });
+};
+
 /**
  * Read effective plan and monthly versus one-time credit balance
  */
@@ -1974,6 +2023,99 @@ export const setProjectDevAccessMode = <ThrowOnError extends boolean = true>(
   });
 };
 
+/**
+ * Read the "Powered by ohmyho.st" flag
+ *
+ * Whether the production site shows the opt-in flag for the current owner organization.
+ */
+export const getProjectPoweredByFlag = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetProjectPoweredByFlagResponses,
+  GetProjectPoweredByFlagErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectPoweredByFlagResponses,
+    GetProjectPoweredByFlagErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/powered-by-flag",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Show or hide the "Powered by ohmyho.st" flag
+ *
+ * Owner-only. The production site shows a small flag on its right edge that links to ohmyho.st. While it is on, a Free workspace may connect its own domain to this project and the custom-hostname fee is waived; Paid periods receive bonus credits. Hiding it is refused while a Free workspace's domain depends on it. A retry with the same Idempotency-Key and body returns the first result without switching again; a changed request under a used key returns idempotency_key_reused (409).
+ */
+export const setProjectPoweredByFlag = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    setPoweredByFlagRequest: SetPoweredByFlagRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  SetProjectPoweredByFlagResponses,
+  SetProjectPoweredByFlagErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "setPoweredByFlagRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    SetProjectPoweredByFlagResponses,
+    SetProjectPoweredByFlagErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/powered-by-flag",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
 /**
  * Create a single-use dev access ticket
  *

package/src/packages/sdk-ts/generated/types.gen.ts

@@ -569,13 +569,17 @@ export type DeploymentDiagnostic = {
   trace_id?: string;
   duration_ms?: number;
   /**
-   * The sanitized tail of the customer's own install/build output, newest lines last. Present only on a BUILD_FAILED diagnostic; terminal escapes and control characters are removed before storage.
+   * The customer's own output with control characters removed before storage: on BUILD_FAILED the tail of the install/build output (newest lines last), on HEALTH_CHECK_FAILED the head of the body the health check was answered with (at most 4096 characters, never a header). A running application holds its environment's secrets and this answer is not scanned for them, so, like a query of the project's database, a HEALTH_CHECK_FAILED excerpt is returned only to an owner of the project; never answer a health check with a secret.
    */
   excerpt?: string;
   /**
-   * Whether earlier build output was omitted from excerpt. Present exactly when excerpt is present.
+   * Whether output was omitted from excerpt (earlier build output, or the rest of the health answer). Present exactly when excerpt is present.
    */
   excerpt_truncated?: boolean;
+  /**
+   * The HTTP status the health check was answered with; present only on HEALTH_CHECK_FAILED. The probe is a cookieless GET of route that follows no redirect, so a 3xx is unhealthy too.
+   */
+  status_code?: number;
   occurred_at: string;
 };
 
@@ -670,6 +674,24 @@ export type SetDevAccessModeRequest = {
   mode: "protected" | "public";
 };
 
+export type OrganizationReferral = {
+  organization_id: Ulid;
+  referral_url: string;
+};
+
+export type SetPoweredByFlagRequest = {
+  enabled: boolean;
+};
+
+export type PoweredByFlag = {
+  project_id: Ulid;
+  enabled: boolean;
+  /**
+   * When the current owner switched the flag on; null while it is hidden.
+   */
+  enabled_at: string | null;
+};
+
 export type DevAccessState = {
   project_id: Ulid;
   mode: "protected" | "public";
@@ -1076,6 +1098,7 @@ export type ProblemDetails = {
     | "cloudflare_authorization_closed"
     | "project_notes_conflict"
     | "project_export_not_ready"
+    | "powered_by_flag_required"
     | "interactive_login_required"
     | "api_key_creation_uncertain"
     | "api_key_permissions_unavailable"
@@ -1098,6 +1121,10 @@ export type Operation = {
    * The active operation holding this queued operation's project mutation claim.
    */
   blocking_operation_id?: Ulid;
+  /**
+   * The deployment this operation created (deploy, promotion or rollback), in every state. After a failure, read its diagnostics with deployment logs.
+   */
+  deployment_id?: Ulid;
   id: Ulid;
   state: "queued" | "running" | "succeeded" | "failed" | "cancelled";
   created_at: string;
@@ -1641,6 +1668,61 @@ export type GetGithubOrganizationConnectionResponses = {
 export type GetGithubOrganizationConnectionResponse =
   GetGithubOrganizationConnectionResponses[keyof GetGithubOrganizationConnectionResponses];
 
+export type GetOrganizationReferralData = {
+  body?: never;
+  headers?: {
+    /**
+     * Optional caller-provided correlation identifier.
+     */
+    "X-Request-Id"?: string;
+  };
+  path: {
+    organization_id: Ulid;
+  };
+  query?: never;
+  url: "/v1/organizations/{organization_id}/referral";
+};
+
+export type GetOrganizationReferralErrors = {
+  /**
+   * The request failed.
+   */
+  400: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  401: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  403: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  404: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  429: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  503: ProblemDetails;
+};
+
+export type GetOrganizationReferralError =
+  GetOrganizationReferralErrors[keyof GetOrganizationReferralErrors];
+
+export type GetOrganizationReferralResponses = {
+  /**
+   * The workspace's referral link.
+   */
+  200: OrganizationReferral;
+};
+
+export type GetOrganizationReferralResponse =
+  GetOrganizationReferralResponses[keyof GetOrganizationReferralResponses];
+
 export type GetOrganizationAccountData = {
   body?: never;
   path: {
@@ -3751,6 +3833,122 @@ export type SetProjectDevAccessModeResponses = {
 export type SetProjectDevAccessModeResponse =
   SetProjectDevAccessModeResponses[keyof SetProjectDevAccessModeResponses];
 
+export type GetProjectPoweredByFlagData = {
+  body?: never;
+  headers?: {
+    /**
+     * Optional caller-provided correlation identifier.
+     */
+    "X-Request-Id"?: string;
+  };
+  path: {
+    /**
+     * Project identifier.
+     */
+    project_id: Ulid;
+  };
+  query?: never;
+  url: "/v1/projects/{project_id}/powered-by-flag";
+};
+
+export type GetProjectPoweredByFlagErrors = {
+  /**
+   * The request failed.
+   */
+  400: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  401: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  403: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  404: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  503: ProblemDetails;
+};
+
+export type GetProjectPoweredByFlagError =
+  GetProjectPoweredByFlagErrors[keyof GetProjectPoweredByFlagErrors];
+
+export type GetProjectPoweredByFlagResponses = {
+  /**
+   * Current flag state.
+   */
+  200: PoweredByFlag;
+};
+
+export type GetProjectPoweredByFlagResponse =
+  GetProjectPoweredByFlagResponses[keyof GetProjectPoweredByFlagResponses];
+
+export type SetProjectPoweredByFlagData = {
+  body: SetPoweredByFlagRequest;
+  headers: {
+    /**
+     * Optional caller-provided correlation identifier.
+     */
+    "X-Request-Id"?: string;
+    /**
+     * Identifies one mutation and its canonical request payload.
+     */
+    "Idempotency-Key": string;
+  };
+  path: {
+    /**
+     * Project identifier.
+     */
+    project_id: Ulid;
+  };
+  query?: never;
+  url: "/v1/projects/{project_id}/powered-by-flag";
+};
+
+export type SetProjectPoweredByFlagErrors = {
+  /**
+   * The request failed.
+   */
+  400: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  401: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  403: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  404: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  409: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  503: ProblemDetails;
+};
+
+export type SetProjectPoweredByFlagError =
+  SetProjectPoweredByFlagErrors[keyof SetProjectPoweredByFlagErrors];
+
+export type SetProjectPoweredByFlagResponses = {
+  /**
+   * Current flag state.
+   */
+  200: PoweredByFlag;
+};
+
+export type SetProjectPoweredByFlagResponse =
+  SetProjectPoweredByFlagResponses[keyof SetProjectPoweredByFlagResponses];
+
 export type CreateProjectDevAccessTicketData = {
   body?: never;
   headers?: {