@amerged/ohmyhost-cli 0.1.24 → 0.1.25

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.24.
+ohmyho.st cli client, version 0.1.25.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-QIJJFWW6.js";
+} from "./chunk-YOEEWHSQ.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-QIJJFWW6.js → chunk-YOEEWHSQ.js}

@@ -17008,9 +17008,6 @@ function isAdmittedFrameworkBuildScript(framework, script) {
 }
 
 // packages/contracts/dist/customer-auth-admission.js
-function managedCustomerAuthMailMessage(path) {
-  return `"${path}" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail. Set mail.enabled: true and set up a verified mail sender, or set auth.provider: none and keep the application-owned Better Auth configuration and sender. Commit and push the change, then plan the new commit.`;
-}
 function managedCustomerAuthDatabaseMessage(path) {
   return `"${path}" selects the managed Better Auth bridge, which requires the managed PostgreSQL database. Set database.enabled: true with an admitted migrations path, or set auth.provider: none and keep the application-owned authentication configuration. Commit and push the change, then plan the new commit.`;
 }
@@ -17024,12 +17021,7 @@ function managedCustomerAuthAdmissionIssue(capabilities) {
       message: managedCustomerAuthDatabaseMessage("ohmyhost.yaml")
     });
   }
-  if (capabilities.mail?.enabled === true)
-    return null;
-  return Object.freeze({
-    code: "managed_auth_mail_required",
-    message: managedCustomerAuthMailMessage("ohmyhost.yaml")
-  });
+  return null;
 }
 
 // packages/contracts/dist/framework-admission.js
@@ -17155,10 +17147,6 @@ var FRAMEWORK_CONVERSION_DETAILS = Object.freeze({
     render: managedCustomerAuthDatabaseMessage,
     pattern: /^"([^"]+)" selects the managed Better Auth bridge, which requires the managed PostgreSQL database\. Set database\.enabled: true with an admitted migrations path, or set auth\.provider: none and keep the application-owned authentication configuration\. Commit and push the change, then plan the new commit\.$/u
   }),
-  managed_auth_mail_required: Object.freeze({
-    render: managedCustomerAuthMailMessage,
-    pattern: /^"([^"]+)" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail\. Set mail\.enabled: true and set up a verified mail sender, or set auth\.provider: none and keep the application-owned Better Auth configuration and sender\. Commit and push the change, then plan the new commit\.$/u
-  }),
   database_binding_private: Object.freeze({
     render: (path) => `"${path}" reads a database connection string (DATABASE_URL, HYPERDRIVE, connectionString or a postgres:// URL); none reaches a customer Worker. Call the database with createPrivateDatabaseClient from "@ohmyhost/customer-runtime/database". ${PUSH_AND_PLAN}`,
     pattern: /^"([^"]+)" reads a database connection string \(DATABASE_URL, HYPERDRIVE, connectionString or a postgres:\/\/ URL\); none reaches a customer Worker\. Call the database with createPrivateDatabaseClient from "@ohmyhost\/customer-runtime\/database"\. Commit and push the change, then plan the new commit\.$/u
@@ -17205,7 +17193,7 @@ function parseFrameworkConversionDiagnostic(value) {
   const record5 = value;
   const path = record5["path"];
   const code = record5["code"];
-  if (Object.keys(record5).length !== 2 || !isFrameworkConversionDiagnosticCode(code) || typeof path !== "string" || path.length > 240 || (code === "managed_auth_mail_required" || code === "managed_auth_database_required" ? path !== "ohmyhost.yaml" : !/^[A-Za-z0-9_@()[\]./-]+\.(?:[cm]?[jt]sx?)$/u.test(path)) || path.split("/").some((segment) => segment === "" || segment === "." || segment === ".."))
+  if (Object.keys(record5).length !== 2 || !isFrameworkConversionDiagnosticCode(code) || typeof path !== "string" || path.length > 240 || (code === "managed_auth_database_required" ? path !== "ohmyhost.yaml" : !/^[A-Za-z0-9_@()[\]./-]+\.(?:[cm]?[jt]sx?)$/u.test(path)) || path.split("/").some((segment) => segment === "" || segment === "." || segment === ".."))
     return null;
   return Object.freeze({ code, path });
 }
@@ -18948,7 +18936,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.24",
+  version: "0.1.25",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -25249,6 +25237,7 @@ async function initializeRepository(input) {
   const configuredDatabase = existingConfiguration?.database?.enabled === true;
   const databaseProvider = supabaseMigrationCount > 0 ? "supabase" : postgresMigrationCount > 0 || configuredDatabase ? "postgresql" : "none";
   const migrationCount = databaseProvider === "supabase" ? supabaseMigrationCount : postgresMigrationCount;
+  const selectedDatabaseProvider = existingConfiguration === null ? databaseProvider : configuredDatabase ? "postgresql" : "none";
   const betterAuth = dependencies.has("better-auth") || existingConfiguration?.auth?.provider === "better-auth";
   const workos = [
     "@workos-inc/authkit-react",
@@ -25301,19 +25290,19 @@ async function initializeRepository(input) {
   });
   const configurationYaml = existingConfigurationYaml ?? generatedConfigurationYaml;
   const capabilities = Object.freeze({
-    database: databaseProvider !== "none",
+    database: selectedDatabaseProvider !== "none",
     auth: targetBetterAuth,
     mail: targetMail,
     storage: targetStorage
   });
   const companion = companionRequired ? viteCompanionScaffold(applicationFiles, capabilities) : null;
   const companionSourcePresent = companion !== null && applicationFiles.includes(companion.sourceEntryPoint);
-  const migrationSqlAdmissionBlockers = await migrationSqlBlockers(applicationDirectory, applicationFiles, existingConfiguration?.database?.migrations, databaseProvider);
+  const migrationSqlAdmissionBlockers = await migrationSqlBlockers(applicationDirectory, applicationFiles, existingConfiguration?.database?.migrations, selectedDatabaseProvider);
   const blockers = [
     ...repositoryAdmissionBlockers,
     ...await workerModuleBlockers(framework, applicationDirectory, applicationFiles),
     ...await cronBlockers(framework, existingConfiguration, applicationDirectory, applicationFiles),
-    ...migrationFilenameBlockers(applicationFiles, existingConfiguration?.database?.migrations, databaseProvider),
+    ...selectedDatabaseProvider === "none" ? [] : migrationFilenameBlockers(applicationFiles, existingConfiguration?.database?.migrations, selectedDatabaseProvider),
     ...migrationSqlAdmissionBlockers,
     ...await storageClientBlockers(existingConfiguration, applicationDirectory, applicationFiles),
     ...await databaseContractBlockers(existingConfiguration, applicationDirectory, applicationFiles)
@@ -25882,9 +25871,9 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     });
   }
   const betterAuthVersion = dependencyVersion(packageJson, "better-auth");
-  const managedMailIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
-  if (managedMailIssue !== null)
-    blockers.push(managedMailIssue);
+  const managedAuthIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
+  if (managedAuthIssue !== null)
+    blockers.push(managedAuthIssue);
   if (existingConfiguration?.auth?.provider === "better-auth" && betterAuthVersion !== null && betterAuthVersion !== SUPPORTED_BETTER_AUTH_VERSION) {
     blockers.push({
       code: "better_auth_version_unsupported",

package/dist/index.js

@@ -86,7 +86,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-QIJJFWW6.js";
+} from "./chunk-YOEEWHSQ.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/product-cli",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "private": true,
   "ohmyhost": {
     "deployment": "production",

package/src/apps/product-cli/src/repository-init.ts

@@ -102,7 +102,6 @@ export interface RepositoryInitBlocker {
     | "database_driver_unsupported"
     | "build_script_missing"
     | "better_auth_version_unsupported"
-    | "managed_auth_mail_required"
     | "managed_auth_database_required"
     | "framework_ambiguous"
     | "framework_unsupported"
@@ -315,6 +314,9 @@ export async function initializeRepository(
         : "none";
   const migrationCount =
     databaseProvider === "supabase" ? supabaseMigrationCount : postgresMigrationCount;
+  // Inventory remains evidence; an existing configuration selects the managed capabilities.
+  const selectedDatabaseProvider =
+    existingConfiguration === null ? databaseProvider : configuredDatabase ? "postgresql" : "none";
   const betterAuth =
     dependencies.has("better-auth") || existingConfiguration?.auth?.provider === "better-auth";
   const workos = [
@@ -390,7 +392,7 @@ export async function initializeRepository(
   });
   const configurationYaml = existingConfigurationYaml ?? generatedConfigurationYaml;
   const capabilities: RuntimeCapabilities = Object.freeze({
-    database: databaseProvider !== "none",
+    database: selectedDatabaseProvider !== "none",
     auth: targetBetterAuth,
     mail: targetMail,
     storage: targetStorage,
@@ -404,7 +406,7 @@ export async function initializeRepository(
     applicationDirectory,
     applicationFiles,
     existingConfiguration?.database?.migrations,
-    databaseProvider,
+    selectedDatabaseProvider,
   );
   const blockers = [
     ...repositoryAdmissionBlockers,
@@ -415,11 +417,13 @@ export async function initializeRepository(
       applicationDirectory,
       applicationFiles,
     )),
-    ...migrationFilenameBlockers(
-      applicationFiles,
-      existingConfiguration?.database?.migrations,
-      databaseProvider,
-    ),
+    ...(selectedDatabaseProvider === "none"
+      ? []
+      : migrationFilenameBlockers(
+          applicationFiles,
+          existingConfiguration?.database?.migrations,
+          selectedDatabaseProvider,
+        )),
     ...migrationSqlAdmissionBlockers,
     ...(await storageClientBlockers(existingConfiguration, applicationDirectory, applicationFiles)),
     ...(await databaseContractBlockers(
@@ -1244,8 +1248,8 @@ function repositoryBlockers(
     });
   }
   const betterAuthVersion = dependencyVersion(packageJson, "better-auth");
-  const managedMailIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
-  if (managedMailIssue !== null) blockers.push(managedMailIssue);
+  const managedAuthIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
+  if (managedAuthIssue !== null) blockers.push(managedAuthIssue);
   if (
     existingConfiguration?.auth?.provider === "better-auth" &&
     betterAuthVersion !== null &&

package/src/packages/contracts/src/customer-auth-admission.ts

@@ -4,19 +4,15 @@ export interface ManagedCustomerAuthCapabilities {
   readonly mail?: Readonly<{ enabled: boolean }>;
 }
 
-export function managedCustomerAuthMailMessage(path: string): string {
-  return `"${path}" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail. Set mail.enabled: true and set up a verified mail sender, or set auth.provider: none and keep the application-owned Better Auth configuration and sender. Commit and push the change, then plan the new commit.`;
-}
-
 export function managedCustomerAuthDatabaseMessage(path: string): string {
   return `"${path}" selects the managed Better Auth bridge, which requires the managed PostgreSQL database. Set database.enabled: true with an admitted migrations path, or set auth.provider: none and keep the application-owned authentication configuration. Commit and push the change, then plan the new commit.`;
 }
 
-/** Dependency inventory never selects the managed bridge; only the explicit auth capability does. */
+/** Managed auth needs its real database; Mail remains an independent optional capability. */
 export function managedCustomerAuthAdmissionIssue(
   capabilities: ManagedCustomerAuthCapabilities | null | undefined,
 ): Readonly<{
-  code: "managed_auth_database_required" | "managed_auth_mail_required";
+  code: "managed_auth_database_required";
   message: string;
 }> | null {
   if (capabilities?.auth?.provider !== "better-auth") {
@@ -28,9 +24,5 @@ export function managedCustomerAuthAdmissionIssue(
       message: managedCustomerAuthDatabaseMessage("ohmyhost.yaml"),
     });
   }
-  if (capabilities.mail?.enabled === true) return null;
-  return Object.freeze({
-    code: "managed_auth_mail_required" as const,
-    message: managedCustomerAuthMailMessage("ohmyhost.yaml"),
-  });
+  return null;
 }

package/src/packages/contracts/src/framework-admission.ts

@@ -1,12 +1,6 @@
 import { PINNED_BUN_VERSION } from "./framework-build-script.mjs";
-import {
-  managedCustomerAuthMailMessage,
-  managedCustomerAuthDatabaseMessage,
-} from "./customer-auth-admission.js";
-export {
-  managedCustomerAuthAdmissionIssue,
-  managedCustomerAuthMailMessage,
-} from "./customer-auth-admission.js";
+import { managedCustomerAuthDatabaseMessage } from "./customer-auth-admission.js";
+export { managedCustomerAuthAdmissionIssue } from "./customer-auth-admission.js";
 
 export type PackageManagerName = "bun" | "npm" | "pnpm" | "yarn";
 
@@ -202,7 +196,6 @@ function versionAdmission(
 
 export type FrameworkConversionDiagnosticCode =
   | "managed_auth_database_required"
-  | "managed_auth_mail_required"
   | "database_binding_private"
   | "database_driver_unsupported"
   | "source_syntax_invalid"
@@ -233,11 +226,6 @@ const FRAMEWORK_CONVERSION_DETAILS: Readonly<
     pattern:
       /^"([^"]+)" selects the managed Better Auth bridge, which requires the managed PostgreSQL database\. Set database\.enabled: true with an admitted migrations path, or set auth\.provider: none and keep the application-owned authentication configuration\. Commit and push the change, then plan the new commit\.$/u,
   }),
-  managed_auth_mail_required: Object.freeze({
-    render: managedCustomerAuthMailMessage,
-    pattern:
-      /^"([^"]+)" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail\. Set mail\.enabled: true and set up a verified mail sender, or set auth\.provider: none and keep the application-owned Better Auth configuration and sender\. Commit and push the change, then plan the new commit\.$/u,
-  }),
   database_binding_private: Object.freeze({
     render: (path: string) =>
       `"${path}" reads a database connection string (DATABASE_URL, HYPERDRIVE, connectionString or a postgres:// URL); none reaches a customer Worker. Call the database with createPrivateDatabaseClient from "@ohmyhost/customer-runtime/database". ${PUSH_AND_PLAN}`,
@@ -329,7 +317,7 @@ export function parseFrameworkConversionDiagnostic(
     !isFrameworkConversionDiagnosticCode(code) ||
     typeof path !== "string" ||
     path.length > 240 ||
-    (code === "managed_auth_mail_required" || code === "managed_auth_database_required"
+    (code === "managed_auth_database_required"
       ? path !== "ohmyhost.yaml"
       : !/^[A-Za-z0-9_@()[\]./-]+\.(?:[cm]?[jt]sx?)$/u.test(path)) ||
     path.split("/").some((segment) => segment === "" || segment === "." || segment === "..")

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/sdk.gen.ts

@@ -2749,7 +2749,7 @@ export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
 /**
  * Plan a deployment
  *
- * Resolves immutable inputs and estimates effects without provider mutation or billable work. The plan targets Dev unless `environment` is `prod`; a Prod plan builds straight into Prod, except that a project with shared data and a database only reaches Prod through promotion. Mail and the currently supported mail-backed Better Auth contract require a confirmed Paid service period; it is checked again before build reservation. An old sender configuration is not Paid authority.
+ * Resolves immutable inputs and estimates effects without provider mutation or billable work. The plan targets Dev unless `environment` is `prod`; a Prod plan builds straight into Prod, except that a project with shared data and a database only reaches Prod through promotion. Managed mail requires a confirmed Paid service period; it is checked again before build reservation. Selecting the managed Better Auth bridge does not require managed mail or Paid access. An old sender configuration is not Paid authority.
  */
 export const planDeployment = <ThrowOnError extends boolean = true>(
   parameters: {