@amerged/ohmyhost-cli 0.1.24 → 0.1.26

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.24.
+ohmyho.st cli client, version 0.1.26.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/THIRD_PARTY_NOTICES.md

@@ -57,7 +57,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 
-## fast-uri 3.1.6
+## fast-uri 3.1.7
 
 ### LICENSE
 

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-QIJJFWW6.js";
+} from "./chunk-YMVBC7UB.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-QIJJFWW6.js → chunk-YMVBC7UB.js}

@@ -3080,12 +3080,13 @@ var require_data = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/utils.js
+// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/utils.js
 var require_utils = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/utils.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/utils.js"(exports, module) {
     "use strict";
     var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
     var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
+    var isPort = RegExp.prototype.test.bind(/^\d*$/u);
     var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
     var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
     var isPathCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/]$/u);
@@ -3551,8 +3552,12 @@ var require_utils = __commonJS({
         uriTokens.push(host);
       }
       if (typeof component.port === "number" || typeof component.port === "string") {
+        const port = String(component.port);
+        if (!isPort(port)) {
+          throw new TypeError("URI port is malformed.");
+        }
         uriTokens.push(":");
-        uriTokens.push(String(component.port));
+        uriTokens.push(port);
       }
       return uriTokens.length ? uriTokens.join("") : void 0;
     }
@@ -3577,9 +3582,9 @@ var require_utils = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/schemes.js
+// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/schemes.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/schemes.js"(exports, module) {
     "use strict";
     var { isUUID } = require_utils();
     var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
@@ -3788,9 +3793,9 @@ var require_schemes = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/index.js
+// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/index.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/index.js"(exports, module) {
     "use strict";
     var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
@@ -3995,12 +4000,15 @@ var require_fast_uri = __commonJS({
       }
       return false;
     }
+    function isIPLiteral(host) {
+      return host[0] === "[" && host[host.length - 1] === "]";
+    }
     function hasMalformedComponentPercentEncoding(matches) {
       const host = matches[4];
-      return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !(host[0] === "[" && host[host.length - 1] === "]") && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
+      return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
     }
     function canonicalizeHost(parsed, options, schemeHandler, isIP) {
-      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && parsed.host[0] !== "[" && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
         try {
           parsed.host = new URL("http://" + parsed.host).hostname;
         } catch (e) {
@@ -4087,10 +4095,11 @@ var require_fast_uri = __commonJS({
         if (parsed.host) {
           const ipv4result = isIPv4(parsed.host);
           if (ipv4result === false) {
-            const bracketedIPLiteral = parsed.host[0] === "[" && parsed.host[parsed.host.length - 1] === "]";
+            const bracketedIPLiteral = isIPLiteral(parsed.host);
+            const hasIPLiteralBracket = parsed.host.indexOf("[") !== -1 || parsed.host.indexOf("]") !== -1;
             const ipv6result = normalizeIPv6(parsed.host);
             isIP = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
-            malformedIPLiteral = bracketedIPLiteral && ipv6result.error === true;
+            malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
             parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
             if (malformedIPLiteral) {
               parsed.error = parsed.error || "URI host is malformed.";
@@ -4113,7 +4122,9 @@ var require_fast_uri = __commonJS({
           parsed.error = parsed.error || "URI is not a " + options.reference + " reference.";
         }
         const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
-        malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
+        if (!malformedIPLiteral) {
+          malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
+        }
         if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
           if (uri.indexOf("%") !== -1) {
             if (parsed.host !== void 0 && !malformedIPLiteral) {
@@ -17008,9 +17019,6 @@ function isAdmittedFrameworkBuildScript(framework, script) {
 }
 
 // packages/contracts/dist/customer-auth-admission.js
-function managedCustomerAuthMailMessage(path) {
-  return `"${path}" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail. Set mail.enabled: true and set up a verified mail sender, or set auth.provider: none and keep the application-owned Better Auth configuration and sender. Commit and push the change, then plan the new commit.`;
-}
 function managedCustomerAuthDatabaseMessage(path) {
   return `"${path}" selects the managed Better Auth bridge, which requires the managed PostgreSQL database. Set database.enabled: true with an admitted migrations path, or set auth.provider: none and keep the application-owned authentication configuration. Commit and push the change, then plan the new commit.`;
 }
@@ -17024,12 +17032,7 @@ function managedCustomerAuthAdmissionIssue(capabilities) {
       message: managedCustomerAuthDatabaseMessage("ohmyhost.yaml")
     });
   }
-  if (capabilities.mail?.enabled === true)
-    return null;
-  return Object.freeze({
-    code: "managed_auth_mail_required",
-    message: managedCustomerAuthMailMessage("ohmyhost.yaml")
-  });
+  return null;
 }
 
 // packages/contracts/dist/framework-admission.js
@@ -17155,10 +17158,6 @@ var FRAMEWORK_CONVERSION_DETAILS = Object.freeze({
     render: managedCustomerAuthDatabaseMessage,
     pattern: /^"([^"]+)" selects the managed Better Auth bridge, which requires the managed PostgreSQL database\. Set database\.enabled: true with an admitted migrations path, or set auth\.provider: none and keep the application-owned authentication configuration\. Commit and push the change, then plan the new commit\.$/u
   }),
-  managed_auth_mail_required: Object.freeze({
-    render: managedCustomerAuthMailMessage,
-    pattern: /^"([^"]+)" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail\. Set mail\.enabled: true and set up a verified mail sender, or set auth\.provider: none and keep the application-owned Better Auth configuration and sender\. Commit and push the change, then plan the new commit\.$/u
-  }),
   database_binding_private: Object.freeze({
     render: (path) => `"${path}" reads a database connection string (DATABASE_URL, HYPERDRIVE, connectionString or a postgres:// URL); none reaches a customer Worker. Call the database with createPrivateDatabaseClient from "@ohmyhost/customer-runtime/database". ${PUSH_AND_PLAN}`,
     pattern: /^"([^"]+)" reads a database connection string \(DATABASE_URL, HYPERDRIVE, connectionString or a postgres:\/\/ URL\); none reaches a customer Worker\. Call the database with createPrivateDatabaseClient from "@ohmyhost\/customer-runtime\/database"\. Commit and push the change, then plan the new commit\.$/u
@@ -17205,7 +17204,7 @@ function parseFrameworkConversionDiagnostic(value) {
   const record5 = value;
   const path = record5["path"];
   const code = record5["code"];
-  if (Object.keys(record5).length !== 2 || !isFrameworkConversionDiagnosticCode(code) || typeof path !== "string" || path.length > 240 || (code === "managed_auth_mail_required" || code === "managed_auth_database_required" ? path !== "ohmyhost.yaml" : !/^[A-Za-z0-9_@()[\]./-]+\.(?:[cm]?[jt]sx?)$/u.test(path)) || path.split("/").some((segment) => segment === "" || segment === "." || segment === ".."))
+  if (Object.keys(record5).length !== 2 || !isFrameworkConversionDiagnosticCode(code) || typeof path !== "string" || path.length > 240 || (code === "managed_auth_database_required" ? path !== "ohmyhost.yaml" : !/^[A-Za-z0-9_@()[\]./-]+\.(?:[cm]?[jt]sx?)$/u.test(path)) || path.split("/").some((segment) => segment === "" || segment === "." || segment === ".."))
     return null;
   return Object.freeze({ code, path });
 }
@@ -18948,7 +18947,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.24",
+  version: "0.1.26",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -25239,7 +25238,8 @@ async function initializeRepository(input) {
   const project = projectName(input.project, packageJson);
   const repositoryAdmissionBlockers = repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanStackRuntime, applicationFiles, packageManagerAdmission, frameworkConfigs, compatibility, existingConfiguration);
   const supabaseMigrationCount = applicationFiles.filter((path) => /^supabase\/migrations\/[^/]+\.sql$/u.test(path)).length;
-  const postgresMigrationCount = applicationFiles.filter((path) => /^postgres\/migrations\/[^/]+\.sql$/u.test(path)).length;
+  const postgresMigrationRoot = existingConfiguration?.database?.migrations ?? "postgres/migrations";
+  const postgresMigrationCount = applicationFiles.filter((path) => path.startsWith(`${postgresMigrationRoot}/`) && path.endsWith(".sql")).length;
   const edgeFunctionNames = new Set(applicationFiles.flatMap((path) => {
     const match = path.match(/^supabase\/functions\/([^/]+)\//u);
     return match?.[1] === void 0 || match[1].startsWith("_") ? [] : [match[1]];
@@ -25249,6 +25249,7 @@ async function initializeRepository(input) {
   const configuredDatabase = existingConfiguration?.database?.enabled === true;
   const databaseProvider = supabaseMigrationCount > 0 ? "supabase" : postgresMigrationCount > 0 || configuredDatabase ? "postgresql" : "none";
   const migrationCount = databaseProvider === "supabase" ? supabaseMigrationCount : postgresMigrationCount;
+  const selectedDatabaseProvider = existingConfiguration === null ? databaseProvider : configuredDatabase ? "postgresql" : "none";
   const betterAuth = dependencies.has("better-auth") || existingConfiguration?.auth?.provider === "better-auth";
   const workos = [
     "@workos-inc/authkit-react",
@@ -25301,19 +25302,19 @@ async function initializeRepository(input) {
   });
   const configurationYaml = existingConfigurationYaml ?? generatedConfigurationYaml;
   const capabilities = Object.freeze({
-    database: databaseProvider !== "none",
+    database: selectedDatabaseProvider !== "none",
     auth: targetBetterAuth,
     mail: targetMail,
     storage: targetStorage
   });
   const companion = companionRequired ? viteCompanionScaffold(applicationFiles, capabilities) : null;
   const companionSourcePresent = companion !== null && applicationFiles.includes(companion.sourceEntryPoint);
-  const migrationSqlAdmissionBlockers = await migrationSqlBlockers(applicationDirectory, applicationFiles, existingConfiguration?.database?.migrations, databaseProvider);
+  const migrationSqlAdmissionBlockers = await migrationSqlBlockers(applicationDirectory, applicationFiles, existingConfiguration?.database?.migrations, selectedDatabaseProvider);
   const blockers = [
     ...repositoryAdmissionBlockers,
     ...await workerModuleBlockers(framework, applicationDirectory, applicationFiles),
     ...await cronBlockers(framework, existingConfiguration, applicationDirectory, applicationFiles),
-    ...migrationFilenameBlockers(applicationFiles, existingConfiguration?.database?.migrations, databaseProvider),
+    ...selectedDatabaseProvider === "none" ? [] : migrationFilenameBlockers(applicationFiles, existingConfiguration?.database?.migrations, selectedDatabaseProvider),
     ...migrationSqlAdmissionBlockers,
     ...await storageClientBlockers(existingConfiguration, applicationDirectory, applicationFiles),
     ...await databaseContractBlockers(existingConfiguration, applicationDirectory, applicationFiles)
@@ -25882,9 +25883,9 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     });
   }
   const betterAuthVersion = dependencyVersion(packageJson, "better-auth");
-  const managedMailIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
-  if (managedMailIssue !== null)
-    blockers.push(managedMailIssue);
+  const managedAuthIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
+  if (managedAuthIssue !== null)
+    blockers.push(managedAuthIssue);
   if (existingConfiguration?.auth?.provider === "better-auth" && betterAuthVersion !== null && betterAuthVersion !== SUPPORTED_BETTER_AUTH_VERSION) {
     blockers.push({
       code: "better_auth_version_unsupported",

package/dist/index.js

@@ -86,7 +86,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-QIJJFWW6.js";
+} from "./chunk-YMVBC7UB.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/product-cli",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "private": true,
   "ohmyhost": {
     "deployment": "production",

package/src/apps/product-cli/src/repository-init.ts

@@ -102,7 +102,6 @@ export interface RepositoryInitBlocker {
     | "database_driver_unsupported"
     | "build_script_missing"
     | "better_auth_version_unsupported"
-    | "managed_auth_mail_required"
     | "managed_auth_database_required"
     | "framework_ambiguous"
     | "framework_unsupported"
@@ -293,8 +292,10 @@ export async function initializeRepository(
   const supabaseMigrationCount = applicationFiles.filter((path) =>
     /^supabase\/migrations\/[^/]+\.sql$/u.test(path),
   ).length;
-  const postgresMigrationCount = applicationFiles.filter((path) =>
-    /^postgres\/migrations\/[^/]+\.sql$/u.test(path),
+  const postgresMigrationRoot =
+    existingConfiguration?.database?.migrations ?? "postgres/migrations";
+  const postgresMigrationCount = applicationFiles.filter(
+    (path) => path.startsWith(`${postgresMigrationRoot}/`) && path.endsWith(".sql"),
   ).length;
   const edgeFunctionNames = new Set(
     applicationFiles.flatMap((path) => {
@@ -315,6 +316,9 @@ export async function initializeRepository(
         : "none";
   const migrationCount =
     databaseProvider === "supabase" ? supabaseMigrationCount : postgresMigrationCount;
+  // Inventory remains evidence; an existing configuration selects the managed capabilities.
+  const selectedDatabaseProvider =
+    existingConfiguration === null ? databaseProvider : configuredDatabase ? "postgresql" : "none";
   const betterAuth =
     dependencies.has("better-auth") || existingConfiguration?.auth?.provider === "better-auth";
   const workos = [
@@ -390,7 +394,7 @@ export async function initializeRepository(
   });
   const configurationYaml = existingConfigurationYaml ?? generatedConfigurationYaml;
   const capabilities: RuntimeCapabilities = Object.freeze({
-    database: databaseProvider !== "none",
+    database: selectedDatabaseProvider !== "none",
     auth: targetBetterAuth,
     mail: targetMail,
     storage: targetStorage,
@@ -404,7 +408,7 @@ export async function initializeRepository(
     applicationDirectory,
     applicationFiles,
     existingConfiguration?.database?.migrations,
-    databaseProvider,
+    selectedDatabaseProvider,
   );
   const blockers = [
     ...repositoryAdmissionBlockers,
@@ -415,11 +419,13 @@ export async function initializeRepository(
       applicationDirectory,
       applicationFiles,
     )),
-    ...migrationFilenameBlockers(
-      applicationFiles,
-      existingConfiguration?.database?.migrations,
-      databaseProvider,
-    ),
+    ...(selectedDatabaseProvider === "none"
+      ? []
+      : migrationFilenameBlockers(
+          applicationFiles,
+          existingConfiguration?.database?.migrations,
+          selectedDatabaseProvider,
+        )),
     ...migrationSqlAdmissionBlockers,
     ...(await storageClientBlockers(existingConfiguration, applicationDirectory, applicationFiles)),
     ...(await databaseContractBlockers(
@@ -1244,8 +1250,8 @@ function repositoryBlockers(
     });
   }
   const betterAuthVersion = dependencyVersion(packageJson, "better-auth");
-  const managedMailIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
-  if (managedMailIssue !== null) blockers.push(managedMailIssue);
+  const managedAuthIssue = managedCustomerAuthAdmissionIssue(existingConfiguration);
+  if (managedAuthIssue !== null) blockers.push(managedAuthIssue);
   if (
     existingConfiguration?.auth?.provider === "better-auth" &&
     betterAuthVersion !== null &&

package/src/packages/contracts/src/customer-auth-admission.ts

@@ -4,19 +4,15 @@ export interface ManagedCustomerAuthCapabilities {
   readonly mail?: Readonly<{ enabled: boolean }>;
 }
 
-export function managedCustomerAuthMailMessage(path: string): string {
-  return `"${path}" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail. Set mail.enabled: true and set up a verified mail sender, or set auth.provider: none and keep the application-owned Better Auth configuration and sender. Commit and push the change, then plan the new commit.`;
-}
-
 export function managedCustomerAuthDatabaseMessage(path: string): string {
   return `"${path}" selects the managed Better Auth bridge, which requires the managed PostgreSQL database. Set database.enabled: true with an admitted migrations path, or set auth.provider: none and keep the application-owned authentication configuration. Commit and push the change, then plan the new commit.`;
 }
 
-/** Dependency inventory never selects the managed bridge; only the explicit auth capability does. */
+/** Managed auth needs its real database; Mail remains an independent optional capability. */
 export function managedCustomerAuthAdmissionIssue(
   capabilities: ManagedCustomerAuthCapabilities | null | undefined,
 ): Readonly<{
-  code: "managed_auth_database_required" | "managed_auth_mail_required";
+  code: "managed_auth_database_required";
   message: string;
 }> | null {
   if (capabilities?.auth?.provider !== "better-auth") {
@@ -28,9 +24,5 @@ export function managedCustomerAuthAdmissionIssue(
       message: managedCustomerAuthDatabaseMessage("ohmyhost.yaml"),
     });
   }
-  if (capabilities.mail?.enabled === true) return null;
-  return Object.freeze({
-    code: "managed_auth_mail_required" as const,
-    message: managedCustomerAuthMailMessage("ohmyhost.yaml"),
-  });
+  return null;
 }

package/src/packages/contracts/src/framework-admission.ts

@@ -1,12 +1,6 @@
 import { PINNED_BUN_VERSION } from "./framework-build-script.mjs";
-import {
-  managedCustomerAuthMailMessage,
-  managedCustomerAuthDatabaseMessage,
-} from "./customer-auth-admission.js";
-export {
-  managedCustomerAuthAdmissionIssue,
-  managedCustomerAuthMailMessage,
-} from "./customer-auth-admission.js";
+import { managedCustomerAuthDatabaseMessage } from "./customer-auth-admission.js";
+export { managedCustomerAuthAdmissionIssue } from "./customer-auth-admission.js";
 
 export type PackageManagerName = "bun" | "npm" | "pnpm" | "yarn";
 
@@ -202,7 +196,6 @@ function versionAdmission(
 
 export type FrameworkConversionDiagnosticCode =
   | "managed_auth_database_required"
-  | "managed_auth_mail_required"
   | "database_binding_private"
   | "database_driver_unsupported"
   | "source_syntax_invalid"
@@ -233,11 +226,6 @@ const FRAMEWORK_CONVERSION_DETAILS: Readonly<
     pattern:
       /^"([^"]+)" selects the managed Better Auth bridge, which requires the managed PostgreSQL database\. Set database\.enabled: true with an admitted migrations path, or set auth\.provider: none and keep the application-owned authentication configuration\. Commit and push the change, then plan the new commit\.$/u,
   }),
-  managed_auth_mail_required: Object.freeze({
-    render: managedCustomerAuthMailMessage,
-    pattern:
-      /^"([^"]+)" selects the managed Better Auth bridge, which sends verification and password-reset email through ohmyhost Mail\. Set mail\.enabled: true and set up a verified mail sender, or set auth\.provider: none and keep the application-owned Better Auth configuration and sender\. Commit and push the change, then plan the new commit\.$/u,
-  }),
   database_binding_private: Object.freeze({
     render: (path: string) =>
       `"${path}" reads a database connection string (DATABASE_URL, HYPERDRIVE, connectionString or a postgres:// URL); none reaches a customer Worker. Call the database with createPrivateDatabaseClient from "@ohmyhost/customer-runtime/database". ${PUSH_AND_PLAN}`,
@@ -329,7 +317,7 @@ export function parseFrameworkConversionDiagnostic(
     !isFrameworkConversionDiagnosticCode(code) ||
     typeof path !== "string" ||
     path.length > 240 ||
-    (code === "managed_auth_mail_required" || code === "managed_auth_database_required"
+    (code === "managed_auth_database_required"
       ? path !== "ohmyhost.yaml"
       : !/^[A-Za-z0-9_@()[\]./-]+\.(?:[cm]?[jt]sx?)$/u.test(path)) ||
     path.split("/").some((segment) => segment === "" || segment === "." || segment === "..")

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/sdk.gen.ts

@@ -2749,7 +2749,7 @@ export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
 /**
  * Plan a deployment
  *
- * Resolves immutable inputs and estimates effects without provider mutation or billable work. The plan targets Dev unless `environment` is `prod`; a Prod plan builds straight into Prod, except that a project with shared data and a database only reaches Prod through promotion. Mail and the currently supported mail-backed Better Auth contract require a confirmed Paid service period; it is checked again before build reservation. An old sender configuration is not Paid authority.
+ * Resolves immutable inputs and estimates effects without provider mutation or billable work. The plan targets Dev unless `environment` is `prod`; a Prod plan builds straight into Prod, except that a project with shared data and a database only reaches Prod through promotion. Managed mail requires a confirmed Paid service period; it is checked again before build reservation. Selecting the managed Better Auth bridge does not require managed mail or Paid access. An old sender configuration is not Paid authority.
  */
 export const planDeployment = <ThrowOnError extends boolean = true>(
   parameters: {