@amerged/ohmyhost-cli 0.1.25 → 0.1.27

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.25.
+ohmyho.st cli client, version 0.1.27.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/THIRD_PARTY_NOTICES.md

@@ -57,7 +57,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 
-## fast-uri 3.1.6
+## fast-uri 3.1.7
 
 ### LICENSE
 

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-YOEEWHSQ.js";
+} from "./chunk-KTRUF6C5.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-YOEEWHSQ.js → chunk-KTRUF6C5.js}

@@ -3080,12 +3080,13 @@ var require_data = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/utils.js
+// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/utils.js
 var require_utils = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/utils.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/utils.js"(exports, module) {
     "use strict";
     var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
     var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
+    var isPort = RegExp.prototype.test.bind(/^\d*$/u);
     var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
     var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
     var isPathCharacter = RegExp.prototype.test.bind(/^[A-Za-z0-9\-._~!$&'()*+,;=:@/]$/u);
@@ -3551,8 +3552,12 @@ var require_utils = __commonJS({
         uriTokens.push(host);
       }
       if (typeof component.port === "number" || typeof component.port === "string") {
+        const port = String(component.port);
+        if (!isPort(port)) {
+          throw new TypeError("URI port is malformed.");
+        }
         uriTokens.push(":");
-        uriTokens.push(String(component.port));
+        uriTokens.push(port);
       }
       return uriTokens.length ? uriTokens.join("") : void 0;
     }
@@ -3577,9 +3582,9 @@ var require_utils = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/schemes.js
+// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/lib/schemes.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/schemes.js"(exports, module) {
     "use strict";
     var { isUUID } = require_utils();
     var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
@@ -3788,9 +3793,9 @@ var require_schemes = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/index.js
+// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.6/node_modules/fast-uri/index.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/index.js"(exports, module) {
     "use strict";
     var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
@@ -3995,12 +4000,15 @@ var require_fast_uri = __commonJS({
       }
       return false;
     }
+    function isIPLiteral(host) {
+      return host[0] === "[" && host[host.length - 1] === "]";
+    }
     function hasMalformedComponentPercentEncoding(matches) {
       const host = matches[4];
-      return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !(host[0] === "[" && host[host.length - 1] === "]") && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
+      return hasMalformedPercentEncoding(matches[3]) || host !== void 0 && !isIPLiteral(host) && hasMalformedPercentEncoding(host) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
     }
     function canonicalizeHost(parsed, options, schemeHandler, isIP) {
-      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && parsed.host[0] !== "[" && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
+      if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport) && parsed.host && !isIPLiteral(parsed.host) && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed.host)) {
         try {
           parsed.host = new URL("http://" + parsed.host).hostname;
         } catch (e) {
@@ -4087,10 +4095,11 @@ var require_fast_uri = __commonJS({
         if (parsed.host) {
           const ipv4result = isIPv4(parsed.host);
           if (ipv4result === false) {
-            const bracketedIPLiteral = parsed.host[0] === "[" && parsed.host[parsed.host.length - 1] === "]";
+            const bracketedIPLiteral = isIPLiteral(parsed.host);
+            const hasIPLiteralBracket = parsed.host.indexOf("[") !== -1 || parsed.host.indexOf("]") !== -1;
             const ipv6result = normalizeIPv6(parsed.host);
             isIP = ipv6result.isIPV6 || ipv6result.isIPVFuture === true;
-            malformedIPLiteral = bracketedIPLiteral && ipv6result.error === true;
+            malformedIPLiteral = hasIPLiteralBracket && (!bracketedIPLiteral || ipv6result.error === true);
             parsed.host = isIP ? ipv6result.host : ipv6result.host.toLowerCase();
             if (malformedIPLiteral) {
               parsed.error = parsed.error || "URI host is malformed.";
@@ -4113,7 +4122,9 @@ var require_fast_uri = __commonJS({
           parsed.error = parsed.error || "URI is not a " + options.reference + " reference.";
         }
         const schemeHandler = getSchemeHandler(options.scheme || parsed.scheme);
-        malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
+        if (!malformedIPLiteral) {
+          malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
+        }
         if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
           if (uri.indexOf("%") !== -1) {
             if (parsed.host !== void 0 && !malformedIPLiteral) {
@@ -16991,6 +17002,19 @@ function hasControlCharacter(value, multiline) {
 
 // packages/contracts/dist/framework-build-script.mjs
 var PINNED_BUN_VERSION = "1.2.22";
+function isAdmittedNextVersion(version2) {
+  if (typeof version2 !== "string")
+    return false;
+  const match = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.exec(version2);
+  if (match === null)
+    return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const patch = Number(match[3]);
+  if (![major, minor, patch].every(Number.isSafeInteger))
+    return false;
+  return major === 15 && minor === 5 && patch >= 26 || major === 16 && minor === 3 && patch >= 6 && patch <= 7;
+}
 var TYPESCRIPT_BUILD_STAGE = /^tsc(?:[ \t]+(?:--noEmit|-b|--build))?$/u;
 function isAdmittedFrameworkBuildScript(framework, script) {
   if (typeof script !== "string")
@@ -17099,7 +17123,7 @@ function resolveFrameworkConfig(basename2, files) {
 var VERIFIED_VERSIONS = Object.freeze({
   vite: /* @__PURE__ */ new Set(["5.4.21", "8.0.16", "8.2.2"]),
   "tanstack-start": /* @__PURE__ */ new Set(["1.168.26", "1.168.49"]),
-  nextjs: /* @__PURE__ */ new Set(["15.5.23", "16.3.2"])
+  nextjs: /* @__PURE__ */ new Set(["15.5.26", "16.3.7"])
 });
 function classifyFrameworkVersion(framework, version2) {
   const parsed = parseVersionSpec(version2);
@@ -17128,7 +17152,7 @@ function insideAdmittedWindow(framework, version2) {
     case "tanstack-start":
       return compareVersions(version2, [1, 168, 26]) >= 0 && compareVersions(version2, [1, 168, 49]) <= 0;
     case "nextjs":
-      return version2[0] === 15 && version2[1] === 5 || compareVersions(version2, [16, 0, 0]) >= 0 && compareVersions(version2, [16, 3, 4]) <= 0;
+      return isAdmittedNextVersion(version2.join("."));
   }
 }
 function compareVersions(left, right) {
@@ -17965,6 +17989,7 @@ var parsePaidDomain = (value) => {
   const records2 = input["validation_records"];
   if (![
     "not_configured",
+    "awaiting_deployment",
     "pending",
     "active",
     "reconciliation_required",
@@ -17975,7 +18000,7 @@ var parsePaidDomain = (value) => {
     "paid_plan_required",
     "insufficient_organization_credits",
     "project_budget_exceeded"
-  ].includes(input["suspension_reason"]) || status === "suspended" !== (input["suspension_reason"] !== null) || status === "suspended" && input["url"] !== null || input["environment"] !== "prod" || !isSaasCnameTarget(input["cname_target"]) || hostname !== null && !isPaidHostname(hostname) || input["custom_hostname_status"] !== null && typeof input["custom_hostname_status"] !== "string" || input["ssl_status"] !== null && typeof input["ssl_status"] !== "string" || !Array.isArray(records2) || records2.length > 16 || !records2.every(isPaidValidationRecord) || input["url"] !== null && input["url"] !== `https://${String(hostname)}`) {
+  ].includes(input["suspension_reason"]) || status === "suspended" !== (input["suspension_reason"] !== null) || status === "suspended" && input["url"] !== null || input["environment"] !== "prod" || !isSaasCnameTarget(input["cname_target"]) || hostname !== null && !isPaidHostname(hostname) || input["custom_hostname_status"] !== null && typeof input["custom_hostname_status"] !== "string" || input["ssl_status"] !== null && typeof input["ssl_status"] !== "string" || !Array.isArray(records2) || records2.length > 16 || !records2.every(isPaidValidationRecord) || input["url"] !== null && input["url"] !== `https://${String(hostname)}` || status === "awaiting_deployment" && (hostname === null || input["custom_hostname_status"] !== null || input["ssl_status"] !== null || input["url"] !== null || records2.length !== 0)) {
     throw new ResponseContractError();
   }
   return input;
@@ -18936,7 +18961,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.25",
+  version: "0.1.27",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -25227,7 +25252,8 @@ async function initializeRepository(input) {
   const project = projectName(input.project, packageJson);
   const repositoryAdmissionBlockers = repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanStackRuntime, applicationFiles, packageManagerAdmission, frameworkConfigs, compatibility, existingConfiguration);
   const supabaseMigrationCount = applicationFiles.filter((path) => /^supabase\/migrations\/[^/]+\.sql$/u.test(path)).length;
-  const postgresMigrationCount = applicationFiles.filter((path) => /^postgres\/migrations\/[^/]+\.sql$/u.test(path)).length;
+  const postgresMigrationRoot = existingConfiguration?.database?.migrations ?? "postgres/migrations";
+  const postgresMigrationCount = applicationFiles.filter((path) => path.startsWith(`${postgresMigrationRoot}/`) && path.endsWith(".sql")).length;
   const edgeFunctionNames = new Set(applicationFiles.flatMap((path) => {
     const match = path.match(/^supabase\/functions\/([^/]+)\//u);
     return match?.[1] === void 0 || match[1].startsWith("_") ? [] : [match[1]];
@@ -25856,7 +25882,7 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     const unsupported = compatibility.frameworks.filter((entry) => entry.classification === "unsupported").map((entry) => `${FRAMEWORK_PACKAGE[entry.framework]}@${entry.version || "missing"}`).join(", ");
     blockers.push({
       code: "framework_version_unsupported",
-      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.x or 16.0.0\u201316.3.4, vite 5.4.0\u20138.2.2, @tanstack/react-start 1.168.26\u20131.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`
+      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.26+ (15.5.x) or 16.3.6\u201316.3.7, vite 5.4.0\u20138.2.2, @tanstack/react-start 1.168.26\u20131.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`
     });
   }
   const scripts = packageJson["scripts"];
@@ -25894,7 +25920,7 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     if (!nextConfigured) {
       blockers.push({
         code: "next_adapter_unconfigured",
-        message: 'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.x or 16.0.0\u201316.3.4, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.'
+        message: 'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.26+ (15.5.x) or 16.3.6\u201316.3.7, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.'
       });
     }
   }

package/dist/index.js

@@ -86,7 +86,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-YOEEWHSQ.js";
+} from "./chunk-KTRUF6C5.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/product-cli",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "private": true,
   "ohmyhost": {
     "deployment": "production",

package/src/apps/product-cli/src/repository-init.ts

@@ -292,8 +292,10 @@ export async function initializeRepository(
   const supabaseMigrationCount = applicationFiles.filter((path) =>
     /^supabase\/migrations\/[^/]+\.sql$/u.test(path),
   ).length;
-  const postgresMigrationCount = applicationFiles.filter((path) =>
-    /^postgres\/migrations\/[^/]+\.sql$/u.test(path),
+  const postgresMigrationRoot =
+    existingConfiguration?.database?.migrations ?? "postgres/migrations";
+  const postgresMigrationCount = applicationFiles.filter(
+    (path) => path.startsWith(`${postgresMigrationRoot}/`) && path.endsWith(".sql"),
   ).length;
   const edgeFunctionNames = new Set(
     applicationFiles.flatMap((path) => {
@@ -1228,7 +1230,7 @@ function repositoryBlockers(
       .join(", ");
     blockers.push({
       code: "framework_version_unsupported",
-      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.x or 16.0.0–16.3.4, vite 5.4.0–8.2.2, @tanstack/react-start 1.168.26–1.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`,
+      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.26+ (15.5.x) or 16.3.6–16.3.7, vite 5.4.0–8.2.2, @tanstack/react-start 1.168.26–1.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`,
     });
   }
   const scripts = packageJson["scripts"];
@@ -1283,7 +1285,7 @@ function repositoryBlockers(
       blockers.push({
         code: "next_adapter_unconfigured",
         message:
-          'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.x or 16.0.0–16.3.4, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.',
+          'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.26+ (15.5.x) or 16.3.6–16.3.7, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.',
       });
     }
   }

package/src/apps/product-cli/src/runtime-contract.ts

@@ -94,6 +94,7 @@ export interface PublicPaidDomainPlan {
 export interface PublicPaidDomain {
   readonly status:
     | "not_configured"
+    | "awaiting_deployment"
     | "pending"
     | "active"
     | "reconciliation_required"
@@ -153,6 +154,7 @@ export const parsePaidDomain = (value: unknown): PublicPaidDomain => {
   if (
     ![
       "not_configured",
+      "awaiting_deployment",
       "pending",
       "active",
       "reconciliation_required",
@@ -176,7 +178,13 @@ export const parsePaidDomain = (value: unknown): PublicPaidDomain => {
     !Array.isArray(records) ||
     records.length > 16 ||
     !records.every(isPaidValidationRecord) ||
-    (input["url"] !== null && input["url"] !== `https://${String(hostname)}`)
+    (input["url"] !== null && input["url"] !== `https://${String(hostname)}`) ||
+    (status === "awaiting_deployment" &&
+      (hostname === null ||
+        input["custom_hostname_status"] !== null ||
+        input["ssl_status"] !== null ||
+        input["url"] !== null ||
+        records.length !== 0))
   ) {
     throw new ResponseContractError();
   }

package/src/packages/contracts/src/framework-admission.ts

@@ -1,4 +1,4 @@
-import { PINNED_BUN_VERSION } from "./framework-build-script.mjs";
+import { isAdmittedNextVersion, PINNED_BUN_VERSION } from "./framework-build-script.mjs";
 import { managedCustomerAuthDatabaseMessage } from "./customer-auth-admission.js";
 export { managedCustomerAuthAdmissionIssue } from "./customer-auth-admission.js";
 
@@ -129,7 +129,7 @@ export interface FrameworkVersionAdmission {
 const VERIFIED_VERSIONS: Readonly<Record<AdmittedFramework, ReadonlySet<string>>> = Object.freeze({
   vite: new Set(["5.4.21", "8.0.16", "8.2.2"]),
   "tanstack-start": new Set(["1.168.26", "1.168.49"]),
-  nextjs: new Set(["15.5.23", "16.3.2"]),
+  nextjs: new Set(["15.5.26", "16.3.7"]),
 });
 
 export function classifyFrameworkVersion(
@@ -173,10 +173,7 @@ function insideAdmittedWindow(framework: AdmittedFramework, version: VersionTupl
         compareVersions(version, [1, 168, 26]) >= 0 && compareVersions(version, [1, 168, 49]) <= 0
       );
     case "nextjs":
-      return (
-        (version[0] === 15 && version[1] === 5) ||
-        (compareVersions(version, [16, 0, 0]) >= 0 && compareVersions(version, [16, 3, 4]) <= 0)
-      );
+      return isAdmittedNextVersion(version.join("."));
   }
 }
 

package/src/packages/contracts/src/framework-build-script.mjs

@@ -1,5 +1,24 @@
 export const PINNED_BUN_VERSION = "1.2.22";
 
+/**
+ * The installed Next.js release must satisfy the same window as source admission.
+ * @param {unknown} version
+ * @returns {boolean}
+ */
+export function isAdmittedNextVersion(version) {
+  if (typeof version !== "string") return false;
+  const match = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.exec(version);
+  if (match === null) return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const patch = Number(match[3]);
+  if (![major, minor, patch].every(Number.isSafeInteger)) return false;
+  return (
+    (major === 15 && minor === 5 && patch >= 26) ||
+    (major === 16 && minor === 3 && patch >= 6 && patch <= 7)
+  );
+}
+
 const TYPESCRIPT_BUILD_STAGE = /^tsc(?:[ \t]+(?:--noEmit|-b|--build))?$/u;
 
 /**

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/sdk.gen.ts

@@ -2560,7 +2560,7 @@ export const configureProjectDomains = <ThrowOnError extends boolean = true>(
 /**
  * Plan one Paid customer-owned hostname
  *
- * The hostname routes to the project's current Prod deployment. A project whose Prod environment has no active deployment returns production_deployment_required (409); deploy to Prod or promote the current Dev deployment, then plan again.
+ * Plan the customer's requested hostname before or after the first Prod deployment. This read-only plan explains declaration, Cloudflare consent and activation; it does not claim the hostname, create provider resources or change DNS.
  */
 export const planPaidProjectDomain = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -2698,7 +2698,7 @@ export const getPaidProjectDomain = <ThrowOnError extends boolean = true>(
 /**
  * Apply one Paid customer-owned hostname
  *
- * Requires Paid access (a Stripe period or a grant) or, for a Free workspace, a project that currently shows the powered-by flag, and no expired credit-exhaustion grace. Returns paid_plan_required otherwise, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups lift a credit-exhaustion block but never start or extend Paid access. After that check, a project whose Prod environment has no active deployment returns production_deployment_required (409) without claiming the hostname or any provider mutation; a changed request under a used key returns idempotency_key_reused (409).
+ * Requires Paid access (a Stripe period or a grant) or, for a Free workspace, a project that currently shows the powered-by flag, and no expired credit-exhaustion grace. Returns paid_plan_required otherwise, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups lift a credit-exhaustion block but never start or extend Paid access. Without an active Prod deployment, apply declares the hostname as awaiting_deployment, enabling Cloudflare consent without provider resources, DNS changes or domain charges. After a successful Prod deployment, replay the same hostname and idempotency key to activate it. A changed request under a used key returns idempotency_key_reused (409).
  */
 export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
   parameters: {

package/src/packages/sdk-ts/src/generated/types.gen.ts

@@ -351,9 +351,13 @@ export type PaidDomainPlan = {
   risks: Array<string>;
 };
 
+/**
+ * awaiting_deployment means the requested hostname is declared but not provisioned. Its hostname is present, suspension_reason, custom_hostname_status, ssl_status and url are null, and validation_records is empty. Authorize Cloudflare, deploy to Prod, then repeat the same apply.
+ */
 export type PaidDomain = {
   status:
     | "not_configured"
+    | "awaiting_deployment"
     | "pending"
     | "active"
     | "reconciliation_required"
@@ -4686,7 +4690,7 @@ export type PlanPaidProjectDomainError =
 
 export type PlanPaidProjectDomainResponses = {
   /**
-   * Manual CNAME instructions and exact provider effects.
+   * The requested hostname, routing target and staged provider effects.
    */
   200: PaidDomainPlan;
 };
@@ -4880,7 +4884,7 @@ export type ApplyPaidProjectDomainError =
 
 export type ApplyPaidProjectDomainResponses = {
   /**
-   * Current Cloudflare for SaaS hostname and certificate state.
+   * Declared hostname or current Cloudflare for SaaS hostname and certificate state.
    */
   200: PaidDomain;
 };