@amerged/ohmyhost-cli 0.1.26 → 0.1.27

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.26.
+ohmyho.st cli client, version 0.1.27.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-YMVBC7UB.js";
+} from "./chunk-KTRUF6C5.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-YMVBC7UB.js → chunk-KTRUF6C5.js}

@@ -17002,6 +17002,19 @@ function hasControlCharacter(value, multiline) {
 
 // packages/contracts/dist/framework-build-script.mjs
 var PINNED_BUN_VERSION = "1.2.22";
+function isAdmittedNextVersion(version2) {
+  if (typeof version2 !== "string")
+    return false;
+  const match = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.exec(version2);
+  if (match === null)
+    return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const patch = Number(match[3]);
+  if (![major, minor, patch].every(Number.isSafeInteger))
+    return false;
+  return major === 15 && minor === 5 && patch >= 26 || major === 16 && minor === 3 && patch >= 6 && patch <= 7;
+}
 var TYPESCRIPT_BUILD_STAGE = /^tsc(?:[ \t]+(?:--noEmit|-b|--build))?$/u;
 function isAdmittedFrameworkBuildScript(framework, script) {
   if (typeof script !== "string")
@@ -17110,7 +17123,7 @@ function resolveFrameworkConfig(basename2, files) {
 var VERIFIED_VERSIONS = Object.freeze({
   vite: /* @__PURE__ */ new Set(["5.4.21", "8.0.16", "8.2.2"]),
   "tanstack-start": /* @__PURE__ */ new Set(["1.168.26", "1.168.49"]),
-  nextjs: /* @__PURE__ */ new Set(["15.5.23", "16.3.2"])
+  nextjs: /* @__PURE__ */ new Set(["15.5.26", "16.3.7"])
 });
 function classifyFrameworkVersion(framework, version2) {
   const parsed = parseVersionSpec(version2);
@@ -17139,7 +17152,7 @@ function insideAdmittedWindow(framework, version2) {
     case "tanstack-start":
       return compareVersions(version2, [1, 168, 26]) >= 0 && compareVersions(version2, [1, 168, 49]) <= 0;
     case "nextjs":
-      return version2[0] === 15 && version2[1] === 5 || compareVersions(version2, [16, 0, 0]) >= 0 && compareVersions(version2, [16, 3, 4]) <= 0;
+      return isAdmittedNextVersion(version2.join("."));
   }
 }
 function compareVersions(left, right) {
@@ -17976,6 +17989,7 @@ var parsePaidDomain = (value) => {
   const records2 = input["validation_records"];
   if (![
     "not_configured",
+    "awaiting_deployment",
     "pending",
     "active",
     "reconciliation_required",
@@ -17986,7 +18000,7 @@ var parsePaidDomain = (value) => {
     "paid_plan_required",
     "insufficient_organization_credits",
     "project_budget_exceeded"
-  ].includes(input["suspension_reason"]) || status === "suspended" !== (input["suspension_reason"] !== null) || status === "suspended" && input["url"] !== null || input["environment"] !== "prod" || !isSaasCnameTarget(input["cname_target"]) || hostname !== null && !isPaidHostname(hostname) || input["custom_hostname_status"] !== null && typeof input["custom_hostname_status"] !== "string" || input["ssl_status"] !== null && typeof input["ssl_status"] !== "string" || !Array.isArray(records2) || records2.length > 16 || !records2.every(isPaidValidationRecord) || input["url"] !== null && input["url"] !== `https://${String(hostname)}`) {
+  ].includes(input["suspension_reason"]) || status === "suspended" !== (input["suspension_reason"] !== null) || status === "suspended" && input["url"] !== null || input["environment"] !== "prod" || !isSaasCnameTarget(input["cname_target"]) || hostname !== null && !isPaidHostname(hostname) || input["custom_hostname_status"] !== null && typeof input["custom_hostname_status"] !== "string" || input["ssl_status"] !== null && typeof input["ssl_status"] !== "string" || !Array.isArray(records2) || records2.length > 16 || !records2.every(isPaidValidationRecord) || input["url"] !== null && input["url"] !== `https://${String(hostname)}` || status === "awaiting_deployment" && (hostname === null || input["custom_hostname_status"] !== null || input["ssl_status"] !== null || input["url"] !== null || records2.length !== 0)) {
     throw new ResponseContractError();
   }
   return input;
@@ -18947,7 +18961,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.26",
+  version: "0.1.27",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -25868,7 +25882,7 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     const unsupported = compatibility.frameworks.filter((entry) => entry.classification === "unsupported").map((entry) => `${FRAMEWORK_PACKAGE[entry.framework]}@${entry.version || "missing"}`).join(", ");
     blockers.push({
       code: "framework_version_unsupported",
-      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.x or 16.0.0\u201316.3.4, vite 5.4.0\u20138.2.2, @tanstack/react-start 1.168.26\u20131.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`
+      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.26+ (15.5.x) or 16.3.6\u201316.3.7, vite 5.4.0\u20138.2.2, @tanstack/react-start 1.168.26\u20131.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`
     });
   }
   const scripts = packageJson["scripts"];
@@ -25906,7 +25920,7 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     if (!nextConfigured) {
       blockers.push({
         code: "next_adapter_unconfigured",
-        message: 'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.x or 16.0.0\u201316.3.4, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.'
+        message: 'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.26+ (15.5.x) or 16.3.6\u201316.3.7, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.'
       });
     }
   }

package/dist/index.js

@@ -86,7 +86,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-YMVBC7UB.js";
+} from "./chunk-KTRUF6C5.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/product-cli",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "private": true,
   "ohmyhost": {
     "deployment": "production",

package/src/apps/product-cli/src/repository-init.ts

@@ -1230,7 +1230,7 @@ function repositoryBlockers(
       .join(", ");
     blockers.push({
       code: "framework_version_unsupported",
-      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.x or 16.0.0–16.3.4, vite 5.4.0–8.2.2, @tanstack/react-start 1.168.26–1.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`,
+      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.26+ (15.5.x) or 16.3.6–16.3.7, vite 5.4.0–8.2.2, @tanstack/react-start 1.168.26–1.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`,
     });
   }
   const scripts = packageJson["scripts"];
@@ -1285,7 +1285,7 @@ function repositoryBlockers(
       blockers.push({
         code: "next_adapter_unconfigured",
         message:
-          'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.x or 16.0.0–16.3.4, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.',
+          'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.26+ (15.5.x) or 16.3.6–16.3.7, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.',
       });
     }
   }

package/src/apps/product-cli/src/runtime-contract.ts

@@ -94,6 +94,7 @@ export interface PublicPaidDomainPlan {
 export interface PublicPaidDomain {
   readonly status:
     | "not_configured"
+    | "awaiting_deployment"
     | "pending"
     | "active"
     | "reconciliation_required"
@@ -153,6 +154,7 @@ export const parsePaidDomain = (value: unknown): PublicPaidDomain => {
   if (
     ![
       "not_configured",
+      "awaiting_deployment",
       "pending",
       "active",
       "reconciliation_required",
@@ -176,7 +178,13 @@ export const parsePaidDomain = (value: unknown): PublicPaidDomain => {
     !Array.isArray(records) ||
     records.length > 16 ||
     !records.every(isPaidValidationRecord) ||
-    (input["url"] !== null && input["url"] !== `https://${String(hostname)}`)
+    (input["url"] !== null && input["url"] !== `https://${String(hostname)}`) ||
+    (status === "awaiting_deployment" &&
+      (hostname === null ||
+        input["custom_hostname_status"] !== null ||
+        input["ssl_status"] !== null ||
+        input["url"] !== null ||
+        records.length !== 0))
   ) {
     throw new ResponseContractError();
   }

package/src/packages/contracts/src/framework-admission.ts

@@ -1,4 +1,4 @@
-import { PINNED_BUN_VERSION } from "./framework-build-script.mjs";
+import { isAdmittedNextVersion, PINNED_BUN_VERSION } from "./framework-build-script.mjs";
 import { managedCustomerAuthDatabaseMessage } from "./customer-auth-admission.js";
 export { managedCustomerAuthAdmissionIssue } from "./customer-auth-admission.js";
 
@@ -129,7 +129,7 @@ export interface FrameworkVersionAdmission {
 const VERIFIED_VERSIONS: Readonly<Record<AdmittedFramework, ReadonlySet<string>>> = Object.freeze({
   vite: new Set(["5.4.21", "8.0.16", "8.2.2"]),
   "tanstack-start": new Set(["1.168.26", "1.168.49"]),
-  nextjs: new Set(["15.5.23", "16.3.2"]),
+  nextjs: new Set(["15.5.26", "16.3.7"]),
 });
 
 export function classifyFrameworkVersion(
@@ -173,10 +173,7 @@ function insideAdmittedWindow(framework: AdmittedFramework, version: VersionTupl
         compareVersions(version, [1, 168, 26]) >= 0 && compareVersions(version, [1, 168, 49]) <= 0
       );
     case "nextjs":
-      return (
-        (version[0] === 15 && version[1] === 5) ||
-        (compareVersions(version, [16, 0, 0]) >= 0 && compareVersions(version, [16, 3, 4]) <= 0)
-      );
+      return isAdmittedNextVersion(version.join("."));
   }
 }
 

package/src/packages/contracts/src/framework-build-script.mjs

@@ -1,5 +1,24 @@
 export const PINNED_BUN_VERSION = "1.2.22";
 
+/**
+ * The installed Next.js release must satisfy the same window as source admission.
+ * @param {unknown} version
+ * @returns {boolean}
+ */
+export function isAdmittedNextVersion(version) {
+  if (typeof version !== "string") return false;
+  const match = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.exec(version);
+  if (match === null) return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const patch = Number(match[3]);
+  if (![major, minor, patch].every(Number.isSafeInteger)) return false;
+  return (
+    (major === 15 && minor === 5 && patch >= 26) ||
+    (major === 16 && minor === 3 && patch >= 6 && patch <= 7)
+  );
+}
+
 const TYPESCRIPT_BUILD_STAGE = /^tsc(?:[ \t]+(?:--noEmit|-b|--build))?$/u;
 
 /**

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/sdk.gen.ts

@@ -2560,7 +2560,7 @@ export const configureProjectDomains = <ThrowOnError extends boolean = true>(
 /**
  * Plan one Paid customer-owned hostname
  *
- * The hostname routes to the project's current Prod deployment. A project whose Prod environment has no active deployment returns production_deployment_required (409); deploy to Prod or promote the current Dev deployment, then plan again.
+ * Plan the customer's requested hostname before or after the first Prod deployment. This read-only plan explains declaration, Cloudflare consent and activation; it does not claim the hostname, create provider resources or change DNS.
  */
 export const planPaidProjectDomain = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -2698,7 +2698,7 @@ export const getPaidProjectDomain = <ThrowOnError extends boolean = true>(
 /**
  * Apply one Paid customer-owned hostname
  *
- * Requires Paid access (a Stripe period or a grant) or, for a Free workspace, a project that currently shows the powered-by flag, and no expired credit-exhaustion grace. Returns paid_plan_required otherwise, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups lift a credit-exhaustion block but never start or extend Paid access. After that check, a project whose Prod environment has no active deployment returns production_deployment_required (409) without claiming the hostname or any provider mutation; a changed request under a used key returns idempotency_key_reused (409).
+ * Requires Paid access (a Stripe period or a grant) or, for a Free workspace, a project that currently shows the powered-by flag, and no expired credit-exhaustion grace. Returns paid_plan_required otherwise, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups lift a credit-exhaustion block but never start or extend Paid access. Without an active Prod deployment, apply declares the hostname as awaiting_deployment, enabling Cloudflare consent without provider resources, DNS changes or domain charges. After a successful Prod deployment, replay the same hostname and idempotency key to activate it. A changed request under a used key returns idempotency_key_reused (409).
  */
 export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
   parameters: {

package/src/packages/sdk-ts/src/generated/types.gen.ts

@@ -351,9 +351,13 @@ export type PaidDomainPlan = {
   risks: Array<string>;
 };
 
+/**
+ * awaiting_deployment means the requested hostname is declared but not provisioned. Its hostname is present, suspension_reason, custom_hostname_status, ssl_status and url are null, and validation_records is empty. Authorize Cloudflare, deploy to Prod, then repeat the same apply.
+ */
 export type PaidDomain = {
   status:
     | "not_configured"
+    | "awaiting_deployment"
     | "pending"
     | "active"
     | "reconciliation_required"
@@ -4686,7 +4690,7 @@ export type PlanPaidProjectDomainError =
 
 export type PlanPaidProjectDomainResponses = {
   /**
-   * Manual CNAME instructions and exact provider effects.
+   * The requested hostname, routing target and staged provider effects.
    */
   200: PaidDomainPlan;
 };
@@ -4880,7 +4884,7 @@ export type ApplyPaidProjectDomainError =
 
 export type ApplyPaidProjectDomainResponses = {
   /**
-   * Current Cloudflare for SaaS hostname and certificate state.
+   * Declared hostname or current Cloudflare for SaaS hostname and certificate state.
    */
   200: PaidDomain;
 };