@amerged/ohmyhost-cli 0.1.26 → 0.1.28

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.26.
+ohmyho.st cli client, version 0.1.28.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/THIRD_PARTY_NOTICES.md

@@ -57,7 +57,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 
-## fast-uri 3.1.7
+## fast-uri 3.1.8
 
 ### LICENSE
 

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-YMVBC7UB.js";
+} from "./chunk-5FDJR2IZ.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-YMVBC7UB.js → chunk-5FDJR2IZ.js}

@@ -3080,9 +3080,9 @@ var require_data = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/utils.js
+// node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js
 var require_utils = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/utils.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/utils.js"(exports, module) {
     "use strict";
     var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
     var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
@@ -3582,9 +3582,9 @@ var require_utils = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/schemes.js
+// node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/lib/schemes.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/lib/schemes.js"(exports, module) {
     "use strict";
     var { isUUID } = require_utils();
     var URN_REG = /^([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-./:;=@]|%[\da-f]{2})+)$/iu;
@@ -3793,9 +3793,9 @@ var require_schemes = __commonJS({
   }
 });
 
-// node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/index.js
+// node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS({
-  "node_modules/.pnpm/fast-uri@3.1.7/node_modules/fast-uri/index.js"(exports, module) {
+  "node_modules/.pnpm/fast-uri@3.1.8/node_modules/fast-uri/index.js"(exports, module) {
     "use strict";
     var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, serializePathEncoding, normalizeQueryFragmentEncoding, encodeQuery, encodeFragment, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
@@ -4125,13 +4125,14 @@ var require_fast_uri = __commonJS({
         if (!malformedIPLiteral) {
           malformedHost = canonicalizeHost(parsed, options, schemeHandler, isIP);
         }
-        if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
-          if (uri.indexOf("%") !== -1) {
-            if (parsed.host !== void 0 && !malformedIPLiteral) {
-              const host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
-              parsed.host = reescapeHostDelimiters(host, isIP);
-            }
+        if (uri.indexOf("%") !== -1 && parsed.host !== void 0 && !malformedIPLiteral) {
+          let host = isIP ? parsed.host : normalizePercentEncoding(parsed.host, true);
+          if (!isIP) {
+            host = normalizePercentEncoding(host.toLowerCase());
           }
+          parsed.host = reescapeHostDelimiters(host, isIP);
+        }
+        if (!schemeHandler || schemeHandler && !schemeHandler.skipNormalize) {
           if (parsed.path) {
             parsed.path = normalizePathEncoding(parsed.path);
           }
@@ -17002,6 +17003,19 @@ function hasControlCharacter(value, multiline) {
 
 // packages/contracts/dist/framework-build-script.mjs
 var PINNED_BUN_VERSION = "1.2.22";
+function isAdmittedNextVersion(version2) {
+  if (typeof version2 !== "string")
+    return false;
+  const match = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.exec(version2);
+  if (match === null)
+    return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const patch = Number(match[3]);
+  if (![major, minor, patch].every(Number.isSafeInteger))
+    return false;
+  return major === 15 && minor === 5 && patch >= 26 || major === 16 && minor === 3 && patch >= 6 && patch <= 7;
+}
 var TYPESCRIPT_BUILD_STAGE = /^tsc(?:[ \t]+(?:--noEmit|-b|--build))?$/u;
 function isAdmittedFrameworkBuildScript(framework, script) {
   if (typeof script !== "string")
@@ -17110,7 +17124,7 @@ function resolveFrameworkConfig(basename2, files) {
 var VERIFIED_VERSIONS = Object.freeze({
   vite: /* @__PURE__ */ new Set(["5.4.21", "8.0.16", "8.2.2"]),
   "tanstack-start": /* @__PURE__ */ new Set(["1.168.26", "1.168.49"]),
-  nextjs: /* @__PURE__ */ new Set(["15.5.23", "16.3.2"])
+  nextjs: /* @__PURE__ */ new Set(["15.5.26", "16.3.7"])
 });
 function classifyFrameworkVersion(framework, version2) {
   const parsed = parseVersionSpec(version2);
@@ -17139,7 +17153,7 @@ function insideAdmittedWindow(framework, version2) {
     case "tanstack-start":
       return compareVersions(version2, [1, 168, 26]) >= 0 && compareVersions(version2, [1, 168, 49]) <= 0;
     case "nextjs":
-      return version2[0] === 15 && version2[1] === 5 || compareVersions(version2, [16, 0, 0]) >= 0 && compareVersions(version2, [16, 3, 4]) <= 0;
+      return isAdmittedNextVersion(version2.join("."));
   }
 }
 function compareVersions(left, right) {
@@ -17895,6 +17909,12 @@ var PROBLEM_POLICY = {
     restAction: "A live project connection already holds this hostname. Remove it from the project you manage with 'ohmyhost domain paid delete --project ULID --hostname HOST --yes --json', then apply it to the new project. Repeating while that connection remains cannot work; report the request_id if you cannot manage its owning project.",
     title: "Domain hostname is already connected"
   },
+  domain_dns_conflict: {
+    status: 409,
+    retryable: false,
+    action: "Review DNS for the requested hostname and resolve the conflicting delegation or another project's managed records. Preserve mailbox MX, TXT and CAA records. Then repeat the original domain paid apply or delete with the same hostname and idempotency key; do not create another deployment or repeatedly resubmit unchanged conflicts.",
+    title: "Domain DNS records conflict"
+  },
   data_change_blocked: {
     status: 409,
     retryable: true,
@@ -17976,6 +17996,7 @@ var parsePaidDomain = (value) => {
   const records2 = input["validation_records"];
   if (![
     "not_configured",
+    "awaiting_deployment",
     "pending",
     "active",
     "reconciliation_required",
@@ -17986,7 +18007,7 @@ var parsePaidDomain = (value) => {
     "paid_plan_required",
     "insufficient_organization_credits",
     "project_budget_exceeded"
-  ].includes(input["suspension_reason"]) || status === "suspended" !== (input["suspension_reason"] !== null) || status === "suspended" && input["url"] !== null || input["environment"] !== "prod" || !isSaasCnameTarget(input["cname_target"]) || hostname !== null && !isPaidHostname(hostname) || input["custom_hostname_status"] !== null && typeof input["custom_hostname_status"] !== "string" || input["ssl_status"] !== null && typeof input["ssl_status"] !== "string" || !Array.isArray(records2) || records2.length > 16 || !records2.every(isPaidValidationRecord) || input["url"] !== null && input["url"] !== `https://${String(hostname)}`) {
+  ].includes(input["suspension_reason"]) || status === "suspended" !== (input["suspension_reason"] !== null) || status === "suspended" && input["url"] !== null || input["environment"] !== "prod" || !isSaasCnameTarget(input["cname_target"]) || hostname !== null && !isPaidHostname(hostname) || input["custom_hostname_status"] !== null && typeof input["custom_hostname_status"] !== "string" || input["ssl_status"] !== null && typeof input["ssl_status"] !== "string" || !Array.isArray(records2) || records2.length > 16 || !records2.every(isPaidValidationRecord) || input["url"] !== null && input["url"] !== `https://${String(hostname)}` || status === "awaiting_deployment" && (hostname === null || input["custom_hostname_status"] !== null || input["ssl_status"] !== null || input["url"] !== null || records2.length !== 0)) {
     throw new ResponseContractError();
   }
   return input;
@@ -18947,7 +18968,7 @@ function exact2(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.26",
+  version: "0.1.28",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -24443,6 +24464,12 @@ var ohmyhost_schema_default = {
         },
         output: {
           $ref: "#/$defs/relativePath"
+        },
+        ssg_cache_max_mib: {
+          type: "integer",
+          minimum: 1,
+          maximum: 64,
+          description: "Maximum private immutable Next.js prerender cache in MiB; defaults to 32. Cache storage costs zero credits. Public assets retain their independent limit."
         }
       }
     },
@@ -24510,26 +24537,46 @@ var ohmyhost_schema_default = {
             pattern: "^(?:https|wss)://"
           }
         },
-        scripts: { $ref: "#/$defs/browserOrigins" },
-        styles: { $ref: "#/$defs/browserOrigins" },
-        images: { $ref: "#/$defs/browserOrigins" },
-        fonts: { $ref: "#/$defs/browserOrigins" },
-        frames: { $ref: "#/$defs/browserOrigins" },
-        frameAncestors: { $ref: "#/$defs/browserOrigins" },
+        scripts: {
+          $ref: "#/$defs/browserOrigins"
+        },
+        styles: {
+          $ref: "#/$defs/browserOrigins"
+        },
+        images: {
+          $ref: "#/$defs/browserOrigins"
+        },
+        fonts: {
+          $ref: "#/$defs/browserOrigins"
+        },
+        frames: {
+          $ref: "#/$defs/browserOrigins"
+        },
+        frameAncestors: {
+          $ref: "#/$defs/browserOrigins"
+        },
         workers: {
           type: "object",
           additionalProperties: false,
           properties: {
-            self: { type: "boolean" },
-            blob: { type: "boolean" }
+            self: {
+              type: "boolean"
+            },
+            blob: {
+              type: "boolean"
+            }
           }
         },
         cors: {
           type: "object",
           additionalProperties: false,
           properties: {
-            origins: { $ref: "#/$defs/browserOrigins" },
-            credentials: { type: "boolean" }
+            origins: {
+              $ref: "#/$defs/browserOrigins"
+            },
+            credentials: {
+              type: "boolean"
+            }
           }
         }
       }
@@ -24736,6 +24783,9 @@ var ohmyhost_schema_default = {
               },
               output: {
                 $ref: "#/$defs/relativePath"
+              },
+              ssg_cache_max_mib: {
+                $ref: "#/$defs/build/properties/ssg_cache_max_mib"
               }
             }
           }
@@ -24876,7 +24926,8 @@ function parseOhmyhostConfig(value) {
     build: input.runtime.mode === "functions" ? Object.freeze({ install: input.build.install }) : Object.freeze({
       install: input.build.install,
       command: input.build.command,
-      output: input.build.output
+      output: input.build.output,
+      ...input.build.ssg_cache_max_mib === void 0 ? {} : { ssg_cache_max_mib: input.build.ssg_cache_max_mib }
     }),
     runtime: Object.freeze({
       mode: input.runtime.mode,
@@ -25823,6 +25874,12 @@ function projectName(explicit, packageJson) {
 }
 function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanStackRuntime, files, packageManagerAdmission, frameworkConfigs, compatibility, existingConfiguration) {
   const blockers = [];
+  if (framework !== "nextjs" && existingConfiguration !== null && "command" in existingConfiguration.build && existingConfiguration.build.ssg_cache_max_mib !== void 0) {
+    blockers.push({
+      code: "framework_unsupported",
+      message: "build.ssg_cache_max_mib is supported only by Next.js; remove it from this application's configuration."
+    });
+  }
   if (framework === "unknown") {
     blockers.push({
       code: "framework_unsupported",
@@ -25868,7 +25925,7 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     const unsupported = compatibility.frameworks.filter((entry) => entry.classification === "unsupported").map((entry) => `${FRAMEWORK_PACKAGE[entry.framework]}@${entry.version || "missing"}`).join(", ");
     blockers.push({
       code: "framework_version_unsupported",
-      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.x or 16.0.0\u201316.3.4, vite 5.4.0\u20138.2.2, @tanstack/react-start 1.168.26\u20131.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`
+      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.26+ (15.5.x) or 16.3.6\u201316.3.7, vite 5.4.0\u20138.2.2, @tanstack/react-start 1.168.26\u20131.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`
     });
   }
   const scripts = packageJson["scripts"];
@@ -25906,7 +25963,7 @@ function repositoryBlockers(packageJson, framework, nextStandaloneOutput, tanSta
     if (!nextConfigured) {
       blockers.push({
         code: "next_adapter_unconfigured",
-        message: 'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.x or 16.0.0\u201316.3.4, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.'
+        message: 'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.26+ (15.5.x) or 16.3.6\u201316.3.7, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.'
       });
     }
   }

package/dist/index.js

@@ -86,7 +86,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-YMVBC7UB.js";
+} from "./chunk-5FDJR2IZ.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/product-cli",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "private": true,
   "ohmyhost": {
     "deployment": "production",

package/src/apps/product-cli/src/repository-init.ts

@@ -1163,6 +1163,18 @@ function repositoryBlockers(
   existingConfiguration: OhmyhostConfig | null,
 ): RepositoryInitBlocker[] {
   const blockers: RepositoryInitBlocker[] = [];
+  if (
+    framework !== "nextjs" &&
+    existingConfiguration !== null &&
+    "command" in existingConfiguration.build &&
+    existingConfiguration.build.ssg_cache_max_mib !== undefined
+  ) {
+    blockers.push({
+      code: "framework_unsupported",
+      message:
+        "build.ssg_cache_max_mib is supported only by Next.js; remove it from this application's configuration.",
+    });
+  }
   if (framework === "unknown") {
     blockers.push({
       code: "framework_unsupported",
@@ -1230,7 +1242,7 @@ function repositoryBlockers(
       .join(", ");
     blockers.push({
       code: "framework_version_unsupported",
-      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.x or 16.0.0–16.3.4, vite 5.4.0–8.2.2, @tanstack/react-start 1.168.26–1.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`,
+      message: `${unsupported} is outside the versions ohmyho.st builds: next 15.5.26+ (15.5.x) or 16.3.6–16.3.7, vite 5.4.0–8.2.2, @tanstack/react-start 1.168.26–1.168.49, as an exact version or a ^ or ~ range whose base version is inside. Pin a version in that range in package.json, update the lockfile, commit and push.`,
     });
   }
   const scripts = packageJson["scripts"];
@@ -1285,7 +1297,7 @@ function repositoryBlockers(
       blockers.push({
         code: "next_adapter_unconfigured",
         message:
-          'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.x or 16.0.0–16.3.4, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.',
+          'Next.js needs scripts.build exactly "next build" or "next build --webpack", react and react-dom at exact versions such as "19.1.0" (no ^ or ~), next within 15.5.26+ (15.5.x) or 16.3.6–16.3.7, and exactly one next.config.js, .mjs or .ts, with at most one open-next.config file. ohmyho.st adds the OpenNext build itself; do not make it the build script.',
       });
     }
   }

package/src/apps/product-cli/src/runtime-contract.ts

@@ -94,6 +94,7 @@ export interface PublicPaidDomainPlan {
 export interface PublicPaidDomain {
   readonly status:
     | "not_configured"
+    | "awaiting_deployment"
     | "pending"
     | "active"
     | "reconciliation_required"
@@ -153,6 +154,7 @@ export const parsePaidDomain = (value: unknown): PublicPaidDomain => {
   if (
     ![
       "not_configured",
+      "awaiting_deployment",
       "pending",
       "active",
       "reconciliation_required",
@@ -176,7 +178,13 @@ export const parsePaidDomain = (value: unknown): PublicPaidDomain => {
     !Array.isArray(records) ||
     records.length > 16 ||
     !records.every(isPaidValidationRecord) ||
-    (input["url"] !== null && input["url"] !== `https://${String(hostname)}`)
+    (input["url"] !== null && input["url"] !== `https://${String(hostname)}`) ||
+    (status === "awaiting_deployment" &&
+      (hostname === null ||
+        input["custom_hostname_status"] !== null ||
+        input["ssl_status"] !== null ||
+        input["url"] !== null ||
+        records.length !== 0))
   ) {
     throw new ResponseContractError();
   }

package/src/packages/contracts/src/framework-admission.ts

@@ -1,4 +1,4 @@
-import { PINNED_BUN_VERSION } from "./framework-build-script.mjs";
+import { isAdmittedNextVersion, PINNED_BUN_VERSION } from "./framework-build-script.mjs";
 import { managedCustomerAuthDatabaseMessage } from "./customer-auth-admission.js";
 export { managedCustomerAuthAdmissionIssue } from "./customer-auth-admission.js";
 
@@ -129,7 +129,7 @@ export interface FrameworkVersionAdmission {
 const VERIFIED_VERSIONS: Readonly<Record<AdmittedFramework, ReadonlySet<string>>> = Object.freeze({
   vite: new Set(["5.4.21", "8.0.16", "8.2.2"]),
   "tanstack-start": new Set(["1.168.26", "1.168.49"]),
-  nextjs: new Set(["15.5.23", "16.3.2"]),
+  nextjs: new Set(["15.5.26", "16.3.7"]),
 });
 
 export function classifyFrameworkVersion(
@@ -173,10 +173,7 @@ function insideAdmittedWindow(framework: AdmittedFramework, version: VersionTupl
         compareVersions(version, [1, 168, 26]) >= 0 && compareVersions(version, [1, 168, 49]) <= 0
       );
     case "nextjs":
-      return (
-        (version[0] === 15 && version[1] === 5) ||
-        (compareVersions(version, [16, 0, 0]) >= 0 && compareVersions(version, [16, 3, 4]) <= 0)
-      );
+      return isAdmittedNextVersion(version.join("."));
   }
 }
 

package/src/packages/contracts/src/framework-build-script.mjs

@@ -1,5 +1,24 @@
 export const PINNED_BUN_VERSION = "1.2.22";
 
+/**
+ * The installed Next.js release must satisfy the same window as source admission.
+ * @param {unknown} version
+ * @returns {boolean}
+ */
+export function isAdmittedNextVersion(version) {
+  if (typeof version !== "string") return false;
+  const match = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/u.exec(version);
+  if (match === null) return false;
+  const major = Number(match[1]);
+  const minor = Number(match[2]);
+  const patch = Number(match[3]);
+  if (![major, minor, patch].every(Number.isSafeInteger)) return false;
+  return (
+    (major === 15 && minor === 5 && patch >= 26) ||
+    (major === 16 && minor === 3 && patch >= 6 && patch <= 7)
+  );
+}
+
 const TYPESCRIPT_BUILD_STAGE = /^tsc(?:[ \t]+(?:--noEmit|-b|--build))?$/u;
 
 /**

package/src/packages/contracts/src/index.ts

@@ -24,6 +24,8 @@ export type OhmyhostApplicationBuild = Readonly<{
   install: string;
   command: string;
   output: string;
+  /** Maximum private immutable Next.js prerender cache, in MiB; defaults to 32. */
+  ssg_cache_max_mib?: number;
 }>;
 export type OhmyhostFunctionsBuild = Readonly<{ install: string }>;
 
@@ -88,6 +90,9 @@ export function parseOhmyhostConfig(value: unknown): OhmyhostConfig {
             install: input.build.install,
             command: (input.build as OhmyhostApplicationBuild).command,
             output: (input.build as OhmyhostApplicationBuild).output,
+            ...((input.build as OhmyhostApplicationBuild).ssg_cache_max_mib === undefined
+              ? {}
+              : { ssg_cache_max_mib: (input.build as OhmyhostApplicationBuild).ssg_cache_max_mib }),
           }),
     runtime: Object.freeze({
       mode: input.runtime.mode,

package/src/packages/contracts/src/problem-policy.ts

@@ -450,6 +450,13 @@ export const PROBLEM_POLICY = {
       "A live project connection already holds this hostname. Remove it from the project you manage with 'ohmyhost domain paid delete --project ULID --hostname HOST --yes --json', then apply it to the new project. Repeating while that connection remains cannot work; report the request_id if you cannot manage its owning project.",
     title: "Domain hostname is already connected",
   },
+  domain_dns_conflict: {
+    status: 409,
+    retryable: false,
+    action:
+      "Review DNS for the requested hostname and resolve the conflicting delegation or another project's managed records. Preserve mailbox MX, TXT and CAA records. Then repeat the original domain paid apply or delete with the same hostname and idempotency key; do not create another deployment or repeatedly resubmit unchanged conflicts.",
+    title: "Domain DNS records conflict",
+  },
   data_change_blocked: {
     status: 409,
     retryable: true,

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.26",
+  "version": "0.1.28",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/sdk.gen.ts

@@ -2560,7 +2560,7 @@ export const configureProjectDomains = <ThrowOnError extends boolean = true>(
 /**
  * Plan one Paid customer-owned hostname
  *
- * The hostname routes to the project's current Prod deployment. A project whose Prod environment has no active deployment returns production_deployment_required (409); deploy to Prod or promote the current Dev deployment, then plan again.
+ * Plan the customer's requested hostname before or after the first Prod deployment. This read-only plan explains declaration, Cloudflare consent and activation; it does not claim the hostname, create provider resources or change DNS.
  */
 export const planPaidProjectDomain = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -2698,7 +2698,7 @@ export const getPaidProjectDomain = <ThrowOnError extends boolean = true>(
 /**
  * Apply one Paid customer-owned hostname
  *
- * Requires Paid access (a Stripe period or a grant) or, for a Free workspace, a project that currently shows the powered-by flag, and no expired credit-exhaustion grace. Returns paid_plan_required otherwise, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups lift a credit-exhaustion block but never start or extend Paid access. After that check, a project whose Prod environment has no active deployment returns production_deployment_required (409) without claiming the hostname or any provider mutation; a changed request under a used key returns idempotency_key_reused (409).
+ * Requires Paid access (a Stripe period or a grant) or, for a Free workspace, a project that currently shows the powered-by flag, and no expired credit-exhaustion grace. Returns paid_plan_required otherwise, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups lift a credit-exhaustion block but never start or extend Paid access. Without an active Prod deployment, apply declares the hostname as awaiting_deployment, enabling Cloudflare consent without provider resources, DNS changes or domain charges. After a successful Prod deployment, replay the same hostname and idempotency key to activate it. A changed request under a used key returns idempotency_key_reused (409).
  */
 export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
   parameters: {

package/src/packages/sdk-ts/src/generated/types.gen.ts

@@ -351,9 +351,13 @@ export type PaidDomainPlan = {
   risks: Array<string>;
 };
 
+/**
+ * awaiting_deployment means the requested hostname is declared but not provisioned. Its hostname is present, suspension_reason, custom_hostname_status, ssl_status and url are null, and validation_records is empty. Authorize Cloudflare, deploy to Prod, then repeat the same apply.
+ */
 export type PaidDomain = {
   status:
     | "not_configured"
+    | "awaiting_deployment"
     | "pending"
     | "active"
     | "reconciliation_required"
@@ -1112,6 +1116,7 @@ export type ProblemDetails = {
     | "service_unavailable"
     | "source_commit_not_found"
     | "domain_hostname_taken"
+    | "domain_dns_conflict"
     | "data_change_blocked"
     | "data_change_in_progress"
     | "data_change_not_applicable"
@@ -4686,7 +4691,7 @@ export type PlanPaidProjectDomainError =
 
 export type PlanPaidProjectDomainResponses = {
   /**
-   * Manual CNAME instructions and exact provider effects.
+   * The requested hostname, routing target and staged provider effects.
    */
   200: PaidDomainPlan;
 };
@@ -4880,7 +4885,7 @@ export type ApplyPaidProjectDomainError =
 
 export type ApplyPaidProjectDomainResponses = {
   /**
-   * Current Cloudflare for SaaS hostname and certificate state.
+   * Declared hostname or current Cloudflare for SaaS hostname and certificate state.
    */
   200: PaidDomain;
 };