@amerged/ohmyhost-cli 0.1.32 → 0.1.34

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.32.
+ohmyho.st cli client, version 0.1.34.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-EPW2O2ZL.js";
+} from "./chunk-SRN6L765.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-EPW2O2ZL.js → chunk-SRN6L765.js}

@@ -34783,9 +34783,9 @@ var FRAMEWORK_CONVERSION_DETAILS = Object.freeze({
     paths: ["framework_config"],
     template: `"{{path}}" does not follow the TanStack Start plugin contract: import tanstackStart from "@tanstack/react-start/plugin/vite"; on runtime edge also import cloudflare from "@cloudflare/vite-plugin" and call cloudflare({ viteEnvironment: { name: "ssr" } }) before tanstackStart(); on runtime static do not import the Cloudflare plugin. ${PUSH_AND_PLAN}`
   },
-  next_cache_components_unsupported: {
+  next_tailwind_turbopack_only: {
     paths: ["framework_config"],
-    template: `"{{path}}" sets cacheComponents: true, which ohmyho.st does not support; remove it or set it to false. ${PUSH_AND_PLAN}`
+    template: `"{{path}}" loads Tailwind CSS through the Turbopack rule "@tailwindcss/turbopack", which the Webpack build on ohmyho.st ignores, and the application root has no PostCSS configuration that Webpack reads, so the site would deploy without its Tailwind classes. Add postcss.config.mjs to the application root with export default { plugins: { "@tailwindcss/postcss": {} } } and remove the Turbopack rule. Use the package manager to add @tailwindcss/postcss to devDependencies at the same version as tailwindcss and to remove @tailwindcss/turbopack, so the lockfile records both. ${PUSH_AND_PLAN}`
   },
   framework_version_unsupported: {
     paths: ["manifest", "lockfile"],
@@ -37142,14 +37142,25 @@ function parseProjectCreditBudget(value) {
   return input;
 }
 var parseCurrentIdentity = (value) => {
-  const input = exactRecord2(value, ["actor_id", "organization_ids"]);
+  const input = exactRecord2(value, ["actor_id", "email", "organization_ids", "organizations"]);
+  const email = input["email"];
   const organizationIds = input["organization_ids"];
+  const organizations = input["organizations"];
   if (typeof input["actor_id"] !== "string" || input["actor_id"].length === 0 || input["actor_id"].length > 256 || [...input["actor_id"]].some((character) => {
     const codePoint = character.codePointAt(0) ?? 0;
     return codePoint <= 31 || codePoint === 127;
-  }) || !Array.isArray(organizationIds) || organizationIds.some((organizationId) => !isUlid(organizationId)) || new Set(organizationIds).size !== organizationIds.length) {
+  }) || email !== null && (!boundedString(email, 3, 254) || !/^[^\s@]+@[^\s@.]+(?:\.[^\s@.]+)+$/u.test(email) || /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(email)) || !Array.isArray(organizationIds) || organizationIds.some((organizationId) => !isUlid(organizationId)) || new Set(organizationIds).size !== organizationIds.length || !Array.isArray(organizations) || organizations.length !== organizationIds.length) {
     throw new ResponseContractError();
   }
+  organizations.forEach((organization, index) => {
+    const entry = exactRecord2(organization, ["id", "name"]);
+    if (entry["id"] !== organizationIds[index] || !boundedString(entry["name"], 1, 128) || entry["name"].trim() !== entry["name"] || [...entry["name"]].some((character) => {
+      const codePoint = character.codePointAt(0) ?? 0;
+      return codePoint <= 31 || codePoint === 127;
+    })) {
+      throw new ResponseContractError();
+    }
+  });
   return input;
 };
 var parseAccountProfile = (value) => {
@@ -40628,7 +40639,7 @@ function exact3(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.32",
+  version: "0.1.34",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -40965,7 +40976,7 @@ var HELP_USAGE = Object.freeze({
   "project flag set": "ohmyhost project flag set --project ULID --enabled true|false --idempotency-key KEY --json (shows the small Powered by ohmyho.st flag on the production site; while it shows, this project's custom domain uses no domain credits and also works on Free, and each Paid period bought through Stripe adds 250 credits to the workspace, however many projects show the flag)",
   "project handle check": "ohmyhost project handle check --handle HANDLE --json (is this address free? answers with a reason and free alternatives; the address becomes HANDLE.check.omh.st)",
   "project handle set": "ohmyhost project handle set --project ULID --handle HANDLE --if-match ETAG --idempotency-key KEY --json (moves the project to a free address; the old one stops working and anyone may claim it)",
-  "database compute set": "ohmyhost database compute set --project ULID --environment dev|prod --profile standard|performance --idempotency-key KEY --yes [--wait] --json\n  standard: Free 0.25 CU/1 GB/60s idle, Paid 0.5 CU/2 GB/60s idle. performance: Paid 1 CU/4 GB/300s idle, 2.5x database compute credits per equal active minute; longer idle time also consumes credits.",
+  "database compute set": "ohmyhost database compute set --project ULID --environment dev|prod --profile standard|performance --idempotency-key KEY --yes [--wait] --json\n  standard: Free 0.25 CU/1 GB, Paid 0.5 CU/2 GB. performance: Paid 1 CU/4 GB, 2.5x database compute credits per equal active minute. All profiles use the provider-default idle suspension.",
   "database compute get": "ohmyhost database compute get --project ULID [--environment dev|prod] --json",
   "database write": "ohmyhost database write --project ULID --environment dev|prod --statement-file PATH --idempotency-key KEY [--parameters-json JSON] --yes --json",
   "database query": "ohmyhost database query --project ULID --environment dev|prod --statement SQL [--parameters-json JSON] --json",
@@ -47191,6 +47202,8 @@ var BUILD_OUTPUTS = Object.freeze({
   "tanstack-start": "dist/client"
 });
 var REQUIRED_CONFIG_PATHS = Object.freeze({ nextjs: "next.config.ts", "tanstack-start": "vite.config.ts" });
+var POSTCSS_CONFIG_PATH = /^(?:postcss\.config\.(?:[cm]?js|json)|\.postcssrc\.(?:js|json))$/u;
+var TAILWIND_TURBOPACK_LOADER = "@tailwindcss/turbopack";
 var MAXIMUM_LOCKFILE_LENGTH = 5 * 1024 * 1024;
 var MAXIMUM_PNPM_LOCKFILE_HEAD = 256 * 1024;
 var PNPM_LOCKFILE_BODY = /^(?:packages|snapshots):/mu;
@@ -47327,7 +47340,7 @@ function repositorySourceFindings(files) {
     versions: result.versions
   });
 }
-function nextConfigFindings(text, path2) {
+function nextConfigFindings(text, path2, postcss) {
   const lexed = lexFrameworkConfig(text, path2);
   if ("finding" in lexed)
     return Object.freeze([lexed.finding]);
@@ -47337,8 +47350,8 @@ function nextConfigFindings(text, path2) {
     findings.push(diagnostic({ code: "next_base_path_unsupported", path: path2 }));
   if (hasProperty(tokens, "output", "export") || hasProperty(tokens, "output", "standalone"))
     findings.push(diagnostic({ code: "next_output_unsupported", path: path2 }));
-  if (hasProperty(tokens, "cacheComponents", "true"))
-    findings.push(diagnostic({ code: "next_cache_components_unsupported", path: path2 }));
+  if (!postcss && tokens.some(({ kind, value }) => kind === "string" && value === TAILWIND_TURBOPACK_LOADER))
+    findings.push(diagnostic({ code: "next_tailwind_turbopack_only", path: path2 }));
   if (!hasExportDefault(tokens) && !(path2.slice(path2.lastIndexOf("/") + 1) === "next.config.js" && hasModuleExports(tokens)))
     findings.push(diagnostic({ code: "framework_config_default_export_required", path: path2 }));
   return Object.freeze(findings);
@@ -47509,12 +47522,15 @@ function frameworkConfigFindings(input) {
     return [];
   const { path: path2, text } = frameworkConfig;
   if (framework === "nextjs")
-    return nextConfigFindings(text, path2);
+    return nextConfigFindings(text, path2, hasPostcssConfiguration(input));
   if (framework === "vite-static")
     return viteConfigFindings(text, path2);
   const mode = input.configuration.runtime.mode;
   return tanStackViteConfigFindings(text, path2, mode === "edge" || mode === "static" ? mode : null);
 }
+function hasPostcssConfiguration({ files, manifest: manifest2 }) {
+  return isRecord4(ownValue(manifest2, "postcss")) || files.some((path2) => POSTCSS_CONFIG_PATH.test(path2));
+}
 function repositoryConfiguration(text) {
   if (typeof text !== "string")
     return null;

package/dist/index.js

@@ -99,7 +99,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-EPW2O2ZL.js";
+} from "./chunk-SRN6L765.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/product-cli",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "private": true,
   "ohmyhost": {
     "deployment": "production",

package/src/apps/product-cli/src/cli.ts

@@ -399,7 +399,7 @@ const HELP_USAGE = Object.freeze({
     "ohmyhost project handle set --project ULID --handle HANDLE --if-match ETAG --idempotency-key KEY --json (moves the project to a free address; the old one stops working and anyone may claim it)",
   "database compute set":
     "ohmyhost database compute set --project ULID --environment dev|prod --profile standard|performance --idempotency-key KEY --yes [--wait] --json\n" +
-    "  standard: Free 0.25 CU/1 GB/60s idle, Paid 0.5 CU/2 GB/60s idle. performance: Paid 1 CU/4 GB/300s idle, 2.5x database compute credits per equal active minute; longer idle time also consumes credits.",
+    "  standard: Free 0.25 CU/1 GB, Paid 0.5 CU/2 GB. performance: Paid 1 CU/4 GB, 2.5x database compute credits per equal active minute. All profiles use the provider-default idle suspension.",
   "database compute get":
     "ohmyhost database compute get --project ULID [--environment dev|prod] --json",
   "database write":

package/src/apps/product-cli/src/runtime-contract.ts

@@ -63,7 +63,9 @@ export interface SafeProblem {
 
 export interface PublicCurrentIdentity {
   readonly actor_id: string;
+  readonly email: string | null;
   readonly organization_ids: readonly string[];
+  readonly organizations: readonly { readonly id: string; readonly name: string }[];
 }
 
 /** One workspace the signed-in user belongs to, with the provider identity a selection needs. */
@@ -635,8 +637,10 @@ export function parseProjectCreditBudget(value: unknown): ProjectCreditBudget {
 }
 
 export const parseCurrentIdentity = (value: unknown): PublicCurrentIdentity => {
-  const input = exactRecord(value, ["actor_id", "organization_ids"]);
+  const input = exactRecord(value, ["actor_id", "email", "organization_ids", "organizations"]);
+  const email = input["email"];
   const organizationIds = input["organization_ids"];
+  const organizations = input["organizations"];
   if (
     typeof input["actor_id"] !== "string" ||
     input["actor_id"].length === 0 ||
@@ -645,12 +649,32 @@ export const parseCurrentIdentity = (value: unknown): PublicCurrentIdentity => {
       const codePoint = character.codePointAt(0) ?? 0;
       return codePoint <= 31 || codePoint === 127;
     }) ||
+    (email !== null &&
+      (!boundedString(email, 3, 254) ||
+        !/^[^\s@]+@[^\s@.]+(?:\.[^\s@.]+)+$/u.test(email) ||
+        /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u.test(email))) ||
     !Array.isArray(organizationIds) ||
     organizationIds.some((organizationId) => !isUlid(organizationId)) ||
-    new Set(organizationIds).size !== organizationIds.length
+    new Set(organizationIds).size !== organizationIds.length ||
+    !Array.isArray(organizations) ||
+    organizations.length !== organizationIds.length
   ) {
     throw new ResponseContractError();
   }
+  organizations.forEach((organization: unknown, index) => {
+    const entry = exactRecord(organization, ["id", "name"]);
+    if (
+      entry["id"] !== organizationIds[index] ||
+      !boundedString(entry["name"], 1, 128) ||
+      entry["name"].trim() !== entry["name"] ||
+      [...entry["name"]].some((character) => {
+        const codePoint = character.codePointAt(0) ?? 0;
+        return codePoint <= 31 || codePoint === 127;
+      })
+    ) {
+      throw new ResponseContractError();
+    }
+  });
   return input as unknown as PublicCurrentIdentity;
 };
 

package/src/packages/contracts/src/framework-admission-corpus.ts

@@ -48,6 +48,47 @@ const CORPUS_NEXT_PAGE = `export default function Home() {
   return <main>Hello from ohmyho.st</main>;
 }
 `;
+// The config `create-next-app@16.4.0 --yes --no-tailwind` writes: Cache Components with partial
+// prefetching.
+const CREATE_NEXT_APP_CONFIG = `import type { NextConfig } from "next";
+
+const nextConfig: NextConfig = {
+  /* config options here */
+  cacheComponents: true,
+  partialPrefetching: true,
+};
+
+export default nextConfig;
+`;
+// With Tailwind CSS, which --yes selects, create-next-app on its default Turbopack bundler adds this
+// rule instead of a postcss.config.mjs; the Webpack build ignores turbopack.rules.
+const CREATE_NEXT_APP_TAILWIND_RULE = `  turbopack: {
+    rules: {
+      "*.css": {
+        loaders: ["@tailwindcss/turbopack"],
+        as: "*.css",
+      },
+    },
+  },
+`;
+const CREATE_NEXT_APP_POSTCSS_CONFIG = `const config = {
+  plugins: {
+    "@tailwindcss/postcss": {},
+  },
+};
+
+export default config;
+`;
+const CREATE_NEXT_APP_LAYOUT = `import "./globals.css";
+
+export default function RootLayout({ children }: Readonly<{ children: React.ReactNode }>) {
+  return (
+    <html lang="en">
+      <body>{children}</body>
+    </html>
+  );
+}
+`;
 const CORPUS_TANSTACK_CONFIG = `import { tanstackStart } from "@tanstack/react-start/plugin/vite";
 import viteReact from "@vitejs/plugin-react";
 import { defineConfig } from "vite";
@@ -93,6 +134,14 @@ export const FRAMEWORK_ADMISSION_CONFORMANCE_CORPUS: Readonly<{
       viteSource({ declared: "^8.2.0", resolved: "8.3.4" }),
     ),
     corpusCase("TanStack Start 1.168.60 prerendered for the static runtime", tanStackSource()),
+    corpusCase(
+      "create-next-app 16.4 --yes --no-tailwind: Cache Components with partial prefetching",
+      createNextAppSource({ tailwind: false }),
+    ),
+    corpusCase(
+      "create-next-app 16.4 --yes with a postcss.config.mjs added beside its Turbopack rule",
+      createNextAppSource({ tailwind: true, postcss: true }),
+    ),
   ]),
   pending: Object.freeze([
     Object.freeze({
@@ -148,6 +197,11 @@ export const FRAMEWORK_ADMISSION_CONFORMANCE_CORPUS: Readonly<{
       }),
       { code: "next_base_path_unsupported", path: "next.config.ts" },
     ),
+    refusedCase(
+      "create-next-app 16.4 --yes: Tailwind CSS only in a Turbopack rule",
+      createNextAppSource({ tailwind: true }),
+      { code: "next_tailwind_turbopack_only", path: "next.config.ts" },
+    ),
     refusedCase(
       "Next.js build script with a second step",
       nextSource({ build: "next build && next-sitemap" }),
@@ -325,6 +379,49 @@ function nextSource(
   });
 }
 
+/**
+ * The next.config.ts and Tailwind CSS files and packages `create-next-app@16.4.0 --yes` writes, in
+ * an App Router source with the packageManager, lockfile and ohmyhost.yaml ohmyho.st requires;
+ * `tailwind: false` is its --no-tailwind output. On Turbopack, its default bundler, it adds only the
+ * Turbopack rule for Tailwind CSS; `postcss` adds the postcss.config.mjs and @tailwindcss/postcss it
+ * writes for any other bundler.
+ */
+function createNextAppSource(
+  options: Readonly<{ tailwind: boolean; postcss?: boolean }>,
+): Readonly<Record<string, string>> {
+  const [packageManager, lockfile] = CORPUS_MANAGERS.npm;
+  const runtime = { next: "16.4.0", react: "19.3.0", "react-dom": "19.3.0" };
+  const postcss = options.postcss === true;
+  return Object.freeze({
+    "ohmyhost.yaml": corpusConfiguration("npm", ".open-next/assets", "edge"),
+    "package.json": corpusJson({
+      name: "website",
+      version: "0.1.0",
+      private: true,
+      packageManager,
+      scripts: { dev: "next dev", build: "next build", start: "next start" },
+      dependencies: runtime,
+      ...(options.tailwind
+        ? {
+            devDependencies: {
+              ...(postcss ? { "@tailwindcss/postcss": "^4" } : {}),
+              "@tailwindcss/turbopack": "^4",
+              tailwindcss: "^4",
+            },
+          }
+        : {}),
+    }),
+    [lockfile]: corpusLockfile("npm", runtime, runtime),
+    "next.config.ts": options.tailwind
+      ? CREATE_NEXT_APP_CONFIG.replace("};\n", `${CREATE_NEXT_APP_TAILWIND_RULE}};\n`)
+      : CREATE_NEXT_APP_CONFIG,
+    ...(postcss ? { "postcss.config.mjs": CREATE_NEXT_APP_POSTCSS_CONFIG } : {}),
+    "app/globals.css": options.tailwind ? '@import "tailwindcss";\n' : "body {\n  margin: 0;\n}\n",
+    "app/layout.tsx": CREATE_NEXT_APP_LAYOUT,
+    "app/page.tsx": CORPUS_NEXT_PAGE,
+  });
+}
+
 function viteSource(
   options: Readonly<{ declared?: string; resolved?: string; config?: string }> = {},
 ): Readonly<Record<string, string>> {

package/src/packages/contracts/src/framework-admission.ts

@@ -373,9 +373,9 @@ const FRAMEWORK_CONVERSION_DETAILS = Object.freeze({
     paths: ["framework_config"],
     template: `"{{path}}" does not follow the TanStack Start plugin contract: import tanstackStart from "@tanstack/react-start/plugin/vite"; on runtime edge also import cloudflare from "@cloudflare/vite-plugin" and call cloudflare({ viteEnvironment: { name: "ssr" } }) before tanstackStart(); on runtime static do not import the Cloudflare plugin. ${PUSH_AND_PLAN}`,
   },
-  next_cache_components_unsupported: {
+  next_tailwind_turbopack_only: {
     paths: ["framework_config"],
-    template: `"{{path}}" sets cacheComponents: true, which ohmyho.st does not support; remove it or set it to false. ${PUSH_AND_PLAN}`,
+    template: `"{{path}}" loads Tailwind CSS through the Turbopack rule "@tailwindcss/turbopack", which the Webpack build on ohmyho.st ignores, and the application root has no PostCSS configuration that Webpack reads, so the site would deploy without its Tailwind classes. Add postcss.config.mjs to the application root with export default { plugins: { "@tailwindcss/postcss": {} } } and remove the Turbopack rule. Use the package manager to add @tailwindcss/postcss to devDependencies at the same version as tailwindcss and to remove @tailwindcss/turbopack, so the lockfile records both. ${PUSH_AND_PLAN}`,
   },
   framework_version_unsupported: {
     paths: ["manifest", "lockfile"],

package/src/packages/contracts/src/framework-source-rules.ts

@@ -119,6 +119,10 @@ const BUILD_OUTPUTS: Readonly<Partial<Record<FrameworkSourceFramework, string>>>
 });
 const REQUIRED_CONFIG_PATHS: Readonly<Partial<Record<FrameworkSourceFramework, string>>> =
   Object.freeze({ nextjs: "next.config.ts", "tanstack-start": "vite.config.ts" });
+// The PostCSS configuration the Next.js Webpack build reads: package.json "postcss" or one of these
+// files at the application root. It never reads a TypeScript one such as postcss.config.ts.
+const POSTCSS_CONFIG_PATH = /^(?:postcss\.config\.(?:[cm]?js|json)|\.postcssrc\.(?:js|json))$/u;
+const TAILWIND_TURBOPACK_LOADER = "@tailwindcss/turbopack";
 const MAXIMUM_LOCKFILE_LENGTH = 5 * 1024 * 1024;
 const MAXIMUM_PNPM_LOCKFILE_HEAD = 256 * 1024;
 const PNPM_LOCKFILE_BODY = /^(?:packages|snapshots):/mu;
@@ -327,12 +331,15 @@ export function repositorySourceFindings(
 
 /**
  * The Next.js config rules: inspection size, comment and string syntax, the root origin
- * (basePath, assetPrefix), output, cacheComponents and the default export; next.config.js may
- * assign module.exports instead.
+ * (basePath, assetPrefix), output, the "@tailwindcss/turbopack" loader and the default export;
+ * next.config.js may assign module.exports instead. ohmyho.st builds with Webpack, which ignores
+ * Turbopack rules and applies Tailwind CSS only through PostCSS, so that loader is refused unless
+ * `postcss` reports a PostCSS configuration Webpack reads at the application root.
  */
 export function nextConfigFindings(
   text: string,
   path: string,
+  postcss: boolean,
 ): readonly FrameworkConversionDiagnostic[] {
   const lexed = lexFrameworkConfig(text, path);
   if ("finding" in lexed) return Object.freeze([lexed.finding]);
@@ -342,8 +349,11 @@ export function nextConfigFindings(
     findings.push(diagnostic({ code: "next_base_path_unsupported", path }));
   if (hasProperty(tokens, "output", "export") || hasProperty(tokens, "output", "standalone"))
     findings.push(diagnostic({ code: "next_output_unsupported", path }));
-  if (hasProperty(tokens, "cacheComponents", "true"))
-    findings.push(diagnostic({ code: "next_cache_components_unsupported", path }));
+  if (
+    !postcss &&
+    tokens.some(({ kind, value }) => kind === "string" && value === TAILWIND_TURBOPACK_LOADER)
+  )
+    findings.push(diagnostic({ code: "next_tailwind_turbopack_only", path }));
   if (
     !hasExportDefault(tokens) &&
     !(path.slice(path.lastIndexOf("/") + 1) === "next.config.js" && hasModuleExports(tokens))
@@ -619,12 +629,19 @@ function frameworkConfigFindings(
   const { frameworkConfig, framework } = input;
   if (frameworkConfig === null || framework === "functions") return [];
   const { path, text } = frameworkConfig;
-  if (framework === "nextjs") return nextConfigFindings(text, path);
+  if (framework === "nextjs") return nextConfigFindings(text, path, hasPostcssConfiguration(input));
   if (framework === "vite-static") return viteConfigFindings(text, path);
   const mode = input.configuration.runtime.mode;
   return tanStackViteConfigFindings(text, path, mode === "edge" || mode === "static" ? mode : null);
 }
 
+/** Whether package.json or a file at the application root configures PostCSS for Webpack. */
+function hasPostcssConfiguration({ files, manifest }: FrameworkSourceRuleInput): boolean {
+  return (
+    isRecord(ownValue(manifest, "postcss")) || files.some((path) => POSTCSS_CONFIG_PATH.test(path))
+  );
+}
+
 function repositoryConfiguration(text: string | null | undefined): OhmyhostConfig | null {
   if (typeof text !== "string") return null;
   try {

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/sdk.gen.ts

@@ -945,7 +945,7 @@ export const completeCloudflareDnsAuthorization = <ThrowOnError extends boolean
 /**
  * Get the current authenticated identity
  *
- * Returns the stable ohmyhost actor and internal organization identifiers derived from the bearer credential.
+ * Returns the stable ohmyhost actor, the current user's or API-key owner's email, and the credential's organization scope with current display names. Machine-to-machine credentials have a null email. Organizations match organization_ids in the same order.
  */
 export const getCurrentIdentity = <ThrowOnError extends boolean = true>(
   parameters?: {

package/src/packages/sdk-ts/src/generated/types.gen.ts

@@ -1148,11 +1148,25 @@ export type OrganizationAccount = {
 };
 
 /**
- * Minimal customer-visible identity and organization scope for authenticated agent clients.
+ * Customer-visible current account and credential organization scope for authenticated agent clients.
  */
 export type CurrentIdentity = {
   actor_id: string;
+  /**
+   * Email of the current user or user API-key owner; null for machine-to-machine credentials.
+   */
+  email: string | null;
   organization_ids: Array<Ulid>;
+  /**
+   * Current names for exactly the organization_ids scope, in the same order.
+   */
+  organizations: Array<{
+    id: Ulid;
+    /**
+     * Current organization display name without surrounding whitespace or ASCII control characters.
+     */
+    name: string;
+  }>;
 };
 
 export type Project = {