@amerged/ohmyhost-mcp 0.1.28 → 0.1.30

package/src/packages/contracts/src/mcp-source-codec.ts

@@ -0,0 +1,150 @@
+import {
+  assertManagedSourceResponse,
+  MANAGED_SOURCE_LIMITS,
+  parseManagedSourceRequest,
+} from "./managed-sources.js";
+import type {
+  ManagedSourceChangesRequest,
+  ManagedSourceFile,
+  ManagedSourceFileResponse,
+  ManagedSourceFiles,
+  SourceManifestFile,
+} from "./managed-sources.js";
+
+/** MCP presentation only: these fields are never part of the canonical REST contract. */
+export interface McpSourceTextFileResponse {
+  readonly commit_sha: string;
+  readonly file: SourceManifestFile & {
+    readonly content_text: string;
+    readonly encoding: "utf8";
+  };
+}
+
+export interface McpSourceBinaryFileResponse {
+  readonly commit_sha: string;
+  readonly file: ManagedSourceFile & {
+    readonly encoding: "base64";
+    readonly guidance: string;
+  };
+}
+
+export type McpSourceFileReadResponse =
+  | ManagedSourceFiles
+  | ManagedSourceFileResponse
+  | McpSourceTextFileResponse
+  | McpSourceBinaryFileResponse;
+
+/** Allows MCP transports to classify user input separately from invalid upstream data. */
+export class McpSourceChangesInputError extends TypeError {
+  constructor() {
+    super("MCP source changes are invalid");
+    this.name = "McpSourceChangesInputError";
+  }
+}
+
+/**
+ * Accepts exactly one own content_text or content_base64 field per MCP change.
+ * Missing executable defaults to false; null content_base64 retains deletion semantics.
+ * The returned request is exclusively canonical REST data, with its existing limits.
+ */
+export function normalizeMcpSourceChanges(value: unknown): ManagedSourceChangesRequest {
+  try {
+    return normalizeSourceChanges(value);
+  } catch {
+    throw new McpSourceChangesInputError();
+  }
+}
+
+function normalizeSourceChanges(value: unknown): ManagedSourceChangesRequest {
+  const body = record(value);
+  const changes = body["changes"];
+  if (!Array.isArray(changes) || changes.length < 1 || changes.length > MANAGED_SOURCE_LIMITS.files)
+    invalid();
+  let textBytes = 0;
+  const normalized = changes.map((change: unknown) => {
+    const entry = record(change);
+    const hasText = Object.hasOwn(entry, "content_text");
+    if (hasText === Object.hasOwn(entry, "content_base64")) invalid();
+    const result = {
+      ...entry,
+      executable: Object.hasOwn(entry, "executable") ? entry["executable"] : false,
+    } as Record<string, unknown>;
+    if (hasText) {
+      const text = entry["content_text"];
+      if (typeof text !== "string" || text.length > MANAGED_SOURCE_LIMITS.fileBytes) invalid();
+      const bytes = new TextEncoder().encode(text);
+      if (
+        bytes.byteLength > MANAGED_SOURCE_LIMITS.fileBytes ||
+        new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes) !== text
+      )
+        invalid();
+      textBytes += bytes.byteLength;
+      // Bound allocations before producing a batch of encoded strings.
+      if (textBytes > MANAGED_SOURCE_LIMITS.uploadBytes) invalid();
+      result["content_base64"] = encodeBase64(bytes);
+      delete result["content_text"];
+    }
+    return result;
+  });
+  return parseManagedSourceRequest("changes", { ...body, changes: normalized });
+}
+
+/**
+ * Validates the canonical source response before adding MCP-only presentation fields.
+ * Manifest and explicit base64 responses remain unchanged. Text mode replaces the
+ * payload with content_text only when strict UTF-8 decoding preserves every byte
+ * and contains no binary control characters. Otherwise it returns the original
+ * base64 payload and binary guidance.
+ */
+export function formatMcpSourceFileResponse(
+  value: unknown,
+  format: "text" | "base64" = "text",
+): McpSourceFileReadResponse {
+  if (format !== "text" && format !== "base64") invalid();
+  assertManagedSourceResponse("files", value);
+  const response = value as ManagedSourceFiles | ManagedSourceFileResponse;
+  if (format === "base64" || !("file" in response)) return response;
+  const { content_base64, ...metadata } = response.file;
+  const bytes = Uint8Array.from(atob(content_base64), (character) => character.charCodeAt(0));
+  try {
+    const text = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes);
+    if (
+      !bytes.some(
+        (byte) => (byte < 32 && byte !== 9 && byte !== 10 && byte !== 13) || byte === 127,
+      ) &&
+      encodeBase64(new TextEncoder().encode(text)) === content_base64
+    ) {
+      return {
+        commit_sha: response.commit_sha,
+        file: { ...metadata, content_text: text, encoding: "utf8" },
+      };
+    }
+  } catch {
+    // Non-UTF-8 files retain their canonical payload rather than replacement characters.
+  }
+  return {
+    commit_sha: response.commit_sha,
+    file: {
+      ...response.file,
+      encoding: "base64",
+      guidance:
+        "Binary file: preserve content_base64 and use content_base64 when writing this file.",
+    },
+  };
+}
+
+function encodeBase64(bytes: Uint8Array): string {
+  let binary = "";
+  for (let offset = 0; offset < bytes.byteLength; offset += 32768)
+    binary += String.fromCharCode(...bytes.subarray(offset, offset + 32768));
+  return btoa(binary);
+}
+
+function record(value: unknown): Record<string, unknown> {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) invalid();
+  return value as Record<string, unknown>;
+}
+
+function invalid(): never {
+  throw new TypeError("MCP source content is invalid");
+}

package/src/packages/contracts/src/operation-failure.ts

@@ -1,4 +1,20 @@
 const failures = {
+  authorization_changed: [
+    "Authorization changed before this operation could finish.",
+    "Read the current project and sign-in status. Reconnect the client or ask the project owner to grant the required access, then submit a new request with a new idempotency key. This terminal operation cannot resume; preserve the project's existing data and deployment.",
+  ],
+  source_commit_conflict: [
+    "Another source change was saved before this version could be committed.",
+    "Read the current source and compare it with this operation's original version. Merge both changes, then submit the combined files using the current commit and a new idempotency key. Do not overwrite the remote version or reuse this failed operation.",
+  ],
+  source_snapshot_invalid: [
+    "The uploaded source did not match its complete verified manifest.",
+    "Capture a stable source snapshot and start a new upload with a new idempotency key. Verify every file hash, path and size, upload all selected files and seal the complete manifest before deployment. This failed upload cannot be published.",
+  ],
+  source_upload_expired: [
+    "The source upload expired before it was committed.",
+    "Read the current source version, capture the intended files again and start a new upload with a new idempotency key. Complete every file upload and seal the manifest before expiry. The expired upload cannot be deployed.",
+  ],
   operation_abandoned: [
     "ohmyho.st stopped this operation before it finished and ended it.",
     "Repeating this operation cannot resume it. Read project status for what is live; if this operation names a deployment_id, read 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs. Then submit the request once more with a new idempotency key: a deployment, promotion, rollback or deletion from a fresh plan, a rename with the ETag from project status. If it ends the same way, report both operation IDs through feedback.",
@@ -66,7 +82,7 @@ const failures = {
   ],
   build_failed: [
     "The build did not produce a verified deployable artifact.",
-    "Read the BUILD_FAILED item of this operation's deployment_id with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs. Its excerpt is the tail of your install and build output: fix that error, push and plan the new commit. Without an excerpt the build printed nothing, passed the 8-minute limit or failed inside ohmyho.st: plan the same commit once more, and report the operation ID through feedback if it fails again.",
+    "Read the BUILD_FAILED item of its deployment_id with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs. Its excerpt shows install and build output: fix that error, save or push the corrected version and plan its commit. Without an excerpt the build printed nothing, passed the 8-minute limit or failed inside ohmyho.st: plan the same commit once more, and report the operation ID through feedback if it fails again.",
   ],
   insufficient_organization_credits: [
     "The organization does not have sufficient available credits for this operation.",
@@ -74,23 +90,23 @@ const failures = {
   ],
   paid_plan_required: [
     "Transactional mail requires an active Paid plan for this organization.",
-    "Ask the organization Owner to activate Paid through billing checkout; top-ups and signup credits do not activate it. Then plan the same deployment or promotion again. If the app should send no mail, instead set mail.enabled to false in ohmyhost.yaml, commit and push, and plan the new commit. Replaying this operation cannot enable mail. Do not reset the database.",
+    "Ask the organization Owner to activate Paid through billing checkout; top-ups and signup credits do not activate it. Then plan the same deployment or promotion again. If the app should send no mail, instead set mail.enabled to false in ohmyhost.yaml, save or push the corrected version and plan its commit. Replaying this operation cannot enable mail. Do not reset the database.",
   ],
   database_migration_failed: [
     "The database migrations were not applied; none of this deployment's new migration files took effect.",
-    "Read the DATABASE_MIGRATION_FAILED item in 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' and fix what it names; run 'ohmyhost init --dry-run --json' for migration_sql_not_admitted. Keep applied files unchanged, give new files later timestamps, and add to existing tables only nullable columns without default and non-unique indexes. Push and plan the new commit; never reset the database.",
+    "Read the DATABASE_MIGRATION_FAILED item in 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' and fix what it names; run 'ohmyhost init --dry-run --json' for migration_sql_not_admitted. Keep applied files unchanged, give new files later timestamps, and add to existing tables only nullable columns without default and non-unique indexes. Save or push the corrected version and plan its commit; never reset the database.",
   ],
   runtime_candidate_failed: [
     "The deployed candidate failed its runtime checks.",
-    "Read the HEALTH_CHECK_FAILED item with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs. ohmyhost.yaml runtime.healthcheck (default /) must answer 2xx to a cookieless GET without redirect; status_code and, for owners, excerpt show the answer. After a promotion or rollback, fix that environment, often a missing secret, and plan it again; else fix the app, push and plan the new commit. No such item: plan once more, then report.",
+    "Read the HEALTH_CHECK_FAILED item with 'ohmyhost deployment logs --project PROJECT_ULID --deployment DEPLOYMENT_ULID --follow --json' or MCP deployment_logs. ohmyhost.yaml runtime.healthcheck (default /) must answer 2xx to a cookieless GET without redirect; status_code and, for owners, excerpt show the answer. After promotion or rollback, fix the environment's secrets and plan again; otherwise fix the app, save or push the corrected version and plan its commit. No item: plan once, then report.",
   ],
   runtime_candidate_rejected: [
     "The runtime refused to load the built Worker.",
-    "The built Worker could not be loaded: top-level code throws or calls fetch, timers or random values outside a handler, an import cannot be resolved, a Worker module such as src/ohmyhost/companion.ts has no default export, or the bundle is too large. Fix that, push and plan the new commit; replaying this operation cannot pass. If none of this applies, report the operation ID through feedback.",
+    "The built Worker could not be loaded: top-level code throws or calls fetch, timers or random values outside a handler, an import cannot be resolved, a Worker module such as src/ohmyhost/companion.ts has no default export, or the bundle is too large. Fix that, save or push the corrected version and plan its commit; replaying this operation cannot pass. If none of this applies, report the operation ID through feedback.",
   ],
   storage_jurisdiction_conflict: [
     "storage.jurisdiction must equal the project's hosting region.",
-    "Set storage.jurisdiction in ohmyhost.yaml to the project's region (us or eu) shown by 'ohmyhost project status', commit and push, then plan the new commit (for a promotion, deploy it to Dev and promote again); the unchanged commit fails again. A project cannot move its files between regions; do not delete or recreate the project to change it.",
+    "Set storage.jurisdiction in ohmyhost.yaml to the project's region (us or eu) shown by 'ohmyhost project status', save or push the corrected version, then plan its commit (for a promotion, deploy it to Dev and promote again); the unchanged commit fails again. A project cannot move its files between regions; do not delete or recreate the project to change it.",
   ],
   provider_state_absent: [
     "Reconciliation confirmed that the required deployment resources are absent.",

package/src/packages/contracts/src/problem-policy.ts

@@ -1,5 +1,52 @@
 /** Canonical public status, retry policy and recovery text shared by the API and clients. */
 export const PROBLEM_POLICY = {
+  source_generation_conflict: {
+    status: 409,
+    retryable: false,
+    action:
+      "Read the project's current source and generation, reconcile any source switch, then prepare a new request.",
+    title: "Source binding changed",
+  },
+  source_commit_conflict: {
+    status: 409,
+    retryable: false,
+    action:
+      "Read the current managed version and its changes, reconcile them with your working files, then publish against that exact commit.",
+    title: "Source version changed",
+  },
+  source_upload_conflict: {
+    status: 409,
+    retryable: false,
+    action:
+      "Read the existing upload and operation. Reuse a key only for its original request; complete its original manifest or start a new upload.",
+    title: "Source upload conflicts",
+  },
+  source_upload_expired: {
+    status: 409,
+    retryable: false,
+    action: "Start a fresh source upload and transfer the verified snapshot again.",
+    title: "Source upload expired",
+  },
+  source_scope_unavailable: {
+    status: 404,
+    retryable: false,
+    action: "Check the selected account, workspace, project and client permissions.",
+    title: "Source is unavailable",
+  },
+  source_snapshot_invalid: {
+    status: 409,
+    retryable: false,
+    action:
+      "Verify the source file contents, hashes and complete manifest before preparing a new upload.",
+    title: "Source snapshot is inconsistent",
+  },
+  source_snapshot_too_large: {
+    status: 413,
+    retryable: false,
+    action:
+      "Use safe repository-relative paths and a bounded source snapshot. Keep generated outputs and large media outside the source tree.",
+    title: "Source snapshot exceeds its limits",
+  },
   cloudflare_zone_not_bound: {
     status: 409,
     retryable: false,
@@ -280,10 +327,10 @@ export const PROBLEM_POLICY = {
     status: 409,
     retryable: false,
     action:
-      "Set storage.jurisdiction in ohmyhost.yaml to the project's region (us or eu) shown by 'ohmyhost project status', commit and push, then plan the new commit (for a promotion, deploy it to Dev and promote again); the unchanged commit fails again. A project cannot move its files between regions; do not delete or recreate the project to change it.",
+      "Set storage.jurisdiction in ohmyhost.yaml to the project's region (us or eu) shown by 'ohmyhost project status', save or push the corrected version, then plan its commit (for a promotion, deploy it to Dev and promote again); the unchanged commit fails again. A project cannot move its files between regions; do not delete or recreate the project to change it.",
     title: "Storage jurisdiction conflict",
     restAction:
-      "Set storage.jurisdiction in ohmyhost.yaml to the project's region (us or eu) shown by 'ohmyhost project status', commit and push, then plan the new commit (for a promotion, deploy it to Dev and promote again); the unchanged commit fails again. A project cannot move its files between regions; do not delete or recreate the project to change it.",
+      "Set storage.jurisdiction in ohmyhost.yaml to the project's region (us or eu) shown by 'ohmyhost project status', save or push the corrected version, then plan its commit (for a promotion, deploy it to Dev and promote again); the unchanged commit fails again. A project cannot move its files between regions; do not delete or recreate the project to change it.",
   },
   shared_data_requires_promotion: {
     status: 409,
@@ -303,28 +350,28 @@ export const PROBLEM_POLICY = {
     status: 409,
     retryable: false,
     action:
-      "Read detail for the file, reason and required change. Run ohmyhost init --dry-run --json at that commit, apply its blockers and the matching ohmyho.st framework Skill, then commit and push. Plan the new commit; repeating the unchanged source cannot fix an admission error.",
+      "Read detail for the file, reason and required change. Run ohmyhost init --dry-run --json at that commit, apply its blockers and the matching ohmyho.st framework Skill, then save or push the corrected version. Plan its commit; repeating the unchanged source cannot fix an admission error.",
     title: "Framework conversion required",
     restAction:
-      "Read detail for the file, reason and required change. Run ohmyhost init --dry-run --json at that commit, apply its blockers and the matching ohmyho.st framework Skill, then commit and push. Plan the new commit; repeating the unchanged source cannot fix an admission error.",
+      "Read detail for the file, reason and required change. Run ohmyhost init --dry-run --json at that commit, apply its blockers and the matching ohmyho.st framework Skill, then save or push the corrected version. Plan its commit; repeating the unchanged source cannot fix an admission error.",
   },
   repository_configuration_missing: {
     status: 409,
     retryable: false,
     action:
-      "The planned commit has no ohmyhost.yaml at the Git repository root. If the repository has none, run 'ohmyhost init --json' at the root (--root DIR when the app lives in a subdirectory, --region eu for an EU project). Otherwise move the existing file to the root and set applicationRoot to the app directory, for example website. Commit and push, then plan the new commit.",
+      "The planned commit has no ohmyhost.yaml at the Git repository root. If the repository has none, run 'ohmyhost init --json' at the root (--root DIR when the app lives in a subdirectory, --region eu for an EU project). Otherwise move the existing file to the root and set applicationRoot to the app directory, for example website. Save or push the corrected version, then plan its commit.",
     title: "Repository configuration missing",
     restAction:
-      "The planned commit has no ohmyhost.yaml at the Git repository root. If the repository has none, run 'ohmyhost init --json' at the root (--root DIR when the app lives in a subdirectory, --region eu for an EU project). Otherwise move the existing file to the root and set applicationRoot to the app directory, for example website. Commit and push, then plan the new commit.",
+      "The planned commit has no ohmyhost.yaml at the Git repository root. If the repository has none, run 'ohmyhost init --json' at the root (--root DIR when the app lives in a subdirectory, --region eu for an EU project). Otherwise move the existing file to the root and set applicationRoot to the app directory, for example website. Save or push the corrected version, then plan its commit.",
   },
   migration_filename_noncanonical: {
     status: 409,
     retryable: false,
     action:
-      "Every file in the migrations directory (database.migrations in ohmyhost.yaml) must be named YYYYMMDDHHMMSS_name.sql: 14 digits, an underscore, then lowercase letters, digits, _ or -. Rename each file that does not match and move any other file, such as README.md or .gitkeep, out of that directory. Commit and push, then plan the new commit. Never rename a migration a deployment already applied.",
+      "Every file in the migrations directory (database.migrations in ohmyhost.yaml) must be named YYYYMMDDHHMMSS_name.sql: 14 digits, an underscore, then lowercase letters, digits, _ or -. Rename each file that does not match and move any other file, such as README.md or .gitkeep, out of that directory. Save or push the corrected version, then plan its commit. Never rename a migration a deployment already applied.",
     title: "Migration filename noncanonical",
     restAction:
-      "Every file in the migrations directory (database.migrations in ohmyhost.yaml) must be named YYYYMMDDHHMMSS_name.sql: 14 digits, an underscore, then lowercase letters, digits, _ or -. Rename each file that does not match and move any other file, such as README.md or .gitkeep, out of that directory. Commit and push, then plan the new commit. Never rename a migration a deployment already applied.",
+      "Every file in the migrations directory (database.migrations in ohmyhost.yaml) must be named YYYYMMDDHHMMSS_name.sql: 14 digits, an underscore, then lowercase letters, digits, _ or -. Rename each file that does not match and move any other file, such as README.md or .gitkeep, out of that directory. Save or push the corrected version, then plan its commit. Never rename a migration a deployment already applied.",
   },
   environment_secret_mutation_blocked: {
     status: 409,
@@ -336,10 +383,10 @@ export const PROBLEM_POLICY = {
     status: 409,
     retryable: false,
     action:
-      "A Next.js file under app/, pages/, middleware or proxy imports a native addon (.node) or a Node.js module that does not run on Workers: child_process, cluster, dgram, domain, http2, inspector, readline, repl, sqlite, trace_events, tty, v8, vm, wasi, worker_threads or _stream_wrap, with or without node:. Remove or replace that import, commit and push, then plan the new commit.",
+      "A Next.js file under app/, pages/, middleware or proxy imports a native addon (.node) or a Node.js module that does not run on Workers: child_process, cluster, dgram, domain, http2, inspector, readline, repl, sqlite, trace_events, tty, v8, vm, wasi, worker_threads or _stream_wrap, with or without node:. Remove or replace that import, save or push the corrected version, then plan its commit.",
     title: "Workers runtime incompatible",
     restAction:
-      "A Next.js file under app/, pages/, middleware or proxy imports a native addon (.node) or a Node.js module that does not run on Workers: child_process, cluster, dgram, domain, http2, inspector, readline, repl, sqlite, trace_events, tty, v8, vm, wasi, worker_threads or _stream_wrap, with or without node:. Remove or replace that import, commit and push, then plan the new commit.",
+      "A Next.js file under app/, pages/, middleware or proxy imports a native addon (.node) or a Node.js module that does not run on Workers: child_process, cluster, dgram, domain, http2, inspector, readline, repl, sqlite, trace_events, tty, v8, vm, wasi, worker_threads or _stream_wrap, with or without node:. Remove or replace that import, save or push the corrected version, then plan its commit.",
   },
   payload_too_large: {
     status: 413,
@@ -427,18 +474,18 @@ export const PROBLEM_POLICY = {
     status: 503,
     retryable: true,
     action:
-      "The service could not complete or confirm this request; it may already have taken effect. Wait, then repeat exactly the same request with the same idempotency key, waiting longer each time; never switch to a new key. If 'ohmyhost plan' keeps failing, check that the commit is pushed to the linked repository and that 'ohmyhost init --dry-run --json' at that commit reports no blockers. If it still fails, report the request_id through feedback.",
+      "The service could not complete or confirm this request; it may already have taken effect. Wait, then repeat exactly the same request with the same idempotency key, waiting longer each time; never switch to a new key. If 'ohmyhost plan' keeps failing, check that the commit is saved in the project's selected source and that 'ohmyhost init --dry-run --json' at that commit reports no blockers. If it still fails, report the request_id through feedback.",
     title: "Service unavailable",
     restAction:
-      "The service could not complete or confirm this request; it may already have taken effect. Wait, then repeat exactly the same request with the same idempotency key, waiting longer each time; never switch to a new key. If 'ohmyhost plan' keeps failing, check that the commit is pushed to the linked repository and that 'ohmyhost init --dry-run --json' at that commit reports no blockers. If it still fails, report the request_id through feedback.",
+      "The service could not complete or confirm this request; it may already have taken effect. Wait, then repeat exactly the same request with the same idempotency key, waiting longer each time; never switch to a new key. If 'ohmyhost plan' keeps failing, check that the commit is saved in the project's selected source and that 'ohmyhost init --dry-run --json' at that commit reports no blockers. If it still fails, report the request_id through feedback.",
   },
   source_commit_not_found: {
     status: 409,
     retryable: false,
     action:
-      "The requested commit is not in the linked repository. Push that exact commit to the repository named by project status, or select a commit already there, then run 'ohmyhost plan' with its full SHA. Repeating the unchanged unavailable commit cannot work.",
+      "The requested commit is not in the linked repository. Save or push that exact version using the source named by project status, or select a version already there, then run 'ohmyhost plan' with its full SHA. Repeating the unchanged unavailable commit cannot work.",
     restAction:
-      "The requested commit is not in the linked repository. Push that exact commit to the repository named by project status, or select a commit already there, then run 'ohmyhost plan' with its full SHA. Repeating the unchanged unavailable commit cannot work.",
+      "The requested commit is not in the linked repository. Save or push that exact version using the source named by project status, or select a version already there, then run 'ohmyhost plan' with its full SHA. Repeating the unchanged unavailable commit cannot work.",
     title: "Source commit not found",
   },
   domain_hostname_taken: {

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/index.ts

@@ -3,7 +3,9 @@
 export {
   applyPaidProjectDomain,
   changeDatabaseCompute,
+  changeManagedSource,
   changeProjectHandle,
+  commitManagedSourceUpload,
   completeCloudflareDnsAuthorization,
   completeGithubSourceAuthorization,
   configureBillingRecharge,
@@ -15,6 +17,7 @@ export {
   createBillingPortal,
   createCloudflareDnsAuthorization,
   createDeployment,
+  createManagedSourceUpload,
   createOrganization,
   createProject,
   createProjectDatabaseAccess,
@@ -26,6 +29,7 @@ export {
   deleteManagedMailDomain,
   deletePaidProjectDomain,
   deleteProject,
+  diffManagedSource,
   disableManagedMailReceiving,
   ensureProjectDevShareLink,
   getAccountProfile,
@@ -42,6 +46,7 @@ export {
   getManagedMailAttachment,
   getManagedMailDomain,
   getManagedMailMessage,
+  getManagedSourceUpload,
   getOperation,
   getOrganizationAccount,
   getOrganizationCredits,
@@ -58,12 +63,15 @@ export {
   getProjectSourceAutoDeploy,
   getProjectStatus,
   getPublicDeploymentStats,
+  initializeManagedSource,
   linkProjectSource,
   listAuditEvents,
   listDeployments,
   listEnvironmentSecrets,
   listFunctionRuns,
   listManagedMailMessages,
+  listManagedSourceFiles,
+  listManagedSourceVersions,
   listProjectDatabaseAccess,
   listProjects,
   listUserApiKeys,
@@ -77,10 +85,12 @@ export {
   prepareManagedMailWebhook,
   promoteDeployment,
   putEnvironmentSecret,
+  putManagedSourceBlob,
   queryProjectDatabase,
   reconcileOperation,
   recordSignupSource,
   registerFeatureInterest,
+  restoreManagedSource,
   retryManagedMailMessage,
   revokeCurrentSession,
   revokeProjectDatabaseAccess,
@@ -96,6 +106,7 @@ export {
   streamOperationEvents,
   submitContactRequest,
   submitFeedback,
+  switchManagedSource,
   verifyManagedMailWebhook,
   writeProjectDatabase,
 } from "./sdk.gen.js";
@@ -120,6 +131,11 @@ export type {
   ChangeDatabaseComputeErrors,
   ChangeDatabaseComputeResponse,
   ChangeDatabaseComputeResponses,
+  ChangeManagedSourceData,
+  ChangeManagedSourceError,
+  ChangeManagedSourceErrors,
+  ChangeManagedSourceResponse,
+  ChangeManagedSourceResponses,
   ChangeProjectHandleData,
   ChangeProjectHandleError,
   ChangeProjectHandleErrors,
@@ -128,6 +144,12 @@ export type {
   ClientOptions,
   CloudflareDnsAuthorization,
   CloudflareDnsAuthorizationStatus,
+  CommitManagedSourceUploadData,
+  CommitManagedSourceUploadError,
+  CommitManagedSourceUploadErrors,
+  CommitManagedSourceUploadResponse,
+  CommitManagedSourceUploadResponses,
+  CommitSha,
   CompleteCloudflareDnsAuthorizationData,
   CompleteCloudflareDnsAuthorizationError,
   CompleteCloudflareDnsAuthorizationErrors,
@@ -188,6 +210,11 @@ export type {
   CreateDeploymentRequest,
   CreateDeploymentResponse,
   CreateDeploymentResponses,
+  CreateManagedSourceUploadData,
+  CreateManagedSourceUploadError,
+  CreateManagedSourceUploadErrors,
+  CreateManagedSourceUploadResponse,
+  CreateManagedSourceUploadResponses,
   CreateOrganizationData,
   CreateOrganizationError,
   CreateOrganizationErrors,
@@ -262,6 +289,11 @@ export type {
   DeploymentPlanWritable,
   DevAccessState,
   DevAccessTicket,
+  DiffManagedSourceData,
+  DiffManagedSourceError,
+  DiffManagedSourceErrors,
+  DiffManagedSourceResponse,
+  DiffManagedSourceResponses,
   DisableManagedMailReceivingData,
   DisableManagedMailReceivingError,
   DisableManagedMailReceivingErrors,
@@ -354,6 +386,11 @@ export type {
   GetManagedMailMessageErrors,
   GetManagedMailMessageResponse,
   GetManagedMailMessageResponses,
+  GetManagedSourceUploadData,
+  GetManagedSourceUploadError,
+  GetManagedSourceUploadErrors,
+  GetManagedSourceUploadResponse,
+  GetManagedSourceUploadResponses,
   GetOperationData,
   GetOperationError,
   GetOperationErrors,
@@ -438,12 +475,19 @@ export type {
   GithubConnectionAuthorization,
   GithubOrganizationConnection,
   GithubOrganizationConnectionStatus,
+  GithubProjectSource,
   GithubSourceAuthorization,
+  GithubSourceBinding,
   GuardedActionPlan,
   HostingRegion,
   IdempotencyConflictProblem,
   IdempotencyKey,
   IfMatch,
+  InitializeManagedSourceData,
+  InitializeManagedSourceError,
+  InitializeManagedSourceErrors,
+  InitializeManagedSourceResponse,
+  InitializeManagedSourceResponses,
   LinkProjectSourceData,
   LinkProjectSourceError,
   LinkProjectSourceErrors,
@@ -475,6 +519,16 @@ export type {
   ListManagedMailMessagesErrors,
   ListManagedMailMessagesResponse,
   ListManagedMailMessagesResponses,
+  ListManagedSourceFilesData,
+  ListManagedSourceFilesError,
+  ListManagedSourceFilesErrors,
+  ListManagedSourceFilesResponse,
+  ListManagedSourceFilesResponses,
+  ListManagedSourceVersionsData,
+  ListManagedSourceVersionsError,
+  ListManagedSourceVersionsErrors,
+  ListManagedSourceVersionsResponse,
+  ListManagedSourceVersionsResponses,
   ListProjectDatabaseAccessData,
   ListProjectDatabaseAccessError,
   ListProjectDatabaseAccessErrors,
@@ -502,6 +556,22 @@ export type {
   ManagedMailRetryResult,
   ManagedMailWebhook,
   ManagedMailWebhookRequest,
+  ManagedProjectSource,
+  ManagedSourceBlobRequest,
+  ManagedSourceChangesRequest,
+  ManagedSourceDiff,
+  ManagedSourceFileResponse,
+  ManagedSourceFiles,
+  ManagedSourceFilesResponse,
+  ManagedSourceFinalizeRequest,
+  ManagedSourceInitializeRequest,
+  ManagedSourcePath,
+  ManagedSourceRestoreRequest,
+  ManagedSourceSwitchRequest,
+  ManagedSourceUploadReceipt,
+  ManagedSourceUploadRequest,
+  ManagedSourceVersions,
+  NullableCommitSha,
   Operation,
   OperationDeploymentProgress,
   OperationEvent,
@@ -581,6 +651,8 @@ export type {
   ProjectNotesReceipt,
   ProjectPage,
   ProjectSource,
+  ProjectSourceBinding,
+  ProjectSourceResponse,
   ProjectStatus,
   PromoteDeploymentData,
   PromoteDeploymentError,
@@ -595,6 +667,11 @@ export type {
   PutEnvironmentSecretRequest,
   PutEnvironmentSecretResponse,
   PutEnvironmentSecretResponses,
+  PutManagedSourceBlobData,
+  PutManagedSourceBlobError,
+  PutManagedSourceBlobErrors,
+  PutManagedSourceBlobResponse,
+  PutManagedSourceBlobResponses,
   QueryProjectDatabaseData,
   QueryProjectDatabaseError,
   QueryProjectDatabaseErrors,
@@ -616,6 +693,11 @@ export type {
   RegisterFeatureInterestResponse,
   RegisterFeatureInterestResponses,
   RequestId,
+  RestoreManagedSourceData,
+  RestoreManagedSourceError,
+  RestoreManagedSourceErrors,
+  RestoreManagedSourceResponse,
+  RestoreManagedSourceResponses,
   RetryManagedMailMessageData,
   RetryManagedMailMessageError,
   RetryManagedMailMessageErrors,
@@ -677,7 +759,12 @@ export type {
   SetProjectPoweredByFlagResponses,
   Sha256Digest,
   SourceAutoDeploy,
+  SourceContentBase64,
   SourceDeploymentId,
+  SourceGeneration,
+  SourceManifest,
+  SourceManifestFile,
+  SourceMessage,
   StreamDeploymentLogsData,
   StreamDeploymentLogsError,
   StreamDeploymentLogsErrors,
@@ -698,6 +785,11 @@ export type {
   SubmitFeedbackErrors,
   SubmitFeedbackResponse,
   SubmitFeedbackResponses,
+  SwitchManagedSourceData,
+  SwitchManagedSourceError,
+  SwitchManagedSourceErrors,
+  SwitchManagedSourceResponse,
+  SwitchManagedSourceResponses,
   TargetDeploymentId,
   Ulid,
   UsageTotal,