@faable/deploy-sdk 2.16.0 → 2.17.1

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@faable/deploy-sdk",
   "description": "Codebase for SDK building",
-  "version": "2.16.0",
+  "version": "2.17.1",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/spec/openapi.json

@@ -856,6 +856,9 @@
                         "type": "string"
                       }
                     }
+                  },
+                  "dockerfile_ignored": {
+                    "type": "boolean"
                   }
                 }
               },
@@ -963,6 +966,17 @@
             ],
             "description": "Success deploy emails (first deploy + every promote). Absent/null = enabled; false = muted. Failure emails are never gated by this."
           },
+          "http3": {
+            "anyOf": [
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Whether HTTP/3 is advertised for this app. Absent/null = advertised; false = not advertised. Note it controls the advertisement, not the listener: clients that already discovered HTTP/3 may keep using it until the advertisement expires, and the server does not refuse it."
+          },
           "status": {
             "$ref": "#/components/schemas/AppStatus"
           },
@@ -1162,14 +1176,14 @@
             "type": "string"
           },
           "notify_deploy_success": {
-            "anyOf": [
-              {
-                "type": "boolean"
-              },
-              {
-                "type": "null"
-              }
-            ]
+            "type": "boolean",
+            "nullable": true,
+            "default": null
+          },
+          "http3": {
+            "type": "boolean",
+            "nullable": true,
+            "default": null
           }
         },
         "additionalProperties": false
@@ -1184,9 +1198,19 @@
             "type": "boolean"
           },
           "code": {
-            "type": "string",
-            "enum": [
-              "repository_already_linked"
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "repository_already_linked"
+                ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "repository_taken_down"
+                ]
+              }
             ]
           },
           "message": {
@@ -1690,6 +1714,76 @@
                 "type": "boolean"
               }
             }
+          },
+          "images": {
+            "type": "object",
+            "properties": {
+              "deviceSizes": {
+                "type": "array",
+                "items": {
+                  "type": "integer",
+                  "minimum": 1,
+                  "maximum": 16384
+                },
+                "maxItems": 256
+              },
+              "imageSizes": {
+                "type": "array",
+                "items": {
+                  "type": "integer",
+                  "minimum": 1,
+                  "maximum": 16384
+                },
+                "maxItems": 256
+              },
+              "formats": {
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "maxLength": 64
+                },
+                "maxItems": 8
+              },
+              "qualities": {
+                "type": "array",
+                "items": {
+                  "type": "integer",
+                  "minimum": 1,
+                  "maximum": 100
+                },
+                "maxItems": 100
+              },
+              "minimumCacheTTL": {
+                "type": "integer",
+                "minimum": 0
+              },
+              "unoptimized": {
+                "type": "boolean"
+              },
+              "loader": {
+                "type": "string",
+                "maxLength": 64
+              },
+              "path": {
+                "type": "string",
+                "maxLength": 512
+              },
+              "basePath": {
+                "type": "string",
+                "maxLength": 512
+              },
+              "assetPrefix": {
+                "type": "boolean"
+              },
+              "dangerouslyAllowSVG": {
+                "type": "boolean"
+              },
+              "remotePatterns": {
+                "type": "integer",
+                "minimum": 0
+              }
+            },
+            "additionalProperties": false
           }
         }
       },
@@ -1719,6 +1813,9 @@
                 "type": "string"
               }
             }
+          },
+          "dockerfile_ignored": {
+            "type": "boolean"
           }
         }
       },
@@ -1941,6 +2038,11 @@
           },
           "detected": {
             "$ref": "#/components/schemas/DeploymentDetected"
+          },
+          "plan": {
+            "type": "object",
+            "properties": {},
+            "additionalProperties": true
           }
         }
       },
@@ -1949,8 +2051,11 @@
         "required": [
           "dns_state",
           "dns_checked_at",
+          "dns_last_seen_at",
+          "dns_error_kind",
           "dns_expected",
           "dns_observed",
+          "dns_expected_ips",
           "dns_message",
           "dns_warning"
         ],
@@ -1966,11 +2071,28 @@
             "default": "pending"
           },
           "dns_checked_at": {
+            "type": "string",
+            "description": "ISO timestamp of the last DNS change",
+            "nullable": true,
+            "default": null
+          },
+          "dns_last_seen_at": {
             "type": "string",
             "description": "ISO timestamp of the last DNS check",
             "nullable": true,
             "default": null
           },
+          "dns_error_kind": {
+            "type": "string",
+            "enum": [
+              "transient",
+              "proxy",
+              null
+            ],
+            "description": "Why an `error` verdict could not conclude",
+            "nullable": true,
+            "default": null
+          },
           "dns_expected": {
             "type": "array",
             "items": {
@@ -1987,6 +2109,14 @@
             "description": "CNAME target(s) actually resolved for the fqdn",
             "default": []
           },
+          "dns_expected_ips": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "IPv4 address(es) the expected target currently resolves to",
+            "default": []
+          },
           "dns_message": {
             "type": "string",
             "description": "Human-readable diagnostic of the DNS check",
@@ -3672,6 +3802,12 @@
                 "enum": [
                   "buildkit"
                 ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "detector"
+                ]
               }
             ]
           },
@@ -4020,6 +4156,12 @@
                 "enum": [
                   "buildkit"
                 ]
+              },
+              {
+                "type": "string",
+                "enum": [
+                  "detector"
+                ]
               }
             ]
           },
@@ -4264,7 +4406,7 @@
       },
       "ApiErrorCode": {
         "type": "string",
-        "description": "Machine-readable error code. One HTTP status per code.\n\n- `bad_request` (400): The request is malformed. `message` says what is wrong.\n- `validation_error` (400): The body, query or path failed schema validation. `details.issues` lists each failing field.\n- `unauthorized` (401): The request carries no valid credentials.\n- `payment_required` (402): The feature is not included in the current plan.\n- `forbidden` (403): The credentials are valid but do not allow this operation.\n- `not_found` (404): The resource does not exist, or not in the caller’s project.\n- `method_not_allowed` (405): The HTTP method is not supported on this path.\n- `conflict` (409): The request conflicts with the current state of the resource.\n- `payload_too_large` (413): The request body exceeds the size limit.\n- `unsupported_media_type` (415): The `Content-Type` is not accepted by this endpoint.\n- `unprocessable_entity` (422): The request is well-formed but cannot be processed.\n- `too_many_requests` (429): Rate limit exceeded. Honour the `Retry-After` header.\n- `internal_error` (500): Unexpected server error. Retry later; the request id is logged.\n- `gone` (410): The resource existed and is gone for good; retrying will not bring it back.\n- `bad_gateway` (502): An upstream the API depends on failed.\n- `service_unavailable` (503): The feature is not configured on this environment, or is temporarily out of service.\n- `already_exists` (400): A resource with the same unique field already exists. `details.fields` names the field.\n- `invalid_id` (400): The id in the path is not a valid id for this resource.\n- `invalid_query` (400): The `?query=` FaableQL expression could not be parsed.\n- `invalid_expand` (400): An `?expand=` path is not allowed on this resource.\n- `search_not_supported` (400): This resource does not support `?q=`.\n- `access_denied` (401): The row exists but does not belong to the caller.\n- `invalid_token` (401): The bearer token is missing, malformed or expired.\n- `invalid_apikey` (401): The API key does not exist or has been revoked.\n- `apikey_expired` (401): The API key predates projects and must be recreated.\n- `invalid_build_token` (401): The build token is not valid for this deployment.\n- `build_token_expired` (401): The build token is past its lifetime.\n- `build_token_unusable` (401): The deployment reached a terminal phase, so its build token no longer works.\n- `build_token_app_missing` (401): The app the build token was minted for no longer exists.\n- `user_token_required` (401): The endpoint acts on behalf of a person and the credential carries no user (an API key or a service account).\n- `team_required` (400): The operation needs a project: send it in the `x-faable-team` header.\n- `team_or_scope_required` (401): Listing needs either a project in `x-faable-team` or a global scope on the token.\n- `user_suspended` (403): The account is suspended. Contact support@faable.com.\n- `superadmin_only` (403): The operation is restricted to platform staff.\n- `project_not_found` (404): No project with that id for this caller.\n- `owner_only` (403): Only the project owner can manage collaborators.\n- `owner_not_removable` (400): The project owner cannot be removed. Delete the project instead.\n- `collaborator_not_found` (404): That user is not a collaborator on the project.\n- `invalid_project_name` (400): The project name is not acceptable. `message` says why.\n- `moderation_hold` (403): The project contains an app disabled by moderation and cannot be deleted. Contact support@faable.com.\n- `app_not_found` (404): No app with that id or slug in this project.\n- `repository_not_linked` (400): The app has no linked repository.\n- `repository_empty` (400): The repository has no commits on the deploy branch yet.\n- `branch_missing` (400): The deploy branch does not exist on the repository. `message` lists the branches that do.\n- `deploy_mode_conflict` (400): The app deploys from its own workflow, so the platform will not create a deployment for it.\n- `deploy_refused` (409): The deploy was refused by quota, plan or an in-flight deployment. `message` says which.\n- `invalid_root_dir` (400): The Root Directory must be a path inside the repository — no leading `/` and no `..`.\n- `root_dir_not_found` (400): The Root Directory does not exist on that ref of the repository.\n- `root_dir_mismatch` (400): The workflow deploys from one directory and platform builds would run from another. Declare `rootDir` in faable.json.\n- `no_workflows` (400): The repository has no GitHub Actions workflows, so a CI gate would never open.\n- `no_deploy_workflow` (400): No workflow in the repository runs `faable deploy`.\n- `invalid_secret_name` (400): Secret names are 1-255 printable ASCII characters and cannot contain '='.\n- `invalid_secret_context` (400): Secrets are scoped to an app or to a profile, nothing else.\n- `app_secrets_only` (400): Only app secrets can be written in bulk.\n- `secrets_access_denied` (401): The caller may not read or write the secrets of that app or profile.\n- `status_forbidden_resource` (403): Only a platform service writes app or domain status.\n- `status_forbidden_field` (403): That field of a deployment status is platform bookkeeping. `message` names it.\n- `status_forbidden_phase` (403): That phase is set by the platform, not by the client.\n- `github_identity_missing` (412): The user has not connected GitHub. Send them through `connect_github`.\n- `github_installation_missing` (412): The Faable GitHub App is not installed on any repository of theirs.\n- `github_repository_not_found` (404): The repository does not exist or the installation cannot see it.\n- `github_token_invalid` (401): The stored GitHub token was rejected; the user must reconnect.\n- `github_permission_denied` (403): The installation lacks a permission this operation needs.\n- `github_installation_suspended` (403): The GitHub App installation is suspended.\n- `github_installation_not_found` (412): The installation id is unknown or the App was uninstalled.\n- `github_repository_blocked` (403): GitHub refuses to serve the source of that repository (403 or 451).\n- `github_error` (502): GitHub failed upstream. `message` carries what it said.\n- `repository_already_linked` (409): The repository is already linked to another app. `details.app_id` / `details.app_name` name it.\n- `invalid_installation_id` (400): The `installation_id` is not a number.\n- `oidc_untrusted` (401): The GitHub Actions OIDC token was rejected. `message` says why.\n- `app_repository_mismatch` (403): The app does not exist or is not linked to the repository the token comes from.\n- `no_app_for_repository` (404): No app is linked to that repository.\n- `ambiguous_app_for_repository` (400): Several apps are linked to that repository; pass `--app-slug`.\n- `app_disabled` (409): The app is disabled, so it cannot be deployed or provisioned. `message` says why when the reason is public.\n- `app_rate_limited` (429): A new account may only create a few apps in its first 24 hours.\n- `plan_required` (403): The build or feature needs a higher plan. `message` says which.\n- `remote_build_disabled` (409): Remote builds are off for this environment or this app. Deploy with a local build instead.\n- `artifact_deploy_disabled` (409): Artifact deploys are not enabled on this environment.\n- `artifact_too_large` (413): The artifact exceeds the size allowed for the plan.\n- `metrics_unavailable` (503): Traffic metrics are temporarily unavailable — this is not an app with no traffic.\n- `transfer_refused` (409): The app cannot be moved to that project. `message` lists the blockers.\n- `user_not_found` (400): No user with that id in Faable Auth.\n- `waf_rule_not_found` (404): No WAF rule with that pattern on this app.\n- `project_rate_limited` (429): A new account may only create a few projects in its first hours. It opens with time, or with a plan.\n- `project_plan_limited` (402): The Free plan project cap is reached. Upgrade to create more.\n- `domain_invalid` (400): Not a valid hostname. No protocol, port or path.\n- `domain_reserved` (403): Hostnames under that domain are assigned by Faable.\n- `domain_taken` (409): That hostname is already registered on Faable.\n- `invalid_json` (400): The request body is not valid JSON.\n- `missing_github_event` (400): The `x-github-event` header is missing.",
+        "description": "Machine-readable error code. One HTTP status per code.\n\n- `bad_request` (400): The request is malformed. `message` says what is wrong.\n- `validation_error` (400): The body, query or path failed schema validation. `details.issues` lists each failing field.\n- `unauthorized` (401): The request carries no valid credentials.\n- `payment_required` (402): The feature is not included in the current plan.\n- `forbidden` (403): The credentials are valid but do not allow this operation.\n- `not_found` (404): The resource does not exist, or not in the caller’s project.\n- `method_not_allowed` (405): The HTTP method is not supported on this path.\n- `conflict` (409): The request conflicts with the current state of the resource.\n- `payload_too_large` (413): The request body exceeds the size limit.\n- `unsupported_media_type` (415): The `Content-Type` is not accepted by this endpoint.\n- `unprocessable_entity` (422): The request is well-formed but cannot be processed.\n- `too_many_requests` (429): Rate limit exceeded. Honour the `Retry-After` header.\n- `internal_error` (500): Unexpected server error. Retry later; the request id is logged.\n- `gone` (410): The resource existed and is gone for good; retrying will not bring it back.\n- `bad_gateway` (502): An upstream the API depends on failed.\n- `service_unavailable` (503): The feature is not configured on this environment, or is temporarily out of service.\n- `already_exists` (400): A resource with the same unique field already exists. `details.fields` names the field.\n- `invalid_id` (400): The id in the path is not a valid id for this resource.\n- `invalid_query` (400): The `?query=` FaableQL expression could not be parsed.\n- `invalid_expand` (400): An `?expand=` path is not allowed on this resource.\n- `search_not_supported` (400): This resource does not support `?q=`.\n- `access_denied` (401): The row exists but does not belong to the caller.\n- `invalid_token` (401): The bearer token is missing, malformed or expired.\n- `invalid_apikey` (401): The API key does not exist or has been revoked.\n- `apikey_expired` (401): The API key predates projects and must be recreated.\n- `invalid_build_token` (401): The build token is not valid for this deployment.\n- `build_token_expired` (401): The build token is past its lifetime.\n- `build_token_unusable` (401): The deployment reached a terminal phase, so its build token no longer works.\n- `build_token_app_missing` (401): The app the build token was minted for no longer exists.\n- `user_token_required` (401): The endpoint acts on behalf of a person and the credential carries no user (an API key or a service account).\n- `team_required` (400): The operation needs a project: send it in the `x-faable-project` header (`project_<id>`).\n- `team_or_scope_required` (401): Listing needs either a project in the `x-faable-project` header or a global scope on the token.\n- `project_access_denied` (403): The caller is not a member of the project named in `x-faable-project`, or the credential belongs to another project.\n- `project_header_conflict` (400): The request names two different projects (`x-faable-project` and the deprecated `x-faable-team`, or a query param). Send only `x-faable-project`.\n- `invalid_project_id` (400): The project in `x-faable-project` is not a valid project id (`project_` followed by 24 hex characters).\n- `user_suspended` (403): The account is suspended. Contact support@faable.com.\n- `superadmin_only` (403): The operation is restricted to platform staff.\n- `project_not_found` (404): No project with that id for this caller.\n- `owner_only` (403): Only the project owner can manage collaborators.\n- `owner_not_removable` (400): The project owner cannot be removed. Delete the project instead.\n- `collaborator_not_found` (404): That user is not a collaborator on the project.\n- `invalid_project_name` (400): The project name is not acceptable. `message` says why.\n- `moderation_hold` (403): The project contains an app disabled by moderation and cannot be deleted. Contact support@faable.com.\n- `app_not_found` (404): No app with that id or slug in this project.\n- `repository_not_linked` (400): The app has no linked repository.\n- `repository_empty` (400): The repository has no commits on the deploy branch yet.\n- `branch_missing` (400): The deploy branch does not exist on the repository. `message` lists the branches that do.\n- `deploy_mode_conflict` (400): The app deploys from its own workflow, so the platform will not create a deployment for it.\n- `deploy_refused` (409): The deploy was refused by quota, plan or an in-flight deployment. `message` says which.\n- `invalid_root_dir` (400): The Root Directory must be a path inside the repository — no leading `/` and no `..`.\n- `root_dir_not_found` (400): The Root Directory does not exist on that ref of the repository.\n- `root_dir_mismatch` (400): The workflow deploys from one directory and platform builds would run from another. Declare `rootDir` in faable.json.\n- `no_workflows` (400): The repository has no GitHub Actions workflows, so a CI gate would never open.\n- `no_deploy_workflow` (400): No workflow in the repository runs `faable deploy`.\n- `invalid_secret_name` (400): Secret names are 1-255 printable ASCII characters and cannot contain '='.\n- `invalid_secret_context` (400): Secrets are scoped to an app or to a profile, nothing else.\n- `app_secrets_only` (400): Only app secrets can be written in bulk.\n- `secrets_access_denied` (401): The caller may not read or write the secrets of that app or profile.\n- `status_forbidden_resource` (403): Only a platform service writes app or domain status.\n- `status_forbidden_field` (403): That field of a deployment status is platform bookkeeping. `message` names it.\n- `status_forbidden_phase` (403): That phase is set by the platform, not by the client.\n- `github_identity_missing` (412): The user has not connected GitHub. Send them through `connect_github`.\n- `github_installation_missing` (412): The Faable GitHub App is not installed on any repository of theirs.\n- `github_repository_not_found` (404): The repository does not exist or the installation cannot see it.\n- `github_token_invalid` (401): The stored GitHub token was rejected; the user must reconnect.\n- `github_permission_denied` (403): The installation lacks a permission this operation needs.\n- `github_installation_suspended` (403): The GitHub App installation is suspended.\n- `github_installation_not_found` (412): The installation id is unknown or the App was uninstalled.\n- `github_repository_blocked` (403): GitHub refuses to serve the source of that repository (403 or 451).\n- `github_rate_limited` (429): GitHub is rate-limiting Faable. Transient: retry after a short wait.\n- `github_token_refresh_failed` (401): GitHub refused to refresh the stored authorization. The user has to reconnect.\n- `github_error` (502): GitHub failed upstream. `message` carries what it said.\n- `repository_already_linked` (409): The repository is already linked to another app. `details.app_id` / `details.app_name` name it.\n- `repository_taken_down` (409): An app built from this repository was taken down for abuse, so the repository cannot be linked again. Not a plan limit — upgrading does not lift it. Restoring the taken-down app does.\n- `invalid_installation_id` (400): The `installation_id` is not a number.\n- `oidc_untrusted` (401): The GitHub Actions OIDC token was rejected. `message` says why.\n- `app_repository_mismatch` (403): The app does not exist or is not linked to the repository the token comes from.\n- `no_app_for_repository` (404): No app is linked to that repository.\n- `ambiguous_app_for_repository` (400): Several apps are linked to that repository; pass `--app-slug`.\n- `app_disabled` (409): The app is disabled, so it cannot be deployed or provisioned. `message` says why when the reason is public.\n- `app_rate_limited` (429): A new account may only create a few apps in its first 24 hours.\n- `plan_required` (403): The build or feature needs a higher plan. `message` says which.\n- `remote_build_disabled` (409): Remote builds are off for this environment or this app. Deploy with a local build instead.\n- `artifact_deploy_disabled` (409): Artifact deploys are not enabled on this environment.\n- `artifact_too_large` (413): The artifact exceeds the size allowed for the plan.\n- `metrics_unavailable` (503): Traffic metrics are temporarily unavailable — this is not an app with no traffic.\n- `transfer_refused` (409): The app cannot be moved to that project. `message` lists the blockers.\n- `user_not_found` (400): No user with that id in Faable Auth.\n- `waf_rule_not_found` (404): No WAF rule with that pattern on this app.\n- `project_rate_limited` (429): A new account may only create a few projects in its first hours. It opens with time, or with a plan.\n- `project_plan_limited` (402): The Free plan project cap is reached. Upgrade to create more.\n- `domain_invalid` (400): Not a valid hostname. No protocol, port or path.\n- `domain_reserved` (403): Hostnames under that domain are assigned by Faable.\n- `domain_taken` (409): That hostname is already registered on Faable.\n- `invalid_json` (400): The request body is not valid JSON.\n- `missing_github_event` (400): The `x-github-event` header is missing.",
         "enum": [
           "bad_request",
           "validation_error",
@@ -4298,6 +4440,9 @@
           "user_token_required",
           "team_required",
           "team_or_scope_required",
+          "project_access_denied",
+          "project_header_conflict",
+          "invalid_project_id",
           "user_suspended",
           "superadmin_only",
           "project_not_found",
@@ -4332,8 +4477,11 @@
           "github_installation_suspended",
           "github_installation_not_found",
           "github_repository_blocked",
+          "github_rate_limited",
+          "github_token_refresh_failed",
           "github_error",
           "repository_already_linked",
+          "repository_taken_down",
           "invalid_installation_id",
           "oidc_untrusted",
           "app_repository_mismatch",
@@ -5134,7 +5282,7 @@
             }
           },
           "401": {
-            "description": "`team_or_scope_required` — Listing needs either a project in `x-faable-team` or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
+            "description": "`team_or_scope_required` — Listing needs either a project in the `x-faable-project` header or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
             "content": {
               "application/json": {
                 "schema": {
@@ -5404,7 +5552,7 @@
             }
           },
           "400": {
-            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-team` header.",
+            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-project` header (`project_<id>`).",
             "content": {
               "application/json": {
                 "schema": {
@@ -6571,7 +6719,7 @@
             }
           },
           "401": {
-            "description": "`team_or_scope_required` — Listing needs either a project in `x-faable-team` or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
+            "description": "`team_or_scope_required` — Listing needs either a project in the `x-faable-project` header or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
             "content": {
               "application/json": {
                 "schema": {
@@ -6838,6 +6986,9 @@
                                   "type": "string"
                                 }
                               }
+                            },
+                            "dockerfile_ignored": {
+                              "type": "boolean"
                             }
                           }
                         },
@@ -6945,6 +7096,17 @@
                       ],
                       "description": "Success deploy emails (first deploy + every promote). Absent/null = enabled; false = muted. Failure emails are never gated by this."
                     },
+                    "http3": {
+                      "anyOf": [
+                        {
+                          "type": "boolean"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Whether HTTP/3 is advertised for this app. Absent/null = advertised; false = not advertised. Note it controls the advertisement, not the listener: clients that already discovered HTTP/3 may keep using it until the advertisement expires, and the server does not refuse it."
+                    },
                     "status": {
                       "$ref": "#/components/schemas/AppStatus"
                     },
@@ -7034,7 +7196,7 @@
             }
           },
           "400": {
-            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-team` header.",
+            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-project` header (`project_<id>`).",
             "content": {
               "application/json": {
                 "schema": {
@@ -7332,6 +7494,9 @@
                                   "type": "string"
                                 }
                               }
+                            },
+                            "dockerfile_ignored": {
+                              "type": "boolean"
                             }
                           }
                         },
@@ -7439,6 +7604,17 @@
                       ],
                       "description": "Success deploy emails (first deploy + every promote). Absent/null = enabled; false = muted. Failure emails are never gated by this."
                     },
+                    "http3": {
+                      "anyOf": [
+                        {
+                          "type": "boolean"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Whether HTTP/3 is advertised for this app. Absent/null = advertised; false = not advertised. Note it controls the advertisement, not the listener: clients that already discovered HTTP/3 may keep using it until the advertisement expires, and the server does not refuse it."
+                    },
                     "status": {
                       "$ref": "#/components/schemas/AppStatus"
                     },
@@ -7715,14 +7891,14 @@
                     "type": "string"
                   },
                   "notify_deploy_success": {
-                    "anyOf": [
-                      {
-                        "type": "boolean"
-                      },
-                      {
-                        "type": "null"
-                      }
-                    ]
+                    "type": "boolean",
+                    "nullable": true,
+                    "default": null
+                  },
+                  "http3": {
+                    "type": "boolean",
+                    "nullable": true,
+                    "default": null
                   }
                 },
                 "additionalProperties": false
@@ -7870,6 +8046,9 @@
                                   "type": "string"
                                 }
                               }
+                            },
+                            "dockerfile_ignored": {
+                              "type": "boolean"
                             }
                           }
                         },
@@ -7977,6 +8156,17 @@
                       ],
                       "description": "Success deploy emails (first deploy + every promote). Absent/null = enabled; false = muted. Failure emails are never gated by this."
                     },
+                    "http3": {
+                      "anyOf": [
+                        {
+                          "type": "boolean"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Whether HTTP/3 is advertised for this app. Absent/null = advertised; false = not advertised. Note it controls the advertisement, not the listener: clients that already discovered HTTP/3 may keep using it until the advertisement expires, and the server does not refuse it."
+                    },
                     "status": {
                       "$ref": "#/components/schemas/AppStatus"
                     },
@@ -8369,6 +8559,9 @@
                                   "type": "string"
                                 }
                               }
+                            },
+                            "dockerfile_ignored": {
+                              "type": "boolean"
                             }
                           }
                         },
@@ -8476,6 +8669,17 @@
                       ],
                       "description": "Success deploy emails (first deploy + every promote). Absent/null = enabled; false = muted. Failure emails are never gated by this."
                     },
+                    "http3": {
+                      "anyOf": [
+                        {
+                          "type": "boolean"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ],
+                      "description": "Whether HTTP/3 is advertised for this app. Absent/null = advertised; false = not advertised. Note it controls the advertisement, not the listener: clients that already discovered HTTP/3 may keep using it until the advertisement expires, and the server does not refuse it."
+                    },
                     "status": {
                       "$ref": "#/components/schemas/AppStatus"
                     },
@@ -10501,7 +10705,7 @@
             }
           },
           "409": {
-            "description": "`repository_already_linked` — The repository is already linked to another app. `details.app_id` / `details.app_name` name it.",
+            "description": "`repository_already_linked` — The repository is already linked to another app. `details.app_id` / `details.app_name` name it.\n\n`repository_taken_down` — An app built from this repository was taken down for abuse, so the repository cannot be linked again. Not a plan limit — upgrading does not lift it. Restoring the taken-down app does.",
             "content": {
               "application/json": {
                 "schema": {
@@ -10515,7 +10719,8 @@
                         "error_code": {
                           "type": "string",
                           "enum": [
-                            "repository_already_linked"
+                            "repository_already_linked",
+                            "repository_taken_down"
                           ]
                         }
                       }
@@ -13766,7 +13971,7 @@
             }
           },
           "401": {
-            "description": "`team_or_scope_required` — Listing needs either a project in `x-faable-team` or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
+            "description": "`team_or_scope_required` — Listing needs either a project in the `x-faable-project` header or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
             "content": {
               "application/json": {
                 "schema": {
@@ -14043,7 +14248,7 @@
             }
           },
           "400": {
-            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-team` header.",
+            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-project` header (`project_<id>`).",
             "content": {
               "application/json": {
                 "schema": {
@@ -14524,6 +14729,11 @@
                   },
                   "detected": {
                     "$ref": "#/components/schemas/DeploymentDetected"
+                  },
+                  "plan": {
+                    "type": "object",
+                    "properties": {},
+                    "additionalProperties": true
                   }
                 }
               }
@@ -15764,7 +15974,7 @@
             }
           },
           "401": {
-            "description": "`team_or_scope_required` — Listing needs either a project in `x-faable-team` or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
+            "description": "`team_or_scope_required` — Listing needs either a project in the `x-faable-project` header or a global scope on the token.\n\n`unauthorized` — The request carries no valid credentials.\n\n`invalid_token` — The bearer token is missing, malformed or expired.",
             "content": {
               "application/json": {
                 "schema": {
@@ -15999,7 +16209,7 @@
             }
           },
           "400": {
-            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-team` header.\n\n`domain_invalid` — Not a valid hostname. No protocol, port or path.",
+            "description": "`already_exists` — A resource with the same unique field already exists. `details.fields` names the field.\n\n`validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.\n\n`team_required` — The operation needs a project: send it in the `x-faable-project` header (`project_<id>`).\n\n`domain_invalid` — Not a valid hostname. No protocol, port or path.",
             "content": {
               "application/json": {
                 "schema": {