@hsuite/smart-engines-cli 1.0.0 → 1.0.3

package/README.md

@@ -1,285 +1,208 @@
-# HSuite CLI
+# @hsuite/smart-engines-cli
 
-Command-line interface for deploying and managing smart-apps on the Smart Engines validator network.
-
-## Installation
-
-### From npm (when published)
+`hsuite` — the developer bootstrap CLI for [Smart Engines V3](https://hsuite.finance).
+Three commands that take you from "empty directory" to "smart-app running
+against the live testnet cluster" in under a minute.
 
 ```bash
 npm install -g @hsuite/smart-engines-cli
 ```
 
-### From source (development)
-
-```bash
-# From the monorepo root
-yarn install
-yarn workspace @hsuite/smart-engines-cli build
-
-# Link globally
-cd packages/hsuite-cli && yarn link
-
-# Now 'hsuite' is available globally
-hsuite --help
 ```
-
-## Configuration
-
-### Environment Variables
-
-Create a `.env` file or export these variables:
-
-**Required:**
-
-| Variable             | Description                                | Example                |
-| -------------------- | ------------------------------------------ | ---------------------- |
-| `HEDERA_ACCOUNT_ID`  | Your Hedera account ID                     | `0.0.12345`            |
-| `HEDERA_PRIVATE_KEY` | Your Hedera private key                    | `302e...`              |
-| `HEDERA_PUBLIC_KEY`  | Your Hedera public key                     | `302a...`              |
-| `HEDERA_NETWORK`     | Network to use                             | `testnet` or `mainnet` |
-| `REGISTRY_TOPIC_ID`  | HCS registry topic for validator discovery | `0.0.5678`             |
-
-**Optional:**
-
-| Variable         | Description                            | Example                         |
-| ---------------- | -------------------------------------- | ------------------------------- |
-| `VALIDATOR_URL`  | Direct validator URL (skips discovery) | `https://validator.example.com` |
-| `ALLOW_INSECURE` | Allow HTTP connections (dev only)      | `true`                          |
-| `APP_ID`         | Default application ID                 | `my-app-uuid`                   |
-
-### Validate Configuration
-
-```bash
-# Check all required variables
-hsuite config validate
-
-# Show environment variable requirements
-hsuite config env
-
-# Show current configuration
-hsuite config show
+hsuite init                    # XRPL wallet + faucet + .env.local
+hsuite subscribe --env <file>  # free_testnet smart-app registration on cluster
+hsuite deploy --manifest <f>   # deploy a smart-app from a JSON manifest
 ```
 
-## Commands
+XRPL-only. The CLI generates an XRPL keypair, funds it via the testnet
+faucet, and uses it for Web3 challenge-response auth against the cluster.
+No Hedera credentials needed — the cluster's validator/host pods pay
+their own HCS fees.
 
-### Smart-App Management
+---
 
-#### Deploy a New Smart-App
+## `hsuite init`
 
-```bash
-# Basic deployment
-hsuite smart-app deploy -n "My App"
-
-# With description and auto-subscription
-hsuite smart-app deploy -n "My App" -d "My awesome application" --auto-subscribe
-
-# Specify chain and network
-hsuite smart-app deploy -n "My App" --chain hedera --network testnet
-```
-
-**Options:**
-
-| Option                     | Description                       | Default   |
-| -------------------------- | --------------------------------- | --------- |
-| `-n, --name <name>`        | Application name (required)       | -         |
-| `-d, --description <desc>` | Application description           | -         |
-| `--chain <chain>`          | Blockchain (hedera, xrpl)         | `hedera`  |
-| `--network <network>`      | Network (testnet, mainnet)        | `testnet` |
-| `--validator-url <url>`    | Direct validator URL              | -         |
-| `--auto-subscribe`         | Request subscription after deploy | `false`   |
-
-#### Check Smart-App Status
+Generate a fresh XRPL testnet wallet, fund it (~1000 testnet XRP via the
+official Ripple faucet), and write an `.env.local` with everything the
+showcase smart-app expects.
 
 ```bash
-hsuite smart-app status <app-id>
+hsuite init                                # writes ./.env.local (testnet)
+hsuite init --out smart-app/.env.local     # custom output path
+hsuite init --network devnet               # devnet faucet instead
+hsuite init --no-fund                      # generate wallet only, skip faucet
+hsuite init --force                        # overwrite an existing .env.local
+hsuite init --gateway https://...          # override the cluster gateway URL
 ```
 
-**Example output:**
+The generated `.env.local`:
 
 ```
-Smart-App Status
-──────────────────────────────────────────────────
-App ID:           abc123-def456-...
-App Name:         My App
-Status:           ACTIVE
-Subscription ID:  sub-789...
-NFT Serial:       42
-Expires:          2027-01-23T00:00:00Z
-──────────────────────────────────────────────────
+APP_ID=smart-app-showcase-local
+APP_NAME=Smart App Showcase (local)
+
+VALIDATOR_URL=https://v3-testnet-gateway.hsuite.network
+SMART_HOST_URL=https://v3-testnet-gateway.hsuite.network
+
+XRPL_NETWORK=testnet
+XRPL_ADDRESS=r...
+XRPL_PUBLIC_KEY=...
+XRPL_SEED=s...                  # ⚠️ DO NOT COMMIT
+
+# NestJS dev config
+NODE_ENV=development
+PORT=3000
+API_KEY_ENABLED=false
+CORS_ORIGINS=http://localhost:8101,http://localhost:8100,http://localhost:4200
+...
+
+# Subscription — run `hsuite subscribe` to register a free_testnet smart-app
+SKIP_SUBSCRIPTION_CHECK=true
+SUBSCRIPTION_TIER=free_testnet
+# SUBSCRIPTION_APP_ID=          # populated by `hsuite subscribe`
 ```
 
-#### Subscribe a Smart-App
+---
 
-```bash
-# Request subscription (shows deposit instructions)
-hsuite smart-app subscribe <app-id>
+## `hsuite subscribe`
 
-# Auto-poll for deposit confirmation
-hsuite smart-app subscribe <app-id> --poll
+Register a `free_testnet` smart-app on the cluster. On testnet, the
+validator explicitly skips the deposit/NFT gate — DKG runs, the smart-app
+goes ACTIVE immediately, and the cluster-issued `appId` becomes your
+smart-app's on-chain identity.
 
-# Mint NFT (after deposit confirmed)
-hsuite smart-app subscribe <app-id> --mint
+```bash
+hsuite subscribe --env .env.local
+hsuite subscribe --env .env.local --name "My Smart App"
+hsuite subscribe --env .env.local --services database,storage,messaging
+hsuite subscribe --env .env.local --gateway https://my-cluster.example.com
 ```
 
-**Options:**
+Flow:
 
-| Option                  | Description                                                         |
-| ----------------------- | ------------------------------------------------------------------- |
-| `--poll`                | Auto-wait for deposit confirmation (10s intervals, max 60 attempts) |
-| `--mint`                | Mint subscription NFT (use after deposit confirmed)                 |
-| `--validator-url <url>` | Direct validator URL                                                |
-| `--network <network>`   | Network (testnet, mainnet)                                          |
+1. Reads `XRPL_*` + `APP_NAME` from `.env.local`
+2. Builds a signer using `ripple-keypairs.sign`
+3. Authenticates via `BaasClient.authenticate({chain: 'xrpl', ...})` against the cluster
+4. Calls `BaasClient.deployment.init({name, port, services})` — the new four-step deploy flow's step 1 (legacy `register()` removed in PR-A); the cluster runs the per-entity DKG ceremony and returns the DKG entityId as `appId`
+5. Appends `SUBSCRIPTION_APP_ID=<appId>` and `APP_ID=<appId>` to your `.env.local`, flips `SKIP_SUBSCRIPTION_CHECK=false`
 
-#### List Smart-Apps
+After this, your smart-app boots in cluster-mode automatically.
 
-```bash
-# List all apps
-hsuite smart-app list
+---
 
-# Filter by status
-hsuite smart-app list --status ACTIVE
-hsuite smart-app list --status PENDING_DEPOSIT
-```
+## `hsuite deploy`
 
-### Configuration Commands
+Deploy a smart-app image from a JSON manifest via the SDK's four-step
+runtime-orchestration flow (`init` → `docker push` → optional
+`uploadFrontend` → `deploy`). Use this for CI pipelines that ship a
+container image to the cluster.
 
 ```bash
-# Show current configuration
-hsuite config show
-
-# Show required environment variables
-hsuite config env
-
-# Validate configuration
-hsuite config validate
+hsuite deploy --manifest ./my-app.json --env .env.local
+hsuite deploy --manifest ./my-app.json --env .env.local --non-interactive   # for CI
 ```
 
-## Subscription Flow
-
-1. **Deploy your smart-app:**
-
-   ```bash
-   hsuite smart-app deploy -n "My App"
-   ```
-
-2. **Request subscription:**
-
-   ```bash
-   hsuite smart-app subscribe <app-id>
-   ```
-
-   This creates a deposit wallet and shows deposit instructions.
-
-3. **Deposit HSUITE tokens:**
-   Send the required HSUITE amount to the deposit wallet address shown.
-
-4. **Wait for confirmation (automatic):**
-
-   ```bash
-   hsuite smart-app subscribe <app-id> --poll
-   ```
-
-   The CLI will poll every 10 seconds and automatically mint the NFT when the deposit is confirmed.
-
-5. **Or manually mint (after deposit):**
-
-   ```bash
-   hsuite smart-app subscribe <app-id> --mint
-   ```
-
-6. **Verify active subscription:**
-   ```bash
-   hsuite smart-app status <app-id>
-   ```
+`my-app.json`:
+
+```json
+{
+  "name": "my-smart-app",
+  "port": 3000,
+  "tag": "v1",
+  "replicas": 1,
+  "services": ["database", "storage", "messaging", "functions"],
+  "env": { "NODE_ENV": "production" },
+  "frontend": { "bundlePath": "./dist/bundle.tar.gz" }
+}
+```
 
-## Global Options
+What the command does, in order:
 
-These options work with all commands:
+1. **`deployment.init`** — cluster allocates the `appId` (per-entity DKG
+   entityId) and returns ephemeral DOCR push credentials.
+2. **(out-of-band)** the CLI prints the `docker login` + `docker push`
+   commands and waits for Enter (skipped with `--non-interactive`,
+   `CI=true`, or no TTY — the caller is assumed to have completed the
+   push).
+3. **`deployment.uploadFrontend`** — if `frontend.bundlePath` is set, the
+   tarball is uploaded.
+4. **`deployment.deploy`** — the cluster reconciles the requested `tag`
+   + `replicas` + `env` to k8s.
 
-| Option                       | Description                            |
-| ---------------------------- | -------------------------------------- |
-| `--network <network>`        | Network to use (testnet, mainnet)      |
-| `--validator-url <url>`      | Direct validator URL (skips discovery) |
-| `--registry-topic <topicId>` | HCS registry topic ID                  |
-| `-V, --version`              | Show version number                    |
-| `-h, --help`                 | Show help                              |
+The returned `appId` is appended to `.env.local` as `DEPLOYED_APP_ID`.
 
-## Examples
+---
 
-### Complete Deployment Workflow
+## End-to-end (1-minute bootstrap)
 
 ```bash
-# 1. Set up environment
-export HEDERA_ACCOUNT_ID="0.0.12345"
-export HEDERA_PRIVATE_KEY="302e..."
-export HEDERA_PUBLIC_KEY="302a..."
-export HEDERA_NETWORK="testnet"
-export REGISTRY_TOPIC_ID="0.0.5678"
-
-# 2. Validate configuration
-hsuite config validate
-
-# 3. Deploy with auto-subscription
-hsuite smart-app deploy -n "MyDApp" -d "My decentralized app" --auto-subscribe
-
-# 4. Wait for deposit and mint
-hsuite smart-app subscribe <returned-app-id> --poll
+mkdir my-smart-app && cd my-smart-app
+npm install -g @hsuite/smart-engines-cli
 
-# 5. Check status
-hsuite smart-app status <app-id>
+hsuite init                                  # → .env.local with funded XRPL wallet
+hsuite subscribe --env .env.local            # → free_testnet appId on cluster
+cat .env.local | grep XRPL_ADDRESS           # → your wallet address
+cat .env.local | grep SUBSCRIPTION_APP_ID    # → your smart-app's DKG entity ID
 ```
 
-### Using Direct Validator Connection
+That's it — you now have:
+- A funded XRPL testnet wallet
+- A registered smart-app on the live Smart Engines V3 testnet cluster
+- An `.env.local` your NestJS backend can consume directly
 
-```bash
-# Skip discovery by providing direct URL
-hsuite smart-app deploy -n "My App" --validator-url https://validator.example.com
+---
 
-# Or set in environment
-export VALIDATOR_URL="https://validator.example.com"
-hsuite smart-app deploy -n "My App"
-```
+## What the CLI does NOT do
+
+- **Pay HCS fees.** The cluster's validator/host pods do that from their own pod-local Hedera operator accounts. The smart-app never sees Hedera credentials.
+- **Mint a subscription NFT for `free_testnet`.** The validator's smart-app service explicitly skips this gate on testnet — the DKG entity ID IS the on-chain registration proof. Paid-tier NFT minting is a separate post-launch flow.
+- **Configure your smart-app's business logic.** If your smart-app does Hedera-side or Solana-side or any other-chain ops as part of its app logic, that's separate from the dev wallet and you configure it in your app's own code/env.
 
-## Troubleshooting
+---
 
-### "Missing required environment variables"
+## Use programmatically
 
-Run `hsuite config env` to see which variables are missing, then set them in your `.env` file or environment.
+Each command is exported for scripting:
 
-### "Failed to connect to validator"
+```ts
+import { initWallet, subscribeFreeTestnet, deploySmartApp } from '@hsuite/smart-engines-cli';
 
-1. Check your network connection
-2. Verify `REGISTRY_TOPIC_ID` is correct for your network
-3. Try using `--validator-url` with a known validator endpoint
+await initWallet({
+  out: '.env.local',
+  network: 'testnet',
+  gateway: 'https://v3-testnet-gateway.hsuite.network',
+  fund: true,
+});
 
-### "Subscription failed"
+await subscribeFreeTestnet({
+  env: '.env.local',
+  gateway: 'https://v3-testnet-gateway.hsuite.network',
+  services: 'database,storage,messaging,functions',
+});
+```
 
-1. Check you have sufficient HSUITE tokens
-2. Verify the deposit wallet address is correct
-3. Ensure the deposit amount matches exactly
+---
 
-### "Timeout waiting for deposit"
+## Companion packages
 
-The default timeout is 10 minutes (60 attempts x 10 seconds). If your deposit is taking longer:
+- **[`@hsuite/smart-engines-sdk`](https://www.npmjs.com/package/@hsuite/smart-engines-sdk)** — the underlying SDK that `hsuite` wraps. Use it directly when you need finer-grained control over auth, BaaS calls, or chain operations.
+- **[hsuite-ecosystem/apps/showcase](https://github.com/HSuiteNetwork/hsuite-ecosystem/tree/main/apps/showcase)** — a reference NestJS backend + Ionic dApp that demonstrate the full integration. Fork it as a starting point.
 
-1. Check the transaction on a block explorer
-2. Verify the deposit was sent to the correct wallet
-3. Run the subscribe command again with `--poll`
+---
 
-## Development
+## Peer dependencies
 
-```bash
-# Run CLI in development mode
-yarn workspace @hsuite/smart-engines-cli dev --help
+| Package | Why |
+|---|---|
+| `@hsuite/smart-engines-sdk` | Auth + BaaS API surface |
+| `xrpl` | XRPL keypair generation + signing |
+| `commander`, `chalk`, `ora`, `dotenv`, `uuid` | CLI ergonomics (UI + env parsing) |
 
-# Build
-yarn workspace @hsuite/smart-engines-cli build
+All bundled — `npm install -g @hsuite/smart-engines-cli` pulls everything.
 
-# Lint
-yarn workspace @hsuite/smart-engines-cli lint
-```
+---
 
 ## License
 
-MIT
+MIT.

package/dist/_lib/env.d.ts

@@ -2,10 +2,10 @@ export type EnvMap = Map<string, string>;
 export declare function readEnv(path: string): EnvMap;
 export declare function upsertEnv(path: string, updates: Record<string, string>): void;
 export type AuthSigner = {
-    chain: 'xrpl' | 'hedera';
+    chain: 'xrpl';
     walletAddress: string;
     publicKey: string;
-    signFn: (message: string) => string | Promise<string>;
+    signFn: (message: string) => string;
 };
 export declare function buildSignerFromEnv(env: EnvMap): AuthSigner;
 //# sourceMappingURL=env.d.ts.map

package/dist/_lib/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/_lib/env.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzC,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgB5C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAuB7E;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACvD,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CA+C1D"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/_lib/env.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzC,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgB5C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAuB7E;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAyB1D"}

package/dist/_lib/env.js

@@ -4,11 +4,18 @@ exports.readEnv = readEnv;
 exports.upsertEnv = upsertEnv;
 exports.buildSignerFromEnv = buildSignerFromEnv;
 /**
- * Tiny .env parser/writer + signer factories. Internal to the CLI.
+ * Tiny .env parser/writer + XRPL signer factory.
+ *
+ * Smart Engines V3 smart-app auth is **XRPL-only by design** (per the
+ * HSUITE→XRPL migration). Hedera credentials are NOT required by the
+ * smart-app — the cluster's validator/host pods pay their own HCS fees.
+ *
+ * Multi-chain auth at the SDK level (BaasClient.authenticate({chain})) is
+ * still available for downstream consumers that want to authenticate via
+ * other chains, but the CLI's prescriptive boilerplate writes XRPL only.
  */
 const fs_1 = require("fs");
 const xrpl_1 = require("xrpl");
-const sdk_1 = require("@hashgraph/sdk");
 function readEnv(path) {
     if (!(0, fs_1.existsSync)(path))
         throw new Error(`env file not found: ${path}`);
@@ -56,51 +63,27 @@ function upsertEnv(path, updates) {
     (0, fs_1.writeFileSync)(path, out);
 }
 function buildSignerFromEnv(env) {
-    const preferred = (env.get('PREFERRED_CHAIN') ?? 'xrpl').toLowerCase();
-    if (preferred === 'xrpl') {
-        const seed = env.get('XRPL_SEED');
-        const address = env.get('XRPL_ADDRESS');
-        if (!seed || !address) {
-            throw new Error('XRPL_SEED + XRPL_ADDRESS required (run `hsuite init` first)');
-        }
-        const wallet = xrpl_1.Wallet.fromSeed(seed);
-        return {
-            chain: 'xrpl',
-            walletAddress: address,
-            publicKey: wallet.publicKey,
-            signFn: (message) => {
-                // XRPL Web3 challenge-response: cluster's Web3AuthService verifies via
-                // ripple-keypairs.verify(messageHex.toUpperCase(), signature, publicKey)
-                // — see libs/security-core/src/auth/web3-auth.service.ts:240.
-                // Match that exactly: hex-encode the UTF-8 challenge, uppercase, then
-                // sign with wallet.privateKey via ripple-keypairs.sign.
-                // eslint-disable-next-line @typescript-eslint/no-var-requires
-                const { sign } = require('ripple-keypairs');
-                const messageHex = Buffer.from(message, 'utf-8').toString('hex').toUpperCase();
-                return sign(messageHex, wallet.privateKey);
-            },
-        };
-    }
-    if (preferred === 'hedera') {
-        const accountId = env.get('HEDERA_ACCOUNT_ID');
-        const privateKeyStr = env.get('HEDERA_PRIVATE_KEY');
-        if (!accountId || !privateKeyStr || privateKeyStr.includes('PLACEHOLDER')) {
-            throw new Error('HEDERA_ACCOUNT_ID + HEDERA_PRIVATE_KEY required for Hedera auth');
-        }
-        let privateKey;
-        try {
-            privateKey = sdk_1.PrivateKey.fromStringDer(privateKeyStr);
-        }
-        catch {
-            privateKey = sdk_1.PrivateKey.fromString(privateKeyStr);
-        }
-        return {
-            chain: 'hedera',
-            walletAddress: accountId,
-            publicKey: env.get('HEDERA_PUBLIC_KEY') ?? privateKey.publicKey.toStringDer(),
-            signFn: (message) => Buffer.from(privateKey.sign(Buffer.from(message, 'utf-8'))).toString('hex'),
-        };
+    const seed = env.get('XRPL_SEED');
+    const address = env.get('XRPL_ADDRESS');
+    if (!seed || !address) {
+        throw new Error('XRPL_SEED + XRPL_ADDRESS required. Run `hsuite init` to generate a fresh wallet.');
     }
-    throw new Error(`unsupported PREFERRED_CHAIN: ${preferred}`);
+    const wallet = xrpl_1.Wallet.fromSeed(seed);
+    return {
+        chain: 'xrpl',
+        walletAddress: address,
+        publicKey: wallet.publicKey,
+        signFn: (message) => {
+            // XRPL Web3 challenge-response: cluster's Web3AuthService verifies via
+            // ripple-keypairs.verify(messageHex.toUpperCase(), signature, publicKey)
+            // — see libs/security-core/src/auth/web3-auth.service.ts:240.
+            // Match that exactly: hex-encode the UTF-8 challenge, uppercase, then
+            // sign with wallet.privateKey via ripple-keypairs.sign.
+            // eslint-disable-next-line @typescript-eslint/no-var-requires
+            const { sign } = require('ripple-keypairs');
+            const messageHex = Buffer.from(message, 'utf-8').toString('hex').toUpperCase();
+            return sign(messageHex, wallet.privateKey);
+        },
+    };
 }
 //# sourceMappingURL=env.js.map

package/dist/_lib/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/_lib/env.ts"],"names":[],"mappings":";;AASA,0BAgBC;AAED,8BAuBC;AASD,gDA+CC;AA1GD;;GAEG;AACH,2BAA6D;AAC7D,+BAA8B;AAC9B,wCAA4C;AAI5C,SAAgB,OAAO,CAAC,IAAY;IAClC,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY,EAAE,OAA+B;IACrE,MAAM,KAAK,GAAG,IAAA,eAAU,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,GAAG,IAAI,IAAI,CAAC;IACrC,IAAA,kBAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AASD,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACvE,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,MAAM,GAAG,aAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,MAAM;YACb,aAAa,EAAE,OAAO;YACtB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,CAAC,OAAe,EAAE,EAAE;gBAC1B,uEAAuE;gBACvE,yEAAyE;gBACzE,8DAA8D;gBAC9D,sEAAsE;gBACtE,wDAAwD;gBACxD,8DAA8D;gBAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC/E,OAAO,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7C,CAAC;SACF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,UAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,UAAU,GAAG,gBAAU,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,gBAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;YACL,KAAK,EAAE,QAAQ;YACf,aAAa,EAAE,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;YAC7E,MAAM,EAAE,CAAC,OAAe,EAAE,EAAE,CAC1B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC9E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/_lib/env.ts"],"names":[],"mappings":";;AAgBA,0BAgBC;AAED,8BAuBC;AASD,gDAyBC;AA3FD;;;;;;;;;;GAUG;AACH,2BAA6D;AAC7D,+BAA8B;AAI9B,SAAgB,OAAO,CAAC,IAAY;IAClC,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY,EAAE,OAA+B;IACrE,MAAM,KAAK,GAAG,IAAA,eAAU,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,GAAG,IAAI,IAAI,CAAC;IACrC,IAAA,kBAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AASD,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,aAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO;QACL,KAAK,EAAE,MAAM;QACb,aAAa,EAAE,OAAO;QACtB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,CAAC,OAAe,EAAE,EAAE;YAC1B,uEAAuE;YACvE,yEAAyE;YACzE,8DAA8D;YAC9D,sEAAsE;YACtE,wDAAwD;YACxD,8DAA8D;YAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/commands/deploy.d.ts

@@ -1,5 +1,18 @@
 /**
  * `hsuite deploy` — Deploy a smart-app from a JSON manifest.
+ *
+ * Implements the four-step runtime-deploy flow defined in
+ * `docs/superpowers/specs/2026-05-14-smart-app-runtime-orchestration-design.md` §6.1:
+ *
+ *   1. `init`                    → server allocates appId + ephemeral DOCR creds
+ *   2. (out-of-band, manual)     → customer `docker push <repo>:<tag>`
+ *   3. `uploadFrontend` (opt.)   → tarball with the SPA bundle
+ *   4. `deploy`                  → server reconciles to k8s
+ *
+ * The manifest schema widens to include `image`, `port`, `tag`, `replicas`,
+ * `env`, and an optional `frontend.bundlePath`. Between init and deploy the
+ * CLI prints the docker push command and waits for Enter (skipped in CI /
+ * with `--non-interactive`).
  */
 import { Command } from 'commander';
 export declare const deployCommand: Command;

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,eAAO,MAAM,aAAa,SAkEtB,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+DpC,eAAO,MAAM,aAAa,SA6HtB,CAAC"}