@hsuite/smart-engines-cli 1.2.1 → 1.4.0

package/dist/_lib/subscription-client.js

@@ -1,84 +1,312 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SubscriptionClient = void 0;
+/**
+ * Thin CLI adapter over the SDK's subscription + validator-auth clients.
+ *
+ * The validator-side `/api/v3/subscription/*` surface and the Web3 validator
+ * auth (`/auth/validator/*`) are already covered by `SubscriptionClient` and
+ * `ValidatorAuthClient` in `@hsuite/smart-engines-sdk`. To keep the CLI from
+ * drifting from the SDK, this file no longer hand-rolls its own `fetch`/auth
+ * plumbing — it delegates to the SDK clients, built on the SDK's shared
+ * `createHttpClient`.
+ *
+ * The public shape (class name, method names, response types) is preserved so
+ * the CLI command bodies (subscribe/renew/upgrade/downgrade/billing/usage) and
+ * their unit tests are unchanged. Tests still inject a fake transport via the
+ * constructor's `fetchImpl` seam (and stub `authenticate()` to a no-op).
+ *
+ * Mapping to the SDK client:
+ *   request          → SubscriptionClient.request (flat body matches SubscriptionRequest)
+ *   status           → SubscriptionClient.getStatus
+ *   mint             → SubscriptionClient.mintNft
+ *   renew            → SubscriptionClient.renew({ appId, additionalDays })
+ *   upgrade          → SubscriptionClient.upgrade({ appId, toTier })   (+ flatten effectiveAt)
+ *   downgrade        → SubscriptionClient.downgrade({ appId, toTier }) (+ flatten effectiveAt)
+ *   cancelTierChange → SubscriptionClient.cancelTierChange({ appId })
+ *   usage            → SubscriptionClient.getUsage
+ *   usageStatus      → SubscriptionClient.getUsageStatus
+ *   billing          → SubscriptionClient.getBilling(appId, { limit, offset })
+ *
+ * `createApp` (POST /api/v3/smart-apps) is NOT part of the SDK's subscription
+ * surface, so it is kept here as a thin shim against the validator's smart-app
+ * create route, posting on the same shared `${origin}/api/v3` client.
+ */
+const smart_engines_sdk_1 = require("@hsuite/smart-engines-sdk");
 /**
  * Validator-side subscription HTTP client.
  *
- * All routes match the controller at
- * apps/smart-validator/src/subscription/subscription.controller.ts.
+ * Adapter over the SDK's {@link SdkSubscriptionClient} + {@link ValidatorAuthClient}.
+ * All HTTP/fetch + auth logic lives in the SDK; this class only adapts method
+ * names + base URL, flattens the SDK's `pendingTierChange` envelope onto the
+ * flat `effectiveAt`/`depositInstructions` the CLI consumers read, and (for
+ * tests) bridges the injectable `fetchImpl` seam onto the SDK transport.
  */
 class SubscriptionClient {
-    baseUrl;
-    fetchImpl;
+    /** Validator origin WITHOUT the /api/v3 prefix (auth routes are un-prefixed). */
+    origin;
+    sdk;
+    http;
+    auth;
     constructor(opts) {
-        this.baseUrl = opts.baseUrl.replace(/\/$/, '');
-        // Bind global fetch so `this` isn't lost when called as a property.
-        this.fetchImpl =
-            opts.fetchImpl ?? ((input, init) => globalThis.fetch(input, init));
+        this.origin = opts.baseUrl.replace(/\/$/, '');
+        this.auth = opts.auth;
+        // The validator routes (`/subscription/...`, `/smart-apps`) are all mounted
+        // under `/api/v3` — carry that prefix on the HttpClient baseUrl so the full
+        // URL matches the validator controller mount.
+        const baseUrl = `${this.origin}/api/v3`;
+        // 3-min request timeout (SDK default is 30s). `POST /subscription/request`
+        // synchronously creates the deposit account — a DKG-multisig ceremony plus
+        // a Treasury-funded Payment + SignerListSet + HST TrustSet + DisableMaster,
+        // each a sign + on-chain submitAndWait. On a slow public XRPL endpoint that
+        // whole chain runs ~60-90s, so a 30s client timeout aborted mid-funding and
+        // the deposit account was never finished. (Server-side this could later be
+        // made async + polled; the generous client timeout is the pragmatic fix.)
+        // The same client serves the synchronous `createApp` DKG ceremony.
+        const timeout = opts.requestTimeoutMs ?? 180_000;
+        this.http = opts.fetchImpl
+            ? makeFetchBackedHttpClient(baseUrl, opts.fetchImpl)
+            : (0, smart_engines_sdk_1.createHttpClient)({ baseUrl, timeout });
+        this.sdk = new smart_engines_sdk_1.SubscriptionClient(this.http);
+    }
+    /**
+     * Web3-auth against the validator: challenge → sign → authenticate → bearer.
+     * The validator auth controller is mounted WITHOUT the `/api` prefix
+     * (`/auth/validator/...`). Call before request/mint; no-op without creds.
+     *
+     * Delegates to the SDK's {@link ValidatorAuthClient} for the
+     * challenge/authenticate round-trip; signing stays here (ripple-keypairs)
+     * because it owns the dev wallet seed. The resulting bearer is attached to
+     * the shared HTTP client via `setAuthToken`, so subsequent SDK calls carry it.
+     */
+    async authenticate() {
+        if (!this.auth)
+            return;
+        // ripple-keypairs ships with xrpl (a CLI dep); import lazily.
+        const kp = await Promise.resolve().then(() => __importStar(require('ripple-keypairs')));
+        const { publicKey, privateKey } = kp.deriveKeypair(this.auth.seed);
+        const authClient = new smart_engines_sdk_1.ValidatorAuthClient({ security: { allowInsecure: true } });
+        const res = await authClient.authenticateWithSigner(this.origin, this.auth.chain, this.auth.address, publicKey, (challenge) => {
+            const messageHex = Buffer.from(challenge, 'utf-8').toString('hex').toUpperCase();
+            return kp.sign(messageHex, privateKey);
+        });
+        if (!res.token)
+            throw new Error('validator auth: no session token returned');
+        this.http.setAuthToken(res.token);
+    }
+    /**
+     * Run a bearer-authenticated call with transparent re-auth on token expiry.
+     *
+     * The deposit-account creation behind `POST /subscription/request` is a
+     * synchronous multi-step on-chain ceremony (~60-90s on a slow public XRPL
+     * endpoint — see the constructor's timeout note). The validator session
+     * bearer obtained in {@link authenticate} can expire DURING that window, so
+     * the next session-guarded call (`status`/`mint`) comes back 401
+     * "Invalid or expired authentication token" and the CLI's post-payment NFT
+     * mint/accept steps never run.
+     *
+     * This wrapper makes every bearer call robust to ANY request duration (not
+     * just a fixed-but-longer TTL): on a 401 / expired-token error it re-runs
+     * {@link authenticate} (re-signs a fresh challenge → fresh bearer) ONCE and
+     * retries the call. A second failure surfaces unchanged. No-op re-auth (no
+     * creds configured) is skipped — a retry without a fresh bearer can't help.
+     */
+    async withReauth(fn) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            if (!this.auth || !isAuthExpiredError(err))
+                throw err;
+            // Refresh the bearer (challenge → sign → setAuthToken) and retry once.
+            await this.authenticate();
+            return fn();
+        }
+    }
+    /**
+     * Create the canonical smart-app entity via `POST /api/v3/smart-apps`
+     * (`SmartAppController.create`) — runs the per-entity DKG ceremony to derive
+     * `entityId` AND creates the paid pending-deposit subscription on that id,
+     * returning `{ appId: entityId, depositInstructions, subscriptionId }`.
+     *
+     * The MINT-FIRST entry point for `hsuite subscribe`: the returned `entityId`
+     * becomes the subscription appId end-to-end (no throwaway `app-${uuid}`).
+     * Auth-gated (developer session) — uses the same validator bearer obtained by
+     * {@link authenticate}, and reuses the long request timeout (the synchronous
+     * DKG ceremony + on-chain deposit-account funding exceeds the SDK's 30s
+     * default). Wrapped in {@link withReauth} so a session expiry during the slow
+     * ceremony re-signs + retries once.
+     *
+     * Posts on the shared `${origin}/api/v3` client (the same base the
+     * subscription calls use), so the path is the controller-relative
+     * `/smart-apps` and the full URL is `${origin}/api/v3/smart-apps`.
+     */
+    async createApp(payload) {
+        return this.withReauth(() => this.http.post('/smart-apps', payload));
     }
     async request(payload) {
-        return this.post('/api/v3/subscription/request', payload);
+        return this.withReauth(() => this.sdk.request(payload));
     }
     async status(appId) {
-        return this.get(`/api/v3/subscription/status/${encodeURIComponent(appId)}`);
+        return this.withReauth(() => this.sdk.getStatus(appId));
     }
     async mint(appId) {
-        return this.post(`/api/v3/subscription/mint/${encodeURIComponent(appId)}`, {});
+        return this.withReauth(() => this.sdk.mintNft(appId));
     }
     async renew(appId, additionalDays) {
-        return this.post('/api/v3/subscription/renew', {
+        return this.withReauth(() => this.sdk.renew({
             appId,
             ...(additionalDays !== undefined ? { additionalDays } : {}),
-        });
+        }));
     }
     async upgrade(appId, toTier) {
-        return this.post('/api/v3/subscription/upgrade', {
-            appId,
-            toTier,
-        });
+        const res = await this.withReauth(() => this.sdk.upgrade({ appId, toTier: toTier }));
+        return flattenTierChange(res);
     }
     async downgrade(appId, toTier) {
-        return this.post('/api/v3/subscription/downgrade', {
-            appId,
-            toTier,
-        });
+        const res = await this.withReauth(() => this.sdk.downgrade({ appId, toTier: toTier }));
+        return flattenTierChange(res);
     }
     async cancelTierChange(appId) {
-        return this.post('/api/v3/subscription/tier-change/cancel', {
-            appId,
-        });
+        const res = await this.withReauth(() => this.sdk.cancelTierChange({ appId }));
+        return res;
     }
     async usage(appId) {
-        return this.get(`/api/v3/subscription/usage/${encodeURIComponent(appId)}`);
+        return this.withReauth(() => this.sdk.getUsage(appId));
     }
     async usageStatus(appId) {
-        return this.get(`/api/v3/subscription/usage/status/${encodeURIComponent(appId)}`);
+        return this.withReauth(() => this.sdk.getUsageStatus(appId));
     }
     async billing(appId, limit = 50, offset = 0) {
-        const qs = `?limit=${limit}&offset=${offset}`;
-        return this.get(`/api/v3/subscription/billing/${encodeURIComponent(appId)}${qs}`);
+        return this.withReauth(() => this.sdk.getBilling(appId, { limit, offset }));
     }
-    async post(path, body) {
-        return this.send('POST', path, body);
-    }
-    async get(path) {
-        return this.send('GET', path);
+}
+exports.SubscriptionClient = SubscriptionClient;
+/**
+ * Detect a validator-session expiry / 401 across the two error shapes the
+ * subscription transport can raise:
+ *
+ *  - the SDK's {@link SdkHttpError} (real `createHttpClient` path) — carries a
+ *    structured `statusCode` (401) and the server message
+ *    ("Invalid or expired authentication token").
+ *  - a plain `Error` from the CLI's fetch-backed test seam
+ *    ({@link makeFetchBackedHttpClient}) — message is
+ *    `"${method} ${path} → ${status}: ${body}"`.
+ *
+ * Matches a 401 status from either shape, plus an "expired/invalid …
+ * authentication token" message as a defensive fallback (some session guards
+ * answer 403 with that wording).
+ */
+function isAuthExpiredError(err) {
+    if (err instanceof smart_engines_sdk_1.SdkHttpError) {
+        if (err.statusCode === 401)
+            return true;
     }
-    async send(method, path, body) {
-        const url = `${this.baseUrl}${path}`;
-        const init = {
-            method,
-            headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+    const message = err instanceof Error ? err.message : String(err ?? '');
+    if (/→\s*401\b/.test(message))
+        return true;
+    if (/\b401\b/.test(message) && /token|auth/i.test(message))
+        return true;
+    return /(invalid|expired)[^.]*authentication token/i.test(message);
+}
+/**
+ * Normalize the SDK's tier-change envelope onto the flat shape the CLI
+ * consumers read. The SDK nests `effectiveAt`/`depositInstructions` under
+ * `pendingTierChange` (with `depositInstructions` also surfaced top-level on
+ * upgrade); the CLI's upgrade/downgrade commands read `res.effectiveAt`,
+ * `res.depositInstructions`, `res.toTier` directly.
+ */
+function flattenTierChange(res) {
+    const ptc = res.pendingTierChange;
+    return {
+        success: res.success,
+        appId: res.appId,
+        message: res.message,
+        fromTier: ptc?.fromTier,
+        toTier: ptc?.toTier,
+        effectiveAt: ptc?.effectiveAt,
+        depositInstructions: res.depositInstructions ?? ptc?.depositInstructions,
+    };
+}
+/**
+ * Adapt an injected `fetchImpl` (the CLI's test seam) onto the SDK's
+ * {@link HttpClient} interface so the SDK client can be exercised with a fake
+ * transport. Carries a mutable bearer token so `authenticate()` →
+ * `setAuthToken` → subsequent calls behave like the real client.
+ *
+ * Mirrors the SDK's own `createHttpClient` request/error semantics (JSON body,
+ * Bearer header, `${method} ${path} → ${status}` error on non-2xx).
+ */
+function makeFetchBackedHttpClient(baseUrl, fetchImpl) {
+    let token;
+    async function send(method, path, body) {
+        const url = `${baseUrl}${path}`;
+        const headers = {
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
         };
+        if (token)
+            headers.Authorization = `Bearer ${token}`;
+        const init = { method, headers };
         if (body !== undefined)
             init.body = JSON.stringify(body);
-        const res = await this.fetchImpl(url, init);
+        const res = await fetchImpl(url, init);
         if (!res.ok) {
             const text = await res.text().catch(() => '');
             throw new Error(`${method} ${path} → ${res.status}: ${text.slice(0, 500)}`);
         }
         return (await res.json());
     }
+    const unsupported = (verb) => () => {
+        throw new Error(`fetch-backed HttpClient: ${verb} not supported in CLI subscription adapter`);
+    };
+    return {
+        get: (path) => send('GET', path),
+        post: (path, b) => send('POST', path, b),
+        put: unsupported('put'),
+        patch: unsupported('patch'),
+        delete: unsupported('delete'),
+        getText: unsupported('getText'),
+        getBinary: unsupported('getBinary'),
+        getBinaryWithMeta: unsupported('getBinaryWithMeta'),
+        upload: unsupported('upload'),
+        setAuthToken: (t) => {
+            token = t;
+        },
+        getAuthToken: () => token,
+    };
 }
-exports.SubscriptionClient = SubscriptionClient;
 //# sourceMappingURL=subscription-client.js.map

package/dist/_lib/subscription-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-client.js","sourceRoot":"","sources":["../../src/_lib/subscription-client.ts"],"names":[],"mappings":";;;AAgIA;;;;;GAKG;AACH,MAAa,kBAAkB;IACZ,OAAO,CAAS;IAChB,SAAS,CAAY;IAEtC,YAAY,IAA+B;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/C,oEAAoE;QACpE,IAAI,CAAC,SAAS;YACZ,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAE,UAAU,CAAC,KAA8B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAUb;QACC,OAAO,IAAI,CAAC,IAAI,CAA8B,8BAA8B,EAAE,OAAO,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,GAAG,CACb,+BAA+B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,IAAI,CACd,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACxD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,cAAuB;QAChD,OAAO,IAAI,CAAC,IAAI,CAAgB,4BAA4B,EAAE;YAC5D,KAAK;YACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc;QACzC,OAAO,IAAI,CAAC,IAAI,CAAqB,8BAA8B,EAAE;YACnE,KAAK;YACL,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAqB,gCAAgC,EAAE;YACrE,KAAK;YACL,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,OAAO,IAAI,CAAC,IAAI,CAAqB,yCAAyC,EAAE;YAC9E,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,GAAG,CACb,8BAA8B,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,GAAG,CACb,qCAAqC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC;QACjD,MAAM,EAAE,GAAG,UAAU,KAAK,WAAW,MAAM,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CACb,gCAAgC,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CACjE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAa;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAI,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAChE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAQ;YAChB,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC5E,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;CACF;AA3GD,gDA2GC"}
+{"version":3,"file":"subscription-client.js","sourceRoot":"","sources":["../../src/_lib/subscription-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,iEAMmC;AA6LnC;;;;;;;;GAQG;AACH,MAAa,kBAAkB;IAC7B,iFAAiF;IAChE,MAAM,CAAS;IACf,GAAG,CAAwB;IAC3B,IAAI,CAAa;IACjB,IAAI,CAAoD;IAEzE,YAAY,IAA+B;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,4EAA4E;QAC5E,4EAA4E;QAC5E,8CAA8C;QAC9C,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,SAAS,CAAC;QACxC,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS;YACxB,CAAC,CAAC,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;YACpD,CAAC,CAAC,IAAA,oCAAgB,EAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,GAAG,IAAI,sCAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,8DAA8D;QAC9D,MAAM,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;QAC3C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,uCAAmB,CAAC,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,sBAAsB,CACjD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,CAAC,KAA8D,EACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EACjB,SAAS,EACT,CAAC,SAAS,EAAE,EAAE;YACZ,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACjF,OAAO,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACzC,CAAC,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,KAAK,CAAC,UAAU,CAAI,EAAoB;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACtD,uEAAuE;YACvE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAoB,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAUb;QACC,OAAO,IAAI,CAAC,UAAU,CACpB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAgB,CAAoD,CAC5F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,OAAO,IAAI,CAAC,UAAU,CACpB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAmD,CAClF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,UAAU,CACpB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAqC,CAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,cAAuB;QAChD,OAAO,IAAI,CAAC,UAAU,CACpB,GAAG,EAAE,CACH,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YACb,KAAK;YACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAsC,CAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CACrC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CACrD,CAAC;QACF,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CACrC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CACvD,CAAC;QACF,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9E,OAAO,GAAoC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,UAAU,CACpB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAA6C,CAC3E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,UAAU,CACpB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAA4C,CAChF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,GAAG,CAAC;QACjD,OAAO,IAAI,CAAC,UAAU,CACpB,GAAG,EAAE,CACH,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAA8C,CAC7F,CAAC;IACJ,CAAC;CACF;AAxLD,gDAwLC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,gCAAY,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,GAW1B;IACC,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAClC,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,EAAE,QAAQ;QACvB,MAAM,EAAE,GAAG,EAAE,MAAM;QACnB,WAAW,EAAE,GAAG,EAAE,WAAW;QAC7B,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,GAAG,EAAE,mBAAmB;KACzE,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,yBAAyB,CAAC,OAAe,EAAE,SAAoB;IACtE,IAAI,KAAyB,CAAC;IAC9B,KAAK,UAAU,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACjE,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;QAChC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QACrD,MAAM,IAAI,GAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAU,EAAE;QAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,4CAA4C,CAAC,CAAC;IAChG,CAAC,CAAC;IACF,OAAO;QACL,GAAG,EAAE,CAAI,IAAY,EAAE,EAAE,CAAC,IAAI,CAAI,KAAK,EAAE,IAAI,CAAC;QAC9C,IAAI,EAAE,CAAI,IAAY,EAAE,CAAU,EAAE,EAAE,CAAC,IAAI,CAAI,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,GAAG,EAAE,WAAW,CAAC,KAAK,CAAsB;QAC5C,KAAK,EAAE,WAAW,CAAC,OAAO,CAAwB;QAClD,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAyB;QACrD,OAAO,EAAE,WAAW,CAAC,SAAS,CAA0B;QACxD,SAAS,EAAE,WAAW,CAAC,WAAW,CAA4B;QAC9D,iBAAiB,EAAE,WAAW,CAAC,mBAAmB,CAAoC;QACtF,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAyB;QACrD,YAAY,EAAE,CAAC,CAAqB,EAAE,EAAE;YACtC,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK;KAC1B,CAAC;AACJ,CAAC"}

package/dist/_lib/subscription-env.d.ts

@@ -13,6 +13,41 @@ export declare function requireValidatorUrl(env: EnvMap, opts: {
 export declare function requireAppId(env: EnvMap, opts: {
     appId?: string;
 }): string;
+/**
+ * Resolve the developer's SUBSCRIPTION appId — the identity the CLI must
+ * AUTHENTICATE as for every app-management call (`status` / `update` /
+ * `suspend` / `resume` / `delete` / `deploy`).
+ *
+ * This is deliberately distinct from {@link requireAppId} (which resolves the
+ * management TARGET — the deployed app). The host gates `/api/v3/baas/auth/{challenge,
+ * verify}` on the appId being authenticated: the keystone all-paid gate
+ * (`BaasAuthService.resolveActiveSubscriptionOrDeny`) AND the global
+ * `SubscriptionRateLimitGuard` both 403 unless that appId holds a valid,
+ * ACTIVE subscription. A DEPLOYED app (`smart-app-XXXX`) never holds the
+ * subscription — the subscription NFT lives on the developer's subscription
+ * appId — so authenticating AS the deployed app 403s every management command.
+ *
+ * Precedence: explicit `--subscription-app-id` flag → `SUBSCRIPTION_APP_ID`
+ * env (written by `hsuite subscribe`). Never falls back to `DEPLOYED_APP_ID`:
+ * the deployed app is the target, never the auth identity. Throws an
+ * actionable error when neither is present.
+ *
+ * @throws when no subscription appId can be resolved.
+ */
+export declare function requireSubscriptionAppId(env: EnvMap, opts?: {
+    subscriptionAppId?: string;
+}): string;
+/**
+ * Resolve the deploy-family appId WITHOUT throwing.
+ *
+ * Precedence: explicit flag → `DEPLOYED_APP_ID` → `SUBSCRIPTION_APP_ID`.
+ * Returns `undefined` when none is set — `hsuite deploy` runs a fresh `init`
+ * that allocates an appId, so an absent one is not an error (unlike
+ * {@link requireAppId}, used by lifecycle commands that act on an EXISTING app).
+ */
+export declare function resolveAppId(env: EnvMap, opts?: {
+    appId?: string;
+}): string | undefined;
 export declare function requireXrplCreds(env: EnvMap): {
     address: string;
     seed: string;

package/dist/_lib/subscription-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-env.d.ts","sourceRoot":"","sources":["../../src/_lib/subscription-env.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAEpC,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQnF;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQ1E;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAS/E"}
+{"version":3,"file":"subscription-env.d.ts","sourceRoot":"","sources":["../../src/_lib/subscription-env.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAEpC,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQnF;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAU1E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAO,GACxC,MAAM,CAUR;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,GAAG,SAAS,CAI3F;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAS/E"}

package/dist/_lib/subscription-env.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.requireValidatorUrl = requireValidatorUrl;
 exports.requireAppId = requireAppId;
+exports.requireSubscriptionAppId = requireSubscriptionAppId;
+exports.resolveAppId = resolveAppId;
 exports.requireXrplCreds = requireXrplCreds;
 function requireValidatorUrl(env, opts) {
     const url = opts.gateway ?? env.get('VALIDATOR_URL') ?? env.get('SMART_HOST_URL');
@@ -11,12 +13,54 @@ function requireValidatorUrl(env, opts) {
     return url.replace(/\/$/, '');
 }
 function requireAppId(env, opts) {
-    const appId = opts.appId ?? env.get('SUBSCRIPTION_APP_ID');
+    const appId = opts.appId ?? env.get('DEPLOYED_APP_ID') ?? env.get('SUBSCRIPTION_APP_ID');
     if (!appId) {
-        throw new Error('SUBSCRIPTION_APP_ID not set. Pass --app-id <id> or run `hsuite subscribe` first.');
+        throw new Error('No appId. Pass --app-id <id>, or run `hsuite deploy` / `hsuite subscribe` first ' +
+            '(sets DEPLOYED_APP_ID / SUBSCRIPTION_APP_ID).');
     }
     return appId;
 }
+/**
+ * Resolve the developer's SUBSCRIPTION appId — the identity the CLI must
+ * AUTHENTICATE as for every app-management call (`status` / `update` /
+ * `suspend` / `resume` / `delete` / `deploy`).
+ *
+ * This is deliberately distinct from {@link requireAppId} (which resolves the
+ * management TARGET — the deployed app). The host gates `/api/v3/baas/auth/{challenge,
+ * verify}` on the appId being authenticated: the keystone all-paid gate
+ * (`BaasAuthService.resolveActiveSubscriptionOrDeny`) AND the global
+ * `SubscriptionRateLimitGuard` both 403 unless that appId holds a valid,
+ * ACTIVE subscription. A DEPLOYED app (`smart-app-XXXX`) never holds the
+ * subscription — the subscription NFT lives on the developer's subscription
+ * appId — so authenticating AS the deployed app 403s every management command.
+ *
+ * Precedence: explicit `--subscription-app-id` flag → `SUBSCRIPTION_APP_ID`
+ * env (written by `hsuite subscribe`). Never falls back to `DEPLOYED_APP_ID`:
+ * the deployed app is the target, never the auth identity. Throws an
+ * actionable error when neither is present.
+ *
+ * @throws when no subscription appId can be resolved.
+ */
+function requireSubscriptionAppId(env, opts = {}) {
+    const appId = opts.subscriptionAppId ?? env.get('SUBSCRIPTION_APP_ID');
+    if (!appId) {
+        throw new Error('No subscription appId. Management commands authenticate as your SUBSCRIPTION ' +
+            '(which holds the subscription NFT), not as the deployed app. Pass ' +
+            '--subscription-app-id <id>, or run `hsuite subscribe` first (sets SUBSCRIPTION_APP_ID).');
+    }
+    return appId;
+}
+/**
+ * Resolve the deploy-family appId WITHOUT throwing.
+ *
+ * Precedence: explicit flag → `DEPLOYED_APP_ID` → `SUBSCRIPTION_APP_ID`.
+ * Returns `undefined` when none is set — `hsuite deploy` runs a fresh `init`
+ * that allocates an appId, so an absent one is not an error (unlike
+ * {@link requireAppId}, used by lifecycle commands that act on an EXISTING app).
+ */
+function resolveAppId(env, opts = {}) {
+    return (opts.appId ?? env.get('DEPLOYED_APP_ID') ?? env.get('SUBSCRIPTION_APP_ID') ?? undefined);
+}
 function requireXrplCreds(env) {
     const address = env.get('XRPL_ADDRESS');
     const seed = env.get('XRPL_SEED');

package/dist/_lib/subscription-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"subscription-env.js","sourceRoot":"","sources":["../../src/_lib/subscription-env.ts"],"names":[],"mappings":";;AAUA,kDAQC;AAED,oCAQC;AAED,4CASC;AA7BD,SAAgB,mBAAmB,CAAC,GAAW,EAAE,IAA0B;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,SAAgB,YAAY,CAAC,GAAW,EAAE,IAAwB;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"subscription-env.js","sourceRoot":"","sources":["../../src/_lib/subscription-env.ts"],"names":[],"mappings":";;AAUA,kDAQC;AAED,oCAUC;AAuBD,4DAaC;AAUD,oCAIC;AAED,4CASC;AAjFD,SAAgB,mBAAmB,CAAC,GAAW,EAAE,IAA0B;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,SAAgB,YAAY,CAAC,GAAW,EAAE,IAAwB;IAChE,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kFAAkF;YAChF,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,wBAAwB,CACtC,GAAW,EACX,OAAuC,EAAE;IAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,oEAAoE;YACpE,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAC,GAAW,EAAE,OAA2B,EAAE;IACrE,OAAO,CACL,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS,CACxF,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/commands/app-lifecycle.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `hsuite suspend` / `resume` / `delete` — runtime lifecycle controls for a
+ * deployed app.
+ *
+ *   - suspend → scale the runtime to zero (`deployment.suspend`).
+ *   - resume  → scale it back up (`deployment.resume`).
+ *   - delete  → tear the namespace down (`deployment.delete`). Destructive, so
+ *     it confirms first UNLESS `--yes` is passed or stdin is not a TTY
+ *     (non-interactive contexts must opt in explicitly via `--yes`).
+ */
+import { Command } from 'commander';
+import { connectAndAuth } from '../_lib/baas';
+export type LifecycleAction = 'suspend' | 'resume' | 'delete';
+export type LifecycleOpts = {
+    action: LifecycleAction;
+    envPath: string;
+    gateway: string;
+    /** Management TARGET — the deployed app to act on. */
+    appId?: string;
+    /** Auth IDENTITY — the developer's subscription appId. */
+    subscriptionAppId?: string;
+    /** delete: skip the confirmation prompt. */
+    yes?: boolean;
+    clientFactory?: Parameters<typeof connectAndAuth>[0]['clientFactory'];
+    /** Test seam — confirm prompt. Defaults to a readline y/N. */
+    confirmFn?: (message: string) => Promise<boolean>;
+};
+/** Pure orchestration body — exported for unit tests. */
+export declare function runLifecycle(opts: LifecycleOpts): Promise<{
+    appId: string;
+    performed: boolean;
+}>;
+export declare const suspendCommand: Command;
+export declare const resumeCommand: Command;
+export declare const deleteCommand: Command;
+//# sourceMappingURL=app-lifecycle.d.ts.map

package/dist/commands/app-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-lifecycle.d.ts","sourceRoot":"","sources":["../../src/commands/app-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IACtE,8DAA8D;IAC9D,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACnD,CAAC;AAeF,yDAAyD;AACzD,wBAAsB,YAAY,CAChC,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CA8BhD;AAiDD,eAAO,MAAM,cAAc,SAA8B,CAAC;AAC1D,eAAO,MAAM,aAAa,SAA6B,CAAC;AACxD,eAAO,MAAM,aAAa,SAA6B,CAAC"}