@hyperdrive.bot/cli 1.0.11 → 1.0.13

package/dist/services/hyperdrive-sigv4.d.ts

@@ -42,6 +42,7 @@ interface ModuleResponse {
     ciService?: string;
     createdAt?: string;
     framework?: string;
+    moduleType?: 'backend' | 'frontend';
     name?: string;
     projectId?: string;
     runCommand?: string;
@@ -49,6 +50,7 @@ interface ModuleResponse {
     runtimeVersion?: string;
     slug?: string;
     sourceLocation?: string;
+    subdomain?: string;
 }
 interface ParameterSyncResponse {
     errors?: Array<{
@@ -136,7 +138,9 @@ interface GitAuthInitiateResponse {
     installUrl: string;
     state: string;
 }
-export type HookActionType = 'adhb-enrich' | 'ci-trigger' | 'slack-notify' | 'webhook';
+export type HookTriggerEvent = 'comment_added' | 'field_changed' | 'issue_assigned' | 'issue_created' | 'label_changed' | 'status_transition';
+export type HookActionType = 'adhb-enrich' | 'ci-trigger' | 'git-create-branch' | 'git-create-mr' | 'git-delete-branch' | 'slack-notify' | 'webhook';
+export type HookActionCategory = 'flex' | 'smart';
 export interface SlackNotifyConfig {
     channel: string;
     template?: string;
@@ -167,15 +171,83 @@ export interface HookResponse {
 export interface HookListResponse {
     hooks: HookResponse[];
 }
+export interface HookLogEntry {
+    actionType: string;
+    durationMs: number;
+    errorMessage?: string;
+    hookId: string;
+    hookName: string;
+    httpStatusCode?: number;
+    issueKey: string;
+    status: 'failed' | 'success';
+    timestamp: string;
+    triggerEvent: string;
+}
+export interface HookLogListResponse {
+    items: HookLogEntry[];
+}
 export interface HookCreateRequest {
     actionConfig: HookActionConfig;
     actionType: HookActionType;
     triggerStatus: string;
 }
+export interface HookCreateRequestV2 {
+    action: {
+        category: HookActionCategory;
+        config: Record<string, unknown>;
+        type: HookActionType;
+    };
+    order?: number;
+    trigger: {
+        conditions?: Record<string, string>;
+        event: HookTriggerEvent;
+        source: string;
+    };
+}
+export type BackupStatus = 'completed' | 'failed' | 'in-progress' | 'pending';
+export type BackupType = 'clone' | 'restore' | 'snapshot';
+export type SeedRunStatus = 'completed' | 'failed' | 'in-progress' | 'pending';
+export type ClonePhase = 'completed' | 'credential-rotation' | 'failed' | 'registering' | 'restoring' | 'snapshot-creating' | 'snapshot-sharing';
+export interface BackupResponse {
+    completedAt?: string;
+    createdAt: string;
+    errorMessage?: string;
+    id: string;
+    metadata?: Record<string, string>;
+    serviceSlug: string;
+    serviceType: string;
+    snapshotArn?: string;
+    snapshotIdentifier?: string;
+    status: BackupStatus;
+    type: BackupType;
+    updatedAt: string;
+}
+export interface BackupListResponse {
+    backups: BackupResponse[];
+    lastEvaluatedKey?: Record<string, unknown>;
+}
+export interface SeedRunResponse {
+    completedAt?: string;
+    createdAt: string;
+    errorMessage?: string;
+    id: string;
+    logGroupName?: string;
+    scriptPath?: string;
+    scriptSource: string;
+    serviceSlug: string;
+    serviceType: string;
+    status: SeedRunStatus;
+    updatedAt: string;
+}
+export interface SeedRunListResponse {
+    lastEvaluatedKey?: Record<string, unknown>;
+    seedRuns: SeedRunResponse[];
+}
 /**
  * Hyperdrive API Service with AWS SigV4 authentication
  */
 export declare class HyperdriveSigV4Service extends SigV4ApiClient {
+    private readonly projectsApiUrl?;
     private readonly userGroupsApiUrl?;
     constructor(domain?: string);
     accountAdd(params: {
@@ -196,6 +268,242 @@ export declare class HyperdriveSigV4Service extends SigV4ApiClient {
     accountVerify(params: {
         accountId: string;
     }): Promise<AWSAccountVerifyResponse>;
+    networkDiscover(params: {
+        accountId: string;
+        region: string;
+    }): Promise<{
+        vpcs: Array<{
+            vpcId: string;
+            name: string;
+            cidrBlock: string;
+            privateSubnetIds: string[];
+            publicSubnetIds: string[];
+            securityGroups: Array<{
+                groupId: string;
+                groupName: string;
+                description: string;
+            }>;
+            alreadyRegistered: boolean;
+            existingNetworkSlug?: string;
+        }>;
+        accountId: string;
+        region: string;
+        message?: string;
+    }>;
+    networkRegister(params: {
+        slug: string;
+        accountId: string;
+        region: string;
+        vpcId: string;
+        privateSubnetIds?: string[];
+        publicSubnetIds?: string[];
+        securityGroups?: Record<string, string>;
+        source?: string;
+    }): Promise<Record<string, unknown>>;
+    networkList(): Promise<Array<{
+        slug: string;
+        accountId: string;
+        region: string;
+        vpcId: string;
+        status: string;
+        source: string;
+        privateSubnetIds: string[];
+        publicSubnetIds: string[];
+        securityGroups: Record<string, string>;
+        createdAt: string;
+        updatedAt: string;
+    }>>;
+    networkGet(slug: string): Promise<{
+        slug: string;
+        accountId: string;
+        region: string;
+        vpcId: string;
+        status: string;
+        source: string;
+        privateSubnetIds: string[];
+        publicSubnetIds: string[];
+        securityGroups: Record<string, string>;
+        createdAt: string;
+        updatedAt: string;
+    }>;
+    serviceRegister(params: {
+        slug: string;
+        name: string;
+        type: string;
+        access: 'private' | 'public';
+        endpoint: string;
+        port?: number;
+        protocol?: string;
+        credentialSecretArn?: string;
+        networkSlug?: string;
+        accountId: string;
+        region: string;
+        exportedEnvVars?: Record<string, string>;
+        metadata?: Record<string, string>;
+    }): Promise<Record<string, unknown>>;
+    serviceList(params?: {
+        type?: string;
+        network?: string;
+    }): Promise<Array<{
+        slug: string;
+        name: string;
+        type: string;
+        access: string;
+        status: string;
+        endpoint: string;
+        port?: number;
+        protocol?: string;
+        credentialSecretArn?: string;
+        networkSlug?: string;
+        accountId: string;
+        region: string;
+        exportedEnvVars: Record<string, string>;
+        metadata: Record<string, string>;
+        createdAt: string;
+        updatedAt: string;
+    }>>;
+    serviceGet(slug: string): Promise<{
+        slug: string;
+        name: string;
+        type: string;
+        access: string;
+        status: string;
+        endpoint: string;
+        port?: number;
+        protocol?: string;
+        credentialSecretArn?: string;
+        networkSlug?: string;
+        accountId: string;
+        region: string;
+        templateId?: string;
+        stackName?: string;
+        stackArn?: string;
+        cdkRepo?: string;
+        exportedEnvVars: Record<string, string>;
+        metadata: Record<string, string>;
+        createdAt: string;
+        updatedAt: string;
+    }>;
+    serviceUpdate(slug: string, params: Record<string, unknown>): Promise<Record<string, unknown>>;
+    serviceProvision(body: {
+        templateId: string;
+        serviceSlug: string;
+        serviceName: string;
+        stage: string;
+        parameters?: Record<string, string>;
+        networkSlug?: string;
+    }): Promise<{
+        serviceSlug: string;
+        status: string;
+        logGroupName: string;
+    }>;
+    serviceTemplateGet(templateId: string): Promise<{
+        id: string;
+        name: string;
+        description: string;
+        type: string;
+        parameters: Array<{
+            name: string;
+            description: string;
+            type: string;
+            default?: string;
+            allowed?: string[];
+            required: boolean;
+        }>;
+        defaultExportedEnvVars: Record<string, string>;
+        defaultSecurityGroupPurpose: string | null;
+    }>;
+    serviceDecommission(slug: string): Promise<{
+        message: string;
+    }>;
+    serviceBind(serviceSlug: string, body: {
+        moduleSlug: string;
+        stage: string;
+        envVarMapping?: Record<string, string>;
+        templateVars?: Record<string, string>;
+    }): Promise<{
+        stage: string;
+        moduleSlug: string;
+        serviceSlug: string;
+        envVarMapping?: Record<string, string>;
+        templateVars?: Record<string, string>;
+        createdAt: string;
+        updatedAt: string;
+    }>;
+    serviceUnbind(serviceSlug: string, body: {
+        moduleSlug: string;
+        stage: string;
+    }): Promise<{
+        message: string;
+    }>;
+    serviceBindings(serviceSlug: string): Promise<Array<{
+        stage: string;
+        moduleSlug: string;
+        serviceSlug: string;
+        envVarMapping?: Record<string, string>;
+        templateVars?: Record<string, string>;
+        createdAt: string;
+        updatedAt: string;
+    }>>;
+    serviceTemplates(): Promise<Array<{
+        id: string;
+        name: string;
+        description: string;
+        type: string;
+        parameters: Array<{
+            name: string;
+            description: string;
+            type: string;
+            default: string;
+            allowed?: string[];
+            required: boolean;
+        }>;
+        defaultExportedEnvVars: Record<string, string>;
+    }>>;
+    serviceCreateBackup(serviceSlug: string, metadata?: Record<string, string>): Promise<BackupResponse>;
+    serviceListBackups(serviceSlug: string, params?: {
+        limit?: string;
+        lastEvaluatedKey?: string;
+    }): Promise<BackupListResponse>;
+    serviceGetBackup(serviceSlug: string, backupId: string): Promise<BackupResponse>;
+    serviceRestore(serviceSlug: string, body: {
+        backupId: string;
+        instanceClass?: string;
+        networkSlug?: string;
+        targetSlug?: string;
+    }): Promise<BackupResponse>;
+    serviceClone(serviceSlug: string, body: {
+        instanceClass?: string;
+        targetAccountId?: string;
+        targetNetworkSlug: string;
+        targetSlug: string;
+        templateVars?: Record<string, string>;
+    }): Promise<BackupResponse>;
+    serviceBackupSchedule(serviceSlug: string, schedule: 'daily' | 'weekly'): Promise<Record<string, unknown>>;
+    serviceSeed(serviceSlug: string, body: {
+        allowProduction?: boolean;
+        scriptPath?: string;
+        scriptSource: string;
+    }): Promise<SeedRunResponse>;
+    serviceListSeedRuns(serviceSlug: string, params?: {
+        lastEvaluatedKey?: string;
+        limit?: string;
+    }): Promise<SeedRunListResponse>;
+    serviceGetSeedRun(serviceSlug: string, seedRunId: string): Promise<SeedRunResponse>;
+    moduleBindings(moduleSlug: string, params?: {
+        stage?: string;
+    }): Promise<Array<{
+        stage: string;
+        moduleSlug: string;
+        serviceSlug: string;
+        serviceType?: string;
+        serviceAccess?: string;
+        networkSlug?: string;
+        envVarMapping?: Record<string, string>;
+        templateVars?: Record<string, string>;
+        createdAt: string;
+        updatedAt: string;
+    }>>;
     ciAccountCreate(params: {
         description?: string;
         name: string;
@@ -252,6 +560,7 @@ export declare class HyperdriveSigV4Service extends SigV4ApiClient {
     deploymentCreate(params: {
         commit: string;
         launch: boolean;
+        moduleType?: string;
         name: string;
         projectSlug: string;
         regions: string[];
@@ -290,10 +599,15 @@ export declare class HyperdriveSigV4Service extends SigV4ApiClient {
         totalCount: number;
     }>;
     hookCreate(projectId: string, body: HookCreateRequest): Promise<HookResponse>;
+    hookCreateV2(projectId: string, body: HookCreateRequestV2): Promise<HookResponse>;
     hookDelete(projectId: string, hookId: string): Promise<{
         message: string;
     }>;
     hookList(projectId: string): Promise<HookListResponse>;
+    hookLogList(projectId: string, options?: {
+        limit?: number;
+        status?: string;
+    }): Promise<HookLogListResponse>;
     hookUpdate(projectId: string, hookId: string, body: Partial<HookCreateRequest> & {
         enabled?: boolean;
     }): Promise<HookResponse>;
@@ -404,16 +718,18 @@ export declare class HyperdriveSigV4Service extends SigV4ApiClient {
     moduleCreate(module: {
         buildCommand?: string;
         buildFolder?: string;
-        buildRuntime: string;
+        buildRuntime?: string;
         buildRuntimeVersion?: string;
         ciService?: string;
-        framework: string;
+        framework?: string;
         installCommand?: string;
+        moduleType?: 'backend' | 'frontend' | 'cdk';
         name: string;
         runCommand?: string;
-        runtime: string;
+        runtime?: string;
         slug: string;
         sourceLocation: string;
+        subdomain?: string;
     }): Promise<ModuleResponse>;
     moduleDestroy(params: {
         slug: string;
@@ -463,12 +779,14 @@ export declare class HyperdriveSigV4Service extends SigV4ApiClient {
         ciService?: string;
         framework?: string;
         installCommand?: string;
+        moduleType?: 'backend' | 'frontend' | 'cdk';
         name?: string;
         runCommand?: string;
         runtime?: string;
         runtimeVersion?: string;
         slug: string;
         sourceLocation?: string;
+        subdomain?: string;
     }): Promise<ModuleResponse>;
     parameterAdd(params: {
         accountId: string;
@@ -575,6 +893,15 @@ export declare class HyperdriveSigV4Service extends SigV4ApiClient {
     stageAccessRevoke(stageName: string, targetType: 'user' | 'group', targetId: string): Promise<{
         message: string;
     }>;
+    domainSetProduction(params: {
+        domain: string;
+    }): Promise<{
+        tenantId: string;
+        domain: string;
+        status: string;
+        createdAt: string;
+        updatedAt: string;
+    }>;
     groupList(): Promise<Array<{
         groupId: string;
         name: string;

package/dist/services/hyperdrive-sigv4.js

@@ -18,6 +18,7 @@ const CLI_VERSION = packageJson.version;
  * Hyperdrive API Service with AWS SigV4 authentication
  */
 export class HyperdriveSigV4Service extends SigV4ApiClient {
+    projectsApiUrl;
     userGroupsApiUrl;
     constructor(domain) {
         super({
@@ -28,8 +29,10 @@ export class HyperdriveSigV4Service extends SigV4ApiClient {
             apiUrlOverride: process.env.HYPERDRIVE_API_URL,
             regionOverride: process.env.HYPERDRIVE_AWS_REGION,
         });
-        // Get user groups API URL from credentials
-        this.userGroupsApiUrl = this.getAdditionalApiUrl('userGroupsApiUrl');
+        // Keys match bootstrap REST config names (auto-discovered from additionalApiUrls)
+        this.projectsApiUrl = process.env.HYPERDRIVE_PROJECTS_API_URL
+            || this.getAdditionalApiUrl('hyperdrive-projects');
+        this.userGroupsApiUrl = this.getAdditionalApiUrl('user-groups');
     }
     // ============================================================================
     // AWS Account Methods
@@ -50,6 +53,114 @@ export class HyperdriveSigV4Service extends SigV4ApiClient {
         return this.makeSignedRequest('POST', `/cloud-account/aws/account/${params.accountId}/verify`);
     }
     // ============================================================================
+    // Network Methods
+    // ============================================================================
+    async networkDiscover(params) {
+        return this.makeSignedRequest('POST', '/networks/discover', params);
+    }
+    async networkRegister(params) {
+        return this.makeSignedRequest('POST', '/networks', params);
+    }
+    async networkList() {
+        return this.makeSignedRequest('GET', '/networks');
+    }
+    async networkGet(slug) {
+        return this.makeSignedRequest('GET', `/networks/${encodeURIComponent(slug)}`);
+    }
+    // ============================================================================
+    // Service Registry Methods
+    // ============================================================================
+    async serviceRegister(params) {
+        return this.makeSignedRequest('POST', '/services', params);
+    }
+    async serviceList(params) {
+        const queryParts = [];
+        if (params?.type)
+            queryParts.push(`type=${encodeURIComponent(params.type)}`);
+        if (params?.network)
+            queryParts.push(`network=${encodeURIComponent(params.network)}`);
+        const qs = queryParts.length > 0 ? `?${queryParts.join('&')}` : '';
+        return this.makeSignedRequest('GET', `/services${qs}`);
+    }
+    async serviceGet(slug) {
+        return this.makeSignedRequest('GET', `/services/${encodeURIComponent(slug)}`);
+    }
+    async serviceUpdate(slug, params) {
+        return this.makeSignedRequest('PUT', `/services/${encodeURIComponent(slug)}`, params);
+    }
+    async serviceProvision(body) {
+        return this.makeSignedRequest('POST', '/services/provision', body);
+    }
+    async serviceTemplateGet(templateId) {
+        return this.makeSignedRequest('GET', `/services/templates/${encodeURIComponent(templateId)}`);
+    }
+    async serviceDecommission(slug) {
+        return this.makeSignedRequest('DELETE', `/services/${encodeURIComponent(slug)}`);
+    }
+    async serviceBind(serviceSlug, body) {
+        return this.makeSignedRequest('POST', `/services/${encodeURIComponent(serviceSlug)}/bind`, body);
+    }
+    async serviceUnbind(serviceSlug, body) {
+        return this.makeSignedRequest('DELETE', `/services/${encodeURIComponent(serviceSlug)}/bind`, body);
+    }
+    async serviceBindings(serviceSlug) {
+        return this.makeSignedRequest('GET', `/services/${encodeURIComponent(serviceSlug)}/bindings`);
+    }
+    async serviceTemplates() {
+        return this.makeSignedRequest('GET', '/services/templates');
+    }
+    // ============================================================================
+    // Service Lifecycle Methods (Backup + Restore)
+    // ============================================================================
+    async serviceCreateBackup(serviceSlug, metadata) {
+        return this.makeSignedRequest('POST', `/services/${encodeURIComponent(serviceSlug)}/backup`, metadata ? { metadata } : undefined);
+    }
+    async serviceListBackups(serviceSlug, params) {
+        const qs = new URLSearchParams();
+        if (params?.limit)
+            qs.set('limit', params.limit);
+        if (params?.lastEvaluatedKey)
+            qs.set('lastEvaluatedKey', params.lastEvaluatedKey);
+        const query = qs.toString();
+        return this.makeSignedRequest('GET', `/services/${encodeURIComponent(serviceSlug)}/backups${query ? `?${query}` : ''}`);
+    }
+    async serviceGetBackup(serviceSlug, backupId) {
+        return this.makeSignedRequest('GET', `/services/${encodeURIComponent(serviceSlug)}/backups/${encodeURIComponent(backupId)}`);
+    }
+    async serviceRestore(serviceSlug, body) {
+        return this.makeSignedRequest('POST', `/services/${encodeURIComponent(serviceSlug)}/restore`, body);
+    }
+    async serviceClone(serviceSlug, body) {
+        return this.makeSignedRequest('POST', `/services/${encodeURIComponent(serviceSlug)}/clone`, body);
+    }
+    async serviceBackupSchedule(serviceSlug, schedule) {
+        return this.makeSignedRequest('PUT', `/services/${encodeURIComponent(serviceSlug)}`, {
+            metadata: { backupSchedule: schedule },
+        });
+    }
+    // ============================================================================
+    // Service Lifecycle Methods (Seed)
+    // ============================================================================
+    async serviceSeed(serviceSlug, body) {
+        return this.makeSignedRequest('POST', `/services/${encodeURIComponent(serviceSlug)}/seed`, body);
+    }
+    async serviceListSeedRuns(serviceSlug, params) {
+        const qs = new URLSearchParams();
+        if (params?.limit)
+            qs.set('limit', params.limit);
+        if (params?.lastEvaluatedKey)
+            qs.set('lastEvaluatedKey', params.lastEvaluatedKey);
+        const query = qs.toString();
+        return this.makeSignedRequest('GET', `/services/${encodeURIComponent(serviceSlug)}/seed-runs${query ? `?${query}` : ''}`);
+    }
+    async serviceGetSeedRun(serviceSlug, seedRunId) {
+        return this.makeSignedRequest('GET', `/services/${encodeURIComponent(serviceSlug)}/seed-runs/${encodeURIComponent(seedRunId)}`);
+    }
+    async moduleBindings(moduleSlug, params) {
+        const qs = params?.stage ? `?stage=${encodeURIComponent(params.stage)}` : '';
+        return this.makeSignedRequest('GET', `/modules/${encodeURIComponent(moduleSlug)}/bindings${qs}`);
+    }
+    // ============================================================================
     // CI Account Methods
     // ============================================================================
     async ciAccountCreate(params) {
@@ -105,16 +216,28 @@ export class HyperdriveSigV4Service extends SigV4ApiClient {
     // Hook Methods
     // ============================================================================
     async hookCreate(projectId, body) {
-        return this.makeSignedRequest('POST', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks`, body);
+        return this.makeSignedRequest('POST', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks`, body, this.projectsApiUrl);
+    }
+    async hookCreateV2(projectId, body) {
+        return this.makeSignedRequest('POST', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks`, body, this.projectsApiUrl);
     }
     async hookDelete(projectId, hookId) {
-        return this.makeSignedRequest('DELETE', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks/${encodeURIComponent(hookId)}`);
+        return this.makeSignedRequest('DELETE', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks/${encodeURIComponent(hookId)}`, undefined, this.projectsApiUrl);
     }
     async hookList(projectId) {
-        return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks`);
+        return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks`, undefined, this.projectsApiUrl);
+    }
+    async hookLogList(projectId, options) {
+        const params = new URLSearchParams();
+        if (options?.limit)
+            params.set('limit', String(options.limit));
+        if (options?.status)
+            params.set('status', options.status);
+        const qs = params.toString() ? `?${params.toString()}` : '';
+        return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hook-logs${qs}`, undefined, this.projectsApiUrl);
     }
     async hookUpdate(projectId, hookId, body) {
-        return this.makeSignedRequest('PATCH', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks/${encodeURIComponent(hookId)}`, body);
+        return this.makeSignedRequest('PATCH', `/hyperdrive/projects/${encodeURIComponent(projectId)}/hooks/${encodeURIComponent(hookId)}`, body, this.projectsApiUrl);
     }
     async projectGetJiraStatuses(projectId) {
         return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/jira/statuses`);
@@ -126,31 +249,31 @@ export class HyperdriveSigV4Service extends SigV4ApiClient {
         return this.makeSignedRequest('GET', `/hyperdrive/jira/projects/${encodeURIComponent(jiraProjectKey)}/statuses`);
     }
     async jiraPreRegister(params) {
-        return this.makeSignedRequest('POST', '/hyperdrive/jira/pre-register', params);
+        return this.makeSignedRequest('POST', '/hyperdrive/jira/pre-register', params, this.projectsApiUrl);
     }
     // ============================================================================
     // Hyperdrive Project Methods
     // ============================================================================
     async projectAddRepo(projectId, repo) {
-        return this.makeSignedRequest('POST', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos`, repo);
+        return this.makeSignedRequest('POST', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos`, repo, this.projectsApiUrl);
     }
     async projectFindByJiraKey(jiraProjectKey) {
-        return this.makeSignedRequest('GET', `/hyperdrive/projects/by-jira-key/${encodeURIComponent(jiraProjectKey)}`);
+        return this.makeSignedRequest('GET', `/hyperdrive/projects/by-jira-key/${encodeURIComponent(jiraProjectKey)}`, undefined, this.projectsApiUrl);
     }
     async projectGetJiraConfig(projectId) {
-        return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/jira-config`);
+        return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/jira-config`, undefined, this.projectsApiUrl);
     }
     async projectListRepos(projectId) {
-        return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos`);
+        return this.makeSignedRequest('GET', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos`, undefined, this.projectsApiUrl);
     }
     async projectSetJiraConfig(projectId, config) {
-        return this.makeSignedRequest('PUT', `/hyperdrive/projects/${encodeURIComponent(projectId)}/jira-config`, config);
+        return this.makeSignedRequest('PUT', `/hyperdrive/projects/${encodeURIComponent(projectId)}/jira-config`, config, this.projectsApiUrl);
     }
     async projectUpdateRepo(projectId, repoId, updateData) {
-        return this.makeSignedRequest('PATCH', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos/${encodeURIComponent(repoId)}`, updateData);
+        return this.makeSignedRequest('PATCH', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos/${encodeURIComponent(repoId)}`, updateData, this.projectsApiUrl);
     }
     async projectUpdateEntities(projectId, repoId, entities) {
-        return this.makeSignedRequest('PUT', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos/${encodeURIComponent(repoId)}/entities`, entities);
+        return this.makeSignedRequest('PUT', `/hyperdrive/projects/${encodeURIComponent(projectId)}/repos/${encodeURIComponent(repoId)}/entities`, entities, this.projectsApiUrl);
     }
     // ============================================================================
     // Module Methods
@@ -252,6 +375,12 @@ export class HyperdriveSigV4Service extends SigV4ApiClient {
         return this.makeSignedRequest('DELETE', `/stages/${stageName}/access/${targetType}/${targetId}`);
     }
     // ============================================================================
+    // Domain Methods
+    // ============================================================================
+    async domainSetProduction(params) {
+        return this.makeSignedRequest('PUT', '/hyperdrive/domains/production', params);
+    }
+    // ============================================================================
     // User Groups Methods
     // ============================================================================
     async groupList() {

package/dist/services/tenant-service.d.ts

@@ -8,8 +8,8 @@ export interface TenantConfig {
     region: string;
     tenantDomain: string;
     tenantId: string;
-    projectsApiUrl?: string;
-    userGroupsApiUrl?: string;
+    /** All additional API URLs from bootstrap, keyed by module name */
+    additionalApiUrls?: Record<string, string>;
 }
 export interface CLIConfig {
     apiUrl?: string;
@@ -102,15 +102,12 @@ export declare class TenantService {
      */
     private getApiUrl;
     /**
-     * Get Projects API URL from bootstrap config (hyperdrive-projects module)
-     * Returns undefined if not available (optional module)
+     * Extract all additional API URLs from bootstrap REST config.
+     * Returns a map of module name → endpoint URL for every REST API
+     * beyond the primary 'hyperdrive' endpoint. Services self-serve
+     * by looking up the key they need (e.g., 'hyperdrive-projects', 'user-groups').
      */
-    private getProjectsApiUrl;
-    /**
-     * Get User Groups API URL from bootstrap config
-     * Returns undefined if not available (optional module)
-     */
-    private getUserGroupsApiUrl;
+    private extractAdditionalApiUrls;
     /**
      * Get bootstrap URL with fallback chain:
      * 1. Environment variable