@lukoweb/apitogo 0.1.119 → 0.1.121

package/dist/cli/cli.js

@@ -5802,7 +5802,7 @@ import {
 // package.json
 var package_default = {
   name: "@lukoweb/apitogo",
-  version: "0.1.119",
+  version: "0.1.121",
   type: "module",
   sideEffects: [
     "**/*.css",
@@ -11432,9 +11432,7 @@ function loadConfig() {
     apiSecret = stored?.apiSecret;
   }
   if (!apiKeyId || !apiSecret) {
-    throw new Error(
-      "No credentials found. Run `apitogo login`, or set APITOGO_API_KEY_ID and APITOGO_API_SECRET for CI."
-    );
+    throw new Error("No credentials found. Run `apitogo login`.");
   }
   const defaultProjectId = process.env.APITOGO_DEFAULT_PROJECT_ID?.trim() || void 0;
   const devPortalDeployUrl = process.env.APITOGO_DEV_PORTAL_DEPLOY_URL?.trim() || process.env.APITOGO_DOC_DEPLOY_URL?.trim() || DEFAULT_DEV_PORTAL_DEPLOY_URL;
@@ -11558,6 +11556,7 @@ function formatDevPortalBackendResponse(projectId, backend) {
 }
 
 // src/cli/platform/helpers/dev-portal-manifest.ts
+init_gateway_limits();
 import { existsSync as existsSync4 } from "node:fs";
 import { access, mkdir as mkdir6, readFile as readFile6, writeFile as writeFile7 } from "node:fs/promises";
 import path36 from "node:path";
@@ -11613,7 +11612,6 @@ function readLandingFromConfig(config2) {
 }
 
 // src/cli/platform/helpers/dev-portal-manifest.ts
-init_gateway_limits();
 var APITOGO_CONFIG_FILENAME2 = "apitogo.config.json";
 var PLACEHOLDER_DEV_PORTAL_API_URL = "https://dp-example.azurecontainerapps.io";
 function isPlanFree(plan) {
@@ -11810,7 +11808,9 @@ function applyManifestToConfig(config2, manifest) {
   for (const key of STORED_MANIFEST_KEYS) {
     const value = manifest[key];
     if (value !== void 0) {
-      next[key] = key === "gateway" ? gatewayForConfig(value) : value;
+      next[key] = key === "gateway" ? gatewayForConfig(
+        value
+      ) : value;
     } else {
       delete next[key];
     }
@@ -11824,7 +11824,9 @@ function applyManifestToConfig(config2, manifest) {
   delete next.plans;
   delete next.pricing;
   if (next.authentication && typeof next.authentication === "object") {
-    const authentication = { ...next.authentication };
+    const authentication = {
+      ...next.authentication
+    };
     delete authentication.gateway;
     next.authentication = authentication;
   }
@@ -11863,7 +11865,7 @@ var DEFAULT_PLANS = [
     displayName: "Free",
     priceAmount: 0,
     limits: {
-      rateLimit: { calls: 10, renewalPeriodSeconds: 60 }
+      rateLimit: { calls: 3, renewalPeriodSeconds: 60 }
     },
     includedActionKeys: []
   },
@@ -12034,7 +12036,9 @@ function resolveManifestNextStep(manifest, secrets) {
   if (!secrets) {
     return "Continue shaping the site in the running local preview. For publish, save auth secrets (OIDC provider secrets, and Stripe if paid plans) in .env using APITOGO_CONFIG_AUTHENTICATION__* keys \u2014 never in chat. Native auth email is always platform-managed.";
   }
-  const secretFields = prerequisites.missingFields.filter((field) => field !== "plans");
+  const secretFields = prerequisites.missingFields.filter(
+    (field) => field !== "plans"
+  );
   if (secretFields.length > 0) {
     return `Publish prerequisites incomplete in .env: ${secretFields.join(", ")}.`;
   }
@@ -12055,7 +12059,10 @@ function applyScaffoldManifestPolicy(manifest, options) {
   const result = {
     ...manifest,
     siteName: title,
-    branding: { ...manifest.branding, title: manifest.branding?.title ?? title }
+    branding: {
+      ...manifest.branding,
+      title: manifest.branding?.title ?? title
+    }
   };
   if (options.includeDefaultPlans) {
     result.plans = mergePlansBySku2(result.plans, DEFAULT_PLANS);
@@ -12096,7 +12103,10 @@ function resolveBackendOpenApiPath(openApiPath, options) {
   return siteResolved;
 }
 function toSiteRelativeOpenApiInput(siteDirectory, openApiAbsolutePath) {
-  const relative = path36.relative(path36.resolve(siteDirectory), path36.resolve(openApiAbsolutePath));
+  const relative = path36.relative(
+    path36.resolve(siteDirectory),
+    path36.resolve(openApiAbsolutePath)
+  );
   const posix = relative.split(path36.sep).join("/");
   if (!posix || posix === ".") {
     return "./";
@@ -12154,7 +12164,11 @@ async function writeManifest(siteDirectory, manifest) {
     const raw = await readFile6(filePath, "utf8");
     config2 = JSON.parse(raw);
   }
-  const { oidc: _oidc, stripe: _stripe, ...safeManifest } = manifest;
+  const {
+    oidc: _oidc,
+    stripe: _stripe,
+    ...safeManifest
+  } = manifest;
   config2 = applyManifestToConfig(config2, safeManifest);
   await writeFile7(filePath, `${JSON.stringify(config2, null, 2)}
 `, "utf8");
@@ -15133,7 +15147,7 @@ function createDefaultApitogoJsonConfig(options) {
               priceAmount: 0,
               billingPeriod: "month",
               limits: {
-                rateLimit: { calls: 10, renewalPeriodSeconds: 1 },
+                rateLimit: { calls: 3, renewalPeriodSeconds: 60 },
                 quota: { calls: 1e3, renewalPeriodDays: 30 }
               }
             },
@@ -16658,138 +16672,394 @@ async function reportPollProgress(progress, stepLabel, value) {
 // src/cli/platform/tools/dev-portal-publish.ts
 init_gateway_limits();
 
-// src/cli/platform/helpers/gateway-plan-sync.ts
-init_gateway_limits();
+// src/cli/platform/helpers/deploy-artifact-hash.ts
+import { createHash as createHash2 } from "node:crypto";
+import { createReadStream, promises as fs8 } from "node:fs";
+import path54 from "node:path";
 
-// src/cli/platform/tools/gateway.ts
-var DEFAULT_BASELINE_LIMITS_JSON = JSON.stringify({
-  rateLimit: { calls: 100, renewalPeriodSeconds: 60 },
-  quota: { calls: 1e4, renewalPeriodDays: 1 }
-});
-var DEFAULT_ENTRA_WAIT_TIMEOUT_MS = 12e4;
-var DEFAULT_ENTRA_POLL_INTERVAL_MS = 5e3;
-function sameStringList(a, b) {
-  const left = [...a ?? []].map((value) => value.trim()).filter(Boolean).sort();
-  const right = [...b ?? []].map((value) => value.trim()).filter(Boolean).sort();
-  if (left.length !== right.length) return false;
-  return left.every((value, index) => value === right[index]);
-}
-function isPlatformManagedAuthMode(authMode) {
-  return authMode.trim().toLowerCase() === "platformmanagedentra";
-}
-function arraysEquivalentForAuth(existing, desired) {
-  if (existing.authMode.toLowerCase() !== desired.authMode.toLowerCase()) {
-    return false;
-  }
-  if (isPlatformManagedAuthMode(desired.authMode)) {
-    return true;
-  }
-  return (existing.oidcMetadataUrl ?? "").trim() === (desired.oidcMetadataUrl ?? "").trim() && sameStringList(existing.oidcAllowedIssuers, desired.oidcAllowedIssuers ?? void 0) && sameStringList(existing.oidcAudiences, desired.oidcAudiences ?? void 0);
-}
-async function ensureGatewayAuthConfigured(client, projectId, desired) {
-  let existing = null;
+// src/cli/platform/helpers/package-files.ts
+import { promises as fs7 } from "node:fs";
+import path53 from "node:path";
+import ignore from "ignore";
+var DEFAULT_EXCLUDES = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".git",
+  ".DS_Store",
+  "dist",
+  "bin",
+  "obj"
+]);
+async function loadGitignore(rootDir) {
+  const ig = ignore();
+  ig.add(["node_modules/", ".git/", "dist/", "bin/", "obj/"]);
+  const gitignorePath = path53.join(rootDir, ".gitignore");
   try {
-    existing = await client.getGatewayAuth(projectId);
-  } catch (error) {
-    if (!isNotFoundError(error)) {
-      throw error;
-    }
-  }
-  if (existing && arraysEquivalentForAuth(existing, desired) && (!isPlatformManagedAuthMode(desired.authMode) || existing.platformEntraProvisionStatus?.toLowerCase() === "ready")) {
-    return { auth: existing, created: false, updated: false, skipped: true };
+    const content = await fs7.readFile(gitignorePath, "utf8");
+    ig.add(content);
+  } catch {
   }
-  const auth = await client.updateGatewayAuth(projectId, desired);
-  return {
-    auth,
-    created: existing === null,
-    updated: existing !== null,
-    skipped: false
-  };
+  return ig;
 }
-async function waitForGatewayEntraProvision(client, projectId, options) {
-  const timeoutMs = options?.timeoutMs ?? DEFAULT_ENTRA_WAIT_TIMEOUT_MS;
-  const pollIntervalMs = options?.pollIntervalMs ?? DEFAULT_ENTRA_POLL_INTERVAL_MS;
-  const started = Date.now();
-  while (true) {
-    const auth = await client.getGatewayAuth(projectId);
-    if (!isPlatformManagedAuthMode(auth.authMode)) {
-      return { auth, status: "not_applicable" };
-    }
-    const status2 = auth.platformEntraProvisionStatus?.toLowerCase() ?? "";
-    if (status2 === "ready") {
-      return { auth, status: "ready" };
+async function collectFiles(rootDir, relativeDir, ig, files) {
+  const absDir = path53.join(rootDir, relativeDir);
+  const entries = await fs7.readdir(absDir, { withFileTypes: true });
+  for (const entry of entries) {
+    const rel = relativeDir ? path53.join(relativeDir, entry.name) : entry.name;
+    const relPosix = rel.split(path53.sep).join("/");
+    if (DEFAULT_EXCLUDES.has(entry.name) && !relativeDir) {
+      continue;
     }
-    if (status2 === "failed") {
-      return { auth, status: "failed" };
+    if (ig.ignores(relPosix)) {
+      continue;
     }
-    if (Date.now() - started >= timeoutMs) {
-      return { auth, status: "timeout" };
+    if (entry.isDirectory()) {
+      await collectFiles(rootDir, rel, ig, files);
+    } else if (entry.isFile()) {
+      files.push(rel);
     }
-    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
   }
 }
-function normalizeActionKey(actionKey) {
-  const trimmed = actionKey.trim();
-  if (trimmed.includes(":")) {
-    const [method2, ...pathParts] = trimmed.split(":");
-    const path73 = pathParts.join(":").trim();
-    return `${method2.toLowerCase()}:${path73.startsWith("/") ? path73 : `/${path73}`}`;
+async function collectPackageableFiles(sourceDirectory) {
+  const resolved = path53.resolve(sourceDirectory);
+  const stat4 = await fs7.stat(resolved).catch(() => null);
+  if (!stat4?.isDirectory()) {
+    throw new Error(`sourceDirectory is not a directory: ${resolved}`);
   }
-  const spaceIndex = trimmed.indexOf(" ");
-  if (spaceIndex <= 0) {
-    throw new Error(
-      "actionKey must be in format 'get:/path' or 'GET /path' (method plus path)."
-    );
+  const ig = await loadGitignore(resolved);
+  const files = [];
+  await collectFiles(resolved, "", ig, files);
+  if (files.length === 0) {
+    throw new Error(`No files to package in ${resolved}`);
   }
-  const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
-  const path72 = trimmed.slice(spaceIndex + 1).trim();
-  return `${method}:${path72.startsWith("/") ? path72 : `/${path72}`}`;
+  return files.sort();
 }
-async function applyGatewayPublicRoutes(client, projectId, routes, options) {
-  const applied = [];
-  const unresolved = [];
-  const warnings = [];
-  if (!routes.length) {
-    return { applied, unresolved, warnings };
+
+// src/cli/platform/helpers/deploy-artifact-hash.ts
+async function sha256File(filePath) {
+  const hash2 = createHash2("sha256");
+  await new Promise((resolve, reject) => {
+    const stream = createReadStream(filePath);
+    stream.on("data", (chunk) => hash2.update(chunk));
+    stream.on("error", reject);
+    stream.on("end", () => resolve());
+  });
+  return hash2.digest("hex");
+}
+async function hashDirectoryContents(rootDirectory) {
+  const resolved = path54.resolve(rootDirectory);
+  const files = (await collectPackageableFiles(resolved)).sort((a, b) => a.localeCompare(b));
+  const hash2 = createHash2("sha256");
+  for (const rel of files) {
+    hash2.update(rel);
+    hash2.update("\0");
+    hash2.update(await fs8.readFile(path54.join(resolved, rel)));
+    hash2.update("\0");
   }
-  let knownKeys = null;
-  if (options?.knownActions) {
-    knownKeys = new Set(options.knownActions.map((action) => action.actionKey.toLowerCase()));
-  } else {
+  return hash2.digest("hex");
+}
+async function hashDevPortalSiteSources(siteDirectory, options) {
+  const resolved = path54.resolve(siteDirectory);
+  const hash2 = createHash2("sha256");
+  const candidates = [
+    "apitogo.config.json",
+    "apitogo.config.ts",
+    "package.json",
+    "zudoku.config.ts",
+    "zudoku.config.tsx"
+  ];
+  for (const name of candidates) {
+    const full = path54.join(resolved, name);
     try {
-      const listed = await listAllGatewayActions(client, projectId);
-      if (listed.length > 0) {
-        knownKeys = new Set(listed.map((action) => action.actionKey.toLowerCase()));
-      }
+      hash2.update(name);
+      hash2.update("\0");
+      hash2.update(await fs8.readFile(full));
+      hash2.update("\0");
     } catch {
-      knownKeys = null;
     }
   }
-  for (const route of routes) {
-    let actionKey;
+  for (const dir of ["pages", "landing", "src"]) {
+    const full = path54.join(resolved, dir);
     try {
-      const trimmed = route.trim();
-      actionKey = trimmed.startsWith("/") ? normalizeActionKey(`GET ${trimmed}`) : normalizeActionKey(trimmed);
-    } catch (error) {
-      unresolved.push({
-        route,
-        error: error instanceof Error ? error.message : String(error)
-      });
-      continue;
-    }
-    if (knownKeys && !knownKeys.has(actionKey.toLowerCase())) {
-      const message = `Action '${actionKey}' not found in gateway actions.`;
-      unresolved.push({ route, actionKey, error: message });
-      warnings.push(message);
-      continue;
+      const st = await fs8.stat(full);
+      if (!st.isDirectory()) continue;
+      hash2.update(dir);
+      hash2.update("\0");
+      hash2.update(await hashDirectoryContents(full));
+      hash2.update("\0");
+    } catch {
     }
+  }
+  const gatewayUrl = options?.gatewayUrl?.trim().replace(/\/+$/, "");
+  if (gatewayUrl) {
+    hash2.update("gatewayUrl");
+    hash2.update("\0");
+    hash2.update(gatewayUrl);
+    hash2.update("\0");
+  }
+  return hash2.digest("hex");
+}
+
+// src/cli/platform/helpers/dev-portal-plan-sync.ts
+var PLANS_TIMEOUT_MS = 3e4;
+var DEFAULT_RETRIES = 5;
+var DEFAULT_RETRY_DELAY_MS = 5e3;
+async function syncDevPortalPlanCatalog(options) {
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const retries = Math.max(1, options.retries ?? DEFAULT_RETRIES);
+  const retryDelayMs = options.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
+  const base = options.backendApiBaseUrl.replace(/\/$/, "");
+  const url2 = `${base}/api/v1/plans?refresh=true&force=true`;
+  let lastError;
+  for (let attempt = 1; attempt <= retries; attempt++) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), PLANS_TIMEOUT_MS);
     try {
-      const action = await client.setGatewayActionPublic(projectId, actionKey, true);
-      applied.push(action);
+      const response = await fetchImpl(url2, {
+        method: "GET",
+        headers: { Accept: "application/json" },
+        signal: controller.signal
+      });
+      if (!response.ok) {
+        throw new Error(`GET /api/v1/plans?refresh=true&force=true returned ${response.status}.`);
+      }
+      const catalog = await response.json();
+      if (options.expectedPlanCount !== void 0 && catalog.plans.length < options.expectedPlanCount) {
+        throw new Error(
+          `Plan catalog has ${catalog.plans.length} plan(s); expected at least ${options.expectedPlanCount}.`
+        );
+      }
+      return catalog;
     } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      unresolved.push({ route, actionKey, error: message });
-      warnings.push(`Failed to set public for '${actionKey}': ${message}`);
+      lastError = error instanceof Error && error.name === "AbortError" ? new Error("GET /api/v1/plans?refresh=true&force=true timed out.") : error instanceof Error ? error : new Error(String(error));
+      if (attempt < retries) {
+        await new Promise((resolve) => setTimeout(resolve, retryDelayMs));
+      }
+    } finally {
+      clearTimeout(timeout);
+    }
+  }
+  throw lastError ?? new Error("Dev portal plan catalog sync failed.");
+}
+
+// src/cli/platform/helpers/dev-portal-settings-kinds.ts
+function isHttpUrl(value) {
+  return /^https?:\/\//i.test(value.trim());
+}
+function resolveLogoSettings(logoUrl) {
+  const trimmed = logoUrl?.trim();
+  if (!trimmed) {
+    return { logoKind: "RepoRelative" };
+  }
+  if (isHttpUrl(trimmed)) {
+    return { logoKind: "AbsoluteUrl", logoValue: trimmed };
+  }
+  return { logoKind: "RepoRelative", logoValue: trimmed };
+}
+function resolveOpenApiSettings(openApiPath) {
+  const trimmed = openApiPath?.trim();
+  if (!trimmed) {
+    return { openApiSourceKind: "RepoRelative" };
+  }
+  if (isHttpUrl(trimmed)) {
+    return { openApiSourceKind: "ExternalUrl", openApiValue: trimmed };
+  }
+  return { openApiSourceKind: "RepoRelative", openApiValue: trimmed };
+}
+
+// src/cli/platform/helpers/dev-portal-urls.ts
+function normalizeHostname(hostname) {
+  return hostname.trim().replace(/^https?:\/\//, "").replace(/\/+$/, "");
+}
+function resolveSwaHostname(project) {
+  const siteUrl = project.siteUrl?.trim();
+  if (siteUrl) {
+    try {
+      return normalizeHostname(new URL(siteUrl).hostname);
+    } catch {
+      return normalizeHostname(siteUrl);
+    }
+  }
+  const custom = project.userCustomDomain?.trim();
+  if (custom) {
+    return normalizeHostname(custom);
+  }
+  const defaultHost = project.azureStaticWebDefaultHostname?.trim();
+  if (defaultHost) {
+    return normalizeHostname(defaultHost);
+  }
+  return null;
+}
+function resolveSwaHostnameWithFallback(project, platformSiteUrl) {
+  return resolveSwaHostname(project) ?? (platformSiteUrl?.trim() ? normalizeHostname(platformSiteUrl) : null);
+}
+function resolveSwaUrl(project) {
+  const hostname = resolveSwaHostname(project);
+  if (!hostname) {
+    return null;
+  }
+  return `https://${hostname}`;
+}
+function resolveDevPortalUrls(project, backendFqdn, providerIds = [], platformSiteUrl) {
+  const hostname = resolveSwaHostnameWithFallback(project, platformSiteUrl);
+  const swaUrl = hostname ? `https://${hostname}` : null;
+  if (!swaUrl) {
+    throw new Error(
+      "Static Web App hostname is not available. Ensure the dev-portal module is provisioned."
+    );
+  }
+  const backendApiBaseUrl = toApiBaseUrl(backendFqdn);
+  if (!backendApiBaseUrl) {
+    throw new Error("Dev portal backend FQDN is missing.");
+  }
+  const swaOrigin = new URL(swaUrl).origin;
+  const backendOrigin = new URL(backendApiBaseUrl).origin;
+  const oidcRedirectUris = providerIds.map((providerId) => ({
+    providerId,
+    redirectUri: `${backendOrigin}/signin-oidc/${providerId}`
+  }));
+  return {
+    swaUrl,
+    swaOrigin,
+    stripeSuccessUrl: `${swaOrigin}/account/subscriptions`,
+    stripeCancelUrl: `${swaOrigin}/pricing`,
+    oidcRedirectUris,
+    stripeWebhookUrl: `${backendOrigin}/api/v1/webhooks/stripe`,
+    backendApiBaseUrl
+  };
+}
+
+// src/cli/platform/helpers/gateway-plan-sync.ts
+init_gateway_limits();
+
+// src/cli/platform/tools/gateway.ts
+var DEFAULT_BASELINE_LIMITS_JSON = JSON.stringify({
+  rateLimit: { calls: 100, renewalPeriodSeconds: 60 },
+  quota: { calls: 1e4, renewalPeriodDays: 1 }
+});
+var DEFAULT_ENTRA_WAIT_TIMEOUT_MS = 12e4;
+var DEFAULT_ENTRA_POLL_INTERVAL_MS = 5e3;
+function sameStringList(a, b) {
+  const left = [...a ?? []].map((value) => value.trim()).filter(Boolean).sort();
+  const right = [...b ?? []].map((value) => value.trim()).filter(Boolean).sort();
+  if (left.length !== right.length) return false;
+  return left.every((value, index) => value === right[index]);
+}
+function isPlatformManagedAuthMode(authMode) {
+  return authMode.trim().toLowerCase() === "platformmanagedentra";
+}
+function arraysEquivalentForAuth(existing, desired) {
+  if (existing.authMode.toLowerCase() !== desired.authMode.toLowerCase()) {
+    return false;
+  }
+  if (isPlatformManagedAuthMode(desired.authMode)) {
+    return true;
+  }
+  return (existing.oidcMetadataUrl ?? "").trim() === (desired.oidcMetadataUrl ?? "").trim() && sameStringList(existing.oidcAllowedIssuers, desired.oidcAllowedIssuers ?? void 0) && sameStringList(existing.oidcAudiences, desired.oidcAudiences ?? void 0);
+}
+async function ensureGatewayAuthConfigured(client, projectId, desired) {
+  let existing = null;
+  try {
+    existing = await client.getGatewayAuth(projectId);
+  } catch (error) {
+    if (!isNotFoundError(error)) {
+      throw error;
+    }
+  }
+  if (existing && arraysEquivalentForAuth(existing, desired) && (!isPlatformManagedAuthMode(desired.authMode) || existing.platformEntraProvisionStatus?.toLowerCase() === "ready")) {
+    return { auth: existing, created: false, updated: false, skipped: true };
+  }
+  const auth = await client.updateGatewayAuth(projectId, desired);
+  return {
+    auth,
+    created: existing === null,
+    updated: existing !== null,
+    skipped: false
+  };
+}
+async function waitForGatewayEntraProvision(client, projectId, options) {
+  const timeoutMs = options?.timeoutMs ?? DEFAULT_ENTRA_WAIT_TIMEOUT_MS;
+  const pollIntervalMs = options?.pollIntervalMs ?? DEFAULT_ENTRA_POLL_INTERVAL_MS;
+  const started = Date.now();
+  while (true) {
+    const auth = await client.getGatewayAuth(projectId);
+    if (!isPlatformManagedAuthMode(auth.authMode)) {
+      return { auth, status: "not_applicable" };
+    }
+    const status2 = auth.platformEntraProvisionStatus?.toLowerCase() ?? "";
+    if (status2 === "ready") {
+      return { auth, status: "ready" };
+    }
+    if (status2 === "failed") {
+      return { auth, status: "failed" };
+    }
+    if (Date.now() - started >= timeoutMs) {
+      return { auth, status: "timeout" };
+    }
+    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+  }
+}
+function normalizeActionKey(actionKey) {
+  const trimmed = actionKey.trim();
+  if (trimmed.includes(":")) {
+    const [method2, ...pathParts] = trimmed.split(":");
+    const path73 = pathParts.join(":").trim();
+    return `${method2.toLowerCase()}:${path73.startsWith("/") ? path73 : `/${path73}`}`;
+  }
+  const spaceIndex = trimmed.indexOf(" ");
+  if (spaceIndex <= 0) {
+    throw new Error(
+      "actionKey must be in format 'get:/path' or 'GET /path' (method plus path)."
+    );
+  }
+  const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
+  const path72 = trimmed.slice(spaceIndex + 1).trim();
+  return `${method}:${path72.startsWith("/") ? path72 : `/${path72}`}`;
+}
+async function applyGatewayPublicRoutes(client, projectId, routes, options) {
+  const applied = [];
+  const unresolved = [];
+  const warnings = [];
+  if (!routes.length) {
+    return { applied, unresolved, warnings };
+  }
+  let knownKeys = null;
+  if (options?.knownActions) {
+    knownKeys = new Set(options.knownActions.map((action) => action.actionKey.toLowerCase()));
+  } else {
+    try {
+      const listed = await listAllGatewayActions(client, projectId);
+      if (listed.length > 0) {
+        knownKeys = new Set(listed.map((action) => action.actionKey.toLowerCase()));
+      }
+    } catch {
+      knownKeys = null;
+    }
+  }
+  for (const route of routes) {
+    let actionKey;
+    try {
+      const trimmed = route.trim();
+      actionKey = trimmed.startsWith("/") ? normalizeActionKey(`GET ${trimmed}`) : normalizeActionKey(trimmed);
+    } catch (error) {
+      unresolved.push({
+        route,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      continue;
+    }
+    if (knownKeys && !knownKeys.has(actionKey.toLowerCase())) {
+      const message = `Action '${actionKey}' not found in gateway actions.`;
+      unresolved.push({ route, actionKey, error: message });
+      warnings.push(message);
+      continue;
+    }
+    try {
+      const action = await client.setGatewayActionPublic(projectId, actionKey, true);
+      applied.push(action);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      unresolved.push({ route, actionKey, error: message });
+      warnings.push(`Failed to set public for '${actionKey}': ${message}`);
     }
   }
   return { applied, unresolved, warnings };
@@ -17163,358 +17433,240 @@ async function upsertGatewayPlansFromManifest(client, config2, projectId, plans,
   return results;
 }
 
-// src/cli/platform/helpers/dev-portal-plan-sync.ts
-var PLANS_TIMEOUT_MS = 3e4;
-var DEFAULT_RETRIES = 5;
-var DEFAULT_RETRY_DELAY_MS = 5e3;
-async function syncDevPortalPlanCatalog(options) {
-  const fetchImpl = options.fetchImpl ?? fetch;
-  const retries = Math.max(1, options.retries ?? DEFAULT_RETRIES);
-  const retryDelayMs = options.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
-  const base = options.backendApiBaseUrl.replace(/\/$/, "");
-  const url2 = `${base}/api/v1/plans?refresh=true&force=true`;
-  let lastError;
-  for (let attempt = 1; attempt <= retries; attempt++) {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), PLANS_TIMEOUT_MS);
-    try {
-      const response = await fetchImpl(url2, {
-        method: "GET",
-        headers: { Accept: "application/json" },
-        signal: controller.signal
-      });
-      if (!response.ok) {
-        throw new Error(`GET /api/v1/plans?refresh=true&force=true returned ${response.status}.`);
-      }
-      const catalog = await response.json();
-      if (options.expectedPlanCount !== void 0 && catalog.plans.length < options.expectedPlanCount) {
-        throw new Error(
-          `Plan catalog has ${catalog.plans.length} plan(s); expected at least ${options.expectedPlanCount}.`
-        );
-      }
-      return catalog;
-    } catch (error) {
-      lastError = error instanceof Error && error.name === "AbortError" ? new Error("GET /api/v1/plans?refresh=true&force=true timed out.") : error instanceof Error ? error : new Error(String(error));
-      if (attempt < retries) {
-        await new Promise((resolve) => setTimeout(resolve, retryDelayMs));
-      }
-    } finally {
-      clearTimeout(timeout);
-    }
-  }
-  throw lastError ?? new Error("Dev portal plan catalog sync failed.");
-}
-
-// src/cli/platform/helpers/dev-portal-urls.ts
-function normalizeHostname(hostname) {
-  return hostname.trim().replace(/^https?:\/\//, "").replace(/\/+$/, "");
-}
-function resolveSwaHostname(project) {
-  const siteUrl = project.siteUrl?.trim();
-  if (siteUrl) {
-    try {
-      return normalizeHostname(new URL(siteUrl).hostname);
-    } catch {
-      return normalizeHostname(siteUrl);
-    }
-  }
-  const custom = project.userCustomDomain?.trim();
-  if (custom) {
-    return normalizeHostname(custom);
-  }
-  const defaultHost = project.azureStaticWebDefaultHostname?.trim();
-  if (defaultHost) {
-    return normalizeHostname(defaultHost);
-  }
-  return null;
-}
-function resolveSwaHostnameWithFallback(project, platformSiteUrl) {
-  return resolveSwaHostname(project) ?? (platformSiteUrl?.trim() ? normalizeHostname(platformSiteUrl) : null);
-}
-function resolveSwaUrl(project) {
-  const hostname = resolveSwaHostname(project);
-  if (!hostname) {
-    return null;
-  }
-  return `https://${hostname}`;
+// src/cli/platform/helpers/openapi-gateway-servers.ts
+import { mkdir as mkdir11, readFile as readFile15, writeFile as writeFile14 } from "node:fs/promises";
+import path55 from "node:path";
+import YAML3 from "yaml";
+var GATEWAY_URL_ENV_KEY = "APITOGO_GATEWAY_URL";
+var PUBLISH_OPENAPI_RELATIVE = ".apitogo/openapi-publish.json";
+function normalizeGatewayUrl(gatewayUrl) {
+  return gatewayUrl.trim().replace(/\/+$/, "");
 }
-function resolveDevPortalUrls(project, backendFqdn, providerIds = [], platformSiteUrl) {
-  const hostname = resolveSwaHostnameWithFallback(project, platformSiteUrl);
-  const swaUrl = hostname ? `https://${hostname}` : null;
-  if (!swaUrl) {
-    throw new Error(
-      "Static Web App hostname is not available. Ensure the dev-portal module is provisioned."
-    );
-  }
-  const backendApiBaseUrl = toApiBaseUrl(backendFqdn);
-  if (!backendApiBaseUrl) {
-    throw new Error("Dev portal backend FQDN is missing.");
-  }
-  const swaOrigin = new URL(swaUrl).origin;
-  const backendOrigin = new URL(backendApiBaseUrl).origin;
-  const oidcRedirectUris = providerIds.map((providerId) => ({
-    providerId,
-    redirectUri: `${backendOrigin}/signin-oidc/${providerId}`
-  }));
+function withGatewayServers(doc, gatewayUrl) {
+  const url2 = normalizeGatewayUrl(gatewayUrl);
   return {
-    swaUrl,
-    swaOrigin,
-    stripeSuccessUrl: `${swaOrigin}/account/subscriptions`,
-    stripeCancelUrl: `${swaOrigin}/pricing`,
-    oidcRedirectUris,
-    stripeWebhookUrl: `${backendOrigin}/api/v1/webhooks/stripe`,
-    backendApiBaseUrl
+    ...doc,
+    servers: [{ url: url2, description: "API gateway" }]
   };
 }
-
-// src/cli/platform/helpers/status.ts
-function normalizeInfrastructureStatus(platformStatus) {
-  switch (platformStatus.toLowerCase()) {
-    case "completed":
-    case "completed_with_warnings":
-      return "succeeded";
-    case "in_progress":
-      return "running";
-    case "failed":
-      return "failed";
-    case "pending":
-    case "none":
-    default:
-      return "pending";
+async function resolveProjectGatewayUrl(client, projectId) {
+  const project = await client.getProject(projectId);
+  const fromProject = project.gatewayUrl?.trim();
+  if (fromProject) {
+    return normalizeGatewayUrl(fromProject);
   }
-}
-function normalizeDeploymentStatus(platformStatus) {
-  switch (platformStatus.toLowerCase()) {
-    case "healthy":
-      return "succeeded";
-    case "failed":
-    case "cancelled":
-      return "failed";
-    case "queued":
-    case "validating":
-    case "building":
-    case "deploying":
-      return "running";
-    default:
-      return "pending";
+  try {
+    const summary = await client.getBackendSummary(projectId);
+    const fromBackend = summary.backendUrl?.trim();
+    if (fromBackend) {
+      return normalizeGatewayUrl(fromBackend);
+    }
+  } catch {
   }
+  return null;
 }
-function isTerminalInfrastructureStatus(platformStatus) {
-  const s = platformStatus.toLowerCase();
-  return s === "completed" || s === "completed_with_warnings" || s === "failed";
-}
-function isTerminalDeploymentStatus(platformStatus) {
-  const s = platformStatus.toLowerCase();
-  return s === "healthy" || s === "failed" || s === "cancelled";
+async function readOpenApiDocument(filePath) {
+  const content = await readFile15(filePath, "utf8");
+  const ext = path55.extname(filePath).toLowerCase();
+  const parsed = ext === ".json" ? JSON.parse(content) : YAML3.parse(content);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`OpenAPI document must be an object: ${filePath}`);
+  }
+  return parsed;
 }
-var DEFAULT_POLL_INTERVAL_MS = 5e3;
-var DEFAULT_POLL_TIMEOUT_MS = 15 * 60 * 1e3;
-
-// src/cli/platform/helpers/poll.ts
-function sleep2(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
+async function materializePublishOpenApiWithGateway(siteDirectory, sourceOpenApiPath, gatewayUrl) {
+  const site = path55.resolve(siteDirectory);
+  const source = path55.resolve(sourceOpenApiPath);
+  const relativeInput = PUBLISH_OPENAPI_RELATIVE;
+  const outputPath = path55.join(site, ...relativeInput.split("/"));
+  const doc = await readOpenApiDocument(source);
+  const rewritten = withGatewayServers(doc, gatewayUrl);
+  await mkdir11(path55.dirname(outputPath), { recursive: true });
+  await writeFile14(outputPath, `${JSON.stringify(rewritten, null, 2)}
+`, "utf8");
+  return { outputPath, relativeInput };
 }
-async function pollUntilTerminal(options) {
-  const timeoutMs = options.timeoutMs ?? DEFAULT_POLL_TIMEOUT_MS;
-  const intervalMs = options.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-  const deadline = Date.now() + timeoutMs;
-  const stepLabel = options.stepLabel ?? "Job";
-  let last;
-  while (Date.now() <= deadline) {
-    if (options.progress?.isCancelled()) {
-      if (!last) {
-        throw new Error("Operation cancelled before first poll result.");
+async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
+  const configPath = path55.join(path55.resolve(siteDirectory), APITOGO_CONFIG_FILENAME2);
+  const raw = await readFile15(configPath, "utf8");
+  const config2 = JSON.parse(raw);
+  const previousApis = config2.apis;
+  const previousBackend = config2.backend;
+  const apis = Array.isArray(config2.apis) ? [...config2.apis] : [];
+  const first = apis[0] && typeof apis[0] === "object" ? { ...apis[0] } : { type: "file", path: "api" };
+  first.type = first.type ?? "file";
+  first.input = relativeInput;
+  first.path = first.path ?? "api";
+  config2.apis = [first, ...apis.slice(1)];
+  const backend = config2.backend && typeof config2.backend === "object" ? { ...config2.backend } : {};
+  backend.openApiPath = relativeInput;
+  config2.backend = backend;
+  await writeFile14(configPath, `${JSON.stringify(config2, null, 2)}
+`, "utf8");
+  return {
+    restore: async () => {
+      const currentRaw = await readFile15(configPath, "utf8");
+      const current = JSON.parse(currentRaw);
+      if (previousApis === void 0) {
+        delete current.apis;
+      } else {
+        current.apis = previousApis;
       }
-      return {
-        status: options.getStatus(last),
-        value: last,
-        timedOut: true,
-        cancelled: true
-      };
-    }
-    try {
-      last = await options.poll();
-    } catch (error) {
-      const handled = options.onPollError?.(error, last);
-      if (handled) {
-        return handled;
+      if (previousBackend === void 0) {
+        delete current.backend;
+      } else {
+        current.backend = previousBackend;
       }
-      throw error;
-    }
-    options.onPoll?.(last);
-    if (options.progress && isPollableJobValue(last)) {
-      await reportPollProgress(options.progress, stepLabel, last);
-    }
-    if (options.isTerminal(last)) {
-      return {
-        status: options.getStatus(last),
-        value: last,
-        timedOut: false
-      };
+      await writeFile14(configPath, `${JSON.stringify(current, null, 2)}
+`, "utf8");
     }
-    if (Date.now() + intervalMs > deadline) {
-      break;
+  };
+}
+async function prepareOpenApiServersForGatewayBuild(options) {
+  const siteDirectory = path55.resolve(options.siteDirectory);
+  let openApiPath = resolveBackendOpenApiPath(options.manifest?.backend?.openApiPath, {
+    siteDirectory,
+    backendSourceDirectory: options.manifest?.backend?.sourceDirectory
+  });
+  if (!openApiPath) {
+    try {
+      const raw = await readFile15(path55.join(siteDirectory, APITOGO_CONFIG_FILENAME2), "utf8");
+      const config2 = JSON.parse(raw);
+      const input5 = Array.isArray(config2.apis) ? config2.apis[0]?.input?.trim() : void 0;
+      openApiPath = resolveBackendOpenApiPath(input5, { siteDirectory });
+    } catch {
     }
-    await sleep2(intervalMs);
   }
-  if (!last) {
-    throw new Error("Polling produced no results.");
+  if (!openApiPath) {
+    return null;
   }
-  return {
-    status: options.getStatus(last),
-    value: last,
-    timedOut: true
-  };
-}
-function isPollableJobValue(value) {
-  return typeof value === "object" && value !== null && "status" in value;
+  const { outputPath, relativeInput } = await materializePublishOpenApiWithGateway(
+    siteDirectory,
+    openApiPath,
+    options.gatewayUrl
+  );
+  const { restore } = await pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput);
+  return { relativeInput, outputPath, restore };
 }
 
-// src/cli/platform/helpers/warm-pool.ts
-var WARM_POOL_CAPACITY_TEMPORARILY_UNAVAILABLE = "WARM_POOL_CAPACITY_TEMPORARILY_UNAVAILABLE";
-var COLD_MODULE_INFRA_RESOURCE_TYPES = /* @__PURE__ */ new Set([
-  "AzureProjectInfrastructure",
-  "DevPortalInfrastructure",
-  "BackendInfrastructure"
-]);
-var WARM_POOL_CREATE_RETRY_BUDGET_MS = 10 * 60 * 1e3;
-function sleep3(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function warmPoolRetryDelayMs() {
-  return 6e4 + Math.floor(Math.random() * 30001);
-}
-function isWarmPoolCapacityUnavailableError(error) {
-  if (!(error instanceof PlatformApiError)) {
-    return false;
+// src/cli/platform/helpers/public-routes.ts
+function normalizeActionKeyFormat(actionKey) {
+  const trimmed = actionKey.trim();
+  if (trimmed.includes(":")) {
+    const [method2, ...pathParts] = trimmed.split(":");
+    const path73 = pathParts.join(":").trim();
+    return `${method2.toLowerCase()}:${path73.startsWith("/") ? path73 : `/${path73}`}`;
   }
-  if (error.status !== 503) {
-    return false;
+  const spaceIndex = trimmed.indexOf(" ");
+  if (spaceIndex <= 0) {
+    throw new Error(
+      "actionKey must be in format 'get:/path' or 'GET /path' (method plus path)."
+    );
   }
-  const code = error.problem?.code;
-  return code === WARM_POOL_CAPACITY_TEMPORARILY_UNAVAILABLE;
-}
-function isWarmPoolInfrastructureReady(project) {
-  return project.infrastructureStatus?.toLowerCase() === "ready";
-}
-function isWarmPoolInfrastructureFailed(project) {
-  return project.infrastructureStatus?.toLowerCase() === "failed";
+  const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
+  const path72 = trimmed.slice(spaceIndex + 1).trim();
+  return `${method}:${path72.startsWith("/") ? path72 : `/${path72}`}`;
 }
-function isWarmPoolInfrastructureTerminal(project) {
-  const status2 = project.infrastructureStatus?.toLowerCase() ?? "";
-  return status2 === "ready" || status2 === "failed" || status2 === "deleting";
+function normalizePublicRoute(route) {
+  const trimmed = route.trim();
+  if (!trimmed) {
+    throw new Error("public route must be a non-empty string");
+  }
+  if (trimmed.startsWith("/")) {
+    return normalizeActionKeyFormat(`GET ${trimmed}`);
+  }
+  return normalizeActionKeyFormat(trimmed);
 }
-function shouldSkipColdModuleInfrastructureWait(project, infraStatus) {
-  if (isWarmPoolInfrastructureReady(project)) {
-    return true;
+function collectManifestPublicActionKeys(gateway) {
+  if (!gateway) {
+    return [];
   }
-  const resourceType = infraStatus?.resourceType;
-  if (resourceType === "WarmPoolBinding") {
-    return true;
+  const keys = /* @__PURE__ */ new Set();
+  for (const route of gateway.publicRoutes ?? []) {
+    try {
+      keys.add(normalizePublicRoute(route));
+    } catch {
+    }
   }
-  if (resourceType && COLD_MODULE_INFRA_RESOURCE_TYPES.has(resourceType)) {
-    return false;
+  if (gateway.publicHealthActionKey?.trim()) {
+    try {
+      keys.add(normalizePublicRoute(gateway.publicHealthActionKey));
+    } catch {
+    }
   }
-  return false;
+  return [...keys];
 }
-function resolvePortalBackendFqdn(project) {
-  const portalApiUrl = project.portalApiUrl?.trim();
-  if (!portalApiUrl) {
-    return null;
-  }
+
+// src/cli/platform/helpers/publish-ledger.ts
+import { mkdir as mkdir12, readFile as readFile16, writeFile as writeFile15 } from "node:fs/promises";
+import path56 from "node:path";
+var PUBLISH_LEDGER_RELATIVE_PATH = ".apitogo/publish-state.json";
+function publishLedgerPath(siteDirectory) {
+  return path56.join(path56.resolve(siteDirectory), PUBLISH_LEDGER_RELATIVE_PATH);
+}
+async function readPublishLedger(siteDirectory) {
+  const filePath = publishLedgerPath(siteDirectory);
   try {
-    return new URL(portalApiUrl).hostname;
+    const raw = await readFile16(filePath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed?.version !== 1 || !Array.isArray(parsed.steps)) {
+      return null;
+    }
+    return parsed;
   } catch {
     return null;
   }
 }
-var RESERVED_ENDPOINT_URL_AGENT_INSTRUCTION = "Do not share siteUrl, portalApiUrl, gatewayUrl, or any warm-pool hostnames with the user yet \u2014 those addresses are reserved infrastructure and show Azure's default page until the site or backend is actually deployed. Share live URLs only after publish_dev_portal, deploy_backend, or verify_dev_portal_live succeeds.";
-function omitReservedEndpointUrls(project) {
-  const {
-    siteUrl: _siteUrl,
-    portalApiUrl: _portalApiUrl,
-    gatewayUrl: _gatewayUrl,
-    ...rest
-  } = project;
-  return rest;
-}
-async function waitForWarmPoolBinding(client, projectId, options) {
-  const poll = await pollUntilTerminal({
-    poll: () => client.getProject(projectId),
-    isTerminal: (project2) => isWarmPoolInfrastructureTerminal(project2),
-    getStatus: (project2) => {
-      if (isWarmPoolInfrastructureFailed(project2)) {
-        return "failed";
-      }
-      if (isWarmPoolInfrastructureReady(project2)) {
-        return "succeeded";
-      }
-      return "running";
-    },
-    timeoutMs: options?.timeoutMs ?? DEFAULT_POLL_TIMEOUT_MS,
-    intervalMs: options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS,
-    stepLabel: "Warm pool binding",
-    progress: options?.progress
-  });
-  const project = poll.value;
-  let status2;
-  if (poll.timedOut) {
-    status2 = "running";
-  } else if (isWarmPoolInfrastructureFailed(project)) {
-    status2 = "failed";
-  } else if (isWarmPoolInfrastructureReady(project)) {
-    status2 = "succeeded";
-  } else {
-    status2 = "running";
-  }
-  return {
-    status: status2,
-    timedOut: poll.timedOut,
-    project
+async function writePublishLedger(siteDirectory, ledger) {
+  const filePath = publishLedgerPath(siteDirectory);
+  await mkdir12(path56.dirname(filePath), { recursive: true });
+  const next = {
+    ...ledger,
+    version: 1,
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
+  await writeFile15(filePath, `${JSON.stringify(next, null, 2)}
+`, "utf8");
+  return filePath;
 }
-async function createProjectWithWarmPoolRetry(client, body, options) {
-  const maxRetryMs = options?.maxRetryMs ?? WARM_POOL_CREATE_RETRY_BUDGET_MS;
-  const startedAt = Date.now();
-  while (true) {
-    try {
-      return await client.createProject(body);
-    } catch (error) {
-      if (!isWarmPoolCapacityUnavailableError(error)) {
-        throw error;
-      }
-      if (Date.now() - startedAt >= maxRetryMs) {
-        throw error;
-      }
-      await sleep3(warmPoolRetryDelayMs());
+function resolveResumeStepFromLedger(ledger, orderedSteps) {
+  if (!ledger?.steps?.length) {
+    return void 0;
+  }
+  const byStep = new Map(ledger.steps.map((step) => [step.step, step]));
+  for (const step of orderedSteps) {
+    const record = byStep.get(step);
+    if (!record || record.status !== "succeeded" && record.status !== "skipped") {
+      return step;
     }
   }
+  return void 0;
 }
-
-// src/cli/platform/helpers/dev-portal-settings-kinds.ts
-function isHttpUrl(value) {
-  return /^https?:\/\//i.test(value.trim());
-}
-function resolveLogoSettings(logoUrl) {
-  const trimmed = logoUrl?.trim();
-  if (!trimmed) {
-    return { logoKind: "RepoRelative" };
-  }
-  if (isHttpUrl(trimmed)) {
-    return { logoKind: "AbsoluteUrl", logoValue: trimmed };
-  }
-  return { logoKind: "RepoRelative", logoValue: trimmed };
+function createEmptyPublishLedger(projectId) {
+  return {
+    version: 1,
+    projectId,
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    steps: []
+  };
 }
-function resolveOpenApiSettings(openApiPath) {
-  const trimmed = openApiPath?.trim();
-  if (!trimmed) {
-    return { openApiSourceKind: "RepoRelative" };
+var StepTimer = class {
+  startedAt;
+  startedAtIso;
+  constructor() {
+    this.startedAt = Date.now();
+    this.startedAtIso = new Date(this.startedAt).toISOString();
   }
-  if (isHttpUrl(trimmed)) {
-    return { openApiSourceKind: "ExternalUrl", openApiValue: trimmed };
+  finish(detail) {
+    const finishedAt = Date.now();
+    return {
+      startedAt: this.startedAtIso,
+      finishedAt: new Date(finishedAt).toISOString(),
+      durationMs: finishedAt - this.startedAt,
+      detail
+    };
   }
-  return { openApiSourceKind: "RepoRelative", openApiValue: trimmed };
-}
+};
 
 // src/cli/platform/helpers/validate-dev-portal-readiness.ts
 import { lookup as lookup2 } from "node:dns/promises";
@@ -17758,77 +17910,6 @@ async function validateDevPortalReadiness(client, projectId, options) {
   };
 }
 
-// src/cli/platform/helpers/publish-ledger.ts
-import { mkdir as mkdir11, readFile as readFile15, writeFile as writeFile14 } from "node:fs/promises";
-import path53 from "node:path";
-var PUBLISH_LEDGER_RELATIVE_PATH = ".apitogo/publish-state.json";
-function publishLedgerPath(siteDirectory) {
-  return path53.join(path53.resolve(siteDirectory), PUBLISH_LEDGER_RELATIVE_PATH);
-}
-async function readPublishLedger(siteDirectory) {
-  const filePath = publishLedgerPath(siteDirectory);
-  try {
-    const raw = await readFile15(filePath, "utf8");
-    const parsed = JSON.parse(raw);
-    if (parsed?.version !== 1 || !Array.isArray(parsed.steps)) {
-      return null;
-    }
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-async function writePublishLedger(siteDirectory, ledger) {
-  const filePath = publishLedgerPath(siteDirectory);
-  await mkdir11(path53.dirname(filePath), { recursive: true });
-  const next = {
-    ...ledger,
-    version: 1,
-    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-  };
-  await writeFile14(filePath, `${JSON.stringify(next, null, 2)}
-`, "utf8");
-  return filePath;
-}
-function resolveResumeStepFromLedger(ledger, orderedSteps) {
-  if (!ledger?.steps?.length) {
-    return void 0;
-  }
-  const byStep = new Map(ledger.steps.map((step) => [step.step, step]));
-  for (const step of orderedSteps) {
-    const record = byStep.get(step);
-    if (!record || record.status !== "succeeded" && record.status !== "skipped") {
-      return step;
-    }
-  }
-  return void 0;
-}
-function createEmptyPublishLedger(projectId) {
-  return {
-    version: 1,
-    projectId,
-    updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    steps: []
-  };
-}
-var StepTimer = class {
-  startedAt;
-  startedAtIso;
-  constructor() {
-    this.startedAt = Date.now();
-    this.startedAtIso = new Date(this.startedAt).toISOString();
-  }
-  finish(detail) {
-    const finishedAt = Date.now();
-    return {
-      startedAt: this.startedAtIso,
-      finishedAt: new Date(finishedAt).toISOString(),
-      durationMs: finishedAt - this.startedAt,
-      detail
-    };
-  }
-};
-
 // src/cli/platform/helpers/wait-for-gateway-actions.ts
 async function waitForGatewayActionsRegistered(client, projectId, options) {
   const minActionCount = options?.minActionCount ?? 1;
@@ -17844,251 +17925,232 @@ async function waitForGatewayActionsRegistered(client, projectId, options) {
     if (Date.now() - started >= timeoutMs) {
       return { actionCount, timedOut: true };
     }
-    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-  }
-}
-
-// src/cli/platform/helpers/deploy-artifact-hash.ts
-import { createHash as createHash2 } from "node:crypto";
-import { createReadStream, promises as fs8 } from "node:fs";
-import path55 from "node:path";
-
-// src/cli/platform/helpers/package-files.ts
-import { promises as fs7 } from "node:fs";
-import path54 from "node:path";
-import ignore from "ignore";
-var DEFAULT_EXCLUDES = /* @__PURE__ */ new Set([
-  "node_modules",
-  ".git",
-  ".DS_Store",
-  "dist",
-  "bin",
-  "obj"
-]);
-async function loadGitignore(rootDir) {
-  const ig = ignore();
-  ig.add(["node_modules/", ".git/", "dist/", "bin/", "obj/"]);
-  const gitignorePath = path54.join(rootDir, ".gitignore");
-  try {
-    const content = await fs7.readFile(gitignorePath, "utf8");
-    ig.add(content);
-  } catch {
-  }
-  return ig;
-}
-async function collectFiles(rootDir, relativeDir, ig, files) {
-  const absDir = path54.join(rootDir, relativeDir);
-  const entries = await fs7.readdir(absDir, { withFileTypes: true });
-  for (const entry of entries) {
-    const rel = relativeDir ? path54.join(relativeDir, entry.name) : entry.name;
-    const relPosix = rel.split(path54.sep).join("/");
-    if (DEFAULT_EXCLUDES.has(entry.name) && !relativeDir) {
-      continue;
-    }
-    if (ig.ignores(relPosix)) {
-      continue;
-    }
-    if (entry.isDirectory()) {
-      await collectFiles(rootDir, rel, ig, files);
-    } else if (entry.isFile()) {
-      files.push(rel);
-    }
+    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
   }
 }
-async function collectPackageableFiles(sourceDirectory) {
-  const resolved = path54.resolve(sourceDirectory);
-  const stat4 = await fs7.stat(resolved).catch(() => null);
-  if (!stat4?.isDirectory()) {
-    throw new Error(`sourceDirectory is not a directory: ${resolved}`);
+
+// src/cli/platform/helpers/status.ts
+function normalizeInfrastructureStatus(platformStatus) {
+  switch (platformStatus.toLowerCase()) {
+    case "completed":
+    case "completed_with_warnings":
+      return "succeeded";
+    case "in_progress":
+      return "running";
+    case "failed":
+      return "failed";
+    case "pending":
+    case "none":
+    default:
+      return "pending";
   }
-  const ig = await loadGitignore(resolved);
-  const files = [];
-  await collectFiles(resolved, "", ig, files);
-  if (files.length === 0) {
-    throw new Error(`No files to package in ${resolved}`);
+}
+function normalizeDeploymentStatus(platformStatus) {
+  switch (platformStatus.toLowerCase()) {
+    case "healthy":
+      return "succeeded";
+    case "failed":
+    case "cancelled":
+      return "failed";
+    case "queued":
+    case "validating":
+    case "building":
+    case "deploying":
+      return "running";
+    default:
+      return "pending";
   }
-  return files.sort();
 }
-
-// src/cli/platform/helpers/deploy-artifact-hash.ts
-async function sha256File(filePath) {
-  const hash2 = createHash2("sha256");
-  await new Promise((resolve, reject) => {
-    const stream = createReadStream(filePath);
-    stream.on("data", (chunk) => hash2.update(chunk));
-    stream.on("error", reject);
-    stream.on("end", () => resolve());
-  });
-  return hash2.digest("hex");
+function isTerminalInfrastructureStatus(platformStatus) {
+  const s = platformStatus.toLowerCase();
+  return s === "completed" || s === "completed_with_warnings" || s === "failed";
 }
-async function hashDirectoryContents(rootDirectory) {
-  const resolved = path55.resolve(rootDirectory);
-  const files = (await collectPackageableFiles(resolved)).sort((a, b) => a.localeCompare(b));
-  const hash2 = createHash2("sha256");
-  for (const rel of files) {
-    hash2.update(rel);
-    hash2.update("\0");
-    hash2.update(await fs8.readFile(path55.join(resolved, rel)));
-    hash2.update("\0");
-  }
-  return hash2.digest("hex");
+function isTerminalDeploymentStatus(platformStatus) {
+  const s = platformStatus.toLowerCase();
+  return s === "healthy" || s === "failed" || s === "cancelled";
 }
-async function hashDevPortalSiteSources(siteDirectory, options) {
-  const resolved = path55.resolve(siteDirectory);
-  const hash2 = createHash2("sha256");
-  const candidates = [
-    "apitogo.config.json",
-    "apitogo.config.ts",
-    "package.json",
-    "zudoku.config.ts",
-    "zudoku.config.tsx"
-  ];
-  for (const name of candidates) {
-    const full = path55.join(resolved, name);
-    try {
-      hash2.update(name);
-      hash2.update("\0");
-      hash2.update(await fs8.readFile(full));
-      hash2.update("\0");
-    } catch {
+var DEFAULT_POLL_INTERVAL_MS = 5e3;
+var DEFAULT_POLL_TIMEOUT_MS = 15 * 60 * 1e3;
+
+// src/cli/platform/helpers/poll.ts
+function sleep2(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function pollUntilTerminal(options) {
+  const timeoutMs = options.timeoutMs ?? DEFAULT_POLL_TIMEOUT_MS;
+  const intervalMs = options.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const deadline = Date.now() + timeoutMs;
+  const stepLabel = options.stepLabel ?? "Job";
+  let last;
+  while (Date.now() <= deadline) {
+    if (options.progress?.isCancelled()) {
+      if (!last) {
+        throw new Error("Operation cancelled before first poll result.");
+      }
+      return {
+        status: options.getStatus(last),
+        value: last,
+        timedOut: true,
+        cancelled: true
+      };
     }
-  }
-  for (const dir of ["pages", "landing", "src"]) {
-    const full = path55.join(resolved, dir);
     try {
-      const st = await fs8.stat(full);
-      if (!st.isDirectory()) continue;
-      hash2.update(dir);
-      hash2.update("\0");
-      hash2.update(await hashDirectoryContents(full));
-      hash2.update("\0");
-    } catch {
+      last = await options.poll();
+    } catch (error) {
+      const handled = options.onPollError?.(error, last);
+      if (handled) {
+        return handled;
+      }
+      throw error;
+    }
+    options.onPoll?.(last);
+    if (options.progress && isPollableJobValue(last)) {
+      await reportPollProgress(options.progress, stepLabel, last);
+    }
+    if (options.isTerminal(last)) {
+      return {
+        status: options.getStatus(last),
+        value: last,
+        timedOut: false
+      };
+    }
+    if (Date.now() + intervalMs > deadline) {
+      break;
     }
+    await sleep2(intervalMs);
   }
-  const gatewayUrl = options?.gatewayUrl?.trim().replace(/\/+$/, "");
-  if (gatewayUrl) {
-    hash2.update("gatewayUrl");
-    hash2.update("\0");
-    hash2.update(gatewayUrl);
-    hash2.update("\0");
+  if (!last) {
+    throw new Error("Polling produced no results.");
   }
-  return hash2.digest("hex");
+  return {
+    status: options.getStatus(last),
+    value: last,
+    timedOut: true
+  };
+}
+function isPollableJobValue(value) {
+  return typeof value === "object" && value !== null && "status" in value;
 }
 
-// src/cli/platform/helpers/openapi-gateway-servers.ts
-import { mkdir as mkdir12, readFile as readFile16, writeFile as writeFile15 } from "node:fs/promises";
-import path56 from "node:path";
-import YAML3 from "yaml";
-var GATEWAY_URL_ENV_KEY = "APITOGO_GATEWAY_URL";
-var PUBLISH_OPENAPI_RELATIVE = ".apitogo/openapi-publish.json";
-function normalizeGatewayUrl(gatewayUrl) {
-  return gatewayUrl.trim().replace(/\/+$/, "");
+// src/cli/platform/helpers/warm-pool.ts
+var WARM_POOL_CAPACITY_TEMPORARILY_UNAVAILABLE = "WARM_POOL_CAPACITY_TEMPORARILY_UNAVAILABLE";
+var COLD_MODULE_INFRA_RESOURCE_TYPES = /* @__PURE__ */ new Set([
+  "AzureProjectInfrastructure",
+  "DevPortalInfrastructure",
+  "BackendInfrastructure"
+]);
+var WARM_POOL_CREATE_RETRY_BUDGET_MS = 10 * 60 * 1e3;
+function sleep3(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
 }
-function withGatewayServers(doc, gatewayUrl) {
-  const url2 = normalizeGatewayUrl(gatewayUrl);
-  return {
-    ...doc,
-    servers: [{ url: url2, description: "API gateway" }]
-  };
+function warmPoolRetryDelayMs() {
+  return 6e4 + Math.floor(Math.random() * 30001);
 }
-async function resolveProjectGatewayUrl(client, projectId) {
-  const project = await client.getProject(projectId);
-  const fromProject = project.gatewayUrl?.trim();
-  if (fromProject) {
-    return normalizeGatewayUrl(fromProject);
+function isWarmPoolCapacityUnavailableError(error) {
+  if (!(error instanceof PlatformApiError)) {
+    return false;
   }
-  try {
-    const summary = await client.getBackendSummary(projectId);
-    const fromBackend = summary.backendUrl?.trim();
-    if (fromBackend) {
-      return normalizeGatewayUrl(fromBackend);
-    }
-  } catch {
+  if (error.status !== 503) {
+    return false;
   }
-  return null;
+  const code = error.problem?.code;
+  return code === WARM_POOL_CAPACITY_TEMPORARILY_UNAVAILABLE;
 }
-async function readOpenApiDocument(filePath) {
-  const content = await readFile16(filePath, "utf8");
-  const ext = path56.extname(filePath).toLowerCase();
-  const parsed = ext === ".json" ? JSON.parse(content) : YAML3.parse(content);
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new Error(`OpenAPI document must be an object: ${filePath}`);
-  }
-  return parsed;
+function isWarmPoolInfrastructureReady(project) {
+  return project.infrastructureStatus?.toLowerCase() === "ready";
 }
-async function materializePublishOpenApiWithGateway(siteDirectory, sourceOpenApiPath, gatewayUrl) {
-  const site = path56.resolve(siteDirectory);
-  const source = path56.resolve(sourceOpenApiPath);
-  const relativeInput = PUBLISH_OPENAPI_RELATIVE;
-  const outputPath = path56.join(site, ...relativeInput.split("/"));
-  const doc = await readOpenApiDocument(source);
-  const rewritten = withGatewayServers(doc, gatewayUrl);
-  await mkdir12(path56.dirname(outputPath), { recursive: true });
-  await writeFile15(outputPath, `${JSON.stringify(rewritten, null, 2)}
-`, "utf8");
-  return { outputPath, relativeInput };
+function isWarmPoolInfrastructureFailed(project) {
+  return project.infrastructureStatus?.toLowerCase() === "failed";
 }
-async function pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput) {
-  const configPath = path56.join(path56.resolve(siteDirectory), APITOGO_CONFIG_FILENAME2);
-  const raw = await readFile16(configPath, "utf8");
-  const config2 = JSON.parse(raw);
-  const previousApis = config2.apis;
-  const previousBackend = config2.backend;
-  const apis = Array.isArray(config2.apis) ? [...config2.apis] : [];
-  const first = apis[0] && typeof apis[0] === "object" ? { ...apis[0] } : { type: "file", path: "api" };
-  first.type = first.type ?? "file";
-  first.input = relativeInput;
-  first.path = first.path ?? "api";
-  config2.apis = [first, ...apis.slice(1)];
-  const backend = config2.backend && typeof config2.backend === "object" ? { ...config2.backend } : {};
-  backend.openApiPath = relativeInput;
-  config2.backend = backend;
-  await writeFile15(configPath, `${JSON.stringify(config2, null, 2)}
-`, "utf8");
-  return {
-    restore: async () => {
-      const currentRaw = await readFile16(configPath, "utf8");
-      const current = JSON.parse(currentRaw);
-      if (previousApis === void 0) {
-        delete current.apis;
-      } else {
-        current.apis = previousApis;
+function isWarmPoolInfrastructureTerminal(project) {
+  const status2 = project.infrastructureStatus?.toLowerCase() ?? "";
+  return status2 === "ready" || status2 === "failed" || status2 === "deleting";
+}
+function shouldSkipColdModuleInfrastructureWait(project, infraStatus) {
+  if (isWarmPoolInfrastructureReady(project)) {
+    return true;
+  }
+  const resourceType = infraStatus?.resourceType;
+  if (resourceType === "WarmPoolBinding") {
+    return true;
+  }
+  if (resourceType && COLD_MODULE_INFRA_RESOURCE_TYPES.has(resourceType)) {
+    return false;
+  }
+  return false;
+}
+function resolvePortalBackendFqdn(project) {
+  const portalApiUrl = project.portalApiUrl?.trim();
+  if (!portalApiUrl) {
+    return null;
+  }
+  try {
+    return new URL(portalApiUrl).hostname;
+  } catch {
+    return null;
+  }
+}
+var RESERVED_ENDPOINT_URL_AGENT_INSTRUCTION = "Do not share siteUrl, portalApiUrl, gatewayUrl, or any warm-pool hostnames with the user yet \u2014 those addresses are reserved infrastructure and show Azure's default page until the site or backend is actually deployed. Share live URLs only after publish_dev_portal, deploy_backend, or verify_dev_portal_live succeeds.";
+function omitReservedEndpointUrls(project) {
+  const {
+    siteUrl: _siteUrl,
+    portalApiUrl: _portalApiUrl,
+    gatewayUrl: _gatewayUrl,
+    ...rest
+  } = project;
+  return rest;
+}
+async function waitForWarmPoolBinding(client, projectId, options) {
+  const poll = await pollUntilTerminal({
+    poll: () => client.getProject(projectId),
+    isTerminal: (project2) => isWarmPoolInfrastructureTerminal(project2),
+    getStatus: (project2) => {
+      if (isWarmPoolInfrastructureFailed(project2)) {
+        return "failed";
       }
-      if (previousBackend === void 0) {
-        delete current.backend;
-      } else {
-        current.backend = previousBackend;
+      if (isWarmPoolInfrastructureReady(project2)) {
+        return "succeeded";
       }
-      await writeFile15(configPath, `${JSON.stringify(current, null, 2)}
-`, "utf8");
-    }
+      return "running";
+    },
+    timeoutMs: options?.timeoutMs ?? DEFAULT_POLL_TIMEOUT_MS,
+    intervalMs: options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS,
+    stepLabel: "Warm pool binding",
+    progress: options?.progress
+  });
+  const project = poll.value;
+  let status2;
+  if (poll.timedOut) {
+    status2 = "running";
+  } else if (isWarmPoolInfrastructureFailed(project)) {
+    status2 = "failed";
+  } else if (isWarmPoolInfrastructureReady(project)) {
+    status2 = "succeeded";
+  } else {
+    status2 = "running";
+  }
+  return {
+    status: status2,
+    timedOut: poll.timedOut,
+    project
   };
 }
-async function prepareOpenApiServersForGatewayBuild(options) {
-  const siteDirectory = path56.resolve(options.siteDirectory);
-  let openApiPath = resolveBackendOpenApiPath(options.manifest?.backend?.openApiPath, {
-    siteDirectory,
-    backendSourceDirectory: options.manifest?.backend?.sourceDirectory
-  });
-  if (!openApiPath) {
+async function createProjectWithWarmPoolRetry(client, body, options) {
+  const maxRetryMs = options?.maxRetryMs ?? WARM_POOL_CREATE_RETRY_BUDGET_MS;
+  const startedAt = Date.now();
+  while (true) {
     try {
-      const raw = await readFile16(path56.join(siteDirectory, APITOGO_CONFIG_FILENAME2), "utf8");
-      const config2 = JSON.parse(raw);
-      const input5 = Array.isArray(config2.apis) ? config2.apis[0]?.input?.trim() : void 0;
-      openApiPath = resolveBackendOpenApiPath(input5, { siteDirectory });
-    } catch {
+      return await client.createProject(body);
+    } catch (error) {
+      if (!isWarmPoolCapacityUnavailableError(error)) {
+        throw error;
+      }
+      if (Date.now() - startedAt >= maxRetryMs) {
+        throw error;
+      }
+      await sleep3(warmPoolRetryDelayMs());
     }
   }
-  if (!openApiPath) {
-    return null;
-  }
-  const { outputPath, relativeInput } = await materializePublishOpenApiWithGateway(
-    siteDirectory,
-    openApiPath,
-    options.gatewayUrl
-  );
-  const { restore } = await pointSiteApisAtPublishOpenApi(siteDirectory, relativeInput);
-  return { relativeInput, outputPath, restore };
 }
 
 // src/cli/platform/helpers/backend-packaging.ts
@@ -19506,7 +19568,9 @@ function normalizeModuleType2(type) {
 var READY_MODULE_STATUSES2 = /* @__PURE__ */ new Set(["provisioned", "configured", "started"]);
 function isModuleProvisioned(project, moduleType) {
   const normalized = normalizeModuleType2(moduleType);
-  const module = project.modules.find((m) => normalizeModuleType2(m.type) === normalized);
+  const module = project.modules.find(
+    (m) => normalizeModuleType2(m.type) === normalized
+  );
   if (!module?.status) {
     return false;
   }
@@ -19528,10 +19592,14 @@ async function ensureModuleProvisioned(client, config2, projectId, moduleType, w
   }
   await progress?.onStep(`Activating module ${moduleType}`);
   try {
-    await handleActivateModule(client, { ...config2, defaultProjectId: projectId }, {
-      projectId,
-      moduleType
-    });
+    await handleActivateModule(
+      client,
+      { ...config2, defaultProjectId: projectId },
+      {
+        projectId,
+        moduleType
+      }
+    );
   } catch (error) {
     if (isAlreadyProvisionedError(error)) {
       return;
@@ -19567,7 +19635,9 @@ async function ensureModuleProvisioned(client, config2, projectId, moduleType, w
 }
 async function ensureModulesProvisioned(client, config2, projectId, moduleTypes, wait, timeoutMs, pollIntervalMs, progress) {
   const project = await client.getProject(projectId);
-  const pending = moduleTypes.filter((moduleType) => !isModuleProvisioned(project, moduleType));
+  const pending = moduleTypes.filter(
+    (moduleType) => !isModuleProvisioned(project, moduleType)
+  );
   if (pending.length === 0) {
     return;
   }
@@ -19597,228 +19667,83 @@ async function ensureModulesProvisioned(client, config2, projectId, moduleTypes,
         pollIntervalMs,
         progress?.child(moduleType)
       )
-    )
-  );
-}
-async function resolveProjectIdForPublish(client, config2, args, wait, progress, timeoutMs, pollIntervalMs) {
-  const completedSteps = [];
-  if (args.projectId) {
-    const projectId = resolveProjectId(args.projectId, config2);
-    let project;
-    try {
-      project = await client.getProject(projectId);
-    } catch (error) {
-      if (isNotFoundError(error)) {
-        return {
-          blocked: true,
-          payload: {
-            status: "blocked",
-            reason: "project_not_found",
-            projectId,
-            userMessage: `Project ${projectId} was not found. It may have been deleted, or it belongs to a different account than the one you're currently logged in as.`,
-            nextStep: "create_or_fix_project"
-          }
-        };
-      }
-      throw error;
-    }
-    if (!isPlatformPlanUnselected(project.planTier)) {
-      await ensureModulesProvisioned(
-        client,
-        config2,
-        projectId,
-        ["apihub", "dev-portal"],
-        wait,
-        timeoutMs,
-        pollIntervalMs,
-        progress
-      );
-    }
-    completedSteps.push({ step: "resolve_project", status: "succeeded", detail: { projectId } });
-    return { blocked: false, projectId, completedSteps };
-  }
-  if (!args.projectName?.trim()) {
-    throw new Error("projectName is required when projectId is not provided.");
-  }
-  await progress?.onStep("Creating project and provisioning modules");
-  const bootstrapJson = await handleBootstrapProject(
-    client,
-    config2,
-    {
-      name: args.projectName.trim(),
-      modules: ["apihub", "dev-portal"],
-      selectFreePlan: false,
-      configureGatewayBaseline: false,
-      wait,
-      timeoutMs,
-      pollIntervalMs
-    },
-    progress
-  );
-  const bootstrap = parseHandlerResult(bootstrapJson, "bootstrap_project");
-  completedSteps.push({ step: "bootstrap_project", status: "succeeded", detail: bootstrap });
-  return { blocked: false, projectId: bootstrap.projectId, completedSteps };
-}
-
-// src/cli/platform/tools/dev-portal.ts
-import { promises as fs11 } from "node:fs";
-import path61 from "node:path";
-
-// src/cli/platform/helpers/tarball.ts
-import { createReadStream as createReadStream3, createWriteStream as createWriteStream3, promises as fs10 } from "node:fs";
-import { tmpdir as tmpdir3 } from "node:os";
-import path59 from "node:path";
-import { TarArchive } from "archiver";
-var DEV_PORTAL_DEPLOY_ARCHIVE_ROOT = "dist";
-function normalizeArchiveRoot(archiveRoot) {
-  const trimmed = archiveRoot.trim().replace(/^\/+|\/+$/g, "");
-  if (!trimmed) {
-    throw new Error("archiveRoot must not be empty.");
-  }
-  return `${trimmed}/`;
-}
-async function packageDirectoryAsTarGz(sourceDirectory, options) {
-  const resolved = path59.resolve(sourceDirectory);
-  const files = await collectPackageableFiles(resolved);
-  const entryPrefix = options?.archiveRoot ? normalizeArchiveRoot(options.archiveRoot) : "";
-  const archivePath = path59.join(
-    tmpdir3(),
-    `apitogo-docs-${Date.now()}-${Math.random().toString(36).slice(2)}.tgz`
-  );
-  await new Promise((resolve, reject) => {
-    const output4 = createWriteStream3(archivePath);
-    const archive = new TarArchive({ gzip: true, gzipOptions: { level: 6 } });
-    output4.on("close", () => resolve());
-    archive.on("error", reject);
-    output4.on("error", reject);
-    archive.pipe(output4);
-    for (const rel of files) {
-      const entryName = entryPrefix + rel.split(path59.sep).join("/");
-      archive.append(createReadStream3(path59.join(resolved, rel)), { name: entryName });
-    }
-    void archive.finalize();
-  });
-  const { size } = await fs10.stat(archivePath);
-  return { archivePath, byteSize: size };
-}
-async function cleanupArchive(archivePath) {
-  await fs10.unlink(archivePath).catch(() => void 0);
-}
-function isTarGzPath(filePath) {
-  const normalized = filePath.toLowerCase();
-  return normalized.endsWith(".tgz") || normalized.endsWith(".tar.gz");
-}
-
-// src/cli/platform/helpers/dev-portal-backend-job.ts
-var DEV_PORTAL_BACKEND_UPDATE_RESOURCE_TYPE = "DevPortalBackendUpdate";
-var ACTIVE_JOB_STATUSES = /* @__PURE__ */ new Set(["Pending", "InProgress"]);
-var RECENT_COMPLETED_WINDOW_MS = 3e4;
-var BACKEND_UPDATE_JOB_APPEARANCE_TIMEOUT_MS = 3e4;
-function isBackendUpdateJob(job) {
-  return job.resourceType === DEV_PORTAL_BACKEND_UPDATE_RESOURCE_TYPE;
-}
-function isActiveBackendUpdateJob(job) {
-  return isBackendUpdateJob(job) && ACTIVE_JOB_STATUSES.has(job.status);
-}
-function isRecentlyCompletedBackendUpdateJob(job) {
-  if (!isBackendUpdateJob(job) || job.status !== "Completed" || !job.completedAt) {
-    return false;
-  }
-  const completedAtMs = Date.parse(job.completedAt);
-  if (Number.isNaN(completedAtMs)) {
-    return false;
-  }
-  return Date.now() - completedAtMs <= RECENT_COMPLETED_WINDOW_MS;
-}
-function sortJobsNewestFirst(jobs) {
-  return [...jobs].sort(
-    (a, b) => Date.parse(b.createdAt) - Date.parse(a.createdAt)
-  );
-}
-function findBackendUpdateJob(jobs, options) {
-  const sorted = sortJobsNewestFirst(jobs);
-  if (options?.jobId) {
-    return sorted.find((job) => job.id === options.jobId) ?? null;
-  }
-  const active = sorted.find(isActiveBackendUpdateJob);
-  if (active) {
-    return active;
-  }
-  const baseline = options?.baselineJobIds;
-  if (baseline) {
-    const newlyCompleted = sorted.find(
-      (job) => isBackendUpdateJob(job) && !baseline.has(job.id) && (ACTIVE_JOB_STATUSES.has(job.status) || job.status === "Completed")
-    );
-    if (newlyCompleted) {
-      return newlyCompleted;
-    }
-  }
-  const recentlyCompleted = sorted.find(isRecentlyCompletedBackendUpdateJob);
-  if (recentlyCompleted) {
-    return recentlyCompleted;
-  }
-  return null;
+    )
+  );
 }
-async function discoverBackendUpdateJob(options) {
-  if (options.jobId) {
-    const result = await options.client.listProvisioningJobs(options.projectId);
-    const job = findBackendUpdateJob(result.jobs, { jobId: options.jobId });
-    if (!job) {
-      throw new Error(`DevPortalBackendUpdate job not found: ${options.jobId}`);
+async function resolveProjectIdForPublish(client, config2, args, wait, progress, timeoutMs, pollIntervalMs) {
+  const completedSteps = [];
+  if (args.projectId) {
+    const projectId = resolveProjectId(args.projectId, config2);
+    let project;
+    try {
+      project = await client.getProject(projectId);
+    } catch (error) {
+      if (isNotFoundError(error)) {
+        return {
+          blocked: true,
+          payload: {
+            status: "blocked",
+            reason: "project_not_found",
+            projectId,
+            userMessage: `Project ${projectId} was not found. It may have been deleted, or it belongs to a different account than the one you're currently logged in as.`,
+            nextStep: "create_or_fix_project"
+          }
+        };
+      }
+      throw error;
     }
-    return { job, timedOut: false };
-  }
-  const pollOnce = async () => {
-    const result = await options.client.listProvisioningJobs(options.projectId);
-    return findBackendUpdateJob(result.jobs, {
-      baselineJobIds: options.baselineJobIds
+    if (!isPlatformPlanUnselected(project.planTier)) {
+      await ensureModulesProvisioned(
+        client,
+        config2,
+        projectId,
+        ["apihub", "dev-portal"],
+        wait,
+        timeoutMs,
+        pollIntervalMs,
+        progress
+      );
+    }
+    completedSteps.push({
+      step: "resolve_project",
+      status: "succeeded",
+      detail: { projectId }
     });
-  };
-  const first = await pollOnce();
-  if (first) {
-    return { job: first, timedOut: false };
+    return { blocked: false, projectId, completedSteps };
   }
-  if (!options.baselineJobIds) {
-    return { job: null, timedOut: false };
+  if (!args.projectName?.trim()) {
+    throw new Error("projectName is required when projectId is not provided.");
   }
-  const appearanceTimeoutMs = Math.min(
-    options.timeoutMs ?? BACKEND_UPDATE_JOB_APPEARANCE_TIMEOUT_MS,
-    BACKEND_UPDATE_JOB_APPEARANCE_TIMEOUT_MS
+  await progress?.onStep("Creating project and provisioning modules");
+  const bootstrapJson = await handleBootstrapProject(
+    client,
+    config2,
+    {
+      name: args.projectName.trim(),
+      modules: ["apihub", "dev-portal"],
+      selectFreePlan: false,
+      configureGatewayBaseline: false,
+      wait,
+      timeoutMs,
+      pollIntervalMs
+    },
+    progress
   );
-  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-  const deadline = Date.now() + appearanceTimeoutMs;
-  while (Date.now() <= deadline) {
-    const job = await pollOnce();
-    if (job) {
-      return { job, timedOut: false };
-    }
-    if (Date.now() + pollIntervalMs > deadline) {
-      break;
-    }
-    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-  }
-  return { job: null, timedOut: false };
-}
-async function pollBackendUpdateJobStatus(client, projectId, jobId, options) {
-  return pollUntilTerminal({
-    poll: () => client.getDevPortalDeployStatus(projectId, jobId),
-    isTerminal: (value) => isTerminalInfrastructureStatus(value.status),
-    getStatus: (value) => normalizeInfrastructureStatus(value.status),
-    timeoutMs: options?.timeoutMs ?? DEFAULT_POLL_TIMEOUT_MS,
-    intervalMs: options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS,
-    stepLabel: "Dev portal backend update"
+  const bootstrap = parseHandlerResult(bootstrapJson, "bootstrap_project");
+  completedSteps.push({
+    step: "bootstrap_project",
+    status: "succeeded",
+    detail: bootstrap
   });
+  return { blocked: false, projectId: bootstrap.projectId, completedSteps };
 }
-async function snapshotBackendUpdateJobIds(client, projectId) {
-  const result = await client.listProvisioningJobs(projectId);
-  return new Set(
-    result.jobs.filter(isBackendUpdateJob).map((job) => job.id)
-  );
-}
+
+// src/cli/platform/tools/dev-portal-site-build.ts
+import path62 from "node:path";
 
 // src/cli/platform/helpers/dev-portal-site-api-url.ts
 import { readdir as readdir2, readFile as readFile17, writeFile as writeFile16 } from "node:fs/promises";
-import path60 from "node:path";
+import path59 from "node:path";
 var SITE_API_BASE_URL_ENV_KEY = "VITE_APITOGO_AUTHENTICATION_API_BASE_URL";
 var PLACEHOLDER_HOST_MARKERS = [
   "dp-example.azurecontainerapps.io",
@@ -19836,10 +19761,10 @@ function isPlaceholderDevPortalApiUrl(apiBaseUrl) {
   return PLACEHOLDER_HOST_MARKERS.some((marker) => normalized.includes(marker));
 }
 async function readSiteApiBaseUrl(sourceDirectory) {
-  const resolved = path60.resolve(sourceDirectory);
+  const resolved = path59.resolve(sourceDirectory);
   for (const envFile of [".env", ".env.production"]) {
     try {
-      const content = await readFile17(path60.join(resolved, envFile), "utf8");
+      const content = await readFile17(path59.join(resolved, envFile), "utf8");
       const lines = [...content.matchAll(ENV_LINE_GLOBAL_RE)];
       if (lines.length === 0) {
         continue;
@@ -19864,11 +19789,11 @@ async function readSiteApiBaseUrl(sourceDirectory) {
   return null;
 }
 async function patchSiteApiBaseUrl(sourceDirectory, apiBaseUrl) {
-  const resolved = path60.resolve(sourceDirectory);
+  const resolved = path59.resolve(sourceDirectory);
   const line = `${SITE_API_BASE_URL_ENV_KEY}=${apiBaseUrl}`;
   let patchedExisting = false;
   for (const envFile of [".env.production", ".env"]) {
-    const envPath = path60.join(resolved, envFile);
+    const envPath = path59.join(resolved, envFile);
     try {
       const content = await readFile17(envPath, "utf8");
       const withoutAssignments = content.replace(ENV_LINE_GLOBAL_RE, "").replace(/\n{3,}/g, "\n\n").trimEnd();
@@ -19882,7 +19807,7 @@ ${line}
     }
   }
   if (!patchedExisting) {
-    await writeFile16(path60.join(resolved, ".env"), `${line}
+    await writeFile16(path59.join(resolved, ".env"), `${line}
 `);
   }
 }
@@ -19890,7 +19815,7 @@ function tryProjectId(explicit, manifestProjectId, config2) {
   return explicit?.trim() || manifestProjectId?.trim() || config2.defaultProjectId?.trim() || void 0;
 }
 async function ensureLiveSiteApiBaseUrlForBuild(_client, config2, args, resolveFromProject) {
-  const sourceDirectory = path60.resolve(args.sourceDirectory);
+  const sourceDirectory = path59.resolve(args.sourceDirectory);
   const explicit = args.apiBaseUrl?.trim();
   if (explicit && !isPlaceholderDevPortalApiUrl(explicit)) {
     await patchSiteApiBaseUrl(sourceDirectory, explicit);
@@ -19914,63 +19839,219 @@ async function ensureLiveSiteApiBaseUrlForBuild(_client, config2, args, resolveF
       `Resolved portal API URL is still a placeholder (${resolved}). Ensure the dev-portal backend is provisioned.`
     );
   }
-  const normalized = resolved.replace(/\/+$/, "");
-  await patchSiteApiBaseUrl(sourceDirectory, normalized);
-  return normalized;
-}
-async function* walkFiles(root) {
-  let entries;
-  try {
-    entries = await readdir2(root, { withFileTypes: true });
-  } catch {
-    return;
+  const normalized = resolved.replace(/\/+$/, "");
+  await patchSiteApiBaseUrl(sourceDirectory, normalized);
+  return normalized;
+}
+async function* walkFiles(root) {
+  let entries;
+  try {
+    entries = await readdir2(root, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    const full = path59.join(root, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name === "node_modules" || entry.name === ".git") {
+        continue;
+      }
+      yield* walkFiles(full);
+    } else if (entry.isFile() && /\.(js|mjs|cjs|html|map)$/i.test(entry.name)) {
+      yield full;
+    }
+  }
+}
+async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiBaseUrl) {
+  const dist = path59.resolve(distDirectory);
+  const siteRoot = path59.dirname(dist);
+  const fromEnv = expectedApiBaseUrl?.trim() || await readSiteApiBaseUrl(siteRoot) || await readSiteApiBaseUrl(dist);
+  if (!fromEnv || isPlaceholderDevPortalApiUrl(fromEnv)) {
+    throw new Error(
+      `Refusing to deploy: no live ${SITE_API_BASE_URL_ENV_KEY}. Run build_dev_portal_site first (it patches .env automatically) or set the live portal URL.`
+    );
+  }
+  const needle = fromEnv.replace(/\/+$/, "");
+  let found = false;
+  let foundPlaceholder = false;
+  for await (const file of walkFiles(dist)) {
+    const content = await readFile17(file, "utf8");
+    if (content.includes(needle)) {
+      found = true;
+    }
+    if (PLACEHOLDER_HOST_MARKERS.some((marker) => content.includes(marker))) {
+      foundPlaceholder = true;
+    }
+    if (found && foundPlaceholder) {
+      break;
+    }
+  }
+  if (foundPlaceholder && !found) {
+    throw new Error(
+      "Refusing to deploy: built site still contains a placeholder portal API URL. Rebuild with build_dev_portal_site."
+    );
+  }
+  if (!found) {
+    throw new Error(
+      `Refusing to deploy: dist was not built with ${SITE_API_BASE_URL_ENV_KEY}=${needle}. Run build_dev_portal_site so the live URL is baked into the bundle.`
+    );
+  }
+}
+
+// src/cli/platform/tools/dev-portal.ts
+import { promises as fs11 } from "node:fs";
+import path61 from "node:path";
+
+// src/cli/platform/helpers/tarball.ts
+import { createReadStream as createReadStream3, createWriteStream as createWriteStream3, promises as fs10 } from "node:fs";
+import { tmpdir as tmpdir3 } from "node:os";
+import path60 from "node:path";
+import { TarArchive } from "archiver";
+var DEV_PORTAL_DEPLOY_ARCHIVE_ROOT = "dist";
+function normalizeArchiveRoot(archiveRoot) {
+  const trimmed = archiveRoot.trim().replace(/^\/+|\/+$/g, "");
+  if (!trimmed) {
+    throw new Error("archiveRoot must not be empty.");
+  }
+  return `${trimmed}/`;
+}
+async function packageDirectoryAsTarGz(sourceDirectory, options) {
+  const resolved = path60.resolve(sourceDirectory);
+  const files = await collectPackageableFiles(resolved);
+  const entryPrefix = options?.archiveRoot ? normalizeArchiveRoot(options.archiveRoot) : "";
+  const archivePath = path60.join(
+    tmpdir3(),
+    `apitogo-docs-${Date.now()}-${Math.random().toString(36).slice(2)}.tgz`
+  );
+  await new Promise((resolve, reject) => {
+    const output4 = createWriteStream3(archivePath);
+    const archive = new TarArchive({ gzip: true, gzipOptions: { level: 6 } });
+    output4.on("close", () => resolve());
+    archive.on("error", reject);
+    output4.on("error", reject);
+    archive.pipe(output4);
+    for (const rel of files) {
+      const entryName = entryPrefix + rel.split(path60.sep).join("/");
+      archive.append(createReadStream3(path60.join(resolved, rel)), { name: entryName });
+    }
+    void archive.finalize();
+  });
+  const { size } = await fs10.stat(archivePath);
+  return { archivePath, byteSize: size };
+}
+async function cleanupArchive(archivePath) {
+  await fs10.unlink(archivePath).catch(() => void 0);
+}
+function isTarGzPath(filePath) {
+  const normalized = filePath.toLowerCase();
+  return normalized.endsWith(".tgz") || normalized.endsWith(".tar.gz");
+}
+
+// src/cli/platform/helpers/dev-portal-backend-job.ts
+var DEV_PORTAL_BACKEND_UPDATE_RESOURCE_TYPE = "DevPortalBackendUpdate";
+var ACTIVE_JOB_STATUSES = /* @__PURE__ */ new Set(["Pending", "InProgress"]);
+var RECENT_COMPLETED_WINDOW_MS = 3e4;
+var BACKEND_UPDATE_JOB_APPEARANCE_TIMEOUT_MS = 3e4;
+function isBackendUpdateJob(job) {
+  return job.resourceType === DEV_PORTAL_BACKEND_UPDATE_RESOURCE_TYPE;
+}
+function isActiveBackendUpdateJob(job) {
+  return isBackendUpdateJob(job) && ACTIVE_JOB_STATUSES.has(job.status);
+}
+function isRecentlyCompletedBackendUpdateJob(job) {
+  if (!isBackendUpdateJob(job) || job.status !== "Completed" || !job.completedAt) {
+    return false;
+  }
+  const completedAtMs = Date.parse(job.completedAt);
+  if (Number.isNaN(completedAtMs)) {
+    return false;
+  }
+  return Date.now() - completedAtMs <= RECENT_COMPLETED_WINDOW_MS;
+}
+function sortJobsNewestFirst(jobs) {
+  return [...jobs].sort(
+    (a, b) => Date.parse(b.createdAt) - Date.parse(a.createdAt)
+  );
+}
+function findBackendUpdateJob(jobs, options) {
+  const sorted = sortJobsNewestFirst(jobs);
+  if (options?.jobId) {
+    return sorted.find((job) => job.id === options.jobId) ?? null;
+  }
+  const active = sorted.find(isActiveBackendUpdateJob);
+  if (active) {
+    return active;
+  }
+  const baseline = options?.baselineJobIds;
+  if (baseline) {
+    const newlyCompleted = sorted.find(
+      (job) => isBackendUpdateJob(job) && !baseline.has(job.id) && (ACTIVE_JOB_STATUSES.has(job.status) || job.status === "Completed")
+    );
+    if (newlyCompleted) {
+      return newlyCompleted;
+    }
+  }
+  const recentlyCompleted = sorted.find(isRecentlyCompletedBackendUpdateJob);
+  if (recentlyCompleted) {
+    return recentlyCompleted;
   }
-  for (const entry of entries) {
-    const full = path60.join(root, entry.name);
-    if (entry.isDirectory()) {
-      if (entry.name === "node_modules" || entry.name === ".git") {
-        continue;
-      }
-      yield* walkFiles(full);
-    } else if (entry.isFile() && /\.(js|mjs|cjs|html|map)$/i.test(entry.name)) {
-      yield full;
+  return null;
+}
+async function discoverBackendUpdateJob(options) {
+  if (options.jobId) {
+    const result = await options.client.listProvisioningJobs(options.projectId);
+    const job = findBackendUpdateJob(result.jobs, { jobId: options.jobId });
+    if (!job) {
+      throw new Error(`DevPortalBackendUpdate job not found: ${options.jobId}`);
     }
+    return { job, timedOut: false };
   }
-}
-async function assertDeployableDistHasLiveApiBaseUrl(distDirectory, expectedApiBaseUrl) {
-  const dist = path60.resolve(distDirectory);
-  const siteRoot = path60.dirname(dist);
-  const fromEnv = expectedApiBaseUrl?.trim() || await readSiteApiBaseUrl(siteRoot) || await readSiteApiBaseUrl(dist);
-  if (!fromEnv || isPlaceholderDevPortalApiUrl(fromEnv)) {
-    throw new Error(
-      `Refusing to deploy: no live ${SITE_API_BASE_URL_ENV_KEY}. Run build_dev_portal_site first (it patches .env automatically) or set the live portal URL.`
-    );
+  const pollOnce = async () => {
+    const result = await options.client.listProvisioningJobs(options.projectId);
+    return findBackendUpdateJob(result.jobs, {
+      baselineJobIds: options.baselineJobIds
+    });
+  };
+  const first = await pollOnce();
+  if (first) {
+    return { job: first, timedOut: false };
   }
-  const needle = fromEnv.replace(/\/+$/, "");
-  let found = false;
-  let foundPlaceholder = false;
-  for await (const file of walkFiles(dist)) {
-    const content = await readFile17(file, "utf8");
-    if (content.includes(needle)) {
-      found = true;
-    }
-    if (PLACEHOLDER_HOST_MARKERS.some((marker) => content.includes(marker))) {
-      foundPlaceholder = true;
+  if (!options.baselineJobIds) {
+    return { job: null, timedOut: false };
+  }
+  const appearanceTimeoutMs = Math.min(
+    options.timeoutMs ?? BACKEND_UPDATE_JOB_APPEARANCE_TIMEOUT_MS,
+    BACKEND_UPDATE_JOB_APPEARANCE_TIMEOUT_MS
+  );
+  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const deadline = Date.now() + appearanceTimeoutMs;
+  while (Date.now() <= deadline) {
+    const job = await pollOnce();
+    if (job) {
+      return { job, timedOut: false };
     }
-    if (found && foundPlaceholder) {
+    if (Date.now() + pollIntervalMs > deadline) {
       break;
     }
+    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
   }
-  if (foundPlaceholder && !found) {
-    throw new Error(
-      "Refusing to deploy: built site still contains a placeholder portal API URL. Rebuild with build_dev_portal_site."
-    );
-  }
-  if (!found) {
-    throw new Error(
-      `Refusing to deploy: dist was not built with ${SITE_API_BASE_URL_ENV_KEY}=${needle}. Run build_dev_portal_site so the live URL is baked into the bundle.`
-    );
-  }
+  return { job: null, timedOut: false };
+}
+async function pollBackendUpdateJobStatus(client, projectId, jobId, options) {
+  return pollUntilTerminal({
+    poll: () => client.getDevPortalDeployStatus(projectId, jobId),
+    isTerminal: (value) => isTerminalInfrastructureStatus(value.status),
+    getStatus: (value) => normalizeInfrastructureStatus(value.status),
+    timeoutMs: options?.timeoutMs ?? DEFAULT_POLL_TIMEOUT_MS,
+    intervalMs: options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS,
+    stepLabel: "Dev portal backend update"
+  });
+}
+async function snapshotBackendUpdateJobIds(client, projectId) {
+  const result = await client.listProvisioningJobs(projectId);
+  return new Set(
+    result.jobs.filter(isBackendUpdateJob).map((job) => job.id)
+  );
 }
 
 // src/cli/platform/tools/dev-portal.ts
@@ -20262,7 +20343,6 @@ async function handleDeployDevPortal(client, config2, args, progress) {
 }
 
 // src/cli/platform/tools/dev-portal-site-build.ts
-import path62 from "node:path";
 async function handleBuildDevPortalSite(client, config2, args, progress) {
   const buildProgress = progress?.child("Build dev portal site");
   const sourceDirectory = path62.resolve(args.sourceDirectory);
@@ -20342,54 +20422,6 @@ async function handleBuildDevPortalSite(client, config2, args, progress) {
   }
 }
 
-// src/cli/platform/helpers/public-routes.ts
-function normalizeActionKeyFormat(actionKey) {
-  const trimmed = actionKey.trim();
-  if (trimmed.includes(":")) {
-    const [method2, ...pathParts] = trimmed.split(":");
-    const path73 = pathParts.join(":").trim();
-    return `${method2.toLowerCase()}:${path73.startsWith("/") ? path73 : `/${path73}`}`;
-  }
-  const spaceIndex = trimmed.indexOf(" ");
-  if (spaceIndex <= 0) {
-    throw new Error(
-      "actionKey must be in format 'get:/path' or 'GET /path' (method plus path)."
-    );
-  }
-  const method = trimmed.slice(0, spaceIndex).trim().toLowerCase();
-  const path72 = trimmed.slice(spaceIndex + 1).trim();
-  return `${method}:${path72.startsWith("/") ? path72 : `/${path72}`}`;
-}
-function normalizePublicRoute(route) {
-  const trimmed = route.trim();
-  if (!trimmed) {
-    throw new Error("public route must be a non-empty string");
-  }
-  if (trimmed.startsWith("/")) {
-    return normalizeActionKeyFormat(`GET ${trimmed}`);
-  }
-  return normalizeActionKeyFormat(trimmed);
-}
-function collectManifestPublicActionKeys(gateway) {
-  if (!gateway) {
-    return [];
-  }
-  const keys = /* @__PURE__ */ new Set();
-  for (const route of gateway.publicRoutes ?? []) {
-    try {
-      keys.add(normalizePublicRoute(route));
-    } catch {
-    }
-  }
-  if (gateway.publicHealthActionKey?.trim()) {
-    try {
-      keys.add(normalizePublicRoute(gateway.publicHealthActionKey));
-    } catch {
-    }
-  }
-  return [...keys];
-}
-
 // src/cli/platform/tools/dev-portal-publish.ts
 var PUBLISH_STEPS = [
   "resolve_project",
@@ -20420,10 +20452,7 @@ var PUBLISH_STEPS_BY_RESOURCE = {
     "update_dev_portal_settings",
     "sync_dev_portal_plan_catalog"
   ],
-  "portal-frontend": [
-    "build_dev_portal_site",
-    "deploy_dev_portal"
-  ]
+  "portal-frontend": ["build_dev_portal_site", "deploy_dev_portal"]
 };
 function parseApplyResources(raw) {
   if (raw === void 0) {
@@ -20467,7 +20496,9 @@ function shouldRunPublishStep(step, resumeFromStep, completedSteps) {
     return true;
   }
   if (stepIndex < resumeIndex) {
-    return completedSteps.some((record) => record.step === step && record.status === "succeeded");
+    return completedSteps.some(
+      (record) => record.step === step && record.status === "succeeded"
+    );
   }
   return true;
 }
@@ -20500,10 +20531,16 @@ async function shouldSkipBackendRedeploy(client, projectId, manifest, ledger, ex
     const remoteSha = summary.artifactContentSha256?.toLowerCase() ?? null;
     const ledgerSha = ledger.backendArtifactHash?.toLowerCase() ?? null;
     if (remoteSha && ledgerSha && remoteSha === ledgerSha) {
-      return { skip: true, reason: "healthy backend matches ledger artifact hash" };
+      return {
+        skip: true,
+        reason: "healthy backend matches ledger artifact hash"
+      };
     }
     if (manifest.backend?.deployed && remoteSha && ledgerSha && remoteSha === ledgerSha) {
-      return { skip: true, reason: "backend marked deployed with matching hash" };
+      return {
+        skip: true,
+        reason: "backend marked deployed with matching hash"
+      };
     }
   } catch {
   }
@@ -20527,7 +20564,9 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
   const wait = args.wait !== false;
   const resources = resolveApplyResources(args.only);
   const forceBackendRedeploy = Boolean(args.force && resources.has("apihub"));
-  const forceSiteRedeploy = Boolean(args.force && resources.has("portal-frontend"));
+  const forceSiteRedeploy = Boolean(
+    args.force && resources.has("portal-frontend")
+  );
   const includeApihub = resources.has("apihub");
   const includePortalBackend = resources.has("portal-backend");
   const includePortalFrontend = resources.has("portal-frontend");
@@ -20558,22 +20597,37 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
       version: 1,
       projectId: projectId || ledger.projectId,
       updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      lastSuccessfulStep: [...timedSteps].reverse().find((step) => step.status === "succeeded" || step.status === "skipped")?.step ?? ledger.lastSuccessfulStep,
+      lastSuccessfulStep: [...timedSteps].reverse().find(
+        (step) => step.status === "succeeded" || step.status === "skipped"
+      )?.step ?? ledger.lastSuccessfulStep,
       steps: timedSteps.length > 0 ? timedSteps : ledger.steps
     };
     await writePublishLedger(args.sourceDirectory, ledger);
   };
   try {
-    const { manifest: loadedManifest, secrets } = await resolvePublishConfig(args.sourceDirectory);
+    const { manifest: loadedManifest, secrets } = await resolvePublishConfig(
+      args.sourceDirectory
+    );
     const projectIdHint = args.projectId ?? loadedManifest.projectId;
-    const emailOptions = await resolveEmailOptionsForPublish(client, projectIdHint);
-    let manifest = validateManifestForPublish(loadedManifest, secrets, emailOptions);
+    const emailOptions = await resolveEmailOptionsForPublish(
+      client,
+      projectIdHint
+    );
+    const manifest = validateManifestForPublish(
+      loadedManifest,
+      secrets,
+      emailOptions
+    );
     await writeManifest(args.sourceDirectory, manifest);
     const stripeRequired = manifestRequiresStripe(manifest.plans);
     const ledgerResume = resolveResumeStepFromLedger(ledger, PUBLISH_STEPS);
     const effectiveResumeFromStep = args.resumeFromStep ?? ledgerResume;
     let publicRouteWarnings = [];
-    if (args.createNewProject || shouldRunPublishStep("resolve_project", effectiveResumeFromStep, completedSteps)) {
+    if (args.createNewProject || shouldRunPublishStep(
+      "resolve_project",
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       const timer = new StepTimer();
       const resolved = await resolveProjectIdForPublish(
         client,
@@ -20654,7 +20708,11 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
       if (ensured.status !== "succeeded") {
         return ensureJson;
       }
-      completedSteps.push({ step: "ensure_platform_plan", status: "succeeded", detail: ensured });
+      completedSteps.push({
+        step: "ensure_platform_plan",
+        status: "succeeded",
+        detail: ensured
+      });
     }
     const planGate = await assertPlatformPlanReadyForPublish(client, projectId);
     if (planGate.blocked) {
@@ -20723,7 +20781,12 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
         detail: { reason: "resource not selected" }
       });
     }
-    if (shouldRunResourceStep("upsert_gateway_plans", resources, effectiveResumeFromStep, completedSteps)) {
+    if (shouldRunResourceStep(
+      "upsert_gateway_plans",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       await publishProgress?.onStep("Creating gateway plans");
       const timer = new StepTimer();
       const planResults = await upsertGatewayPlansFromManifest(
@@ -20733,7 +20796,11 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
         manifest.plans,
         { deferActionKeys: true }
       );
-      recordStep("upsert_gateway_plans", "succeeded", timer.finish(planResults));
+      recordStep(
+        "upsert_gateway_plans",
+        "succeeded",
+        timer.finish(planResults)
+      );
     } else {
       recordStep("upsert_gateway_plans", "skipped", new StepTimer().finish());
     }
@@ -20750,7 +20817,9 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
     const project = await client.getProject(projectId);
     await publishProgress?.onStep("Loading backend FQDN");
     let backendFqdn = resolvePortalBackendFqdn(project);
-    const backendJson = await handleGetDevPortalBackend(client, config2, { projectId });
+    const backendJson = await handleGetDevPortalBackend(client, config2, {
+      projectId
+    });
     const backendResult = JSON.parse(backendJson);
     backendFqdn = backendFqdn ?? backendResult.backend?.fqdn?.trim() ?? null;
     const platformSiteUrl = backendResult.backend?.platformSiteUrl?.trim() ?? null;
@@ -20766,7 +20835,12 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
     );
     const urls = backendFqdn ? resolveDevPortalUrls(project, backendFqdn, providerIds, platformSiteUrl) : null;
     const backendApiBaseUrl = backendFqdn ? `https://${backendFqdn}` : "";
-    if (shouldRunResourceStep("update_dev_portal_settings", resources, effectiveResumeFromStep, completedSteps)) {
+    if (shouldRunResourceStep(
+      "update_dev_portal_settings",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       await publishProgress?.onStep("Updating dev portal settings");
       const timer = new StepTimer();
       const openApiPath = manifest.backend?.openApiPath;
@@ -20785,7 +20859,9 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
           openApiSourceKind: openApi.openApiSourceKind,
           openApiValue: openApi.openApiValue,
           authConfigJson: JSON.stringify(buildAuthConfigJson(manifest)),
-          authSecretsJson: JSON.stringify(buildAuthSecretsJson(secrets, emailOptions)),
+          authSecretsJson: JSON.stringify(
+            buildAuthSecretsJson(secrets, emailOptions)
+          ),
           stripeSecretKey: stripeRequired ? secrets.stripe.secretKey : void 0,
           stripeWebhookSecret: stripeRequired ? secrets.stripe.webhookSecret : void 0,
           stripeSuccessUrl: stripeRequired ? urls.stripeSuccessUrl : void 0,
@@ -20799,9 +20875,18 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
       parseHandlerResult(settingsJson, "update_dev_portal_settings");
       recordStep("update_dev_portal_settings", "succeeded", timer.finish());
     } else {
-      recordStep("update_dev_portal_settings", "skipped", new StepTimer().finish());
+      recordStep(
+        "update_dev_portal_settings",
+        "skipped",
+        new StepTimer().finish()
+      );
     }
-    if (shouldRunResourceStep("configure_gateway_baseline", resources, effectiveResumeFromStep, completedSteps)) {
+    if (shouldRunResourceStep(
+      "configure_gateway_baseline",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       await publishProgress?.onStep("Configuring gateway baseline");
       const timer = new StepTimer();
       const gateway = manifest.gateway ?? {};
@@ -20835,14 +20920,21 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
         { ...config2, defaultProjectId: projectId },
         baselineArgs
       );
-      const baseline = parseHandlerResult(baselineJson, "configure_gateway_baseline");
+      const baseline = parseHandlerResult(
+        baselineJson,
+        "configure_gateway_baseline"
+      );
       recordStep(
         "configure_gateway_baseline",
         baseline.status === "pending" ? "pending" : "succeeded",
         timer.finish(baseline)
       );
     } else {
-      recordStep("configure_gateway_baseline", "skipped", new StepTimer().finish());
+      recordStep(
+        "configure_gateway_baseline",
+        "skipped",
+        new StepTimer().finish()
+      );
     }
     const skipBackendDecision = await shouldSkipBackendRedeploy(
       client,
@@ -20858,13 +20950,21 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
     const hasBackendSource = Boolean(backendSourceDirectory);
     let backendDeploySucceeded = false;
     let backendDeployFailed = false;
-    if (shouldRunResourceStep("deploy_backend", resources, effectiveResumeFromStep, completedSteps) && backendConfig && backendSourceDirectory && !skipBackend) {
+    if (shouldRunResourceStep(
+      "deploy_backend",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    ) && backendConfig && backendSourceDirectory && !skipBackend) {
       await publishProgress?.onStep("Deploying API backend");
       const timer = new StepTimer();
-      const resolvedOpenApiPath = resolveBackendOpenApiPath(backendConfig.openApiPath, {
-        siteDirectory: args.sourceDirectory,
-        backendSourceDirectory
-      });
+      const resolvedOpenApiPath = resolveBackendOpenApiPath(
+        backendConfig.openApiPath,
+        {
+          siteDirectory: args.sourceDirectory,
+          backendSourceDirectory
+        }
+      );
       try {
         const deployJson = await handleDeployBackend(
           client,
@@ -20926,14 +21026,25 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
       }
     }
     const shouldSyncPlanActions = hasBackendSource && !backendDeployFailed && (backendDeploySucceeded || manifest.backend?.deployed === true);
-    if (shouldRunResourceStep("sync_gateway_plan_actions", resources, effectiveResumeFromStep, completedSteps) && shouldSyncPlanActions) {
-      await publishProgress?.onStep("Waiting for OpenAPI actions then syncing plan membership");
+    if (shouldRunResourceStep(
+      "sync_gateway_plan_actions",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    ) && shouldSyncPlanActions) {
+      await publishProgress?.onStep(
+        "Waiting for OpenAPI actions then syncing plan membership"
+      );
       const timer = new StepTimer();
-      const actionWait = await waitForGatewayActionsRegistered(client, projectId, {
-        minActionCount: 1,
-        timeoutMs: args.timeoutMs ?? 18e4,
-        pollIntervalMs: args.pollIntervalMs ?? 5e3
-      });
+      const actionWait = await waitForGatewayActionsRegistered(
+        client,
+        projectId,
+        {
+          minActionCount: 1,
+          timeoutMs: args.timeoutMs ?? 18e4,
+          pollIntervalMs: args.pollIntervalMs ?? 5e3
+        }
+      );
       if (actionWait.timedOut && actionWait.actionCount < 1) {
         throw new BootstrapStepError(
           "sync_gateway_plan_actions",
@@ -20951,9 +21062,17 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
       recordStep(
         "sync_gateway_plan_actions",
         "succeeded",
-        timer.finish({ actionCount: actionWait.actionCount, results: actionSyncResults })
+        timer.finish({
+          actionCount: actionWait.actionCount,
+          results: actionSyncResults
+        })
       );
-    } else if (shouldRunResourceStep("sync_gateway_plan_actions", resources, effectiveResumeFromStep, completedSteps)) {
+    } else if (shouldRunResourceStep(
+      "sync_gateway_plan_actions",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       recordStep(
         "sync_gateway_plan_actions",
         "skipped",
@@ -20962,15 +21081,26 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
         })
       );
     } else {
-      recordStep("sync_gateway_plan_actions", "skipped", new StepTimer().finish());
+      recordStep(
+        "sync_gateway_plan_actions",
+        "skipped",
+        new StepTimer().finish()
+      );
     }
     const publicActionKeys = collectManifestPublicActionKeys(manifest.gateway);
-    if (shouldRunResourceStep("apply_public_routes", resources, effectiveResumeFromStep, completedSteps)) {
+    if (shouldRunResourceStep(
+      "apply_public_routes",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       if (publicActionKeys.length === 0) {
         recordStep(
           "apply_public_routes",
           "skipped",
-          new StepTimer().finish({ reason: "no publicRoutes or publicHealthActionKey in manifest" })
+          new StepTimer().finish({
+            reason: "no publicRoutes or publicHealthActionKey in manifest"
+          })
         );
       } else if (!shouldSyncPlanActions && !(manifest.backend?.deployed === true)) {
         recordStep(
@@ -20987,12 +21117,20 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
       } else {
         await publishProgress?.onStep("Applying public gateway routes");
         const timer = new StepTimer();
-        const actionWait = await waitForGatewayActionsRegistered(client, projectId, {
-          minActionCount: 1,
-          timeoutMs: args.timeoutMs ?? 12e4,
-          pollIntervalMs: args.pollIntervalMs ?? 5e3
-        });
-        const result = await applyGatewayPublicRoutes(client, projectId, publicActionKeys);
+        const actionWait = await waitForGatewayActionsRegistered(
+          client,
+          projectId,
+          {
+            minActionCount: 1,
+            timeoutMs: args.timeoutMs ?? 12e4,
+            pollIntervalMs: args.pollIntervalMs ?? 5e3
+          }
+        );
+        const result = await applyGatewayPublicRoutes(
+          client,
+          projectId,
+          publicActionKeys
+        );
         publicRouteWarnings = result.warnings;
         recordStep(
           "apply_public_routes",
@@ -21008,7 +21146,12 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
     } else {
       recordStep("apply_public_routes", "skipped", new StepTimer().finish());
     }
-    if (shouldRunResourceStep("sync_dev_portal_plan_catalog", resources, effectiveResumeFromStep, completedSteps)) {
+    if (shouldRunResourceStep(
+      "sync_dev_portal_plan_catalog",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       await publishProgress?.onStep("Syncing dev portal plan catalog");
       const timer = new StepTimer();
       const expectedPlanCount = manifest.plans.length;
@@ -21026,29 +21169,52 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
         })
       );
     } else {
-      recordStep("sync_dev_portal_plan_catalog", "skipped", new StepTimer().finish());
+      recordStep(
+        "sync_dev_portal_plan_catalog",
+        "skipped",
+        new StepTimer().finish()
+      );
     }
-    let gatewayUrl = await resolveProjectGatewayUrl(client, projectId);
-    const siteSourceHash = await hashDevPortalSiteSources(args.sourceDirectory, {
-      gatewayUrl
-    });
+    let gatewayUrl = await resolveProjectGatewayUrl(
+      client,
+      projectId
+    );
+    const siteSourceHash = await hashDevPortalSiteSources(
+      args.sourceDirectory,
+      {
+        gatewayUrl
+      }
+    );
     const skipSiteDeploy = !forceSiteRedeploy && Boolean(ledger.siteArtifactHash) && ledger.siteArtifactHash === siteSourceHash;
-    if (shouldRunResourceStep("build_dev_portal_site", resources, effectiveResumeFromStep, completedSteps)) {
+    if (shouldRunResourceStep(
+      "build_dev_portal_site",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       if (skipSiteDeploy) {
         recordStep(
           "build_dev_portal_site",
           "skipped",
-          new StepTimer().finish({ reason: "unchanged site artifact hash", siteSourceHash })
+          new StepTimer().finish({
+            reason: "unchanged site artifact hash",
+            siteSourceHash
+          })
         );
         recordStep(
           "deploy_dev_portal",
           "skipped",
-          new StepTimer().finish({ reason: "unchanged site artifact hash", siteSourceHash })
+          new StepTimer().finish({
+            reason: "unchanged site artifact hash",
+            siteSourceHash
+          })
         );
       } else {
         await publishProgress?.onStep("Validating site config before build");
         const timer = new StepTimer();
-        const preBuildValidation = await validateDevPortalSiteConfig(args.sourceDirectory);
+        const preBuildValidation = await validateDevPortalSiteConfig(
+          args.sourceDirectory
+        );
         if (!preBuildValidation.valid) {
           throw new BootstrapStepError(
             "build_dev_portal_site",
@@ -21069,12 +21235,18 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
           },
           publishProgress
         );
-        const buildResult = parseHandlerResult(
-          buildJson,
-          "build_dev_portal_site"
+        const buildResult = parseHandlerResult(buildJson, "build_dev_portal_site");
+        recordStep(
+          "build_dev_portal_site",
+          "succeeded",
+          timer.finish(buildResult)
         );
-        recordStep("build_dev_portal_site", "succeeded", timer.finish(buildResult));
-        if (shouldRunResourceStep("deploy_dev_portal", resources, effectiveResumeFromStep, completedSteps)) {
+        if (shouldRunResourceStep(
+          "deploy_dev_portal",
+          resources,
+          effectiveResumeFromStep,
+          completedSteps
+        )) {
           await publishProgress?.onStep("Deploying dev portal site");
           const deployTimer = new StepTimer();
           const deployPortalJson = await handleDeployDevPortal(
@@ -21088,10 +21260,19 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
           );
           parseHandlerResult(deployPortalJson, "deploy_dev_portal");
           ledger.siteArtifactHash = siteSourceHash;
-          recordStep("deploy_dev_portal", "succeeded", deployTimer.finish({ siteSourceHash }));
+          recordStep(
+            "deploy_dev_portal",
+            "succeeded",
+            deployTimer.finish({ siteSourceHash })
+          );
         }
       }
-    } else if (shouldRunResourceStep("deploy_dev_portal", resources, effectiveResumeFromStep, completedSteps)) {
+    } else if (shouldRunResourceStep(
+      "deploy_dev_portal",
+      resources,
+      effectiveResumeFromStep,
+      completedSteps
+    )) {
       recordStep("build_dev_portal_site", "skipped", new StepTimer().finish());
       recordStep("deploy_dev_portal", "skipped", new StepTimer().finish());
     }
@@ -21116,12 +21297,7 @@ async function runApplyFromSiteDirectory(client, config2, args, progress) {
       }
     };
     gatewayUrl = refreshedProject.gatewayUrl?.trim().replace(/\/+$/, "") || gatewayUrl || await resolveProjectGatewayUrl(client, projectId);
-    const swaUrl = backendFqdn ? resolveDevPortalUrls(
-      refreshedProject,
-      backendFqdn,
-      [],
-      platformSiteUrl
-    ).swaUrl : null;
+    const swaUrl = backendFqdn ? resolveDevPortalUrls(refreshedProject, backendFqdn, [], platformSiteUrl).swaUrl : null;
     const manualSteps = stripeRequired ? postValidation.manualSteps : {
       oidcRedirectUri: postValidation.manualSteps.oidcRedirectUri
     };
@@ -21209,7 +21385,9 @@ async function handleVerifyDevPortalLive(client, config2, args) {
   }
   projectId = resolveProjectId(projectId, config2);
   if (!backendFqdn) {
-    const backendJson = await handleGetDevPortalBackend(client, config2, { projectId });
+    const backendJson = await handleGetDevPortalBackend(client, config2, {
+      projectId
+    });
     const backendResult = JSON.parse(backendJson);
     backendFqdn = backendResult.backend?.fqdn?.trim();
   }
@@ -21225,7 +21403,9 @@ async function handleVerifyDevPortalLive(client, config2, args) {
     postDeploy: true
   });
   for (let attempt = 1; attempt < retries && !validation.passed; attempt++) {
-    const plansCheck = validation.checks.find((check2) => check2.name === "plans_endpoint");
+    const plansCheck = validation.checks.find(
+      (check2) => check2.name === "plans_endpoint"
+    );
     if (plansCheck?.passed) {
       break;
     }
@@ -21260,7 +21440,58 @@ async function handleVerifyDevPortalLive(client, config2, args) {
 }
 
 // src/cli/apply/human-output.ts
-function formatNonSuccessResultForHuman(parsed) {
+function formatSucceededResultForHuman(parsed) {
+  const lines = [
+    typeof parsed.message === "string" ? parsed.message : "Deploy succeeded."
+  ];
+  const siteUrl = typeof parsed.siteUrl === "string" ? parsed.siteUrl : void 0;
+  if (siteUrl) lines.push(`  Site:    ${siteUrl}`);
+  const gatewayUrl = typeof parsed.gatewayUrl === "string" ? parsed.gatewayUrl : void 0;
+  if (gatewayUrl) lines.push(`  Gateway: ${gatewayUrl}`);
+  const backendFqdn = typeof parsed.backendFqdn === "string" ? parsed.backendFqdn : void 0;
+  if (backendFqdn) lines.push(`  Backend: ${backendFqdn}`);
+  if (Array.isArray(parsed.plans)) {
+    lines.push(`  Plans:   ${parsed.plans.length}`);
+  }
+  const validation = parsed.validation;
+  if (validation && validation.passed === false) {
+    lines.push("", "Live checks did not all pass yet:");
+    for (const warning of validation.warnings ?? []) {
+      lines.push(`  - ${warning}`);
+    }
+    lines.push(
+      "Run `apitogo status` to re-check once the platform finishes setting up."
+    );
+  }
+  const checklist = parsed.postPublishChecklist;
+  if (Array.isArray(checklist) && checklist.length > 0) {
+    lines.push("", "Post-publish checklist:");
+    for (const item of checklist) {
+      if (typeof item.label !== "string") continue;
+      const marker = item.required === false ? "-" : "*";
+      const url2 = typeof item.url === "string" && item.url ? ` (${item.url})` : "";
+      lines.push(`  ${marker} ${item.label}${url2}`);
+    }
+  }
+  if (typeof parsed.userMessage === "string" && parsed.userMessage) {
+    lines.push("", parsed.userMessage);
+  }
+  if (typeof parsed.recoveryHint === "string" && parsed.recoveryHint) {
+    lines.push("", parsed.recoveryHint);
+  }
+  if (Array.isArray(parsed.warnings) && parsed.warnings.length > 0) {
+    lines.push("", "Warnings:");
+    for (const warning of parsed.warnings) {
+      if (typeof warning === "string") lines.push(`  - ${warning}`);
+    }
+  }
+  lines.push(
+    "",
+    "Run `apitogo deploy --json` to see the full report (checks, timings, plan details) as data."
+  );
+  return lines;
+}
+function formatBlockedOrFailedResultForHuman(parsed) {
   const status2 = parsed.status;
   if (status2 === "blocked" && parsed.reason === "platform_plan_unselected") {
     const lines = [
@@ -21328,6 +21559,12 @@ function formatNonSuccessResultForHuman(parsed) {
   }
   return [];
 }
+function formatResultForHuman(parsed) {
+  if (parsed.status === "succeeded") {
+    return formatSucceededResultForHuman(parsed);
+  }
+  return formatBlockedOrFailedResultForHuman(parsed);
+}
 
 // src/cli/apply/platform-plan-prompt.ts
 import { stdin as input3, stdout as output2 } from "node:process";
@@ -21593,7 +21830,7 @@ async function apply(argv) {
   if (argv.json) {
     console.log(result);
   } else {
-    const humanLines = parsed ? formatNonSuccessResultForHuman(parsed) : [];
+    const humanLines = parsed ? formatResultForHuman(parsed) : [];
     if (humanLines.length > 0) {
       for (const line of humanLines) {
         console.log(line);