@pplethai/cli 0.4.2 → 0.5.1

package/dist/bin.js

@@ -12,7 +12,7 @@ ${t.stdout}`.split(`
 `;await g.writeFile(e,`${i}${bt}
 `)}var Te=3e3,Se=3*6e4,Re=10*6e4,Ie=20;async function Rt(t,e){let r=await y(t);if(r.apiBase!==""&&r.apiBase!==t.config.apiBase)throw new s("\u0E41\u0E2D\u0E1B\u0E19\u0E35\u0E49\u0E2D\u0E22\u0E39\u0E48\u0E1A\u0E19 PPLE Platform \u0E04\u0E19\u0E25\u0E30\u0E15\u0E31\u0E27\u0E01\u0E31\u0E1A\u0E17\u0E35\u0E48\u0E04\u0E38\u0E13\u0E40\u0E02\u0E49\u0E32\u0E2A\u0E39\u0E48\u0E23\u0E30\u0E1A\u0E1A\u0E2D\u0E22\u0E39\u0E48",`\u0E41\u0E2D\u0E1B\u0E19\u0E35\u0E49\u0E16\u0E39\u0E01\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E44\u0E27\u0E49\u0E01\u0E31\u0E1A ${r.apiBase}`);let n=await p(t),i=await n.app(r.slug);if(i.status==="retired")throw new s(`"${i.name}" \u0E16\u0E39\u0E01\u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07\u0E41\u0E25\u0E49\u0E27`,"\u0E41\u0E2D\u0E1B\u0E17\u0E35\u0E48\u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07\u0E41\u0E25\u0E49\u0E27\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49 \u0E2B\u0E32\u0E01\u0E15\u0E49\u0E2D\u0E07\u0E01\u0E32\u0E23\u0E2A\u0E32\u0E19\u0E07\u0E32\u0E19\u0E19\u0E35\u0E49\u0E15\u0E48\u0E2D \u0E43\u0E2B\u0E49\u0E2A\u0E23\u0E49\u0E32\u0E07\u0E41\u0E2D\u0E1B\u0E43\u0E2B\u0E21\u0E48\u0E43\u0E19\u0E04\u0E2D\u0E19\u0E42\u0E0B\u0E25");if(i.status!=="ready")throw new s(`"${i.name}" \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E1E\u0E23\u0E49\u0E2D\u0E21\u0E23\u0E31\u0E1A\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07`,i.error?`\u0E01\u0E32\u0E23\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E1E\u0E1A\u0E1B\u0E31\u0E0D\u0E2B\u0E32: ${i.error}`:"\u0E15\u0E23\u0E27\u0E08\u0E2A\u0E2D\u0E1A\u0E44\u0E14\u0E49\u0E17\u0E35\u0E48 https://console.ppleth.ai \u0E41\u0E25\u0E49\u0E27\u0E25\u0E2D\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E43\u0E19\u0E2D\u0E35\u0E01\u0E2A\u0E31\u0E01\u0E04\u0E23\u0E39\u0E48");let o=await n.repoToken(r.slug);if(await U(t,r.dir),await I(t,r.dir))t.out.say("\u0E01\u0E33\u0E25\u0E31\u0E07\u0E1A\u0E31\u0E19\u0E17\u0E36\u0E01\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u2026"),await L(t,r.dir,e.message??`\u0E2D\u0E31\u0E1B\u0E40\u0E14\u0E15 ${i.name}`,o);else if(await Pt(t,r.dir,o)){t.out.say(`\u0E44\u0E21\u0E48\u0E21\u0E35\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E43\u0E2B\u0E21\u0E48 \u2014 ${i.name} \u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27\u0E17\u0E35\u0E48 ${i.url}`);return}t.out.say("\u0E01\u0E33\u0E25\u0E31\u0E07\u0E2A\u0E48\u0E07\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u2026"),await $t(t,r.dir,o);let u=await vt(t,r.dir);t.out.say("\u0E01\u0E33\u0E25\u0E31\u0E07\u0E1A\u0E34\u0E25\u0E14\u0E4C\u0E41\u0E2D\u0E1B\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u2026 (\u0E1B\u0E01\u0E15\u0E34\u0E43\u0E0A\u0E49\u0E40\u0E27\u0E25\u0E32\u0E23\u0E32\u0E27\u0E2B\u0E19\u0E36\u0E48\u0E07\u0E19\u0E32\u0E17\u0E35)");let a=await Le(t,n,r.slug,u);Oe(t,i,a)}async function Le(t,e,r,n){let i=t.now(),o;for(;;){let a=(await e.deploys(r)).find(fe=>fe.commit===n);if(a&&(o=a,a.status!=="building"))return a;if(t.now()-i>=(o?Re:Se))throw new s(o?"\u0E2A\u0E48\u0E07\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E41\u0E25\u0E49\u0E27 \u0E41\u0E15\u0E48\u0E01\u0E32\u0E23\u0E1A\u0E34\u0E25\u0E14\u0E4C\u0E43\u0E0A\u0E49\u0E40\u0E27\u0E25\u0E32\u0E19\u0E32\u0E19\u0E01\u0E27\u0E48\u0E32\u0E17\u0E35\u0E48\u0E04\u0E32\u0E14\u0E44\u0E27\u0E49":"\u0E2A\u0E48\u0E07\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E41\u0E25\u0E49\u0E27 \u0E41\u0E15\u0E48\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E40\u0E23\u0E34\u0E48\u0E21\u0E1A\u0E34\u0E25\u0E14\u0E4C",`\u0E15\u0E34\u0E14\u0E15\u0E32\u0E21\u0E08\u0E19\u0E40\u0E2A\u0E23\u0E47\u0E08\u0E44\u0E14\u0E49\u0E17\u0E35\u0E48 https://console.ppleth.ai/apps/${r}`);await t.sleep(Te)}}var Ne="superseded by a newer deploy";function Oe(t,e,r){if(r.status==="failed"){if(r.error===Ne)throw new s("\u0E21\u0E35\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E21\u0E32\u0E41\u0E17\u0E19\u0E17\u0E35\u0E48\u0E04\u0E23\u0E31\u0E49\u0E07\u0E17\u0E35\u0E48\u0E04\u0E38\u0E13\u0E01\u0E33\u0E25\u0E31\u0E07\u0E23\u0E2D\u0E2D\u0E22\u0E39\u0E48",`\u0E15\u0E34\u0E14\u0E15\u0E32\u0E21\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E19\u0E31\u0E49\u0E19\u0E44\u0E14\u0E49\u0E17\u0E35\u0E48 https://console.ppleth.ai/apps/${e.slug}`);let i=r.log?je(r.log,Ie):r.error;throw i&&(t.out.say(),t.out.say(i),t.out.say()),new s(`\u0E1A\u0E34\u0E25\u0E14\u0E4C ${e.name} \u0E44\u0E21\u0E48\u0E2A\u0E33\u0E40\u0E23\u0E47\u0E08 \u0E2A\u0E34\u0E48\u0E07\u0E17\u0E35\u0E48\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E2D\u0E22\u0E39\u0E48\u0E08\u0E36\u0E07\u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07`,i?"\u0E2A\u0E48\u0E07\u0E02\u0E49\u0E2D\u0E04\u0E27\u0E32\u0E21\u0E14\u0E49\u0E32\u0E19\u0E1A\u0E19\u0E43\u0E2B\u0E49 AI coding agent \u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13 \u2014 \u0E43\u0E19\u0E19\u0E31\u0E49\u0E19\u0E1A\u0E2D\u0E01\u0E27\u0E48\u0E32\u0E15\u0E49\u0E2D\u0E07\u0E41\u0E01\u0E49\u0E2D\u0E30\u0E44\u0E23":`\u0E14\u0E39\u0E23\u0E32\u0E22\u0E25\u0E30\u0E40\u0E2D\u0E35\u0E22\u0E14\u0E44\u0E14\u0E49\u0E17\u0E35\u0E48 https://console.ppleth.ai/apps/${e.slug}`)}let n=r.migrations.applied??[];if(n.length>0&&t.out.say(`\u0E43\u0E0A\u0E49 migration ${n.length} \u0E23\u0E32\u0E22\u0E01\u0E32\u0E23\u0E01\u0E31\u0E1A\u0E10\u0E32\u0E19\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E41\u0E25\u0E49\u0E27`),r.status==="unverified"){t.out.say(`\u0E2D\u0E31\u0E1B\u0E40\u0E14\u0E15 ${e.name} \u0E41\u0E25\u0E49\u0E27 \u0E41\u0E15\u0E48\u0E41\u0E2D\u0E1B\u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E15\u0E2D\u0E1A\u0E2A\u0E19\u0E2D\u0E07`),t.out.say(`\u0E23\u0E2D\u0E2A\u0E31\u0E01\u0E04\u0E23\u0E39\u0E48 \u0E41\u0E25\u0E49\u0E27\u0E40\u0E1B\u0E34\u0E14 ${e.url}`);return}t.out.say(`${e.name} \u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E44\u0E14\u0E49\u0E41\u0E25\u0E49\u0E27\u0E17\u0E35\u0E48 ${e.url}`)}function je(t,e){return t.split(`
 `).slice(-e).join(`
-`).trim()}import Be from"node:fs/promises";import Ue from"node:path";async function It(t){let e=await y(t),n=await(await p(t)).env(e.slug);if(n.length===0){t.out.say("\u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E43\u0E14 \u0E46"),t.out.say("\u0E15\u0E31\u0E27\u0E41\u0E1B\u0E23\u0E17\u0E35\u0E48\u0E04\u0E38\u0E13\u0E15\u0E31\u0E49\u0E07\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B");return}for(let i of n)i.secret?t.out.say(`${i.key}=(secret)`):t.out.say(`${i.key}=${i.value??""}`);t.out.say(""),t.out.say("\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B")}async function Lt(t,e){let r=await y(t),n=await Me(t,e),o=await(await p(t)).setEnv(r.slug,e.key,n,e.secret);t.out.say(`\u0E1A\u0E31\u0E19\u0E17\u0E36\u0E01 ${o.key}${o.secret?" (secret)":""} \u0E41\u0E25\u0E49\u0E27`),t.out.say("\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B")}async function Nt(t,e){let r=await y(t);await(await p(t)).deleteEnv(r.slug,e),t.out.say(`\u0E25\u0E1A ${e} \u0E41\u0E25\u0E49\u0E27`),t.out.say("\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B")}async function Me(t,e){if(e.file!==void 0&&e.value!==void 0)throw new s("\u0E2A\u0E48\u0E07\u0E04\u0E48\u0E32\u0E21\u0E32\u0E40\u0E1B\u0E47\u0E19 argument \u0E2B\u0E23\u0E37\u0E2D\u0E1C\u0E48\u0E32\u0E19 `--file` \u0E2D\u0E22\u0E48\u0E32\u0E07\u0E43\u0E14\u0E2D\u0E22\u0E48\u0E32\u0E07\u0E2B\u0E19\u0E36\u0E48\u0E07 \u0E44\u0E21\u0E48\u0E43\u0E0A\u0E48\u0E17\u0E31\u0E49\u0E07\u0E2A\u0E2D\u0E07\u0E2D\u0E22\u0E48\u0E32\u0E07");if(e.file!==void 0){let r=Ue.resolve(t.cwd,e.file),n=await Be.readFile(r,"utf8").catch(()=>null);if(n===null)throw new s(`\u0E2D\u0E48\u0E32\u0E19\u0E44\u0E1F\u0E25\u0E4C ${e.file} \u0E44\u0E21\u0E48\u0E44\u0E14\u0E49`,"\u0E15\u0E23\u0E27\u0E08\u0E2A\u0E2D\u0E1A\u0E1E\u0E32\u0E18\u0E41\u0E25\u0E49\u0E27\u0E25\u0E2D\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E2D\u0E35\u0E01\u0E04\u0E23\u0E31\u0E49\u0E07");return n}if(e.value!==void 0)return e.value;if(t.interactive)throw new s("`pple env set` \u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E04\u0E48\u0E32","\u0E2A\u0E48\u0E07\u0E04\u0E48\u0E32\u0E21\u0E32\u0E40\u0E1B\u0E47\u0E19 argument \u0E1C\u0E48\u0E32\u0E19 `--file` \u0E2B\u0E23\u0E37\u0E2D pipe \u0E17\u0E32\u0E07 stdin");return t.readStdin()}var Fe=20,Ge=/[\u0E31\u0E34-\u0E3A\u0E47-\u0E4E]/g;function l(t,e){let r=t.replace(Ge,"").length;return t+" ".repeat(Math.max(0,e-r))}var Ke={ready:"\u0E1E\u0E23\u0E49\u0E2D\u0E21\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19",provisioning:"\u0E01\u0E33\u0E25\u0E31\u0E07\u0E08\u0E31\u0E14\u0E40\u0E15\u0E23\u0E35\u0E22\u0E21",failed:"\u0E25\u0E49\u0E21\u0E40\u0E2B\u0E25\u0E27",retired:"\u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07\u0E41\u0E25\u0E49\u0E27"},Ot={draft:"\u0E09\u0E1A\u0E31\u0E1A\u0E23\u0E48\u0E32\u0E07",beta:"\u0E17\u0E14\u0E25\u0E2D\u0E07\u0E43\u0E0A\u0E49",live:"\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48\u0E08\u0E23\u0E34\u0E07"},He={owner:"\u0E40\u0E08\u0E49\u0E32\u0E02\u0E2D\u0E07",collaborator:"\u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32"},jt={live:"\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E2D\u0E22\u0E39\u0E48",building:"\u0E01\u0E33\u0E25\u0E31\u0E07\u0E1A\u0E34\u0E25\u0E14\u0E4C",unverified:"\u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E22\u0E37\u0E19\u0E22\u0E31\u0E19",failed:"\u0E25\u0E49\u0E21\u0E40\u0E2B\u0E25\u0E27"},Ve={pending:"\u0E23\u0E2D\u0E14\u0E33\u0E40\u0E19\u0E34\u0E19\u0E01\u0E32\u0E23",approved:"\u0E2D\u0E19\u0E38\u0E21\u0E31\u0E15\u0E34\u0E41\u0E25\u0E49\u0E27",denied:"\u0E1B\u0E0F\u0E34\u0E40\u0E2A\u0E18\u0E41\u0E25\u0E49\u0E27"};function v(t,e){return t[e]??e}async function Bt(t,e){let r=await Je(t,e),n=await p(t),i=await n.app(r),o=i.role!=="collaborator",[u,a,c,P]=await Promise.all([n.metrics(r),n.deploys(r),n.env(r),o?Ye(n,r):Promise.resolve(null)]);We(t,i),Xe(t,u),ze(t,a),Ze(t,c),P&&(Qe(t,i,P.requests,P.invites),tr(t,P.collaborators),er(t,P.requests)),t.out.say(""),t.out.say("\u0E2B\u0E32\u0E01\u0E15\u0E49\u0E2D\u0E07\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E42\u0E04\u0E27\u0E15\u0E32 \u0E04\u0E48\u0E32 env \u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32 \u0E2B\u0E23\u0E37\u0E2D\u0E01\u0E32\u0E23\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48 \u0E43\u0E0A\u0E49 https://console.ppleth.ai")}async function Je(t,e){if(e)return e;try{return(await y(t)).slug}catch(r){throw r instanceof s&&r.message==="\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E19\u0E35\u0E49\u0E44\u0E21\u0E48\u0E43\u0E0A\u0E48\u0E41\u0E2D\u0E1B PPLE"?new s("\u0E41\u0E2D\u0E1B\u0E44\u0E2B\u0E19? `pple info` \u0E15\u0E49\u0E2D\u0E07\u0E21\u0E35 App Link \u0E2B\u0E23\u0E37\u0E2D slug","\u0E40\u0E02\u0E49\u0E32\u0E44\u0E1B\u0E43\u0E19\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E02\u0E2D\u0E07\u0E41\u0E2D\u0E1B \u0E43\u0E2A\u0E48 slug (`pple info <slug>`) \u0E2B\u0E23\u0E37\u0E2D\u0E40\u0E1B\u0E34\u0E14 https://console.ppleth.ai"):r}}async function Ye(t,e){let[r,n,i]=await Promise.all([t.collaborators(e),t.requests(e),t.invites(e)]);return{collaborators:r,requests:n,invites:i}}function We(t,e){t.out.say(e.name),t.out.say(`  ${l("slug",18)}${e.slug}`),t.out.say(`  ${l("URL",18)}${e.url}`),e.customAddress&&t.out.say(`  ${l("\u0E17\u0E35\u0E48\u0E2D\u0E22\u0E39\u0E48\u0E17\u0E35\u0E48\u0E01\u0E33\u0E2B\u0E19\u0E14\u0E40\u0E2D\u0E07",18)}${e.customAddress}`),t.out.say(`  ${l("\u0E2A\u0E16\u0E32\u0E19\u0E30",18)}${v(Ke,e.status)}`),t.out.say(`  ${l("\u0E01\u0E32\u0E23\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48",18)}${v(Ot,e.tier??"draft")}`),e.role&&t.out.say(`  ${l("\u0E1A\u0E17\u0E1A\u0E32\u0E17\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13",18)}${v(He,e.role)}`),e.deploy&&t.out.say(`  ${l("\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E1B\u0E31\u0E08\u0E08\u0E38\u0E1A\u0E31\u0E19",18)}${v(jt,e.deploy.status)}`+(e.deploy.message?` \u2014 ${e.deploy.message}`:"")),e.error&&t.out.say(`  ${l("\u0E02\u0E49\u0E2D\u0E1C\u0E34\u0E14\u0E1E\u0E25\u0E32\u0E14",18)}${e.error}`)}function Xe(t,e){t.out.say(""),t.out.say("\u0E01\u0E32\u0E23\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E41\u0E25\u0E30\u0E42\u0E04\u0E27\u0E15\u0E32\u0E17\u0E23\u0E31\u0E1E\u0E22\u0E32\u0E01\u0E23"),t.out.say(`  ${l("CPU \u0E15\u0E48\u0E2D request",20)}${e.limits.cpuMs} ms`),t.out.say(`  ${l("\u0E01\u0E32\u0E23\u0E41\u0E08\u0E49\u0E07\u0E40\u0E15\u0E37\u0E2D\u0E19",20)}${_(e.usage.notificationsSent)}`+(e.usage.notificationsSent===null?"  (\u0E14\u0E39\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E43\u0E19\u0E02\u0E13\u0E30\u0E19\u0E35\u0E49)":` \u0E08\u0E32\u0E01\u0E42\u0E04\u0E27\u0E15\u0E32 ${_(e.limits.notificationsPerDay)} \u0E04\u0E23\u0E31\u0E49\u0E07\u0E27\u0E31\u0E19\u0E19\u0E35\u0E49`)),t.out.say(`  ${l("\u0E02\u0E49\u0E2D\u0E1C\u0E34\u0E14\u0E1E\u0E25\u0E32\u0E14 (24 \u0E0A\u0E21.)",20)}${_(e.usage.errors)}`+(e.usage.errors===null?"  (\u0E14\u0E39\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E43\u0E19\u0E02\u0E13\u0E30\u0E19\u0E35\u0E49)":e.usage.errors===0?"  (\u0E44\u0E21\u0E48\u0E21\u0E35\u0E43\u0E19 24 \u0E0A\u0E31\u0E48\u0E27\u0E42\u0E21\u0E07\u0E17\u0E35\u0E48\u0E1C\u0E48\u0E32\u0E19\u0E21\u0E32)":e.usage.requests===null?"  (\u0E04\u0E33\u0E02\u0E2D\u0E17\u0E35\u0E48\u0E25\u0E49\u0E21\u0E40\u0E2B\u0E25\u0E27\u0E43\u0E19 24 \u0E0A\u0E31\u0E48\u0E27\u0E42\u0E21\u0E07\u0E17\u0E35\u0E48\u0E1C\u0E48\u0E32\u0E19\u0E21\u0E32)":` \u0E08\u0E32\u0E01\u0E17\u0E31\u0E49\u0E07\u0E2B\u0E21\u0E14 ${_(e.usage.requests)} \u0E04\u0E33\u0E02\u0E2D`)),t.out.say(`  ${l("\u0E1C\u0E39\u0E49\u0E43\u0E0A\u0E49\u0E41\u0E2D\u0E1B",20)}${_(e.usage.appUsers)}`+(e.usage.appUsers===null?"  (\u0E14\u0E39\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E43\u0E19\u0E02\u0E13\u0E30\u0E19\u0E35\u0E49)":""))}function _(t){return t===null?"\u2014":String(t)}function ze(t,e){if(t.out.say(""),t.out.say("\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E25\u0E48\u0E32\u0E2A\u0E38\u0E14"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35");return}for(let r of e.slice(0,10)){let n=r.commit.slice(0,7),i=r.message?` \u2014 ${r.message}`:"",o=v(jt,r.status);t.out.say(`  ${l(o,13)} ${n}${i}`)}}function Ze(t,e){if(t.out.say(""),t.out.say("\u0E04\u0E48\u0E32 env"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E43\u0E14 \u0E46");return}for(let r of e)r.secret?t.out.say(`  ${r.key}=(secret)`):t.out.say(`  ${r.key}=${r.value??""}`)}function Qe(t,e,r,n){t.out.say(""),t.out.say("\u0E01\u0E32\u0E23\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48"),t.out.say(`  ${l("\u0E23\u0E30\u0E14\u0E31\u0E1A",18)}${v(Ot,e.tier??"draft")}`),e.customAddress&&t.out.say(`  ${l("\u0E17\u0E35\u0E48\u0E2D\u0E22\u0E39\u0E48\u0E17\u0E35\u0E48\u0E01\u0E33\u0E2B\u0E19\u0E14\u0E40\u0E2D\u0E07",18)}${e.customAddress}`);let i=r.find(o=>o.type==="publish"&&o.status==="pending");if(i&&t.out.say(`  ${l("\u0E04\u0E33\u0E02\u0E2D\u0E17\u0E35\u0E48\u0E23\u0E2D\u0E2D\u0E22\u0E39\u0E48",18)}${Ut(i)}`),e.tier==="beta"){let o=n.filter(u=>u.status!=="DECLINED").length;t.out.say(`  ${l("\u0E04\u0E33\u0E40\u0E0A\u0E34\u0E0D\u0E17\u0E14\u0E25\u0E2D\u0E07\u0E43\u0E0A\u0E49",18)}\u0E43\u0E0A\u0E49\u0E44\u0E1B ${o} \u0E08\u0E32\u0E01 ${Fe} \u0E17\u0E35\u0E48\u0E19\u0E31\u0E48\u0E07`)}}function tr(t,e){if(t.out.say(""),t.out.say("\u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35");return}for(let r of e){let n=r.maskedName??"\u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32",i=r.phoneNumber?` (${r.phoneNumber})`:"";t.out.say(`  ${n}${i}`)}}function er(t,e){if(t.out.say(""),t.out.say("\u0E1B\u0E23\u0E30\u0E27\u0E31\u0E15\u0E34\u0E04\u0E33\u0E02\u0E2D"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35");return}for(let r of e.slice(0,10)){let n=r.reason?` \u2014 ${r.reason}`:"",i=v(Ve,r.status);t.out.say(`  ${l(i,13)} ${Ut(r)}${n}`)}}function Ut(t){if(t.type==="publish"){let r=Array.isArray(t.payload.roles)?t.payload.roles:[],n=typeof t.payload.customAddress=="string"?` \xB7 \u0E17\u0E35\u0E48 ${t.payload.customAddress}`:"";return`\u0E04\u0E33\u0E02\u0E2D\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48 \xB7 \u0E02\u0E36\u0E49\u0E19\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48\u0E08\u0E23\u0E34\u0E07 \xB7 ${r.length===0?"\u0E17\u0E38\u0E01\u0E04\u0E19":r.join(", ")}${n}`}if(t.type==="retire")return"\u0E04\u0E33\u0E02\u0E2D\u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07 \xB7 \u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07\u0E41\u0E2D\u0E1B";let e=[];return typeof t.payload.cpuMs=="number"&&e.push(`CPU ${t.payload.cpuMs} ms/request`),typeof t.payload.notificationsPerDay=="number"&&e.push(`\u0E01\u0E32\u0E23\u0E41\u0E08\u0E49\u0E07\u0E40\u0E15\u0E37\u0E2D\u0E19 ${t.payload.notificationsPerDay} \u0E04\u0E23\u0E31\u0E49\u0E07/\u0E27\u0E31\u0E19`),`\u0E04\u0E33\u0E02\u0E2D\u0E40\u0E1E\u0E34\u0E48\u0E21\u0E42\u0E04\u0E27\u0E15\u0E32 \xB7 \u0E02\u0E2D\u0E40\u0E1E\u0E34\u0E48\u0E21 ${e.length>0?e.join(" \u0E41\u0E25\u0E30 "):"\u0E42\u0E04\u0E27\u0E15\u0E32"}`}import Kt from"node:fs/promises";import b from"node:path";import E from"node:fs/promises";import Mt from"node:path";var rr=new Set([".git","node_modules","dist",".wrangler",".dev.vars",".env"]),nr=new Map([["gitignore",".gitignore"]]),ir="pple-app",or=new Set(["package.json","package-lock.json","wrangler.jsonc"]);async function qt(t,e,r){if(await E.readdir(t).catch(()=>null)===null)throw new s("\u0E44\u0E21\u0E48\u0E1E\u0E1A\u0E40\u0E17\u0E21\u0E40\u0E1E\u0E25\u0E15\u0E41\u0E2D\u0E1B PPLE \u0E43\u0E19\u0E01\u0E32\u0E23\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07 CLI \u0E0A\u0E38\u0E14\u0E19\u0E35\u0E49",`\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07 CLI \u0E43\u0E2B\u0E21\u0E48 (\`${m}\`) \u0E41\u0E25\u0E49\u0E27\u0E25\u0E2D\u0E07\u0E2D\u0E35\u0E01\u0E04\u0E23\u0E31\u0E49\u0E07`);let i=[];return await Ft({from:t,to:e,prefix:"",slug:r,written:i}),i.sort()}async function Ft(t){for(let e of await E.readdir(t.from,{withFileTypes:!0})){if(rr.has(e.name))continue;let r=nr.get(e.name)??e.name,n=Mt.join(t.from,e.name),i=Mt.join(t.to,r),o=t.prefix===""?r:`${t.prefix}/${r}`;if(e.isDirectory()){await E.mkdir(i,{recursive:!0}),await Ft({...t,from:n,to:i,prefix:o});continue}if(or.has(r)){let u=await E.readFile(n,"utf8");await E.writeFile(i,sr(u,ir,t.slug))}else await E.copyFile(n,i);t.written.push(o)}}function sr(t,e,r){return t.split(e).join(r)}var ar=3e3,ur=5*6e4;async function Ht(t,e){let r=await p(t),n=e.slug?await r.app(e.slug):await pr(t,r,await cr(t,e.name));if(!n.repo)throw new s(`"${n.name}" \u0E22\u0E31\u0E07\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E44\u0E21\u0E48\u0E40\u0E2A\u0E23\u0E47\u0E08`,`\u0E23\u0E2D\u0E2A\u0E31\u0E01\u0E04\u0E23\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27\u0E23\u0E31\u0E19 \`pple init ${n.slug}\` \u0E2B\u0E32\u0E01\u0E22\u0E31\u0E07\u0E40\u0E1B\u0E47\u0E19\u0E41\u0E1A\u0E1A\u0E19\u0E35\u0E49 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E15\u0E34\u0E14\u0E15\u0E48\u0E2D\u0E17\u0E35\u0E21\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21`);n.status==="provisioning"&&t.out.say("\u0E41\u0E2D\u0E1B\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E22\u0E31\u0E07\u0E2D\u0E22\u0E39\u0E48\u0E23\u0E30\u0E2B\u0E27\u0E48\u0E32\u0E07\u0E01\u0E32\u0E23\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u2026");let i=b.resolve(t.cwd,e.dir??n.slug);await mr(i);let o=await r.repoToken(n.slug);if(t.out.say(`\u0E01\u0E33\u0E25\u0E31\u0E07\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32 "${n.name}" \u0E43\u0E19 ${b.basename(i)}/\u2026`),await ht(t,fr(t,n.repo),i,o),await gr(i))throw new s(`"${n.name}" \u0E21\u0E35\u0E42\u0E04\u0E49\u0E14\u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27 \u0E08\u0E36\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35\u0E2D\u0E30\u0E44\u0E23\u0E15\u0E49\u0E2D\u0E07\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32`,"\u0E17\u0E33\u0E07\u0E32\u0E19\u0E43\u0E19\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E19\u0E31\u0E49\u0E19\u0E41\u0E25\u0E49\u0E27\u0E23\u0E31\u0E19 `pple deploy` \u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E19\u0E33\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E02\u0E36\u0E49\u0E19\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E08\u0E23\u0E34\u0E07");await qt(t.templateDir,i,n.slug),await Dt(i,{slug:n.slug,apiBase:t.config.apiBase,url:n.url}),await U(t,i),await I(t,i)&&await L(t,i,"\u0E40\u0E23\u0E34\u0E48\u0E21\u0E08\u0E32\u0E01\u0E40\u0E17\u0E21\u0E40\u0E1E\u0E25\u0E15\u0E21\u0E32\u0E15\u0E23\u0E10\u0E32\u0E19\u0E02\u0E2D\u0E07 PPLE",o);let u=await lr(t,i);dr(t,n,i,u)}async function lr(t,e){t.out.say("\u0E01\u0E33\u0E25\u0E31\u0E07\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E41\u0E1E\u0E47\u0E01\u0E40\u0E01\u0E08\u0E41\u0E25\u0E30\u0E40\u0E15\u0E23\u0E35\u0E22\u0E21\u0E10\u0E32\u0E19\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E1A\u0E19\u0E40\u0E04\u0E23\u0E37\u0E48\u0E2D\u0E07\u2026");let r=[["npm",["install"]],["npm",["run","db:migrate:local"]]];for(let[n,i]of r){let o=await t.run(n,i,{cwd:e}).catch(()=>null);if(!o||o.code!==0)return!1}return!0}async function cr(t,e){if(await V(t))throw new s("\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E19\u0E35\u0E49\u0E40\u0E0A\u0E37\u0E48\u0E2D\u0E21\u0E01\u0E31\u0E1A\u0E41\u0E2D\u0E1B PPLE \u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27","\u0E23\u0E31\u0E19 `pple info` \u0E2B\u0E23\u0E37\u0E2D `pple deploy` \u0E17\u0E35\u0E48\u0E19\u0E35\u0E48 \u0E2B\u0E23\u0E37\u0E2D\u0E22\u0E49\u0E32\u0E22\u0E44\u0E1B\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E2D\u0E37\u0E48\u0E19\u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E2A\u0E23\u0E49\u0E32\u0E07\u0E41\u0E2D\u0E1B\u0E43\u0E2B\u0E21\u0E48");if(e!==void 0){let n=e.trim();if(!n)throw new s("`--name` \u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B",'\u0E15\u0E31\u0E27\u0E2D\u0E22\u0E48\u0E32\u0E07: `pple init --name "\u0E25\u0E07\u0E17\u0E30\u0E40\u0E1A\u0E35\u0E22\u0E19\u0E2D\u0E32\u0E2A\u0E32\u0E2A\u0E21\u0E31\u0E04\u0E23"`');return n}if(!t.interactive)throw new s("`pple init` \u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B",'\u0E43\u0E2A\u0E48 `--name "\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13"` \u0E2B\u0E23\u0E37\u0E2D\u0E23\u0E31\u0E19\u0E43\u0E19\u0E40\u0E17\u0E2D\u0E23\u0E4C\u0E21\u0E34\u0E19\u0E31\u0E25\u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E43\u0E2B\u0E49\u0E23\u0E30\u0E1A\u0E1A\u0E16\u0E32\u0E21');let r=(await t.ask("\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B:")).trim();if(!r)throw new s("\u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B\u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E2A\u0E23\u0E49\u0E32\u0E07\u0E41\u0E2D\u0E1B",'\u0E25\u0E2D\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E2D\u0E35\u0E01\u0E04\u0E23\u0E31\u0E49\u0E07 \u0E2B\u0E23\u0E37\u0E2D\u0E43\u0E2A\u0E48 `--name "\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13"`');return r}async function pr(t,e,r){t.out.say(`\u0E01\u0E33\u0E25\u0E31\u0E07\u0E2A\u0E23\u0E49\u0E32\u0E07 "${r}" \u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u2026`);let n=await e.createApp(r);if(Gt(n))return n;t.out.say("\u0E01\u0E33\u0E25\u0E31\u0E07\u0E23\u0E2D\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E43\u0E2B\u0E49\u0E40\u0E2A\u0E23\u0E47\u0E08\u2026");let i=t.now();for(;;){if(n.status==="failed")throw new s(`\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32 "${n.name}" \u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u0E44\u0E21\u0E48\u0E2A\u0E33\u0E40\u0E23\u0E47\u0E08`,n.error?`${n.error} slug \u0E02\u0E2D\u0E07\u0E41\u0E2D\u0E1B\u0E04\u0E37\u0E2D ${n.slug} \u2014 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E15\u0E34\u0E14\u0E15\u0E48\u0E2D\u0E17\u0E35\u0E21\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21 \u0E2B\u0E23\u0E37\u0E2D\u0E25\u0E2D\u0E07 \`pple init ${n.slug}\` \u0E20\u0E32\u0E22\u0E2B\u0E25\u0E31\u0E07`:`slug \u0E02\u0E2D\u0E07\u0E41\u0E2D\u0E1B\u0E04\u0E37\u0E2D ${n.slug} \u2014 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E15\u0E34\u0E14\u0E15\u0E48\u0E2D\u0E17\u0E35\u0E21\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21 \u0E2B\u0E23\u0E37\u0E2D\u0E25\u0E2D\u0E07 \`pple init ${n.slug}\` \u0E20\u0E32\u0E22\u0E2B\u0E25\u0E31\u0E07`);if(t.now()-i>=ur)throw new s(`"${n.name}" \u0E22\u0E31\u0E07\u0E2D\u0E22\u0E39\u0E48\u0E23\u0E30\u0E2B\u0E27\u0E48\u0E32\u0E07\u0E01\u0E32\u0E23\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21`,`\u0E25\u0E2D\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E14\u0E49\u0E27\u0E22 \`pple init ${n.slug}\` \u0E43\u0E19\u0E2D\u0E35\u0E01\u0E2A\u0E31\u0E01\u0E04\u0E23\u0E39\u0E48`);if(await t.sleep(ar),n=await e.app(n.slug),Gt(n))return n}}function Gt(t){return t.status==="ready"&&t.repo!==null}function fr(t,e){return`${t.config.repoBase}/${e}.git`}async function mr(t){let e=await Kt.readdir(t).catch(()=>null);if(e!==null&&e.length>0)throw new s(`\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C ${b.basename(t)}/ \u0E21\u0E35\u0E44\u0E1F\u0E25\u0E4C\u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27`,"\u0E23\u0E31\u0E19 `pple init` \u0E17\u0E35\u0E48\u0E2D\u0E37\u0E48\u0E19 \u0E2B\u0E23\u0E37\u0E2D\u0E43\u0E2A\u0E48 `--dir <folder>` \u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E40\u0E25\u0E37\u0E2D\u0E01\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E2D\u0E37\u0E48\u0E19")}async function gr(t){return Kt.access(b.join(t,"package.json")).then(()=>!0).catch(()=>!1)}function dr(t,e,r,n){let i=b.basename(r);t.out.say(),t.out.say(`"${e.name}" \u0E1E\u0E23\u0E49\u0E2D\u0E21\u0E43\u0E2B\u0E49\u0E17\u0E33\u0E07\u0E32\u0E19\u0E41\u0E25\u0E49\u0E27\u0E43\u0E19 ${i}/`),t.out.say(`\u0E41\u0E2D\u0E1B\u0E08\u0E30\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E44\u0E14\u0E49\u0E17\u0E35\u0E48 ${e.url}`),t.out.say(),t.out.say("\u0E02\u0E31\u0E49\u0E19\u0E15\u0E48\u0E2D\u0E44\u0E1B:"),t.out.say(`  cd ${i}`),n||(t.out.say("  npm install"),t.out.say("  npm run db:migrate:local")),t.out.say("  npm run dev        # \u0E14\u0E39\u0E1C\u0E25\u0E1A\u0E19\u0E40\u0E04\u0E23\u0E37\u0E48\u0E2D\u0E07\u0E19\u0E35\u0E49"),t.out.say("  pple deploy        # \u0E19\u0E33\u0E02\u0E36\u0E49\u0E19\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E08\u0E23\u0E34\u0E07")}import W from"node:fs/promises";import X from"node:path";var yr=1440*60*1e3,Vt="update-check.json",wr="config.json",hr=new Set(["upgrade","help","--help","-h"]);function Jt(t){return t.length>0&&!hr.has(t[0])}function z(t,e){t.out.say(`\u0E21\u0E35 pple \u0E40\u0E27\u0E2D\u0E23\u0E4C\u0E0A\u0E31\u0E19\u0E43\u0E2B\u0E21\u0E48 (${e}) \u0E04\u0E38\u0E13\u0E43\u0E0A\u0E49\u0E40\u0E27\u0E2D\u0E23\u0E4C\u0E0A\u0E31\u0E19 ${t.version}`)}function Z(t){t.out.say("pple \u0E0A\u0E38\u0E14\u0E19\u0E35\u0E49\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E1C\u0E48\u0E32\u0E19 npm \u0E01\u0E32\u0E23\u0E2D\u0E31\u0E1B\u0E40\u0E14\u0E15\u0E17\u0E35\u0E48\u0E19\u0E35\u0E48\u0E2D\u0E32\u0E08\u0E17\u0E33\u0E43\u0E2B\u0E49\u0E04\u0E38\u0E13"),t.out.say("\u0E21\u0E35 pple \u0E2A\u0E2D\u0E07\u0E40\u0E27\u0E2D\u0E23\u0E4C\u0E0A\u0E31\u0E19 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E2D\u0E31\u0E1B\u0E40\u0E14\u0E15\u0E14\u0E49\u0E27\u0E22\u0E27\u0E34\u0E18\u0E35\u0E40\u0E14\u0E34\u0E21\u0E17\u0E35\u0E48\u0E04\u0E38\u0E13\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E44\u0E27\u0E49"),t.out.say(`\u0E2B\u0E23\u0E37\u0E2D\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E14\u0E49\u0E27\u0E22 npm:
+`).trim()}import Be from"node:fs/promises";import Ue from"node:path";async function It(t){let e=await y(t),n=await(await p(t)).env(e.slug);if(n.length===0){t.out.say("\u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E43\u0E14 \u0E46"),t.out.say("\u0E15\u0E31\u0E27\u0E41\u0E1B\u0E23\u0E17\u0E35\u0E48\u0E04\u0E38\u0E13\u0E15\u0E31\u0E49\u0E07\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B");return}for(let i of n)i.secret?t.out.say(`${i.key}=(secret)`):t.out.say(`${i.key}=${i.value??""}`);t.out.say(""),t.out.say("\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B")}async function Lt(t,e){let r=await y(t),n=await Me(t,e),o=await(await p(t)).setEnv(r.slug,e.key,n,e.secret);t.out.say(`\u0E1A\u0E31\u0E19\u0E17\u0E36\u0E01 ${o.key}${o.secret?" (secret)":""} \u0E41\u0E25\u0E49\u0E27`),t.out.say("\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B")}async function Nt(t,e){let r=await y(t);await(await p(t)).deleteEnv(r.slug,e),t.out.say(`\u0E25\u0E1A ${e} \u0E41\u0E25\u0E49\u0E27`),t.out.say("\u0E08\u0E30\u0E21\u0E35\u0E1C\u0E25\u0E43\u0E19\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E04\u0E23\u0E31\u0E49\u0E07\u0E16\u0E31\u0E14\u0E44\u0E1B")}async function Me(t,e){if(e.file!==void 0&&e.value!==void 0)throw new s("\u0E2A\u0E48\u0E07\u0E04\u0E48\u0E32\u0E21\u0E32\u0E40\u0E1B\u0E47\u0E19 argument \u0E2B\u0E23\u0E37\u0E2D\u0E1C\u0E48\u0E32\u0E19 `--file` \u0E2D\u0E22\u0E48\u0E32\u0E07\u0E43\u0E14\u0E2D\u0E22\u0E48\u0E32\u0E07\u0E2B\u0E19\u0E36\u0E48\u0E07 \u0E44\u0E21\u0E48\u0E43\u0E0A\u0E48\u0E17\u0E31\u0E49\u0E07\u0E2A\u0E2D\u0E07\u0E2D\u0E22\u0E48\u0E32\u0E07");if(e.file!==void 0){let r=Ue.resolve(t.cwd,e.file),n=await Be.readFile(r,"utf8").catch(()=>null);if(n===null)throw new s(`\u0E2D\u0E48\u0E32\u0E19\u0E44\u0E1F\u0E25\u0E4C ${e.file} \u0E44\u0E21\u0E48\u0E44\u0E14\u0E49`,"\u0E15\u0E23\u0E27\u0E08\u0E2A\u0E2D\u0E1A\u0E1E\u0E32\u0E18\u0E41\u0E25\u0E49\u0E27\u0E25\u0E2D\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E2D\u0E35\u0E01\u0E04\u0E23\u0E31\u0E49\u0E07");return n}if(e.value!==void 0)return e.value;if(t.interactive)throw new s("`pple env set` \u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E04\u0E48\u0E32","\u0E2A\u0E48\u0E07\u0E04\u0E48\u0E32\u0E21\u0E32\u0E40\u0E1B\u0E47\u0E19 argument \u0E1C\u0E48\u0E32\u0E19 `--file` \u0E2B\u0E23\u0E37\u0E2D pipe \u0E17\u0E32\u0E07 stdin");return t.readStdin()}var Fe=20,Ge=/[\u0E31\u0E34-\u0E3A\u0E47-\u0E4E]/g;function l(t,e){let r=t.replace(Ge,"").length;return t+" ".repeat(Math.max(0,e-r))}var Ke={ready:"\u0E1E\u0E23\u0E49\u0E2D\u0E21\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19",provisioning:"\u0E01\u0E33\u0E25\u0E31\u0E07\u0E08\u0E31\u0E14\u0E40\u0E15\u0E23\u0E35\u0E22\u0E21",failed:"\u0E25\u0E49\u0E21\u0E40\u0E2B\u0E25\u0E27",retired:"\u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07\u0E41\u0E25\u0E49\u0E27"},Ot={draft:"\u0E09\u0E1A\u0E31\u0E1A\u0E23\u0E48\u0E32\u0E07",beta:"\u0E17\u0E14\u0E25\u0E2D\u0E07\u0E43\u0E0A\u0E49",live:"\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48\u0E08\u0E23\u0E34\u0E07"},He={owner:"\u0E40\u0E08\u0E49\u0E32\u0E02\u0E2D\u0E07",collaborator:"\u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32"},jt={live:"\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E2D\u0E22\u0E39\u0E48",building:"\u0E01\u0E33\u0E25\u0E31\u0E07\u0E1A\u0E34\u0E25\u0E14\u0E4C",unverified:"\u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E22\u0E37\u0E19\u0E22\u0E31\u0E19",failed:"\u0E25\u0E49\u0E21\u0E40\u0E2B\u0E25\u0E27"},Ve={pending:"\u0E23\u0E2D\u0E14\u0E33\u0E40\u0E19\u0E34\u0E19\u0E01\u0E32\u0E23",approved:"\u0E2D\u0E19\u0E38\u0E21\u0E31\u0E15\u0E34\u0E41\u0E25\u0E49\u0E27",denied:"\u0E1B\u0E0F\u0E34\u0E40\u0E2A\u0E18\u0E41\u0E25\u0E49\u0E27"};function v(t,e){return t[e]??e}async function Bt(t,e){let r=await Je(t,e),n=await p(t),i=await n.app(r),o=i.role!=="collaborator",[u,a,c,P]=await Promise.all([n.metrics(r),n.deploys(r),n.env(r),o?Ye(n,r):Promise.resolve(null)]);We(t,i),Xe(t,u),ze(t,a),Ze(t,c),P&&(Qe(t,i,P.requests,P.invites),tr(t,P.collaborators),er(t,P.requests)),t.out.say(""),t.out.say("\u0E2B\u0E32\u0E01\u0E15\u0E49\u0E2D\u0E07\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E42\u0E04\u0E27\u0E15\u0E32 \u0E04\u0E48\u0E32 env \u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32 \u0E2B\u0E23\u0E37\u0E2D\u0E01\u0E32\u0E23\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48 \u0E43\u0E0A\u0E49 https://console.ppleth.ai")}async function Je(t,e){if(e)return e;try{return(await y(t)).slug}catch(r){throw r instanceof s&&r.message==="\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E19\u0E35\u0E49\u0E44\u0E21\u0E48\u0E43\u0E0A\u0E48\u0E41\u0E2D\u0E1B PPLE"?new s("\u0E41\u0E2D\u0E1B\u0E44\u0E2B\u0E19? `pple info` \u0E15\u0E49\u0E2D\u0E07\u0E21\u0E35 App Link \u0E2B\u0E23\u0E37\u0E2D slug","\u0E40\u0E02\u0E49\u0E32\u0E44\u0E1B\u0E43\u0E19\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E02\u0E2D\u0E07\u0E41\u0E2D\u0E1B \u0E43\u0E2A\u0E48 slug (`pple info <slug>`) \u0E2B\u0E23\u0E37\u0E2D\u0E40\u0E1B\u0E34\u0E14 https://console.ppleth.ai"):r}}async function Ye(t,e){let[r,n,i]=await Promise.all([t.collaborators(e),t.requests(e),t.invites(e)]);return{collaborators:r,requests:n,invites:i}}function We(t,e){t.out.say(e.name),t.out.say(`  ${l("slug",18)}${e.slug}`),t.out.say(`  ${l("URL",18)}${e.url}`),e.customAddress&&t.out.say(`  ${l("\u0E17\u0E35\u0E48\u0E2D\u0E22\u0E39\u0E48\u0E17\u0E35\u0E48\u0E01\u0E33\u0E2B\u0E19\u0E14\u0E40\u0E2D\u0E07",18)}${e.customAddress}`),t.out.say(`  ${l("\u0E2A\u0E16\u0E32\u0E19\u0E30",18)}${v(Ke,e.status)}`),t.out.say(`  ${l("\u0E01\u0E32\u0E23\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48",18)}${v(Ot,e.tier??"draft")}`),e.role&&t.out.say(`  ${l("\u0E1A\u0E17\u0E1A\u0E32\u0E17\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13",18)}${v(He,e.role)}`),e.deploy&&t.out.say(`  ${l("\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E1B\u0E31\u0E08\u0E08\u0E38\u0E1A\u0E31\u0E19",18)}${v(jt,e.deploy.status)}`+(e.deploy.message?` \u2014 ${e.deploy.message}`:"")),e.error&&t.out.say(`  ${l("\u0E02\u0E49\u0E2D\u0E1C\u0E34\u0E14\u0E1E\u0E25\u0E32\u0E14",18)}${e.error}`)}function Xe(t,e){t.out.say(""),t.out.say("\u0E01\u0E32\u0E23\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E41\u0E25\u0E30\u0E42\u0E04\u0E27\u0E15\u0E32\u0E17\u0E23\u0E31\u0E1E\u0E22\u0E32\u0E01\u0E23"),t.out.say(`  ${l("CPU \u0E15\u0E48\u0E2D request",20)}${e.limits.cpuMs} ms`),t.out.say(`  ${l("\u0E01\u0E32\u0E23\u0E41\u0E08\u0E49\u0E07\u0E40\u0E15\u0E37\u0E2D\u0E19\u0E16\u0E36\u0E07\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A",20)}${_(e.usage.notificationsSent)}`+(e.usage.notificationsSent===null?"  (\u0E14\u0E39\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E43\u0E19\u0E02\u0E13\u0E30\u0E19\u0E35\u0E49)":` \u0E23\u0E32\u0E22 \u0E08\u0E32\u0E01\u0E42\u0E04\u0E27\u0E15\u0E32 ${_(e.limits.notificationsPerDay)} \u0E23\u0E32\u0E22/\u0E27\u0E31\u0E19`)),t.out.say(`  ${l("\u0E02\u0E49\u0E2D\u0E1C\u0E34\u0E14\u0E1E\u0E25\u0E32\u0E14 (24 \u0E0A\u0E21.)",20)}${_(e.usage.errors)}`+(e.usage.errors===null?"  (\u0E14\u0E39\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E43\u0E19\u0E02\u0E13\u0E30\u0E19\u0E35\u0E49)":e.usage.errors===0?"  (\u0E44\u0E21\u0E48\u0E21\u0E35\u0E43\u0E19 24 \u0E0A\u0E31\u0E48\u0E27\u0E42\u0E21\u0E07\u0E17\u0E35\u0E48\u0E1C\u0E48\u0E32\u0E19\u0E21\u0E32)":e.usage.requests===null?"  (\u0E04\u0E33\u0E02\u0E2D\u0E17\u0E35\u0E48\u0E25\u0E49\u0E21\u0E40\u0E2B\u0E25\u0E27\u0E43\u0E19 24 \u0E0A\u0E31\u0E48\u0E27\u0E42\u0E21\u0E07\u0E17\u0E35\u0E48\u0E1C\u0E48\u0E32\u0E19\u0E21\u0E32)":` \u0E08\u0E32\u0E01\u0E17\u0E31\u0E49\u0E07\u0E2B\u0E21\u0E14 ${_(e.usage.requests)} \u0E04\u0E33\u0E02\u0E2D`)),t.out.say(`  ${l("\u0E1C\u0E39\u0E49\u0E43\u0E0A\u0E49\u0E41\u0E2D\u0E1B",20)}${_(e.usage.appUsers)}`+(e.usage.appUsers===null?"  (\u0E14\u0E39\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E43\u0E19\u0E02\u0E13\u0E30\u0E19\u0E35\u0E49)":""))}function _(t){return t===null?"\u2014":String(t)}function ze(t,e){if(t.out.say(""),t.out.say("\u0E01\u0E32\u0E23\u0E14\u0E35\u0E1E\u0E25\u0E2D\u0E22\u0E25\u0E48\u0E32\u0E2A\u0E38\u0E14"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35");return}for(let r of e.slice(0,10)){let n=r.commit.slice(0,7),i=r.message?` \u2014 ${r.message}`:"",o=v(jt,r.status);t.out.say(`  ${l(o,13)} ${n}${i}`)}}function Ze(t,e){if(t.out.say(""),t.out.say("\u0E04\u0E48\u0E32 env"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E43\u0E14 \u0E46");return}for(let r of e)r.secret?t.out.say(`  ${r.key}=(secret)`):t.out.say(`  ${r.key}=${r.value??""}`)}function Qe(t,e,r,n){t.out.say(""),t.out.say("\u0E01\u0E32\u0E23\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48"),t.out.say(`  ${l("\u0E23\u0E30\u0E14\u0E31\u0E1A",18)}${v(Ot,e.tier??"draft")}`),e.customAddress&&t.out.say(`  ${l("\u0E17\u0E35\u0E48\u0E2D\u0E22\u0E39\u0E48\u0E17\u0E35\u0E48\u0E01\u0E33\u0E2B\u0E19\u0E14\u0E40\u0E2D\u0E07",18)}${e.customAddress}`);let i=r.find(o=>o.type==="publish"&&o.status==="pending");if(i&&t.out.say(`  ${l("\u0E04\u0E33\u0E02\u0E2D\u0E17\u0E35\u0E48\u0E23\u0E2D\u0E2D\u0E22\u0E39\u0E48",18)}${Ut(i)}`),e.tier==="beta"){let o=n.filter(u=>u.status!=="DECLINED").length;t.out.say(`  ${l("\u0E04\u0E33\u0E40\u0E0A\u0E34\u0E0D\u0E17\u0E14\u0E25\u0E2D\u0E07\u0E43\u0E0A\u0E49",18)}\u0E43\u0E0A\u0E49\u0E44\u0E1B ${o} \u0E08\u0E32\u0E01 ${Fe} \u0E17\u0E35\u0E48\u0E19\u0E31\u0E48\u0E07`)}}function tr(t,e){if(t.out.say(""),t.out.say("\u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35");return}for(let r of e){let n=r.maskedName??"\u0E1C\u0E39\u0E49\u0E23\u0E48\u0E27\u0E21\u0E1E\u0E31\u0E12\u0E19\u0E32",i=r.phoneNumber?` (${r.phoneNumber})`:"";t.out.say(`  ${n}${i}`)}}function er(t,e){if(t.out.say(""),t.out.say("\u0E1B\u0E23\u0E30\u0E27\u0E31\u0E15\u0E34\u0E04\u0E33\u0E02\u0E2D"),e.length===0){t.out.say("  \u0E22\u0E31\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35");return}for(let r of e.slice(0,10)){let n=r.reason?` \u2014 ${r.reason}`:"",i=v(Ve,r.status);t.out.say(`  ${l(i,13)} ${Ut(r)}${n}`)}}function Ut(t){if(t.type==="publish"){let r=Array.isArray(t.payload.roles)?t.payload.roles:[],n=typeof t.payload.customAddress=="string"?` \xB7 \u0E17\u0E35\u0E48 ${t.payload.customAddress}`:"";return`\u0E04\u0E33\u0E02\u0E2D\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48 \xB7 \u0E02\u0E36\u0E49\u0E19\u0E40\u0E1C\u0E22\u0E41\u0E1E\u0E23\u0E48\u0E08\u0E23\u0E34\u0E07 \xB7 ${r.length===0?"\u0E17\u0E38\u0E01\u0E04\u0E19":r.join(", ")}${n}`}if(t.type==="retire")return"\u0E04\u0E33\u0E02\u0E2D\u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07 \xB7 \u0E1B\u0E25\u0E14\u0E23\u0E30\u0E27\u0E32\u0E07\u0E41\u0E2D\u0E1B";let e=[];return typeof t.payload.cpuMs=="number"&&e.push(`CPU ${t.payload.cpuMs} ms/request`),typeof t.payload.notificationsPerDay=="number"&&e.push(`\u0E01\u0E32\u0E23\u0E41\u0E08\u0E49\u0E07\u0E40\u0E15\u0E37\u0E2D\u0E19\u0E16\u0E36\u0E07\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A ${t.payload.notificationsPerDay} \u0E23\u0E32\u0E22/\u0E27\u0E31\u0E19`),`\u0E04\u0E33\u0E02\u0E2D\u0E40\u0E1E\u0E34\u0E48\u0E21\u0E42\u0E04\u0E27\u0E15\u0E32 \xB7 \u0E02\u0E2D\u0E40\u0E1E\u0E34\u0E48\u0E21 ${e.length>0?e.join(" \u0E41\u0E25\u0E30 "):"\u0E42\u0E04\u0E27\u0E15\u0E32"}`}import Kt from"node:fs/promises";import b from"node:path";import E from"node:fs/promises";import Mt from"node:path";var rr=new Set([".git","node_modules","dist",".wrangler",".dev.vars",".env"]),nr=new Map([["gitignore",".gitignore"]]),ir="pple-app",or=new Set(["package.json","package-lock.json","wrangler.jsonc"]);async function qt(t,e,r){if(await E.readdir(t).catch(()=>null)===null)throw new s("\u0E44\u0E21\u0E48\u0E1E\u0E1A\u0E40\u0E17\u0E21\u0E40\u0E1E\u0E25\u0E15\u0E41\u0E2D\u0E1B PPLE \u0E43\u0E19\u0E01\u0E32\u0E23\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07 CLI \u0E0A\u0E38\u0E14\u0E19\u0E35\u0E49",`\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07 CLI \u0E43\u0E2B\u0E21\u0E48 (\`${m}\`) \u0E41\u0E25\u0E49\u0E27\u0E25\u0E2D\u0E07\u0E2D\u0E35\u0E01\u0E04\u0E23\u0E31\u0E49\u0E07`);let i=[];return await Ft({from:t,to:e,prefix:"",slug:r,written:i}),i.sort()}async function Ft(t){for(let e of await E.readdir(t.from,{withFileTypes:!0})){if(rr.has(e.name))continue;let r=nr.get(e.name)??e.name,n=Mt.join(t.from,e.name),i=Mt.join(t.to,r),o=t.prefix===""?r:`${t.prefix}/${r}`;if(e.isDirectory()){await E.mkdir(i,{recursive:!0}),await Ft({...t,from:n,to:i,prefix:o});continue}if(or.has(r)){let u=await E.readFile(n,"utf8");await E.writeFile(i,sr(u,ir,t.slug))}else await E.copyFile(n,i);t.written.push(o)}}function sr(t,e,r){return t.split(e).join(r)}var ar=3e3,ur=5*6e4;async function Ht(t,e){let r=await p(t),n=e.slug?await r.app(e.slug):await pr(t,r,await cr(t,e.name));if(!n.repo)throw new s(`"${n.name}" \u0E22\u0E31\u0E07\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E44\u0E21\u0E48\u0E40\u0E2A\u0E23\u0E47\u0E08`,`\u0E23\u0E2D\u0E2A\u0E31\u0E01\u0E04\u0E23\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27\u0E23\u0E31\u0E19 \`pple init ${n.slug}\` \u0E2B\u0E32\u0E01\u0E22\u0E31\u0E07\u0E40\u0E1B\u0E47\u0E19\u0E41\u0E1A\u0E1A\u0E19\u0E35\u0E49 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E15\u0E34\u0E14\u0E15\u0E48\u0E2D\u0E17\u0E35\u0E21\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21`);n.status==="provisioning"&&t.out.say("\u0E41\u0E2D\u0E1B\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13\u0E22\u0E31\u0E07\u0E2D\u0E22\u0E39\u0E48\u0E23\u0E30\u0E2B\u0E27\u0E48\u0E32\u0E07\u0E01\u0E32\u0E23\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u2026");let i=b.resolve(t.cwd,e.dir??n.slug);await mr(i);let o=await r.repoToken(n.slug);if(t.out.say(`\u0E01\u0E33\u0E25\u0E31\u0E07\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32 "${n.name}" \u0E43\u0E19 ${b.basename(i)}/\u2026`),await ht(t,fr(t,n.repo),i,o),await gr(i))throw new s(`"${n.name}" \u0E21\u0E35\u0E42\u0E04\u0E49\u0E14\u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27 \u0E08\u0E36\u0E07\u0E44\u0E21\u0E48\u0E21\u0E35\u0E2D\u0E30\u0E44\u0E23\u0E15\u0E49\u0E2D\u0E07\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32`,"\u0E17\u0E33\u0E07\u0E32\u0E19\u0E43\u0E19\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E19\u0E31\u0E49\u0E19\u0E41\u0E25\u0E49\u0E27\u0E23\u0E31\u0E19 `pple deploy` \u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E19\u0E33\u0E01\u0E32\u0E23\u0E40\u0E1B\u0E25\u0E35\u0E48\u0E22\u0E19\u0E41\u0E1B\u0E25\u0E07\u0E02\u0E36\u0E49\u0E19\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E08\u0E23\u0E34\u0E07");await qt(t.templateDir,i,n.slug),await Dt(i,{slug:n.slug,apiBase:t.config.apiBase,url:n.url}),await U(t,i),await I(t,i)&&await L(t,i,"\u0E40\u0E23\u0E34\u0E48\u0E21\u0E08\u0E32\u0E01\u0E40\u0E17\u0E21\u0E40\u0E1E\u0E25\u0E15\u0E21\u0E32\u0E15\u0E23\u0E10\u0E32\u0E19\u0E02\u0E2D\u0E07 PPLE",o);let u=await lr(t,i);dr(t,n,i,u)}async function lr(t,e){t.out.say("\u0E01\u0E33\u0E25\u0E31\u0E07\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E41\u0E1E\u0E47\u0E01\u0E40\u0E01\u0E08\u0E41\u0E25\u0E30\u0E40\u0E15\u0E23\u0E35\u0E22\u0E21\u0E10\u0E32\u0E19\u0E02\u0E49\u0E2D\u0E21\u0E39\u0E25\u0E1A\u0E19\u0E40\u0E04\u0E23\u0E37\u0E48\u0E2D\u0E07\u2026");let r=[["npm",["install"]],["npm",["run","db:migrate:local"]]];for(let[n,i]of r){let o=await t.run(n,i,{cwd:e}).catch(()=>null);if(!o||o.code!==0)return!1}return!0}async function cr(t,e){if(await V(t))throw new s("\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E19\u0E35\u0E49\u0E40\u0E0A\u0E37\u0E48\u0E2D\u0E21\u0E01\u0E31\u0E1A\u0E41\u0E2D\u0E1B PPLE \u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27","\u0E23\u0E31\u0E19 `pple info` \u0E2B\u0E23\u0E37\u0E2D `pple deploy` \u0E17\u0E35\u0E48\u0E19\u0E35\u0E48 \u0E2B\u0E23\u0E37\u0E2D\u0E22\u0E49\u0E32\u0E22\u0E44\u0E1B\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E2D\u0E37\u0E48\u0E19\u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E2A\u0E23\u0E49\u0E32\u0E07\u0E41\u0E2D\u0E1B\u0E43\u0E2B\u0E21\u0E48");if(e!==void 0){let n=e.trim();if(!n)throw new s("`--name` \u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B",'\u0E15\u0E31\u0E27\u0E2D\u0E22\u0E48\u0E32\u0E07: `pple init --name "\u0E25\u0E07\u0E17\u0E30\u0E40\u0E1A\u0E35\u0E22\u0E19\u0E2D\u0E32\u0E2A\u0E32\u0E2A\u0E21\u0E31\u0E04\u0E23"`');return n}if(!t.interactive)throw new s("`pple init` \u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B",'\u0E43\u0E2A\u0E48 `--name "\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13"` \u0E2B\u0E23\u0E37\u0E2D\u0E23\u0E31\u0E19\u0E43\u0E19\u0E40\u0E17\u0E2D\u0E23\u0E4C\u0E21\u0E34\u0E19\u0E31\u0E25\u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E43\u0E2B\u0E49\u0E23\u0E30\u0E1A\u0E1A\u0E16\u0E32\u0E21');let r=(await t.ask("\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B:")).trim();if(!r)throw new s("\u0E15\u0E49\u0E2D\u0E07\u0E23\u0E30\u0E1A\u0E38\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B\u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E2A\u0E23\u0E49\u0E32\u0E07\u0E41\u0E2D\u0E1B",'\u0E25\u0E2D\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E2D\u0E35\u0E01\u0E04\u0E23\u0E31\u0E49\u0E07 \u0E2B\u0E23\u0E37\u0E2D\u0E43\u0E2A\u0E48 `--name "\u0E0A\u0E37\u0E48\u0E2D\u0E41\u0E2D\u0E1B\u0E02\u0E2D\u0E07\u0E04\u0E38\u0E13"`');return r}async function pr(t,e,r){t.out.say(`\u0E01\u0E33\u0E25\u0E31\u0E07\u0E2A\u0E23\u0E49\u0E32\u0E07 "${r}" \u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u2026`);let n=await e.createApp(r);if(Gt(n))return n;t.out.say("\u0E01\u0E33\u0E25\u0E31\u0E07\u0E23\u0E2D\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E43\u0E2B\u0E49\u0E40\u0E2A\u0E23\u0E47\u0E08\u2026");let i=t.now();for(;;){if(n.status==="failed")throw new s(`\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32 "${n.name}" \u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21\u0E44\u0E21\u0E48\u0E2A\u0E33\u0E40\u0E23\u0E47\u0E08`,n.error?`${n.error} slug \u0E02\u0E2D\u0E07\u0E41\u0E2D\u0E1B\u0E04\u0E37\u0E2D ${n.slug} \u2014 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E15\u0E34\u0E14\u0E15\u0E48\u0E2D\u0E17\u0E35\u0E21\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21 \u0E2B\u0E23\u0E37\u0E2D\u0E25\u0E2D\u0E07 \`pple init ${n.slug}\` \u0E20\u0E32\u0E22\u0E2B\u0E25\u0E31\u0E07`:`slug \u0E02\u0E2D\u0E07\u0E41\u0E2D\u0E1B\u0E04\u0E37\u0E2D ${n.slug} \u2014 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E15\u0E34\u0E14\u0E15\u0E48\u0E2D\u0E17\u0E35\u0E21\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21 \u0E2B\u0E23\u0E37\u0E2D\u0E25\u0E2D\u0E07 \`pple init ${n.slug}\` \u0E20\u0E32\u0E22\u0E2B\u0E25\u0E31\u0E07`);if(t.now()-i>=ur)throw new s(`"${n.name}" \u0E22\u0E31\u0E07\u0E2D\u0E22\u0E39\u0E48\u0E23\u0E30\u0E2B\u0E27\u0E48\u0E32\u0E07\u0E01\u0E32\u0E23\u0E15\u0E31\u0E49\u0E07\u0E04\u0E48\u0E32\u0E1A\u0E19\u0E41\u0E1E\u0E25\u0E15\u0E1F\u0E2D\u0E23\u0E4C\u0E21`,`\u0E25\u0E2D\u0E07\u0E43\u0E2B\u0E21\u0E48\u0E14\u0E49\u0E27\u0E22 \`pple init ${n.slug}\` \u0E43\u0E19\u0E2D\u0E35\u0E01\u0E2A\u0E31\u0E01\u0E04\u0E23\u0E39\u0E48`);if(await t.sleep(ar),n=await e.app(n.slug),Gt(n))return n}}function Gt(t){return t.status==="ready"&&t.repo!==null}function fr(t,e){return`${t.config.repoBase}/${e}.git`}async function mr(t){let e=await Kt.readdir(t).catch(()=>null);if(e!==null&&e.length>0)throw new s(`\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C ${b.basename(t)}/ \u0E21\u0E35\u0E44\u0E1F\u0E25\u0E4C\u0E2D\u0E22\u0E39\u0E48\u0E41\u0E25\u0E49\u0E27`,"\u0E23\u0E31\u0E19 `pple init` \u0E17\u0E35\u0E48\u0E2D\u0E37\u0E48\u0E19 \u0E2B\u0E23\u0E37\u0E2D\u0E43\u0E2A\u0E48 `--dir <folder>` \u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E40\u0E25\u0E37\u0E2D\u0E01\u0E42\u0E1F\u0E25\u0E40\u0E14\u0E2D\u0E23\u0E4C\u0E2D\u0E37\u0E48\u0E19")}async function gr(t){return Kt.access(b.join(t,"package.json")).then(()=>!0).catch(()=>!1)}function dr(t,e,r,n){let i=b.basename(r);t.out.say(),t.out.say(`"${e.name}" \u0E1E\u0E23\u0E49\u0E2D\u0E21\u0E43\u0E2B\u0E49\u0E17\u0E33\u0E07\u0E32\u0E19\u0E41\u0E25\u0E49\u0E27\u0E43\u0E19 ${i}/`),t.out.say(`\u0E41\u0E2D\u0E1B\u0E08\u0E30\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E44\u0E14\u0E49\u0E17\u0E35\u0E48 ${e.url}`),t.out.say(),t.out.say("\u0E02\u0E31\u0E49\u0E19\u0E15\u0E48\u0E2D\u0E44\u0E1B:"),t.out.say(`  cd ${i}`),n||(t.out.say("  npm install"),t.out.say("  npm run db:migrate:local")),t.out.say("  npm run dev        # \u0E14\u0E39\u0E1C\u0E25\u0E1A\u0E19\u0E40\u0E04\u0E23\u0E37\u0E48\u0E2D\u0E07\u0E19\u0E35\u0E49"),t.out.say("  pple deploy        # \u0E19\u0E33\u0E02\u0E36\u0E49\u0E19\u0E43\u0E0A\u0E49\u0E07\u0E32\u0E19\u0E08\u0E23\u0E34\u0E07")}import W from"node:fs/promises";import X from"node:path";var yr=1440*60*1e3,Vt="update-check.json",wr="config.json",hr=new Set(["upgrade","help","--help","-h"]);function Jt(t){return t.length>0&&!hr.has(t[0])}function z(t,e){t.out.say(`\u0E21\u0E35 pple \u0E40\u0E27\u0E2D\u0E23\u0E4C\u0E0A\u0E31\u0E19\u0E43\u0E2B\u0E21\u0E48 (${e}) \u0E04\u0E38\u0E13\u0E43\u0E0A\u0E49\u0E40\u0E27\u0E2D\u0E23\u0E4C\u0E0A\u0E31\u0E19 ${t.version}`)}function Z(t){t.out.say("pple \u0E0A\u0E38\u0E14\u0E19\u0E35\u0E49\u0E44\u0E21\u0E48\u0E44\u0E14\u0E49\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E1C\u0E48\u0E32\u0E19 npm \u0E01\u0E32\u0E23\u0E2D\u0E31\u0E1B\u0E40\u0E14\u0E15\u0E17\u0E35\u0E48\u0E19\u0E35\u0E48\u0E2D\u0E32\u0E08\u0E17\u0E33\u0E43\u0E2B\u0E49\u0E04\u0E38\u0E13"),t.out.say("\u0E21\u0E35 pple \u0E2A\u0E2D\u0E07\u0E40\u0E27\u0E2D\u0E23\u0E4C\u0E0A\u0E31\u0E19 \u0E01\u0E23\u0E38\u0E13\u0E32\u0E2D\u0E31\u0E1B\u0E40\u0E14\u0E15\u0E14\u0E49\u0E27\u0E22\u0E27\u0E34\u0E18\u0E35\u0E40\u0E14\u0E34\u0E21\u0E17\u0E35\u0E48\u0E04\u0E38\u0E13\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E44\u0E27\u0E49"),t.out.say(`\u0E2B\u0E23\u0E37\u0E2D\u0E15\u0E34\u0E14\u0E15\u0E31\u0E49\u0E07\u0E14\u0E49\u0E27\u0E22 npm:
 
   ${m}`)}function Q(t){return`${_t(t)}
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pplethai/cli",
-  "version": "0.4.2",
+  "version": "0.5.1",
   "type": "module",
   "repository": {
     "type": "git",

package/skills/pple-platform/SKILL.md

@@ -25,8 +25,9 @@ into three pillars on party-managed infrastructure:
    `pple auth login` (device flow).
 2. **Mini-app integration** — apps run inside PPLE Today's WebView using
    `@pplethai/pple-today-miniapp-sdk` (and the same SDK in a plain browser),
-   and send audience-bound notifications (title/body, optional path-only
-   `linkPath` into this app) through the platform-provisioned notify helper.
+   and send audience-bound notifications — a **Broadcast** to everyone this
+   app can reach, or a **Direct** send to people it names — through the
+   platform-provisioned notify helper.
 3. **PPLE Design System** — `@pplethai/components`, a shadcn/ui-based React
    library with party branding. Docs: https://components.pplethai.org/
 
@@ -44,7 +45,7 @@ central-team core service — uniformity is deliberate (ADR-0002):
 | Files        | R2 |
 | Validation   | Zod schemas in `shared/` |
 | Auth         | PPLE ID (OIDC `userinfo`); local `DEV_AUTH` bypass only |
-| Notifications| Audience-bound via `src/notify.ts` (`title`/`body`, optional `linkPath`) |
+| Notifications| `src/notify.ts` — every send states its audience (`all` or `direct`) |
 | Deploy       | `pple deploy` (platform build → tenant Worker); never personal cloud |
 
 **Not the Builder App path** (do not resurrect these for new apps): Express +
@@ -99,10 +100,12 @@ Read only the file(s) relevant to the task at hand:
 - **Never mention git, branches, remotes, GitHub, Cloudflare accounts, or
   personal deploy credentials** in the happy path. Talk about the app's
   code and `pple init` / `pple deploy` only.
-- **Notifications are audience-bound** (`title` / `body`, optional
-  `linkPath` into this app only). Never send phone numbers, user ids, or
-  free-form / cross-app destinations; the platform resolves the audience and
-  joins `linkPath` to this app's entry. Wire shape lives in `src/notify.ts`.
+- **Notifications are audience-bound.** Every send states its audience:
+  Broadcast `{ kind: "all" }` or Direct `{ kind: "direct", recipients }`
+  (by `sub` or `phone`). Naming narrows the reachable set and never widens
+  it; `not_reachable` is one collapsed status — do not decompose it.
+  Self-links only (`linkPath` into this app). Shape in `shared/api.ts`;
+  details in [mini-app.md](references/mini-app.md).
 - **Stack is Workers + D1 + R2.** Bind D1 parameters; never concatenate SQL.
   One Worker, same origin — no CORS between SPA and API.
 - **`DEV_AUTH` must be unset in production.** Its absence is what forces real

package/skills/pple-platform/evals/evals.json

@@ -9,8 +9,8 @@
     },
     {
       "id": 2,
-      "prompt": "Add a feature that sends a push notification to our users when a note is saved. Use the PPLE notification service the platform wired up.",
-      "expected_output": "Use src/notify.ts / NotificationSchema with title+body and optional path-only linkPath (self-link into this app); POST to NOTIFY_API_BASE/notifications with NOTIFY_API_KEY; no phone numbers, user ids, free-form cross-app links, or PHONE_NUMBER audience; no legacy /external/notifications/send with raw numbers",
+      "prompt": "When a reimbursement is approved, send a push notification to that one person. We already have their PPLE ID sub. Use the PPLE notification service the platform wired up.",
+      "expected_output": "Use src/notify.ts sendNotification with required audience { kind: \"direct\", recipients: [{ sub }] } (or { phone }); title+body; optional path-only linkPath self-link into this app; naming narrows the reachable set and never widens it; not_reachable is one collapsed status — do not decompose it; never omit audience; never reimplement the wire POST; never free-form / cross-app destinations; never legacy /external/notifications/send with PHONE_NUMBER; Broadcast to everyone this app can reach is { kind: \"all\" }",
       "files": []
     },
     {

package/skills/pple-platform/references/mini-app.md

@@ -1,4 +1,4 @@
-# Mini-app integration & audience-bound notifications
+# Mini-app integration & notifications
 
 ## Running inside PPLE Today
 
@@ -14,54 +14,87 @@ Builder Apps ship as **mini-apps**: web apps opened in PPLE Today's WebView.
   the Console; Builders do not register them manually with the Today team.
 - Design mobile-first; test at ~375 px width.
 
-## Push notifications (audience-bound)
+## Push notifications (Broadcast and Direct)
 
-Builder Apps send push notifications through the helper in `src/notify.ts`.
-The privacy model is fixed by the platform:
+Builder Apps send push notifications through `sendNotification` in
+`src/notify.ts`. Every send **states its audience** — the two kinds follow
+from that:
 
-- Your code sends a `title` and `body`, plus an optional path-only self-link
-  (`linkPath`).
-- **Never** send phone numbers, user ids, or an audience list.
-- The platform resolves recipients as this app's App Users ∩ its current
-  publication-tier audience, and enforces the per-app rate limit.
-- `NOTIFY_API_BASE` and `NOTIFY_API_KEY` are provisioned bindings. The key
-  *is* the address — no app id and no recipients on the wire.
+- **Broadcast** (การแจ้งเตือนทุกคน) — `{ kind: "all" }`, to everyone this app
+  can reach: its App Users ∩ its current publication-tier audience.
+- **Direct** (การแจ้งเตือนรายบุคคล) — `{ kind: "direct", recipients }`, to
+  the people this app names, by PPLE ID `sub` or mobile number.
+
+The audience is a **required discriminated union**. Omitting it is a compile
+error, not a silent broadcast — that is the dangerous bug this shape exists
+to prevent. Do not default a missing audience to `all`.
+
+Naming **narrows** the reachable set and never widens it. A named person who
+has never opened this app receives nothing and comes back `not_reachable`.
+That status is **one collapsed reason** covering "no PPLE ID at all", "never
+opened this app", "outside the tier", and "opted out". Do not decompose it,
+surface it as a guess, or infer *why*. Use it to prune stale names — a send
+debits the reach it requested (every named recipient, or the Broadcast
+audience size), so leftover entries cost quota until removed.
+
+`NOTIFY_API_BASE` and `NOTIFY_API_KEY` are provisioned bindings. The key *is*
+the address — no app id on the wire. Recipients belong only on a Direct send,
+on this same route.
 
 ### App-facing shape (`shared/api.ts`)
 
+Call `sendNotification` with a `Notification` from `shared/api.ts`. Do not
+invent a parallel payload or POST the wire shape yourself.
+
 ```ts
-import { NotificationSchema } from "../shared/api";
-// { title: string, body: string, linkPath?: string }
-// linkPath must start with a single `/` (e.g. "/check-in")
+import { sendNotification } from "./notify";
+
+await sendNotification(env, {
+  audience: {
+    kind: "direct",
+    recipients: [{ sub: "…" }, { phone: "0812345678" }],
+  },
+  // or: { kind: "all" },
+  title: "Reimbursement approved",
+  body: "Your claim was approved",
+  linkPath: "/claims/123", // optional path-only self-link
+});
 ```
 
+A recipient entry names **exactly one** of `sub` or `phone`. Cap is 200 per
+call — over it is a refusal, never a silent truncation, so chunk a long list
+deliberately. Optional `idempotencyKey` makes a retry after a timeout safe.
+
 Optional `linkPath` is a deep link into **this** app only. The platform joins
 it to the app's known entry and rejects absolute URLs, schemes, `..`, or
 anything that would leave this app. Free-form destinations that could address
 another mini app (e.g. `content.link`) are not available on this route.
-Omit `linkPath` for content-only sends — tapping then opens the notification
-centre, as before.
+Omit `linkPath` when the tap should open the notification centre.
+
+A Direct send returns each named entry as `delivered` or `not_reachable`,
+echoed as the caller named it. A Broadcast names no one, so there is nothing
+to enumerate.
 
 ### Wire shape (`src/notify.ts`)
 
-Keep the platform vocabulary translation in `notify.ts` only:
+Keep the platform vocabulary translation in `notify.ts` only. Your routes
+call `sendNotification`; they do not POST this themselves:
 
 ```ts
-await fetch(`${env.NOTIFY_API_BASE}/notifications`, {
-  method: "POST",
-  headers: {
-    authorization: `Bearer ${env.NOTIFY_API_KEY}`,
-    "content-type": "application/json",
-  },
-  body: JSON.stringify({
-    content: { header: input.title, message: input.body },
-    ...(input.linkPath !== undefined ? { linkPath: input.linkPath } : {}),
-  }),
-});
+body: JSON.stringify({
+  audience: input.audience,
+  content: { header: input.title, message: input.body },
+  ...(input.linkPath !== undefined ? { linkPath: input.linkPath } : {}),
+  ...(input.idempotencyKey !== undefined
+    ? { idempotencyKey: input.idempotencyKey }
+    : {}),
+})
 ```
 
 - Missing config → fail loud (`notifications_not_configured` / 503), not silent.
-- HTTP 429 → `rate_limited`.
+- HTTP 429 → `quota_exceeded` (**nothing was delivered**). The helper also
+  maps the other refusals (`invalid_request`, `invalid_recipients`,
+  `idempotency_key_conflict`, `not_permitted`).
 - Prefer fire-and-forget from route handlers with error logging — do not fail
   the user's primary action solely because notify is slow.
 
@@ -69,7 +102,10 @@ await fetch(`${env.NOTIFY_API_BASE}/notifications`, {
 
 Do **not** call the legacy central-team endpoint that accepts a
 `PHONE_NUMBER` audience (`/external/notifications/send` with raw numbers).
-That path is not the Builder App contract. If you see older docs or
-`mini-app-example` code addressing phones, ignore them for new apps.
+Naming a phone on `sendNotification` is the Direct contract; that unbound
+path is not. If you see older docs or `mini-app-example` code addressing
+phones on `/external/notifications/send`, ignore them for new apps.
 Do **not** invent free-form link / absolute URL fields — self-links use
 `linkPath` only.
+Do **not** treat `not_reachable` as "not a party member" versus "not a user
+of this app". That distinction is the one fact this status exists to hide.

package/skills/pple-platform/references/project-scaffold.md

@@ -18,7 +18,7 @@ my-app/                     # folder name matches the App Slug
 │   ├── auth.ts             # PPLE ID userinfo + DEV_AUTH bypass
 │   ├── db.ts               # D1 helpers
 │   ├── files.ts            # R2 helpers
-│   ├── notify.ts           # audience-bound notifications
+│   ├── notify.ts           # Broadcast and Direct notifications
 │   └── env.ts              # Env bindings type
 ├── web/                    # React SPA (Vite)
 │   ├── main.tsx            # bootstrap → App | error

package/templates/golden-path/CLAUDE.md

@@ -57,9 +57,13 @@ Where the token comes from:
 - **Validate input with the Zod schemas** in `shared/api.ts`.
 - **Always bind D1 query parameters** (`?` + `.bind(...)`) — never build SQL
   with string concatenation.
-- **Notifications are content only** (title/body), plus an optional path-only
-  `linkPath` into this app. Never send phone numbers or user ids; the platform
-  resolves the audience. See `src/notify.ts`.
+- **Every notification states its audience** — `{ kind: "all" }` (Broadcast,
+  การแจ้งเตือนทุกคน) or `{ kind: "direct", recipients }` (Direct,
+  การแจ้งเตือนรายบุคคล), naming people by PPLE ID `sub` or mobile number.
+  Required, so omitting it is a compile error — never work around that by
+  defaulting to `all`. Links stay path-only (`linkPath`) into this app. The
+  rules that come with naming are in `shared/api.ts`; read them before
+  changing anything here.
 - **Mobile-first.** The app runs in a phone-sized WebView. Use the design
   system's components and the layout classes in `web/app.css`.
 - **Add a DB table** by writing a new `migrations/000N_*.sql` (never edit an

package/templates/golden-path/README.md

@@ -17,7 +17,7 @@ what you want to your AI coding agent and edit the demo cards. See
 | **Identity** | `src/auth.ts` + `web/pple.ts` | validates PPLE ID tokens; browser PPLE ID login; local mock personas (`src/dev-personas.ts`) |
 | **Database** | D1, `src/db.ts` + `migrations/` | the Notes card |
 | **Files** | R2, `src/files.ts` | the Files card |
-| **Notifications** | `src/notify.ts` | the Notify card (audience-bound; optional `linkPath`) |
+| **Notifications** | `src/notify.ts` | the Notify card (Broadcast or Direct; optional `linkPath`) |
 | **Design system** | `@pplethai/components` | every screen |
 
 One Worker serves the API under `/api/*` and the React app (`web/`) for
@@ -61,6 +61,9 @@ you, so a freshly created app is ready to `npm run dev` straight away.)
 - **Add an API route:** add it under `/api` in `src/index.ts`.
 - **Change the UI:** edit `web/App.tsx` using `@pplethai/components`.
 - **Send notifications:** the platform provisions `NOTIFY_API_KEY`; the helper
-  in `src/notify.ts` already speaks the audience-bound contract.
+  in `src/notify.ts` speaks the shipped contract. Every send states its
+  audience — everyone this app can reach, or the people it names by PPLE ID
+  `sub` or mobile number. Naming only ever narrows that set: someone who has
+  never opened this app receives nothing.
 
 The demo cards (Notes / Files / Notify) are examples — replace them.

package/templates/golden-path/shared/api.ts

@@ -68,9 +68,62 @@ export const UploadedFileSchema = z.object({
 export type UploadedFile = z.infer<typeof UploadedFileSchema>;
 
 /**
- * A notification to send to this app's App Users. Content only — never phone
- * numbers or user ids. The platform resolves the audience server-side (see
- * src/notify.ts and docs/integration/today-sso-changes.md §6).
+ * One person a Direct Notification names: a PPLE ID `sub` **or** a mobile
+ * number, exactly one per entry. Both are accepted because a Builder's source
+ * of truth may be its own traffic (every request carries `actor.sub` and
+ * `actor.mobile`) or a list it holds by number.
+ *
+ * Strict objects, so an entry naming both is rejected here rather than at the
+ * platform. TypeScript alone cannot catch that one — `{ sub, phone }` is
+ * assignable to the union — so this runtime check is the one that matters.
+ */
+export const NotificationRecipientSchema = z.union([
+  z.strictObject({ sub: z.string().trim().min(1) }),
+  z.strictObject({ phone: z.string().trim().min(1) }),
+]);
+export type NotificationRecipient = z.infer<typeof NotificationRecipientSchema>;
+
+/**
+ * The platform's per-call cap. Over it is a refusal, never a silent
+ * truncation, so chunk a long list deliberately rather than discovering half
+ * your people were dropped.
+ */
+export const MAX_DIRECT_RECIPIENTS = 200;
+
+/**
+ * Who a send is for — **required**, and a discriminated union on purpose.
+ *
+ * - `all` — a **Broadcast Notification** (การแจ้งเตือนทุกคน) to everyone this
+ *   app can reach: its App Users ∩ its current publication-tier audience.
+ * - `direct` — a **Direct Notification** (การแจ้งเตือนรายบุคคล) to the people
+ *   it names.
+ *
+ * Naming **narrows** that reachable set and never widens it: a named person
+ * who has not opened this app receives nothing and comes back
+ * `not_reachable`. The union is required because the dangerous bug here is
+ * omission — a dropped field silently turning a message meant for one person
+ * into a message to every App User. Leaving the audience out is a compile
+ * error here and a refusal at the platform; it is never a broadcast.
+ */
+export const NotificationAudienceSchema = z.discriminatedUnion("kind", [
+  z.object({ kind: z.literal("all") }),
+  z.object({
+    kind: z.literal("direct"),
+    recipients: z
+      .array(NotificationRecipientSchema)
+      .min(1)
+      .max(MAX_DIRECT_RECIPIENTS),
+  }),
+]);
+export type NotificationAudience = z.infer<typeof NotificationAudienceSchema>;
+
+/**
+ * A notification to send. The privacy model in one line: this app can reach
+ * the people who already use it — and now say which of them it means — and no
+ * one else (see src/notify.ts and docs/integration/direct-notifications.md).
+ *
+ * Content is uniform across every recipient of a call; a personalized message
+ * is one call per person.
  *
  * Optional `linkPath` is a path-only deep link into *this* app (must start
  * with `/`). The platform joins it to this app's known entry and rejects
@@ -78,6 +131,7 @@ export type UploadedFile = z.infer<typeof UploadedFileSchema>;
  * address another mini app are not accepted.
  */
 export const NotificationSchema = z.object({
+  audience: NotificationAudienceSchema,
   title: z.string().trim().min(1).max(120),
   body: z.string().trim().min(1).max(500),
   linkPath: z
@@ -85,5 +139,32 @@ export const NotificationSchema = z.object({
     .trim()
     .regex(/^\/(?!\/).*/, "linkPath must be a path starting with a single /")
     .optional(),
+  /**
+   * Optional: makes retrying after a network timeout safe instead of
+   * double-notifying everyone who already received it. Reusing a key with a
+   * recipient list of a different length is a conflict, not a replay.
+   */
+  idempotencyKey: z.string().trim().min(1).optional(),
 });
 export type Notification = z.infer<typeof NotificationSchema>;
+
+/**
+ * What happened to one named recipient of a Direct Notification.
+ *
+ * `not_reachable` is **one collapsed reason**, deliberately: no PPLE ID
+ * account at all, an account that has never opened this app, someone outside
+ * this app's current tier audience, or someone opted out. Do not decompose it,
+ * and do not show a Builder a guess about which applies — separating "not a
+ * user of this app" from "no such person" would turn every Builder App into a
+ * lookup service answering *"is this number a party workforce member?"* about
+ * people who never consented to it. See docs/adr/0017.
+ *
+ * What it *is* good for: pruning. A stale entry costs quota on every send
+ * until it is removed, because a send debits the reach it requested, not the
+ * reach it achieved.
+ */
+export const NotificationDeliverySchema = z.object({
+  recipient: NotificationRecipientSchema,
+  status: z.enum(["delivered", "not_reachable"]),
+});
+export type NotificationDelivery = z.infer<typeof NotificationDeliverySchema>;

package/templates/golden-path/src/index.ts

@@ -88,15 +88,26 @@ export function createApp(overrides: AppOverrides = {}) {
     return new Response(obj.body, { headers });
   });
 
-  // --- Notification demo: audience-bound send (content only) ---
+  // --- Notification demo: Broadcast and Direct sends ---
+  // The audience is required by the schema, so a send that forgets to state it
+  // is refused here and never reaches the platform as a broadcast.
   app.post("/notify", async (c) => {
     const parsed = NotificationSchema.safeParse(
       await c.req.json().catch(() => null),
     );
     if (!parsed.success) return c.json({ error: "invalid_body" }, 400);
     const result = await sendNotification(c.env, parsed.data, fetchImpl);
-    if (result.ok) return c.json({ ok: true });
-    return c.json({ error: result.error }, result.status as ContentfulStatusCode);
+    if (!result.ok) {
+      return c.json(
+        { error: result.error, ...(result.quota ? { quota: result.quota } : {}) },
+        result.status as ContentfulStatusCode,
+      );
+    }
+    // A Direct send answers for each recipient it named; a Broadcast names no
+    // one, so there is nothing to enumerate.
+    return c.json(
+      result.audience === "direct" ? { ok: true, results: result.results } : { ok: true },
+    );
   });
 
   return app;

package/templates/golden-path/src/notify.ts

@@ -1,36 +1,82 @@
-// Audience-bound push notifications.
+// Push notifications: Broadcast and Direct.
 //
-// Your app sends *content* — a title and body, never phone numbers or user
-// ids — plus an optional path-only self-link. The platform resolves the
-// recipients server-side (this app's App Users ∩ its current publication-tier
-// audience), joins `linkPath` to this app's known entry, and enforces the
-// per-app rate limit. This is the whole privacy model: an app can reach the
-// people who use it, and no one else; and it can deep-link into itself, not
-// into another team's mini app.
+// Every send states its audience, and the two kinds follow from that:
 //
-// See docs/integration/today-sso-changes.md §6 for the contract.
+//   • Broadcast (การแจ้งเตือนทุกคน) — `{ kind: "all" }`, to everyone this app
+//     can reach: its App Users ∩ its current publication-tier audience.
+//   • Direct (การแจ้งเตือนรายบุคคล) — `{ kind: "direct", recipients }`, to the
+//     people this app names, by PPLE ID `sub` or mobile number.
+//
+// Naming narrows the audience and never widens it — the rule, and what
+// `not_reachable` may be read as, are in shared/api.ts. The privacy model in
+// one line: an app can reach the people who use it, say which of them it
+// means, and reach no one else; and it can deep-link into itself, not into
+// another team's mini app.
+//
+// See docs/integration/direct-notifications.md for the contract and
+// docs/adr/0017 for why naming recipients is safe but per-recipient *reasons*
+// are not.
 //
 // Wiring: the platform provisions NOTIFY_API_BASE and this app's own
 // NotificationApiKey as NOTIFY_API_KEY, so `POST {NOTIFY_API_BASE}/notifications`
-// lands on PPLE Today's audience-bound send route. The key is the whole
-// address — PPLE Today resolves it to this app and derives the audience from
-// that, so the request carries neither an app id nor any recipient.
+// lands on PPLE Today's send route. The key is the whole address — PPLE Today
+// resolves it to this app and derives the reachable set from that, so the
+// request carries no app id.
 //
 // The wire shape below is PPLE Today's, not this app's: your code passes the
-// friendlier `{ title, body, linkPath? }` and this is where it becomes
-// `{ content: { header, message }, linkPath? }`. Keeping that translation in
-// one place means the rest of the app never has to know the platform's
-// vocabulary.
-import type { Notification } from "../shared/api";
+// friendlier `{ audience, title, body, linkPath? }` and this is where it
+// becomes `{ audience, content: { header, message }, linkPath? }`. Keeping that
+// translation in one place means the rest of the app never has to know the
+// platform's vocabulary.
+import type { Notification, NotificationDelivery, NotificationRecipient } from "../shared/api";
 
 interface NotifyEnv {
   NOTIFY_API_BASE: string;
   NOTIFY_API_KEY?: string;
 }
 
+/**
+ * Every refusal this app can get back, named in terms a Builder can act on.
+ *
+ * - `notifications_not_configured` — no key bound (e.g. local dev).
+ * - `invalid_request` — the send itself was malformed: no audience, an
+ *   unknown `kind`, a `direct` send with no `recipients` array.
+ * - `invalid_recipients` — the list was: empty, over the 200 cap, or an entry
+ *   naming neither or both of `sub`/`phone`.
+ * - `idempotency_key_conflict` — that key was already used with a list of a
+ *   different length, so its stored outcome cannot be replayed onto this one.
+ * - `quota_exceeded` — **nothing was delivered.** Quota is checked up front
+ *   against the named count, so the call is rejected whole rather than
+ *   half-sent.
+ * - `not_permitted` — this key may not use this route.
+ * - `send_failed` — anything else.
+ */
+export type NotifyError =
+  | "notifications_not_configured"
+  | "invalid_request"
+  | "invalid_recipients"
+  | "idempotency_key_conflict"
+  | "quota_exceeded"
+  | "not_permitted"
+  | "send_failed";
+
+/**
+ * What the platform reports alongside a `quota_exceeded` refusal, so an app
+ * can back off rather than guess. Denominated in **deliveries**, not calls: a
+ * Direct send debits one unit per name it addressed (delivered or not), and a
+ * Broadcast debits its audience size.
+ */
+export interface NotifyQuota {
+  dailyQuota?: number;
+  remaining?: number;
+  /** When the budget resets (Asia/Bangkok midnight). */
+  resetAt?: string;
+}
+
 export type NotifyResult =
-  | { ok: true }
-  | { ok: false; status: number; error: string };
+  | { ok: true; audience: "all" }
+  | { ok: true; audience: "direct"; results: NotificationDelivery[] }
+  | { ok: false; status: number; error: NotifyError; quota?: NotifyQuota };
 
 export async function sendNotification(
   env: NotifyEnv,
@@ -48,17 +94,99 @@ export async function sendNotification(
       authorization: `Bearer ${env.NOTIFY_API_KEY}`,
       "content-type": "application/json",
     },
-    // Content (+ optional self-link). The audience is resolved by the platform.
     body: JSON.stringify({
+      // Stated on every send, including a broadcast. There is no shape of this
+      // request that leaves the audience to be guessed.
+      audience: input.audience,
       content: { header: input.title, message: input.body },
       ...(input.linkPath !== undefined ? { linkPath: input.linkPath } : {}),
+      ...(input.idempotencyKey !== undefined
+        ? { idempotencyKey: input.idempotencyKey }
+        : {}),
     }),
   });
 
-  if (res.ok) return { ok: true };
+  if (!res.ok) {
+    const error = errorFor(res.status);
+    const quota = error === "quota_exceeded" ? quotaOf(await readJson(res)) : undefined;
+    return { ok: false, status: res.status, error, ...(quota ? { quota } : {}) };
+  }
+
+  if (input.audience.kind === "all") return { ok: true, audience: "all" };
   return {
-    ok: false,
-    status: res.status,
-    error: res.status === 429 ? "rate_limited" : "send_failed",
+    ok: true,
+    audience: "direct",
+    results: zipResults(input.audience.recipients, await readJson(res)),
   };
 }
+
+/**
+ * The platform splits its refusals: schema-level ones answer 422 (its whole
+ * API validates uniformly, and this route does not get to be the exception),
+ * recipient-level ones answer 400. Both are refusals — none is a broadcast,
+ * none is a silent no-op — but a client that branches on 400 alone is wrong.
+ * The status table lives in docs/integration/direct-notifications.md.
+ */
+function errorFor(status: number): NotifyError {
+  switch (status) {
+    case 422:
+      return "invalid_request";
+    case 400:
+      return "invalid_recipients";
+    case 403:
+      return "not_permitted";
+    case 409:
+      return "idempotency_key_conflict";
+    case 429:
+      return "quota_exceeded";
+    default:
+      return "send_failed";
+  }
+}
+
+async function readJson(res: Response): Promise<unknown> {
+  return res.json().catch(() => null);
+}
+
+/**
+ * The three figures the contract says a 429 carries, read from the top level
+ * of the refusal body. If the platform ever nests them under an envelope, this
+ * is the one place to adjust — the refusal itself is reported either way.
+ */
+function quotaOf(body: unknown): NotifyQuota | undefined {
+  if (typeof body !== "object" || body === null) return undefined;
+  const { dailyQuota, remaining, resetAt } = body as Record<string, unknown>;
+  const quota: NotifyQuota = {
+    ...(typeof dailyQuota === "number" ? { dailyQuota } : {}),
+    ...(typeof remaining === "number" ? { remaining } : {}),
+    ...(typeof resetAt === "string" ? { resetAt } : {}),
+  };
+  return Object.keys(quota).length > 0 ? quota : undefined;
+}
+
+/**
+ * Pair each recipient this app named with what the platform said about it.
+ * The results come back in the order they were named, one per entry, so this
+ * pairs them by position and hands back the caller's *own* entry — ready to
+ * match onto the list the app holds.
+ *
+ * Two rules, both in the direction of not lying: a list of a different length
+ * is not the answer to this send, so none of it is trusted; and anything not
+ * affirmatively reported `delivered` is reported `not_reachable`. See
+ * shared/api.ts for what that status may and may not be read as.
+ */
+function zipResults(
+  recipients: readonly NotificationRecipient[],
+  body: unknown,
+): NotificationDelivery[] {
+  const reported = (body as { results?: unknown } | null)?.results;
+  const results =
+    Array.isArray(reported) && reported.length === recipients.length ? reported : [];
+  return recipients.map((recipient, i) => ({
+    recipient,
+    status:
+      (results[i] as { status?: unknown } | undefined)?.status === "delivered"
+        ? "delivered"
+        : "not_reachable",
+  }));
+}

package/templates/golden-path/test/harness.ts

@@ -17,8 +17,8 @@ export interface Fakes {
 /**
  * A copy of the Worker wired to fake PPLE ID / notification services (via an
  * injected fetch) and the real local D1 + R2 from the test runtime. Records
- * the requests sent to the notification endpoint so tests can assert the
- * content-only contract.
+ * the requests sent to the notification endpoint so tests can assert the wire
+ * shape — above all that every send states its audience.
  */
 export function makeHarness(fakes: Fakes = {}, envOverrides: Partial<Env> = {}) {
   const calls = { notify: [] as Request[] };

package/templates/golden-path/test/smoke.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from "vitest";
-import type { Note, UploadedFile } from "../shared/api";
+import type { Note, Notification, UploadedFile } from "../shared/api";
 import { makeHarness } from "./harness";
 
 describe("health", () => {
@@ -174,32 +174,123 @@ describe("R2 upload (files)", () => {
   });
 });
 
-describe("audience-bound notifications", () => {
+// Shaped like what the platform actually binds, so these tests exercise the
+// real `${base}/notifications` the Worker will call in production.
+const NOTIFY_ENV = {
+  NOTIFY_API_BASE: "https://today.test/external",
+  NOTIFY_API_KEY: "app-key",
+};
+
+/** A platform that accepts everything and reports every named entry delivered. */
+const accepts = (body: unknown = null) => ({
+  notify: () => (body === null ? new Response(null, { status: 202 }) : Response.json(body)),
+});
+
+describe("notifications: the audience is required", () => {
+  it("is a compile error to omit it, not a runtime one", () => {
+    // @ts-expect-error — `audience` is required. The dangerous bug in this
+    // feature is omission: a dropped field turning a message meant for one
+    // person into a message to every App User. The discriminated union kills
+    // it at the compiler, which is where it is cheapest.
+    const missingAudience: Notification = { title: "Hi", body: "there" };
+    expect(missingAudience).toBeTruthy();
+  });
+
+  it("refuses a send with no audience before it reaches the platform", async () => {
+    const h = makeHarness(accepts(), NOTIFY_ENV);
+    const res = await h.request("/api/notify", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ title: "Hi", body: "there" }),
+    });
+    expect(res.status).toBe(400);
+    expect(await res.json()).toMatchObject({ error: "invalid_body" });
+    // Never a broadcast, never a silent no-op.
+    expect(h.calls.notify).toHaveLength(0);
+  });
+
+  it("refuses an empty recipient list before it reaches the platform", async () => {
+    const h = makeHarness(accepts(), NOTIFY_ENV);
+    const res = await h.request("/api/notify", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        audience: { kind: "direct", recipients: [] },
+        title: "Hi",
+        body: "there",
+      }),
+    });
+    expect(res.status).toBe(400);
+    expect(h.calls.notify).toHaveLength(0);
+  });
+
+  it("refuses more than 200 recipients rather than truncating them", async () => {
+    const h = makeHarness(accepts(), NOTIFY_ENV);
+    const res = await h.request("/api/notify", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        audience: {
+          kind: "direct",
+          recipients: Array.from({ length: 201 }, (_, i) => ({ sub: `u-${i}` })),
+        },
+        title: "Hi",
+        body: "there",
+      }),
+    });
+    expect(res.status).toBe(400);
+    expect(h.calls.notify).toHaveLength(0);
+  });
+
+  it("refuses an entry naming both a sub and a phone", async () => {
+    const h = makeHarness(accepts(), NOTIFY_ENV);
+    const res = await h.request("/api/notify", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        audience: {
+          kind: "direct",
+          recipients: [{ sub: "u-1", phone: "0812345678" }],
+        },
+        title: "Hi",
+        body: "there",
+      }),
+    });
+    expect(res.status).toBe(400);
+    expect(h.calls.notify).toHaveLength(0);
+  });
+});
+
+describe("Broadcast Notification (การแจ้งเตือนทุกคน)", () => {
   it("reports not-configured when no key is set", async () => {
     const h = makeHarness();
     const res = await h.request("/api/notify", {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ title: "Hi", body: "there" }),
+      body: JSON.stringify({
+        audience: { kind: "all" },
+        title: "Hi",
+        body: "there",
+      }),
     });
     expect(res.status).toBe(503);
     expect(await res.json()).toMatchObject({ error: "notifications_not_configured" });
   });
 
-  it("sends content only (never phone numbers) to the platform endpoint", async () => {
-    const h = makeHarness(
-      { notify: () => new Response(null, { status: 202 }) },
-      // Shaped like what the platform actually binds, so the test exercises
-      // the real `${base}/notifications` the Worker will call in production.
-      { NOTIFY_API_BASE: "https://today.test/external", NOTIFY_API_KEY: "app-key" },
-    );
+  it("states its audience explicitly and names no one", async () => {
+    const h = makeHarness(accepts(), NOTIFY_ENV);
 
     const res = await h.request("/api/notify", {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ title: "Event tonight", body: "Doors at 7" }),
+      body: JSON.stringify({
+        audience: { kind: "all" },
+        title: "Event tonight",
+        body: "Doors at 7",
+      }),
     });
     expect(res.status).toBe(200);
+    expect(await res.json()).toEqual({ ok: true });
 
     expect(h.calls.notify).toHaveLength(1);
     const sent = h.calls.notify[0]!;
@@ -207,21 +298,20 @@ describe("audience-bound notifications", () => {
     // PPLE Today's wire shape, which src/notify.ts translates into.
     const payload = await sent.json<Record<string, unknown>>();
     expect(payload).toEqual({
+      audience: { kind: "all" },
       content: { header: "Event tonight", message: "Doors at 7" },
     });
-    expect(JSON.stringify(payload)).not.toMatch(/phone|recipient|number/i);
+    expect(JSON.stringify(payload)).not.toMatch(/phone|recipient/i);
   });
 
   it("forwards optional linkPath on the platform wire shape", async () => {
-    const h = makeHarness(
-      { notify: () => new Response(null, { status: 202 }) },
-      { NOTIFY_API_BASE: "https://today.test/external", NOTIFY_API_KEY: "app-key" },
-    );
+    const h = makeHarness(accepts(), NOTIFY_ENV);
 
     const res = await h.request("/api/notify", {
       method: "POST",
       headers: { "content-type": "application/json" },
       body: JSON.stringify({
+        audience: { kind: "all" },
         title: "Check-in open",
         body: "Tap to open the form",
         linkPath: "/check-in",
@@ -231,8 +321,144 @@ describe("audience-bound notifications", () => {
 
     const payload = await h.calls.notify[0]!.json<Record<string, unknown>>();
     expect(payload).toEqual({
+      audience: { kind: "all" },
       content: { header: "Check-in open", message: "Tap to open the form" },
       linkPath: "/check-in",
     });
   });
 });
+
+describe("Direct Notification (การแจ้งเตือนรายบุคคล)", () => {
+  const recipients = [{ sub: "u-42" }, { phone: "+66812345678" }];
+
+  const sendDirect = (h: ReturnType<typeof makeHarness>, extra: object = {}) =>
+    h.request("/api/notify", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        audience: { kind: "direct", recipients },
+        title: "Reimbursement approved",
+        body: "Your claim was approved",
+        ...extra,
+      }),
+    });
+
+  it("names recipients by sub or phone and reports each one's outcome", async () => {
+    const h = makeHarness(
+      accepts({
+        results: [
+          { recipient: { sub: "u-42" }, status: "delivered" },
+          { recipient: { phone: "+66812345678" }, status: "not_reachable" },
+        ],
+      }),
+      NOTIFY_ENV,
+    );
+
+    const res = await sendDirect(h);
+    expect(res.status).toBe(200);
+    // Every named entry comes back, echoed as the caller named it, so a
+    // Builder can match a result straight onto the list it holds.
+    expect(await res.json()).toEqual({
+      ok: true,
+      results: [
+        { recipient: { sub: "u-42" }, status: "delivered" },
+        { recipient: { phone: "+66812345678" }, status: "not_reachable" },
+      ],
+    });
+
+    const payload = await h.calls.notify[0]!.json<Record<string, unknown>>();
+    expect(payload).toEqual({
+      audience: { kind: "direct", recipients },
+      content: {
+        header: "Reimbursement approved",
+        message: "Your claim was approved",
+      },
+    });
+  });
+
+  it("forwards an idempotencyKey so a retry after a timeout is safe", async () => {
+    const h = makeHarness(accepts({ results: [] }), NOTIFY_ENV);
+    await sendDirect(h, { idempotencyKey: "claim-123" });
+    const payload = await h.calls.notify[0]!.json<Record<string, unknown>>();
+    expect(payload).toMatchObject({ idempotencyKey: "claim-123" });
+  });
+
+  const unconfirmed = {
+    ok: true,
+    results: [
+      { recipient: { sub: "u-42" }, status: "not_reachable" },
+      { recipient: { phone: "+66812345678" }, status: "not_reachable" },
+    ],
+  };
+
+  it("never claims a delivery the platform did not confirm", async () => {
+    // A body this helper cannot read is not evidence of delivery.
+    const h = makeHarness(accepts({ unexpected: true }), NOTIFY_ENV);
+    expect(await (await sendDirect(h)).json()).toEqual(unconfirmed);
+  });
+
+  it("trusts none of a result list that is not one-per-named-entry", async () => {
+    // Results are paired by position, so a list of a different length is not
+    // the answer to this send — reading it would attribute someone's delivery
+    // to the wrong person.
+    const h = makeHarness(
+      accepts({ results: [{ recipient: { sub: "u-42" }, status: "delivered" }] }),
+      NOTIFY_ENV,
+    );
+    expect(await (await sendDirect(h)).json()).toEqual(unconfirmed);
+  });
+});
+
+describe("notification refusals map to legible errors", () => {
+  const refuses = (status: number, body: unknown = null) => ({
+    notify: () =>
+      body === null
+        ? new Response(null, { status })
+        : Response.json(body, { status }),
+  });
+
+  const send = (h: ReturnType<typeof makeHarness>) =>
+    h.request("/api/notify", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        audience: { kind: "direct", recipients: [{ sub: "u-42" }] },
+        title: "Hi",
+        body: "there",
+      }),
+    });
+
+  // The platform splits schema-level refusals (422) from recipient-level ones
+  // (400); a client that branches on 400 alone is wrong. See the status table
+  // in docs/integration/direct-notifications.md.
+  it.each([
+    [422, "invalid_request"],
+    [400, "invalid_recipients"],
+    [403, "not_permitted"],
+    [409, "idempotency_key_conflict"],
+    [429, "quota_exceeded"],
+    [500, "send_failed"],
+  ])("maps %i to %s", async (status, error) => {
+    const h = makeHarness(refuses(status), NOTIFY_ENV);
+    const res = await send(h);
+    expect(res.status).toBe(status);
+    expect(await res.json()).toMatchObject({ error });
+  });
+
+  it("passes the quota figures through on a 429 so an app can back off", async () => {
+    const h = makeHarness(
+      refuses(429, {
+        // Deliveries, not calls — the budget's denomination changed with
+        // Direct Notifications, and nothing was delivered by this call.
+        dailyQuota: 1000,
+        remaining: 3,
+        resetAt: "2026-08-15T00:00:00+07:00",
+      }),
+      NOTIFY_ENV,
+    );
+    expect(await (await send(h)).json()).toMatchObject({
+      error: "quota_exceeded",
+      quota: { dailyQuota: 1000, remaining: 3, resetAt: "2026-08-15T00:00:00+07:00" },
+    });
+  });
+});

package/templates/golden-path/web/App.tsx

@@ -1,4 +1,5 @@
 import {
+  Badge,
   Button,
   Card,
   CardContent,
@@ -15,12 +16,24 @@ import {
   Input,
   Navbar,
   Spinner,
+  Tabs,
+  TabsContent,
+  TabsList,
+  TabsTrigger,
   Textarea,
   showToast,
 } from "@pplethai/components";
 import { ChevronDown, LogOut, Plus, Send, Upload, User } from "lucide-react";
 import { useEffect, useRef, useState } from "react";
-import type { Me, Note, UploadedFile } from "../shared/api";
+import type {
+  Me,
+  Note,
+  NotificationAudience,
+  NotificationDelivery,
+  NotificationRecipient,
+  UploadedFile,
+} from "../shared/api";
+import { MAX_DIRECT_RECIPIENTS } from "../shared/api";
 import { api, apiJson, logout } from "./pple";
 
 function bytes(n: number): string {
@@ -280,24 +293,84 @@ function FilesCard() {
   );
 }
 
-// --- Audience-bound notifications ----------------------------------------
+// --- Notifications: Broadcast and Direct ----------------------------------
+//
+// Two modes, one card. The audience is always stated — there is no way to
+// start a send from this UI without choosing one, which mirrors the schema in
+// shared/api.ts, where leaving it out is a compile error.
+
+/** Builder-facing Thai for every refusal this card can receive. */
+const NOTIFY_ERRORS: Record<string, string> = {
+  // This app's own Zod check (src/index.ts), before anything is sent.
+  invalid_body: `ข้อมูลไม่ครบหรือไม่ถูกต้อง — ต้องมีหัวข้อ ข้อความ และกลุ่มผู้รับ ไม่เกิน ${MAX_DIRECT_RECIPIENTS} คน`,
+  invalid_request: "คำขอไม่ถูกต้อง — ตรวจสอบว่าระบุกลุ่มผู้รับแล้ว",
+  invalid_recipients: `รายชื่อผู้รับไม่ถูกต้อง — ต้องมีอย่างน้อยหนึ่งคน ไม่เกิน ${MAX_DIRECT_RECIPIENTS} คน และหนึ่งบรรทัดระบุได้อย่างเดียวระหว่าง sub กับเบอร์โทรศัพท์`,
+  idempotency_key_conflict: "คีย์กันส่งซ้ำถูกใช้กับรายชื่อจำนวนอื่นไปแล้ว",
+  quota_exceeded: "โควตาการแจ้งเตือนหมด — ยังไม่มีใครได้รับข้อความนี้ ลองใหม่หลังโควตารีเซ็ต",
+  not_permitted: "คีย์การแจ้งเตือนนี้ไม่มีสิทธิ์ส่งผ่านช่องทางนี้",
+  send_failed: "ส่งไม่สำเร็จ",
+};
+
+/**
+ * One entry per line (commas work too). An entry that is all digits — with or
+ * without a leading `+` — is sent as a mobile number; anything else as a PPLE
+ * ID `sub`. Never both in one entry: the platform refuses those.
+ */
+function parseRecipients(text: string): NotificationRecipient[] {
+  return text
+    .split(/[\n,]/)
+    .map((entry) => entry.trim())
+    .filter(Boolean)
+    .map((entry) =>
+      /^\+?[\d\s-]+$/.test(entry)
+        ? { phone: entry.replace(/[\s-]/g, "") }
+        : { sub: entry },
+    );
+}
+
+function recipientLabel(r: NotificationRecipient): string {
+  return "sub" in r ? r.sub : r.phone;
+}
+
 function NotifyCard() {
+  const [kind, setKind] = useState<NotificationAudience["kind"]>("all");
+  const [recipientsText, setRecipientsText] = useState("");
   const [title, setTitle] = useState("");
   const [body, setBody] = useState("");
   const [sending, setSending] = useState(false);
+  const [results, setResults] = useState<NotificationDelivery[] | null>(null);
+
+  const recipients = parseRecipients(recipientsText);
+  // The cap is the platform's, and going over it is a refusal rather than a
+  // truncation — so hold the send here and say so, rather than letting a
+  // Builder discover it from an error toast.
+  const tooMany = recipients.length > MAX_DIRECT_RECIPIENTS;
+  const ready =
+    !!title.trim() &&
+    !!body.trim() &&
+    (kind === "all" || (recipients.length > 0 && !tooMany));
 
   async function send() {
-    if (!title.trim() || !body.trim()) return;
+    if (!ready) return;
     setSending(true);
+    setResults(null);
     try {
+      // The audience travels with the send, always. Choosing it is the first
+      // thing this form does, not an afterthought a dropped field can undo.
+      const audience: NotificationAudience =
+        kind === "all" ? { kind: "all" } : { kind: "direct", recipients };
       const res = await api("/api/notify", {
         method: "POST",
         headers: { "content-type": "application/json" },
-        body: JSON.stringify({ title, body }),
+        body: JSON.stringify({ audience, title, body }),
       });
-      const data = (await res.json().catch(() => ({}))) as { error?: string };
+      const data = (await res.json().catch(() => ({}))) as {
+        error?: string;
+        results?: NotificationDelivery[];
+      };
       if (res.ok) {
         showToast({ title: "ส่งการแจ้งเตือนแล้ว", variant: "success" });
+        setResults(data.results ?? null);
         setTitle("");
         setBody("");
       } else if (data.error === "notifications_not_configured") {
@@ -307,7 +380,11 @@ function NotifyCard() {
           variant: "warning",
         });
       } else {
-        showToast({ title: "ส่งไม่สำเร็จ", description: data.error, variant: "error" });
+        showToast({
+          title: "ส่งไม่สำเร็จ",
+          description: NOTIFY_ERRORS[data.error ?? ""] ?? data.error,
+          variant: "error",
+        });
       }
     } catch (e) {
       showToast({ title: "ส่งไม่สำเร็จ", description: message(e), variant: "error" });
@@ -321,12 +398,45 @@ function NotifyCard() {
       <CardHeader>
         <CardTitle>แจ้งเตือนผู้ใช้</CardTitle>
         <CardDescription>
-          ส่งการแจ้งเตือนแบบผูกกับกลุ่มผู้ใช้แอป — ส่งเฉพาะเนื้อหา
-          ไม่ส่งหมายเลขโทรศัพท์
+          ส่งถึงผู้ใช้ของแอปนี้ — ทุกคน หรือระบุรายบุคคลด้วย PPLE ID (sub)
+          หรือเบอร์โทรศัพท์ การระบุชื่อเป็นการ<em>จำกัด</em>ผู้รับให้แคบลงเท่านั้น
+          ไม่เคยขยายออก คนที่ยังไม่เคยเปิดแอปนี้จะไม่ได้รับ
         </CardDescription>
       </CardHeader>
       <CardContent>
         <div className="stack">
+          <Tabs
+            value={kind}
+            onValueChange={(v) => {
+              setKind(v as NotificationAudience["kind"]);
+              setResults(null);
+            }}
+          >
+            <TabsList>
+              <TabsTrigger value="all">การแจ้งเตือนทุกคน</TabsTrigger>
+              <TabsTrigger value="direct">การแจ้งเตือนรายบุคคล</TabsTrigger>
+            </TabsList>
+            <TabsContent value="all">
+              <p className="muted">
+                ส่งถึงผู้ใช้แอปนี้ทุกคน — นับโควตาตามจำนวนผู้รับทั้งหมด
+              </p>
+            </TabsContent>
+            <TabsContent value="direct">
+              <div className="stack">
+                <Textarea
+                  value={recipientsText}
+                  placeholder={"บรรทัดละหนึ่งคน\n0812345678\nu-42"}
+                  onChange={(e) => setRecipientsText(e.target.value)}
+                />
+                <p className="muted">
+                  ระบุได้สูงสุด {MAX_DIRECT_RECIPIENTS} คนต่อครั้ง (ตอนนี้{" "}
+                  {recipients.length} คน{tooMany ? " — เกินจำนวน ต้องแบ่งส่งเป็นรอบ" : ""})
+                  — ทุกชื่อที่ระบุถูกนับโควตา แม้จะส่งไม่ถึง
+                  จึงควรตัดรายชื่อที่ส่งไม่ถึงออก
+                </p>
+              </div>
+            </TabsContent>
+          </Tabs>
           <Input
             value={title}
             placeholder="หัวข้อ"
@@ -337,10 +447,30 @@ function NotifyCard() {
             placeholder="ข้อความ"
             onChange={(e) => setBody(e.target.value)}
           />
-          <Button onClick={send} disabled={sending || !title.trim() || !body.trim()}>
+          <Button onClick={send} disabled={sending || !ready}>
             {sending ? <Spinner /> : <Icon icon={Send} />}
             ส่งการแจ้งเตือน
           </Button>
+          {results && (
+            <div className="stack">
+              <ul className="list">
+                {results.map((r, i) => (
+                  <li key={`${recipientLabel(r.recipient)}-${i}`} className="list__item">
+                    <span>{recipientLabel(r.recipient)}</span>
+                    <Badge variant={r.status === "delivered" ? "default" : "outline"}>
+                      {r.status === "delivered" ? "ส่งแล้ว" : "ส่งไม่ถึง"}
+                    </Badge>
+                  </li>
+                ))}
+              </ul>
+              {/* One collapsed reason, on purpose: the app is never told which
+                  of these applies (docs/adr/0017). Do not guess in the UI. */}
+              <p className="muted">
+                “ส่งไม่ถึง” หมายถึงยังไม่เคยเปิดแอปนี้ อยู่นอกกลุ่มผู้รับ
+                ไม่มีบัญชี PPLE ID หรือปิดรับการแจ้งเตือน — ระบบไม่ระบุว่าเป็นข้อใด
+              </p>
+            </div>
+          )}
         </div>
       </CardContent>
     </Card>