@prisma/cli 3.0.0-alpha.9 → 3.0.0-beta.0

package/dist/controllers/app.js

@@ -15,8 +15,9 @@ import { inferTargetName, projectNotFoundError, resolveProjectTarget } from "../
 import { LOCAL_RESOLUTION_PIN_RELATIVE_PATH, ensureLocalResolutionPinGitignore, readLocalResolutionPin, writeLocalResolutionPin } from "../lib/project/local-pin.js";
 import { PREVIEW_BUILD_TYPES, RESOLVED_PREVIEW_BUILD_TYPES, executePreviewBuild } from "../lib/app/preview-build.js";
 import { PREVIEW_DEFAULT_REGION } from "../lib/app/preview-interaction.js";
-import { createPreviewDeployProgress, createPreviewDeployProgressState, createPreviewPromoteProgress, createPreviewUpdateEnvProgress } from "../lib/app/preview-progress.js";
-import { createPreviewAppProvider } from "../lib/app/preview-provider.js";
+import { createPreviewDeployProgress, createPreviewDeployProgressState, createPreviewPromoteProgress } from "../lib/app/preview-progress.js";
+import { PreviewDomainApiError, createPreviewAppProvider } from "../lib/app/preview-provider.js";
+import { formatDomainFailureFix } from "../lib/app/domain-guidance.js";
 import { createSelectPromptPort } from "./select-prompt-port.js";
 import { requireAuthenticatedAuthState } from "./auth.js";
 import { listRealWorkspaceProjects } from "./project.js";
@@ -202,136 +203,6 @@ async function runAppDeploy(context, appName, options) {
 		nextSteps: ["prisma-cli app list-deploys", `prisma-cli app show-deploy ${deployResult.deployment.id}`]
 	};
 }
-async function runAppUpdateEnv(context, appName, envAssignments, projectRef) {
-	ensurePreviewAppMode(context);
-	emitLegacyEnvDeprecationWarning(context, "app update-env", "project env add");
-	const envVars = parseEnvAssignments(envAssignments, {
-		commandName: "update-env",
-		requireAtLeastOne: true
-	});
-	const { provider, target, projectId } = await requireProviderAndProjectContext(context, projectRef);
-	const selectedApp = await resolveExistingAppSelection(context, projectId, await listApps(context, provider, projectId, target.branch.name), appName);
-	if (!selectedApp) throw noDeploymentsError("No deployments available to update environment variables", "The resolved project does not have any deployed app yet.");
-	const deploymentsResult = await provider.listDeployments(selectedApp.id).catch((error) => {
-		throw deployFailedError("Failed to inspect app deployments", error, ["prisma-cli app list-deploys"]);
-	});
-	if (deploymentsResult.deployments.length === 0) throw noDeploymentsError("No deployments available to update environment variables", `The selected app "${deploymentsResult.app.name}" does not have any deployments yet.`);
-	const updateResult = await provider.updateAppEnv({
-		appId: deploymentsResult.app.id,
-		envVars,
-		progress: createPreviewUpdateEnvProgress(context.output.stderr, !context.flags.json && !context.flags.quiet),
-		promoteProgress: createPreviewPromoteProgress(context.output.stderr, !context.flags.json && !context.flags.quiet)
-	}).catch((error) => {
-		throw deployFailedError("Failed to update app environment variables", error, ["prisma-cli app list-env"]);
-	});
-	await context.stateStore.setSelectedApp(projectId, {
-		id: updateResult.app.id,
-		name: updateResult.app.name
-	});
-	await context.stateStore.setKnownLiveDeployment(projectId, updateResult.app.id, updateResult.deployment.id);
-	return {
-		command: "app.update-env",
-		result: {
-			projectId: updateResult.projectId,
-			app: {
-				id: updateResult.app.id,
-				name: updateResult.app.name
-			},
-			deployment: updateResult.deployment,
-			variables: updateResult.variables
-		},
-		warnings: [],
-		nextSteps: ["prisma-cli app list-env", `prisma-cli app show-deploy ${updateResult.deployment.id}`]
-	};
-}
-async function runAppListEnv(context, appName, projectRef) {
-	ensurePreviewAppMode(context);
-	emitLegacyEnvDeprecationWarning(context, "app list-env", "project env list");
-	const { provider, target, projectId } = await requireProviderAndProjectContext(context, projectRef);
-	const selectedApp = await resolveExistingAppSelection(context, projectId, await listApps(context, provider, projectId, target.branch.name), appName);
-	if (!selectedApp) return {
-		command: "app.list-env",
-		result: {
-			projectId,
-			app: null,
-			deployment: null,
-			variables: []
-		},
-		warnings: [],
-		nextSteps: ["prisma-cli app deploy"]
-	};
-	const deploymentsResult = await provider.listDeployments(selectedApp.id).catch((error) => {
-		throw deployFailedError("Failed to inspect app deployments", error, ["prisma-cli app list-deploys"]);
-	});
-	const knownLiveDeploymentId = await context.stateStore.readKnownLiveDeployment(projectId, deploymentsResult.app.id);
-	const missingKnownLiveDeploymentId = knownLiveDeploymentId && !deploymentsResult.deployments.some((candidate) => candidate.id === knownLiveDeploymentId) ? knownLiveDeploymentId : null;
-	const currentLiveDeploymentId = await resolveCurrentLiveDeploymentId(context, projectId, deploymentsResult.app, deploymentsResult.deployments);
-	const deployments = applyLiveDeploymentHint(deploymentsResult.deployments, currentLiveDeploymentId).slice().sort((left, right) => right.createdAt.localeCompare(left.createdAt) || right.id.localeCompare(left.id));
-	const deployment = currentLiveDeploymentId ? deployments.find((candidate) => candidate.id === currentLiveDeploymentId) ?? null : null;
-	await context.stateStore.setSelectedApp(projectId, {
-		id: deploymentsResult.app.id,
-		name: deploymentsResult.app.name
-	});
-	if (missingKnownLiveDeploymentId) {
-		const envResult = await provider.listAppEnvNames({
-			appId: deploymentsResult.app.id,
-			deploymentId: missingKnownLiveDeploymentId
-		}).catch((error) => {
-			throw deployFailedError("Failed to inspect app environment variables", error, ["prisma-cli app list-deploys"]);
-		});
-		return {
-			command: "app.list-env",
-			result: {
-				projectId,
-				app: {
-					id: envResult.app.id,
-					name: envResult.app.name
-				},
-				deployment: envResult.deployment,
-				variables: envResult.variables
-			},
-			warnings: [],
-			nextSteps: [`prisma-cli app show-deploy ${envResult.deployment.id}`]
-		};
-	}
-	if (!deployment) return {
-		command: "app.list-env",
-		result: {
-			projectId,
-			app: {
-				id: deploymentsResult.app.id,
-				name: deploymentsResult.app.name
-			},
-			deployment: null,
-			variables: []
-		},
-		warnings: [],
-		nextSteps: ["prisma-cli app deploy"]
-	};
-	const envResult = await provider.listAppEnvNames({
-		appId: deploymentsResult.app.id,
-		deploymentId: deployment.id
-	}).catch((error) => {
-		throw deployFailedError("Failed to inspect app environment variables", error, ["prisma-cli app list-deploys"]);
-	});
-	return {
-		command: "app.list-env",
-		result: {
-			projectId,
-			app: {
-				id: envResult.app.id,
-				name: envResult.app.name
-			},
-			deployment: {
-				...deployment,
-				live: deployment.live ?? envResult.deployment.live
-			},
-			variables: envResult.variables
-		},
-		warnings: [],
-		nextSteps: deployment.id ? [`prisma-cli app show-deploy ${deployment.id}`] : ["prisma-cli app deploy"]
-	};
-}
 async function runAppListDeploys(context, appName, projectRef) {
 	ensurePreviewAppMode(context);
 	const { provider, target, projectId } = await requireProviderAndProjectContext(context, projectRef);
@@ -479,6 +350,132 @@ async function runAppOpen(context, appName, projectRef) {
 		nextSteps: ["prisma-cli app show", `prisma-cli app show-deploy ${liveDeployment.id}`]
 	};
 }
+async function runAppDomainAdd(context, hostname, options) {
+	const normalizedHostname = normalizeDomainHostname(hostname);
+	const target = await resolveAppDomainTarget(context, options);
+	const added = await target.provider.addDomain({
+		appId: target.app.id,
+		hostname: normalizedHostname
+	}).catch((error) => {
+		throw domainCommandError("add", error, normalizedHostname);
+	});
+	return {
+		command: "app.domain.add",
+		result: {
+			...target.resultTarget,
+			domain: toAppDomainSummary(added.domain),
+			existing: added.existing
+		},
+		warnings: [],
+		nextSteps: [`prisma-cli app domain wait ${normalizedHostname}`, `prisma-cli app domain show ${normalizedHostname}`]
+	};
+}
+async function runAppDomainShow(context, hostname, options) {
+	const normalizedHostname = normalizeDomainHostname(hostname);
+	const target = await resolveAppDomainTarget(context, options);
+	const domain = await resolveDomainByHostname(target.provider, target.app.id, normalizedHostname, "show");
+	const detail = await target.provider.showDomain(domain.id).catch((error) => {
+		throw domainCommandError("show", error, normalizedHostname);
+	});
+	return {
+		command: "app.domain.show",
+		result: {
+			...target.resultTarget,
+			domain: toAppDomainSummary(detail)
+		},
+		warnings: [],
+		nextSteps: buildDomainShowNextSteps(detail)
+	};
+}
+async function runAppDomainRemove(context, hostname, options) {
+	const normalizedHostname = normalizeDomainHostname(hostname);
+	const target = await resolveAppDomainTarget(context, options);
+	const domain = await resolveDomainByHostname(target.provider, target.app.id, normalizedHostname, "remove");
+	await confirmDomainRemoval(context, target.resultTarget, normalizedHostname);
+	await target.provider.removeDomain(domain.id).catch((error) => {
+		throw domainCommandError("remove", error, normalizedHostname);
+	});
+	return {
+		command: "app.domain.remove",
+		result: {
+			...target.resultTarget,
+			hostname: normalizedHostname,
+			removed: true
+		},
+		warnings: [],
+		nextSteps: []
+	};
+}
+async function runAppDomainRetry(context, hostname, options) {
+	const normalizedHostname = normalizeDomainHostname(hostname);
+	const target = await resolveAppDomainTarget(context, options);
+	const domain = await resolveDomainByHostname(target.provider, target.app.id, normalizedHostname, "retry");
+	const retried = await target.provider.retryDomain(domain.id).catch((error) => {
+		throw domainCommandError("retry", error, normalizedHostname);
+	});
+	return {
+		command: "app.domain.retry",
+		result: {
+			...target.resultTarget,
+			domain: toAppDomainSummary(retried)
+		},
+		warnings: [],
+		nextSteps: [`prisma-cli app domain wait ${normalizedHostname}`]
+	};
+}
+async function runAppDomainWait(context, hostname, options) {
+	const normalizedHostname = normalizeDomainHostname(hostname);
+	const timeoutMs = parseDomainWaitTimeout(options?.timeout);
+	const target = await resolveAppDomainTarget(context, options);
+	const domain = await resolveDomainByHostname(target.provider, target.app.id, normalizedHostname, "wait");
+	if (!context.flags.json && !context.flags.quiet) context.output.stderr.write([
+		`app domain wait -> Waiting for ${normalizedHostname} to become active.`,
+		"",
+		`Workspace: ${target.resultTarget.workspace.name}   Project: ${target.resultTarget.project.name}   Branch: ${target.resultTarget.branch.name}   App: ${target.resultTarget.app.name}`,
+		""
+	].join("\n"));
+	const start = Date.now();
+	const deadline = start + timeoutMs;
+	const pollIntervalMs = readDomainWaitPollIntervalMs(context);
+	let lastStatus = null;
+	let current = domain;
+	while (true) {
+		emitDomainWaitStatus(context, {
+			hostname: normalizedHostname,
+			domainId: current.id,
+			previousStatus: lastStatus,
+			status: current.status,
+			elapsedMs: Date.now() - start
+		});
+		lastStatus = current.status;
+		if (current.status === "active") {
+			if (!context.flags.json && !context.flags.quiet) context.output.stderr.write(`\n${normalizedHostname} is live at https://${normalizedHostname}\n`);
+			return;
+		}
+		if (current.status === "failed") throw new CliError({
+			code: "DOMAIN_VERIFICATION_FAILED",
+			domain: "app",
+			summary: `Custom domain "${normalizedHostname}" failed verification`,
+			why: formatDomainFailureWhy(current),
+			fix: formatDomainFailureFix(current) ?? `Run prisma-cli app domain retry ${normalizedHostname}.`,
+			exitCode: 1,
+			nextSteps: [`prisma-cli app domain show ${normalizedHostname}`, `prisma-cli app domain retry ${normalizedHostname}`]
+		});
+		if (timeoutMs === 0 || Date.now() >= deadline) throw new CliError({
+			code: "DOMAIN_VERIFICATION_TIMEOUT",
+			domain: "app",
+			summary: `Timed out waiting for "${normalizedHostname}" to become active`,
+			why: `The domain is still "${current.status}".`,
+			fix: `Run prisma-cli app domain show ${normalizedHostname} to inspect the current status, or retry wait with a longer --timeout.`,
+			exitCode: 1,
+			nextSteps: [`prisma-cli app domain show ${normalizedHostname}`]
+		});
+		await sleep(Math.min(pollIntervalMs, Math.max(deadline - Date.now(), 0)));
+		current = await target.provider.showDomain(current.id).catch((error) => {
+			throw domainCommandError("wait", error, normalizedHostname);
+		});
+	}
+}
 async function runAppLogs(context, appName, deploymentId, projectRef) {
 	ensurePreviewAppMode(context);
 	const { provider, target: resolvedTarget, projectId } = await requireProviderAndProjectContext(context, projectRef);
@@ -708,6 +705,303 @@ async function runAppRemove(context, appName, projectRef) {
 		nextSteps: ["prisma-cli app deploy", "prisma-cli app list-deploys"]
 	};
 }
+async function resolveAppDomainTarget(context, options) {
+	ensurePreviewAppMode(context);
+	const branch = resolveDomainBranch(options?.branchName);
+	if (toBranchKind(branch.name) !== "production") throw new CliError({
+		code: "BRANCH_NOT_DEPLOYABLE",
+		domain: "branch",
+		summary: "Custom domains require the production branch",
+		why: `Custom domains on preview branch "${branch.name}" are not supported in Public Beta.`,
+		fix: "Use --branch production, or attach the domain after promoting/deploying to the production branch.",
+		exitCode: 2,
+		nextSteps: ["prisma-cli app domain add <hostname> --branch production"]
+	});
+	const envProjectId = readDeployEnvOverride(context, PRISMA_PROJECT_ID_ENV_VAR);
+	const envAppId = readDeployEnvOverride(context, PRISMA_APP_ID_ENV_VAR);
+	const skipLocalPin = Boolean(envProjectId || envAppId);
+	const localPin = skipLocalPin ? { kind: "missing" } : await readLocalResolutionPin(context.runtime.cwd);
+	if (!skipLocalPin && localPin.kind === "invalid") throw localResolutionPinStaleError();
+	const { provider, target, projectId } = await requireProviderAndDeployProjectContext(context, options?.projectRef, {
+		allowCreate: false,
+		branch,
+		envProjectId,
+		localPin
+	});
+	const selectedApp = await resolveDomainAppSelection(context, projectId, await listApps(context, provider, projectId, target.branch.name), {
+		explicitAppName: options?.appName,
+		explicitAppId: envAppId
+	});
+	await context.stateStore.setSelectedApp(projectId, {
+		id: selectedApp.id,
+		name: selectedApp.name
+	});
+	return {
+		provider,
+		app: selectedApp,
+		resultTarget: {
+			workspace: target.workspace,
+			project: target.project,
+			branch: target.branch,
+			app: {
+				id: selectedApp.id,
+				name: selectedApp.name
+			}
+		}
+	};
+}
+function resolveDomainBranch(explicitBranchName) {
+	return {
+		name: explicitBranchName?.trim() || "production",
+		annotation: explicitBranchName ? "set by --branch" : "production default"
+	};
+}
+async function resolveDomainAppSelection(context, projectId, apps, options) {
+	if (options.explicitAppId) {
+		const matched = apps.find((app) => app.id === options.explicitAppId);
+		if (!matched) throw usageError("Selected app does not exist in the resolved production branch", `The app "${options.explicitAppId}" from ${PRISMA_APP_ID_ENV_VAR} could not be found in resolved project "${projectId}".`, `Unset ${PRISMA_APP_ID_ENV_VAR}, pass --app <name>, or deploy the app on the production branch.`, ["prisma-cli app deploy --branch production"], "app");
+		return matched;
+	}
+	const selectedApp = await resolveExistingAppSelection(context, projectId, apps, options.explicitAppName);
+	if (selectedApp) return selectedApp;
+	throw usageError("Custom domain requires an existing app on the production branch", "The resolved production branch does not have an app that can receive a custom domain.", "Deploy or promote an app to production first, then rerun the domain command.", ["prisma-cli app deploy --branch production", "prisma-cli app show"], "app");
+}
+async function resolveDomainByHostname(provider, appId, hostname, command) {
+	const matched = (await provider.listDomains(appId).catch((error) => {
+		throw domainCommandError(command, error, hostname);
+	})).find((domain) => sameDomainHostname(domain.hostname, hostname));
+	if (matched) return matched;
+	throw domainNotFoundError(hostname);
+}
+function normalizeDomainHostname(hostname) {
+	const normalized = hostname.trim().replace(/\.$/, "").toLowerCase();
+	if (!isValidDomainHostname(normalized)) throw new CliError({
+		code: "DOMAIN_HOSTNAME_INVALID",
+		domain: "app",
+		summary: `Invalid custom domain "${hostname}"`,
+		why: "Custom domains must be valid hostnames without protocol, path, wildcard, or port.",
+		fix: "Pass a hostname like shop.acme.com.",
+		exitCode: 2,
+		nextSteps: ["prisma-cli app domain add shop.acme.com"]
+	});
+	return normalized;
+}
+function isValidDomainHostname(hostname) {
+	if (hostname.length < 1 || hostname.length > 253) return false;
+	if (hostname.includes("://") || hostname.includes("/") || hostname.includes(":") || hostname.startsWith("*.")) return false;
+	const labels = hostname.split(".");
+	if (labels.length < 2) return false;
+	return labels.every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(label));
+}
+function sameDomainHostname(left, right) {
+	return left.trim().replace(/\.$/, "").toLowerCase() === right.trim().replace(/\.$/, "").toLowerCase();
+}
+function toAppDomainSummary(domain) {
+	return {
+		id: domain.id,
+		type: domain.type,
+		url: domain.url,
+		hostname: domain.hostname,
+		computeServiceId: domain.computeServiceId,
+		status: domain.status,
+		foundryStatus: domain.foundryStatus,
+		failureReason: domain.failureReason,
+		failureCategory: domain.failureCategory,
+		certExpiresAt: domain.certExpiresAt,
+		createdAt: domain.createdAt,
+		updatedAt: domain.updatedAt,
+		dnsRecords: toAppDomainDnsRecords(domain)
+	};
+}
+function toAppDomainDnsRecords(domain) {
+	return domain.dnsRecords.map((record) => ({
+		type: record.type,
+		name: record.name,
+		value: record.value,
+		ttl: record.ttl
+	}));
+}
+function buildDomainShowNextSteps(domain) {
+	if (domain.status === "active") return [];
+	if (domain.status === "failed") return [`prisma-cli app domain retry ${domain.hostname}`];
+	return [`prisma-cli app domain wait ${domain.hostname}`];
+}
+async function confirmDomainRemoval(context, target, hostname) {
+	if (context.flags.yes) return;
+	if (!canPrompt(context)) throw new CliError({
+		code: "CONFIRMATION_REQUIRED",
+		domain: "app",
+		summary: "Custom domain removal requires confirmation in the current mode",
+		why: "This command detaches a domain and cannot prompt for confirmation in the current mode.",
+		fix: `Pass --yes to confirm removal of "${hostname}", or rerun prisma-cli app domain remove in an interactive TTY.`,
+		exitCode: 1,
+		nextSteps: [`prisma-cli app domain remove ${hostname} --app ${target.app.name} --yes`]
+	});
+	if (!await confirmPrompt({
+		input: context.runtime.stdin,
+		output: context.output.stderr,
+		message: `Detach ${hostname} from App "${target.app.name}"?`,
+		initialValue: false
+	})) throw usageError("Custom domain removal canceled", "The command was canceled before the domain was detached.", "Rerun the command and confirm removal, or pass --yes.", [`prisma-cli app domain remove ${hostname} --app ${target.app.name} --yes`], "app");
+}
+function domainCommandError(command, error, hostname) {
+	if (error instanceof PreviewDomainApiError) {
+		if (command === "add" && (error.status === 400 || error.status === 422) && isDomainDnsError(error)) return domainDnsNotConfiguredError(hostname, error);
+		if (command === "add" && error.status === 400) return new CliError({
+			code: "DOMAIN_HOSTNAME_INVALID",
+			domain: "app",
+			summary: `Invalid custom domain "${hostname}"`,
+			why: error.message,
+			fix: "Pass a valid hostname like shop.acme.com and make sure DNS can be verified.",
+			debug: formatDebugDetails(error),
+			exitCode: 2,
+			nextSteps: ["prisma-cli app domain add shop.acme.com"]
+		});
+		if (command === "add" && (error.status === 429 || isDomainQuotaError(error))) return new CliError({
+			code: "DOMAIN_QUOTA_EXCEEDED",
+			domain: "app",
+			summary: "Custom domain quota exceeded",
+			why: error.message,
+			fix: "Remove an existing custom domain before adding another one.",
+			debug: formatDebugDetails(error),
+			exitCode: 1,
+			nextSteps: ["prisma-cli app domain remove <hostname>"]
+		});
+		if (command === "add" && error.status === 409) return domainAlreadyRegisteredError(hostname, error);
+		if (command === "add" && error.status === 422) return new CliError({
+			code: "NO_DEPLOYMENTS",
+			domain: "app",
+			summary: "Custom domain requires a live production deployment",
+			why: "The selected production app does not have a promoted version that can receive a custom domain.",
+			fix: "Deploy the app to the production branch, then rerun the domain command.",
+			debug: formatDebugDetails(error),
+			exitCode: 1,
+			nextSteps: ["prisma-cli app deploy --branch production", `prisma-cli app domain add ${hostname}`]
+		});
+		if ((command === "show" || command === "remove" || command === "retry" || command === "wait") && error.status === 404) return domainNotFoundError(hostname);
+		if (command === "retry" && error.status === 409) return new CliError({
+			code: "DOMAIN_RETRY_NOT_ELIGIBLE",
+			domain: "app",
+			summary: `Custom domain "${hostname}" is not eligible for retry`,
+			why: error.message,
+			fix: "Wait for the current verification or TLS step to finish, then rerun retry if the domain fails.",
+			debug: formatDebugDetails(error),
+			exitCode: 1,
+			nextSteps: [`prisma-cli app domain show ${hostname}`]
+		});
+	}
+	return new CliError({
+		code: "DEPLOY_FAILED",
+		domain: "app",
+		summary: `Custom domain ${command} failed`,
+		why: error instanceof Error ? error.message : String(error),
+		fix: "Retry the command, or rerun with --trace for more detailed diagnostics.",
+		debug: formatDebugDetails(error),
+		exitCode: 1,
+		nextSteps: [`prisma-cli app domain show ${hostname}`]
+	});
+}
+function isDomainQuotaError(error) {
+	if (error.status !== 409) return false;
+	const text = `${error.message} ${error.hint ?? ""}`.toLowerCase();
+	return text.includes("quota") || text.includes("maximum") || text.includes("limit");
+}
+function domainAlreadyRegisteredError(hostname, error) {
+	return new CliError({
+		code: "DOMAIN_ALREADY_REGISTERED",
+		domain: "app",
+		summary: `Custom domain "${hostname}" is already registered`,
+		why: error.hint ?? error.message,
+		fix: "Select the app that owns this hostname and remove it there, or contact support if you cannot access it.",
+		debug: formatDebugDetails(error),
+		exitCode: 1,
+		nextSteps: [`Select the owning app and remove ${hostname} there.`, "Contact Prisma support if you cannot access the owning app."]
+	});
+}
+function isDomainDnsError(error) {
+	const text = `${error.message} ${error.hint ?? ""}`.toLowerCase();
+	return text.includes("dns is not configured") || text.includes("dns verification failed") || text.includes("no cname") || text.includes("cname record") || text.includes("no a/aaaa") || /\bcname(?:s)?\s+to\b/.test(text);
+}
+function domainDnsNotConfiguredError(hostname, error) {
+	const target = extractDomainDnsTarget(error);
+	const record = target ? `CNAME ${hostname} -> ${target}` : null;
+	return new CliError({
+		code: "DOMAIN_DNS_NOT_CONFIGURED",
+		domain: "app",
+		summary: `DNS is not configured for "${hostname}"`,
+		why: error.hint ?? error.message,
+		fix: record ? `Add ${record} at your DNS provider, then rerun the domain command.` : "The platform did not return the required DNS target. Re-run with --trace for the underlying API response details.",
+		debug: formatDebugDetails(error),
+		exitCode: 1,
+		nextSteps: record ? [`add ${record}`, `prisma-cli app domain add ${hostname}`] : [`prisma-cli app domain add ${hostname} --trace`]
+	});
+}
+function extractDomainDnsTarget(error) {
+	const text = `${error.hint ?? ""} ${error.message}`;
+	return /\b((?:[a-z0-9-]+\.)+prisma\.build)\b/i.exec(text)?.[1]?.toLowerCase() ?? null;
+}
+function domainNotFoundError(hostname) {
+	return new CliError({
+		code: "DOMAIN_NOT_FOUND",
+		domain: "app",
+		summary: `Custom domain "${hostname}" not found`,
+		why: "The hostname is not attached to the selected app.",
+		fix: "Check the hostname and selected app, or add the domain first.",
+		exitCode: 1,
+		nextSteps: [`prisma-cli app domain add ${hostname}`]
+	});
+}
+function formatDomainFailureWhy(domain) {
+	if (domain.failureReason) return domain.failureCategory ? `${domain.failureCategory}: ${domain.failureReason}` : domain.failureReason;
+	return "The platform reported a terminal failed state for this custom domain.";
+}
+function parseDomainWaitTimeout(value) {
+	if (!value) return 900 * 1e3;
+	const trimmed = value.trim().toLowerCase();
+	if (trimmed === "0") return 0;
+	const match = /^(\d+)(ms|s|m|h)$/.exec(trimmed);
+	if (!match) throw usageError(`Invalid timeout "${value}"`, "Timeout must be a duration such as 0, 30s, 15m, or 1h.", "Pass --timeout 15m, or --timeout 0 to poll once.", ["prisma-cli app domain wait shop.acme.com --timeout 15m"], "app");
+	const amount = Number.parseInt(match[1], 10);
+	const unit = match[2];
+	return amount * (unit === "h" ? 3600 * 1e3 : unit === "m" ? 60 * 1e3 : unit === "s" ? 1e3 : 1);
+}
+function readDomainWaitPollIntervalMs(context) {
+	const raw = context.runtime.env.PRISMA_CLI_DOMAIN_WAIT_POLL_MS;
+	if (!raw) return 5e3;
+	const parsed = Number.parseInt(raw, 10);
+	return Number.isInteger(parsed) && parsed > 0 ? parsed : 5e3;
+}
+function emitDomainWaitStatus(context, event) {
+	if (context.flags.json) {
+		writeJsonEvent(context.output, {
+			type: "status",
+			command: "app.domain.wait",
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			data: {
+				hostname: event.hostname,
+				domainId: event.domainId,
+				previousStatus: event.previousStatus,
+				status: event.status,
+				elapsedMs: event.elapsedMs
+			}
+		});
+		return;
+	}
+	if (context.flags.quiet) return;
+	if (event.previousStatus === event.status) return;
+	const transition = event.previousStatus ? `${event.previousStatus} -> ${event.status}` : event.status;
+	context.output.stderr.write(`  ${transition} (${formatElapsed(event.elapsedMs)})\n`);
+}
+function formatElapsed(milliseconds) {
+	const seconds = Math.max(Math.floor(milliseconds / 1e3), 0);
+	const minutes = Math.floor(seconds / 60);
+	const remainingSeconds = seconds % 60;
+	return `${minutes}:${String(remainingSeconds).padStart(2, "0")}`;
+}
+async function sleep(milliseconds) {
+	if (milliseconds <= 0) return;
+	await new Promise((resolve) => setTimeout(resolve, milliseconds));
+}
 async function resolveDeployAppSelection(context, projectId, apps, options) {
 	if (options.explicitAppName) {
 		const matches = findAppsByName(apps, options.explicitAppName);
@@ -1671,21 +1965,5 @@ function sortApps(apps) {
 function toOptionalEnvVars(envVars) {
 	return Object.keys(envVars).length > 0 ? envVars : void 0;
 }
-/**
-* Emits a deprecation banner to stderr when the legacy single-shot
-* env-var commands are invoked. The banner is suppressed in --json
-* mode so machine consumers keep their JSON channel clean; --json
-* users discover the deprecation via release notes and the new
-* `prisma-cli project env` namespace's output anyway.
-*
-* Removal of these legacy commands is deliberately scoped out of the
-* Public Beta — see the Compute Beta plan, sub-track 3B.1, where the
-* Terminal team picks an explicit removal milestone.
-*/
-function emitLegacyEnvDeprecationWarning(context, legacyCommand, replacement) {
-	if (context.flags.json) return;
-	const message = `[deprecation] \`prisma-cli ${legacyCommand}\` is deprecated. Use \`prisma-cli ${replacement}\` instead.`;
-	context.runtime.stderr.write(`${message}\n`);
-}
 //#endregion
-export { runAppBuild, runAppDeploy, runAppListDeploys, runAppListEnv, runAppLogs, runAppOpen, runAppPromote, runAppRemove, runAppRollback, runAppRun, runAppShow, runAppShowDeploy, runAppUpdateEnv };
+export { runAppBuild, runAppDeploy, runAppDomainAdd, runAppDomainRemove, runAppDomainRetry, runAppDomainShow, runAppDomainWait, runAppListDeploys, runAppLogs, runAppOpen, runAppPromote, runAppRemove, runAppRollback, runAppRun, runAppShow, runAppShowDeploy };

package/dist/lib/app/domain-guidance.js

@@ -0,0 +1,14 @@
+//#region src/lib/app/domain-guidance.ts
+function formatDomainFailureFix(domain) {
+	if (domain.status !== "failed") return null;
+	const dnsRecord = domain.dnsRecords[0];
+	if (domain.failureCategory === "dns") {
+		if (dnsRecord) return `Add ${dnsRecord.type} ${dnsRecord.name} -> ${dnsRecord.value}, then run prisma-cli app domain retry ${domain.hostname}.`;
+		return `DNS verification failed, but the platform did not return a DNS record. Run prisma-cli app domain show ${domain.hostname} later, then retry when the DNS target is available.`;
+	}
+	if (domain.failureCategory === "acme") return `Retry TLS issuance with prisma-cli app domain retry ${domain.hostname}. Contact support if it fails again.`;
+	if (domain.failureCategory === "storage") return `Retry provisioning with prisma-cli app domain retry ${domain.hostname}. Contact support if it fails again.`;
+	return `Run prisma-cli app domain retry ${domain.hostname}. Contact support if it fails again.`;
+}
+//#endregion
+export { formatDomainFailureFix };