@runa-ai/runa-cli 0.7.0 → 0.7.2

package/dist/{dev-5YXNPTCJ.js → dev-MLRKIP7F.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { generateTablesManifest, writeEnvLocalBridge } from './chunk-FHG3ILE4.js';
-import { startAppBackground, waitForAppReady, detectApp } from './chunk-HD74F6W2.js';
-import './chunk-7B5C6U2K.js';
-import { manifestActor, supabaseStartActor, envCheckActor, depsInstallActor, detectManifestTask, detectDatabase } from './chunk-2APB25TT.js';
+import { generateTablesManifest, writeEnvLocalBridge } from './chunk-OBYZDT2E.js';
+import { startAppBackground, waitForAppReady, detectApp } from './chunk-FWMGC5FP.js';
+import './chunk-A6A7JIRD.js';
+import { manifestActor, supabaseStartActor, envCheckActor, depsInstallActor, detectManifestTask, detectDatabase } from './chunk-VSH3IXDQ.js';
 import { findRepoRoot } from './chunk-3WDV32GA.js';
 import './chunk-6FAU4IGR.js';
 import { createMachineStateChangeLogger } from './chunk-5FT3F36G.js';
 import './chunk-II7VYQEM.js';
-import { init_local_supabase, buildLocalDatabaseUrl, detectLocalSupabasePorts } from './chunk-VM3IWOT5.js';
+import { init_local_supabase, buildLocalDatabaseUrl, detectLocalSupabasePorts } from './chunk-QSEF4T3Y.js';
 import { secureExeca } from './chunk-RZLYEO4U.js';
 import { emitJsonSuccess } from './chunk-KE6QJBZG.js';
 import './chunk-WJXC4MVY.js';

package/dist/{doctor-MZLOA53G.js → doctor-ROSWSMLH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { runCheckCommand } from './chunk-QM53IQHM.js';
-import './chunk-644FVGIQ.js';
+import { runCheckCommand } from './chunk-2QX7T24B.js';
+import './chunk-WPMR7RQ4.js';
 import './chunk-DRSUEMAK.js';
 import './chunk-KE6QJBZG.js';
 import './chunk-WJXC4MVY.js';

package/dist/{env-SS66PZ4B.js → env-WNHJVLOT.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { tryResolveDatabaseUrl } from './chunk-KWX3JHCY.js';
 import { registerCleanup } from './chunk-TYIAD6SB.js';
+import { tryResolveDatabaseUrl } from './chunk-CKRLVEIO.js';
 import { isNonInteractiveEnabled } from './chunk-6Y3LAUGL.js';
-import './chunk-NPSRD26F.js';
-import { loadEnvFiles } from './chunk-644FVGIQ.js';
+import './chunk-UHDAYPHH.js';
+import { loadEnvFiles } from './chunk-WPMR7RQ4.js';
 import { getVercelRootDirectory } from './chunk-MXRWBNIY.js';
 import { syncRunaConfigWithVercel } from './chunk-6AALH2ED.js';
 import './chunk-DRSUEMAK.js';
 import './chunk-II7VYQEM.js';
-import { init_local_supabase, getLocalSupabaseEnvValues, getLocalValueDescriptions } from './chunk-VM3IWOT5.js';
+import { init_local_supabase, getLocalSupabaseEnvValues, getLocalValueDescriptions } from './chunk-QSEF4T3Y.js';
 import { emitJsonSuccess } from './chunk-KE6QJBZG.js';
 import './chunk-WJXC4MVY.js';
 import './chunk-HKUWEGUX.js';
@@ -231,6 +231,10 @@ function logRequiredSecrets(logger) {
   logger.info("   \u2022 SUPABASE_SERVICE_ROLE_KEY");
   logger.info("   \u2022 SUPABASE_PROJECT_REF");
   logger.info("   \u2022 DATABASE_URL (Pooler, port 6543)");
+  logger.info("   \u2022 DATABASE_URL_SERVICE (Pooler, port 6543)");
+  logger.info("");
+  logger.info("\u{1F4CB} Optional Vercel env vars:");
+  logger.info("   \u2022 DATABASE_URL_LISTENER (Direct, port 5432, for LISTEN/NOTIFY)");
 }
 async function runEnvCheckAction(options) {
   const logger = createCLILogger("env:check");
@@ -1203,7 +1207,8 @@ function writeEnvSetupFile(envVars, drizzleAppPassword, drizzleServicePassword,
 #
 # Next Steps:
 # 1. Review the values below
-# 2. Register to Vercel: echo "<VALUE>" | vercel env add <KEY>
+# 2. Register each Vercel value to development, preview, and production
+#    using printf '%s' to avoid adding a trailing newline
 # 3. Register to GitHub: gh secret set <KEY>
 # 4. Run RBAC setup: DRIZZLE_APP_PASSWORD="..." DRIZZLE_SERVICE_PASSWORD="..." pnpm db:setup-roles
 # 5. Delete this file: rm ${ENV_SETUP_TMP_FILE}
@@ -1211,7 +1216,10 @@ function writeEnvSetupFile(envVars, drizzleAppPassword, drizzleServicePassword,
 `;
   content += `# \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
 # Vercel Environment Variables
-# Register: echo "<VALUE>" | vercel env add <KEY>
+# Register with exact bytes (repeat for all environments):
+# printf '%s' "<VALUE>" | vercel env add <KEY> development
+# printf '%s' "<VALUE>" | vercel env add <KEY> preview
+# printf '%s' "<VALUE>" | vercel env add <KEY> production
 # \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
 `;
   for (const env of vercelVars) {
@@ -1651,6 +1659,7 @@ async function getSupabaseProjectInfo(projectRef, logger, rl, providedServiceRol
     return {
       projectRef,
       projectName: project.name,
+      region: project.region,
       anonKey: anon.key,
       serviceRoleKey: service.key,
       supabaseUrl: `https://${projectRef}.supabase.co`
@@ -1838,9 +1847,7 @@ async function setVercelEnvVar(linkedDir, key, value, overwrite, logger) {
         proc.stderr?.on("data", (data) => {
           stderr += data.toString();
         });
-        proc.stdin?.write(`${value}
-`);
-        proc.stdin?.end();
+        proc.stdin?.end(value);
         proc.on("close", (code) => {
           if (code === 0) {
             resolve5();
@@ -1981,6 +1988,10 @@ function buildEnvVarList(supabaseProject, supabaseRef, postgresPassword, drizzle
   const encodedPostgresPassword = encodePasswordForUrl(postgresPassword);
   const encodedDrizzleAppPassword = encodePasswordForUrl(drizzleAppPassword);
   const encodedDrizzleServicePassword = encodePasswordForUrl(drizzleServicePassword);
+  const directHost = `db.${supabaseRef}.supabase.co`;
+  const transactionPoolerHost = `aws-0-${supabaseProject.region}.pooler.supabase.com`;
+  const buildDirectUrl = (role, password) => `postgresql://${role}:${password}@${directHost}:5432/postgres`;
+  const buildTransactionPoolerUrl = (role, password) => `postgresql://${role}.${supabaseRef}:${password}@${transactionPoolerHost}:6543/postgres?pgbouncer=true`;
   return [
     // Supabase credentials
     {
@@ -2001,37 +2012,43 @@ function buildEnvVarList(supabaseProject, supabaseRef, postgresPassword, drizzle
       target: ["vercel"],
       description: "Supabase service role key (server-only)"
     },
+    {
+      key: "SUPABASE_PROJECT_REF",
+      value: supabaseRef,
+      target: ["vercel"],
+      description: "Supabase project reference ID"
+    },
     // Database URLs (Vercel)
     {
       key: "DATABASE_URL",
-      value: `postgresql://drizzle_app:${encodedDrizzleAppPassword}@db.${supabaseRef}.supabase.co:5432/postgres`,
+      value: buildTransactionPoolerUrl("drizzle_app", encodedDrizzleAppPassword),
       target: ["vercel"],
-      description: "App database URL (drizzle_app role, DML only)"
+      description: "Request runtime database URL (drizzle_app role, transaction pooler)"
     },
     {
-      key: "DATABASE_URL_ADMIN",
-      value: `postgresql://postgres:${encodedPostgresPassword}@db.${supabaseRef}.supabase.co:5432/postgres`,
+      key: "DATABASE_URL_LISTENER",
+      value: buildDirectUrl("drizzle_app", encodedDrizzleAppPassword),
       target: ["vercel"],
-      description: "Admin database URL (postgres role, DDL)"
+      description: "Listener database URL (drizzle_app role, direct connection for LISTEN/NOTIFY)"
     },
     {
       key: "DATABASE_URL_SERVICE",
-      value: `postgresql://drizzle_service:${encodedDrizzleServicePassword}@db.${supabaseRef}.supabase.co:5432/postgres`,
+      value: buildTransactionPoolerUrl("drizzle_service", encodedDrizzleServicePassword),
       target: ["vercel"],
-      description: "Service database URL (drizzle_service role, RLS bypassed - Webhooks/Background Jobs only)"
+      description: "Service database URL (drizzle_service role, transaction pooler for trusted server operations)"
     },
     // Database URLs (GitHub CI)
     {
       key: "GH_DATABASE_URL_ADMIN",
-      value: `postgresql://postgres:${encodedPostgresPassword}@db.${supabaseRef}.supabase.co:5432/postgres`,
+      value: buildDirectUrl("postgres", encodedPostgresPassword),
       target: ["github"],
-      description: "CI migrations URL (postgres role, DDL)"
+      description: "CI migrations URL (postgres role, direct connection for DDL)"
     },
     {
       key: "GH_DATABASE_URL",
-      value: `postgresql://drizzle_app:${encodedDrizzleAppPassword}@db.${supabaseRef}.supabase.co:5432/postgres`,
+      value: buildTransactionPoolerUrl("drizzle_app", encodedDrizzleAppPassword),
       target: ["github"],
-      description: "CI verification URL (drizzle_app role, DML)"
+      description: "CI verification URL (drizzle_app role, transaction pooler)"
     },
     // NOTE: VERCEL_PROJECT_ID is NOT registered to GitHub Secrets.
     // Vercel GitHub Integration handles deployments automatically (no CI secrets needed).

package/dist/{env-HMMRSYCI.js → env-XPPACZM4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-export { env, getDatabaseUrl, hasEnv, isCI, isDebug, sanitizeEnv } from './chunk-NPSRD26F.js';
-import './chunk-VM3IWOT5.js';
+export { env, getDatabaseUrl, hasEnv, isCI, isDebug, sanitizeEnv } from './chunk-UHDAYPHH.js';
+import './chunk-QSEF4T3Y.js';
 import './chunk-VRXHCR5K.js';
 
 createRequire(import.meta.url);

package/dist/{env-files-2UIUYLLR.js → env-files-HRNUGZ5O.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-export { loadEnvFiles } from './chunk-644FVGIQ.js';
+export { loadEnvFiles } from './chunk-WPMR7RQ4.js';
 import './chunk-DRSUEMAK.js';
 import './chunk-JMJP4A47.js';
 import './chunk-VRXHCR5K.js';

package/dist/{error-handler-HEXBRNVV.js → error-handler-YRQWRDEF.js}

@@ -99,6 +99,23 @@ var diagnosisRules = [
       "  runa build"
     ]
   },
+  // Database host resolution issues
+  {
+    name: "database-host-resolution",
+    matches: (msg) => msg.includes("DB_HOST_RESOLUTION_FAILED") || msg.includes("Could not resolve the preview database host") || msg.includes("Could not resolve the production database host") || msg.includes("could not translate host name") || msg.includes("nodename nor servname provided") || msg.includes("name or service not known"),
+    getSuggestions: () => [
+      "\u{1F310} Database host resolution issue detected.",
+      "",
+      "For preview / production targets:",
+      "  1. Verify the decrypted DATABASE_URL_ADMIN host is correct",
+      "  2. Check DNS resolution to the database host from this environment",
+      "  3. Re-run from a network that can reach the target database",
+      "",
+      "Useful checks:",
+      "  runa check",
+      "  nslookup <db-host>"
+    ]
+  },
   // Database connection issues
   {
     name: "database-connection",

package/dist/{hotfix-YA3DGLOM.js → hotfix-Z5EGVSMH.js}

@@ -2,12 +2,12 @@
 import { createRequire } from 'module';
 import './chunk-ZZOXM6Q4.js';
 import { createError } from './chunk-JQXOVCOP.js';
-import { tryResolveDatabaseUrl } from './chunk-KWX3JHCY.js';
-import './chunk-NPSRD26F.js';
-import { loadEnvFiles } from './chunk-644FVGIQ.js';
+import { tryResolveDatabaseUrl } from './chunk-CKRLVEIO.js';
+import './chunk-UHDAYPHH.js';
+import { loadEnvFiles } from './chunk-WPMR7RQ4.js';
 import { isPathContained } from './chunk-DRSUEMAK.js';
 import './chunk-II7VYQEM.js';
-import './chunk-VM3IWOT5.js';
+import './chunk-QSEF4T3Y.js';
 import './chunk-JMJP4A47.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { Command } from 'commander';

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
 import { getRequestedCommandNameFromArgv } from './chunk-UWWSAPDR.js';
-import { CLI_VERSION } from './chunk-AIP6MR42.js';
+import { CLI_VERSION } from './chunk-PMXE5XOJ.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { realpathSync } from 'fs';
 import { fileURLToPath } from 'url';
@@ -36,7 +36,7 @@ async function getProgram(options) {
   };
   const nextKey = getProgramCacheKey(resolvedOptions);
   if (!programInstance || programCacheKey !== nextKey) {
-    const { createProgram } = await import('./cli-2JNBJUBB.js');
+    const { createProgram } = await import('./cli-Q2XIQDRS.js');
     programInstance = await createProgram(resolvedOptions);
     programCacheKey = nextKey;
   }
@@ -60,7 +60,7 @@ async function runCliFromProcessArgv() {
     return;
   }
   const { setupSignalHandlers } = await import('./signal-handler-DO3OANW5.js');
-  const { executeProgram } = await import('./cli-2JNBJUBB.js');
+  const { executeProgram } = await import('./cli-Q2XIQDRS.js');
   setupSignalHandlers();
   const options = getProgramLoadOptions(argv);
   const program = await getProgram(options);
@@ -68,7 +68,7 @@ async function runCliFromProcessArgv() {
 }
 if (isDirectlyExecuted()) {
   runCliFromProcessArgv().catch(async (error) => {
-    const { handleCLIError } = await import('./error-handler-HEXBRNVV.js');
+    const { handleCLIError } = await import('./error-handler-YRQWRDEF.js');
     handleCLIError(error);
   });
 }

package/dist/{init-ZIL6LRFO.js → init-S2ATHLJ6.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'module';
 import { diagnoseInitFailure } from './chunk-AAIE4F2U.js';
 import { getVercelRootDirectory } from './chunk-MXRWBNIY.js';
-import { fetchTemplates } from './chunk-SGJG3BKD.js';
+import { fetchTemplates } from './chunk-Z7A4BEWF.js';
 import { syncRunaConfigWithVercel } from './chunk-6AALH2ED.js';
 import './chunk-DRSUEMAK.js';
 import './chunk-RZLYEO4U.js';

package/dist/{inject-test-attrs-P44BVTQS.js → inject-test-attrs-XN4I2AOR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { DEFAULT_INCLUDE_PATTERNS, DEFAULT_EXCLUDE_PATTERNS, injectTestAttrsAction } from './chunk-Z4Z5DNW4.js';
-export { processFiles } from './chunk-Z4Z5DNW4.js';
+import { DEFAULT_INCLUDE_PATTERNS, DEFAULT_EXCLUDE_PATTERNS, injectTestAttrsAction } from './chunk-B3POLMII.js';
+export { processFiles } from './chunk-B3POLMII.js';
 import './chunk-DRSUEMAK.js';
 import './chunk-KE6QJBZG.js';
 import './chunk-WJXC4MVY.js';

package/dist/internal/machines/index.d.ts

@@ -6,6 +6,6 @@
  * - Keep command handlers thin and consistent.
  */
 export { runMachine } from './machine-runner.js';
-export { getSnapshotError, getSnapshotStateName, isSnapshotComplete } from './snapshot-helpers.js';
+export { getSnapshotError, getSnapshotStateName, getSnapshotStatePaths, isSnapshotComplete, } from './snapshot-helpers.js';
 export type { StateE2EMeta } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/internal/machines/snapshot-helpers.d.ts

@@ -18,6 +18,12 @@ type SnapshotWithError = {
  * Supports flat states ("idle") and compound states ({ setup: "depsInstall" }).
  */
 export declare function getSnapshotStateName(snapshot: SnapshotWithValue): string;
+/**
+ * Collect all active leaf state paths.
+ *
+ * Supports parallel states by returning one path per active branch.
+ */
+export declare function getSnapshotStatePaths(snapshot: SnapshotWithValue): string[];
 /**
  * Check if a snapshot has reached final status.
  */

package/dist/{manifest-TMFLESHW.js → manifest-EGCAZ4TK.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { DEFAULT_INCLUDE_PATTERNS, DEFAULT_EXCLUDE_PATTERNS, injectTestAttrsAction } from './chunk-Z4Z5DNW4.js';
+import { DEFAULT_INCLUDE_PATTERNS, DEFAULT_EXCLUDE_PATTERNS, injectTestAttrsAction } from './chunk-B3POLMII.js';
 import './chunk-DRSUEMAK.js';
 import './chunk-KE6QJBZG.js';
 import './chunk-WJXC4MVY.js';