@runa-ai/runa-cli 0.7.1 → 0.7.3

package/dist/{template-check-FFJVDLBF.js → template-check-BDFMT6ZO.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { getErrorMessage } from './chunk-EMB6IZFT.js';
+import { getErrorMessage } from './chunk-XVNDDHAF.js';
 import { findRepoRoot } from './chunk-3WDV32GA.js';
 import { createMachineStateChangeLogger } from './chunk-5FT3F36G.js';
 import { getOutputFormatFromEnv } from './chunk-HKUWEGUX.js';

package/dist/{upgrade-7TWORWBV.js → upgrade-7L4JIE4K.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { fetchTemplates } from './chunk-CCW3PLQY.js';
+import { fetchTemplates } from './chunk-3JO6YP3T.js';
 import { updateRunaConfigSdkVersion } from './chunk-6AALH2ED.js';
 import './chunk-DRSUEMAK.js';
 import './chunk-RZLYEO4U.js';

package/dist/utils/db-url-utils.d.ts

@@ -0,0 +1,81 @@
+/**
+ * AI HINT: Database URL normalization utilities for CI operations
+ *
+ * Purpose: Normalize database URLs for DDL operations and catalog queries
+ * Shared: These utilities match SDK's behavior for consistent handling
+ *
+ * Key transformations:
+ * 1. Port conversion: Transaction Pooler (6543) → Session Pooler (5432)
+ * 2. pgbouncer cleanup: Remove pgbouncer parameter for Session Pooler
+ * 3. IPv4 resolution: GitHub Actions runners can't reach IPv6-only hosts
+ */
+/**
+ * Resolve hostname to IPv4 address using getent (Linux).
+ *
+ * This is critical for GitHub Actions where IPv6 may not be routable to Supabase.
+ * Matches SDK's resolveHostToIPv4 behavior.
+ *
+ * @param hostname - The hostname to resolve
+ * @returns IPv4 address if resolvable, null otherwise
+ */
+export declare function resolveHostToIPv4(hostname: string): string | null;
+/**
+ * Normalize database URL for DDL reads and psql operations.
+ *
+ * Handles three critical issues:
+ * 1. Port conversion: Transaction Pooler (6543) → Session Pooler (5432)
+ *    - DDL and catalog reads are more reliable via Session Pooler
+ * 2. pgbouncer cleanup: Remove pgbouncer parameter for Session Pooler
+ *    - Session Pooler (5432) does NOT accept pgbouncer parameter
+ * 3. IPv4 resolution: GitHub Actions runners can't reach IPv6-only hosts
+ *    - This matches SDK's normalizeDatabaseUrlForDDL behavior
+ *
+ * @param databaseUrl - The database URL to normalize
+ * @returns Normalized database URL suitable for DDL operations
+ */
+export declare function normalizeDatabaseUrlForDdl(databaseUrl: string): string;
+/**
+ * Get safe database target string for logging (without password).
+ *
+ * @param databaseUrl - The database URL
+ * @returns Safe string for logging
+ */
+export declare function getSafeDatabaseTarget(databaseUrl: string): string;
+/**
+ * Escape SQL literal value for safe inclusion in SQL strings.
+ *
+ * @param value - The string value to escape
+ * @returns Escaped string safe for SQL literals
+ */
+export declare function escapeSqlLiteral(value: string): string;
+/**
+ * Parse PostgreSQL boolean result to JavaScript boolean.
+ *
+ * PostgreSQL returns 't', 'true', or '1' for true values.
+ * This utility normalizes these variants.
+ *
+ * @param value - The PostgreSQL boolean string
+ * @returns JavaScript boolean
+ */
+export declare function parseBoolish(value: string): boolean;
+/**
+ * Check if a hostname resolves ONLY to IPv6 (no IPv4).
+ *
+ * This indicates that Supabase IPv4 Add-on is not enabled.
+ * GitHub Actions cannot reach IPv6-only hosts.
+ *
+ * @param hostname - The hostname to check
+ * @returns true if hostname resolves ONLY to IPv6, false otherwise
+ */
+export declare function isIPv6Only(hostname: string): boolean;
+/**
+ * Enhance error message with actionable advice.
+ *
+ * Detects common error patterns and adds clear guidance for users.
+ *
+ * @param error - Original error message
+ * @param databaseUrl - The database URL that failed (optional)
+ * @returns Enhanced error message with guidance
+ */
+export declare function enhanceConnectionError(error: string, databaseUrl?: string): string;
+//# sourceMappingURL=db-url-utils.d.ts.map

package/dist/validators/risk-detector-plpgsql.d.ts

@@ -5,5 +5,7 @@
  * Design: Keep heavy PL/pgSQL parsing logic isolated from risk-detector-core import path.
  */
 import type { SchemaRisk } from './risk-detector-types.js';
-export declare function detectPlpgsqlDynamicExecutionRisks(content: string): SchemaRisk[];
+export declare function detectPlpgsqlDynamicExecutionRisks(content: string, options?: {
+    filePath?: string;
+}): Promise<SchemaRisk[]>;
 //# sourceMappingURL=risk-detector-plpgsql.d.ts.map

package/dist/{vuln-check-6CMNPSBR.js → vuln-check-D575VXIQ.js}

@@ -71,7 +71,7 @@ var vulnCheckCommand = new Command("vuln-check").description("Run comprehensive
   const logger = createCLILogger("vuln-check");
   const isJsonMode = getOutputFormatFromEnv() === "json" || options.format === "json";
   try {
-    const { VulnChecker } = await import('./vuln-checker-EJJTNDNE.js');
+    const { VulnChecker } = await import('./vuln-checker-QV6XODTJ.js');
     const categoryMap = {
       code: ["injection", "auth", "crypto"],
       deps: ["dependency"],

package/dist/{vuln-checker-EJJTNDNE.js → vuln-checker-QV6XODTJ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'module';
-import { CLI_VERSION } from './chunk-AFY3TX4I.js';
+import { CLI_VERSION } from './chunk-AO554K3G.js';
 import { init_esm_shims } from './chunk-VRXHCR5K.js';
 import { glob } from 'glob';
 import { exec } from 'child_process';

package/dist/{watch-PNTKZYFB.js → watch-AL4LCBRM.js}

@@ -284,7 +284,7 @@ function validateSqlSchema(content, errors, warnings) {
 var riskDetectorLoader = null;
 function loadRiskDetectorModule() {
   if (!riskDetectorLoader) {
-    riskDetectorLoader = import('./risk-detector-4U6ZJ2G5.js').then((module) => ({
+    riskDetectorLoader = import('./risk-detector-S7XQF4I2.js').then((module) => ({
       detectSchemaRisks: module.detectSchemaRisks
     })).catch((error) => {
       riskDetectorLoader = null;

package/dist/{workflow-H75N4BXX.js → workflow-UZIZ2JUS.js}

@@ -25,14 +25,13 @@ var DeployProductionOutputSchema = z.object({
 var deployProductionCommand = new Command("deploy-production").description("Deploy schema to production database (unified command)").requiredOption(
   "--db-url <url>",
   "Production database URL (admin/DDL)",
-  process.env.GH_DATABASE_URL_ADMIN || process.env.GH_DATABASE_URL
+  process.env.GH_DATABASE_URL_ADMIN
 ).option("--skip-validation", "Skip schema validation (not recommended)", false).option("--skip-risk-detection", "Skip risk detection (not recommended)", false).option("--max-retries <number>", "Maximum retry attempts for schema application", "3").action(
   async (options) => {
     try {
       if (!options.dbUrl) {
         throw new CLIError("Production database URL not provided", "PRODUCTION_DB_URL_MISSING", [
-          "Set GH_DATABASE_URL_ADMIN environment variable (recommended for DDL)",
-          "Or set GH_DATABASE_URL environment variable",
+          "Set GH_DATABASE_URL_ADMIN environment variable (required for DDL)",
           "Or use --db-url <url>"
         ]);
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runa-ai/runa-cli",
-  "version": "0.7.1",
+  "version": "0.7.3",
   "private": false,
   "description": "AI-powered DevOps CLI",
   "type": "module",
@@ -56,8 +56,8 @@
     "typescript": "5.9.3",
     "xstate": "5.28.0",
     "zod": "4.3.6",
-    "@runa-ai/runa": "0.7.1",
-    "@runa-ai/runa-xstate-test-plugin": "0.5.58"
+    "@runa-ai/runa-xstate-test-plugin": "0.5.58",
+    "@runa-ai/runa": "0.7.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/dist/chunk-AKZAN4BC.js

@@ -1,90 +0,0 @@
-#!/usr/bin/env node
-import { createRequire } from 'module';
-import { env } from './chunk-NPSRD26F.js';
-import { redactSecrets } from './chunk-II7VYQEM.js';
-import { init_local_supabase, buildLocalDatabaseUrl } from './chunk-VM3IWOT5.js';
-import { init_esm_shims } from './chunk-VRXHCR5K.js';
-import { CLIError } from '@runa-ai/runa';
-
-createRequire(import.meta.url);
-
-// src/commands/db/utils/db-target.ts
-init_esm_shims();
-init_local_supabase();
-function getLocalDatabaseUrl() {
-  return buildLocalDatabaseUrl(process.cwd());
-}
-function isLocalHostname(hostname) {
-  return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1" || hostname === "host.docker.internal";
-}
-function isLocalDatabaseUrl(url) {
-  try {
-    const parsed = new URL(url);
-    return isLocalHostname(parsed.hostname);
-  } catch {
-    return false;
-  }
-}
-function getExplicitLocalAdminUrl() {
-  const explicitAdminUrl = process.env.DATABASE_URL_ADMIN?.trim();
-  if (!explicitAdminUrl) return void 0;
-  return isLocalDatabaseUrl(explicitAdminUrl) ? explicitAdminUrl : void 0;
-}
-function resolveDatabaseUrl(environment) {
-  switch (environment) {
-    case "local": {
-      const url = getExplicitLocalAdminUrl() || getLocalDatabaseUrl();
-      if (!isLocalDatabaseUrl(url)) {
-        throw new CLIError("Local database URL appears to be a remote URL", "LOCAL_DB_URL_REMOTE", [
-          "Local operations should use the local Supabase instance",
-          // SECURITY (Issue #513): Redact credentials from database URL in error message
-          `Current URL: ${redactSecrets(url)}`,
-          "If you need to connect to a remote DB, use --env preview or --env production"
-        ]);
-      }
-      return url;
-    }
-    case "preview": {
-      const url = process.env.DATABASE_URL_ADMIN || env.DATABASE_URL || process.env.DATABASE_URL;
-      if (!url) {
-        throw new CLIError("Preview database URL not found", "PREVIEW_DB_URL_NOT_FOUND", [
-          "Set DATABASE_URL_ADMIN environment variable (for DDL/migrations)",
-          "Or set DATABASE_URL as fallback"
-        ]);
-      }
-      return url;
-    }
-    case "main":
-    case "production": {
-      const url = process.env.GH_DATABASE_URL_ADMIN || process.env.DATABASE_URL_ADMIN || process.env.GH_DATABASE_URL || env.DATABASE_URL || process.env.DATABASE_URL;
-      if (!url) {
-        throw new CLIError("Production database URL not found", "PRODUCTION_DB_URL_NOT_FOUND", [
-          "Set DATABASE_URL_ADMIN environment variable (for DDL/migrations)",
-          "Or set GH_DATABASE_URL_ADMIN (CI) / DATABASE_URL as fallback"
-        ]);
-      }
-      if (isLocalDatabaseUrl(url)) {
-        throw new CLIError(
-          "Production database URL points to localhost",
-          "PRODUCTION_DB_URL_IS_LOCAL",
-          [
-            "Use --env local for local Supabase operations",
-            "Production operations require a remote database URL",
-            "Set DATABASE_URL_ADMIN or GH_DATABASE_URL_ADMIN to the production database URL"
-          ]
-        );
-      }
-      return url;
-    }
-  }
-}
-function tryResolveDatabaseUrl(environment) {
-  try {
-    return resolveDatabaseUrl(environment);
-  } catch (error) {
-    if (error instanceof CLIError) return void 0;
-    throw error;
-  }
-}
-
-export { resolveDatabaseUrl, tryResolveDatabaseUrl };

package/dist/commands/ci/machine/actors/finalize/summary.d.ts

@@ -1,32 +0,0 @@
-/**
- * AI HINT: CI Summary Writer Actor
- *
- * Purpose: Write structured CI summary to .runa/tmp/ci-summary.json
- * Pattern: Fine-grained actor for single step
- *
- * Used in ci-pr-local mode (not ci-local):
- * - Write summary for PR
- *
- * Contract:
- * - Always writes .runa/tmp/ci-summary.json
- * - Shape is stable for AI + tooling consumption
- */
-import { type CiSummary } from '../../../utils/ci-summary.js';
-export interface WriteSummaryInput {
-    cwd?: string;
-    summary: CiSummary;
-}
-export interface WriteSummaryOutput {
-    filePath: string;
-    error?: string;
-}
-/**
- * Write CI summary to file.
- *
- * @param input - Summary data
- * @returns Path to written file
- */
-export declare const writeSummaryActor: import("xstate").PromiseActorLogic<WriteSummaryOutput, WriteSummaryInput, import("xstate").EventObject>;
-export type { CiSummary };
-export { type CiLayerStatus, CiLayerStatusSchema, type CiStepStatus, CiStepStatusSchema, CiSummarySchema, type LayerBlockingLevel, LayerBlockingLevelSchema, } from '../../../utils/ci-summary.js';
-//# sourceMappingURL=summary.d.ts.map