@supacloud/admin 0.14.3 → 0.15.1

package/dist/index.js

@@ -25791,6 +25791,8 @@ var ACTION_POLICY = {
     read: [
       "list",
       "get",
+      "endpoints",
+      "list_endpoints",
       "settings",
       "api_keys",
       "health",
@@ -25900,7 +25902,7 @@ function requestedProjectRef(moduleName, action, args) {
   if (moduleName === "ssh")
     return sshRequestedProjectRef(action, args);
   if (moduleName === "project") {
-    return ["list", "create"].includes(action) ? null : stringArgument(args, "ref");
+    return ["list", "list_endpoints", "create"].includes(action) ? null : stringArgument(args, "ref");
   }
   if (moduleName === "platform") {
     return PLATFORM_PROJECT_REF_ACTIONS.has(action) ? stringArgument(args, "ref") : null;
@@ -30011,7 +30013,7 @@ async function cleanedCredentialState(cleanup, sanitized) {
   return sanitized ? "absent" : "unknown";
 }
 async function removeFailedEnvFile(cleanup) {
-  const { directoryHandle, filename, openFile, fileIdentity, operations } = cleanup;
+  const { directoryHandle, openFile } = cleanup;
   if (!openFile) {
     try {
       await directoryHandle.close();
@@ -30427,6 +30429,133 @@ function projectGetRead(response, expectedRef) {
   const project = projectDetails(response.data, expectedRef);
   return project ? successfulResult(project) : failedResult("Invalid project response");
 }
+// ../cli/src/shared/tools/project-endpoint-read.ts
+var PROJECT_ENDPOINT_RESPONSE_MAX_BYTES = 256 * 1024;
+var PROJECT_ENDPOINT_LIST_RESPONSE_MAX_BYTES = 1024 * 1024;
+var PROJECT_REF_PATTERN2 = /^[a-z0-9-]{1,20}$/;
+var PROJECT_ENDPOINTS_SCHEMA = "supacloud.project-endpoints.v1";
+var PROJECT_ENDPOINT_SOURCES = new Set([
+  "explicit_api_domain",
+  "explicit_auth_domain",
+  "explicit_studio_domain",
+  "custom_domain",
+  "derived_api_domain",
+  "generated"
+]);
+var ROOT_KEYS = new Set(["schema", "project_ref", "endpoints"]);
+var ENDPOINTS_KEYS = new Set(["api", "auth", "studio"]);
+var ENDPOINT_KEYS = new Set(["origin", "host", "scheme", "source", "aliases"]);
+var MAX_PROJECTS2 = 1e4;
+var MAX_ALIASES = 64;
+function plainRecord2(candidate) {
+  if (!candidate || typeof candidate !== "object" || Array.isArray(candidate))
+    return null;
+  const prototype = Object.getPrototypeOf(candidate);
+  return prototype === Object.prototype || prototype === null ? candidate : null;
+}
+function hasOnlyKeys2(record, allowedKeys) {
+  return Object.keys(record).every((key) => allowedKeys.has(key));
+}
+function boundedText2(candidate, maxLength) {
+  return typeof candidate === "string" && candidate.length > 0 && candidate.length <= maxLength && !/[\u0000-\u001f\u007f]/u.test(candidate) ? candidate : null;
+}
+function canonicalHost(candidate, scheme) {
+  const host = boundedText2(candidate, 255);
+  if (!host)
+    return null;
+  try {
+    const parsed = new URL(`${scheme}://${host}`);
+    return parsed.username || parsed.password || parsed.pathname !== "/" || parsed.search || parsed.hash || parsed.host !== host ? null : host;
+  } catch {
+    return null;
+  }
+}
+function projectEndpoint2(candidate) {
+  const endpoint = plainRecord2(candidate);
+  if (!endpoint || !hasOnlyKeys2(endpoint, ENDPOINT_KEYS))
+    return null;
+  const scheme = endpoint.scheme === "http" || endpoint.scheme === "https" ? endpoint.scheme : null;
+  const origin = boundedText2(endpoint.origin, 2048);
+  const source = boundedText2(endpoint.source, 64);
+  if (!scheme || !origin || !source || !PROJECT_ENDPOINT_SOURCES.has(source))
+    return null;
+  let parsedOrigin;
+  try {
+    parsedOrigin = new URL(origin);
+  } catch {
+    return null;
+  }
+  if (parsedOrigin.protocol !== `${scheme}:` || parsedOrigin.origin !== origin || parsedOrigin.username || parsedOrigin.password || parsedOrigin.pathname !== "/" || parsedOrigin.search || parsedOrigin.hash)
+    return null;
+  const host = canonicalHost(endpoint.host, scheme);
+  if (!host || host !== parsedOrigin.host || !Array.isArray(endpoint.aliases) || endpoint.aliases.length > MAX_ALIASES)
+    return null;
+  const aliases = [];
+  const seenAliases = new Set;
+  for (const aliasCandidate of endpoint.aliases) {
+    const alias = canonicalHost(aliasCandidate, scheme);
+    if (!alias || alias === host || seenAliases.has(alias))
+      return null;
+    seenAliases.add(alias);
+    aliases.push(alias);
+  }
+  return { origin, host, scheme, source, aliases };
+}
+function projectEndpointProjection(candidate) {
+  const projection = plainRecord2(candidate);
+  if (!projection || !hasOnlyKeys2(projection, ROOT_KEYS) || projection.schema !== PROJECT_ENDPOINTS_SCHEMA || typeof projection.project_ref !== "string" || !PROJECT_REF_PATTERN2.test(projection.project_ref))
+    return null;
+  const endpoints = plainRecord2(projection.endpoints);
+  if (!endpoints || !hasOnlyKeys2(endpoints, ENDPOINTS_KEYS))
+    return null;
+  const api = projectEndpoint2(endpoints.api);
+  const auth = projectEndpoint2(endpoints.auth);
+  const studio = projectEndpoint2(endpoints.studio);
+  return api && auth && studio ? {
+    schema: PROJECT_ENDPOINTS_SCHEMA,
+    project_ref: projection.project_ref,
+    endpoints: { api, auth, studio }
+  } : null;
+}
+function validHttpStatus2(status) {
+  return Number.isSafeInteger(status) && status >= 100 && status <= 599;
+}
+function successfulResponse2(response) {
+  return response.ok === true && validHttpStatus2(response.status) && response.status >= 200 && response.status <= 299;
+}
+function failedResult2(message) {
+  return { text: `❌ ${message}`, isError: true };
+}
+function failedHttpResult2(label, status) {
+  return failedResult2(validHttpStatus2(status) ? `${label} request failed (${status})` : `${label} request failed`);
+}
+function successfulResult2(payload) {
+  return { text: JSON.stringify(payload, null, 2), isError: false };
+}
+function projectEndpointRead(response, expectedRef) {
+  if (!successfulResponse2(response))
+    return failedHttpResult2("Project endpoints", response.status);
+  const projection = projectEndpointProjection(response.data);
+  return projection && projection.project_ref === expectedRef ? successfulResult2(projection) : failedResult2("Invalid project endpoint response");
+}
+function projectEndpointListRead(response) {
+  if (!successfulResponse2(response))
+    return failedHttpResult2("Project endpoint list", response.status);
+  if (!Array.isArray(response.data) || response.data.length > MAX_PROJECTS2) {
+    return failedResult2("Invalid project endpoint list response");
+  }
+  const projections = [];
+  const refs = new Set;
+  for (const candidate of response.data) {
+    const projection = projectEndpointProjection(candidate);
+    if (!projection || refs.has(projection.project_ref)) {
+      return failedResult2("Invalid project endpoint list response");
+    }
+    refs.add(projection.project_ref);
+    projections.push(projection);
+  }
+  return successfulResult2(projections);
+}
 // src/shared/tools/project-runtime-snapshot.ts
 var RUNTIME_SNAPSHOT_SCHEMA = "supacloud.runtime-snapshot.v1";
 var ATTESTED_REVISION_PATTERN = /^hmac-sha256:[a-f0-9]{64}$/;
@@ -30914,13 +31043,18 @@ function resolveRef(refFromArgs, defaultRef) {
     throw new Error("'ref' is required for this action");
   return ref;
 }
+function projectEndpointProjectionPath(ref) {
+  return `/v1/projects/${encodeURIComponent(ref)}/endpoint/projection`;
+}
 function registerAdminProjectCliTools(server, http, options = {}) {
   const fileOperations = options.projectEnvFileOperations;
-  server.tool("project", "Platform-level project lifecycle management. Actions: list, create, get, delete, pause, restore, restart, settings, update_settings, api_keys, health, logs, tasks, services, runtime_snapshot, service_control", {
+  server.tool("project", "Platform-level project lifecycle management. Actions: list, list_endpoints, create, get, endpoints, delete, pause, restore, restart, settings, update_settings, api_keys, health, logs, tasks, services, runtime_snapshot, service_control", {
     action: withDescription(stringEnum([
       "list",
+      "list_endpoints",
       "create",
       "get",
+      "endpoints",
       "delete",
       "pause",
       "restore",
@@ -30935,7 +31069,7 @@ function registerAdminProjectCliTools(server, http, options = {}) {
       "runtime_snapshot",
       "service_control"
     ]), "Action to perform"),
-    ref: optional(Type.String(), "[*] Project ref (required for most actions except 'list' and 'create')"),
+    ref: optional(Type.String(), "[*] Project ref (required for most actions except 'list', 'list_endpoints', and 'create')"),
     name: optional(Type.String(), "[create] Project name"),
     region: optional(Type.String(), "[create] Region (default: local)"),
     organization_id: optional(Type.String(), "[create] Organization ID"),
@@ -30972,6 +31106,10 @@ function registerAdminProjectCliTools(server, http, options = {}) {
         return projectReadResponse(projectListRead(await http.get("/v1/projects", {
           maxResponseBytes: PROJECT_READ_RESPONSE_MAX_BYTES
         })));
+      case "list_endpoints":
+        return projectReadResponse(projectEndpointListRead(await http.get("/v1/projects/endpoints", {
+          maxResponseBytes: PROJECT_ENDPOINT_LIST_RESPONSE_MAX_BYTES
+        })));
       case "create": {
         if (!name)
           throw new Error("'name' is required for create");
@@ -31015,6 +31153,12 @@ function registerAdminProjectCliTools(server, http, options = {}) {
           maxResponseBytes: PROJECT_READ_RESPONSE_MAX_BYTES
         }), resolvedRef));
       }
+      case "endpoints": {
+        const resolvedRef = resolveRef(ref);
+        return projectReadResponse(projectEndpointRead(await http.get(projectEndpointProjectionPath(resolvedRef), {
+          maxResponseBytes: PROJECT_ENDPOINT_RESPONSE_MAX_BYTES
+        }), resolvedRef));
+      }
       case "delete": {
         const resolvedRef = resolveRef(ref);
         text = simple(await http.delete(`/v1/projects/${resolvedRef}`), `Project ${resolvedRef} deleted`);
@@ -31425,7 +31569,7 @@ import { createHash as createHash3 } from "node:crypto";
 import { constants as fsConstants2 } from "node:fs";
 import { open as open2 } from "node:fs/promises";
 import { resolve as resolve3 } from "node:path";
-var PROJECT_REF_PATTERN2 = /^[A-Za-z0-9_-]{1,20}$/u;
+var PROJECT_REF_PATTERN3 = /^[A-Za-z0-9_-]{1,20}$/u;
 var DEPLOYMENT_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/u;
 var RELEASE_ID_PATTERN = /^[0-9a-f]{64}$/u;
 var MUTATION_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
@@ -31468,7 +31612,7 @@ function releaseRecord(candidate) {
     "created_at",
     "kind"
   ];
-  if (!exactKeys(record, keys) || record.schema !== "supacloud.frontend-release.v1" || typeof record.project_ref !== "string" || !PROJECT_REF_PATTERN2.test(record.project_ref) || typeof record.deployment_id !== "string" || !DEPLOYMENT_ID_PATTERN.test(record.deployment_id) || typeof record.release_id !== "string" || !RELEASE_ID_PATTERN.test(record.release_id) || record.sha256 !== record.release_id || typeof record.tree_sha256 !== "string" || !RELEASE_ID_PATTERN.test(record.tree_sha256) || !Number.isSafeInteger(record.size_bytes) || Number(record.size_bytes) < 1 || !Number.isSafeInteger(record.file_count) || Number(record.file_count) < 1 || !canonicalTimestamp3(record.created_at) || record.kind !== "prebuilt_static")
+  if (!exactKeys(record, keys) || record.schema !== "supacloud.frontend-release.v1" || typeof record.project_ref !== "string" || !PROJECT_REF_PATTERN3.test(record.project_ref) || typeof record.deployment_id !== "string" || !DEPLOYMENT_ID_PATTERN.test(record.deployment_id) || typeof record.release_id !== "string" || !RELEASE_ID_PATTERN.test(record.release_id) || record.sha256 !== record.release_id || typeof record.tree_sha256 !== "string" || !RELEASE_ID_PATTERN.test(record.tree_sha256) || !Number.isSafeInteger(record.size_bytes) || Number(record.size_bytes) < 1 || !Number.isSafeInteger(record.file_count) || Number(record.file_count) < 1 || !canonicalTimestamp3(record.created_at) || record.kind !== "prebuilt_static")
     return null;
   return {
     project_ref: record.project_ref,
@@ -31514,7 +31658,7 @@ function releaseInventory(candidate, expected) {
     "releases",
     "next_cursor"
   ];
-  if (!exactKeys(record, keys) || typeof record.project_ref !== "string" || !PROJECT_REF_PATTERN2.test(record.project_ref) || typeof record.deployment_id !== "string" || !DEPLOYMENT_ID_PATTERN.test(record.deployment_id) || !Array.isArray(record.releases))
+  if (!exactKeys(record, keys) || typeof record.project_ref !== "string" || !PROJECT_REF_PATTERN3.test(record.project_ref) || typeof record.deployment_id !== "string" || !DEPLOYMENT_ID_PATTERN.test(record.deployment_id) || !Array.isArray(record.releases))
     return null;
   const activeReleaseId = nullableIdentity(record.active_release_id, RELEASE_ID_PATTERN);
   const activeActivationId = nullableIdentity(record.active_activation_id, MUTATION_ID_PATTERN);
@@ -31535,7 +31679,7 @@ function releaseInventory(candidate, expected) {
   };
 }
 function releaseEndpoint(projectRef, deploymentId) {
-  if (!PROJECT_REF_PATTERN2.test(projectRef))
+  if (!PROJECT_REF_PATTERN3.test(projectRef))
     throw new Error("'ref' is invalid for frontend releases");
   if (!DEPLOYMENT_ID_PATTERN.test(deploymentId))
     throw new Error("'id' is invalid for frontend releases");
@@ -31896,7 +32040,7 @@ Actions: list_releases, get_release, upload_release, activate_release`, {
 // package.json
 var package_default = {
   name: "@supacloud/admin",
-  version: "0.14.3",
+  version: "0.15.1",
   description: "Platform administration CLI for SupaCloud operators",
   type: "module",
   main: "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/admin",
-  "version": "0.14.3",
+  "version": "0.15.1",
   "description": "Platform administration CLI for SupaCloud operators",
   "type": "module",
   "main": "./dist/index.js",