@supacloud/cli 0.104.0 → 0.105.0

package/dist/index.js

@@ -9996,6 +9996,7 @@ var reference = String2({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z][A-Za
 var references = _Array_(reference, { uniqueItems: true });
 var kind = Union([Literal("api"), Literal("jobs"), Literal("webhook"), Literal("function")]);
 var isolation = Union([Literal("shared"), Literal("process")]);
+var mode = Union([Literal("required"), Literal("none")]);
 var DeliveryFilePathSchema = String2({
   maxLength: 512,
   pattern: "^(?:[A-Za-z0-9_-][A-Za-z0-9_.-]*/)*[A-Za-z0-9_-][A-Za-z0-9_.-]*$"
@@ -10069,6 +10070,7 @@ var routeSchema = _Object_({
   ]),
   path: String2(),
   command: Optional(String2()),
+  idempotency: Optional(mode),
   reason: Union([Literal("default-http"), Literal("explicit-module")])
 }, objectOptions);
 var jobSchema = _Object_({
@@ -10213,7 +10215,8 @@ var DeliveryBuildManifestSchema = _Object_({
   routes: _Array_(_Object_({
     method: String2(),
     path: String2(),
-    target: String2()
+    target: String2(),
+    idempotency: Optional(Union([Literal("required"), Literal("none")]))
   }, closed2)),
   jobs: _Array_(_Object_({ name: String2(), target: String2() }, closed2))
 }, closed2);
@@ -10275,7 +10278,12 @@ function parseDeliveryBuildManifest(value) {
       throw new Error("Invalid delivery object inventory.");
     }
   }
-  const routes = value.plan.targets.flatMap((target) => target.routes.map((route) => ({ method: route.method, path: route.path, target: target.name })));
+  const routes = value.plan.targets.flatMap((target) => target.routes.map((route) => ({
+    method: route.method,
+    path: route.path,
+    target: target.name,
+    ...route.idempotency === undefined ? {} : { idempotency: route.idempotency }
+  })));
   const jobs = value.plan.targets.flatMap((target) => target.jobs.map((job) => ({ name: job.name, target: target.name })));
   if (canonical(value.routes) !== canonical(routes) || canonical(value.jobs) !== canonical(jobs)) {
     throw new Error("Delivery mappings do not match planned ownership.");
@@ -21481,9 +21489,13 @@ function uniqueToolName(name, moduleName, used) {
 }
 function findRouteForCommand(manifest, commandClassName) {
   for (const module of manifest.modules) {
+    const command = module.commands.find((candidate) => candidate.className === commandClassName || candidate.name === commandClassName);
+    if (!command)
+      continue;
     for (const controller of module.controllers) {
       for (const route of controller.routes) {
-        if (route.command !== commandClassName)
+        const transition = module.featureSpec?.transitions.find((candidate) => candidate.route !== undefined && (candidate.command === command.className || candidate.command === command.name) && candidate.route === `${route.method} ${controller.path}${route.path}`);
+        if (route.command !== command.className && route.command !== command.name && transition === undefined)
           continue;
         return {
           httpMethod: route.method,
@@ -21576,25 +21588,25 @@ var starter_metadata_default = {
   generatedBy: "supacloud/starter-metadata-v1",
   packages: {
     compiler: {
-      version: "0.48.0"
+      version: "0.49.0"
     },
     app: {
-      version: "0.29.0",
+      version: "0.30.0",
       dependencies: {
         rxjs: "7.8.2"
       }
     },
     elysia: {
-      version: "0.34.0"
+      version: "0.35.0"
     },
     commands: {
-      version: "0.10.0"
+      version: "0.11.0"
     },
     contracts: {
-      version: "0.12.0"
+      version: "0.13.0"
     },
     db: {
-      version: "0.19.0",
+      version: "0.20.0",
       peerDependencies: {
         "drizzle-orm": "1.0.0-rc.5-5935859"
       },
@@ -21603,7 +21615,7 @@ var starter_metadata_default = {
       }
     },
     sdk: {
-      version: "0.44.0",
+      version: "0.45.0",
       peerDependencies: {
         "@supabase/supabase-js": "^2.117.3"
       }
@@ -26248,6 +26260,10 @@ function featureScaffold(name, className, governance) {
 export const ${className}Params = t.Object({
     id: t.String({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z0-9_-]+$" }),
 });
+export const ${className}ReceiptParams = t.Object({
+    id: t.String({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z0-9_-]+$" }),
+    operationId: t.String({ minLength: 1, maxLength: 512, pattern: "^[A-Za-z0-9._:-]+$" }),
+});
 export const ${className}ListQuery = t.Object({
     state: t.Optional(t.Union([t.Literal("draft"), t.Literal("approved")])),
 });
@@ -26260,6 +26276,33 @@ export const ${className}Row = t.Object({
     state: t.String(),
     version: t.Integer({ minimum: 1 }),
 });
+export const ${className}Receipt = t.Object({
+    operationId: t.String({ minLength: 1, maxLength: 512 }),
+    status: t.Union([
+        t.Literal("pending"), t.Literal("confirmed"), t.Literal("failed"), t.Literal("unknown"),
+    ]),
+    state: t.String(),
+    version: t.Integer({ minimum: 1 }),
+});
+export const ${className}JobStatus = t.Object({
+    operationId: t.String({ minLength: 1, maxLength: 512 }),
+    status: t.Union([
+        t.Literal("queued"), t.Literal("running"), t.Literal("completed"),
+        t.Literal("failed"), t.Literal("cancelled"), t.Literal("unknown"),
+    ]),
+    errorCode: t.Optional(t.String({ minLength: 1, maxLength: 128 })),
+});
+/** Query tags are explicit cache contracts; use them with @supacloud/query. */
+export const ${className}QueryTags = {
+    list: ${JSON.stringify(`${name}.list`)},
+    detail: ${JSON.stringify(`${name}.detail`)},
+    receipt: ${JSON.stringify(`${name}.receipt`)},
+} as const;
+export const ${className}ApproveInvalidateTags = [
+    ${className}QueryTags.list,
+    ${className}QueryTags.detail,
+    ${className}QueryTags.receipt,
+] as const;
 export const ${className}ListResponse = t.Array(${className}Row);
 export const ${className}RefreshInput = t.Object({
     id: t.String({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z0-9_-]+$" }),
@@ -26272,6 +26315,9 @@ export const ${className}RefreshInput = t.Object({
 import type {
     ${className}ApproveBody,
     ${className}ListQuery,
+    ${className}Receipt,
+    ${className}ReceiptParams,
+    ${className}JobStatus,
     ${className}Row,
     ${className}RefreshInput,
 } from "./${name}.contracts";
@@ -26281,7 +26327,9 @@ export type ${className}ListInput = StaticDecode<typeof ${className}ListQuery>;
 export type ${className}ApproveInput = StaticDecode<typeof ${className}ApproveBody>;
 export type ${className}ApproveCommand = ${className}ApproveInput & { id: string };
 export type ${className}Result = StaticDecode<typeof ${className}Row>;
+export type ${className}ReceiptResult = StaticDecode<typeof ${className}Receipt>;
 export type ${className}RefreshJobInput = StaticDecode<typeof ${className}RefreshInput>;
+export type ${className}JobStatusResult = StaticDecode<typeof ${className}JobStatus>;
 
 export interface ${className}ReadPort {
     list(context: FeatureRequestContext, input: ${className}ListInput): Promise<${className}Result[]>;
@@ -26292,12 +26340,26 @@ export interface ${className}WritePort {
     approve(context: FeatureRequestContext, input: ${className}ApproveCommand): Promise<${className}Result>;
 }
 
+export interface ${className}ReceiptPort {
+    lookup(context: FeatureRequestContext, input: { id: string; operationId: string }): Promise<${className}ReceiptResult>;
+}
+
+export interface ${className}JobStatusPort {
+    lookup(context: FeatureRequestContext, input: { id: string; operationId: string }): Promise<${className}JobStatusResult>;
+}
+
 export const ${className}Reader = new InjectionToken<${className}ReadPort>(
     "${name}.reader", { scope: "request" },
 );
 export const ${className}Writer = new InjectionToken<${className}WritePort>(
     "${name}.writer", { scope: "request" },
 );
+export const ${className}Receipts = new InjectionToken<${className}ReceiptPort>(
+    "${name}.receipts", { scope: "request" },
+);
+export const ${className}JobStatuses = new InjectionToken<${className}JobStatusPort>(
+    "${name}.job-statuses", { scope: "request" },
+);
 `,
     [`${name}.service.ts`]: `import {
     Inject, Injectable, Optional, REQUEST_CONTEXT, requireFeatureRequestContext,
@@ -26305,10 +26367,15 @@ export const ${className}Writer = new InjectionToken<${className}WritePort>(
 } from "@supacloud/app/core";
 import {
     ${className}Reader,
+    ${className}JobStatuses,
+    ${className}Receipts,
     ${className}Writer,
     type ${className}ApproveInput,
     type ${className}ReadPort,
     type ${className}Result,
+    type ${className}ReceiptPort,
+    type ${className}JobStatusPort,
+    type ${className}JobStatusResult,
     type ${className}WritePort,
 } from "./${name}.model";
 
@@ -26318,6 +26385,8 @@ export class ${className}Service {
         @Inject(REQUEST_CONTEXT) private readonly requestContext: unknown,
         @Inject(${className}Reader) @Optional() private readonly reader?: ${className}ReadPort,
         @Inject(${className}Writer) @Optional() private readonly writer?: ${className}WritePort,
+        @Inject(${className}Receipts) @Optional() private readonly receipts?: ${className}ReceiptPort,
+        @Inject(${className}JobStatuses) @Optional() private readonly jobStatuses?: ${className}JobStatusPort,
     ) {}
 
     private context(): FeatureRequestContext {
@@ -26338,6 +26407,16 @@ export class ${className}Service {
         if (!this.writer) throw new Error("Bind ${className}Writer with durable command governance");
         return this.writer.approve(this.context(), { ...input, id });
     }
+
+    async receipt(id: string, operationId: string): Promise<Awaited<ReturnType<${className}ReceiptPort["lookup"]>>> {
+        if (!this.receipts) throw new Error("Bind ${className}Receipts with durable receipt lookup");
+        return this.receipts.lookup(this.context(), { id, operationId });
+    }
+
+    async jobStatus(id: string, operationId: string): Promise<${className}JobStatusResult> {
+        if (!this.jobStatuses) throw new Error("Bind ${className}JobStatuses with the existing Workflow/Queue status adapter");
+        return this.jobStatuses.lookup(this.context(), { id, operationId });
+    }
 }
 `,
     [`${name}.feature.ts`]: `import { Effect } from "effect";
@@ -26349,6 +26428,9 @@ import {
 import {
     ${className}ApproveBody,
     ${className}ListQuery,
+    ${className}Receipt,
+    ${className}ReceiptParams,
+    ${className}JobStatus,
     ${className}ListResponse,
     ${className}Params,
     ${className}RefreshInput,
@@ -26358,6 +26440,8 @@ import { ${className}Service } from "./${name}.service";
 import type {
     ${className}ApproveInput,
     ${className}ListInput,
+    ${className}ReceiptResult,
+    ${className}JobStatusResult,
     ${className}RefreshJobInput,
     ${className}Result,
 } from "./${name}.model";
@@ -26372,6 +26456,11 @@ export const featureSpec = defineFeatureSpec({
             permission: ${JSON.stringify(permission)}, transaction: "required",
             idempotency: "required", audit: ${JSON.stringify(`${name}.approved`)},
             job: ${JSON.stringify(`${name}.refresh`)},
+            invalidateTags: [
+                ${JSON.stringify(`${name}.list`)},
+                ${JSON.stringify(`${name}.detail`)},
+                ${JSON.stringify(`${name}.receipt`)},
+            ],
             persistence: {
                 boundary: "database", optimisticLock: "required", versionField: "version", tenantField: "tenant_id", stateField: "state",
                 receipt: "required", reconciliation: "none",
@@ -26435,6 +26524,7 @@ export class ${className}Controller {
 
     @Get("/", {
         query: ${className}ListQuery,
+        tags: [${JSON.stringify(`${name}.list`)}],
         responses: { 200: ${className}ListResponse },
         effect: { required: true, dependencies: [], errors: [], retry: "none" },
     })
@@ -26444,6 +26534,7 @@ export class ${className}Controller {
 
     @Get("/:id", {
         params: ${className}Params,
+        tags: [${JSON.stringify(`${name}.detail`)}],
         responses: { 200: ${className}Row },
         effect: { required: true, dependencies: [], errors: [], retry: "none" },
     })
@@ -26456,6 +26547,7 @@ export class ${className}Controller {
         body: ${className}ApproveBody,
         responses: { 200: ${className}Row },
         command: Approve${className}Command,
+        idempotency: "required",
         effect: { required: true, dependencies: [], errors: [], retry: "none" },
     })
     approve(
@@ -26464,6 +26556,32 @@ export class ${className}Controller {
     ): Effect.Effect<${className}Result, never, never> {
         return Effect.promise(() => this.approveCommand.execute(id, body));
     }
+
+    @Get("/:id/operations/:operationId", {
+        params: ${className}ReceiptParams,
+        tags: [${JSON.stringify(`${name}.receipt`)}],
+        responses: { 200: ${className}Receipt },
+        effect: { required: true, dependencies: [], errors: [], retry: "none" },
+    })
+    receipt(
+        @Param("id") id: string,
+        @Param("operationId") operationId: string,
+    ): Effect.Effect<${className}ReceiptResult, never, never> {
+        return Effect.promise(() => this.service.receipt(id, operationId));
+    }
+
+    @Get("/:id/operations/:operationId/status", {
+        params: ${className}ReceiptParams,
+        tags: [${JSON.stringify(`${name}.job-status`)}],
+        responses: { 200: ${className}JobStatus },
+        effect: { required: true, dependencies: [], errors: [], retry: "none" },
+    })
+    jobStatus(
+        @Param("id") id: string,
+        @Param("operationId") operationId: string,
+    ): Effect.Effect<${className}JobStatusResult, never, never> {
+        return Effect.promise(() => this.service.jobStatus(id, operationId));
+    }
 }
 
 export const ${className}Feature = defineFeatureSlice({
@@ -26500,6 +26618,7 @@ test("${name} fails closed until verified read and durable write ports are bound
     await expect(service.list({})).rejects.toThrow("Bind ${className}Reader");
     await expect(service.detail("example")).rejects.toThrow("Bind ${className}Reader");
     await expect(service.approve("example", { expectedVersion: 1 })).rejects.toThrow("Bind ${className}Writer");
+    await expect(service.jobStatus("example", "operation-example")).rejects.toThrow("Bind ${className}JobStatuses");
 });
 
 test("${name} preserves denied reads and rejected writes without fallback or retry", async () => {
@@ -26611,6 +26730,22 @@ test.skipIf(!enabled)("${name} authenticated list/detail/approval E2E", async ()
     const firstBody = await json(first);
     expect([200, 409, 422]).toContain(first.status);
 
+    // A lost response is recovered through the durable receipt, never by
+    // submitting the approval again.
+    const recovered = await fetch(
+        new URL("/${name}/" + encodeURIComponent(fixtureId) + "/operations/" + encodeURIComponent(config.idempotencyKey), config.baseUrl),
+        { headers },
+    );
+    expect(recovered.ok).toBe(true);
+    const recoveredBody = await json(recovered);
+    expect(recoveredBody).toMatchObject({ operationId: config.idempotencyKey });
+    const jobStatus = await fetch(
+        new URL("/${name}/" + encodeURIComponent(fixtureId) + "/operations/" + encodeURIComponent(config.idempotencyKey) + "/status", config.baseUrl),
+        { headers },
+    );
+    expect(jobStatus.ok).toBe(true);
+    expect(await json(jobStatus)).toMatchObject({ operationId: config.idempotencyKey });
+
     // Replaying an identical command may return the original success or a
     // domain conflict, but it must never create a second successful transition.
     const replay = await approve(config.idempotencyKey);
@@ -26670,6 +26805,10 @@ test.skipIf(!tenantIsolationEnabled)("${name} rejects cross-tenant access", asyn
 - [ ] Bind ${className}Writer to a transactional RPC or persistent Command adapter.
 - [ ] Register the \`${rpc}\` compiler and runtime RPC capability.
 - [ ] Verify RLS, permission denial, stale version, identical replay and conflicting replay.
+- [ ] Verify receipt lookup recovers a lost response without resubmitting the Command.
+- [ ] Pass \`${className}ApproveInvalidateTags\` to the generated mutation's \`invalidateTags\` option.
+- [ ] Bind \`${className}JobStatuses\` to the existing Workflow/Queue status read path.
+- [ ] Verify status lookup is tenant-scoped and distinguishes queued, running, completed, failed and cancelled.
 - [ ] Verify the refresh job uses the existing Workflow/Queue delivery path.
 - [ ] Run the generated client contract and authenticated E2E test.
 - [ ] Run \`supacloud app check --format json\`, package tests and the selected deployment receipt.
@@ -26696,10 +26835,14 @@ used by the request-scoped Writer, or own the complete command instead; never ex
 both paths. Lock/check the version and state, reauthorize replays, and commit the
 business write, receipt, audit and outbox together. Do not put a network side effect
 inside this transaction. The refresh Job is an explicit unimplemented integration
-point, not an automatically scheduled workflow.
+point, not an automatically scheduled workflow. The generated status route is also
+an explicit read adapter boundary; it does not treat a queue message ID or current
+business row as proof of task completion.
 
 Compile the routes with the existing client generator and use @supacloud/query for
-identity-scoped caching/invalidation. There is deliberately no second hand-maintained
+identity-scoped caching/invalidation. Use the generated \`${className}ApproveInvalidateTags\`
+constant for the approval mutation; tags are explicit and never inferred from route names.
+There is deliberately no second hand-maintained
 HTTP client. A committed approval followed by a failed refresh is still committed;
 recover its receipt instead of resending. Use the host's standard error translation
 and requestId propagation; the scaffold does not claim to implement those adapters.
@@ -32583,7 +32726,7 @@ async function runProjectDeployment(http, args) {
 // package.json
 var package_default = {
   name: "@supacloud/cli",
-  version: "0.104.0",
+  version: "0.105.0",
   description: "Project-scoped CLI for SupaCloud users",
   type: "module",
   main: "./dist/index.js",
@@ -32635,19 +32778,19 @@ var package_default = {
     directory: "packages/cli"
   },
   dependencies: {
-    "@supacloud/compiler": "^0.48.0",
-    "@supacloud/delivery": "0.20.0",
-    "@supacloud/db": "0.19.0",
+    "@supacloud/compiler": "^0.49.0",
+    "@supacloud/delivery": "0.21.0",
+    "@supacloud/db": "0.20.0",
     typebox: "1.3.37"
   },
   overrides: {
-    "@supacloud/contracts": "0.12.0",
-    "@supacloud/delivery": "0.20.0",
+    "@supacloud/contracts": "0.13.0",
+    "@supacloud/delivery": "0.21.0",
     "@graphql-tools/utils": "^12.0.4"
   },
   devDependencies: {
     "@supabase/supabase-js": "2.117.3",
-    "@supacloud/elysia": "0.34.0",
+    "@supacloud/elysia": "0.35.0",
     "@types/bun": "^1.4.3",
     effect: "4.0.5",
     elysia: "2.0.0-beta.32",

package/dist/shared/tools/app-tool-export.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.104.0",
+  "version": "0.105.0",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",
@@ -52,19 +52,19 @@
     "directory": "packages/cli"
   },
   "dependencies": {
-    "@supacloud/compiler": "^0.48.0",
-    "@supacloud/delivery": "0.20.0",
-    "@supacloud/db": "0.19.0",
+    "@supacloud/compiler": "^0.49.0",
+    "@supacloud/delivery": "0.21.0",
+    "@supacloud/db": "0.20.0",
     "typebox": "1.3.37"
   },
   "overrides": {
-    "@supacloud/contracts": "0.12.0",
-    "@supacloud/delivery": "0.20.0",
+    "@supacloud/contracts": "0.13.0",
+    "@supacloud/delivery": "0.21.0",
     "@graphql-tools/utils": "^12.0.4"
   },
   "devDependencies": {
     "@supabase/supabase-js": "2.117.3",
-    "@supacloud/elysia": "0.34.0",
+    "@supacloud/elysia": "0.35.0",
     "@types/bun": "^1.4.3",
     "effect": "4.0.5",
     "elysia": "2.0.0-beta.32",