@supacloud/cli 0.111.0 → 0.112.1

package/README.md

@@ -492,7 +492,7 @@ Example configuration write file:
   "configuration_id": "01234567-89ab-4def-8123-456789abcdef",
   "expected_configuration_id": null,
   "configuration": {
-    "bun_version": "1.4.3",
+    "bun_version": "1.4.4",
     "targets": [
       {
         "name": "api",

package/dist/index.js

@@ -6770,9 +6770,14 @@ function IsTime(value, strictTimeZone = true) {
 }
 
 // node_modules/typebox/build/format/date_time.mjs
+var DATE_TIME_SUFFIX = /^(?:\[!?(?:(?!\.{1,2}[/\]])[A-Za-z._][A-Za-z._0-9+-]{0,13}(?:\/(?!\.{1,2}[/\]])[A-Za-z._][A-Za-z._0-9+-]{0,13})*|[+-](?:[01][0-9]|2[0-3]):[0-5][0-9])\](?:\[!?[a-z_][a-z_0-9-]*=[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*\])*|(?:\[!?[a-z_][a-z_0-9-]*=[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*\])*)$/;
 function IsDateTime(value) {
-  const dateTime = value.split(/T/i);
-  return dateTime.length === 2 && IsDate2(dateTime[0]) && IsTime(dateTime[1]);
+  const index = value.indexOf("[");
+  const datetime = index === -1 ? value : value.slice(0, index);
+  if (index !== -1 && !DATE_TIME_SUFFIX.test(value.slice(index)))
+    return false;
+  const split = datetime.split(/T/i);
+  return split.length === 2 && IsDate2(split[0]) && IsTime(split[1]);
 }
 
 // node_modules/typebox/build/format/duration.mjs
@@ -9346,7 +9351,7 @@ var ACTION_POLICY = {
   },
   secrets: { read: ["list"], write: ["upsert", "delete"] },
   frontend: {
-    read: ["list", "get", "build_logs", "list_frameworks", "list_records", "list_releases", "get_active_release", "get_release"],
+    read: ["list", "get", "build_logs", "list_frameworks", "list_records", "list_releases", "get_active_release", "get_release", "verify_release"],
     write: ["create", "update", "delete", "deploy_git", "deploy_upload", "redeploy", "add_domain", "remove_domain", "set_env", "upload_release", "activate_release", "rollback"]
   },
   task_events: { read: ["inspect_webhook"], write: ["register_webhook", "unregister_webhook"] },
@@ -16919,6 +16924,8 @@ var TIMESTAMP_PATTERN2 = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;
 var ARCHIVE_MAX_BYTES = 100 * 1024 * 1024;
 var ARCHIVE_CHUNK_BYTES = 64 * 1024;
 var RESPONSE_MAX_BYTES = 1024 * 1024;
+var LIVE_RESPONSE_MAX_BYTES = 1024 * 1024;
+var LIVE_CHECK_TIMEOUT_MS = 1e4;
 var UPLOAD_REQUEST_TIMEOUT_MS = 10 * 60000;
 var MUTATION_RESPONSE_TIMEOUT_MS = 5000;
 var RELEASE_LIST_LIMIT_MAX = 100;
@@ -17276,6 +17283,129 @@ async function getActiveFrontendRelease(http, projectRef, deploymentId) {
   const snapshot = await readActiveFrontendRelease(http, projectRef, deploymentId);
   return "failure" in snapshot ? snapshot.failure : toolResponse(snapshot.inventory);
 }
+function deploymentLiveUrl(candidate) {
+  if (!candidate || typeof candidate !== "object" || Array.isArray(candidate))
+    return null;
+  const value = candidate.deployment_url;
+  if (typeof value !== "string" || !value.trim())
+    return null;
+  try {
+    const url = new URL(value.trim());
+    return url.protocol === "https:" || url.protocol === "http:" ? url.toString() : null;
+  } catch {
+    return null;
+  }
+}
+async function verifyLiveDeployment(url) {
+  try {
+    const response = await fetch(url, {
+      method: "GET",
+      redirect: "follow",
+      cache: "no-store",
+      signal: AbortSignal.timeout(LIVE_CHECK_TIMEOUT_MS)
+    });
+    const contentLength = Number(response.headers.get("content-length") ?? "");
+    if (Number.isFinite(contentLength) && contentLength > LIVE_RESPONSE_MAX_BYTES) {
+      response.body?.cancel().catch(() => {
+        return;
+      });
+      return {
+        ok: false,
+        status: response.status,
+        content_type: response.headers.get("content-type"),
+        bytes: contentLength,
+        error_code: "LIVE_RESPONSE_TOO_LARGE"
+      };
+    }
+    let bytes = 0;
+    const reader = response.body?.getReader();
+    if (reader) {
+      try {
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done)
+            break;
+          bytes += value.byteLength;
+          if (bytes > LIVE_RESPONSE_MAX_BYTES) {
+            reader.cancel().catch(() => {
+              return;
+            });
+            break;
+          }
+        }
+      } finally {
+        reader.releaseLock();
+      }
+    }
+    const ok = response.status === 200 && bytes > 0 && bytes <= LIVE_RESPONSE_MAX_BYTES;
+    return {
+      ok,
+      status: response.status,
+      content_type: response.headers.get("content-type"),
+      bytes,
+      error_code: bytes > LIVE_RESPONSE_MAX_BYTES ? "LIVE_RESPONSE_TOO_LARGE" : ok ? null : bytes === 0 ? "LIVE_RESPONSE_EMPTY" : "LIVE_RESPONSE_INVALID"
+    };
+  } catch (error) {
+    const timedOut = error instanceof Error && (error.name === "TimeoutError" || error.name === "AbortError");
+    return {
+      ok: false,
+      status: 0,
+      content_type: null,
+      bytes: 0,
+      error_code: timedOut ? "LIVE_CHECK_TIMEOUT" : "LIVE_CHECK_FAILED"
+    };
+  }
+}
+async function verifyFrontendRelease(http, projectRef, deploymentId) {
+  const snapshot = await readActiveFrontendRelease(http, projectRef, deploymentId);
+  if ("failure" in snapshot)
+    return snapshot.failure;
+  const inventory = snapshot.inventory;
+  const release = inventory.releases[0];
+  if (!release)
+    return releaseFailure("frontend.verify_release", "NO_ACTIVE_RELEASE", 200);
+  const deployment = await http.get(deploymentEndpoint(projectRef, deploymentId), {
+    maxJsonBytes: RESPONSE_MAX_BYTES
+  });
+  const liveUrl = deployment.ok && deployment.status === 200 ? deploymentLiveUrl(deployment.data) : null;
+  const live = liveUrl ? await verifyLiveDeployment(liveUrl) : { ok: false, status: 0, content_type: null, bytes: 0, error_code: "LIVE_URL_UNAVAILABLE" };
+  let errorCode = live.error_code;
+  if (live.ok) {
+    try {
+      const readback = await readActiveFrontendRelease(http, projectRef, deploymentId);
+      if ("failure" in readback)
+        errorCode = "ACTIVE_RELEASE_READBACK_FAILED";
+      else if (readback.inventory.active_release_id !== inventory.active_release_id || readback.inventory.active_activation_id !== inventory.active_activation_id) {
+        errorCode = "STALE_AUTHORITY";
+      }
+    } catch {
+      errorCode = "ACTIVE_RELEASE_READBACK_FAILED";
+    }
+  }
+  const ok = errorCode === null;
+  const receipt = {
+    schema: "supacloud.frontend-release-verification.v1",
+    ok,
+    error_code: errorCode,
+    project_ref: projectRef,
+    deployment_id: deploymentId,
+    active_release_id: inventory.active_release_id,
+    active_activation_id: inventory.active_activation_id,
+    release,
+    live: {
+      url: liveUrl,
+      status: live.status,
+      content_type: live.content_type,
+      bytes: live.bytes,
+      error_code: live.error_code
+    },
+    checked_at: new Date().toISOString()
+  };
+  return {
+    content: [{ type: "text", text: JSON.stringify(receipt, null, 2) }],
+    ...ok ? {} : { isError: true }
+  };
+}
 async function publishFrontendRelease(http, projectRef, deploymentId, archiveSource, expectedTreeSha256) {
   const authority = await readActiveFrontendRelease(http, projectRef, deploymentId);
   if ("failure" in authority)
@@ -17565,7 +17695,7 @@ async function activationReadback(http, input, mutationId, activationStatus) {
 // src/shared/tools/frontend-tools.ts
 function registerFrontendTools(server, http) {
   registerTool(server, "frontend", `Frontend hosting and immutable prebuilt releases. Supports: static, react, vue, svelte, sveltekit, sveltekit-static, nextjs, nuxt, astro.
-Actions: list, get, create, update, delete, build_logs, add_domain, remove_domain, set_env, list_frameworks, list_records, list_releases, get_active_release, get_release, rollback. Publish with supacloud deploy.`, {
+Actions: list, get, create, update, delete, build_logs, add_domain, remove_domain, set_env, list_frameworks, list_records, list_releases, get_active_release, get_release, verify_release, rollback. Publish with supacloud deploy.`, {
     action: withDescription(stringEnum2([
       "list",
       "get",
@@ -17581,6 +17711,7 @@ Actions: list, get, create, update, delete, build_logs, add_domain, remove_domai
       "list_releases",
       "get_active_release",
       "get_release",
+      "verify_release",
       "rollback"
     ]), "Action"),
     ref: optional(String2(), "Project ref"),
@@ -17711,6 +17842,10 @@ Actions: list, get, create, update, delete, build_logs, add_domain, remove_domai
         need("ref", ref);
         need("id", id);
         return getActiveFrontendRelease(http, ref, id);
+      case "verify_release":
+        need("ref", ref);
+        need("id", id);
+        return verifyFrontendRelease(http, ref, id);
       case "rollback":
         need("ref", ref);
         need("id", id);
@@ -20671,8 +20806,23 @@ var VALID_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
 var VALID_MIGRATION_NAME = /^[A-Za-z0-9][A-Za-z0-9_-]{0,100}$/;
 var VALID_SCHEMA = /^[A-Za-z_][A-Za-z0-9_$]*$/;
 var VALID_PROJECT_REF = /^[A-Za-z0-9_-]{1,64}$/;
+var OFFICIAL_CLI_PG_TLS_ENV = new Set([
+  "PGSSLMODE",
+  "PGSSLROOTCERT",
+  "PGSSLCERT",
+  "PGSSLKEY",
+  "PGSSLCRL",
+  "PGSSLCRLDIR",
+  "PGSSLSNI",
+  "PGSSLNEGOTIATION",
+  "PGSSLCOMPRESSION",
+  "PGREQUIRESSL"
+]);
 function isSensitiveEnvironmentKey(key) {
-  return key.toUpperCase().startsWith("PG") || SENSITIVE_ENV_KEY.test(key);
+  const upper = key.toUpperCase();
+  if (OFFICIAL_CLI_PG_TLS_ENV.has(upper))
+    return false;
+  return upper.startsWith("PG") || SENSITIVE_ENV_KEY.test(upper);
 }
 function requireMigrationName(name) {
   if (!name || !VALID_MIGRATION_NAME.test(name)) {
@@ -20959,7 +21109,7 @@ function resolveOfficialSupabaseCommand(workdir, environment = process.env) {
   const version = environment.SUPABASE_CLI_VERSION?.trim();
   if (version) {
     if (!VALID_VERSION.test(version))
-      throw new Error("Invalid SUPABASE_CLI_VERSION; use an exact version such as 2.120.0");
+      throw new Error("Invalid SUPABASE_CLI_VERSION; use an exact version such as 2.122.0");
     if (process.versions.bun)
       return [process.execPath, "x", `supabase@${version}`];
     if (process.platform === "win32") {
@@ -21800,25 +21950,25 @@ var starter_metadata_default = {
   generatedBy: "supacloud/starter-metadata-v1",
   packages: {
     compiler: {
-      version: "0.52.0"
+      version: "0.52.1"
     },
     app: {
-      version: "0.34.0",
+      version: "0.34.1",
       dependencies: {
         rxjs: "7.8.2"
       }
     },
     elysia: {
-      version: "0.36.2"
+      version: "0.36.3"
     },
     commands: {
-      version: "0.11.1"
+      version: "0.11.2"
     },
     contracts: {
-      version: "0.15.1"
+      version: "0.15.2"
     },
     db: {
-      version: "0.20.1",
+      version: "0.20.2",
       peerDependencies: {
         "drizzle-orm": "1.0.0-rc.5-5935859"
       },
@@ -21827,9 +21977,9 @@ var starter_metadata_default = {
       }
     },
     sdk: {
-      version: "0.45.2",
+      version: "0.45.4",
       peerDependencies: {
-        "@supabase/supabase-js": "^2.117.3"
+        "@supabase/supabase-js": "^2.118.0"
       }
     }
   }
@@ -22152,7 +22302,7 @@ function baseFiles(name, sdkDependencies) {
       version: "0.0.0",
       private: true,
       type: "module",
-      engines: { bun: ">=1.4.3" },
+      engines: { bun: ">=1.4.4" },
       scripts: {
         compile: "bun --no-env-file node_modules/@supacloud/compiler/dist/cli.js compile",
         "check:generated": "bun --no-env-file node_modules/@supacloud/compiler/dist/cli.js check",
@@ -22176,7 +22326,7 @@ function baseFiles(name, sdkDependencies) {
       },
       devDependencies: {
         "@supacloud/compiler": `^${compilerMetadata.version}`,
-        "@types/bun": "^1.4.3",
+        "@types/bun": "^1.4.4",
         typescript: "^7.0.2"
       }
     }),
@@ -25307,7 +25457,7 @@ function appStarterFiles(name) {
       version: "0.0.0",
       private: true,
       type: "module",
-      engines: { bun: ">=1.4.3" },
+      engines: { bun: ">=1.4.4" },
       scripts: {
         compile: "bun --no-env-file node_modules/@supacloud/compiler/dist/cli.js compile",
         "check:generated": "bun --no-env-file node_modules/@supacloud/compiler/dist/cli.js check",
@@ -25343,7 +25493,7 @@ function appStarterFiles(name) {
       devDependencies: {
         "@supacloud/compiler": `^${compilerMetadata2.version}`,
         "drizzle-kit": dbMetadata.devDependencies["drizzle-kit"],
-        "@types/bun": "^1.4.3",
+        "@types/bun": "^1.4.4",
         typescript: "^7.0.2"
       }
     }),
@@ -29688,8 +29838,23 @@ var VALID_VERSION2 = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
 var VALID_MIGRATION_NAME2 = /^[A-Za-z0-9][A-Za-z0-9_-]{0,100}$/;
 var VALID_SCHEMA2 = /^[A-Za-z_][A-Za-z0-9_$]*$/;
 var VALID_PROJECT_REF2 = /^[A-Za-z0-9_-]{1,64}$/;
+var OFFICIAL_CLI_PG_TLS_ENV2 = new Set([
+  "PGSSLMODE",
+  "PGSSLROOTCERT",
+  "PGSSLCERT",
+  "PGSSLKEY",
+  "PGSSLCRL",
+  "PGSSLCRLDIR",
+  "PGSSLSNI",
+  "PGSSLNEGOTIATION",
+  "PGSSLCOMPRESSION",
+  "PGREQUIRESSL"
+]);
 function isSensitiveEnvironmentKey2(key) {
-  return key.toUpperCase().startsWith("PG") || SENSITIVE_ENV_KEY2.test(key);
+  const upper = key.toUpperCase();
+  if (OFFICIAL_CLI_PG_TLS_ENV2.has(upper))
+    return false;
+  return upper.startsWith("PG") || SENSITIVE_ENV_KEY2.test(upper);
 }
 function requireMigrationName2(name) {
   if (!name || !VALID_MIGRATION_NAME2.test(name)) {
@@ -29941,7 +30106,7 @@ function resolveOfficialSupabaseCommand2(workdir, environment = process.env) {
   const version = environment.SUPABASE_CLI_VERSION?.trim();
   if (version) {
     if (!VALID_VERSION2.test(version))
-      throw new Error("Invalid SUPABASE_CLI_VERSION; use an exact version such as 2.120.0");
+      throw new Error("Invalid SUPABASE_CLI_VERSION; use an exact version such as 2.122.0");
     if (process.versions.bun)
       return [process.execPath, "x", `supabase@${version}`];
     if (process.platform === "win32") {
@@ -33421,7 +33586,7 @@ async function runProjectDeployment(http, args) {
 // package.json
 var package_default = {
   name: "@supacloud/cli",
-  version: "0.111.0",
+  version: "0.112.1",
   description: "Project-scoped CLI for SupaCloud users",
   type: "module",
   main: "./dist/index.js",
@@ -33473,20 +33638,20 @@ var package_default = {
     directory: "packages/cli"
   },
   dependencies: {
-    "@supacloud/compiler": "^0.52.0",
-    "@supacloud/delivery": "0.23.0",
-    "@supacloud/db": "0.20.1",
-    typebox: "1.4.2"
+    "@supacloud/compiler": "^0.52.1",
+    "@supacloud/delivery": "0.23.1",
+    "@supacloud/db": "0.20.2",
+    typebox: "1.4.3"
   },
   overrides: {
-    "@supacloud/contracts": "0.15.1",
-    "@supacloud/delivery": "0.23.0",
+    "@supacloud/contracts": "0.15.2",
+    "@supacloud/delivery": "0.23.1",
     "@graphql-tools/utils": "^12.0.4"
   },
   devDependencies: {
     "@supabase/supabase-js": "2.118.0",
-    "@supacloud/elysia": "0.36.2",
-    "@types/bun": "^1.4.3",
+    "@supacloud/elysia": "0.36.3",
+    "@types/bun": "^1.4.4",
     effect: "4.0.5",
     elysia: "2.0.0-rc.0",
     typescript: "^7.0.2"

package/dist/shared/tools/application-preview-tools.d.ts

@@ -5,7 +5,7 @@ export declare const APPLICATION_PREVIEW_FIELDS: {
     preview_id: Type.TOptional<Type.TString>;
     branch_ref: Type.TOptional<Type.TString>;
     branch_name: Type.TOptional<Type.TString>;
-    data_mode: Type.TOptional<Type.TEnum<("schema_only" | "full_clone")[]>>;
+    data_mode: Type.TOptional<Type.TEnum<("full_clone" | "schema_only")[]>>;
     ttl_seconds: Type.TOptional<Type.TInteger>;
     wait: Type.TOptional<Type.TBoolean>;
     timeout_seconds: Type.TOptional<Type.TInteger>;
@@ -18,40 +18,40 @@ declare const receiptSchema: Type.TObject<{
     environment_id: Type.TString;
     release_id: Type.TString;
     expires_at: Type.TOptional<Type.TUnion<[Type.TString, Type.TNull]>>;
-    status: Type.TEnum<("ready" | "failed" | "cleaned" | "planned" | "provisioning")[]>;
+    status: Type.TEnum<("cleaned" | "failed" | "planned" | "provisioning" | "ready")[]>;
     resources: Type.TObject<{
         build_artifact: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             release_id: Type.TString;
         }>;
         database_branch: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             branch_ref: Type.TString;
-            data_mode: Type.TEnum<("schema_only" | "full_clone")[]>;
+            data_mode: Type.TEnum<("full_clone" | "schema_only")[]>;
         }>;
         queue_namespace: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             namespace: Type.TString;
         }>;
         storage_namespace: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             namespace: Type.TString;
         }>;
         test_secret: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             name: Type.TString;
             value_issued: Type.TLiteral<false>;
         }>;
         configuration_revision: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             configuration_id: Type.TUnion<[Type.TString, Type.TNull]>;
         }>;
         application_activation: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             activation_id: Type.TUnion<[Type.TString, Type.TNull]>;
         }>;
         smoke_test: Type.TObject<{
-            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
+            status: Type.TEnum<("cleaned" | "failed" | "pending" | "ready")[]>;
             checks: Type.TArray<Type.TString>;
             passed: Type.TArray<Type.TString>;
             failed: Type.TArray<Type.TString>;

package/dist/shared/tools/application-schemas.d.ts

@@ -147,7 +147,7 @@ export declare const ApplicationPromotionPlanSchema: import("typebox").TObject<{
         confirmed: import("typebox").TLiteral<false>;
     }>;
     action: import("typebox").TUnion<[import("typebox").TLiteral<"promote">, import("typebox").TLiteral<"no-op">, import("typebox").TLiteral<"blocked">]>;
-    blockers: import("typebox").TArray<import("typebox").TEnum<("SOURCE_NOT_ACTIVE" | "SOURCE_RECEIPT_UNCONFIRMED" | "SOURCE_NOT_READY" | "SOURCE_SMOKE_UNVERIFIED" | "TARGET_CONFIGURATION_MISSING" | "TARGET_CONFIGURATION_MISMATCH" | "MIGRATION_PENDING" | "MIGRATION_CONFLICT" | "OPERATOR_PROVISIONING_REQUIRED" | "BACKUP_REQUIRED")[]>>;
+    blockers: import("typebox").TArray<import("typebox").TEnum<("BACKUP_REQUIRED" | "MIGRATION_CONFLICT" | "MIGRATION_PENDING" | "OPERATOR_PROVISIONING_REQUIRED" | "SOURCE_NOT_ACTIVE" | "SOURCE_NOT_READY" | "SOURCE_RECEIPT_UNCONFIRMED" | "SOURCE_SMOKE_UNVERIFIED" | "TARGET_CONFIGURATION_MISMATCH" | "TARGET_CONFIGURATION_MISSING")[]>>;
     steps: import("typebox").TArray<import("typebox").TString>;
     execution_performed: import("typebox").TLiteral<false>;
     data_recovery: import("typebox").TLiteral<"separate-required">;

package/dist/shared/tools/application-tools.d.ts

@@ -5,11 +5,11 @@ export declare const APPLICATION_TOOL_SCHEMA: {
     preview_id: Type.TOptional<Type.TString>;
     branch_ref: Type.TOptional<Type.TString>;
     branch_name: Type.TOptional<Type.TString>;
-    data_mode: Type.TOptional<Type.TEnum<("schema_only" | "full_clone")[]>>;
+    data_mode: Type.TOptional<Type.TEnum<("full_clone" | "schema_only")[]>>;
     ttl_seconds: Type.TOptional<Type.TInteger>;
     wait: Type.TOptional<Type.TBoolean>;
     timeout_seconds: Type.TOptional<Type.TInteger>;
-    action: Type.TEnum<("upload_release" | "activate_release" | "list_releases" | "get_release" | "logs" | "get_runtime" | "get_deployment_evidence" | "get_configuration" | "get_release_transfer_plan" | "get_promotion_plan" | "get_promotion_status" | "get_rollback_snapshot" | "get_history" | "get_deploy_plan" | "get_preview_plan" | "list_previews" | "get_preview" | "put_configuration" | "deploy_application" | "transfer_release" | "promote_application" | "reconcile_promotion" | "create_preview" | "reconcile_preview" | "cleanup_preview" | "deploy_release" | "rollback_release" | "reconcile_activation" | "retire_activation")[]>;
+    action: Type.TEnum<("activate_release" | "cleanup_preview" | "create_preview" | "deploy_application" | "deploy_release" | "get_configuration" | "get_deploy_plan" | "get_deployment_evidence" | "get_history" | "get_preview" | "get_preview_plan" | "get_promotion_plan" | "get_promotion_status" | "get_release" | "get_release_transfer_plan" | "get_rollback_snapshot" | "get_runtime" | "list_previews" | "list_releases" | "logs" | "promote_application" | "put_configuration" | "reconcile_activation" | "reconcile_preview" | "reconcile_promotion" | "retire_activation" | "rollback_release" | "transfer_release" | "upload_release")[]>;
     ref: Type.TString;
     id: Type.TString;
     environment_id: Type.TOptional<Type.TString>;
@@ -86,7 +86,7 @@ export declare const APPLICATION_TOOL_SCHEMA: {
             confirmed: Type.TLiteral<false>;
         }>;
         action: Type.TUnion<[Type.TLiteral<"promote">, Type.TLiteral<"no-op">, Type.TLiteral<"blocked">]>;
-        blockers: Type.TArray<Type.TEnum<("SOURCE_NOT_ACTIVE" | "SOURCE_RECEIPT_UNCONFIRMED" | "SOURCE_NOT_READY" | "SOURCE_SMOKE_UNVERIFIED" | "TARGET_CONFIGURATION_MISSING" | "TARGET_CONFIGURATION_MISMATCH" | "MIGRATION_PENDING" | "MIGRATION_CONFLICT" | "OPERATOR_PROVISIONING_REQUIRED" | "BACKUP_REQUIRED")[]>>;
+        blockers: Type.TArray<Type.TEnum<("BACKUP_REQUIRED" | "MIGRATION_CONFLICT" | "MIGRATION_PENDING" | "OPERATOR_PROVISIONING_REQUIRED" | "SOURCE_NOT_ACTIVE" | "SOURCE_NOT_READY" | "SOURCE_RECEIPT_UNCONFIRMED" | "SOURCE_SMOKE_UNVERIFIED" | "TARGET_CONFIGURATION_MISMATCH" | "TARGET_CONFIGURATION_MISSING")[]>>;
         steps: Type.TArray<Type.TString>;
         execution_performed: Type.TLiteral<false>;
         data_recovery: Type.TLiteral<"separate-required">;

package/dist/shared/tools/application-workflow-schemas.d.ts

@@ -1,15 +1,18 @@
 import { Type } from "typebox";
 export declare const ApplicationPromotionResultSchema: Type.TObject<{
+    project_ref: Type.TString;
+    application_id: Type.TString;
+    environment_id: Type.TString;
     mutation_id: Type.TString;
     activation_id: Type.TString;
     plan_sha256: Type.TString;
     action: Type.TLiteral<"promote">;
     replayed: Type.TBoolean;
+}>;
+export declare const ApplicationPromotionStatusSchema: Type.TObject<{
     project_ref: Type.TString;
     application_id: Type.TString;
     environment_id: Type.TString;
-}>;
-export declare const ApplicationPromotionStatusSchema: Type.TObject<{
     mutation: Type.TUnknown;
     promotion: Type.TObject<{
         phase: Type.TUnion<[Type.TLiteral<"prepared">, Type.TLiteral<"transferring">, Type.TLiteral<"migrating">, Type.TLiteral<"activating">, Type.TLiteral<"verifying">, Type.TNull]>;
@@ -20,11 +23,12 @@ export declare const ApplicationPromotionStatusSchema: Type.TObject<{
         backup_id: Type.TUnion<[Type.TString, Type.TNull]>;
         data_recovery: Type.TLiteral<"separate-required">;
     }>;
+}>;
+export declare const ApplicationPreviewReceiptSchema: Type.TObject<{
     project_ref: Type.TString;
     application_id: Type.TString;
     environment_id: Type.TString;
-}>;
-export declare const ApplicationPreviewReceiptSchema: Type.TObject<{
+    schema: Type.TLiteral<"supacloud.application-preview.v1">;
     preview_id: Type.TString;
     release_id: Type.TString;
     expires_at: Type.TUnion<[Type.TString, Type.TNull]>;
@@ -78,10 +82,6 @@ export declare const ApplicationPreviewReceiptSchema: Type.TObject<{
     source_configuration_id: Type.TOptional<Type.TUnion<[Type.TString, Type.TNull]>>;
     created_at: Type.TOptional<Type.TString>;
     updated_at: Type.TOptional<Type.TString>;
-    project_ref: Type.TString;
-    application_id: Type.TString;
-    environment_id: Type.TString;
-    schema: Type.TLiteral<"supacloud.application-preview.v1">;
 }>;
 export interface ApplicationWorkflowScope {
     project_ref: string;
@@ -91,19 +91,19 @@ export interface ApplicationWorkflowScope {
 export declare function parsePromotionStatus(value: unknown, identity: ApplicationWorkflowScope & {
     mutation_id: string;
 }): {
-    mutation: import("../mutation-protocol").SafeMutationStatus;
     project_ref: string;
     application_id: string;
     environment_id: string;
     promotion: {
-        backup_id: string | null;
+        phase: "activating" | "migrating" | "prepared" | "transferring" | "verifying" | null;
+        plan_sha256: string | null;
         activation_id: string | null;
         release_id: string | null;
         configuration_id: string | null;
-        plan_sha256: string | null;
+        backup_id: string | null;
         data_recovery: "separate-required";
-        phase: "prepared" | "transferring" | "migrating" | "activating" | "verifying" | null;
     };
+    mutation: import("../mutation-protocol").SafeMutationStatus;
 };
 export declare function parsePreviewReceipt(value: unknown, identity: ApplicationWorkflowScope & {
     preview_id?: string;
@@ -112,125 +112,125 @@ export declare function parsePreviewReceipt(value: unknown, identity: Applicatio
     data_mode?: string;
     configuration_id?: string;
 }): {
-    created_at?: string | undefined;
-    updated_at?: string | undefined;
-    branch_name?: string | undefined;
-    queue_name?: string | undefined;
-    test_secret_name?: string | undefined;
-    source_configuration_id?: string | null | undefined;
     project_ref: string;
     application_id: string;
     environment_id: string;
-    status: "ready" | "failed" | "cleaned" | "planned" | "provisioning";
     schema: "supacloud.application-preview.v1";
+    preview_id: string;
+    release_id: string;
+    expires_at: string | null;
+    status: "cleaned" | "failed" | "planned" | "provisioning" | "ready";
     resources: {
         build_artifact: {
-            status: "pending" | "ready" | "failed" | "cleaned";
+            status: "cleaned" | "failed" | "pending" | "ready";
             release_id: string;
         };
         database_branch: {
-            status: "pending" | "ready" | "failed" | "cleaned";
+            status: "cleaned" | "failed" | "pending" | "ready";
             branch_ref: string;
-            data_mode: "schema_only" | "full_clone";
+            data_mode: "full_clone" | "schema_only";
         };
         queue_namespace: {
-            status: "pending" | "ready" | "failed" | "cleaned";
+            status: "cleaned" | "failed" | "pending" | "ready";
             namespace: string;
         };
         storage_namespace: {
-            status: "pending" | "ready" | "failed" | "cleaned";
+            status: "cleaned" | "failed" | "pending" | "ready";
             namespace: string;
         };
         test_secret: {
+            status: "cleaned" | "failed" | "pending" | "ready";
             name: string;
-            status: "pending" | "ready" | "failed" | "cleaned";
             value_issued: false;
         };
         configuration_revision: {
-            status: "pending" | "ready" | "failed" | "cleaned";
+            status: "cleaned" | "failed" | "pending" | "ready";
             configuration_id: string | null;
         };
         application_activation: {
-            status: "pending" | "ready" | "failed" | "cleaned";
+            status: "cleaned" | "failed" | "pending" | "ready";
             activation_id: string | null;
         };
         smoke_test: {
-            status: "pending" | "ready" | "failed" | "cleaned";
+            status: "cleaned" | "failed" | "pending" | "ready";
             checks: string[];
-            failed: string[];
             passed: string[];
+            failed: string[];
         };
     };
-    release_id: string;
-    preview_id: string;
-    expires_at: string | null;
     cleanup: {
         required: boolean;
-        error: string | null;
         completed: boolean;
+        error: string | null;
     };
+    branch_name?: string | undefined;
+    queue_name?: string | undefined;
+    test_secret_name?: string | undefined;
+    source_configuration_id?: string | null | undefined;
+    created_at?: string | undefined;
+    updated_at?: string | undefined;
 };
 export declare function parsePreviewList(value: unknown, identity: ApplicationWorkflowScope): {
     project_ref: string;
     application_id: string;
     environment_id: string;
     previews: {
-        created_at?: string | undefined;
-        updated_at?: string | undefined;
-        branch_name?: string | undefined;
-        queue_name?: string | undefined;
-        test_secret_name?: string | undefined;
-        source_configuration_id?: string | null | undefined;
         project_ref: string;
         application_id: string;
         environment_id: string;
-        status: "ready" | "failed" | "cleaned" | "planned" | "provisioning";
         schema: "supacloud.application-preview.v1";
+        preview_id: string;
+        release_id: string;
+        expires_at: string | null;
+        status: "cleaned" | "failed" | "planned" | "provisioning" | "ready";
         resources: {
             build_artifact: {
-                status: "pending" | "ready" | "failed" | "cleaned";
+                status: "cleaned" | "failed" | "pending" | "ready";
                 release_id: string;
             };
             database_branch: {
-                status: "pending" | "ready" | "failed" | "cleaned";
+                status: "cleaned" | "failed" | "pending" | "ready";
                 branch_ref: string;
-                data_mode: "schema_only" | "full_clone";
+                data_mode: "full_clone" | "schema_only";
             };
             queue_namespace: {
-                status: "pending" | "ready" | "failed" | "cleaned";
+                status: "cleaned" | "failed" | "pending" | "ready";
                 namespace: string;
             };
             storage_namespace: {
-                status: "pending" | "ready" | "failed" | "cleaned";
+                status: "cleaned" | "failed" | "pending" | "ready";
                 namespace: string;
             };
             test_secret: {
+                status: "cleaned" | "failed" | "pending" | "ready";
                 name: string;
-                status: "pending" | "ready" | "failed" | "cleaned";
                 value_issued: false;
             };
             configuration_revision: {
-                status: "pending" | "ready" | "failed" | "cleaned";
+                status: "cleaned" | "failed" | "pending" | "ready";
                 configuration_id: string | null;
             };
             application_activation: {
-                status: "pending" | "ready" | "failed" | "cleaned";
+                status: "cleaned" | "failed" | "pending" | "ready";
                 activation_id: string | null;
             };
             smoke_test: {
-                status: "pending" | "ready" | "failed" | "cleaned";
+                status: "cleaned" | "failed" | "pending" | "ready";
                 checks: string[];
-                failed: string[];
                 passed: string[];
+                failed: string[];
             };
         };
-        release_id: string;
-        preview_id: string;
-        expires_at: string | null;
         cleanup: {
             required: boolean;
-            error: string | null;
             completed: boolean;
+            error: string | null;
         };
+        branch_name?: string | undefined;
+        queue_name?: string | undefined;
+        test_secret_name?: string | undefined;
+        source_configuration_id?: string | null | undefined;
+        created_at?: string | undefined;
+        updated_at?: string | undefined;
     }[];
 };

package/dist/shared/tools/frontend-release-control.d.ts

@@ -45,6 +45,7 @@ export declare function uploadFrontendRelease(http: FrontendReleaseHttp, project
 export declare function uploadProjectWebRelease(http: FrontendReleaseHttp, projectRef: string, environmentId: string, deploymentId: string, archivePath: string): Promise<ToolResponse>;
 export declare function uploadFrontendSource(http: FrontendReleaseHttp, projectRef: string, deploymentId: string, archivePath: string): Promise<ToolResponse>;
 export declare function getActiveFrontendRelease(http: FrontendReleaseHttp, projectRef: string, deploymentId: string): Promise<ToolResponse>;
+export declare function verifyFrontendRelease(http: FrontendReleaseHttp, projectRef: string, deploymentId: string): Promise<ToolResponse>;
 export declare function readFrontendReleaseAuthority(http: FrontendReleaseHttp, projectRef: string, deploymentId: string): Promise<ToolResponse>;
 export declare function publishFrontendRelease(http: FrontendReleaseHttp, projectRef: string, deploymentId: string, archiveSource: string | (() => Promise<{
     archivePath: string;

package/dist/shared/tools/remote-dev-tools.d.ts

@@ -19,8 +19,8 @@ export interface RemoteDevToolOptions {
     runDatabase?: DatabaseCallback;
 }
 export declare const remoteDevToolSchema: {
-    action: Type.TEnum<("status" | "migrate" | "watch" | "sync")[]>;
-    target: Type.TOptional<Type.TEnum<("frontend" | "project" | "db" | "functions")[]>>;
+    action: Type.TEnum<("migrate" | "status" | "sync" | "watch")[]>;
+    target: Type.TOptional<Type.TEnum<("db" | "frontend" | "functions" | "project")[]>>;
     project_dir: Type.TOptional<Type.TString>;
     remote_root: Type.TOptional<Type.TString>;
     remote_host: Type.TOptional<Type.TString>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.111.0",
+  "version": "0.112.1",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",
@@ -52,20 +52,20 @@
     "directory": "packages/cli"
   },
   "dependencies": {
-    "@supacloud/compiler": "^0.52.0",
-    "@supacloud/delivery": "0.23.0",
-    "@supacloud/db": "0.20.1",
-    "typebox": "1.4.2"
+    "@supacloud/compiler": "^0.52.1",
+    "@supacloud/delivery": "0.23.1",
+    "@supacloud/db": "0.20.2",
+    "typebox": "1.4.3"
   },
   "overrides": {
-    "@supacloud/contracts": "0.15.1",
-    "@supacloud/delivery": "0.23.0",
+    "@supacloud/contracts": "0.15.2",
+    "@supacloud/delivery": "0.23.1",
     "@graphql-tools/utils": "^12.0.4"
   },
   "devDependencies": {
     "@supabase/supabase-js": "2.118.0",
-    "@supacloud/elysia": "0.36.2",
-    "@types/bun": "^1.4.3",
+    "@supacloud/elysia": "0.36.3",
+    "@types/bun": "^1.4.4",
     "effect": "4.0.5",
     "elysia": "2.0.0-rc.0",
     "typescript": "^7.0.2"