@supacloud/cli 0.80.0 → 0.81.0

package/dist/index.js

@@ -179093,10 +179093,11 @@ function resolveSupaCloudContext(env = process.env, cwd = process.cwd(), selecti
 var ACTION_POLICY = {
   deploy: { write: ["deploy"] },
   applications: {
-    read: ["list_releases", "get_release", "get_runtime", "get_deployment_evidence", "get_configuration", "get_rollback_snapshot", "get_history", "get_deploy_plan", "logs", "get_preview_plan"],
+    read: ["list_releases", "get_release", "get_runtime", "get_deployment_evidence", "get_configuration", "get_release_transfer_plan", "get_promotion_plan", "get_rollback_snapshot", "get_history", "get_deploy_plan", "logs", "get_preview_plan"],
     write: [
       "upload_release",
       "put_configuration",
+      "transfer_release",
       "activate_release",
       "deploy_release",
       "rollback_release",
@@ -179178,7 +179179,7 @@ var ACTION_POLICY = {
   scheduled_functions: { read: ["list", "get"], write: ["create", "update", "delete"] },
   mutations: { read: ["status"] },
   release: {
-    read: ["logical_backup_list", "postgrest_status"],
+    read: ["logical_backup_list", "logical_backup_status", "postgrest_status"],
     local: ["scope_inspect", "scope_rebind", "scope_create"],
     write: ["logical_backup_create", "logical_backup_restore", "postgrest_restart", "release_canary_fixture_stage_replay", "release_canary_fixture_disable_replay"]
   },
@@ -179201,8 +179202,8 @@ var ACTION_POLICY = {
   ai: { local: ["show_skill", "install_skill"] },
   app: {
     local: ["init", "generate", "dev", "watch", "verify-plan", "compile", "check", "graph", "explain", "export-tools", "context", "doctor", "fix", "plan", "build"],
-    read: ["status", "logs", "rollback-plan", "history", "deploy-plan", "diff", "preview-plan"],
-    write: ["upload", "configure", "deploy", "rollback", "reconcile", "retire", "preview", "previews", "preview-status", "preview-cleanup"]
+    read: ["status", "logs", "transfer-plan", "promote-plan", "rollback-plan", "history", "deploy-plan", "diff", "preview-plan"],
+    write: ["upload", "configure", "transfer", "deploy", "rollback", "reconcile", "retire", "preview", "previews", "preview-status", "preview-cleanup"]
   },
   db: {
     local: ["context", "lint", "explain", "diff", "role_sql"],
@@ -180419,6 +180420,52 @@ function parseApplicationActivationHistory(value) {
   }
   return structuredClone(value);
 }
+// node_modules/@supacloud/delivery/src/application-release-transfer.ts
+var projectRef = String2({ pattern: "^[A-Za-z0-9_-]{1,20}$" });
+var source = _Object_({
+  project_ref: projectRef,
+  release_id: ApplicationReleaseIdSchema,
+  manifest_sha256: ApplicationReleaseIdSchema
+}, { additionalProperties: false });
+var identity = {
+  project_ref: projectRef,
+  application_id: ApplicationIdSchema,
+  source,
+  candidate_release_id: ApplicationReleaseIdSchema
+};
+var ApplicationReleaseTransferPlanSchema = _Object_({
+  schema: Literal("supacloud.application-release-transfer-plan.v1"),
+  ...identity,
+  action: Union([Literal("materialize"), Literal("no-op")]),
+  execution_performed: Literal(false)
+}, { additionalProperties: false });
+var ApplicationReleaseTransferResultSchema = _Object_({
+  schema: Literal("supacloud.application-release-transfer-result.v1"),
+  ...identity,
+  release: ApplicationReleaseRecordSchema,
+  activation_performed: Literal(false)
+}, { additionalProperties: false });
+function assertIdentity(value) {
+  if (value.source.release_id !== applicationReleaseId(value.source.project_ref, value.application_id, value.source.manifest_sha256) || value.candidate_release_id !== applicationReleaseId(value.project_ref, value.application_id, value.source.manifest_sha256)) {
+    throw new Error("Invalid application release transfer identity");
+  }
+}
+function parseApplicationReleaseTransferPlan(candidate) {
+  if (!Check2(ApplicationReleaseTransferPlanSchema, candidate))
+    throw new Error("Invalid application release transfer plan");
+  assertIdentity(candidate);
+  return candidate;
+}
+function parseApplicationReleaseTransferResult(candidate) {
+  if (!Check2(ApplicationReleaseTransferResultSchema, candidate))
+    throw new Error("Invalid application release transfer result");
+  assertIdentity(candidate);
+  const release = parseApplicationReleaseRecord(candidate.release);
+  if (release.project_ref !== candidate.project_ref || release.application_id !== candidate.application_id || release.release_id !== candidate.candidate_release_id || release.manifest_sha256 !== candidate.source.manifest_sha256) {
+    throw new Error("Invalid application release transfer result");
+  }
+  return candidate;
+}
 // node_modules/@supacloud/delivery/src/deployment-evidence.ts
 var closed3 = { additionalProperties: false };
 var sha256 = String2({ pattern: "^[a-f0-9]{64}$" });
@@ -180544,6 +180591,116 @@ function parseDeploymentEvidence(value) {
   }
   return structuredClone(value);
 }
+// node_modules/@supacloud/delivery/src/application-promotion.ts
+var closed4 = { additionalProperties: false };
+var projectRef2 = String2({ pattern: "^[a-z0-9-]{1,20}$" });
+var sha2562 = ApplicationReleaseIdSchema;
+var nullableActivation = Union([ApplicationActivationIdSchema, Null()]);
+var nullableDigest = Union([sha2562, Null()]);
+var observation = {
+  activation_id: nullableActivation,
+  receipt_confirmed: Boolean2(),
+  ready: Boolean2(),
+  smoke_verified: Boolean2(),
+  evidence_sha256: nullableDigest,
+  migration_ledger_digest: nullableDigest
+};
+var blocker = [
+  "SOURCE_NOT_ACTIVE",
+  "SOURCE_RECEIPT_UNCONFIRMED",
+  "SOURCE_NOT_READY",
+  "SOURCE_SMOKE_UNVERIFIED",
+  "TARGET_CONFIGURATION_MISSING",
+  "TARGET_CONFIGURATION_MISMATCH",
+  "MIGRATION_PENDING",
+  "MIGRATION_CONFLICT",
+  "OPERATOR_PROVISIONING_REQUIRED",
+  "BACKUP_REQUIRED"
+];
+var ApplicationPromotionPlanSchema = _Object_({
+  schema: Literal("supacloud.application-promotion-plan.v1"),
+  project_ref: projectRef2,
+  application_id: ApplicationIdSchema,
+  environment_id: ApplicationIdSchema,
+  manifest_sha256: sha2562,
+  plan_sha256: sha2562,
+  source: _Object_({
+    project_ref: projectRef2,
+    environment_id: ApplicationIdSchema,
+    release_id: sha2562,
+    ...observation
+  }, closed4),
+  target: _Object_({
+    candidate_release_id: sha2562,
+    current_release_id: Union([sha2562, Null()]),
+    artifact_action: Union([Literal("materialize"), Literal("reuse")]),
+    configuration_id: Union([ApplicationConfigurationIdSchema, Null()]),
+    configuration: Union([ApplicationConfigurationViewSchema, Null()]),
+    ...observation
+  }, closed4),
+  migrations: _Object_({
+    ledger_digest: sha2562,
+    ledger_compatible: Boolean2(),
+    project_migrations_applied: Boolean2(),
+    pending_versions: _Array_(String2({ pattern: "^\\d{1,20}$" }), { maxItems: 4096, uniqueItems: true }),
+    operator_provisioning_required: Boolean2()
+  }, closed4),
+  backup: _Object_({
+    required: Boolean2(),
+    confirmed: Literal(false)
+  }, closed4),
+  action: Union([Literal("promote"), Literal("no-op"), Literal("blocked")]),
+  blockers: _Array_(Enum([...blocker]), {
+    maxItems: blocker.length,
+    uniqueItems: true
+  }),
+  steps: _Array_(String2({ minLength: 1, maxLength: 64 }), { maxItems: 8, uniqueItems: true }),
+  execution_performed: Literal(false),
+  data_recovery: Literal("separate-required")
+}, closed4);
+function applicationPromotionPlanDigest(value) {
+  return digest(canonical(value));
+}
+function applicationPromotionAction(value) {
+  if (value.blockers.length > 0)
+    return "blocked";
+  return value.target.artifact_action === "reuse" && value.target.current_release_id === value.target.candidate_release_id && value.target.configuration !== null && value.target.activation_id !== null && value.target.receipt_confirmed && value.target.ready && value.target.smoke_verified && value.migrations.project_migrations_applied && !value.migrations.operator_provisioning_required && (!value.backup.required || value.backup.confirmed) ? "no-op" : "promote";
+}
+function applicationPromotionSteps(value) {
+  if (value.action === "no-op")
+    return [];
+  return [
+    ...value.blockers.some((code) => code.startsWith("SOURCE_")) ? ["verify-source"] : [],
+    ...value.blockers.some((code) => code.startsWith("TARGET_CONFIGURATION_")) ? ["bind-target-configuration"] : [],
+    ...value.blockers.includes("MIGRATION_CONFLICT") ? ["resolve-migration-conflicts"] : [],
+    ...!value.backup.required || value.backup.confirmed ? [] : ["backup"],
+    ...value.migrations.project_migrations_applied ? [] : ["review-and-apply-migrations"],
+    ...value.migrations.operator_provisioning_required ? ["verify-operator-provisioning"] : [],
+    ...value.action === "promote" ? [
+      ...value.target.artifact_action === "materialize" ? ["transfer"] : [],
+      "activate-with-cas",
+      "verify-runtime-and-smoke"
+    ] : []
+  ];
+}
+function parseApplicationPromotionPlan(value) {
+  if (!Check2(ApplicationPromotionPlanSchema, value))
+    throw new Error("Invalid application promotion plan");
+  const { plan_sha256: _planSha256, ...content } = value;
+  if (value.migrations.project_migrations_applied && (!value.migrations.ledger_compatible || value.migrations.pending_versions.length > 0) || !value.source.activation_id && (value.source.ready || value.source.receipt_confirmed || value.source.smoke_verified) || !value.target.activation_id && (value.target.ready || value.target.receipt_confirmed || value.target.smoke_verified) || !value.blockers.length && (!value.source.ready || !value.source.receipt_confirmed || !value.source.smoke_verified || !value.source.activation_id || !value.target.configuration || !value.migrations.ledger_compatible)) {
+    throw new Error("Invalid application promotion prerequisites");
+  }
+  if (value.backup.required !== !value.migrations.project_migrations_applied || [value.source, value.target].some((observation) => observation.smoke_verified && (observation.evidence_sha256 === null || observation.migration_ledger_digest === null)) || value.target.smoke_verified && value.target.migration_ledger_digest !== value.migrations.ledger_digest) {
+    throw new Error("Invalid application promotion migration binding");
+  }
+  if (value.source.release_id !== applicationReleaseId(value.source.project_ref, value.application_id, value.manifest_sha256) || value.target.candidate_release_id !== applicationReleaseId(value.project_ref, value.application_id, value.manifest_sha256) || value.action !== applicationPromotionAction(content) || canonical(value.steps) !== canonical(applicationPromotionSteps(content)) || value.plan_sha256 !== applicationPromotionPlanDigest(content) || value.target.configuration !== null && (() => {
+    const configuration = parseApplicationConfigurationView(value.target.configuration);
+    return configuration.project_ref !== value.project_ref || configuration.application_id !== value.application_id || configuration.environment_id !== value.environment_id || configuration.configuration_id !== value.target.configuration_id;
+  })()) {
+    throw new Error("Invalid application promotion plan identity");
+  }
+  return structuredClone(value);
+}
 // node_modules/@supacloud/delivery/src/application-runtime-identity.ts
 var ApplicationRuntimeIdentitySchema = _Object_({
   schema: Literal("supacloud.application-runtime.v1"),
@@ -181551,7 +181708,7 @@ ALTER TABLE supacloud_commands.execution_receipts
   DROP COLUMN IF EXISTS recovery_attempts;
 `;
 var MAX_MIGRATION_VERSION = 9223372036854775807n;
-function sha2562(value) {
+function sha2563(value) {
   return createHash22("sha256").update(value).digest("hex");
 }
 function normalizedSql(value) {
@@ -181620,7 +181777,7 @@ function planMigrationRebase(migrations, options, baselineSql) {
     file: migration.file,
     version: migration.version,
     name: migration.name,
-    sha256: sha2562(normalizedSql(migration.sql))
+    sha256: sha2563(normalizedSql(migration.sql))
   }));
   return {
     version: 1,
@@ -181630,8 +181787,8 @@ function planMigrationRebase(migrations, options, baselineSql) {
     baselineMigration,
     retainedMigrations: retained.map((migration) => migration.file),
     archivedMigrations: archived.map((migration) => migration.file),
-    sourceHistorySha256: sha2562(JSON.stringify(sourceHistory)),
-    baselineSha256: sha2562(normalizedBaseline),
+    sourceHistorySha256: sha2563(JSON.stringify(sourceHistory)),
+    baselineSha256: sha2563(normalizedBaseline),
     warnings: [
       "The baseline must come from a schema-only snapshot of the verified target database.",
       "Data backfills, reference data and non-replayable side effects need a separate review.",
@@ -181667,7 +181824,7 @@ async function rebaseMigrations(options) {
       file: migration.file,
       version: migration.version,
       name: migration.name,
-      sha256: sha2562(normalizedSql(migration.sql))
+      sha256: sha2563(normalizedSql(migration.sql))
     }))
   }, null, 2) + `
 `);
@@ -184569,7 +184726,7 @@ function clientId(value) {
   }
   return value;
 }
-function projectRef(value) {
+function projectRef3(value) {
   if (typeof value !== "string" || !value.trim())
     throw new Error("'ref' is required");
   return projectRefPathSegment(value.trim(), "OAuth client");
@@ -184721,7 +184878,7 @@ function registerOAuthClientTools(server2, http) {
     client_id: optional(String2(), "[get/delete] Exact release-canary public OAuth client ID"),
     redirect_uri: optional(String2(), "[create/delete] Exact HTTPS or port-bound RFC 8252 loopback callback")
   }, async ({ action, ref, client_id, redirect_uri }) => {
-    const targetRef = projectRef(ref);
+    const targetRef = projectRef3(ref);
     if (action === "list")
       return listReleaseCanaryClients(http, targetRef);
     if (action === "get")
@@ -187394,6 +187551,64 @@ var ApplicationActivationRetirementResultSchema2 = ApplicationActivationRetireme
 var ApplicationRollbackSnapshotSchema2 = ApplicationRollbackSnapshotSchema;
 var ApplicationActivationHistoryCursorSchema2 = ApplicationActivationHistoryCursorSchema;
 
+// src/shared/tools/application-release-transfer.ts
+async function applicationReleaseTransfer(http, input, project) {
+  const operation = `applications.${input.action}`;
+  const identity = {
+    project_ref: input.ref,
+    application_id: input.id,
+    source_ref: input.sourceRef,
+    source_release_id: input.sourceReleaseId
+  };
+  const path = `/v1/projects/${project}/applications/${encodeURIComponent(input.id)}`;
+  const query = new URLSearchParams({ source_ref: input.sourceRef, source_release_id: input.sourceReleaseId });
+  const response = await http.get(`${path}/release-transfer-plan?${query}`, { maxJsonBytes: 65536, responseTimeoutMs: 30000 });
+  if (!response.ok)
+    return releaseControlFailure(operation, "HTTP_ERROR", response.transportError ? null : response.status, identity);
+  let plan;
+  try {
+    if (response.status !== 200)
+      throw new Error;
+    plan = parseApplicationReleaseTransferPlan(response.data);
+    if (plan.project_ref !== input.ref || plan.application_id !== input.id || plan.source.project_ref !== input.sourceRef || plan.source.release_id !== input.sourceReleaseId)
+      throw new Error;
+  } catch {
+    return releaseControlFailure(operation, "INVALID_RESPONSE", response.status, identity);
+  }
+  if (input.action === "get_release_transfer_plan")
+    return releaseControlSuccess(operation, { ...identity, plan });
+  const safeIdentity = {
+    ...identity,
+    release_id: plan.candidate_release_id,
+    manifest_sha256: plan.source.manifest_sha256
+  };
+  if (plan.action === "no-op")
+    return releaseControlSuccess(operation, {
+      ...safeIdentity,
+      no_op: true,
+      execution_performed: false,
+      activation_performed: false,
+      plan
+    });
+  const result = await http.postReleaseMutation(`${path}/release-transfers`, {
+    source_ref: input.sourceRef,
+    source_release_id: input.sourceReleaseId,
+    expected_manifest_sha256: plan.source.manifest_sha256
+  }, { timeoutMs: 120000 });
+  if (!result.ok)
+    return releaseControlMutationFailure(operation, result, safeIdentity);
+  try {
+    if (result.status !== 200)
+      throw new Error;
+    const receipt = parseApplicationReleaseTransferResult(result.data);
+    if (receipt.project_ref !== input.ref || receipt.application_id !== input.id || receipt.source.project_ref !== input.sourceRef || receipt.source.release_id !== input.sourceReleaseId || receipt.candidate_release_id !== plan.candidate_release_id || receipt.source.manifest_sha256 !== plan.source.manifest_sha256)
+      throw new Error;
+    return releaseControlSuccess(operation, { ...safeIdentity, no_op: false, transfer: receipt });
+  } catch {
+    return releaseControlFailure(operation, "OUTCOME_UNKNOWN", result.status, safeIdentity);
+  }
+}
+
 // src/shared/tools/application-preview-tools.ts
 var APPLICATION_PREVIEW_ACTIONS = [
   "get_preview_plan",
@@ -187732,6 +187947,9 @@ var APPLICATION_TOOL_SCHEMA = {
     "put_configuration",
     "get_deploy_plan",
     "deploy_release",
+    "get_release_transfer_plan",
+    "transfer_release",
+    "get_promotion_plan",
     "activate_release",
     "rollback_release",
     "get_rollback_snapshot",
@@ -187750,6 +187968,9 @@ var APPLICATION_TOOL_SCHEMA = {
   configuration_path: optional(String2(), "[put_configuration] Local configuration write JSON including revision and expected revision"),
   manifest_path: optional(String2(), "[upload_release] Local delivery.manifest.json"),
   release_id: optional(ApplicationReleaseIdSchema2, "[get_release/get_deploy_plan/deploy_release/activate_release/reconcile_activation/rollback_release] Immutable application release ID; platform selects previous for default rollback"),
+  source_ref: optional(String2({ pattern: "^[A-Za-z0-9_-]{1,20}$" }), "[get_release_transfer_plan/transfer_release] Source project ref"),
+  source_release_id: optional(ApplicationReleaseIdSchema2, "[get_release_transfer_plan/transfer_release] Source immutable release ID"),
+  source_environment_id: optional(ApplicationIdSchema2, "[get_promotion_plan] Source environment"),
   cursor: optional(Union([ApplicationReleaseIdSchema2, ApplicationActivationHistoryCursorSchema2]), "[list_releases/get_history] Returned page cursor"),
   limit: optional(Integer({ minimum: 1, maximum: 100 }), "[list_releases/get_history] Page size, default 50/20"),
   offset: optional(Integer({ minimum: 0, maximum: 1e6 }), "[logs] Result offset"),
@@ -188045,6 +188266,52 @@ function registerApplicationTools(server2, http) {
       throw new Error("Invalid application ID");
     const path = `/v1/projects/${project}/applications/${encodeURIComponent(id)}/releases`;
     const operation = `applications.${action}`;
+    if (action === "get_promotion_plan") {
+      const environmentId = text(args, "environment_id");
+      const sourceRef = text(args, "source_ref"), sourceEnvironmentId = text(args, "source_environment_id");
+      const sourceReleaseId = text(args, "source_release_id");
+      if (!/^[a-z0-9-]{1,20}$/.test(sourceRef) || !Check2(ApplicationReleaseIdSchema2, sourceReleaseId) || !Check2(ApplicationIdSchema2, environmentId) || !Check2(ApplicationIdSchema2, sourceEnvironmentId)) {
+        throw new Error("Invalid promotion environment");
+      }
+      const query = new URLSearchParams({
+        source_ref: sourceRef,
+        source_environment_id: sourceEnvironmentId,
+        source_release_id: sourceReleaseId
+      });
+      if (typeof args["configuration_id"] === "string")
+        query.set("configuration_id", args["configuration_id"]);
+      const result = await http.get(`/v1/projects/${project}/applications/${encodeURIComponent(id)}/environments/${encodeURIComponent(environmentId)}/promotion-plan?${query}`, { maxJsonBytes: 262144, responseTimeoutMs: 30000 });
+      const identity = {
+        project_ref: ref,
+        application_id: id,
+        environment_id: environmentId,
+        source_ref: sourceRef,
+        source_environment_id: sourceEnvironmentId,
+        source_release_id: sourceReleaseId
+      };
+      if (!result.ok)
+        return releaseControlFailure(operation, "HTTP_ERROR", result.status, identity);
+      try {
+        if (result.status !== 200)
+          throw new Error;
+        const plan = parseApplicationPromotionPlan(result.data);
+        if (plan.project_ref !== ref || plan.application_id !== id || plan.environment_id !== environmentId || plan.source.project_ref !== sourceRef || plan.source.environment_id !== sourceEnvironmentId || plan.source.release_id !== sourceReleaseId || args["configuration_id"] !== undefined && plan.target.configuration_id !== args["configuration_id"]) {
+          throw new Error;
+        }
+        return releaseControlSuccess(operation, { ...identity, plan });
+      } catch {
+        return releaseControlFailure(operation, "INVALID_RESPONSE", result.status, identity);
+      }
+    }
+    if (action === "get_release_transfer_plan" || action === "transfer_release") {
+      return applicationReleaseTransfer(http, {
+        action,
+        ref,
+        id,
+        sourceRef: text(args, "source_ref"),
+        sourceReleaseId: text(args, "source_release_id")
+      }, project);
+    }
     if (action === "get_deploy_plan") {
       const observed = await readDeployPlan(http, args, project);
       return observed.failure ?? releaseControlSuccess(operation, { ...observed.identity, plan: observed.plan });
@@ -194299,6 +194566,9 @@ async function applyScaffoldWrites(plan) {
 // src/shared/tools/app-tools.ts
 var REMOTE_APP_ACTIONS = {
   upload: "upload_release",
+  "transfer-plan": "get_release_transfer_plan",
+  "promote-plan": "get_promotion_plan",
+  transfer: "transfer_release",
   configure: "put_configuration",
   deploy: "deploy_release",
   "deploy-plan": "get_deploy_plan",
@@ -194317,15 +194587,18 @@ var REMOTE_APP_ACTIONS = {
   "preview-cleanup": "cleanup_preview"
 };
 var REMOTE_APP_DESCRIPTIONS = {
-  ref: "[upload/configure/deploy/deploy-plan/diff/status/rollback/rollback-plan/history/reconcile/retire/preview-plan/preview/previews/preview-status/preview-cleanup] Project ref (defaults to context)",
-  id: "[upload/configure/deploy/deploy-plan/diff/status/rollback/rollback-plan/history/reconcile/retire/preview-plan/preview/previews/preview-status/preview-cleanup] Application ID",
-  environment_id: "[configure/deploy/deploy-plan/diff/status/rollback/rollback-plan/history/reconcile/retire/preview-plan/preview/previews/preview-status/preview-cleanup] Environment ID",
-  configuration_id: "[deploy/deploy-plan/diff/rollback/preview] Required for deployment/preview; platform selects for default rollback",
+  ref: "[upload/configure/transfer-plan/transfer/promote-plan/deploy/deploy-plan/diff/status/rollback/rollback-plan/history/reconcile/retire/preview-plan/preview/previews/preview-status/preview-cleanup] Project ref (defaults to context)",
+  id: "[upload/configure/transfer-plan/transfer/promote-plan/deploy/deploy-plan/diff/status/rollback/rollback-plan/history/reconcile/retire/preview-plan/preview/previews/preview-status/preview-cleanup] Application ID",
+  environment_id: "[configure/promote-plan/deploy/deploy-plan/diff/status/rollback/rollback-plan/history/reconcile/retire/preview-plan/preview/previews/preview-status/preview-cleanup] Target environment ID",
+  configuration_id: "[promote-plan/deploy/deploy-plan/diff/rollback/preview] Immutable target configuration revision; required for deployment/preview; platform selects for default rollback",
   activation_id: "[deploy/rollback/reconcile/retire] Stable activation ID; auto-generated for deploy/rollback if omitted",
   expected_activation_id: "[deploy/rollback] Auto-selected from verified state; supply with activation_id for an exact retry",
   configuration_path: "[configure] Configuration write JSON including revision and expected revision",
   manifest_path: "[upload] Local delivery.manifest.json",
   release_id: "[deploy/deploy-plan/diff/rollback/reconcile/preview-plan/preview] Required for deployment/preview; defaults to journal-selected previous for rollback",
+  source_ref: "[transfer-plan/transfer/promote-plan] Source project ref",
+  source_release_id: "[transfer-plan/transfer/promote-plan] Source immutable release ID",
+  source_environment_id: "[promote-plan] Source environment ID",
   preview_id: "[preview-status/preview-cleanup] Preview receipt ID",
   branch_ref: "[preview-plan] Proposed branch ref; preview assigns its own",
   branch_name: "[preview] Branch display name",
@@ -195233,6 +195506,30 @@ async function runDelivery(args) {
   const result = await buildDeliveryProject(options, loaded.delivery);
   return textResult(JSON.stringify(result, null, 2), !result.ok);
 }
+function formatReleaseTransfer(result) {
+  if (result.isError)
+    return result;
+  try {
+    const payload = JSON.parse(result.content[0]?.text ?? "");
+    if (!payload || typeof payload !== "object" || !("ok" in payload) || payload.ok !== true)
+      return result;
+    const plan = "plan" in payload ? parseApplicationReleaseTransferPlan(payload.plan) : null;
+    const receipt = !plan && "transfer" in payload ? parseApplicationReleaseTransferResult(payload.transfer) : null;
+    const data = plan ?? receipt;
+    if (!data)
+      return result;
+    return textResult([
+      `${data.project_ref}/${data.application_id}: ${plan ? plan.action === "no-op" ? "No changes" : "Transfer required" : "Artifact transferred"}`,
+      `Source: ${data.source.project_ref} / ${data.source.release_id}`,
+      `Target release: ${data.candidate_release_id}`,
+      `Manifest: ${data.source.manifest_sha256}`,
+      "Activation: not performed"
+    ].join(`
+`));
+  } catch {
+    return result;
+  }
+}
 var historyReceiptSchema = _Object_({
   schema: Literal(RELEASE_CONTROL_RESPONSE_SCHEMA),
   ok: Literal(true),
@@ -195318,9 +195615,11 @@ async function runAppTool(request, options = {}) {
   if (request.database_url !== undefined && request.action !== "dev" && request.action !== "watch") {
     throw new ScaffoldError("SCAFFOLD_OPTION_INVALID", "--database-url applies only to app dev --profile integration");
   }
-  if (request.json !== undefined && (request.action !== "history" || request.json !== true || request.format === "text")) {
-    throw new Error("--json applies only to app history and cannot be combined with --format text");
+  if (request.json !== undefined && request.action !== "history" && request.action !== "transfer-plan" && request.action !== "transfer" && request.action !== "promote-plan") {
+    throw new Error("--json applies only to app history, transfer-plan, transfer or promote-plan");
   }
+  if (request.json !== undefined && request.format === "text")
+    throw new Error("--json and --format text cannot be combined");
   if (Object.hasOwn(REMOTE_APP_ACTIONS, request.action)) {
     const delegate = options.getApplications?.();
     if (!delegate)
@@ -195337,7 +195636,24 @@ async function runAppTool(request, options = {}) {
     if (request.action === "history" && format !== "json" && json !== true) {
       return historyText(result, request, args.ref);
     }
-    return (request.action === "deploy-plan" || request.action === "diff") && format !== "json" ? formatRemoteDeployPlan(result) : result;
+    if ((request.action === "deploy-plan" || request.action === "diff") && format !== "json") {
+      return formatRemoteDeployPlan(result);
+    }
+    if (request.action === "promote-plan" && !result.isError && format !== "json" && !json) {
+      const payload = JSON.parse(result.content[0]?.text ?? "");
+      if (!payload || typeof payload !== "object" || !("plan" in payload))
+        return result;
+      const plan = parseApplicationPromotionPlan(payload.plan);
+      return textResult([
+        `${plan.project_ref}/${plan.application_id}/${plan.environment_id}: ${plan.action}`,
+        `Source: ${plan.source.project_ref}/${plan.source.environment_id}`,
+        ...plan.blockers.length ? [`Blocked: ${plan.blockers.join(", ")}`] : [],
+        ...plan.steps.length ? [`Next: ${plan.steps.join(" -> ")}`] : [],
+        "Execution: not performed"
+      ].join(`
+`));
+    }
+    return (request.action === "transfer-plan" || request.action === "transfer") && format !== "json" && !json ? formatReleaseTransfer(result) : result;
   }
   switch (request.action) {
     case "verify-plan": {
@@ -195411,6 +195727,9 @@ function registerAppTools(server2, options = {}) {
       "build",
       "upload",
       "configure",
+      "transfer-plan",
+      "transfer",
+      "promote-plan",
       "deploy",
       "deploy-plan",
       "diff",
@@ -195426,7 +195745,7 @@ function registerAppTools(server2, options = {}) {
       "previews",
       "preview-status",
       "preview-cleanup"
-    ]), "App action; local plan is topology-only, deploy-plan/diff observe remote state, deploy skips verified no-op, rollback never downgrades schema"),
+    ]), "App action; transfer reuses a verified release without build or activation; local plan is topology-only, deploy-plan/diff observe remote state, deploy skips verified no-op, rollback never downgrades schema"),
     kind: optional(stringEnum(["module", "command", "query", "controller", "job", "contract", "resource"]), "[generate] Scaffold kind"),
     template: optional(stringEnum(["minimal", "http", "command", "edge"]), "[init] Minimal application by default; explicit http/command/edge recipes"),
     name: optional(String2(), "[init/generate] Project or object name"),
@@ -195441,8 +195760,8 @@ function registerAppTools(server2, options = {}) {
     include: optional(String2(), "[dev/compile/check] Comma-separated glob patterns for source files"),
     out_dir: optional(String2(), "[dev/compile/plan/build/export-tools] Output directory (default: configured outDir)"),
     strict: optional(Boolean2(), "[dev/compile/check] Promote warnings to errors"),
-    format: optional(stringEnum(["text", "json"]), "[dev/generate/compile/check/plan/deploy-plan/diff/history/graph/export-tools] Output format (default: text)"),
-    json: optional(Literal(true), "[history] Return the validated JSON receipt"),
+    format: optional(stringEnum(["text", "json"]), "[dev/generate/compile/check/plan/deploy-plan/diff/history/promote-plan/graph/export-tools] Output format (default: text)"),
+    json: optional(Boolean2(), "[history/transfer-plan/transfer/promote-plan] Preserve or return the full machine-readable receipt"),
     profile: optional(stringEnum(["fast", "integration"]), "[dev] Run dev or dev:integration; integration verifies an explicit loopback database"),
     once: optional(Boolean2(), "[dev] Validate and report once without watching"),
     watch: optional(Boolean2(), "[dev] Watch for changes (default: true; --once disables)"),
@@ -196883,7 +197202,8 @@ function validProjectRef(ref) {
   return SAFE_PROJECT_REF.test(ref);
 }
 function backupBelongsToProject(backupId, projectRef) {
-  return BACKUP_ID.test(backupId) && backupId.startsWith(`logical-full_${projectRef}_`);
+  const prefix = `logical-full_${projectRef}_`;
+  return BACKUP_ID.test(backupId) && backupId.startsWith(prefix) && /^[a-f0-9]{32}$/.test(backupId.slice(prefix.length));
 }
 function verifiedBackup(value, projectRef) {
   if (!isRecord6(value) || typeof value.backup_id !== "string" || !backupBelongsToProject(value.backup_id, projectRef) || value.project_ref !== projectRef || typeof value.database !== "string" || !SAFE_DATABASE.test(value.database) || value.kind !== "logical-full" || !canonicalTimestamp4(value.created_at) || !canonicalTimestamp4(value.completed_at) || new Date(value.completed_at).valueOf() < new Date(value.created_at).valueOf() || typeof value.bytes !== "number" || !Number.isSafeInteger(value.bytes) || value.bytes <= 0 || typeof value.sha256 !== "string" || !SHA256.test(value.sha256))
@@ -196922,16 +197242,11 @@ function publicBackup(backup) {
 function equalBackup(left, right) {
   return left.backup_id === right.backup_id && left.project_ref === right.project_ref && left.database === right.database && left.kind === right.kind && left.created_at === right.created_at && left.completed_at === right.completed_at && left.bytes === right.bytes && left.sha256 === right.sha256;
 }
-function newlyCreatedBackup(before, after) {
-  const afterById = new Map(after.map((backup) => [backup.backup_id, backup]));
-  for (const previous of before) {
-    const current = afterById.get(previous.backup_id);
-    if (!current || !equalBackup(previous, current))
-      return null;
+function requiredBackupId(value, projectRef) {
+  if (typeof value !== "string" || !backupBelongsToProject(value, projectRef)) {
+    throw new Error("'backup_id' must identify a logical-full backup for 'ref'");
   }
-  const known = new Set(before.map((backup) => backup.backup_id));
-  const additions = after.filter((backup) => !known.has(backup.backup_id));
-  return additions.length === 1 ? additions[0] : null;
+  return value;
 }
 function restoreRequest(projectRef, backupId, expectedSha256, restoreConfirmation) {
   if (typeof backupId !== "string" || !backupBelongsToProject(backupId, projectRef)) {
@@ -196957,11 +197272,27 @@ function httpFailure(operation, response) {
   }
   return releaseControlFailure(operation, "HTTP_ERROR", response.transportError ? null : response.status);
 }
-function mutationFailure(operation, response) {
-  if (response.responseReadError || response.transportError || response.status === 408 || response.status >= 500) {
-    return releaseControlFailure(operation, "OUTCOME_UNKNOWN", response.transportError ? null : response.status);
+function mutationOutcomeUnknown(response) {
+  return Boolean(response.responseReadError || response.transportError || response.status === 408 || response.status >= 500 || response.status >= 200 && response.status < 300 && response.status !== 200);
+}
+function mutationFailure(operation, response, safeState = {}) {
+  if (mutationOutcomeUnknown(response)) {
+    return releaseControlFailure(operation, "OUTCOME_UNKNOWN", response.transportError ? null : response.status, safeState);
   }
-  return releaseControlFailure(operation, "HTTP_ERROR", response.status);
+  return releaseControlFailure(operation, "HTTP_ERROR", response.status, safeState);
+}
+async function readBackup(http, projectRef, backupId) {
+  let response;
+  try {
+    response = await http.get(`${endpoint(projectRef)}/database/backups/logical/${backupId}`, {
+      maxJsonBytes: MUTATION_MAX_BYTES,
+      responseTimeoutMs: RELEASE_READ_RESPONSE_TIMEOUT_MS
+    });
+  } catch {
+    response = { ok: false, status: 0, data: null, transportError: true };
+  }
+  const candidate = response.ok && response.status === 200 && isRecord6(response.data) ? verifiedBackup(response.data.backup, projectRef) : null;
+  return { response, backup: candidate?.backup_id === backupId ? candidate : null };
 }
 async function readInventory(http, projectRef) {
   const response = await http.get(`${endpoint(projectRef)}/database/backups/logical`, {
@@ -197374,6 +197705,7 @@ function registerReleaseTools(server2, http, options = {}) {
   const localActions = ["scope_inspect", "scope_rebind", "scope_create"];
   const remoteActions = [
     "logical_backup_list",
+    "logical_backup_status",
     "logical_backup_create",
     "logical_backup_restore",
     "postgrest_status",
@@ -197396,7 +197728,7 @@ function registerReleaseTools(server2, http, options = {}) {
     web: optional(Boolean2(), "[scope_create] Whether web assets are included in release scope"),
     dry_run: optional(Boolean2(), "[scope_rebind] Perform calculation and validation without writing files"),
     cwd: optional(String2(), "[scope_inspect/scope_rebind/scope_create] Base directory for relative file and git resolution"),
-    backup_id: optional(String2(), "[logical_backup_restore] Exact verified logical-full backup ID from the selected project inventory"),
+    backup_id: optional(String2(), "[logical_backup_create/status/restore] Stable project-bound backup ID; create generates one when omitted"),
     expected_sha256: optional(String2(), "[logical_backup_restore] Exact lowercase SHA-256 from the selected project inventory"),
     restore_confirmation: optional(String2(), "[logical_backup_restore] Exact RESTORE_PROJECT:<ref>:<backup_id>:<sha256> confirmation"),
     subject: optional(String2(), "[release_canary_fixture_stage_replay/disable_replay] Exact central subject UUID"),
@@ -197441,28 +197773,47 @@ function registerReleaseTools(server2, http, options = {}) {
       });
     }
     if (action === "logical_backup_create") {
-      const before = await readInventory(http, projectRef);
-      const beforeFailure = readInventoryFailure("release.logical_backup.create", before);
-      if (beforeFailure)
-        return beforeFailure;
-      const mutation = await http.postReleaseMutation(`${endpoint(projectRef)}/database/backups/logical`, {}, {
-        timeoutMs: BACKUP_TIMEOUT_MS
-      });
-      const after = await readInventory(http, projectRef);
+      const backupId = requiredBackupId(backup_id ?? `logical-full_${projectRef}_${crypto.randomUUID().replaceAll("-", "")}`, projectRef);
+      const state = { project_ref: projectRef, backup_id: backupId };
+      let mutation;
+      try {
+        mutation = await http.postReleaseMutation(`${endpoint(projectRef)}/database/backups/logical`, { backup_id: backupId }, { timeoutMs: BACKUP_TIMEOUT_MS });
+      } catch {
+        mutation = { ok: false, status: 0, data: null, transportError: true };
+      }
       if (!mutation.ok || mutation.status !== 200) {
-        return mutationFailure("release.logical_backup.create", mutation);
+        if (mutationOutcomeUnknown(mutation)) {
+          const observed = await readBackup(http, projectRef, backupId);
+          if (observed.backup)
+            return releaseControlFailure("release.logical_backup.create", "OUTCOME_UNKNOWN", mutation.transportError ? null : mutation.status, {
+              ...state,
+              backup: publicBackup(observed.backup),
+              backup_verified: true,
+              creation_confirmed: false
+            });
+        }
+        return mutationFailure("release.logical_backup.create", mutation, state);
       }
       const responseBackup = isRecord6(mutation.data) ? verifiedBackup(mutation.data.backup, projectRef) : null;
-      const afterFailure = readInventoryFailure("release.logical_backup.create", after);
-      const addedBackup = after.inventory && newlyCreatedBackup(before.inventory, after.inventory);
-      if (!responseBackup || afterFailure || !addedBackup || !equalBackup(responseBackup, addedBackup)) {
-        return releaseControlFailure("release.logical_backup.create", "OUTCOME_UNKNOWN", mutation.status);
+      const after = await readBackup(http, projectRef, backupId);
+      if (!responseBackup || responseBackup.backup_id !== backupId || !after.backup || !equalBackup(responseBackup, after.backup)) {
+        return releaseControlFailure("release.logical_backup.create", "OUTCOME_UNKNOWN", mutation.status, state);
       }
       return releaseControlSuccess("release.logical_backup.create", {
-        project_ref: projectRef,
-        backup: publicBackup(addedBackup)
+        ...state,
+        backup: publicBackup(after.backup)
       });
     }
+    if (action === "logical_backup_status") {
+      const backupId = requiredBackupId(backup_id, projectRef);
+      const read = await readBackup(http, projectRef, backupId);
+      const state = { project_ref: projectRef, backup_id: backupId };
+      if (!read.response.ok || read.response.status !== 200) {
+        const code = read.response.responseReadError || read.response.status >= 200 && read.response.status < 300 ? "INVALID_RESPONSE" : "HTTP_ERROR";
+        return releaseControlFailure("release.logical_backup.status", code, read.response.transportError ? null : read.response.status, state);
+      }
+      return read.backup ? releaseControlSuccess("release.logical_backup.status", { ...state, backup: publicBackup(read.backup) }) : releaseControlFailure("release.logical_backup.status", "INVALID_RESPONSE", read.response.status, state);
+    }
     if (action === "logical_backup_restore") {
       const request = restoreRequest(projectRef, backup_id, expected_sha256, restore_confirmation);
       const before = await readInventory(http, projectRef);
@@ -198994,7 +199345,7 @@ function registerRemoteDevTools(server2, options = {}) {
 // package.json
 var package_default = {
   name: "@supacloud/cli",
-  version: "0.80.0",
+  version: "0.81.0",
   description: "Project-scoped CLI for SupaCloud users",
   type: "module",
   main: "./dist/index.js",
@@ -199046,14 +199397,14 @@ var package_default = {
   },
   dependencies: {
     "@supacloud/compiler": "^0.43.0",
-    "@supacloud/delivery": "0.10.0",
+    "@supacloud/delivery": "0.11.0",
     "@supacloud/db": "0.16.0",
     fflate: "^0.8.3",
     typebox: "1.3.34"
   },
   overrides: {
     "@supacloud/contracts": "0.8.0",
-    "@supacloud/delivery": "0.10.0",
+    "@supacloud/delivery": "0.11.0",
     "@graphql-tools/utils": "^12.0.3"
   },
   devDependencies: {
@@ -199274,6 +199625,7 @@ EXAMPLES
   ${preferredCommand} project logs --log_type database
   ${preferredCommand} project task_stats
   ${preferredCommand} release logical_backup_create --ref abc123
+  ${preferredCommand} release logical_backup_status --ref abc123 --backup_id <backup_id>
   ${preferredCommand} release logical_backup_restore --ref abc123 --backup_id <backup_id> --expected_sha256 <sha256> --restore_confirmation RESTORE_PROJECT:abc123:<backup_id>:<sha256>
   ${preferredCommand} release postgrest_status --ref abc123
   ${preferredCommand} release postgrest_restart --ref abc123
@@ -199318,6 +199670,7 @@ EXAMPLES
   ${preferredCommand} app diff --ref abc123 --id orders --environment_id test --release_id <sha256> --configuration_id <uuid>
   ${preferredCommand} app deploy --ref abc123 --id orders --environment_id test --release_id <sha256> --configuration_id <uuid>
   ${preferredCommand} app status --ref abc123 --id orders --environment_id test
+  ${preferredCommand} --env production app promote-plan --id orders --environment_id production --source_ref staging --source_environment_id staging --source_release_id <sha256>
   ${preferredCommand} app preview-plan --ref abc123 --id orders --environment_id test --release_id <sha256> --branch_ref preview-orders
   ${preferredCommand} app preview --ref abc123 --id orders --environment_id test --release_id <sha256> --configuration_id <uuid> --ttl_seconds 3600 --wait
   ${preferredCommand} app previews --ref abc123 --id orders --environment_id test

package/dist/shared/tools/app-tools.d.ts

@@ -2,6 +2,9 @@ import { type ToolServer } from "../tool-server";
 import { type AppManifest } from "./app-tool-export";
 declare const REMOTE_APP_ACTIONS: {
     readonly upload: "upload_release";
+    readonly "transfer-plan": "get_release_transfer_plan";
+    readonly "promote-plan": "get_promotion_plan";
+    readonly transfer: "transfer_release";
     readonly configure: "put_configuration";
     readonly deploy: "deploy_release";
     readonly "deploy-plan": "get_deploy_plan";
@@ -38,6 +41,9 @@ export interface AppToolArguments {
     configuration_path?: string;
     manifest_path?: string;
     release_id?: string;
+    source_ref?: string;
+    source_release_id?: string;
+    source_environment_id?: string;
     cursor?: string;
     limit?: number;
     preview_id?: string;
@@ -62,7 +68,7 @@ export interface AppToolArguments {
     out_dir?: string;
     strict?: boolean;
     format?: "text" | "json";
-    json?: true;
+    json?: boolean;
     target?: string;
     fix?: string;
     write?: boolean;

package/dist/shared/tools/application-promotion-help.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/tools/application-promotion.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/tools/application-release-transfer.d.ts

@@ -0,0 +1,8 @@
+import type { HttpTransport } from "../transports/http";
+export declare function applicationReleaseTransfer(http: HttpTransport, input: {
+    action: "get_release_transfer_plan" | "transfer_release";
+    ref: string;
+    id: string;
+    sourceRef: string;
+    sourceReleaseId: string;
+}, project: string): Promise<import("./release-control-response").ReleaseControlToolResponse>;

package/dist/shared/tools/application-tools.d.ts

@@ -9,7 +9,7 @@ export declare const APPLICATION_TOOL_SCHEMA: {
     ttl_seconds: Type.TOptional<Type.TInteger>;
     wait: Type.TOptional<Type.TBoolean>;
     timeout_seconds: Type.TOptional<Type.TInteger>;
-    action: Type.TEnum<("list_releases" | "get_release" | "upload_release" | "activate_release" | "logs" | "get_runtime" | "get_deployment_evidence" | "get_configuration" | "get_rollback_snapshot" | "get_history" | "get_deploy_plan" | "get_preview_plan" | "put_configuration" | "deploy_release" | "rollback_release" | "reconcile_activation" | "retire_activation" | "create_preview" | "list_previews" | "get_preview" | "cleanup_preview")[]>;
+    action: Type.TEnum<("list_releases" | "get_release" | "upload_release" | "activate_release" | "logs" | "get_runtime" | "get_deployment_evidence" | "get_configuration" | "get_release_transfer_plan" | "get_promotion_plan" | "get_rollback_snapshot" | "get_history" | "get_deploy_plan" | "get_preview_plan" | "put_configuration" | "transfer_release" | "deploy_release" | "rollback_release" | "reconcile_activation" | "retire_activation" | "create_preview" | "list_previews" | "get_preview" | "cleanup_preview")[]>;
     ref: Type.TString;
     id: Type.TString;
     environment_id: Type.TOptional<Type.TString>;
@@ -19,6 +19,9 @@ export declare const APPLICATION_TOOL_SCHEMA: {
     configuration_path: Type.TOptional<Type.TString>;
     manifest_path: Type.TOptional<Type.TString>;
     release_id: Type.TOptional<Type.TString>;
+    source_ref: Type.TOptional<Type.TString>;
+    source_release_id: Type.TOptional<Type.TString>;
+    source_environment_id: Type.TOptional<Type.TString>;
     cursor: Type.TOptional<Type.TUnion<[Type.TString, Type.TString]>>;
     limit: Type.TOptional<Type.TInteger>;
     offset: Type.TOptional<Type.TInteger>;

package/dist/shared/tools/release-backup-http-status.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.80.0",
+  "version": "0.81.0",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",
@@ -52,14 +52,14 @@
   },
   "dependencies": {
     "@supacloud/compiler": "^0.43.0",
-    "@supacloud/delivery": "0.10.0",
+    "@supacloud/delivery": "0.11.0",
     "@supacloud/db": "0.16.0",
     "fflate": "^0.8.3",
     "typebox": "1.3.34"
   },
   "overrides": {
     "@supacloud/contracts": "0.8.0",
-    "@supacloud/delivery": "0.10.0",
+    "@supacloud/delivery": "0.11.0",
     "@graphql-tools/utils": "^12.0.3"
   },
   "devDependencies": {