@supacloud/cli 0.83.0 → 0.85.0

package/README.md

@@ -86,6 +86,7 @@ supacloud-cli app preview-plan --env test --id orders --environment_id test --re
 supacloud-cli app preview --env test --id orders --environment_id test --release_id RELEASE_SHA256 --configuration_id CONFIG_UUID --ttl_seconds 3600 --wait --timeout_seconds 300
 supacloud-cli app previews --env test --id orders --environment_id test
 supacloud-cli app preview-status --env test --id orders --environment_id test --preview_id PREVIEW_UUID --wait --timeout_seconds 300
+supacloud-cli app preview-reconcile --env test --id orders --environment_id test --preview_id PREVIEW_UUID
 supacloud-cli app preview-cleanup --env test --id orders --environment_id test --preview_id PREVIEW_UUID
 ```
 
@@ -114,9 +115,10 @@ query or identity drift ends it with nonzero status. A wait timeout returns
 same-ID continuation in `reconciliation`. It does not mark provisioning failed,
 retry a failed lifecycle GET, delete resources or promote an environment.
 
-`preview-plan` is read-only. Preview list/status requests may resume persisted
-provisioning on the server, so they are classified as writes, including in
-read-only and production profiles. The platform may clean eligible expired
+`preview-plan`, `previews` and `preview-status` are read-only. They never resume
+persisted provisioning. Use `preview-reconcile` to explicitly resume a selected
+Preview ID; it is classified as a write, including in read-only and production
+profiles. The platform may clean eligible expired
 previews, but never interrupts a serving preview or empties nonempty Storage
 automatically. Explicit cleanup remains available. Failed previews return
 nonzero with the validated receipt and cleanup state. Unknown create outcomes

package/dist/index.js

@@ -9152,8 +9152,8 @@ function resolveSupaCloudContext(env = process.env, cwd = process.cwd(), selecti
 var ACTION_POLICY = {
   deploy: { write: ["deploy"] },
   applications: {
-    read: ["list_releases", "get_release", "get_runtime", "get_deployment_evidence", "get_configuration", "get_release_transfer_plan", "get_promotion_plan", "get_rollback_snapshot", "get_history", "get_deploy_plan", "get_promotion_status", "get_preview_plan", "logs"],
-    write: ["upload_release", "put_configuration", "transfer_release", "promote_application", "reconcile_promotion", "create_preview", "list_previews", "get_preview", "cleanup_preview", "activate_release", "deploy_release", "rollback_release", "reconcile_activation", "retire_activation"]
+    read: ["list_releases", "get_release", "get_runtime", "get_deployment_evidence", "get_configuration", "get_release_transfer_plan", "get_promotion_plan", "get_promotion_status", "get_rollback_snapshot", "get_history", "get_deploy_plan", "logs", "get_preview_plan", "list_previews", "get_preview"],
+    write: ["upload_release", "put_configuration", "transfer_release", "promote_application", "reconcile_promotion", "create_preview", "reconcile_preview", "cleanup_preview", "activate_release", "deploy_release", "rollback_release", "reconcile_activation", "retire_activation"]
   },
   project: {
     read: ["get", "endpoints", "health", "logs", "api_keys", "settings", "tasks", "task_detail", "task_stats", "dlq", "background_settings"],
@@ -9248,8 +9248,8 @@ var ACTION_POLICY = {
   ai: { local: ["show_skill", "install_skill"] },
   app: {
     local: ["init", "generate", "dev", "watch", "verify-plan", "compile", "check", "graph", "explain", "export-tools", "context", "doctor", "fix", "plan", "build"],
-    read: ["status", "logs", "transfer-plan", "promote-plan", "rollback-plan", "history", "deploy-plan", "diff", "promote-status", "preview-plan"],
-    write: ["upload", "configure", "transfer", "promote", "promote-reconcile", "deploy", "rollback", "reconcile", "retire", "preview", "previews", "preview-list", "preview-create", "preview-status", "preview-cleanup"]
+    read: ["status", "logs", "transfer-plan", "promote-plan", "rollback-plan", "history", "deploy-plan", "diff", "promote-status", "preview-plan", "previews", "preview-list", "preview-status"],
+    write: ["release", "upload", "configure", "transfer", "promote", "promote-reconcile", "deploy", "rollback", "reconcile", "retire", "preview", "preview-create", "preview-reconcile", "preview-cleanup"]
   },
   db: {
     local: ["context", "lint", "explain", "diff", "role_sql"],
@@ -9826,7 +9826,10 @@ class HttpTransport {
       return transportFailure(error);
     }
   }
-  async delete(path, body) {
+  async delete(path, body, options) {
+    const timeoutMs = validatedPostTimeout(options);
+    const maxJsonBytes = validatedJsonResponseLimit(options?.maxJsonBytes);
+    const responseTimeoutMs = validatedResponseTimeout(options?.responseTimeoutMs);
     try {
       const serializedBody = serializedRequestBody(body);
       const request = {
@@ -9834,7 +9837,11 @@ class HttpTransport {
         headers: this.headers(),
         ...serializedBody === undefined ? {} : { body: serializedBody }
       };
-      const res = await fetchWithRetry(`${this.baseUrl}${path}`, request, DEFAULT_TIMEOUT, this.insecureTls);
+      const res = await fetchWithRetry(`${this.baseUrl}${path}`, request, timeoutMs, this.insecureTls);
+      if (maxJsonBytes !== undefined) {
+        const data = await boundedResponseJson(res, maxJsonBytes, responseTimeoutMs);
+        return data === null ? responseReadFailure(res.status) : { ok: res.ok, status: res.status, data };
+      }
       const data = await res.json().catch(() => null);
       return { ok: res.ok, status: res.status, data };
     } catch (error) {
@@ -10547,6 +10554,78 @@ function parseApplicationActivationHistory(value) {
   }
   return structuredClone(value);
 }
+// node_modules/@supacloud/delivery/src/application-preview.ts
+var phaseStatus = Union([
+  Literal("pending"),
+  Literal("ready"),
+  Literal("failed"),
+  Literal("cleaned")
+]);
+var closed3 = { additionalProperties: false };
+var ApplicationPreviewReceiptSchema = _Object_({
+  schema: Literal("supacloud.application-preview.v1"),
+  preview_id: String2({ pattern: "^[a-f0-9-]{8,64}$" }),
+  project_ref: String2({ pattern: "^[a-z0-9-]{1,20}$" }),
+  application_id: ApplicationIdSchema,
+  environment_id: ApplicationIdSchema,
+  release_id: ApplicationReleaseIdSchema,
+  expires_at: Optional(Union([String2({
+    pattern: "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$",
+    maxLength: 24
+  }), Null()])),
+  status: Union([
+    Literal("planned"),
+    Literal("provisioning"),
+    Literal("ready"),
+    Literal("failed"),
+    Literal("cleaned")
+  ]),
+  resources: _Object_({
+    build_artifact: _Object_({ status: phaseStatus, release_id: ApplicationReleaseIdSchema }, closed3),
+    database_branch: _Object_({
+      status: phaseStatus,
+      branch_ref: String2({ pattern: "^[A-Za-z0-9_-]{1,20}$" }),
+      data_mode: Union([Literal("schema_only"), Literal("full_clone")])
+    }, closed3),
+    queue_namespace: _Object_({
+      status: phaseStatus,
+      namespace: String2({ minLength: 1, maxLength: 128 })
+    }, closed3),
+    storage_namespace: _Object_({
+      status: phaseStatus,
+      namespace: String2({ minLength: 1, maxLength: 128 })
+    }, closed3),
+    test_secret: _Object_({
+      status: phaseStatus,
+      name: String2({ minLength: 1, maxLength: 128 }),
+      value_issued: Literal(false)
+    }, closed3),
+    configuration_revision: _Object_({
+      status: phaseStatus,
+      configuration_id: Union([ApplicationConfigurationIdSchema, Null()])
+    }, closed3),
+    application_activation: _Object_({
+      status: phaseStatus,
+      activation_id: Union([ApplicationActivationIdSchema, Null()])
+    }, closed3),
+    smoke_test: _Object_({
+      status: phaseStatus,
+      checks: _Array_(String2({ minLength: 1, maxLength: 64 }), { maxItems: 32 }),
+      passed: _Array_(String2({ minLength: 1, maxLength: 64 }), { maxItems: 32 }),
+      failed: _Array_(String2({ minLength: 1, maxLength: 64 }), { maxItems: 32 })
+    }, closed3)
+  }, closed3),
+  cleanup: _Object_({
+    required: Boolean2(),
+    completed: Boolean2(),
+    error: Union([String2({ minLength: 1, maxLength: 128 }), Null()])
+  }, closed3)
+}, closed3);
+function applicationPreviewBranchRef(previewId) {
+  if (!/^[a-f0-9-]{8,64}$/.test(previewId))
+    throw new Error("Invalid preview ID");
+  return `pv${previewId.replace(/-/g, "").slice(0, 18)}`;
+}
 // node_modules/@supacloud/delivery/src/application-release-transfer.ts
 var projectRef = String2({ pattern: "^[A-Za-z0-9_-]{1,20}$" });
 var source = _Object_({
@@ -10594,7 +10673,7 @@ function parseApplicationReleaseTransferResult(candidate) {
   return candidate;
 }
 // node_modules/@supacloud/delivery/src/deployment-evidence.ts
-var closed3 = { additionalProperties: false };
+var closed4 = { additionalProperties: false };
 var sha256 = String2({ pattern: "^[a-f0-9]{64}$" });
 var isoDate = String2({ minLength: 20, maxLength: 40 });
 var status = Union([
@@ -10621,19 +10700,19 @@ var DatabaseProviderSchema = _Object_({
       Literal("not-proven"),
       Literal("failed")
     ])
-  }, closed3),
+  }, closed4),
   backup: _Object_({
     status,
     latest_success_at: Union([isoDate, Null()]),
     freshness_seconds: Union([Integer({ minimum: 0 }), Null()])
-  }, closed3),
+  }, closed4),
   recovery: _Object_({
     status,
     drill_id: Union([String2({ minLength: 1, maxLength: 128 }), Null()]),
     rpo_seconds: Union([Integer({ minimum: 0 }), Null()]),
     rto_seconds: Union([Integer({ minimum: 0 }), Null()])
-  }, closed3)
-}, closed3);
+  }, closed4)
+}, closed4);
 var componentName = Union([
   Literal("management-api"),
   Literal("web-console"),
@@ -10651,7 +10730,7 @@ var DeploymentComponentEvidenceSchema = _Object_({
   status,
   health_check: Union([String2({ minLength: 1, maxLength: 256 }), Null()]),
   checked_at: Union([isoDate, Null()])
-}, closed3);
+}, closed4);
 var DeploymentEvidenceSchema = _Object_({
   schema: Literal(DEPLOYMENT_EVIDENCE_SCHEMA),
   status: evidenceStatus,
@@ -10660,33 +10739,33 @@ var DeploymentEvidenceSchema = _Object_({
     project_ref: String2({ pattern: "^[a-z0-9-]{1,20}$" }),
     application_id: ApplicationIdSchema,
     environment_id: ApplicationIdSchema
-  }, closed3),
+  }, closed4),
   source: _Object_({
     commit_sha: Union([String2({ pattern: "^[0-9a-f]{7,64}$" }), Null()]),
     manifest_sha256: sha256,
     contract_schema: Union([String2({ minLength: 1, maxLength: 128 }), Null()]),
     environment_binding_version: Union([sha256, Null()])
-  }, closed3),
+  }, closed4),
   database: DatabaseProviderSchema,
   components: _Array_(DeploymentComponentEvidenceSchema, { minItems: 1, maxItems: 32 }),
   activation: _Object_({
     release_id: ApplicationReleaseIdSchema,
     configuration_id: ApplicationConfigurationIdSchema,
     activation_id: ApplicationConfigurationIdSchema
-  }, closed3),
+  }, closed4),
   health: _Object_({
     status,
     checked_at: Union([isoDate, Null()]),
     authenticated_smoke: status
-  }, closed3),
+  }, closed4),
   rollback: _Object_({
     release_id: Union([ApplicationReleaseIdSchema, Null()]),
     configuration_id: Union([ApplicationConfigurationIdSchema, Null()]),
     status: Union([Literal("ready"), Literal("not-ready"), Literal("unknown")]),
     result: Union([status, Null()])
-  }, closed3),
+  }, closed4),
   notes: _Array_(String2({ minLength: 1, maxLength: 512 }), { maxItems: 32 })
-}, closed3);
+}, closed4);
 function isIsoDate(value) {
   return Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
 }
@@ -10719,7 +10798,7 @@ function parseDeploymentEvidence(value) {
   return structuredClone(value);
 }
 // node_modules/@supacloud/delivery/src/application-promotion.ts
-var closed4 = { additionalProperties: false };
+var closed5 = { additionalProperties: false };
 var projectRef2 = String2({ pattern: "^[a-z0-9-]{1,20}$" });
 var sha2562 = ApplicationReleaseIdSchema;
 var nullableActivation = Union([ApplicationActivationIdSchema, Null()]);
@@ -10756,7 +10835,7 @@ var ApplicationPromotionPlanSchema = _Object_({
     environment_id: ApplicationIdSchema,
     release_id: sha2562,
     ...observation
-  }, closed4),
+  }, closed5),
   target: _Object_({
     candidate_release_id: sha2562,
     current_release_id: Union([sha2562, Null()]),
@@ -10764,18 +10843,18 @@ var ApplicationPromotionPlanSchema = _Object_({
     configuration_id: Union([ApplicationConfigurationIdSchema, Null()]),
     configuration: Union([ApplicationConfigurationViewSchema, Null()]),
     ...observation
-  }, closed4),
+  }, closed5),
   migrations: _Object_({
     ledger_digest: sha2562,
     ledger_compatible: Boolean2(),
     project_migrations_applied: Boolean2(),
     pending_versions: _Array_(String2({ pattern: "^\\d{1,20}$" }), { maxItems: 4096, uniqueItems: true }),
     operator_provisioning_required: Boolean2()
-  }, closed4),
+  }, closed5),
   backup: _Object_({
     required: Boolean2(),
     confirmed: Literal(false)
-  }, closed4),
+  }, closed5),
   action: Union([Literal("promote"), Literal("no-op"), Literal("blocked")]),
   blockers: _Array_(Enum([...blocker]), {
     maxItems: blocker.length,
@@ -10784,7 +10863,7 @@ var ApplicationPromotionPlanSchema = _Object_({
   steps: _Array_(String2({ minLength: 1, maxLength: 64 }), { maxItems: 8, uniqueItems: true }),
   execution_performed: Literal(false),
   data_recovery: Literal("separate-required")
-}, closed4);
+}, closed5);
 function applicationPromotionPlanDigest(value) {
   return digest(canonical(value));
 }
@@ -16970,7 +17049,7 @@ async function fetchMutationStatus(http, ref, mutationId) {
 }
 
 // src/shared/tools/application-workflow-schemas.ts
-var closed5 = { additionalProperties: false };
+var closed6 = { additionalProperties: false };
 var ref5 = String2({ pattern: "^[A-Za-z0-9_-]{1,20}$" });
 var uuid = ApplicationActivationIdSchema2;
 var nullableUuid = Union([uuid, Null()]);
@@ -16984,7 +17063,7 @@ var ApplicationPromotionResultSchema = _Object_({
   plan_sha256: ApplicationReleaseIdSchema2,
   action: Literal("promote"),
   replayed: Boolean2()
-}, closed5);
+}, closed6);
 var ApplicationPromotionStatusSchema = _Object_({
   ...scope2,
   mutation: Unknown(),
@@ -17003,13 +17082,13 @@ var ApplicationPromotionStatusSchema = _Object_({
     configuration_id: Union([ApplicationConfigurationIdSchema2, Null()]),
     backup_id: Union([String2({ pattern: "^logical-full_[a-z0-9-]{1,20}_[a-f0-9]{32}$" }), Null()]),
     data_recovery: Literal("separate-required")
-  }, closed5)
-}, closed5);
+  }, closed6)
+}, closed6);
 var phase = Union([Literal("pending"), Literal("ready"), Literal("failed"), Literal("cleaned")]);
 var previewId = String2({ pattern: "^[a-f0-9-]{8,64}$" });
 var name = String2({ minLength: 1, maxLength: 256 });
 var checks = _Array_(String2({ minLength: 1, maxLength: 128 }), { maxItems: 64, uniqueItems: true });
-var ApplicationPreviewReceiptSchema = _Object_({
+var ApplicationPreviewReceiptSchema2 = _Object_({
   schema: Literal("supacloud.application-preview.v1"),
   ...scope2,
   preview_id: previewId,
@@ -17023,35 +17102,35 @@ var ApplicationPreviewReceiptSchema = _Object_({
     Literal("cleaned")
   ]),
   resources: _Object_({
-    build_artifact: _Object_({ status: phase, release_id: ApplicationReleaseIdSchema2 }, closed5),
+    build_artifact: _Object_({ status: phase, release_id: ApplicationReleaseIdSchema2 }, closed6),
     database_branch: _Object_({
       status: phase,
       branch_ref: ref5,
       data_mode: Union([Literal("schema_only"), Literal("full_clone")])
-    }, closed5),
-    queue_namespace: _Object_({ status: phase, namespace: name }, closed5),
-    storage_namespace: _Object_({ status: phase, namespace: name }, closed5),
-    test_secret: _Object_({ status: phase, name, value_issued: Literal(false) }, closed5),
-    configuration_revision: _Object_({ status: phase, configuration_id: Union([ApplicationConfigurationIdSchema2, Null()]) }, closed5),
-    application_activation: _Object_({ status: phase, activation_id: nullableUuid }, closed5),
-    smoke_test: _Object_({ status: phase, checks, passed: checks, failed: checks }, closed5)
-  }, closed5),
+    }, closed6),
+    queue_namespace: _Object_({ status: phase, namespace: name }, closed6),
+    storage_namespace: _Object_({ status: phase, namespace: name }, closed6),
+    test_secret: _Object_({ status: phase, name, value_issued: Literal(false) }, closed6),
+    configuration_revision: _Object_({ status: phase, configuration_id: Union([ApplicationConfigurationIdSchema2, Null()]) }, closed6),
+    application_activation: _Object_({ status: phase, activation_id: nullableUuid }, closed6),
+    smoke_test: _Object_({ status: phase, checks, passed: checks, failed: checks }, closed6)
+  }, closed6),
   cleanup: _Object_({
     required: Boolean2(),
     completed: Boolean2(),
     error: Union([String2({ pattern: "^[A-Z][A-Z0-9_]{0,63}$" }), Null()])
-  }, closed5),
+  }, closed6),
   branch_name: Optional(String2({ minLength: 1, maxLength: 80 })),
   queue_name: Optional(name),
   test_secret_name: Optional(name),
   source_configuration_id: Optional(Union([ApplicationConfigurationIdSchema2, Null()])),
   created_at: Optional(timestamp2),
   updated_at: Optional(timestamp2)
-}, closed5);
+}, closed6);
 var previewListSchema = _Object_({
   ...scope2,
-  previews: _Array_(ApplicationPreviewReceiptSchema, { maxItems: 1000 })
-}, closed5);
+  previews: _Array_(ApplicationPreviewReceiptSchema2, { maxItems: 1000 })
+}, closed6);
 function assertScope(value, identity) {
   if (value.project_ref !== identity.project_ref || value.application_id !== identity.application_id || value.environment_id !== identity.environment_id)
     throw new Error("Application workflow scope mismatch");
@@ -17078,7 +17157,7 @@ function parsePromotionStatus(value, identity) {
   return structuredClone({ ...value, mutation });
 }
 function parsePreviewReceipt(value, identity) {
-  if (!Check2(ApplicationPreviewReceiptSchema, value))
+  if (!Check2(ApplicationPreviewReceiptSchema2, value))
     throw new Error("Invalid preview receipt");
   assertScope(value, identity);
   if (identity.preview_id !== undefined && value.preview_id !== identity.preview_id || identity.release_id !== undefined && value.release_id !== identity.release_id || identity.branch_ref !== undefined && value.resources.database_branch.branch_ref !== identity.branch_ref || identity.data_mode !== undefined && value.resources.database_branch.data_mode !== identity.data_mode || identity.configuration_id !== undefined && value.source_configuration_id !== identity.configuration_id || value.resources.build_artifact.release_id !== value.release_id)
@@ -17158,11 +17237,13 @@ async function applicationReleaseTransfer(http, input, project) {
 }
 
 // src/shared/tools/application-preview-tools.ts
+import { randomUUID } from "node:crypto";
 var APPLICATION_PREVIEW_ACTIONS = [
   "get_preview_plan",
   "create_preview",
   "list_previews",
   "get_preview",
+  "reconcile_preview",
   "cleanup_preview"
 ];
 var previewIdSchema = String2({ pattern: "^[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$" });
@@ -17174,7 +17255,7 @@ var timestampSchema = String2({
   maxLength: 24
 });
 var APPLICATION_PREVIEW_FIELDS = {
-  preview_id: optional(previewIdSchema, "[get_preview/cleanup_preview] Preview receipt ID"),
+  preview_id: optional(previewIdSchema, "[get_preview/reconcile_preview/cleanup_preview] Preview receipt ID; create/plan may pin a stable ID"),
   branch_ref: optional(branchRefSchema, "[get_preview_plan] Proposed branch ref; create assigns its own"),
   branch_name: optional(String2({ minLength: 1, maxLength: 80 }), "[create_preview] Branch display name"),
   data_mode: optional(stringEnum(["schema_only", "full_clone"]), "[get_preview_plan/create_preview] Default schema_only; full_clone copies rows"),
@@ -17194,7 +17275,7 @@ var receiptSchema = _Object_({
   application_id: ApplicationIdSchema2,
   environment_id: ApplicationIdSchema2,
   release_id: ApplicationReleaseIdSchema2,
-  expires_at: Union([timestampSchema, Null()]),
+  expires_at: Optional(Union([timestampSchema, Null()])),
   status: stringEnum(["planned", "provisioning", "ready", "failed", "cleaned"]),
   resources: _Object_({
     build_artifact: _Object_({ status: phase2, release_id: ApplicationReleaseIdSchema2 }, strict),
@@ -17236,10 +17317,11 @@ var mandatoryChecks = [
   "tenant_runtime"
 ];
 var actionFields = {
-  get_preview_plan: ["release_id", "branch_ref", "data_mode", "configuration_id", "ttl_seconds"],
-  create_preview: ["release_id", "configuration_id", "data_mode", "branch_name", "ttl_seconds", "wait", "timeout_seconds"],
+  get_preview_plan: ["release_id", "preview_id", "branch_ref", "data_mode", "configuration_id", "ttl_seconds"],
+  create_preview: ["release_id", "preview_id", "configuration_id", "data_mode", "branch_name", "ttl_seconds", "wait", "timeout_seconds"],
   list_previews: [],
   get_preview: ["preview_id", "wait", "timeout_seconds"],
+  reconcile_preview: ["preview_id"],
   cleanup_preview: ["preview_id"]
 };
 function timestamp3(value) {
@@ -17249,7 +17331,7 @@ function receipt(value, identity) {
   if (!Check2(receiptSchema, value) || value.project_ref !== identity.ref || value.application_id !== identity.id || value.environment_id !== identity.environment || identity.previewId && value.preview_id !== identity.previewId || value.resources.build_artifact.release_id !== value.release_id || value.resources.storage_namespace.namespace !== value.resources.database_branch.branch_ref) {
     throw new Error("Invalid preview receipt");
   }
-  if (value.expires_at !== null && !timestamp3(value.expires_at) || value.created_at !== undefined && !timestamp3(value.created_at) || value.updated_at !== undefined && !timestamp3(value.updated_at) || value.expires_at !== null && value.created_at !== undefined && !Check2(ttlSecondsSchema, (Date.parse(value.expires_at) - Date.parse(value.created_at)) / 1000)) {
+  if (value.expires_at !== undefined && value.expires_at !== null && !timestamp3(value.expires_at) || value.created_at !== undefined && !timestamp3(value.created_at) || value.updated_at !== undefined && !timestamp3(value.updated_at) || value.expires_at !== undefined && value.expires_at !== null && value.created_at !== undefined && !Check2(ttlSecondsSchema, (Date.parse(value.expires_at) - Date.parse(value.created_at)) / 1000)) {
     throw new Error("Invalid preview expiry");
   }
   if (value.status === "ready") {
@@ -17385,8 +17467,8 @@ async function applicationPreviewAction(http, args, project) {
   const identity = { project_ref: ref, application_id: id, environment_id: environment };
   const applicationPath = `/v1/projects/${project}/applications/${encodeURIComponent(id)}`;
   const path = `${applicationPath}/environments/${encodeURIComponent(environment)}`;
-  const previewId = action === "get_preview" || action === "cleanup_preview" ? required5(args, "preview_id") : undefined;
-  const mutation = action === "create_preview" || action === "cleanup_preview";
+  const previewId = action === "get_preview" || action === "reconcile_preview" || action === "cleanup_preview" ? required5(args, "preview_id") : action === "create_preview" ? typeof args["preview_id"] === "string" ? required5(args, "preview_id") : randomUUID() : action === "get_preview_plan" && typeof args["preview_id"] === "string" ? required5(args, "preview_id") : undefined;
+  const mutation = action === "create_preview" || action === "reconcile_preview" || action === "cleanup_preview";
   const requestBudget = startedAt === undefined ? 120000 : Math.min(120000, timeoutSeconds * 1000);
   const options = {
     timeoutMs: requestBudget,
@@ -17403,7 +17485,10 @@ async function applicationPreviewAction(http, args, project) {
     if (!Check2(ApplicationReleaseIdSchema2, releaseId))
       throw new Error("Invalid release ID");
     if (action === "get_preview_plan") {
-      const query = new URLSearchParams({ release_id: releaseId, branch_ref: required5(args, "branch_ref") });
+      const branchRef = typeof args["branch_ref"] === "string" ? required5(args, "branch_ref") : previewId === undefined ? required5(args, "branch_ref") : applicationPreviewBranchRef(previewId);
+      const query = new URLSearchParams({ release_id: releaseId, branch_ref: branchRef });
+      if (previewId !== undefined)
+        query.set("preview_id", previewId);
       if (typeof args["data_mode"] === "string")
         query.set("data_mode", args["data_mode"]);
       if (typeof args["configuration_id"] === "string")
@@ -17412,17 +17497,19 @@ async function applicationPreviewAction(http, args, project) {
         query.set("ttl_seconds", String(args["ttl_seconds"]));
       result = await http.get(`${path}/preview-plan?${query}`, options);
     } else {
-      const configurationId = required5(args, "configuration_id");
-      if (!Check2(ApplicationConfigurationIdSchema2, configurationId))
+      const configurationId = args["configuration_id"];
+      if (configurationId !== undefined && !Check2(ApplicationConfigurationIdSchema2, configurationId)) {
         throw new Error("Invalid configuration ID");
+      }
       const source = await sourceManifest(http, applicationPath, ref, id, releaseId);
       if (!source.manifest)
         return releaseControlFailure(operation, source.result.ok ? "INVALID_RESPONSE" : "HTTP_ERROR", source.result.status, { ...identity, release_id: releaseId, configuration_id: configurationId });
       sourceHash = source.manifest;
       result = await http.post(`${path}/previews`, {
+        preview_id: previewId,
         release_id: releaseId,
-        configuration_id: configurationId,
         data_mode: args["data_mode"] ?? "schema_only",
+        ...configurationId === undefined ? {} : { configuration_id: configurationId },
         ...args["branch_name"] === undefined ? {} : { branch_name: args["branch_name"] },
         ...args["ttl_seconds"] === undefined ? {} : { ttl_seconds: args["ttl_seconds"] }
       }, options);
@@ -17432,7 +17519,7 @@ async function applicationPreviewAction(http, args, project) {
   } else if (previewId) {
     if (!Check2(previewIdSchema, previewId))
       throw new Error("Invalid preview ID");
-    result = action === "cleanup_preview" ? await http.deleteReleaseMutation(`${path}/previews/${previewId}`) : await http.get(`${path}/previews/${previewId}`, options);
+    result = action === "cleanup_preview" ? await http.deleteReleaseMutation(`${path}/previews/${previewId}`) : action === "reconcile_preview" ? await http.post(`${path}/previews/${previewId}/reconcile`, {}, options) : await http.get(`${path}/previews/${previewId}`, options);
   } else {
     throw new Error("Unknown preview action");
   }
@@ -17440,7 +17527,13 @@ async function applicationPreviewAction(http, args, project) {
     ...identity,
     ...previewId ? { preview_id: previewId } : {},
     ...releaseId ? { source_release_id: releaseId } : {},
-    reconciliation: previewId ? { action: "get_preview", ref, id, environment_id: environment, preview_id: previewId } : { action: "list_previews", ref, id, environment_id: environment }
+    reconciliation: previewId ? {
+      action: action === "reconcile_preview" ? "reconcile_preview" : "get_preview",
+      ref,
+      id,
+      environment_id: environment,
+      preview_id: previewId
+    } : { action: "list_previews", ref, id, environment_id: environment }
   };
   if (!result.ok)
     return mutation ? releaseControlMutationFailure(operation, result, state) : releaseControlFailure(operation, "HTTP_ERROR", result.status, state);
@@ -17464,24 +17557,29 @@ async function applicationPreviewAction(http, args, project) {
       ...previewId === undefined ? {} : { previewId }
     });
     if (action === "get_preview_plan") {
-      if (preview.status !== "planned" || preview.release_id !== releaseId || preview.resources.database_branch.branch_ref !== args["branch_ref"] || preview.resources.database_branch.data_mode !== (args["data_mode"] ?? "schema_only") || (args["ttl_seconds"] === undefined ? preview.expires_at !== null : preview.expires_at === null))
+      const expectedBranchRef = typeof args["branch_ref"] === "string" ? args["branch_ref"] : previewId === undefined ? undefined : applicationPreviewBranchRef(previewId);
+      if (preview.status !== "planned" || previewId === undefined && preview.release_id !== releaseId || expectedBranchRef === undefined || preview.resources.database_branch.branch_ref !== expectedBranchRef || preview.resources.database_branch.data_mode !== (args["data_mode"] ?? "schema_only") || (args["ttl_seconds"] === undefined ? preview.expires_at !== null && preview.expires_at !== undefined : preview.expires_at === null || preview.expires_at === undefined))
         throw new Error;
     } else {
-      if (preview.status === "planned" || preview.resources.database_branch.branch_ref !== `pv${preview.preview_id.replaceAll("-", "").slice(0, 18)}`)
+      if (preview.status === "planned" || preview.resources.database_branch.branch_ref !== applicationPreviewBranchRef(preview.preview_id))
         throw new Error;
-      if (action === "create_preview" && (preview.release_id !== applicationReleaseId(preview.resources.database_branch.branch_ref, id, sourceHash) || preview.resources.database_branch.data_mode !== (args["data_mode"] ?? "schema_only") || !Check2(receiptSchema, result.data) || result.data.source_configuration_id !== args["configuration_id"] || preview.expires_at === null || result.data.created_at === undefined || args["ttl_seconds"] !== undefined && Date.parse(preview.expires_at) - Date.parse(result.data.created_at) !== args["ttl_seconds"] * 1000))
-        throw new Error;
-    }
-    if (preview.status === "failed" || action === "cleanup_preview" && preview.status !== "cleaned") {
-      return releaseControlFailure(operation, "MUTATION_NOT_SUCCEEDED", result.status, {
-        ...identity,
-        preview_id: preview.preview_id,
-        preview
-      });
+      if (action === "create_preview") {
+        const expiresAt = preview.expires_at;
+        const createdAt = typeof result.data === "object" && result.data !== null && "created_at" in result.data && typeof result.data.created_at === "string" ? result.data.created_at : undefined;
+        if (preview.release_id !== applicationReleaseId(preview.resources.database_branch.branch_ref, id, sourceHash) || preview.resources.database_branch.data_mode !== (args["data_mode"] ?? "schema_only") || !Check2(receiptSchema, result.data) || args["configuration_id"] !== undefined && result.data.source_configuration_id !== args["configuration_id"] || expiresAt === null || expiresAt === undefined || args["ttl_seconds"] !== undefined && (createdAt === undefined || Date.parse(expiresAt) - Date.parse(createdAt) !== args["ttl_seconds"] * 1000))
+          throw new Error;
+      }
+      if (preview.status === "failed" || action === "cleanup_preview" && preview.status !== "cleaned") {
+        return releaseControlFailure(operation, "MUTATION_NOT_SUCCEEDED", result.status, {
+          ...identity,
+          preview_id: preview.preview_id,
+          preview
+        });
+      }
     }
     if (timeoutSeconds !== undefined)
       return await waitForPreview(http, path, operation, identity, preview, timeoutSeconds, startedAt);
-    return releaseControlSuccess(operation, { ...identity, preview });
+    return releaseControlSuccess(operation, { ...identity, preview_id: preview.preview_id, preview });
   } catch {
     return releaseControlFailure(operation, mutation ? "OUTCOME_UNKNOWN" : "INVALID_RESPONSE", result.status, state);
   }
@@ -24108,7 +24206,7 @@ async function createVerificationPlan(root, graph, target, sourceRoot = root) {
 }
 
 // src/shared/tools/app-scaffold-writes.ts
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID2 } from "node:crypto";
 import { link, lstat as lstat3, mkdir as mkdir4, open as open3, readFile as readFile3, realpath as realpath4, rename as rename2, rmdir, unlink } from "node:fs/promises";
 import { dirname as dirname7, isAbsolute as isAbsolute5, join as join12, relative as relative6, resolve as resolve16, sep as sep4, win32 } from "node:path";
 
@@ -24229,7 +24327,7 @@ async function applyScaffoldWrites(plan) {
       if (!sameFile(write.before, await snapshot(plan.root, write.path))) {
         throw new ScaffoldError("SCAFFOLD_CHANGED", `Scaffold target changed during generation: ${write.path}`);
       }
-      const pending = `${target}.supacloud-${randomUUID()}`;
+      const pending = `${target}.supacloud-${randomUUID2()}`;
       const file = await open3(pending, "wx", write.before?.mode);
       temporary.push(pending);
       let after;
@@ -24264,7 +24362,7 @@ async function applyScaffoldWrites(plan) {
         if (!write.before)
           await unlink(target);
         else {
-          const pending = `${target}.supacloud-${randomUUID()}`;
+          const pending = `${target}.supacloud-${randomUUID2()}`;
           const file = await open3(pending, "wx", write.before.mode);
           temporary.push(pending);
           try {
@@ -24317,17 +24415,18 @@ var REMOTE_APP_ACTIONS = {
   retire: "retire_activation",
   logs: "logs",
   preview: "create_preview",
-  previews: "list_previews"
+  previews: "list_previews",
+  "preview-reconcile": "reconcile_preview"
 };
 var REMOTE_APP_DESCRIPTIONS = {
-  ref: "[upload/configure/transfer-plan/transfer/promote-plan/diff/promote/promote-status/promote-reconcile/preview-plan/preview/previews/preview-list/preview-create/preview-status/preview-cleanup/deploy/deploy-plan/status/rollback/rollback-plan/history/reconcile/retire] Project ref (defaults to context)",
-  id: "[upload/configure/transfer-plan/transfer/promote-plan/diff/promote/promote-status/promote-reconcile/preview-plan/preview/previews/preview-list/preview-create/preview-status/preview-cleanup/deploy/deploy-plan/status/rollback/rollback-plan/history/reconcile/retire] Application ID",
-  environment_id: "[configure/promote-plan/diff/promote/promote-status/promote-reconcile/preview-plan/preview/previews/preview-list/preview-create/preview-status/preview-cleanup/deploy/deploy-plan/status/rollback/rollback-plan/history/reconcile/retire] Target environment ID",
-  configuration_id: "[promote-plan/diff/promote/preview-plan/preview/preview-create/deploy/deploy-plan/rollback] Immutable target configuration revision",
+  ref: "[release/upload/configure/transfer-plan/transfer/promote-plan/diff/promote/promote-status/promote-reconcile/preview-plan/preview/previews/preview-list/preview-create/preview-status/preview-reconcile/preview-cleanup/deploy/deploy-plan/status/rollback/rollback-plan/history/reconcile/retire] Project ref (defaults to context)",
+  id: "[release/upload/configure/transfer-plan/transfer/promote-plan/diff/promote/promote-status/promote-reconcile/preview-plan/preview/previews/preview-list/preview-create/preview-status/preview-reconcile/preview-cleanup/deploy/deploy-plan/status/rollback/rollback-plan/history/reconcile/retire] Application ID",
+  environment_id: "[release/configure/promote-plan/diff/promote/promote-status/promote-reconcile/preview-plan/preview/previews/preview-list/preview-create/preview-status/preview-reconcile/preview-cleanup/deploy/deploy-plan/status/rollback/rollback-plan/history/reconcile/retire] Target environment ID",
+  configuration_id: "[release/promote-plan/diff/promote/preview-plan/preview/preview-create/deploy/deploy-plan/rollback] Immutable target configuration revision",
   activation_id: "[deploy/rollback/reconcile/retire] Required explicit activation ID",
   expected_activation_id: "[deploy/rollback] Required current activation ID, or absent for first activation",
-  configuration_path: "[configure] Configuration write JSON including revision and expected revision",
-  manifest_path: "[upload] Local delivery.manifest.json",
+  configuration_path: "[release/configure] Configuration write JSON including revision and expected revision",
+  manifest_path: "[release/upload] Local delivery.manifest.json",
   release_id: "[preview-plan/preview/preview-create/deploy/deploy-plan/diff/rollback/reconcile] Required immutable application release ID",
   source_ref: "[transfer-plan/transfer/promote-plan/diff/promote] Source project ref",
   source_release_id: "[transfer-plan/transfer/promote-plan/diff/promote] Source immutable release ID",
@@ -24340,7 +24439,7 @@ var REMOTE_APP_DESCRIPTIONS = {
   ttl_seconds: "[preview-plan/preview/preview-create] Lifetime from 300 to 604800 seconds; creation defaults to the platform TTL",
   wait: "[preview/preview-create/preview-status] Wait for verified readiness of the selected preview",
   timeout_seconds: "[preview/preview-create/preview-status] Observation budget with --wait, from 1 to 3600 seconds (default 300)",
-  preview_id: "[preview-status/preview-cleanup] Preview ID",
+  preview_id: "[preview-status/preview-reconcile/preview-cleanup] Preview ID",
   cursor: "[history] Returned page cursor",
   limit: "[history] Page size, default 20 (1-100)"
 };
@@ -25241,6 +25340,177 @@ async function runDelivery(args) {
   const result = await buildDeliveryProject(options, loaded.delivery);
   return textResult(JSON.stringify(result, null, 2), !result.ok);
 }
+function resultObject(result) {
+  try {
+    const value = JSON.parse(result.content[0]?.text ?? "");
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : undefined;
+  } catch {
+    return;
+  }
+}
+function resultErrorCode(result, fallback) {
+  const payload = resultObject(result);
+  const error = payload?.error;
+  const errorRecord = error !== null && typeof error === "object" && !Array.isArray(error) ? error : undefined;
+  return typeof errorRecord?.code === "string" ? errorRecord.code : fallback;
+}
+function releasePhaseFailure(phase, result, completed) {
+  const phaseResult = resultObject(result);
+  const upload = completed.upload !== null && typeof completed.upload === "object" && !Array.isArray(completed.upload) ? completed.upload : undefined;
+  const configure = completed.configure !== null && typeof completed.configure === "object" && !Array.isArray(completed.configure) ? completed.configure : undefined;
+  const releaseId = typeof upload?.release_id === "string" ? upload.release_id : undefined;
+  const configurationId = typeof configure?.configuration_id === "string" ? configure.configuration_id : undefined;
+  const payload = {
+    schema: RELEASE_CONTROL_RESPONSE_SCHEMA,
+    ok: false,
+    operation: "applications.release",
+    phase,
+    phases: completed,
+    error: { code: resultErrorCode(result, phase === "build" ? "BUILD_FAILED" : "PHASE_FAILED") },
+    ...releaseId === undefined ? {} : { release_id: releaseId },
+    ...configurationId === undefined ? {} : { configuration_id: configurationId },
+    ...phaseResult === undefined ? {} : { phase_result: phaseResult }
+  };
+  if (phaseResult?.activation_id !== undefined)
+    payload.activation_id = phaseResult.activation_id;
+  if (phaseResult?.expected_activation_id !== undefined) {
+    payload.expected_activation_id = phaseResult.expected_activation_id;
+  }
+  return textResult(JSON.stringify(payload, null, 2), true);
+}
+function releaseField(payload, container, field) {
+  const value = payload?.[container];
+  if (value === null || typeof value !== "object" || Array.isArray(value))
+    return;
+  const record = value;
+  return typeof record[field] === "string" ? record[field] : undefined;
+}
+async function runAppRelease(request, options, delegate) {
+  const ref = request.ref ?? options.projectRef;
+  const id = request.id?.trim();
+  const environmentId = request.environment_id?.trim();
+  if (!ref || !id || !environmentId) {
+    throw new Error("app release requires --ref, --id and --environment_id (ref may come from context)");
+  }
+  if (!Check2(ApplicationIdSchema2, id) || !Check2(ApplicationIdSchema2, environmentId)) {
+    throw new Error("app release requires valid --id and --environment_id");
+  }
+  if (request.configuration_id !== undefined && !Check2(ApplicationConfigurationIdSchema2, request.configuration_id)) {
+    throw new Error("app release requires a valid --configuration_id");
+  }
+  if (request.configuration_path !== undefined && request.configuration_id !== undefined) {
+    throw new Error("app release accepts either --configuration_path or --configuration_id, not both");
+  }
+  if (request.configuration_path === undefined && request.configuration_id === undefined) {
+    throw new Error("app release requires --configuration_path or --configuration_id");
+  }
+  if (request.activation_id !== undefined || request.expected_activation_id !== undefined) {
+    throw new Error("app release generates one activation identity; use app deploy for an exact retry");
+  }
+  const root = resolve17(request.root || process.cwd());
+  const completed = {};
+  let manifestPath;
+  let buildReceipt;
+  if (request.skip_build === true) {
+    if (request.manifest_path === undefined) {
+      throw new Error("app release --skip_build requires --manifest_path");
+    }
+    manifestPath = resolve17(root, request.manifest_path);
+    completed.build = { skipped: true, manifest_path: manifestPath };
+  } else {
+    const built = await runDelivery({ ...request, action: "build", root, format: "json" });
+    buildReceipt = resultObject(built);
+    if (built.isError || !buildReceipt?.ok || buildReceipt.manifest === null || buildReceipt.manifest === undefined) {
+      return releasePhaseFailure("build", built, completed);
+    }
+    const loaded = await loadSupacloudConfig(root);
+    const resolved = resolveSupacloudConfig(loaded, root);
+    manifestPath = join13(resolved.outDir, "delivery", "delivery.manifest.json");
+    completed.build = {
+      ok: true,
+      manifest_path: manifestPath,
+      written: Array.isArray(buildReceipt.written) ? buildReceipt.written.length : 0
+    };
+  }
+  const uploadArgs = {
+    action: "upload_release",
+    ref,
+    id,
+    manifest_path: manifestPath
+  };
+  validateToolArguments(APPLICATION_TOOL_SCHEMA, uploadArgs);
+  const uploaded = await delegate(uploadArgs);
+  const uploadReceipt = resultObject(uploaded);
+  if (uploaded.isError || !uploadReceipt?.ok) {
+    return releasePhaseFailure("upload", uploaded, completed);
+  }
+  const releaseId = releaseField(uploadReceipt, "release", "release_id");
+  if (!releaseId)
+    return releasePhaseFailure("upload", releaseControlFailure("applications.upload_release", "INVALID_RESPONSE", null, { project_ref: ref, application_id: id }), completed);
+  completed.upload = { ok: true, release_id: releaseId };
+  let configurationId = request.configuration_id;
+  if (request.configuration_path !== undefined) {
+    const configurationPath = resolve17(root, request.configuration_path);
+    const configureArgs = {
+      action: "put_configuration",
+      ref,
+      id,
+      environment_id: environmentId,
+      configuration_path: configurationPath
+    };
+    validateToolArguments(APPLICATION_TOOL_SCHEMA, configureArgs);
+    const configured = await delegate(configureArgs);
+    const configurationReceipt = resultObject(configured);
+    if (configured.isError || !configurationReceipt?.ok) {
+      return releasePhaseFailure("configure", configured, completed);
+    }
+    configurationId = releaseField(configurationReceipt, "configuration", "configuration_id");
+    if (!configurationId)
+      return releasePhaseFailure("configure", releaseControlFailure("applications.put_configuration", "INVALID_RESPONSE", null, { project_ref: ref, application_id: id, environment_id: environmentId }), completed);
+    completed.configure = { ok: true, configuration_id: configurationId };
+  } else {
+    completed.configure = { skipped: true, configuration_id: configurationId };
+  }
+  const deployArgs = {
+    action: "deploy_release",
+    ref,
+    id,
+    environment_id: environmentId,
+    release_id: releaseId,
+    configuration_id: configurationId
+  };
+  validateToolArguments(APPLICATION_TOOL_SCHEMA, deployArgs);
+  const deployed = await delegate(deployArgs);
+  const deployReceipt = resultObject(deployed);
+  if (deployed.isError || !deployReceipt?.ok) {
+    return releasePhaseFailure("deploy", deployed, completed);
+  }
+  completed.deploy = deployReceipt;
+  const result = {
+    schema: RELEASE_CONTROL_RESPONSE_SCHEMA,
+    ok: true,
+    operation: "applications.release",
+    project_ref: ref,
+    application_id: id,
+    environment_id: environmentId,
+    release_id: releaseId,
+    configuration_id: configurationId,
+    manifest_path: manifestPath,
+    build: buildReceipt ? completed.build : { skipped: true, manifest_path: manifestPath },
+    phases: completed,
+    no_op: deployReceipt.no_op === true,
+    execution_performed: deployReceipt.execution_performed === true,
+    ...typeof deployReceipt.activation_id === "string" ? { activation_id: deployReceipt.activation_id } : {}
+  };
+  return request.format === "json" || request.json === true ? textResult(JSON.stringify(result, null, 2)) : textResult([
+    `${ref}/${id}/${environmentId}: ${result.no_op ? "no-op" : "released"}`,
+    `Release: ${releaseId}`,
+    `Configuration: ${configurationId}`,
+    `Activation: ${result.activation_id ?? "not performed"}`,
+    `Build: ${request.skip_build ? "skipped" : "completed"}`
+  ].join(`
+`));
+}
 function formatReleaseTransfer(result) {
   if (result.isError)
     return result;
@@ -25408,7 +25678,7 @@ function formatWorkflowObservation(result, action) {
       ].join(`
 `));
     }
-    if (action === "preview-list") {
+    if (action === "preview-list" || action === "previews") {
       const list = parsePreviewList({ ...identity, previews: data.previews }, identity);
       return textResult([
         `${label}: ${list.previews.length} preview(s)`,
@@ -25416,8 +25686,8 @@ function formatWorkflowObservation(result, action) {
       ].join(`
 `));
     }
-    if (["preview-create", "preview-status", "preview-cleanup"].includes(action)) {
-      const preview = parsePreviewReceipt(data.preview, identity);
+    if (["preview-plan", "preview-create", "preview-status", "preview-reconcile", "preview-cleanup"].includes(action)) {
+      const preview = parsePreviewReceipt(data.preview ?? data, identity);
       return textResult([
         `${label}: ${preview.status}`,
         `Preview: ${preview.preview_id}`,
@@ -25511,7 +25781,7 @@ async function runAppTool(request, options = {}) {
   if (request.database_url !== undefined && request.action !== "dev" && request.action !== "watch") {
     throw new ScaffoldError("SCAFFOLD_OPTION_INVALID", "--database-url applies only to app dev --profile integration");
   }
-  if (request.json !== undefined && !Object.hasOwn(REMOTE_APP_ACTIONS, request.action) && request.action !== "promote")
+  if (request.json !== undefined && !Object.hasOwn(REMOTE_APP_ACTIONS, request.action) && request.action !== "promote" && request.action !== "release")
     throw new Error("--json applies only to remote app actions");
   if (request.json && request.format === "text")
     throw new Error("--json and --format text cannot be combined");
@@ -25521,6 +25791,12 @@ async function runAppTool(request, options = {}) {
       return textResult("App remote actions require a Management API context.", true);
     return runPromotion(request, options, delegate);
   }
+  if (request.action === "release") {
+    const delegate = options.getApplications?.();
+    if (!delegate)
+      return textResult("App remote actions require a Management API context.", true);
+    return runAppRelease(request, options, delegate);
+  }
   if (Object.hasOwn(REMOTE_APP_ACTIONS, request.action)) {
     const delegate = options.getApplications?.();
     if (!delegate)
@@ -25617,6 +25893,7 @@ function registerAppTools(server, options = {}) {
       "fix",
       "plan",
       "build",
+      "release",
       "upload",
       "configure",
       "transfer-plan",
@@ -25639,6 +25916,7 @@ function registerAppTools(server, options = {}) {
       "preview-create",
       "preview-status",
       "preview-cleanup",
+      "preview-reconcile",
       "promote",
       "promote-status",
       "promote-reconcile"
@@ -25653,11 +25931,11 @@ function registerAppTools(server, options = {}) {
     "dry-run": optional(Boolean2(), "[generate] CLI alias of dry_run"),
     register_in: optional(String2(), "[generate] Existing parent module file for module/resource; uses the compiler AST editor"),
     "register-in": optional(String2(), "[generate] CLI alias of register_in"),
-    root: optional(String2(), "[dev/plan/build/compile/check] Project directory containing supacloud.config.ts (default: current directory)"),
+    root: optional(String2(), "[dev/plan/build/release/compile/check] Project directory containing supacloud.config.ts (default: current directory)"),
     include: optional(String2(), "[dev/compile/check] Comma-separated glob patterns for source files"),
     out_dir: optional(String2(), "[dev/compile/plan/build/export-tools] Output directory (default: configured outDir)"),
     strict: optional(Boolean2(), "[dev/compile/check] Promote warnings to errors"),
-    format: optional(stringEnum(["text", "json"]), "[dev/generate/compile/check/plan/deploy-plan/diff/history/promote-plan/graph/export-tools] Output format (default: text)"),
+    format: optional(stringEnum(["text", "json"]), "[dev/generate/compile/check/plan/release/deploy-plan/diff/history/promote-plan/graph/export-tools] Output format (default: text)"),
     json: optional(Boolean2(), "[history/transfer-plan/transfer/promote-plan] Preserve or return the full machine-readable receipt"),
     profile: optional(stringEnum(["fast", "integration"]), "[dev] Run dev or dev:integration; integration verifies an explicit loopback database"),
     once: optional(Boolean2(), "[dev] Validate and report once without watching"),
@@ -25666,7 +25944,8 @@ function registerAppTools(server, options = {}) {
     "database-url": optional(String2(), "[dev] CLI alias of database_url"),
     target: optional(String2(), "[explain/context/verify-plan] Provider class name / token name / command name / job name / module name"),
     fix: optional(String2(), "[fix] Path to a DiagnosticFix JSON file produced by `doctor --format json`"),
-    write: optional(Boolean2(), "[fix] Write the fix to disk (default: preview only)")
+    write: optional(Boolean2(), "[fix] Write the fix to disk (default: preview only)"),
+    skip_build: optional(Boolean2(), "[release] Reuse --manifest_path instead of running the local delivery build")
   }, (request) => runAppTool(request, options));
 }
 var APP_ALIAS_ACTIONS = ["generate", "compile", "check", "graph", "explain", "context", "doctor", "fix"];
@@ -26354,7 +26633,7 @@ function registerDbGovernanceTools(server, options = {}) {
 }
 
 // src/shared/tools/scheduled-function-tools.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { readFileSync as readFileSync9, statSync as statSync8 } from "node:fs";
 import { resolve as resolve20 } from "node:path";
 import { isDeepStrictEqual } from "node:util";
@@ -26664,7 +26943,7 @@ function readOnlyResult2() {
 }
 function createRequest(args, environment) {
   return {
-    request_id: randomUUID2(),
+    request_id: randomUUID3(),
     name: requiredName(args, "create"),
     slug: requiredSlug(args, "create"),
     cron: requiredCron(args, "create"),
@@ -26726,7 +27005,7 @@ function updateRequest(args, environment) {
     throw new Error("Scheduled Function update requires at least one field");
   }
   return {
-    request_id: randomUUID2(),
+    request_id: randomUUID3(),
     expected_updated_at: expectedUpdatedAt,
     ...mutationFields
   };
@@ -28423,7 +28702,7 @@ function registerRemoteDevTools(server, options = {}) {
 // package.json
 var package_default = {
   name: "@supacloud/cli",
-  version: "0.83.0",
+  version: "0.85.0",
   description: "Project-scoped CLI for SupaCloud users",
   type: "module",
   main: "./dist/index.js",
@@ -28476,13 +28755,13 @@ var package_default = {
   },
   dependencies: {
     "@supacloud/compiler": "^0.43.0",
-    "@supacloud/delivery": "0.12.0",
+    "@supacloud/delivery": "0.13.0",
     "@supacloud/db": "0.16.0",
     typebox: "1.3.34"
   },
   overrides: {
     "@supacloud/contracts": "0.8.0",
-    "@supacloud/delivery": "0.12.0",
+    "@supacloud/delivery": "0.13.0",
     "@graphql-tools/utils": "^12.0.3"
   },
   devDependencies: {
@@ -28742,6 +29021,7 @@ EXAMPLES
   ${preferredCommand} app compile --root .
   ${preferredCommand} app plan --root . --format json
   ${preferredCommand} app build --root .
+  ${preferredCommand} --env test app release --id orders --environment_id test --configuration_path configuration.json
   ${preferredCommand} app upload --ref abc123 --id orders --manifest_path generated/delivery/delivery.manifest.json
   ${preferredCommand} app configure --ref abc123 --id orders --environment_id test --configuration_path configuration.json
   ${preferredCommand} app deploy-plan --ref abc123 --id orders --environment_id test --release_id <sha256> --configuration_id <uuid>
@@ -28753,7 +29033,9 @@ EXAMPLES
   ${preferredCommand} app preview-plan --ref abc123 --id orders --environment_id test --release_id <sha256> --branch_ref preview-orders
   ${preferredCommand} app preview --ref abc123 --id orders --environment_id test --release_id <sha256> --configuration_id <uuid> --ttl_seconds 3600 --wait
   ${preferredCommand} app previews --ref abc123 --id orders --environment_id test
+  ${preferredCommand} app preview-list --ref abc123 --id orders --environment_id test
   ${preferredCommand} app preview-status --ref abc123 --id orders --environment_id test --preview_id <uuid> --wait --timeout_seconds 300
+  ${preferredCommand} app preview-reconcile --ref abc123 --id orders --environment_id test --preview_id <uuid>
   ${preferredCommand} app preview-cleanup --ref abc123 --id orders --environment_id test --preview_id <uuid>
   ${preferredCommand} --env production app promote --id orders --environment_id production --source_ref staging --source_environment_id staging --source_release_id <sha256> --confirm-production abc123
   ${preferredCommand} app promote-status --ref abc123 --id orders --environment_id production --mutation_id <uuid>

package/dist/shared/tools/app-tools.d.ts

@@ -25,6 +25,7 @@ declare const REMOTE_APP_ACTIONS: {
     readonly logs: "logs";
     readonly preview: "create_preview";
     readonly previews: "list_previews";
+    readonly "preview-reconcile": "reconcile_preview";
 };
 export interface AppToolOptions {
     getApplications?: () => ((args: Record<string, unknown>) => Promise<ToolResult>) | undefined;
@@ -35,7 +36,7 @@ export interface AppToolOptions {
     onDevProgress?: (result: ToolResult) => void;
 }
 export interface AppToolArguments {
-    action: "init" | "generate" | "dev" | "watch" | "verify-plan" | "compile" | "check" | "graph" | "explain" | "export-tools" | "context" | "doctor" | "fix" | "plan" | "build" | "promote" | keyof typeof REMOTE_APP_ACTIONS;
+    action: "init" | "generate" | "dev" | "watch" | "verify-plan" | "compile" | "check" | "graph" | "explain" | "export-tools" | "context" | "doctor" | "fix" | "plan" | "build" | "release" | "promote" | keyof typeof REMOTE_APP_ACTIONS;
     ref?: string;
     id?: string;
     environment_id?: string;
@@ -44,6 +45,8 @@ export interface AppToolArguments {
     expected_activation_id?: string | null;
     configuration_path?: string;
     manifest_path?: string;
+    /** `app release`: reuse an existing configuration revision instead of writing configuration_path. */
+    skip_build?: boolean;
     release_id?: string;
     source_ref?: string;
     source_release_id?: string;

package/dist/shared/tools/application-preview-tools.d.ts

@@ -1,6 +1,6 @@
 import { Type, type Static } from "typebox";
 import type { HttpTransport } from "../transports/http";
-export declare const APPLICATION_PREVIEW_ACTIONS: readonly ["get_preview_plan", "create_preview", "list_previews", "get_preview", "cleanup_preview"];
+export declare const APPLICATION_PREVIEW_ACTIONS: readonly ["get_preview_plan", "create_preview", "list_previews", "get_preview", "reconcile_preview", "cleanup_preview"];
 export declare const APPLICATION_PREVIEW_FIELDS: {
     preview_id: Type.TOptional<Type.TString>;
     branch_ref: Type.TOptional<Type.TString>;
@@ -17,41 +17,41 @@ declare const receiptSchema: Type.TObject<{
     application_id: Type.TString;
     environment_id: Type.TString;
     release_id: Type.TString;
-    expires_at: Type.TUnion<[Type.TString, Type.TNull]>;
-    status: Type.TEnum<("failed" | "ready" | "planned" | "cleaned" | "provisioning")[]>;
+    expires_at: Type.TOptional<Type.TUnion<[Type.TString, Type.TNull]>>;
+    status: Type.TEnum<("ready" | "failed" | "cleaned" | "planned" | "provisioning")[]>;
     resources: Type.TObject<{
         build_artifact: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             release_id: Type.TString;
         }>;
         database_branch: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             branch_ref: Type.TString;
             data_mode: Type.TEnum<("schema_only" | "full_clone")[]>;
         }>;
         queue_namespace: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             namespace: Type.TString;
         }>;
         storage_namespace: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             namespace: Type.TString;
         }>;
         test_secret: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             name: Type.TString;
             value_issued: Type.TLiteral<false>;
         }>;
         configuration_revision: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             configuration_id: Type.TUnion<[Type.TString, Type.TNull]>;
         }>;
         application_activation: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             activation_id: Type.TUnion<[Type.TString, Type.TNull]>;
         }>;
         smoke_test: Type.TObject<{
-            status: Type.TEnum<("pending" | "failed" | "ready" | "cleaned")[]>;
+            status: Type.TEnum<("pending" | "ready" | "failed" | "cleaned")[]>;
             checks: Type.TArray<Type.TString>;
             passed: Type.TArray<Type.TString>;
             failed: Type.TArray<Type.TString>;

package/dist/shared/tools/application-preview.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/shared/tools/application-tools.d.ts

@@ -9,7 +9,7 @@ export declare const APPLICATION_TOOL_SCHEMA: {
     ttl_seconds: Type.TOptional<Type.TInteger>;
     wait: Type.TOptional<Type.TBoolean>;
     timeout_seconds: Type.TOptional<Type.TInteger>;
-    action: Type.TEnum<("list_releases" | "get_release" | "upload_release" | "activate_release" | "logs" | "get_runtime" | "get_deployment_evidence" | "get_configuration" | "get_release_transfer_plan" | "get_promotion_plan" | "get_rollback_snapshot" | "get_history" | "get_deploy_plan" | "get_promotion_status" | "get_preview_plan" | "put_configuration" | "transfer_release" | "promote_application" | "reconcile_promotion" | "create_preview" | "list_previews" | "get_preview" | "cleanup_preview" | "deploy_release" | "rollback_release" | "reconcile_activation" | "retire_activation")[]>;
+    action: Type.TEnum<("list_releases" | "get_release" | "upload_release" | "activate_release" | "logs" | "get_runtime" | "get_deployment_evidence" | "get_configuration" | "get_release_transfer_plan" | "get_promotion_plan" | "get_promotion_status" | "get_rollback_snapshot" | "get_history" | "get_deploy_plan" | "get_preview_plan" | "list_previews" | "get_preview" | "put_configuration" | "transfer_release" | "promote_application" | "reconcile_promotion" | "create_preview" | "reconcile_preview" | "cleanup_preview" | "deploy_release" | "rollback_release" | "reconcile_activation" | "retire_activation")[]>;
     ref: Type.TString;
     id: Type.TString;
     environment_id: Type.TOptional<Type.TString>;

package/dist/shared/tools/application-workflow-schemas.d.ts

@@ -121,49 +121,49 @@ export declare function parsePreviewReceipt(value: unknown, identity: Applicatio
     project_ref: string;
     application_id: string;
     environment_id: string;
-    status: "failed" | "ready" | "planned" | "cleaned" | "provisioning";
+    status: "ready" | "failed" | "cleaned" | "planned" | "provisioning";
     schema: "supacloud.application-preview.v1";
     resources: {
         build_artifact: {
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             release_id: string;
         };
         database_branch: {
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             branch_ref: string;
             data_mode: "schema_only" | "full_clone";
         };
         queue_namespace: {
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             namespace: string;
         };
         storage_namespace: {
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             namespace: string;
         };
         test_secret: {
             name: string;
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             value_issued: false;
         };
         configuration_revision: {
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             configuration_id: string | null;
         };
         application_activation: {
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             activation_id: string | null;
         };
         smoke_test: {
-            status: "pending" | "failed" | "ready" | "cleaned";
+            status: "pending" | "ready" | "failed" | "cleaned";
             checks: string[];
             failed: string[];
             passed: string[];
         };
     };
     release_id: string;
-    expires_at: string | null;
     preview_id: string;
+    expires_at: string | null;
     cleanup: {
         required: boolean;
         error: string | null;
@@ -184,49 +184,49 @@ export declare function parsePreviewList(value: unknown, identity: ApplicationWo
         project_ref: string;
         application_id: string;
         environment_id: string;
-        status: "failed" | "ready" | "planned" | "cleaned" | "provisioning";
+        status: "ready" | "failed" | "cleaned" | "planned" | "provisioning";
         schema: "supacloud.application-preview.v1";
         resources: {
             build_artifact: {
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 release_id: string;
             };
             database_branch: {
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 branch_ref: string;
                 data_mode: "schema_only" | "full_clone";
             };
             queue_namespace: {
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 namespace: string;
             };
             storage_namespace: {
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 namespace: string;
             };
             test_secret: {
                 name: string;
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 value_issued: false;
             };
             configuration_revision: {
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 configuration_id: string | null;
             };
             application_activation: {
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 activation_id: string | null;
             };
             smoke_test: {
-                status: "pending" | "failed" | "ready" | "cleaned";
+                status: "pending" | "ready" | "failed" | "cleaned";
                 checks: string[];
                 failed: string[];
                 passed: string[];
             };
         };
         release_id: string;
-        expires_at: string | null;
         preview_id: string;
+        expires_at: string | null;
         cleanup: {
             required: boolean;
             error: string | null;

package/dist/shared/transports/http.d.ts

@@ -63,6 +63,6 @@ export declare class HttpTransport {
     postMultipart<T = unknown>(path: string, formData: FormData, options?: HttpPostOptions): Promise<HttpResult<T>>;
     patch<T = unknown>(path: string, body?: unknown): Promise<HttpResult<T>>;
     put<T = unknown>(path: string, body?: unknown, options?: HttpPostOptions): Promise<HttpResult<T>>;
-    delete<T = unknown>(path: string, body?: unknown): Promise<HttpResult<T>>;
+    delete<T = unknown>(path: string, body?: unknown, options?: HttpPostOptions): Promise<HttpResult<T>>;
     ping(): Promise<boolean>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.83.0",
+  "version": "0.85.0",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",
@@ -53,13 +53,13 @@
   },
   "dependencies": {
     "@supacloud/compiler": "^0.43.0",
-    "@supacloud/delivery": "0.12.0",
+    "@supacloud/delivery": "0.13.0",
     "@supacloud/db": "0.16.0",
     "typebox": "1.3.34"
   },
   "overrides": {
     "@supacloud/contracts": "0.8.0",
-    "@supacloud/delivery": "0.12.0",
+    "@supacloud/delivery": "0.13.0",
     "@graphql-tools/utils": "^12.0.3"
   },
   "devDependencies": {