@supacloud/cli 0.87.1 → 0.90.0

package/dist/shared/tools/app-tools.d.ts

@@ -1,3 +1,4 @@
+import type { ApplicationDeployRequest } from "@supacloud/delivery";
 import { type ToolServer } from "../tool-server";
 import { type AppManifest } from "./app-tool-export";
 declare const REMOTE_APP_ACTIONS: {
@@ -53,6 +54,7 @@ export interface AppToolArguments {
     source_environment_id?: string;
     mutation_id?: string;
     approved_migration_digest?: string;
+    web?: ApplicationDeployRequest["web"];
     branch_ref?: string;
     branch_name?: string;
     data_mode?: "schema_only" | "full_clone";

package/dist/shared/tools/application-schemas.d.ts

@@ -152,7 +152,8 @@ export declare const ApplicationPromotionPlanSchema: import("typebox").TObject<{
     execution_performed: import("typebox").TLiteral<false>;
     data_recovery: import("typebox").TLiteral<"separate-required">;
 }>;
-export declare const ApplicationReleaseRequestSchema: import("typebox").TObject<{
+export declare const ApplicationDeployRequestSchema: import("typebox").TObject<{
+    mutation_id: import("typebox").TString;
     release_id: import("typebox").TString;
     configuration_id: import("typebox").TOptional<import("typebox").TString>;
     configuration_write: import("typebox").TOptional<import("typebox").TObject<{
@@ -168,15 +169,22 @@ export declare const ApplicationReleaseRequestSchema: import("typebox").TObject<
             }>>;
         }>;
     }>>;
-    activation_id: import("typebox").TOptional<import("typebox").TString>;
-    expected_activation_id: import("typebox").TOptional<import("typebox").TUnion<[import("typebox").TString, import("typebox").TNull]>>;
     expected_plan_sha256: import("typebox").TOptional<import("typebox").TString>;
+    approved_migration_digest: import("typebox").TOptional<import("typebox").TString>;
+    web: import("typebox").TOptional<import("typebox").TObject<{
+        deployment_id: import("typebox").TString;
+        release_id: import("typebox").TString;
+        expected_active_release_id: import("typebox").TString;
+        expected_activation_id: import("typebox").TString;
+        mutation_id: import("typebox").TString;
+    }>>;
 }>;
-export declare const ApplicationReleaseResultSchema: import("typebox").TObject<{
-    schema: import("typebox").TLiteral<"supacloud.application-release.v1">;
+export declare const ApplicationDeployResultSchema: import("typebox").TObject<{
+    schema: import("typebox").TLiteral<"supacloud.application-deploy.v1">;
     project_ref: import("typebox").TString;
     application_id: import("typebox").TString;
     environment_id: import("typebox").TString;
+    mutation_id: import("typebox").TString;
     release_id: import("typebox").TString;
     configuration_id: import("typebox").TString;
     activation_id: import("typebox").TString;
@@ -185,4 +193,33 @@ export declare const ApplicationReleaseResultSchema: import("typebox").TObject<{
     action: import("typebox").TUnion<[import("typebox").TLiteral<"activate">, import("typebox").TLiteral<"no-op">]>;
     replayed: import("typebox").TBoolean;
     execution_performed: import("typebox").TBoolean;
+    backend_receipt: import("typebox").TObject<{
+        schema: import("typebox").TLiteral<"supacloud.application-backend-receipt.v1">;
+        project_ref: import("typebox").TString;
+        application_id: import("typebox").TString;
+        environment_id: import("typebox").TString;
+        release_id: import("typebox").TString;
+        manifest_sha256: import("typebox").TString;
+        mutation_id: import("typebox").TString;
+        plan_sha256: import("typebox").TString;
+        backup_id: import("typebox").TUnion<[import("typebox").TString, import("typebox").TNull]>;
+        before_ledger_digest: import("typebox").TString;
+        after_ledger_digest: import("typebox").TString;
+        applied_versions: import("typebox").TArray<import("typebox").TString>;
+        schema_reloaded: import("typebox").TBoolean;
+        postgrest_healthy: import("typebox").TBoolean;
+    }>;
+    web: import("typebox").TOptional<import("typebox").TObject<{
+        deployment_id: import("typebox").TString;
+        release_id: import("typebox").TString;
+        activation_id: import("typebox").TString;
+        replayed: import("typebox").TBoolean;
+    }>>;
+}>;
+export declare const ApplicationDeployWebRequestSchema: import("typebox").TObject<{
+    deployment_id: import("typebox").TString;
+    release_id: import("typebox").TString;
+    expected_active_release_id: import("typebox").TString;
+    expected_activation_id: import("typebox").TString;
+    mutation_id: import("typebox").TString;
 }>;

package/dist/shared/tools/application-tools.d.ts

@@ -9,7 +9,7 @@ export declare const APPLICATION_TOOL_SCHEMA: {
     ttl_seconds: Type.TOptional<Type.TInteger>;
     wait: Type.TOptional<Type.TBoolean>;
     timeout_seconds: Type.TOptional<Type.TInteger>;
-    action: Type.TEnum<("list_releases" | "get_release" | "upload_release" | "activate_release" | "logs" | "get_runtime" | "get_deployment_evidence" | "get_configuration" | "get_release_transfer_plan" | "get_promotion_plan" | "get_promotion_status" | "get_rollback_snapshot" | "get_history" | "get_deploy_plan" | "get_preview_plan" | "list_previews" | "get_preview" | "put_configuration" | "release_application" | "transfer_release" | "promote_application" | "reconcile_promotion" | "create_preview" | "reconcile_preview" | "cleanup_preview" | "deploy_release" | "rollback_release" | "reconcile_activation" | "retire_activation")[]>;
+    action: Type.TEnum<("list_releases" | "get_release" | "upload_release" | "activate_release" | "logs" | "get_runtime" | "get_deployment_evidence" | "get_configuration" | "get_release_transfer_plan" | "get_promotion_plan" | "get_promotion_status" | "get_rollback_snapshot" | "get_history" | "get_deploy_plan" | "get_preview_plan" | "list_previews" | "get_preview" | "put_configuration" | "deploy_application" | "transfer_release" | "promote_application" | "reconcile_promotion" | "create_preview" | "reconcile_preview" | "cleanup_preview" | "deploy_release" | "rollback_release" | "reconcile_activation" | "retire_activation")[]>;
     ref: Type.TString;
     id: Type.TString;
     environment_id: Type.TOptional<Type.TString>;
@@ -19,6 +19,13 @@ export declare const APPLICATION_TOOL_SCHEMA: {
     configuration_path: Type.TOptional<Type.TString>;
     configuration_write: Type.TOptional<Type.TUnknown>;
     manifest_path: Type.TOptional<Type.TString>;
+    web: Type.TOptional<Type.TObject<{
+        deployment_id: Type.TString;
+        release_id: Type.TString;
+        expected_active_release_id: Type.TString;
+        expected_activation_id: Type.TString;
+        mutation_id: Type.TString;
+    }>>;
     release_id: Type.TOptional<Type.TString>;
     source_ref: Type.TOptional<Type.TString>;
     source_release_id: Type.TOptional<Type.TString>;

package/dist/shared/tools/developer-experience-tools.d.ts

@@ -0,0 +1,26 @@
+import { type ResolvedContext } from "../context";
+import type { ToolSchema } from "../schema";
+import { type ToolServer } from "../tool-server";
+export interface DeveloperExperienceOptions {
+    cwd?: string;
+    activeContext?: ResolvedContext;
+}
+interface PackageManifest {
+    scripts?: Record<string, unknown>;
+    dependencies?: Record<string, unknown>;
+    devDependencies?: Record<string, unknown>;
+}
+export declare const initToolSchema: ToolSchema;
+export declare const environmentToolSchema: ToolSchema;
+declare function outputDirectoryFor(manifest: PackageManifest): string;
+declare function profileNameFromFile(name: string): string | null;
+declare function statusMissing(context: ResolvedContext): string[];
+declare function deployMissing(context: ResolvedContext): string[];
+export declare function registerDeveloperExperienceTools(server: ToolServer, options?: DeveloperExperienceOptions): void;
+export declare const __internal: {
+    outputDirectoryFor: typeof outputDirectoryFor;
+    profileNameFromFile: typeof profileNameFromFile;
+    statusMissing: typeof statusMissing;
+    deployMissing: typeof deployMissing;
+};
+export {};

package/dist/shared/tools/developer-experience-tools.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/cli",
-  "version": "0.87.1",
+  "version": "0.90.0",
   "description": "Project-scoped CLI for SupaCloud users",
   "type": "module",
   "main": "./dist/index.js",
@@ -52,14 +52,14 @@
     "directory": "packages/cli"
   },
   "dependencies": {
-    "@supacloud/compiler": "^0.44.0",
-    "@supacloud/delivery": "0.14.0",
-    "@supacloud/db": "0.16.0",
-    "typebox": "1.3.34"
+    "@supacloud/compiler": "^0.44.1",
+    "@supacloud/delivery": "0.15.0",
+    "@supacloud/db": "0.16.1",
+    "typebox": "1.3.36"
   },
   "overrides": {
-    "@supacloud/contracts": "0.8.0",
-    "@supacloud/delivery": "0.14.0",
+    "@supacloud/contracts": "0.8.1",
+    "@supacloud/delivery": "0.15.0",
     "@graphql-tools/utils": "^12.0.3"
   },
   "devDependencies": {

package/skills/supacloud/references/command-map.md

@@ -23,9 +23,9 @@ Load this reference when selecting a command surface or when a user asks an AI t
 | Inspect or back up a remote database | `supabase db_pull`, `migration_list`, `db_dump`, `gen_types` | Requires explicit PostgreSQL DSN; redact it |
 | Replay the release-canary fixture stage receipt | `release release_canary_fixture_stage_replay` | Dual-bind Management project context and that project's service-role application origin; accepts only the exact subject/request UUID pair and a strict idempotent receipt |
 | Disable a staged release-canary fixture | `release release_canary_fixture_disable_replay` | Uses the fixed disable RPC once, accepts idempotent false/true receipts, then queries the existing pending RPC with issuer/subject and requires authoritative JSON `false`; fixture binding comes from the strict disable receipt |
-| Rebind release scope manifest to upstream base commit | `release scope_rebind` | Local action; updates baseCommit in scope JSON files canonically to target git commit, supports `--dry_run`, `--task`, and recalculates `scope_sha256` |
-| Inspect release scope manifest and git alignment | `release scope_inspect` | Local action; validates scope structure, returns canonical hash, and checks alignment with HEAD / origin/main |
-| Scaffold a new canonical release scope manifest | `release scope_create` | Local action; outputs canonical JSON scope with sorted functions, migrations, and baseCommit |
+| Rebind release scope manifest to upstream base commit | `release scope_rebind` | Local maintenance action; requires the exact `--environment_id`, updates only scopes bound to that environment, supports `--dry_run`/`--task`, and recalculates `scope_sha256` |
+| Inspect release scope manifest and git alignment | `release scope_inspect` | Local maintenance action; requires the exact `--environment_id`, rejects legacy or cross-environment scopes, returns canonical hash, and checks alignment with HEAD / origin/main |
+| Scaffold a new canonical release scope manifest | `release scope_create` | Local maintenance action; requires `--environment_id` and outputs a current-main-bound scope with sorted functions, migrations, and environment identity |
 | Preview/apply migrations remotely | `supabase push` | Always dry-run first; production needs explicit approval |
 | Mark proven-equivalent historical migrations as applied | `database baseline_migrations` | Dry-run, schema-equivalence proof, backup, explicit approval |
 | Inspect auth users or generate a controlled login link | `auth list_users`, `auth get_user`, `auth generate_link` | User reads are bounded; generation supports only `magiclink`, `recovery`, and `invite`, requires production confirmation, and returns only a validated action URL |
@@ -51,7 +51,7 @@ until a project-scoped context is resolved.
 - `secrets`: project secret management; never print values after write.
 - `queue`, `task_events`, `diagnostics`: asynchronous workload operations and bounded diagnostics.
 - `gateway`: project route/config/rebuild operations.
-- `release`: local release scope rebinding/inspection (`scope_rebind`, `scope_inspect`, `scope_create`), verified backup/PostgREST lifecycle controls, plus production-confirmed, non-retried, strict release-canary fixture stage and disable replay actions.
+- `release`: local release scope maintenance (`scope_rebind`, `scope_inspect`, `scope_create`), verified backup/PostgREST lifecycle controls, plus production-confirmed, non-retried, strict release-canary fixture stage and disable replay actions. Scope maintenance is not a prerequisite for the normal `supacloud --env <name> deploy` flow.
 - `ai`: inspect or install this packaged Skill.
 
 ## Safe inspection pattern