@tonbo/cli 0.12.0 → 0.13.0

package/dist/bin/tonbo.js

@@ -415,7 +415,8 @@ var managementOperations = {
     "pathParams": [],
     "query": [
       "after",
-      "wait"
+      "wait",
+      "include"
     ],
     "idempotencyKey": false
   },
@@ -588,6 +589,61 @@ var managementOperations = {
     "query": [],
     "idempotencyKey": false
   },
+  "listYieldQuestions": {
+    "method": "GET",
+    "path": "/yield/questions",
+    "pathParams": [],
+    "query": [
+      "team",
+      "limit"
+    ],
+    "idempotencyKey": false
+  },
+  "createYieldQuestion": {
+    "method": "POST",
+    "path": "/yield/questions",
+    "pathParams": [],
+    "query": [],
+    "idempotencyKey": false
+  },
+  "showYieldQuestion": {
+    "method": "GET",
+    "path": "/yield/questions/{id}",
+    "pathParams": [
+      "id"
+    ],
+    "query": [],
+    "idempotencyKey": false
+  },
+  "replyYieldQuestion": {
+    "method": "POST",
+    "path": "/yield/questions/{id}/replies",
+    "pathParams": [
+      "id"
+    ],
+    "query": [],
+    "idempotencyKey": false
+  },
+  "closeYieldQuestion": {
+    "method": "POST",
+    "path": "/yield/questions/{id}/close",
+    "pathParams": [
+      "id"
+    ],
+    "query": [],
+    "idempotencyKey": false
+  },
+  "listYieldDecisions": {
+    "method": "GET",
+    "path": "/yield/decisions",
+    "pathParams": [],
+    "query": [
+      "project",
+      "path",
+      "limit"
+    ],
+    "idempotencyKey": false
+  },
   "listDatabases": {
     "method": "GET",
     "path": "/databases",
@@ -879,7 +935,7 @@ var apiKeyExpirations = [
 ];
 var credentialsContract = {
   "version": 1,
-  "description": "Legacy from ADR-0018: the per-account CLI login of @tonbo/cli 0.11 and @tonbo/yield 0.3. From @tonbo/cli 0.12 and @tonbo/yield 0.4 a login is one session of the person in login.json (credentials-v2.json); clients read this file only as the fallback when login.json is missing, and the per-account keys it holds are retired when those CLIs ship. Before that: the login `tonbo login` (and `yield login`) saves: a personal key of one account at the top level, the login made last, and, beside it, every account's login of this device in `accounts` with the device's `login_secret` (ADR-0016, \"Credentials\", PR 4b-ii). @tonbo/cli-core writes and reads it; the Tonbo SDK (@tonbo/sdk and tonbo-sdk, contracts/sdk/v1.json) reads it as its last key source, and every other reader follows `reader` and reads the top level alone.",
+  "description": "Legacy from ADR-0018: the per-account CLI login of @tonbo/cli 0.11 and @tonbo/yield 0.3. From @tonbo/cli 0.12 and @tonbo/yield 0.4 a login is one session of the person in login.json (credentials-v2.json); clients read this file only as the fallback when login.json is missing, and the per-account keys it holds were retired when those CLIs shipped (founder, 2026-11-03): User Center issues them no more (access-token-v1.json `cli_session.login.retired`) and the live ones were revoked, so no client writes this file any longer. Before that: the login `tonbo login` (and `yield login`) saves: a personal key of one account at the top level, the login made last, and, beside it, every account's login of this device in `accounts` with the device's `login_secret` (ADR-0016, \"Credentials\", PR 4b-ii). @tonbo/cli-core writes and reads it; the Tonbo SDK (@tonbo/sdk and tonbo-sdk, contracts/sdk/v1.json) reads it as its last key source, and every other reader follows `reader` and reads the top level alone.",
   "path": {
     "description": "`${XDG_CONFIG_HOME}/tonbo/credentials.json` when XDG_CONFIG_HOME is set and not empty, else `${HOME}/.config/tonbo/credentials.json`.",
     "base_env": "XDG_CONFIG_HOME",
@@ -4360,6 +4416,7 @@ var MACHINE_ERROR_HINTS = {
   machine_failed: "A Machine whose creation failed does not change: `tonbo machine show` says why; delete it with `tonbo machine delete` and create it again.",
   snapshot_would_be_discarded: "Pass --discard-snapshot to apply the change at the next boot, which then starts fresh.",
   machine_limit_reached: "The account holds as many Machines as it may: delete one you no longer need (`tonbo machine list`), or ask for more.",
+  database_bound: "Another Machine binds that database, and a database binds one Machine: name another, or delete the Machine that binds it first.",
   idempotency_conflict: "That idempotency key belongs to another request: leave out --idempotency-key to create a new Machine.",
   create_rate_limited: "Too many Machines were created in the last hour; try again later.",
   image_pulling: "The Machine's image is still being pulled; the request was not run. Try again shortly; `tonbo machine show` reports the image's state.",
@@ -4823,7 +4880,12 @@ async function machineCreateCommand(deps, name, command, options = {}) {
     const ports = withDefault(parsePorts(options.port ?? []), options.defaultPort);
     const key = await deps.auth.apiKey();
     const bound = typeof options.volume === "string" ? await resolveVolumeBinding(deps, key, options.volume) : null;
-    const region = options.region ?? bound?.region;
+    const database = typeof options.database === "string" ? await deps.api.getDatabase(key, options.database) : null;
+    if (database && bound && database.region !== bound.region && !options.region)
+      throw new Error(
+        `The Volume is in ${bound.region} and database ${database.name} in ${database.region}; a Machine binds both only in its own region.`
+      );
+    const region = options.region ?? bound?.region ?? database?.region;
     const shape = options.shape ?? (await deps.api.listMachineShapes(key)).default;
     let created;
     try {
@@ -4841,7 +4903,9 @@ async function machineCreateCommand(deps, name, command, options = {}) {
           idle_action: options.idleAction,
           stop_grace_seconds: options.stopGrace,
           ...bound ? { volumes: [bound.binding] } : {},
-          delete_after_seconds: deleteAfterSeconds(options.deleteAfter)
+          delete_after_seconds: deleteAfterSeconds(options.deleteAfter),
+          ...database ? { database: database.name } : {},
+          ...options.database === false ? { database: null } : {}
         },
         options.idempotencyKey ?? randomUUID5()
       );
@@ -5475,7 +5539,7 @@ var COMMAND_HELP = {
   },
   "tonbo machine create": {
     about: [
-      "Creates a Machine, a VM booted from an image in one region. It has no database of its own: its files can last on a Volume (`--volume`), and its program opens a database by URL with a key. The image is a public OCI image with a linux/arm64 variant, from Docker Hub or another public registry (`nginx:1.27`, `ghcr.io/org/app:v1`, or one pinned by digest), or `tonbo.dev/platform`, the platform image. A registry reachable only over IPv6, one named by an IP address, and one that redirects its manifests are refused. The CLI resolves a registry image to its linux/arm64 digest, and the image is pulled before the Machine leaves `creating`.",
+      "Creates a Machine, a VM booted from an image in one region. It has no database of its own: `--database <name>` binds one of the account's databases of its region, which it then reaches at `TONBO_DATABASE_URL`, and a database binds one Machine at a time; its files can last on a Volume (`--volume`), and its program can open any other database by URL with a key. The image is a public OCI image with a linux/arm64 variant, from Docker Hub or another public registry (`nginx:1.27`, `ghcr.io/org/app:v1`, or one pinned by digest), or `tonbo.dev/platform`, the platform image. A registry reachable only over IPv6, one named by an IP address, and one that redirects its manifests are refused. The CLI resolves a registry image to its linux/arm64 digest, and the image is pulled before the Machine leaves `creating`.",
       "The Machine is served at `https://<name>-<account>.tonbo.sh` on its default port. `--port <port>` serves a private port, which takes a member's token, and `--port <port>:public` an open one, which needs the `machines.public` capability. A command after `--` replaces the image's CMD. The CLI warns on stderr when the Machine has no port, since nothing can wake it then, and when an `--env` key looks secret: env values are readable by every member through the API.",
       "The answer is the Machine while it is `creating`. With `--wait` the CLI reads it until it is `active` or `failed`, or `--timeout` passes: a failure prints what to do and exits 1, and a timeout says it is still creating and undoes nothing. A creation the network or a 5xx answer did not confirm is sent at most three times with the same idempotency key, each retry after its `Retry-After` (at most 30 s) or a short backoff; a `name_taken` refusal says which Machine holds the name and how old it is, in case it is yours from a lost reply. In a region not open for Machines the creation is refused with `region_not_offered`, and nothing is created."
     ],
@@ -5487,7 +5551,7 @@ var COMMAND_HELP = {
     defaults: {
       "--shape": "the shape `tonbo machine shapes` marks as the default",
       "--default-port": "the first --port",
-      "--region": "the --volume's region, else the account's default region",
+      "--region": "the --volume's or --database's region, else the account's default region",
       "--idempotency-key": "a new UUID",
       "--timeout": String(DEFAULT_WAIT_SECONDS),
       "--delete-after": "never"
@@ -6062,7 +6126,10 @@ function createProgram(makeDependencies = createDependencies) {
       ).requiredOption(
         "--image <reference>",
         "the image the Machine boots: a public OCI image with a linux/arm64 variant (nginx:1.27, ghcr.io/org/app@sha256:...), or tonbo.dev/platform"
-      ).option("--region <region>", "the Machine's region, fixed for its life"),
+      ).option("--region <region>", "the Machine's region, fixed for its life").option(
+        "--database <name>",
+        "bind the account's database <name> (see tonbo database list), of the Machine's region: its URL is TONBO_DATABASE_URL and the Machine writes it"
+      ).option("--no-database", "bind no database (the default)"),
       false
     ).option(
       "--idempotency-key <key>",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tonbo/cli",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "The Tonbo CLI: sign in and manage account resources from the command line.",
   "homepage": "https://tonbo.dev",
   "bugs": {