deepspace 0.13.0 → 0.14.0

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # deepspace
 
+## 0.14.0
+
+### Minor Changes
+
+- Enforce the per-tier storage quota on app files. An app's file allocation had per-file, per-part and per-request ceilings but no admission against the owner's plan, so a free-tier app could hold 202 MiB against a 128 MiB limit with every upload reporting success and no surface reporting usage. One per-tier table now serves both storage allocations (the repo store and app files), and the shared files handler admits every write: the single-request upload before the put, a chunked upload against its declared total at init, and again against the object R2 actually assembled at complete — an over-limit assembly is deleted rather than left in the allocation. An upsert is charged only for the bytes it adds. The owner's tier caps the allocation whoever writes, so an app writing at runtime and its owner's CLI meet the same limit; a billing lookup that fails refuses writes rather than admitting unmetered storage, and leaves reads working. Refusals answer `storage_quota_exceeded` with the used and limit byte counts and name the recovery, and `deepspace app files list` now prints storage used against the limit.
+- `deepspace deploy` and `deepspace rollback` now wait for the release they just published, not merely for the app to answer. Every upload carries a synthetic `/.well-known/deepspace/release.json` asset naming its own version, injected by the platform at upload time — so this holds for every app already deployed, including rollbacks of bundles that predate the change, with no app code and no redeploy. Cloudflare serves assets atomically with the version, so the CLI polls that path until the edge returns the release it shipped; without a stamp (an older platform, or a resumed activation) it falls back to the previous reachability probe. "Deployed!" previously landed 30–60 seconds before the edge agreed, which made any deploy-then-assert script flaky by construction.
+
+  Invites can now be accepted without the emailed link. `deepspace app collaborators invites` lists the invites waiting for your signed-in email and `deepspace app collaborators accept <app-id>` accepts one — the same authority the `/join` page enforces (the signed-in email must match the invited address), reachable from a terminal. Previously an invitee who had never signed in could reach a state with no way forward: signing in did not grant access, the CLI said it would, and only the emailed link could complete it. That CLI message now describes what actually happens.
+
 ## 0.13.0
 
 ### Minor Changes

package/dist/cli.js

@@ -3798,6 +3798,36 @@ import { resolve as resolve12 } from "path";
 
 // src/cli/lib/edge-propagation.ts
 var NOT_SERVING = ["Assets have not yet deployed", "No app configured"];
+var RELEASE_STAMP_PATH = "/.well-known/deepspace/release.json";
+async function waitForLiveRelease(url, releaseStamp, timeoutMs) {
+  return releaseStamp ? waitForReleaseStamp(url, releaseStamp, timeoutMs) : waitForEdgePropagation(url, timeoutMs);
+}
+async function waitForReleaseStamp(url, releaseStamp, timeoutMs) {
+  const deadline = Date.now() + timeoutMs;
+  let attempt = 0;
+  let streak = 0;
+  while (Date.now() < deadline) {
+    attempt++;
+    try {
+      const probe = new URL(RELEASE_STAMP_PATH, url);
+      probe.searchParams.set("probe", `${Date.now()}-${attempt}`);
+      const response = await fetch(probe, { redirect: "manual" });
+      const body = await response.json().catch(() => null);
+      if (response.ok && body?.release === releaseStamp) {
+        streak++;
+        if (streak >= 3) return true;
+        await new Promise((resolve19) => setTimeout(resolve19, 1500));
+        continue;
+      }
+      streak = 0;
+    } catch {
+      streak = 0;
+    }
+    const waitMs = Math.min(8e3, 1e3 * 2 ** (attempt - 1));
+    await new Promise((resolve19) => setTimeout(resolve19, waitMs));
+  }
+  return false;
+}
 async function waitForEdgePropagation(url, timeoutMs) {
   const deadline = Date.now() + timeoutMs;
   let attempt = 0;
@@ -3840,6 +3870,13 @@ function planUploadParts(totalBytes, partSize) {
   }
   return parts;
 }
+var APP_STORAGE_LIMIT_BYTES = {
+  test: 0,
+  free: 128 * 1024 * 1024,
+  starter: 512 * 1024 * 1024,
+  premium: 2 * 1024 * 1024 * 1024,
+  admin: 10 * 1024 * 1024 * 1024
+};
 var MAX_DEPLOY_ASSET_FILE_BYTES = 25 * 1024 * 1024;
 var DANGEROUS_MIME_TYPES = /* @__PURE__ */ new Set([
   "text/html",
@@ -6040,7 +6077,7 @@ var deploy_default = defineCommand3({
     });
     if (body.url) {
       spinner2.message("Waiting for edge propagation...");
-      const ready = await waitForEdgePropagation(body.url, 9e4);
+      const ready = await waitForLiveRelease(body.url, body.releaseStamp, 9e4);
       if (!ready) {
         spinner2.stop("Deployed (edge propagation still in progress after 90s)");
         p12.log.warn(
@@ -8458,8 +8495,14 @@ var list3 = defineDeepspaceCommand({
         const more = limit < MAX_LIST_LIMIT ? "raise --limit or narrow with --prefix" : "narrow with --prefix";
         if (result.truncated) console.log(`(truncated at ${limit} \u2014 ${more})`);
       }
+      if (result.storage) {
+        const { usedBytes, limitBytes } = result.storage;
+        console.log(
+          limitBytes === void 0 ? `Storage: ${formatBytes(usedBytes)} used (limit unavailable right now)` : `Storage: ${formatBytes(usedBytes)} of ${formatBytes(limitBytes)} used`
+        );
+      }
     }
-    return { data: { appId, files, truncated: result.truncated } };
+    return { data: { appId, files, truncated: result.truncated, storage: result.storage ?? null } };
   }
 });
 var get = defineDeepspaceCommand({
@@ -8587,7 +8630,7 @@ var add = defineDeepspaceCommand({
       }
       if (!args.json) {
         console.log(
-          `\u2713 Invite sent to ${res.email} (expires ${expires}). They become a collaborator when they sign in.`
+          `\u2713 Invite sent to ${res.email} (expires ${expires}). They accept it from the emailed link, or by signing in and running \`deepspace app collaborators accept ${app2}\`.`
         );
       }
       return { data: { ...res } };
@@ -8656,9 +8699,56 @@ var cancel3 = defineDeepspaceCommand({
     return { data: { cancelled: found } };
   }
 });
+var invites = defineDeepspaceCommand({
+  meta: { name: "invites", description: "List invites waiting for you" },
+  async run({ args }) {
+    const token = await ensureToken();
+    const { invites: invites2 } = await api2(
+      token,
+      "/api/app-collaborators/invites/mine"
+    );
+    if (!args.json) {
+      if (!invites2.length) {
+        console.log("No pending invites for your email.");
+      } else {
+        for (const invite of invites2) {
+          console.log(
+            `${invite.appId}  invited by ${invite.invitedByName}  (expires ${new Date(invite.expiresAt).toLocaleDateString()})`
+          );
+        }
+        console.log("Accept one with `deepspace app collaborators accept <app-id>`.");
+      }
+    }
+    return { data: { invites: invites2 } };
+  }
+});
+var accept = defineDeepspaceCommand({
+  meta: { name: "accept", description: "Accept an invite to collaborate on an app" },
+  args: {
+    app: { type: "positional", description: "App id (see `collaborators invites`)", required: true }
+  },
+  async run({ args }) {
+    const appId = String(args.app);
+    const token = await ensureToken();
+    const res = await api2(
+      token,
+      `/api/app-collaborators/invites/${encodeURIComponent(appId)}/accept`,
+      { method: "POST" }
+    );
+    if (!args.json) {
+      console.log(
+        res.alreadyMember ? `\u2022 You already have access to ${res.appId}.` : `\u2713 You can now deploy ${res.appId}.`
+      );
+    }
+    return {
+      data: { ...res },
+      action: cliAction("deepspace", "pull", "--app", res.appId)
+    };
+  }
+});
 var collaborators_default = defineCommand7({
   meta: { name: "collaborators", description: "Manage who can deploy your app" },
-  subCommands: { list: list4, add, remove, cancel: cancel3 }
+  subCommands: { list: list4, add, remove, cancel: cancel3, invites, accept }
 });
 
 // src/cli/commands/transfer.ts
@@ -8743,7 +8833,7 @@ var status2 = defineDeepspaceCommand({
     return { data: { app: app2, transfer } };
   }
 });
-var accept = defineDeepspaceCommand({
+var accept2 = defineDeepspaceCommand({
   meta: { name: "accept", description: "Accept a transfer offered to you" },
   args: {
     app: { type: "string", alias: "a", description: "App id of the offered app", required: true }
@@ -8784,7 +8874,7 @@ var cancel4 = defineDeepspaceCommand({
 });
 var transfer_default = defineCommand8({
   meta: { name: "transfer", description: "Transfer app ownership to another user" },
-  subCommands: { offer, status: status2, accept, cancel: cancel4 }
+  subCommands: { offer, status: status2, accept: accept2, cancel: cancel4 }
 });
 
 // src/cli/commands/integrations.ts
@@ -10945,7 +11035,7 @@ Re-run with --allow-do-deletion to accept the data loss.`,
     let edgePropagating = false;
     if (result.url) {
       spinner2?.message("Waiting for edge propagation...");
-      edgePropagating = !await waitForEdgePropagation(result.url, 9e4);
+      edgePropagating = !await waitForLiveRelease(result.url, result.releaseStamp, 9e4);
     }
     spinner2?.stop(
       edgePropagating ? `Rolled back to ${result.rolledBackTo ?? releaseId} (edge propagation still in progress after 90s).` : `Rolled back to ${result.rolledBackTo ?? releaseId}.`