gencow 0.1.194 → 0.1.196

package/lib/app-command.mjs

@@ -1,3 +1,4 @@
+import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { resolve } from "path";
 import {
@@ -117,6 +118,7 @@ export function createAppCommand({
   clearTimeoutImpl = clearTimeout,
   confirmDeleteImpl = confirmDelete,
   createAbortControllerImpl = () => new AbortController(),
+  createDeleteRequestIdImpl = () => `app_delete_request_${randomUUID()}`,
   cwdImpl = () => process.cwd(),
   loadConfig,
   errorImpl = error,
@@ -313,7 +315,8 @@ ${dashboardLine}
       }
 
       infoImpl(`Deleting app "${name}"...`);
-      const delRes = await rpcMutationImpl(creds, "apps.delete", { name });
+      const requestId = createDeleteRequestIdImpl();
+      const delRes = await rpcMutationImpl(creds, "apps.delete", { name, requestId });
       let delData = await readJsonObjectResponse(delRes);
       if (!isExactAppDeleteResponse(delData, name)) {
         const operationResult = await pollAppDeleteOperation({

package/lib/app-response-error.mjs

@@ -1,6 +1,19 @@
 export const APP_DELETE_OPERATION_PATTERN =
   /^app_delete_(?:[a-f0-9]{32}|[a-f0-9]{8}-[a-f0-9]{4}-4[a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12})$/u;
 
+const RETRY_CLASSES = new Set(["operator-action", "platform-action", "retryable-infra", "terminal-client"]);
+const USER_ACTIONS = new Set([
+  "CONTACT_SUPPORT",
+  "EDIT_AND_CHECK",
+  "INSPECT_STATE",
+  "OPERATOR_ACTION",
+  "RETRY",
+  "UPGRADE_CLI",
+  "VIEW_DELETE_STATUS",
+  "VIEW_STATUS",
+  "WAIT",
+]);
+
 export function appResponseError(body, fallback) {
   if (!body || typeof body !== "object" || Array.isArray(body)) return fallback;
   const message = typeof body.error === "string" && body.error.trim() ? body.error.trim() : fallback;
@@ -20,5 +33,16 @@ export function appResponseError(body, fallback) {
   if (/^[a-z][a-z0-9_]{2,63}$/u.test(body.state ?? "")) {
     lines.push(`State: ${body.state}`);
   }
+  if (RETRY_CLASSES.has(body.retryClass) && USER_ACTIONS.has(body.userAction)) {
+    lines.push(`Retry class: ${body.retryClass}`);
+    lines.push(`Next action: ${body.userAction}`);
+    if (
+      Number.isSafeInteger(body.retryAfterMs) &&
+      body.retryAfterMs >= 0 &&
+      body.retryAfterMs <= 600_000
+    ) {
+      lines.push(`Retry after: ${body.retryAfterMs}ms`);
+    }
+  }
   return lines.join("\n");
 }

package/lib/cli-command-runner.mjs

@@ -1,4 +1,59 @@
+const SAFE_CORRELATION_ID = /^[A-Za-z0-9_-]{8,128}$/u;
+const SAFE_PLATFORM_ERROR_DETAILS = new Map([
+  ["ACCOUNT_DELETED", "This account has been deleted."],
+  ["ACCOUNT_DELETION_PENDING", "This account is pending deletion."],
+  ["ACCOUNT_SUSPENDED", "This account is suspended."],
+  ["APP_RELEASE_CAPABILITY_UNAVAILABLE", "Release capability is temporarily unavailable."],
+  ["APP_RELEASE_POLICY_READ_UNAVAILABLE", "Release policy is temporarily unavailable."],
+]);
+
+function safePlatformOrigin(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "http:" || url.protocol === "https:" ? url.origin : null;
+  } catch {
+    return null;
+  }
+}
+
 function commandErrorMessage(caught) {
+  if (caught instanceof Error && (caught.message === "APP_RELEASE_AUTH_REQUIRED" || caught.status === 401)) {
+    const lines = ["Login expired or invalid for this Platform."];
+    const platformOrigin = safePlatformOrigin(caught.platformUrl);
+    if (platformOrigin) lines.push(`Platform: ${platformOrigin}`);
+    const credentialEnvName =
+      caught.credentialSource === "environment" &&
+      (caught.credentialEnvName === "GENCOW_TOKEN" || caught.credentialEnvName === "GENCOW_DEPLOY_TOKEN")
+        ? caught.credentialEnvName
+        : null;
+    if (credentialEnvName) {
+      lines.push(`Credential source: ${credentialEnvName}`);
+      lines.push(
+        `Action: replace or unset ${credentialEnvName}; environment credentials override interactive login.`,
+      );
+    } else {
+      lines.push("Run: npx gencow@latest login");
+    }
+    if (typeof caught.correlationId === "string" && SAFE_CORRELATION_ID.test(caught.correlationId)) {
+      lines.push(`Correlation ID: ${caught.correlationId}`);
+    }
+    return lines.join("\n");
+  }
+  if (caught instanceof Error && caught.message) {
+    const platformOrigin = safePlatformOrigin(caught.platformUrl);
+    const correlationId =
+      typeof caught.correlationId === "string" && SAFE_CORRELATION_ID.test(caught.correlationId)
+        ? caught.correlationId
+        : null;
+    if (platformOrigin || correlationId || typeof caught.retryable === "boolean") {
+      const safeDetail = SAFE_PLATFORM_ERROR_DETAILS.get(caught.message);
+      const lines = [safeDetail ? `${caught.message}: ${safeDetail}` : caught.message];
+      if (platformOrigin) lines.push(`Platform: ${platformOrigin}`);
+      if (typeof caught.retryable === "boolean") lines.push(`Retryable: ${caught.retryable ? "yes" : "no"}`);
+      if (correlationId) lines.push(`Correlation ID: ${correlationId}`);
+      return lines.join("\n");
+    }
+  }
   if (caught instanceof Error && caught.message) return caught.message;
   return String(caught);
 }

package/lib/cli-project-runtime.mjs

@@ -544,6 +544,7 @@ export function buildDrizzleKitCommand(subcmd, options = {}) {
     dirnameImpl = dirname,
     existsSyncImpl = existsSync,
     processExecPath = process.execPath,
+    processVersions = process.versions,
     readFileSyncImpl = readFileSync,
     resolvePathImpl = resolve,
   } = options;
@@ -566,7 +567,10 @@ export function buildDrizzleKitCommand(subcmd, options = {}) {
     const invocation = buildDrizzleGeneratorInvocation({
       configPath: canonicalConfigPath,
       generatorBinPath: resolvedBin,
-      processExecPath,
+      // drizzle-kit 1.x uses node:sqlite for migration metadata. The CLI itself
+      // may be launched by Bun through its shebang, but Bun does not implement
+      // node:sqlite, so run this Node-only tool with the Node executable on PATH.
+      processExecPath: typeof processVersions?.bun === "string" ? "node" : processExecPath,
       subcommand: subcmd,
     });
     return {

package/lib/platform-client.mjs

@@ -27,19 +27,29 @@ export function clearCreds() {
 }
 
 export function resolveCredsFromSources({ env = process.env, loadCredsImpl = loadCreds } = {}) {
-  const envToken = env.GENCOW_TOKEN || env.GENCOW_DEPLOY_TOKEN;
+  const credentialEnvName = env.GENCOW_TOKEN
+    ? "GENCOW_TOKEN"
+    : env.GENCOW_DEPLOY_TOKEN
+      ? "GENCOW_DEPLOY_TOKEN"
+      : null;
+  const envToken = credentialEnvName ? env[credentialEnvName] : null;
   if (envToken) {
     const platformUrl = env.GENCOW_PLATFORM_URL || "https://gencow.app";
-    return { apiKey: envToken, platformUrl: validatePlatformUrl(platformUrl) };
+    return {
+      apiKey: envToken,
+      platformUrl: validatePlatformUrl(platformUrl),
+      credentialSource: "environment",
+      credentialEnvName,
+    };
   }
 
   const creds = loadCredsImpl();
   if (!creds?.apiKey) return null;
   const platformUrl = env.GENCOW_PLATFORM_URL || creds.platformUrl;
   if (platformUrl) {
-    return { ...creds, platformUrl: validatePlatformUrl(platformUrl) };
+    return { ...creds, platformUrl: validatePlatformUrl(platformUrl), credentialSource: "stored" };
   }
-  return creds;
+  return { ...creds, credentialSource: "stored" };
 }
 
 export function formatPlatformCredentialsRequiredMessage({ isCi = Boolean(process.env.CI) } = {}) {

package/lib/release-client.mjs

@@ -8,22 +8,87 @@ function releaseRequestId(explicit) {
   return explicit || `release_${randomUUID()}`;
 }
 
-async function responseError(response, fallback) {
-  const body = await response.json().catch(() => ({}));
-  const error = new Error(body.code || fallback);
-  error.detail = body.error || response.statusText;
+const SAFE_CORRELATION_ID = /^[A-Za-z0-9_-]{8,128}$/u;
+const PUBLIC_RELEASE_ERROR_CODES = new Set([
+  "ACCOUNT_DELETED",
+  "ACCOUNT_DELETION_PENDING",
+  "ACCOUNT_SUSPENDED",
+  "APP_RELEASE_APP_NOT_FOUND",
+  "APP_RELEASE_ATTEMPT_NOT_FOUND",
+  "APP_RELEASE_ATTEMPT_TERMINAL",
+  "APP_RELEASE_AUTH_REQUIRED",
+  "APP_RELEASE_CAPABILITY_UNAVAILABLE",
+  "APP_RELEASE_COMPONENT_CONFLICT",
+  "APP_RELEASE_COMPONENT_INCOMPLETE",
+  "APP_RELEASE_COMPONENT_UNEXPECTED",
+  "APP_RELEASE_ENVIRONMENT_INVALID",
+  "APP_RELEASE_ENVIRONMENT_MISMATCH",
+  "APP_RELEASE_ENV_KEYS_MISSING",
+  "APP_RELEASE_IDEMPOTENCY_CONFLICT",
+  "APP_RELEASE_METADATA_INVALID",
+  "APP_RELEASE_POLICY_READ_UNAVAILABLE",
+  "APP_RELEASE_SOURCE_CONFLICT",
+  "APP_RELEASE_SOURCE_INVALID",
+  "APP_RELEASE_STATE_CONFLICT",
+  "APP_RELEASE_STORAGE_QUOTA_EXCEEDED",
+  "APP_RELEASE_VERSIONS_DISABLED",
+  "APP_SERVING_ROUTE_COMMIT_BLOCKED",
+  "APP_SERVING_ROUTE_COMMIT_PENDING",
+  "RELEASE_SOURCE_COMPONENT_MISMATCH",
+]);
+
+function safePlatformOrigin(value) {
+  try {
+    const url = new URL(value);
+    return url.protocol === "http:" || url.protocol === "https:" ? url.origin : null;
+  } catch {
+    return null;
+  }
+}
+
+function throwResponseError(response, fallback, body, creds = {}) {
+  const authRequired = response.status === 401;
+  const responseCode = PUBLIC_RELEASE_ERROR_CODES.has(body?.code) ? body.code : fallback;
+  const error = new Error(authRequired ? "APP_RELEASE_AUTH_REQUIRED" : responseCode);
   error.status = response.status;
+  const platformOrigin = safePlatformOrigin(creds.platformUrl);
+  if (platformOrigin) error.platformUrl = platformOrigin;
+  if (creds.credentialSource === "environment" || creds.credentialSource === "stored") {
+    error.credentialSource = creds.credentialSource;
+  }
+  if (creds.credentialEnvName === "GENCOW_TOKEN" || creds.credentialEnvName === "GENCOW_DEPLOY_TOKEN") {
+    error.credentialEnvName = creds.credentialEnvName;
+  }
+  if (typeof body.correlationId === "string" && SAFE_CORRELATION_ID.test(body.correlationId)) {
+    error.correlationId = body.correlationId;
+  }
+  error.retryable = authRequired
+    ? false
+    : typeof body.retryable === "boolean"
+      ? body.retryable
+      : response.status >= 500;
   throw error;
 }
 
+async function responseError(response, fallback, creds, parsedBody) {
+  const body = parsedBody ?? ((await response.json().catch(() => ({}))) || {});
+  throwResponseError(response, fallback, body, creds);
+}
+
 async function releaseCapability({ creds, appId, environment, platformFetchImpl }) {
   const response = await platformFetchImpl(
     creds,
     `/platform/apps/${appId}/release-capability?environment=${environment}`,
     { method: "GET" },
   );
-  if (response.status === 404 || response.status === 405) return null;
-  if (!response.ok) await responseError(response, "APP_RELEASE_CAPABILITY_FAILED");
+  if (response.status === 404 || response.status === 405) {
+    const body = (await response.json().catch(() => ({}))) || {};
+    if (typeof body?.code !== "string" || body.code.length === 0) return null;
+    await responseError(response, "APP_RELEASE_CAPABILITY_FAILED", creds, body);
+  }
+  if (!response.ok) {
+    await responseError(response, "APP_RELEASE_CAPABILITY_FAILED", creds);
+  }
   const body = await response.json().catch(() => ({}));
   if (body?.protocol !== "app-release-v1" || typeof body?.enabled !== "boolean") {
     throw new Error("APP_RELEASE_CAPABILITY_RESPONSE_INVALID");
@@ -66,7 +131,9 @@ export async function prepareReleaseAttempt({
       },
       body: sourcePackage.bundleBuffer,
     });
-    if (!response.ok) await responseError(response, "APP_RELEASE_SOURCE_UPLOAD_FAILED");
+    if (!response.ok) {
+      await responseError(response, "APP_RELEASE_SOURCE_UPLOAD_FAILED", creds);
+    }
     const data = await response.json();
     if (!data.attemptId || data.state !== "source_stored") {
       throw new Error("APP_RELEASE_SOURCE_RESPONSE_INVALID");
@@ -97,14 +164,19 @@ export async function finalizeReleaseAttempt({
           body: JSON.stringify({ environment }),
         },
       );
-      if (!response.ok) await responseError(response, "APP_RELEASE_FINALIZE_FAILED");
+      if (!response.ok) {
+        await responseError(response, "APP_RELEASE_FINALIZE_FAILED", creds);
+      }
       const data = await response.json();
       if (!data.release?.id || !Number.isSafeInteger(data.release.version)) {
         throw new Error("APP_RELEASE_FINALIZE_RESPONSE_INVALID");
       }
       return data.release;
     } catch (error) {
-      const retryable = typeof error?.status !== "number" || error.status >= 500;
+      const retryable =
+        typeof error?.retryable === "boolean"
+          ? error.retryable
+          : typeof error?.status !== "number" || error.status >= 500;
       if (!retryable || attempt >= retryDelaysMs.length) throw error;
       await delayImpl(retryDelaysMs[attempt]);
     }
@@ -129,6 +201,8 @@ export async function failReleaseAttempt({
       body: JSON.stringify({ environment, failureStage, failureCode }),
     },
   );
-  if (!response.ok) await responseError(response, "APP_RELEASE_FAIL_RECORD_FAILED");
+  if (!response.ok) {
+    await responseError(response, "APP_RELEASE_FAIL_RECORD_FAILED", creds);
+  }
   return await response.json();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.194",
+  "version": "0.1.196",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {
@@ -19,7 +19,16 @@
     "scripts/",
     "dashboard/"
   ],
+  "scripts": {
+    "prebuild": "pnpm --filter @gencow/migration-contract run build && pnpm --filter @gencow/server run build",
+    "build": "node scripts/bundle-core.mjs && node scripts/bundle-internal.mjs && node scripts/bundle-server.mjs",
+    "build:runtime-bundles": "node scripts/bundle-core.mjs && node scripts/bundle-server.mjs",
+    "test:coverage": "node ../../scripts/run-package-coverage.mjs",
+    "coverage:compare": "node ../../scripts/compare-package-coverage.mjs",
+    "prepublishOnly": "npm run build && node scripts/pre-publish-check.mjs"
+  },
   "dependencies": {
+    "@gencow/migration-contract": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "drizzle-kit": "1.0.0-rc.4",
     "drizzle-orm": "1.0.0-rc.4",
@@ -27,21 +36,13 @@
     "open": "^10.2.0",
     "tar": "7.5.15",
     "ws": "^8.21.1",
-    "zod": "^4.4.3",
-    "@gencow/migration-contract": "0.1.12"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@gencow/client": "workspace:*",
+    "@gencow/core": "workspace:*",
+    "@gencow/react": "workspace:*",
     "@types/node": "^25.9.5",
-    "better-auth": "^1.6.23",
-    "@gencow/core": "0.1.42",
-    "@gencow/client": "0.2.6",
-    "@gencow/react": "0.2.6"
-  },
-  "scripts": {
-    "prebuild": "pnpm --filter @gencow/migration-contract run build && pnpm --filter @gencow/server run build",
-    "build": "node scripts/bundle-core.mjs && node scripts/bundle-internal.mjs && node scripts/bundle-server.mjs",
-    "build:runtime-bundles": "node scripts/bundle-core.mjs && node scripts/bundle-server.mjs",
-    "test:coverage": "node ../../scripts/run-package-coverage.mjs",
-    "coverage:compare": "node ../../scripts/compare-package-coverage.mjs"
+    "better-auth": "^1.6.23"
   }
-}
+}