gencow 0.1.263 → 0.1.265

package/lib/cloud-targets.mjs

@@ -106,7 +106,11 @@ export function resolveCloudAppTarget(restArgs, options = {}) {
       acceptExplicitWithoutProdApp: true,
     });
     if (!prodTarget.appId) {
-      return { error: describeProdTargetFailure(prodTarget, missingProdMessage) };
+      const error = describeProdTargetFailure(prodTarget, missingProdMessage);
+      if (prodTarget.reason !== "explicit_app_not_prod_app") return { error };
+      // Only the explicit mismatch carries its reason and requested app, so callers can render the
+      // typed EXPLICIT_APP_NOT_PROD_APP block; every other failure keeps the { error } shape.
+      return { error, reason: prodTarget.reason, prodApp: prodTarget.prodApp, explicitAppId: appId };
     }
     appId = prodTarget.appId;
   }

package/lib/config-command.mjs

@@ -1,4 +1,5 @@
 import { resolveCloudAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine, redactConfigSetValue, redactEnvPairs } from "./deploy-app-target.mjs";
 import { BOLD, CYAN, DIM, GREEN, RESET, error, info, log, success } from "./output.mjs";
 import { requireCreds, rpcMutation, rpcQuery } from "./platform-client.mjs";
 
@@ -82,8 +83,15 @@ export function createConfigCommand({
     }
 
     if (target.error) {
-      errorImpl(target.error);
-      return;
+      errorImpl(
+        cloudTargetRejectionMessage(target, {
+          fallbackMessage: target.error,
+          stage: "app target resolution",
+          changed: "nothing. No config value was changed.",
+          next: `${prodRetryCommandLine({ command: "config", args: configArgs, redactValues: redactConfigSetValue })}   (omit --app to target this project's prod app)`,
+        }),
+      );
+      return 1;
     }
 
     const { appId } = target;

package/lib/cors-command.mjs

@@ -1,4 +1,5 @@
 import { resolveCloudAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { loadConfig } from "./cli-project-runtime.mjs";
 import { normalizeCliCorsOrigin } from "./domain-helpers.mjs";
 import { BOLD, CYAN, DIM, GREEN, RESET, error, info, log, success } from "./output.mjs";
@@ -101,8 +102,15 @@ export function createCorsCommand({
     });
 
     if (target.error) {
-      errorImpl(target.error);
-      return;
+      errorImpl(
+        cloudTargetRejectionMessage(target, {
+          fallbackMessage: target.error,
+          stage: "app target resolution",
+          changed: "nothing. No trusted origin was changed.",
+          next: `${prodRetryCommandLine({ command: "cors", args: corsArgs })}   (omit --app to target this project's prod app)`,
+        }),
+      );
+      return 1;
     }
 
     const { appId, envTarget } = target;

package/lib/db-command.mjs

@@ -23,6 +23,7 @@ import {
   resolveProdAppTarget,
 } from "./cloud-targets.mjs";
 import { platformFetch, requireCreds } from "./platform-client.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { readProjectMetadata } from "./project-context.mjs";
 
 export function resolveDbCloudTarget(args, gencowJson = null) {
@@ -59,7 +60,7 @@ export function resolveDbCloudTarget(args, gencowJson = null) {
         appId: prodTarget.appId,
         isProd,
         platformUrl,
-        prodTargetFailure: prodTarget.appId ? undefined : prodTarget,
+        prodTargetFailure: prodTarget.appId ? undefined : { ...prodTarget, explicitAppId },
       };
     }
     return { appId: explicitAppId || gencowJson.appId || gencowJson.appName || null, isProd, platformUrl };
@@ -397,10 +398,15 @@ export function createDbCommands({
 
       if (isProd && !appId) {
         errorImpl(
-          describeProdTargetFailure(
-            target.prodTargetFailure,
-            "Prod app not found. Run 'gencow deploy' first to create a prod app.",
-          ),
+          cloudTargetRejectionMessage(target.prodTargetFailure, {
+            fallbackMessage: describeProdTargetFailure(
+              target.prodTargetFailure,
+              "Prod app not found. Run 'gencow deploy' first to create a prod app.",
+            ),
+            stage: "seed target resolution",
+            changed: "nothing. No seed data was written.",
+            next: `${prodRetryCommandLine({ command: "db:seed", args: args })}   (omit --app to target this project's prod app)`,
+          }),
         );
         return 1;
       }

package/lib/db-push-command.mjs

@@ -54,6 +54,7 @@ import {
 } from "./confirm-gate.mjs";
 import { emitMigrationResponsibilityNotice } from "./migration-advisory.mjs";
 import { describeProdTargetFailure } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { readProjectMetadata } from "./project-context.mjs";
 
 function clientCorrelationId() {
@@ -248,10 +249,15 @@ function createDbMigrationCommand(deps, command) {
           );
         } else if (isProd) {
           deps.errorImpl(
-            describeProdTargetFailure(
-              target.prodTargetFailure,
-              "Prod app not found. Run 'gencow deploy' first to create a prod app.",
-            ),
+            cloudTargetRejectionMessage(target.prodTargetFailure, {
+              fallbackMessage: describeProdTargetFailure(
+                target.prodTargetFailure,
+                "Prod app not found. Run 'gencow deploy' first to create a prod app.",
+              ),
+              stage: "migration target resolution",
+              changed: `nothing. No migration was ${isCheck ? "checked" : "applied"}, and no database or serving state was changed.`,
+              next: `${prodRetryCommandLine({ command, args })}   (omit --app to target this project's prod app)`,
+            }),
           );
         } else {
           deps.errorImpl("Cloud app not found. Make sure gencow.json exists with an appId.");
@@ -259,6 +265,8 @@ function createDbMigrationCommand(deps, command) {
           deps.infoImpl(`${DIM}To push to local DB: gencow db:push --local${RESET}`);
           deps.logImpl("");
         }
+        // JSON mode already exits through emitFailure; text mode must exit non-zero itself.
+        if (!jsonMode) deps.exitImpl(1);
         return;
       }
 

package/lib/deploy-app-target.mjs

@@ -1,4 +1,5 @@
 import { appNotFoundDiagnostic } from "./app-response-contract.mjs";
+import { describeProdTargetFailure, resolveProdAppTarget } from "./cloud-targets.mjs";
 import { readJsonObjectResponse } from "./http-response-json.mjs";
 
 const PUBLIC_LOOKUP_ERROR_CODES = new Set([
@@ -73,6 +74,86 @@ export function rejectExplicitAppNotFound({ appId, target, correlationId, errorI
   return false;
 }
 
+const DEPLOY_CHANGED_TEXT =
+  "nothing. No app was created or deployed, gencow.json was not modified, and app data and the serving state were not changed.";
+const DEPLOY_NEXT_TEXT = "gencow deploy --prod   (deploys to this project's prod app)";
+
+// Shared typed block for `--app <id>` with `--prod` when <id> is not this project's prod app. Every
+// target-resolving command renders this one block, so scripts see the same code and exit status.
+// `rejection` is the resolver result ({ reason, prodApp }); `changed` and `next` are per command.
+export function renderExplicitAppNotProdAppLines({
+  explicitAppId,
+  rejection,
+  stage = "deploy target lookup",
+  changed = DEPLOY_CHANGED_TEXT,
+  next = DEPLOY_NEXT_TEXT,
+}) {
+  return [
+    "Code: EXPLICIT_APP_NOT_PROD_APP",
+    `Stage: ${stage}`,
+    `App ID: ${explicitAppId} (requested with --prod)`,
+    describeProdTargetFailure(rejection, "--app with --prod must name this project's prod app."),
+    `Changed: ${changed}`,
+    `Next: ${next}`,
+  ];
+}
+
+// Re-run line for a rejected prod command. It keeps the user's subcommand and arguments, drops
+// --app (the app id is never printed) and any --prod, then appends --prod. `redactValues` may replace
+// secret-bearing values with placeholders before the line is rendered.
+export function prodRetryCommandLine({ command, args, redactValues = (list) => list }) {
+  const kept = [];
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg === "--app" || arg === "-a") {
+      index += 1;
+      continue;
+    }
+    if (arg === "--prod") continue;
+    kept.push(arg);
+  }
+  return ["gencow", command, ...redactValues(kept), "--prod"].join(" ");
+}
+
+// env set KEY=VALUE: keep the key, never print the value.
+export function redactEnvPairs(list) {
+  return list.map((arg) => {
+    if (arg.startsWith("-") || !arg.includes("=")) return arg;
+    return `${arg.slice(0, arg.indexOf("="))}=<value>`;
+  });
+}
+
+// config set <key> <value>: keep the key, never print the value.
+export function redactConfigSetValue(list) {
+  return list.map((arg, index) => (index === 2 && list[0] === "set" ? "<value>" : arg));
+}
+
+// Message for a failed cloud target: the typed block for an explicit prod mismatch, otherwise the
+// command's own existing text. Only the explicit reason gets the Code block.
+export function cloudTargetRejectionMessage(rejection, { fallbackMessage, ...options }) {
+  if (rejection?.reason !== "explicit_app_not_prod_app") return fallbackMessage;
+  return renderExplicitAppNotProdAppLines({
+    explicitAppId: rejection.explicitAppId,
+    rejection,
+    ...options,
+  }).join("\n");
+}
+
+// `--prod --app <id>` on a project with a prod app must name that prod app. Returns true when the
+// target is accepted; otherwise prints a typed rejection and exits before any app or metadata change.
+export function checkExplicitProdAppTarget({ explicitAppId, prodApp, errorImpl, exitImpl }) {
+  const prodTarget = resolveProdAppTarget({ explicitAppId, prodApp });
+  if (prodTarget.appId) return true;
+  errorImpl(
+    renderExplicitAppNotProdAppLines({
+      explicitAppId,
+      rejection: prodTarget,
+    }).join("\n"),
+  );
+  exitImpl(1);
+  return false;
+}
+
 export async function lookupOwnedApp({ creds, appId, environment, platformFetchImpl }) {
   try {
     const response = await platformFetchImpl(

package/lib/deploy-command.mjs

@@ -7,6 +7,7 @@ import {
 } from "./app-diagnostics.mjs";
 import { appNotFoundDiagnostic, parseAppLookupResponse } from "./app-response-contract.mjs";
 import { resolveCloudAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { readJsonValueResponse } from "./http-response-json.mjs";
 import { renderDeployFailureDiagnosticLines } from "./deploy-failure-diagnostic.mjs";
 import { formatAppLogDiagnosis } from "./deploy-logs-diagnostic.mjs";
@@ -156,7 +157,14 @@ export async function handleDeployReadonlySubcommand(params) {
       missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
     });
     if (target.error) {
-      errorImpl(target.error);
+      errorImpl(
+        cloudTargetRejectionMessage(target, {
+          fallbackMessage: target.error,
+          stage: "deploy target resolution",
+          changed: "nothing. Deployment data was only read; no app or serving state was changed.",
+          next: `${prodRetryCommandLine({ command: "deploy", args: deployArgs })}   (omit --app to target this project's prod app)`,
+        }),
+      );
       exitImpl(1);
       return true;
     }
@@ -233,7 +241,14 @@ export async function handleDeployReadonlySubcommand(params) {
     missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
   });
   if (target.error) {
-    errorImpl(target.error);
+    errorImpl(
+      cloudTargetRejectionMessage(target, {
+        fallbackMessage: target.error,
+        stage: "deploy target resolution",
+        changed: "nothing. Deployment data was only read; no app or serving state was changed.",
+        next: `${prodRetryCommandLine({ command: "deploy", args: deployArgs })}   (omit --app to target this project's prod app)`,
+      }),
+    );
     exitImpl(1);
     return true;
   }

package/lib/deploy-runtime.mjs

@@ -24,6 +24,7 @@ import {
   releasePreparedBackendSource,
 } from "./deploy-prepared-source.mjs";
 import { resolveImplicitProdEnvironment } from "./cloud-targets.mjs";
+import { checkExplicitProdAppTarget } from "./deploy-app-target.mjs";
 
 export function parseDeployArgs(deployArgs) {
   const parsed = {
@@ -438,6 +439,20 @@ export function createDeployCommand({
       prodApp: prodAppId,
     });
     const rootAppId = appId;
+    // Rollback resolves its own prod target below. Every other --prod --app <id> must name the prod app,
+    // checked before resolveEnvironmentDeployTarget would otherwise replace the explicit id with prodApp.
+    if (!parsed.isRollback && parsed.envTarget === "prod" && parsed.appId && prodAppId) {
+      if (
+        !checkExplicitProdAppTarget({
+          explicitAppId: parsed.appId,
+          prodApp: prodAppId,
+          errorImpl,
+          exitImpl,
+        })
+      ) {
+        return;
+      }
+    }
     appId = resolveEnvironmentDeployTarget({ appId, envTarget: parsed.envTarget, prodAppId });
     const backendProjectRoot = projectDir ?? projectRoot;
     const projectConfig = loadConfigImpl

package/lib/domain-command.mjs

@@ -1,4 +1,5 @@
 import { resolveCloudAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { BOLD, CYAN, DIM, GREEN, RESET, error, info, log, success, warn } from "./output.mjs";
 import { platformFetch, requireCreds } from "./platform-client.mjs";
 
@@ -128,8 +129,15 @@ export function createDomainCommand({
       missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
     });
     if (target.error) {
-      errorImpl(target.error);
-      return;
+      errorImpl(
+        cloudTargetRejectionMessage(target, {
+          fallbackMessage: target.error,
+          stage: "app target resolution",
+          changed: "nothing. No domain was connected or changed.",
+          next: `${prodRetryCommandLine({ command: "domain", args: domainArgs })}   (omit --app to target this project's prod app)`,
+        }),
+      );
+      return 1;
     }
     const { appId, envTarget } = target;
     const flags = parseDomainFlags(restArgs);

package/lib/env-command.mjs

@@ -7,6 +7,7 @@ import {
   resolveExplicitEnvFile,
 } from "./backend-env-resolver.mjs";
 import { resolveCloudAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine, redactConfigSetValue, redactEnvPairs } from "./deploy-app-target.mjs";
 import { BOLD, CYAN, DIM, GREEN, RESET, error, info, log, success, warn } from "./output.mjs";
 import { platformFetch, requireCreds } from "./platform-client.mjs";
 
@@ -248,8 +249,15 @@ export function createEnvCommand(deps = {}) {
       missingProdMessage: "No prod app yet. Run gencow deploy --prod first.",
     });
     if (target.error) {
-      error(target.error);
-      return;
+      error(
+        cloudTargetRejectionMessage(target, {
+          fallbackMessage: target.error,
+          stage: "env target resolution",
+          changed: "nothing. No env value was stored, changed, or read from the prod app.",
+          next: `${prodRetryCommandLine({ command: "env", args: filteredArgs, redactValues: redactEnvPairs })}   (omit --app to target this project's prod app)`,
+        }),
+      );
+      return 1;
     }
 
     const { appId, envTarget } = target;

package/lib/files-command.mjs

@@ -3,6 +3,7 @@ import { existsSync, readFileSync, readdirSync, statSync } from "fs";
 import { resolveProjectMetadataPath, resolveProjectSelection } from "./project-context.mjs";
 import { getAppUrl } from "./domain-helpers.mjs";
 import { describeProdTargetFailure, resolveProdAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { BOLD, CYAN, DIM, RESET, YELLOW, error, info, log, success, warn } from "./output.mjs";
 import { requireCreds } from "./platform-client.mjs";
 
@@ -149,18 +150,27 @@ export function createFilesCommand({
     const appId = resolveFilesAppId({ explicitAppId, gencowJson, isProd });
 
     if (isProd && !appId) {
+      const prodTarget = resolveProdAppTarget({ explicitAppId, prodApp: gencowJson?.prodApp || null });
       errorImpl(
-        describeProdTargetFailure(
-          resolveProdAppTarget({ explicitAppId, prodApp: gencowJson?.prodApp || null }),
-          "Prod app not found. Run 'gencow deploy' first to create a prod app.",
+        cloudTargetRejectionMessage(
+          { ...prodTarget, explicitAppId },
+          {
+            fallbackMessage: describeProdTargetFailure(
+              prodTarget,
+              "Prod app not found. Run 'gencow deploy' first to create a prod app.",
+            ),
+            stage: "files target resolution",
+            changed: "nothing. No file was uploaded, changed, or deleted.",
+            next: `${prodRetryCommandLine({ command: "files", args: filesArgs })}   (omit --app to target this project's prod app)`,
+          },
         ),
       );
-      return;
+      return 1;
     }
 
     if (!appId) {
       errorImpl("App not found. Run 'gencow dev' first.");
-      return;
+      return 1;
     }
 
     const MAX_FILE_SIZE = 50 * 1024 * 1024;

package/lib/jobs-command.mjs

@@ -1,5 +1,6 @@
 import { existsSync, readFileSync } from "fs";
 import { describeProdTargetFailure, resolveProdAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { resolveProjectMetadataPath, resolveProjectSelection } from "./project-context.mjs";
 import { parseDurationToMinutes } from "./domain-helpers.mjs";
 import { BOLD, CYAN, DIM, GREEN, RED, RESET, YELLOW, error, info, log, success, warn } from "./output.mjs";
@@ -692,12 +693,22 @@ export function createJobsCommand() {
     const appId = appTarget.appId;
 
     if (parsed.isProd && !appId) {
-      error(describeProdTargetFailure(appTarget, "No prod app yet. Run gencow deploy --prod first."));
-      return;
+      error(
+        cloudTargetRejectionMessage(
+          { ...appTarget, explicitAppId: parsed.appId },
+          {
+            fallbackMessage: describeProdTargetFailure(appTarget, "No prod app yet. Run gencow deploy --prod first."),
+            stage: "jobs target resolution",
+            changed: "nothing. No job was started, changed, or cancelled.",
+            next: `${prodRetryCommandLine({ command: "jobs", args: jobsArgs })}   (omit --app to target this project's prod app)`,
+          },
+        ),
+      );
+      return 1;
     }
     if (!appId) {
       error("App ID not found. Run gencow deploy first, or use --app <name>.");
-      return;
+      return 1;
     }
 
     const target = parsed.isProd ? ` ${YELLOW}(prod)${RESET}` : "";

package/lib/origins-command.mjs

@@ -1,4 +1,5 @@
 import { resolveCloudAppTarget } from "./cloud-targets.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import { loadConfig } from "./cli-project-runtime.mjs";
 import { BOLD, CYAN, DIM, GREEN, RESET, error, info, log, success } from "./output.mjs";
 import { platformFetch, requireCreds } from "./platform-client.mjs";
@@ -140,8 +141,15 @@ export function createOriginsCommand({
     });
 
     if (target.error) {
-      errorImpl(target.error);
-      return;
+      errorImpl(
+        cloudTargetRejectionMessage(target, {
+          fallbackMessage: target.error,
+          stage: "app target resolution",
+          changed: "nothing. No allowed origin was changed.",
+          next: `${prodRetryCommandLine({ command: "origins", args: originArgs })}   (omit --app to target this project's prod app)`,
+        }),
+      );
+      return 1;
     }
 
     const { appId, envTarget } = target;

package/lib/static-command.mjs

@@ -3,6 +3,7 @@ import { isAbsolute, resolve } from "path";
 
 import { readProjectDisplayName } from "./cli-project-runtime.mjs";
 import { formatCommandError } from "./cli-command-runner.mjs";
+import { cloudTargetRejectionMessage, prodRetryCommandLine } from "./deploy-app-target.mjs";
 import {
   describeProdTargetFailure,
   resolveImplicitProdEnvironment,
@@ -290,7 +291,20 @@ export function createStaticCommand(options = {}) {
       // An explicit --app must be this project's prod app; it is never silently replaced by the default.
       const prodTarget = resolveProdAppTarget({ explicitAppId: parsed.appId, prodApp: prodAppId });
       if (!prodTarget.appId) {
-        errorImpl(describeProdTargetFailure(prodTarget, "Prod app not found. Run 'gencow deploy' first to create a prod app."));
+        errorImpl(
+          cloudTargetRejectionMessage(
+            { ...prodTarget, explicitAppId: parsed.appId },
+            {
+              fallbackMessage: describeProdTargetFailure(
+                prodTarget,
+                "Prod app not found. Run 'gencow deploy' first to create a prod app.",
+              ),
+              stage: "static target resolution",
+              changed: "nothing. No files were uploaded and the serving state was not changed.",
+              next: `${prodRetryCommandLine({ command: "static", args: staticArgs })}   (omit --app to target this project's prod app)`,
+            },
+          ),
+        );
         exitImpl(1);
         return;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gencow",
-  "version": "0.1.263",
+  "version": "0.1.265",
   "description": "Gencow — AI Backend Engine",
   "type": "module",
   "bin": {
@@ -40,11 +40,11 @@
     "ai": "^6.0.314",
     "better-auth": "1.7.11",
     "postgres": "^3.4.9",
-    "@gencow/client": "0.2.8",
     "@gencow/react": "0.2.8",
-    "@gencow/core": "0.1.47",
+    "@gencow/server": "0.1.3",
     "@gencow/shared": "0.0.0",
-    "@gencow/server": "0.1.3"
+    "@gencow/client": "0.2.8",
+    "@gencow/core": "0.1.47"
   },
   "scripts": {
     "build": "node scripts/bundle-core.mjs && node scripts/bundle-shared.mjs && node scripts/bundle-server.mjs",