ninepm 0.32.0 → 0.34.0

package/dist/index.d.ts

@@ -11,6 +11,7 @@ export interface DeployOptions {
     environment?: string;
     withDatabase?: boolean;
     withAuth?: boolean;
+    withEmail?: boolean;
     databaseName?: string;
     bindingName?: string;
     runtime?: AppRuntime;
@@ -112,7 +113,7 @@ export interface CreatedServiceToken {
     clientSecret: string;
 }
 export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-export declare const CLI_VERSION = "0.32.0";
+export declare const CLI_VERSION = "0.34.0";
 type CredentialBackend = "macos-keychain" | "windows-dpapi" | "linux-secret-service" | "file-plaintext" | "none";
 export interface CredentialDiagnostics {
     platform: NodeJS.Platform;
@@ -183,6 +184,9 @@ export declare class DeployError extends Error {
     constructor(message: string, slug: string | undefined);
 }
 export declare function deployDirectory(initialOptions: DeployOptions): Promise<DeployResult>;
+export type ApiReachability = "reachable" | "blocked";
+export declare function probeApiReachability(apiUrl: string, fetchFn: typeof fetch, timeoutMs?: number): Promise<ApiReachability>;
+export declare function apiUnreachableGuidance(apiUrl: string): string;
 export declare function checkDeployDirectory(options: DeployOptions): Promise<DeployCheckResult>;
 export declare function whoami(options: ApiOptions): Promise<WhoamiResult>;
 export declare function publicWhoamiResult(result: WhoamiResult): PublicWhoamiResult;

package/dist/index.js

@@ -12,7 +12,7 @@ import { MAX_DEPLOY_DESCRIPTION_LENGTH, normalizeDeployDescription } from "./dep
 import { assetFileTooLargeMessage, oversizedAssets } from "./deploy-limits.js";
 import { buildFileManifest, readManifestFile } from "./manifest.js";
 import { API_KEY_HELP, API_URL_HELP, CLI_CLIENT_ID, DEFAULT_API_URL, reportCliError } from "./cli-config.js";
-export const CLI_VERSION = "0.32.0";
+export const CLI_VERSION = "0.34.0";
 const PUBLIC_DASHBOARD_URL = "https://9pm.ai/dashboard";
 const TOKEN_SERVICE = "9pm";
 const TOKEN_ACCOUNT = "default";
@@ -229,6 +229,44 @@ export async function deployDirectory(initialOptions) {
         throw new DeployError(error instanceof Error ? error.message : String(error), slugHolder.slug);
     }
 }
+// Cheap unauthenticated probe of the control-plane API before a deploy. The
+// sandbox egress proxy blocks at CONNECT, so ANY HTTP response (even a 5xx)
+// proves the host is reachable — only a thrown/aborted request signals a block.
+// A tight timeout keeps the reachable path fast and the blocked path from
+// hanging.
+export async function probeApiReachability(apiUrl, fetchFn, 
+// Comfortably above /health tail latency so a slow-but-reachable link isn't
+// aborted and misread as blocked; the reachable path returns well under this.
+timeoutMs = 5000) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        await fetchFn(`${apiUrl}/health`, { method: "GET", signal: controller.signal });
+        return "reachable";
+    }
+    catch {
+        return "blocked";
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+// Actionable message when the API host can't be reached — the two fixes for a
+// default ("Trusted") sandbox, matching the #258 byte-channel design.
+export function apiUnreachableGuidance(apiUrl) {
+    let host = apiUrl;
+    try {
+        host = new URL(apiUrl).host;
+    }
+    catch {
+        // keep the raw value if it isn't a full URL
+    }
+    return (`Can't reach ${host}. Most often a default ("Trusted") cloud sandbox is blocking the host, ` +
+        `but it can also be a transient network issue or a ${host} outage (check status if the fixes below don't help). ` +
+        `If it's the sandbox, fix it either way:\n` +
+        `  1. Add ${host} to your environment's Allowed domains (switch network access to Custom), then re-run.\n` +
+        `  2. Or deploy through the 9pm MCP connector — your agent can enable it and deploy with the 9pm tools, no network change needed.`);
+}
 async function runDeploy(initialOptions, slugHolder) {
     const options = prepareFrameworkDeploy(initialOptions);
     // #374: enrich network-level fetch rejections (EPIPE, header timeouts, …)
@@ -259,6 +297,9 @@ async function runDeploy(initialOptions, slugHolder) {
             if (options.withAuth) {
                 await enableEndUserAuth(fetchFn, apiUrl, options.token, project.id);
             }
+            if (options.withEmail) {
+                await enableAppEmail(fetchFn, apiUrl, options.token, project.id);
+            }
             const created = await createDeployment(fetchFn, apiUrl, options.token, project.id, {
                 files: [],
                 environment: options.environment ?? "production",
@@ -385,6 +426,9 @@ async function runDeploy(initialOptions, slugHolder) {
     if (options.withAuth) {
         await enableEndUserAuth(fetchFn, apiUrl, options.token, project.id);
     }
+    if (options.withEmail) {
+        await enableAppEmail(fetchFn, apiUrl, options.token, project.id);
+    }
     const created = await createDeployment(fetchFn, apiUrl, options.token, project.id, {
         files: manifest,
         environment: options.environment ?? "production",
@@ -835,6 +879,14 @@ async function enableEndUserAuth(fetchFn, apiUrl, token, projectId) {
     });
     await expectJson(response, "enable end-user auth");
 }
+async function enableAppEmail(fetchFn, apiUrl, token, projectId) {
+    const response = await fetchFn(`${apiUrl}/v1/sites/${encodeURIComponent(projectId)}/email/enable`, {
+        method: "POST",
+        headers: jsonHeaders(token),
+        body: "{}",
+    });
+    await expectJson(response, "enable app email");
+}
 async function createDeployment(fetchFn, apiUrl, token, projectId, body) {
     const response = await fetchFn(`${apiUrl}/v1/sites/${encodeURIComponent(projectId)}/deployments`, {
         method: "POST",
@@ -1323,6 +1375,8 @@ const VALID_DEPLOY_FLAGS = new Set([
     "db",
     "with-auth",
     "auth",
+    "with-email",
+    "email",
     "name",
     "slug",
     "description",
@@ -1442,9 +1496,12 @@ export function parseArgs(argv) {
         directory,
         apiUrl: readApiUrl(flags, DEFAULT_API_URL),
         token: token ?? "",
-        // --with-auth implies a managed database (somewhere to store per-user data).
-        withDatabase: flags.has("with-db") || flags.has("db") || flags.has("with-auth") || flags.has("auth"),
-        withAuth: flags.has("with-auth") || flags.has("auth"),
+        // --with-auth implies a managed database (somewhere to store per-user data);
+        // --with-email implies --with-auth (invitations need managed accounts), so it
+        // pulls in the database too.
+        withDatabase: flags.has("with-db") || flags.has("db") || flags.has("with-auth") || flags.has("auth") || flags.has("with-email") || flags.has("email"),
+        withAuth: flags.has("with-auth") || flags.has("auth") || flags.has("with-email") || flags.has("email"),
+        withEmail: flags.has("with-email") || flags.has("email"),
         check,
     };
     const name = readStringFlag(flags, "name");
@@ -2549,6 +2606,16 @@ async function main() {
                 }
                 return;
             }
+            // Fail fast with actionable guidance when the API host is unreachable — a
+            // default ("Trusted") cloud sandbox blocks it at CONNECT, and the deploy
+            // would otherwise hang/error cryptically on the first request (#83/#258).
+            // Real invocations only; a programmatic caller injecting fetchFn opts out.
+            if (!command.options.fetchFn &&
+                (await probeApiReachability(normalizeApiUrl(command.options.apiUrl), fetch)) === "blocked") {
+                console.error(apiUnreachableGuidance(command.options.apiUrl));
+                process.exitCode = 1;
+                return;
+            }
             let result;
             try {
                 result = await deployDirectory(command.options);
@@ -2829,7 +2896,7 @@ async function runFilesCommand(command) {
 function printUsage() {
     console.log(`Usage:
   9pm --version
-  9pm deploy [directory] --name <site-name> [--slug <slug>] [--description "<note>"] [--with-db] [--with-auth]
+  9pm deploy [directory] --name <site-name> [--slug <slug>] [--description "<note>"] [--with-db] [--with-auth] [--with-email]
   9pm deploy [directory] --runtime worker --entry src/index.js [--with-db]
   9pm deploy [directory] --runtime container --port 8080 [--health-path /health] [--region auto] [--with-db] [--always-on] [--volume <gb> | --no-volume] [--cpus <n>] [--memory <size>]
   9pm deploy [directory]                   framework projects (Next.js, Vite) are detected and built automatically; --no-build skips
@@ -2877,6 +2944,7 @@ Container deploys:
   The app must listen on 0.0.0.0:$PORT or the selected --port. Use --health-path for a cheap readiness endpoint.
   With --with-db, containers receive NINEPM_SQL_URL and NINEPM_DB_BINDINGS for the managed SQL bridge.
   With --with-auth, the app gets 9pm-managed end-user accounts (email one-time codes); it implies --with-db and is one-way (enable-only).
+  With --with-email, a signed-in end user can send app invitation emails; it implies --with-auth and works on public apps only.
   9pm env set <app> KEY=value [KEY2=value2 ...] [--var]   (secret by default; --var = readable config)
   9pm env set <app> --from-file <path> [--var]            (KEY=value lines; # comments, export prefix, quotes ok)
   9pm env set <app> <NAME> --stdin [--var]                (value read verbatim from stdin)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ninepm",
-  "version": "0.32.0",
+  "version": "0.34.0",
   "description": "CLI for deploying built apps to 9pm.ai.",
   "homepage": "https://9pm.ai",
   "keywords": [