ninepm 0.52.0 → 0.53.0

package/dist/index.d.ts

@@ -114,7 +114,7 @@ export interface CreatedServiceToken {
     clientSecret: string;
 }
 export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-export declare const CLI_VERSION = "0.52.0";
+export declare const CLI_VERSION = "0.53.0";
 type CredentialBackend = "macos-keychain" | "windows-dpapi" | "linux-secret-service" | "file-plaintext" | "none";
 export interface StoredCredentialEntry {
     token: string;
@@ -192,8 +192,24 @@ export declare function defaultNextWranglerConfig(appName: string): string;
 export declare function isOpenNextInstalled(directory: string): boolean;
 export declare class DeployError extends Error {
     readonly slug: string | undefined;
-    constructor(message: string, slug: string | undefined);
+    readonly deliberate: boolean;
+    constructor(message: string, slug: string | undefined, deliberate?: boolean);
 }
+/**
+ * A refusal the platform MEANT — an operator paused deploys, a queue is full —
+ * as opposed to something going wrong.
+ *
+ * The distinction earns its keep in two places: the server-written message is
+ * the entire response and prints alone rather than inside the raw JSON envelope,
+ * and the "Stuck? Report it" prompt is suppressed. There is nothing to report
+ * about a pause somebody chose, and inviting a ticket for every blocked deploy
+ * generates precisely the support volume that announcing the pause was meant to
+ * prevent (#1061).
+ */
+export declare class DeliberateRefusalError extends Error {
+    constructor(message: string);
+}
+export declare function isDeliberateRefusal(error: unknown): boolean;
 export declare function deployDirectory(initialOptions: DeployOptions): Promise<DeployResult>;
 export type ApiReachability = "reachable" | "blocked";
 export declare function probeApiReachability(apiUrl: string, fetchFn: typeof fetch, timeoutMs?: number): Promise<ApiReachability>;

package/dist/index.js

@@ -14,7 +14,7 @@ import { MAX_DEPLOY_DESCRIPTION_LENGTH, normalizeDeployDescription } from "./dep
 import { MAX_STATIC_ASSET_FILE_BYTES, MAX_WORKER_ENTRY_COMPRESSED_BYTES, MAX_WORKER_SCRIPT_COMPRESSED_BYTES, WORKER_ENTRY_COMPRESSED_WARN_BYTES, assetFileTooLargeMessage, formatMebibytes, formatMegabytes, oversizedAssets, workerBundleNearLimitMessage, workerBundleTooLargeMessage, workerEntryNearLimitMessage, workerEntryTooLargeMessage, } from "./deploy-limits.js";
 import { buildFileManifest, readManifestFile } from "./manifest.js";
 import { API_KEY_HELP, API_URL_HELP, CLI_CLIENT_ID, DEFAULT_API_URL, reportCliError } from "./cli-config.js";
-export const CLI_VERSION = "0.52.0";
+export const CLI_VERSION = "0.53.0";
 const PUBLIC_DASHBOARD_URL = "https://9pm.ai/dashboard";
 const TOKEN_SERVICE = "9pm";
 const TOKEN_ACCOUNT = "default";
@@ -184,12 +184,59 @@ const DOCKERFILE_STATIC_HINT = "Found a Dockerfile but no runtime was selected,
 // slug (server-normalized to "my-app"), so the raw name would not resolve.
 export class DeployError extends Error {
     slug;
-    constructor(message, slug) {
+    // Whether the refusal underneath was a decision rather than a fault. Carried
+    // here because deployDirectory re-wraps everything it catches into a
+    // DeployError, which would otherwise erase the distinction before the command
+    // that needs it ever sees the error.
+    deliberate;
+    constructor(message, slug, deliberate = false) {
         super(message);
         this.name = "DeployError";
         this.slug = slug;
+        this.deliberate = deliberate;
     }
 }
+/**
+ * A refusal the platform MEANT — an operator paused deploys, a queue is full —
+ * as opposed to something going wrong.
+ *
+ * The distinction earns its keep in two places: the server-written message is
+ * the entire response and prints alone rather than inside the raw JSON envelope,
+ * and the "Stuck? Report it" prompt is suppressed. There is nothing to report
+ * about a pause somebody chose, and inviting a ticket for every blocked deploy
+ * generates precisely the support volume that announcing the pause was meant to
+ * prevent (#1061).
+ */
+export class DeliberateRefusalError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DeliberateRefusalError";
+    }
+}
+/**
+ * Error codes whose message is written for the person reading it, by someone who
+ * decided to refuse them.
+ *
+ * Deliberately an allowlist of CODES rather than a rule about status. 503 is also
+ * what a genuinely broken dependency returns, and 426 is a general
+ * protocol-upgrade status an intermediary can raise on its own — treating either
+ * as intentional on the strength of the number would hide a real fault behind a
+ * calm sentence, and drop the support prompt exactly when it is wanted. A code
+ * has to be added here on purpose.
+ *
+ * `cli_version_outdated` is the control plane's enforced CLI floor (#996). It had
+ * its own status-only branch here until #1061, which is the shape this comment
+ * warns against: any 426, from anywhere, was treated as the floor.
+ */
+const DELIBERATE_REFUSAL_CODES = new Set([
+    "deploys_frozen",
+    "cli_version_outdated",
+]);
+export function isDeliberateRefusal(error) {
+    if (error instanceof DeliberateRefusalError)
+        return true;
+    return error instanceof DeployError && error.deliberate;
+}
 // Shell-quote a value for a copy-pasteable command. Clean slugs pass through
 // unquoted; anything with shell-significant characters is single-quoted.
 function quoteSiteArg(value) {
@@ -231,7 +278,7 @@ export async function deployDirectory(initialOptions) {
         }
         if (error instanceof DeployError)
             throw error;
-        throw new DeployError(error instanceof Error ? error.message : String(error), slugHolder.slug);
+        throw new DeployError(error instanceof Error ? error.message : String(error), slugHolder.slug, isDeliberateRefusal(error));
     }
 }
 // Cheap unauthenticated probe of the control-plane API before a deploy. The
@@ -1954,15 +2001,32 @@ async function expectOk(response, action) {
     if (response.ok) {
         return;
     }
-    // 426 is the control plane's enforced CLI floor (#996): the server-written
-    // message IS the response — surface it alone rather than burying it in the
-    // raw envelope the generic path prints.
-    if (response.status === 426) {
-        throw new Error(await apiErrorMessage(response, action));
-    }
     const text = await response.text();
+    // A refusal somebody chose: print what they wrote, not the envelope it came
+    // in. Both the code and the message have to be there — an allowlisted code
+    // with no usable message falls through, so an empty reason can never turn
+    // into an empty error. The raw form still applies to everything else, so no
+    // detail is lost on the failures that genuinely are faults.
+    const envelope = parseErrorEnvelope(text);
+    const code = typeof envelope?.code === "string" ? envelope.code : "";
+    const message = typeof envelope?.message === "string" ? envelope.message.trim() : "";
+    if (code && message && DELIBERATE_REFUSAL_CODES.has(code)) {
+        throw new DeliberateRefusalError(message);
+    }
     throw new Error(`Failed to ${action}: ${response.status} ${text}`);
 }
+// Takes the already-consumed body text rather than the Response: a body can only
+// be read once, and expectOk needs the code and the message from the same read.
+function parseErrorEnvelope(text) {
+    try {
+        const parsed = JSON.parse(text);
+        return parsed.error ?? null;
+    }
+    catch {
+        // Not JSON (proxy error page, empty body).
+        return null;
+    }
+}
 // Advisory half of the control plane's CLI floor (#996): when a response says
 // this version is below the platform's recommended minimum, say so once per
 // invocation, on stderr so command output (including --json) stays parseable.
@@ -1991,15 +2055,9 @@ export function resetCliOutdatedAdvisoryForTests() {
 // expectOk's text when the body isn't that shape, so this can never lose detail.
 async function apiErrorMessage(response, action) {
     const text = await response.text();
-    try {
-        const parsed = JSON.parse(text);
-        const message = parsed.error?.message;
-        if (typeof message === "string" && message.trim()) {
-            return message.trim();
-        }
-    }
-    catch {
-        // Not JSON (proxy error page, empty body) — fall through to the raw form.
+    const message = parseErrorEnvelope(text)?.message;
+    if (typeof message === "string" && message.trim()) {
+        return message.trim();
     }
     return `Failed to ${action}: ${response.status} ${text}`;
 }
@@ -3840,9 +3898,16 @@ async function main() {
                 // exists) so `9pm support --site <slug>` resolves and /v1/me/support can
                 // attach the failed deploy's id/status/error. Bare form when no slug is
                 // known yet (failure before the project was created).
+                const base = error instanceof Error ? error.message : String(error);
+                // Nothing to report: the platform refused on purpose and said why.
+                // Pointing the reader at support here would send them to open a ticket
+                // about a decision we made, which is the opposite of what announcing it
+                // was for (#1061).
+                if (isDeliberateRefusal(error)) {
+                    throw new Error(base);
+                }
                 const slug = error instanceof DeployError ? error.slug : command.options.slug;
                 const siteFlag = slug ? ` --site ${quoteSiteArg(slug)}` : "";
-                const base = error instanceof Error ? error.message : String(error);
                 throw new Error(`${base}\n\nStuck? Report it with context: 9pm support${siteFlag} -m "<what happened>"`);
             }
             const databaseLine = result.database ? `database ${result.database.bindingName}:${result.database.name}` : "no database";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ninepm",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "description": "CLI for deploying built apps to 9pm.ai.",
   "homepage": "https://9pm.ai",
   "keywords": [