run402-mcp 1.69.2 → 1.69.3

package/README.md

@@ -182,7 +182,7 @@ run402 deploy resolve --project prj_123 --url https://example.com/events?utm=x#h
 run402 deploy resolve --project prj_123 --host example.com --path /events --method GET
 ```
 
-`deploy_diagnose_url` and `r.deploy.resolve({ project, url, method: "GET" })` return `would_serve`, `diagnostic_status`, `match`, normalized request data, warnings, full resolution JSON, and next steps. When returned, `asset_path`, `reachability_authority`, and `direct` explain which release asset backs the public URL and whether reachability came from implicit file-path mode, explicit `site.public_paths`, or a route-only static alias. Stable-host diagnostics may also include `authorization_result`, `cas_object` (`sha256`, `exists`, `expected_size`, `actual_size`), hostname-specific `response_variant`, and route/static fields such as `allow`, `route_pattern`, `target_type`, `target_name`, and `target_file`. Known `match` literals are `host_missing`, `manifest_missing`, `active_release_missing`, `path_error`, `none`, `static_exact`, `static_index`, `spa_fallback`, `spa_fallback_missing`, `route_function`, `route_static_alias`, and `route_method_miss`; preserve unknown future strings. Known `authorization_result` values include `authorized`, `not_public`, `not_applicable`, `manifest_missing`, `target_missing`, `active_release_missing`, `path_error`, `missing_cas_object`, `unfinalized_or_deleting_cas_object`, `size_mismatch`, and `unauthorized_cas_object`. `result` is the diagnostic body status, not the HTTP status of the SDK call, so host misses can still be successful CLI/MCP/SDK calls with `would_serve: false`. Do not treat resolve/diagnose as a fetch, cache purge, or cache-policy oracle; route method misses should inspect `allow`, and CAS authorization/health failures should inspect or redeploy the affected static asset. Branch on structured JSON fields such as `cache_class` and preserve unknown cache classes.
+`deploy_diagnose_url` and `r.deploy.resolve({ project, url, method: "GET" })` return `would_serve`, `diagnostic_status`, `match`, normalized request data, warnings, full resolution JSON, and next steps. When returned, `asset_path`, `reachability_authority`, and `direct` explain which release asset backs the public URL and whether reachability came from implicit file-path mode, explicit `site.public_paths`, or a route-only static alias. Stable-host diagnostics may also include `authorization_result`, `cas_object` (`sha256`, `exists`, `expected_size`, `actual_size`), hostname-specific `response_variant`, and route/static fields such as `allow`, `route_pattern`, `target_type`, `target_name`, and `target_file`. Known `match` literals are `host_missing`, `manifest_missing`, `active_release_missing`, `unsupported_manifest_version`, `path_error`, `none`, `static_exact`, `static_index`, `spa_fallback`, `spa_fallback_missing`, `route_function`, `route_static_alias`, and `route_method_miss`; preserve unknown future strings. Known `authorization_result` values include `authorized`, `not_public`, `not_applicable`, `manifest_missing`, `target_missing`, `active_release_missing`, `unsupported_manifest_version`, `path_error`, `missing_cas_object`, `unfinalized_or_deleting_cas_object`, `size_mismatch`, and `unauthorized_cas_object`. Known `fallback_state` values include `active_release_missing`, `unsupported_manifest_version`, and `negative_cache_hit`; preserve unknown future strings. `result` is the diagnostic body status, not the HTTP status of the SDK call, so host misses can still be successful CLI/MCP/SDK calls with `would_serve: false`. Do not treat resolve/diagnose as a fetch, cache purge, or cache-policy oracle; route method misses should inspect `allow`, and CAS authorization/health failures should inspect or redeploy the affected static asset. Branch on structured JSON fields such as `cache_class` and preserve unknown cache classes.
 
 Release observability exposes stable asset identity and public reachability. Inventories include `release_generation`, `static_manifest_sha256`, nullable `static_manifest_metadata` (`file_count`, `total_bytes`, `cache_classes`, `cache_class_sources`, `spa_fallback`), and `static_public_paths[]` when returned. `site.paths` lists release static assets; `static_public_paths[]` lists browser-visible public paths with `public_path`, `asset_path`, `reachability_authority`, `direct`, cache class, and content type. Plan and release diffs expose `static_assets` counters: unchanged/changed/added/removed, `newly_uploaded_cas_bytes`, `reused_cas_bytes`, `deployment_copy_bytes_eliminated`, `legacy_immutable_warnings`, `previous_immutable_failures`, and `cas_authorization_failures`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402-mcp",
-  "version": "1.69.2",
+  "version": "1.69.3",
   "description": "MCP server for Run402 — AI-native Postgres databases with REST API, auth, storage, and row-level security. Pay with x402 USDC micropayments.",
   "type": "module",
   "main": "dist/index.js",

package/sdk/README.md

@@ -272,7 +272,7 @@ const resumed = await r.deploy.resume("op_...");
   console.log(summary.would_serve, summary.match, request.ignored);
   ```
 
-  `r.deploy.resolve({ project, url, method })` and scoped `p.deploy.resolve({ url, method })` also accept lower-level `{ project, host, path?, method? }`. URL query strings/fragments are ignored for lookup and surfaced in `request.ignored`. When returned, `asset_path`, `reachability_authority`, and `direct` explain which release asset backs the public URL and whether reachability came from implicit file-path mode, explicit `site.public_paths`, or a route-only static alias. Stable-host diagnostics may also include `authorization_result`, `cas_object` (`sha256`, `exists`, `expected_size`, `actual_size`), hostname-specific `response_variant`, and route/static fields such as `allow`, `route_pattern`, `target_type`, `target_name`, and `target_file`. Current known `match` literals are `host_missing`, `manifest_missing`, `active_release_missing`, `path_error`, `none`, `static_exact`, `static_index`, `spa_fallback`, `spa_fallback_missing`, `route_function`, `route_static_alias`, and `route_method_miss`; preserve unknown future strings. Known `authorization_result` values include `authorized`, `not_public`, `not_applicable`, `manifest_missing`, `target_missing`, `active_release_missing`, `path_error`, `missing_cas_object`, `unfinalized_or_deleting_cas_object`, `size_mismatch`, and `unauthorized_cas_object`. `result` is diagnostic body status, not SDK HTTP transport status, so host misses can be successful calls with `would_serve: false`. Do not use resolve as a fetch, cache purge, or cache-policy oracle; branch on structured fields such as `cache_class`, `allow`, and `cas_object`, and preserve unknown cache classes.
+  `r.deploy.resolve({ project, url, method })` and scoped `p.deploy.resolve({ url, method })` also accept lower-level `{ project, host, path?, method? }`. URL query strings/fragments are ignored for lookup and surfaced in `request.ignored`. When returned, `asset_path`, `reachability_authority`, and `direct` explain which release asset backs the public URL and whether reachability came from implicit file-path mode, explicit `site.public_paths`, or a route-only static alias. Stable-host diagnostics may also include `authorization_result`, `cas_object` (`sha256`, `exists`, `expected_size`, `actual_size`), hostname-specific `response_variant`, and route/static fields such as `allow`, `route_pattern`, `target_type`, `target_name`, and `target_file`. Current known `match` literals are `host_missing`, `manifest_missing`, `active_release_missing`, `unsupported_manifest_version`, `path_error`, `none`, `static_exact`, `static_index`, `spa_fallback`, `spa_fallback_missing`, `route_function`, `route_static_alias`, and `route_method_miss`; preserve unknown future strings. Known `authorization_result` values include `authorized`, `not_public`, `not_applicable`, `manifest_missing`, `target_missing`, `active_release_missing`, `unsupported_manifest_version`, `path_error`, `missing_cas_object`, `unfinalized_or_deleting_cas_object`, `size_mismatch`, and `unauthorized_cas_object`. Known `fallback_state` values include `active_release_missing`, `unsupported_manifest_version`, and `negative_cache_hit`; preserve unknown future strings. `result` is diagnostic body status, not SDK HTTP transport status, so host misses can be successful calls with `would_serve: false`. Do not use resolve as a fetch, cache purge, or cache-policy oracle; branch on structured fields such as `cache_class`, `allow`, and `cas_object`, and preserve unknown cache classes.
 
   Route warning recovery:
 

package/sdk/dist/type-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type-contract.d.ts","sourceRoot":"","sources":["../src/type-contract.ts"],"names":[],"mappings":"AA0KA,OAAO,EAAE,CAAC"}
+{"version":3,"file":"type-contract.d.ts","sourceRoot":"","sources":["../src/type-contract.ts"],"names":[],"mappings":"AA0LA,OAAO,EAAE,CAAC"}

package/sdk/dist/type-contract.js

@@ -16,11 +16,19 @@ const _KnownRouteResolveLiteral = "route_function";
 const _KnownRouteStaticAliasResolveLiteral = "route_static_alias";
 const _KnownRouteMethodMissResolveLiteral = "route_method_miss";
 const _KnownActiveReleaseMissingResolveLiteral = "active_release_missing";
+const _KnownUnsupportedManifestResolveLiteral = "unsupported_manifest_version";
 const _FutureResolveMatch = "future_gateway_match";
 const _KnownResolveAuthorizationResult = "missing_cas_object";
+const _KnownUnsupportedManifestAuthorizationResult = "unsupported_manifest_version";
 const _FutureResolveAuthorizationResult = "future_authorization_result";
+const _KnownActiveReleaseMissingFallbackState = "active_release_missing";
+const _KnownUnsupportedManifestFallbackState = "unsupported_manifest_version";
+const _KnownNegativeCacheHitFallbackState = "negative_cache_hit";
+const _FutureResolveFallbackState = "future_fallback_state";
 // @ts-expect-error unknown literals are not part of the known authorization-result union
 const _NoUnknownKnownResolveAuthorizationResult = "future_authorization_result";
+// @ts-expect-error unknown literals are not part of the known fallback-state union
+const _NoUnknownKnownResolveFallbackState = "future_fallback_state";
 // @ts-expect-error implicit mode cannot carry a replace map
 const _NoImplicitPublicPathReplace = {
     mode: "implicit",
@@ -32,8 +40,14 @@ void _KnownRouteResolveLiteral;
 void _KnownRouteStaticAliasResolveLiteral;
 void _KnownRouteMethodMissResolveLiteral;
 void _KnownActiveReleaseMissingResolveLiteral;
+void _KnownUnsupportedManifestResolveLiteral;
 void _FutureResolveMatch;
 void _KnownResolveAuthorizationResult;
+void _KnownUnsupportedManifestAuthorizationResult;
 void _FutureResolveAuthorizationResult;
+void _KnownActiveReleaseMissingFallbackState;
+void _KnownUnsupportedManifestFallbackState;
+void _KnownNegativeCacheHitFallbackState;
+void _FutureResolveFallbackState;
 export {};
 //# sourceMappingURL=type-contract.js.map

package/sdk/dist/type-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"type-contract.js","sourceRoot":"","sources":["../src/type-contract.ts"],"names":[],"mappings":"AAoHA,MAAM,wBAAwB,GAAyB;IACrD,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;CACtE,CAAC;AACF,MAAM,uBAAuB,GAAyB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC3E,MAAM,mBAAmB,GAAwB;IAC/C,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE;CAChD,CAAC;AACF,KAAK,wBAAwB,CAAC;AAC9B,KAAK,uBAAuB,CAAC;AAC7B,KAAK,mBAAmB,CAAC;AACzB,KAAM,IAA2C,CAAC;AAClD,KAAM,IAA8C,CAAC;AACrD,KAAM,IAAgD,CAAC;AAgBvD,MAAM,yBAAyB,GAA4B,gBAAgB,CAAC;AAC5E,MAAM,oCAAoC,GAA4B,oBAAoB,CAAC;AAC3F,MAAM,mCAAmC,GAA4B,mBAAmB,CAAC;AACzF,MAAM,wCAAwC,GAA4B,wBAAwB,CAAC;AACnG,MAAM,mBAAmB,GAAuB,sBAAsB,CAAC;AACvE,MAAM,gCAAgC,GAA0C,oBAAoB,CAAC;AACrG,MAAM,iCAAiC,GAAqC,6BAA6B,CAAC;AAC1G,yFAAyF;AACzF,MAAM,yCAAyC,GAA0C,6BAA6B,CAAC;AACvH,4DAA4D;AAC5D,MAAM,4BAA4B,GAAwB;IACxD,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;CACjD,CAAC;AAEF,KAAM,IAA0C,CAAC;AACjD,KAAM,IAAsC,CAAC;AAC7C,KAAK,yBAAyB,CAAC;AAC/B,KAAK,oCAAoC,CAAC;AAC1C,KAAK,mCAAmC,CAAC;AACzC,KAAK,wCAAwC,CAAC;AAC9C,KAAK,mBAAmB,CAAC;AACzB,KAAK,gCAAgC,CAAC;AACtC,KAAK,iCAAiC,CAAC"}
+{"version":3,"file":"type-contract.js","sourceRoot":"","sources":["../src/type-contract.ts"],"names":[],"mappings":"AAsHA,MAAM,wBAAwB,GAAyB;IACrD,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;CACtE,CAAC;AACF,MAAM,uBAAuB,GAAyB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC3E,MAAM,mBAAmB,GAAwB;IAC/C,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE;CAChD,CAAC;AACF,KAAK,wBAAwB,CAAC;AAC9B,KAAK,uBAAuB,CAAC;AAC7B,KAAK,mBAAmB,CAAC;AACzB,KAAM,IAA2C,CAAC;AAClD,KAAM,IAA8C,CAAC;AACrD,KAAM,IAAgD,CAAC;AAgBvD,MAAM,yBAAyB,GAA4B,gBAAgB,CAAC;AAC5E,MAAM,oCAAoC,GAA4B,oBAAoB,CAAC;AAC3F,MAAM,mCAAmC,GAA4B,mBAAmB,CAAC;AACzF,MAAM,wCAAwC,GAA4B,wBAAwB,CAAC;AACnG,MAAM,uCAAuC,GAA4B,8BAA8B,CAAC;AACxG,MAAM,mBAAmB,GAAuB,sBAAsB,CAAC;AACvE,MAAM,gCAAgC,GAA0C,oBAAoB,CAAC;AACrG,MAAM,4CAA4C,GAA0C,8BAA8B,CAAC;AAC3H,MAAM,iCAAiC,GAAqC,6BAA6B,CAAC;AAC1G,MAAM,uCAAuC,GAAoC,wBAAwB,CAAC;AAC1G,MAAM,sCAAsC,GAAoC,8BAA8B,CAAC;AAC/G,MAAM,mCAAmC,GAAoC,oBAAoB,CAAC;AAClG,MAAM,2BAA2B,GAA+B,uBAAuB,CAAC;AACxF,yFAAyF;AACzF,MAAM,yCAAyC,GAA0C,6BAA6B,CAAC;AACvH,mFAAmF;AACnF,MAAM,mCAAmC,GAAoC,uBAAuB,CAAC;AACrG,4DAA4D;AAC5D,MAAM,4BAA4B,GAAwB;IACxD,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;CACjD,CAAC;AAEF,KAAM,IAA0C,CAAC;AACjD,KAAM,IAAsC,CAAC;AAC7C,KAAK,yBAAyB,CAAC;AAC/B,KAAK,oCAAoC,CAAC;AAC1C,KAAK,mCAAmC,CAAC;AACzC,KAAK,wCAAwC,CAAC;AAC9C,KAAK,uCAAuC,CAAC;AAC7C,KAAK,mBAAmB,CAAC;AACzB,KAAK,gCAAgC,CAAC;AACtC,KAAK,4CAA4C,CAAC;AAClD,KAAK,iCAAiC,CAAC;AACvC,KAAK,uCAAuC,CAAC;AAC7C,KAAK,sCAAsC,CAAC;AAC5C,KAAK,mCAAmC,CAAC;AACzC,KAAK,2BAA2B,CAAC"}