run402 2.17.0 → 2.19.0

package/lib/deploy-v2.mjs

@@ -40,6 +40,7 @@ const APPLY_HELP = `run402 deploy apply — Unified deploy primitive (v1.34+)
 Usage:
   run402 deploy apply --manifest <path> [--project <id>] [--quiet|--final-only] [--allow-warning <code>] [--allow-warnings]
   run402 deploy apply --spec '<json>' [--project <id>] [--quiet|--final-only] [--allow-warning <code>] [--allow-warnings]
+  run402 deploy apply --dir <build-output> [--manifest <path>] [--project <id>]
   cat spec.json | run402 deploy apply [--project <id>]
 
 Manifest format mirrors the MCP \`deploy\` tool's ReleaseSpec:
@@ -79,6 +80,12 @@ Complete static site + function + route manifest:
 Options:
   --manifest <path>       Read the spec from this JSON file
   --spec '<json>'         Inline JSON spec (single-quote in shell)
+  --dir <path>            Read \`dist/run402/adapter.json\` from this directory and
+                          merge the Astro release slice (site + functions + routes)
+                          into the spec. Combine with --manifest to declare
+                          database/secrets/subdomains/i18n in the manifest while
+                          the slice carries the build output. Requires
+                          @run402/astro installed in the project.
   --project <id>          Override project_id from the manifest
   --quiet                 Suppress per-event JSON-line stderr (final result still on stdout)
   --final-only            Alias for --quiet; final success/error envelope is still preserved
@@ -260,6 +267,7 @@ exit 0; inspect would_serve and diagnostic_status in the result payload.
 
 export async function runDeployV2(sub, args) {
   if (sub === "apply") return await applyCmd(args);
+  if (sub === "promote") return await promoteCmd(args);
   if (sub === "resume") return await resumeCmd(args);
   if (sub === "list") return await listCmd(args);
   if (sub === "events") return await eventsCmd(args);
@@ -273,6 +281,189 @@ export async function runDeployV2(sub, args) {
   });
 }
 
+const PROMOTE_HELP = `run402 deploy promote — Operator pointer-swap recovery (v1.58+)
+
+Usage:
+  run402 deploy promote <release-id> [--project <id>] [--allow-warning <code>] [--allow-warnings] [--quiet]
+
+Re-points the project's live release at an existing release row without
+re-running the apply pipeline. Designed for "oops on a real project ID"
+recovery — when an apply shipped content the operator regrets, promote
+back to the prior release in seconds instead of re-deploying.
+
+Promotable statuses: ready, active, superseded. Releases with status
+'failed' or 'staging' are rejected (they never fully landed).
+
+Surfaces structured warnings:
+
+  MIGRATIONS_NOT_REVERSIBLE (requires_confirmation: true)
+    The target release predates migrations applied since. Those
+    migrations remain applied — the post-promote release runs against
+    the current schema. Ack with --allow-warning MIGRATIONS_NOT_REVERSIBLE.
+
+  FUNCTION_VERSION_MISMATCH (informational, no ack needed)
+    Overlapping function names have different code_hashes. The Lambda
+    code is whatever's currently $LATEST.
+
+Worked example: recover from a destructive apply
+
+  # rel_old (good)  →  rel_new (bad, destructive)  →  promote back
+  run402 deploy promote rel_old_abc123 --project prj_xyz \\
+    --allow-warning MIGRATIONS_NOT_REVERSIBLE
+
+Options:
+  <release-id>            Required positional. The release to promote to.
+                          Format: rel_*
+  --project <id>          Project id. Falls back to active project, then
+                          RUN402_PROJECT_ID env var.
+  --allow-warning <code>  Acknowledge a specific blocking warning
+                          (repeatable).
+  --allow-warnings        Acknowledge ALL blocking promote warnings.
+                          Use this for full recovery mode when you've
+                          already inspected the diff.
+  --quiet | --final-only  Suppress per-event stderr; only print the
+                          final JSON envelope on stdout.
+
+Output:
+  stdout: {
+    "status": "ok",
+    "release_id": "rel_old_abc123",
+    "operation_id": "op_...",
+    "previous_release_id": "rel_new_xxx",
+    "diff": { "functions": {...}, "migrations": {...}, "site_paths": {...} },
+    "warnings": [...]
+  }
+
+  Errors map to structured envelopes with codes:
+    PROMOTE_TARGET_NOT_FOUND        404 — release id doesn't exist
+    PROMOTE_PROJECT_MISMATCH        400 — release belongs to another project
+    PROMOTE_RELEASE_NOT_READY       409 — release status not promotable
+    PROMOTE_NO_OP                   409 — target = current live (use
+                                          cache.invalidateAll instead)
+    PROMOTE_WARNING_REQUIRES_ACK    409 — at least one blocking warning
+                                          unacked; details list codes`;
+
+function parsePromoteArgs(args) {
+  const opts = {
+    releaseId: null,
+    project: null,
+    allowWarnings: false,
+    allowWarningCodes: [],
+    quiet: false,
+  };
+  const allowedFlags = [
+    "--project",
+    "--allow-warning",
+    "--allow-warnings",
+    "--quiet",
+    "--final-only",
+    "--help",
+    "-h",
+  ];
+
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--help" || arg === "-h") {
+      console.log(PROMOTE_HELP);
+      process.exit(0);
+    }
+    if (arg === "--project" || arg === "--allow-warning") {
+      const value = args[i + 1];
+      if (value === undefined || (typeof value === "string" && value.startsWith("--"))) {
+        fail({
+          code: "BAD_USAGE",
+          message: `${arg} requires a value`,
+          details: { flag: arg },
+        });
+      }
+      if (arg === "--project") {
+        opts.project = value;
+      } else {
+        opts.allowWarningCodes.push(value);
+      }
+      i += 1;
+      continue;
+    }
+    if (arg === "--quiet" || arg === "--final-only") {
+      opts.quiet = true;
+      continue;
+    }
+    if (arg === "--allow-warnings") {
+      opts.allowWarnings = true;
+      continue;
+    }
+    if (typeof arg === "string" && arg.startsWith("-")) {
+      fail({
+        code: "BAD_USAGE",
+        message: `Unknown flag for deploy promote: ${arg}`,
+        details: { flag: arg, allowed_flags: allowedFlags },
+      });
+    }
+    // Positional: the release id
+    if (opts.releaseId !== null) {
+      fail({
+        code: "BAD_USAGE",
+        message: `Unexpected positional argument for deploy promote: ${arg}`,
+        details: { argument: arg, already_have: opts.releaseId },
+      });
+    }
+    opts.releaseId = arg;
+  }
+
+  if (opts.releaseId === null) {
+    fail({
+      code: "BAD_USAGE",
+      message: "deploy promote requires a release id (positional argument)",
+      details: { example: "run402 deploy promote rel_abc123" },
+    });
+  }
+  if (typeof opts.releaseId !== "string" || !opts.releaseId.startsWith("rel_")) {
+    fail({
+      code: "BAD_USAGE",
+      message: `Invalid release id: '${opts.releaseId}' (expected rel_*)`,
+      details: { release_id: opts.releaseId },
+    });
+  }
+
+  return opts;
+}
+
+async function promoteCmd(args) {
+  const opts = parsePromoteArgs(args);
+  const projectId = opts.project ?? resolveProjectId(null);
+
+  // Preserve the aggressive early-exit when no allowance is configured
+  // — same as apply.
+  allowanceAuthHeaders("/apply/v1/releases");
+
+  try {
+    // Call the engine directly (matches the pattern used by apply / resume
+    // in this file). The `r.project(id).apply.promote` hero exists for
+    // direct-SDK consumers; the CLI's `getSdk()` returns the unwrapped
+    // Run402 instance whose `project()` method is async, so going through
+    // the hero here would require an extra `await`.
+    const result = await getSdk()._applyEngine.promote(projectId, opts.releaseId, {
+      allowWarnings: opts.allowWarnings,
+      allowWarningCodes: opts.allowWarningCodes,
+    });
+    if (!opts.quiet) {
+      // Emit a single structured stderr event so observers can pick it up
+      // alongside the regular deploy event stream. Promote is a one-shot
+      // operation; there are no intermediate phase events.
+      console.error(JSON.stringify({
+        type: "promote.committed",
+        release_id: result.release_id,
+        previous_release_id: result.previous_release_id,
+        operation_id: result.operation_id,
+        warnings: result.warnings,
+      }));
+    }
+    console.log(JSON.stringify(result, null, 2));
+  } catch (err) {
+    reportSdkError(err);
+  }
+}
+
 async function readStdin() {
   const chunks = [];
   for await (const chunk of process.stdin) chunks.push(chunk);
@@ -296,8 +487,8 @@ function makeStderrEventWriter(quiet) {
 }
 
 function parseApplyArgs(args) {
-  const opts = { manifest: null, spec: null, project: null, quiet: false, allowWarnings: false, allowWarningCodes: [] };
-  const allowedFlags = ["--manifest", "--spec", "--project", "--quiet", "--final-only", "--allow-warning", "--allow-warnings", "--help", "-h"];
+  const opts = { manifest: null, spec: null, dir: null, project: null, quiet: false, allowWarnings: false, allowWarningCodes: [] };
+  const allowedFlags = ["--manifest", "--spec", "--dir", "--project", "--quiet", "--final-only", "--allow-warning", "--allow-warnings", "--help", "-h"];
 
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
@@ -305,7 +496,7 @@ function parseApplyArgs(args) {
       console.log(APPLY_HELP);
       process.exit(0);
     }
-    if (arg === "--manifest" || arg === "--spec" || arg === "--project" || arg === "--allow-warning") {
+    if (arg === "--manifest" || arg === "--spec" || arg === "--dir" || arg === "--project" || arg === "--allow-warning") {
       const value = args[i + 1];
       if (value === undefined || (typeof value === "string" && value.startsWith("--"))) {
         fail({
@@ -332,6 +523,15 @@ function parseApplyArgs(args) {
           });
         }
         opts.spec = value;
+      } else if (arg === "--dir") {
+        if (opts.dir !== null) {
+          fail({
+            code: "BAD_USAGE",
+            message: "--dir may only be provided once",
+            details: { flag: "--dir" },
+          });
+        }
+        opts.dir = value;
       } else if (arg === "--project") {
         opts.project = value;
       } else {
@@ -362,9 +562,63 @@ function parseApplyArgs(args) {
 function applySourceField(opts) {
   if (opts.manifest !== null) return "manifest";
   if (opts.spec !== null) return "spec";
+  if (opts.dir !== null && !hasStdinSource()) return "dir";
   return "stdin";
 }
 
+async function mergeAstroReleaseSlice(spec, dirArg) {
+  let buildAstroReleaseSlice;
+  try {
+    ({ buildAstroReleaseSlice } = await import("@run402/astro/release-slice"));
+  } catch (err) {
+    fail({
+      code: "BAD_USAGE",
+      message:
+        "--dir requires @run402/astro to be installed in this project. Add it as a dependency (e.g., `npm install -D @run402/astro`).",
+      details: { flag: "--dir", import_error: err?.message ?? String(err) },
+    });
+  }
+
+  const distDirAbs = isAbsolute(dirArg) ? dirArg : resolve(process.cwd(), dirArg);
+
+  let slice;
+  try {
+    slice = await buildAstroReleaseSlice(distDirAbs);
+  } catch (err) {
+    if (err && typeof err === "object" && typeof err.code === "string" &&
+      err.code.startsWith("R402_ASTRO_ADAPTER_MANIFEST_")) {
+      fail({
+        code: err.code,
+        message: err.message,
+        hint: err.suggestedFix,
+        docs: err.docs,
+        details: {
+          flag: "--dir",
+          dir: distDirAbs,
+          file: err.file,
+          ...(err.observedVersion ? { observed_version: err.observedVersion } : {}),
+        },
+      });
+    }
+    throw err;
+  }
+
+  // Slice owns site/functions/routes. The caller's manifest can declare
+  // cross-cutting slices (database, secrets, i18n, subdomains) that the
+  // slice doesn't touch. On collision in `functions.replace`, the slice
+  // wins for its own function name; the caller's other functions are
+  // preserved. `site` and `routes` are whole-resource replacements — slice
+  // wins entirely on those.
+  spec.site = slice.site;
+  spec.routes = slice.routes;
+  const sliceFns = slice.functions?.replace ?? {};
+  const existingFns =
+    spec.functions && typeof spec.functions === "object" && spec.functions.replace
+      ? spec.functions.replace
+      : {};
+  spec.functions = { replace: { ...existingFns, ...sliceFns } };
+}
+
 function validateApplySources(opts) {
   const sources = [];
   if (opts.manifest !== null) sources.push("--manifest");
@@ -398,6 +652,10 @@ async function applyCmd(args) {
         details: { flag: "--manifest", path: opts.manifest },
       });
     }
+  } else if (opts.dir !== null && !hasStdinSource()) {
+    // --dir without any other source: start from an empty spec and let the
+    // Astro release-slice fill in site/functions/routes below.
+    raw = "{}";
   } else {
     raw = await readStdin();
   }
@@ -417,6 +675,10 @@ async function applyCmd(args) {
     ...(manifestPath ? { path: manifestPath } : {}),
   });
 
+  if (opts.dir !== null) {
+    await mergeAstroReleaseSlice(spec, opts.dir);
+  }
+
   // GH-232: Reject empty specs client-side. Without this guard,
   // `run402 deploy apply --spec '{}'` (and `--manifest <empty>`) would silently
   // send an empty ReleaseSpec to /apply/v1/plans with no signal that nothing

package/lib/deploy.mjs

@@ -49,6 +49,7 @@ export async function run(args) {
 
   switch (sub) {
     case "apply":
+    case "promote":
     case "resume":
     case "list":
     case "events":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "2.17.0",
+  "version": "2.19.0",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {

package/sdk/dist/namespaces/deploy.d.ts

@@ -19,7 +19,7 @@
  * behavior; this file is the implementation.
  */
 import type { Client } from "../kernel.js";
-import type { ApplyOptions, ActiveReleaseInventory, DeployEvent, DeployEventsResponse, DeployListOptions, DeployListResponse, DeployOperation, DeployResult, DeployResolveOptions, DeployResolveResponse, OperationSnapshot, PlanResponse, ReleaseDiffOptions, ReleaseInventory, ReleaseInventoryByIdOptions, ReleaseInventoryOptions, ReleaseSpec, ReleaseToReleaseDiff, StartOptions } from "./deploy.types.js";
+import type { ApplyOptions, ActiveReleaseInventory, DeployEvent, DeployEventsResponse, DeployListOptions, DeployListResponse, DeployOperation, DeployResult, DeployResolveOptions, DeployResolveResponse, OperationSnapshot, PlanResponse, PromoteOptions, PromoteResult, ReleaseDiffOptions, ReleaseInventory, ReleaseInventoryByIdOptions, ReleaseInventoryOptions, ReleaseSpec, ReleaseToReleaseDiff, StartOptions } from "./deploy.types.js";
 export declare class Deploy {
     private readonly client;
     constructor(client: Client);
@@ -82,6 +82,35 @@ export declare class Deploy {
         onEvent?: (event: DeployEvent) => void;
         project?: string;
     }): Promise<DeployResult>;
+    /**
+     * Promote an existing release to be the project's current live release —
+     * a pointer swap on `internal.projects.live_release_id` without re-running
+     * the apply pipeline. Designed for operator recovery from a destructive
+     * apply ("oops on a real project ID"). The prior release's bytes,
+     * functions, and migrations remain persisted; this just routes traffic
+     * back to them.
+     *
+     * Surfaces structured warnings via the result envelope:
+     *
+     *   - `MIGRATIONS_NOT_REVERSIBLE` (requires_confirmation: true) when the
+     *     target release predates migrations applied since. The migrations
+     *     remain applied; the new live release runs against the current
+     *     schema. Ack via `opts.allowWarningCodes`.
+     *
+     *   - `FUNCTION_VERSION_MISMATCH` (informational) when overlapping
+     *     function names have different code_hashes. The Lambda code is
+     *     whatever's currently $LATEST.
+     *
+     * Rejected cases:
+     *   - `PROMOTE_TARGET_NOT_FOUND` — releaseId doesn't exist
+     *   - `PROMOTE_PROJECT_MISMATCH` — releaseId belongs to a different project
+     *   - `PROMOTE_RELEASE_NOT_READY` — release status isn't promotable
+     *   - `PROMOTE_NO_OP` — releaseId IS already the project's current live
+     *   - `PROMOTE_WARNING_REQUIRES_ACK` — at least one blocking warning unacked
+     *
+     * Capability: unified-deploy (v1.58+, release-promote).
+     */
+    promote(project: string, releaseId: string, opts?: PromoteOptions): Promise<PromoteResult>;
     /**
      * Snapshot a deploy operation. The endpoint requires `apikey` auth, so
      * pass the project that owns the operation. (When omitted, the request

package/sdk/dist/namespaces/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/namespaces/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAiB3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EAQtB,WAAW,EACX,oBAAoB,EAEpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EAarB,iBAAiB,EAGjB,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAqE3B,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA4C9E;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3E;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACvD,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC;IAIxE;;;;;OAKG;IACG,MAAM,CACV,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;KACxC,GACA,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QACJ,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;KACb,GACL,OAAO,CAAC,YAAY,CAAC;IAMxB;;;;;;;;;OASG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACtE,OAAO,CAAC,YAAY,CAAC;IAqBxB;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAmB7B;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;;;;;OAQG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAmBhC;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2B9E;;;;OAIG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAqBlC;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BnE;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAW1E;AA65CD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iEAG6D;IAC7D,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;CACvC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/namespaces/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAiB3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EAQtB,WAAW,EACX,oBAAoB,EAEpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EAarB,iBAAiB,EAGjB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAqE3B,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA4C9E;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3E;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACvD,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC;IAIxE;;;;;OAKG;IACG,MAAM,CACV,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;KACxC,GACA,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QACJ,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;KACb,GACL,OAAO,CAAC,YAAY,CAAC;IAMxB;;;;;;;;;OASG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACtE,OAAO,CAAC,YAAY,CAAC;IAqBxB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,OAAO,CACX,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,aAAa,CAAC;IA2CzB;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAmB7B;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;;;;;OAQG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAmBhC;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2B9E;;;;OAIG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAqBlC;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BnE;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAW1E;AA65CD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iEAG6D;IAC7D,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;CACvC"}

package/sdk/dist/namespaces/deploy.js

@@ -197,6 +197,73 @@ export class Deploy {
         }
         return await pollSnapshotUntilReady(this.client, snapshot, {}, [], emit, opts.project);
     }
+    /**
+     * Promote an existing release to be the project's current live release —
+     * a pointer swap on `internal.projects.live_release_id` without re-running
+     * the apply pipeline. Designed for operator recovery from a destructive
+     * apply ("oops on a real project ID"). The prior release's bytes,
+     * functions, and migrations remain persisted; this just routes traffic
+     * back to them.
+     *
+     * Surfaces structured warnings via the result envelope:
+     *
+     *   - `MIGRATIONS_NOT_REVERSIBLE` (requires_confirmation: true) when the
+     *     target release predates migrations applied since. The migrations
+     *     remain applied; the new live release runs against the current
+     *     schema. Ack via `opts.allowWarningCodes`.
+     *
+     *   - `FUNCTION_VERSION_MISMATCH` (informational) when overlapping
+     *     function names have different code_hashes. The Lambda code is
+     *     whatever's currently $LATEST.
+     *
+     * Rejected cases:
+     *   - `PROMOTE_TARGET_NOT_FOUND` — releaseId doesn't exist
+     *   - `PROMOTE_PROJECT_MISMATCH` — releaseId belongs to a different project
+     *   - `PROMOTE_RELEASE_NOT_READY` — release status isn't promotable
+     *   - `PROMOTE_NO_OP` — releaseId IS already the project's current live
+     *   - `PROMOTE_WARNING_REQUIRES_ACK` — at least one blocking warning unacked
+     *
+     * Capability: unified-deploy (v1.58+, release-promote).
+     */
+    async promote(project, releaseId, opts = {}) {
+        if (!project || typeof project !== "string") {
+            throw new Run402DeployError(`Invalid project id: "${String(project)}"`, {
+                code: "BAD_REQUEST",
+                retryable: false,
+                context: "promoting release",
+            });
+        }
+        if (!releaseId || !releaseId.startsWith("rel_")) {
+            throw new Run402DeployError(`Invalid release id: "${releaseId}"`, {
+                code: "BAD_REQUEST",
+                retryable: false,
+                context: "promoting release",
+            });
+        }
+        // Note: `allowWarnings: true` is implemented client-side by enumerating
+        // every known blocking warning code, since the gateway expects a precise
+        // list per warning code (no wildcard accept). v1.58 has exactly one
+        // blocking promote warning (MIGRATIONS_NOT_REVERSIBLE); if more land,
+        // expand this list.
+        const ALL_BLOCKING_PROMOTE_WARNINGS = ["MIGRATIONS_NOT_REVERSIBLE"];
+        const allowCodes = opts.allowWarnings === true
+            ? ALL_BLOCKING_PROMOTE_WARNINGS
+            : (opts.allowWarningCodes ?? []);
+        try {
+            return await this.client.request(`/apply/v1/releases/${encodeURIComponent(releaseId)}/promote`, {
+                method: "POST",
+                context: "promoting release",
+                headers: { "content-type": "application/json" },
+                body: {
+                    project,
+                    allow_warning_codes: allowCodes,
+                },
+            });
+        }
+        catch (err) {
+            throw translateDeployError(err, "promote", null, releaseId);
+        }
+    }
     /**
      * Snapshot a deploy operation. The endpoint requires `apikey` auth, so
      * pass the project that owns the operation. (When omitted, the request
@@ -1484,6 +1551,7 @@ const FUNCTION_SPEC_FIELDS = new Set([
     "schedule",
     "requireAuth",
     "requireRole",
+    "class",
 ]);
 const FUNCTION_CONFIG_FIELDS = new Set(["timeoutSeconds", "memoryMb"]);
 const SITE_SPEC_FIELDS = new Set(["replace", "patch", "public_paths"]);
@@ -2382,6 +2450,8 @@ async function normalizeFunction(fn, remember) {
         out.requireAuth = fn.requireAuth;
     if (fn.requireRole !== undefined)
         out.requireRole = fn.requireRole;
+    if (fn.class !== undefined)
+        out.class = fn.class;
     if (fn.source !== undefined) {
         const resolved = await resolveContent(fn.source, "function source");
         out.source = remember(resolved);