run402 3.5.4 → 3.5.6

package/core-dist/config.js

@@ -1,7 +1,8 @@
 import { homedir } from "node:os";
-import { join } from "node:path";
-import { existsSync, renameSync, mkdirSync, chmodSync } from "node:fs";
-const DEFAULT_API_BASE = "https://api.run402.com";
+import { dirname, join } from "node:path";
+import { existsSync, renameSync, mkdirSync, chmodSync, readFileSync, writeFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+export const DEFAULT_API_BASE = "https://api.run402.com";
 /**
  * Validate a user-supplied API base URL. Throws a clear error message that
  * names the env var when the URL is malformed or uses a scheme other than
@@ -33,7 +34,12 @@ function validateApiBase(envVar, raw, fallback) {
 }
 export function getApiBase() {
     const validated = validateApiBase("RUN402_API_BASE", process.env.RUN402_API_BASE, DEFAULT_API_BASE);
-    return validated ?? DEFAULT_API_BASE;
+    return validated ?? getConfiguredApiBase() ?? DEFAULT_API_BASE;
+}
+export function getApiBaseSource() {
+    if (process.env.RUN402_API_BASE !== undefined)
+        return "env";
+    return getConfiguredApiBase() ? "profile" : "default";
 }
 /**
  * API base for the deploy-v2 routes. Defaults to the same value as
@@ -115,6 +121,99 @@ export function getConfigDir() {
 export function getKeystorePath() {
     return join(getConfigDir(), "projects.json");
 }
+export function getApiTargetConfigPath() {
+    return join(getConfigDir(), "target.json");
+}
+export function readApiTargetConfig(path) {
+    const p = path ?? getApiTargetConfigPath();
+    try {
+        const parsed = JSON.parse(readFileSync(p, "utf-8"));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+            return null;
+        const cfg = parsed;
+        if (cfg.api_base !== undefined && typeof cfg.api_base !== "string")
+            return null;
+        if (cfg.target_kind !== undefined &&
+            cfg.target_kind !== "cloud" &&
+            cfg.target_kind !== "core" &&
+            cfg.target_kind !== "unknown") {
+            return null;
+        }
+        return cfg;
+    }
+    catch {
+        return null;
+    }
+}
+function atomicWrite(path, content, mode) {
+    const dir = dirname(path);
+    mkdirSync(dir, { recursive: true });
+    const tmp = join(dir, `.target.${randomBytes(4).toString("hex")}.tmp`);
+    writeFileSync(tmp, content, { mode });
+    renameSync(tmp, path);
+    try {
+        chmodSync(path, mode);
+    }
+    catch {
+        /* best-effort on non-POSIX */
+    }
+}
+export function saveApiTargetConfig(config, path) {
+    const p = path ?? getApiTargetConfigPath();
+    atomicWrite(p, JSON.stringify(config, null, 2), 0o600);
+}
+export function configureApiBase(apiBase, options = {}) {
+    if (apiBase === "") {
+        throw new Error("api_base must be a non-empty http(s) URL.");
+    }
+    const validated = validateApiBase("api_base", apiBase, DEFAULT_API_BASE);
+    if (!validated) {
+        throw new Error("api_base must be a non-empty http(s) URL.");
+    }
+    const config = {
+        api_base: validated.replace(/\/+$/, ""),
+        target_kind: options.target_kind ?? "unknown",
+        updated_at: options.updated_at ?? new Date().toISOString(),
+        ...(options.health_status ? { health_status: options.health_status } : {}),
+        ...(options.health_error ? { health_error: options.health_error } : {}),
+    };
+    saveApiTargetConfig(config);
+    return config;
+}
+export function getConfiguredApiBase() {
+    const cfg = readApiTargetConfig();
+    if (!cfg?.api_base)
+        return null;
+    const validated = validateApiBase("api_base", cfg.api_base, DEFAULT_API_BASE);
+    return validated ? validated.replace(/\/+$/, "") : null;
+}
+export function getApiTargetKind() {
+    const cfg = readApiTargetConfig();
+    return cfg?.target_kind ?? "unknown";
+}
+function stripTrailingSlashes(value) {
+    return value.replace(/\/+$/, "");
+}
+function isExplicitHttpCoreTarget(apiBase) {
+    if (stripTrailingSlashes(apiBase) === stripTrailingSlashes(DEFAULT_API_BASE))
+        return false;
+    try {
+        return new URL(apiBase).protocol === "http:";
+    }
+    catch {
+        return false;
+    }
+}
+export function isCoreApiTarget() {
+    const apiBase = getApiBase();
+    const cfg = readApiTargetConfig();
+    if (cfg?.target_kind === "core" && cfg.api_base) {
+        return stripTrailingSlashes(apiBase) === stripTrailingSlashes(cfg.api_base);
+    }
+    if (process.env.RUN402_API_BASE !== undefined && isExplicitHttpCoreTarget(apiBase))
+        return true;
+    return false;
+}
 export function getAllowancePath() {
     if (process.env.RUN402_ALLOWANCE_PATH)
         return process.env.RUN402_ALLOWANCE_PATH;

package/lib/config.mjs

@@ -3,7 +3,17 @@
  * Adds CLI-specific behavior: process.exit() on errors.
  */
 
-import { getApiBase, getConfigDir, getKeystorePath, getAllowancePath } from "../core-dist/config.js";
+import {
+  getApiBase,
+  getApiBaseSource,
+  getApiTargetKind,
+  getConfigDir,
+  getKeystorePath,
+  getAllowancePath,
+  configureApiBase,
+  isCoreApiTarget,
+  readApiTargetConfig,
+} from "../core-dist/config.js";
 import { readAllowance as coreReadAllowance, saveAllowance as coreSaveAllowance } from "../core-dist/allowance.js";
 import { loadKeyStore, getProject, saveProject, updateProject, removeProject, saveKeyStore, getActiveProjectId, setActiveProjectId } from "../core-dist/keystore.js";
 import { getAllowanceAuthHeaders as coreGetAllowanceAuthHeaders } from "../core-dist/allowance-auth.js";
@@ -16,6 +26,10 @@ import { initializeWalletAction, createProjectAction } from "./next-actions.mjs"
 export function configDir() { return getConfigDir(); }
 export function allowanceFile() { return getAllowancePath(); }
 export function projectsFile() { return getKeystorePath(); }
+export function apiBase() { return getApiBase(); }
+export function apiBaseSource() { return getApiBaseSource(); }
+export function apiTargetKind() { return getApiTargetKind(); }
+export function coreTarget() { return isCoreApiTarget(); }
 
 // Snapshot constants, retained for backward compatibility (tests, the OpenClaw
 // config re-export). These are evaluated when this module is first imported.
@@ -116,4 +130,15 @@ export function resolveProjectId(id) {
 }
 
 // Re-export core keystore functions for direct use
-export { loadKeyStore, saveProject, updateProject, removeProject, saveKeyStore, getActiveProjectId, setActiveProjectId };
+export {
+  configureApiBase,
+  isCoreApiTarget,
+  readApiTargetConfig,
+  loadKeyStore,
+  saveProject,
+  updateProject,
+  removeProject,
+  saveKeyStore,
+  getActiveProjectId,
+  setActiveProjectId,
+};

package/lib/deploy-v2.mjs

@@ -32,7 +32,7 @@ import {
 } from "#sdk/node";
 import { getSdk } from "./sdk.mjs";
 import { reportSdkError, fail } from "./sdk-errors.mjs";
-import { API, allowanceAuthHeaders, getActiveProjectId, resolveProjectId } from "./config.mjs";
+import { API, allowanceAuthHeaders, getActiveProjectId, resolveProjectId, isCoreApiTarget } from "./config.mjs";
 import { normalizeArgv } from "./argparse.mjs";
 import { loadLiveControlPlaneSession } from "../core-dist/control-plane-session.js";
 import { withAutoApprove } from "./operator.mjs";
@@ -124,6 +124,11 @@ Routes:
   Routes activate atomically with the release. Direct /functions/v1/:name remains API-key protected.
   Runtime route failure codes: ROUTE_MANIFEST_LOAD_FAILED, ROUTED_INVOKE_WORKER_SECRET_MISSING, ROUTED_INVOKE_AUTH_FAILED, ROUTED_ROUTE_STALE, ROUTE_METHOD_NOT_ALLOWED, ROUTED_RESPONSE_TOO_LARGE.
 
+Function capabilities:
+  functions.replace.<name>.capabilities is an array of runtime capability strings.
+  Framework adapters use it for contracts such as "astro.ssr.v1"; omit it for
+  ordinary user-authored functions unless a documented helper requires it.
+
 Internationalization (routed functions):
   "i18n": { "defaultLocale": "en", "locales": ["en", "es", "fr"], "detect": ["cookie:wl_locale", "accept-language"] }
   Omit i18n to carry forward from base release; pass "i18n": null to clear the slice on the new release.
@@ -664,7 +669,16 @@ async function mergeAstroReleaseSlice(spec, dirArg) {
  * the manifest normalizer is the authority on shape validity, not this
  * best-effort extractor.
  */
-function collectManifestSourceFiles(spec, baseDir) {
+function isAstroSsrManifestFunction(entry) {
+  return (
+    entry &&
+    typeof entry === "object" &&
+    Array.isArray(entry.capabilities) &&
+    entry.capabilities.includes("astro.ssr.v1")
+  );
+}
+
+export function collectManifestSourceFiles(spec, baseDir) {
   const out = new Set();
   if (!spec || typeof spec !== "object") return [];
 
@@ -689,13 +703,20 @@ function collectManifestSourceFiles(spec, baseDir) {
     if (!map || typeof map !== "object") return;
     for (const entry of Object.values(map)) resolveEntryPath(entry);
   };
+  const eachFunctionValue = (map) => {
+    if (!map || typeof map !== "object") return;
+    for (const entry of Object.values(map)) {
+      if (isAstroSsrManifestFunction(entry)) continue;
+      resolveEntryPath(entry);
+    }
+  };
 
   const fns = spec.functions;
   if (fns && typeof fns === "object") {
-    eachValue(fns.replace);
+    eachFunctionValue(fns.replace);
     if (fns.patch && typeof fns.patch === "object") {
-      eachValue(fns.patch.put);
-      eachValue(fns.patch.set);
+      eachFunctionValue(fns.patch.put);
+      eachFunctionValue(fns.patch.set);
     }
   }
 
@@ -896,9 +917,10 @@ async function applyCmd(args) {
       credentials: githubActionsCredentials({ projectId: releaseSpec.project, apiBase: API }),
       disablePaidFetch: true,
     };
-  } else if (!loadLiveControlPlaneSession()) {
+  } else if (!isCoreApiTarget() && !loadLiveControlPlaneSession()) {
     // Aggressive early exit when no allowance is configured — unless a
-    // wallet-less human is deploying via their operator (control-plane) session.
+    // wallet-less human is deploying via their operator (control-plane) session
+    // or the active target is a self-hosted Core Gateway.
     allowanceAuthHeaders("/apply/v1/plans");
   }
 
@@ -909,6 +931,7 @@ async function applyCmd(args) {
         idempotencyKey,
         allowWarnings: opts.allowWarnings,
         allowWarningCodes: opts.allowWarningCodes,
+        target: isCoreApiTarget() ? "core" : "cloud",
       }),
     );
     console.log(JSON.stringify(result, null, 2));

package/lib/init.mjs

@@ -1,4 +1,4 @@
-import { readAllowance, saveAllowance, loadKeyStore, configDir } from "./config.mjs";
+import { readAllowance, saveAllowance, loadKeyStore, configDir, configureApiBase } from "./config.mjs";
 import { getSdk } from "./sdk.mjs";
 import { fail } from "./sdk-errors.mjs";
 import { setTierAction, deployAction } from "./next-actions.mjs";
@@ -15,6 +15,9 @@ const HELP = `run402 init — Set up allowance, funding, and check tier status
 
 Usage:
   run402 init                Set up with x402 (Base Sepolia) — default
+  run402 init --api-base <url>
+                             Configure a Run402 Core/API target for the active
+                             profile without setting up Cloud payment.
   run402 init mpp            Set up with MPP (Tempo Moderato)
   run402 init <rail> --switch-rail
                              Switch the persisted payment rail to <rail>.
@@ -23,6 +26,9 @@ Usage:
                              silently flipping billing networks.
 
 Options:
+  --api-base <url> Configure the active profile to use this API base. Use this
+                  for a self-hosted Run402 Core Gateway, e.g.
+                  http://my-core:4020.
   --switch-rail   Confirm switching the persisted payment rail. Re-running
                   init with the SAME rail as the existing allowance is always
                   idempotent and does not need this flag.
@@ -46,6 +52,61 @@ Run this once to get started, or again to check your setup.
 
 function short(addr) { return addr.slice(0, 6) + "..." + addr.slice(-4); }
 
+function parseApiBaseFlag(args) {
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--api-base") {
+      const value = args[i + 1];
+      if (value === undefined || String(value).startsWith("--")) {
+        fail({
+          code: "BAD_USAGE",
+          message: "--api-base requires a value.",
+          details: { flag: "--api-base" },
+        });
+      }
+      return { value, args: [...args.slice(0, i), ...args.slice(i + 2)] };
+    }
+    if (typeof arg === "string" && arg.startsWith("--api-base=")) {
+      const value = arg.slice("--api-base=".length);
+      if (!value) {
+        fail({
+          code: "BAD_USAGE",
+          message: "--api-base requires a non-empty value.",
+          details: { flag: "--api-base" },
+        });
+      }
+      return { value, args: [...args.slice(0, i), ...args.slice(i + 1)] };
+    }
+  }
+  return { value: null, args };
+}
+
+function sameOrigin(a, b) {
+  try {
+    return new URL(a).origin === new URL(b).origin;
+  } catch {
+    return false;
+  }
+}
+
+async function detectTarget(apiBase) {
+  try {
+    const health = await getSdk({ apiBase, disablePaidFetch: true, authMode: "none" }).service.health();
+    const kind = health && typeof health === "object" && health.mode === "core"
+      ? "core"
+      : sameOrigin(apiBase, "https://api.run402.com") ? "cloud" : "core";
+    return {
+      kind,
+      health_status: typeof health?.status === "string" ? health.status : "ok",
+    };
+  } catch (err) {
+    return {
+      kind: sameOrigin(apiBase, "https://api.run402.com") ? "cloud" : "core",
+      health_error: errorMessage(err),
+    };
+  }
+}
+
 function errorMessage(err) {
   if (err?.body && typeof err.body === "object") return err.body.message || err.body.error || err.message;
   return err?.message || String(err);
@@ -67,6 +128,50 @@ export async function run(args = []) {
 
   if (args.includes("--help") || args.includes("-h")) { console.log(HELP); process.exit(0); }
 
+  const parsedApiBase = parseApiBaseFlag(args);
+  if (parsedApiBase.value) {
+    if (parsedApiBase.args.some((arg) => typeof arg === "string" && !arg.startsWith("--"))) {
+      fail({
+        code: "BAD_USAGE",
+        message: "run402 init --api-base cannot be combined with a payment rail.",
+        hint: "Run `run402 init --api-base=http://my-core:4020` for Core, or `run402 init` for Run402 Cloud.",
+      });
+    }
+    const CONFIG_DIR = configDir();
+    const detected = await detectTarget(parsedApiBase.value);
+    const config = configureApiBase(parsedApiBase.value, {
+      target_kind: detected.kind,
+      ...(detected.health_status ? { health_status: detected.health_status } : {}),
+      ...(detected.health_error ? { health_error: detected.health_error } : {}),
+    });
+    mkdirSync(CONFIG_DIR, { recursive: true });
+    console.error("");
+    console.error(`  ${"Config".padEnd(10)} ${CONFIG_DIR}`);
+    console.error(`  ${"API base".padEnd(10)} ${config.api_base}`);
+    console.error(`  ${"Target".padEnd(10)} ${config.target_kind}`);
+    if (detected.health_status) console.error(`  ${"Health".padEnd(10)} ${detected.health_status}`);
+    if (detected.health_error) console.error(`  ${"Health".padEnd(10)} ${detected.health_error}`);
+    console.error("");
+    const summary = {
+      config_dir: CONFIG_DIR,
+      api_base: config.api_base,
+      api_base_source: "profile",
+      target: {
+        kind: config.target_kind,
+        ...(config.health_status ? { health_status: config.health_status } : {}),
+        ...(config.health_error ? { health_error: config.health_error } : {}),
+      },
+      payment_required: config.target_kind === "cloud",
+      next_actions: [{
+        type: "create_project",
+        command: 'run402 projects provision --name "my-app"',
+      }],
+      next_step: 'run402 projects provision --name "my-app"',
+    };
+    console.log(JSON.stringify(summary, null, 2));
+    return;
+  }
+
   // Resolve once for this invocation — reflects the active wallet/profile that
   // cli.mjs published to RUN402_WALLET before this module loaded.
   const CONFIG_DIR = configDir();

package/lib/projects.mjs

@@ -1,5 +1,5 @@
 import { readFileSync } from "fs";
-import { loadKeyStore, API, allowanceAuthHeaders, resolveProjectId, getActiveProjectId } from "./config.mjs";
+import { loadKeyStore, API, allowanceAuthHeaders, resolveProjectId, getActiveProjectId, isCoreApiTarget } from "./config.mjs";
 import { loadLiveOperatorSession } from "../core-dist/operator-session.js";
 import { loadLiveControlPlaneSession } from "../core-dist/control-plane-session.js";
 import { withAutoApprove } from "./operator.mjs";
@@ -14,7 +14,7 @@ Usage:
 
 Subcommands:
   quote                                   Show pricing tiers
-  provision [--tier <tier>] [--name <n>] [--org <id>]  Provision a new Postgres project (pays via x402)
+  provision [--tier <tier>] [--name <n>] [--org <id>]  Provision a new Postgres project
   use   <id>                              Set the active project (used as default for other commands)
   list [--org <id>] [--all]               List your projects from the server (name, site_url, custom domains, org_id, active marker)
   rename <id> --name <label>              Rename a project (fix an auto-generated name)
@@ -79,7 +79,9 @@ Notes:
     project:write grant) on the owning org; it works even if the project was
     never provisioned from this machine.
   - 'rest' uses PostgREST query syntax (table name + optional query string)
-  - 'provision' requires a funded allowance — payment is automatic via x402
+  - 'provision' requires a funded allowance on Run402 Cloud. Against a
+    configured Run402 Core target, it creates a local Core project without
+    payment.
   - 'apply-expose' declares the full authorization surface (tables, views, RPCs)
     in one convergent call. Tables not listed with expose:true are dark by
     default. Schema: https://run402.com/schemas/manifest.v1.json. Sample:
@@ -161,7 +163,9 @@ Options:
                       from --name when omitted; an unnamed provision stays un-keyed.
 
 Notes:
-  - Payment is automatic via x402; requires a funded allowance
+  - Payment is automatic via x402 on Run402 Cloud; requires a funded allowance.
+    Against a configured Run402 Core target, no Cloud tier/allowance/payment is
+    required.
   - The new project becomes the active project after provisioning
 
 Examples:
@@ -320,7 +324,7 @@ async function provision(args) {
   // Aggressive early exit when no agent allowance is configured — but only when
   // there's also no operator (control-plane) session, since a wallet-less human
   // provisions into an org via their operator approval instead of a wallet.
-  if (!loadLiveControlPlaneSession()) allowanceAuthHeaders("/projects/v1");
+  if (!isCoreApiTarget() && !loadLiveControlPlaneSession()) allowanceAuthHeaders("/projects/v1");
 
   const activeBefore = getActiveProjectId();
   try {
@@ -744,7 +748,10 @@ async function deleteProject(projectId, args = []) {
 }
 
 const FLAGS_BY_SUB = {
-  provision: { known: ["--tier", "--name", "--org"], values: ["--tier", "--name", "--org"] },
+  provision: {
+    known: ["--tier", "--name", "--org", "--idempotency-key"],
+    values: ["--tier", "--name", "--org", "--idempotency-key"],
+  },
   list: { known: ["--org", "--all"], values: ["--org"] },
   rename: { known: ["--name"], values: ["--name"] },
   sql: { known: ["--file", "--params"], values: ["--file", "--params"] },

package/lib/status.mjs

@@ -1,4 +1,11 @@
-import { readAllowance, loadKeyStore, getActiveProjectId } from "./config.mjs";
+import {
+  readAllowance,
+  loadKeyStore,
+  getActiveProjectId,
+  apiBase,
+  apiBaseSource,
+  apiTargetKind,
+} from "./config.mjs";
 import { getSdk } from "./sdk.mjs";
 import { assertKnownFlags, hasHelp, normalizeArgv } from "./argparse.mjs";
 import { getActiveProfile } from "../core-dist/config.js";
@@ -16,8 +23,10 @@ Displays:
   - Tier subscription (name, status, expiry)
   - Projects (from server, with fallback to local keystore)
   - Active project ID
+  - Active API target
 
-Output is JSON. Requires an existing allowance (run 'run402 init' first).
+Output is JSON. Run402 Cloud status requires an allowance; Core target status
+can still report local project state without one.
 `;
 
 // USDC / pathUSD constants (match allowance.mjs)
@@ -82,8 +91,20 @@ export async function run(args = []) {
   if (hasHelp(args)) { console.log(HELP); process.exit(0); }
   assertKnownFlags(args, ["--help", "-h"]);
   const allowance = readAllowance();
+  const target = {
+    api_base: apiBase(),
+    api_base_source: apiBaseSource(),
+    kind: apiTargetKind(),
+  };
   if (!allowance) {
-    console.log(JSON.stringify({ wallet: null, hint: "Run: run402 init" }));
+    const store = loadKeyStore();
+    console.log(JSON.stringify({
+      wallet: null,
+      target,
+      projects: Object.keys(store.projects).map(id => ({ project_id: id })),
+      active_project: getActiveProjectId() || null,
+      hint: target.kind === "core" ? "Run: run402 projects provision --name my-app" : "Run: run402 init",
+    }));
     return;
   }
 
@@ -145,6 +166,7 @@ export async function run(args = []) {
     lease_perpetual: tier?.lease_perpetual ?? null,
     projects,
     active_project: activeId || null,
+    target,
   };
 
   console.log(JSON.stringify(result, null, 2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "3.5.4",
+  "version": "3.5.6",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {

package/sdk/core-dist/config.js

@@ -1,7 +1,8 @@
 import { homedir } from "node:os";
-import { join } from "node:path";
-import { existsSync, renameSync, mkdirSync, chmodSync } from "node:fs";
-const DEFAULT_API_BASE = "https://api.run402.com";
+import { dirname, join } from "node:path";
+import { existsSync, renameSync, mkdirSync, chmodSync, readFileSync, writeFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+export const DEFAULT_API_BASE = "https://api.run402.com";
 /**
  * Validate a user-supplied API base URL. Throws a clear error message that
  * names the env var when the URL is malformed or uses a scheme other than
@@ -33,7 +34,12 @@ function validateApiBase(envVar, raw, fallback) {
 }
 export function getApiBase() {
     const validated = validateApiBase("RUN402_API_BASE", process.env.RUN402_API_BASE, DEFAULT_API_BASE);
-    return validated ?? DEFAULT_API_BASE;
+    return validated ?? getConfiguredApiBase() ?? DEFAULT_API_BASE;
+}
+export function getApiBaseSource() {
+    if (process.env.RUN402_API_BASE !== undefined)
+        return "env";
+    return getConfiguredApiBase() ? "profile" : "default";
 }
 /**
  * API base for the deploy-v2 routes. Defaults to the same value as
@@ -115,6 +121,99 @@ export function getConfigDir() {
 export function getKeystorePath() {
     return join(getConfigDir(), "projects.json");
 }
+export function getApiTargetConfigPath() {
+    return join(getConfigDir(), "target.json");
+}
+export function readApiTargetConfig(path) {
+    const p = path ?? getApiTargetConfigPath();
+    try {
+        const parsed = JSON.parse(readFileSync(p, "utf-8"));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+            return null;
+        const cfg = parsed;
+        if (cfg.api_base !== undefined && typeof cfg.api_base !== "string")
+            return null;
+        if (cfg.target_kind !== undefined &&
+            cfg.target_kind !== "cloud" &&
+            cfg.target_kind !== "core" &&
+            cfg.target_kind !== "unknown") {
+            return null;
+        }
+        return cfg;
+    }
+    catch {
+        return null;
+    }
+}
+function atomicWrite(path, content, mode) {
+    const dir = dirname(path);
+    mkdirSync(dir, { recursive: true });
+    const tmp = join(dir, `.target.${randomBytes(4).toString("hex")}.tmp`);
+    writeFileSync(tmp, content, { mode });
+    renameSync(tmp, path);
+    try {
+        chmodSync(path, mode);
+    }
+    catch {
+        /* best-effort on non-POSIX */
+    }
+}
+export function saveApiTargetConfig(config, path) {
+    const p = path ?? getApiTargetConfigPath();
+    atomicWrite(p, JSON.stringify(config, null, 2), 0o600);
+}
+export function configureApiBase(apiBase, options = {}) {
+    if (apiBase === "") {
+        throw new Error("api_base must be a non-empty http(s) URL.");
+    }
+    const validated = validateApiBase("api_base", apiBase, DEFAULT_API_BASE);
+    if (!validated) {
+        throw new Error("api_base must be a non-empty http(s) URL.");
+    }
+    const config = {
+        api_base: validated.replace(/\/+$/, ""),
+        target_kind: options.target_kind ?? "unknown",
+        updated_at: options.updated_at ?? new Date().toISOString(),
+        ...(options.health_status ? { health_status: options.health_status } : {}),
+        ...(options.health_error ? { health_error: options.health_error } : {}),
+    };
+    saveApiTargetConfig(config);
+    return config;
+}
+export function getConfiguredApiBase() {
+    const cfg = readApiTargetConfig();
+    if (!cfg?.api_base)
+        return null;
+    const validated = validateApiBase("api_base", cfg.api_base, DEFAULT_API_BASE);
+    return validated ? validated.replace(/\/+$/, "") : null;
+}
+export function getApiTargetKind() {
+    const cfg = readApiTargetConfig();
+    return cfg?.target_kind ?? "unknown";
+}
+function stripTrailingSlashes(value) {
+    return value.replace(/\/+$/, "");
+}
+function isExplicitHttpCoreTarget(apiBase) {
+    if (stripTrailingSlashes(apiBase) === stripTrailingSlashes(DEFAULT_API_BASE))
+        return false;
+    try {
+        return new URL(apiBase).protocol === "http:";
+    }
+    catch {
+        return false;
+    }
+}
+export function isCoreApiTarget() {
+    const apiBase = getApiBase();
+    const cfg = readApiTargetConfig();
+    if (cfg?.target_kind === "core" && cfg.api_base) {
+        return stripTrailingSlashes(apiBase) === stripTrailingSlashes(cfg.api_base);
+    }
+    if (process.env.RUN402_API_BASE !== undefined && isExplicitHttpCoreTarget(apiBase))
+        return true;
+    return false;
+}
 export function getAllowancePath() {
     if (process.env.RUN402_ALLOWANCE_PATH)
         return process.env.RUN402_ALLOWANCE_PATH;

package/sdk/dist/namespaces/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/namespaces/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAkB3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EAQtB,WAAW,EACX,oBAAoB,EAEpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EAarB,iBAAiB,EAGjB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAqE3B,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA4C9E;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3E;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACvD,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC;IAIxE;;;;;OAKG;IACG,MAAM,CACV,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;KACxC,GACA,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QACJ,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;KACb,GACL,OAAO,CAAC,YAAY,CAAC;IAMxB;;;;;;;;;OASG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACtE,OAAO,CAAC,YAAY,CAAC;IAqBxB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,OAAO,CACX,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,aAAa,CAAC;IA2CzB;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAmB7B;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;;;;;OAQG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAmBhC;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2B9E;;;;OAIG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAqBlC;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BnE;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAW1E;AAkjDD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iEAG6D;IAC7D,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;CACvC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/namespaces/deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAkB3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EAQtB,WAAW,EACX,oBAAoB,EAEpB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,EAarB,iBAAiB,EAGjB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,2BAA2B,EAC3B,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EAEb,MAAM,mBAAmB,CAAC;AAgF3B,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE3C;;;;OAIG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IA4C9E;;;OAGG;IACH,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3E;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACvD,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;KAAE,CAAC;IAIxE;;;;;OAKG;IACG,MAAM,CACV,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;KACxC,GACA,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QACJ,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QACvC,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;KACb,GACL,OAAO,CAAC,YAAY,CAAC;IASxB;;;;;;;;;OASG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GACtE,OAAO,CAAC,YAAY,CAAC;IAqBxB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,OAAO,CACX,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,aAAa,CAAC;IA2CzB;;;;OAIG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAmB7B;;;;;;OAMG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAC/B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B;;;;;;;;OAQG;IACG,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACxB,OAAO,CAAC,oBAAoB,CAAC;IAmBhC;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2B9E;;;;OAIG;IACG,gBAAgB,CACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC;IAqBlC;;;;OAIG;IACG,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BnE;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAW1E;AAuvDD;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;iEAG6D;IAC7D,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;CACvC"}