run402 3.7.4 → 3.7.5

package/lib/email.mjs

@@ -73,7 +73,7 @@ Usage:
   run402 email <subcommand> [args...]
 
 Subcommands:
-  create <slug> [--project <id>]     Create a mailbox (<slug>@mail.run402.com)
+  create <slug> [--project <id>]     Create a project-scoped mailbox local part
   mailboxes [--project <id>]         List mailboxes with default-role metadata
                                       and gateway next_actions
   defaults [--outbound <slug|id>] [--auth-sender <slug|id>] [--project <id>]
@@ -238,14 +238,15 @@ Usage:
 
 Arguments:
   <slug>              Mailbox slug (3-63 chars, lowercase alphanumeric +
-                      hyphens, no consecutive hyphens). Becomes
-                      <slug>@mail.run402.com.
+                      hyphens, no consecutive hyphens). The response's
+                      managed_address is
+                      <slug>@<project-mail-host>.mail.run402.com.
 
 Options:
   --project <id>      Project ID (defaults to the active project)
 
 Notes:
-  - Up to 5 mailboxes per project (create distinct slugs, e.g. sign, support)
+  - Up to 5 mailboxes per project; the same slug may be used by another project
 
 Examples:
   run402 email create my-app
@@ -320,12 +321,17 @@ function summarizeMailboxForDefaults(m) {
     mailbox_id: m.mailbox_id,
     slug: m.slug,
     address: m.address,
+    managed_address: m.managed_address,
     status: m.status,
     is_default_outbound: m.is_default_outbound ?? false,
     is_auth_sender: m.is_auth_sender ?? false,
     can_send: m.can_send,
+    can_receive: m.can_receive,
     send_blocked_reason: m.send_blocked_reason ?? null,
     domain_kind: m.domain_kind,
+    address_domain: m.address_domain,
+    managed_domain: m.managed_domain,
+    custom_domain_ready: m.custom_domain_ready,
     footer_policy: m.footer_policy,
     effective_footer_policy: m.effective_footer_policy,
     footer_policy_locked_reason: m.footer_policy_locked_reason ?? null,
@@ -336,13 +342,18 @@ function mailboxInfoPayload(m) {
   return {
     mailbox_id: m.mailbox_id,
     address: m.address,
+    managed_address: m.managed_address,
     slug: m.slug,
     status: m.status,
     is_default_outbound: m.is_default_outbound,
     is_auth_sender: m.is_auth_sender,
     can_send: m.can_send,
+    can_receive: m.can_receive,
     send_blocked_reason: m.send_blocked_reason,
     domain_kind: m.domain_kind,
+    address_domain: m.address_domain,
+    managed_domain: m.managed_domain,
+    custom_domain_ready: m.custom_domain_ready,
     footer_policy: m.footer_policy,
     effective_footer_policy: m.effective_footer_policy,
     footer_policy_locked_reason: m.footer_policy_locked_reason,
@@ -428,8 +439,14 @@ async function create(args) {
     console.log(JSON.stringify({
       mailbox_id: data.mailbox_id,
       address: data.address,
+      managed_address: data.managed_address,
       slug: data.slug,
       status: data.status,
+      domain_kind: data.domain_kind,
+      address_domain: data.address_domain,
+      managed_domain: data.managed_domain,
+      custom_domain_ready: data.custom_domain_ready,
+      can_receive: data.can_receive,
       footer_policy: data.footer_policy,
       effective_footer_policy: data.effective_footer_policy,
       footer_policy_locked_reason: data.footer_policy_locked_reason,

package/lib/up.mjs

@@ -7,9 +7,11 @@ import { assertKnownFlags, flagValue, normalizeArgv, positionalArgs } from "./ar
 const HELP = `run402 up — Provision/link/deploy the current app
 
 Usage:
-  run402 up [--name <name>] [--project <id>] [--manifest <path>] [--dir <path>] [--tier <tier>] [-y|--yes] [--check|--print-spec|--plan|--require-plan <id>] [--quiet]
+  run402 up [repo-or-path] [--name <name>] [--project <id>] [--manifest <path>] [--dir <path>] [--tier <tier>] [-y|--yes] [--check|--print-spec|--plan|--require-plan <id>] [--json|--json-stream] [--quiet]
 
 Options:
+  repo-or-path        Local app directory or public Git repository URL. Defaults
+                      to the current directory.
   --name <name>       Project display name when up needs to create a project.
                       Not a deploy manifest field and never renames a project.
   --project <id>      Explicit project id. Highest-priority project selector.
@@ -33,6 +35,12 @@ Options:
   --allow-warning <code>
                       Acknowledge a reviewed deploy warning code (repeatable).
   --allow-warnings    Acknowledge all reviewed deploy warnings.
+  --allow-prune       Approve destructive managed-resource prune steps for app manifests.
+  --max-spend-usd <n> Maximum spend up may approve for app readiness.
+  --build-mode <mode> Override app build mode: local, remote, or sandbox.
+  --allow-shell-build Approve shell-string build commands in run402.json.
+  --json              Emit one final JSON object on stdout.
+  --json-stream       Emit NDJSON progress events on stdout and a final result event.
   --quiet             Suppress action progress events on stderr.
 
 Project resolution:
@@ -40,6 +48,7 @@ Project resolution:
   project creation from --name > approved active-project fallback.
 
 Examples:
+  run402 up https://github.com/kychee-com/kysigned --name kysigned2 --yes --json
   run402 up --name my-app -y
   run402 up --manifest run402.deploy.ts --check
   run402 up --manifest run402.deploy.ts --plan
@@ -47,6 +56,7 @@ Examples:
 `;
 
 const TIERS = new Set(["prototype", "hobby", "team"]);
+const BUILD_MODES = new Set(["local", "remote", "sandbox"]);
 
 export async function run(args = []) {
   const parsed = normalizeArgv(args);
@@ -56,8 +66,36 @@ export async function run(args = []) {
   }
   assertKnownFlags(
     parsed,
-    ["--help", "-h", "-y", "--yes", "--dry-run", "--check", "--print-spec", "--plan", "--quiet", "--final-only", "--allow-warnings"],
-    ["--name", "--project", "--manifest", "--dir", "--tier", "--idempotency-key", "--allow-warning", "--require-plan", "--plan-fingerprint"],
+    [
+      "--help",
+      "-h",
+      "-y",
+      "--yes",
+      "--dry-run",
+      "--check",
+      "--print-spec",
+      "--plan",
+      "--quiet",
+      "--final-only",
+      "--allow-warnings",
+      "--allow-prune",
+      "--allow-shell-build",
+      "--json",
+      "--json-stream",
+    ],
+    [
+      "--name",
+      "--project",
+      "--manifest",
+      "--dir",
+      "--tier",
+      "--idempotency-key",
+      "--allow-warning",
+      "--require-plan",
+      "--plan-fingerprint",
+      "--max-spend-usd",
+      "--build-mode",
+    ],
   );
   const extras = positionalArgs(parsed, [
     "--name",
@@ -69,14 +107,24 @@ export async function run(args = []) {
     "--allow-warning",
     "--require-plan",
     "--plan-fingerprint",
+    "--max-spend-usd",
+    "--build-mode",
   ]);
-  if (extras.length > 0) {
+  if (extras.length > 1) {
     fail({
       code: "BAD_USAGE",
-      message: `Unexpected argument for up: ${extras[0]}`,
+      message: `Unexpected argument for up: ${extras[1]}`,
       hint: "Use `run402 up --help`.",
     });
   }
+  const source = extras[0] ?? undefined;
+  if (source && flagValue(parsed, "--dir")) {
+    fail({
+      code: "BAD_USAGE",
+      message: "Pass either a positional repo/path source or --dir, not both.",
+      details: { source, dir: flagValue(parsed, "--dir") },
+    });
+  }
 
   const tier = flagValue(parsed, "--tier") ?? undefined;
   if (tier && !TIERS.has(tier)) {
@@ -87,8 +135,28 @@ export async function run(args = []) {
     });
   }
 
+  const buildMode = flagValue(parsed, "--build-mode") ?? undefined;
+  if (buildMode && !BUILD_MODES.has(buildMode)) {
+    fail({
+      code: "BAD_FLAG",
+      message: "--build-mode must be one of: local, remote, sandbox",
+      details: { flag: "--build-mode", value: buildMode, allowed: [...BUILD_MODES] },
+    });
+  }
+
+  const maxSpendRaw = flagValue(parsed, "--max-spend-usd");
+  const maxSpendUsd = maxSpendRaw === null ? undefined : Number(maxSpendRaw);
+  if (maxSpendRaw !== null && (!Number.isFinite(maxSpendUsd) || maxSpendUsd < 0)) {
+    fail({
+      code: "BAD_FLAG",
+      message: "--max-spend-usd must be a non-negative number",
+      details: { flag: "--max-spend-usd", value: maxSpendRaw },
+    });
+  }
+
   const yes = parsed.includes("-y") || parsed.includes("--yes");
-  const quiet = parsed.includes("--quiet") || parsed.includes("--final-only");
+  const jsonStream = parsed.includes("--json-stream");
+  const quiet = parsed.includes("--quiet") || parsed.includes("--final-only") || jsonStream;
   const mode = parseExecutionMode(parsed);
   const dryRun = parsed.includes("--dry-run");
   if (dryRun && mode !== undefined) {
@@ -110,24 +178,39 @@ export async function run(args = []) {
   try {
     const sdk = getSdk();
     const result = await sdk.up({
+      source,
       name: flagValue(parsed, "--name") ?? undefined,
       projectId: flagValue(parsed, "--project") ?? undefined,
       manifest: flagValue(parsed, "--manifest") ?? undefined,
       dir: flagValue(parsed, "--dir") ?? undefined,
       tier,
       idempotencyKey: flagValue(parsed, "--idempotency-key") ?? undefined,
+      allowPrune: parsed.includes("--allow-prune") ? true : undefined,
+      maxSpendUsd,
+      buildMode,
+      allowShellBuild: parsed.includes("--allow-shell-build") ? true : undefined,
       allowWarnings: parsed.includes("--allow-warnings") ? true : undefined,
       allowWarningCodes,
     }, {
       ...(mode !== undefined ? { mode } : {}),
       dryRun,
       approval: makeApproval(yes),
-      onEvent: quiet ? undefined : (event) => {
-        console.error(JSON.stringify(event));
-      },
+      onEvent: jsonStream
+        ? (event) => console.log(JSON.stringify({ type: "action.event", event }))
+        : quiet
+          ? undefined
+          : (event) => {
+              console.error(JSON.stringify(event));
+            },
     });
-    if (mode === "printSpec") {
+    if (jsonStream) {
+      console.log(JSON.stringify({ type: "run402.up.result", result }));
+    } else if (mode === "printSpec") {
       console.log(JSON.stringify(result.result?.spec ?? null, null, 2));
+    } else if (result?.result?.app_result && !parsed.includes("--json")) {
+      console.log(formatAppUpHuman(result.result.app_result));
+    } else if (!parsed.includes("--json") && shouldRenderHumanSuccess(result)) {
+      console.log(formatLegacyUpSuccess(result));
     } else {
       console.log(JSON.stringify(result, null, 2));
     }
@@ -207,3 +290,56 @@ function makeApproval(yes) {
     },
   };
 }
+
+function shouldRenderHumanSuccess(result) {
+  return result?.action === "up" &&
+    result?.dry_run === false &&
+    result?.mode === "apply" &&
+    result?.result?.deploy?.release_id;
+}
+
+function formatLegacyUpSuccess(result) {
+  const urls = result?.result?.deploy?.urls ?? {};
+  const origin = urls.site ?? urls.subdomain ?? urls.deployment;
+  const lines = [];
+  if (origin) lines.push(`Success! Project is up at: ${origin}`);
+  else lines.push("Success! Project is up.");
+  const releaseId = result?.result?.deploy?.release_id;
+  if (releaseId) lines.push(`Release: ${releaseId}`);
+  return lines.join("\n");
+}
+
+function formatAppUpHuman(appResult) {
+  const lines = [];
+  const status = appResult?.status ?? "unknown";
+  const origin = appResult?.project?.public_origin;
+
+  if (status === "succeeded" && origin) {
+    lines.push(`Success! Project is up at: ${origin}`);
+  } else if (status === "succeeded") {
+    lines.push("Success! Project is up.");
+  } else if (status === "planned") {
+    lines.push("Run402 up plan is ready.");
+    if (origin) lines.push(`Planned project URL: ${origin}`);
+  } else if (status === "blocked") {
+    lines.push("Run402 up is blocked.");
+  } else {
+    lines.push(`Run402 up status: ${status}`);
+  }
+
+  const diagnostics = Array.isArray(appResult?.diagnostics) ? appResult.diagnostics : [];
+  for (const diagnostic of diagnostics) {
+    if (diagnostic?.message) lines.push(`- ${diagnostic.message}`);
+  }
+
+  const nextActions = Array.isArray(appResult?.next_actions) ? appResult.next_actions : [];
+  if (nextActions.length > 0) {
+    lines.push("Next:");
+    for (const action of nextActions) {
+      if (action?.message) lines.push(`- ${action.message}`);
+      if (action?.command) lines.push(`  ${action.command}`);
+    }
+  }
+
+  return lines.join("\n");
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "3.7.4",
+  "version": "3.7.5",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {

package/sdk/dist/actions.d.ts

@@ -1,4 +1,5 @@
 import type { DeployResult, PlanResponse, ReleaseSpec } from "./namespaces/deploy.types.js";
+import type { Run402AppInstallGraph, Run402AppUpResultEnvelope } from "./app-up.js";
 import type { ProvisionResult } from "./namespaces/projects.types.js";
 import type { TierName, TierSetResult } from "./namespaces/tier.js";
 import type { Run402ExecutionMode } from "./config.js";
@@ -28,6 +29,8 @@ export interface Run402TierSetActionInput {
 }
 export interface Run402UpActionInput {
     type: typeof Run402Action.Up;
+    /** Local app path or repository URL. Defaults to `dir` / cwd. */
+    source?: string;
     /** Workspace directory to inspect. Defaults to `process.cwd()` in the Node SDK. */
     dir?: string;
     /** Explicit deploy manifest path. Defaults to manifest discovery inside `dir`. */
@@ -45,6 +48,14 @@ export interface Run402UpActionInput {
     orgId?: string;
     /** Root idempotency key. Child mutation keys are derived from this value. */
     idempotencyKey?: string;
+    /** Approve destructive managed-resource prune/down operations for app-aware up. */
+    allowPrune?: boolean;
+    /** Maximum allowed spend in USD for app-aware up. Spend-impacting nodes block above this cap. */
+    maxSpendUsd?: number;
+    /** Override app build mode for app-aware up. */
+    buildMode?: "local" | "remote" | "sandbox";
+    /** Stronger approval for shell-string build commands in app-aware up. */
+    allowShellBuild?: boolean;
     /** Continue past deploy-plan warnings, forwarded to `apply()`. */
     allowWarnings?: boolean;
     /** Continue past selected deploy-plan warnings, forwarded to `apply()`. */
@@ -61,7 +72,7 @@ export interface Run402ActionApprovalRequest {
     message: string;
     mutations: Run402ActionMutation[];
 }
-export type Run402ActionMutation = "allowance.create" | "allowance.faucet" | "tier.set" | "projects.provision" | "workspace.link.write" | "deploy.apply";
+export type Run402ActionMutation = "allowance.create" | "allowance.faucet" | "tier.set" | "projects.provision" | "workspace.link.write" | "app.source.resolve" | "app.install" | "deploy.apply";
 export interface Run402ActionRunOptions {
     /**
      * Canonical execution mode for typed-config workflows.
@@ -120,6 +131,8 @@ export interface Run402UpResult {
     project_id: string;
     manifest_path: string;
     workspace_link_path?: string;
+    app_graph?: Run402AppInstallGraph;
+    app_result?: Run402AppUpResultEnvelope;
     spec?: ReleaseSpec;
     plan?: PlanResponse;
     deploy?: DeployResult;

package/sdk/dist/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAC1B,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GACzB,kCAAkC,GAClC,wBAAwB,GACxB,mBAAmB,CAAC;AAExB,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,OAAO,YAAY,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,YAAY,CAAC,OAAO,CAAC;IAClC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,YAAY,CAAC,EAAE,CAAC;IAC7B,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAC5B,OAAO,GACP,KAAK,GACL,+BAA+B,CAAC;AAEpC,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,kBAAkB,GAClB,UAAU,GACV,oBAAoB,GACpB,sBAAsB,GACtB,cAAc,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CAC9C;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;IACxF,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,mBAAmB,GAAG,cAAc,CAAC;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,MAAM,mCAAmC,GAC7C,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAEtC,MAAM,MAAM,yBAAyB,GACnC,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,CAAC,cAAc,CAAC,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,GAAG,CACD,KAAK,EAAE,kCAAkC,EACzC,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,GAAG,CACD,KAAK,EAAE,wBAAwB,EAC/B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC,GAAG,CACD,KAAK,EAAE,mBAAmB,EAC1B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC3F"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,KAAK,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAC1B,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GACzB,kCAAkC,GAClC,wBAAwB,GACxB,mBAAmB,CAAC;AAExB,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,OAAO,YAAY,CAAC,iBAAiB,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,YAAY,CAAC,OAAO,CAAC;IAClC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,YAAY,CAAC,EAAE,CAAC;IAC7B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iGAAiG;IACjG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,yEAAyE;IACzE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kEAAkE;IAClE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAC5B,OAAO,GACP,KAAK,GACL,+BAA+B,CAAC;AAEpC,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3E;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,kBAAkB,GAClB,UAAU,GACV,oBAAoB,GACpB,sBAAsB,GACtB,oBAAoB,GACpB,aAAa,GACb,cAAc,CAAC;AAEnB,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CAC9C;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAC;AAEb,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,GAAG,oBAAoB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;IACxF,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,qBAAqB,CAAC;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,mBAAmB,GAAG,cAAc,CAAC;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,UAAU,CAAC,EAAE,yBAAyB,CAAC;IACvC,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,MAAM,mCAAmC,GAC7C,kBAAkB,CAAC,eAAe,CAAC,CAAC;AAEtC,MAAM,MAAM,yBAAyB,GACnC,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAC9B,kBAAkB,CAAC,cAAc,CAAC,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,GAAG,CACD,KAAK,EAAE,kCAAkC,EACzC,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,GAAG,CACD,KAAK,EAAE,wBAAwB,EAC/B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC,GAAG,CACD,KAAK,EAAE,mBAAmB,EAC1B,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC3F"}

package/sdk/dist/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,UAAU;IACnB,EAAE,EAAE,IAAI;CACA,CAAC"}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,UAAU;IACnB,EAAE,EAAE,IAAI;CACA,CAAC"}

package/sdk/dist/app-up.d.ts

@@ -0,0 +1,271 @@
+import type { ReleaseSpec } from "./namespaces/deploy.types.js";
+export declare const RUN402_APP_SCHEMA_ID: "https://run402.com/schemas/run402-app.v1.schema.json";
+export declare const RUN402_APP_MANIFEST_FILENAME: "run402.json";
+export declare const RUN402_RELEASE_MANIFEST_FILENAME: "run402.release.json";
+export declare const RUN402_APP_SPEC_VERSION: 1;
+export declare const RUN402_APP_INSTALL_GRAPH_VERSION: "run402.app_install_graph.v1";
+export declare const RUN402_APP_UP_RESULT_KIND: "run402.up.result";
+export declare const RUN402_APP_UP_RESULT_SCHEMA_VERSION: "run402.up.result.v1";
+export declare const RUN402_APP_UP_RESULT_SCHEMA_URL: "https://run402.com/schemas/run402-up-result.v1.schema.json";
+export declare const RUN402_BINDING_CLASSES: readonly ["generated_config_binding", "generated_secret_binding", "user_secret"];
+export declare const RUN402_BINDING_SCOPES: readonly ["build", "runtime", "client", "verify", "template"];
+export interface Run402AppSpec {
+    $schema: typeof RUN402_APP_SCHEMA_ID;
+    spec_version: typeof RUN402_APP_SPEC_VERSION;
+    app: {
+        id: string;
+        display_name?: string;
+        description?: string;
+    };
+    project: {
+        name?: string;
+        id?: string;
+        origin?: {
+            subdomain?: string;
+        };
+    };
+    resources?: {
+        mailboxes?: Record<string, Run402AppMailboxSpec>;
+        webhooks?: Record<string, Run402AppWebhookSpec>;
+    };
+    secrets?: Record<string, Run402AppSecretSpec>;
+    build?: Run402AppBuildSpec;
+    release: Run402AppReleaseSpec;
+    lifecycle?: {
+        project?: "per_app" | "shared";
+        prune?: "approval_required" | "disabled";
+    };
+    verify?: {
+        http?: Run402AppHttpVerifySpec[];
+    };
+}
+export interface Run402AppMailboxSpec {
+    slug?: string;
+    roles?: ("default_outbound" | "auth_sender")[];
+    description?: string;
+}
+export interface Run402AppWebhookSpec {
+    mailbox: string;
+    url: string;
+    events: string[];
+    enabled?: boolean;
+    signing?: {
+        required?: boolean;
+    };
+}
+export interface Run402AppSecretSpec {
+    required?: boolean;
+    source_env?: string;
+    description?: string;
+}
+export interface Run402AppBuildSpec {
+    mode?: "local" | "remote" | "sandbox";
+    commands?: Run402AppBuildCommand[];
+}
+export interface Run402AppBuildCommand {
+    id: string;
+    argv?: string[];
+    shell?: string;
+    cwd?: string;
+}
+export type Run402AppReleaseSpec = Omit<Partial<ReleaseSpec>, "project"> & {
+    project?: never;
+};
+export interface Run402AppHttpVerifySpec {
+    id: string;
+    path?: string;
+    url?: string;
+    expect: {
+        status: number;
+    };
+    retries?: number;
+}
+export type Run402AppSourceMetadata = {
+    kind: "local";
+    path: string;
+    commit?: string;
+} | {
+    kind: "repo";
+    repo_url: string;
+    commit?: string;
+};
+export interface CompileRun402AppInstallGraphOptions {
+    source?: Run402AppSourceMetadata;
+    name?: string;
+    root_idempotency_key?: string;
+}
+export type Run402AppInstallNodeStatus = "planned" | "running" | "succeeded" | "blocked" | "failed" | "skipped";
+export type Run402AppInstallMutation = "none" | "local" | "remote" | "destructive";
+export type Run402AppUpStatus = "planned" | "running" | "succeeded" | "blocked" | "failed" | "partial" | "deployed_unverified";
+export type Run402AppUpErrorCode = "APP_SPEC_INVALID" | "PROJECT_REQUIRED" | "PROJECT_CONFLICT" | "TIER_REQUIRED" | "SPEND_APPROVAL_REQUIRED" | "BUILD_APPROVAL_REQUIRED" | "BUILD_FAILED" | "MISSING_SECRET" | "RESOURCE_CONFLICT" | "RESOURCE_PRUNE_REQUIRES_APPROVAL" | "UNSUPPORTED_RESOURCE_KIND" | "RELEASE_APPLY_FAILED" | "VERIFY_FAILED" | "CONCURRENT_UP_IN_PROGRESS" | "APP_INSTALL_STATE_UNAVAILABLE" | "REMOTE_BUILD_UNSUPPORTED";
+export type Run402BindingClass = typeof RUN402_BINDING_CLASSES[number];
+export type Run402BindingScope = typeof RUN402_BINDING_SCOPES[number];
+export interface Run402AppUpSpendImpact {
+    amount_usd_micros?: number;
+    currency?: "USD";
+    description?: string;
+}
+export interface Run402AppUpNextAction {
+    type: string;
+    code?: Run402AppUpErrorCode;
+    message?: string;
+    command?: string;
+    argv?: string[];
+    field_path?: string;
+    node_id?: string;
+    spend?: Run402AppUpSpendImpact;
+    docs_url?: string;
+}
+export interface Run402AppUpDiagnostic {
+    code: Run402AppUpErrorCode;
+    message: string;
+    severity: "info" | "warning" | "error";
+    node_id?: string;
+    field_path?: string;
+    details?: Record<string, unknown>;
+}
+export interface Run402AppBinding {
+    env: string;
+    binding_class: Run402BindingClass;
+    scopes: Run402BindingScope[];
+    source: string;
+    value?: string;
+    redacted?: boolean;
+}
+export interface Run402AppUpApprovalPolicy {
+    yes: boolean;
+    allow_prune: boolean;
+    max_spend_usd: number | null;
+    build_mode: "local" | "remote" | "sandbox" | null;
+    shell_build_approved: boolean;
+}
+export interface Run402AppUpStep {
+    id: string;
+    kind: string;
+    status: Run402AppInstallNodeStatus;
+    mutation: Run402AppInstallMutation;
+    destructive: boolean;
+    spend: boolean;
+    idempotent: boolean;
+    ensure_key?: string;
+    input_digest: `sha256:${string}`;
+    depends_on: string[];
+    diagnostics?: Run402AppUpDiagnostic[];
+    next_actions?: Run402AppUpNextAction[];
+}
+export interface Run402AppUpResourceSummary {
+    mailboxes: Record<string, {
+        id: string | null;
+        address: string | null;
+        bindings: Run402AppBinding[];
+    }>;
+    webhooks: Record<string, {
+        id: string | null;
+        mailbox: string;
+        url: string;
+        events: string[];
+        enabled: boolean;
+    }>;
+    bindings: Run402AppBinding[];
+    user_secrets: Record<string, {
+        required: boolean;
+        source_env: string | null;
+        satisfied: boolean;
+    }>;
+}
+export interface Run402AppUpResultEnvelope {
+    kind: typeof RUN402_APP_UP_RESULT_KIND;
+    schema_version: typeof RUN402_APP_UP_RESULT_SCHEMA_VERSION;
+    schema_url: typeof RUN402_APP_UP_RESULT_SCHEMA_URL;
+    status: Run402AppUpStatus;
+    operation_id: string | null;
+    install_id: string | null;
+    spec_digest: `sha256:${string}`;
+    graph_digest: `sha256:${string}`;
+    source: Run402AppSourceMetadata | null;
+    manifest_path: string;
+    started_at: string;
+    ended_at: string;
+    duration_ms: number;
+    approval_policy: Run402AppUpApprovalPolicy;
+    dry_run: boolean;
+    project: {
+        id: string | null;
+        name: string | null;
+        public_origin: string | null;
+    };
+    steps: Run402AppUpStep[];
+    resources: Run402AppUpResourceSummary;
+    release: {
+        operation_id: string | null;
+        release_id: string | null;
+        spec: Run402AppReleaseSpec;
+    };
+    verification: {
+        http: Array<{
+            id: string;
+            status: Run402AppInstallNodeStatus;
+            path?: string;
+            url?: string;
+            expected_status: number;
+            actual_status?: number | null;
+        }>;
+    };
+    diagnostics: Run402AppUpDiagnostic[];
+    next_actions: Run402AppUpNextAction[];
+    graph: Run402AppInstallGraph;
+}
+export interface Run402AppInstallGraphNode {
+    id: string;
+    kind: string;
+    depends_on: string[];
+    input_digest: `sha256:${string}`;
+    status: Run402AppInstallNodeStatus;
+    mutation: Run402AppInstallMutation;
+    idempotent: boolean;
+    ensure_key?: string;
+    destructive: boolean;
+    spend: boolean;
+    details?: Record<string, unknown>;
+}
+export interface Run402GeneratedMailboxBindings {
+    id: string;
+    address: string;
+}
+export interface Run402AppInstallBindings {
+    mailboxes: Record<string, Run402GeneratedMailboxBindings>;
+}
+export interface Run402AppInstallGraph {
+    schema_version: typeof RUN402_APP_INSTALL_GRAPH_VERSION;
+    app_id: string;
+    source: Run402AppSourceMetadata | null;
+    spec_digest: `sha256:${string}`;
+    graph_digest: `sha256:${string}`;
+    nodes: Run402AppInstallGraphNode[];
+    release_spec: Run402AppReleaseSpec;
+    bindings: Run402AppInstallBindings;
+}
+export declare function compileRun402AppInstallGraph(spec: Run402AppSpec, opts?: CompileRun402AppInstallGraphOptions): Promise<Run402AppInstallGraph>;
+export declare function generatedMailboxBindings(logicalName: string): Run402GeneratedMailboxBindings;
+export declare function mailboxRuntimeBindings(logicalName: string): Run402AppBinding[];
+export declare function platformMetadataBindings(opts?: {
+    publicOriginKnown?: boolean;
+}): Run402AppBinding[];
+export declare function createRun402AppUpResult(input: {
+    graph: Run402AppInstallGraph;
+    manifest_path: string;
+    status: Run402AppUpStatus;
+    started_at: string;
+    ended_at?: string;
+    dry_run: boolean;
+    project_id?: string | null;
+    project_name?: string | null;
+    public_origin?: string | null;
+    approval_policy?: Partial<Run402AppUpApprovalPolicy>;
+    operation_id?: string | null;
+    install_id?: string | null;
+    diagnostics?: Run402AppUpDiagnostic[];
+    next_actions?: Run402AppUpNextAction[];
+    blocked_node_id?: string;
+}): Run402AppUpResultEnvelope;
+//# sourceMappingURL=app-up.d.ts.map