wawesome 0.21.0 → 0.22.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 wawesome.io
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/{guest-parity-W61MH7Fb.mjs → guest-parity-DA7x-8BC.mjs}

@@ -1,4 +1,4 @@
-import { a as unsupportedGlobals, i as shimmedGlobals, n as methodRemedy, r as polyfilledGlobals, t as declaredMethods } from "./guest-surface-D5X-IMAN.mjs";
+import { a as shimmedGlobals, i as polyfilledGlobals, o as unsupportedGlobals, r as methodRemedy, t as declaredMethods } from "./guest-surface-BwrNP2Cz.mjs";
 //#region ../../server/guest-surface/message-channel.js
 const ENTANGLED = Symbol("entangled");
 const QUEUE = Symbol("queue");

package/dist/guest-parity.mjs

@@ -1,2 +1,2 @@
-import { t as applyGuestParity } from "./guest-parity-W61MH7Fb.mjs";
+import { t as applyGuestParity } from "./guest-parity-DA7x-8BC.mjs";
 export { applyGuestParity };

package/dist/{guest-surface-D5X-IMAN.mjs → guest-surface-BwrNP2Cz.mjs}

@@ -130,6 +130,11 @@ var globals = [
 		"remedy": "the guest runs one thread and shares memory with nothing; use an ArrayBuffer"
 	}
 ];
+var modules = [{
+	"specifiers": ["node:fs/promises", "fs/promises"],
+	"shim": "fs-promises",
+	"why": "Reads the private files the Version carries. The platform writes the module into the guest folder, so a bundler must leave the import alone."
+}];
 var methods = [
 	{
 		"target": "Number.prototype",
@@ -159,6 +164,9 @@ var methods = [
 var methodRemedy$1 = "the engine carries no ICU, so it ignores the locale and returns an unlocalised string; format the value yourself, or bundle a formatting library and call it directly";
 //#endregion
 //#region src/guest-surface.ts
+function declaredModules() {
+	return modules;
+}
 function declaredGlobals() {
 	return globals;
 }
@@ -205,4 +213,4 @@ function declaredPackages(projectDir) {
 	});
 }
 //#endregion
-export { unsupportedGlobals as a, shimmedGlobals as i, methodRemedy as n, polyfilledGlobals as r, declaredMethods as t };
+export { shimmedGlobals as a, polyfilledGlobals as i, declaredModules as n, unsupportedGlobals as o, methodRemedy as r, declaredMethods as t };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { a as unsupportedGlobals, n as methodRemedy, r as polyfilledGlobals, t as declaredMethods } from "./guest-surface-D5X-IMAN.mjs";
+import { i as polyfilledGlobals, n as declaredModules, o as unsupportedGlobals, r as methodRemedy, t as declaredMethods } from "./guest-surface-BwrNP2Cz.mjs";
 import cac from "cac";
 import fs from "node:fs";
 import path from "node:path";
@@ -12,21 +12,45 @@ import { Readable } from "node:stream";
 import readline from "node:readline";
 import { confirm, select } from "@inquirer/prompts";
 import zlib from "node:zlib";
+//#region src/brand.ts
+const PLAIN = "[w] wawesome";
+const TRUECOLOR_INDIGO = "\x1B[38;2;107;124;255m";
+const INDIGO_256 = "\x1B[38;5;105m";
+const BOLD = "\x1B[1m";
+const RESET = "\x1B[0m";
+function lockup(stream = process.stdout, env = process.env) {
+	if (!stream.isTTY || env.NO_COLOR) return PLAIN;
+	const indigo = /^(truecolor|24bit)$/i.test(env.COLORTERM ?? "") ? TRUECOLOR_INDIGO : INDIGO_256;
+	const bracket = (b) => `${indigo}${BOLD}${b}${RESET}`;
+	return `${bracket("[")}${BOLD}w${RESET}${bracket("]")} ${BOLD}wawesome${RESET}`;
+}
+const LOCKUP_HTML = "<div style=\"margin-bottom: 24px; font: 700 20px/1 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; letter-spacing: -0.02em; color: #e8eaf0\"><span style=\"font-size: 22px; letter-spacing: -0.06em\"><span style=\"color: #6b7cff\">[</span>w<span style=\"color: #6b7cff\">]</span></span>&nbsp;wawesome</div>";
+//#endregion
 //#region src/errors.ts
-/** A rejection carrying the gateway's own prose and, where given, its reason. */
+/**
+* A rejection carrying the gateway's own prose and, where given, its reason.
+*
+* The call's trace id rides in the message itself, on a line of its own, so
+* every place that prints a refusal prints the one thing support can search by.
+*/
 var GatewayError = class extends Error {
 	status;
 	reason;
 	/** The raw response, for `--verbose` to print when the prose is not enough. */
 	body;
-	constructor(message, status, reason, body = "") {
-		super(message);
+	traceId;
+	constructor(message, status, reason, body = "", traceId) {
+		super(traceId ? `${message}\n${traceLine(traceId)}` : message);
 		this.name = "GatewayError";
 		this.status = status;
 		this.reason = reason;
 		this.body = body;
+		this.traceId = traceId;
 	}
 };
+function traceLine(traceId) {
+	return `Trace ID: ${traceId}`;
+}
 /**
 * Read a failed response into a `GatewayError`.
 *
@@ -36,15 +60,19 @@ var GatewayError = class extends Error {
 * was doing, so callers handle it before reaching this.
 */
 async function asGatewayError(res, fallback) {
-	return rejectionOf(await res.text().catch(() => ""), res.status, fallback);
+	const traceId = res.headers?.get("x-wawesome-trace-id") ?? void 0;
+	return rejectionOf(await res.text().catch(() => ""), res.status, fallback, traceId);
 }
-/** The same reading, for a caller that has already taken the body off the wire. */
-function rejectionOf(body, status, fallback) {
+/**
+* The same reading, for a caller that has already taken the body off the wire.
+* `traceId` is the header's, for a body that never made it here as JSON.
+*/
+function rejectionOf(body, status, fallback, traceId) {
 	try {
 		const parsed = JSON.parse(body);
-		return new GatewayError(parsed.error || fallback, status, parsed.reason, body);
+		return new GatewayError(parsed.error || fallback, status, parsed.reason, body, parsed.trace_id || traceId);
 	} catch {
-		return new GatewayError(fallback, status, void 0, body);
+		return new GatewayError(fallback, status, void 0, body, traceId);
 	}
 }
 /** Why the gateway refused, where what was thrown might not be a refusal at all. */
@@ -73,7 +101,12 @@ function credentialPrefix(secret) {
 */
 function unauthorizedMessage(status, body) {
 	const secret = credentialFromEnvironment();
-	if (!secret) return status === 401 ? "Authentication expired. Run 'wawesome login' again." : rejectionOf(body, status, `The platform refused this request (HTTP ${status}).`).message;
+	if (!secret) {
+		const refusal = rejectionOf(body, status, `The platform refused this request (HTTP ${status}).`);
+		if (status !== 401) return refusal.message;
+		const expired = "Authentication expired. Run 'wawesome login' again.";
+		return refusal.traceId ? `${expired}\n${traceLine(refusal.traceId)}` : expired;
+	}
 	return rejectionOf(body, status, `The deploy credential ${credentialPrefix(secret)} was refused (HTTP ${status}).`).message;
 }
 function reportSessionCommandRefused(secret, consequence) {
@@ -847,6 +880,7 @@ async function buildHandler(entryInput, config, options) {
 				"worker",
 				"browser"
 			],
+			external: declaredModules().flatMap((module) => module.specifiers),
 			target: "es2022",
 			treeShaking: true,
 			minify: true,
@@ -895,7 +929,7 @@ async function buildHandler(entryInput, config, options) {
 * that has to name this version — `--version`, the dependency a scaffolded
 * project pins — reads it here, so a release bumps one file.
 */
-const CLI_VERSION = "0.21.0";
+const CLI_VERSION = "0.22.0";
 //#endregion
 //#region src/cli-login.ts
 const START_PATH = "/v1/cli/login/start";
@@ -1068,13 +1102,14 @@ function listen(server, port) {
 		});
 	});
 }
-const STYLE = "font-family: system-ui; text-align: center; padding: 50px; background: #0f172a; color: #f8fafc;";
+const STYLE = "margin: 0; padding: 50px; text-align: center; background: #0e1016; color: #9298a8; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif;";
 function page(title, said) {
 	return `<!DOCTYPE html>
 <html>
 <head><title>wawesome — ${escapeHtml(title.toLowerCase())}</title></head>
 <body style="${STYLE}">
-<h2>${escapeHtml(title)}</h2>
+${LOCKUP_HTML}
+<h2 style="color: #e8eaf0">${escapeHtml(title)}</h2>
 <p>${escapeHtml(said)}</p>
 </body>
 </html>`;
@@ -1372,7 +1407,7 @@ function storeSession({ gatewayUrl, dashboardUrl, session }) {
 		tenant_slug: session.tenant_slug,
 		tenant_name: session.tenant_name
 	});
-	console.log("\n======================================================");
+	console.log(`\n${lockup()}`);
 	console.log("🎉 \x1B[32mLOGIN SUCCESSFUL!\x1B[0m");
 	console.log("======================================================");
 	if (session.tenant_name) console.log(`\n  Workspace: ${session.tenant_name}`);
@@ -1577,8 +1612,15 @@ function planLimitAdvice(reason) {
 //#region src/report.ts
 /** Where a value sits in the deploy's summary block, so every line under one label agrees. */
 const VALUE_COLUMN = " ".repeat(14);
-/** The platform's own prose, kept inside the block it is printed in. */
+/**
+* The platform's own prose, kept inside the block it is printed in. A line
+* break it already carries stays one, which keeps a refusal's trace id on a
+* line of its own.
+*/
 function wrapped(said) {
+	return said.split("\n").flatMap(wrappedLine);
+}
+function wrappedLine(said) {
 	const width = 64;
 	const lines = [];
 	let line = "";
@@ -2019,6 +2061,13 @@ function attachedDomainLines(domain, printedBy = "deploy") {
 		`${VALUE_COLUMN}Remove 'domain' from wawesome-function.json, or deploy again`,
 		`${VALUE_COLUMN}once it is gone to attach it afresh.`
 	];
+	if (domain.withdrawn) return [
+		"",
+		`  Domain:     \x1b[33m${hostname}: stopped, because the plan does not include custom domains\x1b[0m`,
+		`${VALUE_COLUMN}It is still attached, and its records and certificate are kept.`,
+		`${VALUE_COLUMN}Move to a paid plan and it answers again within the hour.`,
+		`${VALUE_COLUMN}This app's own address still answers.`
+	];
 	const legs = domain.legs ?? [];
 	if (legs.length > 1) return pairLines(domain, legs, printedBy);
 	const lines = ["", `  Domain:     \x1b[36m${hostname}\x1b[0m: ${whereItGotTo(domain)}`];
@@ -2312,22 +2361,26 @@ function sha256(bytes) {
 }
 /**
 * What this deploy *is*: the server bundle together with the sorted set of
-* asset path and content-hash pairs, and the **Fallback document** it declares.
+* asset path and content-hash pairs, the same set for its **Private file**s
+* marked apart, and the **Fallback document** it declares.
 *
 * Computed here, before anything is uploaded, so a deploy that changed nothing
 * is refused before a byte moves. Mirrors `deploy_digest` in
 * `server/crates/core/src/features/assets/identity.rs` — the gateway recomputes
 * it from what actually arrives, so the two have to agree exactly.
 *
-* A deploy declaring no fallback contributes nothing here rather than a stated
-* absence, so every digest computed before fallbacks existed is unmoved.
+* A deploy declaring no fallback and no private files contributes nothing here
+* for either rather than a stated absence, so every digest computed before
+* they existed is unmoved.
 */
 const DEPLOY_DIGEST_DOMAIN = "wawesome-deploy-v1";
-function deployDigest(bundle, assets, fallback) {
+function deployDigest(bundle, assets, fallback, privateFiles = []) {
+	const byPath = (files) => [...files].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
 	const digest = crypto.createHash("sha256");
 	digest.update(`${DEPLOY_DIGEST_DOMAIN}\n`);
 	digest.update(`${sha256(bundle)}\n`);
-	for (const asset of [...assets].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0)) digest.update(`${asset.path}\0${asset.content_hash}\n`);
+	for (const asset of byPath(assets)) digest.update(`${asset.path}\0${asset.content_hash}\n`);
+	for (const file of byPath(privateFiles)) digest.update(`private\0${file.path}\0${file.content_hash}\n`);
 	if (fallback) digest.update(`fallback\0${fallback.path}\0${fallback.status}\n`);
 	return digest.digest("hex");
 }
@@ -3314,6 +3367,7 @@ async function deploy(entryInput, options) {
 	const declaresSchedules = config.schedules !== void 0;
 	const declaresFallback = declared.fallback !== void 0;
 	const assets = config.assets ? collectAssets(path.resolve(config.assets)) : [];
+	const privateFiles = config.files ? collectAssets(path.resolve(config.files)) : [];
 	const documents = assets.filter((asset) => isDocument(asset.path));
 	if (jsCode === null && documents.length === 0) {
 		console.error(`[wawesome] Error: Entry file '${DEFAULT_ENTRY}' not found, and this project carries no pages.`);
@@ -3322,7 +3376,10 @@ async function deploy(entryInput, options) {
 		console.error("[wawesome] \x1B[36m\"assets\"\x1B[0m at a directory holding an index.html.");
 		process.exit(1);
 	}
-	if (assets.length > 0) await uploadAssets(creds, app, funcName, jsCode ?? "", assets, declared, isVerbose, declaresSchedules);
+	if (assets.length > 0 || privateFiles.length > 0) await uploadAssets(creds, app, funcName, jsCode ?? "", {
+		assets,
+		privateFiles
+	}, declared, isVerbose, declaresSchedules);
 	console.log(`[wawesome] Uploading code for ${app}/${funcName}...`);
 	const uploadUrl = `${creds.gateway_url}/v1/apps/${encodeURIComponent(app)}/functions/${encodeURIComponent(funcName)}/code`;
 	if (isVerbose) console.log(`[wawesome:verbose] POST ${uploadUrl}`);
@@ -3330,7 +3387,7 @@ async function deploy(entryInput, options) {
 		...declaredFields(declared),
 		...declared.message ? { message: declared.message } : {}
 	};
-	const uploadRes = assets.length > 0 || declaresSchedules || declaresFallback || Object.keys(declaredOnTheWire).length > 0 || jsCode === null ? await authorizedFetch(uploadUrl, {
+	const uploadRes = assets.length > 0 || privateFiles.length > 0 || declaresSchedules || declaresFallback || Object.keys(declaredOnTheWire).length > 0 || jsCode === null ? await authorizedFetch(uploadUrl, {
 		method: "POST",
 		headers: {
 			Authorization: `Bearer ${creds.tenant_jwt}`,
@@ -3339,6 +3396,7 @@ async function deploy(entryInput, options) {
 		body: JSON.stringify({
 			...jsCode !== null ? { code: jsCode } : {},
 			...assets.length > 0 ? { assets: manifestOf(assets) } : {},
+			...privateFiles.length > 0 ? { files: manifestOf(privateFiles) } : {},
 			...declaresSchedules ? { schedules: config.schedules } : {},
 			...declaresFallback ? { fallback: declared.fallback } : {},
 			...declaredOnTheWire
@@ -3446,6 +3504,7 @@ async function deploy(entryInput, options) {
 	if (version !== void 0) console.log(`  Version:    ${version}${nothingBuilt ? " (already live, nothing promoted)" : ""}`);
 	for (const line of handlerLines(bundlePath)) console.log(line);
 	if (assets.length > 0) console.log(`  Assets:     ${assets.length}${pageCount(documents.length)}`);
+	if (privateFiles.length > 0) console.log(`  Private:    ${privateFiles.length}`);
 	console.log(`  Visibility: ${visibility}`);
 	if (schedules.length > 0) {
 		console.log("");
@@ -3495,7 +3554,7 @@ function pageCount(pages) {
 * The identity of the whole deploy goes with the question, so a redeploy that
 * changed nothing at all is refused here — before a byte of it has moved.
 */
-async function uploadAssets(creds, app, funcName, bundle, assets, declared, isVerbose, continueWhenUnchanged) {
+async function uploadAssets(creds, app, funcName, bundle, { assets, privateFiles }, declared, isVerbose, continueWhenUnchanged) {
 	const manifestRes = await authorizedFetch(`${creds.gateway_url}/v1/apps/${encodeURIComponent(app)}/functions/${encodeURIComponent(funcName)}/assets/manifest`, {
 		method: "POST",
 		headers: {
@@ -3503,8 +3562,9 @@ async function uploadAssets(creds, app, funcName, bundle, assets, declared, isVe
 			"Content-Type": "application/json"
 		},
 		body: JSON.stringify({
-			deploy_digest: deployDigest(Buffer.from(bundle, "utf-8"), assets, declared.fallback),
+			deploy_digest: deployDigest(Buffer.from(bundle, "utf-8"), assets, declared.fallback, privateFiles),
 			assets: manifestOf(assets),
+			...privateFiles.length > 0 ? { files: manifestOf(privateFiles) } : {},
 			...declaredFields(declared)
 		})
 	});
@@ -3531,12 +3591,13 @@ async function uploadAssets(creds, app, funcName, bundle, assets, declared, isVe
 		process.exit(1);
 	}
 	const { missing = [] } = await manifestRes.json();
-	const toUpload = assets.filter((asset) => missing.includes(asset.content_hash));
+	const carried = [...assets, ...privateFiles];
+	const toUpload = [...new Map(carried.filter((file) => missing.includes(file.content_hash)).map((file) => [file.content_hash, file])).values()];
 	if (toUpload.length === 0) {
-		console.log(`[wawesome] ✅ ${assets.length} asset(s) already on the platform, nothing to upload.`);
+		console.log(`[wawesome] ✅ ${carried.length} file(s) already on the platform, nothing to upload.`);
 		return;
 	}
-	console.log(`[wawesome] Uploading ${toUpload.length} of ${assets.length} asset(s)...`);
+	console.log(`[wawesome] Uploading ${toUpload.length} of ${carried.length} file(s)...`);
 	for (const asset of toUpload) {
 		if (isVerbose) console.log(`[wawesome:verbose] PUT ${asset.path} (${asset.size_bytes} bytes)`);
 		const res = await authorizedFetch(`${creds.gateway_url}/v1/assets/${asset.content_hash}`, () => ({
@@ -3559,7 +3620,7 @@ async function uploadAssets(creds, app, funcName, bundle, assets, declared, isVe
 			process.exit(1);
 		}
 	}
-	console.log(`[wawesome] ✅ ${toUpload.length} asset(s) uploaded.`);
+	console.log(`[wawesome] ✅ ${toUpload.length} file(s) uploaded.`);
 }
 //#endregion
 //#region src/opens-host.ts
@@ -4423,7 +4484,8 @@ async function promptForDeclaredEnv(session, declared) {
 		console.log(`  \x1b[1m${variable.key}\x1b[0m \x1b[90m(${flags.join(", ")})\x1b[0m`);
 		console.log(`    ${variable.description}`);
 		console.log(`    \x1b[90mWhere to find it: ${variable.where_to_find}\x1b[0m`);
-		const value = await session.ask(`  ${variable.key}?`, "");
+		const later = variable.required ? " (leave blank to set it after the deploy)" : "";
+		const value = await session.ask(`  ${variable.key}?${later}`, "");
 		console.log("");
 		answers.push({
 			declared: variable,
@@ -5096,6 +5158,20 @@ async function fetchInvocationLogBody(gatewayUrl, tenantJwt, invocationId, isVer
 	}
 	const body = await res.text();
 	process.stdout.write(body.endsWith("\n") ? body : body + "\n");
+	const remediation = await fetchRemediation(gatewayUrl, tenantJwt, invocationId);
+	if (remediation?.cause === "egress-blocked") console.log(`[wawesome] An outbound call was blocked (egress-blocked). Open its host under Egress: ${remediation.dashboard_url}`);
+}
+async function fetchRemediation(gatewayUrl, tenantJwt, invocationId) {
+	try {
+		const res = await authorizedFetch(`${gatewayUrl}/v1/invocations/${encodeURIComponent(invocationId)}`, {
+			method: "GET",
+			headers: { Authorization: `Bearer ${tenantJwt}` }
+		});
+		if (!res.ok) return void 0;
+		return (await res.json()).remediation;
+	} catch {
+		return;
+	}
 }
 /**
 * List recent invocations for a function.
@@ -6768,7 +6844,7 @@ cli.command("cron pause <schedule>", "Pause a schedule by name").option("-r, --r
 cli.command("cron resume <schedule>", "Resume a paused schedule").option("-f, --function <function>", "Function name override").option("-a, --app <app>", "App slug override").option("-v, --verbose", "Enable verbose debug output").action((schedule, options) => resumeScheduleCommand(schedule, void 0, options));
 cli.command("cron history [target]", "Read background run history").alias("cron runs").option("-s, --state <state>", "Filter run history by state (pending, running, dispatched, skipped, missed, cancelled, lost, failed)").option("--status <status>", "Alias for --state").option("-l, --limit <limit>", "Limit number of history rows (default: 50)").option("-a, --app <app>", "App slug override").option("-v, --verbose", "Enable verbose debug output").action((target, options) => runHistoryCommand(target, options));
 cli.command("schedules [action] [target]", "Alias for 'cron'").option("-a, --app <app>", "App slug override").option("-v, --verbose", "Enable verbose debug output").action((action, target, options) => cronCommand(action, target, void 0, options));
-cli.help();
+cli.help((sections) => [{ body: `${lockup()} ${CLI_VERSION}` }, ...sections.slice(1)]);
 cli.version(CLI_VERSION);
 cli.parse();
 //#endregion

package/dist/vite.mjs

@@ -1,4 +1,4 @@
-import { a as unsupportedGlobals, n as methodRemedy, r as polyfilledGlobals, t as declaredMethods } from "./guest-surface-D5X-IMAN.mjs";
+import { i as polyfilledGlobals, o as unsupportedGlobals, r as methodRemedy, t as declaredMethods } from "./guest-surface-BwrNP2Cz.mjs";
 import fs from "node:fs";
 import path from "node:path";
 //#region src/vite.ts

package/dist/vitest-setup.mjs

@@ -1,4 +1,4 @@
-import { t as applyGuestParity } from "./guest-parity-W61MH7Fb.mjs";
+import { t as applyGuestParity } from "./guest-parity-DA7x-8BC.mjs";
 //#region src/vitest-setup.ts
 applyGuestParity();
 //#endregion

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "wawesome",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "description": "CLI tool for building and deploying serverless functions on wawesome.io platform",
+  "license": "MIT",
   "type": "module",
   "bin": {
     "wawesome": "bin/wawesome.js"