@abyssinia-labs/sokie 0.7.0-staging.138 → 0.8.0

package/README.md

@@ -90,6 +90,17 @@ sokie requests                    # what waits for your answer, and what you ask
 sokie requests approve kd7a3f9c   # or decline, with --note
 ```
 
+An owner or admin can also make a server's production deploys wait for one
+of them. A deploy that must wait is held: `sokie deploy` stops there and
+says why, and it serves only the team, signed in, at its own address for up
+to 7 days. It's listed in `sokie requests` for an owner or admin to approve,
+which puts it live:
+
+```bash
+sokie call getInvoice --held 12   # try held deploy 12 before anyone approves it
+sokie deploys                     # held shows as waiting for an admin
+```
+
 ## Links
 
 - [Docs](https://sokie.sh/docs)

package/dist/sokie.mjs

@@ -24033,9 +24033,9 @@ var require___dev__ = __commonJS((exports, module) => {
 
 // package.json
 var name = "@abyssinia-labs/sokie";
-var version = "0.7.0-staging.138";
+var version = "0.8.0";
 var sokie = {
-  site: "https://staging.sokie.sh"
+  site: "https://sokie.sh"
 };
 
 // src/command.ts
@@ -44961,6 +44961,7 @@ function utf8Bytes(text3) {
 // src/deploy.ts
 var POLL_MS = 2000;
 var WAIT_MS = 5 * 60 * 1000;
+var DONE = new Set(["live", "failed", "held"]);
 
 class DeployError extends Error {
   code;
@@ -45023,7 +45024,7 @@ async function followDeploy(platform, deploymentId, options) {
       last = found.status;
       await options.progress?.(found.status);
     }
-    if (!options.wait || found.status === "live" || found.status === "failed")
+    if (!options.wait || DONE.has(found.status))
       return found;
     if (Date.now() > deadline) {
       throw new DeployError("deploy_timeout", "The deploy is still running; check it in the app.");
@@ -47368,12 +47369,26 @@ function routeCall(definition, name2, input2) {
 }
 
 // src/call-target.ts
-function targetFrom(preview, production) {
-  if (preview !== undefined && production) {
-    throw new UsageError("Say --preview <n> or --production, not both.");
+function targetFrom({ preview, production = false, held }) {
+  const given = [
+    preview === undefined ? "" : "--preview <n>",
+    held === undefined ? "" : "--held <n>",
+    production ? "--production" : ""
+  ].filter(Boolean);
+  if (given.length > 1) {
+    const last = given.pop();
+    const all = given.length === 1 ? "both" : "all three";
+    throw new UsageError(`Say ${given.join(", ")} or ${last}, not ${all}.`);
   }
   if (production)
     return { kind: "production" };
+  if (held !== undefined) {
+    const number5 = Number(held.replace(/^#/, ""));
+    if (!Number.isInteger(number5) || number5 < 1) {
+      throw new UsageError(`--held takes a deploy's number, like 12, not ${held}.`);
+    }
+    return { kind: "held", number: number5 };
+  }
   if (preview === undefined)
     return { kind: "dev" };
   const number4 = Number(preview);
@@ -47385,6 +47400,8 @@ function targetFrom(preview, production) {
 function targetName(target) {
   if (target.kind === "dev")
     return "sokie dev";
+  if (target.kind === "held")
+    return `held deploy #${target.number}`;
   return target.kind === "production" ? "production" : `preview #${target.number}`;
 }
 function refusal2(code2, server, target) {
@@ -47395,6 +47412,8 @@ function refusal2(code2, server, target) {
       return new DeployError("not_live", `${server.slug} has nothing live yet, so there's nothing to call. sokie deploy puts it live.`);
     case "NO_PREVIEW":
       return new DeployError("no_preview", `${server.slug} has no live preview for #${target.kind === "preview" ? target.number : "?"}.`);
+    case "NOT_HELD":
+      return new DeployError("not_held", `Deploy #${target.kind === "held" ? target.number : "?"} of ${server.slug} isn't held now: it went live, or was declined, withdrawn, replaced or lapsed. sokie deploys says which.`);
     case "PAUSED":
       return new DeployError("paused", `${server.slug} is paused, so it takes no calls.`);
     case "RATE_LIMITED":
@@ -47411,7 +47430,8 @@ async function mintEndpoint(client, server, target) {
   try {
     const minted = await client.action(fn.mintTestToken, {
       serverId: server.serverId,
-      ...target.kind === "preview" ? { preview: target.number } : {}
+      ...target.kind === "preview" ? { preview: target.number } : {},
+      ...target.kind === "held" ? { held: target.number } : {}
     });
     return { url: minted.url, token: minted.token, expiresAt: minted.expiresAt };
   } catch (error62) {
@@ -64638,6 +64658,7 @@ async function runCall(argv, out, deps) {
     dir: { type: "string" },
     server: { type: "string" },
     preview: { type: "string" },
+    held: { type: "string" },
     production: { type: "boolean", default: false }
   });
   const [name2, ...extra] = positionals;
@@ -64645,9 +64666,9 @@ async function runCall(argv, out, deps) {
     throw new UsageError(`Give one tool's name: sokie call getTask --input '{"taskId":"t_1"}'.`);
   }
   const input2 = parseInput(values.input);
-  const target = targetFrom(values.preview, values.production);
+  const target = targetFrom(values);
   if (target.kind === "dev" && values.server !== undefined) {
-    throw new UsageError("--server picks a deploy: add --preview <n> or --production.");
+    throw new UsageError("--server picks a deploy: add --preview <n>, --held <n> or --production.");
   }
   const root = resolve(values.dir ?? ".");
   const local = localRoute(root, name2, input2);
@@ -64687,14 +64708,15 @@ async function runCall(argv, out, deps) {
 }
 var callCommand = {
   name: "call",
-  synopsis: "sokie call <tool> [--input '<json>'] [--yes] [--preview <n> | --production] [--server <slug>] [--dir <dir>] [--site <url>]",
+  synopsis: "sokie call <tool> [--input '<json>'] [--yes] [--preview <n> | --held <n> | --production] [--server <slug>] [--dir <dir>] [--site <url>]",
   summary: "Call one tool as an agent would, on sokie dev or a deploy.",
   help: `Calls the tool over MCP and prints what an agent would get back, then how
 long it took. Exits 1 when the call fails.
 
 By default the call goes to the sokie dev running for this checkout (start
 it in another terminal first). --preview <n> calls the pull request's
-preview and --production the live deploy, as you, with a token that lasts
+preview, --held <n> a deploy waiting for an owner or admin at its own
+address, and --production the live deploy, as you, with a token that lasts
 five minutes; the call is logged with the client "Sokie test".
 
 A tool that does more than read (write, delete or external) asks first,
@@ -64710,6 +64732,7 @@ called by name too, to see what an agent finds.
 --input <json>   The tool's arguments, as one JSON object (default {}).
 --yes, -y        Don't ask. Needed when there is no terminal, as in a script.
 --preview <n>    Call pull request n's preview deploy.
+--held <n>       Call deploy n while it's held: sokie deploys lists it.
 --production     Call the live deploy.
 --server <s>     A server by slug, instead of the one this repository is linked to.
 --dir <dir>      The repository (default .).
@@ -64847,6 +64870,167 @@ async function exchangeDeployKey(info2, key, fetchFn = fetch) {
   return body.access_token;
 }
 
+// src/deploy-list.ts
+var ENDED_HOLDS = {
+  HOLD_DECLINED: "declined",
+  HOLD_WITHDRAWN: "withdrawn",
+  HOLD_EXPIRED: "lapsed"
+};
+function statusOf(deploy) {
+  if (deploy.status === "held")
+    return { text: "held", tone: "warn" };
+  if (deploy.status === "failed") {
+    const ended = ENDED_HOLDS[deploy.error?.code ?? ""];
+    return ended ? { text: ended, tone: "dim" } : { text: "failed", tone: "fail" };
+  }
+  if (deploy.status === "queued" || deploy.status === "building") {
+    return { text: deploy.status, tone: "warn" };
+  }
+  if (deploy.previewPr !== undefined)
+    return { text: "preview", tone: deploy.status === "live" ? "ok" : undefined };
+  return deploy.status === "live" ? { text: "live", tone: "ok" } : { text: "replaced", tone: "dim" };
+}
+function sourceOf(deploy) {
+  if (deploy.restoreOf !== undefined)
+    return `restore of #${deploy.restoreOf}`;
+  const source = deploy.source;
+  if (!source)
+    return "uploaded from the CLI";
+  if (source.kind === "upload") {
+    const edited = source.edited ?? [];
+    if (edited.length > 0) {
+      const named = edited.length <= 2 ? edited.join(" and ") : `${edited[0]} and ${edited.length - 1} more`;
+      return `${named} edited in the app`;
+    }
+    return source.from === "web" ? "made in Sokie from a spec" : "uploaded from the CLI";
+  }
+  const pr = deploy.previewPr ?? source.prNumber;
+  const sha = source.sha.slice(0, 7);
+  return pr === undefined ? `${sha} on ${source.branch}` : `${sha} · preview #${pr}`;
+}
+var DAY_FORMAT = new Intl.DateTimeFormat("en", {
+  month: "short",
+  day: "numeric",
+  timeZone: "UTC"
+});
+function onDay(at2) {
+  return DAY_FORMAT.format(at2);
+}
+var MINUTE = 60000;
+var HOUR = 60 * MINUTE;
+var DAY = 24 * HOUR;
+function ago(at2, now) {
+  const gone = Math.max(0, now - at2);
+  if (gone < MINUTE)
+    return "just now";
+  if (gone < HOUR)
+    return `${Math.floor(gone / MINUTE)} min ago`;
+  if (gone < DAY)
+    return `${Math.floor(gone / HOUR)} h ago`;
+  if (gone < 2 * DAY)
+    return "yesterday";
+  if (gone < 30 * DAY)
+    return `${Math.floor(gone / DAY)} days ago`;
+  return new Date(at2).toLocaleDateString("en-US", {
+    month: "short",
+    day: "numeric",
+    timeZone: "UTC"
+  });
+}
+function headerLine(slug, facts) {
+  if (facts.pin) {
+    const since = facts.pin.skippedPushes === 1 ? "1 push" : `${facts.pin.skippedPushes} pushes`;
+    return {
+      text: `${slug} · production stays on #${facts.live ?? "?"} until sokie deploys resume (${since} since the restore)`,
+      tone: "warn"
+    };
+  }
+  if (facts.branch)
+    return { text: `${slug} · production follows ${facts.branch}`, tone: "dim" };
+  return { text: `${slug} · Sokie keeps its files`, tone: "dim" };
+}
+function rowLine(deploy, now) {
+  const status = statusOf(deploy);
+  const number4 = deploy.number === undefined ? "—" : `#${deploy.number}`;
+  const text5 = `  ${number4.padEnd(5)} ${status.text.padEnd(9)} ${sourceOf(deploy).padEnd(32)} ${ago(deploy.createdAt, now)}`;
+  return { text: text5, tone: status.tone === "dim" ? undefined : status.tone };
+}
+function heldLine(deploy) {
+  const until = deploy.hold ? ` until ${onDay(deploy.hold.until)}` : "";
+  const where = deploy.heldUrl ? ` · ${deploy.heldUrl}` : "";
+  return { text: `        waiting for an admin${until}${where}`, tone: "dim" };
+}
+function listLines2(slug, deploys, facts) {
+  const live = deploys.find((d) => d.status === "live" && d.previewPr === undefined)?.number;
+  const lines = [headerLine(slug, { ...facts, live }), { text: "" }];
+  if (deploys.length === 0) {
+    lines.push({ text: "  No deploys yet. sokie deploy makes the first one.", tone: "dim" });
+    return lines;
+  }
+  for (const deploy of deploys) {
+    lines.push(rowLine(deploy, facts.now));
+    if (deploy.status === "held")
+      lines.push(heldLine(deploy));
+  }
+  if (facts.more) {
+    lines.push({
+      text: `  … older ones too. sokie deploys --limit ${facts.limit * 2} goes further back; --json for scripts.`,
+      tone: "dim"
+    });
+  }
+  return lines;
+}
+function diffTone(line, index) {
+  if (index === 0)
+    return "strong";
+  const sign = line.trimStart().slice(0, 2);
+  if (sign === "+ ")
+    return "ok";
+  if (sign === "- ")
+    return "fail";
+  if (sign === "↑ " || sign === "↓ ")
+    return "warn";
+  return;
+}
+
+// src/deploy-held.ts
+function names(list) {
+  return list.length > 1 ? `${list.slice(0, -1).join(", ")} and ${list.at(-1)}` : list[0] ?? "";
+}
+function holdWhy(deploy, slug) {
+  const tools = deploy.hold?.tools ?? [];
+  if (deploy.hold?.reason === "newTools" && tools.length > 0) {
+    const verbs = tools.length === 1 ? "deletes or acts" : "delete or act";
+    return `It adds ${names(tools)}, which ${verbs} outside the API, so an owner or admin looks first.`;
+  }
+  return `Production deploys of ${slug} wait for an owner or admin.`;
+}
+function heldLines(slug, deploy) {
+  const which = deploy.number === undefined ? "this deploy" : `deploy #${deploy.number}`;
+  const lines = [
+    {
+      text: `Held: ${which} waits for an owner or admin before it goes on production.`,
+      tone: "warn"
+    },
+    { text: holdWhy(deploy, slug) }
+  ];
+  if (deploy.heldUrl) {
+    lines.push({ text: `The team can call it, signed in, at ${deploy.heldUrl}` });
+    if (deploy.number !== undefined) {
+      lines.push({
+        text: `sokie call <tool> --held ${deploy.number} tries a tool there.`,
+        tone: "dim"
+      });
+    }
+  }
+  const lapses = deploy.hold ? ` If no one does by ${onDay(deploy.hold.until)}, it lapses.` : "";
+  lines.push({
+    text: `Production stays as it is until an owner or admin puts it live; sokie requests lists it for them.${lapses}`,
+    tone: "dim"
+  });
+  return lines;
+}
+
 // src/init/gitignore.ts
 import { existsSync as existsSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join8 } from "node:path";
@@ -64872,6 +65056,44 @@ function liveLines(server, deployment) {
   const live = `Live: ${server.url ?? server.slug}${number4}`;
   return server.liveDeploymentId ? [live, SWITCH_OVER_NOTE] : [live];
 }
+async function reportDeploy(out, server, deployment) {
+  const { status } = deployment;
+  if (status === "failed") {
+    for (const finding3 of deployment.findings ?? []) {
+      await out.problem(findingLine(finding3), LEVEL_TONE[finding3.level]);
+    }
+    const reason = deployment.error?.message ?? "The deploy failed.";
+    await out.result({ ok: false, status, server, deployment, error: deployment.error ?? null });
+    await out.problem(`✗ ${reason}`, "fail");
+    return EXIT.no;
+  }
+  const url2 = server.url;
+  if (status === "held") {
+    for (const line of heldLines(server.slug, deployment))
+      await out.line(line.text, line.tone);
+    const { heldUrl = null, hold = null } = deployment;
+    await out.result({
+      ok: true,
+      status,
+      server,
+      deployment,
+      url: url2,
+      heldUrl,
+      hold,
+      linkFile: LINK_FILE
+    });
+    return deployment;
+  }
+  if (status === "live") {
+    const [live, ...rest] = liveLines(server, deployment);
+    if (live)
+      await out.line(live, "ok");
+    for (const line of rest)
+      await out.line(line, "dim");
+  }
+  await out.result({ ok: true, status, server, deployment, url: url2, linkFile: LINK_FILE });
+  return deployment;
+}
 function platformFor(client) {
   return {
     query: client.query.bind(client),
@@ -64916,25 +65138,7 @@ async function run4(argv, out) {
       progress: (status) => out.line(`  ${status}`, "dim"),
       ...base === undefined || values.force ? {} : { base }
     });
-    const url2 = server.url;
-    if (deployment.status === "failed") {
-      for (const finding3 of deployment.findings ?? []) {
-        await out.problem(findingLine(finding3), LEVEL_TONE[finding3.level]);
-      }
-      const reason = deployment.error?.message ?? "The deploy failed.";
-      await out.result({ ok: false, server, deployment, error: deployment.error ?? null });
-      await out.problem(`✗ ${reason}`, "fail");
-      return EXIT.no;
-    }
-    if (deployment.status === "live") {
-      const [live, ...rest] = liveLines(server, deployment);
-      if (live)
-        await out.line(live, "ok");
-      for (const line of rest)
-        await out.line(line, "dim");
-    }
-    await out.result({ ok: true, server, deployment, url: url2, linkFile: LINK_FILE });
-    return deployment;
+    return await reportDeploy(out, server, deployment);
   };
   const exit = (shipped) => typeof shipped === "number" ? shipped : EXIT.ok;
   const deployKey = deployKeyFrom();
@@ -64987,7 +65191,7 @@ async function run4(argv, out) {
       });
       ensureIgnored(root, ".sokie/");
       const shipped = await ship(platformFor(client), server, base);
-      if (!github && typeof shipped !== "number" && shipped.number !== undefined) {
+      if (!github && typeof shipped !== "number" && shipped.number !== undefined && shipped.status !== "held") {
         writeLink(root, info2.site, {
           serverId: server.serverId,
           slug: server.slug,
@@ -65026,6 +65230,15 @@ sokie edit, a deploy is refused once production has moved on since the
 files were downloaded (an edit in the app, a restore), so it never undoes
 a change unseen: sokie pull brings that change in first.
 
+A server can make production wait for an owner or admin. A member's deploy
+that must wait (any, with the server's switch on; otherwise one that adds a
+delete or outside-the-API tool) builds, runs its cases and is held: it
+serves only the team, signed in, at its own address, for up to 7 days.
+Deploys from GitHub or CI wait only when the server says so. The command
+stops there, says why, where and until when, and exits 0; --json gives
+"status": "held" with "heldUrl" and "hold". sokie call --held <n> tries it,
+and an owner or admin puts it live from sokie requests.
+
 --no-wait     Return once the deploy is queued.
 --force       Deploy these files even if production changed since they were downloaded.
 ${SITE_HELP}
@@ -65121,109 +65334,11 @@ function diffLines(view) {
   return lines;
 }
 
-// src/deploy-list.ts
-function statusOf(deploy) {
-  if (deploy.status === "failed")
-    return { text: "failed", tone: "fail" };
-  if (deploy.status === "queued" || deploy.status === "building") {
-    return { text: deploy.status, tone: "warn" };
-  }
-  if (deploy.previewPr !== undefined)
-    return { text: "preview", tone: deploy.status === "live" ? "ok" : undefined };
-  return deploy.status === "live" ? { text: "live", tone: "ok" } : { text: "replaced", tone: "dim" };
-}
-function sourceOf(deploy) {
-  if (deploy.restoreOf !== undefined)
-    return `restore of #${deploy.restoreOf}`;
-  const source = deploy.source;
-  if (!source)
-    return "uploaded from the CLI";
-  if (source.kind === "upload") {
-    const edited = source.edited ?? [];
-    if (edited.length > 0) {
-      const named = edited.length <= 2 ? edited.join(" and ") : `${edited[0]} and ${edited.length - 1} more`;
-      return `${named} edited in the app`;
-    }
-    return source.from === "web" ? "made in Sokie from a spec" : "uploaded from the CLI";
-  }
-  const pr = deploy.previewPr ?? source.prNumber;
-  const sha = source.sha.slice(0, 7);
-  return pr === undefined ? `${sha} on ${source.branch}` : `${sha} · preview #${pr}`;
-}
-var MINUTE = 60000;
-var HOUR = 60 * MINUTE;
-var DAY = 24 * HOUR;
-function ago(at2, now) {
-  const gone = Math.max(0, now - at2);
-  if (gone < MINUTE)
-    return "just now";
-  if (gone < HOUR)
-    return `${Math.floor(gone / MINUTE)} min ago`;
-  if (gone < DAY)
-    return `${Math.floor(gone / HOUR)} h ago`;
-  if (gone < 2 * DAY)
-    return "yesterday";
-  if (gone < 30 * DAY)
-    return `${Math.floor(gone / DAY)} days ago`;
-  return new Date(at2).toLocaleDateString("en-US", {
-    month: "short",
-    day: "numeric",
-    timeZone: "UTC"
-  });
-}
-function headerLine(slug, facts) {
-  if (facts.pin) {
-    const since = facts.pin.skippedPushes === 1 ? "1 push" : `${facts.pin.skippedPushes} pushes`;
-    return {
-      text: `${slug} · production stays on #${facts.live ?? "?"} until sokie deploys resume (${since} since the restore)`,
-      tone: "warn"
-    };
-  }
-  if (facts.branch)
-    return { text: `${slug} · production follows ${facts.branch}`, tone: "dim" };
-  return { text: `${slug} · Sokie keeps its files`, tone: "dim" };
-}
-function rowLine(deploy, now) {
-  const status = statusOf(deploy);
-  const number4 = deploy.number === undefined ? "—" : `#${deploy.number}`;
-  const text5 = `  ${number4.padEnd(5)} ${status.text.padEnd(9)} ${sourceOf(deploy).padEnd(32)} ${ago(deploy.createdAt, now)}`;
-  return { text: text5, tone: status.tone === "dim" ? undefined : status.tone };
-}
-function listLines2(slug, deploys, facts) {
-  const live = deploys.find((d) => d.status === "live" && d.previewPr === undefined)?.number;
-  const lines = [headerLine(slug, { ...facts, live }), { text: "" }];
-  if (deploys.length === 0) {
-    lines.push({ text: "  No deploys yet. sokie deploy makes the first one.", tone: "dim" });
-    return lines;
-  }
-  for (const deploy of deploys)
-    lines.push(rowLine(deploy, facts.now));
-  if (facts.more) {
-    lines.push({
-      text: `  … older ones too. sokie deploys --limit ${facts.limit * 2} goes further back; --json for scripts.`,
-      tone: "dim"
-    });
-  }
-  return lines;
-}
-function diffTone(line, index) {
-  if (index === 0)
-    return "strong";
-  const sign = line.trimStart().slice(0, 2);
-  if (sign === "+ ")
-    return "ok";
-  if (sign === "- ")
-    return "fail";
-  if (sign === "↑ " || sign === "↓ ")
-    return "warn";
-  return;
-}
-
 // src/deploys-restore.ts
 var REFUSED = {
   ALREADY_LIVE: (n) => `#${n} is what production runs now. sokie deploys lists the others.`,
   DEPLOY_NOT_FOUND: (n) => `There is no deploy #${n} on this server.`,
-  NOT_RESTORABLE: (n) => `#${n} never served production: it's a preview, it failed, or it hasn't finished. Only a deploy that went live and was replaced can be restored.`,
+  NOT_RESTORABLE: (n) => `#${n} never served production: it's a preview, it failed, it was held and never put live, or it hasn't finished. Only a deploy that went live and was replaced can be restored.`,
   DEPLOY_IN_PROGRESS: () => "A deploy is running. Try again when it finishes.",
   MISSING_SECRETS: (n) => `#${n} needs a secret production no longer has.`,
   PLAN_LIMIT_SERVERS: () => "This server is past your plan's server limit, so it takes no deploys. Delete a server or upgrade on the Billing page.",
@@ -65253,8 +65368,8 @@ async function restoreDeploy(out, client, server, n, options, deps) {
     if (check3.refusal)
       return await refused2(out, new ConvexError(check3.refusal), n) ?? EXIT.no;
     if (check3.missingSecrets.length > 0) {
-      const names = check3.missingSecrets.join(", ");
-      return fail(out, "missing_secrets", `#${n} reads ${names}, which production doesn't have any more. Set it with sokie secrets set ${check3.missingSecrets[0]}, or restore a later deploy.`, EXIT.no);
+      const names2 = check3.missingSecrets.join(", ");
+      return fail(out, "missing_secrets", `#${n} reads ${names2}, which production doesn't have any more. Set it with sokie secrets set ${check3.missingSecrets[0]}, or restore a later deploy.`, EXIT.no);
     }
     const page = await client.query(fn.server, { serverId }).catch(() => null);
     const live = page?.live?.number;
@@ -65293,6 +65408,18 @@ async function restoreDeploy(out, client, server, n, options, deps) {
       });
       return EXIT.no;
     }
+    if (done.status === "held") {
+      for (const line of heldLines(server.slug, done))
+        await out.line(line.text, line.tone);
+      const { status, heldUrl = null, hold = null } = done;
+      await out.result({
+        ok: true,
+        server: server.slug,
+        deploy: { number: queued.number, restoreOf: n, status, heldUrl, hold },
+        pinned: queued.pinned
+      });
+      return EXIT.ok;
+    }
     const took = Math.max(1, Math.round((Date.now() - started) / 1000));
     await out.line(`#${queued.number} is live in ${took} s · ${server.url ?? server.slug}`, "ok");
     await out.line("Calls can reach the previous deploy for up to a minute while the edges catch up.", "dim");
@@ -65467,7 +65594,9 @@ var deploysCommand = {
   summary: "List a server's deploys, compare two, or restore an earlier one.",
   help: `With no verb, lists the newest deploys (--limit, default 10): each one's
 number, status, where its files came from and when, under what production
-follows now.
+follows now. A held deploy, waiting for an owner or admin, shows until when
+and the address the team can call it at; one that never went live says
+whether it was declined, withdrawn or lapsed.
 
 diff [<from>] <to>
   Compares two deploys' bundles and prints what an agent sees differently:
@@ -66336,19 +66465,19 @@ async function followWorkspace(out, client, deps) {
   return null;
 }
 async function followNames(out, client, domain2, deps, left) {
-  let names = [];
+  let names2 = [];
   for (let waited = 0;waited < left; waited += POLL_MS2) {
-    names = (await allHostnames(client)).filter((h) => h.hostname.endsWith(`.${domain2}`));
-    if (names.length > 0 && names.every((h) => h.status === "live")) {
-      const list = names.map((h) => h.serverName).join(", ");
-      await out.line(`  ● ${names.length} server${names.length === 1 ? "" : "s"} live under it: ${list}`, "ok");
+    names2 = (await allHostnames(client)).filter((h) => h.hostname.endsWith(`.${domain2}`));
+    if (names2.length > 0 && names2.every((h) => h.status === "live")) {
+      const list = names2.map((h) => h.serverName).join(", ");
+      await out.line(`  ● ${names2.length} server${names2.length === 1 ? "" : "s"} live under it: ${list}`, "ok");
       await out.line("New servers get theirs as they are made.", "dim");
-      return names;
+      return names2;
     }
     await deps.sleep(POLL_MS2);
   }
   await out.line("Servers are still getting their certificates; sokie domains shows each.", "dim");
-  return names;
+  return names2;
 }
 async function followExact(out, client, server, deps) {
   let said = "";
@@ -66398,8 +66527,8 @@ async function addDomain(out, client, domain2, options, deps) {
         return EXIT.ok;
       }
       await out.line("Waiting for both (Ctrl+C stops waiting; Sokie keeps checking)…", "dim");
-      const names = await followWorkspace(out, client, deps);
-      await out.result({ ok: true, domain: added2, dns: dns2, ...names ? { hostnames: names } : {} });
+      const names2 = await followWorkspace(out, client, deps);
+      await out.result({ ok: true, domain: added2, dns: dns2, ...names2 ? { hostnames: names2 } : {} });
       return EXIT.ok;
     }
     const added = await client.mutation(domainFn.addExact, { serverId: server.serverId, domain: domain2 });
@@ -67859,9 +67988,8 @@ var requestFn = {
 };
 
 // src/requests.ts
-var day = new Intl.DateTimeFormat("en", { month: "short", day: "numeric", timeZone: "UTC" });
 function lapsesOn(request) {
-  return day.format(request.expiresAt);
+  return onDay(request.expiresAt);
 }
 async function allRequests(client, list) {
   const rows = [];
@@ -67938,8 +68066,9 @@ function rowLines(request, short, headline, now) {
   const lines = [{ text: `  ${id}  ${headline}` }];
   if (request.reason)
     lines.push({ text: `${indent2}${quoted(request.reason)}` });
+  const since = request.change.kind === "deploy.promote" ? "held" : "asked";
   lines.push({
-    text: `${indent2}asked ${ago(request.createdAt, now)} · lapses ${lapsesOn(request)}`,
+    text: `${indent2}${since} ${ago(request.createdAt, now)} · lapses ${lapsesOn(request)}`,
     tone: "dim"
   });
   return lines;
@@ -67976,12 +68105,55 @@ function listLines3(waiting, mine, now) {
   lines.push({ text: "" }, { text: `sokie requests ${hints.join("; ")}.`, tone: "dim" });
   return lines;
 }
+var AUTOMATED = new Set(["GitHub", "A CI deploy key"]);
+function emailed(request) {
+  return !(request.change.kind === "deploy.promote" && AUTOMATED.has(request.requesterName));
+}
+function answeredLines(request, outcome, noted) {
+  const { requesterName: who, words: words2, change } = request;
+  const person = emailed(request);
+  const hears = person ? ` ${who} hears by email.` : "";
+  const theyHear = person ? `They hear by email${noted ? ", with your note" : ""}.` : "";
+  const promote = change.kind === "deploy.promote";
+  if (outcome === "approved") {
+    return [
+      { text: `Approved: ${words2}.`, tone: "ok" },
+      {
+        text: promote ? `It builds again with the secrets set now, then goes live; sokie deploys shows it.${hears}` : `Sokie made the change as you, and ${who} hears by email.`,
+        tone: "dim"
+      }
+    ];
+  }
+  if (outcome === "declined") {
+    return [
+      { text: `Declined ${who}'s request to ${words2}.`, tone: "ok" },
+      {
+        text: promote ? `Its held address stops answering. ${theyHear}`.trim() : theyHear,
+        tone: "dim"
+      }
+    ];
+  }
+  return [
+    {
+      text: `Closed it: the request to ${words2} no longer applied, so nothing changed.`,
+      tone: "warn"
+    },
+    {
+      text: promote ? `Deploy #${change.number} isn't held any more; sokie deploys says what became of it.${hears}` : `The server is gone, or the change was made another way.${hears}`,
+      tone: "dim"
+    }
+  ];
+}
 function refused4(out, error62, gone) {
   if (!(error62 instanceof ConvexError))
     return null;
   const data = error62.data;
   if (data === "NOT_FOUND")
     return fail(out, gone.code, gone.message, EXIT.no);
+  if (data === "DEPLOY_IN_PROGRESS") {
+    const message2 = "Another production deploy of this server is still running. Approve again once it finishes; sokie deploys shows it.";
+    return fail(out, "deploy_in_progress", message2, EXIT.no);
+  }
   if (typeof data !== "object" || data === null)
     return null;
   const { code: code2, message } = data;
@@ -68069,15 +68241,8 @@ async function answer(out, client, given, how, deps) {
     approve: how.approve,
     ...how.note ? { note: how.note } : {}
   });
-  if (outcome === "approved") {
-    await out.line(`Approved: ${request.words}.`, "ok");
-    await out.line(`Sokie made the change as you, and ${request.requesterName} hears by email.`, "dim");
-  } else if (outcome === "declined") {
-    await out.line(`Declined ${request.requesterName}'s request to ${request.words}.`, "ok");
-    await out.line(`They hear by email${how.note ? ", with your note" : ""}.`, "dim");
-  } else {
-    await out.line(`Closed it: the request to ${request.words} no longer applied, so nothing changed.`, "warn");
-    await out.line(`The server is gone, or the change was made another way. ${request.requesterName} hears by email.`, "dim");
+  for (const line of answeredLines(request, outcome, how.note !== undefined)) {
+    await out.line(line.text, line.tone);
   }
   await out.result({ ok: true, requestId: request.requestId, outcome, request });
   return EXIT.ok;
@@ -68088,6 +68253,9 @@ async function withdraw(out, client, given) {
     return request;
   await client.mutation(requestFn.withdraw, { requestId: request.requestId });
   await out.line(`Withdrew your request to ${request.words}.`, "ok");
+  if (request.change.kind === "deploy.promote") {
+    await out.line("That ends the held deploy: its held address stops answering.", "dim");
+  }
   await out.result({ ok: true, requestId: request.requestId, outcome: "withdrawn", request });
   return EXIT.ok;
 }
@@ -68153,6 +68321,11 @@ it's live, and moving a live name under the workspace domain are for owners
 and admins. A member asks instead; any one owner or admin approves, which
 makes the change as them, or declines. A request waits 7 days, then lapses.
 
+A held deploy asks too: when a server makes production wait for an owner or
+admin, a deploy that must wait (sokie deploy says so) is listed here as a
+request to put it on production. Approving builds it again with the secrets
+set now and puts it live; declining or withdrawing ends it.
+
 With no verb, lists the requests waiting for your answer (as an owner or
 admin) and the ones you asked, in the workspace commands work in: each one's
 id, who asked for what and why, and when it lapses.
@@ -68166,7 +68339,7 @@ decline <id>
   --note <text>  A word back to them, up to 500 characters.
 
 withdraw <id>
-  Takes back a request you asked.
+  Takes back a request you asked; for your held deploy, that ends it.
 
 ask <kind> <server> [<new-name>]
   Asks the workspace's owners and admins, who hear by email. <server> is the
@@ -68227,8 +68400,8 @@ async function run10(argv, out) {
           cursor = page2.continueCursor;
         }
         for (const secret of secrets) {
-          const day2 = new Date(secret.updatedAt).toISOString().slice(0, 10);
-          await out.line(`${secret.name}  ${out.tint("dim", `set ${day2}`)}`);
+          const day = new Date(secret.updatedAt).toISOString().slice(0, 10);
+          await out.line(`${secret.name}  ${out.tint("dim", `set ${day}`)}`);
         }
         if (secrets.length === 0)
           await out.line(`${server.slug} has no secrets set.`);
@@ -68317,7 +68490,7 @@ function caseJson(run11) {
 var TERMINAL4 = { call: callTool, signedIn: withSignedIn, now: Date.now };
 var RENEW_MS = 30000;
 function caseTarget(target) {
-  return target.kind;
+  return target.kind === "held" ? "production" : target.kind;
 }
 async function runCases(out, deps, plan, target, endpointFor, all) {
   const first = await endpointFor();
@@ -68381,7 +68554,7 @@ async function runTest(argv, out, deps) {
   if (positionals.length > 0) {
     throw new UsageError("sokie test runs every case; it takes no names. --dir picks the repository.");
   }
-  const target = targetFrom(values.preview, values.production);
+  const target = targetFrom(values);
   if (target.kind === "dev" && values.server !== undefined) {
     throw new UsageError("--server picks a deploy: add --preview <n> or --production.");
   }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@abyssinia-labs/sokie",
   "type": "module",
-  "version": "0.7.0-staging.138",
+  "version": "0.8.0",
   "description": "Turn an OpenAPI or Swagger spec into an MCP server, run it on your machine, and deploy it to Sokie. The sokie command (alias sok).",
   "license": "Apache-2.0",
   "homepage": "https://sokie.sh/docs/cli",
@@ -10,7 +10,7 @@
   },
   "author": "Abyssinia Labs <hello@sokie.sh> (https://sokie.sh)",
   "sokie": {
-    "site": "https://staging.sokie.sh"
+    "site": "https://sokie.sh"
   },
   "keywords": [
     "mcp",