@canner-ca/cli 0.5.5 → 0.5.6

package/README.md

@@ -69,12 +69,16 @@ canner deploy --follow
 | `canner token create <name>` | Mint a new token. The secret is printed once — copy it immediately. |
 | `canner token revoke <id\|name>` | Revoke a token. |
 | `canner env [list] [--reveal] [--slug X]` | List a project's environment variables. Values marked sensitive are redacted (`••••••`, or `null` in `--json`) unless `--reveal` is passed. |
-| `canner env set KEY=VALUE [--env production\|preview] [--sensitive] [--slug X]` | Add an environment variable. |
+| `canner env set KEY=VALUE [KEY=VALUE ...] [--env production\|preview] [--sensitive] [--slug X]` | Add one or more environment variables. |
 | `canner env rm <KEY\|id> [--env ...] [--slug X]` | Delete an environment variable. |
 | `canner domains [list] [--slug X]` | List a project's custom domains. |
 | `canner domains add <hostname> [--slug X]` | Attach a custom domain (starts `pending`). |
 | `canner domains verify <hostname\|id> [--slug X]` | Re-check DNS and provision TLS. |
 | `canner domains rm <hostname\|id> [--slug X]` | Detach a custom domain. |
+| `canner jobs [list] [--slug X]` | List scheduled jobs, with the header names each sends (never a value). |
+| `canner jobs create <name> (--path /api/cron [--branch BRANCH] \| --url URL) --schedule "CRON" [--header name=value] [--header-env name=VARIABLE] [--bearer-env VARIABLE] [--slug X]` | Create a job. `--path` calls a path in the project itself (its address is built from the project's own host each time, in production or, with `--branch`, on that preview); `--url` is for anything else. `--header-env x-cron-key=CRON_KEY` sends the project variable's value, read each time the job runs, so the secret is never copied. `--bearer-env CRON_SECRET` sends `Authorization: Bearer …`. With a `CRON_SECRET` variable and no Authorization header, Canner sends it automatically. |
+| `canner jobs run <id>` / `canner jobs runs <id>` | Run a job now and show the result, or list recent runs with what to check on a failure. |
+| `canner jobs delete <id> --yes` | Delete a job and its run history. |
 
 ### Databases
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canner-ca/cli",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "description": "Canner deploy CLI — git push from any terminal, no GitHub required",
   "type": "module",
   "bin": {

package/src/cli.mjs

@@ -28,7 +28,7 @@ import { randomUUID } from 'node:crypto';
 import { stdin as input, stdout as output } from 'node:process';
 import { create as tarCreate } from 'tar';
 
-const VERSION = '0.5.5';
+const VERSION = '0.5.6';
 const DEFAULT_API_BASE = 'https://api.canner.ca';
 const CONFIG_DIR = join(homedir(), '.canner');
 const CREDENTIALS_PATH = join(CONFIG_DIR, 'credentials');
@@ -726,23 +726,31 @@ async function cmdEnv(args) {
   }
 
   if (sub === 'set') {
-    const kv = args._[1];
-    if (!kv || !kv.includes('=')) die('usage: canner env set KEY=VALUE', 2);
-    const eq = kv.indexOf('=');
-    const key = kv.slice(0, eq);
-    const value = kv.slice(eq + 1);
+    const pairs = args._.slice(1);
+    if (pairs.length === 0 || pairs.some((kv) => !kv.includes('='))) die('usage: canner env set KEY=VALUE [KEY=VALUE ...]', 2);
     const environment = normalizeEnvScope(args.env);
     const isSensitive = args.sensitive === true;
-    const result = await apiJSON(creds, 'POST', base, {
-      key, value, environment, is_sensitive: isSensitive,
-    });
-    if (JSON_MODE) return emitJSON(result);
-    if ((result?.created ?? []).length > 0) {
-      info(`${green('set')} ${bold(key)}${environment ? dim(` (${environment})`) : ''}`);
-    } else {
-      // A duplicate (same key+scope) is skipped, not overwritten — surface that
-      // so the user isn't surprised the value didn't change.
-      die(`${key} already exists for that environment. Delete it first (canner env rm ${key}), then set again.`);
+    const results = [];
+    const skipped = [];
+    for (const kv of pairs) {
+      const eq = kv.indexOf('=');
+      const key = kv.slice(0, eq);
+      const value = kv.slice(eq + 1);
+      const result = await apiJSON(creds, 'POST', base, {
+        key, value, environment, is_sensitive: isSensitive,
+      });
+      results.push(result);
+      if ((result?.created ?? []).length > 0) {
+        if (!JSON_MODE) info(`${green('set')} ${bold(key)}${environment ? dim(` (${environment})`) : ''}`);
+      } else {
+        // A duplicate (same key+scope) is skipped, not overwritten — surface that
+        // so the user isn't surprised the value didn't change.
+        skipped.push(key);
+      }
+    }
+    if (JSON_MODE) return emitJSON(results.length === 1 ? results[0] : results);
+    if (skipped.length > 0) {
+      die(`${skipped.join(', ')} already exist${skipped.length === 1 ? 's' : ''} for that environment. Delete ${skipped.length === 1 ? 'it' : 'them'} first (canner env rm ${skipped[0]}), then set again.`);
     }
     return;
   }
@@ -1354,6 +1362,147 @@ async function cmdBilling(args) {
   die('usage: canner billing addons | preview <addon> <quantity>', 2);
 }
 
+// ---------------------------------------------------------------------------
+// canner jobs ...                                        - scheduled jobs (webhook cron)
+//
+//   canner jobs [list] [--slug X]                        the jobs (all of them, or one project's)
+//   canner jobs create <name> (--path /api/cron [--branch B] | --url U) --schedule "*/15 * * * *" [--slug X] [--description D]
+//         [--header "name=value" ...] [--header-env name=VARIABLE ...] [--bearer-env VARIABLE]
+//   (--path calls a path in the project itself: its address is built from the project's own host each time, in
+//    production or, with --branch, on that preview; --url is for anything else)
+//   canner jobs run <id>                                 run it now and show what came back
+//   canner jobs runs <id>                                recent runs, with what to check on a failure
+//   canner jobs delete <id> --yes
+//
+// A header's value can read a project environment variable when the job fires, so the secret is never
+// copied: --header-env x-cron-key=CRON_KEY sends x-cron-key with the value of CRON_KEY; --bearer-env
+// CRON_SECRET sends Authorization: Bearer <CRON_SECRET>. (Same as --header 'x-cron-key=${CRON_KEY}', without
+// the shell-quoting.) With a CRON_SECRET variable and no Authorization header, Canner sends it automatically.
+// ---------------------------------------------------------------------------
+const asList = (v) => (v === undefined || v === true ? [] : Array.isArray(v) ? v : [v]);
+
+function jobHeadersFromArgs(args) {
+  const headers = {};
+  const put = (name, value) => {
+    if (!name || value === undefined || value === '') die(`bad header: "${name}" needs a name and a value.`, 2);
+    headers[name] = value;
+  };
+  for (const h of asList(args.header)) {
+    const eq = String(h).indexOf('=');
+    if (eq < 1) die(`bad --header "${h}": use name=value.`, 2);
+    put(String(h).slice(0, eq), String(h).slice(eq + 1));
+  }
+  for (const h of asList(args['header-env'])) {
+    const eq = String(h).indexOf('=');
+    if (eq < 1) die(`bad --header-env "${h}": use header-name=VARIABLE.`, 2);
+    put(String(h).slice(0, eq), `\${${String(h).slice(eq + 1)}}`);
+  }
+  for (const v of asList(args['bearer-env'])) put('Authorization', `Bearer \${${v}}`);
+  return headers;
+}
+
+const describeJobHeaders = (headers) => {
+  const entries = Object.entries(headers ?? {});
+  if (entries.length === 0) return dim('none');
+  return entries.map(([n, v]) => (/\$\{/.test(v) ? `${n} ${dim(`(${v})`)}` : `${n} ${dim('(hidden)')}`)).join(', ');
+};
+
+async function findJob(creds, ref) {
+  const body = await apiJSON(creds, 'GET', '/jobs');
+  const hits = (body?.jobs ?? []).filter((j) => j.id === ref || j.id.startsWith(ref));
+  if (hits.length === 0) die(`no job with id "${ref}". List them with: canner jobs`);
+  if (hits.length > 1) die(`"${ref}" matches more than one job; use more of the id.`);
+  return hits[0];
+}
+
+function printRun(r) {
+  const color = r.status === 'succeeded' ? green : r.status === 'running' ? yellow : red;
+  info(`  ${pad(r.started_at.replace('T', ' ').slice(0, 19), 21)}${pad(color(r.status), 20)}${pad(String(r.http_status ?? '-'), 6)}${r.duration_ms != null ? `${r.duration_ms} ms` : ''}`);
+  if (r.error_message) info(`    ${dim(String(r.error_message).slice(0, 200))}`);
+  if (r.hint) info(`    ${yellow('check')} ${r.hint}`);
+}
+
+async function cmdJobs(args) {
+  const creds = await loadCredentials();
+  if (!creds.token) die("not signed in. Run `canner login`.");
+  const sub = args._[0] ?? 'list';
+
+  if (sub === 'list' || sub === 'ls') {
+    const body = await apiJSON(creds, 'GET', args.slug ? `/projects/${encodeURIComponent(args.slug)}/jobs` : '/jobs');
+    if (JSON_MODE) return emitJSON(body);
+    const jobs = body?.jobs ?? [];
+    if (jobs.length === 0) { muted('no scheduled jobs. Create one with `canner jobs create`.'); return; }
+    info(`${pad(bold('ID'), 10)}${pad(bold('NAME'), 26)}${pad(bold('PROJECT'), 20)}${pad(bold('SCHEDULE'), 16)}${bold('HEADERS')}`);
+    for (const j of jobs) {
+      info(`${pad(dim(j.id.slice(0, 8)), 10)}${pad(j.is_active ? j.name : `${j.name} ${dim('(paused)')}`, 26)}${pad(j.project_slug, 20)}${pad(j.schedule, 16)}${describeJobHeaders(j.headers)}`);
+    }
+    return;
+  }
+
+  if (sub === 'create' || sub === 'add') {
+    const name = args._[1];
+    if (!name || !args.schedule || Boolean(args.url) === Boolean(args.path)) {
+      die('usage: canner jobs create <name> (--path /api/cron [--branch BRANCH] | --url URL) --schedule "CRON" [--header name=value] [--header-env name=VARIABLE] [--bearer-env VARIABLE]', 2);
+    }
+    if (args.branch && !args.path) die('--branch goes with --path.', 2);
+    const slug = await resolveSlug(args);
+    const headers = jobHeadersFromArgs(args);
+    const body = await apiJSON(creds, 'POST', `/projects/${encodeURIComponent(slug)}/jobs`, {
+      name, schedule: String(args.schedule),
+      ...(args.path ? { path: String(args.path), ...(args.branch ? { branch: String(args.branch) } : {}) } : { url: String(args.url) }),
+      ...(args.description ? { description: String(args.description) } : {}),
+      ...(Object.keys(headers).length > 0 ? { headers } : {}),
+    });
+    if (JSON_MODE) return emitJSON(body);
+    info(`${green('created')} ${bold(name)} ${dim(body.job.id)}`);
+    for (const w of body.warnings ?? []) info(`${yellow('warning')} ${w.message}`);
+    return;
+  }
+
+  if (sub === 'run' || sub === 'trigger') {
+    if (!args._[1]) die('usage: canner jobs run <id>', 2);
+    const job = await findJob(creds, args._[1]);
+    await apiJSON(creds, 'POST', `/projects/${encodeURIComponent(job.project_slug)}/jobs/${job.id}/trigger`);
+    let run = null;
+    for (let i = 0; i < 20; i++) {
+      await new Promise((r) => setTimeout(r, 750));
+      const body = await apiJSON(creds, 'GET', `/projects/${encodeURIComponent(job.project_slug)}/jobs/${job.id}/runs?limit=1`);
+      run = body?.runs?.[0] ?? null;
+      if (run && run.status !== 'running') break;
+    }
+    if (JSON_MODE) return emitJSON(run);
+    if (!run) { muted('started; check `canner jobs runs ' + job.id.slice(0, 8) + '` in a moment.'); return; }
+    info(`${bold(job.name)}`);
+    printRun(run);
+    if (run.status !== 'succeeded' && run.response_body) info(`    ${dim(String(run.response_body).slice(0, 300))}`);
+    if (run.status !== 'succeeded') process.exitCode = 1;
+    return;
+  }
+
+  if (sub === 'runs' || sub === 'history') {
+    if (!args._[1]) die('usage: canner jobs runs <id>', 2);
+    const job = await findJob(creds, args._[1]);
+    const body = await apiJSON(creds, 'GET', `/projects/${encodeURIComponent(job.project_slug)}/jobs/${job.id}/runs?limit=10`);
+    if (JSON_MODE) return emitJSON(body);
+    info(`${bold(job.name)} ${dim(`${job.project_slug} · ${job.schedule}`)}  headers: ${describeJobHeaders(job.headers)}`);
+    if ((body?.runs ?? []).length === 0) { muted('no runs yet.'); return; }
+    for (const r of body.runs) printRun(r);
+    return;
+  }
+
+  if (sub === 'delete' || sub === 'rm') {
+    if (!args._[1]) die('usage: canner jobs delete <id> --yes', 2);
+    const job = await findJob(creds, args._[1]);
+    requireYes(args, `This deletes the job "${job.name}" and its run history.`);
+    await apiJSON(creds, 'DELETE', `/projects/${encodeURIComponent(job.project_slug)}/jobs/${job.id}`);
+    if (JSON_MODE) return emitJSON({ ok: true });
+    info(`${green('deleted')} ${bold(job.name)}`);
+    return;
+  }
+
+  die('usage: canner jobs [list] | create <name> ... | run <id> | runs <id> | delete <id> --yes', 2);
+}
+
 async function cmdDb(args) {
   const creds = await loadCredentials();
   if (!creds.token) die("not signed in. Run `canner login`.");
@@ -2672,6 +2821,11 @@ ${bold('Databases:')}
                        Create the primary on its own dedicated instance with
                        point-in-time recovery. If the project has no unit, this
                        buys one: it shows the price and needs --yes.
+  ${bold('jobs')} [list] | create <name> (--path /p [--branch B] | --url U) --schedule "CRON" | run <id> | runs <id> | delete <id> --yes
+                       Scheduled jobs. --path calls a path in the project itself
+                       (production, or a preview with --branch). A header can read a
+                       project variable: --header-env x-cron-key=CRON_KEY or
+                       --bearer-env CRON_SECRET.
   ${bold('billing')} addons | preview <addon> <quantity>
                        See the add-ons you own and where they are assigned, and
                        preview a quantity change. Read-only; nothing is charged.
@@ -2855,6 +3009,8 @@ const dispatch = {
   env: cmdEnv,
   domains: cmdDomains,
   billing: cmdBilling,
+  jobs: cmdJobs,
+  job: cmdJobs,
   db: cmdDb,
   database: cmdDb,
   databases: cmdDb,