@cowliss/cli 0.4.0 → 0.5.0

package/README.md

@@ -26,7 +26,7 @@ cow whoami
 ```
 
 `cow login` opens the dashboard and caches a session token. In CI, set
-`COW_DEPLOY_KEY` to a deploy key instead.
+`COW_PIPELINE_KEY` to a pipeline key instead.
 
 ## Journeys and emails as code
 
@@ -70,16 +70,22 @@ cow test abandoned-checkout --scenario scenarios/cart.json
 # typecheck and bundle, no API call
 cow build
 
-# publish it and make it the environment's live code
-cow deploy --env development
+# upload the project; the server compiles it
+cow push
 
-# rebuild and redeploy on every save
-cow dev
+# what the server holds, and what is on where
+cow status
+
+# turn it on, per environment
+cow enable abandoned-checkout --env development
 ```
 
-Every push creates a numbered release. `cow deploy` makes one release an
-environment's current code, `cow rollback` puts the previous one back, and a
-run that has already started stays on the release it started on.
+A push creates a new version of every journey and template whose code
+changed, and changes no flag: `cow enable` and `cow disable` are the only
+things that put code in front of anyone. A journey runs its latest version
+that finished compiling, so a push that fails to compile leaves the previous
+one running, and a run that has already started stays on the version it
+started on. To undo, `git revert` and push again.
 
 ## Admin, and everything else
 

package/dist/guest/{driver-DaNdNhuF.js → driver-14FnzM-h.js}

@@ -1,4 +1,4 @@
-import { a as manifestOutputSchema, i as journeyStepOutputSchema, o as templateRenderOutputSchema, r as guestInputSchema, t as CapabilityError } from "./journeys-B_xg_GnL.js";
+import { a as manifestOutputSchema, i as journeyStepOutputSchema, o as templateRenderOutputSchema, r as guestInputSchema, t as CapabilityError } from "./journeys-C8j8Sqvl.js";
 import { z } from "zod";
 import { createElement } from "react";
 import { renderToStaticMarkup } from "react-dom/server.browser";
@@ -5573,7 +5573,6 @@ function readManifest(module) {
 			trigger: journey.trigger,
 			purpose: journey.purpose,
 			senderIdentity: journey.senderIdentity,
-			environments: journey.environments,
 			tags: journey.tags
 		});
 	}

package/dist/guest/driver.d.ts

@@ -1,4 +1,4 @@
-import { a as ManifestOutput, i as JourneyStepOutput, o as TemplateRenderOutput } from "./index-DAGLEHDn.js";
+import { a as ManifestOutput, i as JourneyStepOutput, o as TemplateRenderOutput } from "./index-BDj02EsQ.js";
 //#region src/guest/driver.d.ts
 /**
  * The in-process driver: JSON in, JSON out (spec: Guest protocol). One

package/dist/guest/driver.js

@@ -1,3 +1,3 @@
-import { t as runGuest } from "./driver-DaNdNhuF.js";
+import { t as runGuest } from "./driver-14FnzM-h.js";
 
 export { runGuest };

package/dist/guest/emails.d.ts

@@ -1,6 +1,23 @@
-import { n as SendClass } from "./constants-B0wk-87t.js";
 import { z } from "zod";
 import { ReactElement } from "react";
+//#region ../../packages/shared/src/constants.d.ts
+/**
+ * The two classes of send, declared on the template rather than passed per
+ * call so the class cannot drift between two sends of the same message.
+ *
+ * Marketing is everything a journey sends on the org's behalf: it carries
+ * the RFC 8058 unsubscribe headers and runs the full gate list.
+ * Transactional is the developer's own operational mail (a receipt, an
+ * export-is-ready notice): it carries neither header and skips consent and
+ * the per-user frequency cap, because an unsubscribe link on an invoice is
+ * wrong and a receipt must not silently vanish for anyone who once left a
+ * newsletter. Suppression, the quota, the sending pause, and the from-domain
+ * check still apply to both: those bound cost and protect the shared SES
+ * account, and none of them are about what the recipient asked for.
+ */
+declare const SEND_CLASSES: readonly ["marketing", "transactional"];
+type SendClass = (typeof SEND_CLASSES)[number];
+//#endregion
 //#region src/guest/emails.d.ts
 /** A template's subject line, computed from the props it declares. */
 type Subject<Schema extends z.ZodType> = (props: z.infer<Schema>) => string;

package/dist/guest/{index-DAGLEHDn.d.ts → index-BDj02EsQ.d.ts}

@@ -258,10 +258,6 @@ declare const manifestOutputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   }, z.core.$strict>]>;
   purpose: z.ZodString;
   senderIdentity: z.ZodOptional<z.ZodString>;
-  environments: z.ZodArray<z.ZodEnum<{
-    development: "development";
-    production: "production";
-  }>>;
   kind: z.ZodLiteral<"journey">;
 }, z.core.$strip>, z.ZodObject<{
   tags: z.ZodPipe<z.ZodDefault<z.ZodArray<z.ZodString>>, z.ZodTransform<string[], string[]>>;
@@ -282,7 +278,7 @@ type ManifestOutput = z.infer<typeof manifestOutputSchema>;
  * reuses it.
  *
  * Both members are strict, so a journey holding the retired `source` key
- * fails to compile a release instead of silently triggering on every app.
+ * fails to compile instead of silently triggering on every app.
  * There is deliberately no pipe filter: a trigger narrows by the app the
  * write is attributed to, the same token a segment definition names.
  */

package/dist/guest/{journeys-B_xg_GnL.js → journeys-C8j8Sqvl.js}

@@ -9,16 +9,6 @@ const DOCS_URL = "https://docs.cowliss.com";
 */
 const CLERK_ORG_SUBJECT_PREFIX = "org_";
 /**
-* The two fixed environments every org has (spec: Environments). An app
-* belongs to one, so the environment of every write is the app's;
-* profiles, identifiers, events, memberships, journey instances,
-* deliveries, violations, quarantine, the address ledger, and idempotency
-* keys are per environment, while the catalog, sending domains, the
-* suppression mirror, billing, and journey code are shared. A third
-* environment is a one-line change here plus the mirrored db enum.
-*/
-const ENVIRONMENTS = ["development", "production"];
-/**
 * Fixed consent purposes for the prototype. Consent is a per-purpose map on
 * the profile, checked at send-step execution time.
 *
@@ -51,8 +41,8 @@ const EXECUTION_LIMITS = {
 	logLines: 100,
 	logLineBytes: 1024
 };
-/** Per release: manifest counts, bundle size, and the source tarball. */
-const RELEASE_LIMITS = {
+/** Per push: manifest counts, bundle size, and the source tarball. */
+const PUSH_LIMITS = {
 	journeys: 100,
 	templates: 200,
 	bundleBytes: 2097152,
@@ -66,29 +56,13 @@ const RELEASE_LIMITS = {
 const COW_CONFIG_SCHEMA_PATH = "/schemas/cow.json";
 const COW_CONFIG_SCHEMA_URL = `${DOCS_URL}${COW_CONFIG_SCHEMA_PATH}`;
 
-//#endregion
-//#region ../../packages/shared/src/environments.ts
-/**
-* The environment on the wire: the source's `environment` field, the
-* `X-Cow-Environment` header admin calls select with, and the
-* `environment` column every per-environment DTO carries.
-*/
-const environmentSchema = z.enum(ENVIRONMENTS);
-/**
-* The environments a shared definition (a segment, a journey) declares it
-* works on: a non-empty list of distinct values. A definition declaring none
-* would be dead code with a row behind it, and a repeated value is a typo
-* rather than an intent, which is the rule `defineJourney` applies too.
-*/
-const environmentsSchema = z.array(environmentSchema).min(1, "at least one environment is required").refine((values) => new Set(values).size === values.length, { message: "environments must not repeat" });
-
 //#endregion
 //#region ../../packages/shared/src/journeys-v2/manifest.ts
 /**
-* The release manifest (spec: Build; Push and compile): what `cow build`
+* The pushed manifest (spec: Build; Push and compile): what `cow build`
 * extracts from a project and `cow push` uploads with the bundles. The
-* server validates it with these schemas, compiles every bundle, and stores
-* the compiled form on the release row.
+* server validates it with these schemas, compiles every bundle whose key
+* changed, and stores that entry on the version it creates.
 */
 /**
 * A journey or template key: the file basename under `journeys/` or
@@ -168,7 +142,7 @@ const patternSchema = z.union([onePatternSchema, z.array(onePatternSchema).min(1
 * reuses it.
 *
 * Both members are strict, so a journey holding the retired `source` key
-* fails to compile a release instead of silently triggering on every app.
+* fails to compile instead of silently triggering on every app.
 * There is deliberately no pipe filter: a trigger narrows by the app the
 * write is attributed to, the same token a segment definition names.
 */
@@ -237,6 +211,13 @@ const spineEntrySchema = z.object({
 		return z.array(spineEntrySchema).optional();
 	}
 }).meta({ id: "JourneySpineEntry" });
+/**
+* One journey in a stored manifest. A plain (non-strict) object on purpose:
+* a manifest pushed before the author's rollout gate went away still carries
+* `environments`, and every stored manifest has to keep parsing for good
+* (ADR 0011). Zod strips the key, and the journey runs wherever the
+* per-environment enabled flag says it runs, which is the one gate there is.
+*/
 const manifestJourneySchema = z.object({
 	key: journeyKeySchema,
 	/** The author's labels; the dashboard's only grouping. */
@@ -244,7 +225,7 @@ const manifestJourneySchema = z.object({
 	trigger: triggerSchema,
 	/**
 	* A fixed purpose or one the project declares. Checked against the org's
-	* declared set at deploy time, not here: a manifest is built and pushed
+	* declared set at push time, not here: a manifest is built and pushed
 	* without ever reaching the org whose rows say what exists.
 	*/
 	purpose: consentPurposeKeySchema,
@@ -255,12 +236,10 @@ const manifestJourneySchema = z.object({
 	* development, which is the one thing a journey must not do.
 	*
 	* Optional here and required at `defineJourney`, exactly like `purposes`: a
-	* release pushed before the field existed carries none and its stored
+	* version pushed before the field existed carries none and its stored
 	* manifest still parses. The author's build is where the error is useful.
 	*/
 	senderIdentity: destinationNameSchema.optional(),
-	/** The author's rollout gate: the journey is active only in these. */
-	environments: environmentsSchema,
 	spine: z.array(spineEntrySchema),
 	bundle: digestSchema
 });
@@ -292,27 +271,27 @@ function uniqueKeys(items, ctx, path) {
 }
 /**
 * What `cow build` writes to `.cow/build/manifest.json`, and the shape a
-* release row stores for good.
+* push row stores for good, entry by entry, on the versions it creates.
 *
 * `protocol` is any positive integer rather than the current constant on
-* purpose: a release is immutable and an execution stays pinned to the one it
-* started on, so the day the protocol is bumped every stored release must
-* still parse, or the runner, the deploy, and every API response the client
-* validates all break at once for any org with history. The literal lives at
-* push time only (`createReleaseBodySchema`), which is where a stale CLI is
-* the developer's own fixable problem, and deploy plus the runner refuse a
-* release built for another protocol with a message naming both numbers.
+* purpose: a version is immutable and an execution stays pinned to the one
+* it started on, so the day the protocol is bumped every stored push must
+* still parse, or the runner and every API response the client validates
+* break at once for any org with history. The literal lives at push time
+* only (`createPushBodySchema`), which is where a stale CLI is the
+* developer's own fixable problem, and the runner refuses a version built
+* for another protocol with a message naming both numbers.
 */
 const manifestSchema = z.object({
 	protocol: z.number().int().positive(),
 	/** The `@cowliss/cli` version the project was built with. */
 	sdk: z.string().min(1),
-	journeys: z.array(manifestJourneySchema).max(RELEASE_LIMITS.journeys),
-	templates: z.array(manifestTemplateSchema).max(RELEASE_LIMITS.templates),
+	journeys: z.array(manifestJourneySchema).max(PUSH_LIMITS.journeys),
+	templates: z.array(manifestTemplateSchema).max(PUSH_LIMITS.templates),
 	/**
 	* The consent purposes this project declares, copied from `cow.json`.
-	* Optional rather than defaulted: a release pushed before purposes
-	* existed carries none, and its stored manifest still parses.
+	* Optional rather than defaulted: a push made before purposes existed
+	* carries none, and its stored manifest still parses.
 	*/
 	purposes: purposesSchema.optional(),
 	/** Digest of the gzipped source tarball. */
@@ -323,27 +302,12 @@ const manifestSchema = z.object({
 	uniqueKeys(manifest.purposes ?? [], ctx, "purposes");
 });
 /**
-* The manifest as the release row stores it once compilation succeeded:
-* the pushed manifest plus the compiled module digest per key, and the
-* digest of the Javy engine plugin the toolchain that compiled them was
-* built from.
-*
-* Journeys and templates are keyed separately because they share a key
-* space: `welcome.ts` and `welcome.tsx` are one journey and the email it
-* sends in every example, and a flat map would let one overwrite the other.
-*
-* `plugin` is a toolchain record, not a linked artifact: modules are
-* statically linked, so the plugin bytes are inside each module. It says
-* which engine compiled the release, which is what a later bug report or a
-* reproducible rebuild needs.
+* One entry of a stored manifest: what a version is a snapshot of. Journeys
+* and templates are kept apart because they share a key space (`welcome.ts`
+* and `welcome.tsx` are one journey and the email it sends in every
+* example), and the version's own `kind` says which of the two this is.
 */
-const compiledManifestSchema = manifestSchema.safeExtend({
-	modules: z.object({
-		journeys: z.record(journeyKeySchema, digestSchema),
-		templates: z.record(journeyKeySchema, digestSchema)
-	}),
-	plugin: digestSchema
-});
+const versionManifestSchema = z.union([manifestJourneySchema, manifestTemplateSchema]);
 
 //#endregion
 //#region ../../packages/shared/src/journeys-v2/config.ts
@@ -385,7 +349,7 @@ const cowConfigSchema = z.strictObject({
 	webUrl: z.url().optional()
 }).meta({
 	title: "cow.json",
-	description: "A cow project: the organization and the project it deploys to."
+	description: "A cow project: the organization and the project it pushes to."
 });
 
 //#endregion
@@ -581,7 +545,6 @@ const manifestOutputSchema = z.discriminatedUnion("kind", [manifestJourneySchema
 	trigger: true,
 	purpose: true,
 	senderIdentity: true,
-	environments: true,
 	tags: true
 }).extend({ kind: z.literal("journey") }), manifestTemplateSchema.pick({
 	sendClass: true,
@@ -701,17 +664,21 @@ const journeyConfigSchema = manifestJourneySchema.pick({
 	trigger: true,
 	purpose: true,
 	senderIdentity: true,
-	environments: true,
 	tags: true
 }).extend({ senderIdentity: destinationNameSchema });
-/** Author a journey. Throws at definition time on an invalid config. */
+/**
+* Author a journey. Throws at definition time on an invalid config.
+*
+* There is no environment gate here: a journey runs wherever it is enabled,
+* and nowhere else (ADR 0011). A source that still passes `environments` is
+* a typecheck error in `cow build`, which is where the author can fix it.
+*/
 function defineJourney(input) {
 	return {
 		...journeyConfigSchema.parse({
 			trigger: input.trigger,
 			purpose: input.purpose,
 			senderIdentity: input.senderIdentity,
-			environments: input.environments ?? [...ENVIRONMENTS],
 			tags: input.tags
 		}),
 		run: input.run

package/dist/guest/journeys.d.ts

@@ -1,5 +1,4 @@
-import { n as Duration, r as GuestEvent, t as Trigger } from "./index-DAGLEHDn.js";
-import { t as Environment } from "./constants-B0wk-87t.js";
+import { n as Duration, r as GuestEvent, t as Trigger } from "./index-BDj02EsQ.js";
 //#region src/guest/journeys.d.ts
 /** The event a journey runs for, or the one a `waitForEvent` resolved with. */
 type Event = GuestEvent;
@@ -133,17 +132,20 @@ type JourneyConfig = {
    * resolved per environment, which is why it is a name and not an id.
    */
   senderIdentity: string;
-  /** The author's rollout gate; defaults to every environment. */
-  environments: Environment[];
   /** The author's labels; the dashboard's only grouping. Defaults to none. */
   tags: string[];
 };
 type Journey = JourneyConfig & {
   run: (event: Event, api: Api) => Promise<void>;
 };
-/** Author a journey. Throws at definition time on an invalid config. */
-declare function defineJourney(input: Omit<JourneyConfig, "environments" | "tags"> & {
-  environments?: Environment[];
+/**
+ * Author a journey. Throws at definition time on an invalid config.
+ *
+ * There is no environment gate here: a journey runs wherever it is enabled,
+ * and nowhere else (ADR 0011). A source that still passes `environments` is
+ * a typecheck error in `cow build`, which is where the author can fix it.
+ */
+declare function defineJourney(input: Omit<JourneyConfig, "tags"> & {
   tags?: string[];
   run: (event: Event, api: Api) => Promise<void>;
 }): Journey;

package/dist/guest/journeys.js

@@ -1,3 +1,3 @@
-import { n as defineJourney, t as CapabilityError } from "./journeys-B_xg_GnL.js";
+import { n as defineJourney, t as CapabilityError } from "./journeys-C8j8Sqvl.js";
 
 export { CapabilityError, defineJourney };

package/dist/guest/wasi.js

@@ -1,4 +1,4 @@
-import { t as runGuest } from "./driver-DaNdNhuF.js";
+import { t as runGuest } from "./driver-14FnzM-h.js";
 
 //#region src/guest/wasi.ts
 const STDIN = 0;