@freecodecamp/universe-cli 0.5.0 → 0.5.1

package/README.md

@@ -22,27 +22,27 @@ universe <command>
     Download the latest binary from [Releases](../../releases):
   </summary>
 
-  ```sh
-    # macOS (Apple Silicon)
-    gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-darwin-arm64"
-    chmod +x universe-darwin-arm64
-    sudo mv universe-darwin-arm64 /usr/local/bin/universe
-
-    # macOS (Intel)
-    gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-darwin-amd64"
-    chmod +x universe-darwin-amd64
-    sudo mv universe-darwin-amd64 /usr/local/bin/universe
-
-    # Linux x64
-    gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-linux-amd64"
-    chmod +x universe-linux-amd64
-    sudo mv universe-linux-amd64 /usr/local/bin/universe
-
-    # Linux ARM64
-    gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-linux-arm64"
-    chmod +x universe-linux-arm64
-    sudo mv universe-linux-arm64 /usr/local/bin/universe
-  ```
+```sh
+  # macOS (Apple Silicon)
+  gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-darwin-arm64"
+  chmod +x universe-darwin-arm64
+  sudo mv universe-darwin-arm64 /usr/local/bin/universe
+
+  # macOS (Intel)
+  gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-darwin-amd64"
+  chmod +x universe-darwin-amd64
+  sudo mv universe-darwin-amd64 /usr/local/bin/universe
+
+  # Linux x64
+  gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-linux-amd64"
+  chmod +x universe-linux-amd64
+  sudo mv universe-linux-amd64 /usr/local/bin/universe
+
+  # Linux ARM64
+  gh release download --repo freeCodeCamp-Universe/universe-cli --pattern "universe-linux-arm64"
+  chmod +x universe-linux-arm64
+  sudo mv universe-linux-arm64 /usr/local/bin/universe
+```
 
 </details>
 
@@ -88,16 +88,12 @@ All commands support `--json` for CI integration.
 The CLI resolves a GitHub identity in this order — first match wins:
 
 1. `$GITHUB_TOKEN` / `$GH_TOKEN` env (CI explicit)
-2. GHA OIDC (`$ACTIONS_ID_TOKEN_REQUEST_URL` + `$ACTIONS_ID_TOKEN_REQUEST_TOKEN`)
-3. Woodpecker OIDC env (deferred — placeholder slot)
-4. `gh auth token` shell-out (laptop with `gh` installed)
-5. Device-flow stored token at `~/.config/universe-cli/token`
+1. `gh auth token` shell-out (laptop with `gh` installed)
+1. Device-flow stored token at `~/.config/universe-cli/token`
+
+GHA OIDC and Woodpecker OIDC slots were dropped in v0.4: artemis validates bearers via GitHub `GET /user`, which only accepts user-scoped tokens. CI runners must export `$GITHUB_TOKEN` explicitly. The slots will return once artemis grows an OIDC verifier.
 
-The proxy validates whatever it receives via GitHub `GET /user`, then
-authorizes against the registry server-side (Valkey-backed; the
-`sites_yaml` backend was retired in artemis `f115198`). Run
-`universe whoami` to see which slot resolved; inspect the sites you
-can deploy to with `universe sites ls --mine`.
+The proxy validates whatever it receives via GitHub `GET /user`, then authorizes against the registry server-side (Valkey-backed; the `sites_yaml` backend was retired in artemis `f115198`). Run `universe whoami` to see which slot resolved; inspect the sites you can deploy to with `universe sites ls --mine`.
 
 ## Configuration (`platform.yaml`)
 
@@ -107,11 +103,9 @@ Every site has a `platform.yaml` at its repo root. Minimal valid file:
 site: my-site
 ```
 
-Full schema reference (every field, defaults, validation rules):
-[`docs/platform-yaml.md`](docs/platform-yaml.md).
+Full schema reference (every field, defaults, validation rules): [`docs/platform-yaml.md`](docs/platform-yaml.md).
 
-No credential fields. The proxy holds the R2 admin key; the CLI never
-reads or writes one.
+No credential fields. The proxy holds the R2 admin key; the CLI never reads or writes one.
 
 ## Common flows
 
@@ -140,8 +134,7 @@ universe static promote
 universe static rollback --to 20260427-141522-abc1234
 ```
 
-Registry admin (staff team only — gated server-side by artemis's
-`REGISTRY_AUTHZ_TEAM`, default `staff`):
+Registry admin (staff team only — gated server-side by artemis's `REGISTRY_AUTHZ_TEAM`, default `staff`):
 
 ```sh
 # Register a new site (defaults --team to staff)
@@ -154,10 +147,7 @@ universe sites update hello-universe --team bots,staff,curriculum
 universe sites rm hello-universe
 ```
 
-CI (GitHub Actions) — set `permissions: id-token: write` and rely on
-slot 2 (GHA OIDC) of the identity chain, or pass `$GITHUB_TOKEN`
-explicitly. Full operator walkthrough:
-[`docs/STAFF-GUIDE.md`](docs/STAFF-GUIDE.md).
+CI (GitHub Actions) — pass `$GITHUB_TOKEN` explicitly (slot 1). The OIDC slot will return once artemis grows an OIDC verifier. Full operator walkthrough: [`docs/STAFF-GUIDE.md`](docs/STAFF-GUIDE.md).
 
 ## Environment overrides
 
@@ -167,8 +157,4 @@ explicitly. Full operator walkthrough:
 | `UNIVERSE_GH_CLIENT_ID`     | _baked-in freeCodeCamp OAuth id_ | Override GitHub OAuth App id (fork tenants, `login` only) |
 | `GITHUB_TOKEN` / `GH_TOKEN` | —                                | Slot 1 of identity chain                                  |
 
-The shipped binary embeds the `freeCodeCamp` GitHub OAuth App client id
-(public; device flow uses no `client_secret`), so `universe login` works
-out of the box for staff. Fork operators and self-hosted mirror tenants
-set `UNIVERSE_GH_CLIENT_ID` to their own OAuth App's id — env value
-wins when set.
+The shipped binary embeds the `freeCodeCamp` GitHub OAuth App client id (public; device flow uses no `client_secret`), so `universe login` works out of the box for staff. Fork operators and self-hosted mirror tenants set `UNIVERSE_GH_CLIENT_ID` to their own OAuth App's id — env value wins when set.

package/dist/index.cjs

@@ -22777,7 +22777,7 @@ async function deploy(options, deps = {}) {
       );
     }
     const git = gitState();
-    if (git.dirty) {
+    if (git.dirty && !options.json) {
       warn(
         "git working tree is dirty \u2014 uncommitted changes will not be reflected."
       );
@@ -22789,7 +22789,7 @@ async function deploy(options, deps = {}) {
       cwd,
       outputDir
     });
-    if (buildResult.skipped) {
+    if (buildResult.skipped && !options.json) {
       info("build.command not set \u2014 using pre-built output.");
     }
     const resolvedOutputDir = buildResult.outputDir;
@@ -22848,7 +22848,7 @@ async function deploy(options, deps = {}) {
       );
     } else {
       const sizeKB = (uploadResult.totalSize / 1024).toFixed(1);
-      const nextLine = mode === "preview" ? "Next: universe static promote" : "Promoted to production.";
+      const nextLine = mode === "preview" ? `Next: universe static promote --from ${finalizeResult.deployId}` : "Promoted to production.\nPreview alias unchanged.";
       success2(
         [
           `Deployed ${finalizeResult.deployId}`,
@@ -23146,7 +23146,10 @@ async function ls(options, deps = {}) {
       getAuthToken: () => identity.token
     });
     const raw = await client.siteDeploys({ site });
-    const deploys = raw.map((d2) => parseDeployId(d2.deployId));
+    const sorted = [...raw].sort(
+      (a, b) => b.deployId.localeCompare(a.deployId)
+    );
+    const deploys = sorted.map((d2) => parseDeployId(d2.deployId));
     if (options.json) {
       emitJson4(
         buildEnvelope("ls", true, {
@@ -23239,15 +23242,17 @@ async function promote(options, deps = {}) {
         })
       );
     } else {
-      success2(
-        [
-          `Promoted ${result.deployId} to production`,
-          ``,
-          `  Site:        ${config2.site}`,
-          `  Deploy:      ${result.deployId}`,
-          `  Production:  ${result.url}`
-        ].join("\n")
-      );
+      const lines = [
+        `Promoted ${result.deployId} to production`,
+        ``,
+        `  Site:        ${config2.site}`,
+        `  Deploy:      ${result.deployId}`,
+        `  Production:  ${result.url}`
+      ];
+      if (options.from) {
+        lines.push(``, "Preview alias unchanged.");
+      }
+      success2(lines.join("\n"));
     }
   } catch (err) {
     const { code, message } = wrapProxyError("promote", err);
@@ -23689,7 +23694,7 @@ function outputError(ctx, code, message, issues) {
 }
 
 // src/cli.ts
-var version2 = true ? "0.5.0" : "0.0.0";
+var version2 = true ? "0.5.1" : "0.0.0";
 function handleActionError(command, json2, err) {
   const ctx = { json: json2, command };
   const message = err instanceof Error ? err.message : "unknown error";

package/dist/index.js

@@ -920,7 +920,7 @@ async function deploy(options, deps = {}) {
       );
     }
     const git = gitState();
-    if (git.dirty) {
+    if (git.dirty && !options.json) {
       warn(
         "git working tree is dirty \u2014 uncommitted changes will not be reflected."
       );
@@ -932,7 +932,7 @@ async function deploy(options, deps = {}) {
       cwd,
       outputDir
     });
-    if (buildResult.skipped) {
+    if (buildResult.skipped && !options.json) {
       info("build.command not set \u2014 using pre-built output.");
     }
     const resolvedOutputDir = buildResult.outputDir;
@@ -991,7 +991,7 @@ async function deploy(options, deps = {}) {
       );
     } else {
       const sizeKB = (uploadResult.totalSize / 1024).toFixed(1);
-      const nextLine = mode === "preview" ? "Next: universe static promote" : "Promoted to production.";
+      const nextLine = mode === "preview" ? `Next: universe static promote --from ${finalizeResult.deployId}` : "Promoted to production.\nPreview alias unchanged.";
       success(
         [
           `Deployed ${finalizeResult.deployId}`,
@@ -1294,7 +1294,10 @@ async function ls(options, deps = {}) {
       getAuthToken: () => identity.token
     });
     const raw = await client.siteDeploys({ site });
-    const deploys = raw.map((d) => parseDeployId(d.deployId));
+    const sorted = [...raw].sort(
+      (a, b) => b.deployId.localeCompare(a.deployId)
+    );
+    const deploys = sorted.map((d) => parseDeployId(d.deployId));
     if (options.json) {
       emitJson4(
         buildEnvelope("ls", true, {
@@ -1388,15 +1391,17 @@ async function promote(options, deps = {}) {
         })
       );
     } else {
-      success(
-        [
-          `Promoted ${result.deployId} to production`,
-          ``,
-          `  Site:        ${config.site}`,
-          `  Deploy:      ${result.deployId}`,
-          `  Production:  ${result.url}`
-        ].join("\n")
-      );
+      const lines = [
+        `Promoted ${result.deployId} to production`,
+        ``,
+        `  Site:        ${config.site}`,
+        `  Deploy:      ${result.deployId}`,
+        `  Production:  ${result.url}`
+      ];
+      if (options.from) {
+        lines.push(``, "Preview alias unchanged.");
+      }
+      success(lines.join("\n"));
     }
   } catch (err) {
     const { code, message } = wrapProxyError("promote", err);
@@ -1849,7 +1854,7 @@ function outputError(ctx, code, message, issues) {
 }
 
 // src/cli.ts
-var version = true ? "0.5.0" : "0.0.0";
+var version = true ? "0.5.1" : "0.0.0";
 function handleActionError(command, json, err) {
   const ctx = { json, command };
   const message = err instanceof Error ? err.message : "unknown error";

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "@freecodecamp/universe-cli",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "main": "dist/index.js",
   "scripts": {
     "test": "vitest run",
+    "test:smoke": "UNIVERSE_E2E_REAL=1 vitest run tests/e2e/smoke-real-artemis.test.ts",
     "build": "tsup",
     "lint": "oxlint src tests",
     "typecheck": "tsc --noEmit",