@ibalzam/codejitsu-core 0.12.0 → 0.13.1

package/MIGRATIONS/0.13.0.md

@@ -0,0 +1,56 @@
+# 0.13.0 — Daily deploy supports multi-site monorepos
+
+## Summary
+
+The deploy module now drives **every** Cloudflare Pages project in a repo, not just one. Previously the `daily-deploy.yml` workflow pinged a single deploy hook (`CLOUDFLARE_DEPLOY_HOOK_URL`), so a monorepo that deploys several Pages projects (e.g. `sites/www`, `sites/kamloops`, `sites/kelowna`) only ever rebuilt one of them on the morning cron — the others never graduated their scheduled/future-dated posts.
+
+A new secret, `CLOUDFLARE_DEPLOY_HOOK_URLS`, holds every project's deploy hook URL (comma-separated). The workflow prefers it and pings each URL. Single-site repos are unchanged: `CLOUDFLARE_DEPLOY_HOOK_URL` still works and is still what `deploy:setup` writes when you give it one URL.
+
+This is backward compatible — **no action needed for single-site repos**. Action is only required if one git repo deploys to **more than one** Cloudflare Pages project.
+
+## Required actions
+
+### Single-site repo (one Pages project)
+
+Nothing to do. If you re-copy the workflow template, the behaviour is identical.
+
+### Multi-site monorepo (one repo → several Pages projects)
+
+This is the case the change exists for. Symptom: only one site publishes scheduled content each morning; the others look stale until something else triggers a build.
+
+1. **Update the workflow file.** Re-copy the template so it loops over multiple hooks:
+
+   ```
+   cp node_modules/@ibalzam/codejitsu-core/modules/deploy/templates/daily-deploy.yml \
+      .github/workflows/daily-deploy.yml
+   ```
+
+   (Or run `npx codejitsu deploy:setup`, which copies it for you if missing.)
+
+2. **Create one Cloudflare deploy hook per Pages project** — dashboard → each project → Settings → Builds & deployments → Deploy hooks, branch `main`.
+
+3. **Store all the hook URLs in `CLOUDFLARE_DEPLOY_HOOK_URLS`, comma-separated.** Easiest via the wizard:
+
+   ```
+   npx codejitsu deploy:setup
+   ```
+
+   When it prompts, paste every project's URL comma-separated. It writes the plural secret (and removes the now-redundant singular one). Or set it directly:
+
+   ```
+   gh secret set CLOUDFLARE_DEPLOY_HOOK_URLS \
+     --body "https://api.cloudflare.com/.../hook-a,https://api.cloudflare.com/.../hook-b,https://api.cloudflare.com/.../hook-c"
+   ```
+
+4. **Adding a site later:** create its deploy hook and append `,<new-url>` to `CLOUDFLARE_DEPLOY_HOOK_URLS`. No workflow edit needed.
+
+## Verify
+
+```bash
+npm update @ibalzam/codejitsu-core
+npx codejitsu deploy:run        # dispatch the workflow once
+```
+
+Then confirm a deployment kicks off in **every** Pages project, not just one. `npx codejitsu audit` now passes when either `CLOUDFLARE_DEPLOY_HOOK_URL` or `CLOUDFLARE_DEPLOY_HOOK_URLS` is set.
+
+See `modules/deploy/CLAUDE.md` → "Multi-site monorepos" for the full reference.

package/SETUP.md

@@ -393,7 +393,11 @@ npx codejitsu deploy:setup
 Interactive wizard:
 - Copies `.github/workflows/daily-deploy.yml` + `wrangler.toml` from
   package templates if missing.
-- Prompts for the Cloudflare deploy hook URL.
+- Prompts for the Cloudflare deploy hook URL(s). For a multi-site monorepo
+  (one repo → several Pages projects), enter every project's hook URL
+  comma-separated; they're stored in `CLOUDFLARE_DEPLOY_HOOK_URLS` and the
+  workflow pings each. A single site uses `CLOUDFLARE_DEPLOY_HOOK_URL`.
+  See `modules/deploy/CLAUDE.md` → "Multi-site monorepos".
 - Stores it as a GH Actions secret via `gh secret set`.
 - Optionally triggers a test run.
 

package/bin/codejitsu.mjs

@@ -73,7 +73,7 @@ function printHelp() {
   console.log(`  blog:init           Install /blog, /blog-batch, /blog-images slash commands`);
   console.log(`  blog:selftest       Cold-Claude write a throwaway post + grade it. Flags: --topic, --model`);
   console.log(``);
-  console.log(`  deploy:setup        Wire up daily Cloudflare deploy (prompts for hook URL)`);
+  console.log(`  deploy:setup        Wire up daily Cloudflare deploy (prompts for hook URL(s); multi-site aware)`);
   console.log(`  deploy:run          Trigger the Daily Deploy workflow once now`);
   console.log(``);
   console.log(`  doctor              Check Node + dependency versions are current (run BEFORE upgrading or scaffolding)`);

package/checklist/core.md

@@ -9,7 +9,7 @@ The runner covers the easy stuff (file presence, meta tags, canonical, schema sc
 - [ ] `npm run build` exits 0 with no warnings about missing pages, unresolved imports, or broken links.
 - [ ] `dist/` contains static HTML for every expected route. No `.html` route is missing.
 - [ ] `wrangler.toml` is present and points to `dist`.
-- [ ] `.github/workflows/daily-deploy.yml` exists; the `CLOUDFLARE_DEPLOY_HOOK_URL` secret is set in the repo (skip if site has no scheduled content).
+- [ ] `.github/workflows/daily-deploy.yml` exists; the deploy-hook secret is set in the repo — `CLOUDFLARE_DEPLOY_HOOK_URL` (single site) or `CLOUDFLARE_DEPLOY_HOOK_URLS` (comma-separated, one Deploy Hook per Pages project, for a multi-site monorepo). Skip if the site has no scheduled content.
 
 ## URLs + routing
 

package/modules/audit/src/groups/structure.mjs

@@ -75,12 +75,15 @@ export async function runStructure(ctx) {
           const secrets = await listSecrets(repo);
           if (secrets === null) {
             results.push(info('Skipped GH secret check (gh not authenticated for this repo)'));
+          } else if (secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URLS')) {
+            results.push(pass(`CLOUDFLARE_DEPLOY_HOOK_URLS set in ${repo} (multi-site)`));
           } else if (secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URL')) {
             results.push(pass(`CLOUDFLARE_DEPLOY_HOOK_URL set in ${repo}`));
           } else {
             results.push(warn(
-              'CLOUDFLARE_DEPLOY_HOOK_URL secret missing',
-              'Daily deploy workflow will fail. Run `npx codejitsu deploy:setup` to configure.'
+              'Deploy hook secret missing (CLOUDFLARE_DEPLOY_HOOK_URL or _URLS)',
+              'Daily deploy workflow will fail. Run `npx codejitsu deploy:setup` to configure. ' +
+                'For a multi-site monorepo, set CLOUDFLARE_DEPLOY_HOOK_URLS (one hook per Pages project, comma-separated).'
             ));
           }
         }

package/modules/cli/src/deploy.mjs

@@ -93,13 +93,19 @@ export async function runDeploySetup() {
   }
 
   // ─── GitHub secret ───────────────────────────────────────────────────
+  // Single site → CLOUDFLARE_DEPLOY_HOOK_URL. Multi-site monorepo (one repo,
+  // several Pages projects) → CLOUDFLARE_DEPLOY_HOOK_URLS holding every
+  // project's hook, comma-separated. The daily-deploy workflow prefers the
+  // plural secret and pings each URL.
   console.log('\nChecking GitHub Actions secrets…');
   const secrets = await listSecrets(repo);
-  const hasSecret = secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URL');
+  const hasSingular = secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URL');
+  const hasPlural = secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URLS');
 
-  if (hasSecret) {
-    console.log(c.green('✓') + ' CLOUDFLARE_DEPLOY_HOOK_URL is set');
-    const rotate = await prompt('\nRotate the deploy hook URL? [y/N]: ');
+  if (hasSingular || hasPlural) {
+    const which = hasPlural ? 'CLOUDFLARE_DEPLOY_HOOK_URLS' : 'CLOUDFLARE_DEPLOY_HOOK_URL';
+    console.log(c.green('✓') + ` ${which} is set`);
+    const rotate = await prompt('\nRotate / re-enter the deploy hook URL(s)? [y/N]: ');
     if (!/^y(es)?$/i.test(rotate.trim())) {
       console.log(c.gray('\nNothing to do. The daily deploy is configured.\n'));
       await offerTestRun(repo);
@@ -107,28 +113,51 @@ export async function runDeploySetup() {
     }
   }
 
-  // Prompt for URL.
+  // Prompt for URL(s).
   console.log('');
-  console.log('Get a deploy hook URL from Cloudflare Pages:');
+  console.log('Get a deploy hook URL from Cloudflare Pages (one per Pages project):');
   console.log(c.gray('  1. Open Cloudflare dashboard → Pages → ' + (pagesName ?? 'your project') + ' → Settings'));
   console.log(c.gray('  2. Builds & deployments → Deploy hooks → "Add deploy hook"'));
   console.log(c.gray('  3. Name: "daily-scheduled-content" — Branch: main'));
   console.log(c.gray('  4. Copy the URL'));
+  console.log(c.gray('  Multi-site monorepo: repeat for every Pages project and paste all URLs comma-separated.'));
   console.log('');
 
-  const url = (await prompt('Paste the deploy hook URL: ')).trim();
-  if (!url.startsWith('https://api.cloudflare.com/client/v4/pages/webhooks/deploy_hooks/')) {
-    console.error(c.red('\n✗ That doesn\'t look like a Cloudflare Pages deploy hook URL.'));
-    console.error('  Expected prefix: https://api.cloudflare.com/client/v4/pages/webhooks/deploy_hooks/');
+  const raw = (await prompt('Paste the deploy hook URL(s), comma-separated: ')).trim();
+  const urls = raw.split(',').map((u) => u.trim()).filter(Boolean);
+  const prefix = 'https://api.cloudflare.com/client/v4/pages/webhooks/deploy_hooks/';
+  if (urls.length === 0) {
+    console.error(c.red('\n✗ No deploy hook URL provided.'));
+    process.exit(1);
+  }
+  const bad = urls.filter((u) => !u.startsWith(prefix));
+  if (bad.length > 0) {
+    console.error(c.red('\n✗ These don\'t look like Cloudflare Pages deploy hook URLs:'));
+    bad.forEach((u) => console.error('  ' + u));
+    console.error('  Expected prefix: ' + prefix);
     process.exit(1);
   }
 
-  const setOk = await setSecret(repo, 'CLOUDFLARE_DEPLOY_HOOK_URL', url);
+  // One URL → singular secret (back-compat). Multiple → plural secret.
+  const secretName = urls.length > 1 ? 'CLOUDFLARE_DEPLOY_HOOK_URLS' : 'CLOUDFLARE_DEPLOY_HOOK_URL';
+  const setOk = await setSecret(repo, secretName, urls.join(','));
   if (!setOk) {
     console.error(c.red('\n✗ Failed to set GitHub secret.'));
     process.exit(1);
   }
-  console.log(c.green('✓') + ` Secret CLOUDFLARE_DEPLOY_HOOK_URL set in ${repo}`);
+  console.log(
+    c.green('✓') + ` Secret ${secretName} set in ${repo}` +
+    (urls.length > 1 ? ` (${urls.length} hooks)` : '')
+  );
+
+  // Switching singular → plural: the stale singular secret is ignored by the
+  // workflow (plural wins) but is confusing. Remove it.
+  if (urls.length > 1 && hasSingular) {
+    const cleaned = await deleteSecret(repo, 'CLOUDFLARE_DEPLOY_HOOK_URL');
+    if (cleaned) {
+      console.log(c.gray('  Removed now-redundant CLOUDFLARE_DEPLOY_HOOK_URL (plural secret takes precedence).'));
+    }
+  }
 
   await offerTestRun(repo);
 }
@@ -236,6 +265,11 @@ async function setSecret(repo, name, value) {
   return r.code === 0;
 }
 
+async function deleteSecret(repo, name) {
+  const r = await runGh(['secret', 'delete', name, '--repo', repo]);
+  return r.code === 0;
+}
+
 function runGh(args) {
   return new Promise((resolve) => {
     const proc = spawn('gh', args, { stdio: ['ignore', 'pipe', 'pipe'] });

package/modules/deploy/CLAUDE.md

@@ -5,7 +5,7 @@ When the user asks to **set up codejitsu/core/deploy** (or "wire up the Cloudfla
 ## What this module provides
 
 - `templates/wrangler.toml` — minimal Cloudflare Pages config.
-- `templates/daily-deploy.yml` — GitHub Action that pings a Cloudflare deploy hook every morning so scheduled blog posts (or any time-gated content) graduate from hidden to public on their publish date.
+- `templates/daily-deploy.yml` — GitHub Action that pings one or more Cloudflare deploy hooks every morning so scheduled blog posts (or any time-gated content) graduate from hidden to public on their publish date. Handles both single-site repos and multi-site monorepos (see below).
 
 ## Wiring it into a site
 
@@ -30,11 +30,34 @@ gh secret set CLOUDFLARE_DEPLOY_HOOK_URL --body "<paste URL>"
 
 Or via the GitHub UI: Settings → Secrets and variables → Actions → New repository secret, named `CLOUDFLARE_DEPLOY_HOOK_URL`.
 
+> Multi-site monorepo? Skip this step and follow **Multi-site monorepos** below instead.
+
 ### 4. Verify
 
 - Trigger the workflow manually: `gh workflow run "Daily Deploy"` (or via the GH UI).
 - A Cloudflare Pages deployment should kick off within seconds.
 
+## Multi-site monorepos
+
+A single repo can host several sites (e.g. `sites/www`, `sites/kamloops`, `sites/kelowna`), each deployed as its **own Cloudflare Pages project**. There is still only **one** `.github/workflows/daily-deploy.yml` for the repo, but it must rebuild **every** project — otherwise only one site graduates its scheduled content each morning and the rest stay stale.
+
+The template already handles this. To wire it up:
+
+1. **Create one deploy hook per Pages project** (Cloudflare dashboard → each project → Settings → Builds & deployments → Deploy hooks, branch `main`). For garagedoorpros that's three: `garagedoorpros-ca`, `gdp-kamloops`, `gdp-kelowna`.
+2. **Store all the URLs in a single plural secret, comma-separated** (one line — easiest to set and paste; Cloudflare hook URLs never contain commas):
+
+   ```bash
+   gh secret set CLOUDFLARE_DEPLOY_HOOK_URLS \
+     --body "https://api.cloudflare.com/.../www-hook,https://api.cloudflare.com/.../kamloops-hook,https://api.cloudflare.com/.../kelowna-hook"
+   ```
+
+   (Newline- or space-separated values also work — the workflow splits on commas, newlines, and spaces — but commas keep it a single line, which avoids the multi-line `--body` / paste pitfalls.)
+3. The workflow prefers `CLOUDFLARE_DEPLOY_HOOK_URLS` when present, splits it, and pings each URL. It only falls back to the singular `CLOUDFLARE_DEPLOY_HOOK_URL` when the plural secret is absent — so single-site repos need no change.
+
+**Adding a site later:** create its deploy hook, append `,<new-url>` to `CLOUDFLARE_DEPLOY_HOOK_URLS`, done. No workflow edit needed.
+
+**Verify:** `gh workflow run "Daily Deploy"` then confirm a deployment kicks off in *every* Pages project, not just one.
+
 ## Build command (for Cloudflare Pages git integration)
 
 If using Cloudflare's git integration (preferred for push-driven deploys):
@@ -45,7 +68,8 @@ If using Cloudflare's git integration (preferred for push-driven deploys):
 
 ## What must NOT be done
 
-- **Don't commit the deploy hook URL.** It belongs in `CLOUDFLARE_DEPLOY_HOOK_URL` secret only.
+- **Don't commit the deploy hook URL(s).** They belong in the `CLOUDFLARE_DEPLOY_HOOK_URL` / `CLOUDFLARE_DEPLOY_HOOK_URLS` secret only.
+- **Don't add a second daily-deploy workflow for a monorepo's extra sites.** One workflow pings all hooks via `CLOUDFLARE_DEPLOY_HOOK_URLS` — see **Multi-site monorepos**. Duplicate workflows mean duplicate crons and drift.
 - **Don't change the cron without reason.** 13:00 UTC is intentional — early-morning Pacific so posts are live by the time users wake up. If a site is on a different timezone, change it explicitly and note why in a comment in the workflow file.
 - **Don't add a `wrangler deploy` step to the cron workflow.** The workflow only *pings* the deploy hook; Cloudflare does the actual build via git integration. Doing the build twice causes drift.
 - **Don't skip the daily-deploy workflow even if the site has no scheduled content yet.** It's the safety net for when the user adds a scheduled post six months later.
@@ -54,5 +78,5 @@ If using Cloudflare's git integration (preferred for push-driven deploys):
 
 - [ ] `wrangler.toml` present at site root with correct `name`.
 - [ ] `.github/workflows/daily-deploy.yml` present.
-- [ ] `CLOUDFLARE_DEPLOY_HOOK_URL` secret set in the repo (check with `gh secret list`).
-- [ ] Cloudflare Pages project exists and is connected to the git repo.
+- [ ] Deploy-hook secret set (check with `gh secret list`): `CLOUDFLARE_DEPLOY_HOOK_URL` for a single site, or `CLOUDFLARE_DEPLOY_HOOK_URLS` (one URL per line) for a multi-site monorepo.
+- [ ] A Cloudflare Pages project exists for **each** site and is connected to the git repo, and every project has a hook in the secret.

package/modules/deploy/checklist.md

@@ -3,7 +3,7 @@
 - [ ] `wrangler.toml` exists at site root with the correct Cloudflare Pages project `name`.
 - [ ] `pages_build_output_dir = "dist"` in `wrangler.toml`.
 - [ ] `.github/workflows/daily-deploy.yml` exists and is unmodified from the template (or modifications are documented in a comment).
-- [ ] `CLOUDFLARE_DEPLOY_HOOK_URL` secret is set in the repo (`gh secret list`).
-- [ ] Cloudflare Pages project exists and is connected to the GitHub repo (git integration).
-- [ ] Pages build command is `npm run build`, output dir is `dist`, Node version is 20.
-- [ ] Manual run of `gh workflow run "Daily Deploy"` triggers a Cloudflare deployment within seconds.
+- [ ] Deploy-hook secret is set in the repo (`gh secret list`): `CLOUDFLARE_DEPLOY_HOOK_URL` (single site) or `CLOUDFLARE_DEPLOY_HOOK_URLS` (multi-site monorepo, one URL per line).
+- [ ] A Cloudflare Pages project exists for **each** site and is connected to the GitHub repo (git integration); every project's hook is in the secret.
+- [ ] Each Pages project's build command is `npm run build` (for its own site/workspace), output dir is `dist`, Node version is 20.
+- [ ] Manual run of `gh workflow run "Daily Deploy"` triggers a Cloudflare deployment in **every** Pages project within seconds.

package/modules/deploy/templates/daily-deploy.yml

@@ -3,9 +3,14 @@ name: Daily Deploy
 # Triggers a Cloudflare Pages rebuild each morning so any scheduled content
 # whose publish date has arrived graduates from hidden to public.
 #
-# Requires a repository secret named CLOUDFLARE_DEPLOY_HOOK_URL holding
-# the Deploy Hook URL from Cloudflare Pages (Project settings -> Builds &
+# Single-site repo: set the secret CLOUDFLARE_DEPLOY_HOOK_URL to the one
+# Deploy Hook URL from Cloudflare Pages (Project settings -> Builds &
 # deployments -> Deploy hooks).
+#
+# Multi-site monorepo (one repo -> several Pages projects): set the secret
+# CLOUDFLARE_DEPLOY_HOOK_URLS to ALL the projects' Deploy Hook URLs, separated
+# by commas (newlines also work). The job pings every URL so each site
+# rebuilds. If both secrets are set, the plural one wins.
 
 on:
   schedule:
@@ -18,12 +23,23 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
-      - name: Ping Cloudflare deploy hook
+      - name: Ping Cloudflare deploy hook(s)
         env:
+          HOOKS: ${{ secrets.CLOUDFLARE_DEPLOY_HOOK_URLS }}
           HOOK: ${{ secrets.CLOUDFLARE_DEPLOY_HOOK_URL }}
         run: |
-          if [ -z "$HOOK" ]; then
-            echo "CLOUDFLARE_DEPLOY_HOOK_URL secret is not set"
+          # Prefer the plural (multi-URL) secret; fall back to the singular one.
+          urls="$HOOKS"
+          [ -z "$urls" ] && urls="$HOOK"
+          if [ -z "$urls" ]; then
+            echo "Neither CLOUDFLARE_DEPLOY_HOOK_URLS nor CLOUDFLARE_DEPLOY_HOOK_URL is set"
             exit 1
           fi
-          curl --fail-with-body -X POST "$HOOK"
+          # Accept commas, newlines, or spaces as separators between URLs.
+          failed=0
+          for url in $(echo "$urls" | tr ',\n' '  '); do
+            [ -z "$url" ] && continue
+            echo "Pinging deploy hook: ${url%%\?*}"
+            curl --fail-with-body -X POST "$url" || failed=1
+          done
+          exit $failed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ibalzam/codejitsu-core",
-  "version": "0.12.0",
+  "version": "0.13.1",
   "type": "module",
   "description": "Shared core for Codejitsu Astro sites — reusable code and Claude-facing instructions for blog, SEO, images, deploy, and llms.txt.",
   "keywords": [