@ibalzam/codejitsu-core 0.13.0 → 0.13.1

package/MIGRATIONS/0.13.0.md

@@ -0,0 +1,56 @@
+# 0.13.0 — Daily deploy supports multi-site monorepos
+
+## Summary
+
+The deploy module now drives **every** Cloudflare Pages project in a repo, not just one. Previously the `daily-deploy.yml` workflow pinged a single deploy hook (`CLOUDFLARE_DEPLOY_HOOK_URL`), so a monorepo that deploys several Pages projects (e.g. `sites/www`, `sites/kamloops`, `sites/kelowna`) only ever rebuilt one of them on the morning cron — the others never graduated their scheduled/future-dated posts.
+
+A new secret, `CLOUDFLARE_DEPLOY_HOOK_URLS`, holds every project's deploy hook URL (comma-separated). The workflow prefers it and pings each URL. Single-site repos are unchanged: `CLOUDFLARE_DEPLOY_HOOK_URL` still works and is still what `deploy:setup` writes when you give it one URL.
+
+This is backward compatible — **no action needed for single-site repos**. Action is only required if one git repo deploys to **more than one** Cloudflare Pages project.
+
+## Required actions
+
+### Single-site repo (one Pages project)
+
+Nothing to do. If you re-copy the workflow template, the behaviour is identical.
+
+### Multi-site monorepo (one repo → several Pages projects)
+
+This is the case the change exists for. Symptom: only one site publishes scheduled content each morning; the others look stale until something else triggers a build.
+
+1. **Update the workflow file.** Re-copy the template so it loops over multiple hooks:
+
+   ```
+   cp node_modules/@ibalzam/codejitsu-core/modules/deploy/templates/daily-deploy.yml \
+      .github/workflows/daily-deploy.yml
+   ```
+
+   (Or run `npx codejitsu deploy:setup`, which copies it for you if missing.)
+
+2. **Create one Cloudflare deploy hook per Pages project** — dashboard → each project → Settings → Builds & deployments → Deploy hooks, branch `main`.
+
+3. **Store all the hook URLs in `CLOUDFLARE_DEPLOY_HOOK_URLS`, comma-separated.** Easiest via the wizard:
+
+   ```
+   npx codejitsu deploy:setup
+   ```
+
+   When it prompts, paste every project's URL comma-separated. It writes the plural secret (and removes the now-redundant singular one). Or set it directly:
+
+   ```
+   gh secret set CLOUDFLARE_DEPLOY_HOOK_URLS \
+     --body "https://api.cloudflare.com/.../hook-a,https://api.cloudflare.com/.../hook-b,https://api.cloudflare.com/.../hook-c"
+   ```
+
+4. **Adding a site later:** create its deploy hook and append `,<new-url>` to `CLOUDFLARE_DEPLOY_HOOK_URLS`. No workflow edit needed.
+
+## Verify
+
+```bash
+npm update @ibalzam/codejitsu-core
+npx codejitsu deploy:run        # dispatch the workflow once
+```
+
+Then confirm a deployment kicks off in **every** Pages project, not just one. `npx codejitsu audit` now passes when either `CLOUDFLARE_DEPLOY_HOOK_URL` or `CLOUDFLARE_DEPLOY_HOOK_URLS` is set.
+
+See `modules/deploy/CLAUDE.md` → "Multi-site monorepos" for the full reference.

package/bin/codejitsu.mjs

@@ -73,7 +73,7 @@ function printHelp() {
   console.log(`  blog:init           Install /blog, /blog-batch, /blog-images slash commands`);
   console.log(`  blog:selftest       Cold-Claude write a throwaway post + grade it. Flags: --topic, --model`);
   console.log(``);
-  console.log(`  deploy:setup        Wire up daily Cloudflare deploy (prompts for hook URL)`);
+  console.log(`  deploy:setup        Wire up daily Cloudflare deploy (prompts for hook URL(s); multi-site aware)`);
   console.log(`  deploy:run          Trigger the Daily Deploy workflow once now`);
   console.log(``);
   console.log(`  doctor              Check Node + dependency versions are current (run BEFORE upgrading or scaffolding)`);

package/modules/audit/src/groups/structure.mjs

@@ -75,12 +75,15 @@ export async function runStructure(ctx) {
           const secrets = await listSecrets(repo);
           if (secrets === null) {
             results.push(info('Skipped GH secret check (gh not authenticated for this repo)'));
+          } else if (secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URLS')) {
+            results.push(pass(`CLOUDFLARE_DEPLOY_HOOK_URLS set in ${repo} (multi-site)`));
           } else if (secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URL')) {
             results.push(pass(`CLOUDFLARE_DEPLOY_HOOK_URL set in ${repo}`));
           } else {
             results.push(warn(
-              'CLOUDFLARE_DEPLOY_HOOK_URL secret missing',
-              'Daily deploy workflow will fail. Run `npx codejitsu deploy:setup` to configure.'
+              'Deploy hook secret missing (CLOUDFLARE_DEPLOY_HOOK_URL or _URLS)',
+              'Daily deploy workflow will fail. Run `npx codejitsu deploy:setup` to configure. ' +
+                'For a multi-site monorepo, set CLOUDFLARE_DEPLOY_HOOK_URLS (one hook per Pages project, comma-separated).'
             ));
           }
         }

package/modules/cli/src/deploy.mjs

@@ -93,13 +93,19 @@ export async function runDeploySetup() {
   }
 
   // ─── GitHub secret ───────────────────────────────────────────────────
+  // Single site → CLOUDFLARE_DEPLOY_HOOK_URL. Multi-site monorepo (one repo,
+  // several Pages projects) → CLOUDFLARE_DEPLOY_HOOK_URLS holding every
+  // project's hook, comma-separated. The daily-deploy workflow prefers the
+  // plural secret and pings each URL.
   console.log('\nChecking GitHub Actions secrets…');
   const secrets = await listSecrets(repo);
-  const hasSecret = secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URL');
+  const hasSingular = secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URL');
+  const hasPlural = secrets.includes('CLOUDFLARE_DEPLOY_HOOK_URLS');
 
-  if (hasSecret) {
-    console.log(c.green('✓') + ' CLOUDFLARE_DEPLOY_HOOK_URL is set');
-    const rotate = await prompt('\nRotate the deploy hook URL? [y/N]: ');
+  if (hasSingular || hasPlural) {
+    const which = hasPlural ? 'CLOUDFLARE_DEPLOY_HOOK_URLS' : 'CLOUDFLARE_DEPLOY_HOOK_URL';
+    console.log(c.green('✓') + ` ${which} is set`);
+    const rotate = await prompt('\nRotate / re-enter the deploy hook URL(s)? [y/N]: ');
     if (!/^y(es)?$/i.test(rotate.trim())) {
       console.log(c.gray('\nNothing to do. The daily deploy is configured.\n'));
       await offerTestRun(repo);
@@ -107,28 +113,51 @@ export async function runDeploySetup() {
     }
   }
 
-  // Prompt for URL.
+  // Prompt for URL(s).
   console.log('');
-  console.log('Get a deploy hook URL from Cloudflare Pages:');
+  console.log('Get a deploy hook URL from Cloudflare Pages (one per Pages project):');
   console.log(c.gray('  1. Open Cloudflare dashboard → Pages → ' + (pagesName ?? 'your project') + ' → Settings'));
   console.log(c.gray('  2. Builds & deployments → Deploy hooks → "Add deploy hook"'));
   console.log(c.gray('  3. Name: "daily-scheduled-content" — Branch: main'));
   console.log(c.gray('  4. Copy the URL'));
+  console.log(c.gray('  Multi-site monorepo: repeat for every Pages project and paste all URLs comma-separated.'));
   console.log('');
 
-  const url = (await prompt('Paste the deploy hook URL: ')).trim();
-  if (!url.startsWith('https://api.cloudflare.com/client/v4/pages/webhooks/deploy_hooks/')) {
-    console.error(c.red('\n✗ That doesn\'t look like a Cloudflare Pages deploy hook URL.'));
-    console.error('  Expected prefix: https://api.cloudflare.com/client/v4/pages/webhooks/deploy_hooks/');
+  const raw = (await prompt('Paste the deploy hook URL(s), comma-separated: ')).trim();
+  const urls = raw.split(',').map((u) => u.trim()).filter(Boolean);
+  const prefix = 'https://api.cloudflare.com/client/v4/pages/webhooks/deploy_hooks/';
+  if (urls.length === 0) {
+    console.error(c.red('\n✗ No deploy hook URL provided.'));
+    process.exit(1);
+  }
+  const bad = urls.filter((u) => !u.startsWith(prefix));
+  if (bad.length > 0) {
+    console.error(c.red('\n✗ These don\'t look like Cloudflare Pages deploy hook URLs:'));
+    bad.forEach((u) => console.error('  ' + u));
+    console.error('  Expected prefix: ' + prefix);
     process.exit(1);
   }
 
-  const setOk = await setSecret(repo, 'CLOUDFLARE_DEPLOY_HOOK_URL', url);
+  // One URL → singular secret (back-compat). Multiple → plural secret.
+  const secretName = urls.length > 1 ? 'CLOUDFLARE_DEPLOY_HOOK_URLS' : 'CLOUDFLARE_DEPLOY_HOOK_URL';
+  const setOk = await setSecret(repo, secretName, urls.join(','));
   if (!setOk) {
     console.error(c.red('\n✗ Failed to set GitHub secret.'));
     process.exit(1);
   }
-  console.log(c.green('✓') + ` Secret CLOUDFLARE_DEPLOY_HOOK_URL set in ${repo}`);
+  console.log(
+    c.green('✓') + ` Secret ${secretName} set in ${repo}` +
+    (urls.length > 1 ? ` (${urls.length} hooks)` : '')
+  );
+
+  // Switching singular → plural: the stale singular secret is ignored by the
+  // workflow (plural wins) but is confusing. Remove it.
+  if (urls.length > 1 && hasSingular) {
+    const cleaned = await deleteSecret(repo, 'CLOUDFLARE_DEPLOY_HOOK_URL');
+    if (cleaned) {
+      console.log(c.gray('  Removed now-redundant CLOUDFLARE_DEPLOY_HOOK_URL (plural secret takes precedence).'));
+    }
+  }
 
   await offerTestRun(repo);
 }
@@ -236,6 +265,11 @@ async function setSecret(repo, name, value) {
   return r.code === 0;
 }
 
+async function deleteSecret(repo, name) {
+  const r = await runGh(['secret', 'delete', name, '--repo', repo]);
+  return r.code === 0;
+}
+
 function runGh(args) {
   return new Promise((resolve) => {
     const proc = spawn('gh', args, { stdio: ['ignore', 'pipe', 'pipe'] });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ibalzam/codejitsu-core",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "type": "module",
   "description": "Shared core for Codejitsu Astro sites — reusable code and Claude-facing instructions for blog, SEO, images, deploy, and llms.txt.",
   "keywords": [