@kryd/cli 0.10.0 → 0.12.0

package/README.md

@@ -2,6 +2,8 @@
 
 The command-line client for **[Kryd](https://kryd.eu)** — the **European cloud for your AI**. Push a React / Vite / Next.js app and seconds later it's live on a real URL with SSL, one-click managed Postgres and object storage, and an EU-hosted AI gateway already wired in. The same instant `git push → live` loop you know from Vercel/Netlify, on infrastructure that is genuinely European — code **and** AI inference stay inside the EU.
 
+**Kryd is in beta.** `kryd login` needs a Kryd account: sign up for a beta account at **[kryd.eu/beta](https://kryd.eu/beta)**.
+
 ## Install
 
 ```sh

package/dist/index.js

@@ -15433,7 +15433,7 @@ function parseDomainRecord(body) {
 function parseProjectDomain(body, label) {
   const d = body;
   const bad = () => new ApiError(`The API returned an unexpected ${label} response.`);
-  if (!d || typeof d.id !== "string" || typeof d.host !== "string" || typeof d.status !== "string" || !DOMAIN_STATUSES.includes(d.status) || typeof d.detail !== "string" && d.detail !== null || typeof d.checkedAt !== "string" && d.checkedAt !== null || typeof d.createdAt !== "string" || !Array.isArray(d.records)) {
+  if (!d || typeof d.id !== "string" || typeof d.host !== "string" || typeof d.status !== "string" || !DOMAIN_STATUSES.includes(d.status) || typeof d.detail !== "string" && d.detail !== null || typeof d.checkedAt !== "string" && d.checkedAt !== null || typeof d.createdAt !== "string" || !Array.isArray(d.records) || d.redirectTo !== void 0 && typeof d.redirectTo !== "string") {
     throw bad();
   }
   const records = d.records.map(parseDomainRecord);
@@ -15443,6 +15443,8 @@ function parseProjectDomain(body, label) {
     host: d.host,
     // KRYD-381a — absent from an older API: then it is `web`, the only app there was.
     ...typeof d.app === "string" ? { app: d.app } : {},
+    // KRYD-541 — present only on a redirect domain.
+    ...typeof d.redirectTo === "string" ? { redirectTo: d.redirectTo } : {},
     status: d.status,
     detail: d.detail,
     checkedAt: d.checkedAt,
@@ -15469,11 +15471,11 @@ async function listDomains(apiUrl, token, projectId) {
     domains: body.domains.map((d) => parseProjectDomain(d, "domain-list"))
   };
 }
-async function addDomain(apiUrl, token, projectId, host, app) {
+async function addDomain(apiUrl, token, projectId, host, app, redirectTo) {
   const res = await fetch(domainsUrl(apiUrl, projectId), {
     method: "POST",
     headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
-    body: JSON.stringify({ host, ...app ? { app } : {} })
+    body: JSON.stringify({ host, ...app ? { app } : {}, ...redirectTo !== void 0 ? { redirectTo } : {} })
   });
   if (!res.ok) {
     throw new ApiError(`Domain add failed (${res.status})`, await parseEnvelope(res), res.status);
@@ -15489,6 +15491,37 @@ async function removeDomain(apiUrl, token, projectId, host) {
     throw new ApiError(`Domain removal failed (${res.status})`, await parseEnvelope(res), res.status);
   }
 }
+function deployHookUrl(apiUrl, projectId) {
+  return `${apiUrl}/projects/${encodeURIComponent(projectId)}/deploy-hook`;
+}
+async function createDeployHook(apiUrl, token, projectId) {
+  const res = await fetch(deployHookUrl(apiUrl, projectId), {
+    method: "PUT",
+    headers: { authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) {
+    throw new ApiError(`Deploy hook creation failed (${res.status})`, await parseEnvelope(res), res.status);
+  }
+  const body = await res.json().catch(() => void 0);
+  if (typeof body?.url !== "string" || typeof body.replaced !== "boolean") {
+    throw new Error("Unexpected response from the API (deploy-hook create).");
+  }
+  return { url: body.url, replaced: body.replaced };
+}
+async function removeDeployHook(apiUrl, token, projectId) {
+  const res = await fetch(deployHookUrl(apiUrl, projectId), {
+    method: "DELETE",
+    headers: { authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) {
+    throw new ApiError(`Deploy hook removal failed (${res.status})`, await parseEnvelope(res), res.status);
+  }
+  const body = await res.json().catch(() => void 0);
+  if (typeof body?.removed !== "boolean") {
+    throw new Error("Unexpected response from the API (deploy-hook rm).");
+  }
+  return { removed: body.removed };
+}
 async function fetchResourceStatus(apiUrl, token, path) {
   const res = await fetch(`${apiUrl}${path}`, {
     headers: { authorization: `Bearer ${token}` }
@@ -18104,7 +18137,7 @@ async function resolveProjectIdByName(apiUrl, token, name) {
   const matches = projects.filter((p) => p.name === name);
   if (matches.length === 0) {
     process.stderr.write(
-      `No project named ${name} on this account. Run \`kryd project list\` to see the names.
+      `No project named ${name} on this account. Run \`kryd project list\` and use the NAME column, not SUBDOMAIN.
 `
     );
     process.exitCode = 1;
@@ -18600,22 +18633,22 @@ async function runDomainAdd(opts) {
   if (!ctx) return;
   try {
     const [domain3, list] = await Promise.all([
-      addDomain(ctx.apiUrl, ctx.token, ctx.project, opts.host, opts.app),
+      addDomain(ctx.apiUrl, ctx.token, ctx.project, opts.host, opts.app, opts.redirect),
       listDomains(ctx.apiUrl, ctx.token, ctx.project).catch(() => null)
     ]);
     if (domain3.status !== "pending") {
       process.stdout.write(
-        `${domain3.host} is already on ${ctx.project}${appSuffix(domain3.app)}: ${DOMAIN_STATUS_TEXT[domain3.status]}.
+        `${domain3.host} is already on ${ctx.project}${domainRole(domain3)}: ${DOMAIN_STATUS_TEXT[domain3.status]}.
 `
       );
       return;
     }
     process.stdout.write(
-      `${domain3.host} added to ${ctx.project}${appSuffix(domain3.app)} \u2014 pending until its DNS records exist.
+      `${domain3.host} added to ${ctx.project}${domainRole(domain3)} \u2014 pending until its DNS records exist.
 
 Create these records at your DNS provider:
 ` + formatDomainRecords(domain3.records) + `
-Kryd checks every minute; once they are right it issues a certificate and serves ${domain3.host} from ${domain3.app && domain3.app !== "web" ? `app ${domain3.app}'s` : "your"} production deploy. Follow it with \`kryd domain status ${domain3.host}\`.
+Kryd checks every minute; once they are right it issues a certificate and ` + (domain3.redirectTo ? `answers every request on ${domain3.host} with a permanent redirect (301) to https://${domain3.redirectTo}, path and query kept.` : `serves ${domain3.host} from ${domain3.app && domain3.app !== "web" ? `app ${domain3.app}'s` : "your"} production deploy.`) + ` Follow it with \`kryd domain status ${domain3.host}\`.
 ` + (list?.projectHost ? `${ctx.project} keeps its own host, ${list.projectHost}.
 ` : "")
     );
@@ -18623,9 +18656,43 @@ Kryd checks every minute; once they are right it issues a certificate and serves
     await reportError(err);
   }
 }
+async function runDeployHookCreate(opts) {
+  const ctx = domainContext(opts, "kryd project deploy-hook create --project <projectId>");
+  if (!ctx) return;
+  try {
+    const { url: url2, replaced } = await createDeployHook(ctx.apiUrl, ctx.token, ctx.project);
+    process.stdout.write(
+      `Deploy hook for ${ctx.project}${replaced ? " \u2014 replaces the previous one, which no longer works" : ""}:
+
+  ${url2}
+
+A POST to this URL rebuilds production from the latest commit, without cache. It is shown only now: anyone with it can start a rebuild, so keep it secret. Lost or leaked? Run this command again to replace it, or \`kryd project deploy-hook rm\` to remove it.
+`
+    );
+  } catch (err) {
+    await reportError(err);
+  }
+}
+async function runDeployHookRemove(opts) {
+  const ctx = domainContext(opts, "kryd project deploy-hook rm --project <projectId>");
+  if (!ctx) return;
+  try {
+    const { removed } = await removeDeployHook(ctx.apiUrl, ctx.token, ctx.project);
+    process.stdout.write(
+      removed ? `Deploy hook of ${ctx.project} removed \u2014 its URL no longer works.
+` : `${ctx.project} has no deploy hook \u2014 nothing to remove.
+`
+    );
+  } catch (err) {
+    await reportError(err);
+  }
+}
 function appSuffix(app) {
   return app && app !== "web" ? ` (app ${app})` : "";
 }
+function domainRole(d) {
+  return d.redirectTo ? ` \u2192 redirects to ${d.redirectTo}` : appSuffix(d.app);
+}
 async function runDomainRemove(opts) {
   const ctx = domainContext(opts, "kryd domain remove <host> --project <projectId>");
   if (!ctx) return;
@@ -18665,7 +18732,7 @@ ${own}`);
       let out2 = `${ctx.project}: ${list.domains.length} custom domain${list.domains.length === 1 ? "" : "s"}.
 `;
       for (const d2 of list.domains) {
-        out2 += `  ${d2.host}  ${DOMAIN_STATUS_TEXT[d2.status]}
+        out2 += `  ${d2.host}  ${DOMAIN_STATUS_TEXT[d2.status]}${d2.redirectTo ? `  \u2192 redirects to ${d2.redirectTo}` : ""}
 `;
         if (d2.detail) out2 += `      ${d2.detail}
 `;
@@ -18682,6 +18749,8 @@ ${own}`);
       return;
     }
     let out = `${d.host}: ${DOMAIN_STATUS_TEXT[d.status]}.
+`;
+    if (d.redirectTo) out += `  \u2192 redirects to ${d.redirectTo}
 `;
     if (d.detail) out += `  ${d.detail}
 `;
@@ -19034,15 +19103,17 @@ async function runProjectList(opts) {
     return;
   }
   const linkedId = resolveProjectId(void 0, opts.cwd);
-  const nameWidth = projects.reduce((max, p) => Math.max(max, p.name.length), 0);
-  const subWidth = projects.reduce((max, p) => Math.max(max, p.subdomain.length), 0);
-  const statusWidth = projects.reduce((max, p) => Math.max(max, p.status.length), 0);
+  const nameWidth = projects.reduce((max, p) => Math.max(max, p.name.length), "NAME".length);
+  const subWidth = projects.reduce(
+    (max, p) => Math.max(max, p.subdomain.length),
+    "SUBDOMAIN".length
+  );
+  const statusWidth = projects.reduce((max, p) => Math.max(max, p.status.length), "STATUS".length);
+  const row = (mark, name, sub, status, id) => `${mark} ${name.padEnd(nameWidth)}  ${sub.padEnd(subWidth)}  ${status.padEnd(statusWidth)}  ${id}
+`;
+  process.stdout.write(row(" ", "NAME", "SUBDOMAIN", "STATUS", "ID"));
   for (const p of projects) {
-    const mark = p.id === linkedId ? "*" : " ";
-    process.stdout.write(
-      `${mark} ${p.name.padEnd(nameWidth)}  ${p.subdomain.padEnd(subWidth)}  ${p.status.padEnd(statusWidth)}  ${p.id}
-`
-    );
+    process.stdout.write(row(p.id === linkedId ? "*" : " ", p.name, p.subdomain, p.status, p.id));
   }
   if (projects.some((p) => p.id === linkedId)) {
     process.stdout.write("\n* linked to this directory\n");
@@ -19437,7 +19508,7 @@ Run \`kryd env list\` to see what is set. (If you meant the runtime variable of
     await reportError(err);
   }
 }
-var CLI_VERSION = true ? "0.10.0" : "0.0.0-dev";
+var CLI_VERSION = true ? "0.12.0" : "0.0.0-dev";
 var program = new Command();
 program.name("kryd").description("Kryd CLI").version(CLI_VERSION);
 program.hook("postAction", async () => {
@@ -19511,6 +19582,9 @@ project.command("list").description("List your projects \u2014 name, subdomain,
 project.command("rm [project]").description(
   "Permanently delete a project and everything Kryd created for it (by name or id; asks you to type its name)"
 ).option("--yes", "skip the confirmation (for non-interactive use)").option("--api-url <url>", "control-plane API base URL").action((projectArg, opts) => runProjectRemove({ ...opts, project: projectArg }));
+var deployHook = project.command("deploy-hook").description("A secret URL that rebuilds production on a POST \u2014 for a CMS webhook (e.g. Sanity on publish)");
+deployHook.command("create").description("Create the deploy hook and print its URL once (replaces an existing one)").option("--project <projectId>", "the project (default: the one linked here)").option("--api-url <url>", "control-plane API base URL").action((opts) => runDeployHookCreate(opts));
+deployHook.command("rm").description("Remove the deploy hook \u2014 its URL stops working").option("--project <projectId>", "the project (default: the one linked here)").option("--api-url <url>", "control-plane API base URL").action((opts) => runDeployHookRemove(opts));
 var db = program.command("db").description("Manage project databases");
 db.command("add [project]").description("Attach a shared or bring-your-own Postgres database to a project").option("--shared", "attach a shared managed database (the default)").option(
   "--connection-string <url>",
@@ -19567,7 +19641,10 @@ workflow.command("init").description(
   `worker language: ${SCAFFOLD_LANGUAGES.join(" | ")}`
 ).option("--path <folder>", "the worker's folder inside the app (default: workflows)").option("--only", "a project that runs ONLY a worker: scaffold it at the root, git init, and link").option("--dir <path>", "the project directory, instead of the current one").option("--name <name>", "worker name (and, with --only, project name); defaults to the directory name").option("--no-link", "with --only: only write the files; do not create a Kryd project").option("--api-url <url>", "control-plane API base URL").action((opts) => runWorkflowInit(opts));
 var domain2 = program.command("domain").description("Serve the project on your own hostname (custom domains)");
-domain2.command("add <host>").description("Add a custom domain and print the DNS records to create").option("--project <projectId>", "the project (default: the one linked here)").option("--app <name>", "a project with several web apps: the app the domain serves (default: web)").option("--api-url <url>", "control-plane API base URL").action((host, opts) => runDomainAdd({ ...opts, host }));
+domain2.command("add <host>").description("Add a custom domain and print the DNS records to create").option("--project <projectId>", "the project (default: the one linked here)").option("--app <name>", "a project with several web apps: the app the domain serves (default: web)").option(
+  "--redirect <host>",
+  "redirect instead of serving: every request answers 301 to https://<host>, path and query kept"
+).option("--api-url <url>", "control-plane API base URL").action((host, opts) => runDomainAdd({ ...opts, host }));
 domain2.command("remove <host>").description("Remove a custom domain \u2014 its route and certificate go (asks for confirmation)").option("--project <projectId>", "the project (default: the one linked here)").option("--yes", "skip the confirmation prompt").option("--api-url <url>", "control-plane API base URL").action((host, opts) => runDomainRemove({ ...opts, host }));
 domain2.command("status [host]").description("Show the project's custom domains, or one in detail with what is missing").option("--project <projectId>", "the project (default: the one linked here)").option("--api-url <url>", "control-plane API base URL").action((host, opts) => runDomainStatus({ ...opts, host }));
 function invokedDirectly() {
@@ -19598,6 +19675,8 @@ export {
   runDbRemove,
   runDbStatus,
   runDeploy,
+  runDeployHookCreate,
+  runDeployHookRemove,
   runDomainAdd,
   runDomainRemove,
   runDomainStatus,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kryd/cli",
-  "version": "0.10.0",
-  "description": "Kryd CLI — push a React / Vite / Next.js app to the European cloud for your AI: git push → live with SSL, one-click managed Postgres & object storage, and an EU-hosted AI gateway already wired in. Your code and your model calls stay in the EU.",
+  "version": "0.12.0",
+  "description": "Kryd CLI — push a React / Vite / Next.js app to the European cloud for your AI: git push → live with SSL, one-click managed Postgres & object storage, and an EU-hosted AI gateway already wired in. Your code and your model calls stay in the EU. Kryd is in beta: sign up for a beta account at https://kryd.eu/beta.",
   "keywords": [
     "kryd",
     "deploy",
@@ -41,9 +41,9 @@
     "tsx": "^4.19.2",
     "typescript": "^5.6.3",
     "vitest": "^2.1.8",
+    "@kryd/config-eslint": "0.0.0",
     "@kryd/shared-types": "0.0.0",
-    "@kryd/config-ts": "0.0.0",
-    "@kryd/config-eslint": "0.0.0"
+    "@kryd/config-ts": "0.0.0"
   },
   "scripts": {
     "build": "esbuild src/index.ts --bundle --platform=node --format=esm --external:commander --define:__KRYD_VERSION__=\\\"$npm_package_version\\\" --outfile=dist/index.js",