@miosa/cli 1.0.56 → 1.0.57

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to @miosa/cli will be documented in this file.
 
+## [1.0.54] - 2026-06-10
+
+### Changed
+- Publish workflow now uses npm Trusted Publishing provenance instead of an empty `NPM_TOKEN` secret.
+
+## [1.0.53] - 2026-06-10
+
+### Added
+- `miosa docker-deploy ensure --wait` waits for the workspace appliance host to become active and healthy.
+- `miosa docker-deploy doctor <deployment-id>` verifies Docker Deploy metadata, host readiness, appliance route, and public URL health.
+- `miosa app plan --goal docker-deploy --json` now includes the doctor command as the post-publish proof step.
+
 ## [1.0.1] - 2026-05-22
 
 ### Added

package/README.md

@@ -13,14 +13,48 @@ miosa update
 miosa update --check --json
 ```
 
+## Contexts and command discovery
+
+Save named contexts when you work across personal accounts, team accounts, or
+customer workspaces:
+
+```bash
+miosa login
+miosa context save personal
+miosa context set workspace workspace_123
+
+miosa login --api-key msk_u_team...
+miosa context save clinic-dev
+
+miosa context ls
+miosa context use clinic-dev
+```
+
+Agents and scripts should use JSON:
+
+```bash
+miosa context ls --json
+miosa context use clinic-dev --json
+miosa command-overview --json
+```
+
+`miosa command-overview` prints a tree of all command groups and nested
+subcommands. Use `miosa capabilities --json` for the higher-level agent workflow
+contract.
+
 ## Deploy — 60 seconds to first deploy
 
 Point the CLI at any repo and it handles the rest: framework detection, build wiring, GitHub webhook setup, and live log streaming.
 
+For production app hosting, MIOSA recommends Docker Deploy. It runs apps on the
+workspace Docker Deploy runtime, which is the preferred path for teams deploying
+many apps because it gives better runtime packing and lower resource overhead
+than one-off app runtimes.
+
 ```
 $ cd ~/my-project
 $ miosa login
-$ miosa deploy
+$ miosa deploy --docker-deploy
 
   Detected: Next.js 15 (confidence 95%)
   Repo:     https://github.com/me/my-project
@@ -56,7 +90,7 @@ $ miosa deploy
 
   Deployed
 
-  URL:    https://my-project-x7k2.my-workspace.miosa.app
+  URL:    https://my-project-x7k2.me.miosa.app
 
   Next steps:
     miosa deploy logs                          — tail logs
@@ -74,6 +108,21 @@ miosa deploy
 miosa deploy redeploy
 ```
 
+For apps built inside a sandbox, promote the sandbox workspace through Docker Deploy:
+
+```bash
+miosa sandbox publish <sandbox-id> \
+  --path /workspace \
+  --slug my-app \
+  --build-command "npm run build" \
+  --run-command "npm run start" \
+  --port 3000 \
+  --docker-deploy \
+  --wait \
+  --timeout 900 \
+  --json
+```
+
 ## Agentic sandbox app templates
 
 Agents should start from app templates instead of empty sandboxes when building common web apps. For a working Next.js starter with a public preview:
@@ -118,51 +167,24 @@ Discover the full agent contract with:
 miosa capabilities --json
 ```
 
-### App manifest
-
-Agents can commit `miosa.app.yml`, `miosa.app.yaml`, or `miosa.app.json` to make
-publishing repeatable.
-
-```yaml
-name: clinic-intake
-type: dynamic
-build: npm run build
-run: npm start
-port: 3000
-readiness:
-  path: /
-resources:
-  database:
-    auto: true
-    engine: postgresql
-    size: xs
-  storage:
-    auto: true
-domain: intake.apps.cliniciq.com
-```
-
-Resource values use the backend compose protocol:
-
-```text
-auto: true       -> provision and wire a new resource
-select: <id>     -> attach an existing resource
-false/omitted    -> do not attach that resource
-```
+### Agent-safe exec and logs
 
-Deployment URLs come from the backend response. The CLI should not guess a
-domain from the tenant slug.
+Use explicit command flags when a command contains shell flags, pipes, redirects,
+or `bash -c` style arguments:
 
-```text
-default managed URL:       https://<slug>.<tenant-slug>.miosa.app
-tenant deployment domain:  https://<slug>.apps.customer.com
-custom deployment domain:  https://app.customer.com
+```bash
+miosa sandbox exec <sandbox-id> \
+  --cwd /workspace \
+  --cmd "npm install && npm run build" \
+  --shell-cmd "bash -lc" \
+  --json
 ```
 
-Sandbox previews are separate:
+Top-level logs can target a resource explicitly and filter recent output:
 
-```text
-default preview URL:       https://<port>-<sandbox-slug>.sandbox.miosa.app
-tenant preview domain:     https://<port>-<sandbox-slug>.sandbox.customer.com
+```bash
+miosa logs --deployment <app-id> --lines 200 --contains error --json
+miosa logs --sandbox <sandbox-id> --regex "500|panic|failed" --json
 ```
 
 ### Deploy sub-commands
@@ -247,6 +269,7 @@ Precedence: CLI flags > environment variables > config file > interactive prompt
 Deploy a GitHub repo. See the [Deploy section](#deploy--60-seconds-to-first-deploy) above for the full flow.
 
 ```bash
+miosa deploy --docker-deploy             # Recommended production deploy
 miosa deploy                             # First deploy or redeploy from .miosa.json
 miosa deploy list [--json]               # List all deployments
 miosa deploy logs [id]                   # Tail live build logs

package/dist/app-advisor.d.ts

@@ -0,0 +1,80 @@
+import { type Framework } from "./framework-detector.js";
+import { type LoadedAppManifest } from "./app-manifest.js";
+export type AppGoal = "preview" | "deploy" | "docker-deploy";
+export interface AppInspectResult {
+    path: string;
+    manifest: {
+        path: string;
+        data: LoadedAppManifest["manifest"];
+    } | null;
+    framework: {
+        id: Framework | "unknown";
+        label: string;
+        confidence: number;
+        alternatives: Array<{
+            id: Framework;
+            label: string;
+            confidence: number;
+        }>;
+        files_examined: string[];
+    };
+    package_manager: string | null;
+    dockerfile: string | null;
+    commands: {
+        install: string | false | null;
+        dev: string | null;
+        build: string | null;
+        start: string | null;
+    };
+    runtime: {
+        port: number | null;
+        probe_path: string;
+        output_path: string | null;
+        needs_database: boolean;
+        env_keys: string[];
+    };
+    recommendation: {
+        template: string;
+        deployment: "docker_deploy" | "standard_deploy" | "static_publish";
+        reason: string;
+    };
+    risks: string[];
+    next: string[];
+}
+export interface AppPlanStep {
+    id: string;
+    command: string;
+    purpose: string;
+    json: boolean;
+    wait?: boolean;
+    destructive?: boolean;
+    optional?: boolean;
+}
+export interface AppPlanResult {
+    goal: AppGoal;
+    recommended_deploy: "docker_deploy" | "standard_deploy" | "static_publish";
+    template: string;
+    port: number | null;
+    probe_path: string;
+    build_command: string | null;
+    run_command: string | null;
+    output_path: string | null;
+    requires: {
+        database: boolean;
+        env_keys: string[];
+    };
+    steps: AppPlanStep[];
+    edge_cases: Array<{
+        code: string;
+        meaning: string;
+        recovery: string[];
+    }>;
+}
+export declare function inspectApp(inputDir: string): AppInspectResult;
+export declare function planApp(inputDir: string, options?: {
+    goal?: AppGoal;
+    slug?: string;
+    workspace?: string;
+    preferDockerDeploy?: boolean;
+}): AppPlanResult;
+//# sourceMappingURL=app-advisor.d.ts.map

package/dist/app-advisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-advisor.d.ts","sourceRoot":"","sources":["../src/app-advisor.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAQL,KAAK,iBAAiB,EACvB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,eAAe,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;KACrC,GAAG,IAAI,CAAC;IACT,SAAS,EAAE;QACT,EAAE,EAAE,SAAS,GAAG,SAAS,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,KAAK,CAAC;YAClB,EAAE,EAAE,SAAS,CAAC;YACd,KAAK,EAAE,MAAM,CAAC;YACd,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC,CAAC;QACH,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;QAC/B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;KACtB,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,cAAc,EAAE,OAAO,CAAC;QACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF,cAAc,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,eAAe,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;QACnE,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,kBAAkB,EAAE,eAAe,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE;QACR,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC;IACF,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;KACpB,CAAC,CAAC;CACJ;AAID,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAiF7D;AAED,wBAAgB,OAAO,CACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACzB,GACL,aAAa,CAqHf"}