@miosa/cli 1.3.4 → 2.1.0

package/dist/commands/deploy.js

@@ -1,1234 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { execSync } from "node:child_process";
-import chalk from "chalk";
-import { request } from "undici";
-import { loadConfig } from "../config.js";
-import { MiosaClient, parseSse } from "../client.js";
-import { ENV_FILE_OPTION_HELP, ENV_INLINE_SHELL_WARNING, ENV_STDIN_OPTION_HELP, resolveEnvInputs, } from "./env-input.js";
-import { errorExitCode, handleError, isJsonMode, jsonErrorPayload, } from "./util.js";
-import { spin } from "../ui/spinner.js";
-import { renderTable } from "../ui/table.js";
-import { errorEnvelope, hintBlock, icon, kvPanel, printBanner, printElapsed, formatDuration, } from "../ui/render.js";
-import { formatBytes } from "../ui/progress.js";
-import { detectFramework, FRAMEWORK_LABELS, } from "../framework-detector.js";
-import { UserError } from "../errors.js";
-import { toDeploymentId } from "../types.js";
-// ── .miosa.json helpers ───────────────────────────────────────────────────────
-const PROJECT_CONFIG_FILE = ".miosa.json";
-function loadProjectConfig(dir) {
-    const p = path.join(dir, PROJECT_CONFIG_FILE);
-    if (!fs.existsSync(p))
-        return null;
-    try {
-        return JSON.parse(fs.readFileSync(p, "utf8"));
-    }
-    catch {
-        return null;
-    }
-}
-function saveProjectConfig(dir, cfg) {
-    const p = path.join(dir, PROJECT_CONFIG_FILE);
-    fs.writeFileSync(p, JSON.stringify(cfg, null, 2) + "\n");
-}
-function getGitInfo(dir) {
-    try {
-        execSync("git rev-parse --git-dir", { cwd: dir, stdio: "ignore" });
-    }
-    catch {
-        throw new UserError("Not a git repository.", "Run `git init && git remote add origin <url>` first, then `miosa deploy`.");
-    }
-    let repoUrl;
-    try {
-        repoUrl = execSync("git remote get-url origin", {
-            cwd: dir,
-            encoding: "utf8",
-        }).trim();
-    }
-    catch {
-        throw new UserError("No git remote named 'origin' found.", "Add one with: git remote add origin https://github.com/you/your-repo");
-    }
-    // Normalize SSH remote → HTTPS
-    if (repoUrl.startsWith("git@github.com:")) {
-        repoUrl = repoUrl
-            .replace("git@github.com:", "https://github.com/")
-            .replace(/\.git$/, "");
-    }
-    repoUrl = repoUrl.replace(/\.git$/, "");
-    let currentBranch = "main";
-    try {
-        currentBranch = execSync("git rev-parse --abbrev-ref HEAD", {
-            cwd: dir,
-            encoding: "utf8",
-        }).trim();
-    }
-    catch {
-        // default to main
-    }
-    return { repoUrl, currentBranch };
-}
-// ── URL helpers ───────────────────────────────────────────────────────────────
-function deploymentUrl(deployment, tenantSlug) {
-    if (deployment.public_url)
-        return deployment.public_url;
-    if (deployment.auto_subdomain)
-        return deployment.auto_subdomain;
-    if (tenantSlug && deployment.slug) {
-        return `https://${deployment.slug}.${tenantSlug}.miosa.app`;
-    }
-    return null;
-}
-function parsePositiveInteger(value) {
-    const parsed = Number.parseInt(value, 10);
-    if (!Number.isFinite(parsed) || parsed <= 0) {
-        throw new Error(`Invalid positive integer: ${value}`);
-    }
-    return parsed;
-}
-function deploymentProduct(deployment) {
-    const metadataProduct = deployment.metadata?.["deployment_product"];
-    if (typeof deployment.deployment_product === "string") {
-        return deployment.deployment_product;
-    }
-    if (typeof metadataProduct === "string")
-        return metadataProduct;
-    return "miosa_deploy";
-}
-function productLabel(product) {
-    return product === "docker_deploy" ? "App Engine" : "MIOSA Deploy";
-}
-function asRecord(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value)
-        ? value
-        : {};
-}
-function stringField(value, key) {
-    const raw = asRecord(value)[key];
-    return typeof raw === "string" && raw.trim() ? raw.trim() : null;
-}
-function numberField(value, key) {
-    const raw = asRecord(value)[key];
-    if (typeof raw === "number" && Number.isFinite(raw))
-        return raw;
-    if (typeof raw === "string" && /^\d+$/.test(raw))
-        return Number(raw);
-    return null;
-}
-function addProofCheck(checks, id, ok, message, details, recovery) {
-    checks.push({
-        id,
-        ok,
-        message,
-        ...(details ? { details } : {}),
-        ...(recovery ? { recovery } : {}),
-    });
-}
-function dockerDeployApp(deployment) {
-    const app = asRecord(deployment).docker_deploy_app;
-    if (app && typeof app === "object" && !Array.isArray(app)) {
-        return app;
-    }
-    const metadataApp = asRecord(deployment.metadata?.["docker_deploy"]);
-    return Object.keys(metadataApp).length > 0 ? metadataApp : null;
-}
-function dockerDeployRuntime(deployment) {
-    const app = dockerDeployApp(deployment);
-    const runtime = asRecord(deployment.metadata?.["runtime"]);
-    return {
-        ip: stringField(app, "runtime_ip") ?? stringField(runtime, "ip"),
-        port: numberField(app, "runtime_port") ?? numberField(runtime, "port"),
-    };
-}
-async function probePublicUrl(publicUrl, probePath, timeoutMs) {
-    if (!publicUrl) {
-        return { ok: false, error: "missing_public_url" };
-    }
-    const url = new URL(publicUrl);
-    url.pathname = probePath.startsWith("/") ? probePath : `/${probePath}`;
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-        const res = await request(url.toString(), {
-            method: "GET",
-            signal: controller.signal,
-        });
-        res.body.resume();
-        return {
-            ok: res.statusCode >= 200 && res.statusCode < 500,
-            status: res.statusCode,
-            url: url.toString(),
-        };
-    }
-    catch (error) {
-        return {
-            ok: false,
-            error: error instanceof Error ? error.message : String(error),
-            url: url.toString(),
-        };
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
-async function proveDeployment(client, deploymentId, opts) {
-    const deployment = await client.getDeployment(deploymentId);
-    const product = deploymentProduct(deployment);
-    const publicUrl = deploymentUrl(deployment);
-    const checks = [];
-    addProofCheck(checks, "deployment_row", true, `Deployment ${deployment.id} exists with state=${deployment.state}.`, { state: deployment.state });
-    addProofCheck(checks, "deployment_running", deployment.state === "running", deployment.state === "running"
-        ? "Deployment is marked running."
-        : `Deployment state is ${deployment.state}, expected running.`, { state: deployment.state }, [
-        "miosa deploy logs <deployment-id>",
-        "miosa deploy redeploy <deployment-id>",
-    ]);
-    addProofCheck(checks, "public_url_present", Boolean(publicUrl), publicUrl ? `Public URL is ${publicUrl}.` : "Deployment has no public URL.", { public_url: publicUrl });
-    if (product === "docker_deploy") {
-        const app = dockerDeployApp(deployment);
-        const runtime = dockerDeployRuntime(deployment);
-        const hostId = deployment.docker_deploy_host_id ??
-            stringField(deployment.metadata, "docker_deploy_host_id") ??
-            stringField(app, "docker_deploy_host_id") ??
-            stringField(app, "host_id");
-        addProofCheck(checks, "docker_deploy_host_link", Boolean(hostId), hostId
-            ? `Deployment links App Engine host ${hostId}.`
-            : "Deployment has no App Engine host id.", { docker_deploy_host_id: hostId }, ["miosa docker-deploy ensure --wait --json"]);
-        if (hostId) {
-            try {
-                const host = await client.apiGet(`/api/v1/docker-deploy/hosts/${encodeURIComponent(hostId)}`);
-                const hostRecord = asRecord(asRecord(host).host ?? asRecord(host).data ?? host);
-                const status = stringField(hostRecord, "status");
-                const applianceStatus = stringField(hostRecord, "appliance_status");
-                addProofCheck(checks, "docker_deploy_host_ready", status === "active" && applianceStatus === "healthy", `Host status=${status ?? "unknown"}, appliance=${applianceStatus ?? "unknown"}.`, { status, appliance_status: applianceStatus }, [
-                    "miosa docker-deploy show <host-id> --json",
-                    "miosa docker-deploy ensure --wait --json",
-                ]);
-            }
-            catch (error) {
-                addProofCheck(checks, "docker_deploy_host_ready", false, error instanceof Error ? error.message : String(error), { docker_deploy_host_id: hostId });
-            }
-        }
-        addProofCheck(checks, "docker_deploy_app_row", Boolean(app), app
-            ? `App Engine app status=${stringField(app, "status") ?? "unknown"}.`
-            : "App Engine app row is missing.", app
-            ? {
-                status: stringField(app, "status"),
-                app_id: stringField(app, "app_id"),
-                container_id: stringField(app, "container_id"),
-            }
-            : undefined, ["Re-publish with --docker-deploy --wait."]);
-        addProofCheck(checks, "docker_deploy_container_route", Boolean(app &&
-            stringField(app, "container_id") &&
-            stringField(app, "status") === "running" &&
-            runtime.ip &&
-            runtime.port), app
-            ? `Container=${stringField(app, "container_id") ?? "missing"}, route=${runtime.ip ?? "missing"}:${runtime.port ?? "missing"}.`
-            : "Cannot verify container route without App Engine app row.", {
-            container_id: app ? stringField(app, "container_id") : null,
-            runtime_ip: runtime.ip,
-            runtime_port: runtime.port,
-        }, ["miosa docker-deploy doctor <deployment-id> --json"]);
-    }
-    if (opts.probe) {
-        const probe = await probePublicUrl(publicUrl, opts.probePath, opts.timeoutMs);
-        addProofCheck(checks, "public_url_probe", probe.ok, probe.ok
-            ? `Public URL returned HTTP ${probe.status}.`
-            : `Public URL probe failed: ${probe.error ?? `HTTP ${probe.status}`}.`, probe, [
-            "Check DNS/custom domain routing.",
-            "Check app logs and container health.",
-        ]);
-    }
-    const nextActions = checks
-        .filter((check) => !check.ok)
-        .flatMap((check) => check.recovery ?? [])
-        .filter((action, index, all) => all.indexOf(action) === index);
-    return {
-        ok: checks.every((check) => check.ok),
-        deployment_id: deployment.id,
-        deployment_product: product,
-        public_url: publicUrl,
-        checks,
-        next_actions: nextActions,
-    };
-}
-// ── Deployment ID resolution ──────────────────────────────────────────────────
-function resolveDeploymentId(idArg, cwd) {
-    if (idArg)
-        return toDeploymentId(idArg);
-    const proj = loadProjectConfig(cwd);
-    if (proj)
-        return proj.deploymentId;
-    throw new UserError("No deployment ID provided and no .miosa.json found in current directory.", "Pass a deployment ID or run from a project with .miosa.json");
-}
-// ── Log stream renderer ───────────────────────────────────────────────────────
-async function streamLogs(client, deploymentId) {
-    const res = await client.streamDeploymentLogs(deploymentId);
-    let lastState = "success";
-    for await (const event of parseSse(res.body)) {
-        switch (event.type) {
-            case "stdout": {
-                process.stdout.write(chalk.dim("  ") + event.data);
-                break;
-            }
-            case "stderr": {
-                process.stderr.write(chalk.red("  ") + event.data);
-                break;
-            }
-            case "error": {
-                console.error(chalk.red(`  [error] ${event.message}`));
-                lastState = "failure";
-                break;
-            }
-            case "done": {
-                // done event may carry build state
-                if (event.result && typeof event.result === "object") {
-                    const r = event.result;
-                    if (r["state"] === "failed")
-                        lastState = "failure";
-                }
-                return lastState;
-            }
-            case "unknown": {
-                // Try to parse log_line events from the deployment SSE format
-                // event: log_line  data: {"stream":"stdout","line":"...","ts":"..."}
-                try {
-                    const parsed = JSON.parse(event.raw);
-                    if (typeof parsed["line"] === "string") {
-                        const stream = parsed["stream"] ?? "stdout";
-                        const line = parsed["line"];
-                        if (stream === "stderr") {
-                            process.stderr.write(chalk.red("  ") + line + "\n");
-                        }
-                        else {
-                            process.stdout.write(chalk.dim("  ") + line + "\n");
-                        }
-                    }
-                }
-                catch {
-                    // ignore unparseable frames
-                }
-                break;
-            }
-            default:
-                break;
-        }
-    }
-    return lastState;
-}
-// ── Sub-command helpers ───────────────────────────────────────────────────────
-function fmtBuildState(state) {
-    switch (state) {
-        case "succeeded":
-            return chalk.green(state);
-        case "failed":
-            return chalk.red(state);
-        case "building":
-            return chalk.yellow(state);
-        case "queued":
-            return chalk.dim(state);
-        case "cancelled":
-            return chalk.dim(state);
-    }
-}
-function fmtDeployState(state) {
-    switch (state) {
-        case "running":
-            return chalk.green(state);
-        case "failed":
-            return chalk.red(state);
-        case "building":
-            return chalk.yellow(state);
-        case "stopped":
-            return chalk.dim(state);
-        case "pending":
-            return chalk.dim(state);
-    }
-}
-function unwrapMetrics(raw) {
-    if (raw && typeof raw === "object" && "data" in raw) {
-        const data = raw["data"];
-        if (data && typeof data === "object")
-            return data;
-    }
-    if (raw && typeof raw === "object")
-        return raw;
-    return {};
-}
-function metricCurrent(raw) {
-    const root = unwrapMetrics(raw);
-    const current = root["current"];
-    return current && typeof current === "object"
-        ? current
-        : {};
-}
-function renderDeploymentMetrics(raw) {
-    const root = unwrapMetrics(raw);
-    const current = metricCurrent(raw);
-    const instances = current["runtime_instances"] &&
-        typeof current["runtime_instances"] === "object"
-        ? current["runtime_instances"]
-        : {};
-    const usage = current["usage"] && typeof current["usage"] === "object"
-        ? current["usage"]
-        : {};
-    printBanner({ subtitle: "Deployment metrics" });
-    console.log(kvPanel([
-        {
-            label: "deployment_id",
-            value: String(root["deployment_id"] ?? root["resource_id"] ?? "-"),
-        },
-        { label: "window", value: String(root["window"] ?? "1h") },
-        { label: "state", value: formatMetricState(current["state"]) },
-        {
-            label: "runtime_instances",
-            value: `${formatMetricValue(instances["active"])} active / ${formatMetricValue(instances["total"])} total`,
-        },
-        { label: "healthy", value: formatMetricValue(instances["healthy"]) },
-        { label: "unhealthy", value: formatMetricValue(instances["unhealthy"]) },
-        { label: "errors", value: formatMetricValue(instances["error"]) },
-        { label: "restarts", value: formatMetricValue(instances["restarts"]) },
-        {
-            label: "cpu_limit",
-            value: formatMillicores(current["cpu_limit_millicores"]),
-        },
-        { label: "memory_limit", value: formatMb(current["memory_limit_mb"]) },
-        { label: "runtime", value: formatSeconds(usage["runtime_sec"]) },
-        { label: "cost_cents", value: formatMetricValue(usage["cost_cents"]) },
-        {
-            label: "last_health_check",
-            value: formatMetricValue(current["last_health_check_at"]),
-        },
-        {
-            label: "last_heartbeat",
-            value: formatMetricValue(current["last_heartbeat_at"]),
-        },
-    ]));
-}
-function formatMetricState(value) {
-    const state = String(value ?? "unknown");
-    if (["running", "active", "healthy", "ready"].includes(state)) {
-        return chalk.green(state);
-    }
-    if (["provisioning", "starting", "building", "pending"].includes(state)) {
-        return chalk.yellow(state);
-    }
-    if (["failed", "error", "unhealthy"].includes(state)) {
-        return chalk.red(state);
-    }
-    return state;
-}
-function formatMetricValue(value) {
-    if (value === null || value === undefined || value === "")
-        return chalk.dim("-");
-    return String(value);
-}
-function formatMb(value) {
-    if (typeof value !== "number")
-        return formatMetricValue(value);
-    return formatBytes(value * 1024 * 1024);
-}
-function formatMillicores(value) {
-    if (typeof value !== "number")
-        return formatMetricValue(value);
-    return `${(value / 1000).toFixed(value % 1000 === 0 ? 0 : 2)} vCPU`;
-}
-function formatSeconds(value) {
-    if (typeof value !== "number")
-        return formatMetricValue(value);
-    return formatDuration(value * 1000);
-}
-export function register(program) {
-    const deploy = program
-        .command("deploy")
-        .alias("launch")
-        .description("Deploy a GitHub repo; use --docker-deploy for the recommended production runtime")
-        .option("--docker-deploy", "Create the deployment on this workspace's dedicated App Engine runtime")
-        .option("--name <name>", "Deployment name (defaults to the directory name)")
-        .option("--branch <branch>", "Git branch to deploy (defaults to the current branch)")
-        .option("--build-command <cmd>", "Build command (defaults to framework detection)")
-        .option("--run-command <cmd>", "Run command (defaults to framework detection)")
-        .option("--static", "Deploy static files without build or run commands")
-        .option("-y, --yes", "Accept detected defaults and skip interactive confirmation")
-        .addHelpText("after", `
-Examples:
-  miosa deploy --docker-deploy       Recommended: deploy current directory to App Engine
-  miosa deploy --docker-deploy --json  Prompt-free deploy for CI and agents
-  miosa deploy --docker-deploy --static --name report --branch main --yes --json
-  miosa deploy --name app --branch main --build-command "npm run build" --run-command "npm start" --yes --json
-  miosa deploy                       Deploy current directory (auto-detects framework)
-  miosa deploy list                  List all deployments
-  miosa deploy logs                  Tail build logs for this project
-  miosa deploy redeploy              Trigger a new build
-  miosa deploy env set NODE_ENV=production
-  miosa deploy env list
-  miosa deploy domain add example.com
-  miosa deploy destroy               Tear down this deployment
-`)
-        .action(async (opts) => {
-        // Default action: interactive deploy flow
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const json = isJsonMode(opts);
-            // ── Check for existing .miosa.json first (skip git for redeploys) ──
-            let projectCfg = loadProjectConfig(cwd);
-            let deploymentId;
-            let queuedBuild = null;
-            let createdDeployment = null;
-            let webhookSecret = null;
-            let buildQueueError = null;
-            if (projectCfg) {
-                // ── Re-deploy from existing .miosa.json ──────────────────────
-                const firstDeployOnlyFlags = [
-                    opts.name !== undefined ? "--name" : null,
-                    opts.branch !== undefined ? "--branch" : null,
-                    opts.buildCommand !== undefined ? "--build-command" : null,
-                    opts.runCommand !== undefined ? "--run-command" : null,
-                    opts.static ? "--static" : null,
-                ].filter((flag) => flag !== null);
-                if (firstDeployOnlyFlags.length > 0) {
-                    throw new UserError(`.miosa.json already exists; ${firstDeployOnlyFlags.join(", ")} only apply when creating a deployment.`, "Remove these flags to redeploy the saved configuration, or delete .miosa.json to create a new deployment.");
-                }
-                if (!json) {
-                    console.log();
-                    console.log(chalk.dim("  Found .miosa.json — redeploying existing deployment"));
-                    console.log(`  ${chalk.bold("Project")}   ${projectCfg.name} (${projectCfg.framework})`);
-                    console.log(`  ${chalk.bold("Branch")}    ${projectCfg.branch}`);
-                    console.log();
-                }
-                deploymentId = projectCfg.deploymentId;
-                const buildSpinner = json ? null : spin("Queuing build...");
-                try {
-                    queuedBuild = await client.redeployDeployment(deploymentId);
-                    buildSpinner?.succeed("Build queued");
-                }
-                catch (err) {
-                    buildSpinner?.fail("Failed to queue build");
-                    handleError(err);
-                }
-            }
-            else {
-                // ── First deploy: verify git repo + remote, then detect ───────
-                const { repoUrl, currentBranch } = getGitInfo(cwd);
-                if (!json)
-                    console.log();
-                const detection = detectFramework(cwd);
-                let framework = "unknown";
-                let buildCommand = "npm run build";
-                let runCommand = "npm start";
-                if (detection) {
-                    const label = FRAMEWORK_LABELS[detection.framework] ??
-                        detection.framework;
-                    if (!json) {
-                        console.log(`  Detected: ${chalk.cyan(label)} (confidence ${detection.confidence}%)`);
-                    }
-                    framework = detection.framework;
-                    buildCommand = detection.buildCommand;
-                    runCommand = detection.runCommand;
-                }
-                else {
-                    if (!json) {
-                        console.log(chalk.yellow("  Could not auto-detect framework. You can set build/run commands manually."));
-                    }
-                }
-                if (!json) {
-                    console.log(`  Repo:     ${chalk.dim(repoUrl)}`);
-                    console.log(`  Branch:   ${chalk.dim(currentBranch)}`);
-                    console.log();
-                }
-                const requiresNonInteractiveInputs = !process.stdin.isTTY || json || Boolean(opts.yes);
-                if (opts.static &&
-                    (opts.buildCommand !== undefined || opts.runCommand !== undefined)) {
-                    throw new UserError("--static cannot be combined with build or run commands.", "Remove --build-command and --run-command, or remove --static.");
-                }
-                if (requiresNonInteractiveInputs &&
-                    !opts.static &&
-                    !detection &&
-                    (!opts.buildCommand || !opts.runCommand)) {
-                    throw new UserError("Could not determine deployment commands non-interactively.", "Pass both --build-command <cmd> and --run-command <cmd>, or use --static for static sites.");
-                }
-                const projectName = path.basename(cwd).replace(/[^a-z0-9-]/gi, "-");
-                let answers;
-                if (!requiresNonInteractiveInputs) {
-                    const { default: inquirer } = await import("inquirer");
-                    const identityQuestions = [
-                        {
-                            type: "input",
-                            name: "name",
-                            message: "Deployment name:",
-                            default: opts.name ?? projectName,
-                            validate: (v) => v.length > 0 ? true : "Name is required",
-                        },
-                        {
-                            type: "input",
-                            name: "branch",
-                            message: "Branch to deploy:",
-                            default: opts.branch ?? currentBranch,
-                        },
-                    ];
-                    const confirmQuestion = {
-                        type: "confirm",
-                        name: "confirm",
-                        message: "Create deployment?",
-                        default: true,
-                    };
-                    if (opts.static) {
-                        const staticAnswers = await inquirer.prompt([...identityQuestions, confirmQuestion]);
-                        answers = {
-                            ...staticAnswers,
-                            buildCommand: "",
-                            runCommand: "",
-                        };
-                    }
-                    else {
-                        answers = await inquirer.prompt([
-                            ...identityQuestions,
-                            {
-                                type: "input",
-                                name: "buildCommand",
-                                message: "Build command:",
-                                default: opts.buildCommand ?? buildCommand,
-                            },
-                            {
-                                type: "input",
-                                name: "runCommand",
-                                message: "Run command:",
-                                default: opts.runCommand ?? runCommand,
-                            },
-                            confirmQuestion,
-                        ]);
-                    }
-                }
-                else {
-                    answers = {
-                        name: opts.name ?? projectName,
-                        branch: opts.branch ?? currentBranch,
-                        buildCommand: opts.static
-                            ? ""
-                            : (opts.buildCommand ?? buildCommand),
-                        runCommand: opts.static ? "" : (opts.runCommand ?? runCommand),
-                        confirm: true,
-                    };
-                }
-                if (!answers.confirm) {
-                    console.log(chalk.dim("  Cancelled."));
-                    process.exit(0);
-                }
-                // ── Step 3: POST /api/v1/deployments ─────────────────────────
-                const createSpinner = json
-                    ? null
-                    : spin(`Creating deployment "${answers.name}"...`);
-                let deployment;
-                try {
-                    const metadata = opts.dockerDeploy
-                        ? { deployment_product: "docker_deploy" }
-                        : undefined;
-                    const result = await client.createDeployment({
-                        name: answers.name,
-                        repo_url: repoUrl,
-                        branch: answers.branch,
-                        build_command: answers.buildCommand || undefined,
-                        run_command: answers.runCommand || undefined,
-                        auto_deploy: true,
-                        metadata,
-                    });
-                    deployment = result.data;
-                    webhookSecret = result.webhook_secret;
-                    createdDeployment = deployment;
-                    createSpinner?.succeed(`${productLabel(deploymentProduct(deployment))} deployment "${deployment.name}" created (slug: ${deployment.slug})`);
-                }
-                catch (err) {
-                    createSpinner?.fail("Failed to create deployment");
-                    handleError(err);
-                }
-                deploymentId = deployment.id;
-                framework = framework !== "unknown" ? framework : "unknown";
-                // ── Step 4: Save .miosa.json ──────────────────────────────────
-                projectCfg = {
-                    version: 1,
-                    deploymentId: deployment.id,
-                    name: deployment.name,
-                    framework,
-                    buildCommand: answers.buildCommand,
-                    runCommand: answers.runCommand,
-                    branch: answers.branch,
-                };
-                saveProjectConfig(cwd, projectCfg);
-                if (!json)
-                    console.log(chalk.dim(`  Saved .miosa.json`));
-                // ── Step 4b: Print webhook secret (one-time) ─────────────────
-                if (!json) {
-                    console.log();
-                    console.log(chalk.bold.yellow("  ACTION REQUIRED — GitHub Webhook"));
-                    console.log(chalk.dim("  The webhook secret below is shown ONCE. Store it now."));
-                    console.log();
-                    console.log(`  ${chalk.bold("Webhook URL:")}   https://api.miosa.ai/api/v1/integrations/github/webhook`);
-                    console.log(`  ${chalk.bold("Content type:")}  application/json`);
-                    console.log(`  ${chalk.bold("Secret:")}        ${chalk.green(webhookSecret)}`);
-                    console.log(`  ${chalk.bold("Events:")}        push`);
-                    console.log();
-                    console.log(chalk.dim("  Add this at: " + repoUrl + "/settings/hooks/new"));
-                    console.log();
-                }
-                // ── Step 5: Trigger initial build ─────────────────────────────
-                const buildSpinner = json ? null : spin("Queuing initial build...");
-                try {
-                    queuedBuild = await client.redeployDeployment(deploymentId);
-                    buildSpinner?.succeed("Initial build queued");
-                }
-                catch (err) {
-                    buildSpinner?.fail("Failed to queue build");
-                    if (!json)
-                        handleError(err);
-                    buildQueueError = err;
-                }
-            }
-            if (json) {
-                let deployment = createdDeployment;
-                if (!deployment) {
-                    try {
-                        deployment = await client.getDeployment(deploymentId);
-                    }
-                    catch {
-                        deployment = null;
-                    }
-                }
-                console.log(JSON.stringify({
-                    ok: buildQueueError === null,
-                    deployment: deployment
-                        ? {
-                            id: deployment.id,
-                            name: deployment.name,
-                            slug: deployment.slug,
-                            state: deployment.state,
-                            deployment_product: deploymentProduct(deployment),
-                            docker_deploy_host_id: deployment.docker_deploy_host_id ?? null,
-                            public_url: deploymentUrl(deployment),
-                        }
-                        : {
-                            id: deploymentId,
-                            name: projectCfg.name,
-                            slug: null,
-                            state: null,
-                            deployment_product: null,
-                            docker_deploy_host_id: null,
-                            public_url: null,
-                        },
-                    build: queuedBuild
-                        ? { id: queuedBuild.id, state: queuedBuild.state }
-                        : null,
-                    webhook: webhookSecret
-                        ? {
-                            url: "https://api.miosa.ai/api/v1/integrations/github/webhook",
-                            secret: webhookSecret,
-                            events: ["push"],
-                        }
-                        : null,
-                    project_config: path.join(cwd, PROJECT_CONFIG_FILE),
-                    ...(buildQueueError === null
-                        ? {}
-                        : { error: jsonErrorPayload(buildQueueError) }),
-                }, null, 2));
-                if (buildQueueError !== null) {
-                    process.exit(errorExitCode(buildQueueError));
-                }
-                return;
-            }
-            // ── Step 6: Stream build logs ─────────────────────────────────────
-            console.log();
-            console.log(chalk.bold("  Build log:"));
-            console.log(chalk.dim("  " + "─".repeat(60)));
-            const buildResult = await streamLogs(client, deploymentId);
-            console.log(chalk.dim("  " + "─".repeat(60)));
-            console.log();
-            // ── Step 7: Final status ──────────────────────────────────────────
-            if (buildResult === "success") {
-                // Fetch the deployment to get the slug + tenant slug
-                const spinner = spin("Fetching deployment info...");
-                try {
-                    const dep = await client.getDeployment(deploymentId);
-                    const tenant = await client.getTenant();
-                    spinner.stop();
-                    const url = deploymentUrl(dep, tenant.slug);
-                    console.log(chalk.green("  Deployed"));
-                    console.log();
-                    console.log(`  ${chalk.bold("URL:")}    ${chalk.cyan(url ?? "—")}`);
-                    console.log(`  ${chalk.bold("Type:")}   ${productLabel(deploymentProduct(dep))}`);
-                    if (dep.docker_deploy_host_id) {
-                        console.log(`  ${chalk.bold("Host:")}   ${chalk.dim(dep.docker_deploy_host_id)}`);
-                    }
-                    console.log();
-                    console.log(chalk.dim("  Next steps:"));
-                    console.log(chalk.dim(`    miosa deploy logs          — tail logs`));
-                    console.log(chalk.dim(`    miosa deploy domain add example.com   — add custom domain`));
-                    console.log(chalk.dim(`    miosa deploy env set KEY=VALUE         — set env var`));
-                }
-                catch {
-                    spinner.stop();
-                    console.log(chalk.green("  Deployed"));
-                }
-            }
-            else {
-                console.log(chalk.red("  Build failed."));
-                console.log();
-                console.log(chalk.dim("  View full logs: miosa deploy logs"));
-                console.log(chalk.dim(`  Dashboard: https://app.miosa.ai/deploy/${deploymentId}`));
-                process.exit(1);
-            }
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy list ─────────────────────────────────────────────────────────────
-    deploy
-        .command("list")
-        .description("List all deployments for this tenant")
-        .option("--state <state>", "Filter by deployment state")
-        .option("--workspace <id>", "Filter by workspace ID")
-        .option("--limit <n>", "Maximum number of deployments to return", parsePositiveInteger)
-        .option("--json", "Output raw JSON")
-        .action(async (opts) => {
-        try {
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const json = isJsonMode(opts);
-            const spinner = json ? null : spin("Fetching deployments...");
-            const deployments = await client.listDeployments({
-                state: opts.state,
-                workspace: opts.workspace,
-                limit: opts.limit,
-            });
-            spinner?.stop();
-            if (json) {
-                console.log(JSON.stringify(deployments, null, 2));
-                return;
-            }
-            const n = deployments.length;
-            console.log();
-            console.log(`  ${icon.info}  ${chalk.bold(String(n))} ${chalk.dim(n === 1 ? "deployment" : "deployment(s)")}`);
-            console.log();
-            if (n === 0) {
-                console.log(kvPanel([{ label: "Deployments", value: chalk.dim("none yet") }]));
-                console.log();
-                console.log(hintBlock("Try", [
-                    "miosa deploy  # deploy a project from the current directory",
-                ]));
-                console.log();
-                return;
-            }
-            renderTable(deployments, [
-                { header: "ID", key: (d) => d.id.slice(0, 8), width: 10 },
-                { header: "NAME", key: "name", width: 24 },
-                {
-                    header: "TYPE",
-                    key: (d) => productLabel(deploymentProduct(d)),
-                    width: 14,
-                },
-                { header: "SLUG", key: "slug", width: 24 },
-                { header: "BRANCH", key: "branch", width: 12 },
-                {
-                    header: "STATE",
-                    key: (d) => fmtDeployState(d.state),
-                    width: 10,
-                },
-                {
-                    header: "UPDATED",
-                    key: (d) => new Date(d.updated_at).toLocaleString(),
-                    width: 20,
-                },
-            ]);
-            console.log();
-            console.log(hintBlock("Try", [
-                "miosa deploy show <id>",
-                "miosa deploy redeploy <id>  # redeploy",
-                "miosa deploy rollback <id>",
-            ]));
-            console.log();
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy show ─────────────────────────────────────────────────────────────
-    deploy
-        .command("show <id>")
-        .description("Show details for a single deployment")
-        .option("--json", "Output raw JSON")
-        .action(async (id, opts) => {
-        try {
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = toDeploymentId(id);
-            const json = isJsonMode(opts);
-            const spinner = json ? null : spin("Fetching deployment...");
-            const dep = await client.getDeployment(deploymentId);
-            spinner?.stop();
-            if (json) {
-                console.log(JSON.stringify(dep, null, 2));
-                return;
-            }
-            const truncate = (s, max) => {
-                if (!s)
-                    return chalk.dim("—");
-                return s.length > max ? s.slice(0, max - 1) + "…" : s;
-            };
-            const colorizeState = (state) => {
-                switch (state) {
-                    case "running":
-                        return chalk.green(state);
-                    case "building":
-                        return chalk.yellow(state);
-                    case "failed":
-                        return chalk.red(state);
-                    default:
-                        return chalk.dim(state);
-                }
-            };
-            const tenant = await client.getTenant().catch(() => null);
-            const publicUrl = deploymentUrl(dep, tenant?.slug) ?? chalk.dim("—");
-            printBanner({ subtitle: "Deployment" });
-            console.log(kvPanel([
-                { label: "id", value: chalk.dim(dep.id) },
-                { label: "name", value: chalk.bold(dep.name) },
-                { label: "type", value: productLabel(deploymentProduct(dep)) },
-                { label: "state", value: colorizeState(dep.state) },
-                {
-                    label: "docker_deploy_host_id",
-                    value: dep.docker_deploy_host_id
-                        ? chalk.dim(dep.docker_deploy_host_id)
-                        : chalk.dim("—"),
-                },
-                {
-                    label: "current_build_id",
-                    value: dep.current_build_id
-                        ? chalk.dim(dep.current_build_id)
-                        : chalk.dim("—"),
-                },
-                { label: "repo_url", value: chalk.cyan(dep.repo_url) },
-                { label: "branch", value: dep.branch },
-                {
-                    label: "build_command",
-                    value: truncate(dep.build_command, 60),
-                },
-                { label: "run_command", value: truncate(dep.run_command, 60) },
-                {
-                    label: "created_at",
-                    value: chalk.dim(new Date(dep.created_at).toLocaleString()),
-                },
-                { label: "public_url", value: chalk.cyan(publicUrl) },
-            ]));
-            console.log();
-            console.log(hintBlock("Try", [
-                "miosa deploy redeploy <id>  # redeploy",
-                "miosa logs <id>  # tail build/runtime logs",
-                "miosa deploy rollback <id>",
-            ]));
-            console.log();
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy prove ───────────────────────────────────────────────────────────
-    deploy
-        .command("prove [id]")
-        .description("Prove a deployment is real, live, routed, and not metadata-only")
-        .option("--probe-path <path>", "HTTP path to probe on the public URL", "/")
-        .option("--timeout <seconds>", "Public probe timeout in seconds", parsePositiveInteger, 20)
-        .option("--no-probe", "Skip public HTTP probe")
-        .option("--json", "Output stable proof JSON")
-        .action(async (id, opts) => {
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = resolveDeploymentId(id, cwd);
-            const json = isJsonMode(opts);
-            const spinner = json ? null : spin("Proving deployment...");
-            const result = await proveDeployment(client, deploymentId, {
-                probePath: opts.probePath,
-                timeoutMs: opts.timeout * 1000,
-                probe: opts.probe !== false,
-            });
-            spinner?.stop();
-            if (!result.ok)
-                process.exitCode = 1;
-            if (json) {
-                console.log(JSON.stringify(result, null, 2));
-                return;
-            }
-            printBanner({ subtitle: "Deployment proof" });
-            console.log(kvPanel([
-                {
-                    label: "deployment_id",
-                    value: chalk.dim(result.deployment_id),
-                },
-                { label: "type", value: productLabel(result.deployment_product) },
-                {
-                    label: "public_url",
-                    value: result.public_url
-                        ? chalk.cyan(result.public_url)
-                        : chalk.dim("missing"),
-                },
-                {
-                    label: "proof",
-                    value: result.ok ? chalk.green("passed") : chalk.red("failed"),
-                },
-            ]));
-            console.log();
-            for (const check of result.checks) {
-                console.log(`  ${check.ok ? chalk.green("✓") : chalk.red("✗")} ${check.id}: ${check.message}`);
-            }
-            if (result.next_actions.length > 0) {
-                console.log();
-                console.log(hintBlock("Next", result.next_actions));
-            }
-            console.log();
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy metrics ──────────────────────────────────────────────────────────
-    deploy
-        .command("metrics [id]")
-        .description("Show deployment runtime instance, usage, and health metrics")
-        .option("--window <window>", "Metrics window: 1h, 24h, or 7d", "1h")
-        .option("--json", "Output raw JSON")
-        .action(async (id, opts) => {
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = resolveDeploymentId(id, cwd);
-            const json = isJsonMode(opts);
-            const spinner = json ? null : spin("Fetching deployment metrics...");
-            const metrics = await client.apiGet(`/api/v1/deployments/${encodeURIComponent(deploymentId)}/metrics?window=${encodeURIComponent(opts.window)}`);
-            spinner?.stop();
-            if (json) {
-                console.log(JSON.stringify(metrics, null, 2));
-                return;
-            }
-            renderDeploymentMetrics(metrics);
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy logs ─────────────────────────────────────────────────────────────
-    deploy
-        .command("logs [id]")
-        .description("Tail live build logs for a deployment (auto-detected from .miosa.json)")
-        .action(async (id) => {
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = resolveDeploymentId(id, cwd);
-            console.log(chalk.dim(`  Streaming logs for ${deploymentId}...`));
-            console.log(chalk.dim("  " + "─".repeat(60)));
-            await streamLogs(client, deploymentId);
-            console.log(chalk.dim("  " + "─".repeat(60)));
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy redeploy ──────────────────────────────────────────────────────────
-    deploy
-        .command("redeploy [id]")
-        .description("Trigger a manual rebuild (auto-detected from .miosa.json)")
-        .option("--no-follow", "Queue the build without tailing logs")
-        .action(async (id, opts) => {
-        const actionStart = Date.now();
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = resolveDeploymentId(id, cwd);
-            const spinner = spin("Queuing build...");
-            let build;
-            try {
-                build = await client.redeployDeployment(deploymentId);
-                spinner.stop();
-            }
-            catch (err) {
-                spinner.stop();
-                console.log();
-                console.log(errorEnvelope({
-                    title: "Redeploy failed",
-                    body: err instanceof Error ? err.message : String(err),
-                    suggest: [
-                        "miosa deploy show <id>  # check deployment state",
-                        "miosa deploy list       # list all deployments",
-                    ],
-                    withDebugHint: true,
-                }));
-                console.log();
-                process.exit(4);
-            }
-            printBanner({ subtitle: "Redeploy queued" });
-            console.log(kvPanel([
-                {
-                    icon: icon.ok,
-                    label: "deployment_id",
-                    value: chalk.dim(deploymentId),
-                },
-                { label: "new_build_id", value: chalk.dim(build.id) },
-                { label: "state", value: chalk.yellow("queued") },
-            ]));
-            console.log();
-            console.log(hintBlock("Watch", [
-                `miosa logs ${deploymentId} --follow`,
-                `miosa deploy show ${deploymentId}`,
-            ]));
-            printElapsed(formatDuration(Date.now() - actionStart));
-            if (opts?.follow !== false) {
-                console.log();
-                console.log(chalk.bold("  Build log:"));
-                console.log(chalk.dim("  " + "─".repeat(60)));
-                await streamLogs(client, deploymentId);
-                console.log(chalk.dim("  " + "─".repeat(60)));
-            }
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy env ───────────────────────────────────────────────────────────────
-    const envCmd = deploy
-        .command("env")
-        .description("Manage environment variables for a deployment");
-    envCmd
-        .command("set [pairs...]")
-        .description(`Set one or more env vars (KEY=VALUE). ${ENV_INLINE_SHELL_WARNING}`)
-        .option("--env-file <path>", ENV_FILE_OPTION_HELP)
-        .option("--env-stdin", ENV_STDIN_OPTION_HELP)
-        .option("--id <id>", "Deployment ID (overrides .miosa.json)")
-        .action(async (pairs, opts) => {
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = resolveDeploymentId(opts.id, cwd);
-            const inline = {};
-            for (const pair of pairs ?? []) {
-                const eq = pair.indexOf("=");
-                if (eq === -1) {
-                    inline[pair] = "";
-                }
-                else {
-                    inline[pair.slice(0, eq)] = pair.slice(eq + 1);
-                }
-            }
-            const env = await resolveEnvInputs(inline, opts);
-            if (Object.keys(env).length === 0) {
-                throw new UserError("No env vars provided.", "Pass KEY=VALUE pairs, --env-file <path>, or --env-stdin.");
-            }
-            const spinner = spin("Setting env vars...");
-            const vars = await client.setDeploymentEnv(deploymentId, env);
-            spinner.succeed(`Set ${vars.length} env var(s)`);
-            for (const v of vars) {
-                console.log(`  ${chalk.bold(v.name)}  ${chalk.dim(v.preview)}`);
-            }
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    envCmd
-        .command("list [id]")
-        .description("List env var names and masked previews")
-        .action(async (id) => {
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = resolveDeploymentId(id, cwd);
-            const spinner = spin("Fetching env vars...");
-            const vars = await client.getDeploymentEnv(deploymentId);
-            spinner.stop();
-            if (vars.length === 0) {
-                console.log(chalk.dim("  No env vars set."));
-                return;
-            }
-            renderTable(vars, [
-                { header: "NAME", key: "name", width: 32 },
-                { header: "VALUE", key: (v) => chalk.dim(v.preview), width: 20 },
-                {
-                    header: "UPDATED",
-                    key: (v) => new Date(v.updated_at).toLocaleString(),
-                    width: 20,
-                },
-            ]);
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy domain ────────────────────────────────────────────────────────────
-    const domainCmd = deploy
-        .command("domain")
-        .description("Manage custom domains for a deployment");
-    domainCmd
-        .command("add <domain> [id]")
-        .description("Add a custom domain to a deployment")
-        .action(async (domain, id) => {
-        try {
-            const cwd = process.cwd();
-            resolveDeploymentId(id, cwd); // validate — actual domain API is v2
-            // Domain management endpoints are in the next sprint.
-            // Point the user to the dashboard in the interim.
-            console.log();
-            console.log(chalk.yellow(`  Custom domain management is not yet available via the CLI.`));
-            console.log(chalk.dim(`  Configure "${domain}" at: https://app.miosa.ai/deploy`));
-            console.log();
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-    // ── deploy destroy ───────────────────────────────────────────────────────────
-    deploy
-        .command("destroy [id]")
-        .description("Permanently delete a deployment and all build history")
-        .option("-f, --force", "Skip confirmation prompt")
-        .action(async (id, opts) => {
-        try {
-            const cwd = process.cwd();
-            const config = loadConfig();
-            const client = new MiosaClient(config);
-            const deploymentId = resolveDeploymentId(id, cwd);
-            if (!opts?.force) {
-                const { default: inquirer } = await import("inquirer");
-                const { ok } = await inquirer.prompt([
-                    {
-                        type: "confirm",
-                        name: "ok",
-                        message: chalk.red(`Destroy deployment ${deploymentId.slice(0, 8)}? This is irreversible.`),
-                        default: false,
-                    },
-                ]);
-                if (!ok) {
-                    console.log(chalk.dim("  Cancelled."));
-                    process.exit(0);
-                }
-            }
-            const spinner = spin("Destroying deployment...");
-            await client.deleteDeployment(deploymentId);
-            spinner.succeed("Deployment destroyed");
-            // Remove local .miosa.json if it references this deployment
-            const proj = loadProjectConfig(cwd);
-            if (proj?.deploymentId === deploymentId) {
-                fs.unlinkSync(path.join(cwd, PROJECT_CONFIG_FILE));
-                console.log(chalk.dim("  Removed .miosa.json"));
-            }
-        }
-        catch (err) {
-            handleError(err);
-        }
-    });
-}
-//# sourceMappingURL=deploy.js.map