@solcreek/cli 0.4.3 → 0.4.5

package/CHANGELOG.md

@@ -0,0 +1,96 @@
+# @solcreek/cli
+
+## 0.4.5
+
+### Features
+
+- **`creek deploy --dry-run`** — new flag that reports a plan without
+  executing: resolved config source, detected framework, build command,
+  build output, bindings, cron/queue triggers, auth status, and the
+  target type (sandbox vs production). No network calls, no file
+  uploads, no ToS prompt, no build. Pair with `--json` for a
+  machine-readable plan. Safe to call from an AI coding agent that
+  wants to understand `creek deploy` behavior before running it.
+  Unsupported modes (`--template`, `--from-github`, repo-url) short-
+  circuit with a clear "not yet supported" message.
+
+- **Static-site sandbox fast path** — `creek deploy` in a directory
+  that contains only `index.html` (no `package.json`) now works. The
+  SDK falls back to the `index.html` source and `deploySandbox`
+  recognizes that case and delegates straight to `deployDirectory`,
+  which uploads the cwd as-is. Previously crashed with an ENOENT on
+  package.json. The simplest possible onboarding now works end-to-end:
+
+      mkdir hello && cd hello
+      echo '<h1>Hi</h1>' > index.html
+      npx creek deploy
+
+- **Astro framework support** — any Astro 3+ project (SPA, SSG, MDX,
+  content collections) auto-detects and builds via `astro build`.
+  Tested end-to-end against Astro 6 + Tailwind 4 + sharp image
+  optimization (`jiseeeh/serene-ink` blog theme). Via the existing
+  repo-URL flow, `npx creek deploy https://github.com/user/astro-theme`
+  now works with zero Creek-side configuration.
+
+- **Richer `creek deploy --help`** — `meta.description` and every arg
+  description rewritten to spell out sandbox-vs-production behavior,
+  auto-detection chain, safety notes around `--dry-run`, and example
+  invocations. Primary audience is AI agents reading `--help` output
+  on a cold paste, which shows up concretely as better self-description
+  in the first tool call.
+
+### Fixes
+
+- `NO_PROJECT_BREADCRUMBS`, the sandbox-status not-found hint, and
+  deploy.ts error paths now point to
+  `creek deploy --template landing` instead of the non-existent
+  `--demo` flag. Matching doc scrub across README, docs, llms.txt,
+  and the pricing page.
+
+## 0.4.4
+
+### Features
+
+- **`creek deploy --from-github [--project <slug>]`** — trigger a deploy
+  of the latest commit on a project's production branch via its
+  stored GitHub connection, skipping the local build entirely. Same
+  server code path that a real `git push` webhook uses — runs in
+  remote-builder, deploys via the existing pipeline, posts commit
+  status. Use `--project` to target by slug or UUID, or omit it to
+  infer from `creek.toml` in the current directory.
+
+  Flow: the CLI snapshots the newest existing deployment, POSTs
+  `/github/deploy-latest`, then polls `/projects/:id/deployments`
+  every 1.5–2s to pick up the new row (handlePush runs in
+  `waitUntil` on the server, so the row appears a beat after the
+  trigger). Streams status transitions to the terminal until the
+  deployment settles on `active`, `failed`, or `cancelled`. Hard
+  cap of 15 minutes. `--json` prints a single structured result.
+
+  Pairs with the dashboard's new "Deploy latest" button on the
+  project detail page — both call the same endpoint.
+
+## 0.4.3
+
+- Cron/queue trigger support flowed through the deploy pipeline
+  (bump commit `c1110b1`).
+
+## 0.4.2
+
+- Bundled with the queue binding + worker wrapper work landed in
+  `@solcreek/runtime` 0.4.0 (bump commit `28fdb11`).
+
+## 0.4.1
+
+- Bump alongside `@solcreek/sdk` 0.4.0 (semantic resource names in
+  `creek.toml`).
+
+## 0.4.0
+
+- Version bump ahead of the cron trigger pipeline work.
+
+## 0.3.9
+
+- First tagged release via the publish-cli GitHub Actions workflow
+  (the workflow has been dormant since; 0.4.x went out via manual
+  `pnpm publish` until 0.4.4 restored automated releases).

package/README.md

@@ -6,7 +6,7 @@ Deploy to the edge in seconds. No account required.
 [![License](https://img.shields.io/badge/license-Apache%202.0-green)](https://github.com/solcreek/creek/blob/main/LICENSE)
 
 ```bash
-npx creek deploy --demo
+npx creek deploy --template landing
 # Live in 8.3s -> https://a1b2c3d4.creeksandbox.com
 ```
 
@@ -28,12 +28,14 @@ npx creek deploy
 
 ## Quick Start
 
-### Deploy a demo (no account needed)
+### Start from a template (no account needed)
 
 ```bash
-creek deploy --demo
+creek deploy --template landing
 ```
 
+Clones a ready-made Vite + React landing page, builds it, and deploys it to a 60-minute sandbox URL — all in one command. The code is yours to edit.
+
 ### Deploy your project
 
 ```bash
@@ -61,7 +63,8 @@ creek deploy https://github.com/user/repo/tree/main/packages/app
 | Command | Description |
 |---------|-------------|
 | `creek deploy [dir]` | Deploy project, directory, or repo URL |
-| `creek deploy --demo` | Deploy a sample site instantly |
+| `creek deploy --template <name>` | Clone + build + deploy a named template |
+| `creek deploy --dry-run` | Show the deploy plan without executing (agent-safe) |
 | `creek projects` | List your projects |
 | `creek deployments` | List deployments for a project |
 | `creek status` | Show current project status |
@@ -154,7 +157,7 @@ Creek auto-detects and configures the build for:
 
 | Mode | Trigger | Auth Required | TTL |
 |------|---------|:-------------:|-----|
-| **Demo** | `--demo` flag | No | 60 min |
+| **Template** | `--template <name>` | No | 60 min |
 | **Sandbox** | No `creek.toml` | No | 60 min |
 | **Production** | Has `creek.toml` + token | Yes | Permanent |
 

package/dist/commands/deploy.d.ts

@@ -14,6 +14,16 @@ export declare const deployCommand: import("citty").CommandDef<{
         description: string;
         required: false;
     };
+    "from-github": {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
+    project: {
+        type: "string";
+        description: string;
+        required: false;
+    };
     json: {
         type: "boolean";
         description: string;
@@ -34,7 +44,31 @@ export declare const deployCommand: import("citty").CommandDef<{
         description: string;
         default: false;
     };
+    "dry-run": {
+        type: "boolean";
+        description: string;
+        default: false;
+    };
 }>;
+export interface CliDeployment {
+    id: string;
+    version: number;
+    status: string;
+    branch: string | null;
+    failedStep: string | null;
+    errorMessage: string | null;
+    createdAt: number;
+    url: string | null;
+}
+export declare const CLI_TERMINAL_STATUSES: Set<string>;
+export declare const CLI_IN_FLIGHT_STATUSES: Set<string>;
+/**
+ * Given a deployment list and a "previous latest createdAt" snapshot,
+ * return the most recently-created deployment that arrived after the
+ * snapshot, or null if none have appeared yet. Used by `--from-github`
+ * to find the row that handlePush just inserted in the background.
+ */
+export declare function findNewDeployment(deployments: CliDeployment[], previousLatestCreatedAt: number): CliDeployment | null;
 /**
  * Patch bare Node.js module imports (e.g. `from "fs"`) to use the `node:` prefix
  * (e.g. `from "node:fs"`). Workerd requires the `node:` prefix for all built-in modules.

package/dist/commands/deploy.js

@@ -10,7 +10,7 @@ import { collectAssets } from "../utils/bundle.js";
 import { bundleSSRServer } from "../utils/ssr-bundle.js";
 import { bundleWorker } from "../utils/worker-bundle.js";
 import { sandboxDeploy, pollSandboxStatus, printSandboxSuccess } from "../utils/sandbox.js";
-import { isTTY, jsonOutput, resolveJsonMode, globalArgs, shouldAutoConfirm, NO_PROJECT_BREADCRUMBS } from "../utils/output.js";
+import { isTTY, jsonOutput, resolveJsonMode, globalArgs, shouldAutoConfirm, AUTH_BREADCRUMBS, NO_PROJECT_BREADCRUMBS } from "../utils/output.js";
 import { ensureTosAccepted } from "../utils/tos.js";
 import { buildNextjs, patchBundledWorker, hasAdapterOutput } from "../utils/nextjs.js";
 import { isRepoUrl, parseRepoUrl, validateRepoUrl, validateSubpath, RepoUrlError } from "../utils/repo-url.js";
@@ -30,41 +30,200 @@ function assetSummary(fileList) {
         .map(([ext, n]) => `${n} ${ext}`);
     return parts.join(", ");
 }
+/**
+ * Dry-run handler: describes what `creek deploy` would do without
+ * executing. No network calls, no file uploads, no builds, no ToS
+ * prompts. Safe to call from an AI agent that wants to understand
+ * the deploy plan before running it.
+ *
+ * Always exits 0 — a dry-run is "successful" even when no project is
+ * found, because the goal is to report state, not enforce it.
+ */
+async function dryRunPlan(cwd, args, jsonMode) {
+    // Unsupported modes — report and return cleanly
+    const unsupportedMode = args.template ? "template"
+        : args["from-github"] ? "from-github"
+            : (typeof args.dir === "string" && isRepoUrl(args.dir)) ? "repo-url"
+                : null;
+    if (unsupportedMode) {
+        if (jsonMode) {
+            jsonOutput({
+                mode: "dry-run",
+                supported: false,
+                unsupportedMode,
+                message: `Dry-run is not yet supported for --${unsupportedMode} deploys`,
+                hint: `Run without --dry-run to execute, or inspect the command docs with --help`,
+            }, 0, []);
+            return;
+        }
+        consola.log(`\n  \x1b[2m[dry-run]\x1b[0m Dry-run is not yet supported for --${unsupportedMode} deploys.\n`);
+        consola.log(`  Run without --dry-run to execute, or inspect the command docs with --help.\n`);
+        return;
+    }
+    // Main case: resolve config in cwd
+    let resolved = null;
+    try {
+        resolved = resolveConfig(cwd);
+    }
+    catch (err) {
+        if (!(err instanceof ConfigNotFoundError))
+            throw err;
+    }
+    const token = getToken();
+    const authenticated = !!token;
+    // If no config, check build-output fallback
+    let buildOutputFallback = null;
+    if (!resolved) {
+        for (const dir of ["dist", "build", "out", ".output/public"]) {
+            if (existsSync(resolve(cwd, dir))) {
+                buildOutputFallback = dir;
+                break;
+            }
+        }
+    }
+    const wouldDeploy = !!(resolved || buildOutputFallback);
+    const targetType = authenticated ? "production" : "sandbox";
+    const bindings = resolved
+        ? resolvedConfigToBindingRequirements(resolved).map((b) => ({
+            name: b.bindingName,
+            type: b.type,
+        }))
+        : [];
+    const plan = {
+        mode: "dry-run",
+        supported: true,
+        cwd,
+        authenticated,
+        target: {
+            type: targetType,
+            description: targetType === "production"
+                ? "Your team's production slot (permanent URL via creek.toml)"
+                : "Free 60-minute sandbox (no signup required)",
+        },
+        config: resolved
+            ? {
+                source: resolved.source,
+                projectName: resolved.projectName,
+                framework: resolved.framework,
+                buildCommand: resolved.buildCommand,
+                buildOutput: resolved.buildOutput,
+                cron: resolved.cron,
+                queue: resolved.queue,
+            }
+            : null,
+        buildOutputFallback,
+        bindings,
+        wouldDeploy,
+        sideEffects: {
+            networkCalls: false,
+            fileUploads: false,
+            buildExecuted: false,
+            tosPromptShown: false,
+        },
+        nextStep: wouldDeploy
+            ? "Run without --dry-run to execute: npx creek deploy"
+            : "No project config or build output found. Run `creek init` or `npm create vite@latest` first.",
+    };
+    if (jsonMode) {
+        jsonOutput(plan, 0, []);
+        return;
+    }
+    // Human-readable plan
+    consola.log("\n  \x1b[2m[dry-run]\x1b[0m No deploy will execute. No network calls. No uploads.\n");
+    consola.log(`  cwd:              ${cwd}`);
+    consola.log(`  Auth status:      ${authenticated ? "✓ signed in" : "✗ not signed in"}`);
+    consola.log(`  Deploy target:    ${targetType} — ${plan.target.description}`);
+    if (resolved) {
+        consola.log(`  Detected:         ${formatDetectionSummary(resolved)}`);
+        consola.log(`  Project name:     ${resolved.projectName}`);
+        if (resolved.framework) {
+            consola.log(`  Framework:        ${resolved.framework}`);
+        }
+        consola.log(`  Build command:    ${resolved.buildCommand}`);
+        consola.log(`  Build output:     ${resolved.buildOutput}`);
+        if (bindings.length > 0) {
+            consola.log(`  Bindings:         ${bindings.map((b) => `${b.name} (${b.type})`).join(", ")}`);
+        }
+        if (resolved.cron.length > 0) {
+            consola.log(`  Cron triggers:    ${resolved.cron.join(", ")}`);
+        }
+        if (resolved.queue) {
+            consola.log(`  Queue trigger:    enabled`);
+        }
+        if (resolved.unsupportedBindings.length > 0) {
+            consola.log(`  Unsupported:      ${resolved.unsupportedBindings
+                .map((b) => `${b.name} (${b.type})`)
+                .join(", ")} — would be skipped`);
+        }
+    }
+    else if (buildOutputFallback) {
+        consola.log(`  Detected:         prebuilt assets in ${buildOutputFallback}/ (no creek.toml, no wrangler config)`);
+    }
+    else {
+        consola.log(`  Detected:         nothing — no creek.toml, no wrangler config, no dist/build/out/.output/public/`);
+    }
+    consola.log(`\n  Next step:        ${plan.nextStep}\n`);
+}
 export const deployCommand = defineCommand({
     meta: {
         name: "deploy",
-        description: "Deploy the current project to Creek",
+        description: "Deploy the current project to Creek. Signed-in: deploys to your team's production slot. Not signed in: creates a free 60-minute sandbox URL (no signup). Auto-detects framework from creek.toml, wrangler files, package.json, or index.html. Safe to run from an AI coding agent — use --dry-run first to inspect the plan without executing.",
     },
     args: {
         dir: {
             type: "positional",
-            description: "Directory to deploy (default: current directory)",
+            description: "Directory to deploy (default: current directory). Also accepts a GitHub repo URL to clone-and-deploy.",
             required: false,
         },
         "skip-build": {
             type: "boolean",
-            description: "Skip the build step",
+            description: "Skip the build step — upload existing build output as-is. Useful when CI already built the artifact.",
+            default: false,
+        },
+        "dry-run": {
+            type: "boolean",
+            description: "Show what would be deployed without doing it: resolved config, detected framework, bindings, target URL, auth status. No network calls, no file uploads. Pair with --json for machine-readable plan output. Safe for agents.",
             default: false,
         },
         ...globalArgs,
         template: {
             type: "string",
-            description: "Deploy a template (e.g., landing, blog, todo)",
+            description: "Deploy a named template (e.g., landing, blog, todo). Combine with --data to pass template params.",
             required: false,
         },
         data: {
             type: "string",
-            description: "JSON data for template params (used with --template)",
+            description: "JSON string of template parameters (used with --template). Example: --data '{\"title\":\"Hello\"}'",
             required: false,
         },
         path: {
             type: "string",
-            description: "Subdirectory within repo to deploy (for monorepos)",
+            description: "Subdirectory within the repo to deploy, for monorepos. Example: --path apps/web",
+            required: false,
+        },
+        "from-github": {
+            type: "boolean",
+            description: "Skip local build; trigger a remote deploy of the latest commit on the project's production branch via its GitHub connection.",
+            default: false,
+        },
+        project: {
+            type: "string",
+            description: "Target project slug or UUID. Required with --from-github when not run inside a project directory.",
             required: false,
         },
     },
     async run({ args }) {
         const jsonMode = resolveJsonMode(args);
+        // --- Dry-run short-circuit ---
+        // No ToS prompt, no network, no file uploads, no builds. Pure config
+        // resolution + plan output. Safe to call from an AI agent that wants
+        // to understand what `creek deploy` would do before running it.
+        if (args["dry-run"]) {
+            const dryCwd = args.dir && typeof args.dir === "string" && !isRepoUrl(args.dir)
+                ? resolve(args.dir)
+                : process.cwd();
+            return await dryRunPlan(dryCwd, args, jsonMode);
+        }
         // --- Ensure ToS accepted ---
         const autoConfirm = shouldAutoConfirm(args);
         const tos = await ensureTosAccepted(autoConfirm);
@@ -82,6 +241,14 @@ export const deployCommand = defineCommand({
             }
             return await deployTemplate(args.template, templateData);
         }
+        // --- Trigger a deploy from the project's GitHub connection (no local build) ---
+        if (args["from-github"]) {
+            return await deployFromGithub({
+                project: args.project,
+                cwd: args.dir ? resolve(args.dir) : process.cwd(),
+                jsonMode,
+            });
+        }
         // --- Repo URL deploy (creek deploy https://github.com/user/repo) ---
         if (args.dir && isRepoUrl(args.dir)) {
             return await deployRepoUrl(args.dir, {
@@ -145,6 +312,210 @@ export const deployCommand = defineCommand({
         process.exit(1);
     },
 });
+export const CLI_TERMINAL_STATUSES = new Set(["active", "failed", "cancelled"]);
+export const CLI_IN_FLIGHT_STATUSES = new Set([
+    "queued",
+    "uploading",
+    "provisioning",
+    "deploying",
+]);
+/**
+ * Given a deployment list and a "previous latest createdAt" snapshot,
+ * return the most recently-created deployment that arrived after the
+ * snapshot, or null if none have appeared yet. Used by `--from-github`
+ * to find the row that handlePush just inserted in the background.
+ */
+export function findNewDeployment(deployments, previousLatestCreatedAt) {
+    const newer = deployments.filter((d) => d.createdAt > previousLatestCreatedAt);
+    if (newer.length === 0)
+        return null;
+    return newer.reduce((latest, d) => (d.createdAt > latest.createdAt ? d : latest), newer[0]);
+}
+/**
+ * Trigger a deploy that uses the project's github_connection instead of a
+ * local build. Polls the deployments list until the new row settles and
+ * streams status transitions to the terminal.
+ *
+ * The server endpoint (POST /github/deploy-latest) returns 200 immediately
+ * while handlePush runs in waitUntil, so we fingerprint the deployments list
+ * before the POST and look for a new row afterward.
+ */
+async function deployFromGithub(options) {
+    const { project: projectArg, cwd, jsonMode } = options;
+    const token = getToken();
+    if (!token) {
+        if (jsonMode)
+            jsonOutput({ error: "not_authenticated", message: "Run `creek login` first." }, 1, AUTH_BREADCRUMBS);
+        consola.error("Not logged in. Run `creek login` first.");
+        process.exit(1);
+    }
+    // Resolve the target project: explicit --project flag wins, otherwise
+    // fall back to the current directory's resolved config (creek.toml
+    // [project] name or inferred project name).
+    let projectSlug = projectArg;
+    if (!projectSlug) {
+        try {
+            const resolved = resolveConfig(cwd);
+            projectSlug = resolved.projectName;
+        }
+        catch (err) {
+            if (!(err instanceof ConfigNotFoundError))
+                throw err;
+        }
+    }
+    if (!projectSlug) {
+        if (jsonMode)
+            jsonOutput({ error: "validation", message: "Could not determine target project. Pass --project <slug>." }, 1, NO_PROJECT_BREADCRUMBS);
+        consola.error("Could not determine target project. Pass --project <slug> or run inside a directory with a creek.toml.");
+        process.exit(1);
+    }
+    const client = new CreekClient(getApiUrl(), token);
+    // Snapshot the current newest deployment so we can detect the one this
+    // command creates. createdAt is the cleanest marker — the version number
+    // also works but we don't need to parse it.
+    let previousLatestCreatedAt = 0;
+    try {
+        const existing = (await client.listDeployments(projectSlug));
+        previousLatestCreatedAt = existing.reduce((max, d) => Math.max(max, d.createdAt), 0);
+    }
+    catch (err) {
+        if (err instanceof CreekAuthError)
+            throw err;
+        if (jsonMode)
+            jsonOutput({ error: "not_found", message: err.message }, 1, NO_PROJECT_BREADCRUMBS);
+        consola.error(`Could not load deployments for project '${projectSlug}': ${err.message}`);
+        process.exit(1);
+    }
+    // Kick off the build
+    if (!jsonMode) {
+        section("Trigger");
+        consola.start(`  Triggering deploy of '${projectSlug}' from its GitHub connection...`);
+    }
+    let triggerResult;
+    try {
+        triggerResult = await client.deployFromGithub(projectSlug);
+    }
+    catch (err) {
+        const msg = err.message;
+        if (jsonMode)
+            jsonOutput({ error: "trigger_failed", message: msg }, 1, NO_PROJECT_BREADCRUMBS);
+        consola.error(`Trigger failed: ${msg}`);
+        process.exit(1);
+    }
+    if (!jsonMode) {
+        consola.success(`  Triggered (${triggerResult.branch} @ ${triggerResult.commitSha.slice(0, 7)})`);
+        section("Watch");
+    }
+    // Poll for the new deployment row, then follow its status until it settles.
+    // First phase: wait up to 20s for the row to appear (handlePush runs in
+    // waitUntil and may take a beat to insert).
+    const startedAt = Date.now();
+    const rowAppearDeadline = startedAt + 20_000;
+    const overallDeadline = startedAt + 15 * 60_000; // 15 min hard cap
+    let targetDeployment = null;
+    let lastStatus = null;
+    while (Date.now() < overallDeadline) {
+        let list;
+        try {
+            list = (await client.listDeployments(projectSlug));
+        }
+        catch (err) {
+            if (!jsonMode)
+                consola.warn(`  Poll failed: ${err.message}`);
+            await sleep(2000);
+            continue;
+        }
+        // Phase 1: find the new row. It's the newest deployment with a
+        // createdAt greater than our snapshot. triggerType should be 'github'
+        // but we don't require it (rollback/promote could race, but extremely
+        // unlikely in the narrow window between snapshot + poll).
+        if (!targetDeployment) {
+            const candidate = list
+                .filter((d) => d.createdAt > previousLatestCreatedAt)
+                .sort((a, b) => b.createdAt - a.createdAt)[0];
+            if (candidate) {
+                targetDeployment = candidate;
+                if (!jsonMode) {
+                    consola.info(`  v${candidate.version} ${candidate.branch ?? ""}`.trim());
+                }
+            }
+            else if (Date.now() > rowAppearDeadline) {
+                // 20s and no new row — handlePush must have errored before it could
+                // insert. Surface the timeout rather than hanging.
+                if (jsonMode)
+                    jsonOutput({ error: "no_deployment", message: "Deployment row did not appear within 20s. Check server logs." }, 1, NO_PROJECT_BREADCRUMBS);
+                consola.error("  Deployment row did not appear within 20s. Check control-plane logs.");
+                process.exit(1);
+            }
+            else {
+                await sleep(1500);
+                continue;
+            }
+        }
+        // Phase 2: follow the target row's status
+        const current = list.find((d) => d.id === targetDeployment.id);
+        if (!current) {
+            // Shouldn't happen — row was there a moment ago
+            await sleep(1500);
+            continue;
+        }
+        targetDeployment = current;
+        if (current.status !== lastStatus) {
+            lastStatus = current.status;
+            if (!jsonMode) {
+                if (CLI_IN_FLIGHT_STATUSES.has(current.status)) {
+                    consola.start(`  ${current.status}...`);
+                }
+            }
+        }
+        if (CLI_TERMINAL_STATUSES.has(current.status)) {
+            break;
+        }
+        await sleep(2000);
+    }
+    if (!targetDeployment) {
+        if (jsonMode)
+            jsonOutput({ error: "timeout", message: "Timed out waiting for deployment" }, 1, NO_PROJECT_BREADCRUMBS);
+        consola.error("Timed out waiting for deployment");
+        process.exit(1);
+    }
+    // Report the outcome
+    if (targetDeployment.status === "active") {
+        if (jsonMode) {
+            jsonOutput({
+                ok: true,
+                deploymentId: targetDeployment.id,
+                version: targetDeployment.version,
+                status: "active",
+                url: targetDeployment.url,
+            }, 0, NO_PROJECT_BREADCRUMBS);
+        }
+        else {
+            consola.success(`  Deployed v${targetDeployment.version}`);
+            if (targetDeployment.url)
+                consola.log(`  ${targetDeployment.url}`);
+        }
+        return;
+    }
+    // Failed / cancelled
+    const failureMsg = targetDeployment.errorMessage || `Deployment ${targetDeployment.status}`;
+    if (jsonMode) {
+        jsonOutput({
+            ok: false,
+            deploymentId: targetDeployment.id,
+            status: targetDeployment.status,
+            failedStep: targetDeployment.failedStep,
+            errorMessage: failureMsg,
+        }, 1, NO_PROJECT_BREADCRUMBS);
+    }
+    else {
+        consola.error(`  Deployment ${targetDeployment.status}${targetDeployment.failedStep ? ` at ${targetDeployment.failedStep}` : ""}: ${failureMsg}`);
+    }
+    process.exit(1);
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
 async function deployRepoUrl(input, options) {
     const { path: subpath, skipBuild, json: jsonMode } = options;
     try {
@@ -268,9 +639,39 @@ async function deployDirectory(dir, jsonMode, tos) {
 // Sandbox deploy — auto-detect framework, build, deploy
 // ============================================================================
 async function deploySandbox(cwd, skipBuild, jsonMode = false, resolved, tos) {
-    const framework = resolved?.framework ?? detectFramework(JSON.parse(readFileSync(join(cwd, "package.json"), "utf-8")));
+    // Static-site fast path: when resolveConfig fell back to index.html, the cwd
+    // has no build step and may have no package.json. Delegate to deployDirectory
+    // which just uploads the cwd as-is. This handles the simplest possible
+    // onboarding:
+    //     mkdir test && cd test
+    //     echo '<h1>Hi</h1>' > index.html
+    //     npx creek deploy
+    if (resolved?.source === "index.html") {
+        return deployDirectory(cwd, jsonMode, tos);
+    }
+    // Framework path: package.json should exist because resolveConfig picked a
+    // framework from package.json, wrangler files, or creek.toml. Guard anyway
+    // so we fail with a helpful message instead of an ENOENT stack trace.
+    const pkgJsonPath = join(cwd, "package.json");
+    if (!existsSync(pkgJsonPath)) {
+        const message = `Expected package.json in ${cwd} but none found.`;
+        if (jsonMode) {
+            jsonOutput({
+                ok: false,
+                error: "no_package_json",
+                message,
+                hint: "Run `npx creek deploy ./dist` to deploy a prebuilt directory, or `npx creek deploy --template landing` to start from a template.",
+            }, 1, NO_PROJECT_BREADCRUMBS);
+            return;
+        }
+        consola.error(message);
+        consola.info("  Run `npx creek deploy ./dist` to deploy a prebuilt directory instead,");
+        consola.info("  or `npx creek deploy --template landing` to start from a template.");
+        process.exit(1);
+    }
+    const pkg = JSON.parse(readFileSync(pkgJsonPath, "utf-8"));
+    const framework = resolved?.framework ?? detectFramework(pkg);
     // Detect Next.js mode (static vs opennext SSR)
-    const pkg = JSON.parse(readFileSync(join(cwd, "package.json"), "utf-8"));
     const nextjsMode = framework === "nextjs" ? detectNextjsMode(pkg, cwd) : null;
     const monorepo = detectMonorepo(cwd);
     section("Detect");

package/dist/commands/status.js

@@ -33,7 +33,7 @@ async function sandboxStatus(sandboxId, jsonMode) {
     if (!res.ok) {
         if (jsonMode)
             jsonOutput({ ok: false, error: "not_found", message: "Sandbox not found" }, 1, [
-                { command: "creek deploy --demo", description: "Deploy a new sandbox" },
+                { command: "creek deploy --template landing", description: "Deploy a new sandbox from a template" },
             ]);
         consola.error("Sandbox not found. It may have expired.");
         process.exit(1);

package/dist/utils/nextjs.d.ts

@@ -2,9 +2,10 @@
  * Next.js-specific build utilities for Creek CLI.
  *
  * Two build paths:
- * - **Adapter path** (Next.js >= 16.2): Uses @solcreek/adapter-nextjs via
+ * - **Adapter path** (Next.js >= 16.2.3): Uses @solcreek/adapter-creek via
  *   NEXT_ADAPTER_PATH. Zero workarounds, typed outputs, direct esbuild bundle.
- * - **Legacy path** (Next.js < 16.2): Uses @opennextjs/cloudflare with
+ *   Min version reflects the adapter's peerDependency (CVE-2026-23869).
+ * - **Legacy path** (Next.js < 16.2.3): Uses @opennextjs/cloudflare with
  *   workarounds (standalone patch, middleware manifest inline, etc.)
  *
  * The CLI auto-detects the Next.js version and picks the right path.
@@ -14,8 +15,11 @@ export declare function getNextVersion(cwd: string): string | null;
 /**
  * Unified Next.js build entry point.
  *
- * - Next.js >= 16.2: Creek adapter path (recommended)
- * - Next.js < 16.2: legacy opennext path (best effort)
+ * - Next.js >= 16.2.3: Creek adapter path (recommended)
+ * - Next.js < 16.2.3: legacy opennext path (best effort)
+ *
+ * Min version for the adapter path matches @solcreek/adapter-creek's
+ * peerDependency, which pins Next.js >= 16.2.3 to fix CVE-2026-23869.
  */
 export declare function buildNextjs(cwd: string, isMonorepo: boolean, projectName?: string): void;
 /** Check if the adapter output exists (vs legacy opennext output). */

package/dist/utils/nextjs.js

@@ -2,9 +2,10 @@
  * Next.js-specific build utilities for Creek CLI.
  *
  * Two build paths:
- * - **Adapter path** (Next.js >= 16.2): Uses @solcreek/adapter-nextjs via
+ * - **Adapter path** (Next.js >= 16.2.3): Uses @solcreek/adapter-creek via
  *   NEXT_ADAPTER_PATH. Zero workarounds, typed outputs, direct esbuild bundle.
- * - **Legacy path** (Next.js < 16.2): Uses @opennextjs/cloudflare with
+ *   Min version reflects the adapter's peerDependency (CVE-2026-23869).
+ * - **Legacy path** (Next.js < 16.2.3): Uses @opennextjs/cloudflare with
  *   workarounds (standalone patch, middleware manifest inline, etc.)
  *
  * The CLI auto-detects the Next.js version and picks the right path.
@@ -39,7 +40,7 @@ function semverGte(version, target) {
     return aPat >= bPat;
 }
 /**
- * Build a Next.js app using the Creek adapter (>= 16.2).
+ * Build a Next.js app using the Creek adapter (>= 16.2.3).
  *
  * Sets NEXT_ADAPTER_PATH to the adapter bundled with the CLI.
  * No opennext, no wrangler, no config patching — the adapter handles
@@ -57,7 +58,7 @@ function resolveAdapterPath() {
 function buildWithAdapter(cwd) {
     const adapterPath = resolveAdapterPath();
     if (!adapterPath) {
-        consola.warn("  @solcreek/adapter-nextjs not found — install it for optimal Next.js builds");
+        consola.warn("  @solcreek/adapter-creek not found — install it for optimal Next.js builds");
         return; // caller falls back to legacy
     }
     consola.start("  Building Next.js with Creek adapter...\n");
@@ -72,12 +73,15 @@ function buildWithAdapter(cwd) {
 /**
  * Unified Next.js build entry point.
  *
- * - Next.js >= 16.2: Creek adapter path (recommended)
- * - Next.js < 16.2: legacy opennext path (best effort)
+ * - Next.js >= 16.2.3: Creek adapter path (recommended)
+ * - Next.js < 16.2.3: legacy opennext path (best effort)
+ *
+ * Min version for the adapter path matches @solcreek/adapter-creek's
+ * peerDependency, which pins Next.js >= 16.2.3 to fix CVE-2026-23869.
  */
 export function buildNextjs(cwd, isMonorepo, projectName) {
     const version = getNextVersion(cwd);
-    const useAdapter = version && semverGte(version, "16.2.0") && resolveAdapterPath();
+    const useAdapter = version && semverGte(version, "16.2.3") && resolveAdapterPath();
     if (useAdapter) {
         buildWithAdapter(cwd);
     }

package/dist/utils/output.js

@@ -50,6 +50,6 @@ export const AUTH_BREADCRUMBS = [
 ];
 export const NO_PROJECT_BREADCRUMBS = [
     { command: "creek init", description: "Initialize creek.toml in current directory" },
-    { command: "creek deploy --demo", description: "Deploy a sample site to try Creek" },
+    { command: "creek deploy --template landing", description: "Start from a ready-made Vite + React landing page" },
 ];
 //# sourceMappingURL=output.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solcreek/cli",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "CLI for the Creek deployment platform",
   "type": "module",
   "main": "./dist/index.js",
@@ -8,14 +8,9 @@
     "dist",
     "!dist/**/*.test.*",
     "!dist/**/*.map",
+    "CHANGELOG.md",
     "LICENSE"
   ],
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsc --watch",
-    "typecheck": "tsc --noEmit",
-    "clean": "rm -rf dist"
-  },
   "keywords": [
     "creek",
     "cli",
@@ -32,14 +27,14 @@
     "directory": "packages/cli"
   },
   "dependencies": {
-    "@solcreek/sdk": "workspace:*",
     "ajv": "^8.17.1",
     "citty": "^0.1.6",
     "consola": "^3.4.2",
     "esbuild": "^0.25.0",
     "miniflare": "^4.20260317.3",
     "smol-toml": "^1.3.1",
-    "ws": "^8.20.0"
+    "ws": "^8.20.0",
+    "@solcreek/sdk": "0.4.2"
   },
   "devDependencies": {
     "@testing-library/dom": "^10.4.1",
@@ -53,5 +48,11 @@
     "react-dom": "^19.2.4",
     "typescript": "^5.8.2",
     "vite": "^6.3.5"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
   }
-}
+}