@wirl/mcp 0.2.5 → 0.2.6

package/bin.js

@@ -2040,7 +2040,238 @@ var init_migrations = __esm({
   }
 });
 
+// packages/core/src/ai-vendors.ts
+var AI_VENDOR_SPECS;
+var init_ai_vendors = __esm({
+  "packages/core/src/ai-vendors.ts"() {
+    "use strict";
+    AI_VENDOR_SPECS = {
+      openrouter: { host: "openrouter.ai", prefix: "/api", keyHeader: "authorization", label: "OpenRouter" },
+      openai: { host: "api.openai.com", prefix: "", keyHeader: "authorization", label: "OpenAI" },
+      anthropic: { host: "api.anthropic.com", prefix: "", keyHeader: "x-api-key", label: "Anthropic" },
+      google: { host: "generativelanguage.googleapis.com", prefix: "", keyHeader: "x-goog-api-key", label: "Google" }
+    };
+  }
+});
+
+// packages/core/src/broker-stream.ts
+var BROKER_LIMITS, STREAMED_MEDIA_TYPES, MIB;
+var init_broker_stream = __esm({
+  "packages/core/src/broker-stream.ts"() {
+    "use strict";
+    BROKER_LIMITS = {
+      /**
+       * From the call to the vendor's headers. For an answer read whole, the
+       * whole answer too, as it has always been. Also under Cloudflare's
+       * undocumented time to first byte on a Worker's fetch, about 100 seconds.
+       */
+      headersMs: 6e4,
+      /** A streamed answer's body, counted from its headers. */
+      streamBodyMs: 13 * 6e4,
+      /** The longest a streamed answer may go with nothing moving. A reasoning model's pause fits. */
+      streamIdleMs: 4 * 6e4,
+      /** Bytes in any one answer, streamed or read whole. */
+      answerBytes: 25 * 1024 * 1024,
+      /**
+       * Bytes in the body of any one call an app makes. The body is read whole
+       * before the call is sent, and before its grant is looked up, so a body
+       * past this never opens a key and never reaches a vendor (OIM-931).
+       * 100 MiB: Cloudflare publishes 100 MB as the request body its Free and
+       * Pro plans take, and a deployed app's call is first held whole by the
+       * egress Worker, in an isolate Cloudflare gives 128 MB of memory. Nothing
+       * else bounds a caller that holds a broker token and reaches the control
+       * plane itself: Railway sets no size on a body, only five minutes to send it.
+       */
+      requestBytes: 100 * 1024 * 1024,
+      /**
+       * Bytes of call bodies one app's calls hold at once, its previews' with
+       * them (OIM-951): counted as each chunk arrives, from a call's first byte
+       * until the broker has answered it (broker-bodies.ts). At least
+       * `requestBytes`, so one call at the cap always fits an app that holds
+       * nothing else; a quarter of `heldBodyBytes`, so four apps of four owners
+       * at their share fill the whole (one owner's apps cannot: `ownerHeldBodyBytes`).
+       */
+      appHeldBodyBytes: 128 * 1024 * 1024,
+      /**
+       * Bytes of call bodies the calls of every app one owner has hold at once,
+       * their previews' with them (OIM-967): the person `apps.owner_user_id`
+       * names, whichever organisations their apps are in. Apps and
+       * organisations cost nothing to create (no cap on either), so a share per
+       * app let one person with four apps fill the whole, and one per
+       * organisation would let them do it with four organisations; a person
+       * costs a sign-in. Two apps at their share, so one app that runs
+       * away still leaves its owner's other apps room, and half of
+       * `heldBodyBytes`, so one owner can never take more than half, and a
+       * second sign-in is what it takes to fill it. At least `requestBytes`, so
+       * one call at the cap always fits an owner whose apps hold nothing else.
+       */
+      ownerHeldBodyBytes: 256 * 1024 * 1024,
+      /**
+       * Bytes of call bodies every app's calls hold at once, in this process.
+       * A call's reader starts at 16 KiB and doubles its buffer as the body
+       * arrives, so the buffers behind this hold at most twice it, 1 GiB, and
+       * 16 KiB a call beside (the ruling in OIM-951).
+       */
+      heldBodyBytes: 512 * 1024 * 1024,
+      /** The `Retry-After` of a call refused for either. */
+      heldBodyRetryAfterSeconds: 10,
+      /**
+       * How long a call's body may send nothing before its read is stopped:
+       * an upload's (OIM-935). A deployed app's body comes from the egress
+       * Worker, which holds it whole before it sends it, and `wirl dev` reads it
+       * whole first, so no ordinary sender ever pauses (fix round 1, R1-F2).
+       */
+      heldBodyStallMs: 3e4,
+      /**
+       * How long a call's body may take to arrive whole: 100 MiB in 120 seconds
+       * is about 7 Mbit/s, which a body between Cloudflare and the control plane
+       * passes many times over, and well under Node's 300 seconds a request,
+       * after which the body would be cut anyway (fix round 1, R1-F2).
+       */
+      heldBodyArrivalMs: 12e4,
+      /**
+       * Bytes of answers read whole that one app's calls hold at once, its
+       * previews' with them (OIM-966): counted as each chunk arrives from the
+       * vendor, from an answer's first byte until wirl's server has taken the
+       * last of it, or the app has gone (broker-bodies.ts). A vendor's event
+       * stream is not counted: it is passed on as the app reads it, and holds
+       * about 285 to 441 KiB at a time, measured end to end through the control
+       * plane's server (`passOn` in broker.ts; OIM-966 fix round 1, R1-F3,
+       * R2-F2). More than two `answerBytes`, so two answers at the cap fit an
+       * app that holds nothing else; a quarter of `heldAnswerBytes`, so four apps
+       * of four owners at their share fill the whole (one owner's apps cannot:
+       * `ownerHeldAnswerBytes`).
+       */
+      appHeldAnswerBytes: 64 * 1024 * 1024,
+      /**
+       * Bytes of answers read whole that the calls of every app one owner has
+       * hold at once, their previews' with them (OIM-967), for the reasons
+       * `ownerHeldBodyBytes` gives: two apps at their share, half of
+       * `heldAnswerBytes`, and more than two `answerBytes` and than the room a
+       * call needs, so an owner whose apps hold nothing else can always send.
+       */
+      ownerHeldAnswerBytes: 128 * 1024 * 1024,
+      /**
+       * Bytes of answers read whole that every app's calls hold at once, in this
+       * process. An answer's reader doubles its buffer as it fills, as a body's
+       * does, and never past `answerBytes`, so while answers arrive the buffers
+       * behind this hold at most twice it, 512 MiB, and 16 KiB an answer beside;
+       * an answer read whole is copied to exactly its size before it is handed
+       * on, so from then its count is its memory (the ruling in OIM-966, and its
+       * fix round 1, R1-F2).
+       */
+      heldAnswerBytes: 256 * 1024 * 1024,
+      /**
+       * The room an app's share of answers, and the whole, must each have left
+       * for a call to be sent at all: one answer at the cap. With less, the call
+       * is refused with a 503 before it leaves wirl, rather than run at its
+       * vendor and its answer cut (OIM-966 fix round 1, R1-F1).
+       */
+      heldAnswerRoomBytes: 25 * 1024 * 1024,
+      /** The `Retry-After` of a call refused for that room, before it was sent. */
+      heldAnswerRetryAfterSeconds: 10,
+      /**
+       * How long an answer read whole may wait for wirl's server to take the
+       * last of it once it is handed back: past this it is cut, and its count
+       * goes back, so no app holds its share, or the whole, by not reading.
+       * Under Cloudflare's measured 125 seconds with nothing moving, which ends
+       * a deployed app's unread answer anyway (OIM-966 fix round 1, R1-F1).
+       */
+      heldAnswerHandOutMs: 12e4,
+      /**
+       * Streamed answers one app may have open at once. Each holds a vendor
+       * socket and an inbound connection on one control-plane instance for up
+       * to fourteen minutes, so one app cannot be allowed an unbounded number.
+       * Counted in memory, per instance, like the control plane's other limits.
+       */
+      openStreamsPerApp: 20,
+      /**
+       * How long an event stream wirl cut waits for its closing event to leave
+       * the server before it ends the stream with its error anyway (OIM-837 fix
+       * round 1). The event is on its way when the server's queue of what it has
+       * to write has emptied; a reader that is slow but reading empties a full
+       * kernel buffer, a few hundred kilobytes, well inside this. Past it the
+       * reader is not reading, and the stream ends as it always did; the write
+       * stall that holds a connection longer than this is OIM-968's.
+       */
+      cutEventSentMs: 5e3
+    };
+    STREAMED_MEDIA_TYPES = Object.freeze(["text/event-stream", "application/x-ndjson"]);
+    MIB = 1024 * 1024;
+  }
+});
+
+// packages/core/src/broker.ts
+function isBrokerOwnedHeader(name) {
+  const lower = name.toLowerCase();
+  if (lower === "authorization") return false;
+  return STRIPPED.has(lower) || STRIPPED_PREFIXES.some((prefix) => lower.startsWith(prefix)) || isHopHeader(lower);
+}
+var STRIPPED_PREFIXES, AI_KEY_HEADERS, STRIPPED, HOP_PREFIXES, HOP_HEADERS, isHopHeader, HAND_OUT_BYTES, FIRST_HOLD_BYTES, CREDENTIAL_SHAPES;
+var init_broker = __esm({
+  "packages/core/src/broker.ts"() {
+    "use strict";
+    init_ai_vendors();
+    STRIPPED_PREFIXES = ["x-wirl-"];
+    AI_KEY_HEADERS = /* @__PURE__ */ new Set([...Object.values(AI_VENDOR_SPECS).map((spec) => spec.keyHeader), "api-key"]);
+    STRIPPED = /* @__PURE__ */ new Set([
+      "authorization",
+      "proxy-authorization",
+      "cookie",
+      "host",
+      "connection",
+      "keep-alive",
+      "transfer-encoding",
+      "upgrade",
+      "te",
+      "trailer",
+      "content-length"
+    ]);
+    HOP_PREFIXES = ["x-forwarded-", "x-railway-", "cf-cert-"];
+    HOP_HEADERS = /* @__PURE__ */ new Set([
+      "forwarded",
+      "x-real-ip",
+      "true-client-ip",
+      "via",
+      "cf-connecting-ip",
+      "cf-connecting-ipv6",
+      "cf-pseudo-ipv4",
+      "cf-ray",
+      "cf-visitor",
+      "cf-worker",
+      "cf-ipcountry",
+      "cf-ipcity",
+      "cf-ipcontinent",
+      "cf-iplatitude",
+      "cf-iplongitude",
+      "cf-region",
+      "cf-region-code",
+      "cf-metro-code",
+      "cf-postal-code",
+      "cf-timezone",
+      "cf-bot-score",
+      "cf-verified-bot",
+      "cf-ja3-hash",
+      "cf-ja4",
+      "exposed-credential-check",
+      "malicious-uploads-detection"
+    ]);
+    isHopHeader = (lower) => HOP_HEADERS.has(lower) || HOP_PREFIXES.some((prefix) => lower.startsWith(prefix));
+    HAND_OUT_BYTES = 64 * 1024;
+    FIRST_HOLD_BYTES = 16 * 1024;
+    CREDENTIAL_SHAPES = Object.freeze({
+      http_bearer: Object.freeze({ sends: "bearer", fields: Object.freeze(["token"]) }),
+      http_header: Object.freeze({ sends: "headers", fields: Object.freeze([]) }),
+      basic: Object.freeze({ sends: "basic", fields: Object.freeze(["username", "password"]) }),
+      none: Object.freeze({ sends: "nothing", fields: Object.freeze([]) })
+    });
+  }
+});
+
 // packages/core/src/manifest.ts
+function isHeaderName(name) {
+  return typeof name === "string" && name.length <= 128 && HEADER_NAME.test(name) && !isBrokerOwnedHeader(name);
+}
 function oneEditApart(a, b) {
   if (a === b || Math.abs(a.length - b.length) > 1) return false;
   if (a.length === b.length) {
@@ -2395,12 +2626,14 @@ function parseManifest(input) {
     let slug;
     let hosts;
     let kind;
+    let header;
     if (typeof entry === "string") {
       slug = entry;
     } else if (typeof entry === "object" && entry !== null && !Array.isArray(entry)) {
       slug = entry["slug"];
       hosts = entry["hosts"];
       kind = entry["kind"];
+      header = entry["header"];
     } else {
       return refuse('Each connection must be a name, or an object with a "slug".');
     }
@@ -2431,13 +2664,22 @@ function parseManifest(input) {
       }
       declaredKind = kind;
     }
+    if (header !== void 0) {
+      if (declaredKind !== "http_header") {
+        return refuse(`"header" is used only by an http_header connection (${slug}); add "kind": "http_header".`);
+      }
+      if (typeof header === "string" && HEADER_NAME.test(header) && header.length <= 128 && isBrokerOwnedHeader(header)) {
+        return refuse(`"header" for ${slug} is ${header}: ${BROKER_OWNED_HEADER_RULE}.`);
+      }
+      if (!isHeaderName(header)) return refuse(`"header" for ${slug} must be an HTTP header name: ${HEADER_NAME_RULE}.`);
+    }
     if (declaredKind === "webhook_secret" && list !== null) {
       return refuse(`hosts are not used by a webhook_secret connection (${slug}).`);
     }
     if (declaredKind === "none" && (list === null || list.length === 0)) {
       return refuse(`a "none" connection needs "hosts": the hosts it may reach without a key (${slug}).`);
     }
-    connections.push({ slug, hosts: list, kind: declaredKind });
+    connections.push({ slug, hosts: list, kind: declaredKind, ...header === void 0 ? {} : { header } });
   }
   const publicPathsResult = parsePublicPaths(raw, connections);
   if (!publicPathsResult.ok) return refuse(publicPathsResult.message);
@@ -2447,7 +2689,7 @@ function parseManifest(input) {
     warnings
   };
 }
-var CONNECTION_KINDS, UNDELIVERED_KINDS, CREATABLE_CONNECTION_KINDS, needsNoKey, ACCENTS, SCHEDULE_LIMITS, MANIFEST_KEYS, QUIET_KEYS, UNKNOWN_KEYS_NAMED, KEY_SHOWN, squash, ONE_EDIT_MIN_LETTERS, pluralOf, SLUG, LABEL, HOST_PATTERN, refuse, asHint, SCHEDULE_NAME, TIMEOUT_PATTERN, TIMEOUT_MESSAGE, FLOW_KEYS, MIGRATIONS_KEYS, VISIBILITY_REFUSED;
+var CONNECTION_KINDS, UNDELIVERED_KINDS, CREATABLE_CONNECTION_KINDS, needsNoKey, ACCENTS, SCHEDULE_LIMITS, HEADER_NAME, BROKER_OWNED_HEADER_RULE, HEADER_NAME_RULE, MANIFEST_KEYS, QUIET_KEYS, UNKNOWN_KEYS_NAMED, KEY_SHOWN, squash, ONE_EDIT_MIN_LETTERS, pluralOf, SLUG, LABEL, HOST_PATTERN, refuse, asHint, SCHEDULE_NAME, TIMEOUT_PATTERN, TIMEOUT_MESSAGE, FLOW_KEYS, MIGRATIONS_KEYS, VISIBILITY_REFUSED;
 var init_manifest = __esm({
   "packages/core/src/manifest.ts"() {
     "use strict";
@@ -2456,6 +2698,7 @@ var init_manifest = __esm({
     init_public_path();
     init_flows();
     init_migrations();
+    init_broker();
     CONNECTION_KINDS = ["http_bearer", "http_header", "basic", "postgres", "env", "webhook_secret", "none"];
     UNDELIVERED_KINDS = {
       env: `wirl never hands a secret to the app, so an "env" connection delivers nothing. Declare the vendor's host instead ("hosts": ["api.vendor.com"]) and fetch its real URL: wirl attaches the key on the way out.`,
@@ -2471,6 +2714,9 @@ var init_manifest = __esm({
       defaultTimeoutMs: 3e5,
       maxRetries: 3
     };
+    HEADER_NAME = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+    BROKER_OWNED_HEADER_RULE = "wirl sets or removes that header itself on every call, so a key is never sent in it; name the header the vendor reads the key from, such as Authorization or x-api-key";
+    HEADER_NAME_RULE = "letters, digits and !#$%&'*+-.^_`|~ only, such as Authorization or x-api-key";
     MANIFEST_KEYS = Object.freeze([
       "accent",
       "app",
@@ -2730,157 +2976,10 @@ var init_runtime = __esm({
   }
 });
 
-// packages/core/src/broker-stream.ts
-var BROKER_LIMITS, STREAMED_MEDIA_TYPES, MIB;
-var init_broker_stream = __esm({
-  "packages/core/src/broker-stream.ts"() {
-    "use strict";
-    BROKER_LIMITS = {
-      /**
-       * From the call to the vendor's headers. For an answer read whole, the
-       * whole answer too, as it has always been. Also under Cloudflare's
-       * undocumented time to first byte on a Worker's fetch, about 100 seconds.
-       */
-      headersMs: 6e4,
-      /** A streamed answer's body, counted from its headers. */
-      streamBodyMs: 13 * 6e4,
-      /** The longest a streamed answer may go with nothing moving. A reasoning model's pause fits. */
-      streamIdleMs: 4 * 6e4,
-      /** Bytes in any one answer, streamed or read whole. */
-      answerBytes: 25 * 1024 * 1024,
-      /**
-       * Bytes in the body of any one call an app makes. The body is read whole
-       * before the call is sent, and before its grant is looked up, so a body
-       * past this never opens a key and never reaches a vendor (OIM-931).
-       * 100 MiB: Cloudflare publishes 100 MB as the request body its Free and
-       * Pro plans take, and a deployed app's call is first held whole by the
-       * egress Worker, in an isolate Cloudflare gives 128 MB of memory. Nothing
-       * else bounds a caller that holds a broker token and reaches the control
-       * plane itself: Railway sets no size on a body, only five minutes to send it.
-       */
-      requestBytes: 100 * 1024 * 1024,
-      /**
-       * Bytes of call bodies one app's calls hold at once, its previews' with
-       * them (OIM-951): counted as each chunk arrives, from a call's first byte
-       * until the broker has answered it (broker-bodies.ts). At least
-       * `requestBytes`, so one call at the cap always fits an app that holds
-       * nothing else; a quarter of `heldBodyBytes`, so four apps of four owners
-       * at their share fill the whole (one owner's apps cannot: `ownerHeldBodyBytes`).
-       */
-      appHeldBodyBytes: 128 * 1024 * 1024,
-      /**
-       * Bytes of call bodies the calls of every app one owner has hold at once,
-       * their previews' with them (OIM-967): the person `apps.owner_user_id`
-       * names, whichever organisations their apps are in. Apps and
-       * organisations cost nothing to create (no cap on either), so a share per
-       * app let one person with four apps fill the whole, and one per
-       * organisation would let them do it with four organisations; a person
-       * costs a sign-in. Two apps at their share, so one app that runs
-       * away still leaves its owner's other apps room, and half of
-       * `heldBodyBytes`, so one owner can never take more than half, and a
-       * second sign-in is what it takes to fill it. At least `requestBytes`, so
-       * one call at the cap always fits an owner whose apps hold nothing else.
-       */
-      ownerHeldBodyBytes: 256 * 1024 * 1024,
-      /**
-       * Bytes of call bodies every app's calls hold at once, in this process.
-       * A call's reader starts at 16 KiB and doubles its buffer as the body
-       * arrives, so the buffers behind this hold at most twice it, 1 GiB, and
-       * 16 KiB a call beside (the ruling in OIM-951).
-       */
-      heldBodyBytes: 512 * 1024 * 1024,
-      /** The `Retry-After` of a call refused for either. */
-      heldBodyRetryAfterSeconds: 10,
-      /**
-       * How long a call's body may send nothing before its read is stopped:
-       * an upload's (OIM-935). A deployed app's body comes from the egress
-       * Worker, which holds it whole before it sends it, and `wirl dev` reads it
-       * whole first, so no ordinary sender ever pauses (fix round 1, R1-F2).
-       */
-      heldBodyStallMs: 3e4,
-      /**
-       * How long a call's body may take to arrive whole: 100 MiB in 120 seconds
-       * is about 7 Mbit/s, which a body between Cloudflare and the control plane
-       * passes many times over, and well under Node's 300 seconds a request,
-       * after which the body would be cut anyway (fix round 1, R1-F2).
-       */
-      heldBodyArrivalMs: 12e4,
-      /**
-       * Bytes of answers read whole that one app's calls hold at once, its
-       * previews' with them (OIM-966): counted as each chunk arrives from the
-       * vendor, from an answer's first byte until wirl's server has taken the
-       * last of it, or the app has gone (broker-bodies.ts). A vendor's event
-       * stream is not counted: it is passed on as the app reads it, and holds
-       * about 285 to 441 KiB at a time, measured end to end through the control
-       * plane's server (`passOn` in broker.ts; OIM-966 fix round 1, R1-F3,
-       * R2-F2). More than two `answerBytes`, so two answers at the cap fit an
-       * app that holds nothing else; a quarter of `heldAnswerBytes`, so four apps
-       * of four owners at their share fill the whole (one owner's apps cannot:
-       * `ownerHeldAnswerBytes`).
-       */
-      appHeldAnswerBytes: 64 * 1024 * 1024,
-      /**
-       * Bytes of answers read whole that the calls of every app one owner has
-       * hold at once, their previews' with them (OIM-967), for the reasons
-       * `ownerHeldBodyBytes` gives: two apps at their share, half of
-       * `heldAnswerBytes`, and more than two `answerBytes` and than the room a
-       * call needs, so an owner whose apps hold nothing else can always send.
-       */
-      ownerHeldAnswerBytes: 128 * 1024 * 1024,
-      /**
-       * Bytes of answers read whole that every app's calls hold at once, in this
-       * process. An answer's reader doubles its buffer as it fills, as a body's
-       * does, and never past `answerBytes`, so while answers arrive the buffers
-       * behind this hold at most twice it, 512 MiB, and 16 KiB an answer beside;
-       * an answer read whole is copied to exactly its size before it is handed
-       * on, so from then its count is its memory (the ruling in OIM-966, and its
-       * fix round 1, R1-F2).
-       */
-      heldAnswerBytes: 256 * 1024 * 1024,
-      /**
-       * The room an app's share of answers, and the whole, must each have left
-       * for a call to be sent at all: one answer at the cap. With less, the call
-       * is refused with a 503 before it leaves wirl, rather than run at its
-       * vendor and its answer cut (OIM-966 fix round 1, R1-F1).
-       */
-      heldAnswerRoomBytes: 25 * 1024 * 1024,
-      /** The `Retry-After` of a call refused for that room, before it was sent. */
-      heldAnswerRetryAfterSeconds: 10,
-      /**
-       * How long an answer read whole may wait for wirl's server to take the
-       * last of it once it is handed back: past this it is cut, and its count
-       * goes back, so no app holds its share, or the whole, by not reading.
-       * Under Cloudflare's measured 125 seconds with nothing moving, which ends
-       * a deployed app's unread answer anyway (OIM-966 fix round 1, R1-F1).
-       */
-      heldAnswerHandOutMs: 12e4,
-      /**
-       * Streamed answers one app may have open at once. Each holds a vendor
-       * socket and an inbound connection on one control-plane instance for up
-       * to fourteen minutes, so one app cannot be allowed an unbounded number.
-       * Counted in memory, per instance, like the control plane's other limits.
-       */
-      openStreamsPerApp: 20,
-      /**
-       * How long an event stream wirl cut waits for its closing event to leave
-       * the server before it ends the stream with its error anyway (OIM-837 fix
-       * round 1). The event is on its way when the server's queue of what it has
-       * to write has emptied; a reader that is slow but reading empties a full
-       * kernel buffer, a few hundred kilobytes, well inside this. Past it the
-       * reader is not reading, and the stream ends as it always did; the write
-       * stall that holds a connection longer than this is OIM-968's.
-       */
-      cutEventSentMs: 5e3
-    };
-    STREAMED_MEDIA_TYPES = Object.freeze(["text/event-stream", "application/x-ndjson"]);
-    MIB = 1024 * 1024;
-  }
-});
-
 // packages/core/src/retention.ts
 function deletedAppNameMessage(held, graceDays = RETENTION.deletedAppGraceDays) {
-  const deleted = held.deletedAt.slice(0, 10);
-  const until = held.keptUntil.slice(0, 10);
+  const deleted = heldDay(held.deletedAt);
+  const until = heldDay(held.keptUntil);
   const what = `An app named ${held.name} was deleted on ${deleted}`;
   if (!held.open) {
     return `${what}, and the ${String(graceDays)} days its data was kept for ended on ${until}. It cannot be restored, and the name stays taken: choose another name.`;
@@ -2904,7 +3003,7 @@ function appNameTakenMessage(name, movedToOrg = null) {
   }
   return `An app named ${name} already exists in this organisation; choose another name.`;
 }
-var RETENTION;
+var RETENTION, heldDay;
 var init_retention = __esm({
   "packages/core/src/retention.ts"() {
     "use strict";
@@ -2929,6 +3028,7 @@ var init_retention = __esm({
       /** An AI monthly total (the rows the caps read) is kept this long, 24 months. */
       aiMonthDays: 730
     };
+    heldDay = (instant) => instant.slice(0, 10);
   }
 });
 
@@ -2952,7 +3052,7 @@ npm packages work: install them in the project and the deploy bundles them in. N
 server: native code will not run. Node built-ins work (\`node:crypto\`, \`node:path\`, ...; \`Buffer\` and
 \`process\` are global), but what \`node:fs\` writes is gone by the next request: use \`env.DB\`.
 
-\`env\` holds \`DB\` and nothing else. \`env.DB\` is Cloudflare D1: prepared statements with \`.bind()\`, at most
+\`env\` holds \`DB\` and \`WIRL_DEPLOYMENT\`. \`env.WIRL_DEPLOYMENT\`: the version number of the deployment answering, as a string; \`dev\` under \`wirl dev\`. \`env.DB\` is Cloudflare D1: prepared statements with \`.bind()\`, at most
 100 bound parameters a statement. \`exec()\` runs one statement per line, as does each file in \`migrations/\`,
 which wirl applies in order to a preview and before going live; a failing one fails the deploy. Never edit
 an applied file. Dropping or renaming a table or column needs \`"migrations": { "destructive": [...] }\`, its
@@ -3013,7 +3113,7 @@ var init_version = __esm({
   "packages/core/src/version.ts"() {
     "use strict";
     WORKSPACE_VERSION = "0.0.0";
-    BUILT_VERSION = true ? "0.2.5" : null;
+    BUILT_VERSION = true ? "0.2.6" : null;
   }
 });
 
@@ -3949,6 +4049,7 @@ var init_local = __esm({
           env["WIRL_LOCAL_DB"] = databaseFile;
           if (this.#databaseDir === void 0) this.#databaseFiles.set(request.databaseKey ?? request.appId, databaseFile);
         }
+        if (request.version !== void 0) env["WIRL_DEPLOYMENT"] = String(request.version);
         const child = this.#spawn(command, request.dir, env);
         const instance = {
           id: request.deploymentId,
@@ -4241,7 +4342,7 @@ function listedNames(body) {
   if (!Array.isArray(result2)) return [];
   return result2.map((entry) => typeof entry === "object" && entry !== null ? entry.id : null).filter((id) => typeof id === "string");
 }
-var SCRIPT_NOT_FOUND, DEFAULTS2, DATABASE_BINDING, shortHash, WorkersRunner, DATABASE_KEY, D1_UUID, BOOKMARK, ANSWER_BYTES, TOO_LARGE;
+var SCRIPT_NOT_FOUND, DEFAULTS2, DATABASE_BINDING, DEPLOYMENT_BINDING, shortHash, WorkersRunner, DATABASE_KEY, D1_UUID, BOOKMARK, ANSWER_BYTES, TOO_LARGE;
 var init_workers = __esm({
   "packages/runtime/src/workers.ts"() {
     "use strict";
@@ -4258,6 +4359,7 @@ var init_workers = __esm({
       compatibilityDate: "2026-01-01"
     };
     DATABASE_BINDING = "DB";
+    DEPLOYMENT_BINDING = "WIRL_DEPLOYMENT";
     shortHash = (value) => createHash3("sha256").update(value).digest("hex").slice(0, 16);
     WorkersRunner = class {
       #opts;
@@ -4335,7 +4437,12 @@ var init_workers = __esm({
                 // bundler leaves as imports for exactly this to satisfy. Without
                 // it an app that runs under `wirl dev` fails its first request.
                 compatibility_flags: ["nodejs_compat"],
-                bindings: [{ type: "d1", name: DATABASE_BINDING, id: databaseId }],
+                bindings: [
+                  { type: "d1", name: DATABASE_BINDING, id: databaseId },
+                  // Which deployment is answering, as a string, so a page can
+                  // notice a deploy and reload (OIM-1012).
+                  ...request.version === void 0 ? [] : [{ type: "plain_text", name: DEPLOYMENT_BINDING, text: String(request.version) }]
+                ],
                 // Workers Logs: every invocation and every console line, kept by
                 // Cloudflare for its retention window. Sampling stays at 1 so a
                 // missing line means the app did not print it. Read back by
@@ -5200,12 +5307,13 @@ company email domain; in any other org, including a personal one or one
 made with \`wirl orgs create\`, it starts private. Deploys are one
 command; sharing is by email; a third-party API is declared, never pasted.`;
 var SKILL_DOCS_LINE = "Before you build, fetch https://docs.wirl.dev/llms-full.txt: every page of the docs as one Markdown file, so there is no need to read the site page by page.";
-var SKILL_RULES = `1. **Never ask for or paste an API key.** Declare the connection in \`wirl.json\` and deploy. Needs no key at all (a public API)? Declare it with "kind": "none" and its hosts. If the key is missing, the deploy prints a link to the app's keys page; show the person that link. Locally, keys live in \`.wirl/keys.json\`, which git ignores. To try a vendor call locally without the key, map its connection to a server of your own in \`.wirl/mocks.json\`, like \`{ "anthropic": "http://127.0.0.1:4010" }\`: \`wirl dev\` then sends the calls to that connection's hosts there instead (\`wirl dev --help\` has the rest). Models need no key either: call https://ai.wirl/<vendor>/\u2026 (see Models).
+var SKILL_RULES = `1. **Never ask for or paste an API key.** Declare the connection in \`wirl.json\` and deploy. Needs no key at all (a public API)? Declare it with "kind": "none" and its hosts. If the key is missing, the deploy prints a link to the app's keys page; show the person that link. Locally, keys live in \`.wirl/keys.json\`, which git ignores. To try a vendor call locally without the key, map its connection to a server of your own in \`.wirl/mocks.json\`, like \`{ "anthropic": "http://127.0.0.1:4010" }\`: \`wirl dev\` then sends the calls to that connection's hosts there instead (\`wirl dev --help\` has the rest). Models need no key either: call https://ai.wirl/<vendor>/\u2026 (see Models). A connection of kind \`http_header\` names its header in \`wirl.json\` (\`"header": "Authorization"\`), so the person pastes only the value.
 2. **Call third-party APIs by their real URL** (\`fetch("https://api.hubspot.com/...")\`). wirl attaches the key on the way out, deployed and under \`wirl dev\` alike.
-3. **Asked to connect an app to Slack, or to receive events from any outside service:** follow the pattern on https://docs.wirl.dev/models (public path with "verify": "slack", a connection of kind http_bearer for the bot token and one of kind webhook_secret for the signing secret, the Slack app manifest you give the person to create the app with). Never ask for the token or secret in chat: the person pastes them on the app's Connections page, and you say which two values.
+3. **Asked to connect an app to Slack, or to receive events from any outside service:** follow the pattern on https://docs.wirl.dev/models (public path with "verify": "slack", a connection of kind http_bearer for the bot token and one of kind webhook_secret for the signing secret, the Slack app manifest you give the person to create the app with). Never ask for the token or secret in chat: the person pastes them on the app's Connections page, and you say which two values. Give the person the link that opens Slack's create-app dialog with the manifest filled in: \`https://api.slack.com/apps?new_app=1&manifest_json=<the url-encoded manifest>\`. Tell them their steps in this order: create the app from that link; copy the signing secret (Basic Information) to the app's Connections page as \`slack-signing\`; click Retry on the Request URL check in Slack if it shows unverified; Install to Workspace; then copy the Bot User OAuth Token (OAuth & Permissions) to the Connections page as \`slack-bot\`. Use wirl's Slack pattern, not Slack's own CLI, Bolt templates or socket mode, which do not fit an app hosted on wirl.
 4. If a command names several organisations and asks which, ask the person; pass \`--org\` or put \`"org"\` in \`wirl.json\`.
 5. To keep a file out of the deploy, list it in a \`.wirlignore\` at the project root (gitignore-style lines; no \`!\` negation).
-6. **A file that can lose data waits for a person.** A deploy that would apply a destructive file (one wirl.json's \`"destructive"\` list must name) to the live database stops and names the page where a person approves each one. Show the person those pages, and deploy again once they say they approved. If \`${WIRL_BIN} deploy\` asks you to type a file's name, stop it and show the page instead, or deploy with \`--json\`, which never asks. Never type the name yourself or send the confirmation: that is the person's, and no flag skips it.`;
+6. **A file that can lose data waits for a person.** A deploy that would apply a destructive file (one wirl.json's \`"destructive"\` list must name) to the live database stops and names the page where a person approves each one. Show the person those pages, and deploy again once they say they approved. If \`${WIRL_BIN} deploy\` asks you to type a file's name, stop it and show the page instead, or deploy with \`--json\`, which never asks. Never type the name yourself or send the confirmation: that is the person's, and no flag skips it.
+7. **Asked for a change to an app that is deployed:** make it, try it under \`wirl dev\`, deploy it when it works, and report the address and what changed. Put it up as a preview instead only when the person asks to look first, or when the change needs a real key (see rule 1): nothing with a key runs under \`wirl dev\`, so a preview is where such a call is first tried, with \`wirl fetch <path> --preview <name>\`. Never stop after editing files without deploying or saying why.`;
 var SKILL_MANIFEST_EXAMPLE = `\`\`\`json
 { "app": "crm-sync", "server": "server.mjs", "connections": [{ "slug": "hubspot", "hosts": ["api.hubspot.com"] }] }
 \`\`\``;
@@ -5259,47 +5367,62 @@ var SUGGESTIONS = [
     number: 1,
     title: "Summarise the week",
     capability: "A model comes with every app. Your agent just uses it; nothing to sign up for or paste.",
-    prompt: `Add a "Summarise this week" button above the notes. When pressed, send this week's notes to a language model and show a three-line summary at the top of the page. Try it with wirl dev, then deploy it with wirl deploy. Keep the latest summary so everyone who opens the page sees it.`,
-    youGet: "a summary card above the notes."
+    prompt: "Replace the 'Summarise the week' card on the noticeboard with the feature itself: a Summarise button and, under it, a three-line summary of this week's notes written by a language model. Keep the latest summary so everyone who opens the page sees it, and show when it was made.",
+    youGet: "a summary in that step's place."
   },
   {
     number: 2,
     title: "Give notes a due date",
     capability: "The database is yours. Changing its shape is one migration file and one deploy; wirl applies it before the new version goes live, and the Data page on the dashboard shows the result.",
-    prompt: "Add an optional due date to notes. Add the column in a new migration file with the next number, and never edit a migration that has already been applied. Let people set the date when they post or edit a note, show it on each note, and put notes due soonest at the top. Try it with wirl dev, then deploy it with wirl deploy.",
-    youGet: "a date on each note, the soonest first, and a new column on the Data page."
+    prompt: "Replace the 'Give notes a due date' card with the feature: each note can have a due date, the form gets a date field, and notes due soonest sort to the top with the date shown. Put a short 'Due soon' list where the card was.",
+    youGet: "due dates on notes, and the list where the card was."
   },
   {
     number: 3,
     title: "Pull in something from outside",
     capability: "Every call out goes through wirl. The agent declares the host as a connection; a public API needs no key, and one that does gets its key on the dashboard, never in the code.",
-    prompt: `Show today's weather under the notes for our city (ask me which city if you don't know), from a public weather API that needs no key. Declare the API's host as a connection in wirl.json with "kind": "none". Try it with wirl dev, then deploy it with wirl deploy. If the deploy says the connection is waiting on an admin, show me the link it prints.`,
-    youGet: "a weather line under the notes, and the host listed on the app's Connections page."
+    prompt: (
+      // The spec writes <city>; the page carries "your city" and the agent asks once.
+      "Replace the 'Pull in something from outside' card with a seven-day weather strip for your city: one column per day, high and low as bars, a small sun, cloud or rain icon, drawn as SVG in the page's own colours, from Open-Meteo's keyless forecast API. Let the owner change the city on the page."
+    ),
+    youGet: "a forecast you can glance at, in that step's place."
   },
   {
     number: 4,
     title: "Try a new look before anyone sees it",
     // The mock says "Previews are free."; the starter carries no price words (its test forbids "free").
     capability: "Previews are a safe place to try. A preview gets its own address and its own database, so you can look at a change with a colleague before it goes live.",
-    prompt: "Give the noticeboard a calmer look: more space between notes, a softer background, the newest note set apart at the top. Put it up as a preview called new-look with wirl preview and give me the link. Don't deploy it yet. Keep the change on a branch and don't run wirl deploy until I say deploy it.",
-    youGet: 'a second address to open next to this one. Say "deploy it" when you like it.'
+    prompt: "Try a calmer look for the noticeboard: more space, a softer palette, the notes as cards. Put it up as a preview at its own address so I can look before anyone else sees it, and tell me the address. Don't change the live app until I say so. When I say deploy it, replace the 'Try a new look' card with a line saying which look is live.",
+    youGet: "a preview address; the live page unchanged."
   },
   {
     number: 5,
     title: "Share it with a colleague",
     capability: "Company sign-in is already on. Anyone you name opens the link with their work account; the Access page shows who can, and you can take it back any time.",
-    prompt: "Help me share this app with a colleague: tell me how to give them access and the link they open.",
-    youGet: "their name on the Access page, and a link they open with their work account."
+    prompt: "Share this noticeboard with <a colleague's email> so they can open it and post notes, and replace the 'Share it with a colleague' card with a short line that says who can open it now and links to the app's Access page.",
+    youGet: "a colleague who can open it, and the line where the card was."
   },
   {
     number: 6,
     title: "Connect it to Slack",
     capability: "Apps can reach the tools your company already uses. Your agent knows wirl's Slack pattern: it gives you a Slack app to create in one click, you paste two values on the app's Connections page, and the noticeboard starts a DM with you. Ask it about the notes, or tell it to add one, from Slack.",
-    prompt: "Connect this noticeboard to Slack so it DMs me this week's summary and I can chat with it there: ask it about the notes, or tell it to add or change one. Give me the Slack app manifest to create the app with, and tell me which two values to paste on the app's Connections page.",
-    youGet: "a DM from the noticeboard in Slack. Everything above works without it.",
+    prompt: "Connect this noticeboard to Slack so it DMs me this week's summary and I can chat with it there: ask it about the notes, or tell it to add or change one. Give me a link that opens Slack's create-app dialog with the manifest already filled in, tell me the exact order of the steps I do by hand, and replace the 'Connect it to Slack' card with the connection's status and those steps until the bot answers.",
+    youGet: "a DM from the noticeboard in Slack; everything above works without it.",
     optional: true
   }
 ];
+var SLACK_STEPS = [
+  ["Slack", "create the app from the link your agent gives you, and press Create."],
+  ["Basic Information", "show the Signing Secret and copy it."],
+  ["The app's Connections page on wirl", "paste it as slack-signing."],
+  ["Event Subscriptions", "press Retry if the Request URL shows unverified."],
+  ["Install App", "press Install to Workspace."],
+  ["OAuth & Permissions", "copy the Bot User OAuth Token, which starts with xoxb-."],
+  ["The Connections page", "paste it as slack-bot."],
+  ["Slack", "message the bot."]
+];
+var SLACK_IGNORE = "Ignore the Client Secret, the Verification Token and the app-level token.";
+var STEP_RULE = "Each step on the page is drawn by its own function in `server.mjs`, `step1(ctx)` to `step6(ctx)`, which returns the HTML under that step's heading; to build a step, make its function return the feature instead of the card, so the feature stands where the card was.";
 var splitCapability = (capability) => {
   const stop = capability.indexOf(". ");
   return [capability.slice(0, stop + 1), capability.slice(stop + 2)];
@@ -5309,20 +5432,29 @@ var SUGGESTIONS_SOURCE = [
   ...SUGGESTIONS.map(
     ({ number, title, capability, prompt, youGet, optional }) => `  { number: ${String(number)}, title: ${JSON.stringify(title)}, capability: ${JSON.stringify(capability)}, prompt: ${JSON.stringify(prompt)}, youGet: ${JSON.stringify(youGet)}${optional ? ", optional: true" : ""} },`
   ),
-  "];"
+  "];",
+  "",
+  "// The Slack card's steps for you, in order: where, and what to do there.",
+  "const SLACK_STEPS = [",
+  ...SLACK_STEPS.map(([place, what]) => `  [${JSON.stringify(place)}, ${JSON.stringify(what)}],`),
+  "];",
+  `const SLACK_IGNORE = ${JSON.stringify(SLACK_IGNORE)};`
 ].join("\n");
 var SERVER_HEAD = String.raw`/**
  * Team noticeboard: your first app on wirl.
  *
  * Your team posts short notes here, tags them, pins the ones everyone should
  * see, and edits or removes their own. Every night a schedule archives old
- * notes nobody pinned. Below the notes, "Make it yours": six prompts to
- * paste to your coding agent, in order, each saying what wirl gives the app
- * and what you get. Under them, the app's pages on app.wirl.dev.
+ * notes nobody pinned. Below the notes, "Make it yours": six steps, each
+ * drawn by its own function, step1 to step6. Until it is built a step shows
+ * a prompt to paste to your coding agent, saying what wirl gives the app and
+ * what you get; building it means that function returns the feature instead,
+ * in the same place. Under them, the app's pages on app.wirl.dev.
  *
  * The whole app is this one file:
  * - The page is HTML this module returns: plain forms, and one small script
- *   for the Copy prompt buttons.
+ *   for the Copy prompt buttons, which also reloads the page when /_version
+ *   changes, so a deploy shows up on its own.
  * - Notes live in env.DB, a SQLite database that belongs to this app alone.
  *   Its tables are in migrations/0001_init.sql, and wirl applies each new
  *   file in migrations/ before a version goes live. Put the next change in
@@ -5356,6 +5488,12 @@ export default {
       return text("No such schedule", 404);
     }
 
+    // Which deployment is answering: wirl sets env.WIRL_DEPLOYMENT, and the
+    // page reloads itself when this changes.
+    if (url.pathname === "/_version" && (request.method === "GET" || request.method === "HEAD")) {
+      return new Response(version(env), { headers: { "content-type": "text/plain; charset=utf-8", "cache-control": "no-store" } });
+    }
+
     const me = visitor(request);
 
     if (request.method === "POST") {
@@ -5485,17 +5623,19 @@ async function page(request, url, me, env) {
     "<meta name='viewport' content='width=device-width, initial-scale=1'>",
     "<title>" + TITLE + "</title>",
     "<style>" + STYLE + "</style>",
+    "<body data-version='" + escape(version(env)) + "'>",
     "<main>",
     "<header><h1>" + TITLE + "</h1>",
     "<p class='dim'>Signed in as <b>" + escape(me.name) + "</b>" + (me.role ? " (" + escape(me.role) + ")" : "") + ".</p></header>",
     me.role === "owner" ? welcome() : "",
     shown,
-    "<ul class='notes'>" + (notes.length === 0 ? "<li class='dim'>Nothing here yet.</li>" : notes.map((note) => card(note, me, archived)).join("")) + "</ul>",
+    "<ul class='notes'>" + (notes.length === 0 ? "<li class='dim'>Nothing here yet.</li>" : notes.map((note) => noteItem(note, me, archived)).join("")) + "</ul>",
     "<p class='dim'>Nightly tidy-up, which archives notes older than " + ARCHIVE_AFTER_DAYS + " days that nobody pinned: " +
       (lastRun ? "last run " + escape(lastRun.ran_at.slice(0, 16)) + " UTC: " + escape(lastRun.note) : "Not run yet.") + "</p>",
-    prompts(request),
+    await prompts(request, me, env, notes),
     "</main>",
     COPY_SCRIPT,
+    "</body>",
     "</html>",
   ].join("\n");
 }
@@ -5506,7 +5646,7 @@ function welcome() {
     "<section class='welcome'>",
     "<p class='kicker'>Your first app on wirl</p>",
     "<h2>Your coding agent just built this, and it's live.</h2>",
-    "<p>A small team noticeboard: notes, a nightly tidy-up, company sign-in, its own database. It runs at this address, it's private to you until you share it, and it's yours to change. Try out the app below and then customize it.</p>",
+    "<p>A small team noticeboard: notes, a nightly tidy-up, company sign-in, its own database. It runs at this address, it's private to you until you share it, and it's yours to change. Try out the app below and then customize it; when your agent deploys a change, this page refreshes on its own.</p>",
     "</section>",
   ].join("");
 }
@@ -5521,7 +5661,7 @@ function form() {
   ].join("");
 }
 
-function card(note, me, archived) {
+function noteItem(note, me, archived) {
   const mine = note.author_id === me.id || me.role === "owner";
   const action = (what, label) =>
     "<form method='post' action='/notes/" + note.id + "/" + what + "'><button>" + label + "</button></form>";
@@ -5561,10 +5701,9 @@ function dashboard(request) {
   return { app: DASHBOARD + "/apps/" + org + "/" + encodeURIComponent(parts[1]), org: DASHBOARD + "/orgs/" + org };
 }
 
-// The onboarding path: each prompt whole, visible and ready to select and
-// copy, with what wirl gives the app and what you get. Then what the app
-// already uses, and its pages on the dashboard.
-function prompts(request) {
+// "Make it yours": six steps, each drawn by its own function below, under
+// its heading. Then what the app already uses, and its pages on the dashboard.
+async function prompts(request, me, env, notes) {
   const where = dashboard(request);
   const pages = [
     ["Overview", "app", ""],
@@ -5578,34 +5717,104 @@ function prompts(request) {
   ];
   const link = ([label, of, path]) =>
     where === null ? "<span class='dim'>" + label + "</span>" : "<a href='" + escape(where[of] + path) + "'>" + label + "</a>";
-  const step = (each) => {
-    const stop = each.capability.indexOf(". ");
+  const ctx = { me, env, notes, where };
+  const shown = await Promise.all(STEPS.map((step) => step(ctx)));
+  const section = (html, index) => {
+    const each = SUGGESTIONS[index];
+    const isCard = String(html ?? "").startsWith('<div class="card"');
     return (
-      "<li class='step" + (each.number === 1 ? " first" : "") + (each.optional ? " optional" : "") + "'>" +
+      '<section class="step" id="step-' + each.number + '">' +
       "<h3><span class='number'>" + each.number + "</span> " + escape(each.title) +
-      (each.number === 1 ? " <span class='badge start'>Start here</span>" : "") +
-      (each.optional ? " <span class='badge'>Optional. The big one.</span>" : "") + "</h3>" +
-      "<p class='dim'><b>" + escape(each.capability.slice(0, stop + 1)) + "</b> " + escape(each.capability.slice(stop + 2)) + "</p>" +
-      "<div class='getrow'>" +
-      "<button type='button' class='copy' data-copy-for='prompt-" + each.number + "'>Copy prompt</button>" +
-      "<p class='dim'>You get: " + escape(each.youGet) + "</p></div>" +
-      "<details class='prompt'><summary>Show the prompt</summary>" +
-      "<pre id='prompt-" + each.number + "'>" + escape(each.prompt) + "</pre></details>" +
-      "</li>"
+      (each.number === 1 && isCard ? " <span class='badge start'>Start here</span>" : "") +
+      (each.optional && isCard ? " <span class='badge'>Optional. The big one.</span>" : "") + "</h3>" +
+      (html ?? "") +
+      "</section>"
     );
   };
   return [
     "<section id='prompts'><h2>Make it yours</h2>",
-    "<p>This app is live, at a link your team can open. Everything below is a whole prompt. Copy one, paste it to the coding agent that made this app, and the feature appears here on the next deploy. Go in order or skip around; the last one is the big one.</p>",
-    "<ol class='steps'>",
-    ...SUGGESTIONS.map(step),
-    "</ol>",
+    "<p>Everything below is a whole prompt. Copy one, paste it to the coding agent that made this app, and the step turns into the feature. Go in order or skip around; the last one is the big one.</p>",
+    "<div class='steps'>",
+    ...shown.map(section),
+    "</div>",
     "<p class='dim uses'>This app already uses a database, a nightly schedule, company sign-in and logs. Each has a page on the dashboard: " + pages.map(link).join(" · ") + "</p>",
     where === null ? "<p class='dim'>Running under wirl dev, so these pages are not linked here: they open on app.wirl.dev once it is deployed.</p>" : "",
     "</section>",
   ].join("\n");
 }
 
+// The steps of "Make it yours", one function each. ctx is { me, env, notes,
+// where }: who is asking, the app's env (env.DB and the rest), the notes on
+// the board, and the app's dashboard links (null under wirl dev). Each
+// returns the HTML under its step's heading, and may be async. Until a step
+// is built it returns its card, the prompt that asks for it; to build a step,
+// make its function return the feature instead, so the feature stands where
+// the card was. The heading stays.
+const STEPS = [step1, step2, step3, step4, step5, step6];
+
+function step1(ctx) {
+  return card(1, ctx);
+}
+
+function step2(ctx) {
+  return card(2, ctx);
+}
+
+function step3(ctx) {
+  return card(3, ctx);
+}
+
+function step4(ctx) {
+  return card(4, ctx);
+}
+
+function step5(ctx) {
+  return card(5, ctx);
+}
+
+function step6(ctx) {
+  return card(6, ctx);
+}
+
+// A step not built yet: what wirl gives the app, Copy prompt, what you get,
+// and the prompt itself, whole and ready to select. The Slack card also
+// lists the steps you do by hand.
+function card(n, ctx) {
+  const each = SUGGESTIONS[n - 1];
+  const stop = each.capability.indexOf(". ");
+  return (
+    '<div class="card">' +
+    "<p class='dim'><b>" + escape(each.capability.slice(0, stop + 1)) + "</b> " + escape(each.capability.slice(stop + 2)) + "</p>" +
+    "<div class='getrow'>" +
+    "<button type='button' class='copy' data-copy-for='prompt-" + each.number + "'>Copy prompt</button>" +
+    "<p class='dim'>You get: " + escape(each.youGet) + "</p></div>" +
+    (n === 6 ? slackSteps(ctx.where) : "") +
+    "<details class='prompt'><summary>Show the prompt</summary>" +
+    "<pre id='prompt-" + each.number + "'>" + escape(each.prompt) + "</pre></details>" +
+    "</div>"
+  );
+}
+
+// What you do by hand to connect Slack, in order, each saying where. The
+// Connections page is the app's own, linked once the app is deployed.
+function slackSteps(where) {
+  const place = (name) =>
+    where !== null && name.includes("Connections page")
+      ? "<a href='" + escape(where.app + "/connections") + "'>" + escape(name) + "</a>"
+      : escape(name);
+  return (
+    "<p>Your steps, once your agent gives you the link:</p>" +
+    "<ol class='slack'>" + SLACK_STEPS.map(([name, what]) => "<li><b>" + place(name) + "</b>: " + escape(what) + "</li>").join("") + "</ol>" +
+    "<p class='dim'>" + escape(SLACK_IGNORE) + "</p>"
+  );
+}
+
+// The deployment answering, as wirl names it: its version number, or "dev"
+// under wirl dev.
+function version(env) {
+  return env.WIRL_DEPLOYMENT ?? "unknown";
+}
+
 `;
 var SERVER_TAIL = String.raw`
 
@@ -5627,15 +5836,15 @@ const STYLE = [
   ".meta, .actions { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; font-size: 13px; }",
   ".actions { margin-top: 8px; } .actions form { margin: 0; } .actions details { flex-basis: 100%; order: 3; }",
   ".tag { text-decoration: none; }",
-  "ol.steps { list-style: none; padding: 0; display: grid; gap: 12px; }",
-  ".step { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 12px 14px; }",
-  ".step.optional { border: 2px solid var(--accent); }",
+  ".steps { display: grid; gap: 18px; margin: 16px 0; }",
+  ".step .card { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 12px 14px; }",
+  "#step-1 > .card, #step-6 > .card { border: 2px solid var(--accent); }",
+  "ol.slack { margin: 6px 0; padding-left: 22px; } ol.slack li { margin: 2px 0; }",
   ".step h3 { font-size: 16px; margin: 0 0 6px; display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }",
   ".step p { margin: 6px 0; } .step b { color: var(--accent); }",
   ".number { font-size: 12px; background: var(--ink); color: var(--bg); padding: 2px 7px; border-radius: 5px; }",
-  ".optional .number { background: var(--accent); }",
+  "#step-6 .number { background: var(--accent); }",
   ".badge { font-size: 12px; font-weight: 600; color: var(--dim); border: 1px solid var(--line); padding: 1px 8px; border-radius: 999px; }",
-  ".step.first { border: 2px solid var(--accent); }",
   ".badge.start { color: var(--accent); border-color: var(--accent); }",
   ".welcome { background: var(--card); border: 1px solid var(--line); border-radius: 8px; padding: 14px 16px; margin: 16px 0 8px; }",
   ".welcome h2 { font-size: 19px; margin: 4px 0 8px; } .welcome p { margin: 0; }",
@@ -5667,6 +5876,21 @@ const COPY_SCRIPT = [
   "  if (!navigator.clipboard) return select();",
   "  navigator.clipboard.writeText(pre.textContent).then(() => flash('Copied'), select);",
   "});",
+  "// After a deploy, reload: ask /_version every 3 seconds while this tab is in",
+  "// front, and reload when it names another deployment than the one that drew",
+  "// this page. Stop after 30 minutes without a change.",
+  "(() => {",
+  "  const version = document.body.getAttribute('data-version');",
+  "  const since = Date.now();",
+  "  const timer = setInterval(() => {",
+  "    if (Date.now() - since > 30 * 60 * 1000) return clearInterval(timer);",
+  "    if (document.visibilityState !== 'visible') return;",
+  "    fetch('/_version', { cache: 'no-store', redirect: 'error' })",
+  "      .then((response) => (response.ok ? response.text() : null))",
+  "      .then((now) => { if (now && now !== version) location.reload(); })",
+  "      .catch(() => {});",
+  "  }, 3000);",
+  "})();",
   "</script>",
 ].join("\n");
 
@@ -5728,7 +5952,7 @@ var README = [
   "",
   "Your first app on wirl: a board where your team posts short notes, tags them, pins the ones everyone should see, and edits or removes their own. Every night a schedule archives old notes nobody pinned.",
   "",
-  "Open it at the address `wirl deploy` prints. It starts private to you. Its page is the way in: six prompts to give your coding agent, each saying what wirl gives the app and what you get, and under them the app's pages on app.wirl.dev.",
+  "Open it at the address `wirl deploy` prints. It starts private to you. Its page is the way in: six steps, each a prompt to give your coding agent until the agent builds it there, saying what wirl gives the app and what you get, and under them the app's pages on app.wirl.dev.",
   "",
   "## What is where",
   "",
@@ -5745,11 +5969,14 @@ var README = [
   "",
   "## Make it yours",
   "",
-  "The same six prompts as the page. Each is a whole prompt: paste it to your coding agent as it is. Go in order or skip around; the last one is the big one.",
+  "The same six prompts as the page. Each is a whole prompt: paste it to your coding agent as it is, and the step turns into the feature. Go in order or skip around; the last one is the big one.",
+  "",
+  STEP_RULE,
   "",
   ...SUGGESTIONS.flatMap(({ number, title, capability, prompt, youGet, optional }) => {
     const [bold, rest] = splitCapability(capability);
-    return [`### ${String(number)}. ${title}`, "", ...optional ? ["Optional. The big one.", ""] : [], `**${bold}** ${rest}`, "", `> ${prompt}`, "", `You get: ${youGet}`, ""];
+    const slack = number === 6 ? ["Your steps, once your agent gives you the link:", "", ...SLACK_STEPS.map(([place, what], index) => `${String(index + 1)}. ${place}: ${what}`), "", SLACK_IGNORE, ""] : [];
+    return [`### ${String(number)}. ${title}`, "", ...optional ? ["Optional. The big one.", ""] : [], `**${bold}** ${rest}`, "", `> ${prompt}`, "", `You get: ${youGet}`, "", ...slack];
   })
 ].join("\n");
 var STARTER_FILES = {
@@ -6444,9 +6671,15 @@ function formatResolvedConnections(resolved) {
     if (each.existing === null) continue;
     const { kind, keyed, alsoGrantedTo } = each.existing;
     const others = alsoGrantedTo.length > 0 ? `; also granted to ${alsoGrantedTo.join(", ")}` : "";
+    const sentAs = each.headerChanged ? `; now sent as ${each.headerChanged.to}` : "";
     lines.push(
-      `${each.slug}: the org's existing connection (${kind}, ${keyState(kind, keyed)}), made by ${connectionCreatorLabel(each.existing)}${others}.`
+      `${each.slug}: the org's existing connection (${kind}, ${keyState(kind, keyed)}), made by ${connectionCreatorLabel(each.existing)}${others}${sentAs}.`
     );
+    if (each.headerHeld) {
+      lines.push(
+        `${each.slug}: wirl.json names the header ${each.headerHeld.declared}, but its key is still sent as ${each.headerHeld.sentAs}: only its maker or an org admin can change that.`
+      );
+    }
     if (each.kindChanged) {
       lines.push(`Changed: this deploy changed ${each.slug}'s kind from ${each.kindChanged.from} to ${each.kindChanged.to}, as wirl.json declares.`);
     }
@@ -7106,6 +7339,7 @@ var deletePreview = (creds, org, app, name, options = {}) => callApi(creds, `/ap
   () => void 0
 );
 var mintVisit = (creds, org, app, name, options = {}) => callApi(creds, `/api/v1/apps/${seg(org)}/${seg(app)}/previews/${seg(name)}/visit`, pass(options, "POST"));
+var mintLiveVisit = (creds, org, app, options = {}) => callApi(creds, `/api/v1/apps/${seg(org)}/${seg(app)}/visit`, pass(options, "POST"));
 var runPreviewSchedule = (creds, org, app, name, schedule) => callApi(
   creds,
   `/api/v1/apps/${seg(org)}/${seg(app)}/previews/${seg(name)}/schedules/${seg(schedule)}/run`,
@@ -7388,9 +7622,9 @@ function isLocalApiOrigin(apiOrigin) {
     return false;
   }
 }
-function isOwnPreviewHost(target, org, app, name, appsDomain, apiOrigin) {
+function isOwnAppHost(target, org, app, preview, appsDomain, apiOrigin) {
   const parsed = parseAppHost(target.host, appsDomain);
-  if (parsed === null || parsed.preview !== name || parsed.orgSlug !== org || parsed.appSlug !== app) return false;
+  if (parsed === null || parsed.preview !== preview || parsed.orgSlug !== org || parsed.appSlug !== app) return false;
   return target.protocol === "https:" || target.protocol === "http:" && isLocalApiOrigin(apiOrigin);
 }
 function isVisitRefusal(status, location, apiOrigin) {
@@ -7403,12 +7637,13 @@ function isVisitRefusal(status, location, apiOrigin) {
     return false;
   }
 }
-async function previewFetch(creds, org, app, name, path, options) {
-  const mint = await mintVisit(creds, org, app, name, options.fetchImpl ? { fetchImpl: options.fetchImpl } : {});
+async function fetchPage(creds, org, app, preview, path, options) {
+  const client = options.fetchImpl ? { fetchImpl: options.fetchImpl } : {};
+  const mint = preview === null ? await mintLiveVisit(creds, org, app, client) : await mintVisit(creds, org, app, preview, client);
   const target = new URL(mint.url);
-  if (!isOwnPreviewHost(target, org, app, name, options.appsDomain, creds.apiOrigin)) {
+  if (!isOwnAppHost(target, org, app, preview, options.appsDomain, creds.apiOrigin)) {
     throw new CliError(
-      `Refusing to send the visit token to ${target.host}: that is not ${org}--${app}--${name}'s own address.`
+      `Refusing to send the visit token to ${target.host}: that is not ${preview === null ? `${org}--${app}` : `${org}--${app}--${preview}`}'s own address.`
     );
   }
   const withoutHash = path.split("#", 1)[0] ?? "";
@@ -7450,6 +7685,7 @@ async function previewFetch(creds, org, app, name, path, options) {
   const media = (contentType.split(";")[0] ?? "").trim().toLowerCase();
   const stream = text && (STREAMED_MEDIA_TYPES.includes(media) || read.stillStreaming);
   return {
+    ...preview === null ? { live: true } : {},
     status: response.status,
     statusText: response.statusText,
     contentType,
@@ -7566,7 +7802,9 @@ function formatFetchResult(result2, saved) {
   ];
   if (result2.location) lines.push(`location: ${result2.location}`);
   if (result2.refused) {
-    lines.push("The visit was refused, or the preview has expired or been deleted. Check `wirl previews`.");
+    lines.push(
+      result2.live ? "The visit to the live app was refused: check that you may still deploy it, and that it has been deployed." : "The visit was refused, or the preview has expired or been deleted. Check `wirl previews`."
+    );
   }
   lines.push("");
   if (saved !== void 0) {
@@ -8609,13 +8847,14 @@ var SHARED = [
   },
   {
     name: "wirl_preview_fetch",
-    description: `Make one request to a preview and show what it answers: the status, the content type, and the body as text \u2014 the page source for HTML, so you can see what the app actually rendered and fix it. Use this after wirl_preview instead of asking the person to open the link and describe what they see. A binary body reports its type and size, not its bytes. A text body over 100 KB is cut, and the answer says so. A stream (server-sent events, newline-delimited JSON, or any text still arriving after 10 seconds) is shown with the time each line arrived, as far as it got, and says whether it was still going: that is how to check a stream arrives piece by piece. A stream also comes back as data, in the result's structuredContent: the same lines as { atMs, text }, atMs being whole milliseconds from sending the request to the read that completed the line (lines that arrived together share one), the first ${STREAMED_DATA_MAX_LINES.toLocaleString("en-US")} lines or ${String(STREAMED_DATA_MAX_TEXT_BYTES / 1024)} KB of their text, whichever comes first (always at least the first line), with linesLeftOut counting any more (the text shows them all), and the status, the content type and the flags stillStreaming, bodyComplete, truncated and lastLineEnded; any other answer is the text alone. A preview's own database starts with the tables in migrations/ and no rows but the ones those files insert, so a page that expects rows may look blank until something writes to it, and its schedules do not run on a clock. A 401, or a redirect back to sign in, means the visit was refused or the preview has expired or been deleted, not that the app itself answered that way. The headers argument cannot set host, cookie, content-length, or any x-wirl-* header (including x-wirl-visit): those are wirl's own, and are dropped rather than sent. This tool cannot send a file or save an answer as bytes: body is sent as text, exactly as given (an @ in it is just a character), and a binary answer reports only its type and size. From a shell, wirl fetch --data @file sends a file and --output <file> saves the answer, each up to 100,000,000 bytes.`,
-    annotations: { title: "Request a page from a preview", readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
+    description: `Make one request to a preview and show what it answers: the status, the content type, and the body as text \u2014 the page source for HTML, so you can see what the app actually rendered and fix it. Use this after wirl_preview instead of asking the person to open the link and describe what they see. With live: true and no name it makes the request to the live app instead, as the person, after a deploy: only for someone who may deploy the app, the same people wirl_logs answers. A binary body reports its type and size, not its bytes. A text body over 100 KB is cut, and the answer says so. A stream (server-sent events, newline-delimited JSON, or any text still arriving after 10 seconds) is shown with the time each line arrived, as far as it got, and says whether it was still going: that is how to check a stream arrives piece by piece. A stream also comes back as data, in the result's structuredContent: the same lines as { atMs, text }, atMs being whole milliseconds from sending the request to the read that completed the line (lines that arrived together share one), the first ${STREAMED_DATA_MAX_LINES.toLocaleString("en-US")} lines or ${String(STREAMED_DATA_MAX_TEXT_BYTES / 1024)} KB of their text, whichever comes first (always at least the first line), with linesLeftOut counting any more (the text shows them all), and the status, the content type and the flags stillStreaming, bodyComplete, truncated and lastLineEnded; any other answer is the text alone. A preview's own database starts with the tables in migrations/ and no rows but the ones those files insert, so a page that expects rows may look blank until something writes to it, and its schedules do not run on a clock. A 401, or a redirect back to sign in, means the visit was refused or the preview has expired or been deleted, not that the app itself answered that way. The headers argument cannot set host, cookie, content-length, or any x-wirl-* header (including x-wirl-visit): those are wirl's own, and are dropped rather than sent. This tool cannot send a file or save an answer as bytes: body is sent as text, exactly as given (an @ in it is just a character), and a binary answer reports only its type and size. From a shell, wirl fetch --data @file sends a file and --output <file> saves the answer, each up to 100,000,000 bytes.`,
+    annotations: { title: "Request a page: preview or live app", readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: true },
     inputSchema: {
       type: "object",
       properties: {
         app: { type: "string", description: "The app slug the preview belongs to." },
-        name: { type: "string", description: "The preview's name, from wirl_preview or wirl_list_previews." },
+        name: { type: "string", description: "The preview's name, from wirl_preview or wirl_list_previews. Leave it out with live." },
+        live: { type: "boolean", description: "Request the live app instead of a preview, as the person. Only for someone who may deploy it; never with name." },
         path: { type: "string", description: 'The path to request, e.g. "/" or "/api/notes".' },
         method: { type: "string", description: "HTTP method. Defaults to GET, or POST when a body is given." },
         body: { type: "string", description: "Request body, sent as-is." },
@@ -8626,7 +8865,7 @@ var SHARED = [
         },
         org: ORG_ARG
       },
-      required: ["app", "name", "path"]
+      required: ["app", "path"]
     },
     answer: previewFetchAnswer,
     async handler(args, ctx) {
@@ -8692,8 +8931,12 @@ async function previewFetchAnswer(args, ctx) {
   const org = await defaultOrg(ctx.creds, str(args, "org"));
   const headersArg = args["headers"];
   const headers = headersArg !== null && typeof headersArg === "object" && !Array.isArray(headersArg) ? Object.fromEntries(Object.entries(headersArg).map(([k, v]) => [k, String(v)])) : void 0;
+  const live = args["live"] === true;
+  const name = str(args, "name");
+  if (live && name !== "") throw new CliError("live reads the live app and name a preview: give one of them, not both.");
+  if (!live && name === "") throw new CliError("Which preview? Give its name, or live: true for the live app.");
   const appsDomain = ctx.appsDomain ?? (await whoami(ctx.creds)).appsDomain;
-  const result2 = await previewFetch(ctx.creds, org, str(args, "app"), str(args, "name"), str(args, "path", "/"), {
+  const result2 = await fetchPage(ctx.creds, org, str(args, "app"), live ? null : name, str(args, "path", "/"), {
     appsDomain,
     ...ctx.networkFetch ? { networkFetchImpl: ctx.networkFetch } : {},
     ...ctx.now ? { now: ctx.now } : {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirl/mcp",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "MCP server for wirl: let your coding agent deploy what it just built, privately.",
   "keywords": [
     "mcp",