deployai 0.1.0-beta.10 → 0.1.0-beta.11

package/dist/index.js

@@ -205,6 +205,14 @@ var ISSUES = [
     fixForAgent: "A custom server that listens on a port cannot run here. Move the routes to Hono (very similar to Express and runs on Cloudflare Workers) or to Astro API routes, and remove app.listen."
   },
   // Warnings
+  {
+    code: "email_smtp",
+    severity: "warning",
+    titleEn: "Sends email through SMTP, which does not run here",
+    titleHe: "\u05E9\u05D5\u05DC\u05D7 \u05DE\u05D9\u05D9\u05DC \u05D3\u05E8\u05DA SMTP, \u05E9\u05DC\u05D0 \u05E2\u05D5\u05D1\u05D3 \u05D0\u05E6\u05DC\u05E0\u05D5",
+    agentLine: "The site sends email with{detail}, which needs SMTP. SMTP does not run on DeployAI, so the email part will fail.",
+    fixForAgent: "For email to the site owner (a form answer, a new order), use the built-in email: POST JSON { subject, text, replyTo } to `${DEPLOYAI_API}/api/site/notify` with Authorization: Bearer DEPLOYAI_KEY, with no keys to ask for. For email to customers, use an HTTP email API (Resend, Postmark) with its key set by npx deployai@latest env set. Remove the SMTP library."
+  },
   {
     code: "no_build_script",
     severity: "warning",
@@ -925,6 +933,19 @@ var ISSUE_HELP = {
       fix: ["Move the routes to Hono, which is very similar to Express and works on DeployAI.", "Or to Astro API routes.", "Delete the line that starts the server (app.listen)."]
     }
   },
+  email_smtp: {
+    he: {
+      what: "\u05D4\u05D0\u05EA\u05E8 \u05E9\u05D5\u05DC\u05D7 \u05DE\u05D9\u05D9\u05DC \u05D3\u05E8\u05DA SMTP (\u05DC\u05DE\u05E9\u05DC \u05E2\u05DD nodemailer).",
+      why: "\u05D6\u05D5 \u05D0\u05D6\u05D4\u05E8\u05D4. \u05D4\u05D0\u05EA\u05E8 \u05E2\u05D5\u05DC\u05D4, \u05D0\u05D1\u05DC SMTP \u05DC\u05D0 \u05E2\u05D5\u05D1\u05D3 \u05D0\u05E6\u05DC\u05E0\u05D5, \u05D0\u05D6 \u05D4\u05DE\u05D9\u05D9\u05DC\u05D9\u05DD \u05DC\u05D0 \u05D9\u05D9\u05E9\u05DC\u05D7\u05D5.",
+      fix: ["\u05DE\u05D9\u05D9\u05DC \u05D0\u05DC\u05D9\u05DB\u05DD, \u05DC\u05DE\u05E9\u05DC \u05E2\u05DC \u05D8\u05D5\u05E4\u05E1 \u05E9\u05DE\u05D5\u05DC\u05D0: \u05D4\u05DE\u05D9\u05D9\u05DC \u05D4\u05DE\u05D5\u05D1\u05E0\u05D4 \u05E9\u05DC DeployAI, \u05D1\u05DC\u05D9 \u05E1\u05E4\u05E7 \u05DE\u05D9\u05D9\u05DC \u05D5\u05D1\u05DC\u05D9 \u05DE\u05E4\u05EA\u05D7\u05D5\u05EA.", "\u05DE\u05D9\u05D9\u05DC \u05DC\u05DC\u05E7\u05D5\u05D7\u05D5\u05EA: \u05E9\u05D9\u05E8\u05D5\u05EA \u05DE\u05D9\u05D9\u05DC \u05D3\u05E8\u05DA HTTP, \u05DB\u05DE\u05D5 Resend \u05D0\u05D5 Postmark."],
+      prompt: "\u05D4\u05D0\u05EA\u05E8 \u05E9\u05D5\u05DC\u05D7 \u05DE\u05D9\u05D9\u05DC \u05D3\u05E8\u05DA SMTP, \u05E9\u05DC\u05D0 \u05E2\u05D5\u05D1\u05D3 \u05D1\u05BEDeployAI. \u05DC\u05DE\u05D9\u05D9\u05DC \u05D0\u05DC\u05D9\u05D9 (\u05D8\u05D5\u05E4\u05E1 \u05E9\u05DE\u05D5\u05DC\u05D0, \u05D4\u05D6\u05DE\u05E0\u05D4 \u05D7\u05D3\u05E9\u05D4) \u05D4\u05E9\u05EA\u05DE\u05E9 \u05D1\u05DE\u05D9\u05D9\u05DC \u05D4\u05DE\u05D5\u05D1\u05E0\u05D4: POST \u05E2\u05DD JSON { subject, text, replyTo } \u05D0\u05DC ${DEPLOYAI_API}/api/site/notify \u05E2\u05DD \u05D4\u05DB\u05D5\u05EA\u05E8\u05EA Authorization: Bearer DEPLOYAI_KEY. \u05DC\u05DE\u05D9\u05D9\u05DC \u05DC\u05DC\u05E7\u05D5\u05D7\u05D5\u05EA \u05D4\u05E9\u05EA\u05DE\u05E9 \u05D1\u05BEResend \u05D0\u05D5 Postmark \u05D3\u05E8\u05DA HTTP. \u05D4\u05E1\u05E8 \u05D0\u05EA \u05E1\u05E4\u05E8\u05D9\u05D9\u05EA \u05D4\u05BESMTP."
+    },
+    en: {
+      what: "The site sends email through SMTP (for example with nodemailer).",
+      why: "This is a warning. The site goes live, but SMTP does not run here, so the emails will not be sent.",
+      fix: ["Email to you, for example on a form answer: the DeployAI built-in email, with no email provider and no keys.", "Email to customers: an email service over HTTP, like Resend or Postmark."]
+    }
+  },
   no_build_script: {
     he: {
       what: "\u05D1\u05E7\u05D5\u05D1\u05E5 package.json \u05D0\u05D9\u05DF \u05E4\u05E7\u05D5\u05D3\u05EA build, \u05D4\u05E4\u05E7\u05D5\u05D3\u05D4 \u05E9\u05D1\u05D5\u05E0\u05D4 \u05D0\u05EA \u05D4\u05D0\u05EA\u05E8.",
@@ -21324,7 +21345,7 @@ var LOGIN = { cmd: "npx deployai@latest login", say: "The owner approves it in t
 var STATUS = { cmd: "npx deployai@latest status", say: "Run it until the new version is ready, then send the owner the preview address." };
 var PROMOTE = { cmd: "npx deployai@latest promote v<N>", say: "Only after the owner approves the preview. N is the version number deploy printed. Then give the owner the live address." };
 var DEPLOY_SAY = "It builds a preview first. Write the -m message in a few words in the language of the owner, about what they see changed.";
-var BUILD = { say: `Build the owner's site in this folder in place of the starter page, as the instructions above say, following README.md "Before you go live". Run check only after that.` };
+var BUILD = { say: "This folder had no site, so start wrote a starter page. Do not ask where the site comes from or which way to start: build a first version of the owner's site in its place now. Use what you know (the instructions above, .deployai/brief.md if it exists, the folder name) and choose the layout, colors and wording yourself. Ask at most one short question, and only if you cannot tell what the site is for. Leave out what you do not know (phone, prices, hours) instead of asking for it. Then show it to the owner and offer to add those details. Run check only after that." };
 var PULL = { cmd: "npx deployai@latest pull", say: "This folder was empty, so it downloads the code of the live site first. Work on that code." };
 function startSteps(kind, opts = {}) {
   switch (kind) {
@@ -21346,7 +21367,8 @@ function startSteps(kind, opts = {}) {
       ];
     case "guest":
       return [
-        { ...CHECK, say: "Fix every blocker it lists, then run it again until it shows none. If the site needs environment variables, secrets, file storage or sending email, stop and tell the owner it needs a free account." },
+        ...opts.starter ? [BUILD] : [],
+        { ...CHECK, say: "Fix every blocker it lists, then run it again until it shows none. If the site needs environment variables, secrets, file storage or sending email, never stop building for it: tell the owner once, in one plain line, that putting those parts live needs a free account (one link, about a minute), keep building what they asked, and ask about the account only at the deploy step." },
         ASK,
         { cmd: "npx deployai@latest deploy --guest", say: "It prints the address, the claim link and any owner keys." },
         { say: "The site goes live about a minute later: wait, then open the address to see it is live before you tell the owner." },
@@ -21355,6 +21377,8 @@ function startSteps(kind, opts = {}) {
       ];
   }
 }
+var allowCommandsUrl = (lang = "he") => `${HELP_ORIGIN}${lang === "he" ? "" : "/en"}/connect-ai#allow`;
+var runCommandsRule = (lang = "he") => `Run every npx deployai@latest command yourself. If your tool asks before it runs one, ask the owner one short yes or no question that names the command, for example "Run npx deployai@latest check? (yes or no)", and run it when they say yes. Never ask the owner to copy, paste or type a command. Never change your tool's own settings to allow it. If it is still blocked after their yes, tell them in plain words and send them ${allowCommandsUrl(lang)}, which shows them the one setting that allows it.`;
 var START_FAIL_LINE = "If anything fails, tell the owner in plain words what happened and what you will do next.";
 
 // ../shared/src/cli-map.ts
@@ -21657,7 +21681,9 @@ var BUILD_WITH = [
   "Settings and secrets: environment variables, set with: npx deployai@latest env set <key>",
   "Images: resize at build time or serve them as they are; no native image modules at runtime.",
   "Passwords: bcryptjs or Web Crypto, never native bcrypt.",
-  "Server code runs per request: no long-running processes, background servers or child processes."
+  "Server code runs per request: no long-running processes, background servers or child processes.",
+  // D-535: the agent knows our built-in email, so it never adds an email provider or asks the owner for keys to email them.
+  "Email to the site owner (a form answer, a new order): the built-in email, with no email provider or keys. POST JSON { subject, text, replyTo } to `${DEPLOYAI_API}/api/site/notify` with the header Authorization: Bearer DEPLOYAI_KEY (both are environment variables every upload gets). It reaches only the owner. On a temporary site it works once the owner has a free account: keep building, and say so only when it is time to go live. Email to customers needs an HTTP email API (Resend, Postmark), never SMTP."
 ];
 var KEEP_DATA_RULES = [
   "Moving to DeployAI changes where data lives. It never moves the data by itself. Before you switch any of these, save a copy inside the project and tell the user, in simple words, what was saved and where:",
@@ -22172,7 +22198,7 @@ function messages(root) {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.1.0-beta.10";
+var CLI_VERSION = "0.1.0-beta.11";
 
 // src/api.ts
 function apiContext(apiFlag) {
@@ -22933,6 +22959,8 @@ function analyzeProject(root) {
   if (framework.id === "unknown" && !otherStack && !empty) {
     add({ code: "unknown_framework", severity: "warning", detail: framework.flavor ? ` (looks like ${framework.flavor})` : "" });
   }
+  const smtp = ["nodemailer", "emailjs", "smtp-client"].find((d) => deps[d]);
+  if (smtp) add({ code: "email_smtp", severity: "warning", file: "package.json", detail: ` ${smtp}` });
   const hasBuildScript = Boolean(pkg?.scripts?.build);
   if (pkg && !hasBuildScript && framework.id !== "static" && framework.id !== "hono") {
     add({ code: "no_build_script", severity: "warning", file: "package.json" });
@@ -23052,6 +23080,12 @@ To start from working code, see the samples: npx deployai@latest samples
 
 ${KEEP_DATA_RULES.join("\n")}
 
+## Running DeployAI commands
+
+${runCommandsRule()}
+
+Never stop building for an account, a plan or a limit. Build what the owner asks; say once, in one plain line, what going live will need, and ask about it only at the deploy step.
+
 ## Check
 
 Before adding a dependency or a new server feature, run: npx deployai@latest check
@@ -23141,7 +23175,8 @@ var PROMPT_RULES = [
   "Never add credentials to source code.",
   "Explain every step to the user in simple words, in the language they write to you in.",
   "For the database, use D1 as shown in the DeployAI CRUD sample.",
-  "Follow DEPLOYAI.md for every future change. If it is missing, run: npx deployai@latest init"
+  "Follow DEPLOYAI.md for every future change. If it is missing, run: npx deployai@latest init",
+  runCommandsRule()
 ];
 var DATA_CODES = /* @__PURE__ */ new Set(["fs_write", "unsupported_db_postgres", "unsupported_db_mysql", "unsupported_db_mongodb", "unsupported_db_sqlite_file", "native_module_bcrypt"]);
 var MAX_LOCATIONS = 3;
@@ -24144,7 +24179,7 @@ DeployAI wrote this page so the folder starts as a working site. Build the owner
 
 ## Before you go live
 
-- Replace \`index.html\` with the owner's real site, in the languages they want. Keep it static HTML and CSS unless the site needs server code (forms, logins, data): then follow the stack in DEPLOYAI.md.
+- Replace \`index.html\` with a first version of the owner's site right away, from what you know: one short question at most, details you do not have left out until the owner sees it. Keep it static HTML and CSS unless the site needs server code (forms, logins, data): then follow the stack in DEPLOYAI.md.
 - Nothing from this starter stays: no "coming soon" text goes live.
 - Delete this README or replace it with notes about the site.
 `;
@@ -24186,7 +24221,7 @@ async function startCommand(cwd, ctx, id, opts = {}) {
   const root = fresh && filesIn(here).length && !opts.here && !sameSite ? freeFolder(here, choices.slug ?? sample?.key ?? "site") : here;
   const done = [];
   const empty = !filesIn(root).length;
-  const starter = kind === "new" && !sample && empty;
+  const starter = (kind === "new" || kind === "guest") && !sample && empty;
   const steps = startSteps(kind, { emptyFolder: kind === "update" && empty, starter });
   updateProject(root, { lang: langOf(choices.ownerLanguage) });
   const t = messages(root);
@@ -24232,6 +24267,7 @@ ${choices.brief}
   out("Then, in this order:");
   steps.forEach((s, i) => out(`${i + 1}. ${s.cmd ? `Run ${s.cmd}. ` : ""}${s.say}`));
   out();
+  out(runCommandsRule(langOf(choices.ownerLanguage)));
   out(START_FAIL_LINE);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deployai",
-  "version": "0.1.0-beta.10",
+  "version": "0.1.0-beta.11",
   "description": "Check a site built with an AI editor, see what has to change, and publish it to DeployAI. Hebrew first.",
   "keywords": [
     "deployai",
@@ -22,8 +22,7 @@
   "homepage": "https://deployai.co.il/developers",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/yobotn/deployai.git",
-    "directory": "packages/cli"
+    "url": "git+https://github.com/yobotn/deployai-cli.git"
   },
   "license": "MIT",
   "author": "DeployAI <info@deployai.co.il>",
@@ -39,23 +38,5 @@
   },
   "dependencies": {
     "commander": "15.0.0"
-  },
-  "devDependencies": {
-    "@deployai/shared": "0.1.0",
-    "@eslint/js": "9.39.5",
-    "eslint": "9.39.5",
-    "typescript-eslint": "8.71.1",
-    "typescript": "^5",
-    "vitest": "5.0.3",
-    "tsx": "^4",
-    "tsup": "^8",
-    "@types/node": "^22"
-  },
-  "scripts": {
-    "start": "tsx src/index.ts",
-    "build": "tsup",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "lint": "eslint"
   }
-}
+}