frontpage-host 0.1.16 → 0.1.18

package/dist/modules/commands.js

@@ -63,6 +63,13 @@ export const MODULE_COMMANDS = [
         extraActions: [
             "get [--instance <slug>]",
             "set --instance <slug> [--notify-email] [--confirm yes|no]",
+            "destinations [--instance <slug>]",
+            "connect-destination <privyr|hubspot|pipedrive> --token \"…\" [--lead-source \"…\"]",
+            "attach-destination --instance <slug> --provider <id>",
+            "detach-destination --instance <slug> --provider <id>",
+            "remove-destination <id> --yes",
+            "disconnect-destination <id> --yes",
+            "request-destination-setup <id> --reason \"…\"",
         ],
         notYet: [],
         examples: [
@@ -70,12 +77,16 @@ export const MODULE_COMMANDS = [
             "frontpage modules forms get",
             "frontpage modules forms get --instance lead-gen",
             "frontpage modules forms set --instance lead-gen --notify-email hi@example.com",
+            "frontpage modules forms destinations",
+            "frontpage modules forms connect-destination privyr --token \"…\"",
+            "frontpage modules forms attach-destination --instance lead-gen --provider privyr",
             "frontpage modules forms docs",
             `frontpage modules config forms --instance lead-gen --config '{"notifyEmail":"hi@example.com"}'`,
         ],
         notes: [
             "Without --instance, get lists each form (id, status, notifyEmail). Do not target `default`.",
             "Confirmation emails require a paid plan (same as Modules).",
+            "Destinations copy leads to HubSpot, Pipedrive, or Privyr. Connect once, then attach each form. Token write is admin (Privyr: paste the Incoming Webhook URL, not a token). request-destination-setup lights the editor amber bar (editor key). remove-destination requires --yes. Locations: https://frontpage.host/developers/modules#forms-destinations",
         ],
     },
     {
@@ -275,7 +286,19 @@ export function isCliModuleAction(key, action) {
     if (key === "google_reviews") {
         return GOOGLE_REVIEWS_CLI_ACTIONS.includes(action);
     }
-    if (key === "callbar" || key === "forms" || key === "booking" || key === "signups") {
+    if (key === "forms") {
+        return (TYPED_CONFIG_CLI_ACTIONS.includes(action) ||
+            [
+                "destinations",
+                "connect-destination",
+                "remove-destination",
+                "disconnect-destination",
+                "attach-destination",
+                "detach-destination",
+                "request-destination-setup",
+            ].includes(action));
+    }
+    if (key === "callbar" || key === "booking" || key === "signups") {
         return TYPED_CONFIG_CLI_ACTIONS.includes(action);
     }
     if (key === "payments" || key === "shop") {

package/dist/modules/forms_destinations.d.ts

@@ -0,0 +1,3 @@
+export declare const FORMS_DESTINATION_CLI_ACTIONS: readonly ["destinations", "connect-destination", "remove-destination", "disconnect-destination", "attach-destination", "detach-destination", "request-destination-setup"];
+export declare function isFormsDestinationCliAction(action: string): boolean;
+export declare function runFormsDestinations(slug: string, action: string, flags: string[]): Promise<number>;

package/dist/modules/forms_destinations.js

@@ -0,0 +1,147 @@
+/**
+ * §FD.CLI — form destination verbs.
+ */
+import { assertNoUnknownFlags, hasFlag, takeFlag } from "../argv.js";
+import { EXIT_OK, EXIT_USAGE, v1Get, v1Post } from "../http/client.js";
+import { emitOk, emitUsage, isJson } from "../runtime.js";
+import { formatModuleUsage } from "./commands.js";
+const USAGE = formatModuleUsage("forms");
+const REMOVE_CONFIRM = "This deletes the destination from Frontpage and stops every form from sending a copy. Your leads stay in Frontpage and still email you.";
+function pathFor(slug) {
+    return `/api/v1/sites/${encodeURIComponent(slug)}/modules/forms`;
+}
+export const FORMS_DESTINATION_CLI_ACTIONS = [
+    "destinations",
+    "connect-destination",
+    "remove-destination",
+    "disconnect-destination",
+    "attach-destination",
+    "detach-destination",
+    "request-destination-setup",
+];
+export function isFormsDestinationCliAction(action) {
+    return FORMS_DESTINATION_CLI_ACTIONS.includes(action);
+}
+function printDestinations(data, instanceFilter) {
+    const providers = data.destinations?.providers ?? [];
+    const connected = providers.filter((p) => p.connected);
+    if (!connected.length) {
+        console.log("(no destinations)");
+        return;
+    }
+    const by = data.destinations?.byInstance ?? {};
+    for (const p of connected) {
+        console.log(`${p.id.padEnd(10)}  connected  ${p.last4 ? `••••${p.last4}` : ""}`.trimEnd());
+        const slugs = instanceFilter ? [instanceFilter] : Object.keys(by);
+        for (const slug of slugs) {
+            const row = (by[slug] ?? []).find((r) => r.provider === p.id);
+            const sending = row?.enabled ? "sending" : "—";
+            const err = row?.lastError ? `  error  ${row.lastError}` : "";
+            if (instanceFilter && !row) {
+                console.log(`          ${slug.padEnd(16)}  —`);
+                continue;
+            }
+            if (!instanceFilter && !row)
+                continue;
+            console.log(`          ${slug.padEnd(16)}  ${sending}${err}`);
+        }
+    }
+}
+export async function runFormsDestinations(slug, action, flags) {
+    const work = [...flags];
+    if (action === "destinations") {
+        const instanceId = takeFlag(work, "--instance");
+        assertNoUnknownFlags(work, "modules");
+        const data = await v1Get(pathFor(slug));
+        if (isJson()) {
+            emitOk("modules", data.destinations ?? { providers: [], byInstance: {} });
+            return EXIT_OK;
+        }
+        printDestinations(data, instanceId);
+        return EXIT_OK;
+    }
+    if (action === "connect-destination") {
+        const provider = work.shift();
+        const token = takeFlag(work, "--token");
+        const leadSource = takeFlag(work, "--lead-source");
+        assertNoUnknownFlags(work, "modules");
+        if (!provider || !token) {
+            return emitUsage("modules", `Usage: frontpage modules forms connect-destination <privyr|hubspot|pipedrive> --token "…"\n\n${USAGE}`);
+        }
+        const data = await v1Post(pathFor(slug), {
+            action: "destination_connect",
+            provider,
+            token,
+            ...(leadSource ? { leadSource } : {}),
+        });
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        const last4 = typeof data.last4 === "string" ? data.last4 : "";
+        console.log(`Connected ${provider}${last4 ? `  ••••${last4}` : ""}.`);
+        return EXIT_OK;
+    }
+    if (action === "remove-destination" || action === "disconnect-destination") {
+        const provider = work.shift();
+        const yes = hasFlag(work, "--yes");
+        assertNoUnknownFlags(work, "modules");
+        if (!provider) {
+            return emitUsage("modules", `Usage: frontpage modules forms ${action} <privyr|hubspot|pipedrive> --yes\n\n${USAGE}`);
+        }
+        if (!yes) {
+            return emitUsage("modules", REMOVE_CONFIRM, EXIT_USAGE);
+        }
+        const data = await v1Post(pathFor(slug), {
+            action: "destination_remove",
+            provider,
+        });
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        console.log(`Removed ${provider}. Leads still land in Frontpage.`);
+        return EXIT_OK;
+    }
+    if (action === "attach-destination" || action === "detach-destination") {
+        const instanceId = takeFlag(work, "--instance");
+        const provider = takeFlag(work, "--provider") ?? work.shift();
+        assertNoUnknownFlags(work, "modules");
+        if (!instanceId || !provider) {
+            return emitUsage("modules", `Usage: frontpage modules forms ${action} --instance <slug> --provider <privyr|hubspot|pipedrive>\n\n${USAGE}`);
+        }
+        const data = await v1Post(pathFor(slug), {
+            action: action === "attach-destination" ? "destination_attach" : "destination_detach",
+            provider,
+            instanceId,
+        });
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        console.log(action === "attach-destination"
+            ? `${instanceId} will also send a copy to ${provider}.`
+            : `Stopped sending ${instanceId} to ${provider}.`);
+        return EXIT_OK;
+    }
+    if (action === "request-destination-setup") {
+        const provider = work.shift();
+        const reason = takeFlag(work, "--reason") ?? "";
+        assertNoUnknownFlags(work, "modules");
+        if (!provider || !reason) {
+            return emitUsage("modules", `Usage: frontpage modules forms request-destination-setup <privyr|hubspot|pipedrive> --reason "…"\n\n${USAGE}`);
+        }
+        const data = await v1Post(pathFor(slug), {
+            action: "destination_request_setup",
+            provider,
+            reason,
+        });
+        if (isJson()) {
+            emitOk("modules", data);
+            return EXIT_OK;
+        }
+        console.log(`Setup requested for ${provider}. The owner sees an amber prompt in the Frontpage editor.`);
+        return EXIT_OK;
+    }
+    return emitUsage("modules", `${USAGE}\n\nUnknown action "${action}".`);
+}

package/dist/modules/typed_config.js

@@ -46,17 +46,29 @@ function printConfirmable(config, confirmations) {
     else
         printLine("confirm", yesNo(on));
 }
-function printFormsList(instances) {
+function printFormsList(instances, destinations) {
     if (!instances.length) {
         console.log("(no forms)");
-        return;
     }
-    for (const i of instances) {
-        const id = i.instance ?? "";
-        const label = i.label && i.label !== id ? i.label : "";
-        const status = String(i.status ?? "—");
-        const email = typeof i.config?.notifyEmail === "string" ? i.config.notifyEmail : "(account email)";
-        console.log(`${id.padEnd(20)}  ${status.padEnd(12)}  ${label ? `${label}  ` : ""}${email}`);
+    else {
+        for (const i of instances) {
+            const id = i.instance ?? "";
+            const label = i.label && i.label !== id ? i.label : "";
+            const status = String(i.status ?? "—");
+            const email = typeof i.config?.notifyEmail === "string" ? i.config.notifyEmail : "(account email)";
+            const attached = (destinations?.byInstance?.[id] ?? [])
+                .filter((r) => r.enabled)
+                .map((r) => r.provider)
+                .join(",");
+            console.log(`${id.padEnd(20)}  ${status.padEnd(12)}  ${label ? `${label}  ` : ""}${email.padEnd(22)}  ${attached || "—"}`);
+        }
+    }
+    const connected = (destinations?.providers ?? []).filter((p) => p.connected);
+    if (connected.length) {
+        console.log("");
+        for (const p of connected) {
+            console.log(`${p.id} connected${p.last4 ? ` ••••${p.last4}` : ""}`);
+        }
     }
 }
 function parseYesNoFlag(raw, flag) {
@@ -81,7 +93,7 @@ export async function runTypedConfig(key, slug, action, flags) {
             return EXIT_OK;
         }
         if (key === "forms" && !instanceId) {
-            printFormsList(data.instances ?? []);
+            printFormsList(data.instances ?? [], data.destinations);
             return EXIT_OK;
         }
         if (key === "callbar")

package/dist/registry.js

@@ -104,7 +104,7 @@ export const COMMANDS = [
         flags: [
             "--site <slug>",
             "--message <text>",
-            "--wait: after push, wait until no agent run is queued/running/deploying (same as deploy wait; not a Vercel oracle)",
+            "--wait: after push, wait until the new commit's site compile is live (agent-run idle first, then GET /deploy ready)",
         ],
         dangers: [
             "Requires prior pull (baseCommitSha)",
@@ -249,10 +249,16 @@ export const COMMANDS = [
     {
         name: "publish",
         summary: "Promote staging to production",
-        usage: "frontpage publish [--site <slug>] [--json]",
+        usage: "frontpage publish [--site <slug>] [--wait] [--json]",
         topics: ["agent"],
+        examples: ["frontpage publish", "frontpage publish --wait"],
+        flags: [
+            "--wait: wait until the staging tip's site compile is live, then publish (refuses a previous build)",
+            "Prints tip SHA and serving SHA; warns if they differ",
+        ],
         dangers: [
-            "Promotes the current staging tip to PRODUCTION (custom domain)",
+            "Promotes the last ready staging compile to PRODUCTION (custom domain)",
+            "409 if the tip is not compiled yet — wait, then publish",
             "Agents: never run unless the user explicitly asked to publish",
         ],
         seeAlso: ["unpublish", "deploy"],
@@ -270,13 +276,14 @@ export const COMMANDS = [
     },
     {
         name: "deploy",
-        summary: "Wait for an in-flight build to finish (not publish)",
+        summary: "Wait for the current tip's site compile (not publish)",
         usage: "frontpage deploy wait [--site <slug>] [--json]",
         topics: ["agent"],
         flags: [
-            "Optional build wait only — staging is https://<subdomain>.frontpage.host",
+            "Waits for editor-agent idle (if a run is in flight), then until GET /deploy ready",
+            "ready = the live compile SHA equals the git tip — not a historical agent run",
             "Does NOT promote to production; use publish only when the user asks",
-            "Fail-closed: exit 2 when the waited run (or latest, if already idle) is failed/canceled",
+            "Fail-closed: exit 2 when the waited agent run is failed/canceled, or the compile fails or times out",
         ],
     },
     {
@@ -361,6 +368,24 @@ export const COMMANDS = [
         topics: ["agent", "content"],
         examples: ["frontpage extensions docs charts"],
     },
+    {
+        name: "images",
+        summary: "Generate 1–4 AI image variations of one prompt (counts against AI $ and storage)",
+        usage: 'frontpage images generate --prompt "…" [--count N] [--site <slug>] [--json]',
+        topics: ["content"],
+        examples: [
+            'frontpage images generate --prompt "flat illustration of a red stand mixer on marble"',
+            'frontpage images generate --prompt "watercolor cafe storefront at dusk" --count 4',
+        ],
+        flags: [
+            "One prompt; --count 1–4 is variations of that same picture (default 1)",
+            "Human success: sitePath first (markup-safe), then filename",
+            "Counts against the site AI $ budget and storage; 402 when the cycle is spent",
+            "--count outside 1–4 fails locally (exit 2) with no request",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["media", "prompt", "help content", "help site-building"],
+    },
     {
         name: "media",
         summary: "List or upload site media (images/PDF ≤25 MB, video ≤50 MB)",
@@ -388,6 +413,45 @@ export const COMMANDS = [
         topics: ["content"],
         dangers: ["--mark-read is side-effecting with no confirm"],
     },
+    {
+        name: "people",
+        summary: "List and manage site People (not inbox, not a module)",
+        usage: "frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide [--site <slug>] [--json]",
+        topics: ["content"],
+        examples: [
+            "frontpage people list",
+            "frontpage people add --email alex@example.com --name Alex",
+            "frontpage people set <id> --status working",
+            "frontpage people note <id> --body \"Called them\"",
+            "frontpage people follow-up <id> --at 2026-09-12T00:00:00Z",
+            "frontpage people hide <id>",
+        ],
+        flags: [
+            "list: --q --status --source --form-slug --follow-up due|upcoming|none --hidden --sort --last-seen-days --limit --cursor",
+            "add requires --email and/or --phone (never name alone)",
+            "Hide is not forget — unique email/phone stay; later ingest un-hides",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["inbox", "help content"],
+    },
+    {
+        name: "redirects",
+        summary: "List, set, or remove HTTP 301/308 path redirects",
+        usage: "frontpage redirects list | set --from /old --to /new [--status 301|308] | rm --from /old [--site <slug>] [--json]",
+        topics: ["content", "site-building"],
+        examples: [
+            "frontpage redirects list",
+            "frontpage redirects set --from /agents --to /agent",
+            "frontpage redirects set --from /old --to /new --status 308",
+            "frontpage redirects rm --from /old",
+        ],
+        flags: [
+            "Instant — no push or compile. Not a site file. frontpage revert does not undo a redirect.",
+            "Same-origin pathnames only. Status 301 (default) or 308. Cap 50 per site.",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["seo", "help site-building"],
+    },
     {
         name: "seo",
         summary: "Get or set page SEO",
@@ -477,13 +541,14 @@ export const TOPICS = {
   4. mkdir work && cd work && frontpage use <subdomain>
   5. frontpage pull
   6. Edit files under src/, public/, or content/
-  7. frontpage push --message "…"
-  8. Review staging: https://<subdomain>.frontpage.host when that subdomain is publicly shareable.
+  7. frontpage push --message "…" --wait
+  8. frontpage deploy wait         # tip compile ready (optional; push --wait does this)
+     Review staging: https://<subdomain>.frontpage.host when that subdomain is publicly shareable.
      With a custom domain connected, the subdomain is often owner-private (login wall ≠ failed push);
      anonymous review is on the published custom domain after publish.
-  9. frontpage publish             # ONLY if the user asked — promotes to production
+  9. frontpage publish [--wait]    # ONLY if the user asked — promotes the ready compile
 
-  Staging is the subdomain. There is no separate staging-deploy step for agents.
+  Push updates the git tip. The site compile is a second clock. deploy wait is not go-live.
   Never publish/unpublish unless the user explicitly asks.
   Agents: read AGENTS.md + frontpage help site-building; use --json for structured I/O.
   More: frontpage help auth | sync | site-building | agent | content | history | isolation | exit-codes`,
@@ -502,7 +567,7 @@ export const TOPICS = {
   frontpage status               # tipDrift when remote moved since last pull
   frontpage pull                 # downloads src/, public/, content/ into cwd
   frontpage diff                 # local vs remote via git blobSha (--json → dirty + tipDrift)
-  frontpage push [--message …] [--wait]   # uploads allowlisted files; CAS + active-run guard
+  frontpage push [--message …] [--wait]   # uploads allowlisted files; deletes remote-only allowlisted paths; CAS + active-run guard
   frontpage ls [prefix]
   frontpage cat <path>
   frontpage search <pattern> [path|--path <path>] [--regex] [--case-sensitive] [--whole-word] [--files-only]
@@ -511,7 +576,7 @@ export const TOPICS = {
   Local state: .frontpage/state.json { slug, baseCommitSha }
   Pull BEFORE EDITING when tip may have moved (UI agent / another checkout) — check tipDrift.
   Pull before push so CAS has baseCommitSha. Do not push while the editor agent is building.
-  --wait after push blocks until no agent run is queued/running/deploying (same as deploy wait).
+  --wait after push blocks until the new commit's site compile is live (agent idle, then GET /deploy ready).
   The UI/canvas agent does not use this CLI; only CLI checkouts need pull.
   Pushing module markup may auto-activate modules (same as the agent).
   tokens.ts may be auto-repaired at commit if it would break the build.
@@ -520,12 +585,15 @@ export const TOPICS = {
   Do not store secrets in the site tree (.env, *.pem, secrets/, credentials.json) — rejected by the API.
 
   Staging vs production:
-  - Push/prompt/edit update STAGING: https://<subdomain>.frontpage.host
-  - No separate "deploy to staging" step for agents — review the subdomain after the build.
-  - frontpage deploy wait only waits for an in-flight build; it is NOT go-live.
-  - frontpage publish promotes staging → production (custom domain). Never publish unless asked.`,
+  - Push/prompt/edit update the git tip. The site compile is a second clock.
+  - Review STAGING at https://<subdomain>.frontpage.host after GET /deploy is ready.
+  - frontpage deploy wait = agent-run idle (if any) + tip compile ready. It is NOT go-live.
+  - A file-only push has no agent run. deploy wait / push --wait must still wait for the compile.
+  - frontpage publish promotes the last ready staging compile. 409 if the tip is not built yet.
+  - frontpage publish --wait waits for that compile, then publishes. Never publish unless asked.`,
     "site-building": `Site building (Astro contract)
-  Stack: Astro 6 + Tailwind v4. Pages in src/pages/. Every page wraps <BaseLayout title description>.
+  Stack: Astro 6 + Tailwind v4. Pages in src/pages/. Every page wraps <BaseLayout title description>,
+  or a site layout that itself wraps BaseLayout.
   Control files: src/config/tokens.ts (design tokens), src/config/site.ts (title, nav, pages map, seo).
 
   Pages map:
@@ -537,8 +605,15 @@ export const TOPICS = {
   Hard fences:
   - No API routes, serverless backends, or databases.
   - No fake lead forms / checkout / card fields — use data-fp-* modules + frontpage modules, or refuse.
+  - Quoted attributes: in frontmatter JS, a backslash-quote is an escape. In an Astro attribute it is
+    not. The quote after href= closes the string and the next token fails the compile. Put HTML in a
+    frontmatter const and pass it as an expression (auditBody={auditBody}), or use an expression
+    attribute. Never put an HTML tag or a backslash-quote inside a quoted JSX attribute.
   - Platform-owned paths are not syncable (BaseLayout overlay, module/extension shells, package.json…).
-  - Customer layouts (DocsLayout, GuideLayout, …) are fine when site-owned.
+  - Customer layouts (DocsLayout, GuideLayout, …) are fine when site-owned. A wrapper MUST render
+    <BaseLayout> and forward SEO: description={description}, ogImage={ogImage}, and
+    title={seoTitle ?? derivedFallback} from a 1:1 Astro.props destructure. NEVER title={pageTitle}
+    with no seoTitle alias (locks Title/Share image in Search & Social for every page on that layout).
 
   Tokens & fonts:
   - Keep required colors/fonts/spacing/radii keys; style via CSS variables / token Tailwind.
@@ -552,11 +627,13 @@ export const TOPICS = {
   - Prefer src/components/Header.astro + Footer.astro (or chrome: { managed: true } in site.ts).
   - seo block in site.ts + frontpage seo get|set; customize 404.astro but keep frontpage:404 meta;
     never put /404 in nav or pages. robots/sitemap are platform-managed.
+  - Real HTTP 301/308s: frontpage redirects list|set|rm. Instant (no push). Do not ship Astro.redirect,
+    location.replace, or a meta refresh for a permanent move. frontpage revert does not undo redirects.
 
   Modules & articles (short):
   - Forms: <form data-fp-form="slug"> with named inputs; no action/onsubmit/honeypot.
   - Articles: frontpage articles …; migrate folders via frontpage prompt (don't invent mass delete+write).
-  - Media: frontpage media upload (images/PDF ≤25 MB, video ≤50 MB). Use sitePath /__media/uploads/<slug>/… in markup (not raw blob URLs). Optional ?w= on rasters only.
+  - Media: frontpage media upload (images/PDF ≤25 MB, video ≤50 MB). frontpage images generate --prompt "…" [--count N] for 1–4 AI variations of one invented picture (AI $ + storage). Use sitePath /__media/uploads/<slug>/… in markup (not raw blob URLs). Optional ?w= on rasters only.
 
   Full guide: https://frontpage.host/developers/site-building
   See also: frontpage help sync | content | AGENTS.md`,
@@ -568,8 +645,8 @@ export const TOPICS = {
   frontpage runs wait [runId]    # failed/canceled → exit 2; JSON ok:false + run.error
   frontpage runs cancel <runId>
   frontpage runs retry <runId>
-  frontpage deploy wait          # optional build wait; fail-closed on failed/canceled; NOT publish
-  frontpage publish              # ONLY if the user asked — production promote
+  frontpage deploy wait          # agent idle + tip compile ready; fail-closed; NOT publish
+  frontpage publish [--wait]     # ONLY if the user asked — promotes the ready compile
   frontpage unpublish --yes      # admin only; never unless asked; --yes when non-TTY
   frontpage usage
   frontpage analytics [--days 7]
@@ -589,8 +666,11 @@ export const TOPICS = {
   Do not publish unless asked.`,
     content: `Content
   frontpage media list|upload <file>   # images/PDF/video; text/CSV = inline not library; sitePath first when stored
+  frontpage images generate --prompt "…" [--count N]  # 1–4 AI variations of one prompt; sitePath first; AI $ + storage
   frontpage inbox [leads|subscribers|orders|google_reviews|…] [--mark-read] [--csv]
+  frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide
   frontpage seo get [/path|--path /path] | seo set --path /
+  frontpage redirects list|set|rm --from /old --to /new
   frontpage articles list|content|create-section|create-article|set-draft|…
   frontpage fonts [list|search] [--slot …] [--query …]
   frontpage tokens set --group … --key … --value …
@@ -619,7 +699,8 @@ export const TOPICS = {
   revert creates a NEW commit whose tree matches the target (linear restore).
   Target SHA must be on this site's history (not another site in the monorepo).
   Refused while an agent run is active. Goes through commitSiteBranch (build gate).
-  --yes required when stdin is not a TTY.`,
+  --yes required when stdin is not a TTY.
+  revert does not undo HTTP redirects — use frontpage redirects rm.`,
     isolation: `Isolation
   Every site-scoped call targets subdomain → branch site/<slug> only.
   No client-supplied branch, ref, repo, or clone URL is accepted.

package/llms.txt

@@ -1,6 +1,7 @@
 # Frontpage CLI (frontpage-host)
 
 - Package: frontpage-host (npm). Binary: frontpage. Do NOT install npm package "frontpage".
+- Astro quoted attributes: in frontmatter JS a backslash-quote is an escape; in an attribute it is not. Pass HTML as {auditBody}. Never HTML or a backslash-quote inside a quoted JSX attribute.
 - Docs in this package: README.md, AGENTS.md (agent operating manual).
 - Introspect: frontpage help | frontpage help --json | frontpage help <topic|command>
 - Topics: quickstart, auth, sync, site-building, agent, content, history, isolation, exit-codes
@@ -8,20 +9,22 @@
 - Fonts: frontpage fonts [--slot] [--query] → exact value → tokens set fonts.<role> → APPLY font-sans|serif|mono|display. Build bundles catalog faces from tokens.ts and/or CSS font-family contexts (not prose). Inline-only without tokens works for catalog faces after rebuild; prefer tokens+utilities for brand roles.
 - Module/extension docs: frontpage modules docs <key> | frontpage extensions docs <key>
 - Search flags: --regex --case-sensitive --whole-word --files-only --context-lines --max-results
-- Modules setup: wizard modules (payments/shop/ordering): frontpage modules <key> connect [--no-open] opens Frontpage (logged-in browser) then Stripe/Square; already-connected stays live. payments/shop connect = admin key; ordering = editor. payments disconnect 409s if shop still uses the shared Stripe account. request-setup remains valid for the editor amber bar. frontpage modules <key> prints that key's CLI usage. Index: https://frontpage.host/developers/modules. Typed config: frontpage modules callbar|forms|booking|signups get|set (forms set needs --instance; confirm emails paid-plan only). google_reviews: frontpage modules google_reviews connect --place-id | --maps-url (server resolve + seed; no Autocomplete; do not write placeId via config). Also status, list-reviews, hide/show, set-stars, set-sort, set-weight, reset-weights, refresh, disconnect. Docs: https://frontpage.host/developers/modules/google-reviews. Markup: data-fp-google-reviews / data-fp-google-ask + required data-fp-requires="google_reviews". Ask scores: frontpage inbox google_reviews.
+- Modules setup: wizard modules (payments/shop/ordering): frontpage modules <key> connect [--no-open] opens Frontpage (logged-in browser) then Stripe/Square; already-connected stays live. payments/shop connect = admin key; ordering = editor. payments disconnect 409s if shop still uses the shared Stripe account. request-setup remains valid for the editor amber bar. frontpage modules <key> prints that key's CLI usage. Index: https://frontpage.host/developers/modules. Typed config: frontpage modules callbar|forms|booking|signups get|set (forms set needs --instance; confirm emails paid-plan only). Form destinations: frontpage modules forms destinations|connect-destination|attach-destination|detach-destination|remove-destination --yes|request-destination-setup (token = admin; request-destination-setup lights the editor bar; request-setup forms is a no-op; connect does not attach every form). Privyr: paste Incoming Webhook URL (https://www.privyr.com/api/v1/incoming-leads/…), not a token. HubSpot: Development → Keys → Service keys or Legacy apps → Auth → Show token. Pipedrive: profile → Company settings → Personal preferences → API. Docs: https://frontpage.host/developers/modules#forms-destinations. google_reviews: frontpage modules google_reviews connect --place-id | --maps-url (server resolve + seed; no Autocomplete; do not write placeId via config). Also status, list-reviews, hide/show, set-stars, set-sort, set-weight, reset-weights, refresh, disconnect. Docs: https://frontpage.host/developers/modules/google-reviews. Markup: data-fp-google-reviews / data-fp-google-ask + required data-fp-requires="google_reviews". Ask scores: frontpage inbox google_reviews.
 - Analytics ops: frontpage analytics summary|query|funnel|timeseries|compare|sql (bare analytics = dashboard)
 - Media: frontpage media upload <file> (images/PDF ≤25 MB, video ≤50 MB, SVG/text ≤4 MB); human prints sitePath first — use /__media/uploads/<slug>/… in markup. Text/CSV is inline only (not media library; --json omits full content).
 - Prompt attachments: frontpage prompt "…" --attach <file|/__media/…|https://…> [--asset-url https://…] (same media caps as media upload)
 - Version: frontpage --version | -V | version
 - SEO get: frontpage seo get [/path|--path /path]; search path filter: [path|--path <path>]; open [/path|--path /path]
+- Redirects: frontpage redirects list|set|rm — HTTP 301/308, instant, not a file; revert does not undo; do not fake with Astro.redirect / meta refresh
+- People: frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide — site-scoped person graph (email or phone). Inbox stays the raw ledger. Hide is not forget. Unknown leftover flags fail closed.
 - Analytics funnel: --steps JSON array or comma paths (/, /pricing); bad JSON → Invalid JSON for --steps
 - Modules: unknown key errors list Known: …; mailing list module key is signups (not subscribe)
-- Errors: --json API envelopes include requestId when the server returned one; local validation omits requestId/httpStatus; runs wait failed/canceled → ok:false + run.error (exit 2); deploy wait fail-closed; push --wait
+- Errors: --json API envelopes include requestId when the server returned one; local validation omits requestId/httpStatus; runs wait failed/canceled → ok:false + run.error (exit 2); deploy wait = agent idle + tip compile ready (fail-closed / compile timeout → exit 2); push --wait and publish --wait wait for GET /deploy ready
 - Auth: mint fp_live_ key in Frontpage UI (Developers); frontpage login KEY or FRONTPAGE_API_KEY
 - Site id: subdomain only (frontpage use <subdomain>). Not custom domains.
-- Staging: https://<subdomain>.frontpage.host — push/prompt/edit update staging; no separate staging deploy step. With a custom domain, subdomain may be owner-private (login wall ≠ failed push); public review is published custom domain.
-- Production: custom domain after frontpage publish — NEVER publish/unpublish unless the user explicitly asks
+- Three clocks: git tip (push/prompt/edit) ≠ site compile (GET /deploy ready) ≠ editor agent run (runs wait). File-only push has no agent run.
+- Production: frontpage publish promotes the last ready compile (409 if tip not built). frontpage publish --wait waits then publishes. NEVER publish/unpublish unless the user explicitly asks. Verify live <meta name="frontpage:commit">.
 - Sync: allowlist src/ public/ content/; platform overlay + secret-like paths rejected; pull before edit if tip may have moved (status/diff tipDrift); pull → edit → diff (blobSha) → push [--wait] (CAS); no push during active agent run; UI agent does not use CLI pull; review on subdomain
 - Machine: global --json / --quiet; exit 0/2/3/4/5 (see help exit-codes)
-- deploy wait = optional build wait only (fail-closed on failed/canceled); it is NOT go-live / publish
+- deploy wait = agent-run idle (if any) + tip compile ready; it is NOT go-live / publish
 - No runs continue, domains, billing, members, MCP, or git remotes in v1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontpage-host",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "Frontpage CLI — manage your site from the terminal",
   "type": "module",
   "bin": {