frontpage-host 0.1.17 → 0.1.18

package/AGENTS.md

@@ -93,10 +93,11 @@ Rules:
 2. **Pull before push** so `baseCommitSha` is set (CAS). Still required even if you already pulled to edit.
 3. **Do not push** while an agent run is active (`status` / `runs`).
 4. Push updates **staging** (subdomain). Production is unchanged until someone runs `publish`.
-5. Pushing module markup may auto-activate modules (same as the editor agent).
-6. Binaries use base64; do not UTF-8 round-trip them.
-7. After push, wait for the site compile (`frontpage push --wait` or `frontpage deploy wait`) before reviewing or publishing. Verify `<meta name="frontpage:commit">` when checking production.
-8. The **UI / canvas agent does not use this CLI** — it edits the live tip in-process. Only CLI checkouts need `pull`.
+5. A local delete of an allowlisted path is part of the next push (remote-only files are sent as deletes). `frontpage diff` shows them as `D`.
+6. Pushing module markup may auto-activate modules (same as the editor agent).
+7. Binaries use base64; do not UTF-8 round-trip them.
+8. After push, wait for the site compile (`frontpage push --wait` or `frontpage deploy wait`) before reviewing or publishing. Verify `<meta name="frontpage:commit">` when checking production.
+9. The **UI / canvas agent does not use this CLI** — it edits the live tip in-process. Only CLI checkouts need `pull`.
 
 ## Site contract (Astro)
 
@@ -106,10 +107,12 @@ Sites are Astro 6 + Tailwind v4. More detail: `frontpage help site-building` or
 2. **`src/config/site.ts`** — keep `pages` (path registry) and `nav` in sync when adding/renaming/deleting page files. Tab title comes from BaseLayout, not the `pages` map label.
 3. **One file per URL** for similar page sets (services, guides, …). Do not default to `getStaticPaths()` over `src/data/*.ts`. Blog/news → `frontpage articles`, not a hand-rolled catalog.
 4. **No backends / databases / fake forms or checkout.** Real forms use `<form data-fp-form="slug">` + `frontpage modules`. Refuse or use modules for payments.
-5. **Tokens** in `src/config/tokens.ts` — keep required color/font/spacing/radii keys; style via CSS variables / token Tailwind. **Fonts load rule:** the build bundles catalog faces when the family string appears in `tokens.ts` and/or in a real CSS `font-family` / `fontFamily` / `font-['…']` context under `src/pages|components|styles` — not from prose alone. Preferred path: `frontpage fonts` → exact `value` → `frontpage tokens set --group fonts --key <role> --value "…"` → **APPLY** `font-sans` / `font-serif` / `font-mono` / `font-display` (or `var(--font-*)`) on elements. Inline catalog `font-family` accents can bundle after rebuild, but brand roles still prefer tokens + utilities. Off-catalog families silently fall back to system fonts (push may warn). Module how-tos: `frontpage modules docs <key>` / `frontpage extensions docs <key>`.
-6. **Shared chrome** — prefer `src/components/Header.astro` + `Footer.astro` (or `chrome: { managed: true }` in `site.ts`).
-7. **404** — customize `src/pages/404.astro` if needed; keep `frontpage:404` meta; never register `/404` in `nav`/`pages`.
-8. **Platform-owned paths** stay off-limits (BaseLayout overlay, module/extension shells, `package.json`, …). Customer layouts like `DocsLayout` / `GuideLayout` are OK.
+5. **Quoted attributes vs frontmatter.** In frontmatter JavaScript, a backslash-quote is an escape. In an Astro attribute it is not — the quote after `href=` closes the string and the next token fails the compile. Put HTML in a frontmatter const and pass it as an expression (`auditBody={auditBody}`), or use an expression attribute. Never put an HTML tag or a backslash-quote inside a quoted JSX attribute.
+6. **Tokens** in `src/config/tokens.ts` — keep required color/font/spacing/radii keys; style via CSS variables / token Tailwind. **Fonts load rule:** the build bundles catalog faces when the family string appears in `tokens.ts` and/or in a real CSS `font-family` / `fontFamily` / `font-['…']` context under `src/pages|components|styles` — not from prose alone. Preferred path: `frontpage fonts` → exact `value` → `frontpage tokens set --group fonts --key <role> --value "…"` → **APPLY** `font-sans` / `font-serif` / `font-mono` / `font-display` (or `var(--font-*)`) on elements. Inline catalog `font-family` accents can bundle after rebuild, but brand roles still prefer tokens + utilities. Off-catalog families silently fall back to system fonts (push may warn). Module how-tos: `frontpage modules docs <key>` / `frontpage extensions docs <key>`.
+7. **Shared chrome** — prefer `src/components/Header.astro` + `Footer.astro` (or `chrome: { managed: true }` in `site.ts`).
+8. **404** — customize `src/pages/404.astro` if needed; keep `frontpage:404` meta; never register `/404` in `nav`/`pages`.
+9. **Redirects** — real 301/308s are `frontpage redirects list|set|rm`, not site files. `set --from /old --to /new` is instant (no push/build). Do not ship `Astro.redirect`, `location.replace`, or meta refresh for a permanent move. `frontpage revert` does not undo redirects; `redirects rm` does.
+10. **Platform-owned paths** stay off-limits (BaseLayout overlay, module/extension shells, `package.json`, …). Customer layouts like `DocsLayout` / `GuideLayout` are OK.
 
 ## Modules & articles
 
@@ -122,6 +125,7 @@ Sites are Astro 6 + Tailwind v4. More detail: `frontpage help site-building` or
 - Media: `frontpage media upload <file>` — images/PDF ≤25 MB, video (MP4/WebM/MOV) ≤50 MB, SVG/text ≤4 MB (sanitizing proxy). Human output prints `sitePath:` first (use that in markup — never raw blob hosts), then optional `url:`. Optional `?w=` on rasters only. **Text/CSV** uploads are inline only — **not** added to the media library and **cannot** be linked via `/__media` (`media upload --json` omits full `content`; use `inbox … --csv` for submission exports).
 - Generated images: `frontpage images generate --prompt "…"` `[--count N]` — one prompt, 1–4 variations of that same picture. Prints `sitePath:` first. Counts against AI $ and storage. Flag-off environments return 404 (`Image generation is not enabled.`). Do not call xAI / Imagine yourself.
 - Analytics: bare `frontpage analytics` = dashboard; also `summary|query|funnel|timeseries|compare|sql` for structured reads (SQL is guard + RLS site-scoped).
+- People: `frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide`. Site-scoped person graph (email or phone). Inbox stays the raw ledger. Hide is not forget.
 
 ## Agent prompt loop
 

package/dist/bin-path.d.ts

@@ -0,0 +1,21 @@
+export type PathFrontpageVerdict = {
+    stale: boolean;
+    path: string | null;
+    pathVersion: string | null;
+    reason: "older-than-compile-wait" | "older-than-this-package" | "unreadable" | null;
+};
+export declare function resolveRealPath(path: string): string;
+export declare function interpretPathFrontpage(args: {
+    thisVersion: string;
+    thisBin: string | null;
+    pathBin: string | null;
+    pathVersionLine: string | null;
+    minVersion?: string;
+}): PathFrontpageVerdict;
+export declare function whichFrontpage(): string | null;
+export declare function frontpageVersionAt(bin: string): string | null;
+export declare function inspectPathFrontpage(opts?: {
+    thisBin?: string | null;
+    thisVersion?: string;
+}): PathFrontpageVerdict;
+export declare function stalePathUpgradeMessage(v: PathFrontpageVerdict): string;

package/dist/bin-path.js

@@ -0,0 +1,65 @@
+/**
+ * Detect a stale `frontpage` on PATH (global 0.1.9 vs this package).
+ * Does not uninstall anything — doctor prints the uninstall command.
+ */
+import { spawnSync } from "node:child_process";
+import { realpathSync } from "node:fs";
+import { COMPILE_WAIT_MIN_VERSION, isOlderThan, packageIdentity, parseVersionLine, } from "./version.js";
+export function resolveRealPath(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        return path;
+    }
+}
+export function interpretPathFrontpage(args) {
+    if (!args.pathBin) {
+        return { stale: false, path: null, pathVersion: null, reason: null };
+    }
+    if (args.thisBin && resolveRealPath(args.pathBin) === resolveRealPath(args.thisBin)) {
+        return { stale: false, path: args.pathBin, pathVersion: args.thisVersion, reason: null };
+    }
+    const pathVersion = parseVersionLine(args.pathVersionLine ?? "");
+    if (!pathVersion) {
+        return { stale: true, path: args.pathBin, pathVersion: null, reason: "unreadable" };
+    }
+    const floor = args.minVersion ?? COMPILE_WAIT_MIN_VERSION;
+    if (isOlderThan(pathVersion, floor)) {
+        return { stale: true, path: args.pathBin, pathVersion, reason: "older-than-compile-wait" };
+    }
+    if (isOlderThan(pathVersion, args.thisVersion)) {
+        return { stale: true, path: args.pathBin, pathVersion, reason: "older-than-this-package" };
+    }
+    return { stale: false, path: args.pathBin, pathVersion, reason: null };
+}
+export function whichFrontpage() {
+    const r = spawnSync("sh", ["-c", "command -v frontpage"], { encoding: "utf8" });
+    const line = (r.stdout ?? "").trim().split("\n")[0]?.trim();
+    return line || null;
+}
+export function frontpageVersionAt(bin) {
+    const r = spawnSync(bin, ["--version"], { encoding: "utf8" });
+    const text = `${r.stdout ?? ""}\n${r.stderr ?? ""}`;
+    return parseVersionLine(text);
+}
+export function inspectPathFrontpage(opts) {
+    const thisVersion = opts?.thisVersion ?? packageIdentity().version;
+    const thisBin = opts?.thisBin ?? process.argv[1] ?? null;
+    const pathBin = whichFrontpage();
+    const pathVersionLine = pathBin ? frontpageVersionAt(pathBin) : null;
+    return interpretPathFrontpage({
+        thisVersion,
+        thisBin,
+        pathBin,
+        pathVersionLine,
+    });
+}
+export function stalePathUpgradeMessage(v) {
+    const found = v.pathVersion ? `frontpage-host ${v.pathVersion}` : "an unknown frontpage-host";
+    const where = v.path ? ` at ${v.path}` : "";
+    return (`PATH frontpage is ${found}${where}. Compile-wait needs frontpage-host ${COMPILE_WAIT_MIN_VERSION} or newer. ` +
+        `Uninstall the stale global (npm uninstall -g frontpage-host) and install ` +
+        `npm i -g frontpage-host@${COMPILE_WAIT_MIN_VERSION} (or npx frontpage-host@${COMPILE_WAIT_MIN_VERSION}). ` +
+        `In the Frontpage repo, run node <repo>/cli/dist/bin.js instead of a global binary.`);
+}

package/dist/bin.js

@@ -27,6 +27,8 @@ import { runMedia } from "./commands/media.js";
 import { runImages } from "./commands/images.js";
 import { runInbox } from "./commands/inbox.js";
 import { runSeo } from "./commands/seo.js";
+import { runRedirects } from "./commands/redirects.js";
+import { runPeople } from "./commands/people.js";
 import { runArticles } from "./commands/articles.js";
 import { runSettings } from "./commands/settings.js";
 import { runEdit } from "./commands/edit.js";
@@ -112,8 +114,12 @@ async function main() {
             return runImages(args);
         case "inbox":
             return runInbox(args);
+        case "people":
+            return runPeople(args);
         case "seo":
             return runSeo(args);
+        case "redirects":
+            return runRedirects(args);
         case "articles":
             return runArticles(args);
         case "settings":

package/dist/commands/people.d.ts

@@ -0,0 +1 @@
+export declare function runPeople(args: string[]): Promise<number>;

package/dist/commands/people.js

@@ -0,0 +1,239 @@
+import { resolveSlug } from "../site.js";
+import { CliHttpError, EXIT_OK, EXIT_USAGE, exitCodeForError, v1Delete, v1Get, v1Patch, v1Post, } from "../http/client.js";
+import { assertNoUnknownFlags, hasFlag, takeFlag } from "../argv.js";
+import { emitErr, emitOk, isJson } from "../runtime.js";
+const USAGE = "Usage: frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide [--site <slug>] [--json]";
+function requireId(work) {
+    const fromFlag = takeFlag(work, "--id");
+    if (fromFlag)
+        return fromFlag;
+    const positional = work.find((a) => !a.startsWith("-"));
+    if (positional) {
+        work.splice(work.indexOf(positional), 1);
+        return positional;
+    }
+    throw new CliHttpError(`Person id is required. Run: frontpage help people`, EXIT_USAGE, 0, "bad_request");
+}
+function displayName(row) {
+    return row.name || row.email || row.phone || row.id;
+}
+function printPerson(row) {
+    const bits = [row.status ?? "—", displayName(row)];
+    if (row.email && row.email !== row.name)
+        bits.push(row.email);
+    if (row.phone && row.phone !== row.name)
+        bits.push(row.phone);
+    if (row.followUpAt)
+        bits.push(`follow-up ${row.followUpAt}`);
+    if (row.hiddenAt)
+        bits.push("hidden");
+    if (row.lastEvent?.summary)
+        bits.push(row.lastEvent.summary);
+    console.log(`${row.id}  ${bits.join("  ·  ")}`);
+}
+export async function runPeople(args) {
+    try {
+        const { slug, rest } = await resolveSlug(args);
+        const sub = rest[0];
+        const base = `/api/v1/sites/${encodeURIComponent(slug)}/people`;
+        if (!sub || sub === "list") {
+            const work = sub === "list" ? rest.slice(1) : [...rest];
+            const q = takeFlag(work, "--q") ?? takeFlag(work, "--query");
+            const status = takeFlag(work, "--status");
+            const source = takeFlag(work, "--source");
+            const formSlug = takeFlag(work, "--form-slug");
+            const followUp = takeFlag(work, "--follow-up");
+            const sort = takeFlag(work, "--sort");
+            const lastSeenDays = takeFlag(work, "--last-seen-days");
+            const limit = takeFlag(work, "--limit");
+            const cursor = takeFlag(work, "--cursor");
+            const hidden = hasFlag(work, "--hidden");
+            assertNoUnknownFlags(work, "people");
+            const params = new URLSearchParams();
+            if (q)
+                params.set("q", q);
+            if (status)
+                params.set("status", status);
+            if (source)
+                params.set("source", source);
+            if (formSlug)
+                params.set("formSlug", formSlug);
+            if (followUp)
+                params.set("followUp", followUp);
+            if (sort)
+                params.set("sort", sort);
+            if (lastSeenDays)
+                params.set("lastSeenDays", lastSeenDays);
+            if (limit)
+                params.set("limit", limit);
+            if (cursor)
+                params.set("cursor", cursor);
+            if (hidden)
+                params.set("hidden", "1");
+            const qs = params.toString();
+            const data = await v1Get(qs ? `${base}?${qs}` : base);
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            const rows = data.people ?? [];
+            if (rows.length === 0) {
+                console.log(hidden ? "No hidden people." : "No people.");
+                return EXIT_OK;
+            }
+            for (const row of rows)
+                printPerson(row);
+            if (data.nextCursor)
+                console.log(`next: ${data.nextCursor}`);
+            return EXIT_OK;
+        }
+        if (sub === "get") {
+            const work = rest.slice(1);
+            const id = requireId(work);
+            assertNoUnknownFlags(work, "people");
+            const data = await v1Get(`${base}/${encodeURIComponent(id)}`);
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            printPerson(data.person);
+            const events = data.events ?? [];
+            for (const ev of events) {
+                const row = ev;
+                const extra = typeof row.payload?.body === "string" ? `  ${row.payload.body}` : "";
+                console.log(`  ${row.occurredAt ?? ""}  ${row.type ?? ""}${extra}`);
+            }
+            return EXIT_OK;
+        }
+        if (sub === "add") {
+            const work = rest.slice(1);
+            const email = takeFlag(work, "--email");
+            const phone = takeFlag(work, "--phone");
+            const name = takeFlag(work, "--name");
+            const note = takeFlag(work, "--note");
+            assertNoUnknownFlags(work, "people");
+            if (!email && !phone) {
+                console.error("Usage: frontpage people add --email you@example.com | --phone +15551234567 [--name …] [--note …]");
+                return EXIT_USAGE;
+            }
+            const data = await v1Post(base, {
+                email,
+                phone,
+                name,
+                note,
+            });
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            printPerson(data.person);
+            return EXIT_OK;
+        }
+        if (sub === "set") {
+            const work = rest.slice(1);
+            const id = requireId(work);
+            const body = {};
+            for (const field of ["name", "email", "phone", "notes", "status"]) {
+                const v = takeFlag(work, `--${field}`);
+                if (v !== undefined)
+                    body[field] = v === "" ? null : v;
+            }
+            assertNoUnknownFlags(work, "people");
+            if (Object.keys(body).length === 0) {
+                console.error("Usage: frontpage people set <id> [--name …] [--email …] [--phone …] [--notes …] [--status …]");
+                return EXIT_USAGE;
+            }
+            const data = await v1Patch(`${base}/${encodeURIComponent(id)}`, body);
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            printPerson(data.person);
+            return EXIT_OK;
+        }
+        if (sub === "note") {
+            const work = rest.slice(1);
+            const id = requireId(work);
+            const body = takeFlag(work, "--body") ?? takeFlag(work, "--note");
+            assertNoUnknownFlags(work, "people");
+            if (!body) {
+                console.error("Usage: frontpage people note <id> --body \"…\"");
+                return EXIT_USAGE;
+            }
+            const data = await v1Post(`${base}/${encodeURIComponent(id)}/events`, { body });
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            console.log(`Noted ${id} (${data.event.id})`);
+            return EXIT_OK;
+        }
+        if (sub === "rm-note") {
+            const work = rest.slice(1);
+            const id = requireId(work);
+            const eventId = takeFlag(work, "--event") ?? takeFlag(work, "--event-id");
+            assertNoUnknownFlags(work, "people");
+            if (!eventId) {
+                console.error("Usage: frontpage people rm-note <id> --event <eventId>");
+                return EXIT_USAGE;
+            }
+            const data = await v1Delete(`${base}/${encodeURIComponent(id)}/events/${encodeURIComponent(eventId)}`);
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            console.log(`Removed note ${data.removed.id}`);
+            return EXIT_OK;
+        }
+        if (sub === "follow-up") {
+            const work = rest.slice(1);
+            const id = requireId(work);
+            const clear = hasFlag(work, "--clear");
+            const at = takeFlag(work, "--at");
+            assertNoUnknownFlags(work, "people");
+            if (!clear && !at) {
+                console.error("Usage: frontpage people follow-up <id> --at <iso> | --clear");
+                return EXIT_USAGE;
+            }
+            const data = await v1Patch(`${base}/${encodeURIComponent(id)}/follow-up`, { at: clear ? null : at });
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            printPerson(data.person);
+            return EXIT_OK;
+        }
+        if (sub === "hide") {
+            const work = rest.slice(1);
+            const id = requireId(work);
+            assertNoUnknownFlags(work, "people");
+            const data = await v1Post(`${base}/${encodeURIComponent(id)}/hide`, {});
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            console.log(`Hidden ${displayName(data.person)}`);
+            return EXIT_OK;
+        }
+        if (sub === "unhide") {
+            const work = rest.slice(1);
+            const id = requireId(work);
+            assertNoUnknownFlags(work, "people");
+            const data = await v1Post(`${base}/${encodeURIComponent(id)}/unhide`, {});
+            if (isJson()) {
+                emitOk("people", data);
+                return EXIT_OK;
+            }
+            console.log(`Restored ${displayName(data.person)}`);
+            return EXIT_OK;
+        }
+        console.error(USAGE);
+        return EXIT_USAGE;
+    }
+    catch (err) {
+        if (isJson())
+            return emitErr("people", err);
+        console.error(err instanceof Error ? err.message : String(err));
+        return exitCodeForError(err);
+    }
+}

package/dist/commands/publish.js

@@ -48,11 +48,13 @@ export async function runPublish(args) {
                 progress("Waiting for the site compile…\n");
             const compile = await waitForCompileReady({ slug });
             if (compile.exitCode !== EXIT_OK) {
-                const message = compile.failed
-                    ? "Site compile failed. Refusing to publish a previous build."
-                    : compile.timedOut
-                        ? "Timed out waiting for the site compile. Refusing to publish a previous build."
-                        : "Site compile is not ready. Refusing to publish a previous build.";
+                const message = compile.apiMissing
+                    ? "Compile status API is missing. Refusing to publish."
+                    : compile.failed
+                        ? "Site compile failed. Refusing to publish a previous build."
+                        : compile.timedOut
+                            ? "Timed out waiting for the site compile. Refusing to publish a previous build."
+                            : "Site compile is not ready. Refusing to publish a previous build.";
                 return emitFail("publish", {
                     message,
                     exitCode: compile.exitCode,
@@ -61,11 +63,13 @@ export async function runPublish(args) {
                         compile: compile.status,
                         tip: compile.status?.stagingCommit ?? null,
                         live: compile.status?.liveCommit ?? null,
-                        status: compile.failed
-                            ? "compile_failed"
-                            : compile.timedOut
-                                ? "compile_timeout"
-                                : "compile_not_ready",
+                        status: compile.apiMissing
+                            ? "compile_api_missing"
+                            : compile.failed
+                                ? "compile_failed"
+                                : compile.timedOut
+                                    ? "compile_timeout"
+                                    : "compile_not_ready",
                     },
                 });
             }

package/dist/commands/push.d.ts

@@ -1 +1,6 @@
+/** Remote allowlisted paths that are gone locally become explicit deletes. */
+export declare function pushDeletesForMissingLocal(localPaths: Iterable<string>, remotePaths: Iterable<string>): Array<{
+    path: string;
+    delete: true;
+}>;
 export declare function runPush(args: string[]): Promise<number>;

package/dist/commands/push.js

@@ -1,7 +1,7 @@
 import { readdir, readFile, stat } from "node:fs/promises";
 import { join, relative, sep } from "node:path";
 import { resolveSlug } from "../site.js";
-import { EXIT_OK, EXIT_USAGE, v1Put } from "../http/client.js";
+import { EXIT_OK, EXIT_USAGE, v1Get, v1Put } from "../http/client.js";
 import { readState, writeState } from "../state/frontpage-state.js";
 import { emitErr, emitOk, emitUsage, isJson } from "../runtime.js";
 import { waitForAgentThenCompile } from "./wait-site-compile.js";
@@ -26,6 +26,14 @@ const TEXT_EXTS = new Set([
     ".toml",
 ]);
 const ROOTS = ["src", "public", "content"];
+/** Remote allowlisted paths that are gone locally become explicit deletes. */
+export function pushDeletesForMissingLocal(localPaths, remotePaths) {
+    const local = new Set(localPaths);
+    return [...remotePaths]
+        .filter((path) => path && !local.has(path))
+        .sort()
+        .map((path) => ({ path, delete: true }));
+}
 async function walkAllowlisted(cwd) {
     const out = [];
     async function walk(abs) {
@@ -85,7 +93,10 @@ export async function runPush(args) {
         if (paths.length === 0) {
             return emitUsage("push", "No allowlisted files (src/, public/, content/) found in this folder.", EXIT_USAGE);
         }
-        const files = [];
+        const listing = await v1Get(`/api/v1/sites/${encodeURIComponent(slug)}/files`);
+        const files = [
+            ...pushDeletesForMissingLocal(paths, listing.files.map((f) => f.path)),
+        ];
         for (const path of paths) {
             const abs = join(cwd, path);
             const st = await stat(abs);

package/dist/commands/redirects.d.ts

@@ -0,0 +1 @@
+export declare function runRedirects(args: string[]): Promise<number>;

package/dist/commands/redirects.js

@@ -0,0 +1,83 @@
+import { resolveSlug } from "../site.js";
+import { CliHttpError, EXIT_OK, EXIT_USAGE, exitCodeForError, v1Delete, v1Get, v1Put } from "../http/client.js";
+import { assertNoUnknownFlags, takeFlag } from "../argv.js";
+import { emitErr, emitOk, isJson } from "../runtime.js";
+const USAGE = "Usage: frontpage redirects list | set --from /old --to /new [--status 301|308] | rm --from /old [--site <slug>] [--json]";
+function requirePathFlag(work, flag) {
+    const value = takeFlag(work, flag);
+    if (!value) {
+        throw new CliHttpError(`${flag} is required (e.g. ${flag} /old).`, EXIT_USAGE, 0, "bad_request");
+    }
+    if (!value.startsWith("/") || value.startsWith("//")) {
+        throw new CliHttpError(`${flag} must be a pathname starting with /.`, EXIT_USAGE, 0, "bad_request");
+    }
+    return value;
+}
+export async function runRedirects(args) {
+    try {
+        const { slug, rest } = await resolveSlug(args);
+        const sub = rest[0];
+        if (!sub || sub === "list") {
+            const work = sub === "list" ? rest.slice(1) : [...rest];
+            assertNoUnknownFlags(work, "redirects");
+            const data = await v1Get(`/api/v1/sites/${encodeURIComponent(slug)}/redirects`);
+            if (isJson()) {
+                emitOk("redirects", data);
+                return EXIT_OK;
+            }
+            const rows = data.redirects ?? [];
+            if (rows.length === 0) {
+                console.log("No redirects.");
+                return EXIT_OK;
+            }
+            for (const row of rows) {
+                console.log(`${row.from} → ${row.to} (${row.status})`);
+            }
+            return EXIT_OK;
+        }
+        if (sub === "set") {
+            const work = rest.slice(1);
+            const from = requirePathFlag(work, "--from");
+            const to = requirePathFlag(work, "--to");
+            const statusRaw = takeFlag(work, "--status");
+            assertNoUnknownFlags(work, "redirects");
+            const body = { from, to };
+            if (statusRaw !== undefined) {
+                const status = Number(statusRaw);
+                if (status !== 301 && status !== 308) {
+                    console.error("Status must be 301 or 308.");
+                    return EXIT_USAGE;
+                }
+                body.status = status;
+            }
+            const data = await v1Put(`/api/v1/sites/${encodeURIComponent(slug)}/redirects`, body);
+            if (isJson()) {
+                emitOk("redirects", data);
+                return EXIT_OK;
+            }
+            const row = data.redirect;
+            console.log(`${row.from} → ${row.to} (${row.status})`);
+            return EXIT_OK;
+        }
+        if (sub === "rm" || sub === "remove") {
+            const work = rest.slice(1);
+            const from = requirePathFlag(work, "--from");
+            assertNoUnknownFlags(work, "redirects");
+            const data = await v1Delete(`/api/v1/sites/${encodeURIComponent(slug)}/redirects?from=${encodeURIComponent(from)}`);
+            if (isJson()) {
+                emitOk("redirects", data);
+                return EXIT_OK;
+            }
+            console.log(`Removed ${data.removed.from}`);
+            return EXIT_OK;
+        }
+        console.error(USAGE);
+        return EXIT_USAGE;
+    }
+    catch (err) {
+        if (isJson())
+            return emitErr("redirects", err);
+        console.error(err instanceof Error ? err.message : String(err));
+        return exitCodeForError(err);
+    }
+}

package/dist/commands/wait-site-compile.d.ts

@@ -15,6 +15,7 @@ export declare function emitCompileWaitOutcome(args: {
         exitCode: number;
         timedOut: boolean;
         failed?: boolean;
+        apiMissing?: boolean;
         status: DeployStatus | null;
     };
     extra?: Record<string, unknown>;

package/dist/commands/wait-site-compile.js

@@ -45,11 +45,13 @@ export function emitCompileWaitOutcome(args) {
         compileReady: Boolean(args.compile.status?.ready) && !args.compile.timedOut,
     };
     if (args.compile.exitCode !== EXIT_OK) {
-        const message = args.compile.failed
-            ? "Site compile failed. The git tip is not live."
-            : args.compile.timedOut
-                ? "Timed out waiting for the site compile. The git tip is not live yet."
-                : "Site compile is not ready.";
+        const message = args.compile.apiMissing
+            ? "Compile status API is missing. Cannot confirm the tip is live."
+            : args.compile.failed
+                ? "Site compile failed. The git tip is not live."
+                : args.compile.timedOut
+                    ? "Timed out waiting for the site compile. The git tip is not live yet."
+                    : "Site compile is not ready.";
         if (isJson()) {
             return emitFail(args.command, {
                 message,
@@ -58,11 +60,13 @@ export function emitCompileWaitOutcome(args) {
                     slug: args.slug,
                     waited: true,
                     observedBusy: args.agent.observedBusy,
-                    status: args.compile.failed
-                        ? "compile_failed"
-                        : args.compile.timedOut
-                            ? "compile_timeout"
-                            : "compile_not_ready",
+                    status: args.compile.apiMissing
+                        ? "compile_api_missing"
+                        : args.compile.failed
+                            ? "compile_failed"
+                            : args.compile.timedOut
+                                ? "compile_timeout"
+                                : "compile_not_ready",
                     run: args.agent.run,
                     ...compileData,
                     ...args.extra,

package/dist/compile.d.ts

@@ -20,8 +20,13 @@ export type CompileWaitResult = {
     exitCode: number;
     timedOut: boolean;
     failed: boolean;
+    apiMissing?: boolean;
     status: DeployStatus | null;
 };
+/** Compile clock is gone (flag off / old API). A site-not-found 404 is not this. */
+export declare function isMissingDeployApi(err: unknown): boolean;
+/** A deploy payload we can poll. Missing `ready` means the compile clock is not there. */
+export declare function deployStatusLooksComplete(status: DeployStatus | null | undefined): boolean;
 export declare function fetchDeployStatus(slug: string): Promise<DeployStatus>;
 export declare function waitForCompileReady(args: {
     slug: string;

package/dist/compile.js

@@ -3,7 +3,7 @@
  *
  * GET /api/v1/sites/{slug}/deploy → ready when the live compile SHA equals the tip.
  */
-import { EXIT_OK, EXIT_USAGE, v1Get } from "./http/client.js";
+import { CliHttpError, EXIT_OK, EXIT_USAGE, v1Get } from "./http/client.js";
 import { progress } from "./runtime.js";
 const SHA_RE = /^[0-9a-f]{40}$/i;
 export function normalizeSha(raw) {
@@ -32,6 +32,21 @@ export function compileIsReady(status, expectCommit) {
         return true;
     return live === expect;
 }
+/** Compile clock is gone (flag off / old API). A site-not-found 404 is not this. */
+export function isMissingDeployApi(err) {
+    if (!(err instanceof CliHttpError))
+        return false;
+    const message = err.message.toLowerCase();
+    if (message.includes("api not available"))
+        return true;
+    if (err.status === 404 && (message === "not found." || message === "not found"))
+        return true;
+    return false;
+}
+/** A deploy payload we can poll. Missing `ready` means the compile clock is not there. */
+export function deployStatusLooksComplete(status) {
+    return Boolean(status && typeof status.ready === "boolean");
+}
 export async function fetchDeployStatus(slug) {
     return v1Get(`/api/v1/sites/${encodeURIComponent(slug)}/deploy`);
 }
@@ -42,7 +57,20 @@ export async function waitForCompileReady(args) {
     const started = Date.now();
     let last = null;
     while (Date.now() - started < maxMs) {
-        last = await fetchStatus(args.slug);
+        try {
+            last = await fetchStatus(args.slug);
+        }
+        catch (err) {
+            if (isMissingDeployApi(err)) {
+                progress("\n");
+                return { exitCode: EXIT_USAGE, timedOut: false, failed: true, apiMissing: true, status: null };
+            }
+            throw err;
+        }
+        if (!deployStatusLooksComplete(last)) {
+            progress("\n");
+            return { exitCode: EXIT_USAGE, timedOut: false, failed: true, apiMissing: true, status: last };
+        }
         if (last.compileState === "failed" || last.compileState === "canceled") {
             progress("\n");
             return { exitCode: EXIT_USAGE, timedOut: false, failed: true, status: last };

package/dist/completions/generate.js

@@ -25,6 +25,7 @@ _frontpage_completions() {
     seo|settings) COMPREPLY=( $(compgen -W "get set" -- "\${cur}") ) ;;
     articles) COMPREPLY=( $(compgen -W "list content create-section create-article set-draft" -- "\${cur}") ) ;;
     analytics) COMPREPLY=( $(compgen -W "dashboard summary query funnel timeseries compare sql" -- "\${cur}") ) ;;
+    people) COMPREPLY=( $(compgen -W "list get add set note rm-note follow-up hide unhide" -- "\${cur}") ) ;;
     modules)
       if [[ \${COMP_CWORD} -ge 3 && \${COMP_WORDS[2]} == google_reviews ]]; then
         COMPREPLY=( $(compgen -W "docs request-setup enable disable archive config connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect" -- "\${cur}") )
@@ -69,6 +70,7 @@ _frontpage() {
         tokens) _values 'subcommand' set ;;
         seo|settings) _values 'subcommand' get set ;;
         analytics) _values 'subcommand' dashboard summary query funnel timeseries compare sql ;;
+        people) _values 'subcommand' list get add set note rm-note follow-up hide unhide ;;
         modules)
           if [[ $words[2] == google_reviews ]]; then
             _values 'subcommand' docs request-setup enable disable archive config connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect
@@ -106,6 +108,7 @@ export function generateFishCompletion() {
         `complete -c frontpage -n "__fish_seen_subcommand_from tokens" -a "set"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from seo settings" -a "get set"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from analytics" -a "dashboard summary query funnel timeseries compare sql"`,
+        `complete -c frontpage -n "__fish_seen_subcommand_from people" -a "list get add set note rm-note follow-up hide unhide"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules" -a "list docs request-setup enable disable archive config callbar forms booking signups payments shop ordering articles google_reviews"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from google_reviews" -a "connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from forms" -a "get set destinations connect-destination remove-destination disconnect-destination attach-destination detach-destination request-destination-setup"`,

package/dist/registry.js

@@ -413,6 +413,45 @@ export const COMMANDS = [
         topics: ["content"],
         dangers: ["--mark-read is side-effecting with no confirm"],
     },
+    {
+        name: "people",
+        summary: "List and manage site People (not inbox, not a module)",
+        usage: "frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide [--site <slug>] [--json]",
+        topics: ["content"],
+        examples: [
+            "frontpage people list",
+            "frontpage people add --email alex@example.com --name Alex",
+            "frontpage people set <id> --status working",
+            "frontpage people note <id> --body \"Called them\"",
+            "frontpage people follow-up <id> --at 2026-09-12T00:00:00Z",
+            "frontpage people hide <id>",
+        ],
+        flags: [
+            "list: --q --status --source --form-slug --follow-up due|upcoming|none --hidden --sort --last-seen-days --limit --cursor",
+            "add requires --email and/or --phone (never name alone)",
+            "Hide is not forget — unique email/phone stay; later ingest un-hides",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["inbox", "help content"],
+    },
+    {
+        name: "redirects",
+        summary: "List, set, or remove HTTP 301/308 path redirects",
+        usage: "frontpage redirects list | set --from /old --to /new [--status 301|308] | rm --from /old [--site <slug>] [--json]",
+        topics: ["content", "site-building"],
+        examples: [
+            "frontpage redirects list",
+            "frontpage redirects set --from /agents --to /agent",
+            "frontpage redirects set --from /old --to /new --status 308",
+            "frontpage redirects rm --from /old",
+        ],
+        flags: [
+            "Instant — no push or compile. Not a site file. frontpage revert does not undo a redirect.",
+            "Same-origin pathnames only. Status 301 (default) or 308. Cap 50 per site.",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["seo", "help site-building"],
+    },
     {
         name: "seo",
         summary: "Get or set page SEO",
@@ -502,7 +541,7 @@ export const TOPICS = {
   4. mkdir work && cd work && frontpage use <subdomain>
   5. frontpage pull
   6. Edit files under src/, public/, or content/
-  7. frontpage push --message "…"
+  7. frontpage push --message "…" --wait
   8. frontpage deploy wait         # tip compile ready (optional; push --wait does this)
      Review staging: https://<subdomain>.frontpage.host when that subdomain is publicly shareable.
      With a custom domain connected, the subdomain is often owner-private (login wall ≠ failed push);
@@ -528,7 +567,7 @@ export const TOPICS = {
   frontpage status               # tipDrift when remote moved since last pull
   frontpage pull                 # downloads src/, public/, content/ into cwd
   frontpage diff                 # local vs remote via git blobSha (--json → dirty + tipDrift)
-  frontpage push [--message …] [--wait]   # uploads allowlisted files; CAS + active-run guard
+  frontpage push [--message …] [--wait]   # uploads allowlisted files; deletes remote-only allowlisted paths; CAS + active-run guard
   frontpage ls [prefix]
   frontpage cat <path>
   frontpage search <pattern> [path|--path <path>] [--regex] [--case-sensitive] [--whole-word] [--files-only]
@@ -566,6 +605,10 @@ export const TOPICS = {
   Hard fences:
   - No API routes, serverless backends, or databases.
   - No fake lead forms / checkout / card fields — use data-fp-* modules + frontpage modules, or refuse.
+  - Quoted attributes: in frontmatter JS, a backslash-quote is an escape. In an Astro attribute it is
+    not. The quote after href= closes the string and the next token fails the compile. Put HTML in a
+    frontmatter const and pass it as an expression (auditBody={auditBody}), or use an expression
+    attribute. Never put an HTML tag or a backslash-quote inside a quoted JSX attribute.
   - Platform-owned paths are not syncable (BaseLayout overlay, module/extension shells, package.json…).
   - Customer layouts (DocsLayout, GuideLayout, …) are fine when site-owned. A wrapper MUST render
     <BaseLayout> and forward SEO: description={description}, ogImage={ogImage}, and
@@ -584,6 +627,8 @@ export const TOPICS = {
   - Prefer src/components/Header.astro + Footer.astro (or chrome: { managed: true } in site.ts).
   - seo block in site.ts + frontpage seo get|set; customize 404.astro but keep frontpage:404 meta;
     never put /404 in nav or pages. robots/sitemap are platform-managed.
+  - Real HTTP 301/308s: frontpage redirects list|set|rm. Instant (no push). Do not ship Astro.redirect,
+    location.replace, or a meta refresh for a permanent move. frontpage revert does not undo redirects.
 
   Modules & articles (short):
   - Forms: <form data-fp-form="slug"> with named inputs; no action/onsubmit/honeypot.
@@ -623,7 +668,9 @@ export const TOPICS = {
   frontpage media list|upload <file>   # images/PDF/video; text/CSV = inline not library; sitePath first when stored
   frontpage images generate --prompt "…" [--count N]  # 1–4 AI variations of one prompt; sitePath first; AI $ + storage
   frontpage inbox [leads|subscribers|orders|google_reviews|…] [--mark-read] [--csv]
+  frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide
   frontpage seo get [/path|--path /path] | seo set --path /
+  frontpage redirects list|set|rm --from /old --to /new
   frontpage articles list|content|create-section|create-article|set-draft|…
   frontpage fonts [list|search] [--slot …] [--query …]
   frontpage tokens set --group … --key … --value …
@@ -652,7 +699,8 @@ export const TOPICS = {
   revert creates a NEW commit whose tree matches the target (linear restore).
   Target SHA must be on this site's history (not another site in the monorepo).
   Refused while an agent run is active. Goes through commitSiteBranch (build gate).
-  --yes required when stdin is not a TTY.`,
+  --yes required when stdin is not a TTY.
+  revert does not undo HTTP redirects — use frontpage redirects rm.`,
     isolation: `Isolation
   Every site-scoped call targets subdomain → branch site/<slug> only.
   No client-supplied branch, ref, repo, or clone URL is accepted.

package/llms.txt

@@ -1,6 +1,7 @@
 # Frontpage CLI (frontpage-host)
 
 - Package: frontpage-host (npm). Binary: frontpage. Do NOT install npm package "frontpage".
+- Astro quoted attributes: in frontmatter JS a backslash-quote is an escape; in an attribute it is not. Pass HTML as {auditBody}. Never HTML or a backslash-quote inside a quoted JSX attribute.
 - Docs in this package: README.md, AGENTS.md (agent operating manual).
 - Introspect: frontpage help | frontpage help --json | frontpage help <topic|command>
 - Topics: quickstart, auth, sync, site-building, agent, content, history, isolation, exit-codes
@@ -14,6 +15,8 @@
 - Prompt attachments: frontpage prompt "…" --attach <file|/__media/…|https://…> [--asset-url https://…] (same media caps as media upload)
 - Version: frontpage --version | -V | version
 - SEO get: frontpage seo get [/path|--path /path]; search path filter: [path|--path <path>]; open [/path|--path /path]
+- Redirects: frontpage redirects list|set|rm — HTTP 301/308, instant, not a file; revert does not undo; do not fake with Astro.redirect / meta refresh
+- People: frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide — site-scoped person graph (email or phone). Inbox stays the raw ledger. Hide is not forget. Unknown leftover flags fail closed.
 - Analytics funnel: --steps JSON array or comma paths (/, /pricing); bad JSON → Invalid JSON for --steps
 - Modules: unknown key errors list Known: …; mailing list module key is signups (not subscribe)
 - Errors: --json API envelopes include requestId when the server returned one; local validation omits requestId/httpStatus; runs wait failed/canceled → ok:false + run.error (exit 2); deploy wait = agent idle + tip compile ready (fail-closed / compile timeout → exit 2); push --wait and publish --wait wait for GET /deploy ready

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontpage-host",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "Frontpage CLI — manage your site from the terminal",
   "type": "module",
   "bin": {