frontpage-host 0.1.17 → 0.1.19

package/dist/compile.js

@@ -3,7 +3,7 @@
  *
  * GET /api/v1/sites/{slug}/deploy → ready when the live compile SHA equals the tip.
  */
-import { EXIT_OK, EXIT_USAGE, v1Get } from "./http/client.js";
+import { CliHttpError, EXIT_OK, EXIT_USAGE, v1Get } from "./http/client.js";
 import { progress } from "./runtime.js";
 const SHA_RE = /^[0-9a-f]{40}$/i;
 export function normalizeSha(raw) {
@@ -32,6 +32,21 @@ export function compileIsReady(status, expectCommit) {
         return true;
     return live === expect;
 }
+/** Compile clock is gone (flag off / old API). A site-not-found 404 is not this. */
+export function isMissingDeployApi(err) {
+    if (!(err instanceof CliHttpError))
+        return false;
+    const message = err.message.toLowerCase();
+    if (message.includes("api not available"))
+        return true;
+    if (err.status === 404 && (message === "not found." || message === "not found"))
+        return true;
+    return false;
+}
+/** A deploy payload we can poll. Missing `ready` means the compile clock is not there. */
+export function deployStatusLooksComplete(status) {
+    return Boolean(status && typeof status.ready === "boolean");
+}
 export async function fetchDeployStatus(slug) {
     return v1Get(`/api/v1/sites/${encodeURIComponent(slug)}/deploy`);
 }
@@ -42,7 +57,20 @@ export async function waitForCompileReady(args) {
     const started = Date.now();
     let last = null;
     while (Date.now() - started < maxMs) {
-        last = await fetchStatus(args.slug);
+        try {
+            last = await fetchStatus(args.slug);
+        }
+        catch (err) {
+            if (isMissingDeployApi(err)) {
+                progress("\n");
+                return { exitCode: EXIT_USAGE, timedOut: false, failed: true, apiMissing: true, status: null };
+            }
+            throw err;
+        }
+        if (!deployStatusLooksComplete(last)) {
+            progress("\n");
+            return { exitCode: EXIT_USAGE, timedOut: false, failed: true, apiMissing: true, status: last };
+        }
         if (last.compileState === "failed" || last.compileState === "canceled") {
             progress("\n");
             return { exitCode: EXIT_USAGE, timedOut: false, failed: true, status: last };

package/dist/completions/generate.js

@@ -25,6 +25,7 @@ _frontpage_completions() {
     seo|settings) COMPREPLY=( $(compgen -W "get set" -- "\${cur}") ) ;;
     articles) COMPREPLY=( $(compgen -W "list content create-section create-article set-draft" -- "\${cur}") ) ;;
     analytics) COMPREPLY=( $(compgen -W "dashboard summary query funnel timeseries compare sql" -- "\${cur}") ) ;;
+    people) COMPREPLY=( $(compgen -W "list get add set note rm-note follow-up hide unhide" -- "\${cur}") ) ;;
     modules)
       if [[ \${COMP_CWORD} -ge 3 && \${COMP_WORDS[2]} == google_reviews ]]; then
         COMPREPLY=( $(compgen -W "docs request-setup enable disable archive config connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect" -- "\${cur}") )
@@ -69,6 +70,7 @@ _frontpage() {
         tokens) _values 'subcommand' set ;;
         seo|settings) _values 'subcommand' get set ;;
         analytics) _values 'subcommand' dashboard summary query funnel timeseries compare sql ;;
+        people) _values 'subcommand' list get add set note rm-note follow-up hide unhide ;;
         modules)
           if [[ $words[2] == google_reviews ]]; then
             _values 'subcommand' docs request-setup enable disable archive config connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect
@@ -106,6 +108,7 @@ export function generateFishCompletion() {
         `complete -c frontpage -n "__fish_seen_subcommand_from tokens" -a "set"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from seo settings" -a "get set"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from analytics" -a "dashboard summary query funnel timeseries compare sql"`,
+        `complete -c frontpage -n "__fish_seen_subcommand_from people" -a "list get add set note rm-note follow-up hide unhide"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules" -a "list docs request-setup enable disable archive config callbar forms booking signups payments shop ordering articles google_reviews"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from google_reviews" -a "connect resolve status list-reviews hide show set-stars set-sort set-weight reset-weights write-review-url refresh disconnect"`,
         `complete -c frontpage -n "__fish_seen_subcommand_from modules; and __fish_seen_subcommand_from forms" -a "get set destinations connect-destination remove-destination disconnect-destination attach-destination detach-destination request-destination-setup"`,

package/dist/modules/commands.js

@@ -132,8 +132,8 @@ export const MODULE_COMMANDS = [
     },
     {
         key: "payments",
-        name: "Payments",
-        summary: "Stripe payments. Connect finishes in the browser, not the terminal.",
+        name: "Pay buttons",
+        summary: "One-click Stripe pay buttons. No cart. Connect finishes in the browser, not the terminal.",
         genericActions: GENERIC_ACTIONS,
         extraActions: [
             "status",
@@ -151,14 +151,14 @@ export const MODULE_COMMANDS = [
         ],
         notes: [
             "Connect needs an admin API key. It opens Frontpage (you must be logged in there), then Stripe. Already-connected sites stay live — disconnect first to switch accounts.",
-            "payments and shop share one Stripe account. Disconnecting payments fails if the store still uses that account.",
+            "Pay buttons and the Online store share one Stripe account. Disconnecting Pay buttons fails if the store still uses that account.",
             "request-setup still lights the editor amber bar when you want the owner to finish there.",
         ],
     },
     {
         key: "shop",
         name: "Online store",
-        summary: "Stripe shop. Shares the payments Stripe account.",
+        summary: "Catalog, cart, and Stripe checkout. Shares the Pay buttons Stripe account.",
         genericActions: GENERIC_ACTIONS,
         extraActions: [
             "status",

package/dist/registry.js

@@ -413,6 +413,97 @@ export const COMMANDS = [
         topics: ["content"],
         dangers: ["--mark-read is side-effecting with no confirm"],
     },
+    {
+        name: "people",
+        summary: "List and manage site People (not inbox, not a module)",
+        usage: "frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide|tag|export [--site <slug>] [--json]",
+        topics: ["content"],
+        examples: [
+            "frontpage people list",
+            "frontpage people add --email alex@example.com --name Alex",
+            "frontpage people set <id> --status working",
+            "frontpage people note <id> --body \"Called them\"",
+            "frontpage people follow-up <id> --at 2026-09-12T00:00:00Z",
+            "frontpage people hide <id>",
+            "frontpage people tag <id> --add vip",
+            "frontpage people list --tag vip",
+            "frontpage people export",
+        ],
+        flags: [
+            "list: --q --status --source --form-slug --follow-up due|upcoming|none --hidden --sort --last-seen-days --tag --limit --cursor",
+            "add requires --email and/or --phone (never name alone)",
+            "tag: --add <label> | --remove <slug>",
+            "export writes UTF-8 CSV (same filters as list). Optional --out <file>",
+            "Hide is not forget. Unique email/phone stay; later ingest un-hides",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["inbox", "https://frontpage.host/developers/people"],
+    },
+    {
+        name: "shop",
+        summary: "Store catalog: items, variants, stock, and store settings (not Square, not inbox)",
+        usage: "frontpage shop items|variants|settings|orders|payments … [--site <slug>] [--json]",
+        topics: ["content"],
+        examples: [
+            "frontpage shop items list",
+            "frontpage shop items create camp-hat --title \"Camp hat\" --price-cents 4999 --checkout cart --requires-shipping true --stock 20",
+            "frontpage shop variants add camp-hat --id m --option Size=M --price-cents 4999 --stock 8",
+            "frontpage shop items stock camp-hat --variant m --add 5",
+            "frontpage shop items stock camp-hat --variant m --remove 5",
+            "frontpage shop items stock camp-hat --variant m --set 20",
+            "frontpage shop settings set-fulfillment --mode pickup",
+            "frontpage shop settings set-currency --currency usd",
+        ],
+        flags: [
+            "Integer cents only. $49.99 is 4999. Do not send 49.99 or a dollar string.",
+            "--add / --remove become signed delta. 5 adds 5. --remove 5 removes 5. Result copy is added 5 / removed 5 / set to 20 / stockNow.",
+            "Pass either --add, --remove, or --set. Never two together. --set unlimited returns counted stock to unlimited.",
+            "items: list|get|create|update|archive|activate [--off] | images --urls … | stock [--variant m] --add|--remove|--set",
+            "variants: add|update|archive <itemId> --id m --price-cents … [--option Size=M] [--stock]",
+            "settings: get|set-fulfillment|set-currency|set-checkout-fee. Connect stays frontpage modules shop|payments connect.",
+            "orders / payments list|get read the same ledgers as frontpage inbox orders|payments",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["inbox", "https://frontpage.host/developers/shop"],
+    },
+    {
+        name: "mail",
+        summary: "Site mailings: drafts, templates, series, and sends (not People, not inbox)",
+        usage: "frontpage mail settings|email|template|series|send|sends|enrolments|suppress … [--site <slug>] [--json]",
+        topics: ["content"],
+        examples: [
+            "frontpage mail settings set --postal \"100 Main St\" --reply-to you@example.com",
+            "frontpage mail email create --file draft.json --name Hours",
+            "frontpage mail send --file email.json --to ada@example.com --wait",
+            "frontpage mail send template <id> --to ada@example.com --var first_name=Ada",
+            "frontpage mail series steps set <id> --file steps.json",
+            "frontpage mail suppress add --email bounce@example.com",
+        ],
+        flags: [
+            "email list is unsent drafts only. Sent one-offs are mail sends list",
+            "send --file is an inline one-off (no saved document)",
+            "Blocks and series steps are JSON (--file). Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["people", "inbox"],
+    },
+    {
+        name: "redirects",
+        summary: "List, set, or remove HTTP 301/308 path redirects",
+        usage: "frontpage redirects list | set --from /old --to /new [--status 301|308] | rm --from /old [--site <slug>] [--json]",
+        topics: ["content", "site-building"],
+        examples: [
+            "frontpage redirects list",
+            "frontpage redirects set --from /agents --to /agent",
+            "frontpage redirects set --from /old --to /new --status 308",
+            "frontpage redirects rm --from /old",
+        ],
+        flags: [
+            "Instant — no push or compile. Not a site file. frontpage revert does not undo a redirect.",
+            "Same-origin pathnames only. Status 301 (default) or 308. Cap 50 per site.",
+            "Unknown leftover flags fail closed (exit 2)",
+        ],
+        seeAlso: ["seo", "help site-building"],
+    },
     {
         name: "seo",
         summary: "Get or set page SEO",
@@ -502,7 +593,7 @@ export const TOPICS = {
   4. mkdir work && cd work && frontpage use <subdomain>
   5. frontpage pull
   6. Edit files under src/, public/, or content/
-  7. frontpage push --message "…"
+  7. frontpage push --message "…" --wait
   8. frontpage deploy wait         # tip compile ready (optional; push --wait does this)
      Review staging: https://<subdomain>.frontpage.host when that subdomain is publicly shareable.
      With a custom domain connected, the subdomain is often owner-private (login wall ≠ failed push);
@@ -528,7 +619,7 @@ export const TOPICS = {
   frontpage status               # tipDrift when remote moved since last pull
   frontpage pull                 # downloads src/, public/, content/ into cwd
   frontpage diff                 # local vs remote via git blobSha (--json → dirty + tipDrift)
-  frontpage push [--message …] [--wait]   # uploads allowlisted files; CAS + active-run guard
+  frontpage push [--message …] [--wait]   # uploads allowlisted files; deletes remote-only allowlisted paths; CAS + active-run guard
   frontpage ls [prefix]
   frontpage cat <path>
   frontpage search <pattern> [path|--path <path>] [--regex] [--case-sensitive] [--whole-word] [--files-only]
@@ -566,6 +657,10 @@ export const TOPICS = {
   Hard fences:
   - No API routes, serverless backends, or databases.
   - No fake lead forms / checkout / card fields — use data-fp-* modules + frontpage modules, or refuse.
+  - Quoted attributes: in frontmatter JS, a backslash-quote is an escape. In an Astro attribute it is
+    not. The quote after href= closes the string and the next token fails the compile. Put HTML in a
+    frontmatter const and pass it as an expression (auditBody={auditBody}), or use an expression
+    attribute. Never put an HTML tag or a backslash-quote inside a quoted JSX attribute.
   - Platform-owned paths are not syncable (BaseLayout overlay, module/extension shells, package.json…).
   - Customer layouts (DocsLayout, GuideLayout, …) are fine when site-owned. A wrapper MUST render
     <BaseLayout> and forward SEO: description={description}, ogImage={ogImage}, and
@@ -584,6 +679,8 @@ export const TOPICS = {
   - Prefer src/components/Header.astro + Footer.astro (or chrome: { managed: true } in site.ts).
   - seo block in site.ts + frontpage seo get|set; customize 404.astro but keep frontpage:404 meta;
     never put /404 in nav or pages. robots/sitemap are platform-managed.
+  - Real HTTP 301/308s: frontpage redirects list|set|rm. Instant (no push). Do not ship Astro.redirect,
+    location.replace, or a meta refresh for a permanent move. frontpage revert does not undo redirects.
 
   Modules & articles (short):
   - Forms: <form data-fp-form="slug"> with named inputs; no action/onsubmit/honeypot.
@@ -623,7 +720,14 @@ export const TOPICS = {
   frontpage media list|upload <file>   # images/PDF/video; text/CSV = inline not library; sitePath first when stored
   frontpage images generate --prompt "…" [--count N]  # 1–4 AI variations of one prompt; sitePath first; AI $ + storage
   frontpage inbox [leads|subscribers|orders|google_reviews|…] [--mark-read] [--csv]
+  frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide|tag|export
+  # People CRM guide: https://frontpage.host/developers/people
+  frontpage shop items|variants|settings|orders|payments
+  # Store catalog: https://frontpage.host/developers/shop
+  # Integer cents only. $49.99 is 4999. stock --add/--remove are signed delta.
+  frontpage mail settings|email|template|series|send|sends|enrolments|suppress
   frontpage seo get [/path|--path /path] | seo set --path /
+  frontpage redirects list|set|rm --from /old --to /new
   frontpage articles list|content|create-section|create-article|set-draft|…
   frontpage fonts [list|search] [--slot …] [--query …]
   frontpage tokens set --group … --key … --value …
@@ -652,7 +756,8 @@ export const TOPICS = {
   revert creates a NEW commit whose tree matches the target (linear restore).
   Target SHA must be on this site's history (not another site in the monorepo).
   Refused while an agent run is active. Goes through commitSiteBranch (build gate).
-  --yes required when stdin is not a TTY.`,
+  --yes required when stdin is not a TTY.
+  revert does not undo HTTP redirects — use frontpage redirects rm.`,
     isolation: `Isolation
   Every site-scoped call targets subdomain → branch site/<slug> only.
   No client-supplied branch, ref, repo, or clone URL is accepted.

package/llms.txt

@@ -1,6 +1,7 @@
 # Frontpage CLI (frontpage-host)
 
 - Package: frontpage-host (npm). Binary: frontpage. Do NOT install npm package "frontpage".
+- Astro quoted attributes: in frontmatter JS a backslash-quote is an escape; in an attribute it is not. Pass HTML as {auditBody}. Never HTML or a backslash-quote inside a quoted JSX attribute.
 - Docs in this package: README.md, AGENTS.md (agent operating manual).
 - Introspect: frontpage help | frontpage help --json | frontpage help <topic|command>
 - Topics: quickstart, auth, sync, site-building, agent, content, history, isolation, exit-codes
@@ -14,6 +15,9 @@
 - Prompt attachments: frontpage prompt "…" --attach <file|/__media/…|https://…> [--asset-url https://…] (same media caps as media upload)
 - Version: frontpage --version | -V | version
 - SEO get: frontpage seo get [/path|--path /path]; search path filter: [path|--path <path>]; open [/path|--path /path]
+- Redirects: frontpage redirects list|set|rm — HTTP 301/308, instant, not a file; revert does not undo; do not fake with Astro.redirect / meta refresh
+- People CRM: frontpage people list|get|add|set|note|rm-note|follow-up|hide|unhide|tag|export. Site-scoped person graph (email or phone). Inbox stays the raw ledger. Hide is not forget. List export is CSV. Unknown leftover flags fail closed. Guide: https://frontpage.host/developers/people
+- Store catalog: frontpage shop items|variants|settings|orders|payments. Integer cents only ($49.99 is 4999). stock --add/--remove are signed delta (added 5 / removed 5 / set to 20 / stockNow). Connect stays frontpage modules shop|payments connect. Not Square ordering. Guide: https://frontpage.host/developers/shop
 - Analytics funnel: --steps JSON array or comma paths (/, /pricing); bad JSON → Invalid JSON for --steps
 - Modules: unknown key errors list Known: …; mailing list module key is signups (not subscribe)
 - Errors: --json API envelopes include requestId when the server returned one; local validation omits requestId/httpStatus; runs wait failed/canceled → ok:false + run.error (exit 2); deploy wait = agent idle + tip compile ready (fail-closed / compile timeout → exit 2); push --wait and publish --wait wait for GET /deploy ready

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontpage-host",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "description": "Frontpage CLI — manage your site from the terminal",
   "type": "module",
   "bin": {