layero 0.1.8 → 0.2.0

package/dist/api.js

@@ -70,11 +70,11 @@ export class ApiClient {
     pollLogs(deployId, afterId) {
         return this.request("GET", `/deploys/${deployId}/logs?after_id=${afterId}`);
     }
-    setHandle(value) {
-        return this.request("POST", "/me/handle", { value });
+    setUsername(value) {
+        return this.request("POST", "/auth/me/username", { value });
     }
-    checkHandle(value) {
-        return this.request("GET", `/me/handle/check?value=${encodeURIComponent(value)}`);
+    checkUsername(value) {
+        return this.request("GET", `/auth/me/username/check?value=${encodeURIComponent(value)}`);
     }
 }
 export async function uploadArchive(init, filePath) {

package/dist/bin/layero.js

@@ -62,13 +62,17 @@ async function main() {
         .option("-t, --type <preset>", "framework hint (vite | next | astro | cra | sveltekit | nuxt | gatsby | static)")
         .option("--name <name>", "project name (only used on first deploy)")
         .option("--project <id_or_slug>", "deploy into an existing project, ignoring local config")
-        .option("-y, --yes", "non-interactive: accept defaults, fail if anything is missing")
+        .option("-y, --yes", "non-interactive: accept defaults and skip --prod confirmation")
         .option("--config", "use framework/build settings + env vars from .layero/project.json (skips the browser setup wizard)")
+        .option("--prod", "deploy to production (replaces apex_hostname's active deploy). Without this flag, deploys go to the project's CLI preview pseudo-branch.")
+        .option("--branch <name>", "deploy to a specific branch's environment. Wins over --prod.")
         .addHelpText("after", "\nExamples:\n" +
-        "  $ layero deploy                      # uploads source, opens setup wizard in the browser\n" +
+        "  $ layero deploy                      # preview on CLI pseudo-branch (never replaces prod)\n" +
+        "  $ layero deploy --prod               # production deploy (interactive confirm)\n" +
+        "  $ layero deploy --prod --yes         # production deploy, no prompt (CI)\n" +
+        "  $ layero deploy --branch=staging     # preview on a specific branch\n" +
         "  $ layero deploy --config             # uses .layero/project.json end-to-end (CI-friendly)\n" +
-        "  $ layero deploy --type vite\n" +
-        "  $ layero deploy --project my-site --yes")
+        "  $ layero deploy --type vite")
         .action(async (opts) => {
         await deployCmd(opts);
     });

package/dist/commands/deploy.js

@@ -52,6 +52,25 @@ async function prompt(question, fallback) {
         rl.close();
     }
 }
+async function confirm(question) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    try {
+        const answer = (await rl.question(`${question} [y/N]: `)).trim().toLowerCase();
+        return answer === "y" || answer === "yes";
+    }
+    finally {
+        rl.close();
+    }
+}
+function deployTargeting(opts) {
+    if (opts.branch) {
+        return { target: "preview", branch: opts.branch };
+    }
+    return { target: opts.prod ? "production" : "preview" };
+}
 async function resolveOrCreateProject(api, cwd, opts, existing) {
     if (opts.project) {
         const all = await api.listProjects();
@@ -77,8 +96,8 @@ async function resolveOrCreateProject(api, cwd, opts, existing) {
         }
     }
     const me = await api.me();
-    if (!me.handle) {
-        throw new Error("no handle set on your account. open https://app.layero.ru/onboarding " +
+    if (!me.username) {
+        throw new Error("no username set on your account. open https://app.layero.ru/onboarding " +
             "and pick one, then re-run.");
     }
     const fallbackName = path.basename(cwd);
@@ -133,19 +152,29 @@ export async function deployCmd(opts) {
     const existing = await loadProjectConfig(cwd);
     const { project: created, createdNow } = await resolveOrCreateProject(api, cwd, opts, existing);
     let project = created;
-    if (project.source_type !== "cli") {
-        throw new Error(`project "${project.slug}" is a GitHub-source project; ` +
-            "use the dashboard's Deploy button or push to the linked repo.");
+    if (project.cli_deploys_enabled === false) {
+        throw new Error(`CLI deploys are disabled on project "${project.slug}". ` +
+            "Enable them in project settings or use the dashboard's Deploy button.");
+    }
+    // Prompt before overwriting production. CLI deploys default to a per-project
+    // "cli" pseudo-branch (preview-only); --prod is the explicit opt-in to land
+    // on apex_hostname. --yes (CI) or --branch=<default_branch> bypass.
+    if (opts.prod && !opts.yes && !opts.branch) {
+        const ok = await confirm(`deploy to production (https://${project.apex_hostname})?`);
+        if (!ok) {
+            console.log(chalk.yellow("aborted."));
+            return;
+        }
     }
     // Persist linking metadata only — never touch hand-edited config fields
     // or unknown keys the user may have added (a --config file is the user's
     // source of truth, not ours). `persistProjectLinking` reads the file as
-    // raw JSON, overlays just project_id/slug/owner_slug/apex_hostname, and
-    // writes it back.
+    // raw JSON, overlays just project_id/slug/organization_slug/apex_hostname,
+    // and writes it back.
     const persistedCfg = await persistProjectLinking(cwd, {
         project_id: project.id,
         slug: project.slug,
-        owner_slug: project.owner.slug,
+        organization_slug: project.organization.slug,
         apex_hostname: project.apex_hostname,
     }, opts.type ?? null);
     if (createdNow) {
@@ -171,11 +200,14 @@ export async function deployCmd(opts) {
         try {
             upload = await packAndUpload(api, cwd, project);
             console.log(chalk.cyan("triggering deploy..."));
+            const targeting = deployTargeting(opts);
             const deploy = await api.triggerDeploy(project.id, {
                 source_archive_key: upload.archive_key,
                 commit_sha: upload.commit_sha,
                 commit_message: "CLI deploy",
                 framework_hint: persistedCfg.framework_hint ?? undefined,
+                target: targeting.target,
+                branch: targeting.branch,
             });
             console.log(chalk.dim(`  deploy_id=${deploy.id}`));
             const final = await streamDeployLogs(api, deploy.id);
@@ -185,7 +217,12 @@ export async function deployCmd(opts) {
                 return;
             }
             console.log(chalk.green(`deploy ready → ${projectUrl(cliCfg.apiUrl, project.id)}`));
-            console.log(chalk.dim(`  site: https://${project.apex_hostname} (CDN may take ~30-60s to propagate)`));
+            if (opts.prod && !opts.branch) {
+                console.log(chalk.dim(`  production: https://${project.apex_hostname} (CDN may take ~30-60s to propagate)`));
+            }
+            else {
+                console.log(chalk.dim(`  preview deploy — open the dashboard for the exact URL`));
+            }
         }
         finally {
             if (upload) {
@@ -219,11 +256,14 @@ export async function deployCmd(opts) {
         // Already-active project: behave like the old `layero deploy` — fire
         // a build straight from the freshly-uploaded archive.
         console.log(chalk.cyan("triggering deploy..."));
+        const targeting = deployTargeting(opts);
         const deploy = await api.triggerDeploy(project.id, {
             source_archive_key: upload.archive_key,
             commit_sha: upload.commit_sha,
             commit_message: "CLI deploy",
             framework_hint: opts.type,
+            target: targeting.target,
+            branch: targeting.branch,
         });
         console.log(chalk.dim(`  deploy_id=${deploy.id}`));
         const final = await streamDeployLogs(api, deploy.id);

package/dist/commands/link.js

@@ -29,7 +29,7 @@ export async function linkCmd(idOrSlug) {
     await persistProjectLinking(process.cwd(), {
         project_id: proj.id,
         slug: proj.slug,
-        owner_slug: proj.owner.slug,
+        organization_slug: proj.organization.slug,
         apex_hostname: proj.apex_hostname,
     }, proj.framework_hint ?? null);
     console.log(chalk.green(`linked ${proj.slug} (${proj.id}) → ./.layero/project.json`));

package/dist/commands/login.js

@@ -66,7 +66,17 @@ export async function loginCmd(opts) {
         });
         server.on("error", reject);
         server.listen(desiredPort, "127.0.0.1", () => {
-            const port = server.address().port;
+            const addr = server.address();
+            // Defence-in-depth: confirm we actually bound to loopback before
+            // emitting `callback=…` to the browser. If listen() somehow returned
+            // a non-loopback address (Node bug, weird /etc/hosts) we'd otherwise
+            // hand the JWT redirect target out to whoever owns that interface.
+            if (!addr || addr.address !== "127.0.0.1") {
+                server.close();
+                reject(new Error(`expected to bind 127.0.0.1, got ${addr?.address ?? "null"}`));
+                return;
+            }
+            const port = addr.port;
             const callback = `http://127.0.0.1:${port}/callback`;
             const startUrl = `${cfg.apiUrl.replace(/\/+$/, "")}/auth/cli/start` +
                 `?provider=${provider}` +
@@ -87,10 +97,10 @@ export async function loginCmd(opts) {
     cfg.token = token;
     const probe = new ApiClient(cfg);
     const me = await probe.me();
-    cfg.user = { id: me.id, handle: me.handle, email: me.email };
+    cfg.user = { id: me.id, username: me.username, email: me.email };
     await saveConfig(cfg);
-    console.log(chalk.green(`logged in as ${me.handle ?? me.email ?? me.id}`));
-    if (!me.handle) {
-        console.log(chalk.yellow("no handle set — open https://app.layero.ru/onboarding to pick one."));
+    console.log(chalk.green(`logged in as ${me.username ?? me.email ?? me.id}`));
+    if (!me.username) {
+        console.log(chalk.yellow("no username set — open https://app.layero.ru/onboarding to pick one."));
     }
 }

package/dist/commands/token.js

@@ -8,7 +8,7 @@ export async function tokenSetCmd(jwt) {
     const probe = new ApiClient(cfg);
     try {
         const me = await probe.me();
-        cfg.user = { id: me.id, handle: me.handle, email: me.email };
+        cfg.user = { id: me.id, username: me.username, email: me.email };
     }
     catch (err) {
         console.error(chalk.red(`token rejected by API: ${err.message}`));
@@ -16,9 +16,9 @@ export async function tokenSetCmd(jwt) {
         return;
     }
     await saveConfig(cfg);
-    console.log(chalk.green(`saved token for ${cfg.user?.handle ?? cfg.user?.email ?? cfg.user?.id}`));
-    if (!cfg.user?.handle) {
-        console.log(chalk.yellow("no handle set — open https://app.layero.ru/onboarding to pick one " +
+    console.log(chalk.green(`saved token for ${cfg.user?.username ?? cfg.user?.email ?? cfg.user?.id}`));
+    if (!cfg.user?.username) {
+        console.log(chalk.yellow("no username set — open https://app.layero.ru/onboarding to pick one " +
             "before `layero deploy`."));
     }
 }

package/dist/commands/whoami.js

@@ -11,7 +11,7 @@ export async function whoamiCmd() {
     const api = new ApiClient(cfg);
     const me = await api.me();
     console.log(`id:     ${me.id}`);
-    console.log(`handle: ${me.handle ?? chalk.yellow("(not set)")}`);
+    console.log(`username: ${me.username ?? chalk.yellow("(not set)")}`);
     console.log(`email:  ${me.email ?? "(none)"}`);
     if (me.github_login) {
         console.log(`github: ${me.github_login}`);

package/dist/project-config.js

@@ -6,7 +6,15 @@ export function projectConfigPath(cwd) {
 export async function loadProjectConfig(cwd) {
     try {
         const raw = await fs.readFile(projectConfigPath(cwd), "utf-8");
-        return JSON.parse(raw);
+        const parsed = JSON.parse(raw);
+        // Backward-read: configs written before V050 stored the field as
+        // `owner_slug`. Promote it to `organization_slug` in-memory so the
+        // rest of the CLI doesn't have to handle both names. Disk file gets
+        // rewritten on the next persistProjectLinking() call.
+        if (!parsed.organization_slug && parsed.owner_slug) {
+            parsed.organization_slug = parsed.owner_slug;
+        }
+        return parsed;
     }
     catch (err) {
         if (err?.code === "ENOENT") {
@@ -25,15 +33,16 @@ export async function saveProjectConfig(cwd, cfg) {
  *
  * `layero deploy` runs every time the user ships code, but the only thing
  * it should ever write back to .layero/project.json is the linkage —
- * project_id / slug / owner_slug / apex_hostname. Hand-edited fields
- * (build_cmd, output_dir, env_vars, analytics_enabled, framework_hint)
- * and any unknown keys the user added must be preserved verbatim, or we
- * silently break the user's --config file on every interactive deploy.
+ * project_id / slug / organization_slug / apex_hostname. Hand-edited
+ * fields (build_cmd, output_dir, env_vars, analytics_enabled,
+ * framework_hint) and any unknown keys the user added must be preserved
+ * verbatim, or we silently break the user's --config file on every
+ * interactive deploy.
  *
  * Reads the file as raw JSON, overlays the linking subset, and writes it
- * back. Returns the merged config the caller should treat as the new
- * source of truth (matters for first-deploy where there's no existing
- * file).
+ * back. Drops any legacy `owner_slug` key once the new name has been
+ * written, so future reads see only `organization_slug`. Returns the
+ * merged config the caller should treat as the new source of truth.
  */
 export async function persistProjectLinking(cwd, linking, fallbackHint) {
     const file = projectConfigPath(cwd);
@@ -47,11 +56,13 @@ export async function persistProjectLinking(cwd, linking, fallbackHint) {
             throw err;
         }
     }
+    // Strip the legacy owner_slug if it sneaks in from an older CLI write.
+    delete raw.owner_slug;
     const merged = {
         ...raw,
         project_id: linking.project_id,
         slug: linking.slug,
-        owner_slug: linking.owner_slug,
+        organization_slug: linking.organization_slug,
         apex_hostname: linking.apex_hostname,
     };
     if (linking.api_url !== undefined)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "layero",
-  "version": "0.1.8",
+  "version": "0.2.0",
   "description": "Layero CLI — publish a local site with one command.",
   "license": "MIT",
   "type": "module",