layero 0.8.2 → 0.8.4

package/README.md

@@ -208,4 +208,4 @@ always excluded: `node_modules`, `.git`, `dist`, `build`, `.next`, `.env*`,
 
 - Website: https://layero.ru
 - Docs: https://docs.layero.ru
-- Issues: https://github.com/layero/layero/issues
+- Support: https://docs.layero.ru/contacts/

package/dist/agent.js

@@ -27,6 +27,18 @@ const AGENT_ENV_VARS = [
     "CONTINUE_CLI",
 ];
 const CI_ENV_VARS = ["CI", "GITHUB_ACTIONS", "GITLAB_CI", "BUILDKITE", "CIRCLECI"];
+/**
+ * True when we're on a build runner.
+ *
+ * Deliberately NOT the same as `!detectMode().interactive`: an AI agent
+ * (Cursor, Claude Code) is also non-interactive, but there the device-auth
+ * flow is the documented happy path — the agent renders the link and a human
+ * clicks it. On a runner nobody can click, so the same flow just hangs until
+ * the code expires.
+ */
+export function isCiEnv() {
+    return CI_ENV_VARS.some((k) => process.env[k] && process.env[k] !== "0");
+}
 export function detectMode(argv = process.argv) {
     if (cachedMode)
         return cachedMode;

package/dist/commands/deploy.js

@@ -9,7 +9,7 @@ import { packCwd, packDirectory } from "../pack.js";
 import { streamDeployLogs } from "../logs.js";
 import { detectProject } from "../detect.js";
 import { runDeviceLogin } from "../auth.js";
-import { LayeroError, detectMode, emit } from "../agent.js";
+import { LayeroError, detectMode, emit, isCiEnv } from "../agent.js";
 const VALID_TYPES = new Set([
     "vite",
     "next",
@@ -226,21 +226,44 @@ const PREBUILT_AUTO_DIRS = [
 async function resolvePrebuiltDir(cwd, raw) {
     if (raw === undefined || raw === false)
         return null;
+    let dir = null;
     if (typeof raw === "string" && raw.length > 0) {
-        return raw;
+        dir = raw;
     }
-    // No explicit dir — pick the first existing common output directory.
-    for (const candidate of PREBUILT_AUTO_DIRS) {
-        try {
-            const stat = await fs.stat(path.join(cwd, candidate));
-            if (stat.isDirectory())
-                return candidate;
+    else {
+        // No explicit dir — pick the first existing common output directory.
+        for (const candidate of PREBUILT_AUTO_DIRS) {
+            try {
+                const stat = await fs.stat(path.join(cwd, candidate));
+                if (stat.isDirectory()) {
+                    dir = candidate;
+                    break;
+                }
+            }
+            catch {
+                // try next
+            }
         }
-        catch {
-            // try next
+        if (dir === null) {
+            throw new LayeroError("prebuilt_no_dir", "could not auto-detect a built artifact directory", `pass it explicitly: --prebuilt ./dist  (tried: ${PREBUILT_AUTO_DIRS.join(", ")})`);
         }
     }
-    throw new LayeroError("prebuilt_no_dir", "could not auto-detect a built artifact directory", `pass it explicitly: --prebuilt ./dist  (tried: ${PREBUILT_AUTO_DIRS.join(", ")})`);
+    // Servability check (mirrors the builder-side gate, 2026-07-01 audit): a
+    // prebuilt dir with no index.html at its root isn't a servable site — the
+    // apex "/" would 404. Fail fast here, before packing + uploading, instead of
+    // the deploy going "ready" but broken.
+    let hasIndex = false;
+    try {
+        const entries = await fs.readdir(path.join(cwd, dir));
+        hasIndex = entries.some((e) => e.toLowerCase() === "index.html");
+    }
+    catch {
+        hasIndex = false;
+    }
+    if (!hasIndex) {
+        throw new LayeroError("prebuilt_no_index", `'${dir}' has no index.html — nothing to serve`, `point --prebuilt at the folder that contains your built index.html (e.g. --prebuilt ./dist)`);
+    }
+    return dir;
 }
 // Resolve the framework / build / output config to send to completeSetup.
 // Precedence: explicit CLI args > .layero/project.json > auto-detect.
@@ -287,6 +310,14 @@ export async function deployCmd(opts) {
     }
     let cliCfg = await loadConfig();
     if (!cliCfg.token) {
+        // In CI nobody can open a browser, so the device flow can only end one
+        // way: fifteen minutes of a hung job and then `auth_expired`. Fail
+        // immediately instead, and say what to do — burning a quarter of an hour
+        // of someone's runner to reach a foregone conclusion is not acceptable.
+        if (isCiEnv()) {
+            throw new LayeroError("auth_required", "No credentials in CI. Create a token at https://app.layero.ru/settings/cli " +
+                "and pass it as the LAYERO_TOKEN environment variable.", "set_layero_token");
+        }
         // Not authenticated yet. Kick off the browser device-login flow inline
         // and poll, exactly as the docs describe (B5/I4) — no separate `layero
         // login` step required. In JSON/agent mode this emits `auth_required`
@@ -431,30 +462,36 @@ export async function deployCmd(opts) {
         const dashboardUrl = projectUrl(cliCfg.apiUrl, project.id);
         const apexUrl = `https://${project.apex_hostname}`;
         const probe = await resolveReachability(api, deploy.environment_id);
-        // Public site URL — honour the preview-first contract the dashboard uses
-        // (probe states B/C): until the CDN apex is verified live (`cdn_ready`),
-        // the reachable address is the off-CDN preview domain. A fresh apex
-        // 404/000s for ~10-15min while CDN propagates, and for runtime apps the
-        // preview domain is the *permanent* address (the CDN apex can't serve
-        // POST/WebSocket). So only surface the canonical apex once it's warm;
-        // before that, hand back the preview. `edge_ready` / `edge_eta_seconds`
-        // below tell the caller the apex is on its way.
-        const cdnWarm = probe?.cdn_ready === true;
-        const liveUrl = cdnWarm
+        // Публичный адрес сайта.
+        //
+        // Раньше здесь стоял гейт `cdn_ready`: пока YC CDN не подтвердил апекс,
+        // отдавали off-CDN превью, потому что свежий апекс 10-15 минут отвечал
+        // 404, а runtime-приложения на апексе вообще не принимали POST (CDN резал
+        // не-GET). После EDGE-02 CDN перед пользовательскими зонами нет: апекс
+        // валиден с момента создания проекта (wildcard-запись + wildcard-серт), а
+        // `cdn_ready` бекенд отдаёт false НАВСЕГДА — строки в `cdn_hostnames` у
+        // новых проектов не появляется вовсе.
+        //
+        // Из-за этого условие не выполнялось никогда, и после успешной публикации
+        // CLI выдавал ссылку на дашборд вместо адреса сайта. Проверено вживую
+        // 2026-07-26: `layero deploy` вернул `url: https://app.layero.ru/projects/…`.
+        //
+        // Апекс — адрес по умолчанию; превью остаётся для деплоя ветки, которую
+        // не промоутили: там апекс ведёт на другую сборку.
+        const liveUrl = promoted || !opts.branch
             ? probe?.canonical_url ?? apexUrl
-            : probe?.preview_url ??
-                probe?.canonical_url ??
-                (promoted || !opts.branch ? apexUrl : dashboardUrl);
+            : probe?.preview_url ?? probe?.canonical_url ?? apexUrl;
         emit({
             event: "ready",
             url: liveUrl,
             deploy_id: deploy.id,
             preview_url: probe?.preview_url ?? undefined,
             dashboard_url: dashboardUrl,
-            edge_ready: probe ? probe.cdn_ready : undefined,
-            edge_eta_seconds: probe && !probe.cdn_ready && probe.cdn_eta_seconds != null
-                ? probe.cdn_eta_seconds
-                : undefined,
+            // `available` от пробы, а НЕ `cdn_ready`: последний после EDGE-02
+            // остаётся false навсегда, и потребитель JSON-вывода ждал бы события,
+            // которого не будет. ETA пропагации убран по той же причине —
+            // распространять больше нечего.
+            edge_ready: probe ? probe.available : undefined,
         });
     }
     finally {

package/dist/commands/init.js

@@ -9,7 +9,7 @@ function agentDocBlock(framework) {
     return `${AGENT_BLOCK_MARKER_START}
 ## Deploying with Layero
 
-This project deploys to https://layero.ru. To ship local changes:
+This project deploys to Layero (https://layero.ru). To ship local changes:
 
 \`\`\`bash
 npx layero@latest deploy
@@ -44,7 +44,7 @@ stdout), the CLI auto-switches to JSON-lines. Key events to watch:
 | \`detected\` | framework auto-detection result |
 | \`project_created\` / \`project_linked\` | project bound for this directory |
 | \`build_log\` | forward only if it contains errors |
-| \`ready\` | \`url\` = live public site (show to user, stop). \`preview_url\` = reachable immediately while the apex CDN edge warms; \`edge_ready\`/\`edge_eta_seconds\` say whether the apex is serving yet. \`dashboard_url\` = management page. |
+| \`ready\` | \`url\` = live public site (show to user, stop). \`dashboard_url\` = management page. |
 | \`error\` | follow \`next_action\` field verbatim |
 
 Common error codes and remediation:
@@ -58,17 +58,15 @@ Common error codes and remediation:
 ### Re-deploys and production
 
 A plain \`npx layero deploy\` of a CLI project **publishes to the apex**
-\`https://<org>-<project>.layero.ru\` — direct uploads auto-promote, so you do
+\`https://<project>.layero.app\` — direct uploads auto-promote, so you do
 **not** need \`--prod\` or a separate \`promote\` step. Safe to run repeatedly;
 each run replaces what the apex serves.
 
-Every deploy also gets a per-deploy preview at
-\`https://<org>-<project>-<sha>.preview.layero.ru\` (read it from \`ready.preview_url\`).
-The preview is reachable **immediately**; the apex can take a few minutes to
-serve on the **first** deploy of a project while the CDN edge issues its cert
-and propagates (\`ready.edge_ready=false\` with an \`edge_eta_seconds\` estimate).
-Hand the user \`ready.url\` (the apex); if \`edge_ready\` is false, also offer
-\`preview_url\` so they can see it right away.
+There is no separate per-deploy preview address: user sites live in the
+\`layero.app\` zone, which has no preview sub-zone and no CDN in front, so the
+apex is reachable the moment the deploy is ready.
+
+Hand the user \`ready.url\` and stop — that address is live.
 
 Use \`--branch <name>\` to deploy to an isolated preview environment that does
 **not** touch the apex. (\`--prod\` exists for git-connected projects; for

package/dist/config.js

@@ -7,19 +7,30 @@ const DEFAULT_API_URL = process.env.LAYERO_API_URL ?? "https://api.layero.ru";
 async function ensureDir() {
     await fs.mkdir(CONFIG_DIR, { recursive: true });
 }
+// Долгоживущий токен для CI. Выпускается в дашборде, кладётся в секреты
+// репозитория и попадает сюда через окружение — на раннере нет ни `layero
+// login` (некому пройти device flow), ни конфиг-файла.
+//
+// Приоритет выше файла намеренно: если на машине есть и то и другое,
+// окружение выигрывает. Иначе локальный конфиг разработчика молча
+// перебивал бы токен, заданный в CI, и деплой уходил бы не в тот аккаунт.
+const ENV_TOKEN = process.env.LAYERO_TOKEN?.trim() || undefined;
 export async function loadConfig() {
     try {
         const raw = await fs.readFile(CONFIG_FILE, "utf-8");
         const parsed = JSON.parse(raw);
         return {
             apiUrl: parsed.apiUrl ?? DEFAULT_API_URL,
-            token: parsed.token,
-            user: parsed.user,
+            token: ENV_TOKEN ?? parsed.token,
+            // Пользователя из файла не подставляем, когда токен пришёл из
+            // окружения: файл мог остаться от другого аккаунта, и подпись в
+            // выводе врала бы. Кто мы — узнаем у API.
+            user: ENV_TOKEN ? undefined : parsed.user,
         };
     }
     catch (err) {
         if (err?.code === "ENOENT") {
-            return { apiUrl: DEFAULT_API_URL };
+            return { apiUrl: DEFAULT_API_URL, token: ENV_TOKEN };
         }
         throw err;
     }

package/package.json

@@ -1,17 +1,12 @@
 {
   "name": "layero",
-  "version": "0.8.2",
+  "version": "0.8.4",
   "description": "Layero CLI — publish a local site with one command. No git, no GitHub, agent-friendly (Cursor, Claude Code).",
   "license": "MIT",
   "type": "module",
   "homepage": "https://layero.ru",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/LayeroInfra/core.git",
-    "directory": "cli"
-  },
   "bugs": {
-    "url": "https://github.com/LayeroInfra/core/issues"
+    "url": "https://docs.layero.ru/contacts/"
   },
   "keywords": [
     "layero",