naro-cli 0.1.0 → 0.2.1

package/dist/artifact-types.d.ts

@@ -28,6 +28,7 @@ export interface BuildLog {
 /** Mirrors the build metadata shape from the internal build package. */
 export interface BuildMetadata {
     gitCommitSha?: string;
+    gitCommitMessage?: string;
     artifactKey?: string;
 }
 /** Mirrors the build observer shape from the internal build package. */

package/dist/{chunk-63SYN66G.js → chunk-IC4R5EYE.js}

@@ -7,9 +7,9 @@ var __export = (target, all) => {
 
 // src/deploy.ts
 import { existsSync, readFileSync as readFileSync2 } from "fs";
-import { cp, mkdtemp as mkdtemp2, readFile as readFile5, rm as rm2 } from "fs/promises";
-import { tmpdir as tmpdir2 } from "os";
-import { basename, dirname, join as join8 } from "path";
+import { cp, mkdtemp as mkdtemp2, readFile as readFile6, rm as rm2 } from "fs/promises";
+import { homedir as homedir3, tmpdir as tmpdir2 } from "os";
+import { basename, dirname, join as join9 } from "path";
 import { fileURLToPath } from "url";
 
 // ../../packages/build/src/cache.ts
@@ -107,18 +107,31 @@ async function saveCache(args) {
   await log(observer, scope, "INFO", `Saved ${scope} cache (${key}).`);
 }
 
+// ../../packages/build/src/hash.ts
+import { createHash as createHash2 } from "crypto";
+function hashAsset(data) {
+  return createHash2("sha256").update(data).digest("hex").slice(0, 32);
+}
+
 // ../../packages/build/src/local-build-executor.ts
 import { mkdtemp, rm } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
+
+// ../../packages/core/src/artifact-manifest.ts
+var MAX_FILE_BYTES = 25 * 1024 * 1024;
+var MAX_ARTIFACT_BYTES = 64 * 1024 * 1024;
 
 // ../../packages/core/src/errors.ts
 var DeploymentError = class extends Error {
   code;
+  /** HTTP status from the upstream response that caused this error, when known. */
+  status;
   constructor(code, message, options) {
     super(message, options);
     this.name = "DeploymentError";
     this.code = code;
+    if (options?.status !== void 0) this.status = options.status;
   }
 };
 
@@ -14636,6 +14649,41 @@ function date4(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// ../../packages/core/src/subdomain.ts
+var RESERVED_SUBDOMAINS = [
+  "admin",
+  "api",
+  "app",
+  "assets",
+  "blog",
+  "cdn",
+  "dashboard",
+  "docs",
+  "help",
+  "imap",
+  "mail",
+  "mx",
+  "naro",
+  "ns1",
+  "ns2",
+  "preview",
+  "smtp",
+  "static",
+  "status",
+  "support",
+  "www"
+];
+var SUBDOMAIN_PATTERN = /^[a-z0-9](-?[a-z0-9])*$/;
+var SUBDOMAIN_MAX_LENGTH = 54;
+function subdomainProblem(value) {
+  if (value.length < 1 || value.length > SUBDOMAIN_MAX_LENGTH) return "invalid";
+  if (!SUBDOMAIN_PATTERN.test(value)) return "invalid";
+  if (value.endsWith("-preview")) return "reserved";
+  if (RESERVED_SUBDOMAINS.includes(value))
+    return "reserved";
+  return null;
+}
+
 // ../../packages/core/src/schemas.ts
 function isSupportedGitUrl(value) {
   if (/^git@[A-Za-z0-9.-]+:[A-Za-z0-9._/-]+(?:\.git)?$/.test(value)) {
@@ -14666,12 +14714,30 @@ var createDeploymentSchema = external_exports.object({
   branch: external_exports.string().trim().max(240).optional().transform((value) => value || null)
 });
 var connectRepositorySchema = external_exports.object({
+  // Web-only route context: the only consumer is apps/web's
+  // POST /api/projects handler, which resolves this to a team id.
+  teamSlug: external_exports.string().trim().min(1),
   name: external_exports.string().trim().min(1).max(80),
   installationId: external_exports.number().int().positive(),
   repoId: external_exports.number().int().positive(),
   fullName: external_exports.string().trim().min(1).max(200).regex(/^[^/]+\/[^/]+$/, { message: "fullName must be owner/name" }),
   defaultBranch: external_exports.string().trim().min(1).max(240).default("main"),
-  rootDirectory: optionalRootDirectory
+  rootDirectory: optionalRootDirectory,
+  subdomain: external_exports.string().trim().max(60).optional().transform((value) => value ? value.toLowerCase() : null).superRefine((value, ctx) => {
+    if (value === null) return;
+    const problem = subdomainProblem(value);
+    if (problem === "invalid") {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        message: "Use lowercase letters, numbers, and single hyphens (up to 54 characters)."
+      });
+    } else if (problem === "reserved") {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        message: "This subdomain is reserved."
+      });
+    }
+  })
 });
 
 // ../../packages/build/src/package-manager.ts
@@ -14722,10 +14788,46 @@ async function detectPackageManager(root) {
   );
 }
 
+// ../../packages/build/src/proxy-to-middleware.ts
+import { access as access2, readFile as readFile3, rename, writeFile as writeFile2 } from "fs/promises";
+import { join as join3 } from "path";
+var EXTENSIONS = ["ts", "tsx", "js", "jsx"];
+var DIRECTORIES = ["", "src"];
+async function exists2(path) {
+  try {
+    await access2(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function renameExport(source) {
+  return source.replace(
+    /(export\s+(?:default\s+)?(?:async\s+)?function\s+)proxy\b/g,
+    "$1middleware"
+  ).replace(/(export\s+const\s+)proxy\b/g, "$1middleware");
+}
+async function convertProxyToMiddleware(appRoot) {
+  for (const dir of DIRECTORIES) {
+    for (const ext of EXTENSIONS) {
+      const rel = join3(dir, `proxy.${ext}`);
+      const proxyPath = join3(appRoot, rel);
+      if (!await exists2(proxyPath)) continue;
+      const middlewarePath = join3(appRoot, dir, `middleware.${ext}`);
+      if (await exists2(middlewarePath)) return { converted: false };
+      const source = await readFile3(proxyPath, "utf8");
+      await writeFile2(middlewarePath, renameExport(source));
+      await rename(proxyPath, `${proxyPath}.converted`);
+      return { converted: true, file: rel };
+    }
+  }
+  return { converted: false };
+}
+
 // ../../packages/build/src/platform-config.ts
-import { access as access2, writeFile as writeFile2 } from "fs/promises";
+import { access as access3, writeFile as writeFile3 } from "fs/promises";
 import { createRequire } from "module";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 var COMPATIBILITY_DATE = "2026-08-19";
 var NEXT_CONFIG_FILES = [
   "next.config.js",
@@ -14735,31 +14837,31 @@ var NEXT_CONFIG_FILES = [
 ];
 async function pathExists(path) {
   try {
-    await access2(path);
+    await access3(path);
     return true;
   } catch {
     return false;
   }
 }
 async function createPlatformBuildConfig(appRoot, deploymentId, writer = async (path, contents) => {
-  await writeFile2(path, contents, "utf8");
+  await writeFile3(path, contents, "utf8");
 }, cloudflareModulePath = createRequire(import.meta.url).resolve(
   "@opennextjs/cloudflare"
-), exists2 = pathExists) {
-  const openNextConfigPath = join3(appRoot, ".next-deploy-open-next.config.mjs");
-  const wranglerConfigPath = join3(appRoot, ".next-deploy-wrangler.json");
-  const packageManagerConfigPath = join3(appRoot, ".next-deploy-user.npmrc");
+), exists3 = pathExists) {
+  const openNextConfigPath = join4(appRoot, ".next-deploy-open-next.config.mjs");
+  const wranglerConfigPath = join4(appRoot, ".next-deploy-wrangler.json");
+  const packageManagerConfigPath = join4(appRoot, ".next-deploy-user.npmrc");
   const safeDeploymentId = deploymentId.replace(/[^a-z0-9-]/gi, "-");
   let hasNextConfig = false;
   for (const name of NEXT_CONFIG_FILES) {
-    if (await exists2(join3(appRoot, name))) {
+    if (await exists3(join4(appRoot, name))) {
       hasNextConfig = true;
       break;
     }
   }
   if (!hasNextConfig) {
     await writer(
-      join3(appRoot, "next.config.mjs"),
+      join4(appRoot, "next.config.mjs"),
       'export default { output: "standalone" };\n'
     );
   }
@@ -14800,8 +14902,8 @@ export default defineCloudflareConfig({});
 }
 
 // ../../packages/build/src/open-next.ts
-import { access as access3, readdir, readFile as readFile3 } from "fs/promises";
-import { extname, isAbsolute, join as join4, relative, resolve, sep } from "path";
+import { access as access4, readdir, readFile as readFile4 } from "fs/promises";
+import { extname, isAbsolute, join as join5, relative, resolve, sep } from "path";
 function parseJsonc(source) {
   let output = "";
   let index = 0;
@@ -14896,7 +14998,7 @@ async function listFiles(root) {
     for (const entry of entries.sort(
       (left, right) => left.name.localeCompare(right.name)
     )) {
-      const path = join4(directory, entry.name);
+      const path = join5(directory, entry.name);
       if (entry.isSymbolicLink()) {
         throw new DeploymentError(
           "ARTIFACT_INVALID",
@@ -14907,7 +15009,7 @@ async function listFiles(root) {
       else if (entry.isFile()) {
         files.push({
           name: relative(root, path).split(sep).join("/"),
-          data: await readFile3(path),
+          data: await readFile4(path),
           contentType: contentType(path)
         });
       }
@@ -14926,13 +15028,13 @@ async function findWranglerConfig(root, configuredPath) {
         "Wrangler config escapes the application root."
       );
     }
-    await access3(resolved);
+    await access4(resolved);
     return resolved;
   }
   for (const name of ["wrangler.jsonc", "wrangler.json"]) {
-    const path = join4(root, name);
+    const path = join5(root, name);
     try {
-      await access3(path);
+      await access4(path);
       return path;
     } catch {
     }
@@ -14946,7 +15048,7 @@ async function readOpenNextArtifact(appRoot, identity, wranglerConfigPath) {
   try {
     const configPath = await findWranglerConfig(appRoot, wranglerConfigPath);
     const metadata = parseJsonc(
-      await readFile3(configPath, "utf8")
+      await readFile4(configPath, "utf8")
     );
     if (typeof metadata.main !== "string" || typeof metadata.compatibility_date !== "string") {
       throw new DeploymentError(
@@ -14967,8 +15069,8 @@ async function readOpenNextArtifact(appRoot, identity, wranglerConfigPath) {
         "Worker entrypoint must be inside .open-next."
       );
     }
-    await access3(entrypointPath);
-    const configuredAssets = typeof metadata.assets?.directory === "string" ? confinedPath(appRoot, metadata.assets.directory, "Assets directory") : join4(outputRoot, "assets");
+    await access4(entrypointPath);
+    const configuredAssets = typeof metadata.assets?.directory === "string" ? confinedPath(appRoot, metadata.assets.directory, "Assets directory") : join5(outputRoot, "assets");
     const assetsRelation = relative(outputRoot, configuredAssets);
     if (assetsRelation === ".." || assetsRelation.startsWith(`..${sep}`) || isAbsolute(assetsRelation)) {
       throw new DeploymentError(
@@ -14976,10 +15078,10 @@ async function readOpenNextArtifact(appRoot, identity, wranglerConfigPath) {
         "Assets directory must be inside .open-next."
       );
     }
-    const bundleRoot = join4(outputRoot, "worker-bundle");
+    const bundleRoot = join5(outputRoot, "worker-bundle");
     let bundleFiles = null;
     try {
-      await access3(bundleRoot);
+      await access4(bundleRoot);
       bundleFiles = await listFiles(bundleRoot);
     } catch {
     }
@@ -15162,13 +15264,13 @@ function resolveAppRoot(checkout, configuredRoot) {
 }
 
 // ../../packages/build/src/next-project.ts
-import { readFile as readFile4 } from "fs/promises";
-import { join as join5 } from "path";
+import { readFile as readFile5 } from "fs/promises";
+import { join as join6 } from "path";
 async function validateNextProject(root) {
   let packageJson;
   try {
     packageJson = JSON.parse(
-      await readFile4(join5(root, "package.json"), "utf8")
+      await readFile5(join6(root, "package.json"), "utf8")
     );
   } catch (error51) {
     throw new DeploymentError(
@@ -15197,7 +15299,7 @@ async function validateNextProject(root) {
 
 // ../../packages/build/src/local-build-executor.ts
 var defaultDependencies = {
-  createWorkspace: () => mkdtemp(join6(tmpdir(), "next-deploy-build-")),
+  createWorkspace: () => mkdtemp(join7(tmpdir(), "next-deploy-build-")),
   removeWorkspace: (path) => rm(path, { recursive: true, force: true }),
   runCommand,
   detectPackageManager,
@@ -15207,7 +15309,8 @@ var defaultDependencies = {
   readOpenNextArtifact,
   openNextCommand: "opennextjs-cloudflare",
   wranglerCommand: "wrangler",
-  cacheFetch: (input, init) => fetch(input, init)
+  cacheFetch: (input, init) => fetch(input, init),
+  convertProxyToMiddleware
 };
 function sanitizeCacheKey(value) {
   return value.replace(/[^A-Za-z0-9._-]/g, "-").slice(0, 128);
@@ -15247,14 +15350,14 @@ var LocalBuildExecutor = class {
   }
   async build(input, observer, cache) {
     const workspace = await this.dependencies.createWorkspace();
-    const checkout = join6(workspace, "checkout");
-    const pmCacheDir = join6(workspace, ".pm-store");
+    const checkout = join7(workspace, "checkout");
+    const pmCacheDir = join7(workspace, ".pm-store");
     let cacheSeq = 0;
     const cachePorts = cache ? {
       transport: cache,
       fetch: this.dependencies.cacheFetch ?? ((url2, init) => fetch(url2, init)),
       runCommand: this.dependencies.runCommand,
-      tmpFile: (suffix) => join6(workspace, `cache-${String(cacheSeq++)}${suffix}`)
+      tmpFile: (suffix) => join7(workspace, `cache-${String(cacheSeq++)}${suffix}`)
     } : null;
     try {
       await notifyStatus(observer, "CLONING");
@@ -15297,7 +15400,22 @@ var LocalBuildExecutor = class {
           "Git returned an invalid commit SHA."
         );
       }
-      await observer.onMetadata?.({ gitCommitSha });
+      const subject = await this.dependencies.runCommand(
+        {
+          command: "git",
+          args: ["log", "-1", "--format=%s"],
+          cwd: checkout,
+          timeoutMs: 1e4,
+          stage: "CLONING",
+          errorCode: "CLONE_FAILED"
+        },
+        observer
+      );
+      const gitCommitMessage = [...subject.stdout.at(-1)?.trim() ?? ""].slice(0, 300).join("");
+      await observer.onMetadata?.({
+        gitCommitSha,
+        ...gitCommitMessage ? { gitCommitMessage } : {}
+      });
       const appRoot = this.dependencies.resolveAppRoot(
         checkout,
         input.rootDirectory
@@ -15308,6 +15426,14 @@ var LocalBuildExecutor = class {
         "CLONING",
         `Validated Next.js ${project.nextVersion}`
       );
+      const conversion = await (this.dependencies.convertProxyToMiddleware ?? convertProxyToMiddleware)(appRoot);
+      if (conversion.converted) {
+        await observer.onLog({
+          level: "WARN",
+          stage: "CLONING",
+          message: `Converted ${conversion.file ?? "proxy"} to edge middleware. Next.js 16 proxy runs on the Node.js runtime, which Cloudflare does not support; middleware runs on the Edge runtime, so Node.js-only APIs are unavailable.`
+        });
+      }
       const platformConfig = await this.dependencies.createPlatformBuildConfig(
         appRoot,
         input.deploymentId
@@ -15355,7 +15481,7 @@ var LocalBuildExecutor = class {
         observer
       );
       await notifyStatus(observer, "BUILDING");
-      const nextCacheDir = join6(appRoot, ".next", "cache");
+      const nextCacheDir = join7(appRoot, ".next", "cache");
       const nextKey = sanitizeCacheKey(input.branch);
       if (cachePorts) {
         await tryRestore("next", nextKey, nextCacheDir, cachePorts, observer);
@@ -15407,7 +15533,7 @@ var LocalBuildExecutor = class {
           ],
           cwd: appRoot,
           env: {
-            WRANGLER_LOG_PATH: join6(appRoot, ".open-next", "wrangler.log")
+            WRANGLER_LOG_PATH: join7(appRoot, ".open-next", "wrangler.log")
           },
           timeoutMs: 5 * 6e4,
           stage: "BUILDING",
@@ -15437,15 +15563,53 @@ var LocalBuildExecutor = class {
   }
 };
 
+// src/git-info.ts
+import { execFile } from "child_process";
+var SUPPORTED_REMOTE = [
+  /^https:\/\/[^\s]+$/,
+  /^ssh:\/\/[^\s]+$/,
+  /^git@[A-Za-z0-9.-]+:[A-Za-z0-9._/-]+(\.git)?$/
+];
+var defaultExec = (args, cwd) => new Promise((resolve3, reject) => {
+  execFile("git", args, { cwd }, (error51, stdout) => {
+    if (error51) reject(error51);
+    else resolve3(stdout);
+  });
+});
+async function tryExec(exec, args, cwd) {
+  try {
+    const out = (await exec(args, cwd)).trim();
+    return out.length > 0 ? out : null;
+  } catch {
+    return null;
+  }
+}
+async function detectGitInfo(dir, exec = defaultExec) {
+  const remote = await tryExec(exec, ["remote", "get-url", "origin"], dir);
+  const branch = await tryExec(
+    exec,
+    ["rev-parse", "--abbrev-ref", "HEAD"],
+    dir
+  );
+  return {
+    repositoryUrl: remote !== null && SUPPORTED_REMOTE.some((re) => re.test(remote)) ? remote : null,
+    branch: branch !== null && branch !== "HEAD" ? branch : null
+  };
+}
+
+// src/login.ts
+import { spawn as spawn2 } from "child_process";
+import { homedir as homedir2 } from "os";
+
 // src/session.ts
 import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
 import { homedir } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 function credentialsDir(home = homedir()) {
-  return join7(home, ".naro");
+  return join8(home, ".naro");
 }
 function credentialsFile(home = homedir()) {
-  return join7(credentialsDir(home), "credentials.json");
+  return join8(credentialsDir(home), "credentials.json");
 }
 function saveSession(session, home = homedir()) {
   mkdirSync(credentialsDir(home), { recursive: true, mode: 448 });
@@ -15610,6 +15774,71 @@ async function login(deps) {
   }
 }
 
+// src/login.ts
+var stdio = {
+  out: (m) => process.stdout.write(`${m}
+`),
+  err: (m) => process.stderr.write(`${m}
+`)
+};
+function openBrowser(url2) {
+  const platform = process.platform;
+  const command = platform === "darwin" ? "open" : platform === "win32" ? "cmd" : "xdg-open";
+  const args = platform === "win32" ? ["/c", "start", "", url2] : [url2];
+  spawn2(command, args, { stdio: "ignore", detached: true }).unref();
+}
+async function runLogin(io = stdio) {
+  io.out("Opening your browser to sign in with GitHub...");
+  const session = await login({
+    openBrowser: (url2) => {
+      io.out(`If your browser did not open, visit:
+  ${url2}`);
+      openBrowser(url2);
+    }
+  });
+  saveSession(session);
+  io.out(`\u2705 Logged in as ${session.user.email ?? session.user.id}`);
+}
+async function runWhoami(io = stdio, home = homedir2(), refresh = refreshStoredSession) {
+  let session = loadStoredSession(home);
+  if (!session) {
+    io.err("Not logged in. Run `naro login`.");
+    process.exitCode = 1;
+    return;
+  }
+  if (isExpired(session)) {
+    try {
+      session = await refresh(session.refresh_token);
+      saveSession(session, home);
+    } catch {
+      io.err("Session expired. Run `naro login`.");
+      process.exitCode = 1;
+      return;
+    }
+  }
+  const handle = session.user.github ? ` (${session.user.github})` : "";
+  io.out(`Logged in as ${session.user.email ?? session.user.id}${handle}`);
+}
+async function defaultSignOut(session) {
+  const client = createAuthClient();
+  await client.auth.setSession({
+    access_token: session.access_token,
+    refresh_token: session.refresh_token
+  });
+  await client.auth.signOut();
+}
+async function runLogout(io = stdio, home = homedir2(), signOut = defaultSignOut) {
+  const session = loadStoredSession(home);
+  if (session) {
+    try {
+      await signOut(session);
+    } catch {
+    }
+  }
+  clearSession(home);
+  io.out("Logged out.");
+}
+
 // src/upload.ts
 function base(opts) {
   return `${opts.controlPlaneUrl.replace(/\/$/, "")}/api/internal/deployments/${opts.deploymentId}`;
@@ -15643,7 +15872,10 @@ function manifest(artifact) {
     projectId: artifact.projectId,
     entrypoint: artifact.entrypoint.name,
     modules: [artifact.entrypoint, ...artifact.modules].map(meta3),
-    assets: artifact.assets.map(meta3),
+    assets: artifact.assets.map((file2) => ({
+      ...meta3(file2),
+      hash: hashAsset(file2.data)
+    })),
     compatibilityDate: artifact.compatibilityDate,
     compatibilityFlags: artifact.compatibilityFlags,
     assetsBinding: artifact.assetsBinding
@@ -15678,7 +15910,18 @@ async function startCliDeployment(accessToken, opts) {
         "Content-Type": "application/json",
         Authorization: `Bearer ${accessToken}`
       },
-      body: JSON.stringify({ name: opts.name, production: opts.production })
+      body: JSON.stringify({
+        name: opts.name,
+        production: opts.production,
+        ...opts.repositoryUrl != null && {
+          repositoryUrl: opts.repositoryUrl
+        },
+        ...opts.branch != null && { branch: opts.branch },
+        ...opts.rootDirectory != null && {
+          rootDirectory: opts.rootDirectory
+        },
+        ...opts.env !== void 0 && { env: opts.env }
+      })
     }
   );
   if (!response.ok) {
@@ -15693,13 +15936,26 @@ async function startCliDeployment(accessToken, opts) {
 function controlPlaneUrl(env = process.env) {
   return (env.NARO_CONTROL_PLANE_URL ?? "https://naro.sh").replace(/\/$/, "");
 }
-async function requireSession() {
-  let session = loadStoredSession();
-  if (!session) throw new Error("Not logged in. Run `naro login`.");
-  if (isExpired(session)) {
-    session = await refreshStoredSession(session.refresh_token);
-    saveSession(session);
+async function requireSessionOrLogin(log2, home = homedir3(), loginFlow = () => login({
+  openBrowser: (url2) => {
+    log2(`If your browser did not open, visit:
+  ${url2}`);
+    openBrowser(url2);
+  }
+})) {
+  const stored = loadStoredSession(home);
+  if (stored) {
+    if (!isExpired(stored)) return stored;
+    try {
+      const refreshed = await refreshStoredSession(stored.refresh_token);
+      saveSession(refreshed, home);
+      return refreshed;
+    } catch {
+    }
   }
+  log2("Not logged in \u2014 opening your browser to sign in with GitHub\u2026");
+  const session = await loginFlow();
+  saveSession(session, home);
   return session;
 }
 function eventsObserver(cp2, deploymentId, token, fetchImpl = fetch) {
@@ -15737,7 +15993,7 @@ function parseDotenv(text) {
 }
 function readProjectEnv(dir) {
   for (const name of [".env.local", ".env.production", ".env"]) {
-    const path = join8(dir, name);
+    const path = join9(dir, name);
     if (existsSync(path)) return parseDotenv(readFileSync2(path, "utf8"));
   }
   return {};
@@ -15749,7 +16005,7 @@ function slugify2(value) {
 async function projectName(sourceDir) {
   try {
     const pkg = JSON.parse(
-      await readFile5(join8(sourceDir, "package.json"), "utf8")
+      await readFile6(join9(sourceDir, "package.json"), "utf8")
     );
     if (pkg.name) return pkg.name;
   } catch {
@@ -15760,7 +16016,7 @@ var COPY_SKIP = /(^|[\\/])(node_modules|\.next|\.open-next|\.git|\.wrangler|\.tu
 function resolveBin(name) {
   let dir = dirname(fileURLToPath(import.meta.url));
   for (; ; ) {
-    const candidate = join8(dir, "node_modules", ".bin", name);
+    const candidate = join9(dir, "node_modules", ".bin", name);
     if (existsSync(candidate)) return candidate;
     const parent = dirname(dir);
     if (parent === dir) return name;
@@ -15785,7 +16041,7 @@ async function detectPackageManagerLenient(root) {
 }
 function localDependencies(sourceDir) {
   return {
-    createWorkspace: () => mkdtemp2(join8(tmpdir2(), "naro-build-")),
+    createWorkspace: () => mkdtemp2(join9(tmpdir2(), "naro-build-")),
     removeWorkspace: (path) => rm2(path, { recursive: true, force: true }),
     async runCommand(spec, observer) {
       if (spec.command === "git" && spec.args[0] === "clone") {
@@ -15800,6 +16056,9 @@ function localDependencies(sourceDir) {
       if (spec.command === "git" && spec.args[0] === "rev-parse") {
         return { stdout: ["0".repeat(40)], stderr: [] };
       }
+      if (spec.command === "git" && spec.args[0] === "log") {
+        return { stdout: [], stderr: [] };
+      }
       return runCommand(spec, observer);
     },
     detectPackageManager: detectPackageManagerLenient,
@@ -15813,15 +16072,26 @@ function localDependencies(sourceDir) {
 }
 async function deployDirectory(sourceDir, options, log2) {
   const cp2 = controlPlaneUrl();
-  const session = await requireSession();
+  const session = await requireSessionOrLogin(log2);
   const name = slugify2(options.name ?? await projectName(sourceDir));
   const production = options.production ?? false;
+  const git = await detectGitInfo(sourceDir);
+  const branch = options.branch ?? git.branch;
+  if (git.repositoryUrl) log2(`\u25B8 linking ${git.repositoryUrl}`);
+  if (options.env && Object.keys(options.env).length > 0)
+    log2(`\u25B8 syncing ${Object.keys(options.env).length} env var(s)`);
   log2("\u25B8 starting deployment");
   const ctx = await startCliDeployment(session.access_token, {
     name,
     production,
-    controlPlaneUrl: cp2
+    controlPlaneUrl: cp2,
+    repositoryUrl: git.repositoryUrl,
+    branch,
+    rootDirectory: options.rootDirectory,
+    env: options.env
   });
+  if (ctx.envSkipped?.length)
+    log2(`\u26A0 skipped env: ${ctx.envSkipped.join(", ")}`);
   const executor = new LocalBuildExecutor(localDependencies(sourceDir));
   const observer = eventsObserver(cp2, ctx.deploymentId, ctx.callbackToken);
   const result = await executor.build(
@@ -15840,22 +16110,20 @@ async function deployDirectory(sourceDir, options, log2) {
     deploymentId: ctx.deploymentId,
     callbackToken: ctx.callbackToken
   });
+  const surface = ctx.subdomain ?? name;
   return {
-    workerName: name,
-    url: uploaded.previewUrl ?? `${name}${production ? "" : "-preview"}.naro.sh`
+    workerName: surface,
+    url: uploaded.previewUrl ?? `${surface}${production ? "" : "-preview"}.naro.sh`
   };
 }
 
 export {
-  saveSession,
-  loadStoredSession,
-  clearSession,
-  isExpired,
-  createAuthClient,
-  refreshStoredSession,
-  login,
+  runLogin,
+  runWhoami,
+  runLogout,
   startCliDeployment,
   controlPlaneUrl,
+  requireSessionOrLogin,
   eventsObserver,
   parseDotenv,
   readProjectEnv,

package/dist/deploy.d.ts

@@ -1,4 +1,5 @@
 import type { BuildObserver } from "./artifact-types";
+import { type StoredSession } from "./session";
 export interface CliDeploymentContext {
     deploymentId: string;
     projectId: string;
@@ -7,14 +8,21 @@ export interface CliDeploymentContext {
     rootDirectory: string | null;
     env: Record<string, string>;
     controlPlaneUrl: string;
+    envSkipped?: string[];
+    subdomain?: string;
 }
 export declare function startCliDeployment(accessToken: string, opts: {
     name: string;
     production: boolean;
     controlPlaneUrl: string;
+    repositoryUrl?: string | null | undefined;
+    branch?: string | null | undefined;
+    rootDirectory?: string | null | undefined;
+    env?: Record<string, string> | undefined;
     fetch?: typeof fetch;
 }): Promise<CliDeploymentContext>;
 export declare function controlPlaneUrl(env?: NodeJS.ProcessEnv): string;
+export declare function requireSessionOrLogin(log: (message: string) => void, home?: string, loginFlow?: () => Promise<StoredSession>): Promise<StoredSession>;
 export declare function eventsObserver(cp: string, deploymentId: string, token: string, fetchImpl?: typeof fetch): BuildObserver;
 export declare function parseDotenv(text: string): Record<string, string>;
 export declare function readProjectEnv(dir: string): Record<string, string>;
@@ -24,6 +32,7 @@ export interface DeployOptions {
     rootDirectory?: string | null;
     production?: boolean;
     env?: Record<string, string> | undefined;
+    branch?: string | undefined;
 }
 export interface DeployResult {
     workerName: string;

package/dist/deploy.js

@@ -5,15 +5,17 @@ import {
   eventsObserver,
   parseDotenv,
   readProjectEnv,
+  requireSessionOrLogin,
   slugify,
   startCliDeployment
-} from "./chunk-63SYN66G.js";
+} from "./chunk-IC4R5EYE.js";
 export {
   controlPlaneUrl,
   deployDirectory,
   eventsObserver,
   parseDotenv,
   readProjectEnv,
+  requireSessionOrLogin,
   slugify,
   startCliDeployment
 };

package/dist/git-info.d.ts

@@ -0,0 +1,7 @@
+export interface GitInfo {
+    repositoryUrl: string | null;
+    branch: string | null;
+}
+export type GitExec = (args: string[], cwd: string) => Promise<string>;
+/** Reads local git metadata for the deploy: origin remote URL + current branch. */
+export declare function detectGitInfo(dir: string, exec?: GitExec): Promise<GitInfo>;

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export interface Flags {
     name?: string | undefined;
     root?: string | undefined;
+    branch?: string | undefined;
     production: boolean;
 }
 export declare function parseFlags(argv: string[]): Flags;

package/dist/index.js

@@ -1,82 +1,11 @@
 #!/usr/bin/env node
 import {
-  clearSession,
-  createAuthClient,
   deployDirectory,
-  isExpired,
-  loadStoredSession,
-  login,
   readProjectEnv,
-  refreshStoredSession,
-  saveSession
-} from "./chunk-63SYN66G.js";
-
-// src/login.ts
-import { spawn } from "child_process";
-import { homedir } from "os";
-var stdio = {
-  out: (m) => process.stdout.write(`${m}
-`),
-  err: (m) => process.stderr.write(`${m}
-`)
-};
-function openBrowser(url) {
-  const platform = process.platform;
-  const command = platform === "darwin" ? "open" : platform === "win32" ? "cmd" : "xdg-open";
-  const args = platform === "win32" ? ["/c", "start", "", url] : [url];
-  spawn(command, args, { stdio: "ignore", detached: true }).unref();
-}
-async function runLogin(io = stdio) {
-  io.out("Opening your browser to sign in with GitHub...");
-  const session = await login({
-    openBrowser: (url) => {
-      io.out(`If your browser did not open, visit:
-  ${url}`);
-      openBrowser(url);
-    }
-  });
-  saveSession(session);
-  io.out(`\u2705 Logged in as ${session.user.email ?? session.user.id}`);
-}
-async function runWhoami(io = stdio, home = homedir(), refresh = refreshStoredSession) {
-  let session = loadStoredSession(home);
-  if (!session) {
-    io.err("Not logged in. Run `naro login`.");
-    process.exitCode = 1;
-    return;
-  }
-  if (isExpired(session)) {
-    try {
-      session = await refresh(session.refresh_token);
-      saveSession(session, home);
-    } catch {
-      io.err("Session expired. Run `naro login`.");
-      process.exitCode = 1;
-      return;
-    }
-  }
-  const handle = session.user.github ? ` (${session.user.github})` : "";
-  io.out(`Logged in as ${session.user.email ?? session.user.id}${handle}`);
-}
-async function defaultSignOut(session) {
-  const client = createAuthClient();
-  await client.auth.setSession({
-    access_token: session.access_token,
-    refresh_token: session.refresh_token
-  });
-  await client.auth.signOut();
-}
-async function runLogout(io = stdio, home = homedir(), signOut = defaultSignOut) {
-  const session = loadStoredSession(home);
-  if (session) {
-    try {
-      await signOut(session);
-    } catch {
-    }
-  }
-  clearSession(home);
-  io.out("Logged out.");
-}
+  runLogin,
+  runLogout,
+  runWhoami
+} from "./chunk-IC4R5EYE.js";
 
 // src/index.ts
 function parseFlags(argv) {
@@ -86,6 +15,7 @@ function parseFlags(argv) {
     if (arg === "--prod" || arg === "--production") flags.production = true;
     else if (arg === "--name") flags.name = argv[++i];
     else if (arg === "--root") flags.root = argv[++i];
+    else if (arg === "--branch") flags.branch = argv[++i];
   }
   return flags;
 }
@@ -95,15 +25,17 @@ Usage:
   naro login
   naro whoami
   naro logout
-  naro deploy [--name <name>] [--root <dir>] [--prod]
+  naro deploy [--name <name>] [--root <dir>] [--branch <name>] [--prod]
 
 Options:
-  --name   Override the deployment name (defaults to package.json name)
-  --root   Sub-directory that contains the Next.js app (where package.json is)
-  --prod   Publish to production ({name}.naro.sh) instead of preview
+  --name    Override the deployment name (defaults to package.json name)
+  --root    Sub-directory that contains the Next.js app (where package.json is)
+  --branch  Override the detected git branch
+  --prod    Publish to production ({name}.naro.sh) instead of preview
 
 Credentials:
   Run \`naro login\` to authenticate via GitHub.
+  \`naro deploy\` signs you in automatically (opens your browser) when needed.
   Set NARO_CONTROL_PLANE_URL to use a custom control plane (defaults to https://naro.sh).
 `;
 async function main() {
@@ -134,6 +66,7 @@ ${HELP}`);
     {
       name: flags.name,
       rootDirectory: flags.root ?? null,
+      branch: flags.branch,
       production: flags.production,
       env
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "naro-cli",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "type": "module",
   "bin": {
     "naro": "./dist/index.js"
@@ -29,8 +29,8 @@
     "typescript": "7.0.2",
     "vitest": "3.2.7",
     "@next-deploy/build": "0.1.0",
-    "@next-deploy/config": "0.1.0",
-    "@next-deploy/core": "0.1.0"
+    "@next-deploy/core": "0.1.0",
+    "@next-deploy/config": "0.1.0"
   },
   "scripts": {
     "build": "tsup && pnpm build:types",