shiply-cli 0.14.2 → 0.14.3

package/dist/domain.js

@@ -75,6 +75,41 @@ export async function domainSubAdd(ctx, hostname, slug) {
             console.log(`  ${d.type}  ${d.host}  →  ${d.value}`);
     }
 }
+/** Mark a hostname as the primary (canonical) URL for its site. Sibling
+ *  hostnames (same site) start 301-redirecting to it. Fixes duplicate-content
+ *  SEO when both apex and www serve the same site. */
+export async function domainPrimary(ctx, domain, hostname) {
+    const base = resolveBase(ctx.base);
+    // Fetch the list to resolve hostname → id.
+    const list = await api(`${base}/api/v1/custom-domains`, { headers: headers(ctx.apiKey) });
+    const h = hostname.trim().toLowerCase().replace(/\.$/, '');
+    let targetId = null;
+    for (const d of list.domains) {
+        for (const s of d.subdomains) {
+            if (s.hostname === h) {
+                targetId = s.id;
+                break;
+            }
+        }
+        if (targetId)
+            break;
+    }
+    if (!targetId) {
+        throw new Error(`no subdomain mapping for ${h} — add it first with: shiply domain sub add ${h} --site <slug>`);
+    }
+    const r = await api(`${base}/api/v1/custom-domains/${enc(domain)}/subdomains/${targetId}/primary`, {
+        method: 'POST',
+        headers: headers(ctx.apiKey),
+        body: '{}',
+    });
+    console.log(`✔ ${r.hostname} is now the primary URL`);
+    const redirected = r.siblings.filter((s) => !s.isPrimary);
+    if (redirected.length) {
+        console.log('  301-redirects to it:');
+        for (const s of redirected)
+            console.log(`    ${s.hostname}`);
+    }
+}
 export async function domainSync(ctx, domain) {
     const base = resolveBase(ctx.base);
     const r = await api(`${base}/api/v1/custom-domains/${enc(domain)}/sync-dns`, { method: 'POST', headers: headers(ctx.apiKey), body: '{}' });

package/dist/index.js

@@ -10,7 +10,7 @@ import { resolvePayloadDir } from './framework.js';
 import { runClaimVerify } from './claim.js';
 import { dbAttach, dbBranch, dbBranches, dbCreate, dbDelete, dbDeleteBranch, dbLs, dbMerge, dbMigrate, dbSql, } from './db.js';
 import { driveGet, driveLs, drivePublish, drivePut, driveRm } from './drive.js';
-import { domainAdd, domainConnect, domainLs, domainSubAdd, domainSync } from './domain.js';
+import { domainAdd, domainConnect, domainLs, domainPrimary, domainSubAdd, domainSync } from './domain.js';
 import { runProject } from './projects.js';
 import { runListing } from './listings.js';
 import { runSendingDomain } from './sending-domains.js';
@@ -64,6 +64,7 @@ Usage:
   shiply domain connect <domain>              One-click OAuth DNS setup (Cloudflare/Domain Connect)
   shiply domain sub add <host> --site <slug>  Map a subdomain (e.g. app.example.com) to a slug
   shiply domain sync <domain>                 Re-sync DNS records for a connected domain
+  shiply domain primary <domain> <hostname>   Mark hostname as primary; siblings 301-redirect (SEO)
   shiply project <ls|create|get|archive|restore>
                                               Customer-intake projects + AI brief generator
   shiply project create <label> [--customer-email <e>] [--customer-name <n>]
@@ -483,8 +484,13 @@ async function main() {
                         throw new Error('usage: shiply domain sync <domain>');
                     await domainSync(dctx, arg);
                     return;
+                case 'primary':
+                    if (!arg || !arg2)
+                        throw new Error('usage: shiply domain primary <domain> <hostname>');
+                    await domainPrimary(dctx, arg, arg2);
+                    return;
                 default:
-                    throw new Error('usage: shiply domain <ls|add|connect|sub|sync>');
+                    throw new Error('usage: shiply domain <ls|add|connect|sub|sync|primary>');
             }
         }
         case 'db': {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shiply-cli",
-  "version": "0.14.2",
+  "version": "0.14.3",
   "description": "Publish static sites to shiply.now from the command line — instant web hosting for agents.",
   "license": "MIT",
   "type": "module",

package/skill/SKILL.md

@@ -103,8 +103,8 @@ If the `shiply` MCP server is connected (https://shiply.now/mcp), use
 call for updates — follow it, and a `shareSuggestion` you can relay to the user.
 Other tools: `site_status`, `list_sites`, `get_site`, `set_handle`,
 `duplicate_site`, `set_variable`, `get_analytics`, `delete_site`, `whoami`,
-`add_custom_domain`, `connect_provider`, `add_subdomain`, `check_custom_domain`,
-`sync_dns`, `list_custom_domains`, `remove_custom_domain`
+`add_custom_domain`, `connect_provider`, `add_subdomain`, `set_primary_subdomain`,
+`check_custom_domain`, `sync_dns`, `list_custom_domains`, `remove_custom_domain`
 (auto-DNS via OAuth provider connections — see **Custom domains** section below).
 
 Newer capabilities (use when relevant):
@@ -198,6 +198,7 @@ shiply status www.example.com --wait   # polls until SSL_READY + SITE_READY; exi
 | `add_custom_domain` | Add a root domain and detect the provider |
 | `connect_provider` | Start OAuth → returns `{ url }` (show to user to authorize) |
 | `add_subdomain` | Map a subdomain to a site slug |
+| `set_primary_subdomain` | Pick the canonical URL; siblings 301-redirect (SEO fix) |
 | `check_custom_domain` | Live CNAME + SSL + readiness probe |
 | `sync_dns` | Re-push DNS records to a connected provider |
 | `list_custom_domains` | List all domains and their subdomain mappings |
@@ -210,6 +211,7 @@ GET    /api/v1/custom-domains                          list domains
 POST   /api/v1/custom-domains                         add domain { domain }
 DELETE /api/v1/custom-domains/{domain}                remove domain
 POST   /api/v1/custom-domains/{domain}/subdomains     add subdomain { subdomain, slug }
+POST   /api/v1/custom-domains/{domain}/subdomains/{id}/primary   mark hostname canonical (siblings 301)
 POST   /api/v1/custom-domains/{domain}/connect        start OAuth → { url }
 POST   /api/v1/custom-domains/{domain}/sync-dns       re-sync DNS
 POST   /api/v1/custom-domains/{domain}/check          live status
@@ -423,6 +425,36 @@ shiply cron set <slug> /api/daily "0 9 * * *"
 
 Docs: https://shiply.now/docs/functions
 
+## Authentication — bring your own Clerk (or Auth.js / Lucia / Supabase Auth)
+
+shiply does **not** host customer auth. If the user's app needs sign-in, you
+(the agent) set up their auth provider yourself — Clerk is the fastest path.
+
+**One-time human step:** ask the user to create a Clerk app at
+`dashboard.clerk.com` (~2 min). They paste you the publishable key (`pk_…`) and
+secret key (`sk_…`).
+
+**Wire it:**
+\`\`\`bash
+shiply secret set <slug> CLERK_SECRET_KEY sk_live_xxxxxxxxxx
+# The publishable key can be embedded in the JS build — it's safe in the browser.
+\`\`\`
+
+**In `worker.ts`:** verify the session JWT against `env.CLERK_SECRET_KEY` on
+every API request, scope D1 rows by `payload.sub` (the Clerk user id).
+
+**In the SPA:** add `@clerk/clerk-react` to the build, wrap with `<ClerkProvider>`,
+attach `Authorization: Bearer <token>` to every authenticated fetch.
+
+Why not auto-integrate? shiply's own Clerk instance signs in **agents** to the
+shiply dashboard — it's not multi-tenant for someone else's app's users.
+Customers owning their own Clerk is the only correct shape.
+
+Same pattern works for Auth.js, Lucia, Supabase Auth, Firebase Auth — store the
+provider secret via `shiply secret set`, verify the JWT in the worker.
+
+Docs: https://shiply.now/docs/auth
+
 ## Projects — customer intake + AI brief
 
 When a dev needs to capture a real client brief, they spin up a **project**: