shiply-cli 0.16.0 → 0.17.0

package/dist/confetti.js

@@ -26,3 +26,8 @@ export function confetti(message = '⛵  SITE IS LIVE  ⛵') {
     }
     return out;
 }
+/** Celebrate only on an interactive terminal and only when not opted out.
+ *  Piped / redirected stdout (agents, CI, scrapers) never gets ANSI confetti. */
+export function shouldCelebrate(noConfetti, isTty = process.stdout.isTTY) {
+    return !noConfetti && isTty === true;
+}

package/dist/ignore.js

@@ -0,0 +1,65 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+function globBody(glob, anchored) {
+    // Escape regex specials, but keep * and / for glob expansion.
+    let g = glob.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+    g = g
+        .replace(/\*\*\//g, '(?:.+/)?') // **/ → any number of leading dirs
+        .replace(/\*\*/g, '.*') // ** → anything, crosses slashes
+        .replace(/\*/g, '[^/]*'); // * → anything but a slash
+    return anchored ? `^${g}` : `(?:^|/)${g}`;
+}
+function parseRule(raw) {
+    let pattern = raw.trim();
+    const negate = pattern.startsWith('!');
+    if (negate)
+        pattern = pattern.slice(1);
+    const dirOnly = pattern.endsWith('/');
+    if (dirOnly)
+        pattern = pattern.slice(0, -1);
+    const anchored = pattern.startsWith('/');
+    if (anchored)
+        pattern = pattern.slice(1);
+    const body = globBody(pattern, anchored);
+    // re: matches the path itself OR anything beneath it.
+    // descendantRe: matches ONLY things strictly beneath the named path. A
+    // dir-only rule uses re for directories (and their subtrees) but descendantRe
+    // for files, so a FILE that merely shares the dir's name is kept.
+    return {
+        re: new RegExp(`${body}(?:/|$)`),
+        descendantRe: new RegExp(`${body}/`),
+        negate,
+        dirOnly,
+    };
+}
+/** Compile .shiplyignore lines (a documented gitignore subset) into a matcher.
+ *  Supported: # comments, blank lines, trailing-slash dir-only rules,
+ *  leading-slash root anchoring, * and ** globs, and ! negation. Last match wins. */
+export function compileIgnore(lines) {
+    const rules = lines
+        .map((l) => l.replace(/\r$/, ''))
+        .filter((l) => l.trim() !== '' && !l.trimStart().startsWith('#'))
+        .map(parseRule);
+    return (relPath, isDir) => {
+        let excluded = false;
+        for (const r of rules) {
+            // A dir-only rule excludes the directory itself (and its subtree) but, for
+            // a plain file, only when that file lives BENEATH the named directory —
+            // never a file that merely shares the directory's name.
+            const re = r.dirOnly && !isDir ? r.descendantRe : r.re;
+            if (re.test(relPath))
+                excluded = !r.negate;
+        }
+        return excluded;
+    };
+}
+/** Load `.shiplyignore` from the publish root; null when absent. */
+export async function loadIgnore(dir) {
+    try {
+        const raw = await readFile(join(dir, '.shiplyignore'), 'utf8');
+        return compileIgnore(raw.split('\n'));
+    }
+    catch {
+        return null;
+    }
+}

package/dist/index.js

@@ -4,7 +4,7 @@ import { dirname, join } from 'node:path';
 import { createInterface } from 'node:readline/promises';
 import { fileURLToPath } from 'node:url';
 import { parseArgs } from 'node:util';
-import { confetti } from './confetti.js';
+import { confetti, shouldCelebrate } from './confetti.js';
 import { runDetect } from './detect.js';
 import { resolvePayloadDir } from './framework.js';
 import { runClaimVerify } from './claim.js';
@@ -23,8 +23,11 @@ import { loginViaDeviceFlow } from './login.js';
 import { api, ApiError, DEFAULT_BASE, publish, resolveBase } from './publish.js';
 import { installSkill } from './skill.js';
 import { readState, writeState } from './state.js';
+import { readPreview, writePreview } from './previews.js';
 import { checkReadiness, targetToHostname } from './status.js';
 import { runStatus } from './status-cmd.js';
+import { sitesLs, sitesPromote, sitesRm, sitesRollback } from './sites.js';
+import { verifySite } from './verify.js';
 // Resolve the package.json beside the compiled dist/ so `shiply --version`
 // can print the running CLI version (works in dev tsc output + npm install).
 const HERE = dirname(fileURLToPath(import.meta.url));
@@ -47,10 +50,13 @@ const HELP = `shiply — instant static hosting for agents (https://shiply.now)
 Usage:
   shiply publish <dir> [options]              Publish a directory, print the live URL.
                                               Re-running UPDATES the same site (state in .shiply.json)
+  shiply publish <dir> --as <name>            Stable preview: reuse the same URL across iterations
   shiply update <dir>                         Same as publish when .shiply.json exists
   shiply status <slug-or-domain> [--wait]     SSL + readiness check (agent-friendly output)
                                               (no arg → account/plan status, see below)
   shiply duplicate <slug>                     Server-side copy of an owned site → new URL
+  shiply promote <preview-slug> --to <dest-slug>
+                                              Copy the exact previewed bytes into a production site (no rebuild)
   shiply detect [dir]                         Diagnose: print framework + dir that would upload
                                               (no upload — use --framework=<name> to test an override)
   shiply drive <ls|put|get|rm|publish>        Private cloud storage (drive publish → live site)
@@ -140,11 +146,13 @@ Options:
   --base <url>           API origin (default: ${DEFAULT_BASE})
   --wait                 (status) poll until the site is ready
   --timeout <seconds>    (status --wait) give up after this long (default 300)
+  --json                 (publish/update) print one JSON line {slug,siteUrl,…}, no decoration
   --json <body>          (data insert) JSON object to insert
   --limit <N>            (data query) max records to return (default 50)
   --cursor <iso>         (data query) pagination cursor from previous response
   --where <json>         (data query) client-side filter, e.g. '{"email":"a@b.co"}'
   --yes                  (data wipe-collection) skip the safety prompt
+  --as <name>            (publish) stable named preview — same URL every iteration
   --no-confetti          Celebrate quietly
 
 \`shiply status\` prints stable machine-readable markers for agents:
@@ -173,7 +181,7 @@ async function reportReadiness(host, celebrate) {
     else {
         console.log(`✖ site: not ready${r.http.status ? ` (HTTP ${r.http.status})` : r.http.error ? ` — ${r.http.error}` : ''}`);
     }
-    if (r.ready && celebrate)
+    if (r.ready && celebrate && shouldCelebrate(false))
         console.log(confetti());
     return r.ready;
 }
@@ -183,12 +191,17 @@ async function main() {
     // Detect the bare flag in raw argv BEFORE parseArgs sees it; strip the
     // token so the parser doesn't complain about a missing string value.
     const rawArgv = process.argv.slice(2);
-    const statusJsonFlag = rawArgv[0] === 'status' && rawArgv.includes('--json') &&
+    // `--json` is a STRING option (data-insert body). For commands where it's a
+    // boolean flag (status/publish/update), detect a BARE --json (no following
+    // value) in raw argv and strip it before parseArgs sees it.
+    const BARE_JSON_CMDS = new Set(['status', 'publish', 'update']);
+    const bareJsonFlag = BARE_JSON_CMDS.has(rawArgv[0]) && rawArgv.includes('--json') &&
         !rawArgv.some((a, i) => a === '--json' && typeof rawArgv[i + 1] === 'string' && !rawArgv[i + 1].startsWith('-'));
-    if (statusJsonFlag) {
+    if (bareJsonFlag) {
         const idx = rawArgv.indexOf('--json');
         rawArgv.splice(idx, 1);
     }
+    const statusJsonFlag = bareJsonFlag && rawArgv[0] === 'status';
     const { values, positionals } = parseArgs({
         args: rawArgv,
         allowPositionals: true,
@@ -201,6 +214,7 @@ async function main() {
             base: { type: 'string' },
             email: { type: 'string' },
             name: { type: 'string' },
+            as: { type: 'string' },
             wait: { type: 'boolean' },
             'new-site': { type: 'boolean' },
             project: { type: 'boolean' },
@@ -259,13 +273,18 @@ async function main() {
             // pre-built fallback like dist/).
             const { dir: publishDir, hint } = await resolvePayloadDir(dir, { framework: values.framework });
             const spa = values.spa ?? (hint?.spa ? true : undefined);
-            if (hint && publishDir !== dir) {
+            if (hint && publishDir !== dir && !bareJsonFlag) {
                 console.log(`✔ ${hint.framework} project detected — publishing ${publishDir}${hint.spa ? ' with SPA mode' : ''}`);
             }
             // same command, same URL: reuse this directory's site automatically
             const state = await readState(publishDir);
-            let claimToken = values['claim-token'] ?? state?.claimToken;
-            let slug = state?.owned && apiKey ? state.slug : undefined;
+            // --as <name>: a stable named preview. The alias registry remembers which
+            // slug this name last published to, so the URL is reused every iteration —
+            // independent of which directory the bytes came from.
+            const aliasName = values.as;
+            const alias = aliasName ? await readPreview(aliasName) : null;
+            let claimToken = values['claim-token'] ?? alias?.claimToken ?? state?.claimToken;
+            let slug = (alias?.owned && apiKey ? alias.slug : undefined) ?? (state?.owned && apiKey ? state.slug : undefined);
             if (values['new-site']) {
                 claimToken = values['claim-token'];
                 slug = undefined;
@@ -300,6 +319,28 @@ async function main() {
                 owned: !res.anonymous,
                 ...(state?.databaseId ? { databaseId: state.databaseId } : {}),
             });
+            if (aliasName) {
+                await writePreview(aliasName, {
+                    slug: res.slug,
+                    owned: !res.anonymous,
+                    ...(res.siteId ? { siteId: res.siteId } : {}),
+                    ...(res.claimToken ? { claimToken: res.claimToken } : alias?.claimToken ? { claimToken: alias.claimToken } : {}),
+                });
+            }
+            if (bareJsonFlag) {
+                // Single-line machine output — no banners, no confetti, no readiness chatter.
+                process.stdout.write(`${JSON.stringify({
+                    slug: res.slug,
+                    siteUrl: res.siteUrl,
+                    siteId: res.siteId ?? null,
+                    uploaded: res.uploaded,
+                    skipped: res.skipped,
+                    anonymous: res.anonymous,
+                    expiresAt: res.expiresAt,
+                    updated: updating,
+                })}\n`);
+                return;
+            }
             const skipped = res.skipped > 0 ? ` (${res.skipped} unchanged, skipped)` : '';
             console.log(`✔ ${updating ? `updated ${res.slug} in place` : 'published'} — ${res.uploaded} file${res.uploaded === 1 ? '' : 's'}${skipped}`);
             console.log(`\n  ${res.siteUrl}\n`);
@@ -310,7 +351,7 @@ async function main() {
                 void live.body?.cancel();
                 if (live.status < 400) {
                     console.log(`SITE_READY url=${res.siteUrl} status=${live.status}`);
-                    if (!values['no-confetti'])
+                    if (shouldCelebrate(Boolean(values['no-confetti'])))
                         console.log(confetti(`⛵  ${host} IS LIVE  ⛵`));
                 }
             }
@@ -378,6 +419,50 @@ async function main() {
             console.log(`\n  ${out.siteUrl}\n`);
             return;
         }
+        case 'ls': {
+            const apiKey = values.key ?? (await loadApiKey());
+            if (!apiKey)
+                throw new Error('ls needs an API key — run `shiply login` first');
+            await sitesLs({ base: values.base, apiKey });
+            return;
+        }
+        case 'rm': {
+            if (!dir)
+                throw new Error('usage: shiply rm <slug> --yes');
+            const apiKey = values.key ?? (await loadApiKey());
+            if (!apiKey)
+                throw new Error('rm needs an API key — run `shiply login` first');
+            await sitesRm({ base: values.base, apiKey }, dir, { yes: Boolean(values.yes) });
+            return;
+        }
+        case 'rollback': {
+            if (!dir)
+                throw new Error('usage: shiply rollback <slug> [versionId]  (omit versionId to list versions)');
+            const apiKey = values.key ?? (await loadApiKey());
+            if (!apiKey)
+                throw new Error('rollback needs an API key — run `shiply login` first');
+            await sitesRollback({ base: values.base, apiKey }, dir, positionals[2]);
+            return;
+        }
+        case 'verify': {
+            if (!dir)
+                throw new Error('usage: shiply verify <slug>');
+            // exit 0 when LIVE, 1 when PENDING — same contract as `status`, so an agent
+            // can chain `shiply verify <slug> && <next step>` safely.
+            const ready = await verifySite({ base: values.base }, dir);
+            process.exitCode = ready ? 0 : 1;
+            return;
+        }
+        case 'promote': {
+            const dest = values.to;
+            if (!dir || !dest)
+                throw new Error('usage: shiply promote <preview-slug> --to <dest-slug>');
+            const apiKey = values.key ?? (await loadApiKey());
+            if (!apiKey)
+                throw new Error('promote needs an API key — run `shiply login` first');
+            await sitesPromote({ base: values.base, apiKey }, dir, dest);
+            return;
+        }
         case 'detect': {
             await runDetect(dir ?? '.', { framework: values.framework });
             return;

package/dist/manifest.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import { readdir, readFile } from 'node:fs/promises';
 import { extname, join } from 'node:path';
+import { loadIgnore } from './ignore.js';
 const MIME = {
     '.html': 'text/html',
     '.htm': 'text/html',
@@ -40,22 +41,30 @@ const SKIP_DIRS = new Set(['node_modules']);
  *  config directory (proxy.json, data.json), which the server consumes. */
 export async function buildManifest(dir) {
     const out = [];
-    await walk(dir, '', out);
+    const ignore = await loadIgnore(dir);
+    await walk(dir, '', out, ignore);
     return out.sort((a, b) => a.path.localeCompare(b.path));
 }
-async function walk(abs, rel, out) {
+async function walk(abs, rel, out, ignore) {
     const entries = await readdir(abs, { withFileTypes: true });
     for (const e of entries) {
         if (e.name === '.shiply' && e.isDirectory() && rel === '') {
-            await walk(join(abs, e.name), '.shiply', out);
+            // The .shiply/ config dir (proxy.json, data.json) is fully exempt from
+            // .shiplyignore — the server needs it, and a broad user rule like
+            // `*.json` must not be able to silently drop the site's own config.
+            // Pass a null matcher so nothing under .shiply/ is ignore-filtered.
+            await walk(join(abs, e.name), '.shiply', out, null);
             continue;
         }
         if (e.name.startsWith('.') || SKIP_DIRS.has(e.name))
             continue;
         const childAbs = join(abs, e.name);
         const childRel = rel ? `${rel}/${e.name}` : e.name;
+        // .shiplyignore: skip matched paths (and whole subtrees for dir matches).
+        if (ignore?.(childRel, e.isDirectory()))
+            continue;
         if (e.isDirectory()) {
-            await walk(childAbs, childRel, out);
+            await walk(childAbs, childRel, out, ignore);
         }
         else if (e.isFile()) {
             const buf = await readFile(childAbs);

package/dist/previews.js

@@ -0,0 +1,26 @@
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const registryPath = (home) => join(home, '.shiply', 'previews.json');
+async function readAll(home) {
+    try {
+        return JSON.parse(await readFile(registryPath(home), 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+/** Look up the slug/credentials previously bound to a `--as <name>` alias. */
+export async function readPreview(name, home = homedir()) {
+    const all = await readAll(home);
+    return all[name] ?? null;
+}
+/** Remember the slug a `--as <name>` alias published to, so the next publish
+ *  with the same name UPDATES the same URL (stable preview). */
+export async function writePreview(name, entry, home = homedir()) {
+    const all = await readAll(home);
+    all[name] = entry;
+    const path = registryPath(home);
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, `${JSON.stringify(all, null, 2)}\n`);
+}

package/dist/sites.js

@@ -0,0 +1,70 @@
+import { api, resolveBase } from './publish.js';
+const headers = (apiKey) => ({
+    'content-type': 'application/json',
+    authorization: `Bearer ${apiKey}`,
+});
+export async function sitesLs(ctx) {
+    const base = resolveBase(ctx.base);
+    const { sites } = await api(`${base}/api/v1/publishes`, {
+        headers: headers(ctx.apiKey),
+    });
+    if (sites.length === 0) {
+        console.log('  no sites yet — run `shiply publish <dir>` to create one');
+        return;
+    }
+    for (const s of sites) {
+        const title = s.title ? `  ${s.title}` : '';
+        console.log(`  ${s.slug}  [${s.status}]  https://${s.slug}.shiply.now${title}`);
+    }
+}
+export async function sitesRm(ctx, slug, opts) {
+    if (!opts.yes) {
+        console.error(`  refusing — \`shiply rm\` PERMANENTLY deletes ${slug} and its files. Re-run with --yes to confirm.`);
+        return;
+    }
+    const base = resolveBase(ctx.base);
+    await api(`${base}/api/v1/publish/${slug}`, {
+        method: 'DELETE',
+        headers: headers(ctx.apiKey),
+    });
+    console.log(`✔ deleted ${slug}`);
+}
+export async function sitesRollback(ctx, slug, versionId) {
+    const base = resolveBase(ctx.base);
+    // No versionId → print the version history so the agent can pick one.
+    if (!versionId) {
+        const detail = await api(`${base}/api/v1/publish/${slug}`, { headers: headers(ctx.apiKey) });
+        const finalized = detail.versions.filter((v) => v.status === 'finalized');
+        if (finalized.length === 0) {
+            console.log('  no finalized versions to roll back to');
+            return;
+        }
+        console.log(`  versions for ${slug} (newest first):`);
+        for (const v of finalized) {
+            const mark = v.id === detail.currentVersionId ? '  ← current (live)' : '';
+            console.log(`    ${v.id}  ${v.fileCount} files  ${v.finalizedAt ?? ''}${mark}`);
+        }
+        console.log(`\n  roll back with: shiply rollback ${slug} <versionId>`);
+        return;
+    }
+    const res = await api(`${base}/api/v1/publish/${slug}/rollback`, {
+        method: 'POST',
+        headers: headers(ctx.apiKey),
+        body: JSON.stringify({ versionId }),
+    });
+    if (!res.changed) {
+        console.log(`  ${slug} is already serving ${versionId} — nothing to do`);
+        return;
+    }
+    console.log(`✔ rolled ${res.slug} to ${res.currentVersionId} — live now`);
+}
+export async function sitesPromote(ctx, srcSlug, destSlug) {
+    const base = resolveBase(ctx.base);
+    const r = await api(`${base}/api/v1/publish/${srcSlug}/promote`, {
+        method: 'POST',
+        headers: headers(ctx.apiKey),
+        body: JSON.stringify({ destSlug }),
+    });
+    console.log(`✔ promoted ${r.sourceSlug} → ${r.slug} (${r.filesCount} files) — live now`);
+    console.log(`\n  https://${r.slug}.shiply.now\n`);
+}

package/dist/verify.js

@@ -0,0 +1,26 @@
+// packages/cli/src/verify.ts
+import { api, resolveBase } from './publish.js';
+/** Edge-check a shiply slug: SSL, HTTP reachability, and a rendered thumbnail.
+ *  Headless agents use this to confirm what they shipped is actually serving.
+ *  Returns true when LIVE, false when PENDING — the caller sets the exit code
+ *  (0 / 1) so `shiply verify <slug> && <next>` only proceeds once it's serving. */
+export async function verifySite(ctx, slug) {
+    if (slug.includes('.')) {
+        throw new Error(`verify takes a shiply slug, not a hostname — for custom domains use \`shiply status ${slug}\``);
+    }
+    const base = resolveBase(ctx.base);
+    const r = await api(`${base}/api/v1/sites/${slug}/verify`, {
+        headers: { 'content-type': 'application/json' },
+    });
+    const sslLine = r.ssl.valid
+        ? `valid${r.ssl.issuer ? ` (${r.ssl.issuer}` : ''}${r.ssl.daysLeft !== undefined ? `, ${r.ssl.daysLeft}d left)` : r.ssl.issuer ? ')' : ''}`
+        : `not ready${r.ssl.error ? ` — ${r.ssl.error}` : ''}`;
+    console.log(`${r.status === 'LIVE' ? '✔' : '…'} ${slug}.shiply.now — ${r.status}`);
+    console.log(`  ssl:  ${sslLine}`);
+    console.log(`  http: ${r.http.ok ? `ok (HTTP ${r.http.status})` : `not ready${r.http.status ? ` (HTTP ${r.http.status})` : r.http.error ? ` — ${r.http.error}` : ''}`}`);
+    if (r.thumbnailUrl)
+        console.log(`  shot: ${r.thumbnailUrl}`);
+    // Stable machine marker for agents/scrapers (mirrors SITE_READY in `status`).
+    console.log(`VERIFY status=${r.status} http=${r.http.status ?? 0} ssl=${r.ssl.valid ? 'valid' : 'pending'}${r.thumbnailUrl ? ` thumb=${r.thumbnailUrl}` : ''}`);
+    return r.status === 'LIVE';
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shiply-cli",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Publish static sites to shiply.now from the command line — instant web hosting for agents.",
   "license": "MIT",
   "type": "module",

package/skill/SKILL.md

@@ -18,7 +18,7 @@ description: Publish static sites to the web instantly with shiply.now and manag
 > fresh — your cached copy may be missing features like databases, projects,
 > marketplace, or sending domains.
 >
-> **Last updated: 2026-06-22**
+> **Last updated: 2026-06-23**
 
 ---
 
@@ -144,6 +144,47 @@ so repeat publishes reuse the URL automatically. `--new-site` opts out.
 Gitignore `.shiply.json` in public repos. Parse `SITE_READY` / `SSL_READY`
 lines for automation; exit code 0 = ready.
 
+## Manage & verify sites (CLI)
+
+List, delete, roll back, verify, and promote owned sites — all over the same
+Bearer API key. Great for agents that ship iteratively and need to keep their
+subdomains tidy.
+
+```bash
+shiply ls                                   # list your sites: slug, status, URL
+shiply rm <slug> --yes                      # PERMANENTLY delete a site + its files (--yes required)
+shiply rollback <slug>                      # list finalized versions (current one marked)
+shiply rollback <slug> <versionId>          # re-point the site to that version — live instantly
+shiply verify <slug>                        # edge SSL + HTTP + thumbnail readiness check
+shiply publish <dir> --as <name>            # STABLE preview: same URL every iteration (local alias)
+shiply promote <preview-slug> --to <dest-slug>   # copy the preview's exact live bytes onto a prod site
+shiply publish <dir> --json                 # one machine-readable JSON line, no confetti/banners
+```
+
+- **`shiply verify <slug>`** prints a human report PLUS a stable machine marker
+  line `VERIFY status=LIVE http=200 ssl=valid thumb=…` (or `status=PENDING`).
+  Headless agents should parse that `VERIFY status=…` line — it's the
+  contract, like `SITE_READY` in `status`.
+- **`shiply publish <dir> --as <name>`** gives a stable preview URL that the
+  next publish with the same `--as <name>` reuses — no more changing URLs or
+  orphaned scratch sites across iterations, independent of the source dir.
+- **`shiply promote <preview-slug> --to <dest-slug>`** copies the *exact bytes*
+  you previewed onto an existing owned destination site (keeps its slug,
+  domains, access) — atomic preview→production, no rebuild.
+- **`--json`** on `publish`/`update` emits a single JSON line
+  `{slug,siteUrl,siteId,uploaded,skipped,anonymous,expiresAt,updated}` and
+  suppresses all human output + confetti — use it in scripts/agents.
+- **`.shiplyignore`** in the publish root excludes files from upload
+  (documented gitignore subset: `# comments`, `secret.txt`, `internal/`,
+  `*.log`, `/anchored`, `**` globs, `!negation`). Keep `.env`, notes, and
+  internal files out of the published bytes.
+
+To verify captured signups/form data without the dashboard, the data
+subcommands already exist: `shiply data list <slug>` (collections + counts),
+`shiply data query <slug> <coll> [--limit N] [--where '<json>']`, and
+`shiply data export <slug> <coll> [--out file.ndjson]`. Confetti is
+suppressed automatically on non-TTY stdout; `--no-confetti` forces it off.
+
 ### 3. Raw HTTP (no installs)
 ```
 1. POST https://shiply.now/api/v1/publish