spinuptui 0.19.1 → 0.20.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spinuptui",
-  "version": "0.19.1",
+  "version": "0.20.1",
   "description": "SpinupTUI — a terminal dashboard for browsing, monitoring, and managing your SpinupWP servers and sites.",
   "type": "module",
   "bin": {

package/src/dev/fixtures.ts

@@ -1,9 +1,15 @@
-// Example fleet for Dev Mode (SPINUP_DEV_MODE=1) — a small, deliberately varied set
-// of servers/sites/events so every view has something interesting to show: an EOL
-// Ubuntu server, EOL PHP versions, a Bedrock site, a non-WP app, an empty server, a
-// disabled-HTTPS site, and a mix of disk usage / update counts. All domains are
+// Example fleet for Dev Mode (SPINUP_DEV_MODE=1) — a deliberately varied fleet (12
+// servers / ~80 sites) so every view has plenty to show: EOL Ubuntu and EOL PHP
+// servers/sites, Bedrock sites, non-WP apps, an empty server, a mid-provisioning
+// server, a self-hosted/"custom" server, disabled-HTTPS sites, stale/missing
+// backups, and a spread of disk usage / pending-update counts. All domains are
 // example.com/.org/.net — never a real client's.
 //
+// Sites 1001-1006 are hand-authored (kept stable so anything that references
+// them by id stays meaningful); sites 1007+ are generated deterministically
+// (see GENERATED_SITE_PLAN below) — no Math.random/Date.now, so the fleet is
+// identical across runs (reproducible screenshots, stable diffs).
+//
 // freshFixtures() returns a deep clone so MockSpinupWPClient can mutate its own copy
 // freely without leaking state across StoreProvider remounts.
 
@@ -84,9 +90,153 @@ const SERVERS: Server[] = [
     created_at: "2025-01-08T16:45:00Z",
     status: "active",
   },
+  {
+    id: 105,
+    name: "web4.example.com",
+    provider_name: "hetzner",
+    ubuntu_version: "24.04",
+    ip_address: "203.0.113.24",
+    ssh_port: 22,
+    timezone: "UTC",
+    region: "fsn1",
+    size: "cx41",
+    disk_space: { total: 120 * GB, available: 80 * GB, used: 40 * GB, updated_at: "2026-07-01T08:00:00Z" },
+    database: null,
+    connection_status: "connected",
+    reboot_required: false,
+    upgrade_required: false,
+    created_at: "2024-05-12T12:00:00Z",
+    status: "active",
+  },
+  {
+    id: 106,
+    name: "web5.example.net",
+    provider_name: "digitalocean",
+    ubuntu_version: "22.04",
+    ip_address: "203.0.113.25",
+    ssh_port: 22,
+    timezone: "UTC",
+    region: "sfo3",
+    size: "s-2vcpu-4gb",
+    disk_space: { total: 60 * GB, available: 42 * GB, used: 18 * GB, updated_at: "2026-07-01T08:00:00Z" },
+    database: null,
+    connection_status: "connected",
+    reboot_required: false,
+    upgrade_required: false,
+    created_at: "2025-09-19T10:30:00Z",
+    status: "active",
+  },
+  {
+    id: 107,
+    name: "web6.example.com",
+    provider_name: "vultr",
+    ubuntu_version: "24.04",
+    ip_address: "203.0.113.26",
+    ssh_port: 22,
+    timezone: "UTC",
+    region: "lax",
+    size: "vc2-4c-8gb",
+    disk_space: { total: 100 * GB, available: 75 * GB, used: 25 * GB, updated_at: "2026-07-01T08:00:00Z" },
+    database: null,
+    connection_status: "connected",
+    reboot_required: false,
+    upgrade_required: false,
+    created_at: "2023-11-03T08:15:00Z",
+    status: "active",
+  },
+  {
+    id: 108,
+    name: "web7.example.net",
+    provider_name: "linode",
+    ubuntu_version: "22.04",
+    ip_address: "203.0.113.27",
+    ssh_port: 22,
+    timezone: "UTC",
+    region: "eu-west",
+    size: "g6-standard-4",
+    disk_space: { total: 100 * GB, available: 45 * GB, used: 55 * GB, updated_at: "2026-07-01T08:00:00Z" },
+    database: null,
+    connection_status: "connected",
+    reboot_required: true,
+    upgrade_required: false,
+    created_at: "2024-02-27T09:00:00Z",
+    status: "active",
+  },
+  {
+    id: 109,
+    name: "web8.example.org",
+    provider_name: "hetzner",
+    ubuntu_version: "18.04",
+    ip_address: "203.0.113.28",
+    ssh_port: 22,
+    timezone: "UTC",
+    region: "hel1",
+    size: "cx31",
+    disk_space: { total: 40 * GB, available: 2 * GB, used: 38 * GB, updated_at: "2026-07-01T08:00:00Z" },
+    database: null,
+    connection_status: "connected",
+    reboot_required: false,
+    upgrade_required: true,
+    created_at: "2021-09-14T11:00:00Z",
+    status: "active",
+  },
+  {
+    id: 110,
+    name: "web10.example.com",
+    provider_name: "digitalocean",
+    ubuntu_version: "24.04",
+    ip_address: "203.0.113.30",
+    ssh_port: 22,
+    timezone: "UTC",
+    region: "ams3",
+    size: "s-4vcpu-8gb",
+    disk_space: { total: 160 * GB, available: 90 * GB, used: 70 * GB, updated_at: "2026-07-01T08:00:00Z" },
+    database: null,
+    connection_status: "connected",
+    reboot_required: false,
+    upgrade_required: false,
+    created_at: "2024-08-30T14:20:00Z",
+    status: "active",
+  },
+  {
+    id: 111,
+    name: "web11.example.org",
+    provider_name: "vultr",
+    ubuntu_version: "24.04",
+    ip_address: "203.0.113.31",
+    ssh_port: 22,
+    timezone: "UTC",
+    region: "syd",
+    size: "vc2-2c-4gb",
+    disk_space: null,
+    database: null,
+    connection_status: "connecting",
+    reboot_required: false,
+    upgrade_required: false,
+    created_at: "2026-07-08T07:50:00Z",
+    status: "active",
+  },
+  {
+    id: 112,
+    name: "edge1.example.net",
+    provider_name: null,
+    ubuntu_version: "22.04",
+    ip_address: "203.0.113.32",
+    ssh_port: 2222,
+    timezone: "UTC",
+    region: null,
+    size: null,
+    disk_space: { total: 80 * GB, available: 71 * GB, used: 9 * GB, updated_at: "2026-07-01T08:00:00Z" },
+    database: null,
+    connection_status: "connected",
+    reboot_required: false,
+    upgrade_required: false,
+    created_at: "2025-04-02T13:10:00Z",
+    status: "active",
+  },
 ]
 
-const SITES: Site[] = [
+const HAND_SITES: Site[] = [
   {
     id: 1001,
     server_id: 101,
@@ -193,6 +343,169 @@ const SITES: Site[] = [
   },
 ]
 
+// --- Generated sites (1007+) ------------------------------------------------
+//
+// One realistic short business-site word per generated site, so domains read as
+// a real-looking fleet rather than "site1.example.com". Words already used by
+// HAND_SITES (shop/blog/docs/app) are excluded to avoid collisions.
+const WORDS = [
+  "status", "portal", "members", "support", "academy", "press", "forum", "store",
+  "news", "events", "clinic", "studio", "gallery", "market", "travel", "fitness",
+  "realty", "law", "dental", "vet", "bakery", "garage", "garden", "kitchen",
+  "media", "agency", "consult", "finance", "insure", "charity", "church",
+  "school", "camp", "yoga", "spa", "salon", "barber", "tailor", "florist",
+  "nursery", "daycare", "tutoring", "coaching", "photography", "videography",
+  "catering", "brewery", "winery", "coffee", "bistro", "diner", "grill",
+  "pizzeria", "patisserie", "boutique", "jewelry", "antiques", "hardware",
+  "plumbing", "electric", "roofing", "landscaping", "painting", "moving",
+  "cleaning", "security", "accounting", "marketing", "printing", "repair",
+  "rental", "storage", "notary", "locksmith",
+]
+const TLDS = ["com", "org", "net"]
+
+// A handful of dates to cycle through deterministically (spread over ~3 years
+// up to "today" in Dev Mode, 2026-07-08) — real-looking site ages without
+// touching Date.now().
+const CREATED_DATES = [
+  "2022-09-14T10:00:00Z", "2023-01-22T14:30:00Z", "2023-05-09T08:45:00Z",
+  "2023-08-30T16:00:00Z", "2023-11-17T11:20:00Z", "2024-02-06T09:15:00Z",
+  "2024-04-19T13:40:00Z", "2024-06-25T10:05:00Z", "2024-09-03T15:50:00Z",
+  "2024-12-11T12:00:00Z", "2025-02-14T09:30:00Z", "2025-04-28T17:10:00Z",
+  "2025-06-16T08:20:00Z", "2025-08-22T14:00:00Z", "2025-10-05T11:45:00Z",
+  "2025-12-01T09:00:00Z", "2026-02-09T13:15:00Z", "2026-04-14T10:30:00Z",
+  "2026-05-20T15:40:00Z", "2026-06-10T08:00:00Z",
+]
+
+// One "kind" per site, cycled by index — covers every stack the app classifies
+// (Standard WP / Bedrock / Non-WP), plus the health signals the Dashboard,
+// Stacks, and Browser views surface: EOL PHP, disabled HTTPS, disabled/absent
+// backups, pending core/theme/plugin updates, and a non-Bedrock WP site that
+// still deploys via git (a case cloneStackFor's git.repo-precedence handles).
+type SiteKind = (site: { id: number; server_id: number; domain: string; site_user: string; created_at: string }) => Site
+
+const KINDS: SiteKind[] = [
+  // Standard WP, healthy, current PHP.
+  (s) => ({
+    ...s, php_version: "8.3", public_folder: "/", is_wordpress: true,
+    page_cache: { enabled: true }, https: { enabled: true },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: true, database: true, retention_period: 14, next_run_time: "2026-07-09T03:00:00Z" },
+    wp_core_update: false, wp_theme_updates: 0, wp_plugin_updates: 2, status: "active",
+  }),
+  // Bedrock, healthy, current PHP.
+  (s) => ({
+    ...s, php_version: "8.2", public_folder: "/web/", is_wordpress: true,
+    page_cache: { enabled: true }, https: { enabled: true },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: true, database: true, retention_period: 14, next_run_time: "2026-07-09T03:00:00Z" },
+    git: { repo: `git@github.com:example/${s.site_user}-bedrock.git`, branch: "main", deploy_script: "composer install -o --no-dev", push_enabled: true, deployment_url: null },
+    wp_core_update: false, wp_theme_updates: 0, wp_plugin_updates: 0, status: "active",
+  }),
+  // Non-WP static site.
+  (s) => ({
+    ...s, php_version: "8.3", public_folder: "/public/", is_wordpress: false,
+    https: { enabled: true }, status: "active",
+  }),
+  // WP on EOL PHP, no backups, plenty of updates pending.
+  (s) => ({
+    ...s, php_version: "7.4", public_folder: "/", is_wordpress: true,
+    page_cache: { enabled: false }, https: { enabled: true },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: false, database: false },
+    wp_core_update: true, wp_theme_updates: 2, wp_plugin_updates: 7, status: "active",
+  }),
+  // Non-WP app (custom PHP app, not WordPress at all).
+  (s) => ({
+    ...s, php_version: "8.1", public_folder: "/public/", is_wordpress: false,
+    https: { enabled: true }, status: "active",
+  }),
+  // Standard WP with HTTPS disabled.
+  (s) => ({
+    ...s, php_version: "8.3", public_folder: "/", is_wordpress: true,
+    page_cache: { enabled: true }, https: { enabled: false },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: true, database: true, retention_period: 14, next_run_time: "2026-07-09T03:00:00Z" },
+    wp_core_update: false, wp_theme_updates: 1, wp_plugin_updates: 1, status: "active",
+  }),
+  // Bedrock on EOL PHP (8.1 aged out of security support 2025-12-31).
+  (s) => ({
+    ...s, php_version: "8.1", public_folder: "/web/", is_wordpress: true,
+    page_cache: { enabled: true }, https: { enabled: true },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: true, database: true, retention_period: 7, next_run_time: "2026-07-09T03:00:00Z" },
+    git: { repo: `git@github.com:example/${s.site_user}-bedrock.git`, branch: "main", deploy_script: "composer install -o --no-dev", push_enabled: true, deployment_url: null },
+    wp_core_update: false, wp_theme_updates: 0, wp_plugin_updates: 1, status: "active",
+  }),
+  // Standard WP, heavy pending updates + EOL PHP.
+  (s) => ({
+    ...s, php_version: "8.0", public_folder: "/", is_wordpress: true,
+    page_cache: { enabled: false }, https: { enabled: true },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: true, database: true, retention_period: 7, next_run_time: "2026-07-09T03:00:00Z" },
+    wp_core_update: true, wp_theme_updates: 3, wp_plugin_updates: 11, status: "active",
+  }),
+  // Fresh Standard WP site, newest PHP, everything current.
+  (s) => ({
+    ...s, php_version: "8.4", public_folder: "/", is_wordpress: true,
+    page_cache: { enabled: true }, https: { enabled: true },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: true, database: true, retention_period: 30, next_run_time: "2026-07-09T03:00:00Z" },
+    wp_core_update: false, wp_theme_updates: 0, wp_plugin_updates: 0, status: "active",
+  }),
+  // Standard WP (not Bedrock) that still deploys via git.
+  (s) => ({
+    ...s, php_version: "8.3", public_folder: "/", is_wordpress: true,
+    page_cache: { enabled: true }, https: { enabled: true },
+    database: { id: s.id, user_id: s.id, table_prefix: "wp_" },
+    backups: { files: true, database: true, retention_period: 14, next_run_time: "2026-07-09T03:00:00Z" },
+    git: { repo: `git@github.com:example/${s.site_user}.git`, branch: "main", deploy_script: null, push_enabled: false, deployment_url: null },
+    wp_core_update: false, wp_theme_updates: 1, wp_plugin_updates: 4, status: "active",
+  }),
+]
+
+// How many generated sites land on each active server. 102 (empty) and 111
+// (still connecting) deliberately get none — see the SERVERS list above.
+const GENERATED_SITE_PLAN: { serverId: number; count: number }[] = [
+  { serverId: 101, count: 3 },
+  { serverId: 103, count: 3 },
+  { serverId: 104, count: 3 },
+  { serverId: 105, count: 12 },
+  { serverId: 106, count: 3 },
+  { serverId: 107, count: 15 },
+  { serverId: 108, count: 8 },
+  { serverId: 109, count: 5 },
+  { serverId: 110, count: 20 },
+  { serverId: 112, count: 2 },
+]
+
+function generateSites(): Site[] {
+  const out: Site[] = []
+  let wordIdx = 0
+  let id = 1007
+  for (const { serverId, count } of GENERATED_SITE_PLAN) {
+    for (let i = 0; i < count; i++) {
+      const word = WORDS[wordIdx % WORDS.length]!
+      const tld = TLDS[wordIdx % TLDS.length]!
+      const domain = `${word}.example.${tld}`
+      const kind = KINDS[wordIdx % KINDS.length]!
+      out.push(
+        kind({
+          id,
+          server_id: serverId,
+          domain,
+          site_user: word,
+          created_at: CREATED_DATES[wordIdx % CREATED_DATES.length]!,
+        }),
+      )
+      wordIdx++
+      id++
+    }
+  }
+  return out
+}
+
+const SITES: Site[] = [...HAND_SITES, ...generateSites()]
+
 const EVENTS: Event[] = [
   {
     id: 9001,
@@ -227,6 +540,182 @@ const EVENTS: Event[] = [
     started_at: "2026-06-27T04:00:02Z",
     finished_at: "2026-06-27T04:01:15Z",
   },
+  {
+    id: 9004,
+    initiated_by: "dev-mode",
+    server_id: 111,
+    name: "server.provisioned",
+    status: "running",
+    output: "Provisioning web11.example.org on Vultr (syd)…",
+    created_at: "2026-07-08T07:50:00Z",
+    started_at: "2026-07-08T07:50:03Z",
+    finished_at: null,
+  },
+  {
+    id: 9005,
+    initiated_by: "dev-mode",
+    server_id: 107,
+    name: "site.https.enabled",
+    status: "failed",
+    output: "HTTPS request failed for realty.example.com — DNS does not yet resolve to this server",
+    created_at: "2026-07-07T15:22:00Z",
+    started_at: "2026-07-07T15:22:01Z",
+    finished_at: "2026-07-07T15:22:18Z",
+  },
+  {
+    id: 9006,
+    initiated_by: "dev-mode",
+    server_id: 105,
+    name: "site.php_version.updated",
+    status: "deployed",
+    output: "PHP updated to 8.4 for coffee.example.net",
+    created_at: "2026-07-06T10:05:00Z",
+    started_at: "2026-07-06T10:05:04Z",
+    finished_at: "2026-07-06T10:05:39Z",
+  },
+  {
+    id: 9007,
+    initiated_by: "dev-mode",
+    server_id: 110,
+    name: "site.domains.updated",
+    status: "deployed",
+    output: "Added domain www.marketing.example.com",
+    created_at: "2026-07-05T13:40:00Z",
+    started_at: "2026-07-05T13:40:02Z",
+    finished_at: "2026-07-05T13:40:27Z",
+  },
+  {
+    id: 9008,
+    initiated_by: "dev-mode",
+    server_id: 108,
+    name: "server.service.mysql.restarted",
+    status: "deployed",
+    output: "mysql restarted on web7.example.net",
+    created_at: "2026-07-04T22:10:00Z",
+    started_at: "2026-07-04T22:10:01Z",
+    finished_at: "2026-07-04T22:10:12Z",
+  },
+  {
+    id: 9009,
+    initiated_by: "dev-mode",
+    server_id: 109,
+    name: "site.object_cache.purged",
+    status: "deployed",
+    output: "Object cache purged for repair.example.net",
+    created_at: "2026-07-04T09:00:00Z",
+    started_at: "2026-07-04T09:00:01Z",
+    finished_at: "2026-07-04T09:00:06Z",
+  },
+  {
+    id: 9010,
+    initiated_by: "dev-mode",
+    server_id: 106,
+    name: "site.https.disabled",
+    status: "deployed",
+    output: "HTTPS disabled for insure.example.org pending certificate reissue",
+    created_at: "2026-07-02T18:30:00Z",
+    started_at: "2026-07-02T18:30:02Z",
+    finished_at: "2026-07-02T18:30:20Z",
+  },
+  {
+    id: 9011,
+    initiated_by: "dev-mode",
+    server_id: 107,
+    name: "server.rebooted",
+    status: "deployed",
+    output: "Server rebooted successfully",
+    created_at: "2026-06-28T04:00:00Z",
+    started_at: "2026-06-28T04:00:02Z",
+    finished_at: "2026-06-28T04:01:08Z",
+  },
+  {
+    id: 9012,
+    initiated_by: "dev-mode",
+    server_id: 110,
+    name: "site.created",
+    status: "deployed",
+    output: "Site salon.example.com created",
+    created_at: "2026-06-24T11:15:00Z",
+    started_at: "2026-06-24T11:15:02Z",
+    finished_at: "2026-06-24T11:16:40Z",
+  },
+  {
+    id: 9013,
+    initiated_by: "dev-mode",
+    server_id: 105,
+    name: "server.service.nginx.restarted",
+    status: "deployed",
+    output: "nginx restarted on web4.example.com",
+    created_at: "2026-06-20T06:45:00Z",
+    started_at: "2026-06-20T06:45:01Z",
+    finished_at: "2026-06-20T06:45:09Z",
+  },
+  {
+    id: 9014,
+    initiated_by: "dev-mode",
+    server_id: 109,
+    name: "server.upgrade_required",
+    status: "deployed",
+    output: "Security updates available on web8.example.org (Ubuntu 18.04, EOL)",
+    created_at: "2026-06-18T05:00:00Z",
+    started_at: "2026-06-18T05:00:00Z",
+    finished_at: "2026-06-18T05:00:00Z",
+  },
+  {
+    id: 9015,
+    initiated_by: "dev-mode",
+    server_id: 112,
+    name: "site.cache.purged",
+    status: "deployed",
+    output: "Page cache purged for notary.example.com",
+    created_at: "2026-06-15T14:00:00Z",
+    started_at: "2026-06-15T14:00:01Z",
+    finished_at: "2026-06-15T14:00:07Z",
+  },
+  {
+    id: 9016,
+    initiated_by: "dev-mode",
+    server_id: 108,
+    name: "site.php_version.updated",
+    status: "deployed",
+    output: "PHP updated to 8.2 for tailor.example.net",
+    created_at: "2026-06-10T09:20:00Z",
+    started_at: "2026-06-10T09:20:03Z",
+    finished_at: "2026-06-10T09:20:51Z",
+  },
+  {
+    id: 9017,
+    initiated_by: "dev-mode",
+    server_id: 106,
+    name: "server.provisioned",
+    status: "deployed",
+    output: "Server web5.example.net provisioned",
+    created_at: "2025-09-19T10:30:00Z",
+    started_at: "2025-09-19T10:30:04Z",
+    finished_at: "2025-09-19T10:34:12Z",
+  },
+  {
+    id: 9018,
+    initiated_by: "dev-mode",
+    server_id: 105,
+    name: "server.provisioned",
+    status: "deployed",
+    output: "Server web4.example.com provisioned",
+    created_at: "2024-05-12T12:00:00Z",
+    started_at: "2024-05-12T12:00:05Z",
+    finished_at: "2024-05-12T12:04:30Z",
+  },
+  {
+    id: 9019,
+    initiated_by: "dev-mode",
+    server_id: 112,
+    name: "server.service.redis.restarted",
+    status: "deployed",
+    output: "redis restarted on edge1.example.net",
+    created_at: "2024-01-08T20:00:00Z",
+    started_at: "2024-01-08T20:00:01Z",
+    finished_at: "2024-01-08T20:00:06Z",
+  },
 ]
 
 function clone<T>(value: T): T {

package/src/lib/serverClone.ts

@@ -11,6 +11,7 @@
 // that shape the Bedrock branch).
 
 import type { Server } from "../api/types.ts"
+import { wpCliResolveScript } from "./wpCli.ts"
 
 const SSH_OPTS = ["-o", "BatchMode=yes", "-o", "ConnectTimeout=10", "-o", "StrictHostKeyChecking=accept-new"]
 
@@ -700,6 +701,7 @@ export interface VerifySpec {
   publicFolder?: string // configured public folder — fallback when the pull's rels are unknown
   sourceWebrootRel?: string // DETECTED source layout from the pull ("" = files root)
   destWebrootRel?: string // the CLONE's WP dir from the pull (post-normalization)
+  phpVersion?: string | null // the site's configured PHP version — see wpCli.ts
 }
 
 // One round-trip per side: collect labeled wp-cli facts as `key=value` lines.
@@ -707,10 +709,14 @@ export interface VerifySpec {
 // stalled outbound call once ate the whole budget and cut the facts off mid-script) —
 // and the flags are identical on both sides, so every count stays comparable. The
 // trailing `eof` sentinel is how verifyClone tells "read got cut off" from "differs".
-async function wpFacts(ctx: SudoCtx, root: string, user: string): Promise<Record<string, string>> {
+// wp-cli is pinned to the site's OWN configured PHP-CLI (wpCliResolveScript) rather
+// than bare `wp` — see wpCli.ts for why (a server's system-default PHP can silently
+// differ from, and be missing extensions present in, the site's actual version).
+async function wpFacts(ctx: SudoCtx, root: string, user: string, phpVersion?: string | null): Promise<Record<string, string>> {
   const script = [
     `cd ${shq(root)} 2>/dev/null || exit 0`,
-    `u() { sudo -u ${shq(user)} -H wp --skip-plugins --skip-themes "$@" 2>/dev/null; }`,
+    wpCliResolveScript(phpVersion),
+    `u() { sudo -u ${shq(user)} -H "$PHP" "$WP" --skip-plugins --skip-themes "$@" 2>/dev/null; }`,
     `echo "core=$(u core version)"`,
     `echo "posts=$(u post list --post_type=any --format=count)"`,
     `echo "pages=$(u post list --post_type=page --format=count)"`,
@@ -753,8 +759,8 @@ export async function verifyClone(source: SudoCtx, dest: SudoCtx, spec: VerifySp
   const srcDir = dirFor(spec.sourceWebrootRel)
   const destDir = dirFor(spec.destWebrootRel)
   const [sf, cf, http] = await Promise.all([
-    wpFacts(source, srcDir, spec.sourceSiteUser),
-    wpFacts(dest, destDir, spec.destSiteUser),
+    wpFacts(source, srcDir, spec.sourceSiteUser, spec.phpVersion),
+    wpFacts(dest, destDir, spec.destSiteUser, spec.phpVersion),
     curlStatus(spec.domain, spec.destIp),
   ])
   // A missing tail sentinel means the facts script was cut off partway (timeout, a
@@ -764,6 +770,22 @@ export async function verifyClone(source: SudoCtx, dest: SudoCtx, spec: VerifySp
     const side = sf.eof !== "1" ? "source" : "clone"
     throw new Error(`couldn't read the ${side}'s WordPress facts (the wp-cli read was cut off) — press v to re-run`)
   }
+  // `core` succeeding (a file read, no DB) while EVERY database-backed fact comes
+  // back empty is a distinct signature from a real content difference (which shows
+  // differing NON-empty values, not blanks) — it means wp-cli's PHP-CLI couldn't
+  // reach the database on that side, commonly a missing `mysqli` extension for
+  // whatever PHP version it resolved to (see wpCli.ts). Surface that plainly
+  // instead of a wall of misleading ✕ rows implying the clone lost data.
+  const dbFields = ["posts", "pages", "users", "plugins", "siteurl", "home"] as const
+  const looksBroken = (f: Record<string, string>) => !!f.core && dbFields.every((k) => !f[k])
+  const srcBroken = looksBroken(sf)
+  const cloneBroken = looksBroken(cf)
+  if (srcBroken || cloneBroken) {
+    const side = srcBroken && cloneBroken ? "both the source and the clone" : srcBroken ? "the source" : "the clone"
+    throw new Error(
+      `wp-cli can't reach ${side}'s database over PHP (commonly a missing "mysqli" extension for whatever PHP-CLI it resolved to) — this looks like a server/PHP-CLI environment issue, not an actual data difference.`,
+    )
+  }
   const checks: VerifyCheck[] = []
   checks.push({ key: "http", label: "Clone serves (HTTP)", source: "—", clone: http, ok: /^[23]\d\d$/.test(http) })
   const cmp = (key: string, label: string) => {

package/src/lib/stack.ts

@@ -49,6 +49,29 @@ export function effectiveStack(site: Site, probeKind?: ProbeKind | null): Stack
   }
 }
 
+// Which pull the clone wizard runs for a site — the SAME effectiveStack a
+// probe corrects elsewhere (Stacks tab, Browser), so an API-mislabeled site
+// (is_wordpress=false but really WordPress — confirmed live against real
+// client sites, 2026-07-08) gets a real database pull once probed, instead
+// of silently defaulting to a files-only copy. git.repo still takes
+// precedence for Bedrock detection (the pull needs the repo URL, which a
+// probe alone can't supply) — is_wordpress is unreliable for git sites, so
+// absent a probe (or a WP-family one) git.repo remains the best available
+// signal. But git.repo alone only proves "deployed via git," not "is
+// Bedrock" — a git-deployed STATIC site (confirmed live, 2026-07-09: a
+// client's git-deployed static site, repo literally named
+// "*-static-site") would otherwise be routed through a Bedrock pull
+// (composer install, wp-cli) it can't survive. A CONCLUSIVE non-WordPress
+// probe (whmcs/laravel/static) overrides git.repo; a probe saying
+// "bedrock"/"wordpress", or no probe at all, still trusts git.repo.
+export function cloneStackFor(site: Site, probeKind?: ProbeKind | null): "wp" | "bedrock" | "files" {
+  if (site.git?.repo) {
+    if (probeKind === "whmcs" || probeKind === "laravel" || probeKind === "static") return "files"
+    return "bedrock"
+  }
+  return effectiveStack(site, probeKind) === "Standard WP" ? "wp" : "files"
+}
+
 // `onSelection` brightens the colors that read poorly on the focused
 // (bright-green) selection background (green-on-green Bedrock, the faint grey).
 export function stackColor(stack: Stack, onSelection = false): string {

package/src/lib/wpCli.ts

@@ -0,0 +1,30 @@
+// Resolve wp-cli through the SITE's own configured PHP-CLI, not the bare `wp`
+// command. wp-cli's installed binary shebangs `#!/usr/bin/env php`, which
+// resolves through PATH to the SERVER's system-DEFAULT PHP — which drifts
+// toward whatever version was installed most recently, independent of any
+// individual site's configured version, and can be missing extensions that
+// version's CLI SAPI never got configured with.
+//
+// Verified live 2026-07-09 on web4.wenmarkdigital.com: the system default had
+// drifted to 8.4, whose CLI lacked `mysqli` (its FPM pool likely never needed
+// it — no site there runs 8.4), while lp.anchoredconstructiontn.com's actual
+// configured version (8.1) has a fully working php8.1-cli. Bare `wp` silently
+// ran under 8.4 and failed on anything touching $wpdb (post/user/plugin list,
+// option get) — while `wp core version`, and `wp db export/import/check/size`
+// (they shell out to native mysql client tools, not through mysqli) were
+// unaffected. Confirmed the fix directly: `/usr/bin/php8.1 /usr/local/bin/wp
+// post list ...` returned correct data where bare `wp` errored.
+//
+// Only applies to REMOTE (SSH) wp-cli calls against SpinupWP-managed servers,
+// which have this specific multi-PHP-version-drift shape. Local dev-machine
+// wp-cli (e.g. dbSync.ts's prod→local pull) is a different environment with
+// its own PHP entirely and is not affected — don't apply this there.
+
+// Emits POSIX shell that resolves $WP (the wp-cli binary) and $PHP (the
+// version-pinned interpreter, falling back to the bare `php` on PATH if the
+// versioned binary isn't installed — never worse than today's behavior).
+// Callers invoke `"$PHP" "$WP" ...` in place of bare `wp ...`.
+export function wpCliResolveScript(phpVersion?: string | null): string {
+  const phpBin = phpVersion ? `php${phpVersion}` : "php"
+  return [`WP=$(command -v wp 2>/dev/null || echo /usr/local/bin/wp)`, `PHP=$(command -v ${phpBin} 2>/dev/null || command -v php)`].join("\n")
+}