spinuptui 0.28.0 → 1.0.0

package/CHANGELOG.md

@@ -5,12 +5,29 @@ All notable changes to this project are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-While the project is in `0.x`, the public surface (CLI subcommands/flags, config
-file location and format, and token-resolution behavior) may change between minor
-versions; such changes are called out here.
+From 1.0.0, the public surface (CLI subcommands/flags, config file location and
+format, and token-resolution behavior) changes incompatibly only in a major
+version; such changes are called out here.
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-09-24
+
+### Added
+- **Install with Homebrew.** `brew install mwender/tap/spinuptui` installs SpinupTUI along with Bun, and `brew upgrade spinuptui` updates it. The About panel (`?`) recognizes a Homebrew install and shows `brew upgrade spinuptui` as its update command instead of the Bun one.
+- **API headroom in the header.** The top bar now shows how many SpinupWP API requests are left in the current minute (`API 52/60`). It stays dim while there's plenty, turns amber once three-quarters of the minute's budget is spent, and red when SpinupTUI starts spacing out requests to avoid hitting the limit, so a slow moment has a visible reason. It refills on its own when the minute rolls over.
+- **Clone Radicle sites.** The clone wizard now clones git-deployed Radicle sites properly. Uploads come across from `content/uploads`, and after the database import the site's own deploy script runs on the new server, so the front-end is built (`npm ci`, `npm run build`, Acorn caches) the way a normal deploy would. Before creating anything, the wizard stops if the Radicle site has no deploy script, or if its script needs Node and the destination server doesn't have it. SpinupWP servers don't come with Node, so install it on the destination first.
+- **Clones keep your cron jobs.** Lines you added to a site's crontab (a feed import, a report, an Acorn or Laravel command) are copied to the clone under a `# Carried over from …` comment. Lines you commented out are copied as they are, SpinupWP's own WordPress cron entry is left to SpinupWP, and a retry never adds a line twice. The verify pane (`v`) says how many lines came across.
+
+### Changed
+- **Clones match the source's page cache and push-to-deploy** instead of using fixed defaults, and send the source's own deploy script.
+
+### Fixed
+- **Plugins & themes (`e`) no longer shows an empty list on sites with noisy plugins.** Some plugins print PHP notices into wp-cli's output, sometimes on the same line as the plugin list, and the view read that as "no plugins installed". The list is now found wherever it sits in the output, and if wp-cli returns no list at all the view says so, with the first line of what it printed, instead of showing zero plugins. The WordPress core update check uses the same parsing.
+
+### Notes
+- **SpinupWP clears a deploy script set through its API** a minute or two after the site is created, and there's no API call to set it afterwards. After a clone, the wizard checks the new site; if the script is gone, the roster marks the site and the verify pane offers `g`, which copies the source's script and opens the new site's Git settings so you can paste it back. The same check flags a push-to-deploy setting that didn't carry over.
+
 ## [0.28.0] - 2026-09-23
 
 ### Added
@@ -1436,7 +1453,8 @@ Initial tagged release.
 ### Notes
 - Read-only release: works with a SpinupWP **Read Only** API token.
 
-[Unreleased]: https://github.com/mwender/spinupwp-tui/compare/v0.28.0...HEAD
+[Unreleased]: https://github.com/mwender/spinupwp-tui/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/mwender/spinupwp-tui/compare/v0.28.0...v1.0.0
 [0.28.0]: https://github.com/mwender/spinupwp-tui/compare/v0.27.0...v0.28.0
 [0.27.0]: https://github.com/mwender/spinupwp-tui/compare/v0.26.1...v0.27.0
 [0.26.1]: https://github.com/mwender/spinupwp-tui/compare/v0.26.0...v0.26.1

package/README.md

@@ -112,14 +112,20 @@
 
 ## Install & run
 
-The easy way — install the published package globally:
+The easy way — Homebrew (it installs Bun for you):
 
 ```sh
-bun install -g spinuptui
+brew install mwender/tap/spinuptui
 spinuptui login          # save your API token to the config file (once)
 spinuptui                # launch from any directory
 ```
 
+Or, if you already have Bun, install the published package globally:
+
+```sh
+bun install -g spinuptui
+```
+
 On first launch, if no token is configured you'll be guided through a short
 onboarding flow that validates your token and saves it locally.
 
@@ -155,6 +161,8 @@ bun run build:binary     # produces ./spinuptui — move it onto your PATH
 The app tells you when a newer release exists — a gold `✦ vX.Y.Z` appears next
 to the version in the header (and in the `?` About panel).
 
+- **Homebrew:** `brew upgrade spinuptui` (the About panel shows the same
+  command).
 - **Package install:** `bun add -g spinuptui@latest` (the About panel shows
   the same command). Don't use `bun update -g` — while spinuptui is pre-1.0,
   it records a caret range (e.g. `^0.22.2`) that excludes every later minor

package/bun.lock

@@ -0,0 +1,103 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "name": "spinuptui",
+      "dependencies": {
+        "@opentui/core": "^0.4.1",
+        "@opentui/react": "^0.4.1",
+        "react": "^19.0.0",
+        "socket.io-client": "^4.8.3",
+      },
+      "devDependencies": {
+        "@types/bun": "^1.3.14",
+        "@types/react": "^19.0.0",
+        "typescript": "^5.6.0",
+      },
+    },
+  },
+  "packages": {
+    "@opentui/core": ["@opentui/core@0.4.5", "", { "dependencies": { "bun-ffi-structs": "0.2.4", "diff": "9.0.0", "marked": "17.0.1", "string-width": "7.2.0", "strip-ansi": "7.1.2" }, "optionalDependencies": { "@opentui/core-darwin-arm64": "0.4.5", "@opentui/core-darwin-x64": "0.4.5", "@opentui/core-linux-arm64": "0.4.5", "@opentui/core-linux-arm64-musl": "0.4.5", "@opentui/core-linux-x64": "0.4.5", "@opentui/core-linux-x64-musl": "0.4.5", "@opentui/core-win32-arm64": "0.4.5", "@opentui/core-win32-x64": "0.4.5" }, "peerDependencies": { "web-tree-sitter": "0.25.10" } }, "sha512-JsgRTPkA6e+Vxmumxai6SElOSlRQkbzNKHlCfemlArRiLhfC1IZ9RXJo2QH4xSu+uBOWAM90uss73/pPlkdEig=="],
+
+    "@opentui/core-darwin-arm64": ["@opentui/core-darwin-arm64@0.4.5", "", { "os": "darwin", "cpu": "arm64" }, "sha512-8KUG0oRidnR+oW1RSZJ72/PhZLl+qRRMk5U/mieF4c0SJ5V3tYACpBZAKzQfHNd1f7QzD8FHZct1lPpQgtmkWg=="],
+
+    "@opentui/core-darwin-x64": ["@opentui/core-darwin-x64@0.4.5", "", { "os": "darwin", "cpu": "x64" }, "sha512-R2bocsg55gwjOqCp/MWFgFYzRmsduKegB6nzgFAPCvAD/L5Jf30xpWJWFlSg3x8vxe1L9WJ84dfqa4M7mZZ3wA=="],
+
+    "@opentui/core-linux-arm64": ["@opentui/core-linux-arm64@0.4.5", "", { "os": "linux", "cpu": "arm64" }, "sha512-R4MZ25a4CzOAGVjW9aj1hUfzQGVfCJwrwBDbNs2SXaIvzcZqkxCVtU4FoQ5LsaD0j/BdNQVg2CIfFkFsm1fDuQ=="],
+
+    "@opentui/core-linux-arm64-musl": ["@opentui/core-linux-arm64-musl@0.4.5", "", { "os": "linux", "cpu": "arm64" }, "sha512-ieqdyKI6EIYPalYAETB2wsdP83hr5Ifi+dFnBFUmdEEFHsoKwBmn2S7bsTOYlX7Bg03F4/YPIg+IvRpeC+cUJw=="],
+
+    "@opentui/core-linux-x64": ["@opentui/core-linux-x64@0.4.5", "", { "os": "linux", "cpu": "x64" }, "sha512-SNyuQoxMKI1vuJhgxSSW96adWM6LqFl2SoS3GM4tGeneGOanVVG2Y06PvlytXvF4cKik97t0rqkVMRetmOs93w=="],
+
+    "@opentui/core-linux-x64-musl": ["@opentui/core-linux-x64-musl@0.4.5", "", { "os": "linux", "cpu": "x64" }, "sha512-mKVKcIcPiSVVZZsdPSBoWwoa2/TCeQAaMDeHF7PFw2kt5bTXZPP7xxWfRQLCNIcA1eaGl59UuwUWHDR2Ve548Q=="],
+
+    "@opentui/core-win32-arm64": ["@opentui/core-win32-arm64@0.4.5", "", { "os": "win32", "cpu": "arm64" }, "sha512-GHTTsqeR45q2Iek9Rb7ty+x/hAKn2jZ1ujlCgPR8LBKyF7h0E1dNFryoZ7ehMc3kJndP1sKn836IemKFqxuDdQ=="],
+
+    "@opentui/core-win32-x64": ["@opentui/core-win32-x64@0.4.5", "", { "os": "win32", "cpu": "x64" }, "sha512-Y8T/yXCDGagRGiQrtmuB6AhRcPucKFs/Dre3v8kJwNYqDccI4FzUPKclZ7djfmRZNjl7JUqPhZZP/PwDpQocMg=="],
+
+    "@opentui/react": ["@opentui/react@0.4.5", "", { "dependencies": { "@opentui/core": "0.4.5", "react-reconciler": "^0.33.0" }, "peerDependencies": { "react": ">=19.2.0", "react-devtools-core": "^7.0.1", "ws": "^8.18.0" } }, "sha512-n88Vx0cMmAu++/S14WscjvdcT46IDcxve02jMtcfHQ9j6cySRHfILfGEpOB7xxc8RpCwQceEyOjkKkfzPzm6Jg=="],
+
+    "@socket.io/component-emitter": ["@socket.io/component-emitter@3.1.2", "", {}, "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA=="],
+
+    "@types/bun": ["@types/bun@1.3.14", "", { "dependencies": { "bun-types": "1.3.14" } }, "sha512-h1hFqFVcvAvD9j9K7ZW7vd82aSA+rTdznZa+5bwvCwqSB1jmmfLcbIWhOLx1/+boy/xmjgCs/OMUL8hRJSmnPw=="],
+
+    "@types/node": ["@types/node@26.1.2", "", { "dependencies": { "undici-types": "~8.3.0" } }, "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg=="],
+
+    "@types/react": ["@types/react@19.2.18", "", { "dependencies": { "csstype": "^3.2.2" } }, "sha512-AnzbBERsrLKtk2XSfTbYRLjQPdy116Sty4q+T+Bp3IC4l6jNBvreVPAHmpq9qhXQM7CXZPjLVmGMw9sy+hxQ3w=="],
+
+    "ansi-regex": ["ansi-regex@6.2.2", "", {}, "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg=="],
+
+    "bun-ffi-structs": ["bun-ffi-structs@0.2.4", "", { "peerDependencies": { "typescript": "^5" } }, "sha512-AJzsqoVFs1KBbJbWHIYrVZLDC3NhTqqh25awRXqzoLzmBAKr5oqk6+CwuYHAekKx+VBCYVohBoKuRq40dV+TYg=="],
+
+    "bun-types": ["bun-types@1.3.14", "", { "dependencies": { "@types/node": "*" } }, "sha512-4N0ig0fEomHt5R0KCFWjovxow98rIoRwKolrYdCcknNwMekCXRnWEUvgu5soYV8QXtVsrUD8B95MBOZGPvr6KQ=="],
+
+    "csstype": ["csstype@3.2.3", "", {}, "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ=="],
+
+    "debug": ["debug@4.4.3", "", { "dependencies": { "ms": "^2.1.3" }, "peerDependencies": { "supports-color": "*" }, "optionalPeers": ["supports-color"] }, "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA=="],
+
+    "diff": ["diff@9.0.0", "", {}, "sha512-svtcdpS8CgJyqAjEQIXdb3OjhFVVYjzGAPO8WGCmRbrml64SPw/jJD4GoE98aR7r25A0XcgrK3F02yw9R/vhQw=="],
+
+    "emoji-regex": ["emoji-regex@10.6.0", "", {}, "sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A=="],
+
+    "engine.io-client": ["engine.io-client@6.6.6", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1", "engine.io-parser": "~5.2.1", "ws": "~8.21.0", "xmlhttprequest-ssl": "~2.1.1" } }, "sha512-iY6QdftLQ9pyiPoX082bpf/u1UewnOaJrtJIF9T0++QB34lZrj0uP+Q/bj8AlUsAxqhnkTV2BS8SBZSxOmoV5Q=="],
+
+    "engine.io-parser": ["engine.io-parser@5.2.3", "", {}, "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q=="],
+
+    "get-east-asian-width": ["get-east-asian-width@1.6.0", "", {}, "sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA=="],
+
+    "marked": ["marked@17.0.1", "", { "bin": { "marked": "bin/marked.js" } }, "sha512-boeBdiS0ghpWcSwoNm/jJBwdpFaMnZWRzjA6SkUMYb40SVaN1x7mmfGKp0jvexGcx+7y2La5zRZsYFZI6Qpypg=="],
+
+    "ms": ["ms@2.1.3", "", {}, "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+
+    "react": ["react@19.2.8", "", {}, "sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw=="],
+
+    "react-devtools-core": ["react-devtools-core@7.0.1", "", { "dependencies": { "shell-quote": "^1.6.1", "ws": "^7" } }, "sha512-C3yNvRHaizlpiASzy7b9vbnBGLrhvdhl1CbdU6EnZgxPNbai60szdLtl+VL76UNOt5bOoVTOz5rNWZxgGt+Gsw=="],
+
+    "react-reconciler": ["react-reconciler@0.33.0", "", { "dependencies": { "scheduler": "^0.27.0" }, "peerDependencies": { "react": "^19.2.0" } }, "sha512-KetWRytFv1epdpJc3J4G75I4WrplZE5jOL7Yq0p34+OVOKF4Se7WrdIdVC45XsSSmUTlht2FM/fM1FZb1mfQeA=="],
+
+    "scheduler": ["scheduler@0.27.0", "", {}, "sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q=="],
+
+    "shell-quote": ["shell-quote@1.10.0", "", {}, "sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA=="],
+
+    "socket.io-client": ["socket.io-client@4.8.3", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1", "engine.io-client": "~6.6.1", "socket.io-parser": "~4.2.4" } }, "sha512-uP0bpjWrjQmUt5DTHq9RuoCBdFJF10cdX9X+a368j/Ft0wmaVgxlrjvK3kjvgCODOMMOz9lcaRzxmso0bTWZ/g=="],
+
+    "socket.io-parser": ["socket.io-parser@4.2.7", "", { "dependencies": { "@socket.io/component-emitter": "~3.1.0", "debug": "~4.4.1" } }, "sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg=="],
+
+    "string-width": ["string-width@7.2.0", "", { "dependencies": { "emoji-regex": "^10.3.0", "get-east-asian-width": "^1.0.0", "strip-ansi": "^7.1.0" } }, "sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ=="],
+
+    "strip-ansi": ["strip-ansi@7.1.2", "", { "dependencies": { "ansi-regex": "^6.0.1" } }, "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA=="],
+
+    "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
+
+    "undici-types": ["undici-types@8.3.0", "", {}, "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ=="],
+
+    "web-tree-sitter": ["web-tree-sitter@0.25.10", "", { "peerDependencies": { "@types/emscripten": "^1.40.0" }, "optionalPeers": ["@types/emscripten"] }, "sha512-Y09sF44/13XvgVKgO2cNDw5rGk6s26MgoZPXLESvMXeefBf7i6/73eFurre0IsTW6E14Y0ArIzhUMmjoc7xyzA=="],
+
+    "ws": ["ws@8.21.2", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": ">=5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-54dMVAo4WIe6SKy3vBgN+9bJZqqQ8IMRevAkOLQALhi49qkkQDQfWdAZ8KQlXiEabw88ARXXdUrlvtbKQX+aKw=="],
+
+    "xmlhttprequest-ssl": ["xmlhttprequest-ssl@2.1.2", "", {}, "sha512-TEU+nJVUUnA4CYJFLvK5X9AOeH4KvDvhIfm0vV1GaQRtchnG0hgK5p8hw/xjv8cunWYCsiPCSDzObPyhEwq3KQ=="],
+
+    "react-devtools-core/ws": ["ws@7.5.13", "", { "peerDependencies": { "bufferutil": "^4.0.1", "utf-8-validate": "^5.0.2" }, "optionalPeers": ["bufferutil", "utf-8-validate"] }, "sha512-rsKI6xDBFVf4r/x8XyChGK04QR/XHroxs/jUcoWvtEZM8TPU/X/uIY9B1CsSzYws9ZJb/6bbBu7dPhFW00CAoA=="],
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spinuptui",
-  "version": "0.28.0",
+  "version": "1.0.0",
   "description": "SpinupTUI — a terminal dashboard for browsing, monitoring, and managing your SpinupWP servers and sites.",
   "type": "module",
   "bin": {
@@ -11,7 +11,8 @@
     "src",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "bun.lock"
   ],
   "repository": {
     "type": "git",

package/src/api/client.ts

@@ -110,15 +110,44 @@ const MAX_PAGES = 100 // hard safety cap when auto-paginating
 // event polling burned the window and made SUCCESSFUL operations look failed.
 let rlRemaining = Infinity
 let rlResetAt = 0
-const RL_LOW_WATER = 8 // start pacing when fewer than this many requests remain
+let rlLimit = 0 // X-RateLimit-Limit as last seen; 0 = no response yet
+export const RL_LOW_WATER = 8 // start pacing when fewer than this many requests remain
 const RL_MAX_RETRIES = 3
 const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms))
 
 function rlUpdate(headers: Headers): void {
-  const rem = Number(headers.get("x-ratelimit-remaining"))
-  if (Number.isFinite(rem)) rlRemaining = rem
+  // Number(null) is 0, so a missing header must not read as "0 left".
+  const remHeader = headers.get("x-ratelimit-remaining")
+  const rem = Number(remHeader)
+  if (remHeader !== null && Number.isFinite(rem)) rlRemaining = rem
+  const limit = Number(headers.get("x-ratelimit-limit"))
+  if (Number.isFinite(limit) && limit > 0) rlLimit = limit
   // No reset header outside 429s — assume the standard 1-minute window rolls over.
   if (rlResetAt < Date.now()) rlResetAt = Date.now() + 60_000
+  rlNotify()
+}
+
+// Read side for the header's headroom indicator: what's left of this minute's
+// budget, so a user sees the wall coming before a 429 (or before pacing makes
+// the app feel slow). null until the first response has told us the limit.
+export interface RateLimitSnapshot {
+  remaining: number
+  limit: number
+  resetAt: number
+}
+const rlListeners = new Set<() => void>()
+function rlNotify(): void {
+  for (const l of rlListeners) l()
+}
+export function rateLimitSnapshot(): RateLimitSnapshot | null {
+  if (!rlLimit || !Number.isFinite(rlRemaining)) return null
+  // Past the window's end the last count is stale: a fresh window is full.
+  const remaining = rlResetAt < Date.now() ? rlLimit : rlRemaining
+  return { remaining, limit: rlLimit, resetAt: rlResetAt }
+}
+export function onRateLimitChange(listener: () => void): () => void {
+  rlListeners.add(listener)
+  return () => rlListeners.delete(listener)
 }
 
 async function rlGate(): Promise<void> {
@@ -154,6 +183,7 @@ export class SpinupWPClient implements SpinupWPClientLike {
         const waitMs = (Number.isFinite(ra) && ra > 0 ? ra : 20) * 1000
         rlRemaining = 0
         rlResetAt = Date.now() + waitMs
+        rlNotify()
         await sleep(waitMs + Math.random() * 500)
         continue
       }

package/src/lib/appUpdate.ts

@@ -129,15 +129,27 @@ export async function refreshUpdateInfo(current: string): Promise<UpdateInfo | n
 // ---- In-app updater (`u` in the Help/About overlay) ------------------------
 
 // How this copy of the app was installed, which decides the update path shown
-// in Help/About: a package-manager install (bun/npm global) lives under a
-// node_modules dir and updates via `bun update -g spinuptui`; anything else is
+// in Help/About: a Homebrew install lives in the Cellar (the formula unpacks the
+// package into its libexec) and updates via `brew upgrade`; a package-manager
+// install (bun/npm global) lives under a node_modules dir; anything else is
 // treated as a git checkout and updates via `git pull` (runSelfUpdate).
-export type InstallChannel = "git" | "package"
+export type InstallChannel = "git" | "package" | "brew"
 
 export function installChannel(): InstallChannel {
+  if (import.meta.dir.includes(`${sep}Cellar${sep}spinuptui${sep}`)) return "brew"
   return import.meta.dir.includes(`${sep}node_modules${sep}`) ? "package" : "git"
 }
 
+// Homebrew owns its copy — `bun add -g` beside it would install a second one
+// that the `spinuptui` on PATH never runs.
+export const BREW_UPDATE_CMD = "brew upgrade spinuptui"
+
+// The manual update command for this install (null for a git checkout).
+export function updateCommand(): string | null {
+  const ch = installChannel()
+  return ch === "brew" ? BREW_UPDATE_CMD : ch === "package" ? PACKAGE_UPDATE_CMD : null
+}
+
 // The one-liner Help shows for a package install (also used by runSelfUpdate's
 // "not a checkout" message so every path names the same command).
 //
@@ -187,7 +199,7 @@ export async function runSelfUpdate(cwd: string = checkoutRoot()): Promise<SelfU
   try {
     const isRepo = await git(cwd, ["rev-parse", "--is-inside-work-tree"])
     if (isRepo.code !== 0 || isRepo.stdout !== "true") {
-      return { ok: false, message: `This install isn't a git checkout — update with \`${PACKAGE_UPDATE_CMD}\`.`, needsInstall: false }
+      return { ok: false, message: `This install isn't a git checkout — update with \`${updateCommand() ?? PACKAGE_UPDATE_CMD}\`.`, needsInstall: false }
     }
     const status = await git(cwd, ["status", "--porcelain"])
     if (status.stdout.length > 0) {

package/src/lib/serverClone.ts

@@ -472,6 +472,13 @@ export interface BedrockPullSpec {
   destDbPassword: string
   excludeUploads: boolean
   publicFolder?: string // a signal, not a fact (CLAUDE.md) — re-verified below, independently, on both ends
+  // The source site's own git deploy script. Run on the dest after the DB import
+  // when the source is Radicle: its front-end (Vite build → public/build) and
+  // Acorn caches are gitignored, so composer install alone leaves the theme
+  // unbuilt, and the owner's deploy script is their own definition of "build this
+  // site". It runs last because Radicle deploy scripts call wp-cli (acorn
+  // optimize, cache purge, rewrite flush), which needs the imported database.
+  deployScript?: string
 }
 
 export async function runBedrockPull(
@@ -515,9 +522,12 @@ export async function runBedrockPull(
     //    source happened to detect — its structure comes from the git repo's own
     //    content, which can legitimately diverge from the source's on-disk state.
     onProgress("detect", "start")
-    const det = await run("detect", source, `${detectWpDirScript(root, spec.publicFolder)}; echo "WPCORE:$W"; echo "BEDROCKROOT:$B"`, 30_000)
+    const det = await run("detect", source, `${detectWpDirScript(root, spec.publicFolder)}; echo "WPCORE:$W"; echo "BEDROCKROOT:$B"; echo "RADICLEROOT:$RD"`, 30_000)
     const wpCore = (det.stdout.match(/^WPCORE:(.*)$/m)?.[1] ?? "").trim()
     const srcProjectRoot = (det.stdout.match(/^BEDROCKROOT:(.*)$/m)?.[1] ?? "").trim()
+    // Radicle requires roots/bedrock-autoloader, so it passes the Bedrock check
+    // above too — this is what tells the two apart.
+    const radicle = (det.stdout.match(/^RADICLEROOT:(.*)$/m)?.[1] ?? "").trim() !== ""
     if (!det.ok || !wpCore || !srcProjectRoot) {
       return fail("detect", `couldn't find a Bedrock project (composer.json + WordPress core) under ${root} on the source — is the public folder set correctly?`)
     }
@@ -577,20 +587,23 @@ export async function runBedrockPull(
     if (!composer.ok) return fail("build", (composer.stdout + composer.stderr).trim().split("\n").slice(-3).join(" ") || "composer install failed")
     onProgress("build", "ok")
 
-    // 3. files — pull {web}/app/uploads (unless excluded), `web` being whatever the
-    //    detected public folder is actually named — which can differ in nesting
-    //    depth between source and dest (the repo's own content vs. how deep the
-    //    source's on-disk state happens to be). Archiving/extracting relative to
-    //    EACH side's own web dir (not `root`) with a fixed member name sidesteps
-    //    that — the two ends never need to agree on a shared relative path. Best-
-    //    effort: a site with no uploads dir yields an empty stream we simply skip.
+    // 3. files — pull the uploads dir under the public folder: Bedrock's
+    //    app/uploads or Radicle's content/uploads, whichever the source has.
+    //    `web` is whatever the detected public folder is actually named, and it
+    //    can differ in nesting depth between source and dest (the repo's own
+    //    content vs. how deep the source's on-disk state happens to be).
+    //    Archiving/extracting relative to EACH side's own web dir (not `root`)
+    //    keeps the member name (app/uploads or content/uploads) the same on both
+    //    ends, so they never need to agree on a shared relative path. Best-effort:
+    //    a site with no uploads dir yields an empty stream we simply skip.
     onProgress("files", "start")
     if (!spec.excludeUploads) {
       const stopUpPoll = pollTransferSize(dest, `${tmp}_up.tgz`, (b) => onTransfer?.("files", b))
+      const srcUploads = `cd ${shq(webDir)} && for d in app/uploads content/uploads; do if [ -d "$d" ]; then tar --warning=no-file-changed -czf - "$d"; rc=$?; [ $rc -le 1 ] && exit 0; exit $rc; fi; done; true`
       const up = await run(
         "files",
         dest,
-        `set -e; timeout -k 5 3600 ${remote(`[ -d ${shq(`${webDir}/app/uploads`)} ] && tar -C ${shq(webDir)} --warning=no-file-changed -czf - app/uploads || true`)} > ${tmp}_up.tgz; if [ -s ${tmp}_up.tgz ]; then tar -C ${shq(destWebDir)} -xzf ${tmp}_up.tgz && chown -R ${shq(du)}:${shq(du)} ${shq(`${destWebDir}/app/uploads`)}; fi; rm -f ${tmp}_up.tgz`,
+        `set -e; timeout -k 5 3600 ${remote(srcUploads)} > ${tmp}_up.tgz; if [ -s ${tmp}_up.tgz ]; then tar -C ${shq(destWebDir)} -xzf ${tmp}_up.tgz && for d in app/uploads content/uploads; do [ -d ${shq(destWebDir)}/$d ] && chown -R ${shq(du)}:${shq(du)} ${shq(destWebDir)}/$d; done; true; fi; rm -f ${tmp}_up.tgz`,
         3_660_000, // outer must exceed the in-script `timeout 3600` so the inner reports a clean 124
       )
       stopUpPoll()
@@ -641,6 +654,23 @@ export async function runBedrockPull(
     if (!imp.ok) return fail("db", imp.stderr.trim() || "db pull/import failed")
     onProgress("db", "ok")
 
+    // 5b. deploy — Radicle only: run the source's own deploy script (see
+    //     BedrockPullSpec.deployScript). Staged as a file owned by the site user
+    //     (base64 in, so no quoting of the owner's script is ever needed) and run
+    //     from the project root, exactly where SpinupWP's own deploys run it.
+    if (radicle && spec.deployScript?.trim()) {
+      onProgress("build", "start", "deploy script")
+      const b64 = Buffer.from(spec.deployScript.replace(/\r\n/g, "\n")).toString("base64")
+      const deploy = await run(
+        "build",
+        dest,
+        `set -e; echo ${shq(b64)} | base64 -d > ${tmp}_deploy.sh; chown ${shq(du)}:${shq(du)} ${tmp}_deploy.sh; chmod 600 ${tmp}_deploy.sh; cd ${shq(destProjectRoot)}; rc=0; sudo -u ${shq(du)} -H bash -lc ${shq(`cd ${shq(destProjectRoot)} && bash ${tmp}_deploy.sh`)} 2>&1 || rc=$?; rm -f ${tmp}_deploy.sh; exit $rc`,
+        1_200_000,
+      )
+      if (!deploy.ok) return fail("build", `the site's deploy script failed: ${(deploy.stdout + deploy.stderr).trim().split("\n").slice(-3).join(" ") || `exit ${deploy.code}`}`)
+      onProgress("build", "ok")
+    }
+
     // 6. verify — wp-cli on the dest (HTTP --resolve is the caller's).
     onProgress("verify", "start")
     const ver = await run("verify", dest, `cd ${shq(destProjectRoot)}; sudo -u ${shq(du)} -H wp core is-installed`, 30_000)
@@ -652,7 +682,7 @@ export async function runBedrockPull(
     // 7. revoke — drop the pull key (by marker) on source, clean dest temp + staged dump.
     onProgress("revoke", "start")
     await run("revoke", source, `AK=${shq(home)}/.ssh/authorized_keys; [ -f "$AK" ] && sed -i ${shq(`/${MARKER}/d`)} "$AK" && chown ${shq(su)}:${shq(su)} "$AK"; rm -f ${shq(home)}/.clone_db.sql.gz`, 30_000).catch(() => {})
-    await run("revoke", dest, `rm -f ${KEY} ${KEY}.pub ${tmp}_auth.json ${tmp}_up.tgz ${tmp}_env ${tmp}.sql.gz ${tmp}.sql`, 30_000).catch(() => {})
+    await run("revoke", dest, `rm -f ${KEY} ${KEY}.pub ${tmp}_auth.json ${tmp}_up.tgz ${tmp}_env ${tmp}.sql.gz ${tmp}.sql ${tmp}_deploy.sh`, 30_000).catch(() => {})
     onProgress("revoke", "ok")
   }
 }
@@ -667,11 +697,20 @@ export async function runBedrockPull(
 // just BEFORE a destination site (and its git clone) gets created for nothing.
 // Silent no-op for anything that isn't a detectable Bedrock install; that's
 // covered by the pull chain's own detection, not this pre-check's job.
-export async function preflightBedrockSource(source: SudoCtx, spec: { domain: string; publicFolder?: string }): Promise<{ ok: true } | { ok: false; error: string }> {
+//
+// For a Radicle source whose deploy script builds the front-end with npm/yarn/
+// pnpm, it also checks the destination has Node: a stock SpinupWP server doesn't,
+// and finding out after the create would leave a half-built site behind. We stop
+// and say so rather than install it — the server's packages aren't ours to manage.
+export async function preflightBedrockSource(
+  source: SudoCtx,
+  spec: { domain: string; publicFolder?: string; deployScript?: string },
+  dest?: SudoCtx,
+): Promise<{ ok: true } | { ok: false; error: string }> {
   const root = `/sites/${spec.domain}/files`
   const expectedWebDir = webrootFor(root, spec.publicFolder)
   const expectedProjectRoot = expectedWebDir === root ? root : expectedWebDir.slice(0, expectedWebDir.lastIndexOf("/"))
-  const r = await exec(source, `${detectWpDirScript(root, spec.publicFolder)}; echo "BEDROCKROOT:$B"`, 30_000)
+  const r = await exec(source, `${detectWpDirScript(root, spec.publicFolder)}; echo "BEDROCKROOT:$B"; echo "RADICLEROOT:$RD"`, 30_000)
   const detected = (r.stdout.match(/^BEDROCKROOT:(.*)$/m)?.[1] ?? "").trim()
   if (!r.ok || !detected) return { ok: true }
   if (detected !== expectedProjectRoot) {
@@ -680,9 +719,103 @@ export async function preflightBedrockSource(source: SudoCtx, spec: { domain: st
       error: `this site's actual files (Bedrock project at ${detected}) don't match its configured Public Folder (implies ${expectedProjectRoot}) — align them and retry`,
     }
   }
+  const radicle = (r.stdout.match(/^RADICLEROOT:(.*)$/m)?.[1] ?? "").trim() !== ""
+  // Radicle's front-end build lives only in the deploy script (see
+  // BedrockPullSpec.deployScript) — without one the clone would come up with no
+  // built assets and answer 500. SpinupWP can drop a script set through its API
+  // (one sent on create is gone a minute or two later), so this is reachable.
+  if (radicle && !spec.deployScript?.trim()) {
+    return {
+      ok: false,
+      error: "this Radicle site has no deploy script in SpinupWP, so there's nothing to build its front-end with — add one (Site → Git) and retry",
+    }
+  }
+  if (radicle && dest && /\b(npm|npx|yarn|pnpm|node)\b/.test(spec.deployScript ?? "")) {
+    const n = await exec(dest, `command -v node >/dev/null 2>&1 && echo HASNODE || echo NONODE`, 30_000)
+    if (n.stdout.includes("NONODE")) {
+      return {
+        ok: false,
+        error: `this Radicle site's deploy script builds its front-end with Node, and ${dest.server.name} doesn't have Node installed — install Node on it and retry`,
+      }
+    }
+  }
   return { ok: true }
 }
 
+// ---- Crontab carry-over --------------------------------------------------------
+//
+// SpinupWP writes each site user's crontab itself: a PATH line and an
+// `#Ansible: <domain>` block running WP cron. A new site gets its own copy at
+// create, so those are never copied. Anything else in the source user's crontab
+// was added by the site owner (a feed import, an Acorn/Laravel command, a report
+// job), and without this step a clone silently stops running it. Lines are copied
+// verbatim, commented-out ones included (a disabled job stays disabled), which is
+// safe because a clone keeps the domain and site user, so every path matches.
+// Idempotent: a line the dest already has is skipped, so a retry adds nothing.
+
+export interface CrontabSyncResult {
+  ok: boolean
+  added: string[] // the lines appended to the dest crontab (empty = nothing to carry)
+  error?: string
+}
+
+// The owner-added lines of a crontab: everything except SpinupWP's `#Ansible:`
+// marker + the job line after it, and blank lines. Environment lines (PATH=…,
+// MAILTO=…) are kept here; the caller drops the ones the dest already sets.
+// Exported for the test harness.
+export function ownerCrontabLines(crontab: string): string[] {
+  const out: string[] = []
+  const lines = crontab.split("\n").map((l) => l.replace(/\r$/, ""))
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i]
+    if (/^#Ansible:/.test(line)) {
+      i++ // the managed job line that follows the marker
+      continue
+    }
+    if (line.trim() === "") continue
+    out.push(line)
+  }
+  return out
+}
+
+const envName = (line: string): string | null => line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=/)?.[1] ?? null
+
+export async function syncCrontab(
+  source: SudoCtx,
+  dest: SudoCtx,
+  spec: { domain: string; sourceSiteUser: string; destSiteUser: string },
+  onExec?: CloneExecLog,
+): Promise<CrontabSyncResult> {
+  const read = async (ctx: SudoCtx, user: string) => {
+    const t0 = Date.now()
+    const script = `crontab -l -u ${shq(user)} 2>/dev/null || true`
+    const r = await exec(ctx, script, 30_000)
+    onExec?.({ domain: spec.domain, stage: "config", host: ctx.server.name, ok: r.ok, code: r.code, ms: Date.now() - t0, script, stdout: r.stdout, stderr: r.stderr })
+    return r
+  }
+  const src = await read(source, spec.sourceSiteUser)
+  if (!src.ok) return { ok: false, added: [], error: src.stderr.trim() || "couldn't read the source crontab" }
+  const wanted = ownerCrontabLines(src.stdout)
+  if (wanted.length === 0) return { ok: true, added: [] }
+
+  const dst = await read(dest, spec.destSiteUser)
+  if (!dst.ok) return { ok: false, added: [], error: dst.stderr.trim() || "couldn't read the destination crontab" }
+  const have = new Set(dst.stdout.split("\n").map((l) => l.replace(/\r$/, "")))
+  const haveEnv = new Set([...have].map(envName).filter((n): n is string => n != null))
+  // An env line the dest already sets (SpinupWP's own PATH, typically) stays the dest's.
+  const added = wanted.filter((l) => !have.has(l) && !(envName(l) && haveEnv.has(envName(l)!)))
+  if (added.length === 0) return { ok: true, added: [] }
+
+  const block = ["", `# Carried over from ${source.server.name} by the SpinupTUI clone`, ...added].join("\n") + "\n"
+  const b64 = Buffer.from(block).toString("base64")
+  const script = `set -e; { crontab -l -u ${shq(spec.destSiteUser)} 2>/dev/null || true; echo ${shq(b64)} | base64 -d; } | crontab -u ${shq(spec.destSiteUser)} -`
+  const t0 = Date.now()
+  const w = await exec(dest, script, 30_000)
+  onExec?.({ domain: spec.domain, stage: "config", host: dest.server.name, ok: w.ok, code: w.code, ms: Date.now() - t0, script, stdout: w.stdout, stderr: w.stderr })
+  if (!w.ok) return { ok: false, added: [], error: w.stderr.trim() || "couldn't write the destination crontab" }
+  return { ok: true, added }
+}
+
 // ---- Files-only pull chain (non-WP sites: redirect shells, static/PHP sites) --
 //
 // The same hardened transport as the Standard-WP files stage (per-site key,

package/src/lib/spinupweb.ts

@@ -31,3 +31,10 @@ export function serverProvidersSettingsUrl(accountSlug: string | null): string {
 export function siteSftpUrl(id: number, accountSlug: string | null): string {
   return accountSlug ? `${WEB_BASE}/${accountSlug}/sites/${id}#sftp` : WEB_BASE
 }
+
+// A site's Git settings (repo, branch, deploy script). The clone wizard links here
+// when a dest site's deploy script needs re-entering: SpinupWP drops a script
+// set through the API (see the create payload in store.tsx).
+export function siteGitUrl(id: number, accountSlug: string | null): string {
+  return accountSlug ? `${WEB_BASE}/${accountSlug}/sites/${id}#git` : WEB_BASE
+}

package/src/lib/stack.ts

@@ -80,10 +80,13 @@ export function cloneStackFor(site: Site, probeKind?: ProbeKind | null): "wp" |
     if (probeKind === "whmcs" || probeKind === "laravel" || probeKind === "static") return "files"
     return "bedrock"
   }
-  // A "radicle" probe never falls into "wp" here since effectiveStack maps it
-  // to "Radicle", not "Standard WP" — deliberate: the Standard-WP pull chain
-  // assumes a flat webroot and would corrupt a Radicle clone. Real Radicle
-  // clone-wizard support is a separate, not-yet-built phase (issue #38).
+  // A git-deployed Radicle site took the branch above: the Bedrock pull handles
+  // it (it detects Radicle itself, pulls content/uploads, and runs the site's
+  // deploy script to build the front-end). A "radicle" probe with no git repo
+  // never falls into "wp" here since effectiveStack maps it to "Radicle", not
+  // "Standard WP" — deliberate: the Standard-WP pull chain assumes a flat webroot
+  // and would corrupt a Radicle clone, and without the repo there's nothing to
+  // rebuild it from.
   return effectiveStack(site, probeKind) === "Standard WP" ? "wp" : "files"
 }
 

package/src/lib/wpCli.ts

@@ -28,3 +28,55 @@ export function wpCliResolveScript(phpVersion?: string | null): string {
   const phpBin = phpVersion ? `php${phpVersion}` : "php"
   return [`WP=$(command -v wp 2>/dev/null || echo /usr/local/bin/wp)`, `PHP=$(command -v ${phpBin} 2>/dev/null || command -v php)`].join("\n")
 }
+
+// Pull wp-cli's `--format=json` array out of a section of remote stdout that may
+// also carry noise: under the CLI SAPI a plugin's PHP notices/deprecations print
+// to STDOUT (2>/dev/null doesn't catch them), and with no newline of their own
+// they can sit on the same line as the JSON — before it, or after it when they
+// fire at shutdown (seen live: an Elementor Pro deprecation glued to the end of
+// `plugin list` output). So: from every `[`, bracket-match to its closing `]`
+// (skipping brackets inside JSON strings), and keep the longest slice that parses
+// as an array of objects — which is what every wp-cli list is, and what notice
+// text like "on line [3]" or "[array (" never is.
+// Returns null when nothing parses, so callers can tell "wp-cli printed no list"
+// (an error worth surfacing) from a genuinely empty `[]`.
+export function extractJsonArray(lines: string[] | undefined): unknown[] | null {
+  const text = (lines ?? []).join("\n")
+  let best: unknown[] | null = null
+  let bestLen = -1
+  for (let start = text.indexOf("["); start !== -1; start = text.indexOf("[", start + 1)) {
+    const end = matchingBracket(text, start)
+    if (end === -1 || end - start <= bestLen) continue
+    try {
+      const parsed = JSON.parse(text.slice(start, end + 1))
+      if (Array.isArray(parsed) && parsed.every((o) => o !== null && typeof o === "object")) {
+        best = parsed
+        bestLen = end - start
+      }
+    } catch {
+      /* not JSON from here — try the next `[` */
+    }
+  }
+  return best
+}
+
+// Index of the `]` closing the `[` at `start`, or -1. Tracks JSON string state so
+// a bracket inside a value (a plugin name, a URL) doesn't end the match early.
+function matchingBracket(text: string, start: number): number {
+  let depth = 0
+  let inString = false
+  for (let i = start; i < text.length; i++) {
+    const ch = text[i]
+    if (inString) {
+      if (ch === "\\") i++
+      else if (ch === '"') inString = false
+    } else if (ch === '"') inString = true
+    else if (ch === "[" || ch === "{") depth++
+    else if (ch === "]" || ch === "}") {
+      depth--
+      if (depth === 0) return ch === "]" ? i : -1
+      if (depth < 0) return -1
+    }
+  }
+  return -1
+}

package/src/lib/wpCore.ts

@@ -17,7 +17,7 @@
 import type { Server, Site } from "../api/types.ts"
 import { SSH_OPTS, sshPort } from "./dbBackup.ts"
 import { detectWpDirScript } from "./serverClone.ts"
-import { wpCliResolveScript } from "./wpCli.ts"
+import { extractJsonArray, wpCliResolveScript } from "./wpCli.ts"
 import { spawn } from "./spawn.ts"
 
 export interface WpCoreOffer {
@@ -177,24 +177,13 @@ export async function checkWpCore(server: Server, site: Site, sshUser: string |
   const current = lastVersionLine(s.VERSION)
   if (!current) return { ok: false, target: p.target, error: "wp-cli couldn't read the WordPress version on this site." }
 
-  // Belt and braces with --skip-plugins: scan back for the line that parses as
-  // the JSON array, ignoring any other noise (a mu-plugin's notices still load).
+  // Belt and braces with --skip-plugins: a mu-plugin's notices still load, so
+  // pull the JSON array out of any surrounding noise.
   // No match = "Success: WordPress is at the latest version." (plain text).
-  let offers: WpCoreOffer[] = []
-  for (const line of [...(s.UPDATES ?? [])].reverse()) {
-    if (!line.trim().startsWith("[")) continue
-    let parsed: unknown
-    try {
-      parsed = JSON.parse(line.trim())
-    } catch {
-      continue
-    }
-    if (!Array.isArray(parsed)) continue
-    offers = parsed
-      .filter((o) => o && typeof o.version === "string")
-      .map((o) => ({ version: o.version as string, updateType: typeof o.update_type === "string" ? o.update_type : "" }))
-    break
-  }
+  const parsed = extractJsonArray(s.UPDATES) ?? []
+  const offers: WpCoreOffer[] = parsed
+    .filter((o): o is { version: string; update_type?: unknown } => !!o && typeof (o as { version?: unknown }).version === "string")
+    .map((o) => ({ version: o.version, updateType: typeof o.update_type === "string" ? o.update_type : "" }))
 
   const comp = (s.COMPOSER ?? []).join("\n").trim()
   const locked = comp.match(/^locked (.+)$/m)

package/src/lib/wpInventory.ts

@@ -11,7 +11,7 @@
 import type { Server, Site } from "../api/types.ts"
 import { SSH_OPTS, sshPort } from "./dbBackup.ts"
 import { detectWpDirScript } from "./serverClone.ts"
-import { wpCliResolveScript } from "./wpCli.ts"
+import { extractJsonArray, wpCliResolveScript } from "./wpCli.ts"
 import { spawn } from "./spawn.ts"
 
 // One plugin or theme, mirroring `wp {plugin,theme} list` columns.
@@ -68,17 +68,11 @@ function splitSections(out: string): Record<string, string[]> {
   return sections
 }
 
-// wp --format=json emits a single-line JSON array; tolerate blank/garbage by
-// returning [] rather than throwing (a fresh site can legitimately have 0 themes).
-function parseJsonArray(lines: string[] | undefined): RawItem[] {
-  const text = (lines ?? []).join("").trim()
-  if (!text) return []
-  try {
-    const parsed = JSON.parse(text)
-    return Array.isArray(parsed) ? parsed : []
-  } catch {
-    return []
-  }
+// First non-blank line of a section — the likeliest culprit when wp-cli's JSON is
+// missing (a PHP fatal or notice printed in its place).
+function firstNoise(lines: string[] | undefined): string {
+  const line = (lines ?? []).map((l) => l.trim()).find(Boolean) ?? ""
+  return line.length > 160 ? `${line.slice(0, 159)}…` : line
 }
 
 export async function fetchWpInventory(
@@ -147,8 +141,18 @@ export async function fetchWpInventory(
     return { ok: false, target, error: `No WordPress core found under ${root} — is this a WordPress site?` }
   }
   const wpDir = (s.WPDIR?.[0] || root).trim()
-  const plugins = normalize(parseJsonArray(s.PLUGINS))
-  const themes = normalize(parseJsonArray(s.THEMES))
+  // A plugin's PHP notices can print to stdout alongside the JSON (see
+  // extractJsonArray). No JSON at all means wp-cli failed; say so instead of
+  // showing an empty list that reads as "no plugins installed".
+  const rawPlugins = extractJsonArray(s.PLUGINS)
+  const rawThemes = extractJsonArray(s.THEMES)
+  if (!rawPlugins || !rawThemes) {
+    const which = !rawPlugins ? "plugin" : "theme"
+    const noise = firstNoise(!rawPlugins ? s.PLUGINS : s.THEMES)
+    return { ok: false, target, error: `wp-cli didn't return the ${which} list${noise ? `: ${noise}` : "."}` }
+  }
+  const plugins = normalize(rawPlugins as RawItem[])
+  const themes = normalize(rawThemes as RawItem[])
   return { ok: true, target, wpDir, inventory: { plugins, themes } }
 }
 

package/src/ui/Header.tsx

@@ -6,6 +6,8 @@ import { timeAgo, truncate } from "../lib/format.ts"
 import { Spinner } from "./components.tsx"
 import { APP_NAME, APP_VERSION } from "../version.ts"
 import { isDevMode } from "../dev/devMode.ts"
+import { RL_LOW_WATER, onRateLimitChange, rateLimitSnapshot, type RateLimitSnapshot } from "../api/client.ts"
+import { useEffect, useState } from "react"
 
 const TABS: { route: Route; key: string; label: string }[] = [
   { route: "dashboard", key: "1", label: "Dashboard" },
@@ -26,6 +28,29 @@ const SUBTITLES: Record<Route, string> = {
   events: "Recent deploys, reboots, and operations across your account",
 }
 
+// SpinupWP allows 60 API requests a minute. Show what's left of this minute so
+// the wall is visible before it's hit: dim while there's plenty, amber past
+// three-quarters spent, red once the client has started pacing requests (the
+// point where the app slows down on purpose). Hidden until a response has
+// reported the limit (and in Dev Mode, which never calls the API).
+function ApiHeadroom() {
+  const [rl, setRl] = useState<RateLimitSnapshot | null>(rateLimitSnapshot)
+  useEffect(() => {
+    const refresh = () => setRl(rateLimitSnapshot())
+    const off = onRateLimitChange(refresh)
+    // The window rolls over with no request to announce it; re-read so a spent
+    // budget doesn't sit on screen after it has refilled.
+    const tick = setInterval(refresh, 5_000)
+    return () => {
+      off()
+      clearInterval(tick)
+    }
+  }, [])
+  if (!rl) return null
+  const color = rl.remaining <= RL_LOW_WATER ? theme.bad : rl.remaining <= rl.limit / 4 ? theme.warn : theme.textFaint
+  return <text content={`API ${rl.remaining}/${rl.limit}  `} fg={color} style={{ flexShrink: 0 }} wrapMode="none" />
+}
+
 export function Header() {
   const { route, servers, sites, loading, lastUpdated, updateInfo, newServerJob, vanityJob, cloneJob, cloneServer, kumaStatus, profileLabel } = useStore()
   // Name the domain(s) when there are few enough to fit the header row; fall
@@ -114,6 +139,7 @@ export function Header() {
         )}
         {loading && <Spinner interval={100} />}
         <text content={`  ${servers.length} servers · ${sites.length} sites  `} fg={theme.textDim} style={{ flexShrink: 0 }} />
+        <ApiHeadroom />
         <text content={lastUpdated ? `updated ${timeAgo(lastUpdated.toISOString())}` : "loading…"} fg={theme.textFaint} style={{ flexShrink: 0 }} />
       </box>
       <box style={{ flexDirection: "row", height: 1, paddingLeft: 1, paddingRight: 1, alignItems: "center" }}>

package/src/ui/Help.tsx

@@ -8,7 +8,7 @@ import { theme } from "../lib/theme.ts"
 import { APP_NAME, APP_VERSION, REPO_URL } from "../version.ts"
 import { Sparkle, Spinner } from "./components.tsx"
 import { useStore } from "./store.tsx"
-import { runSelfUpdate, installChannel, PACKAGE_UPDATE_CMD, type UpdateInfo, type SelfUpdateResult } from "../lib/appUpdate.ts"
+import { runSelfUpdate, installChannel, updateCommand, type UpdateInfo, type SelfUpdateResult } from "../lib/appUpdate.ts"
 
 type Section = { title: string; keys: [string, string][] }
 
@@ -191,10 +191,10 @@ function AboutColumn({
       {selfUpdate !== "idle" && selfUpdate !== "running" ? (
         <text content={selfUpdate.message} fg={selfUpdate.ok ? theme.good : theme.bad} />
       ) : null}
-      {installChannel() === "package" ? (
+      {installChannel() !== "git" ? (
         <>
           {line("Manual:")}
-          {line(PACKAGE_UPDATE_CMD, theme.text)}
+          {line(updateCommand() ?? "", theme.text)}
         </>
       ) : (
         <>

package/src/ui/store.tsx

@@ -45,7 +45,7 @@ import { withKuma, KumaClient, registerMonitors, registerFingerprintMonitor, reg
 import { deriveFingerprint } from "../lib/siteFingerprint.ts"
 import type { StoredProviders } from "../config.ts"
 import { fetchRebootInfo, grantSiteSshKey, revokeSiteSshKey, verifySudo, ensureSpinupKey, listPersonalKeys, keyBody, type RebootInfo } from "../lib/ssh.ts"
-import { estimateSourceSiteSizes, runStandardWpPull, runBedrockPull, runFilesOnlyPull, verifyClone, verifyFilesClone, preflightBedrockSource, type SudoCtx, type CloneStage, type CloneExecRecord, type VerifyResult as CloneVerifyResult } from "../lib/serverClone.ts"
+import { estimateSourceSiteSizes, runStandardWpPull, runBedrockPull, runFilesOnlyPull, verifyClone, verifyFilesClone, preflightBedrockSource, syncCrontab, type SudoCtx, type CloneStage, type CloneExecRecord, type VerifyResult as CloneVerifyResult } from "../lib/serverClone.ts"
 import { CloneLogger } from "../lib/cloneLog.ts"
 import { syncAdditionalDomains } from "../lib/cloneDomains.ts"
 import { parseRepo, deployKeysSettingsUrl, ghAvailable, ghDeployKeyPresent, ghAddDeployKey, generateDeployKeypair, type RepoHost } from "../lib/gitDeployKey.ts"
@@ -268,6 +268,9 @@ export interface CloneSiteState {
   stack: "wp" | "bedrock" | "files" // git repo → bedrock; is_wordpress → wp; else files-only (redirect shells, static/PHP sites)
   gitRepo?: string // source git.repo (Bedrock) — the dest is created as a `git` site of it
   gitBranch?: string // source git.branch
+  deployScript?: string // source git deploy script — the dest's own, and Radicle's build step
+  pushEnabled?: boolean // source push-to-deploy on/off — the dest is created to match
+  pageCache?: boolean // source page cache on/off — the dest is created to match
   gitDeployKey?: { privateKey: string; publicKey: string } // unique per-site key (stamped leaving gitaccess) → create payload
   additionalDomains?: string[] // extra domains served by the site → extra cutover records
   additionalDomainConfigs?: AdditionalDomain[] // full source configs (redirects) — re-created on the dest
@@ -293,6 +296,13 @@ export interface CloneSiteState {
   verify?: CloneVerifyResult // source-vs-clone comparison + HTTP check
   verifyError?: string
   cutover?: CloneCutoverState // slice 6: DNS repoint state for this site's domain
+  cronAdded?: string[] // owner crontab lines carried to the dest (empty = none to carry)
+  cronError?: string // crontab carry-over failed (the clone itself still succeeded)
+  // The source had a deploy script but the dest reads back none — SpinupWP drops a
+  // script set on create, and there's no API to set it after. The verify pane
+  // offers it for copy with a link to the dest's Git settings.
+  deployScriptLost?: boolean
+  pushMismatch?: boolean // the dest's push-to-deploy reads back different from the source's
 }
 // Slice 6: per-site DNS cutover. Each A record among the site's domains (primary +
 // additional_domains) is repointed from the old server IP to the new one. www-style
@@ -3573,6 +3583,9 @@ export function StoreProvider({ children }: { children: ReactNode }) {
           stack,
           gitRepo: s.git?.repo ?? undefined,
           gitBranch: s.git?.branch ?? undefined,
+          deployScript: s.git?.deploy_script ?? undefined,
+          pushEnabled: s.git?.push_enabled ?? undefined,
+          pageCache: s.page_cache?.enabled ?? undefined,
           additionalDomains: (s.additional_domains ?? []).map((d) => d.domain),
           additionalDomainConfigs: s.additional_domains ?? [],
           excludeUploads: false,
@@ -3801,7 +3814,7 @@ export function StoreProvider({ children }: { children: ReactNode }) {
         // site-creation + auth cycle on a clone that can't succeed. Not a guarantee
         // (see preflightBedrockSource) — the real check is still the one after create.
         if (site.stack === "bedrock") {
-          const pre = await preflightBedrockSource(source, { domain: site.domain, publicFolder: site.publicFolder })
+          const pre = await preflightBedrockSource(source, { domain: site.domain, publicFolder: site.publicFolder, deployScript: site.deployScript }, dest)
           if (!pre.ok) return fail("create", pre.error)
         }
         // create — Bedrock → `git` site (SpinupWP clones the repo); Standard WP →
@@ -3831,14 +3844,18 @@ export function StoreProvider({ children }: { children: ReactNode }) {
                     php_version: site.phpVersion,
                     public_folder: site.publicFolder ?? "/web/",
                     database: { name: dbName, username: dbName, password: dbPw, table_prefix: site.tablePrefix || "wp_" },
-                    // deploy_script is TOP-LEVEL; we send the corrected canonical (the
-                    // source's stored value has a known typo) for future push-to-deploy —
-                    // we composer install over SSH regardless (git/deploy won't run it).
-                    deploy_script: "composer install -o --no-dev",
+                    // deploy_script is TOP-LEVEL; we send the source's own (canonical
+                    // only as the fallback). CAVEAT, verified 2026-09-24: SpinupWP stores
+                    // it, echoes it back, then clears it a minute or two later — so the
+                    // dest's script has to be re-entered in the dashboard. Nothing here
+                    // depends on it: the pull runs composer (and a Radicle source's own
+                    // script) over SSH.
+                    deploy_script: site.deployScript?.trim() || "composer install -o --no-dev",
                     git: {
                       repo: site.gitRepo!,
                       branch: site.gitBranch ?? "main",
-                      push_to_deploy: true,
+                      // Match the source (on when unknown, the long-standing default).
+                      push_to_deploy: site.pushEnabled ?? true,
                       // unique per-site key (gitaccess step) — the server-wide
                       // git_publickey fits only ONE GitHub repo, so it can't be
                       // reused; SpinupWP installs this pair as the site's git identity.
@@ -3863,6 +3880,10 @@ export function StoreProvider({ children }: { children: ReactNode }) {
                       public_folder: site.publicFolder,
                       database: { name: dbName, username: dbName, password: dbPw, table_prefix: site.tablePrefix || "wp_" },
                     }
+            // Match the source's page cache — a deploy script that purges it
+            // (`wp spinupwp cache purge-site`) fails on a site where it's off, and
+            // it can't be switched on through the API after the create.
+            if (site.pageCache != null) payload.page_cache = { enabled: site.pageCache }
             ev = await client.createSite(payload)
             logger?.log({ event: "create-requested", domain: site.domain, eventId: ev?.event_id })
           } catch (err) {
@@ -3928,7 +3949,7 @@ export function StoreProvider({ children }: { children: ReactNode }) {
         const onExec = logger ? (e: CloneExecRecord) => logger.log({ event: "exec", ...e }) : undefined
         const res =
           site.stack === "bedrock"
-            ? await runBedrockPull(source, dest, { domain: site.domain, sourceSiteUser: site.siteUser, destSiteUser: site.siteUser, destDbName: dbName, destDbUser: dbName, destDbPassword: dbPw, excludeUploads: site.excludeUploads, publicFolder: site.publicFolder }, onProgress, onExec, onTransfer)
+            ? await runBedrockPull(source, dest, { domain: site.domain, sourceSiteUser: site.siteUser, destSiteUser: site.siteUser, destDbName: dbName, destDbUser: dbName, destDbPassword: dbPw, excludeUploads: site.excludeUploads, publicFolder: site.publicFolder, deployScript: site.deployScript }, onProgress, onExec, onTransfer)
             : site.stack === "files"
               ? await runFilesOnlyPull(source, dest, { domain: site.domain, sourceSiteUser: site.siteUser, destSiteUser: site.siteUser, approxFilesBytes: site.sizeWebBytes }, onProgress, onExec, onTransfer)
               : await runStandardWpPull(source, dest, { domain: site.domain, sourceSiteUser: site.siteUser, destSiteUser: site.siteUser, destDbName: dbName, destDbUser: dbName, destDbPassword: dbPw, publicFolder: site.publicFolder, approxFilesBytes: site.sizeWebBytes }, onProgress, onExec, onTransfer)
@@ -3937,8 +3958,29 @@ export function StoreProvider({ children }: { children: ReactNode }) {
           return fail(stageToStep(stage), res.error ?? "pull failed")
         }
         const { sourceWebrootRel, destWebrootRel } = res as { sourceWebrootRel?: string; destWebrootRel?: string }
-        logger?.log({ event: "site-done", domain: site.domain, sourceWebrootRel, destWebrootRel })
-        set((s) => ({ ...s, step: "done", detail: undefined, error: undefined, failedStep: undefined, sourceWebrootRel, destWebrootRel }))
+        // Owner-added cron jobs (see syncCrontab). Best-effort: a failure is
+        // reported on the site, never fails a clone whose files and DB are in place.
+        set((s) => ({ ...s, detail: "crontab" }))
+        const cron = await syncCrontab(source, dest, { domain: site.domain, sourceSiteUser: site.siteUser, destSiteUser: site.siteUser }, onExec)
+        logger?.log({ event: "crontab", domain: site.domain, ok: cron.ok, added: cron.added, error: cron.error })
+        // Did the dest keep the deploy script we sent on create? (It usually
+        // doesn't — see the create payload.) Re-read rather than assume, so this
+        // goes quiet on its own if SpinupWP fixes it.
+        // Same re-read for push-to-deploy (which does stick, as of 2026-09-24 —
+        // checked anyway, since the create is the only chance to set it).
+        let deployScriptLost = false
+        let pushMismatch = false
+        if (site.gitRepo && destSiteId != null) {
+          try {
+            const destSite = await client.getSite(destSiteId)
+            deployScriptLost = !!site.deployScript?.trim() && !destSite.git?.deploy_script?.trim()
+            pushMismatch = site.pushEnabled != null && destSite.git?.push_enabled !== site.pushEnabled
+          } catch {
+            /* unknown — say nothing rather than guess */
+          }
+        }
+        logger?.log({ event: "site-done", domain: site.domain, sourceWebrootRel, destWebrootRel, deployScriptLost, pushMismatch })
+        set((s) => ({ ...s, step: "done", detail: undefined, error: undefined, failedStep: undefined, sourceWebrootRel, destWebrootRel, cronAdded: cron.added, cronError: cron.ok ? undefined : cron.error, deployScriptLost, pushMismatch }))
       } catch (err) {
         fail(site.step, (err as Error).message)
       }

package/src/ui/views/CloneWizard.tsx

@@ -16,8 +16,8 @@ import { Panel, Spinner } from "../components.tsx"
 import { StatusBar } from "../StatusBar.tsx"
 import { openUrl, copyToClipboard } from "../../lib/open.ts"
 import { consoleForHost } from "../../lib/providers.ts"
-import { serverWebUrl } from "../../lib/spinupweb.ts"
-import { useStore, cloneNeedsGitAccess, type CloneStep, type CloneSiteStep, type RepoKeyState } from "../store.tsx"
+import { serverWebUrl, siteGitUrl } from "../../lib/spinupweb.ts"
+import { useStore, cloneNeedsGitAccess, type CloneStep, type CloneSiteStep, type CloneSiteState, type RepoKeyState } from "../store.tsx"
 import type { VerifyCheck } from "../../lib/serverClone.ts"
 
 // Choosing an existing server as the dest is a first-class feature now (the `d` picker
@@ -305,6 +305,13 @@ export function CloneWizard() {
           return cloneRetrySite(verifyOpen)
         }
         if (name === "v" && drilled?.step === "done") return verifyCloneSite(verifyOpen)
+        // g — the dest's Git settings need a hand (lost deploy script, push-to-deploy
+        // mismatch): open them, with the source's script on the clipboard when it's
+        // missing, so re-entering it is one paste.
+        if (name === "g" && (drilled?.deployScriptLost || drilled?.pushMismatch) && drilled.destSiteId != null) {
+          if (drilled.deployScriptLost && drilled.deployScript) copyToClipboard(drilled.deployScript)
+          return openUrl(siteGitUrl(drilled.destSiteId, accountSlug))
+        }
         return
       }
       const n = sel.length
@@ -726,7 +733,7 @@ export function CloneWizard() {
           {selected.map((s, i) => {
             const active = !["queued", "done", "error"].includes(s.step)
             const cur = i === idx
-            const vmark = s.verify ? (s.verify.ok ? " ✓verified" : " ✕mismatch") : s.verifying ? " verifying…" : ""
+            const vmark = (s.verify ? (s.verify.ok ? " ✓verified" : " ✕mismatch") : s.verifying ? " verifying…" : "") + (s.deployScriptLost || s.pushMismatch || s.cronError ? " · ⚠ see verify" : "")
             return (
               <box key={s.sourceSiteId} style={{ flexDirection: "row", height: 1, backgroundColor: cur ? theme.bgAlt : undefined }}>
                 {active ? <Spinner color={theme.brand} /> : <text content={s.step === "done" ? "✓" : s.step === "error" ? "✕" : "○"} fg={s.step === "done" ? theme.good : s.step === "error" ? theme.bad : theme.textFaint} style={{ flexShrink: 0 }} />}
@@ -793,7 +800,8 @@ export function CloneWizard() {
               {v.checks.map(row)}
               <box style={{ flexGrow: 1 }} />
               <text content={v.ok ? "✓ Clone matches the source." : "✕ Differences found — review the ✕ rows above."} fg={v.ok ? theme.good : theme.bad} wrapMode="none" />
-              <text content="v re-run · ← back to roster" fg={theme.textFaint} wrapMode="none" />
+              {cloneNotes(site)}
+              <text content={`v re-run${site.deployScriptLost ? " · g copy deploy script + open Git settings" : site.pushMismatch ? " · g open Git settings" : ""} · ← back to roster`} fg={theme.textFaint} wrapMode="none" />
             </>
           ) : (
             <text content="Press v to compare this clone against its source." fg={theme.textDim} wrapMode="none" />
@@ -803,6 +811,26 @@ export function CloneWizard() {
     )
   }
 
+  // What the clone did beyond files + DB, and anything left for the user to do.
+  function cloneNotes(site: CloneSiteState) {
+    const cron = site.cronError
+      ? { text: `✕ Crontab not carried over: ${site.cronError}`, fg: theme.bad }
+      : site.cronAdded?.length
+        ? { text: `✓ Crontab: carried ${site.cronAdded.length} line${site.cronAdded.length === 1 ? "" : "s"} you added on the source`, fg: theme.good }
+        : null
+    return (
+      <>
+        {cron ? <text content={cron.text} fg={cron.fg} wrapMode="none" /> : null}
+        {site.pushMismatch ? (
+          <text content={`⚠ Push-to-deploy is ${site.pushEnabled ? "off" : "on"} here but ${site.pushEnabled ? "on" : "off"} on the source — switch it in the new site's Git settings (g)`} fg={theme.warn} wrapMode="none" />
+        ) : null}
+        {site.deployScriptLost ? (
+          <text content="⚠ SpinupWP didn't keep this site's deploy script — press g to copy the source's and paste it into the new site's Git settings" fg={theme.warn} wrapMode="none" />
+        ) : null}
+      </>
+    )
+  }
+
   // Failure drill-down — the FULL error for one failed site (the roster truncates it),
   // plus where the complete stage-by-stage log lives on disk.
   function failurePane(siteId: number) {
@@ -856,7 +884,7 @@ export function CloneWizard() {
       if (verifyOpen != null) {
         const drilled = job!.sites.find((s) => s.sourceSiteId === verifyOpen)
         if (drilled?.step === "error") return [{ key: "r", label: "retry site" }, { key: "←", label: "back" }, { key: "esc", label: "close" }]
-        return [{ key: "v", label: "re-run" }, { key: "←", label: "back" }, { key: "esc", label: "close" }]
+        return [{ key: "v", label: "re-run" }, ...(drilled?.deployScriptLost || drilled?.pushMismatch ? [{ key: "g", label: "Git settings" }] : []), { key: "←", label: "back" }, { key: "esc", label: "close" }]
       }
       const done = selected.filter((s) => s.step === "done").length
       const errored = selected.filter((s) => s.step === "error").length