wirl 0.2.0 → 0.2.1

package/README.md

@@ -3,17 +3,16 @@
 Deploy an internal app somewhere real, privately. One command puts the folder you are in on a URL that only your company can open.
 
 ```bash
-npm install -g https://app.wirl.dev/cli/wirl.tgz
-wirl login                # a link and a code; approve in the browser
-wirl init my-tool --server
+npx wirl login            # a link and a code; approve in the browser
+npx wirl init my-tool --server
 cd my-tool
-wirl dev                  # runs it here, signed in as a stub user
-wirl preview              # a private address to look at it before it is live
-wirl deploy               # builds, scans, deploys; prints the URL
-wirl share dana@company.com
+npx wirl dev              # runs it here, signed in as a stub user
+npx wirl preview          # a private address to look at it before it is live
+npx wirl deploy           # builds, scans, deploys; prints the URL
+npx wirl share dana@company.com
 ```
 
-Install it from wirl itself, as above, and run plain `wirl`. Do not run `npx wirl`: that name on npm belongs to an unrelated older package today, and `npx` would fetch that one.
+`npx` fetches the CLI from npm the first time and needs no install beyond Node 22.13 or later; in a terminal npm first asks "Ok to proceed? (y)": answer y. Elsewhere in this README a command is written `wirl <command>`, for short: run it as `npx wirl <command>`, or run `npm install -g wirl` once and use plain `wirl`. If your npm registry does not carry wirl, or to run exactly the build app.wirl.dev serves, install from app.wirl.dev instead: `npm install -g https://app.wirl.dev/cli/wirl.tgz`, and run plain `wirl`.
 
 Sign in with your work Google account and you are in your company's workspace. Anything a colleague deploys there is yours to open, and nobody outside the company can. A personal account gets a space of its own.
 
@@ -41,11 +40,15 @@ That opens the browser once to sign in. The token an agent gets can deploy, roll
 ## Everything else
 
 ```bash
-wirl --help
+npx wirl --help
 ```
 
 Orgs, members, connections, transfer, move, versions, rollback, pull, previews, logs, schedules, run.
 
+## Versions
+
+The npm package and the control plane are versioned separately. `npx wirl` runs the latest CLI published to npm, and app.wirl.dev runs the build it was last deployed with, so either can be the newer. A CLI newer than the control plane says so where it can tell: `its control plane is older than this copy of wirl` (from `wirl migrations` and `wirl migrations adopt`), or `this control plane is older than sending wirl.json in the body, so it cannot take it` when a `wirl.json` is too large for a header. A CLI older than the control plane sends your whole `wirl.json` and says of a key it does not read that it `is not a key this version of wirl reads, so it is ignored`, though the control plane may read it; it checks `wirl.json` against its own rules before it uploads, so update the CLI (`npm install -g wirl@latest`, or `npx wirl@latest <command>`) when a deploy is refused on your machine for something the docs allow.
+
 ## Requirements
 
 Node 22.13 or later. Credentials live in `~/.config/wirl/credentials.json` after `wirl login`, or in `WIRL_TOKEN` for CI and sandboxes.

package/bin.js

@@ -3972,20 +3972,21 @@ arrives: pass \`response.body\` straight on. There are no WebSockets. A front en
 \`"static": "dist"\` serves that folder's files at their own paths (\`/\` is its \`index.html\`) and the module
 answers everything else; add \`"spa": true\` for a client-side router. Nothing outside that folder is served.
 
-Preview before you deploy: \`wirl preview\` puts the folder up at its own address with
-its own database (empty at first), and \`wirl fetch <path> --preview <name>\` (or the
-\`wirl_preview_fetch\` tool) shows you what it serves.
+Preview before you deploy: \`wirl preview\` gives a folder its own address and database (at first only what
+\`migrations/\` makes). \`wirl fetch <path> --preview <name>\` or \`wirl_preview_fetch\` shows what it answers.
 
 npm packages work: install them in the project and the deploy bundles them in. Nothing is installed on the
 server: native code will not run. Node built-ins work (\`node:crypto\`, \`node:path\`, ...; \`Buffer\` and
 \`process\` are global), but what \`node:fs\` writes is gone by the next request: use \`env.DB\`.
 
 \`env\` holds \`DB\` and nothing else. \`env.DB\` is Cloudflare D1: prepared statements with \`.bind()\`, at most
-100 bound parameters a statement. \`exec()\` runs one statement per line. Declare a host under \`connections\`
-in \`wirl.json\`, then \`fetch\` the vendor's real URL: wirl attaches the key. An undeclared host is refused; a
-public API needing no key uses \`"kind": "none"\`. Declaring one deploys before anyone approves it;
-the deploy says per connection whether it is usable now or waiting on an admin. A vendor has 60
-seconds to answer, whole, unless it streams: ask a model for a stream.
+100 bound parameters a statement. \`exec()\` runs one statement per line, as does each file in \`migrations/\`,
+which wirl applies in order to a preview and before going live; a failing one fails the deploy. Never edit
+an applied file. Dropping or renaming a table or column needs \`"migrations": { "destructive": [...] }\`, its
+own live deploy and a person's yes. Declare a host under \`connections\`, then \`fetch\` the vendor's real URL:
+wirl attaches the key. An undeclared host is refused; a public API needing no key uses \`"kind": "none"\`.
+Declaring one deploys before anyone approves it; the deploy says per connection whether it is usable now or
+waiting on an admin. A vendor has 60 seconds to answer, whole, unless it streams: ask a model for a stream.
 
 Six headers say who is asking: \`x-wirl-user-id\`, \`x-wirl-user-email\`, \`x-wirl-user-name\`,
 \`x-wirl-role\`, \`x-wirl-app-id\`, \`x-wirl-org\`. Read the name with
@@ -3995,10 +3996,9 @@ Schedules POST to \`/__wirl/schedule/<name>\`; a run gets 5 minutes unless that
 says otherwise, and at most 15. A \`public_paths\` path takes requests with no sign-in.
 Work that outlives one request (waiting for a person, trying tomorrow, a long loop) is a flow: see Flows.
 
-A new app defaults to org-wide visibility when its org has a company email domain,
-and to private otherwise, including one made with \`wirl orgs create\`.
-Sharing by email adds one named person; \`wirl visibility private|org\` (or the tool)
-sets the level. Public is only ever a person's click on the app's Access page.
+A new app defaults to org-wide visibility when its org has a company email domain, and to private
+otherwise, including one made with \`wirl orgs create\`; \`wirl visibility private|org\` sets the level.
+Sharing by email adds one named person. Public is only ever a person's click on the app's Access page.
 
 Porting an existing project: route it through the \`fetch\` handler, replace ORM calls with
 \`env.DB.prepare(...).bind(...)\`, turn timers into \`schedules\`, and move keys into \`connections\`. Keep the
@@ -4030,18 +4030,40 @@ early, repeated or late one gets 409, or 404 once the run ends; check \`x-wirl-u
   }
 });
 
+// packages/core/src/version.ts
+function wirlVersion() {
+  return BUILT_VERSION ?? WORKSPACE_VERSION;
+}
+var WORKSPACE_VERSION, BUILT_VERSION;
+var init_version = __esm({
+  "packages/core/src/version.ts"() {
+    "use strict";
+    WORKSPACE_VERSION = "0.0.0";
+    BUILT_VERSION = true ? "0.2.1" : null;
+  }
+});
+
 // packages/core/src/install.ts
+function fallbackWhen(controlPlane = "this control plane") {
+  return `If your npm registry does not carry wirl, or to run exactly the build ${controlPlane} serves,`;
+}
+function namedControlPlane(controlOrigin) {
+  return `the wirl control plane (${controlOrigin.replace(/^https?:\/\//, "").replace(/\/+$/, "")})`;
+}
 function installFor(controlOrigin) {
-  if (NPM_PUBLISHED) return { cli: "wirl", mcp: "@wirl/mcp" };
   const origin = controlOrigin.replace(/\/+$/, "");
-  return { cli: `${origin}/cli/wirl.tgz`, mcp: `${origin}/cli/wirl-mcp.tgz` };
+  const tarball = { cli: `${origin}/cli/wirl.tgz`, mcp: `${origin}/cli/wirl-mcp.tgz` };
+  if (NPM_PUBLISHED) return { cli: "wirl", mcp: "@wirl/mcp", tarball };
+  return { ...tarball, tarball };
 }
-var NPM_PUBLISHED, WIRL_BIN;
+var NPM_PUBLISHED, WIRL_BIN, FALLBACK_WHEN, hasFallback;
 var init_install = __esm({
   "packages/core/src/install.ts"() {
     "use strict";
-    NPM_PUBLISHED = false;
+    NPM_PUBLISHED = true;
     WIRL_BIN = NPM_PUBLISHED ? "npx wirl" : "wirl";
+    FALLBACK_WHEN = fallbackWhen();
+    hasFallback = (install) => install.cli !== install.tarball.cli;
   }
 });
 
@@ -4322,6 +4344,7 @@ var init_src = __esm({
     init_retention();
     init_identity();
     init_contract();
+    init_version();
     init_install();
     init_porting();
     init_supplied_bundle();
@@ -6460,7 +6483,7 @@ async function loadCredentials(env = process.env) {
     }
   } catch {
   }
-  throw new CliError("Not signed in.", "Run `wirl login` first, or set WIRL_TOKEN.", { code: "not_signed_in" });
+  throw new CliError("Not signed in.", `Run \`${WIRL_BIN} login\` first, or set WIRL_TOKEN.`, { code: "not_signed_in" });
 }
 async function saveCredentials(creds, env = process.env) {
   const path = credentialsPath(env);
@@ -6521,11 +6544,11 @@ async function pollDeviceLogin(apiOrigin, login, options = {}) {
         continue;
       }
       case "expired_token":
-        throw new CliError("The sign-in code expired before it was approved.", "Run `wirl login` again.");
+        throw new CliError("The sign-in code expired before it was approved.", `Run \`${WIRL_BIN} login\` again.`);
       default:
         throw new CliError(
           typeof body["error"] === "string" ? `Sign-in failed: ${body["error"]}.` : `Sign-in failed (${response.status}).`,
-          "Run `wirl login` again."
+          `Run \`${WIRL_BIN} login\` again.`
         );
     }
   }
@@ -6636,6 +6659,10 @@ var SERVER_TEMPLATE = [
   " *",
   " * Everything real happens here. The page is HTML this module returns. The",
   " * data lives in env.DB, a SQLite database that belongs to this app alone.",
+  " * Its tables are in migrations/0001_init.sql: wirl applies each new file in",
+  " * migrations/ before a version goes live, to a preview's database when the",
+  " * preview is put up, and to the local one when wirl dev starts. Put the",
+  " * next change in migrations/0002_<what>.sql rather than editing that one.",
   " * The person making the request is in headers wirl sets after verifying",
   " * them, which the browser cannot forge. Any rule that matters, such as",
   ' * "you only see your own notes", is a line of code in this file: a check',
@@ -6647,18 +6674,8 @@ var SERVER_TEMPLATE = [
   " * live in .wirl/keys.json beside this file, which git ignores.",
   " */",
   "",
-  "// One line: exec runs one statement per line, as D1 does.",
-  "const SCHEMA =",
-  '  "create table if not exists notes (" +',
-  '  "  id integer primary key," +',
-  '  "  user_id text not null," +',
-  '  "  body text not null," +',
-  `  "  created_at text not null default (datetime('now'))" +`,
-  '  ")";',
-  "",
   "export default {",
   "  async fetch(request, env) {",
-  "    await env.DB.exec(SCHEMA);",
   "    const url = new URL(request.url);",
   "",
   `    // One line per request. Read it with ${WIRL_BIN} logs.`,
@@ -6741,7 +6758,41 @@ var SERVER_TEMPLATE = [
   "}",
   ""
 ].join("\n");
+var INIT_MIGRATION = [
+  "-- This app's tables. wirl applies each new file here, in order, before a version goes live.",
+  "-- Make the next change in 0002_<what>.sql; never edit a file that has been deployed.",
+  "create table notes (id integer primary key, user_id text not null, body text not null, created_at text not null default (datetime('now')))",
+  ""
+].join("\n");
+var INIT_MIGRATION_PATH = `${MIGRATIONS_DIR}/${ADOPTED_FILE}`;
+async function refuseInitMigrations(dir) {
+  for (const entry of await readdir(dir, { withFileTypes: true })) {
+    if (entry.name.toLowerCase() !== MIGRATIONS_DIR) continue;
+    if (entry.isSymbolicLink()) {
+      throw new CliError(`${entry.name}/ is a symbolic link, and wirl writes into no links: make migrations/ a real folder, then run wirl init --server again.`);
+    }
+    if (entry.name !== MIGRATIONS_DIR) {
+      throw new CliError(`${entry.name}/ is spelled differently from migrations/: wirl reads migrations/ in lowercase only. Rename it, then run wirl init --server again.`);
+    }
+    if (!entry.isDirectory()) {
+      throw new CliError(
+        `migrations is a file, and wirl init --server writes ${INIT_MIGRATION_PATH} into a folder of that name. Move it aside, then run wirl init --server again.`
+      );
+    }
+    const names = await readdir(join5(dir, entry.name));
+    if (names.some((name) => name.toLowerCase().endsWith(".sql"))) {
+      throw new CliError(`migrations/ already holds .sql files; wirl init --server writes ${INIT_MIGRATION_PATH} into a folder with none.`);
+    }
+  }
+}
 var SKILL_PATH = join5(".claude", "skills", "wirl", "SKILL.md");
+var SKILL_ORIGIN = "https://app.wirl.dev";
+var SKILL_INSTALL = installFor(SKILL_ORIGIN);
+var SKILL_RUN = NPM_PUBLISHED ? `Run the CLI as \`${WIRL_BIN} <command>\`, which needs no install beyond Node 22.13 or later (in a terminal npm asks "Ok to proceed?" the first time: answer y); this file writes a command as \`wirl <command>\` for short anywhere but the list below.
+
+` : "";
+var SKILL_FALLBACK = hasFallback(SKILL_INSTALL) ? `- ${fallbackWhen(namedControlPlane(SKILL_ORIGIN))} install the CLI from the control plane instead with \`npm install -g ${SKILL_INSTALL.tarball.cli}\`, run plain \`wirl\` where this file says \`${WIRL_BIN}\`, and name \`${SKILL_INSTALL.tarball.mcp}\` in place of \`${SKILL_INSTALL.mcp}\`.
+` : "";
 var SKILL_MARKDOWN = `---
 name: wirl
 description: Deploy and share the internal app in this project with wirl (${WIRL_BIN}). Use when the user wants a tool, dashboard or prototype put somewhere colleagues can open it, shared with a named person, run locally the way it will run deployed, or connected to a third-party API; or wants work that outlives one request, such as waiting for a person to approve something or trying again tomorrow.
@@ -6758,20 +6809,23 @@ Before you build, fetch https://docs.wirl.dev/llms-full.txt: every page of the d
 
 ## Commands
 
-- Connect first, if the agent supports MCP: \`claude mcp add --transport http wirl https://app.wirl.dev/mcp\` opens the browser once to sign in. No HTTP MCP support? \`claude mcp add wirl -- npx -y ${installFor("https://app.wirl.dev").mcp}\` does the same, running locally. Neither available: \`${WIRL_BIN} login\` prints a link and a code; the person approves in the browser. Do this once, when any command says you are not signed in.
+${SKILL_RUN}- Connect first, if the agent supports MCP: \`claude mcp add --transport http wirl https://app.wirl.dev/mcp\` opens the browser once to sign in, and needs no install. No HTTP MCP support? \`claude mcp add wirl -- npx -y ${SKILL_INSTALL.mcp}\` does the same, running locally. Neither available: \`${WIRL_BIN} login\` prints a link and a code; the person approves in the browser. Do this once, when any command says you are not signed in.
 - \`${WIRL_BIN} deploy\` \u2014 deploys this directory. Prints the URL and who can open it.
 - \`${WIRL_BIN} share someone@company.com\` \u2014 that person can open it. Add \`--role editor\` so they can deploy too.
 - \`${WIRL_BIN} dev\` \u2014 runs the app here as it will run deployed, signed in as a stub user.
 - \`${WIRL_BIN} pull <app>\` \u2014 fetches a deployed app's source to keep building.
 - \`${WIRL_BIN} logs\` \u2014 what the deployed app printed, per request, newest first; \`--errors\` for failures only, \`--follow\` to keep watching, \`--cursor <n>\` for the page before a "More before this" line. Read this before changing code when something misbehaves.
+- \`${WIRL_BIN} migrations\` \u2014 what this app's database has applied, read only.
+- \`${WIRL_BIN} migrations adopt\` \u2014 once, for an app whose tables were made in code: writes \`migrations/0001_init.sql\` from the live database's shape.
 - \`${WIRL_BIN} --help\` \u2014 everything else: orgs, members, connections, move, transfer, rollback, flows and runs.
-
+${SKILL_FALLBACK}
 ## Rules
 
 1. **Never ask for or paste an API key.** Declare the connection in \`wirl.json\` and deploy. Needs no key at all (a public API)? Declare it with "kind": "none" and its hosts. If the key is missing, the deploy prints a link to the app's keys page; show the person that link. Locally, keys live in \`.wirl/keys.json\`, which git ignores. To try a vendor call locally without the key, map its connection to a server of your own in \`.wirl/mocks.json\`, like \`{ "anthropic": "http://127.0.0.1:4010" }\`: \`wirl dev\` then sends the calls to that connection's hosts there instead (\`wirl dev --help\` has the rest).
 2. **Call third-party APIs by their real URL** (\`fetch("https://api.hubspot.com/...")\`). wirl attaches the key on the way out, deployed and under \`wirl dev\` alike.
 3. If a command names several organisations and asks which, ask the person; pass \`--org\` or put \`"org"\` in \`wirl.json\`.
 4. To keep a file out of the deploy, list it in a \`.wirlignore\` at the project root (gitignore-style lines; no \`!\` negation).
+5. **A file that can lose data waits for a person.** A deploy that would apply a destructive file (one wirl.json's \`"destructive"\` list must name) to the live database stops and names the page where a person approves each one. Show the person those pages, and deploy again once they say they approved. If \`${WIRL_BIN} deploy\` asks you to type a file's name, stop it and show the page instead, or deploy with \`--json\`, which never asks. Never type the name yourself or send the confirmation: that is the person's, and no flag skips it.
 
 ## wirl.json
 
@@ -6822,8 +6876,12 @@ async function scaffold(dir, options) {
     } catch (error) {
       if (error instanceof CliError) throw error;
     }
+    await refuseInitMigrations(dir);
     await writeFile2(target, SERVER_TEMPLATE, "utf8");
     written.push("server.mjs");
+    await mkdir3(join5(dir, MIGRATIONS_DIR), { recursive: true });
+    await writeFile2(join5(dir, MIGRATIONS_DIR, ADOPTED_FILE), INIT_MIGRATION, { encoding: "utf8", flag: "wx" });
+    written.push(INIT_MIGRATION_PATH);
     const pkg = join5(dir, "package.json");
     if (await readFile3(pkg, "utf8").catch(() => null) === null) {
       await writeFile2(pkg, `${JSON.stringify({ name: options.app, private: true, type: "module" }, null, 2)}
@@ -7113,7 +7171,7 @@ async function callApi(creds, path, options = {}) {
       throw new CliError(body.message, void 0, refusal);
     }
     if (response.status === 401 || response.status === 403) {
-      throw new CliError("Not signed in, or this token cannot do that.", "Try `wirl login`.", refusal);
+      throw new CliError("Not signed in, or this token cannot do that.", `Try \`${WIRL_BIN} login\`.`, refusal);
     }
     if (response.status === 404) {
       if (body.error !== void 0 && body.error !== "not_found" && body.message) throw new CliError(body.message, void 0, refusal);
@@ -7151,7 +7209,7 @@ async function callApiBytes(creds, path, options = {}) {
       body = {};
     }
     if (response.status === 401 || response.status === 403) {
-      throw new CliError("Not signed in, or this token cannot do that.", "Try `wirl login`.");
+      throw new CliError("Not signed in, or this token cannot do that.", `Try \`${WIRL_BIN} login\`.`);
     }
     if (response.status === 404) throw new CliError("Not found, or you do not have access to it.");
     throw new CliError(body.message ?? body.error ?? `Request failed (${response.status}).`);
@@ -7551,7 +7609,7 @@ function deletedAppMessage(org, app, done) {
   return `Deleted ${org}/${app}. Its address has stopped answering${runs}. Its data is kept until ${done.dataKeptUntil.slice(0, 10)}; until then wirl apps restore ${app} --org ${org} brings it back (one that was public comes back only from the Recently deleted list on the dashboard). Its name stays taken.`;
 }
 function deleteNeedsFullScopeMessage(apiOrigin, org, app) {
-  return `This sign-in can deploy, but not delete an app: deleting one needs a full-scope sign-in. Sign in with wirl login (with WIRL_TOKEN unset), or delete it on its Settings page: ${apiOrigin}/apps/${seg(org)}/${seg(app)}/settings`;
+  return `This sign-in can deploy, but not delete an app: deleting one needs a full-scope sign-in. Sign in with ${WIRL_BIN} login (with WIRL_TOKEN unset), or delete it on its Settings page: ${apiOrigin}/apps/${seg(org)}/${seg(app)}/settings`;
 }
 var VISIBILITY_LEVELS = ["private", "org", "public"];
 function describeVisibility(level, org) {
@@ -8642,7 +8700,7 @@ var ADOPT_SENTENCES2 = {
    */
   cannotTell: (what) => `wirl did not get the adopt route's answer (${what}), so it cannot tell whether the live database recorded migrations/${ADOPTED_FILE}, and nothing was written here. Run wirl migrations adopt again: while an adopted ${ADOPTED_FILE} is all the live database records, adopting again replaces that record and writes the file.`,
   /** After the call, so the live database records the file; a CLI that reads files otherwise than the control plane says this every time. */
-  notAsRecorded: (install) => `The live database now records migrations/${ADOPTED_FILE} as adopted, but the file wirl sent does not match its own record of it, so nothing was written here. Run wirl migrations adopt again: while an adopted ${ADOPTED_FILE} is all the live database records, adopting again replaces that record and writes the file. If it says this again, this copy of wirl reads migration files differently from the control plane: update it (npm install -g ${install}).`,
+  notAsRecorded: (install) => `The live database now records migrations/${ADOPTED_FILE} as adopted, but the file wirl sent does not match its own record of it, so nothing was written here. Run wirl migrations adopt again: while an adopted ${ADOPTED_FILE} is all the live database records, adopting again replaces that record and writes the file. If it says this again, this copy of wirl reads migration files differently from the control plane: update it (npm install -g ${install.cli}${hasFallback(install) ? `, or, to match this control plane exactly, npm install -g ${install.tarball.cli}` : ""}).`,
   unwritten: (code) => `The live database now records migrations/${ADOPTED_FILE} as adopted, but wirl could not write that file here (${code}). Make migrations/ a folder you can write that holds no .sql file, then run wirl migrations adopt again: while an adopted ${ADOPTED_FILE} is all the live database records, adopting again replaces that record and writes the file.`,
   nothingWritten: "Nothing was written to migrations/.",
   /**
@@ -8833,7 +8891,7 @@ async function adoptIntoProject(creds, options) {
   const read = await readMigrations([{ name: ADOPTED_FILE, text: answer.file.text }], []);
   const [file, ...others] = read.ok ? read.files : [];
   if (file === void 0 || others.length > 0 || file.sha256 !== answer.file.sha256 || file.statements.length !== answer.file.statements) {
-    throw new CliError(ADOPT_SENTENCES2.notAsRecorded(installFor(creds.apiOrigin).cli));
+    throw new CliError(ADOPT_SENTENCES2.notAsRecorded(installFor(creds.apiOrigin)));
   }
   const path = await writeAdopted(projectDir, answer.file.text);
   const { recordLocalAdoption: recordLocalAdoption2 } = await Promise.resolve().then(() => (init_migrations_local(), migrations_local_exports));
@@ -9917,6 +9975,7 @@ Options
   --app <slug>    App. Defaults to wirl.json or the directory name.
   --no-create     Fail instead of creating an app that does not exist yet.
   --json          Machine-readable output.
+  --version       Print the version of wirl you are running, as the first word: wirl --version.
 
 wirl <command> --help for a command's flags and an example.
 `;
@@ -10411,6 +10470,10 @@ async function resolveTarget(creds, args2, dir) {
 var args = parseArgs(process.argv.slice(2).map((token) => token === "-h" ? "--help" : token));
 async function main() {
   const json2 = args.flags.has("json");
+  if (process.argv[2] === "--version" || process.argv[2] === "-v") {
+    out(wirlVersion());
+    return 0;
+  }
   if (args.command === "help") {
     if (!args.flags.has("help")) {
       refuseExtraPositionals("help", args.positional, 1, "one command", { hint: "A command's help lists its subcommands: wirl help <command>." });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wirl",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Deploy an internal app somewhere real, privately. One command; sharing by email; API keys declared, never pasted.",
   "keywords": [
     "deploy",