feat(deploy): add read-only deploy verification by wyattjoh · Pull Request #312 · clerk/cli

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh · 2026-05-29T07:13:16Z

Summary

Adds clerk deploy status as a read-only verification gate for DNS, SSL, email DNS, and OAuth readiness.
Makes agent-mode clerk deploy return a JSON handoff instead of trying to run the interactive wizard.
Shows a spinner during the brief post-trigger wait while Clerk processes the DNS check.
Refactors deploy status resolution for shared human and agent flows, updates docs and skill guidance, and adds tests plus Bun test isolation guidance.

Testing

bun test --isolate packages/cli-core/src/cli-program.test.ts packages/cli-core/src/test/integration/completion.test.ts packages/cli-core/src/commands/deploy/status-command.test.ts packages/cli-core/src/commands/deploy/index.test.ts --timeout 20000
bun run format
bun run format:check
bun run lint
bun run typecheck
bun run test

Review

Independent subagent review found no findings.

…plete

changeset-bot · 2026-05-29T07:13:24Z

🦋 Changeset detected

Latest commit: 19caa25

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
clerk	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

rafa-thayto · 2026-05-29T13:29:56Z

!snapshot

github-actions · 2026-05-29T13:35:06Z

Snapshot published

npm install -g clerk@1.5.1-snapshot.19caa25

Package	Version
`clerk`	`1.5.1-snapshot.19caa25`

Published from 19caa25

* feat(deploy): implement resumable deploy wizard * fix(deploy): address review feedback on resumable wizard - Preserve completed providers when pausing OAuth setup mid-loop, so `clerk deploy --continue` can finish multi-provider stacks. - Surface a warning for OAuth providers enabled in dev that the wizard does not yet support, instead of silently skipping them. - Close the gutter as Paused (not Failed) when DNS verification times out, since the state is recoverable via --continue. - Tighten the production-domain regex to reject malformed inputs like example..com or example-.com before they reach the API. * refactor(deploy): isolate lifecycle api calls Move deploy lifecycle endpoint wrappers into the shared PLAPI client while routing the deploy wizard through a command-local adapter that defaults to mocked operations until the backend endpoints are ready. * feat(deploy): resolve production state from API * fix(deploy): route test failures through api path * fix(deploy): remove gutter tone plumbing * fix(deploy): require human mode for production setup * refactor(deploy): route lifecycle test failures through api mock * refactor(deploy): extract mock api into its own module * refactor(deploy): route lifecycle through live PLAPI and map errors Switch the deploy command from the in-process mock lifecycle to the live PLAPI endpoints. Add a typed error mapper that translates known PLAPI failures (plan_insufficient, home_url_taken, ssl_retry_throttled, etc.) into CliError with stable codes, with a recovery path for the production_instance_exists case so the wizard re-derives state instead of surfacing the error. Surface per-component progress (DNS / SSL / mail) during deploy_status polling, and drop the four hidden --test-fail-* CLI options now that failure injection is routed through the test's module mock. Collapse the api/mock indirection layer to a thin re-export of the plapi endpoints + a no-op configureMockDeployApi stub for the test seam, and strip the dead mockDeployApi implementation that the indirection used to back. * feat(deploy): replace DNS handoff confirm with verify-or-skip choice Swap the "Continue to OAuth setup?" yes/no prompt during initial production setup for the same verify/skip select used when resuming. Choosing skip records DNS as pending and continues to OAuth instead of pausing the deploy, so the dashboard remains the single place to monitor propagation. * feat(deploy): refresh DNS verification for current API surface - Tolerate getDeployStatus failures inside the reconcile-path snapshot read so the deploy continues to the verify-or-skip prompt instead of failing before the user can react. - Split the snapshot fetch into separate "Reading development configuration" and "Reading production configuration" spinners so the gutter reflects what is actually being loaded. - Add triggerDomainDnsCheck (POST .../dns_check) and call it best-effort when the user picks "Check DNS now" so an active check job is kicked rather than waiting on background reconciliation. - Type the dns_ok/ssl_ok/mail_ok booleans on DeployStatusResponse and use them to name the specific pending component in the timeout warning. * refactor(deploy): drop ./api.ts and ./mock.ts test indirection Switch deploy command imports back to lib/plapi.ts directly and remove the ./mock.ts harness plus the --test-force-* / --test-fail-* CLI flags it backed. The wrappers were added for an earlier mockable-deploy-API experiment that is no longer needed. * feat(deploy): add bindZoneFile formatter for DNS records export * feat(deploy): add per-component spinner label lookup * feat(deploy): sequence DNS verification feedback per component Replace the single-spinner pollDeployStatus loop with a chained mail/dns/ssl spinner sequence that emits a per-component success line as each boolean flips true. Add a defensive status === "complete" check after all three components succeed so the proxy_ok server-side case fails closed rather than reporting verified. When all DNS components are resolved but the server has not yet marked the deployment complete, exit the verification path without reaching finishDeploy. * feat(deploy): show DNS records on the resume verification path * feat(deploy): offer BIND zone export after DNS records After the DNS records block in both runDnsSetup and runExistingDomainDnsVerification, prompt the user (default: no) to export the records as a clerk-<domain>.zone BIND zone file. * docs(deploy): document per-component verification and BIND export * docs(changeset): document clerk deploy production wizard * refactor(plapi): drop unused is_secondary from CreateProductionInstanceParams * refactor(plapi): allow null active_domain and guard in deploy wizard * fix(deploy): remove Domain Connect prompt and address review feedback The Domain Connect URL helper returned Cloudflare's template for every domain regardless of the actual registrar — a misleading prompt for any user not on Cloudflare. Remove it entirely until NS-based registrar detection lands as its own change. Other cleanups from the same review pass: runDeploy throws a NOT_LINKED CliError on unlinked directories instead of warning and exiting zero; startNewDeploy's 409 production_instance_exists recovery now persists the recovered production instance id to the profile; OAuth skip routes through deployPausedError so its exit code matches Ctrl-C (1 instead of silent 0); runDnsVerification loops on timeout retry instead of recursing; and runOAuthSetup drops the redundant startIndex slice since the completed set already skips previously-saved providers. * fix(deploy): use domain status for verification Switch production deploy verification to the application domain status endpoint and remove obsolete retry-specific handling. Cap domain status polling to the shared 10-second budget while keeping 3-second intervals. * fix(deploy): defer DNS verification until after OAuth * fix(deploy): refresh dns checks before polling Trigger a fresh domain DNS check before status polling and retry status reads with exponential backoff while updating the spinner countdown. * fix(deploy): report dns verification pauses * feat(deploy): type instance config schemas * feat(deploy): derive oauth provider descriptors from schema * feat(deploy): use schema-driven oauth setup * feat(deploy): resume oauth setup from schema descriptors * feat(deploy): preserve oauth provider special prompts * docs(deploy): document schema-driven oauth setup * fix(deploy): warn generically for unsupported oauth providers * fix(deploy): ignore optional oauth schema fields * fix(deploy): support public oauth providers * fix(deploy): use verbose for debug output * fix(deploy): remove oauth provider allowlist * refactor(deploy): derive oauth compatibility metadata * refactor(deploy): simplify oauth provider overrides * fix(ci): retry transient cleanup API failures * fix(deploy): adapt to platform instance response * fix(deploy): update retry status copy * Update packages/cli-core/src/commands/deploy/copy.ts Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com> * Revert "Update packages/cli-core/src/commands/deploy/copy.ts" This reverts commit fa5821c. * fix(review): address deploy PR feedback - give each deploy status component its own retry budget - normalize absent domain status components as pending - load resume domain and OAuth provider state concurrently - collapse repeated OAuth provider override lookups * fix(deploy): link domain settings in next steps Add a direct Clerk Dashboard domains URL to deploy completion output so users can manage their production domain configuration. * feat(deploy): add read-only deploy verification (#312) * refactor(deploy): extract poll core into status.ts * refactor(deploy): move state resolution into status.ts, rename dnsComplete * feat(deploy): add resolveDeployState discriminator * feat(deploy): add buildDeployStatusReport payload builder * feat(deploy): add clerk deploy check command * feat(deploy): tailor agent-mode deploy into a read-only handoff * feat(deploy): register clerk deploy check subcommand * docs(deploy): document deploy check and agent handoff * fix(deploy): surface agent status read failures * docs(clerk-cli): document deploy agent workflow * fix(deploy): avoid backoff in agent check * fix(deploy): check domain status as one DNS verification * fix(deploy): include domains URL in agent next action * fix(deploy): prompt agents to open domains URL * docs(clerk-cli): warn deploy wizard needs a terminal * fix(cli): address deploy review follow-ups * fix(deploy): persist live production instance metadata * chore: added link for codex * docs(clerk-cli): clarify deploy check agent workflow * refactor(deploy): remove unused status check helper * test(deploy): avoid leaking deploy check mocks * docs(testing): document bun test isolation * docs: remove hidden bird command from readme * feat(deploy): rename status check command * fix(deploy): humanize status dashboard guidance * refactor(deploy): tighten status resolution * fix(deploy): label DKIM records as email in DNS handoff cnameTargetLabel keyed off the full `clk._domainkey`/`clk2._domainkey` labels, but host.split(".", 1)[0] only ever yields the first label ("clk"/"clk2"), so those cases were dead and DKIM records rendered as a generic "CNAME". Match the actual prefixes so DKIM records show the email label. * refactor(deploy): drop unreachable OAuth completion guards runOAuthSetup pauses by throwing DeployPausedError on skip or interrupt, so it never returns a partial list. The `completed.length < providers.length` guards after it were dead code implying a contract that does not exist. Remove them and document the pause-by-throw contract on runOAuthSetup instead. * fix(deploy): re-prompt Google OAuth JSON after docs * fix(deploy): re-prompt oauth credentials after walkthrough --------- Co-authored-by: Rafael Thayto <rafa.thayto@gmail.com>

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh added 22 commits May 28, 2026 13:33

refactor(deploy): extract poll core into status.ts
eb5b8e7

refactor(deploy): move state resolution into status.ts, rename dnsCom…
7314f67
…plete

feat(deploy): add resolveDeployState discriminator
76e9f3c

feat(deploy): add buildDeployStatusReport payload builder
52050cf

feat(deploy): add clerk deploy check command
3d406df

feat(deploy): tailor agent-mode deploy into a read-only handoff
a619953

feat(deploy): register clerk deploy check subcommand
10990d3

docs(deploy): document deploy check and agent handoff
20871b5

fix(deploy): surface agent status read failures
6a9758c

docs(clerk-cli): document deploy agent workflow
1cc3d64

fix(deploy): avoid backoff in agent check
e423a63

fix(deploy): check domain status as one DNS verification
cc0d804

fix(deploy): include domains URL in agent next action
a201308

fix(deploy): prompt agents to open domains URL
94ba6e4

docs(clerk-cli): warn deploy wizard needs a terminal
a7e24fb

fix(cli): address deploy review follow-ups
3f355d9

fix(deploy): persist live production instance metadata
b282011

chore: added link for codex
ae2e086

docs(clerk-cli): clarify deploy check agent workflow
dbfeca5

refactor(deploy): remove unused status check helper
14ff7c0

test(deploy): avoid leaking deploy check mocks
1274f60

docs(testing): document bun test isolation
94ea5e2

wyattjoh added 4 commits May 29, 2026 01:16

docs: remove hidden bird command from readme
53e0a5a

feat(deploy): rename status check command
a419b77

fix(deploy): humanize status dashboard guidance
ba8fcdd

refactor(deploy): tighten status resolution
19caa25

wyattjoh marked this pull request as ready for review May 29, 2026 13:28

wyattjoh requested a review from rafa-thayto May 29, 2026 13:29

wyattjoh merged commit 688f965 into wyattjoh/deployMay 29, 2026
2 checks passed

wyattjoh deleted the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

wyattjoh restored the wyattjoh/deploy-agent-mode branch May 29, 2026 13:35

Uh oh!

Conversation

wyattjoh commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Testing

Review

Uh oh!

changeset-botBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

rafa-thayto commented May 29, 2026

Uh oh!

github-actionsBot commented May 29, 2026

Snapshot published

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

wyattjoh commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Testing

Review

Uh oh!

changeset-botBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

rafa-thayto commented May 29, 2026

Uh oh!

github-actionsBot commented May 29, 2026

Snapshot published

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

wyattjoh commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Testing

Review

Uh oh!

changeset-botBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

rafa-thayto commented May 29, 2026

Uh oh!

github-actionsBot commented May 29, 2026

Snapshot published

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

wyattjoh commented May 29, 2026•
edited
Loading

changeset-botBot commented May 29, 2026•
edited
Loading

wyattjoh commented May 29, 2026•
edited
Loading

changeset-botBot commented May 29, 2026•
edited
Loading

wyattjoh commented May 29, 2026•
edited
Loading

changeset-botBot commented May 29, 2026•
edited
Loading

wyattjoh commented May 29, 2026•
edited
Loading

changeset-botBot commented May 29, 2026•
edited
Loading

wyattjoh commented May 29, 2026•
edited
Loading

changeset-botBot commented May 29, 2026•
edited
Loading