Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

> Deployed to production 2026-10-15 (Cloudflare version `f5c15746-673b-47d7-b7a2-dafeb9b032fa`; rollback `52a9ee18-1001-4ebe-b02e-e11cfb040f01`). See `docs/DEPLOY.md`.

### Added

- macOS arm64 one-command setup: `curl -fsSL https://devstack.bid/setup.sh | bash -s -- my-app` with a scoped `cli:setup` key from `/settings/cli` (hashed, shown once, revocable); outputs `<name>/` and `<name>-deploy.zip`. New routes `/setup.sh`, `/api/cli/whoami`, `/api/cli/scaffold`, `/api/cli/starter`, `/api/projects/:id/zip`.
Expand Down
3 changes: 2 additions & 1 deletion docs/DEPLOY.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
# Deploying NVX Stack Builder to Cloudflare Workers

> **Current production (2026-10-14):** live at **https://devstack.bid** (apex). Worker `nvx-stack-builder` in account `2d92bd5b25768fa9093d6adc0a8887fc`; `www.devstack.bid` is also attached and returns 308 to the apex.
> - Current version: 2026-10-14 23:19 ICT, Cloudflare version `ffbd53ae-957b-4b48-b411-3a882f14f8ae`. Secret `CURSOR_APP_ID` is the public Origin app `app_01m4xk8788f7s941zg4cpjxcer`. `GET /api/auth/cursor` returns 302 to `https://cursor.com/codebase/apps/install` (callback `https://devstack.bid/api/auth/cursor/callback`). Same code as the `/learn` deploy. Rollback target: `d29b83b8-1753-4a47-a0b5-a63ba79fa6a2` (drops this secret).
> - Current version: 2026-10-15 ~20:55 ICT from merge commit `2dbbcec` (pull requests #16–#24: chat streaming, footer menu, customer connections/projects/deploy PR-A..E, CLI setup + deploy zip, `/projects/[id]` build fix); Cloudflare version `f5c15746-673b-47d7-b7a2-dafeb9b032fa`. D1 migrations `0010_customer_connections.sql` and `0011_project_uploads.sql` were applied to `nvx-db` first. `CREDENTIALS_KEY` is not set yet (legacy key derivation in use). Rollback target: `52a9ee18-1001-4ebe-b02e-e11cfb040f01` (code rollback does not undo migrations 0010/0011; they only add tables).
> - Previous version: 2026-10-14 23:19 ICT, Cloudflare version `ffbd53ae-957b-4b48-b411-3a882f14f8ae`. Secret `CURSOR_APP_ID` is the public Origin app `app_01m4xk8788f7s941zg4cpjxcer`. `GET /api/auth/cursor` returns 302 to `https://cursor.com/codebase/apps/install` (callback `https://devstack.bid/api/auth/cursor/callback`). Same code as the `/learn` deploy. Rollback target: `d29b83b8-1753-4a47-a0b5-a63ba79fa6a2` (drops this secret).
> - Previous code deploy: 2026-10-14 22:18 ICT from merge commit `be6eb3f` (pull request #6); Cloudflare version `d29b83b8-1753-4a47-a0b5-a63ba79fa6a2`. This adds `/learn` and Setup Cursor. Rollback target: `bbc2369e-a302-4527-ad23-87f44bb144d1`.
> - Previous code deploy: 2026-10-14 21:11 ICT from commit `838440a`; Cloudflare version `bbc2369e-a302-4527-ad23-87f44bb144d1`. This is Studio (`/studio/`), the remote MCP server, and the sign-in work together. Rollback target: `e9fa394a-7c15-4aee-b3ae-064bdf85e7dd`.
> - Previous code deploy: 2026-10-14 15:44 ICT from commit `e866cc8`; Cloudflare version `e9fa394a-7c15-4aee-b3ae-064bdf85e7dd`. The vulnerable development dependency path was removed. D1 migration `0008_mcp_clients.sql` was applied to `nvx-db` before that deploy. Rollback target cited for that deploy: `450890b7-5432-4795-afbc-1c7ebd241bff`.
Expand Down
Loading