[Artifacts] tighten docs examples

Author: elithrar

src/content/docs/artifacts/api/git-protocol.mdx

@@ -8,7 +8,7 @@ sidebar:
 
 Artifacts exposes Git access for every Artifacts repository.
 
-Each repo has a standard Git smart HTTP remote at `https://{accountId}.artifacts.cloudflare.dev/git/{namespace}/{repo}.git`.
+Each repo has a standard Git smart HTTP remote at `https://{accountId}.artifacts.cloudflare.net/git/{namespace}/{repo}.git`.
 
 Use the returned repo `remote` with a regular Git client for `clone`, `fetch`, `pull`, and `push`.
 
@@ -18,17 +18,29 @@ Git routes accept repo access tokens in two forms:
 
 | Format                             | Details                                                                                                                               | Example                                                                                                      |
 | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
-| HTTP Basic auth in the remote URL  | Recommended for simple `git clone` and `git push` commands. Put the token secret in the password slot.                                | `https://x:<token-secret>@<accountId>.artifacts.cloudflare.dev/git/<namespace>/<repo>.git`                   |
-| Bearer token in `http.extraHeader` | Use the full token string returned by the control plane. This works well when you do not want credentials embedded in the remote URL. | `git -c http.extraHeader="Authorization: Bearer $ARTIFACTS_TOKEN" clone "$ARTIFACTS_REMOTE" artifacts-clone` |
+| Bearer token in `http.extraHeader` | Recommended for local workflows. Use the full token string returned by the control plane and keep credentials out of the remote URL. | `git -c http.extraHeader="Authorization: Bearer $ARTIFACTS_TOKEN" clone "$ARTIFACTS_REMOTE" artifacts-clone` |
+| HTTP Basic auth in the remote URL  | Use for short-lived, one-off commands when you need a self-contained remote. Put the token secret in the password slot.              | `https://x:<token-secret>@<accountId>.artifacts.cloudflare.net/git/<namespace>/<repo>.git`                 |
 
 ### Token format
 
 Repo tokens are issued in the control-plane response format `art_v1_<40 hex>?expires=<unix_seconds>`.
 
-### HTTPS remote (recommended)
+### Git `extraHeader` parameter
+
+Git's [`http.extraHeader`](https://git-scm.com/docs/git-config#Documentation/git-config.txt-httpextraHeader) setting lets you attach an HTTP header to git requests.
+
+If you want to use the full token string returned by the API, pass it as a Bearer token:
+
+```sh
+git -c http.extraHeader="Authorization: Bearer $ARTIFACTS_TOKEN" clone "$ARTIFACTS_REMOTE" artifacts-clone
+```
+
+### HTTPS remote with Basic auth
 
 For the URL form, use the token secret in the password slot. Artifacts ignores the Basic auth username.
 
+Use this form only when you need a self-contained remote URL for a short-lived command.
+
 ```sh
 export ARTIFACTS_TOKEN_SECRET="${ARTIFACTS_TOKEN%%\?expires=*}"
 export ARTIFACTS_AUTH_REMOTE="https://x:${ARTIFACTS_TOKEN_SECRET}@${ARTIFACTS_REMOTE#https://}"
@@ -39,22 +51,11 @@ git clone "$ARTIFACTS_AUTH_REMOTE" artifacts-clone
 ```
 
 ```sh
-git remote add origin "$ARTIFACTS_AUTH_REMOTE"
-git push -u origin main
+git push "$ARTIFACTS_AUTH_REMOTE" HEAD:main
 ```
 
 Use any non-empty username in the URL. Artifacts accepts that username but does not otherwise use or log it, so `x` is just a placeholder.
 
-### Git `extraHeader` parameter
-
-Git's [`http.extraHeader`](https://git-scm.com/docs/git-config#Documentation/git-config.txt-httpextraHeader) setting lets you attach an HTTP header to git requests.
-
-If you want to use the full token string returned by the API, pass it as a Bearer token:
-
-```sh
-git -c http.extraHeader="Authorization: Bearer $ARTIFACTS_TOKEN" clone "$ARTIFACTS_REMOTE" artifacts-clone
-```
-
 ## Protocol support
 
 Artifacts supports Git protocol v1 and v2 for clone and fetch. Git clients negotiate the protocol automatically.

src/content/docs/artifacts/api/rest-api.mdx

@@ -9,7 +9,7 @@ head:
     content: REST API · Artifacts
 ---
 
-import { LinkCard, MetaInfo, Type } from "~/components";
+import { LinkCard, MetaInfo, Type, TypeScriptExample } from "~/components";
 
 Use the Artifacts REST API to manage repos, remotes, forks, imports, and tokens from external systems.
 
@@ -18,13 +18,13 @@ Use the Artifacts REST API to manage repos, remotes, forks, imports, and tokens
 Artifacts REST routes use this base path:
 
 ```txt
-https://artifacts.cloudflare.dev/v1/api/namespaces/{namespace}
+https://artifacts.cloudflare.net/v1/api/namespaces/{namespace}
 ```
 
 Some edge deployments also expose this base path:
 
 ```txt
-https://artifacts.cloudflare.dev/edge/v1/api/namespaces/{namespace}
+https://artifacts.cloudflare.net/edge/v1/api/namespaces/{namespace}
 ```
 
 Requests to `/v1/api/...` use Bearer authentication:
@@ -41,13 +41,17 @@ The following examples assume:
 export ARTIFACTS_NAMESPACE="default"
 export ARTIFACTS_REPO="starter-repo"
 export ARTIFACTS_JWT="<YOUR_GATEWAY_JWT>"
-export ARTIFACTS_BASE_URL="https://artifacts.cloudflare.dev/v1/api/namespaces/$ARTIFACTS_NAMESPACE"
+export ARTIFACTS_BASE_URL="https://artifacts.cloudflare.net/v1/api/namespaces/$ARTIFACTS_NAMESPACE"
 ```
 
 All responses use the standard Cloudflare v4 envelope.
 
+Returned repo tokens are secrets. Do not log them or store them in long-lived remotes unless your workflow requires it.
+
 ## Shared types
 
+<TypeScriptExample typescriptFirst={true}>
+
 ```ts
 export type NamespaceName = string;
 export type RepoName = string;
@@ -121,6 +125,8 @@ export interface TokenInfo {
 }
 ```
 
+</TypeScriptExample>
+
 ## Repos
 
 ### Create a repo
@@ -136,6 +142,8 @@ Request body:
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface CreateRepoRequest {
 	name: RepoName;
@@ -157,6 +165,8 @@ export interface CreateRepoResult {
 export type CreateRepoResponse = ApiEnvelope<CreateRepoResult>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl --request POST "$ARTIFACTS_BASE_URL/repos" \
   --header "Authorization: Bearer $ARTIFACTS_JWT" \
@@ -176,9 +186,9 @@ curl --request POST "$ARTIFACTS_BASE_URL/repos" \
 		"name": "starter-repo",
 		"description": "Repository for automation experiments",
 		"default_branch": "main",
-		"remote": "https://<ACCOUNT>.artifacts.cloudflare.dev/git/default/starter-repo.git",
+		"remote": "https://<ACCOUNT_ID>.artifacts.cloudflare.net/git/default/starter-repo.git",
 		"token": "art_v1_0123456789abcdef0123456789abcdef01234567?expires=1760000000",
-		"expires_at": "2026-04-08T12:00:00.000Z"
+		"expires_at": "<ISO_TIMESTAMP>"
 	},
 	"success": true,
 	"errors": [],
@@ -200,6 +210,8 @@ Query parameters:
 
 Response type:
 
+<TypeScriptExample typescriptFirst={true}>
+
 ```ts
 export interface ListReposQuery {
 	limit?: number;
@@ -212,6 +224,8 @@ export interface ListReposQuery {
 export type ListReposResponse = ApiEnvelope<RepoInfo[]>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl "$ARTIFACTS_BASE_URL/repos?limit=20&sort=updated_at&direction=desc" \
   --header "Authorization: Bearer $ARTIFACTS_JWT"
@@ -225,9 +239,9 @@ curl "$ARTIFACTS_BASE_URL/repos?limit=20&sort=updated_at&direction=desc" \
 			"name": "starter-repo",
 			"description": "Repository for automation experiments",
 			"default_branch": "main",
-			"created_at": "2026-04-07T12:00:00.000Z",
-			"updated_at": "2026-04-07T12:30:00.000Z",
-			"last_push_at": "2026-04-07T12:30:00.000Z",
+			"created_at": "<ISO_TIMESTAMP>",
+			"updated_at": "<ISO_TIMESTAMP>",
+			"last_push_at": "<ISO_TIMESTAMP>",
 			"source": null,
 			"read_only": false
 		}
@@ -249,10 +263,14 @@ Route: `GET /repos/:name`
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export type GetRepoResponse = ApiEnvelope<RemoteRepoInfo>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl "$ARTIFACTS_BASE_URL/repos/$ARTIFACTS_REPO" \
   --header "Authorization: Bearer $ARTIFACTS_JWT"
@@ -265,12 +283,12 @@ curl "$ARTIFACTS_BASE_URL/repos/$ARTIFACTS_REPO" \
 		"name": "starter-repo",
 		"description": "Repository for automation experiments",
 		"default_branch": "main",
-		"created_at": "2026-04-07T12:00:00.000Z",
-		"updated_at": "2026-04-07T12:30:00.000Z",
-		"last_push_at": "2026-04-07T12:30:00.000Z",
+		"created_at": "<ISO_TIMESTAMP>",
+		"updated_at": "<ISO_TIMESTAMP>",
+		"last_push_at": "<ISO_TIMESTAMP>",
 		"source": null,
 		"read_only": false,
-		"remote": "https://<ACCOUNT>.artifacts.cloudflare.dev/git/default/starter-repo.git"
+		"remote": "https://<ACCOUNT_ID>.artifacts.cloudflare.net/git/default/starter-repo.git"
 	},
 	"success": true,
 	"errors": [],
@@ -286,6 +304,8 @@ This route returns `202 Accepted`.
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface DeleteRepoResult {
 	id: string;
@@ -294,6 +314,8 @@ export interface DeleteRepoResult {
 export type DeleteRepoResponse = ApiEnvelope<DeleteRepoResult>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl --request DELETE "$ARTIFACTS_BASE_URL/repos/$ARTIFACTS_REPO" \
   --header "Authorization: Bearer $ARTIFACTS_JWT"
@@ -323,6 +345,8 @@ Request body:
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface ForkRepoRequest {
 	name: RepoName;
@@ -338,6 +362,8 @@ export interface ForkRepoResult extends CreateRepoResult {
 export type ForkRepoResponse = ApiEnvelope<ForkRepoResult>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl --request POST "$ARTIFACTS_BASE_URL/repos/$ARTIFACTS_REPO/fork" \
 	--header "Authorization: Bearer $ARTIFACTS_JWT" \
@@ -357,9 +383,9 @@ curl --request POST "$ARTIFACTS_BASE_URL/repos/$ARTIFACTS_REPO/fork" \
 		"name": "starter-repo-copy",
 		"description": "Repository for automation experiments",
 		"default_branch": "main",
-		"remote": "https://<ACCOUNT>.artifacts.cloudflare.dev/git/default/starter-repo-copy.git",
+		"remote": "https://<ACCOUNT_ID>.artifacts.cloudflare.net/git/default/starter-repo-copy.git",
 		"token": "art_v1_89abcdef0123456789abcdef0123456789abcdef?expires=1760003600",
-		"expires_at": "2026-04-08T13:00:00.000Z",
+		"expires_at": "<ISO_TIMESTAMP>",
 		"objects": 128
 	},
 	"success": true,
@@ -381,6 +407,8 @@ Request body:
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface ImportRepoRequest {
 	url: string;
@@ -392,6 +420,8 @@ export interface ImportRepoRequest {
 export type ImportRepoResponse = ApiEnvelope<CreateRepoResult>;
 ```
 
+</TypeScriptExample>
+
 Pass a full HTTPS Git remote URL, for example `https://github.com/facebook/react` or `https://gitlab.com/group/project.git`.
 
 ```bash
@@ -412,9 +442,9 @@ curl --request POST "$ARTIFACTS_BASE_URL/repos/react-mirror/import" \
 		"name": "react-mirror",
 		"description": null,
 		"default_branch": "main",
-		"remote": "https://<ACCOUNT>.artifacts.cloudflare.dev/git/default/react-mirror.git",
+		"remote": "https://<ACCOUNT_ID>.artifacts.cloudflare.net/git/default/react-mirror.git",
 		"token": "art_v1_fedcba9876543210fedcba9876543210fedcba98?expires=1760007200",
-		"expires_at": "2026-04-08T14:00:00.000Z"
+		"expires_at": "<ISO_TIMESTAMP>"
 	},
 	"success": true,
 	"errors": [],
@@ -436,6 +466,8 @@ Query parameters:
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface ListTokensQuery {
 	state?: TokenState | "all";
@@ -446,6 +478,8 @@ export interface ListTokensQuery {
 export type ListTokensResponse = ApiEnvelope<TokenInfo[]>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl "$ARTIFACTS_BASE_URL/repos/$ARTIFACTS_REPO/tokens?state=all&per_page=30&page=1" \
   --header "Authorization: Bearer $ARTIFACTS_JWT"
@@ -458,8 +492,8 @@ curl "$ARTIFACTS_BASE_URL/repos/$ARTIFACTS_REPO/tokens?state=all&per_page=30&pag
 			"id": "tok_123",
 			"scope": "read",
 			"state": "active",
-			"created_at": "2026-04-07T12:00:00.000Z",
-			"expires_at": "2026-04-07T13:00:00.000Z"
+			"created_at": "<ISO_TIMESTAMP>",
+			"expires_at": "<ISO_TIMESTAMP>"
 		}
 	],
 	"success": true,
@@ -487,6 +521,8 @@ Request body:
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface CreateTokenRequest {
 	repo: RepoName;
@@ -504,6 +540,8 @@ export interface CreateTokenResult {
 export type CreateTokenResponse = ApiEnvelope<CreateTokenResult>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl --request POST "$ARTIFACTS_BASE_URL/tokens" \
   --header "Authorization: Bearer $ARTIFACTS_JWT" \
@@ -521,7 +559,7 @@ curl --request POST "$ARTIFACTS_BASE_URL/tokens" \
 		"id": "tok_123",
 		"plaintext": "art_v1_0123456789abcdef0123456789abcdef01234567?expires=1760000000",
 		"scope": "read",
-		"expires_at": "2026-04-07T13:00:00.000Z"
+		"expires_at": "<ISO_TIMESTAMP>"
 	},
 	"success": true,
 	"errors": [],
@@ -535,6 +573,8 @@ Route: `DELETE /tokens/:id`
 
 Response type:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface RevokeTokenResult {
 	id: string;
@@ -543,6 +583,8 @@ export interface RevokeTokenResult {
 export type RevokeTokenResponse = ApiEnvelope<RevokeTokenResult>;
 ```
 
+</TypeScriptExample>
+
 ```bash
 curl --request DELETE "$ARTIFACTS_BASE_URL/tokens/tok_123" \
   --header "Authorization: Bearer $ARTIFACTS_JWT"
@@ -563,6 +605,8 @@ curl --request DELETE "$ARTIFACTS_BASE_URL/tokens/tok_123" \
 
 Application errors also use the v4 envelope:
 
+<TypeScriptExample omitTabs={true}>
+
 ```ts
 export interface ApiError {
 	code: number;
@@ -574,6 +618,8 @@ export interface ApiError {
 }
 ```
 
+</TypeScriptExample>
+
 ## Next steps
 
 <LinkCard