@calo-design/cli 0.11.0 → 0.12.1

package/bin/mirror-push.js

@@ -102,11 +102,24 @@ function extractEasGroup(captured) {
   return found ? found[1] : undefined;
 }
 
+// The per-version EAS branch/channel name. Deterministic from (slug, group) so any
+// party — CLI, broker page, Mirror launcher — can derive it, but it's also stored in
+// artifact.easBranch so the convention can evolve without re-deriving. EAS channel
+// names share the slug charset; slug ≤63 + "--g" + 8 = ≤74, under EAS's limits.
+// A hoisted `function` on purpose: it's called from cmdPush, which runs ABOVE this
+// definition — a `const` here sat in the TDZ and silently killed the pin (the
+// best-effort catch ate the ReferenceError; caught only by live-push verification).
+function versionBranchOf(slug, group) {
+  return `${slug}--g${String(group).slice(0, 8).toLowerCase()}`;
+}
+
 function runtimeDir() {
   const home = process.env.DESIGNCHEF_HOME || path.join(os.homedir(), ".designchef");
   return path.join(home, "runtime");
 }
-const slugify = (s) => String(s).toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "") || "prototype";
+// Capped at 63 (SLUG_RE's bound everywhere else) — an uncapped slug would silently
+// break the checkpoint stamp and overflow EAS channel-name limits on version pins.
+const slugify = (s) => String(s).toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 63).replace(/-+$/, "") || "prototype";
 const titleize = (s) => String(s).replace(/[-_]+/g, " ").replace(/\b\w/g, (m) => m.toUpperCase());
 
 function appDir(root) {
@@ -854,6 +867,7 @@ async function cmdPush(args) {
     // capture is best-effort (a quick update:list after the publish); so is the whole
     // stamp — never fails the push. (Lazy require: mirror-push is also loaded by art-push.)
     let easGroup;
+    let easBranch;
     try {
       // easCapture → { status, out }. Tolerant extraction: eas --json shapes (and
       // banner noise) vary by version, so regex the output for the first uuid-shaped
@@ -861,14 +875,36 @@ async function cmdPush(args) {
       // lists the branch head, so a concurrent push to the same slug in this window
       // could stamp the other push's group — rare, and a stamp is advisory metadata.
       easGroup = extractEasGroup(easCapture(["update:list", "--branch", slug, "--limit", "1", "--json", "--non-interactive"], { cwd: stage }));
+      if (easGroup) {
+        // Pin this exact version behind its own channel: `slug--g<group[:8]>`.
+        // republish is a metadata copy (no rebundle); ensureChannel links channel →
+        // branch of the same name, which is what the Mirror's channel-name header
+        // switch loads. This is what makes "open v3 on your phone" possible after
+        // the channel head (slug) has moved on. Best-effort like the whole stamp.
+        const vb = versionBranchOf(slug, easGroup);
+        ensureChannel(stage, vb);
+        const rp = easCapture(
+          ["update:republish", "--group", easGroup, "--destination-branch", vb, "-m", `pin ${slug} @ ${easGroup.slice(0, 8)}`, "--non-interactive"],
+          { cwd: stage }
+        );
+        if (rp.status === 0) easBranch = vb;
+        else warn(`version pin skipped (republish → ${rp.out.trim().split("\n").slice(-1)[0] || rp.status})`);
+      }
     } catch {
       /* no artifact ref — the stamp still records source + deep link */
     }
     await require("./checkpoints").autoCheckpoint({
       root: process.cwd(),
-      note: flag(args, "note") || `pushed to the Mirror (${slug})`,
+      // NB: mirror-push's flag() takes the full "--name" (unlike share.js's bare-name helper).
+      note: flag(args, "--note") || `pushed to the Mirror (${slug})`,
       publishedUrl: `designchef://open/${slug}`,
-      artifact: { kind: "mirror", channel: slug, runtimeVersion: RUNTIME_VERSION, ...(easGroup ? { easGroup } : {}) },
+      artifact: {
+        kind: "mirror",
+        channel: slug,
+        runtimeVersion: RUNTIME_VERSION,
+        ...(easGroup ? { easGroup } : {}),
+        ...(easBranch ? { easBranch } : {}),
+      },
     });
 
     // Share target: the deep link the Mirror scanner (and iOS camera) opens.
@@ -889,4 +925,4 @@ async function cmdPush(args) {
   }
 }
 
-module.exports = { cmdPush, _s3Put: s3Put, _upsertRegistry: upsertRegistry, _publicBase: PUBLIC_BASE, _extractEasGroup: extractEasGroup };
+module.exports = { cmdPush, _s3Put: s3Put, _upsertRegistry: upsertRegistry, _publicBase: PUBLIC_BASE, _extractEasGroup: extractEasGroup, _versionBranchOf: versionBranchOf };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@calo-design/cli",
-  "version": "0.11.0",
+  "version": "0.12.1",
   "description": "One-line setup for Calo design tooling: logs in with your Calo email and installs the calo-design skill + design-system packages. No GitHub account needed.",
   "bin": {
     "calo-design": "bin/cli.js"