@columnus/shared 0.1.63 → 0.2.0

package/dist/previewDeployName.d.ts

@@ -1,22 +1,26 @@
-export declare function coolifyHostnameFromEnv(env?: NodeJS.ProcessEnv): string | null;
-/**
- * Browser origin Better Auth expects on server-side OTP probes.
- * Preview configure sets SITE_URL to `https://<coolify-host>`; Origin must match.
- * Coolify often injects `COOLIFY_URL=http://…` — do not use that scheme.
- */
+/** Canonical Kubernetes preview PR identity (matches columnus-pr-N namespaces). */
+export declare const PREVIEW_PR_ID_RE: RegExp;
+export declare const PREVIEW_TENANT_SLUG_PREFIX = "preview-";
+export declare function isPreviewTenantSlug(slug: string): boolean;
+/** Explicit application origin used by CI and runtime preview routing. */
+export declare function previewHostnameFromEnv(env?: NodeJS.ProcessEnv): string | null;
+/** Browser origin for server-side auth probes; never use a Convex HTTP endpoint. */
 export declare function resolveTrustedAuthOrigin(env?: NodeJS.ProcessEnv): string | undefined;
-/** True when Coolify (or CI_PREVIEW) indicates a PR preview Docker build. */
+/** CI_PREVIEW is the local build mode; COLUMNUS_PREVIEW identifies deployed previews. */
 export declare function isCiPreviewBuild(env?: NodeJS.ProcessEnv): boolean;
+/** Domain suffix only from a recognized preview host, never from branch identity. */
+export declare function previewZoneFromEnv(env?: NodeJS.ProcessEnv): string | null;
 /** PR id from `preview-<n>.<domain>` / `manage-preview-<n>` hostname or `pull/<n>/head` branch. */
 export declare function resolvePreviewPrId(env?: NodeJS.ProcessEnv): string | null;
-/**
- * Resolve the git branch used for Convex `--preview-name`.
- * Coolify often sets COOLIFY_BRANCH to `pull/<n>/head` at runtime (see coollabsio/coolify#9572).
- */
+/** Resolve the CI git branch used for Convex preview deployment naming. */
 export declare function resolvePreviewBranch(env?: NodeJS.ProcessEnv): string | null;
 export declare function sanitizePreviewDeployName(branch: string): string;
 /** Normalize a preview name from Convex env before `convex deploy --preview-name`. */
 export declare function normalizePreviewDeployName(name: string): string;
+/** Identifier rule shared by CI configuration and Management registration. */
+export declare const PREVIEW_DEPLOY_NAME_RE: RegExp;
+/** Explicit CI identity, including hostless Management builds. */
+export declare function explicitPreviewDeployName(env?: NodeJS.ProcessEnv): string | null;
 export declare function ciPreviewDeployName(env?: NodeJS.ProcessEnv): string | null;
 /** Stale failures from broken preview deploy before the bridge was live. */
 export declare const STALE_ENDPOINT_DEPLOY_ERROR: RegExp;

package/dist/previewDeployName.js

@@ -1,54 +1,44 @@
 // packages/@columnus/shared/src/previewDeployName.ts
-function hostnameFromCoolifyToken(raw) {
-  const token = raw.trim();
-  if (!token || /^https?:?$/i.test(token)) return null;
+var PREVIEW_PR_ID_RE = /^[1-9][0-9]{0,6}$/;
+var PREVIEW_TENANT_SLUG_PREFIX = "preview-";
+function isPreviewTenantSlug(slug) {
+  return slug.startsWith(PREVIEW_TENANT_SLUG_PREFIX);
+}
+function previewHostnameFromEnv(env = process.env) {
+  const origin = resolveTrustedAuthOrigin(env);
+  if (!origin) return null;
   try {
-    if (/^[a-z][a-z0-9+.-]*:\/\//i.test(token)) {
-      return new URL(token).hostname || null;
-    }
+    return new URL(origin).hostname;
   } catch {
     return null;
   }
-  const host = token.split("/")[0]?.split(":")[0] ?? "";
-  if (!host || !host.includes(".") && host !== "localhost") return null;
-  return host;
-}
-function coolifyHostnameFromEnv(env = process.env) {
-  const raw = env.COOLIFY_FQDN ?? env.COOLIFY_URL;
-  if (!raw) return null;
-  for (const part of raw.split(",")) {
-    const host = hostnameFromCoolifyToken(part);
-    if (host) return host;
-  }
-  return null;
 }
 function resolveTrustedAuthOrigin(env = process.env) {
   const explicit = env.COLUMNUS_AUTH_ORIGIN?.trim();
   if (explicit) return explicit.replace(/\/$/, "");
-  const host = coolifyHostnameFromEnv(env);
-  if (host) return `https://${host}`;
   const siteUrl = env.SITE_URL?.trim();
-  if (siteUrl && !/\.convex\.site(?:\/|$)/i.test(siteUrl)) {
-    return siteUrl.replace(/\/$/, "");
-  }
+  if (siteUrl && !/\.convex\.site(?:\/|$)/i.test(siteUrl)) return siteUrl.replace(/\/$/, "");
   return void 0;
 }
 function isCiPreviewBuild(env = process.env) {
-  if (env.CI_PREVIEW === "true" || env.COOLIFY_IS_PREVIEW === "true") {
-    return true;
-  }
-  const host = coolifyHostnameFromEnv(env);
-  return Boolean(host && /^(?:manage-|deploy-|renderer-)?preview-\d+\./.test(host));
+  if (env.CI_PREVIEW === "true" || env.COLUMNUS_PREVIEW === "true") return true;
+  const host = previewHostnameFromEnv(env);
+  return Boolean(host && PREVIEW_HOST_PR_RE.test(host));
 }
 var PULL_HEAD_BRANCH_RE = /^pull\/(\d+)\/head$/i;
 var PREVIEW_HOST_PR_RE = /^(?:manage-|deploy-|renderer-)?preview-(\d+)\./;
+function previewZoneFromEnv(env = process.env) {
+  const host = previewHostnameFromEnv(env);
+  const prefix = host ? PREVIEW_HOST_PR_RE.exec(host)?.[0] : void 0;
+  return host && prefix ? host.slice(prefix.length) || null : null;
+}
 function resolvePreviewPrId(env = process.env) {
-  const host = coolifyHostnameFromEnv(env);
+  const host = previewHostnameFromEnv(env);
   if (host) {
     const fromHost = PREVIEW_HOST_PR_RE.exec(host)?.[1];
     if (fromHost) return fromHost;
   }
-  const branch = env.COOLIFY_BRANCH ?? env.GIT_BRANCH;
+  const branch = env.GIT_BRANCH;
   if (branch) {
     const fromBranch = PULL_HEAD_BRANCH_RE.exec(stripQualifiedBranch(branch))?.[1];
     if (fromBranch) return fromBranch;
@@ -57,7 +47,7 @@ function resolvePreviewPrId(env = process.env) {
 }
 function resolvePreviewBranch(env = process.env) {
   if (env.GITHUB_HEAD_REF) return stripQualifiedBranch(env.GITHUB_HEAD_REF);
-  const branch = env.COOLIFY_BRANCH ?? env.GIT_BRANCH;
+  const branch = env.GIT_BRANCH;
   const prId = resolvePreviewPrId(env);
   if (!branch) {
     return prId ? `preview-${prId}` : null;
@@ -81,8 +71,19 @@ function sanitizePreviewDeployName(branch) {
 function normalizePreviewDeployName(name) {
   return sanitizePreviewDeployName(name.trim());
 }
+var PREVIEW_DEPLOY_NAME_RE = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
+function explicitPreviewDeployName(env = process.env) {
+  const name = env.CONVEX_PREVIEW_NAME?.trim();
+  if (!name) return null;
+  if (!PREVIEW_DEPLOY_NAME_RE.test(name)) {
+    throw new Error("CONVEX_PREVIEW_NAME must be a 1\u201364 character preview identifier");
+  }
+  return name;
+}
 function ciPreviewDeployName(env = process.env) {
   if (!isCiPreviewBuild(env)) return null;
+  const explicit = explicitPreviewDeployName(env);
+  if (explicit) return explicit;
   const branch = resolvePreviewBranch(env);
   if (!branch) return null;
   return sanitizePreviewDeployName(branch);
@@ -100,6 +101,6 @@ function isRecoverableDeployError(error) {
   return error.includes("convex/bin/main.js") || error.includes("convex CLI (bin/main.js") || error.includes("convex CLI not available");
 }
 
-export { STALE_ENDPOINT_DEPLOY_ERROR, ciPreviewDeployName, coolifyHostnameFromEnv, isCiPreviewBuild, isRecoverableDeployError, isStaleEndpointDeployError, normalizePreviewDeployName, resolvePreviewBranch, resolvePreviewPrId, resolveTrustedAuthOrigin, sanitizePreviewDeployName };
+export { PREVIEW_DEPLOY_NAME_RE, PREVIEW_PR_ID_RE, PREVIEW_TENANT_SLUG_PREFIX, STALE_ENDPOINT_DEPLOY_ERROR, ciPreviewDeployName, explicitPreviewDeployName, isCiPreviewBuild, isPreviewTenantSlug, isRecoverableDeployError, isStaleEndpointDeployError, normalizePreviewDeployName, previewHostnameFromEnv, previewZoneFromEnv, resolvePreviewBranch, resolvePreviewPrId, resolveTrustedAuthOrigin, sanitizePreviewDeployName };
 //# sourceMappingURL=previewDeployName.js.map
 //# sourceMappingURL=previewDeployName.js.map

package/dist/previewDeployName.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/previewDeployName.ts"],"names":[],"mappings":";AAWA,SAAS,yBAAyB,GAAA,EAA4B;AAC5D,EAAA,MAAM,KAAA,GAAQ,IAAI,IAAA,EAAK;AACvB,EAAA,IAAI,CAAC,KAAA,IAAS,aAAA,CAAc,IAAA,CAAK,KAAK,GAAG,OAAO,IAAA;AAEhD,EAAA,IAAI;AACF,IAAA,IAAI,0BAAA,CAA2B,IAAA,CAAK,KAAK,CAAA,EAAG;AAC1C,MAAA,OAAO,IAAI,GAAA,CAAI,KAAK,CAAA,CAAE,QAAA,IAAY,IAAA;AAAA,IACpC;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AACnD,EAAA,IAAI,CAAC,QAAS,CAAC,IAAA,CAAK,SAAS,GAAG,CAAA,IAAK,IAAA,KAAS,WAAA,EAAc,OAAO,IAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,sBAAA,CAAuB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AAC1F,EAAA,MAAM,GAAA,GAAM,GAAA,CAAI,YAAA,IAAgB,GAAA,CAAI,WAAA;AACpC,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,KAAA,MAAW,IAAA,IAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,EAAG;AACjC,IAAA,MAAM,IAAA,GAAO,yBAAyB,IAAI,CAAA;AAC1C,IAAA,IAAI,MAAM,OAAO,IAAA;AAAA,EACnB;AACA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,wBAAA,CAAyB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAyB;AACjG,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,oBAAA,EAAsB,IAAA,EAAK;AAChD,EAAA,IAAI,QAAA,EAAU,OAAO,QAAA,CAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AAE/C,EAAA,MAAM,IAAA,GAAO,uBAAuB,GAAG,CAAA;AACvC,EAAA,IAAI,IAAA,EAAM,OAAO,CAAA,QAAA,EAAW,IAAI,CAAA,CAAA;AAEhC,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,QAAA,EAAU,IAAA,EAAK;AACnC,EAAA,IAAI,OAAA,IAAW,CAAC,yBAAA,CAA0B,IAAA,CAAK,OAAO,CAAA,EAAG;AACvD,IAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAAA,EAClC;AACA,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,gBAAA,CAAiB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAc;AAC9E,EAAA,IAAI,GAAA,CAAI,UAAA,KAAe,MAAA,IAAU,GAAA,CAAI,uBAAuB,MAAA,EAAQ;AAClE,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,IAAA,GAAO,uBAAuB,GAAG,CAAA;AAEvC,EAAA,OAAO,OAAA,CAAQ,IAAA,IAAQ,8CAAA,CAA+C,IAAA,CAAK,IAAI,CAAC,CAAA;AAClF;AAEA,IAAM,mBAAA,GAAsB,sBAAA;AAC5B,IAAM,kBAAA,GAAqB,gDAAA;AAGpB,SAAS,kBAAA,CAAmB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACtF,EAAA,MAAM,IAAA,GAAO,uBAAuB,GAAG,CAAA;AACvC,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,IAAA,CAAK,IAAI,IAAI,CAAC,CAAA;AAClD,IAAA,IAAI,UAAU,OAAO,QAAA;AAAA,EACvB;AAEA,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,cAAA,IAAkB,GAAA,CAAI,UAAA;AACzC,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAM,aAAa,mBAAA,CAAoB,IAAA,CAAK,qBAAqB,MAAM,CAAC,IAAI,CAAC,CAAA;AAC7E,IAAA,IAAI,YAAY,OAAO,UAAA;AAAA,EACzB;AAEA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,oBAAA,CAAqB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACxF,EAAA,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,oBAAA,CAAqB,IAAI,eAAe,CAAA;AAExE,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,cAAA,IAAkB,GAAA,CAAI,UAAA;AACzC,EAAA,MAAM,IAAA,GAAO,mBAAmB,GAAG,CAAA;AACnC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,IAAA,GAAO,CAAA,QAAA,EAAW,IAAI,CAAA,CAAA,GAAK,IAAA;AAAA,EACpC;AAEA,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAC5C,EAAA,IAAI,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACtC,IAAA,IAAI,IAAA,EAAM,OAAO,CAAA,QAAA,EAAW,IAAI,CAAA,CAAA;AAAA,EAClC;AAEA,EAAA,IAAA,CAAK,QAAA,KAAa,MAAA,IAAU,QAAA,KAAa,QAAA,KAAa,IAAA,EAAM;AAC1D,IAAA,OAAO,WAAW,IAAI,CAAA,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,QAAA;AACT;AAGA,SAAS,qBAAqB,MAAA,EAAwB;AACpD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AAChC,EAAA,OAAO,QAAQ,CAAA,GAAI,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,GAAI,MAAA;AAC9C;AAEO,SAAS,0BAA0B,MAAA,EAAwB;AAChE,EAAA,OAAO,oBAAA,CAAqB,MAAM,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AACxD;AAGO,SAAS,2BAA2B,IAAA,EAAsB;AAC/D,EAAA,OAAO,yBAAA,CAA0B,IAAA,CAAK,IAAA,EAAM,CAAA;AAC9C;AAEO,SAAS,mBAAA,CAAoB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACvF,EAAA,IAAI,CAAC,gBAAA,CAAiB,GAAG,CAAA,EAAG,OAAO,IAAA;AAEnC,EAAA,MAAM,MAAA,GAAS,qBAAqB,GAAG,CAAA;AACvC,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,OAAO,0BAA0B,MAAM,CAAA;AACzC;AAGO,IAAM,2BAAA,GACX;AAEK,SAAS,2BAA2B,KAAA,EAAoC;AAC7E,EAAA,OAAO,KAAA,IAAS,IAAA,IAAQ,2BAAA,CAA4B,IAAA,CAAK,KAAK,CAAA;AAChE;AAGO,SAAS,yBAAyB,KAAA,EAAoC;AAC3E,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,0BAAA,CAA2B,KAAK,CAAA,EAAG,OAAO,IAAA;AAC9C,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,iBAAiB,CAAA,EAAG,OAAO,IAAA;AAC9C,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,6BAA6B,CAAA,EAAG,OAAO,IAAA;AAC1D,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,2BAA2B,CAAA,EAAG,OAAO,IAAA;AACxD,EAAA,OACE,KAAA,CAAM,QAAA,CAAS,oBAAoB,CAAA,IACnC,KAAA,CAAM,SAAS,yBAAyB,CAAA,IACxC,KAAA,CAAM,QAAA,CAAS,0BAA0B,CAAA;AAE7C","file":"previewDeployName.js","sourcesContent":["/**\n * Sanitized Convex preview deployment name for CI / Coolify preview builds.\n * \"/\" breaks preview/<name> lookups in Convex deployment references.\n *\n * Coolify preview env vars: COOLIFY_BRANCH, COOLIFY_IS_PREVIEW, COOLIFY_FQDN,\n * COOLIFY_URL (BuildKit build secrets).\n *\n * Production Coolify often injects a comma-separated FQDN/URL list\n * (`app.columnus.app,bro.columnus.app,…`). Take the first valid hostname —\n * Better Auth Origin must be a single origin, not the whole list.\n */\nfunction hostnameFromCoolifyToken(raw: string): string | null {\n  const token = raw.trim();\n  if (!token || /^https?:?$/i.test(token)) return null;\n\n  try {\n    if (/^[a-z][a-z0-9+.-]*:\\/\\//i.test(token)) {\n      return new URL(token).hostname || null;\n    }\n  } catch {\n    return null;\n  }\n\n  const host = token.split(\"/\")[0]?.split(\":\")[0] ?? \"\";\n  if (!host || (!host.includes(\".\") && host !== \"localhost\")) return null;\n  return host;\n}\n\nexport function coolifyHostnameFromEnv(env: NodeJS.ProcessEnv = process.env): string | null {\n  const raw = env.COOLIFY_FQDN ?? env.COOLIFY_URL;\n  if (!raw) return null;\n  for (const part of raw.split(\",\")) {\n    const host = hostnameFromCoolifyToken(part);\n    if (host) return host;\n  }\n  return null;\n}\n\n/**\n * Browser origin Better Auth expects on server-side OTP probes.\n * Preview configure sets SITE_URL to `https://<coolify-host>`; Origin must match.\n * Coolify often injects `COOLIFY_URL=http://…` — do not use that scheme.\n */\nexport function resolveTrustedAuthOrigin(env: NodeJS.ProcessEnv = process.env): string | undefined {\n  const explicit = env.COLUMNUS_AUTH_ORIGIN?.trim();\n  if (explicit) return explicit.replace(/\\/$/, \"\");\n\n  const host = coolifyHostnameFromEnv(env);\n  if (host) return `https://${host}`;\n\n  const siteUrl = env.SITE_URL?.trim();\n  if (siteUrl && !/\\.convex\\.site(?:\\/|$)/i.test(siteUrl)) {\n    return siteUrl.replace(/\\/$/, \"\");\n  }\n  return undefined;\n}\n\n/** True when Coolify (or CI_PREVIEW) indicates a PR preview Docker build. */\nexport function isCiPreviewBuild(env: NodeJS.ProcessEnv = process.env): boolean {\n  if (env.CI_PREVIEW === \"true\" || env.COOLIFY_IS_PREVIEW === \"true\") {\n    return true;\n  }\n  const host = coolifyHostnameFromEnv(env);\n  // preview-<pr>, manage-preview-<pr>, deploy-preview-<pr>, renderer-preview-<pr>\n  return Boolean(host && /^(?:manage-|deploy-|renderer-)?preview-\\d+\\./.test(host));\n}\n\nconst PULL_HEAD_BRANCH_RE = /^pull\\/(\\d+)\\/head$/i;\nconst PREVIEW_HOST_PR_RE = /^(?:manage-|deploy-|renderer-)?preview-(\\d+)\\./;\n\n/** PR id from `preview-<n>.<domain>` / `manage-preview-<n>` hostname or `pull/<n>/head` branch. */\nexport function resolvePreviewPrId(env: NodeJS.ProcessEnv = process.env): string | null {\n  const host = coolifyHostnameFromEnv(env);\n  if (host) {\n    const fromHost = PREVIEW_HOST_PR_RE.exec(host)?.[1];\n    if (fromHost) return fromHost;\n  }\n\n  const branch = env.COOLIFY_BRANCH ?? env.GIT_BRANCH;\n  if (branch) {\n    const fromBranch = PULL_HEAD_BRANCH_RE.exec(stripQualifiedBranch(branch))?.[1];\n    if (fromBranch) return fromBranch;\n  }\n\n  return null;\n}\n\n/**\n * Resolve the git branch used for Convex `--preview-name`.\n * Coolify often sets COOLIFY_BRANCH to `pull/<n>/head` at runtime (see coollabsio/coolify#9572).\n */\nexport function resolvePreviewBranch(env: NodeJS.ProcessEnv = process.env): string | null {\n  if (env.GITHUB_HEAD_REF) return stripQualifiedBranch(env.GITHUB_HEAD_REF);\n\n  const branch = env.COOLIFY_BRANCH ?? env.GIT_BRANCH;\n  const prId = resolvePreviewPrId(env);\n  if (!branch) {\n    return prId ? `preview-${prId}` : null;\n  }\n\n  const stripped = stripQualifiedBranch(branch);\n  if (PULL_HEAD_BRANCH_RE.test(stripped)) {\n    if (prId) return `preview-${prId}`;\n  }\n  // Coolify PR apps often leave COOLIFY_BRANCH=main while FQDN is *-preview-<n>.\n  if ((stripped === \"main\" || stripped === \"master\") && prId) {\n    return `preview-${prId}`;\n  }\n  return stripped;\n}\n\n/** Strip Coolify/Convex qualified suffixes (e.g. `pull-48-head:pr-48-coolify`). */\nfunction stripQualifiedBranch(branch: string): string {\n  const colon = branch.indexOf(\":\");\n  return colon > 0 ? branch.slice(0, colon) : branch;\n}\n\nexport function sanitizePreviewDeployName(branch: string): string {\n  return stripQualifiedBranch(branch).replace(/\\//g, \"-\");\n}\n\n/** Normalize a preview name from Convex env before `convex deploy --preview-name`. */\nexport function normalizePreviewDeployName(name: string): string {\n  return sanitizePreviewDeployName(name.trim());\n}\n\nexport function ciPreviewDeployName(env: NodeJS.ProcessEnv = process.env): string | null {\n  if (!isCiPreviewBuild(env)) return null;\n\n  const branch = resolvePreviewBranch(env);\n  if (!branch) return null;\n  return sanitizePreviewDeployName(branch);\n}\n\n/** Stale failures from broken preview deploy before the bridge was live. */\nexport const STALE_ENDPOINT_DEPLOY_ERROR =\n  /^deploy endpoint returned (?:200(?: OK)?|500(?: Internal Server Error)?)$/;\n\nexport function isStaleEndpointDeployError(error: string | undefined): boolean {\n  return error != null && STALE_ENDPOINT_DEPLOY_ERROR.test(error);\n}\n\n/** Infra failures from a prior broken deploy that a fresh save can retry. */\nexport function isRecoverableDeployError(error: string | undefined): boolean {\n  if (error == null) return false;\n  if (isStaleEndpointDeployError(error)) return true;\n  if (error.includes(\"502 Bad Gateway\")) return true;\n  if (error.includes(\"deploy endpoint unreachable\")) return true;\n  if (error.includes(\"deploy endpoint timed out\")) return true;\n  return (\n    error.includes(\"convex/bin/main.js\") ||\n    error.includes(\"convex CLI (bin/main.js\") ||\n    error.includes(\"convex CLI not available\")\n  );\n}\n"]}
+{"version":3,"sources":["../src/previewDeployName.ts"],"names":[],"mappings":";AACO,IAAM,gBAAA,GAAmB;AACzB,IAAM,0BAAA,GAA6B;AACnC,SAAS,oBAAoB,IAAA,EAAuB;AACzD,EAAA,OAAO,IAAA,CAAK,WAAW,0BAA0B,CAAA;AACnD;AAGO,SAAS,sBAAA,CAAuB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AAC1F,EAAA,MAAM,MAAA,GAAS,yBAAyB,GAAG,CAAA;AAC3C,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,MAAM,CAAA,CAAE,QAAA;AAAA,EACzB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGO,SAAS,wBAAA,CAAyB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAyB;AACjG,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,oBAAA,EAAsB,IAAA,EAAK;AAChD,EAAA,IAAI,QAAA,EAAU,OAAO,QAAA,CAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,GAAA,CAAI,QAAA,EAAU,IAAA,EAAK;AACnC,EAAA,IAAI,OAAA,IAAW,CAAC,yBAAA,CAA0B,IAAA,CAAK,OAAO,GAAG,OAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACzF,EAAA,OAAO,MAAA;AACT;AAGO,SAAS,gBAAA,CAAiB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAc;AAC9E,EAAA,IAAI,IAAI,UAAA,KAAe,MAAA,IAAU,GAAA,CAAI,gBAAA,KAAqB,QAAQ,OAAO,IAAA;AACzE,EAAA,MAAM,IAAA,GAAO,uBAAuB,GAAG,CAAA;AACvC,EAAA,OAAO,OAAA,CAAQ,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAC,CAAA;AACtD;AAEA,IAAM,mBAAA,GAAsB,sBAAA;AAC5B,IAAM,kBAAA,GAAqB,gDAAA;AAGpB,SAAS,kBAAA,CAAmB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACtF,EAAA,MAAM,IAAA,GAAO,uBAAuB,GAAG,CAAA;AACvC,EAAA,MAAM,SAAS,IAAA,GAAO,kBAAA,CAAmB,KAAK,IAAI,CAAA,GAAI,CAAC,CAAA,GAAI,MAAA;AAC3D,EAAA,OAAO,QAAQ,MAAA,GAAS,IAAA,CAAK,MAAM,MAAA,CAAO,MAAM,KAAK,IAAA,GAAO,IAAA;AAC9D;AAGO,SAAS,kBAAA,CAAmB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACtF,EAAA,MAAM,IAAA,GAAO,uBAAuB,GAAG,CAAA;AACvC,EAAA,IAAI,IAAA,EAAM;AACR,IAAA,MAAM,QAAA,GAAW,kBAAA,CAAmB,IAAA,CAAK,IAAI,IAAI,CAAC,CAAA;AAClD,IAAA,IAAI,UAAU,OAAO,QAAA;AAAA,EACvB;AAEA,EAAA,MAAM,SAAS,GAAA,CAAI,UAAA;AACnB,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,MAAM,aAAa,mBAAA,CAAoB,IAAA,CAAK,qBAAqB,MAAM,CAAC,IAAI,CAAC,CAAA;AAC7E,IAAA,IAAI,YAAY,OAAO,UAAA;AAAA,EACzB;AAEA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,oBAAA,CAAqB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACxF,EAAA,IAAI,GAAA,CAAI,eAAA,EAAiB,OAAO,oBAAA,CAAqB,IAAI,eAAe,CAAA;AAExE,EAAA,MAAM,SAAS,GAAA,CAAI,UAAA;AACnB,EAAA,MAAM,IAAA,GAAO,mBAAmB,GAAG,CAAA;AACnC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,IAAA,GAAO,CAAA,QAAA,EAAW,IAAI,CAAA,CAAA,GAAK,IAAA;AAAA,EACpC;AAEA,EAAA,MAAM,QAAA,GAAW,qBAAqB,MAAM,CAAA;AAC5C,EAAA,IAAI,mBAAA,CAAoB,IAAA,CAAK,QAAQ,CAAA,EAAG;AACtC,IAAA,IAAI,IAAA,EAAM,OAAO,CAAA,QAAA,EAAW,IAAI,CAAA,CAAA;AAAA,EAClC;AAEA,EAAA,IAAA,CAAK,QAAA,KAAa,MAAA,IAAU,QAAA,KAAa,QAAA,KAAa,IAAA,EAAM;AAC1D,IAAA,OAAO,WAAW,IAAI,CAAA,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,QAAA;AACT;AAGA,SAAS,qBAAqB,MAAA,EAAwB;AACpD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AAChC,EAAA,OAAO,QAAQ,CAAA,GAAI,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,GAAI,MAAA;AAC9C;AAEO,SAAS,0BAA0B,MAAA,EAAwB;AAChE,EAAA,OAAO,oBAAA,CAAqB,MAAM,CAAA,CAAE,OAAA,CAAQ,OAAO,GAAG,CAAA;AACxD;AAGO,SAAS,2BAA2B,IAAA,EAAsB;AAC/D,EAAA,OAAO,yBAAA,CAA0B,IAAA,CAAK,IAAA,EAAM,CAAA;AAC9C;AAGO,IAAM,sBAAA,GAAyB;AAG/B,SAAS,yBAAA,CAA0B,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AAC7F,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,mBAAA,EAAqB,IAAA,EAAK;AAC3C,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,EAAA,IAAI,CAAC,sBAAA,CAAuB,IAAA,CAAK,IAAI,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,MAAM,sEAAiE,CAAA;AAAA,EACnF;AACA,EAAA,OAAO,IAAA;AACT;AAEO,SAAS,mBAAA,CAAoB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACvF,EAAA,IAAI,CAAC,gBAAA,CAAiB,GAAG,CAAA,EAAG,OAAO,IAAA;AACnC,EAAA,MAAM,QAAA,GAAW,0BAA0B,GAAG,CAAA;AAC9C,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,MAAA,GAAS,qBAAqB,GAAG,CAAA;AACvC,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,EAAA,OAAO,0BAA0B,MAAM,CAAA;AACzC;AAGO,IAAM,2BAAA,GACX;AAEK,SAAS,2BAA2B,KAAA,EAAoC;AAC7E,EAAA,OAAO,KAAA,IAAS,IAAA,IAAQ,2BAAA,CAA4B,IAAA,CAAK,KAAK,CAAA;AAChE;AAGO,SAAS,yBAAyB,KAAA,EAAoC;AAC3E,EAAA,IAAI,KAAA,IAAS,MAAM,OAAO,KAAA;AAC1B,EAAA,IAAI,0BAAA,CAA2B,KAAK,CAAA,EAAG,OAAO,IAAA;AAC9C,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,iBAAiB,CAAA,EAAG,OAAO,IAAA;AAC9C,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,6BAA6B,CAAA,EAAG,OAAO,IAAA;AAC1D,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,2BAA2B,CAAA,EAAG,OAAO,IAAA;AACxD,EAAA,OACE,KAAA,CAAM,QAAA,CAAS,oBAAoB,CAAA,IACnC,KAAA,CAAM,SAAS,yBAAyB,CAAA,IACxC,KAAA,CAAM,QAAA,CAAS,0BAA0B,CAAA;AAE7C","file":"previewDeployName.js","sourcesContent":["/** Canonical Kubernetes preview PR identity (matches columnus-pr-N namespaces). */\nexport const PREVIEW_PR_ID_RE = /^[1-9][0-9]{0,6}$/;\nexport const PREVIEW_TENANT_SLUG_PREFIX = \"preview-\";\nexport function isPreviewTenantSlug(slug: string): boolean {\n  return slug.startsWith(PREVIEW_TENANT_SLUG_PREFIX);\n}\n\n/** Explicit application origin used by CI and runtime preview routing. */\nexport function previewHostnameFromEnv(env: NodeJS.ProcessEnv = process.env): string | null {\n  const origin = resolveTrustedAuthOrigin(env);\n  if (!origin) return null;\n  try {\n    return new URL(origin).hostname;\n  } catch {\n    return null;\n  }\n}\n\n/** Browser origin for server-side auth probes; never use a Convex HTTP endpoint. */\nexport function resolveTrustedAuthOrigin(env: NodeJS.ProcessEnv = process.env): string | undefined {\n  const explicit = env.COLUMNUS_AUTH_ORIGIN?.trim();\n  if (explicit) return explicit.replace(/\\/$/, \"\");\n  const siteUrl = env.SITE_URL?.trim();\n  if (siteUrl && !/\\.convex\\.site(?:\\/|$)/i.test(siteUrl)) return siteUrl.replace(/\\/$/, \"\");\n  return undefined;\n}\n\n/** CI_PREVIEW is the local build mode; COLUMNUS_PREVIEW identifies deployed previews. */\nexport function isCiPreviewBuild(env: NodeJS.ProcessEnv = process.env): boolean {\n  if (env.CI_PREVIEW === \"true\" || env.COLUMNUS_PREVIEW === \"true\") return true;\n  const host = previewHostnameFromEnv(env);\n  return Boolean(host && PREVIEW_HOST_PR_RE.test(host));\n}\n\nconst PULL_HEAD_BRANCH_RE = /^pull\\/(\\d+)\\/head$/i;\nconst PREVIEW_HOST_PR_RE = /^(?:manage-|deploy-|renderer-)?preview-(\\d+)\\./;\n\n/** Domain suffix only from a recognized preview host, never from branch identity. */\nexport function previewZoneFromEnv(env: NodeJS.ProcessEnv = process.env): string | null {\n  const host = previewHostnameFromEnv(env);\n  const prefix = host ? PREVIEW_HOST_PR_RE.exec(host)?.[0] : undefined;\n  return host && prefix ? host.slice(prefix.length) || null : null;\n}\n\n/** PR id from `preview-<n>.<domain>` / `manage-preview-<n>` hostname or `pull/<n>/head` branch. */\nexport function resolvePreviewPrId(env: NodeJS.ProcessEnv = process.env): string | null {\n  const host = previewHostnameFromEnv(env);\n  if (host) {\n    const fromHost = PREVIEW_HOST_PR_RE.exec(host)?.[1];\n    if (fromHost) return fromHost;\n  }\n\n  const branch = env.GIT_BRANCH;\n  if (branch) {\n    const fromBranch = PULL_HEAD_BRANCH_RE.exec(stripQualifiedBranch(branch))?.[1];\n    if (fromBranch) return fromBranch;\n  }\n\n  return null;\n}\n\n/** Resolve the CI git branch used for Convex preview deployment naming. */\nexport function resolvePreviewBranch(env: NodeJS.ProcessEnv = process.env): string | null {\n  if (env.GITHUB_HEAD_REF) return stripQualifiedBranch(env.GITHUB_HEAD_REF);\n\n  const branch = env.GIT_BRANCH;\n  const prId = resolvePreviewPrId(env);\n  if (!branch) {\n    return prId ? `preview-${prId}` : null;\n  }\n\n  const stripped = stripQualifiedBranch(branch);\n  if (PULL_HEAD_BRANCH_RE.test(stripped)) {\n    if (prId) return `preview-${prId}`;\n  }\n  // An explicit preview origin takes priority over the base branch.\n  if ((stripped === \"main\" || stripped === \"master\") && prId) {\n    return `preview-${prId}`;\n  }\n  return stripped;\n}\n\n/** Strip qualified branch suffixes before deriving a deployment name. */\nfunction stripQualifiedBranch(branch: string): string {\n  const colon = branch.indexOf(\":\");\n  return colon > 0 ? branch.slice(0, colon) : branch;\n}\n\nexport function sanitizePreviewDeployName(branch: string): string {\n  return stripQualifiedBranch(branch).replace(/\\//g, \"-\");\n}\n\n/** Normalize a preview name from Convex env before `convex deploy --preview-name`. */\nexport function normalizePreviewDeployName(name: string): string {\n  return sanitizePreviewDeployName(name.trim());\n}\n\n/** Identifier rule shared by CI configuration and Management registration. */\nexport const PREVIEW_DEPLOY_NAME_RE = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;\n\n/** Explicit CI identity, including hostless Management builds. */\nexport function explicitPreviewDeployName(env: NodeJS.ProcessEnv = process.env): string | null {\n  const name = env.CONVEX_PREVIEW_NAME?.trim();\n  if (!name) return null;\n  if (!PREVIEW_DEPLOY_NAME_RE.test(name)) {\n    throw new Error(\"CONVEX_PREVIEW_NAME must be a 1–64 character preview identifier\");\n  }\n  return name;\n}\n\nexport function ciPreviewDeployName(env: NodeJS.ProcessEnv = process.env): string | null {\n  if (!isCiPreviewBuild(env)) return null;\n  const explicit = explicitPreviewDeployName(env);\n  if (explicit) return explicit;\n\n  const branch = resolvePreviewBranch(env);\n  if (!branch) return null;\n  return sanitizePreviewDeployName(branch);\n}\n\n/** Stale failures from broken preview deploy before the bridge was live. */\nexport const STALE_ENDPOINT_DEPLOY_ERROR =\n  /^deploy endpoint returned (?:200(?: OK)?|500(?: Internal Server Error)?)$/;\n\nexport function isStaleEndpointDeployError(error: string | undefined): boolean {\n  return error != null && STALE_ENDPOINT_DEPLOY_ERROR.test(error);\n}\n\n/** Infra failures from a prior broken deploy that a fresh save can retry. */\nexport function isRecoverableDeployError(error: string | undefined): boolean {\n  if (error == null) return false;\n  if (isStaleEndpointDeployError(error)) return true;\n  if (error.includes(\"502 Bad Gateway\")) return true;\n  if (error.includes(\"deploy endpoint unreachable\")) return true;\n  if (error.includes(\"deploy endpoint timed out\")) return true;\n  return (\n    error.includes(\"convex/bin/main.js\") ||\n    error.includes(\"convex CLI (bin/main.js\") ||\n    error.includes(\"convex CLI not available\")\n  );\n}\n"]}

package/dist/spaceBundle.js

@@ -20199,6 +20199,9 @@ var apiProfileSnapshotSchema = external_exports.object({
 });
 external_exports.array(apiProfileSnapshotSchema);
 
+// packages/@columnus/shared/src/previewDeployName.ts
+var PREVIEW_DEPLOY_NAME_RE = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
+
 // packages/@columnus/shared/src/bffProtocol.ts
 var COLUMNUS_BFF_PROTOCOL_VERSION = 1;
 var OPERATION_ID_RE = /^[A-Za-z0-9_-]{16,128}$/;
@@ -20414,6 +20417,7 @@ external_exports.discriminatedUnion("operation", [
   })
 ]);
 external_exports.object({
+  previewName: external_exports.string().regex(PREVIEW_DEPLOY_NAME_RE).optional(),
   hostname: external_exports.string().min(1),
   convexUrl: external_exports.string().url(),
   deployKey: external_exports.string().min(1),
@@ -20460,7 +20464,7 @@ external_exports.object({
 external_exports.object({
   ok: external_exports.boolean(),
   commit: external_exports.string().optional(),
-  /** ISO-8601 Coolify/image bake time (BRU-76 preview supersede). */
+  /** ISO-8601 deployment/image bake time (BRU-76 preview supersede). */
   deployedAt: external_exports.string().optional()
 });