@coraltravelcenter/b2c-landing-builder 2.7.1 → 2.9.0

package/README.md

@@ -24,7 +24,10 @@ b2c-landing-vite build
 b2c-landing-vite deploy
 b2c-landing-vite deploy --dry-run
 b2c-landing-vite deploy --update
+b2c-landing-vite deploy --relink
+b2c-landing-vite deploy --publish
 b2c-landing-vite deploy --assets-only
+b2c-landing-vite deploy --assets-only --prune-assets
 b2c-landing-vite block:add hero
 b2c-landing-vite block:rename hero main-hero
 b2c-landing-vite update
@@ -49,6 +52,26 @@ b2c-landing-vite update
   Страница, виджеты, ассеты и локальный deploy-state при этом не изменяются.
 - `deploy --assets-only --dry-run` показывает только план синхронизации ассетов.
 - `deploy --update` обновляет сохранённую версию страницы без создания новой.
+- `deploy --relink` восстанавливает или меняет привязку проекта к существующей
+  CMS-странице. Builder предлагает application, поиск страницы по названию или
+  URL, версию, HTML-зону и точную позицию. Обычный запуск создаёт checkout для
+  опубликованной версии; вместе с `--update` выбранная версия меняется на месте.
+- `deploy --relink --dry-run` проходит тот же интерактивный выбор и показывает
+  план, но не сохраняет новую привязку и не изменяет CMS.
+- `deploy --publish` после успешной синхронизации виджетов публикует выбранную
+  версию. Публикация блокируется, если в Backoffice не заполнены title, URL,
+  SEO title или SEO description; builder не придумывает метаданные сам.
+- `deploy --assets-only --prune-assets` удаляет из CMS только отсутствующие в
+  текущей сборке файлы, которые этот builder сам загрузил и записал как
+  управляемые в deploy-state проекта. Уже существовавшие в CMS файлы не
+  считаются управляемыми и не удаляются. Команда
+  намеренно отделена от обычного deploy и никогда не удаляет неизвестные файлы.
+  Сначала рекомендуется запустить её с `--dry-run`.
+- Перед любым deploy сохранённые pageContentId и layoutAreaId сверяются с CMS.
+  Устаревшая привязка останавливает операцию до загрузки файлов и предлагает
+  `deploy --relink`.
+- Одновременные deploy одного проекта на компьютере блокируются lock-файлом в
+  `.b2c/deploy/`; аварийно оставленный lock автоматически признаётся устаревшим.
 - `block:add` создаёт файлы в выбранных форматах разметки и стилей.
 - `block:rename` атомарно переименовывает все файлы блока и обновляет порядок.
 - `update` проверяет npm registry и показывает команду ручного обновления.

package/npm-shrinkwrap.json

@@ -1,14 +1,15 @@
 {
   "name": "@coraltravelcenter/b2c-landing-builder",
-  "version": "2.7.1",
+  "version": "2.9.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@coraltravelcenter/b2c-landing-builder",
-      "version": "2.7.1",
+      "version": "2.9.0",
       "license": "MIT",
       "dependencies": {
+        "@babel/parser": "7.28.6",
         "@clack/prompts": "1.7.0",
         "sharp": "0.35.3",
         "typograf": "7.7.0",
@@ -32,7 +33,6 @@
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
       "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=6.9.0"
@@ -42,20 +42,18 @@
       "version": "7.29.7",
       "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz",
       "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=6.9.0"
       }
     },
     "node_modules/@babel/parser": {
-      "version": "7.29.8",
-      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz",
-      "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==",
-      "dev": true,
+      "version": "7.28.6",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.28.6.tgz",
+      "integrity": "sha512-TeR9zWR18BvbfPmGbLampPMW+uW1NZnJlRuuHso8i87QZNq2JRF9i6RgxRqtEq+wQGsS19NNTWr2duhnE49mfQ==",
       "license": "MIT",
       "dependencies": {
-        "@babel/types": "^7.29.8"
+        "@babel/types": "^7.28.6"
       },
       "bin": {
         "parser": "bin/babel-parser.js"
@@ -68,7 +66,6 @@
       "version": "7.29.8",
       "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz",
       "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@babel/helper-string-parser": "^7.29.7",
@@ -1289,6 +1286,22 @@
         "source-map-js": "^1.2.1"
       }
     },
+    "node_modules/@vue/compiler-core/node_modules/@babel/parser": {
+      "version": "7.29.8",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz",
+      "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.29.8"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
     "node_modules/@vue/compiler-core/node_modules/entities": {
       "version": "7.0.1",
       "resolved": "https://registry.npmjs.org/entities/-/entities-7.0.1.tgz",
@@ -1331,6 +1344,22 @@
         "source-map-js": "^1.2.1"
       }
     },
+    "node_modules/@vue/compiler-sfc/node_modules/@babel/parser": {
+      "version": "7.29.8",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.8.tgz",
+      "integrity": "sha512-E8lTAYNB1KW+FH+VGJuZM1ioAx2E6oVlvQFRrf5P8ZZmsiJXYAD9vTFV7yyEURNzgh1dFqMZuO6tUwcARbqFCA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.29.8"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
     "node_modules/@vue/compiler-ssr": {
       "version": "3.5.41",
       "resolved": "https://registry.npmjs.org/@vue/compiler-ssr/-/compiler-ssr-3.5.41.tgz",
@@ -1396,9 +1425,9 @@
       "license": "MIT"
     },
     "node_modules/acorn": {
-      "version": "8.17.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.17.0.tgz",
-      "integrity": "sha512-xRQbDb9BnwDafYNn6Vwl839DYVjqXYb1XVGtWAZ1kcDc6iwAL4hg3B1dZlRiuENFeO2H53gFG3in621AdERVAg==",
+      "version": "8.15.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
+      "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==",
       "license": "MIT",
       "bin": {
         "acorn": "bin/acorn"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coraltravelcenter/b2c-landing-builder",
-  "version": "2.7.1",
+  "version": "2.9.0",
   "description": "CLI and build toolkit for B2C landing projects",
   "type": "module",
   "bin": {
@@ -30,6 +30,7 @@
     "pack:check": "npm pack --dry-run"
   },
   "dependencies": {
+    "@babel/parser": "7.28.6",
     "@clack/prompts": "1.7.0",
     "sharp": "0.35.3",
     "typograf": "7.7.0",

package/src/cli/index.mjs

@@ -10,6 +10,10 @@ Commands:
   deploy                    Build, sync assets, and deploy CMS widgets
   deploy --dry-run          Show the exact deploy plan without changing CMS
   deploy --update           Update the current CMS version in place
+  deploy --relink           Attach the project to an existing CMS page
+  deploy --publish          Publish after a successful deploy
+  deploy --assets-only --prune-assets
+                            Remove obsolete project assets recorded in deploy-state
   deploy --assets-only      Build and sync assets with the B2C CDN
   check                     Validate project configuration
   block:add <key>           Create a block
@@ -78,30 +82,52 @@ export async function runCli(args) {
     return;
   }
   if (command === "deploy") {
-    const allowed = new Set(["--assets-only", "--update", "--dry-run"]);
+    const allowed = new Set(["--assets-only", "--update", "--dry-run", "--relink", "--publish", "--prune-assets"]);
     const flags = new Set(rest);
     if (rest.some((argument) => !allowed.has(argument)) || flags.size !== rest.length ||
-      (flags.has("--assets-only") && flags.has("--update"))) {
-      throw new Error("Usage: b2c-landing-vite deploy [--assets-only | --update] [--dry-run]");
+      (flags.has("--assets-only") && (flags.has("--update") || flags.has("--relink") || flags.has("--publish"))) ||
+      (flags.has("--prune-assets") && !flags.has("--assets-only"))) {
+      throw new Error(
+        "Usage: b2c-landing-vite deploy [--assets-only | --update] [--relink] [--publish] [--prune-assets] [--dry-run]"
+      );
     }
     const config = await loadConfig();
-    validateProject(config);
+    const project = validateProject(config);
     const preset = resolvePreset(config.site.preset, {requireAssets: true});
-    await runCli(["build"]);
-    const {getBackofficeToken} = await import("../deploy/auth.mjs");
-    const token = await getBackofficeToken({brand: preset.id});
-    const {deployAssetsOnly, deployProject, planDeployment} = await import("../deploy/deploy.mjs");
-    if (flags.has("--dry-run")) {
-      return planDeployment({
+    const {withDeploymentLock} = await import("../deploy/lock.mjs");
+    return withDeploymentLock({site: preset.id, folder: project.folder}, async () => {
+      await runCli(["build"]);
+      const {getBackofficeToken} = await import("../deploy/auth.mjs");
+      const token = await getBackofficeToken({brand: preset.id});
+      const {deployAssetsOnly, deployProject, planDeployment} = await import("../deploy/deploy.mjs");
+      if (flags.has("--dry-run")) {
+        return planDeployment({
+          config,
+          preset,
+          token,
+          update: flags.has("--update"),
+          assetsOnly: flags.has("--assets-only"),
+          relink: flags.has("--relink"),
+          publish: flags.has("--publish"),
+          pruneAssets: flags.has("--prune-assets"),
+        });
+      }
+      if (flags.has("--assets-only")) return deployAssetsOnly({
+        config,
+        preset,
+        token,
+        pruneAssets: flags.has("--prune-assets"),
+      });
+      return deployProject({
         config,
         preset,
         token,
         update: flags.has("--update"),
-        assetsOnly: flags.has("--assets-only"),
+        relink: flags.has("--relink"),
+        publish: flags.has("--publish"),
+        pruneAssets: flags.has("--prune-assets"),
       });
-    }
-    if (rest.includes("--assets-only")) return deployAssetsOnly({config, preset, token});
-    return deployProject({config, preset, token, update: rest.includes("--update")});
+    });
   }
   if (command === "block:add" || command === "block:rename") {
     const config = await loadConfig();

package/src/config/validate-project.mjs

@@ -3,10 +3,10 @@ import {createRequire} from "node:module";
 import path from "node:path";
 
 import {resolveScriptStack} from "./script-stack.mjs";
+import {hasDefaultInitializer} from "./validate-script-contract.mjs";
 
 const BLOCK_KEY_RE = /^[a-z0-9][a-z0-9-_]*$/i;
 const DEPLOY_FOLDER_RE = /^[a-z0-9][a-z0-9-]*$/;
-const DEFAULT_EXPORT_RE = /\bexport\s+default\s+(?:async\s+)?(?:function\b|\([^)]*\)\s*=>|[A-Za-z_$][\w$]*\s*=>|[A-Za-z_$][\w$]*\s*;?)/;
 const STACK_DEPENDENCIES = {
   markup: {pug: ["pug"]},
   styles: {less: ["less"], scss: ["sass"]},
@@ -78,7 +78,7 @@ export function validateProject(config, root = process.cwd()) {
     const scriptPath = path.resolve(root, "src/scripts", `${key}.${scriptStack.extension}`);
     if (!fs.existsSync(scriptPath)) continue;
     const source = fs.readFileSync(scriptPath, "utf8");
-    if (!DEFAULT_EXPORT_RE.test(source)) {
+    if (!hasDefaultInitializer({source, filePath: scriptPath, extension: scriptStack.extension, root})) {
       throw new Error(
         `src/scripts/${key}.${scriptStack.extension} must export its initializer as default function`
       );

package/src/config/validate-script-contract.mjs

@@ -0,0 +1,31 @@
+import {parse} from "@babel/parser";
+
+function callableDefaultExport(program) {
+  const bindings = new Map();
+  for (const node of program.body) {
+    if (node.type === "FunctionDeclaration" && node.id) bindings.set(node.id.name, node);
+    if (node.type === "VariableDeclaration") {
+      for (const declaration of node.declarations) {
+        if (declaration.id.type === "Identifier") bindings.set(declaration.id.name, declaration.init);
+      }
+    }
+  }
+  const exported = program.body.find((node) => node.type === "ExportDefaultDeclaration")?.declaration;
+  const target = exported?.type === "Identifier" ? bindings.get(exported.name) : exported;
+  return target?.type === "FunctionDeclaration" || target?.type === "FunctionExpression" ||
+    target?.type === "ArrowFunctionExpression";
+}
+
+export function hasDefaultInitializer({source, filePath, extension}) {
+  let program;
+  try {
+    program = parse(source, {
+      sourceType: "module",
+      plugins: extension === "ts" ? ["typescript"] : [],
+    }).program;
+  } catch (error) {
+    const language = extension === "ts" ? "TypeScript" : "JavaScript";
+    throw new Error(`${filePath} contains invalid ${language}: ${error.message}`, {cause: error});
+  }
+  return callableDefaultExport(program);
+}

package/src/deploy/assets.mjs

@@ -4,15 +4,28 @@ export function changedAssets(manifest, state) {
   return manifest.assets.filter((asset) => state.assets?.[asset.path]?.sha256 !== asset.sha256);
 }
 
+export function obsoleteAssets(manifest, state) {
+  const current = new Set(manifest.assets.map((asset) => asset.path));
+  return Object.entries(state.assets || {})
+    .filter(([assetPath, asset]) => asset?.managed === true && !current.has(assetPath))
+    .map(([assetPath]) => assetPath)
+    .sort();
+}
+
 function filesFromListing(listing) {
   const files = Array.isArray(listing) ? listing : listing?.files || [];
   return new Set(files.map((file) => typeof file === "string" ? path.posix.basename(file) : file.name));
 }
 
-export async function planAssetChanges({manifest, state, listFiles, remoteRoot = "/content"}) {
+export async function planAssetChanges({manifest, state, listFiles, remoteRoot = "/content", prune = false}) {
   const pending = changedAssets(manifest, state);
   if (!listFiles) {
-    return {upload: pending, skip: [], unchanged: manifest.assets.length - pending.length};
+    return {
+      upload: pending,
+      skip: [],
+      unchanged: manifest.assets.length - pending.length,
+      remove: prune ? obsoleteAssets(manifest, state) : [],
+    };
   }
   const directories = new Map();
   const namesInDirectory = (directory) => {
@@ -33,6 +46,7 @@ export async function planAssetChanges({manifest, state, listFiles, remoteRoot =
     upload: upload.sort(byPath),
     skip: skip.sort(byPath),
     unchanged: manifest.assets.length - pending.length,
+    remove: prune ? obsoleteAssets(manifest, state) : [],
   };
 }
 
@@ -44,12 +58,14 @@ export async function uploadChangedAssets({
   listFiles,
   remoteRoot = "/content",
   concurrency = 5,
+  prune = false,
+  deleteFile,
 }) {
-  const plan = await planAssetChanges({manifest, state, listFiles, remoteRoot});
+  const plan = await planAssetChanges({manifest, state, listFiles, remoteRoot, prune});
   const assets = {...state.assets};
   const uploaded = [];
   const skipped = plan.skip.map((asset) => asset.path);
-  for (const asset of plan.skip) assets[asset.path] = {...asset, immutable: true};
+  for (const asset of plan.skip) assets[asset.path] = {...asset, immutable: true, managed: false};
   let cursor = 0;
 
   async function worker() {
@@ -58,17 +74,28 @@ export async function uploadChangedAssets({
       const localPath = path.join(root, ...(manifest.assetsDirectory || "public").split("/"), ...asset.path.split("/"));
       const remotePath = path.posix.join("/", remoteRoot, manifest.assetsPrefix, asset.path);
       const result = await uploadFile(remotePath, localPath);
-      assets[asset.path] = {...asset, url: result?.files?.[0]?.url};
+      assets[asset.path] = {...asset, url: result?.files?.[0]?.url, managed: true};
       uploaded.push(asset.path);
     }
   }
 
   const workerCount = Math.min(Math.max(1, concurrency), plan.upload.length || 1);
   await Promise.all(Array.from({length: workerCount}, () => worker()));
+  const removed = [];
+  if (prune && plan.remove.length) {
+    if (!deleteFile) throw new Error("CMS asset deletion is unavailable");
+    for (const assetPath of plan.remove) {
+      const remotePath = path.posix.join("/", remoteRoot, manifest.assetsPrefix, assetPath);
+      await deleteFile(remotePath);
+      delete assets[assetPath];
+      removed.push(assetPath);
+    }
+  }
   return {
     state: {...state, assets},
     uploaded: uploaded.sort(),
     skipped: skipped.sort(),
     unchanged: plan.unchanged,
+    removed,
   };
 }

package/src/deploy/backoffice-client.mjs

@@ -140,6 +140,17 @@ export class BackofficeClient {
     return result?.versions || [];
   }
 
+  async getPages(applicationId, {keyword = "", url = ""} = {}) {
+    const result = await this.request("GET", "/Page/GetAll", {query: {
+      pageIndex: 1,
+      pageSize: 100,
+      ApplicationId: applicationId,
+      Keyword: keyword,
+      Url: url,
+    }});
+    return result?.result || result || [];
+  }
+
   createPage(body) {
     return this.request("POST", "/Page/Create", {body});
   }
@@ -199,4 +210,10 @@ export class BackofficeClient {
     const result = await this.request("POST", "/FileManagement/UploadFile", {form});
     return result?.result;
   }
+
+  deleteFile(remotePath) {
+    return this.request("POST", "/FileManagement/DeleteFile", {
+      body: {path: remotePath.replace(/^\/+/, "")},
+    });
+  }
 }

package/src/deploy/deploy.mjs

@@ -2,7 +2,16 @@ import {planAssetChanges, uploadChangedAssets} from "./assets.mjs";
 import {BackofficeClient} from "./backoffice-client.mjs";
 import {readBuildManifest} from "./manifest.mjs";
 import {readDeploymentState, writeDeploymentState} from "./state.mjs";
-import {createPagePlacement, prepareExistingPage, selectNewPagePlacement} from "./page.mjs";
+import {
+  createPagePlacement,
+  prepareExistingPage,
+  pageRevision,
+  publicationIssues,
+  publishPage,
+  selectExistingPagePlacement,
+  selectNewPagePlacement,
+  validateSavedPlacement,
+} from "./page.mjs";
 import {planWidgetChanges, syncWidgets} from "./widgets.mjs";
 
 function paths(items) {
@@ -21,31 +30,43 @@ export async function planDeployment({
   client,
   update = false,
   assetsOnly = false,
+  relink = false,
+  pruneAssets = false,
+  publish = false,
   prompts,
   log = console.log,
 }) {
   const manifest = readBuildManifest(root);
   const api = client || new BackofficeClient({brand: preset.id, token});
   const previous = readDeploymentState(preset.id, manifest.folder, root);
+  log("[dry-run] checking CDN and CMS state...");
   const assets = await planAssetChanges({
     manifest,
     state: previous,
     remoteRoot: new URL(preset.assetsBase).pathname,
     listFiles: api.listFiles?.bind(api),
+    prune: pruneAssets,
   });
   log(`[dry-run] no CMS data will be changed`);
   log(`[dry-run] target: ${preset.assetsBase}/${manifest.assetsPrefix}/`);
   logList(log, "assets to upload", paths(assets.upload));
   logList(log, "existing assets to skip", paths(assets.skip));
+  logList(log, "managed assets to remove", assets.remove);
   log(`[dry-run] unchanged assets: ${assets.unchanged}`);
   if (assetsOnly) return {assets};
 
   let placement;
   let pageContent;
   let page;
-  if (previous.placement) {
+  if (relink) {
+    const selected = await selectExistingPagePlacement({client: api, domain: preset.domain, prompts});
+    placement = selected.placement;
+    pageContent = selected.pageContent;
+    const checkout = !update && [1, 4].includes(pageContent.status);
+    page = {action: checkout ? "relink and create checkout version" : "relink and update selected version", pageContentId: placement.pageContentId};
+  } else if (previous.placement) {
     placement = previous.placement;
-    pageContent = await api.getContent(placement.pageContentId);
+    pageContent = await validateSavedPlacement({client: api, placement});
     const checkout = !update && [1, 4].includes(pageContent.status);
     page = {action: checkout ? "create checkout version" : "update current version", pageContentId: placement.pageContentId};
   } else {
@@ -61,7 +82,11 @@ export async function planDeployment({
   logList(log, "widgets to update", widgets.update);
   logList(log, "widgets to remove", widgets.remove);
   logList(log, "widgets to reorder", widgets.reorder.map((item) => `${item.title} (${item.from} → ${item.to})`));
-  return {assets, page, placement, widgets};
+  if (publish) {
+    const issues = publicationIssues(pageContent);
+    log(`[dry-run] publish: ${issues.length ? `blocked (${issues.join(", ")})` : "page after widget sync"}`);
+  }
+  return {assets, page, placement, widgets, publish};
 }
 
 export async function deployAssetsOnly({
@@ -71,6 +96,7 @@ export async function deployAssetsOnly({
   token = process.env.B2C_BACKOFFICE_TOKEN,
   client,
   log = console.log,
+  pruneAssets = false,
 }) {
   if (!token && !client) {
     throw new Error("Backoffice token is required. Set B2C_BACKOFFICE_TOKEN before deploy.");
@@ -83,6 +109,7 @@ export async function deployAssetsOnly({
   const state = readDeploymentState(preset.id, manifest.folder, root);
   const api = client || new BackofficeClient({brand: preset.id, token});
   log(`[deploy] target: ${cdnUrl}`);
+  log("[deploy] checking CDN state...");
   const result = await uploadChangedAssets({
     manifest,
     state,
@@ -90,9 +117,11 @@ export async function deployAssetsOnly({
     remoteRoot: new URL(preset.assetsBase).pathname,
     uploadFile: api.uploadFile.bind(api),
     listFiles: api.listFiles?.bind(api),
+    prune: pruneAssets,
+    deleteFile: api.deleteFile?.bind(api),
   });
   writeDeploymentState(preset.id, manifest.folder, result.state, root);
-  log(`[deploy] assets: uploaded=${result.uploaded.length}, skipped=${result.skipped.length}, unchanged=${result.unchanged}`);
+  log(`[deploy] assets: uploaded=${result.uploaded.length}, skipped=${result.skipped.length}, removed=${result.removed.length}, unchanged=${result.unchanged}`);
   if (result.skipped.length) {
     log(`[deploy] existing assets were not overwritten: ${result.skipped.join(", ")}. Rename changed files to publish new URLs.`);
   }
@@ -106,6 +135,9 @@ export async function deployProject({
   token,
   client,
   update = false,
+  relink = false,
+  pruneAssets = false,
+  publish = false,
   prompts,
   log = console.log,
 }) {
@@ -113,6 +145,18 @@ export async function deployProject({
   const api = client || new BackofficeClient({brand: preset.id, token});
   const previous = readDeploymentState(preset.id, manifest.folder, root);
   log(`[deploy] target: ${preset.assetsBase}/${manifest.assetsPrefix}/`);
+  log(previous.placement && !relink
+    ? "[deploy] validating saved CMS placement..."
+    : relink ? "[deploy] selecting an existing CMS page..." : "[deploy] a new CMS page will be created");
+  let selectedPage = null;
+  if (relink) selectedPage = await selectExistingPagePlacement({client: api, domain: preset.domain, prompts});
+  else if (previous.placement) {
+    selectedPage = {
+      placement: previous.placement,
+      pageContent: await validateSavedPlacement({client: api, placement: previous.placement}),
+    };
+  }
+  log("[deploy] synchronizing CDN assets...");
   const assets = await uploadChangedAssets({
     manifest,
     state: previous,
@@ -120,10 +164,16 @@ export async function deployProject({
     remoteRoot: new URL(preset.assetsBase).pathname,
     uploadFile: api.uploadFile.bind(api),
     listFiles: api.listFiles?.bind(api),
+    prune: pruneAssets,
+    deleteFile: api.deleteFile?.bind(api),
   });
-  const page = previous.placement
-    ? await prepareExistingPage({client: api, placement: previous.placement, update})
+  const page = selectedPage
+    ? await prepareExistingPage({client: api, placement: selectedPage.placement, update})
     : await createPagePlacement({client: api, manifest, prompts});
+  if (selectedPage && page.placement.pageContentId === selectedPage.placement.pageContentId &&
+    pageRevision(page.pageContent) !== pageRevision(selectedPage.pageContent)) {
+    throw new Error("CMS page changed during deploy. No widgets were modified; run deploy again.");
+  }
   const widgets = await syncWidgets({
     client: api,
     manifest,
@@ -131,16 +181,31 @@ export async function deployProject({
     pageContent: page.pageContent,
     root,
   });
-  const state = {...assets.state, placement: page.placement};
+  const state = {
+    ...assets.state,
+    placement: page.placement,
+    cms: {verifiedAt: new Date().toISOString()},
+  };
+  let published = false;
+  let finalPageContent = await api.getContent(page.placement.pageContentId);
+  if (publish) {
+    log("[deploy] validating CMS metadata and publishing...");
+    await publishPage({client: api, pageContent: finalPageContent});
+    published = true;
+    finalPageContent = await api.getContent(page.placement.pageContentId);
+  }
   writeDeploymentState(preset.id, manifest.folder, state, root);
-  const preview = page.pageContent.uniqueId
-    ? `https://${preset.domain}/preview/${page.pageContent.uniqueId}/`
+  const preview = finalPageContent.uniqueId
+    ? `https://${preset.domain}/preview/${finalPageContent.uniqueId}/`
     : null;
-  log(`[deploy] assets: uploaded=${assets.uploaded.length}, skipped=${assets.skipped.length}, unchanged=${assets.unchanged}`);
+  const ru = finalPageContent.pageContents?.find((content) => String(content.languageId) === "1049");
+  const live = published && ru?.perma ? `https://${preset.domain}/${ru.perma.replace(/^\/+/, "")}` : null;
+  log(`[deploy] assets: uploaded=${assets.uploaded.length}, skipped=${assets.skipped.length}, removed=${assets.removed.length}, unchanged=${assets.unchanged}`);
   if (assets.skipped.length) {
     log(`[deploy] existing assets were not overwritten: ${assets.skipped.join(", ")}. Rename changed files to publish new URLs.`);
   }
   log(`[deploy] widgets: added=${widgets.added}, updated=${widgets.updated}, removed=${widgets.removed}`);
   if (preview) log(`[deploy] preview: ${preview}`);
-  return {assets, widgets, placement: page.placement, preview};
+  if (live) log(`[deploy] live: ${live}`);
+  return {assets, widgets, placement: page.placement, preview, live, published};
 }

package/src/deploy/lock.mjs

@@ -0,0 +1,63 @@
+import fs from "node:fs";
+import path from "node:path";
+
+const STALE_AFTER_MS = 2 * 60 * 60 * 1000;
+
+export function deploymentLockPath(site, folder, root = process.cwd()) {
+  return path.join(root, ".b2c", "deploy", `${site}--${folder}.lock`);
+}
+
+function processIsRunning(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false;
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
+  }
+}
+
+export function acquireDeploymentLock(site, folder, root = process.cwd(), now = Date.now()) {
+  const filePath = deploymentLockPath(site, folder, root);
+  fs.mkdirSync(path.dirname(filePath), {recursive: true});
+  try {
+    const existing = JSON.parse(fs.readFileSync(filePath, "utf8"));
+    const age = now - Date.parse(existing.startedAt);
+    if (processIsRunning(existing.pid) && age < STALE_AFTER_MS) {
+      throw new Error(
+        `Another deploy is already running for ${site}/${folder} (PID ${existing.pid}, since ${existing.startedAt})`
+      );
+    }
+    fs.rmSync(filePath, {force: true});
+  } catch (error) {
+    if (error.code !== "ENOENT" && !/Another deploy/.test(error.message)) {
+      fs.rmSync(filePath, {force: true});
+    } else if (/Another deploy/.test(error.message)) {
+      throw error;
+    }
+  }
+  const descriptor = {pid: process.pid, startedAt: new Date(now).toISOString()};
+  const handle = fs.openSync(filePath, "wx", 0o600);
+  fs.writeFileSync(handle, `${JSON.stringify(descriptor)}\n`);
+  fs.closeSync(handle);
+  let released = false;
+  return () => {
+    if (released) return;
+    released = true;
+    try {
+      const current = JSON.parse(fs.readFileSync(filePath, "utf8"));
+      if (current.pid === descriptor.pid && current.startedAt === descriptor.startedAt) fs.rmSync(filePath, {force: true});
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+  };
+}
+
+export async function withDeploymentLock(options, callback) {
+  const release = acquireDeploymentLock(options.site, options.folder, options.root);
+  try {
+    return await callback();
+  } finally {
+    release();
+  }
+}

package/src/deploy/page.mjs

@@ -1,4 +1,4 @@
-import {HTML_WIDGET_ID, STATUS} from "./backoffice-client.mjs";
+import {HTML_WIDGET_ID, RU_LANGUAGE_ID, STATUS} from "./backoffice-client.mjs";
 
 function suitableAreas(scheme) {
   return scheme.flatMap((row, rowIndex) => (row.children || []).map((column, columnIndex) => ({
@@ -10,6 +10,10 @@ function suitableAreas(scheme) {
   );
 }
 
+function pageWidgets(pageContent) {
+  return pageContent.pageContents?.find((content) => String(content.languageId) === RU_LANGUAGE_ID)?.widgets || [];
+}
+
 function widgetNames(area) {
   return (area.usedWidgets || []).map((widget, index) =>
     widget.widgetName || widget.cmsTitle || widget.name || `widget ${index + 1}`
@@ -24,6 +28,31 @@ function areaLabel({area, rowIndex, columnIndex}) {
   return `Row ${rowIndex + 1}, column ${columnIndex + 1}${width}: ${name} — ${summary}`;
 }
 
+
+function existingAreaLabel(descriptor, widgets) {
+  const areaId = descriptor.area.layoutAreaId || descriptor.area.id;
+  const actual = widgets.filter((widget) => widget.layoutAreaId === areaId);
+  return areaLabel({
+    ...descriptor,
+    area: {...descriptor.area, usedWidgets: actual.map((widget) => ({widgetName: widget.cmsTitle || widget.widgetName}))},
+  });
+}
+
+function pageLabel(page, domain) {
+  const preview = page.contents?.[0]?.uniqueId;
+  const published = page.publishedUrls?.[RU_LANGUAGE_ID];
+  const link = published
+    ? `https://${domain}/${String(published).replace(/^\/+/, "")}`
+    : preview ? `https://${domain}/preview/${preview}/` : "no link";
+  return `${page.pageTitle || page.name || page.pageId} — ${link}`;
+}
+
+function versionLabel(content) {
+  const details = [content.statusName, content.version != null ? `v${content.version}` : null, content.author]
+    .filter(Boolean).join(", ");
+  return `${details || content.pageContentId}${content.modifiedTime ? ` — ${content.modifiedTime}` : ""}`;
+}
+
 async function defaultPrompts() {
   const {isCancel, select, text} = await import("@clack/prompts");
   const answer = async (promise) => {
@@ -94,6 +123,62 @@ export async function selectNewPagePlacement({client, manifest, prompts}) {
   };
 }
 
+export async function selectExistingPagePlacement({client, domain, prompts}) {
+  prompts ||= await defaultPrompts();
+  const applications = (await client.getApplications()).filter((app) => !/backoffice/i.test(app.name));
+  if (!applications.length) throw new Error("No backoffice applications are available");
+  const applicationId = await prompts.select({
+    message: "Application",
+    options: applications.map((app) => ({label: app.name, value: app.id})),
+  });
+  const searchBy = await prompts.select({
+    message: "Find an existing page by",
+    options: [{label: "Title", value: "title"}, {label: "URL", value: "url"}],
+  });
+  const query = await prompts.text({
+    message: searchBy === "title" ? "Page title (at least 3 characters)" : "Page URL (at least 3 characters)",
+    validate: (value) => value?.trim().length >= 3 ? undefined : "Enter at least 3 characters",
+  });
+  const pages = await client.getPages(applicationId, searchBy === "title"
+    ? {keyword: query.trim()}
+    : {url: query.trim()});
+  if (!pages.length) throw new Error(`No CMS pages found for ${JSON.stringify(query.trim())}`);
+  const pageId = await prompts.select({
+    message: "Existing CMS page",
+    options: pages.map((page) => ({label: pageLabel(page, domain), value: page.pageId || page.id, page})),
+  });
+  const page = pages.find((candidate) => (candidate.pageId || candidate.id) === pageId);
+  const versions = page.contents?.length ? page.contents : await client.getContentVersions(pageId);
+  if (!versions?.length) throw new Error("The selected CMS page has no versions");
+  const pageContentId = await prompts.select({
+    message: "Page version",
+    options: versions.map((content) => ({label: versionLabel(content), value: content.pageContentId || content.contentId})),
+  });
+  const pageContent = await client.getContent(pageContentId);
+  const areas = suitableAreas(pageContent.layout?.schema || []);
+  if (!areas.length) throw new Error("The selected page layout has no HTML widget area");
+  const widgets = pageWidgets(pageContent);
+  const layoutAreaId = await prompts.select({
+    message: "Where on the existing page should the landing blocks go?",
+    options: areas.map((descriptor) => ({
+      label: existingAreaLabel(descriptor, widgets),
+      value: descriptor.area.layoutAreaId || descriptor.area.id,
+    })),
+  });
+  const names = widgets.filter((widget) => widget.layoutAreaId === layoutAreaId)
+    .map((widget, index) => widget.cmsTitle || widget.widgetName || `widget ${index + 1}`);
+  const orderIndex = await prompts.select({
+    message: "Exact insertion point",
+    options: Array.from({length: names.length + 1}, (_, index) => ({
+      label: index === 0
+        ? names.length ? `At the beginning, before “${names[0]}”` : "Into the empty area"
+        : `After “${names[index - 1]}”`,
+      value: index,
+    })),
+  });
+  return {pageContent, placement: {pageContentId, layoutAreaId, orderIndex}};
+}
+
 export async function createPagePlacement(options) {
   const selected = await selectNewPagePlacement(options);
   const {client} = options;
@@ -119,3 +204,57 @@ export async function prepareExistingPage({client, placement, update = false}) {
   }
   return {pageContent, placement};
 }
+
+export function publicationIssues(pageContent) {
+  const issues = [];
+  for (const content of pageContent.pageContents || []) {
+    const language = content.languageId || "unknown";
+    if (!content.title?.trim()) issues.push(`language ${language}: title`);
+    if (!content.perma?.trim()) issues.push(`language ${language}: URL`);
+    if (!content.seo?.metaTitle?.trim()) issues.push(`language ${language}: SEO title`);
+    if (!content.seo?.description?.trim()) issues.push(`language ${language}: SEO description`);
+  }
+  if (!pageContent.pageContents?.length) issues.push("page language content");
+  return issues;
+}
+
+export async function publishPage({client, pageContent}) {
+  if (pageContent.status === STATUS.published || pageContent.isPublished) return pageContent;
+  const issues = publicationIssues(pageContent);
+  if (issues.length) {
+    throw new Error(`CMS page cannot be published; fill in ${issues.join(", ")} in Backoffice`);
+  }
+  const result = await client.updateStatus(pageContent._id || pageContent.pageContentId, STATUS.published);
+  return result;
+}
+
+export async function validateSavedPlacement({client, placement}) {
+  let pageContent;
+  try {
+    pageContent = await client.getContent(placement.pageContentId);
+  } catch (error) {
+    if (error.code === "NOT_FOUND" || error.status === 404) {
+      throw new Error("Saved deploy-state points to a missing CMS page version. Run deploy --relink.", {cause: error});
+    }
+    throw error;
+  }
+  const schema = pageContent.layout?.schema;
+  if (Array.isArray(schema) && !schema.flatMap((row) => row.children || [])
+    .some((area) => (area.layoutAreaId || area.id) === placement.layoutAreaId)) {
+    throw new Error("Saved deploy-state points to an HTML area that no longer exists. Run deploy --relink.");
+  }
+  return pageContent;
+}
+
+export function pageRevision(pageContent) {
+  return JSON.stringify({
+    id: pageContent._id || pageContent.pageContentId,
+    modifiedTime: pageContent.modifiedTime || pageContent.lastOperationDateTime || null,
+    widgets: pageWidgets(pageContent).map((widget) => ({
+      id: widget.contentWidgetId,
+      area: widget.layoutAreaId,
+      order: widget.order,
+      title: widget.cmsTitle,
+    })),
+  });
+}

package/src/lib/processMarkup.mjs

@@ -4,6 +4,16 @@ const typograf = new Typograf({
   locale: ["ru", "en-US"],
 });
 
+const PROTECTED_TAGS = /<(script|style|pre|code|textarea)\b[^>]*>[\s\S]*?<\/\1>/gi;
+
 export function processMarkup(html) {
-  return typograf.execute(String(html || ""));
+  const protectedContents = [];
+  const source = String(html || "").replace(PROTECTED_TAGS, (fragment) => {
+    const index = protectedContents.push(fragment) - 1;
+    return `<b2c-typograf-protected data-index="${index}"></b2c-typograf-protected>`;
+  });
+  return typograf.execute(source).replace(
+    /<b2c-typograf-protected data-index="(\d+)"><\/b2c-typograf-protected>/g,
+    (_, index) => protectedContents[Number(index)]
+  );
 }