@ebay-dt/bonfire-node 0.2.0-alpha.10 → 0.2.0-alpha.11

package/dist/lifecycle/deployment-worktree.js

@@ -1,19 +1,21 @@
 import { lstat, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join, relative, sep } from "node:path";
+import { isAbsolute, join, relative, sep } from "node:path";
 import { createGitRepository, GitRepositoryError, } from "../git-repository.js";
+import { isProtectedPrototypePath, isRegularPrototypeMode, } from "./prototype-path-policy.js";
 const OWNERSHIP_MARKER = "bonfire deployment workspace\n";
 const SOURCE_SHA_PATTERN = /^[0-9a-f]{40,64}$/u;
 /** Log only finite classifications; Git/OS messages may contain paths or credentials. */
 export function reportDeploymentIssue(phase, step, error) {
-    const kind = error instanceof GitRepositoryError
-        ? error.kind
-        : error instanceof DeploymentWorktreeError
+    const kind = step.startsWith("metadata-") ||
+        step.startsWith("namespace-") ||
+        step === "directory" ||
+        step === "marker"
+        ? "filesystem-failure"
+        : error instanceof GitRepositoryError
             ? error.kind
-            : step.startsWith("metadata-") ||
-                step === "directory" ||
-                step === "marker"
-                ? "filesystem-failure"
+            : error instanceof DeploymentWorktreeError
+                ? error.kind
                 : "unexpected";
     console.warn("[bonfire] Deployment workspace attention", {
         phase,
@@ -62,33 +64,205 @@ function assertSourceSha(sourceSha) {
         throw new DeploymentWorktreeError("invalid-source");
     }
 }
+function assertNamespacePath(namespacePath) {
+    if (namespacePath.length === 0 ||
+        namespacePath === "." ||
+        isAbsolute(namespacePath) ||
+        namespacePath.startsWith("-") ||
+        namespacePath.includes("\0") ||
+        namespacePath.includes("\\") ||
+        namespacePath.includes(":") ||
+        /[*?\[\]]/u.test(namespacePath) ||
+        namespacePath
+            .split("/")
+            .some((segment) => segment.length === 0 || segment === "..")) {
+        throw new DeploymentWorktreeError("protected-path");
+    }
+}
 function remotePrimaryRef(options) {
     return `refs/remotes/${options.remote}/${options.primaryBranch}`;
 }
-function mapMergeError(error, phase) {
-    if (!(error instanceof GitRepositoryError))
-        return error;
-    if (error.kind === "conflict") {
-        return new DeploymentWorktreeError(`${phase}-conflict`);
+function parseTreeEntries(output) {
+    return output
+        .split("\0")
+        .filter(Boolean)
+        .flatMap((entry) => {
+        const tab = entry.indexOf("\t");
+        if (tab < 0)
+            return [];
+        const header = entry.slice(0, tab).split(/\s+/u);
+        const mode = header[0];
+        const path = entry.slice(tab + 1).replaceAll("\\", "/");
+        if (mode === undefined || path.length === 0)
+            return [];
+        return [{ mode, path }];
+    });
+}
+async function readTreeEntries(repository, ref, namespacePath) {
+    const output = await repository.raw([
+        "ls-tree",
+        "-r",
+        "-z",
+        "--full-tree",
+        ref,
+        "--",
+        namespacePath,
+    ]);
+    return parseTreeEntries(output);
+}
+function pathIsWithin(path, parent) {
+    return path === parent || path.startsWith(`${parent}/`);
+}
+function isPrototypeRootMetadataPath(path, namespacePath) {
+    if (!path.endsWith("/metadata.json") || !pathIsWithin(path, namespacePath)) {
+        return false;
+    }
+    const relativePath = path.slice(namespacePath.length + 1);
+    return relativePath.split("/").length === 2;
+}
+function assertSafeTree(entries, namespacePath) {
+    for (const entry of entries) {
+        if (!pathIsWithin(entry.path, namespacePath) ||
+            isProtectedPrototypePath(entry.path) ||
+            !isRegularPrototypeMode(entry.mode) ||
+            entry.mode.startsWith("120000")) {
+            throw new DeploymentWorktreeError("protected-path");
+        }
+    }
+}
+function parseObject(source) {
+    try {
+        const value = JSON.parse(source);
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            return null;
+        }
+        return { ...value };
+    }
+    catch {
+        return null;
+    }
+}
+function safePreviewValue(document) {
+    if (!Object.hasOwn(document, "previewUrl"))
+        return null;
+    const value = document.previewUrl;
+    return value === null || typeof value === "string" ? value : undefined;
+}
+async function capturePreviewOverlays(repository, sourceSha, namespacePath, sourceEntries, primaryEntries) {
+    const primaryPaths = new Set(primaryEntries.map((entry) => entry.path));
+    const overlays = [];
+    for (const entry of sourceEntries) {
+        if (!isPrototypeRootMetadataPath(entry.path, namespacePath) ||
+            !primaryPaths.has(entry.path)) {
+            continue;
+        }
+        const primarySource = await repository.raw(["show", `HEAD:${entry.path}`]);
+        const primaryDocument = parseObject(primarySource);
+        if (primaryDocument === null) {
+            throw new DeploymentWorktreeError("publication-failure");
+        }
+        const preview = safePreviewValue(primaryDocument);
+        if (preview === undefined) {
+            throw new DeploymentWorktreeError("publication-failure");
+        }
+        const source = parseObject(await repository.raw(["show", `${sourceSha}:${entry.path}`]));
+        if (source === null) {
+            throw new DeploymentWorktreeError("publication-failure");
+        }
+        if (!pathIsWithin(entry.path, namespacePath)) {
+            throw new DeploymentWorktreeError("protected-path");
+        }
+        overlays.push({ path: entry.path, source, preview });
+    }
+    return overlays;
+}
+async function composeOwnedNamespace(workspace, options) {
+    const step = "namespace-read";
+    let sourceEntries;
+    let primaryEntries;
+    try {
+        sourceEntries = await readTreeEntries(workspace.repository, options.sourceSha, options.namespacePath);
+        primaryEntries = await readTreeEntries(workspace.repository, "HEAD", options.namespacePath);
+        assertSafeTree(sourceEntries, options.namespacePath);
+        assertSafeTree(primaryEntries, options.namespacePath);
+    }
+    catch (error) {
+        reportDeploymentIssue("publication", step, error);
+        if (error instanceof DeploymentWorktreeError)
+            throw error;
+        throw new DeploymentWorktreeError("publication-failure", {
+            operationError: error,
+        });
+    }
+    let overlays;
+    try {
+        overlays = await capturePreviewOverlays(workspace.repository, options.sourceSha, options.namespacePath, sourceEntries, primaryEntries);
+    }
+    catch (error) {
+        reportDeploymentIssue("publication", "metadata-read", error);
+        if (error instanceof DeploymentWorktreeError) {
+            if (error.kind === "publication-failure") {
+                throw new DeploymentWorktreeError("metadata-failure", {
+                    operationError: error,
+                });
+            }
+            throw error;
+        }
+        throw new DeploymentWorktreeError("metadata-failure", {
+            operationError: error,
+        });
     }
-    if (phase === "publication") {
-        if (error.kind === "non-fast-forward") {
-            return new DeploymentWorktreeError("publication-rejected");
+    try {
+        await workspace.repository.raw([
+            "rm",
+            "-r",
+            "--ignore-unmatch",
+            "--",
+            options.namespacePath,
+        ]);
+        if (sourceEntries.length > 0) {
+            await workspace.repository.raw([
+                "checkout",
+                options.sourceSha,
+                "--",
+                options.namespacePath,
+            ]);
+        }
+        const overlayPaths = [];
+        for (const overlay of overlays) {
+            const absolutePath = join(workspace.path, overlay.path);
+            const currentSource = await readFile(absolutePath, "utf8");
+            const currentDocument = parseObject(currentSource);
+            if (currentDocument === null) {
+                throw new DeploymentWorktreeError("publication-failure");
+            }
+            await writeFile(absolutePath, `${JSON.stringify({ ...currentDocument, previewUrl: overlay.preview }, null, 2)}\n`);
+            overlayPaths.push(overlay.path);
+        }
+        if (overlayPaths.length > 0) {
+            await workspace.repository.add(overlayPaths);
         }
-        return new DeploymentWorktreeError("publication-failure");
     }
-    return error;
+    catch (error) {
+        reportDeploymentIssue("publication", "namespace-write", error);
+        if (error instanceof DeploymentWorktreeError)
+            throw error;
+        throw new DeploymentWorktreeError("publication-failure", {
+            operationError: error,
+        });
+    }
 }
-async function createDeploymentWorktree(repository, options, phase) {
+async function createDeploymentWorktree(repository, options) {
     assertBranchName(options.remote, "remote");
     assertBranchName(options.primaryBranch, "primary branch");
     assertSourceSha(options.sourceSha);
+    assertNamespacePath(options.namespacePath);
     try {
         await repository.fetch(options.remote, options.primaryBranch);
     }
     catch (error) {
-        reportDeploymentIssue(phase, "fetch", error);
-        throw new DeploymentWorktreeError(`${phase}-failure`, {
+        reportDeploymentIssue("publication", "fetch", error);
+        throw new DeploymentWorktreeError("publication-failure", {
             operationError: error,
         });
     }
@@ -97,8 +271,8 @@ async function createDeploymentWorktree(repository, options, phase) {
         operationDirectory = await mkdtemp(join(tmpdir(), "bonfire-deployment-"));
     }
     catch (error) {
-        reportDeploymentIssue(phase, "directory", error);
-        throw new DeploymentWorktreeError(`${phase}-failure`, {
+        reportDeploymentIssue("publication", "directory", error);
+        throw new DeploymentWorktreeError("publication-failure", {
             operationError: error,
         });
     }
@@ -147,7 +321,7 @@ async function createDeploymentWorktree(repository, options, phase) {
                     await rm(operationDirectory, { recursive: true, force: false });
                 }
                 catch (error) {
-                    reportDeploymentIssue(phase, "cleanup", error);
+                    reportDeploymentIssue("publication", "cleanup", error);
                     if (error instanceof DeploymentWorktreeError)
                         throw error;
                     throw new DeploymentWorktreeError("cleanup-failure", {
@@ -158,7 +332,7 @@ async function createDeploymentWorktree(repository, options, phase) {
         };
     }
     catch (error) {
-        reportDeploymentIssue(phase, step, error);
+        reportDeploymentIssue("publication", step, error);
         let cleanupFailed = false;
         if (worktreeAdded) {
             try {
@@ -166,7 +340,7 @@ async function createDeploymentWorktree(repository, options, phase) {
             }
             catch (cleanupError) {
                 cleanupFailed = true;
-                reportDeploymentIssue(phase, "cleanup", cleanupError);
+                reportDeploymentIssue("publication", "cleanup", cleanupError);
             }
         }
         try {
@@ -174,42 +348,21 @@ async function createDeploymentWorktree(repository, options, phase) {
         }
         catch (cleanupError) {
             cleanupFailed = true;
-            reportDeploymentIssue(phase, "cleanup", cleanupError);
+            reportDeploymentIssue("publication", "cleanup", cleanupError);
         }
-        throw new DeploymentWorktreeError(`${phase}-failure`, {
+        throw new DeploymentWorktreeError("publication-failure", {
             cleanupFailed,
             operationError: error,
         });
     }
 }
-async function mergeSource(workspace, sourceSha, phase) {
-    try {
-        await workspace.repository.merge([
-            sourceSha,
-            "--no-ff",
-            "-m",
-            `merge: deploy ${sourceSha.slice(0, 12)}`,
-        ]);
-    }
-    catch (error) {
-        reportDeploymentIssue(phase, "merge", error);
-        const mapped = mapMergeError(error, phase);
-        throw mapped instanceof DeploymentWorktreeError
-            ? mapped
-            : new DeploymentWorktreeError(`${phase}-failure`, {
-                operationError: error,
-            });
-    }
-}
-async function withDeploymentWorktree(repository, options, operation, phase) {
-    const workspace = await createDeploymentWorktree(repository, options, phase);
+async function withDeploymentWorktree(repository, options, operation) {
+    const workspace = await createDeploymentWorktree(repository, options);
     let value;
     try {
         value = await operation(workspace);
     }
     catch (error) {
-        // Preserve the operation's failure while making cleanup attention
-        // observable to callers.
         try {
             await workspace.cleanup();
         }
@@ -226,14 +379,44 @@ async function withDeploymentWorktree(repository, options, operation, phase) {
         return { value, cleanupFailed: true };
     }
 }
-export async function preflightDeploymentSource(repository, options) {
-    const result = await withDeploymentWorktree(repository, options, async (workspace) => {
-        await mergeSource(workspace, options.sourceSha, "preflight");
-    }, "preflight");
-    if (result.cleanupFailed) {
-        throw new DeploymentWorktreeError("cleanup-failure", {
-            cleanupFailed: true,
-        });
+function mapPushError(error) {
+    if (error instanceof DeploymentWorktreeError)
+        return error;
+    if (error instanceof GitRepositoryError &&
+        error.kind === "non-fast-forward") {
+        return new DeploymentWorktreeError("publication-rejected");
+    }
+    return new DeploymentWorktreeError("publication-failure", {
+        operationError: error,
+    });
+}
+async function remoteCommit(repository, options) {
+    const output = await repository.raw([
+        "ls-remote",
+        options.remote,
+        `refs/heads/${options.primaryBranch}`,
+    ]);
+    const commit = output.trim().split(/\s+/u)[0];
+    return commit !== undefined && SOURCE_SHA_PATTERN.test(commit)
+        ? commit.toLowerCase()
+        : null;
+}
+async function remoteContainsPublication(repository, options, publicationSha) {
+    const remoteSha = await remoteCommit(repository, options);
+    if (remoteSha === publicationSha)
+        return true;
+    if (remoteSha === null)
+        return false;
+    try {
+        // Fetch only updates the repository's remote-tracking ref; it does not
+        // modify the active checkout. This recognizes an accepted push followed
+        // by a primary descendant without repeating publication work.
+        await repository.fetch(options.remote, options.primaryBranch);
+        const mergeBase = (await repository.raw(["merge-base", publicationSha, remoteSha])).trim();
+        return mergeBase === publicationSha;
+    }
+    catch {
+        return false;
     }
 }
 export async function publishDeploymentSource(repository, options, prepare) {
@@ -241,11 +424,21 @@ export async function publishDeploymentSource(repository, options, prepare) {
     for (const attempt of [1, 2]) {
         try {
             const result = await withDeploymentWorktree(repository, options, async (workspace) => {
-                await mergeSource(workspace, options.sourceSha, "publication");
+                await composeOwnedNamespace(workspace, options);
                 await prepare({
                     path: workspace.path,
                     repository: workspace.repository,
                 });
+                try {
+                    await workspace.repository.commit(`deploy: publish ${options.sourceSha.slice(0, 12)}`);
+                }
+                catch (error) {
+                    reportDeploymentIssue("publication", "namespace-commit", error);
+                    throw new DeploymentWorktreeError("publication-failure", {
+                        operationError: error,
+                    });
+                }
+                const publicationSha = (await workspace.repository.raw(["rev-parse", "HEAD"])).trim();
                 try {
                     await workspace.repository.raw([
                         "push",
@@ -255,16 +448,24 @@ export async function publishDeploymentSource(repository, options, prepare) {
                 }
                 catch (error) {
                     reportDeploymentIssue("publication", "push", error);
-                    const mapped = mapMergeError(error, "publication");
-                    throw mapped instanceof DeploymentWorktreeError
-                        ? mapped
-                        : new DeploymentWorktreeError("publication-failure", {
-                            operationError: error,
-                        });
+                    try {
+                        if (await remoteContainsPublication(repository, options, publicationSha)) {
+                            return { publicationSha };
+                        }
+                    }
+                    catch (confirmationError) {
+                        reportDeploymentIssue("publication", "remote-confirm", confirmationError);
+                    }
+                    throw mapPushError(error);
                 }
-            }, "publication");
+                return { publicationSha };
+            });
             cleanupFailed ||= result.cleanupFailed;
-            return { attempts: attempt, cleanupFailed };
+            return {
+                attempts: attempt,
+                cleanupFailed,
+                publicationSha: result.value.publicationSha,
+            };
         }
         catch (error) {
             cleanupFailed ||=

package/dist/lifecycle/deployment-worktree.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-worktree.js","sourceRoot":"","sources":["../../src/lifecycle/deployment-worktree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAC1D,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAiChD,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CACnC,KAAsB,EACtB,IAAoB,EACpB,KAAc;IAEd,MAAM,IAAI,GACR,KAAK,YAAY,kBAAkB;QACjC,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,KAAK,YAAY,uBAAuB;YACxC,CAAC,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAC1B,IAAI,KAAK,WAAW;gBACpB,IAAI,KAAK,QAAQ;gBACnB,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,YAAY,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE;QACvD,KAAK;QACL,IAAI;QACJ,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAA8B;IAClC,aAAa,CAAU;IACvB,cAAc,CAAU;IACxB,KAAK,CAAU;IAExB,YACE,IAAiC,EACjC,OAAO,GAA0D,EAAE;QAEnE,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC;IACtC,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;QAC7C,OAAO,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7C,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,uBAAuB,CAAC,iBAAiB,EAAE;QACpD,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAYD,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAc;IACrD,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACjB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EACzD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAkC;IAC1D,OAAO,gBAAgB,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,KAAkC;IAElC,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,IAAI,uBAAuB,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,OAAO,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,UAAyB,EACzB,OAAkC,EAClC,KAAsB;IAEtB,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC1D,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,uBAAuB,CAAC,GAAG,KAAK,UAAU,EAAE;YACpD,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,kBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,IAAI,uBAAuB,CAAC,GAAG,KAAK,UAAU,EAAE;YACpD,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,IAAI,GAAmB,QAAQ,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,GAAG,cAAc,CAAC;QACtB,MAAM,UAAU,CAAC,GAAG,CAAC;YACnB,UAAU;YACV,KAAK;YACL,UAAU;YACV,aAAa;YACb,gBAAgB,CAAC,OAAO,CAAC;SAC1B,CAAC,CAAC;QACH,aAAa,GAAG,IAAI,CAAC;QAErB,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;YAC9C,cAAc,EAAE,aAAa;YAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;QAEH,IAAI,GAAG,eAAe,CAAC;QACvB,MAAM,mBAAmB,CAAC,GAAG,CAAC;YAC5B,UAAU;YACV,IAAI;YACJ,GAAG,OAAO,CAAC,SAAS,WAAW;SAChC,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,mBAAmB;YAC/B,KAAK,CAAC,OAAO;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;oBAClD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;oBACzC,IAAI,MAAM,KAAK,gBAAgB,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;wBAC1D,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;oBACvD,CAAC;oBACD,MAAM,UAAU,CAAC,GAAG,CAAC;wBACnB,UAAU;wBACV,QAAQ;wBACR,SAAS;wBACT,aAAa;qBACd,CAAC,CAAC;oBACH,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;oBAC/C,IAAI,KAAK,YAAY,uBAAuB;wBAAE,MAAM,KAAK,CAAC;oBAC1D,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,EAAE;wBACnD,cAAc,EAAE,KAAK;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,aAAa,GAAG,IAAI,CAAC;gBACrB,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,aAAa,GAAG,IAAI,CAAC;YACrB,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,GAAG,KAAK,UAAU,EAAE;YACpD,aAAa;YACb,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,SAA6B,EAC7B,SAAiB,EACjB,KAAkC;IAElC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;YAC/B,SAAS;YACT,SAAS;YACT,IAAI;YACJ,iBAAiB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,MAAM,YAAY,uBAAuB;YAC7C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,uBAAuB,CAAC,GAAG,KAAK,UAAU,EAAE;gBAC9C,cAAc,EAAE,KAAK;aACtB,CAAC,CAAC;IACT,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,UAAyB,EACzB,OAAkC,EAClC,SAA8C,EAC9C,KAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7E,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kEAAkE;QAClE,yBAAyB;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAAyB,EACzB,OAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,UAAU,EACV,OAAO,EACP,KAAK,EAAE,SAAS,EAAE,EAAE;QAClB,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC,EACD,WAAW,CACZ,CAAC;IACF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,EAAE;YACnD,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAyB,EACzB,OAAkC,EAClC,OAGmB;IAEnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,CAAU,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,UAAU,EACV,OAAO,EACP,KAAK,EAAE,SAAS,EAAE,EAAE;gBAClB,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBAC/D,MAAM,OAAO,CAAC;oBACZ,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,UAAU,EAAE,SAAS,CAAC,UAAU;iBACjC,CAAC,CAAC;gBACH,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;wBAC7B,MAAM;wBACN,OAAO,CAAC,MAAM;wBACd,mBAAmB,OAAO,CAAC,aAAa,EAAE;qBAC3C,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBACpD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;oBACnD,MAAM,MAAM,YAAY,uBAAuB;wBAC7C,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;4BACjD,cAAc,EAAE,KAAK;yBACtB,CAAC,CAAC;gBACT,CAAC;YACH,CAAC,EACD,aAAa,CACd,CAAC;YACF,aAAa,KAAK,MAAM,CAAC,aAAa,CAAC;YACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa;gBACX,KAAK,YAAY,uBAAuB,IAAI,KAAK,CAAC,aAAa,CAAC;YAClE,IACE,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;gBAC3C,KAAK,CAAC,IAAI,KAAK,sBAAsB;gBACrC,OAAO,KAAK,CAAC,EACb,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;wBAC7C,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;4BACzB,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE;gCAC5C,aAAa,EAAE,IAAI;gCACnB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK;6BAC9C,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;4BACvD,aAAa,EAAE,IAAI;4BACnB,cAAc,EAAE,KAAK;yBACtB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,EAAE;QACxD,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,cAAsB,EACtB,aAAqB;IAErB,OAAO,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtE,CAAC","sourcesContent":["import { lstat, mkdtemp, readFile, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join, relative, sep } from \"node:path\";\nimport {\n  createGitRepository,\n  GitRepositoryError,\n  type GitCommitIdentity,\n  type GitRepository,\n} from \"../git-repository.js\";\n\nconst OWNERSHIP_MARKER = \"bonfire deployment workspace\\n\";\nconst SOURCE_SHA_PATTERN = /^[0-9a-f]{40,64}$/u;\n\nexport type DeploymentWorktreeOptions = {\n  remote: string;\n  primaryBranch: string;\n  sourceSha: string;\n  timeoutMs?: number;\n  commitIdentity?: GitCommitIdentity;\n};\n\nexport type DeploymentWorktreeErrorKind =\n  | \"invalid-source\"\n  | \"preflight-conflict\"\n  | \"preflight-failure\"\n  | \"publication-conflict\"\n  | \"publication-rejected\"\n  | \"publication-failure\"\n  | \"cleanup-failure\";\n\ntype DeploymentPhase = \"preflight\" | \"publication\";\ntype DeploymentStep =\n  | \"fetch\"\n  | \"directory\"\n  | \"marker\"\n  | \"worktree-add\"\n  | \"source-verify\"\n  | \"merge\"\n  | \"metadata-read\"\n  | \"metadata-write\"\n  | \"metadata-commit\"\n  | \"push\"\n  | \"cleanup\";\n\n/** Log only finite classifications; Git/OS messages may contain paths or credentials. */\nexport function reportDeploymentIssue(\n  phase: DeploymentPhase,\n  step: DeploymentStep,\n  error: unknown,\n) {\n  const kind =\n    error instanceof GitRepositoryError\n      ? error.kind\n      : error instanceof DeploymentWorktreeError\n        ? error.kind\n        : step.startsWith(\"metadata-\") ||\n            step === \"directory\" ||\n            step === \"marker\"\n          ? \"filesystem-failure\"\n          : \"unexpected\";\n  console.warn(\"[bonfire] Deployment workspace attention\", {\n    phase,\n    step,\n    kind,\n  });\n}\n\nexport class DeploymentWorktreeError extends Error {\n  readonly kind: DeploymentWorktreeErrorKind;\n  readonly cleanupFailed: boolean;\n  readonly operationError: unknown;\n  readonly cause: unknown;\n\n  constructor(\n    kind: DeploymentWorktreeErrorKind,\n    options: { cleanupFailed?: boolean; operationError?: unknown } = {},\n  ) {\n    super(`Deployment workspace operation failed: ${kind}`);\n    this.name = \"DeploymentWorktreeError\";\n    this.kind = kind;\n    this.cleanupFailed = options.cleanupFailed ?? false;\n    this.operationError = options.operationError;\n    this.cause = options.operationError;\n  }\n}\n\nfunction withCleanupFailure(error: unknown): DeploymentWorktreeError {\n  if (error instanceof DeploymentWorktreeError) {\n    return new DeploymentWorktreeError(error.kind, {\n      cleanupFailed: true,\n      operationError: error.operationError ?? error,\n    });\n  }\n  return new DeploymentWorktreeError(\"cleanup-failure\", {\n    cleanupFailed: true,\n    operationError: error,\n  });\n}\n\ntype DeploymentWorktree = {\n  path: string;\n  repository: GitRepository;\n  cleanup(): Promise<void>;\n};\n\ntype DeploymentWorkspaceOperation<Value> = (\n  workspace: DeploymentWorktree,\n) => Promise<Value>;\n\nfunction assertBranchName(value: string, option: string) {\n  if (\n    value.length === 0 ||\n    value.startsWith(\"-\") ||\n    value.includes(\"\\0\") ||\n    /\\s/u.test(value) ||\n    value.includes(\"@{\") ||\n    value.split(/[\\\\/]/u).some((segment) => segment === \"..\")\n  ) {\n    throw new TypeError(`Invalid ${option}`);\n  }\n}\n\nfunction assertSourceSha(sourceSha: string) {\n  if (!SOURCE_SHA_PATTERN.test(sourceSha)) {\n    throw new DeploymentWorktreeError(\"invalid-source\");\n  }\n}\n\nfunction remotePrimaryRef(options: DeploymentWorktreeOptions) {\n  return `refs/remotes/${options.remote}/${options.primaryBranch}`;\n}\n\nfunction mapMergeError(\n  error: unknown,\n  phase: \"preflight\" | \"publication\",\n): unknown {\n  if (!(error instanceof GitRepositoryError)) return error;\n  if (error.kind === \"conflict\") {\n    return new DeploymentWorktreeError(`${phase}-conflict`);\n  }\n  if (phase === \"publication\") {\n    if (error.kind === \"non-fast-forward\") {\n      return new DeploymentWorktreeError(\"publication-rejected\");\n    }\n    return new DeploymentWorktreeError(\"publication-failure\");\n  }\n  return error;\n}\n\nasync function createDeploymentWorktree(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n  phase: DeploymentPhase,\n): Promise<DeploymentWorktree> {\n  assertBranchName(options.remote, \"remote\");\n  assertBranchName(options.primaryBranch, \"primary branch\");\n  assertSourceSha(options.sourceSha);\n\n  try {\n    await repository.fetch(options.remote, options.primaryBranch);\n  } catch (error) {\n    reportDeploymentIssue(phase, \"fetch\", error);\n    throw new DeploymentWorktreeError(`${phase}-failure`, {\n      operationError: error,\n    });\n  }\n  let operationDirectory: string;\n  try {\n    operationDirectory = await mkdtemp(join(tmpdir(), \"bonfire-deployment-\"));\n  } catch (error) {\n    reportDeploymentIssue(phase, \"directory\", error);\n    throw new DeploymentWorktreeError(`${phase}-failure`, {\n      operationError: error,\n    });\n  }\n  const workspacePath = join(operationDirectory, \"workspace\");\n  const markerPath = join(operationDirectory, \"OWNER\");\n\n  let worktreeAdded = false;\n  let step: DeploymentStep = \"marker\";\n  try {\n    await writeFile(markerPath, OWNERSHIP_MARKER, { flag: \"wx\" });\n    step = \"worktree-add\";\n    await repository.raw([\n      \"worktree\",\n      \"add\",\n      \"--detach\",\n      workspacePath,\n      remotePrimaryRef(options),\n    ]);\n    worktreeAdded = true;\n\n    const workspaceRepository = createGitRepository({\n      repositoryRoot: workspacePath,\n      timeoutMs: options.timeoutMs,\n      commitIdentity: options.commitIdentity,\n    });\n\n    step = \"source-verify\";\n    await workspaceRepository.raw([\n      \"cat-file\",\n      \"-e\",\n      `${options.sourceSha}^{commit}`,\n    ]);\n\n    return {\n      path: workspacePath,\n      repository: workspaceRepository,\n      async cleanup() {\n        try {\n          const marker = await readFile(markerPath, \"utf8\");\n          const stats = await lstat(workspacePath);\n          if (marker !== OWNERSHIP_MARKER || stats.isSymbolicLink()) {\n            throw new DeploymentWorktreeError(\"cleanup-failure\");\n          }\n          await repository.raw([\n            \"worktree\",\n            \"remove\",\n            \"--force\",\n            workspacePath,\n          ]);\n          await rm(operationDirectory, { recursive: true, force: false });\n        } catch (error) {\n          reportDeploymentIssue(phase, \"cleanup\", error);\n          if (error instanceof DeploymentWorktreeError) throw error;\n          throw new DeploymentWorktreeError(\"cleanup-failure\", {\n            operationError: error,\n          });\n        }\n      },\n    };\n  } catch (error) {\n    reportDeploymentIssue(phase, step, error);\n    let cleanupFailed = false;\n    if (worktreeAdded) {\n      try {\n        await repository.raw([\"worktree\", \"remove\", \"--force\", workspacePath]);\n      } catch (cleanupError) {\n        cleanupFailed = true;\n        reportDeploymentIssue(phase, \"cleanup\", cleanupError);\n      }\n    }\n    try {\n      await rm(operationDirectory, { recursive: true, force: true });\n    } catch (cleanupError) {\n      cleanupFailed = true;\n      reportDeploymentIssue(phase, \"cleanup\", cleanupError);\n    }\n    throw new DeploymentWorktreeError(`${phase}-failure`, {\n      cleanupFailed,\n      operationError: error,\n    });\n  }\n}\n\nasync function mergeSource(\n  workspace: DeploymentWorktree,\n  sourceSha: string,\n  phase: \"preflight\" | \"publication\",\n) {\n  try {\n    await workspace.repository.merge([\n      sourceSha,\n      \"--no-ff\",\n      \"-m\",\n      `merge: deploy ${sourceSha.slice(0, 12)}`,\n    ]);\n  } catch (error) {\n    reportDeploymentIssue(phase, \"merge\", error);\n    const mapped = mapMergeError(error, phase);\n    throw mapped instanceof DeploymentWorktreeError\n      ? mapped\n      : new DeploymentWorktreeError(`${phase}-failure`, {\n          operationError: error,\n        });\n  }\n}\n\nasync function withDeploymentWorktree<Value>(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n  operation: DeploymentWorkspaceOperation<Value>,\n  phase: DeploymentPhase,\n): Promise<{ value: Value; cleanupFailed: boolean }> {\n  const workspace = await createDeploymentWorktree(repository, options, phase);\n  let value: Value;\n  try {\n    value = await operation(workspace);\n  } catch (error) {\n    // Preserve the operation's failure while making cleanup attention\n    // observable to callers.\n    try {\n      await workspace.cleanup();\n    } catch {\n      throw withCleanupFailure(error);\n    }\n    throw error;\n  }\n\n  try {\n    await workspace.cleanup();\n    return { value, cleanupFailed: false };\n  } catch {\n    return { value, cleanupFailed: true };\n  }\n}\n\nexport async function preflightDeploymentSource(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n): Promise<void> {\n  const result = await withDeploymentWorktree(\n    repository,\n    options,\n    async (workspace) => {\n      await mergeSource(workspace, options.sourceSha, \"preflight\");\n    },\n    \"preflight\",\n  );\n  if (result.cleanupFailed) {\n    throw new DeploymentWorktreeError(\"cleanup-failure\", {\n      cleanupFailed: true,\n    });\n  }\n}\n\nexport type DeploymentPublicationResult = {\n  attempts: 1 | 2;\n  cleanupFailed: boolean;\n};\n\nexport async function publishDeploymentSource(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n  prepare: (workspace: {\n    path: string;\n    repository: GitRepository;\n  }) => Promise<void>,\n): Promise<DeploymentPublicationResult> {\n  let cleanupFailed = false;\n  for (const attempt of [1, 2] as const) {\n    try {\n      const result = await withDeploymentWorktree(\n        repository,\n        options,\n        async (workspace) => {\n          await mergeSource(workspace, options.sourceSha, \"publication\");\n          await prepare({\n            path: workspace.path,\n            repository: workspace.repository,\n          });\n          try {\n            await workspace.repository.raw([\n              \"push\",\n              options.remote,\n              `HEAD:refs/heads/${options.primaryBranch}`,\n            ]);\n          } catch (error) {\n            reportDeploymentIssue(\"publication\", \"push\", error);\n            const mapped = mapMergeError(error, \"publication\");\n            throw mapped instanceof DeploymentWorktreeError\n              ? mapped\n              : new DeploymentWorktreeError(\"publication-failure\", {\n                  operationError: error,\n                });\n          }\n        },\n        \"publication\",\n      );\n      cleanupFailed ||= result.cleanupFailed;\n      return { attempts: attempt, cleanupFailed };\n    } catch (error) {\n      cleanupFailed ||=\n        error instanceof DeploymentWorktreeError && error.cleanupFailed;\n      if (\n        !(error instanceof DeploymentWorktreeError) ||\n        error.kind !== \"publication-rejected\" ||\n        attempt === 2\n      ) {\n        if (cleanupFailed) {\n          if (error instanceof DeploymentWorktreeError) {\n            if (!error.cleanupFailed) {\n              throw new DeploymentWorktreeError(error.kind, {\n                cleanupFailed: true,\n                operationError: error.operationError ?? error,\n              });\n            }\n          } else {\n            throw new DeploymentWorktreeError(\"publication-failure\", {\n              cleanupFailed: true,\n              operationError: error,\n            });\n          }\n        }\n        throw error;\n      }\n    }\n  }\n\n  throw new DeploymentWorktreeError(\"publication-rejected\", {\n    cleanupFailed,\n  });\n}\n\nexport function deploymentWorktreeRelativePath(\n  repositoryRoot: string,\n  workspacePath: string,\n) {\n  return relative(repositoryRoot, workspacePath).split(sep).join(\"/\");\n}\n"]}
+{"version":3,"file":"deployment-worktree.js","sourceRoot":"","sources":["../../src/lifecycle/deployment-worktree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,gBAAgB,GAAG,gCAAgC,CAAC;AAC1D,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAoChD,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CACnC,KAAsB,EACtB,IAAoB,EACpB,KAAc;IAEd,MAAM,IAAI,GACR,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAC7B,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,KAAK,YAAY,kBAAkB;YACnC,CAAC,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC,KAAK,YAAY,uBAAuB;gBACxC,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,YAAY,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE;QACvD,KAAK;QACL,IAAI;QACJ,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAA8B;IAClC,aAAa,CAAU;IACvB,cAAc,CAAU;IACxB,KAAK,CAAU;IAExB,YACE,IAAiC,EACjC,OAAO,GAA0D,EAAE;QAEnE,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC;IACtC,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;QAC7C,OAAO,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE;YAC7C,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,uBAAuB,CAAC,iBAAiB,EAAE;QACpD,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAiBD,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAc;IACrD,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACjB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,EACzD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,aAAqB;IAChD,IACE,aAAa,CAAC,MAAM,KAAK,CAAC;QAC1B,aAAa,KAAK,GAAG;QACrB,UAAU,CAAC,aAAa,CAAC;QACzB,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;QAC7B,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC5B,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC5B,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC;QAC/B,aAAa;aACV,KAAK,CAAC,GAAG,CAAC;aACV,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,IAAI,CAAC,EAC9D,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAkC;IAC1D,OAAO,gBAAgB,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACvD,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAyB,EACzB,GAAW,EACX,aAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC;QAClC,SAAS;QACT,IAAI;QACJ,IAAI;QACJ,aAAa;QACb,GAAG;QACH,IAAI;QACJ,aAAa;KACd,CAAC,CAAC;IACH,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY,EAAE,aAAqB;IACtE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,cAAc,CAAC,OAA6B,EAAE,aAAqB;IAC1E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IACE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC;YACxC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC;YACpC,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,GAAI,KAAiC,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAiC;IACzD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,UAAyB,EACzB,SAAiB,EACjB,aAAqB,EACrB,aAAmC,EACnC,cAAoC;IAEpC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAIT,EAAE,CAAC;IACR,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IACE,CAAC,2BAA2B,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC;YACvD,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAC7B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CACxB,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAC7D,CAAC;QACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QACtD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,SAA6B,EAC7B,OAAkC;IAElC,MAAM,IAAI,GAAG,gBAAyB,CAAC;IACvC,IAAI,aAA0B,CAAC;IAC/B,IAAI,cAA2B,CAAC;IAChC,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,eAAe,CACnC,SAAS,CAAC,UAAU,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,CACtB,CAAC;QACF,cAAc,GAAG,MAAM,eAAe,CACpC,SAAS,CAAC,UAAU,EACpB,MAAM,EACN,OAAO,CAAC,aAAa,CACtB,CAAC;QACF,cAAc,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACrD,cAAc,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,YAAY,uBAAuB;YAAE,MAAM,KAAK,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;YACvD,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAA4D,CAAC;IACjE,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,sBAAsB,CACrC,SAAS,CAAC,UAAU,EACpB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,aAAa,EACrB,aAAa,EACb,cAAc,CACf,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACzC,MAAM,IAAI,uBAAuB,CAAC,kBAAkB,EAAE;oBACpD,cAAc,EAAE,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,kBAAkB,EAAE;YACpD,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAC7B,IAAI;YACJ,IAAI;YACJ,kBAAkB;YAClB,IAAI;YACJ,OAAO,CAAC,aAAa;SACtB,CAAC,CAAC;QACH,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC7B,UAAU;gBACV,OAAO,CAAC,SAAS;gBACjB,IAAI;gBACJ,OAAO,CAAC,aAAa;aACtB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,eAAe,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;YACnD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,SAAS,CACb,YAAY,EACZ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACpF,CAAC;YACF,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,aAAa,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC/D,IAAI,KAAK,YAAY,uBAAuB;YAAE,MAAM,KAAK,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;YACvD,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,UAAyB,EACzB,OAAkC;IAElC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC1D,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;YACvD,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,kBAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;YACvD,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,IAAI,GAAmB,QAAQ,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,GAAG,cAAc,CAAC;QACtB,MAAM,UAAU,CAAC,GAAG,CAAC;YACnB,UAAU;YACV,KAAK;YACL,UAAU;YACV,aAAa;YACb,gBAAgB,CAAC,OAAO,CAAC;SAC1B,CAAC,CAAC;QACH,aAAa,GAAG,IAAI,CAAC;QAErB,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;YAC9C,cAAc,EAAE,aAAa;YAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAC,CAAC;QAEH,IAAI,GAAG,eAAe,CAAC;QACvB,MAAM,mBAAmB,CAAC,GAAG,CAAC;YAC5B,UAAU;YACV,IAAI;YACJ,GAAG,OAAO,CAAC,SAAS,WAAW;SAChC,CAAC,CAAC;QAEH,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,mBAAmB;YAC/B,KAAK,CAAC,OAAO;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;oBAClD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;oBACzC,IAAI,MAAM,KAAK,gBAAgB,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;wBAC1D,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;oBACvD,CAAC;oBACD,MAAM,UAAU,CAAC,GAAG,CAAC;wBACnB,UAAU;wBACV,QAAQ;wBACR,SAAS;wBACT,aAAa;qBACd,CAAC,CAAC;oBACH,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAClE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,qBAAqB,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;oBACvD,IAAI,KAAK,YAAY,uBAAuB;wBAAE,MAAM,KAAK,CAAC;oBAC1D,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,EAAE;wBACnD,cAAc,EAAE,KAAK;qBACtB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,aAAa,GAAG,IAAI,CAAC;gBACrB,qBAAqB,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,aAAa,GAAG,IAAI,CAAC;YACrB,qBAAqB,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;YACvD,aAAa;YACb,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,UAAyB,EACzB,OAAkC,EAClC,SAA8C;IAE9C,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACtE,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,YAAY,uBAAuB;QAAE,OAAO,KAAK,CAAC;IAC3D,IACE,KAAK,YAAY,kBAAkB;QACnC,KAAK,CAAC,IAAI,KAAK,kBAAkB,EACjC,CAAC;QACD,OAAO,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;QACxD,cAAc,EAAE,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,UAAyB,EACzB,OAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC;QAClC,WAAW;QACX,OAAO,CAAC,MAAM;QACd,cAAc,OAAO,CAAC,aAAa,EAAE;KACtC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,MAAM,KAAK,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5D,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE;QACtB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,UAAyB,EACzB,OAAkC,EAClC,cAAsB;IAEtB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,uEAAuE;QACvE,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,CAChB,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAChE,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,SAAS,KAAK,cAAc,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAAyB,EACzB,OAAkC,EAClC,OAGmB;IAEnB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,CAAU,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,UAAU,EACV,OAAO,EACP,KAAK,EAAE,SAAS,EAAE,EAAE;gBAClB,MAAM,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,OAAO,CAAC;oBACZ,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,UAAU,EAAE,SAAS,CAAC,UAAU;iBACjC,CAAC,CAAC;gBACH,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,UAAU,CAAC,MAAM,CAC/B,mBAAmB,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACpD,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,qBAAqB,CAAC,aAAa,EAAE,kBAAkB,EAAE,KAAK,CAAC,CAAC;oBAChE,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;wBACvD,cAAc,EAAE,KAAK;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,cAAc,GAAG,CACrB,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CACtD,CAAC,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;wBAC7B,MAAM;wBACN,OAAO,CAAC,MAAM;wBACd,mBAAmB,OAAO,CAAC,aAAa,EAAE;qBAC3C,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;oBACpD,IAAI,CAAC;wBACH,IACE,MAAM,yBAAyB,CAC7B,UAAU,EACV,OAAO,EACP,cAAc,CACf,EACD,CAAC;4BACD,OAAO,EAAE,cAAc,EAAE,CAAC;wBAC5B,CAAC;oBACH,CAAC;oBAAC,OAAO,iBAAiB,EAAE,CAAC;wBAC3B,qBAAqB,CACnB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,CAClB,CAAC;oBACJ,CAAC;oBACD,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;gBACD,OAAO,EAAE,cAAc,EAAE,CAAC;YAC5B,CAAC,CACF,CAAC;YACF,aAAa,KAAK,MAAM,CAAC,aAAa,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,OAAO;gBACjB,aAAa;gBACb,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;aAC5C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,aAAa;gBACX,KAAK,YAAY,uBAAuB,IAAI,KAAK,CAAC,aAAa,CAAC;YAClE,IACE,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;gBAC3C,KAAK,CAAC,IAAI,KAAK,sBAAsB;gBACrC,OAAO,KAAK,CAAC,EACb,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;wBAC7C,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;4BACzB,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE;gCAC5C,aAAa,EAAE,IAAI;gCACnB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,KAAK;6BAC9C,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,EAAE;4BACvD,aAAa,EAAE,IAAI;4BACnB,cAAc,EAAE,KAAK;yBACtB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,EAAE;QACxD,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,cAAsB,EACtB,aAAqB;IAErB,OAAO,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtE,CAAC","sourcesContent":["import { lstat, mkdtemp, readFile, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { isAbsolute, join, relative, sep } from \"node:path\";\nimport {\n  createGitRepository,\n  GitRepositoryError,\n  type GitCommitIdentity,\n  type GitRepository,\n} from \"../git-repository.js\";\nimport {\n  isProtectedPrototypePath,\n  isRegularPrototypeMode,\n} from \"./prototype-path-policy.js\";\n\nconst OWNERSHIP_MARKER = \"bonfire deployment workspace\\n\";\nconst SOURCE_SHA_PATTERN = /^[0-9a-f]{40,64}$/u;\n\ntype DeploymentPhase = \"publication\";\ntype DeploymentStep =\n  | \"fetch\"\n  | \"directory\"\n  | \"marker\"\n  | \"worktree-add\"\n  | \"source-verify\"\n  | \"namespace-read\"\n  | \"namespace-write\"\n  | \"namespace-commit\"\n  | \"metadata-read\"\n  | \"metadata-write\"\n  | \"metadata-commit\"\n  | \"push\"\n  | \"remote-confirm\"\n  | \"cleanup\";\n\nexport type DeploymentWorktreeOptions = {\n  remote: string;\n  primaryBranch: string;\n  sourceSha: string;\n  namespacePath: string;\n  timeoutMs?: number;\n  commitIdentity?: GitCommitIdentity;\n};\n\nexport type DeploymentWorktreeErrorKind =\n  | \"invalid-source\"\n  | \"protected-path\"\n  | \"metadata-failure\"\n  | \"publication-rejected\"\n  | \"publication-failure\"\n  | \"cleanup-failure\";\n\n/** Log only finite classifications; Git/OS messages may contain paths or credentials. */\nexport function reportDeploymentIssue(\n  phase: DeploymentPhase,\n  step: DeploymentStep,\n  error: unknown,\n) {\n  const kind =\n    step.startsWith(\"metadata-\") ||\n    step.startsWith(\"namespace-\") ||\n    step === \"directory\" ||\n    step === \"marker\"\n      ? \"filesystem-failure\"\n      : error instanceof GitRepositoryError\n        ? error.kind\n        : error instanceof DeploymentWorktreeError\n          ? error.kind\n          : \"unexpected\";\n  console.warn(\"[bonfire] Deployment workspace attention\", {\n    phase,\n    step,\n    kind,\n  });\n}\n\nexport class DeploymentWorktreeError extends Error {\n  readonly kind: DeploymentWorktreeErrorKind;\n  readonly cleanupFailed: boolean;\n  readonly operationError: unknown;\n  readonly cause: unknown;\n\n  constructor(\n    kind: DeploymentWorktreeErrorKind,\n    options: { cleanupFailed?: boolean; operationError?: unknown } = {},\n  ) {\n    super(`Deployment workspace operation failed: ${kind}`);\n    this.name = \"DeploymentWorktreeError\";\n    this.kind = kind;\n    this.cleanupFailed = options.cleanupFailed ?? false;\n    this.operationError = options.operationError;\n    this.cause = options.operationError;\n  }\n}\n\nfunction withCleanupFailure(error: unknown): DeploymentWorktreeError {\n  if (error instanceof DeploymentWorktreeError) {\n    return new DeploymentWorktreeError(error.kind, {\n      cleanupFailed: true,\n      operationError: error.operationError ?? error,\n    });\n  }\n  return new DeploymentWorktreeError(\"cleanup-failure\", {\n    cleanupFailed: true,\n    operationError: error,\n  });\n}\n\ntype DeploymentWorktree = {\n  path: string;\n  repository: GitRepository;\n  cleanup(): Promise<void>;\n};\n\ntype DeploymentWorkspaceOperation<Value> = (\n  workspace: DeploymentWorktree,\n) => Promise<Value>;\n\ntype TreeEntry = {\n  path: string;\n  mode: string;\n};\n\nfunction assertBranchName(value: string, option: string) {\n  if (\n    value.length === 0 ||\n    value.startsWith(\"-\") ||\n    value.includes(\"\\0\") ||\n    /\\s/u.test(value) ||\n    value.includes(\"@{\") ||\n    value.split(/[\\\\/]/u).some((segment) => segment === \"..\")\n  ) {\n    throw new TypeError(`Invalid ${option}`);\n  }\n}\n\nfunction assertSourceSha(sourceSha: string) {\n  if (!SOURCE_SHA_PATTERN.test(sourceSha)) {\n    throw new DeploymentWorktreeError(\"invalid-source\");\n  }\n}\n\nfunction assertNamespacePath(namespacePath: string) {\n  if (\n    namespacePath.length === 0 ||\n    namespacePath === \".\" ||\n    isAbsolute(namespacePath) ||\n    namespacePath.startsWith(\"-\") ||\n    namespacePath.includes(\"\\0\") ||\n    namespacePath.includes(\"\\\\\") ||\n    namespacePath.includes(\":\") ||\n    /[*?\\[\\]]/u.test(namespacePath) ||\n    namespacePath\n      .split(\"/\")\n      .some((segment) => segment.length === 0 || segment === \"..\")\n  ) {\n    throw new DeploymentWorktreeError(\"protected-path\");\n  }\n}\n\nfunction remotePrimaryRef(options: DeploymentWorktreeOptions) {\n  return `refs/remotes/${options.remote}/${options.primaryBranch}`;\n}\n\nfunction parseTreeEntries(output: string): TreeEntry[] {\n  return output\n    .split(\"\\0\")\n    .filter(Boolean)\n    .flatMap((entry) => {\n      const tab = entry.indexOf(\"\\t\");\n      if (tab < 0) return [];\n      const header = entry.slice(0, tab).split(/\\s+/u);\n      const mode = header[0];\n      const path = entry.slice(tab + 1).replaceAll(\"\\\\\", \"/\");\n      if (mode === undefined || path.length === 0) return [];\n      return [{ mode, path }];\n    });\n}\n\nasync function readTreeEntries(\n  repository: GitRepository,\n  ref: string,\n  namespacePath: string,\n) {\n  const output = await repository.raw([\n    \"ls-tree\",\n    \"-r\",\n    \"-z\",\n    \"--full-tree\",\n    ref,\n    \"--\",\n    namespacePath,\n  ]);\n  return parseTreeEntries(output);\n}\n\nfunction pathIsWithin(path: string, parent: string) {\n  return path === parent || path.startsWith(`${parent}/`);\n}\n\nfunction isPrototypeRootMetadataPath(path: string, namespacePath: string) {\n  if (!path.endsWith(\"/metadata.json\") || !pathIsWithin(path, namespacePath)) {\n    return false;\n  }\n  const relativePath = path.slice(namespacePath.length + 1);\n  return relativePath.split(\"/\").length === 2;\n}\n\nfunction assertSafeTree(entries: readonly TreeEntry[], namespacePath: string) {\n  for (const entry of entries) {\n    if (\n      !pathIsWithin(entry.path, namespacePath) ||\n      isProtectedPrototypePath(entry.path) ||\n      !isRegularPrototypeMode(entry.mode) ||\n      entry.mode.startsWith(\"120000\")\n    ) {\n      throw new DeploymentWorktreeError(\"protected-path\");\n    }\n  }\n}\n\nfunction parseObject(source: string): Record<string, unknown> | null {\n  try {\n    const value: unknown = JSON.parse(source);\n    if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n      return null;\n    }\n    return { ...(value as Record<string, unknown>) };\n  } catch {\n    return null;\n  }\n}\n\nfunction safePreviewValue(document: Record<string, unknown>) {\n  if (!Object.hasOwn(document, \"previewUrl\")) return null;\n  const value = document.previewUrl;\n  return value === null || typeof value === \"string\" ? value : undefined;\n}\n\nasync function capturePreviewOverlays(\n  repository: GitRepository,\n  sourceSha: string,\n  namespacePath: string,\n  sourceEntries: readonly TreeEntry[],\n  primaryEntries: readonly TreeEntry[],\n) {\n  const primaryPaths = new Set(primaryEntries.map((entry) => entry.path));\n  const overlays: Array<{\n    path: string;\n    source: Record<string, unknown>;\n    preview: string | null;\n  }> = [];\n  for (const entry of sourceEntries) {\n    if (\n      !isPrototypeRootMetadataPath(entry.path, namespacePath) ||\n      !primaryPaths.has(entry.path)\n    ) {\n      continue;\n    }\n    const primarySource = await repository.raw([\"show\", `HEAD:${entry.path}`]);\n    const primaryDocument = parseObject(primarySource);\n    if (primaryDocument === null) {\n      throw new DeploymentWorktreeError(\"publication-failure\");\n    }\n    const preview = safePreviewValue(primaryDocument);\n    if (preview === undefined) {\n      throw new DeploymentWorktreeError(\"publication-failure\");\n    }\n    const source = parseObject(\n      await repository.raw([\"show\", `${sourceSha}:${entry.path}`]),\n    );\n    if (source === null) {\n      throw new DeploymentWorktreeError(\"publication-failure\");\n    }\n    if (!pathIsWithin(entry.path, namespacePath)) {\n      throw new DeploymentWorktreeError(\"protected-path\");\n    }\n    overlays.push({ path: entry.path, source, preview });\n  }\n  return overlays;\n}\n\nasync function composeOwnedNamespace(\n  workspace: DeploymentWorktree,\n  options: DeploymentWorktreeOptions,\n) {\n  const step = \"namespace-read\" as const;\n  let sourceEntries: TreeEntry[];\n  let primaryEntries: TreeEntry[];\n  try {\n    sourceEntries = await readTreeEntries(\n      workspace.repository,\n      options.sourceSha,\n      options.namespacePath,\n    );\n    primaryEntries = await readTreeEntries(\n      workspace.repository,\n      \"HEAD\",\n      options.namespacePath,\n    );\n    assertSafeTree(sourceEntries, options.namespacePath);\n    assertSafeTree(primaryEntries, options.namespacePath);\n  } catch (error) {\n    reportDeploymentIssue(\"publication\", step, error);\n    if (error instanceof DeploymentWorktreeError) throw error;\n    throw new DeploymentWorktreeError(\"publication-failure\", {\n      operationError: error,\n    });\n  }\n\n  let overlays: Awaited<ReturnType<typeof capturePreviewOverlays>>;\n  try {\n    overlays = await capturePreviewOverlays(\n      workspace.repository,\n      options.sourceSha,\n      options.namespacePath,\n      sourceEntries,\n      primaryEntries,\n    );\n  } catch (error) {\n    reportDeploymentIssue(\"publication\", \"metadata-read\", error);\n    if (error instanceof DeploymentWorktreeError) {\n      if (error.kind === \"publication-failure\") {\n        throw new DeploymentWorktreeError(\"metadata-failure\", {\n          operationError: error,\n        });\n      }\n      throw error;\n    }\n    throw new DeploymentWorktreeError(\"metadata-failure\", {\n      operationError: error,\n    });\n  }\n\n  try {\n    await workspace.repository.raw([\n      \"rm\",\n      \"-r\",\n      \"--ignore-unmatch\",\n      \"--\",\n      options.namespacePath,\n    ]);\n    if (sourceEntries.length > 0) {\n      await workspace.repository.raw([\n        \"checkout\",\n        options.sourceSha,\n        \"--\",\n        options.namespacePath,\n      ]);\n    }\n\n    const overlayPaths: string[] = [];\n    for (const overlay of overlays) {\n      const absolutePath = join(workspace.path, overlay.path);\n      const currentSource = await readFile(absolutePath, \"utf8\");\n      const currentDocument = parseObject(currentSource);\n      if (currentDocument === null) {\n        throw new DeploymentWorktreeError(\"publication-failure\");\n      }\n      await writeFile(\n        absolutePath,\n        `${JSON.stringify({ ...currentDocument, previewUrl: overlay.preview }, null, 2)}\\n`,\n      );\n      overlayPaths.push(overlay.path);\n    }\n    if (overlayPaths.length > 0) {\n      await workspace.repository.add(overlayPaths);\n    }\n  } catch (error) {\n    reportDeploymentIssue(\"publication\", \"namespace-write\", error);\n    if (error instanceof DeploymentWorktreeError) throw error;\n    throw new DeploymentWorktreeError(\"publication-failure\", {\n      operationError: error,\n    });\n  }\n}\n\nasync function createDeploymentWorktree(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n): Promise<DeploymentWorktree> {\n  assertBranchName(options.remote, \"remote\");\n  assertBranchName(options.primaryBranch, \"primary branch\");\n  assertSourceSha(options.sourceSha);\n  assertNamespacePath(options.namespacePath);\n\n  try {\n    await repository.fetch(options.remote, options.primaryBranch);\n  } catch (error) {\n    reportDeploymentIssue(\"publication\", \"fetch\", error);\n    throw new DeploymentWorktreeError(\"publication-failure\", {\n      operationError: error,\n    });\n  }\n  let operationDirectory: string;\n  try {\n    operationDirectory = await mkdtemp(join(tmpdir(), \"bonfire-deployment-\"));\n  } catch (error) {\n    reportDeploymentIssue(\"publication\", \"directory\", error);\n    throw new DeploymentWorktreeError(\"publication-failure\", {\n      operationError: error,\n    });\n  }\n  const workspacePath = join(operationDirectory, \"workspace\");\n  const markerPath = join(operationDirectory, \"OWNER\");\n\n  let worktreeAdded = false;\n  let step: DeploymentStep = \"marker\";\n  try {\n    await writeFile(markerPath, OWNERSHIP_MARKER, { flag: \"wx\" });\n    step = \"worktree-add\";\n    await repository.raw([\n      \"worktree\",\n      \"add\",\n      \"--detach\",\n      workspacePath,\n      remotePrimaryRef(options),\n    ]);\n    worktreeAdded = true;\n\n    const workspaceRepository = createGitRepository({\n      repositoryRoot: workspacePath,\n      timeoutMs: options.timeoutMs,\n      commitIdentity: options.commitIdentity,\n    });\n\n    step = \"source-verify\";\n    await workspaceRepository.raw([\n      \"cat-file\",\n      \"-e\",\n      `${options.sourceSha}^{commit}`,\n    ]);\n\n    return {\n      path: workspacePath,\n      repository: workspaceRepository,\n      async cleanup() {\n        try {\n          const marker = await readFile(markerPath, \"utf8\");\n          const stats = await lstat(workspacePath);\n          if (marker !== OWNERSHIP_MARKER || stats.isSymbolicLink()) {\n            throw new DeploymentWorktreeError(\"cleanup-failure\");\n          }\n          await repository.raw([\n            \"worktree\",\n            \"remove\",\n            \"--force\",\n            workspacePath,\n          ]);\n          await rm(operationDirectory, { recursive: true, force: false });\n        } catch (error) {\n          reportDeploymentIssue(\"publication\", \"cleanup\", error);\n          if (error instanceof DeploymentWorktreeError) throw error;\n          throw new DeploymentWorktreeError(\"cleanup-failure\", {\n            operationError: error,\n          });\n        }\n      },\n    };\n  } catch (error) {\n    reportDeploymentIssue(\"publication\", step, error);\n    let cleanupFailed = false;\n    if (worktreeAdded) {\n      try {\n        await repository.raw([\"worktree\", \"remove\", \"--force\", workspacePath]);\n      } catch (cleanupError) {\n        cleanupFailed = true;\n        reportDeploymentIssue(\"publication\", \"cleanup\", cleanupError);\n      }\n    }\n    try {\n      await rm(operationDirectory, { recursive: true, force: true });\n    } catch (cleanupError) {\n      cleanupFailed = true;\n      reportDeploymentIssue(\"publication\", \"cleanup\", cleanupError);\n    }\n    throw new DeploymentWorktreeError(\"publication-failure\", {\n      cleanupFailed,\n      operationError: error,\n    });\n  }\n}\n\nasync function withDeploymentWorktree<Value>(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n  operation: DeploymentWorkspaceOperation<Value>,\n): Promise<{ value: Value; cleanupFailed: boolean }> {\n  const workspace = await createDeploymentWorktree(repository, options);\n  let value: Value;\n  try {\n    value = await operation(workspace);\n  } catch (error) {\n    try {\n      await workspace.cleanup();\n    } catch {\n      throw withCleanupFailure(error);\n    }\n    throw error;\n  }\n\n  try {\n    await workspace.cleanup();\n    return { value, cleanupFailed: false };\n  } catch {\n    return { value, cleanupFailed: true };\n  }\n}\n\nfunction mapPushError(error: unknown) {\n  if (error instanceof DeploymentWorktreeError) return error;\n  if (\n    error instanceof GitRepositoryError &&\n    error.kind === \"non-fast-forward\"\n  ) {\n    return new DeploymentWorktreeError(\"publication-rejected\");\n  }\n  return new DeploymentWorktreeError(\"publication-failure\", {\n    operationError: error,\n  });\n}\n\nasync function remoteCommit(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n) {\n  const output = await repository.raw([\n    \"ls-remote\",\n    options.remote,\n    `refs/heads/${options.primaryBranch}`,\n  ]);\n  const commit = output.trim().split(/\\s+/u)[0];\n  return commit !== undefined && SOURCE_SHA_PATTERN.test(commit)\n    ? commit.toLowerCase()\n    : null;\n}\n\nasync function remoteContainsPublication(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n  publicationSha: string,\n) {\n  const remoteSha = await remoteCommit(repository, options);\n  if (remoteSha === publicationSha) return true;\n  if (remoteSha === null) return false;\n  try {\n    // Fetch only updates the repository's remote-tracking ref; it does not\n    // modify the active checkout. This recognizes an accepted push followed\n    // by a primary descendant without repeating publication work.\n    await repository.fetch(options.remote, options.primaryBranch);\n    const mergeBase = (\n      await repository.raw([\"merge-base\", publicationSha, remoteSha])\n    ).trim();\n    return mergeBase === publicationSha;\n  } catch {\n    return false;\n  }\n}\n\nexport type DeploymentPublicationResult = {\n  attempts: 1 | 2;\n  cleanupFailed: boolean;\n  publicationSha: string;\n};\n\nexport async function publishDeploymentSource(\n  repository: GitRepository,\n  options: DeploymentWorktreeOptions,\n  prepare: (workspace: {\n    path: string;\n    repository: GitRepository;\n  }) => Promise<void>,\n): Promise<DeploymentPublicationResult> {\n  let cleanupFailed = false;\n  for (const attempt of [1, 2] as const) {\n    try {\n      const result = await withDeploymentWorktree(\n        repository,\n        options,\n        async (workspace) => {\n          await composeOwnedNamespace(workspace, options);\n          await prepare({\n            path: workspace.path,\n            repository: workspace.repository,\n          });\n          try {\n            await workspace.repository.commit(\n              `deploy: publish ${options.sourceSha.slice(0, 12)}`,\n            );\n          } catch (error) {\n            reportDeploymentIssue(\"publication\", \"namespace-commit\", error);\n            throw new DeploymentWorktreeError(\"publication-failure\", {\n              operationError: error,\n            });\n          }\n\n          const publicationSha = (\n            await workspace.repository.raw([\"rev-parse\", \"HEAD\"])\n          ).trim();\n          try {\n            await workspace.repository.raw([\n              \"push\",\n              options.remote,\n              `HEAD:refs/heads/${options.primaryBranch}`,\n            ]);\n          } catch (error) {\n            reportDeploymentIssue(\"publication\", \"push\", error);\n            try {\n              if (\n                await remoteContainsPublication(\n                  repository,\n                  options,\n                  publicationSha,\n                )\n              ) {\n                return { publicationSha };\n              }\n            } catch (confirmationError) {\n              reportDeploymentIssue(\n                \"publication\",\n                \"remote-confirm\",\n                confirmationError,\n              );\n            }\n            throw mapPushError(error);\n          }\n          return { publicationSha };\n        },\n      );\n      cleanupFailed ||= result.cleanupFailed;\n      return {\n        attempts: attempt,\n        cleanupFailed,\n        publicationSha: result.value.publicationSha,\n      };\n    } catch (error) {\n      cleanupFailed ||=\n        error instanceof DeploymentWorktreeError && error.cleanupFailed;\n      if (\n        !(error instanceof DeploymentWorktreeError) ||\n        error.kind !== \"publication-rejected\" ||\n        attempt === 2\n      ) {\n        if (cleanupFailed) {\n          if (error instanceof DeploymentWorktreeError) {\n            if (!error.cleanupFailed) {\n              throw new DeploymentWorktreeError(error.kind, {\n                cleanupFailed: true,\n                operationError: error.operationError ?? error,\n              });\n            }\n          } else {\n            throw new DeploymentWorktreeError(\"publication-failure\", {\n              cleanupFailed: true,\n              operationError: error,\n            });\n          }\n        }\n        throw error;\n      }\n    }\n  }\n\n  throw new DeploymentWorktreeError(\"publication-rejected\", {\n    cleanupFailed,\n  });\n}\n\nexport function deploymentWorktreeRelativePath(\n  repositoryRoot: string,\n  workspacePath: string,\n) {\n  return relative(repositoryRoot, workspacePath).split(sep).join(\"/\");\n}\n"]}

package/dist/lifecycle/local-prototype-lifecycle.d.ts

@@ -1,12 +1,15 @@
-import { type BranchPreparationValue, type CreatePrototypeInput, type CreatePrototypeValue, type DeletePrototypeValue, type DeploymentValue, type DirtyObservationValue, type DiscardPrototypeValue, type DuplicatePrototypeInput, type DuplicatePrototypeValue, type EditPrototypeInput, type EditPrototypeValue, type GitMode, type LifecycleResult, type BonfireIdentity, type PrototypeCommandInput, type SavePrototypeValue, type RepositorySummary, type ThemeRegistry } from "@ebay-dt/bonfire-core";
+import { type BranchPreparationValue, type CreatePrototypeInput, type DependencyPreparationValue, type CreatePrototypeValue, type DeletePrototypeValue, type DeploymentValue, type LifecycleRecoveryValue, type DirtyObservationValue, type DiscardPrototypeValue, type DuplicatePrototypeInput, type DuplicatePrototypeValue, type EditPrototypeInput, type EditPrototypeValue, type GitMode, type LifecycleResult, type BonfireIdentity, type PrototypeCommandInput, type SavePrototypeValue, type RepositorySummary, type ThemeRegistry } from "@ebay-dt/bonfire-core";
 import { type PrototypeCatalogLike } from "../prototype-catalog.js";
 import type { PreparePrototypeFiles } from "../prepare-prototype-files.js";
 import { type DeploymentProvider } from "../deployment-provider.js";
+import { publishDeploymentSource } from "./deployment-worktree.js";
+import { type DependencyInstaller } from "./preparation-marker.js";
 type LifecycleMethod<Input, Value> = (identity: BonfireIdentity, input: Input) => Promise<LifecycleResult<Value>>;
 export type PrototypeLifecycle = {
     /** Declares whether this lifecycle enforces the selected Git mode. */
     readonly gitMode?: GitMode;
     prepareBranch(identity: BonfireIdentity): Promise<LifecycleResult<BranchPreparationValue>>;
+    prepareDependencies?(dependencyPaths?: readonly string[], installer?: DependencyInstaller): Promise<LifecycleResult<DependencyPreparationValue>>;
     create: LifecycleMethod<CreatePrototypeInput, CreatePrototypeValue>;
     duplicate: LifecycleMethod<DuplicatePrototypeInput, DuplicatePrototypeValue>;
     edit: LifecycleMethod<EditPrototypeInput, EditPrototypeValue>;
@@ -18,6 +21,8 @@ export type PrototypeLifecycle = {
     discard: LifecycleMethod<PrototypeCommandInput, DiscardPrototypeValue>;
     deploy: LifecycleMethod<PrototypeCommandInput, DeploymentValue>;
     retryPublish?: LifecycleMethod<PrototypeCommandInput, DeploymentValue>;
+    getPendingRecovery?(identity: BonfireIdentity): Promise<LifecycleResult<LifecycleRecoveryValue | null>>;
+    retryPendingPublication?(identity: BonfireIdentity, recoveryId: string): Promise<LifecycleResult<LifecycleRecoveryValue>>;
 };
 export type LocalPrototypeLifecycleOptions = {
     repositoryRoot: string;
@@ -35,12 +40,16 @@ export type LocalPrototypeLifecycleOptions = {
     deploymentProvider?: DeploymentProvider;
     applicationId?: string;
     themeRegistry?: ThemeRegistry;
+    publishDeploymentSource?: typeof publishDeploymentSource | null;
+    /** Test/host seam for the existing package-manager installation step. */
+    installDependencies?: DependencyInstaller;
 };
 export declare class LocalPrototypeLifecycle implements PrototypeLifecycle {
     #private;
     readonly gitMode: GitMode;
     constructor(options: LocalPrototypeLifecycleOptions);
     prepareBranch(identity: BonfireIdentity): Promise<LifecycleResult<BranchPreparationValue>>;
+    prepareDependencies(dependencyPaths?: readonly string[], installer?: DependencyInstaller): Promise<LifecycleResult<DependencyPreparationValue>>;
     create(identity: BonfireIdentity, input: CreatePrototypeInput): Promise<LifecycleResult<CreatePrototypeValue>>;
     edit(identity: BonfireIdentity, input: EditPrototypeInput): Promise<LifecycleResult<EditPrototypeValue>>;
     delete(identity: BonfireIdentity, input: PrototypeCommandInput): Promise<LifecycleResult<DeletePrototypeValue>>;
@@ -48,6 +57,9 @@ export declare class LocalPrototypeLifecycle implements PrototypeLifecycle {
     getRepositorySummary(identity: BonfireIdentity): Promise<LifecycleResult<RepositorySummary>>;
     checkRepositorySummary(identity: BonfireIdentity): Promise<LifecycleResult<RepositorySummary>>;
     deploy(identity: BonfireIdentity, input: PrototypeCommandInput): Promise<LifecycleResult<DeploymentValue>>;
+    getPendingRecovery(identity: BonfireIdentity): Promise<LifecycleResult<LifecycleRecoveryValue | null>>;
+    retryPendingPublication(identity: BonfireIdentity, recoveryId: string): Promise<LifecycleResult<LifecycleRecoveryValue>>;
+    /** Compatibility wrapper; recovery-ID retry is the implementation. */
     retryPublish(identity: BonfireIdentity, input: PrototypeCommandInput): Promise<LifecycleResult<DeploymentValue>>;
     save(identity: BonfireIdentity, input: PrototypeCommandInput): Promise<LifecycleResult<SavePrototypeValue>>;
     discard(identity: BonfireIdentity, input: PrototypeCommandInput): Promise<LifecycleResult<DiscardPrototypeValue>>;