@isomorph.ai/cli 0.3.2 → 0.3.3-rc.1

package/dist/packages/harbour-cli/src/productionise.js

@@ -86,7 +86,8 @@ async function deploy(rootArg, client, output, tenantId, includePaths = [], opti
     if (pending && !pending.uploaded && pending.sourceDigest !== (await sourceDigest(root)).digest) {
         throw new CliError("UPLOAD_SOURCE_CHANGED", "The app changed before its upload finished. Restore the submitted files before continuing this operation.", pending.operationRef);
     }
-    const graph = pending?.graph ?? await scanWorkspace(root, { sourceBoundary: "root", ...(includePaths.length ? { includePaths } : {}) });
+    const scan = () => scanWorkspace(root, { sourceBoundary: "root", ...(includePaths.length ? { includePaths } : {}) });
+    let graph = pending?.graph ?? await scan();
     if (!graph.deploymentScope.includedFiles.length)
         throw new CliError("PREFLIGHT_EMPTY", "The selected app boundary contains no eligible files.");
     if (graph.deploymentScope.includedFiles.some(isProhibitedSecretPath))
@@ -100,7 +101,8 @@ async function deploy(rootArg, client, output, tenantId, includePaths = [], opti
     // before any grant lookup, database replay, operation or upload.
     if (!pending?.uploaded)
         await assertChecksPassedForTree(root, output);
-    const files = pending?.uploaded ? [] : await Promise.all(graph.deploymentScope.includedFiles.map(async (path) => ({ path, content: new Uint8Array(await readFile(resolve(root, path))) })));
+    const readTree = async () => pending?.uploaded ? [] : await Promise.all(graph.deploymentScope.includedFiles.map(async (path) => ({ path, content: new Uint8Array(await readFile(resolve(root, path))) })));
+    let files = await readTree();
     output(`Isomorph found ${graph.deploymentScope.includedFiles.length} app files.`);
     // A declared connection IT has not approved yet would only park the
     // deployment after the save; file the request and refuse here, before any operation exists.
@@ -113,8 +115,26 @@ async function deploy(rootArg, client, output, tenantId, includePaths = [], opti
     // operation no journey exercises, a cross-user leak) is refused here,
     // before the save, by the same gate with the same wording.
     const gate = options.kitGate === false ? undefined : options.kitGate ?? (options.integrations ? { bundle: options.integrations.bundle } : undefined);
-    if (gate && !pending?.uploaded)
+    if (gate && !pending?.uploaded) {
         await preflightKitGate(root, gate.bundle, output, gate.run);
+        // The gate AUTHORS `.isomorph/checks/*.mjs` — the retained journeys the cloud replays. On an app
+        // that has never run `isomorph check` on its own they did not exist when the tree was scanned
+        // above, so the package shipped without them and the cloud gate, which has no journeys to run,
+        // refused every write the source performs as unexercised. Locally the same gate had just
+        // generated and passed them, so the app looked ready and the refusal named `src/App.tsx` rather
+        // than the missing files (2026-09-15). Re-read the tree the gate leaves behind.
+        if (!pending) {
+            graph = await scan();
+            files = await readTree();
+        }
+    }
+    // The journeys are the app's proof for the cloud gate; a package without the ones on disk is
+    // refused there, minutes later, in terms that point at the app instead of the package.
+    const packaged = new Set(graph.deploymentScope.includedFiles);
+    const unpackaged = (await retainedChecks(root)).filter(name => !packaged.has(`.isomorph/checks/${name}`));
+    if (!pending?.uploaded && unpackaged.length) {
+        throw new CliError("CHECKS_NOT_PACKAGED", `The app package does not carry its retained check${unpackaged.length === 1 ? "" : "s"} (${nameList(unpackaged)}), so the deployment would have nothing to replay.`, undefined, "Run `isomorph check --app-root .`, then run this again.");
+    }
     // A `CliError` is Isomorph's own answer (`AUTH_REQUIRED` after two 401s, a
     // JSON-RPC refusal) and reaches the builder as it is; only a plain Error from
     // the transport — Isomorph out of reach — is "not started". Reporting a

package/dist/packages/harbour-cli/src/version.js

@@ -1 +1 @@
-export const CLI_VERSION = "0.3.2";
+export const CLI_VERSION = "0.3.3-rc.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/cli",
-  "version": "0.3.2",
+  "version": "0.3.3-rc.1",
   "description": "Isomorph development kit CLI",
   "type": "module",
   "bin": {