@keystrokehq/platform 0.1.138 → 0.1.140

package/dist/{with-project-scope-C0Mn7qJB.cjs → with-project-scope-BN5eNKzo.cjs}

@@ -1,4 +1,4 @@
-const require_project_draft_notifier = require("./project-draft-notifier-CcWjsCtB.cjs");
+const require_project_draft_notifier = require("./project-draft-notifier-P63mxlNb.cjs");
 let node_crypto = require("node:crypto");
 let _keystrokehq_database = require("@keystrokehq/database");
 let node_async_hooks = require("node:async_hooks");
@@ -1272,7 +1272,7 @@ function isRetryableProviderError(error) {
 	if (isProjectGitProviderError(error)) return error.retryable;
 	return true;
 }
-function sleep(ms) {
+function sleep$2(ms) {
 	return new Promise((resolve) => {
 		setTimeout(resolve, ms);
 	});
@@ -1291,7 +1291,7 @@ async function withRetry(fn, shouldRetry) {
 		const hasAttemptsLeft = attempt < PROVIDER_RETRY_ATTEMPTS - 1;
 		if (!shouldRetry(error) || !hasAttemptsLeft) throw error;
 		const retryAt = isProjectGitProviderError(error) ? error.retryAt : void 0;
-		await sleep(backoffDelayMs(attempt, retryAt));
+		await sleep$2(backoffDelayMs(attempt, retryAt));
 	}
 	throw lastError;
 }
@@ -1878,6 +1878,9 @@ function mapDraftCommitError(error) {
 }
 //#endregion
 //#region src/services/managed-deploy.ts
+/** Brief retries for Code.Storage read-after-write lag on a just-pushed draft pin. */
+const COMMIT_LOOKUP_ATTEMPTS = 4;
+const COMMIT_LOOKUP_BASE_DELAY_MS = 150;
 var ManagedDeployError = class extends Error {
 	status;
 	constructor(message, status) {
@@ -1886,6 +1889,25 @@ var ManagedDeployError = class extends Error {
 		this.status = status;
 	}
 };
+function sleep$1(ms) {
+	return new Promise((resolve) => {
+		setTimeout(resolve, ms);
+	});
+}
+async function getCommitWithLagRetry(input) {
+	let lastError;
+	for (let attempt = 0; attempt < COMMIT_LOOKUP_ATTEMPTS; attempt += 1) try {
+		return await input.provider.getCommit({
+			repository: input.repository,
+			commitSha: input.commitSha
+		});
+	} catch (error) {
+		lastError = error;
+		if (!(isProjectGitProviderError(error) && (error.code === "not_found" || error.code === "provider_unavailable" || error.retryable)) || attempt >= COMMIT_LOOKUP_ATTEMPTS - 1) throw error;
+		await sleep$1(COMMIT_LOOKUP_BASE_DELAY_MS * 2 ** attempt);
+	}
+	throw lastError;
+}
 async function isCommitAncestor(input) {
 	const ancestor = input.ancestorSha.toLowerCase();
 	const descendant = input.descendantSha.toLowerCase();
@@ -1898,7 +1920,8 @@ async function isCommitAncestor(input) {
 			if (sha === ancestor) return true;
 			if (seen.has(sha)) continue;
 			seen.add(sha);
-			const commit = await input.provider.getCommit({
+			const commit = await getCommitWithLagRetry({
+				provider: input.provider,
 				repository: input.repository,
 				commitSha: sha
 			});
@@ -1908,6 +1931,10 @@ async function isCommitAncestor(input) {
 	}
 	return false;
 }
+function mapPinLookupError(error) {
+	if (isProjectGitProviderError(error) && error.code === "not_found") throw new ManagedDeployError("Draft pin commit was not found in storage. Recompute and retry.", 409);
+	throw error;
+}
 /** Resolve live refs while tolerating brief read-after-write lag on ks/draft. */
 async function validateManagedDeployPins(input) {
 	const [main, draft] = await Promise.all([input.provider.resolveRef({
@@ -1920,12 +1947,16 @@ async function validateManagedDeployPins(input) {
 	if (!main?.sha || main.sha.toLowerCase() !== input.mainSha.toLowerCase()) throw new ManagedDeployError("Main pin is stale; main moved. Recompute and retry.", 409);
 	if (!draft?.sha) throw new ManagedDeployError("Managed repository draft branch is missing", 409);
 	if (draft.sha.toLowerCase() === input.draftSha.toLowerCase()) return;
-	if (await isCommitAncestor({
-		provider: input.provider,
-		repository: input.repository,
-		ancestorSha: draft.sha,
-		descendantSha: input.draftSha
-	})) return;
+	try {
+		if (await isCommitAncestor({
+			provider: input.provider,
+			repository: input.repository,
+			ancestorSha: draft.sha,
+			descendantSha: input.draftSha
+		})) return;
+	} catch (error) {
+		mapPinLookupError(error);
+	}
 	throw new ManagedDeployError("Draft pin is stale; draft moved. Recompute and retry.", 409);
 }
 /** Fast-forward main to the healthy candidate. Never force. */
@@ -1981,15 +2012,57 @@ const MODULE_BLOB_CONTENT_TYPE = "application/octet-stream";
 const ARTIFACT_INDEX_CONTENT_TYPE = "application/json";
 const DEFAULT_PRESIGN_TTL_SECONDS = 900;
 const ARTIFACT_MAX_BYTES = 48 * 1048576;
+/**
+* Brief retries for Tigris cross-region read-after-write lag: CLI PUTs via
+* presigned URL near the user, platform HEADs/GETs from Fly against the same
+* global (`region: auto`) org bucket. Mirrors Code.Storage pin lookup retries.
+*/
+const MODULE_BLOB_LOOKUP_ATTEMPTS = 4;
+const MODULE_BLOB_LOOKUP_BASE_DELAY_MS = 150;
+function sleep(ms) {
+	return new Promise((resolve) => {
+		setTimeout(resolve, ms);
+	});
+}
+function missingModuleBlobError(path, hash) {
+	return new ManagedDeployError(`Missing or incomplete module blob for ${path} (${hash})`, 400);
+}
+/**
+* Prefer HEAD (with lag retries), then GET; map storage not-found to a 400.
+* @internal Exported for unit tests.
+*/
+async function verifyModularModuleBlob(input) {
+	const key = require_project_draft_notifier.projectModuleBlobKey(input.projectId, input.hash);
+	let head = await input.storage.headObject(key);
+	for (let attempt = 0; !head || head.contentLength <= 0; attempt += 1) {
+		if (attempt >= MODULE_BLOB_LOOKUP_ATTEMPTS - 1) throw missingModuleBlobError(input.path, input.hash);
+		await sleep(MODULE_BLOB_LOOKUP_BASE_DELAY_MS * 2 ** attempt);
+		head = await input.storage.headObject(key);
+	}
+	if (head.contentLength !== input.size) throw missingModuleBlobError(input.path, input.hash);
+	let bytes;
+	try {
+		bytes = await input.storage.getObject(key);
+	} catch (error) {
+		if (require_project_draft_notifier.isStorageNotFoundError(error)) throw missingModuleBlobError(input.path, input.hash);
+		throw error;
+	}
+	if (!bytes || bytes.byteLength !== input.size) throw missingModuleBlobError(input.path, input.hash);
+	if (require_project_draft_notifier.sha256Hex(bytes) !== input.hash.toLowerCase()) throw new ManagedDeployError(`Module blob checksum mismatch for ${input.path} (${input.hash})`, 400);
+}
 async function resolveCompleteRouteManifest(input) {
 	if ("index" in input.request) {
 		if (!require_project_draft_notifier.isProjectArtifactIndexKey(input.artifact.storageKey)) throw new ManagedDeployError("Artifact storage layout is not modular", 409);
 		const totalBytes = input.request.index.files.reduce((sum, file) => sum + file.size, 0);
 		if (totalBytes <= 0 || totalBytes > ARTIFACT_MAX_BYTES) throw new ManagedDeployError(`Artifact exceeds maximum size of ${ARTIFACT_MAX_BYTES} bytes`, 400);
 		await Promise.all(input.request.index.files.map(async (file) => {
-			const bytes = await input.storage.getObject(require_project_draft_notifier.projectModuleBlobKey(input.projectId, file.hash));
-			if (!bytes || bytes.byteLength !== file.size) throw new ManagedDeployError(`Missing or incomplete module blob for ${file.path} (${file.hash})`, 400);
-			if (require_project_draft_notifier.sha256Hex(bytes) !== file.hash.toLowerCase()) throw new ManagedDeployError(`Module blob checksum mismatch for ${file.path} (${file.hash})`, 400);
+			await verifyModularModuleBlob({
+				storage: input.storage,
+				projectId: input.projectId,
+				path: file.path,
+				hash: file.hash,
+				size: file.size
+			});
 		}));
 		await input.storage.putObject({
 			key: input.artifact.storageKey,
@@ -2002,7 +2075,13 @@ async function resolveCompleteRouteManifest(input) {
 	if (input.request.sizeBytes > ARTIFACT_MAX_BYTES) throw new ManagedDeployError(`Artifact exceeds maximum size of ${ARTIFACT_MAX_BYTES} bytes`, 400);
 	const head = await input.storage.headObject(input.artifact.storageKey);
 	if (!head || head.contentLength !== input.request.sizeBytes) throw new ManagedDeployError("Uploaded artifact size does not match declaration", 400);
-	const artifactBytes = await input.storage.getObject(input.artifact.storageKey);
+	let artifactBytes;
+	try {
+		artifactBytes = await input.storage.getObject(input.artifact.storageKey);
+	} catch (error) {
+		if (require_project_draft_notifier.isStorageNotFoundError(error)) throw new ManagedDeployError("Artifact upload is missing or exceeds the maximum size", 400);
+		throw error;
+	}
 	if (!artifactBytes || artifactBytes.byteLength <= 0 || artifactBytes.byteLength > ARTIFACT_MAX_BYTES) throw new ManagedDeployError("Artifact upload is missing or exceeds the maximum size", 400);
 	if ((0, node_crypto.createHash)("sha256").update(artifactBytes).digest("hex") !== input.request.checksumSha256.toLowerCase()) throw new ManagedDeployError("Artifact checksum mismatch", 400);
 	try {
@@ -2880,4 +2959,4 @@ Object.defineProperty(exports, "workflowListScope", {
 	}
 });
 
-//# sourceMappingURL=with-project-scope-C0Mn7qJB.cjs.map
+//# sourceMappingURL=with-project-scope-BN5eNKzo.cjs.map