@m-kopa/launchpad-cli 0.23.0 → 0.25.0

package/CHANGELOG.md

@@ -6,6 +6,71 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html);
 pre-1.0 minor bumps may carry breaking changes per ADR 0005.
 
+## 0.25.0 — 2026-06-11
+
+### Changed
+
+- **Redeploying an unchanged app is a clean no-op** (sp-devlp1 AC1 / ADR
+  0025). The bot diffs the bundle against the managed repo's `main` (git
+  tree-diff) before gating: nothing changed → `launchpad deploy` prints
+  "Nothing to deploy" and exits 0 — no policy failure, no junk commit, no
+  rebuild. Deploys that DO change files commit only the changed files.
+- **Policy gates judge what you changed, not what you have** (AC2).
+  Already-live files are never re-flagged; their pre-existing violations
+  surface as a non-blocking drift report (and in `launchpad status`'s new
+  standing-exceptions block). Secrets are the exception: a secret anywhere
+  in the upload — including one already on `main` — always blocks, with
+  rotation guidance.
+- **`deploy --apply` no longer requires local git state** (AC3). The bot
+  resolves `launchpad.yaml` at the managed repo's `main` HEAD; your local
+  history can share zero commits with the managed repo. New `--at <sha>`
+  pins a specific managed-repo commit; `rollback` now uses it too (fixing
+  its local-HEAD keying).
+
+## 0.24.0 — 2026-06-11
+
+### Changed
+
+- **`launchpad status` is truthful for ALL deploy mechanisms** (sp-devlp1 AC6).
+  Status now reads the app's LIVE Cloudflare Pages deployment state via the
+  bot's new `/apps/<slug>/deployment-status` endpoint: last deployment time,
+  its trigger (git push vs `launchpad deploy`), and the build outcome. An app
+  that deploys via CF Pages native git integration (push-to-main) reports
+  `live — content deployed via git push` instead of the misleading
+  "no content deployed" (the sp-gitst1 incident class). `--json` carries a
+  `deployment` block and the new `live_content_untracked` state.
+- **Failed builds are visible** (sp-devlp1 AC7). When the latest production
+  build failed, `launchpad status` shows the failed stage, a build-log
+  excerpt (proxied via the bot), what is still serving, and the CLI next
+  step — killing the sp-reloc1 silent-failed-build class. In-progress builds
+  say so. `launchpad deploy` (bundle path) and `launchpad merge` end with an
+  explicit "build pending — run `launchpad status`" handoff.
+- **`launchpad pull`'s "no content deployed" claim comes from the live
+  source** (AC6): an app with live git-integration content gets a truthful
+  "has live content; deploys outside `launchpad deploy`" message.
+- **Error messages never direct you at resources you can't access** (AC8).
+  Reworded messages that pointed at the Cloudflare dashboard / GitHub PR
+  page; every failure path names a CLI command (or local file fix) as the
+  next step, enforced by a message-catalogue audit test.
+
+### Added
+
+- **App-boundary allowlist bundling** (sp-devlp1 / AC4 + AC5). Both deploy
+  paths (Model A CWD bundle + the content-PR path) filter the file list
+  through the engine's app-boundary contract: with an `app:` block in
+  `launchpad.yaml`, ONLY the declared app ships; without one, the whole
+  tree minus the platform deny-list ships (compat) and stripped files are
+  warned. `.launchpadignore` (repo root, gitignore subset, no `!`) adds
+  excludes. The build-inputs check fails a deploy whose `build.command`
+  references inputs missing from the bundle (sp-reloc1 class).
+- **`launchpad validate` boundary checks**: warns to declare `app:` on
+  pre-contract manifests, surfaces the strips the next deploy would
+  perform, and exits 1 on declared-contract deny-list hits or confident
+  build-input misses. `--json` gains an `appBoundary` block.
+- **`launchpad init` emits the `app:` contract explicitly** (root `.` +
+  the per-appType default include list) so new manifests never rely on
+  the inferred fallback.
+
 ## 0.23.0 — 2026-06-11
 
 ### Changed

package/dist/bundle/boundary.d.ts

@@ -0,0 +1,26 @@
+export type BoundaryFilterResult = {
+    kind: "ok";
+    /** The post-boundary bundle file list (repo-relative, sorted). */
+    files: readonly string[];
+    /** Stripped-file notices (inferred mode) — surface to the user. */
+    warnings: readonly string[];
+    /** True when the manifest declares no `app:` block. */
+    inferred: boolean;
+} | {
+    kind: "error";
+    message: string;
+};
+export interface ApplyBoundaryArgs {
+    /** Repo root the relative `files` resolve against. */
+    readonly cwd: string;
+    /** Raw `launchpad.yaml` bytes, or null when absent/unreadable. */
+    readonly manifestYaml: string | null;
+    /** Candidate file list (from the walker / `git ls-files`). */
+    readonly files: readonly string[];
+}
+/**
+ * Filter a candidate bundle file list through the app-boundary
+ * contract. See module header for the severity policy.
+ */
+export declare function applyBoundaryToFiles(args: ApplyBoundaryArgs): BoundaryFilterResult;
+//# sourceMappingURL=boundary.d.ts.map

package/dist/bundle/boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../../src/bundle/boundary.ts"],"names":[],"mappings":"AAuCA,MAAM,MAAM,oBAAoB,GAC5B;IACE,IAAI,EAAE,IAAI,CAAC;IACX,kEAAkE;IAClE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,mEAAmE;IACnE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,uDAAuD;IACvD,QAAQ,EAAE,OAAO,CAAC;CACnB,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,oBAAoB,CA8FlF"}

package/dist/bundle/orchestrate.d.ts

@@ -12,6 +12,9 @@ export type BundleAndDeployResult = {
 } | {
     kind: "no-manifest";
     message: string;
+} | {
+    kind: "boundary-error";
+    message: string;
 } | {
     kind: "pack-error";
     message: string;
@@ -32,6 +35,8 @@ export type BundleAndDeployResult = {
     compressedBytes: number;
     /** The cron Worker script name that was built + shipped, if any. */
     workerScript: string | null;
+    /** App-boundary strip notices (pre-contract manifests) — surface to the user. */
+    boundaryWarnings: readonly string[];
 };
 /**
  * Bundle the user's CWD and ship it to the bot.

package/dist/bundle/orchestrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrate.d.ts","sourceRoot":"","sources":["../../src/bundle/orchestrate.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGtE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACvD;IACE,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEN;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAoFhC"}
+{"version":3,"file":"orchestrate.d.ts","sourceRoot":"","sources":["../../src/bundle/orchestrate.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAItE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACvD;IACE,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iFAAiF;IACjF,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,CAAC;AAEN;;;;;;;;;;;;;GAaG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAkGhC"}

package/dist/bundle/upload.d.ts

@@ -1,5 +1,17 @@
 import type { CliConfig } from "../config.js";
 import type { WorkerArtifact } from "./cron-bundle.js";
+/** Drift report riding on a success response (sp-devlp1 T3 / D2):
+ *  policy violations observed in content already live on managed
+ *  main — non-blocking, recorded server-side in the queryable
+ *  standing-exception inventory. */
+export interface StandingExceptionsSummary {
+    readonly count: number;
+    readonly entries: ReadonlyArray<{
+        readonly path: string;
+        readonly rule: string;
+    }>;
+    readonly message?: string;
+}
 /**
  * Response shape from the bot's deploy-bundle endpoint when the
  * bundle was committed to the per-app repo (HTTP 202, status="accepted").
@@ -10,6 +22,26 @@ export interface DeployBundleAccepted {
     readonly commit_sha: string;
     readonly repo: string;
     readonly message: string;
+    /** "delta" (gates judged the changed-set) or "full" (fallback). */
+    readonly gating?: "delta" | "full";
+    readonly committed_file_count?: number;
+    /** Files the bot's server-side app-boundary stripped (inferred
+     *  contract, never-shippable paths). */
+    readonly boundary_stripped?: readonly string[];
+    readonly standing_exceptions?: StandingExceptionsSummary;
+}
+/**
+ * Response shape when managed main already matches the upload
+ * byte-for-byte (HTTP 200, sp-devlp1 AC1): no commit was created,
+ * no CF Pages build was triggered.
+ */
+export interface DeployBundleNothingToDeploy {
+    readonly outcome: "nothing-to-deploy";
+    readonly slug: string;
+    readonly head_sha: string;
+    readonly message: string;
+    readonly boundary_stripped?: readonly string[];
+    readonly standing_exceptions?: StandingExceptionsSummary;
 }
 /**
  * Response shape when the slug was never registered before and the
@@ -27,8 +59,8 @@ export interface DeployBundleProvisioningStarted {
     readonly appType: string;
     readonly message: string;
 }
-/** Either 202 success shape. */
-export type DeployBundleSuccess = DeployBundleAccepted | DeployBundleProvisioningStarted;
+/** Any success shape (202 accepted / 202 provisioning / 200 no-op). */
+export type DeployBundleSuccess = DeployBundleAccepted | DeployBundleProvisioningStarted | DeployBundleNothingToDeploy;
 /** Structured error shape from the bot on validation failure. */
 export interface DeployBundleError {
     readonly error: string;

package/dist/bundle/upload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../src/bundle/upload.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgBvD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,gCAAgC;AAChC,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,+BAA+B,CAAC;AAEpC,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,UAAU,EACvB,cAAc,CAAC,EAAE,cAAc,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAsF7B"}
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../src/bundle/upload.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgBvD;;;oCAGoC;AACpC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;4CACwC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;CAC1D;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;CAC1D;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,uEAAuE;AACvE,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,+BAA+B,GAC/B,2BAA2B,CAAC;AAEhC,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,UAAU,EACvB,cAAc,CAAC,EAAE,cAAc,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAgG7B"}