@m-kopa/launchpad-cli 0.24.0 → 0.26.1

package/CHANGELOG.md

@@ -6,6 +6,98 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html);
 pre-1.0 minor bumps may carry breaking changes per ADR 0005.
 
+## 0.26.1 — 2026-06-11
+
+Two `launchpad status` UX faults found live by the owner (fast-track,
+type:bug).
+
+### Fixed
+
+- **Slug inference now reads the local manifest** (Fault 1). Bare
+  `launchpad status` in a directory named e.g. `AI-Audit-Assistant/`
+  containing a valid `launchpad.yaml` (`metadata.name: ai-audit`) used
+  to fail with "slug not provided + cannot infer from cwd" — inference
+  only knew the `launchpad-app-<slug>` directory-name convention and the
+  manifest's own declared slug was ignored. Resolution order is now:
+  (1) explicit positional / `--slug`, (2) the local manifest's slug
+  (`./launchpad.yaml` or `--file`; v1 `metadata.name` / v2
+  `metadata.slug`), (3) the directory-name convention. When the manifest
+  and the directory name disagree, the manifest wins with a stderr note.
+  Applied consistently across every verb that infers (`status`, `pull`,
+  `recover`, `logs`, `review`, `merge`, `envvars`, `destroy`, legacy
+  `deploy`) — the five drifted copies of the helper are centralised in
+  one module (`recover`'s inference was dirname-first; it is now
+  manifest-first like everything else).
+- **`launchpad status <slug>` no longer demands a local manifest**
+  (Fault 2). With an explicit (or inferred) slug and no local
+  `launchpad.yaml`, status used to exit 2 on ENOENT — after already
+  fetching the lifecycle and even saying the app was live in its own
+  error text. It now degrades to the live-truth-only view: lifecycle +
+  deployment block (live/failed/in-progress, trigger, build outcome,
+  standing exceptions) plus a one-line "drift not checked" note, exit 0.
+  `--json` carries `"drift": null` and the `live_drift_unknown` state as
+  the not-evaluated discriminant. `--strict` without a manifest exits 0
+  (drift can't be evaluated; status says so) unless the live build
+  itself failed, which exits 1. The hard exit-2 error remains for a
+  present-but-unreadable or invalid manifest, and the usage error
+  remains when no slug can be resolved at all.
+
+(Note: 0.26.0 was never published to npm — a failed docs gate, since
+fixed — so this release ships 0.26.0's `recover` verb and these fixes
+together.)
+
+## 0.26.0 — 2026-06-11
+
+### Added
+
+- **`launchpad recover [<slug>]`** (sp-devlp1 AC12). Repairs an app whose
+  registry record is stuck at a terminal provisioning failure although the
+  app is actually live (the ai-audit class: a since-fixed platform bug
+  failed the record after content shipped, leaving `launchpad status`
+  short-circuited on the failed lifecycle with no CLI way out). The bot
+  verifies LIVE Cloudflare state first — Pages project exists + a
+  successful production deployment is serving — and only then reconciles
+  the record to `live`, preserving every non-lifecycle field. A not-live
+  app is refused with exactly what was checked and the next steps
+  (`deploy --resume` / `--abandon` / re-deploy): recover never fabricates
+  a live state. Owner/editor/break-glass gated, audited, fail-closed
+  (Cloudflare unreachable → nothing changes). Recovering a healthy app is
+  a no-op success.
+
+### Fixed
+
+- **`launchpad deploy` usage text no longer advertises the removed
+  `--platform-repo` flag** (apply runs server-side via portal-bot). The
+  banner now reflects the real mode surface, and a misused flag (e.g.
+  bare `deploy --yes`) prints a pointed one-line error instead of a wall
+  of stale usage.
+- **Policy-rejected deploys now say the retry is clean.** A
+  bundle-policy / app-boundary / build-command rejection leaves no
+  residue (nothing committed, no slug claimed, no staged bundle) — the
+  error now states that explicitly: fix the file and re-run
+  `launchpad deploy`.
+
+## 0.25.0 — 2026-06-11
+
+### Changed
+
+- **Redeploying an unchanged app is a clean no-op** (sp-devlp1 AC1 / ADR
+  0025). The bot diffs the bundle against the managed repo's `main` (git
+  tree-diff) before gating: nothing changed → `launchpad deploy` prints
+  "Nothing to deploy" and exits 0 — no policy failure, no junk commit, no
+  rebuild. Deploys that DO change files commit only the changed files.
+- **Policy gates judge what you changed, not what you have** (AC2).
+  Already-live files are never re-flagged; their pre-existing violations
+  surface as a non-blocking drift report (and in `launchpad status`'s new
+  standing-exceptions block). Secrets are the exception: a secret anywhere
+  in the upload — including one already on `main` — always blocks, with
+  rotation guidance.
+- **`deploy --apply` no longer requires local git state** (AC3). The bot
+  resolves `launchpad.yaml` at the managed repo's `main` HEAD; your local
+  history can share zero commits with the managed repo. New `--at <sha>`
+  pins a specific managed-repo commit; `rollback` now uses it too (fixing
+  its local-HEAD keying).
+
 ## 0.24.0 — 2026-06-11
 
 ### Changed

package/dist/bundle/upload.d.ts

@@ -1,5 +1,17 @@
 import type { CliConfig } from "../config.js";
 import type { WorkerArtifact } from "./cron-bundle.js";
+/** Drift report riding on a success response (sp-devlp1 T3 / D2):
+ *  policy violations observed in content already live on managed
+ *  main — non-blocking, recorded server-side in the queryable
+ *  standing-exception inventory. */
+export interface StandingExceptionsSummary {
+    readonly count: number;
+    readonly entries: ReadonlyArray<{
+        readonly path: string;
+        readonly rule: string;
+    }>;
+    readonly message?: string;
+}
 /**
  * Response shape from the bot's deploy-bundle endpoint when the
  * bundle was committed to the per-app repo (HTTP 202, status="accepted").
@@ -10,6 +22,26 @@ export interface DeployBundleAccepted {
     readonly commit_sha: string;
     readonly repo: string;
     readonly message: string;
+    /** "delta" (gates judged the changed-set) or "full" (fallback). */
+    readonly gating?: "delta" | "full";
+    readonly committed_file_count?: number;
+    /** Files the bot's server-side app-boundary stripped (inferred
+     *  contract, never-shippable paths). */
+    readonly boundary_stripped?: readonly string[];
+    readonly standing_exceptions?: StandingExceptionsSummary;
+}
+/**
+ * Response shape when managed main already matches the upload
+ * byte-for-byte (HTTP 200, sp-devlp1 AC1): no commit was created,
+ * no CF Pages build was triggered.
+ */
+export interface DeployBundleNothingToDeploy {
+    readonly outcome: "nothing-to-deploy";
+    readonly slug: string;
+    readonly head_sha: string;
+    readonly message: string;
+    readonly boundary_stripped?: readonly string[];
+    readonly standing_exceptions?: StandingExceptionsSummary;
 }
 /**
  * Response shape when the slug was never registered before and the
@@ -27,8 +59,8 @@ export interface DeployBundleProvisioningStarted {
     readonly appType: string;
     readonly message: string;
 }
-/** Either 202 success shape. */
-export type DeployBundleSuccess = DeployBundleAccepted | DeployBundleProvisioningStarted;
+/** Any success shape (202 accepted / 202 provisioning / 200 no-op). */
+export type DeployBundleSuccess = DeployBundleAccepted | DeployBundleProvisioningStarted | DeployBundleNothingToDeploy;
 /** Structured error shape from the bot on validation failure. */
 export interface DeployBundleError {
     readonly error: string;

package/dist/bundle/upload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../src/bundle/upload.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgBvD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,gCAAgC;AAChC,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,+BAA+B,CAAC;AAEpC,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,UAAU,EACvB,cAAc,CAAC,EAAE,cAAc,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAsF7B"}
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../src/bundle/upload.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAgBvD;;;oCAGoC;AACpC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;4CACwC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;CAC1D;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;CAC1D;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,uEAAuE;AACvE,MAAM,MAAM,mBAAmB,GAC3B,oBAAoB,GACpB,+BAA+B,GAC/B,2BAA2B,CAAC;AAEhC,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnE;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAEnE;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,UAAU,EACvB,cAAc,CAAC,EAAE,cAAc,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAgG7B"}