@m-kopa/launchpad-cli 0.27.3 → 0.27.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -6,6 +6,40 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
6
6
  This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html);
7
7
  pre-1.0 minor bumps may carry breaking changes per ADR 0005.
8
8
 
9
+ ## 0.27.5 — 2026-06-16
10
+
11
+ Post-deploy verification — `launchpad deploy` confirms the live deployment
12
+ serves what you shipped (sp-dplvfy).
13
+
14
+ - After a content deploy commits, the CLI now **waits for the Cloudflare Pages
15
+ build to settle and then checks the served deployment matches your shipped
16
+ `index.html`** (by hash). A mismatch — the silent-revert class where the
17
+ build reads the entrypoint from a different path than your files land at —
18
+ fails the deploy with exit `65` and a build-config diagnosis, instead of a
19
+ misleading "success". A failed build exits `1` (with a log excerpt); a build
20
+ still pending within the timeout is a soft, non-failing outcome.
21
+ - Static apps get a byte/hash compare; react/react+api get a reachability check.
22
+ Content is compared by hash + length only — never echoed back.
23
+ - New `--no-verify` (skip the wait/check) and `--verify-timeout=<seconds>`
24
+ (default 180) flags. A status-read hiccup degrades to "couldn't verify"
25
+ rather than failing a committed deploy.
26
+
27
+ ## 0.27.4 — 2026-06-16
28
+
29
+ Self-serve developer-access grants (sp-grnted, Bundle 1).
30
+
31
+ - New `launchpad grant-editor <slug> <id>` / `revoke-editor <slug> <id>` —
32
+ owner-only verbs to manage who can develop/deploy an app. The CLI hides the
33
+ optimistic-concurrency dance (reads the version, writes with `If-Match`,
34
+ re-reads + retries once on a 409, then exits `75` on a persistent conflict)
35
+ and shows a confirm-preview before mutating live authz (`--yes` to skip,
36
+ required in non-interactive mode).
37
+ - New `launchpad whoami --share` (alias `--id`) prints **only** your verified
38
+ id, so you can hand it to an app owner granting you access. Fails closed if
39
+ the id is unreadable rather than printing a sentinel.
40
+ - Grant by **email** is intentionally deferred to a later release (Bundle 2);
41
+ email-shaped values on the by-id path are rejected with a pointer.
42
+
9
43
  ## 0.27.3 — 2026-06-15
10
44
 
11
45
  DX: keep the Claude Code skill bundle current automatically (sp-uwugsm).