@m-kopa/launchpad-cli 0.38.1 → 0.39.0

package/CHANGELOG.md

@@ -6,6 +6,31 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html);
 pre-1.0 minor bumps may carry breaking changes per ADR 0005.
 
+## 0.39.0 — 2026-06-20
+
+Feature (sp-bld9kq, PS-1590): `launchpad deploy` now confirms a Cloudflare
+deployment built from the **exact commit you just pushed** actually went live —
+not merely that *some* build succeeded. This closes a silent-failure class where
+a commit landed but triggered **no build at all** (e.g. the app's
+Cloudflare↔GitHub connection was broken) and the deploy reported a false green
+against the stale, still-serving old build (the ai-audit incident).
+
+- Snapshots the live deployment **before** committing, then requires the live
+  deployment to advance to your commit's SHA before reporting success.
+- New outcome **`✗ NO NEW DEPLOYMENT WAS CREATED for your commit.`** (exit `69`)
+  when no deployment registers for your commit within the registration window —
+  it can't be self-fixed from the CLI (needs a platform admin); the message
+  routes you to `launchpad status` + `launchpad bug`.
+- Two new soft (exit `0`) outcomes: *no deployment registered yet* (slow queue /
+  short timeout) and *superseded* (a concurrent deploy of a different commit
+  went live).
+- New `--registration-bound=<seconds>` flag (default `120`) to extend the wait
+  for slow-to-register builds.
+- Build-failure diagnostics (`logExcerpt`) are now **bounded and redacted** —
+  Cloudflare build logs can echo secret values.
+- `launchpad redeploy` keeps its existing verification (it rebuilds the current
+  commit, so commit-SHA matching doesn't apply) — unchanged.
+
 ## 0.38.1 — 2026-06-19
 
 Fix (sp-rpt9kd): `launchpad bug` / `launchpad feature` no longer truncate an

package/dist/cli.js

@@ -19,7 +19,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/version.ts
-var CLI_VERSION = "0.38.1";
+var CLI_VERSION = "0.39.0";
 
 // src/config.ts
 import * as os from "node:os";
@@ -3657,8 +3657,83 @@ async function fetchDeploymentStatus(cfg, slug, fetcher = fetch) {
   };
 }
 
-// src/deploy/wait-for-deployment.ts
+// src/deploy/commit-match-settle.ts
+var DEFAULT_REGISTRATION_BOUND_MS = 120000;
 var DEFAULT_POLL_INTERVAL_MS = 5000;
+function realCommitWaitDeps(cfg) {
+  return {
+    fetchStatus: (slug) => fetchDeploymentStatus(cfg, slug),
+    sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
+    now: () => Date.now()
+  };
+}
+function shaMatches(a, b) {
+  if (!a || !b)
+    return false;
+  const x = a.toLowerCase();
+  const y = b.toLowerCase();
+  const n = Math.min(x.length, y.length);
+  if (n < 7)
+    return x === y;
+  return x.slice(0, n) === y.slice(0, n);
+}
+async function readDeploymentBaseline(deps, slug) {
+  let status;
+  try {
+    status = await deps.fetchStatus(slug);
+  } catch {
+    return null;
+  }
+  if (status === null || !status.supported || status.liveDeployment === null)
+    return null;
+  const live = status.liveDeployment;
+  return {
+    id: live.id,
+    commitHash: live.commit?.hash ?? null,
+    createdOn: live.createdOn
+  };
+}
+async function waitForCommitDeployment(args, deps) {
+  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const start = deps.now();
+  const baselineId = args.baseline?.id ?? null;
+  let matchedInProgress = false;
+  for (;; ) {
+    let status;
+    try {
+      status = await deps.fetchStatus(args.slug);
+    } catch {
+      return { kind: "unknown" };
+    }
+    if (status === null)
+      return { kind: "unknown" };
+    if (!status.supported)
+      return { kind: "unsupported" };
+    const live = status.liveDeployment;
+    const elapsed = deps.now() - start;
+    if (live !== null && shaMatches(live.commit?.hash, args.shippedSha)) {
+      if (live.buildStatus === "success") {
+        return { kind: "success", deploymentUrl: live.url };
+      }
+      if (live.buildStatus === "failure") {
+        return { kind: "failure", logExcerpt: live.logExcerpt, failedStage: live.failedStage };
+      }
+      matchedInProgress = true;
+    } else if (args.baseline !== null && live !== null && live.id !== baselineId) {
+      return { kind: "superseded" };
+    } else {
+      if (elapsed >= args.registrationBoundMs)
+        return { kind: "no-new-deployment" };
+    }
+    if (elapsed >= args.settleTimeoutMs) {
+      return matchedInProgress ? { kind: "pending" } : { kind: "not-registered-yet" };
+    }
+    await deps.sleep(pollIntervalMs);
+  }
+}
+
+// src/deploy/wait-for-deployment.ts
+var DEFAULT_POLL_INTERVAL_MS2 = 5000;
 function realWaitDeps(cfg) {
   return {
     fetchStatus: (slug) => fetchDeploymentStatus(cfg, slug),
@@ -3667,7 +3742,7 @@ function realWaitDeps(cfg) {
   };
 }
 async function waitForDeployment(args, deps) {
-  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS2;
   const start = deps.now();
   for (;; ) {
     let status;
@@ -3746,6 +3821,21 @@ async function verifyServed(args, deps = { fetch }) {
   };
 }
 
+// src/deploy/redact-diagnostic.ts
+var MAX_DIAGNOSTIC_LEN = 600;
+var SECRET_KV = /\b(secret|secrets?|token|api[_-]?key|access[_-]?key|secret[_-]?key|private[_-]?key|password|passwd|pwd|authorization|auth[_-]?token|bearer|client[_-]?secret|session)\b(\s*[=:]\s*|\s+)(\S+)/gi;
+var LONG_TOKEN = /[A-Za-z0-9_\-+/.]{28,}={0,2}/g;
+function redactDiagnostic(text, maxLen = MAX_DIAGNOSTIC_LEN) {
+  if (text === undefined || text === null)
+    return "";
+  let t = text.replace(SECRET_KV, (_m, key, sep2) => `${key}${sep2}***`);
+  t = t.replace(LONG_TOKEN, "***");
+  t = t.trim();
+  if (t.length > maxLen)
+    t = `${t.slice(0, maxLen - 1)}…`;
+  return t;
+}
+
 // src/commands/status.ts
 import { readFileSync as readFileSync6 } from "node:fs";
 
@@ -4924,6 +5014,7 @@ function isEnoent(e) {
 
 // src/deploy/verify-deploy.ts
 var VERIFY_MISMATCH_EXIT = 65;
+var NO_DEPLOYMENT_EXIT = 69;
 function readLocalEntrypoint(cwd) {
   for (const rel of ["index.html", join8("static", "index.html")]) {
     const p = join8(cwd, rel);
@@ -4933,6 +5024,70 @@ function readLocalEntrypoint(cwd) {
   return null;
 }
 function realVerifyDeployDeps(cfg) {
+  return {
+    wait: waitForCommitDeployment,
+    verify: verifyServed,
+    readLocalEntrypoint,
+    waitDeps: realCommitWaitDeps(cfg),
+    verifyDeps: { fetch }
+  };
+}
+async function runDeployVerification(args, io, deps) {
+  io.out("");
+  io.out("Verifying a build of your commit went live …");
+  const settle = await deps.wait({
+    slug: args.slug,
+    shippedSha: args.shippedSha,
+    baseline: args.baseline,
+    registrationBoundMs: args.registrationBoundMs,
+    settleTimeoutMs: args.timeoutMs
+  }, deps.waitDeps);
+  switch (settle.kind) {
+    case "unsupported":
+      io.out("  (skipped — this app has no Pages deployment surface)");
+      return 0;
+    case "unknown":
+      io.out(`  (couldn't read deployment status — verify manually with \`launchpad status ${args.slug}\`)`);
+      return 0;
+    case "no-new-deployment":
+      io.err("");
+      io.err("✗ NO NEW DEPLOYMENT WAS CREATED for your commit.");
+      io.err("  Your content committed, but no new deployment was created for it");
+      io.err(`  within ${Math.round(args.registrationBoundMs / 1000)}s — the Pages build may not have run at all.`);
+      io.err("  This usually means the app's build integration needs attention from a");
+      io.err("  platform admin — it can't be fixed from the CLI.");
+      io.err(`  Confirm the live state with \`launchpad status ${args.slug}\`, and report it`);
+      io.err("  with `launchpad bug` if it persists.");
+      return NO_DEPLOYMENT_EXIT;
+    case "superseded":
+      io.out("⚠ Couldn't confirm your commit went live — a newer deployment for a different");
+      io.out(`  commit is now the latest. If ${args.slug} was deployed by someone else too, that's`);
+      io.out(`  expected. Re-check: \`launchpad status ${args.slug}\``);
+      return 0;
+    case "not-registered-yet":
+      io.out("⏳ No deployment for your commit has registered yet — couldn't verify in time.");
+      io.out(`   It may still be queued. Re-check the outcome: \`launchpad status ${args.slug}\``);
+      return 0;
+    case "pending":
+      io.out(`⏳ Your commit's build is still in progress after ${Math.round(args.timeoutMs / 1000)}s — couldn't verify yet.`);
+      io.out(`   Re-check the outcome: \`launchpad status ${args.slug}\``);
+      return 0;
+    case "failure":
+      io.err("✗ The Cloudflare Pages build for your commit FAILED — your content is NOT live.");
+      if (settle.failedStage)
+        io.err(`  failed stage: ${redactDiagnostic(settle.failedStage)}`);
+      if (settle.logExcerpt) {
+        const safe = redactDiagnostic(settle.logExcerpt);
+        if (safe)
+          io.err(`  ${safe}`);
+      }
+      io.err(`  Full logs: \`launchpad status ${args.slug}\``);
+      return 1;
+    case "success":
+      return verifySuccess(args, settle.deploymentUrl, io, deps);
+  }
+}
+function realRedeployVerifyDeps(cfg) {
   return {
     wait: waitForDeployment,
     verify: verifyServed,
@@ -4941,7 +5096,7 @@ function realVerifyDeployDeps(cfg) {
     verifyDeps: { fetch }
   };
 }
-async function runDeployVerification(args, io, deps) {
+async function runRedeployVerification(args, io, deps) {
   io.out("");
   io.out("Verifying the live deployment serves what you shipped …");
   const settle = await deps.wait({ slug: args.slug, timeoutMs: args.timeoutMs }, deps.waitDeps);
@@ -4959,9 +5114,12 @@ async function runDeployVerification(args, io, deps) {
     case "failure":
       io.err("✗ The Cloudflare Pages build FAILED — your content is NOT live.");
       if (settle.failedStage)
-        io.err(`  failed stage: ${settle.failedStage}`);
-      if (settle.logExcerpt)
-        io.err(`  ${settle.logExcerpt}`);
+        io.err(`  failed stage: ${redactDiagnostic(settle.failedStage)}`);
+      if (settle.logExcerpt) {
+        const safe = redactDiagnostic(settle.logExcerpt);
+        if (safe)
+          io.err(`  ${safe}`);
+      }
       io.err(`  Full logs: \`launchpad status ${args.slug}\``);
       return 1;
     case "success":
@@ -5718,13 +5876,13 @@ async function pollUntilApplied(args) {
       continue;
     }
     const prGone = state.openPr === null || state.openPr.number !== args.prNumber;
-    const shaMatches = args.manifestSha === null ? state.hasAppFile && state.lastAppliedManifestSha !== null : state.lastAppliedManifestSha === args.manifestSha;
-    if (prGone && shaMatches) {
+    const shaMatches2 = args.manifestSha === null ? state.hasAppFile && state.lastAppliedManifestSha !== null : state.lastAppliedManifestSha === args.manifestSha;
+    if (prGone && shaMatches2) {
       if (dotsThisLine > 0)
         args.io.out("");
       return { kind: "applied" };
     }
-    if (prGone && !shaMatches && lastPrSeen) {
+    if (prGone && !shaMatches2 && lastPrSeen) {
       if (dotsThisLine > 0)
         args.io.out("");
       return {
@@ -6533,6 +6691,13 @@ async function runModelADeploy(args) {
       provisionTimeoutMs = secs * 1000;
     }
   }
+  let registrationBoundMs = DEFAULT_REGISTRATION_BOUND_MS;
+  const rbFlag = args.argv.find((a) => a.startsWith("--registration-bound="));
+  if (rbFlag !== undefined) {
+    const secs = Number.parseInt(rbFlag.slice("--registration-bound=".length), 10);
+    if (Number.isFinite(secs) && secs > 0)
+      registrationBoundMs = secs * 1000;
+  }
   if (!SLUG_RE5.test(slug)) {
     io.err(`launchpad deploy: invalid slug "${slug}" in manifest — expected ${SLUG_RE5.source}`);
     return 64;
@@ -6545,6 +6710,7 @@ async function runModelADeploy(args) {
     io.err(`launchpad deploy: ${describe14(e)}`);
     return 1;
   }
+  const deployBaseline = noVerify ? null : await readDeploymentBaseline(realCommitWaitDeps(cfg), slug);
   let result;
   try {
     result = await bundleAndDeploy({
@@ -6684,7 +6850,15 @@ async function runModelADeploy(args) {
         io.out(`Run \`launchpad status ${slug}\` to confirm the build outcome (success / failure + log excerpt).`);
         return 0;
       }
-      return runDeployVerification({ slug, cwd, appType, timeoutMs: verifyTimeoutMs }, io, realVerifyDeployDeps(cfg));
+      return runDeployVerification({
+        slug,
+        cwd,
+        appType,
+        shippedSha: success.commit_sha,
+        baseline: deployBaseline,
+        registrationBoundMs,
+        timeoutMs: verifyTimeoutMs
+      }, io, realVerifyDeployDeps(cfg));
     }
   }
 }
@@ -6762,8 +6936,8 @@ async function runRedeploy(opts, io, deps = {}) {
     io.out("re-runs the build. The check below is reachability-only (it can't byte-compare a");
     io.out("transformed bundle) — confirm the app still behaves as expected after it completes.");
   }
-  const verify = deps.runVerification ?? runDeployVerification;
-  const verifyDeps = deps.verifyDeps ?? realVerifyDeployDeps(cfg);
+  const verify = deps.runVerification ?? runRedeployVerification;
+  const verifyDeps = deps.verifyDeps ?? realRedeployVerifyDeps(cfg);
   return verify({ slug, cwd, appType, timeoutMs: opts.verifyTimeoutMs }, io, verifyDeps);
 }
 function readLocalAppType(cwd, file) {

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AA8DA,OAAO,EAGL,4BAA4B,EAC7B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAAa,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,KAAK,EAAS,OAAO,EAAY,MAAM,kBAAkB,CAAC;AAKjE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;AAEjD,eAAO,MAAM,aAAa,EAAE,OAI3B,CAAC;AAEF,UAAU,UAAU;IAClB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAmQD;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAoBpC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAwBpE;AA+KD,2BAA2B;AAC3B,OAAO,EAAE,4BAA4B,EAAE,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAmEA,OAAO,EAGL,4BAA4B,EAC7B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAAa,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,KAAK,EAAS,OAAO,EAAY,MAAM,kBAAkB,CAAC;AAKjE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;AAEjD,eAAO,MAAM,aAAa,EAAE,OAI3B,CAAC;AAEF,UAAU,UAAU;IAClB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAmQD;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAoBpC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAwBpE;AA+KD,2BAA2B;AAC3B,OAAO,EAAE,4BAA4B,EAAE,CAAC"}

package/dist/commands/redeploy.d.ts

@@ -1,6 +1,6 @@
 import { type CliConfig } from "../config.js";
 import type { CliIo, Command, ExitCode } from "../dispatcher.js";
-import { type VerifyDeployArgs, type VerifyDeployDeps } from "../deploy/verify-deploy.js";
+import { type RedeployVerifyArgs, type RedeployVerifyDeps } from "../deploy/verify-deploy.js";
 /** Bot response from `POST /apps/<slug>/redeploy`. */
 export interface RedeployResponse {
     readonly slug: string;
@@ -26,8 +26,8 @@ export interface RedeployDeps {
     readonly fetcher?: typeof fetch;
     readonly cwd?: string;
     /** Override the served-verify step (tests inject a stub). */
-    readonly runVerification?: (args: VerifyDeployArgs, io: CliIo, deps: VerifyDeployDeps) => Promise<ExitCode>;
-    readonly verifyDeps?: VerifyDeployDeps;
+    readonly runVerification?: (args: RedeployVerifyArgs, io: CliIo, deps: RedeployVerifyDeps) => Promise<ExitCode>;
+    readonly verifyDeps?: RedeployVerifyDeps;
 }
 export declare const redeployCommand: Command;
 /**

package/dist/commands/redeploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redeploy.d.ts","sourceRoot":"","sources":["../../src/commands/redeploy.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAS1D,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AAKpC,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,IAAI,EAAE,gBAAgB,EACtB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACxC;AAID,eAAO,MAAM,eAAe,EAAE,OAI7B,CAAC;AAiBF;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,KAAK,EACT,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,QAAQ,CAAC,CAoFnB"}
+{"version":3,"file":"redeploy.d.ts","sourceRoot":"","sources":["../../src/commands/redeploy.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAS1D,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAKpC,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,IAAI,EAAE,kBAAkB,EACxB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,kBAAkB,KACrB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAID,eAAO,MAAM,eAAe,EAAE,OAI7B,CAAC;AAiBF;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,KAAK,EACT,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,QAAQ,CAAC,CAoFnB"}

package/dist/deploy/commit-match-settle.d.ts

@@ -0,0 +1,77 @@
+import type { CliConfig } from "../config.js";
+import { type DeploymentStatusView } from "./deployment-status.js";
+/** Snapshot of the live deployment taken BEFORE deploying, so the waiter can
+ *  tell "the live deployment advanced to my commit" from "nothing changed". */
+export interface DeploymentBaseline {
+    readonly id: string;
+    readonly commitHash: string | null;
+    readonly createdOn: string;
+}
+export type CommitSettleOutcome = {
+    readonly kind: "success";
+    readonly deploymentUrl: string | null;
+} | {
+    readonly kind: "failure";
+    readonly logExcerpt?: string | undefined;
+    readonly failedStage?: string | undefined;
+} | {
+    readonly kind: "pending";
+} | {
+    readonly kind: "no-new-deployment";
+} | {
+    readonly kind: "superseded";
+} | {
+    readonly kind: "not-registered-yet";
+} | {
+    readonly kind: "unsupported";
+} | {
+    readonly kind: "unknown";
+};
+export interface CommitWaitDeps {
+    /** Read the live deployment status (defaults to the real bot call). */
+    readonly fetchStatus: (slug: string) => Promise<DeploymentStatusView | null>;
+    /** Sleep between polls (injected so tests don't actually wait). */
+    readonly sleep: (ms: number) => Promise<void>;
+    /** Monotonic clock in ms (injected so tests control elapsed time). */
+    readonly now: () => number;
+}
+export interface CommitWaitArgs {
+    readonly slug: string;
+    /** The git SHA the deploy just pushed (the bot's `commit_sha`). */
+    readonly shippedSha: string;
+    /** The live deployment as it was BEFORE this deploy (null = first deploy). */
+    readonly baseline: DeploymentBaseline | null;
+    /** How long to wait for a build of MY commit to first REGISTER before
+     *  concluding nothing fired. Must be ≤ settleTimeoutMs for the hard
+     *  "no-new-deployment" verdict to be reachable. */
+    readonly registrationBoundMs: number;
+    /** Total budget; once a build of my commit registers, how long to let it
+     *  settle. */
+    readonly settleTimeoutMs: number;
+    readonly pollIntervalMs?: number;
+}
+/** CF normally registers a github:push build within seconds; 120s is a
+ *  conservative ceiling before we conclude no build fired. Overridable (a
+ *  contended CF queue can be extended via the deploy flag). */
+export declare const DEFAULT_REGISTRATION_BOUND_MS = 120000;
+export declare function realCommitWaitDeps(cfg: CliConfig): CommitWaitDeps;
+/**
+ * Normalised commit-SHA equality. CF's `commit_hash` and the deploy's
+ * `commit_sha` are both the full git SHA of the same commit, but be lenient to
+ * short/long forms by matching on the shorter prefix (min 7 chars, else exact).
+ */
+export declare function shaMatches(a: string | null | undefined, b: string | null | undefined): boolean;
+/**
+ * Read the pre-deploy baseline: the current live deployment, if any. Returns
+ * null for first-ever deploy / container / old bot / a read hiccup — any later
+ * deployment of my commit then counts as an advance (and a transient null here
+ * never blocks the deploy).
+ */
+export declare function readDeploymentBaseline(deps: Pick<CommitWaitDeps, "fetchStatus">, slug: string): Promise<DeploymentBaseline | null>;
+/**
+ * Poll until a build of `shippedSha` settles, or the live deployment proves
+ * nothing built. Never throws on a transient status read; an old bot (null)
+ * degrades to `unknown`, a non-Pages app to `unsupported`.
+ */
+export declare function waitForCommitDeployment(args: CommitWaitArgs, deps: CommitWaitDeps): Promise<CommitSettleOutcome>;
+//# sourceMappingURL=commit-match-settle.d.ts.map

package/dist/deploy/commit-match-settle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-match-settle.d.ts","sourceRoot":"","sources":["../../src/deploy/commit-match-settle.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAyB,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE1F;+EAC+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACnE;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC7E,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7C;;uDAEmD;IACnD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC;kBACc;IACd,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;+DAE+D;AAC/D,eAAO,MAAM,6BAA6B,SAAU,CAAC;AAIrD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,cAAc,CAMjE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAO9F;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EACzC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAcpC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAmD9B"}

package/dist/deploy/redact-diagnostic.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Bound + redact a free-text diagnostic before display. Masks secret-shaped
+ * values and truncates to a safe length. Returns "" for empty/whitespace.
+ */
+export declare function redactDiagnostic(text: string | undefined | null, maxLen?: number): string;
+//# sourceMappingURL=redact-diagnostic.d.ts.map

package/dist/deploy/redact-diagnostic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-diagnostic.d.ts","sourceRoot":"","sources":["../../src/deploy/redact-diagnostic.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,MAAM,SAAqB,GAAG,MAAM,CAOrG"}

package/dist/deploy/verify-deploy.d.ts

@@ -1,28 +1,56 @@
 import type { CliIo, ExitCode } from "../dispatcher.js";
+import { type CommitSettleOutcome, type CommitWaitArgs, type CommitWaitDeps, type DeploymentBaseline } from "./commit-match-settle.js";
 import { type SettleOutcome, type WaitArgs, type WaitDeps } from "./wait-for-deployment.js";
 import { type VerifyVerdict, type VerifyArgs, type VerifyDeps, type VerifyAppType } from "./served-verify.js";
 import type { CliConfig } from "../config.js";
 import { type LifecycleView } from "../commands/status.js";
 /** EX_DATAERR — the live deployment serves content that doesn't match what shipped. */
 export declare const VERIFY_MISMATCH_EXIT = 65;
+/** EX_UNAVAILABLE — the commit committed, but no Cloudflare deployment was ever
+ *  created for it (the Pages build never ran — the ai-audit class). Distinct
+ *  from a build that ran and failed (exit 1) or served-mismatch (65). */
+export declare const NO_DEPLOYMENT_EXIT = 69;
 export interface VerifyDeployArgs {
     readonly slug: string;
     readonly cwd: string;
     readonly appType: VerifyAppType;
+    /** The git SHA this deploy just pushed (the bot's `commit_sha`). */
+    readonly shippedSha: string;
+    /** The live deployment as it was BEFORE this deploy (null = first/none). */
+    readonly baseline: DeploymentBaseline | null;
+    /** How long to wait for a build of this commit to register before
+     *  concluding nothing fired. */
+    readonly registrationBoundMs: number;
+    /** Total settle budget once a build of this commit registers. */
     readonly timeoutMs: number;
 }
 export interface VerifyDeployDeps {
-    readonly wait: (args: WaitArgs, deps: WaitDeps) => Promise<SettleOutcome>;
+    readonly wait: (args: CommitWaitArgs, deps: CommitWaitDeps) => Promise<CommitSettleOutcome>;
     readonly verify: (args: VerifyArgs, deps: VerifyDeps) => Promise<VerifyVerdict>;
     /** Read the local shipped entrypoint (root `index.html`, else `static/index.html`). */
     readonly readLocalEntrypoint: (cwd: string) => Uint8Array | null;
-    readonly waitDeps: WaitDeps;
+    readonly waitDeps: CommitWaitDeps;
     readonly verifyDeps: VerifyDeps;
 }
 /** Real entrypoint reader: prefer root `index.html`, fall back to `static/index.html`. */
 export declare function readLocalEntrypoint(cwd: string): Uint8Array | null;
 export declare function realVerifyDeployDeps(cfg: CliConfig): VerifyDeployDeps;
 export declare function runDeployVerification(args: VerifyDeployArgs, io: CliIo, deps: VerifyDeployDeps): Promise<ExitCode>;
+export interface RedeployVerifyArgs {
+    readonly slug: string;
+    readonly cwd: string;
+    readonly appType: VerifyAppType;
+    readonly timeoutMs: number;
+}
+export interface RedeployVerifyDeps {
+    readonly wait: (args: WaitArgs, deps: WaitDeps) => Promise<SettleOutcome>;
+    readonly verify: (args: VerifyArgs, deps: VerifyDeps) => Promise<VerifyVerdict>;
+    readonly readLocalEntrypoint: (cwd: string) => Uint8Array | null;
+    readonly waitDeps: WaitDeps;
+    readonly verifyDeps: VerifyDeps;
+}
+export declare function realRedeployVerifyDeps(cfg: CliConfig): RedeployVerifyDeps;
+export declare function runRedeployVerification(args: RedeployVerifyArgs, io: CliIo, deps: RedeployVerifyDeps): Promise<ExitCode>;
 export interface FirstDeployVerifyArgs {
     readonly slug: string;
     readonly cwd: string;

package/dist/deploy/verify-deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-deploy.d.ts","sourceRoot":"","sources":["../../src/deploy/verify-deploy.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,QAAQ,EACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3E,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1E,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,uFAAuF;IACvF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAMlE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,gBAAgB,CAQrE;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,gBAAgB,EACtB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CA4BnB;AAqED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,SAAS,GAAG,qBAAqB,CAS/E;AAID,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,qBAAqB,EAC3B,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,QAAQ,CAAC,CAkDnB"}
+{"version":3,"file":"verify-deploy.d.ts","sourceRoot":"","sources":["../../src/deploy/verify-deploy.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,QAAQ,EACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3E,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC;;yEAEyE;AACzE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7C;oCACgC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5F,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,uFAAuF;IACvF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAMlE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,gBAAgB,CAQrE;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,gBAAgB,EACtB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CAgEnB;AAYD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1E,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,SAAS,GAAG,kBAAkB,CAQzE;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,kBAAkB,EACxB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,QAAQ,CAAC,CA+BnB;AAiFD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,SAAS,GAAG,qBAAqB,CAS/E;AAID,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,qBAAqB,EAC3B,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,QAAQ,CAAC,CAkDnB"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.38.1";
+export declare const CLI_VERSION = "0.39.0";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m-kopa/launchpad-cli",
-  "version": "0.38.1",
+  "version": "0.39.0",
   "description": "Launchpad CLI — clone / deploy / review / merge against Launchpad-managed apps. Talks to the portal-bot endpoints (SCOPE-M-760 / T4).",
   "type": "module",
   "bin": {

package/skills/launchpad-content-pr/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-content-pr
 description: Push a content change to a Launchpad app via `launchpad deploy` and verify it shipped via `launchpad status`. Covers the post-first-deploy iteration loop (edit → deploy → verify) — subsequent deploys commit directly to the app repo's main and the Pages build runs asynchronously, so verification is its own step. Use when someone says "push a content change", "ship an update", "/launchpad-content-pr", "verify my deploy", or after `/launchpad-deploy` reports `done` and they want to follow up with an edit.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-deploy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy
 description: Walk a Launchpad user through deploying an app from their local working directory (Model A — `launchpad init` + `launchpad deploy`). Wraps the CLI verbs end-to-end: detects the app shape, scaffolds `launchpad.yaml`, resolves the allowed Entra group via `launchpad groups`, bundles the CWD via `launchpad deploy`, and watches the rollout via `launchpad status`. Use when someone says "deploy a new app", "ship my app to Launchpad", "/launchpad-deploy", "I have an app locally — get it on Launchpad", or any variant. Resume/abandon for legacy in-flight provisioning is at the bottom.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-deploy-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy-status
 description: Show the current provisioning stage + failure reason for a Launchpad app via `launchpad status` (Model A drift + deployment_verified) and `launchpad apps` (lifecycle bucket), or watch provisioning live with `launchpad watch`. Renders the M-892 stage trace for in-flight provisioning, and is the canonical home for `launchpad recover` (repair a terminal-failed app record that is actually live). Use when someone says "what's the status of demo-X", "/launchpad-deploy-status", "is my deploy stuck", "watch my deploy go live", "watch provisioning", "my app says failed but it's serving", or after `/launchpad-deploy` reports a non-`done` terminal stage.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-destroy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-destroy
 description: Tear down a Launchpad app end-to-end via `launchpad destroy` — Cloudflare Pages project, edge-auth wiring (gateway KV/audience entries, or the Access app for `auth: access` apps), custom hostname, platform-repo TF, and the app repo (archive-renamed). Owner-only verb with a two-step destructive confirmation. Use when someone says "destroy this app", "/launchpad-destroy", "tear down `<slug>`", "delete the app", or asks to clean up a smoke-test / orphan / retired app.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-identity/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-identity
 description: Teach an app author how to use the signed-in user's identity inside a Launchpad app — read the gateway-forwarded X-Launchpad-User-Assertion in a Pages Function, VERIFY it with @m-kopa/platform-auth (fail-closed), and show who's logged in (sub/email/name). Use when someone says "who is logged in", "show the current user", "get the user's email in my app", "auth in my launchpad app", "read the user identity", "/launchpad-identity", or is wiring up an /api/me for a gateway-fronted app.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-onboard/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-onboard
 description: One-time setup for the Launchpad CLI + Claude Code skill bundle. Verifies the `launchpad` CLI is installed and current, runs `launchpad whoami` to confirm the session is fresh, and checks the bundled skills are installed and in lock-step with the CLI. Idempotent — safe to re-run any time. Use when someone says "set me up for Launchpad", "I just got a new machine and want to use Launchpad", "/launchpad-onboard", or any of the other launchpad-* skills fails on a prereq check.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-report/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-report
 description: File a bug report or feature request to the Launchpad team's tracker from the CLI. Use when someone reports something broken, hits an error in a launchpad command, or wishes a feature existed — e.g. "this is broken", "report a bug", "can you file that", "I wish launchpad could…", "/launchpad-bug", "/launchpad-feature". Always confirm and show exactly what you'll send before filing; never file silently.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-status
 description: Show whether a Launchpad app's local launchpad.yaml matches what's deployed, and read the deployed manifest. Wraps `launchpad pull` (fetch deployed YAML) and `launchpad status` (drift report). Use when someone says "is my app in sync", "what's deployed", "show drift", "/launchpad-status", "/launchpad-pull", or after `launchpad deploy` to verify the change landed.
-version: 0.38.1
+version: 0.39.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->