@m-kopa/launchpad-cli 0.38.1 → 0.40.0

package/CHANGELOG.md

@@ -6,6 +6,53 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html);
 pre-1.0 minor bumps may carry breaking changes per ADR 0005.
 
+## 0.40.0 — 2026-06-21
+
+Feature (sp-rptndg, PS-1601): `launchpad` now nudges you toward `launchpad bug`
+when a command fails because the **platform** misbehaved — so the reporting verbs
+are discoverable at the moment they're needed, not only to people who already
+know they exist.
+
+- A single one-line, **non-actionable** reminder prints (stderr) on platform
+  faults only: a bot 5xx, a network error, `✗ NO NEW DEPLOYMENT WAS CREATED`
+  (exit 69), or an unexpected crash. Classified by the typed HTTP error, **not**
+  an exit-code allowlist — the common platform faults (5xx / network) are caught
+  and returned as exit 1 inside commands, so an exit-code check would miss them.
+- Stays **quiet** for your-side failures (auth/401, forbidden/403,
+  not-found/404, `ApiError` 4xx, bad input, usage errors) and on non-interactive
+  output (CI, pipes, `--json`).
+- It **never files anything** — filing still shows you the report and asks you to
+  confirm first; the report carries only the last command name, never its args.
+- The `launchpad-deploy` and `launchpad-deploy-status` skills now point an agent
+  at `/launchpad-report` on a platform fault, preserving "never file silently".
+
+No portal-bot change.
+
+## 0.39.0 — 2026-06-20
+
+Feature (sp-bld9kq, PS-1590): `launchpad deploy` now confirms a Cloudflare
+deployment built from the **exact commit you just pushed** actually went live —
+not merely that *some* build succeeded. This closes a silent-failure class where
+a commit landed but triggered **no build at all** (e.g. the app's
+Cloudflare↔GitHub connection was broken) and the deploy reported a false green
+against the stale, still-serving old build (the ai-audit incident).
+
+- Snapshots the live deployment **before** committing, then requires the live
+  deployment to advance to your commit's SHA before reporting success.
+- New outcome **`✗ NO NEW DEPLOYMENT WAS CREATED for your commit.`** (exit `69`)
+  when no deployment registers for your commit within the registration window —
+  it can't be self-fixed from the CLI (needs a platform admin); the message
+  routes you to `launchpad status` + `launchpad bug`.
+- Two new soft (exit `0`) outcomes: *no deployment registered yet* (slow queue /
+  short timeout) and *superseded* (a concurrent deploy of a different commit
+  went live).
+- New `--registration-bound=<seconds>` flag (default `120`) to extend the wait
+  for slow-to-register builds.
+- Build-failure diagnostics (`logExcerpt`) are now **bounded and redacted** —
+  Cloudflare build logs can echo secret values.
+- `launchpad redeploy` keeps its existing verification (it rebuilds the current
+  commit, so commit-SHA matching doesn't apply) — unchanged.
+
 ## 0.38.1 — 2026-06-19
 
 Fix (sp-rpt9kd): `launchpad bug` / `launchpad feature` no longer truncate an

package/dist/cli.js

@@ -19,7 +19,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/version.ts
-var CLI_VERSION = "0.38.1";
+var CLI_VERSION = "0.40.0";
 
 // src/config.ts
 import * as os from "node:os";
@@ -75,6 +75,28 @@ class TransportError extends Error {
   code = "transport_error";
 }
 
+// src/report/fault-signal.ts
+var last = null;
+function recordFault(err) {
+  if (err === null || typeof err !== "object")
+    return;
+  const code = err.code;
+  if (typeof code !== "string")
+    return;
+  const status = err.status;
+  last = typeof status === "number" ? { code, status } : { code };
+}
+function recordedFault(err) {
+  recordFault(err);
+  return err;
+}
+function clearFault() {
+  last = null;
+}
+function peekFault() {
+  return last;
+}
+
 // src/auth/flow.ts
 import { randomBytes as randomBytes4 } from "node:crypto";
 
@@ -838,7 +860,7 @@ async function apiJson(cfg, opts, fetcher = fetch) {
   try {
     parsed = await res.json();
   } catch (e) {
-    throw new TransportError(`bot returned non-JSON body for ${opts.path}: ${describe7(e)}`);
+    throw recordedFault(new TransportError(`bot returned non-JSON body for ${opts.path}: ${describe7(e)}`));
   }
   return parsed;
 }
@@ -880,27 +902,28 @@ async function apiRaw(cfg, opts, fetcher = fetch) {
   try {
     res = await fetcher(url, init);
   } catch (e) {
-    throw new TransportError(`network error calling ${url}: ${describe7(e)}`);
+    throw recordedFault(new TransportError(`network error calling ${url}: ${describe7(e)}`));
   }
   if (res.status === 401) {
     const detail = await peek(res);
-    throw new UnauthenticatedError(`bot returned 401 for ${opts.path}: ${detail} — run \`launchpad login\``);
+    throw recordedFault(new UnauthenticatedError(`bot returned 401 for ${opts.path}: ${detail} — run \`launchpad login\``));
   }
   if (res.status === 403) {
     const detail = await peek(res);
-    throw new ForbiddenError(`bot returned 403 for ${opts.path}: ${detail}`);
+    throw recordedFault(new ForbiddenError(`bot returned 403 for ${opts.path}: ${detail}`));
   }
   if (res.status === 404) {
     const detail = await peek(res);
-    throw new NotFoundError(`bot returned 404 for ${opts.path}: ${detail}`);
+    throw recordedFault(new NotFoundError(`bot returned 404 for ${opts.path}: ${detail}`));
   }
   if (!res.ok) {
     if (opts.nonThrowingStatuses?.includes(res.status) === true) {
       return res;
     }
     const detail = await peek(res);
-    throw new ApiError(`bot returned HTTP ${res.status} for ${opts.path}: ${detail}`, res.status);
+    throw recordedFault(new ApiError(`bot returned HTTP ${res.status} for ${opts.path}: ${detail}`, res.status));
   }
+  clearFault();
   return res;
 }
 async function peek(res) {
@@ -3657,8 +3680,83 @@ async function fetchDeploymentStatus(cfg, slug, fetcher = fetch) {
   };
 }
 
-// src/deploy/wait-for-deployment.ts
+// src/deploy/commit-match-settle.ts
+var DEFAULT_REGISTRATION_BOUND_MS = 120000;
 var DEFAULT_POLL_INTERVAL_MS = 5000;
+function realCommitWaitDeps(cfg) {
+  return {
+    fetchStatus: (slug) => fetchDeploymentStatus(cfg, slug),
+    sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
+    now: () => Date.now()
+  };
+}
+function shaMatches(a, b) {
+  if (!a || !b)
+    return false;
+  const x = a.toLowerCase();
+  const y = b.toLowerCase();
+  const n = Math.min(x.length, y.length);
+  if (n < 7)
+    return x === y;
+  return x.slice(0, n) === y.slice(0, n);
+}
+async function readDeploymentBaseline(deps, slug) {
+  let status;
+  try {
+    status = await deps.fetchStatus(slug);
+  } catch {
+    return null;
+  }
+  if (status === null || !status.supported || status.liveDeployment === null)
+    return null;
+  const live = status.liveDeployment;
+  return {
+    id: live.id,
+    commitHash: live.commit?.hash ?? null,
+    createdOn: live.createdOn
+  };
+}
+async function waitForCommitDeployment(args, deps) {
+  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const start = deps.now();
+  const baselineId = args.baseline?.id ?? null;
+  let matchedInProgress = false;
+  for (;; ) {
+    let status;
+    try {
+      status = await deps.fetchStatus(args.slug);
+    } catch {
+      return { kind: "unknown" };
+    }
+    if (status === null)
+      return { kind: "unknown" };
+    if (!status.supported)
+      return { kind: "unsupported" };
+    const live = status.liveDeployment;
+    const elapsed = deps.now() - start;
+    if (live !== null && shaMatches(live.commit?.hash, args.shippedSha)) {
+      if (live.buildStatus === "success") {
+        return { kind: "success", deploymentUrl: live.url };
+      }
+      if (live.buildStatus === "failure") {
+        return { kind: "failure", logExcerpt: live.logExcerpt, failedStage: live.failedStage };
+      }
+      matchedInProgress = true;
+    } else if (args.baseline !== null && live !== null && live.id !== baselineId) {
+      return { kind: "superseded" };
+    } else {
+      if (elapsed >= args.registrationBoundMs)
+        return { kind: "no-new-deployment" };
+    }
+    if (elapsed >= args.settleTimeoutMs) {
+      return matchedInProgress ? { kind: "pending" } : { kind: "not-registered-yet" };
+    }
+    await deps.sleep(pollIntervalMs);
+  }
+}
+
+// src/deploy/wait-for-deployment.ts
+var DEFAULT_POLL_INTERVAL_MS2 = 5000;
 function realWaitDeps(cfg) {
   return {
     fetchStatus: (slug) => fetchDeploymentStatus(cfg, slug),
@@ -3667,7 +3765,7 @@ function realWaitDeps(cfg) {
   };
 }
 async function waitForDeployment(args, deps) {
-  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS2;
   const start = deps.now();
   for (;; ) {
     let status;
@@ -3746,6 +3844,21 @@ async function verifyServed(args, deps = { fetch }) {
   };
 }
 
+// src/deploy/redact-diagnostic.ts
+var MAX_DIAGNOSTIC_LEN = 600;
+var SECRET_KV = /\b(secret|secrets?|token|api[_-]?key|access[_-]?key|secret[_-]?key|private[_-]?key|password|passwd|pwd|authorization|auth[_-]?token|bearer|client[_-]?secret|session)\b(\s*[=:]\s*|\s+)(\S+)/gi;
+var LONG_TOKEN = /[A-Za-z0-9_\-+/.]{28,}={0,2}/g;
+function redactDiagnostic(text, maxLen = MAX_DIAGNOSTIC_LEN) {
+  if (text === undefined || text === null)
+    return "";
+  let t = text.replace(SECRET_KV, (_m, key, sep2) => `${key}${sep2}***`);
+  t = t.replace(LONG_TOKEN, "***");
+  t = t.trim();
+  if (t.length > maxLen)
+    t = `${t.slice(0, maxLen - 1)}…`;
+  return t;
+}
+
 // src/commands/status.ts
 import { readFileSync as readFileSync6 } from "node:fs";
 
@@ -4924,6 +5037,7 @@ function isEnoent(e) {
 
 // src/deploy/verify-deploy.ts
 var VERIFY_MISMATCH_EXIT = 65;
+var NO_DEPLOYMENT_EXIT = 69;
 function readLocalEntrypoint(cwd) {
   for (const rel of ["index.html", join8("static", "index.html")]) {
     const p = join8(cwd, rel);
@@ -4933,6 +5047,70 @@ function readLocalEntrypoint(cwd) {
   return null;
 }
 function realVerifyDeployDeps(cfg) {
+  return {
+    wait: waitForCommitDeployment,
+    verify: verifyServed,
+    readLocalEntrypoint,
+    waitDeps: realCommitWaitDeps(cfg),
+    verifyDeps: { fetch }
+  };
+}
+async function runDeployVerification(args, io, deps) {
+  io.out("");
+  io.out("Verifying a build of your commit went live …");
+  const settle = await deps.wait({
+    slug: args.slug,
+    shippedSha: args.shippedSha,
+    baseline: args.baseline,
+    registrationBoundMs: args.registrationBoundMs,
+    settleTimeoutMs: args.timeoutMs
+  }, deps.waitDeps);
+  switch (settle.kind) {
+    case "unsupported":
+      io.out("  (skipped — this app has no Pages deployment surface)");
+      return 0;
+    case "unknown":
+      io.out(`  (couldn't read deployment status — verify manually with \`launchpad status ${args.slug}\`)`);
+      return 0;
+    case "no-new-deployment":
+      io.err("");
+      io.err("✗ NO NEW DEPLOYMENT WAS CREATED for your commit.");
+      io.err("  Your content committed, but no new deployment was created for it");
+      io.err(`  within ${Math.round(args.registrationBoundMs / 1000)}s — the Pages build may not have run at all.`);
+      io.err("  This usually means the app's build integration needs attention from a");
+      io.err("  platform admin — it can't be fixed from the CLI.");
+      io.err(`  Confirm the live state with \`launchpad status ${args.slug}\`, and report it`);
+      io.err("  with `launchpad bug` if it persists.");
+      return NO_DEPLOYMENT_EXIT;
+    case "superseded":
+      io.out("⚠ Couldn't confirm your commit went live — a newer deployment for a different");
+      io.out(`  commit is now the latest. If ${args.slug} was deployed by someone else too, that's`);
+      io.out(`  expected. Re-check: \`launchpad status ${args.slug}\``);
+      return 0;
+    case "not-registered-yet":
+      io.out("⏳ No deployment for your commit has registered yet — couldn't verify in time.");
+      io.out(`   It may still be queued. Re-check the outcome: \`launchpad status ${args.slug}\``);
+      return 0;
+    case "pending":
+      io.out(`⏳ Your commit's build is still in progress after ${Math.round(args.timeoutMs / 1000)}s — couldn't verify yet.`);
+      io.out(`   Re-check the outcome: \`launchpad status ${args.slug}\``);
+      return 0;
+    case "failure":
+      io.err("✗ The Cloudflare Pages build for your commit FAILED — your content is NOT live.");
+      if (settle.failedStage)
+        io.err(`  failed stage: ${redactDiagnostic(settle.failedStage)}`);
+      if (settle.logExcerpt) {
+        const safe = redactDiagnostic(settle.logExcerpt);
+        if (safe)
+          io.err(`  ${safe}`);
+      }
+      io.err(`  Full logs: \`launchpad status ${args.slug}\``);
+      return 1;
+    case "success":
+      return verifySuccess(args, settle.deploymentUrl, io, deps);
+  }
+}
+function realRedeployVerifyDeps(cfg) {
   return {
     wait: waitForDeployment,
     verify: verifyServed,
@@ -4941,7 +5119,7 @@ function realVerifyDeployDeps(cfg) {
     verifyDeps: { fetch }
   };
 }
-async function runDeployVerification(args, io, deps) {
+async function runRedeployVerification(args, io, deps) {
   io.out("");
   io.out("Verifying the live deployment serves what you shipped …");
   const settle = await deps.wait({ slug: args.slug, timeoutMs: args.timeoutMs }, deps.waitDeps);
@@ -4959,9 +5137,12 @@ async function runDeployVerification(args, io, deps) {
     case "failure":
       io.err("✗ The Cloudflare Pages build FAILED — your content is NOT live.");
       if (settle.failedStage)
-        io.err(`  failed stage: ${settle.failedStage}`);
-      if (settle.logExcerpt)
-        io.err(`  ${settle.logExcerpt}`);
+        io.err(`  failed stage: ${redactDiagnostic(settle.failedStage)}`);
+      if (settle.logExcerpt) {
+        const safe = redactDiagnostic(settle.logExcerpt);
+        if (safe)
+          io.err(`  ${safe}`);
+      }
       io.err(`  Full logs: \`launchpad status ${args.slug}\``);
       return 1;
     case "success":
@@ -5718,13 +5899,13 @@ async function pollUntilApplied(args) {
       continue;
     }
     const prGone = state.openPr === null || state.openPr.number !== args.prNumber;
-    const shaMatches = args.manifestSha === null ? state.hasAppFile && state.lastAppliedManifestSha !== null : state.lastAppliedManifestSha === args.manifestSha;
-    if (prGone && shaMatches) {
+    const shaMatches2 = args.manifestSha === null ? state.hasAppFile && state.lastAppliedManifestSha !== null : state.lastAppliedManifestSha === args.manifestSha;
+    if (prGone && shaMatches2) {
       if (dotsThisLine > 0)
         args.io.out("");
       return { kind: "applied" };
     }
-    if (prGone && !shaMatches && lastPrSeen) {
+    if (prGone && !shaMatches2 && lastPrSeen) {
       if (dotsThisLine > 0)
         args.io.out("");
       return {
@@ -6533,6 +6714,13 @@ async function runModelADeploy(args) {
       provisionTimeoutMs = secs * 1000;
     }
   }
+  let registrationBoundMs = DEFAULT_REGISTRATION_BOUND_MS;
+  const rbFlag = args.argv.find((a) => a.startsWith("--registration-bound="));
+  if (rbFlag !== undefined) {
+    const secs = Number.parseInt(rbFlag.slice("--registration-bound=".length), 10);
+    if (Number.isFinite(secs) && secs > 0)
+      registrationBoundMs = secs * 1000;
+  }
   if (!SLUG_RE5.test(slug)) {
     io.err(`launchpad deploy: invalid slug "${slug}" in manifest — expected ${SLUG_RE5.source}`);
     return 64;
@@ -6545,6 +6733,7 @@ async function runModelADeploy(args) {
     io.err(`launchpad deploy: ${describe14(e)}`);
     return 1;
   }
+  const deployBaseline = noVerify ? null : await readDeploymentBaseline(realCommitWaitDeps(cfg), slug);
   let result;
   try {
     result = await bundleAndDeploy({
@@ -6684,7 +6873,15 @@ async function runModelADeploy(args) {
         io.out(`Run \`launchpad status ${slug}\` to confirm the build outcome (success / failure + log excerpt).`);
         return 0;
       }
-      return runDeployVerification({ slug, cwd, appType, timeoutMs: verifyTimeoutMs }, io, realVerifyDeployDeps(cfg));
+      return runDeployVerification({
+        slug,
+        cwd,
+        appType,
+        shippedSha: success.commit_sha,
+        baseline: deployBaseline,
+        registrationBoundMs,
+        timeoutMs: verifyTimeoutMs
+      }, io, realVerifyDeployDeps(cfg));
     }
   }
 }
@@ -6762,8 +6959,8 @@ async function runRedeploy(opts, io, deps = {}) {
     io.out("re-runs the build. The check below is reachability-only (it can't byte-compare a");
     io.out("transformed bundle) — confirm the app still behaves as expected after it completes.");
   }
-  const verify = deps.runVerification ?? runDeployVerification;
-  const verifyDeps = deps.verifyDeps ?? realVerifyDeployDeps(cfg);
+  const verify = deps.runVerification ?? runRedeployVerification;
+  const verifyDeps = deps.verifyDeps ?? realRedeployVerifyDeps(cfg);
   return verify({ slug, cwd, appType, timeoutMs: opts.verifyTimeoutMs }, io, verifyDeps);
 }
 function readLocalAppType(cwd, file) {
@@ -13546,6 +13743,52 @@ function printHelp6(io, commands) {
   io.out("silent until the grant session expires.");
 }
 
+// src/report/classify-fault.ts
+var PLATFORM_FAULT_EXIT_CODES = [69];
+function classifyFault(input3) {
+  if (input3.exitCode === 0)
+    return false;
+  if (PLATFORM_FAULT_EXIT_CODES.includes(input3.exitCode))
+    return true;
+  const f = input3.lastFault;
+  if (f === null)
+    return false;
+  if (f.code === "transport_error")
+    return true;
+  if (f.code === "api_error")
+    return (f.status ?? 0) >= 500;
+  return false;
+}
+
+// src/report/report-nudge.ts
+function nudgeSuppressed(ctx) {
+  if (ctx.env.CI)
+    return true;
+  if (!ctx.stderrIsTTY)
+    return true;
+  if (ctx.argv.includes("--json"))
+    return true;
+  const verb = ctx.argv[0];
+  if (verb === "bug" || verb === "feature")
+    return true;
+  return false;
+}
+function printNudge(io) {
+  io.err('This looks like a platform issue, not something you did — you can report it with `launchpad bug "<what you were trying to do>"` (the last command is attached automatically; don\'t paste secrets).');
+}
+function maybeReportNudge(io, ctx) {
+  if (nudgeSuppressed(ctx))
+    return;
+  if (!classifyFault({ exitCode: ctx.exitCode, lastFault: ctx.lastFault }))
+    return;
+  printNudge(io);
+}
+function maybeCrashReportNudge(io, ctx) {
+  if (nudgeSuppressed(ctx))
+    return;
+  printNudge(io);
+}
+
 // src/cli.ts
 var io = {
   out: (line) => {
@@ -13563,6 +13806,13 @@ dispatch(args, io).then((code) => {
   const elapsedMs = Date.now() - startedAt;
   process.exitCode = code;
   notifyAfterCommand(io, args);
+  maybeReportNudge(io, {
+    argv: args,
+    env: process.env,
+    stderrIsTTY: Boolean(process.stderr.isTTY),
+    exitCode: code,
+    lastFault: peekFault()
+  });
   maybeFirstRunNoticeReal(io, args);
   recordAfterCommandReal(args, code, elapsedMs);
 }).catch((err) => {
@@ -13571,6 +13821,11 @@ dispatch(args, io).then((code) => {
   process.stderr.write(`launchpad: unexpected error: ${msg}
 `);
   process.exitCode = 70;
+  maybeCrashReportNudge(io, {
+    argv: args,
+    env: process.env,
+    stderrIsTTY: Boolean(process.stderr.isTTY)
+  });
   maybeFirstRunNoticeReal(io, args);
   recordAfterCommandReal(args, 70, elapsedMs);
 });

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AA8DA,OAAO,EAGL,4BAA4B,EAC7B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAAa,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,KAAK,EAAS,OAAO,EAAY,MAAM,kBAAkB,CAAC;AAKjE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;AAEjD,eAAO,MAAM,aAAa,EAAE,OAI3B,CAAC;AAEF,UAAU,UAAU;IAClB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAmQD;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAoBpC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAwBpE;AA+KD,2BAA2B;AAC3B,OAAO,EAAE,4BAA4B,EAAE,CAAC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAmEA,OAAO,EAGL,4BAA4B,EAC7B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAAa,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACnF,OAAO,KAAK,EAAS,OAAO,EAAY,MAAM,kBAAkB,CAAC;AAKjE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC;AAEjD,eAAO,MAAM,aAAa,EAAE,OAI3B,CAAC;AAEF,UAAU,UAAU;IAClB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAmQD;;;;;;GAMG;AACH,wBAAgB,WAAW,IAAI,MAAM,CAoBpC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAwBpE;AA+KD,2BAA2B;AAC3B,OAAO,EAAE,4BAA4B,EAAE,CAAC"}

package/dist/commands/redeploy.d.ts

@@ -1,6 +1,6 @@
 import { type CliConfig } from "../config.js";
 import type { CliIo, Command, ExitCode } from "../dispatcher.js";
-import { type VerifyDeployArgs, type VerifyDeployDeps } from "../deploy/verify-deploy.js";
+import { type RedeployVerifyArgs, type RedeployVerifyDeps } from "../deploy/verify-deploy.js";
 /** Bot response from `POST /apps/<slug>/redeploy`. */
 export interface RedeployResponse {
     readonly slug: string;
@@ -26,8 +26,8 @@ export interface RedeployDeps {
     readonly fetcher?: typeof fetch;
     readonly cwd?: string;
     /** Override the served-verify step (tests inject a stub). */
-    readonly runVerification?: (args: VerifyDeployArgs, io: CliIo, deps: VerifyDeployDeps) => Promise<ExitCode>;
-    readonly verifyDeps?: VerifyDeployDeps;
+    readonly runVerification?: (args: RedeployVerifyArgs, io: CliIo, deps: RedeployVerifyDeps) => Promise<ExitCode>;
+    readonly verifyDeps?: RedeployVerifyDeps;
 }
 export declare const redeployCommand: Command;
 /**

package/dist/commands/redeploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redeploy.d.ts","sourceRoot":"","sources":["../../src/commands/redeploy.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAS1D,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAC;AAKpC,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,IAAI,EAAE,gBAAgB,EACtB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,gBAAgB,KACnB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CACxC;AAID,eAAO,MAAM,eAAe,EAAE,OAI7B,CAAC;AAiBF;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,KAAK,EACT,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,QAAQ,CAAC,CAoFnB"}
+{"version":3,"file":"redeploy.d.ts","sourceRoot":"","sources":["../../src/commands/redeploy.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAS1D,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAKpC,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,IAAI,EAAE,kBAAkB,EACxB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,kBAAkB,KACrB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC;CAC1C;AAID,eAAO,MAAM,eAAe,EAAE,OAI7B,CAAC;AAiBF;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,EAAE,EAAE,KAAK,EACT,IAAI,GAAE,YAAiB,GACtB,OAAO,CAAC,QAAQ,CAAC,CAoFnB"}

package/dist/deploy/commit-match-settle.d.ts

@@ -0,0 +1,77 @@
+import type { CliConfig } from "../config.js";
+import { type DeploymentStatusView } from "./deployment-status.js";
+/** Snapshot of the live deployment taken BEFORE deploying, so the waiter can
+ *  tell "the live deployment advanced to my commit" from "nothing changed". */
+export interface DeploymentBaseline {
+    readonly id: string;
+    readonly commitHash: string | null;
+    readonly createdOn: string;
+}
+export type CommitSettleOutcome = {
+    readonly kind: "success";
+    readonly deploymentUrl: string | null;
+} | {
+    readonly kind: "failure";
+    readonly logExcerpt?: string | undefined;
+    readonly failedStage?: string | undefined;
+} | {
+    readonly kind: "pending";
+} | {
+    readonly kind: "no-new-deployment";
+} | {
+    readonly kind: "superseded";
+} | {
+    readonly kind: "not-registered-yet";
+} | {
+    readonly kind: "unsupported";
+} | {
+    readonly kind: "unknown";
+};
+export interface CommitWaitDeps {
+    /** Read the live deployment status (defaults to the real bot call). */
+    readonly fetchStatus: (slug: string) => Promise<DeploymentStatusView | null>;
+    /** Sleep between polls (injected so tests don't actually wait). */
+    readonly sleep: (ms: number) => Promise<void>;
+    /** Monotonic clock in ms (injected so tests control elapsed time). */
+    readonly now: () => number;
+}
+export interface CommitWaitArgs {
+    readonly slug: string;
+    /** The git SHA the deploy just pushed (the bot's `commit_sha`). */
+    readonly shippedSha: string;
+    /** The live deployment as it was BEFORE this deploy (null = first deploy). */
+    readonly baseline: DeploymentBaseline | null;
+    /** How long to wait for a build of MY commit to first REGISTER before
+     *  concluding nothing fired. Must be ≤ settleTimeoutMs for the hard
+     *  "no-new-deployment" verdict to be reachable. */
+    readonly registrationBoundMs: number;
+    /** Total budget; once a build of my commit registers, how long to let it
+     *  settle. */
+    readonly settleTimeoutMs: number;
+    readonly pollIntervalMs?: number;
+}
+/** CF normally registers a github:push build within seconds; 120s is a
+ *  conservative ceiling before we conclude no build fired. Overridable (a
+ *  contended CF queue can be extended via the deploy flag). */
+export declare const DEFAULT_REGISTRATION_BOUND_MS = 120000;
+export declare function realCommitWaitDeps(cfg: CliConfig): CommitWaitDeps;
+/**
+ * Normalised commit-SHA equality. CF's `commit_hash` and the deploy's
+ * `commit_sha` are both the full git SHA of the same commit, but be lenient to
+ * short/long forms by matching on the shorter prefix (min 7 chars, else exact).
+ */
+export declare function shaMatches(a: string | null | undefined, b: string | null | undefined): boolean;
+/**
+ * Read the pre-deploy baseline: the current live deployment, if any. Returns
+ * null for first-ever deploy / container / old bot / a read hiccup — any later
+ * deployment of my commit then counts as an advance (and a transient null here
+ * never blocks the deploy).
+ */
+export declare function readDeploymentBaseline(deps: Pick<CommitWaitDeps, "fetchStatus">, slug: string): Promise<DeploymentBaseline | null>;
+/**
+ * Poll until a build of `shippedSha` settles, or the live deployment proves
+ * nothing built. Never throws on a transient status read; an old bot (null)
+ * degrades to `unknown`, a non-Pages app to `unsupported`.
+ */
+export declare function waitForCommitDeployment(args: CommitWaitArgs, deps: CommitWaitDeps): Promise<CommitSettleOutcome>;
+//# sourceMappingURL=commit-match-settle.d.ts.map

package/dist/deploy/commit-match-settle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-match-settle.d.ts","sourceRoot":"","sources":["../../src/deploy/commit-match-settle.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAyB,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE1F;+EAC+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACnE;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GACtC;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAEjC,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAC7E,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,sEAAsE;IACtE,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7C;;uDAEmD;IACnD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC;kBACc;IACd,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;+DAE+D;AAC/D,eAAO,MAAM,6BAA6B,SAAU,CAAC;AAIrD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,SAAS,GAAG,cAAc,CAMjE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAO9F;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,EACzC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAcpC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAmD9B"}

package/dist/deploy/redact-diagnostic.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Bound + redact a free-text diagnostic before display. Masks secret-shaped
+ * values and truncates to a safe length. Returns "" for empty/whitespace.
+ */
+export declare function redactDiagnostic(text: string | undefined | null, maxLen?: number): string;
+//# sourceMappingURL=redact-diagnostic.d.ts.map

package/dist/deploy/redact-diagnostic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-diagnostic.d.ts","sourceRoot":"","sources":["../../src/deploy/redact-diagnostic.ts"],"names":[],"mappings":"AAiBA;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,MAAM,SAAqB,GAAG,MAAM,CAOrG"}

package/dist/deploy/verify-deploy.d.ts

@@ -1,28 +1,56 @@
 import type { CliIo, ExitCode } from "../dispatcher.js";
+import { type CommitSettleOutcome, type CommitWaitArgs, type CommitWaitDeps, type DeploymentBaseline } from "./commit-match-settle.js";
 import { type SettleOutcome, type WaitArgs, type WaitDeps } from "./wait-for-deployment.js";
 import { type VerifyVerdict, type VerifyArgs, type VerifyDeps, type VerifyAppType } from "./served-verify.js";
 import type { CliConfig } from "../config.js";
 import { type LifecycleView } from "../commands/status.js";
 /** EX_DATAERR — the live deployment serves content that doesn't match what shipped. */
 export declare const VERIFY_MISMATCH_EXIT = 65;
+/** EX_UNAVAILABLE — the commit committed, but no Cloudflare deployment was ever
+ *  created for it (the Pages build never ran — the ai-audit class). Distinct
+ *  from a build that ran and failed (exit 1) or served-mismatch (65). */
+export declare const NO_DEPLOYMENT_EXIT = 69;
 export interface VerifyDeployArgs {
     readonly slug: string;
     readonly cwd: string;
     readonly appType: VerifyAppType;
+    /** The git SHA this deploy just pushed (the bot's `commit_sha`). */
+    readonly shippedSha: string;
+    /** The live deployment as it was BEFORE this deploy (null = first/none). */
+    readonly baseline: DeploymentBaseline | null;
+    /** How long to wait for a build of this commit to register before
+     *  concluding nothing fired. */
+    readonly registrationBoundMs: number;
+    /** Total settle budget once a build of this commit registers. */
     readonly timeoutMs: number;
 }
 export interface VerifyDeployDeps {
-    readonly wait: (args: WaitArgs, deps: WaitDeps) => Promise<SettleOutcome>;
+    readonly wait: (args: CommitWaitArgs, deps: CommitWaitDeps) => Promise<CommitSettleOutcome>;
     readonly verify: (args: VerifyArgs, deps: VerifyDeps) => Promise<VerifyVerdict>;
     /** Read the local shipped entrypoint (root `index.html`, else `static/index.html`). */
     readonly readLocalEntrypoint: (cwd: string) => Uint8Array | null;
-    readonly waitDeps: WaitDeps;
+    readonly waitDeps: CommitWaitDeps;
     readonly verifyDeps: VerifyDeps;
 }
 /** Real entrypoint reader: prefer root `index.html`, fall back to `static/index.html`. */
 export declare function readLocalEntrypoint(cwd: string): Uint8Array | null;
 export declare function realVerifyDeployDeps(cfg: CliConfig): VerifyDeployDeps;
 export declare function runDeployVerification(args: VerifyDeployArgs, io: CliIo, deps: VerifyDeployDeps): Promise<ExitCode>;
+export interface RedeployVerifyArgs {
+    readonly slug: string;
+    readonly cwd: string;
+    readonly appType: VerifyAppType;
+    readonly timeoutMs: number;
+}
+export interface RedeployVerifyDeps {
+    readonly wait: (args: WaitArgs, deps: WaitDeps) => Promise<SettleOutcome>;
+    readonly verify: (args: VerifyArgs, deps: VerifyDeps) => Promise<VerifyVerdict>;
+    readonly readLocalEntrypoint: (cwd: string) => Uint8Array | null;
+    readonly waitDeps: WaitDeps;
+    readonly verifyDeps: VerifyDeps;
+}
+export declare function realRedeployVerifyDeps(cfg: CliConfig): RedeployVerifyDeps;
+export declare function runRedeployVerification(args: RedeployVerifyArgs, io: CliIo, deps: RedeployVerifyDeps): Promise<ExitCode>;
 export interface FirstDeployVerifyArgs {
     readonly slug: string;
     readonly cwd: string;

package/dist/deploy/verify-deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-deploy.d.ts","sourceRoot":"","sources":["../../src/deploy/verify-deploy.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,QAAQ,EACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3E,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1E,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,uFAAuF;IACvF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAMlE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,gBAAgB,CAQrE;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,gBAAgB,EACtB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CA4BnB;AAqED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,SAAS,GAAG,qBAAqB,CAS/E;AAID,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,qBAAqB,EAC3B,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,QAAQ,CAAC,CAkDnB"}
+{"version":3,"file":"verify-deploy.d.ts","sourceRoot":"","sources":["../../src/deploy/verify-deploy.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,QAAQ,EACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3E,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC;;yEAEyE;AACzE,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7C;oCACgC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5F,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,uFAAuF;IACvF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAMlE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,gBAAgB,CAQrE;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,gBAAgB,EACtB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,QAAQ,CAAC,CAgEnB;AAYD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1E,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,SAAS,GAAG,kBAAkB,CAQzE;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,kBAAkB,EACxB,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,QAAQ,CAAC,CA+BnB;AAiFD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAChF,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,SAAS,GAAG,qBAAqB,CAS/E;AAID,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,qBAAqB,EAC3B,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,QAAQ,CAAC,CAkDnB"}

package/dist/http/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/http/api-client.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAM9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;;;OAOG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAC1B,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,QAAQ,CAAC,CA2FnB"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../src/http/api-client.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IAC9D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;;;OAOG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,CAAC,EAC7B,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAC1B,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,iBAAiB,EACvB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,QAAQ,CAAC,CA8FnB"}

package/dist/report/classify-fault.d.ts

@@ -0,0 +1,28 @@
+import type { RecordedFault } from "./fault-signal.js";
+/**
+ * Exit codes that are themselves platform-fault signals, independent of any
+ * recorded HTTP fault. Today only 69 = no-new-deployment (sp-bld9kq): the
+ * commit committed but Cloudflare never built it.
+ *
+ * NB the unhandled-crash exit (70, EX_SOFTWARE) is NOT here — it is emitted
+ * only from `cli.ts`'s top-level `.catch`, which nudges directly; a returned
+ * code never carries it.
+ */
+export declare const PLATFORM_FAULT_EXIT_CODES: readonly number[];
+export interface FaultClassifierInput {
+    readonly exitCode: number;
+    readonly lastFault: RecordedFault | null;
+}
+/**
+ * True iff the failure warrants a "file a bug" nudge.
+ *
+ * - exit 0 (incl. the soft pending/superseded/not-registered-yet outcomes)
+ *   is never a fault.
+ * - A platform-fault exit code (69) is a direct signal.
+ * - Otherwise classify by the last typed HTTP fault: `TransportError`
+ *   (network) and `ApiError` with status >= 500 (bot/server 5xx) are platform
+ *   faults; `ApiError` 4xx, 401/403/404, and any non-HTTP failure (local input,
+ *   usage) are NOT.
+ */
+export declare function classifyFault(input: FaultClassifierInput): boolean;
+//# sourceMappingURL=classify-fault.d.ts.map

package/dist/report/classify-fault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-fault.d.ts","sourceRoot":"","sources":["../../src/report/classify-fault.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAAS,CAAC;AAEjE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;CAC1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAUlE"}

package/dist/report/fault-signal.d.ts

@@ -0,0 +1,23 @@
+/** The discriminant + (for `ApiError`) status of the last typed HTTP error. */
+export interface RecordedFault {
+    readonly code: string;
+    readonly status?: number;
+}
+/**
+ * Record the last typed error. Accepts any of the `http/errors.ts` classes
+ * (all carry a string `.code`; `ApiError` also carries `.status`). A non-error
+ * or code-less value is ignored, so a stray throw can never poison the signal.
+ */
+export declare function recordFault(err: unknown): void;
+/**
+ * Record then return the error — sugar for `throw recordedFault(new ApiError(…))`
+ * at the HTTP client throw sites, so recording can't be forgotten next to a throw.
+ */
+export declare function recordedFault<T>(err: T): T;
+/** Clear the recorded fault — called by the HTTP client on a 2xx success. */
+export declare function clearFault(): void;
+/** Read the last recorded fault (null if none / cleared). */
+export declare function peekFault(): RecordedFault | null;
+/** Test-only: reset module state between cases. */
+export declare function _resetFaultForTesting(): void;
+//# sourceMappingURL=fault-signal.d.ts.map

package/dist/report/fault-signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fault-signal.d.ts","sourceRoot":"","sources":["../../src/report/fault-signal.ts"],"names":[],"mappings":"AAgBA,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAM9C;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAG1C;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,IAAI,aAAa,GAAG,IAAI,CAEhD;AAED,mDAAmD;AACnD,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}

package/dist/report/report-nudge.d.ts

@@ -0,0 +1,33 @@
+import type { CliIo } from "../dispatcher.js";
+import type { RecordedFault } from "./fault-signal.js";
+export interface NudgeContext {
+    /** The raw command args; only argv[0] (the verb) is ever read. */
+    readonly argv: readonly string[];
+    readonly env: Record<string, string | undefined>;
+    readonly stderrIsTTY: boolean;
+    readonly exitCode: number;
+    readonly lastFault: RecordedFault | null;
+}
+/** Quiet in non-interactive / machine contexts, and never nudge the report
+ *  verbs themselves. Mirrors update-notifier's isSuppressed. */
+export declare function nudgeSuppressed(ctx: {
+    readonly argv: readonly string[];
+    readonly env: Record<string, string | undefined>;
+    readonly stderrIsTTY: boolean;
+}): boolean;
+/**
+ * Print the nudge for a finished command iff its failure classifies as a
+ * platform fault and we're on an interactive terminal. No-op otherwise.
+ */
+export declare function maybeReportNudge(io: CliIo, ctx: NudgeContext): void;
+/**
+ * Print the nudge for the unhandled-crash path (cli.ts top-level `.catch`,
+ * exit 70). A crash is a platform fault by definition, so no classifier call —
+ * but still TTY/CI-gated and report-verb-skipped.
+ */
+export declare function maybeCrashReportNudge(io: CliIo, ctx: {
+    readonly argv: readonly string[];
+    readonly env: Record<string, string | undefined>;
+    readonly stderrIsTTY: boolean;
+}): void;
+//# sourceMappingURL=report-nudge.d.ts.map

package/dist/report/report-nudge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-nudge.d.ts","sourceRoot":"","sources":["../../src/report/report-nudge.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;CAC1C;AAED;gEACgE;AAChE,wBAAgB,eAAe,CAAC,GAAG,EAAE;IACnC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,GAAG,OAAO,CAOV;AAYD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAInE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;IACpD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B,GAAG,IAAI,CAGP"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.38.1";
+export declare const CLI_VERSION = "0.40.0";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@m-kopa/launchpad-cli",
-  "version": "0.38.1",
+  "version": "0.40.0",
   "description": "Launchpad CLI — clone / deploy / review / merge against Launchpad-managed apps. Talks to the portal-bot endpoints (SCOPE-M-760 / T4).",
   "type": "module",
   "bin": {

package/skills/launchpad-content-pr/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-content-pr
 description: Push a content change to a Launchpad app via `launchpad deploy` and verify it shipped via `launchpad status`. Covers the post-first-deploy iteration loop (edit → deploy → verify) — subsequent deploys commit directly to the app repo's main and the Pages build runs asynchronously, so verification is its own step. Use when someone says "push a content change", "ship an update", "/launchpad-content-pr", "verify my deploy", or after `/launchpad-deploy` reports `done` and they want to follow up with an edit.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-deploy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy
 description: Walk a Launchpad user through deploying an app from their local working directory (Model A — `launchpad init` + `launchpad deploy`). Wraps the CLI verbs end-to-end: detects the app shape, scaffolds `launchpad.yaml`, resolves the allowed Entra group via `launchpad groups`, bundles the CWD via `launchpad deploy`, and watches the rollout via `launchpad status`. Use when someone says "deploy a new app", "ship my app to Launchpad", "/launchpad-deploy", "I have an app locally — get it on Launchpad", or any variant. Resume/abandon for legacy in-flight provisioning is at the bottom.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->
@@ -511,3 +511,18 @@ the in-flight case.
   strips the user JWT and 401s every user (see "Gateway auth").
 - Do **not** `wrangler secret put` for a two-tier app — `launchpad secrets
   push` with `targets: all` seeds both tiers via the bot.
+
+## When a deploy fails because the platform misbehaved
+
+If `launchpad deploy` (or `status`) fails for a reason that is **not** the
+user's — a bot 5xx, a network error, `✗ NO NEW DEPLOYMENT WAS CREATED` /
+exit 69, or an unexpected crash — i.e. it looks like **our** fault, not a typo
+or a missing permission — offer to file it via the **`/launchpad-report`** skill
+(`launchpad bug "<what they were trying to do>"`). The CLI prints a one-line
+nudge on these; offer proactively.
+
+Follow `/launchpad-report`'s rules: **never file silently** — show the user the
+exact title + body you'll send and get their confirmation first, and never paste
+secret-bearing commands/values into the report body. Do **not** offer to file
+for a user-side failure (auth/401, not-found/404, a bad manifest, a dirty tree) —
+fix those instead.

package/skills/launchpad-deploy-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-deploy-status
 description: Show the current provisioning stage + failure reason for a Launchpad app via `launchpad status` (Model A drift + deployment_verified) and `launchpad apps` (lifecycle bucket), or watch provisioning live with `launchpad watch`. Renders the M-892 stage trace for in-flight provisioning, and is the canonical home for `launchpad recover` (repair a terminal-failed app record that is actually live). Use when someone says "what's the status of demo-X", "/launchpad-deploy-status", "is my deploy stuck", "watch my deploy go live", "watch provisioning", "my app says failed but it's serving", or after `/launchpad-deploy` reports a non-`done` terminal stage.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->
@@ -360,3 +360,16 @@ such a link anyway.
   `launchpad apps`. Use `launchpad status <slug> --json` for any
   downstream automation (`launchpad apps` has no `--json`; for
   per-app automation go through `status --json` instead).
+
+## When a status check fails because the platform misbehaved
+
+If `launchpad status` / `watch` / `recover` fails for a reason that is **not**
+the user's — a bot 5xx, a network error, `✗ NO NEW DEPLOYMENT WAS CREATED` /
+exit 69, or an unexpected crash — offer to file it via the
+**`/launchpad-report`** skill (`launchpad bug "<what they were trying to do>"`).
+The CLI prints a one-line nudge on these; offer proactively.
+
+Follow `/launchpad-report`'s rules: **never file silently** — show the exact
+title + body and confirm first, and never paste secret-bearing commands/values
+into the body. Do **not** offer to file for a user-side failure (auth/401,
+not-found/404) — resolve those instead.

package/skills/launchpad-destroy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-destroy
 description: Tear down a Launchpad app end-to-end via `launchpad destroy` — Cloudflare Pages project, edge-auth wiring (gateway KV/audience entries, or the Access app for `auth: access` apps), custom hostname, platform-repo TF, and the app repo (archive-renamed). Owner-only verb with a two-step destructive confirmation. Use when someone says "destroy this app", "/launchpad-destroy", "tear down `<slug>`", "delete the app", or asks to clean up a smoke-test / orphan / retired app.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-identity/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-identity
 description: Teach an app author how to use the signed-in user's identity inside a Launchpad app — read the gateway-forwarded X-Launchpad-User-Assertion in a Pages Function, VERIFY it with @m-kopa/platform-auth (fail-closed), and show who's logged in (sub/email/name). Use when someone says "who is logged in", "show the current user", "get the user's email in my app", "auth in my launchpad app", "read the user identity", "/launchpad-identity", or is wiring up an /api/me for a gateway-fronted app.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-onboard/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-onboard
 description: One-time setup for the Launchpad CLI + Claude Code skill bundle. Verifies the `launchpad` CLI is installed and current, runs `launchpad whoami` to confirm the session is fresh, and checks the bundled skills are installed and in lock-step with the CLI. Idempotent — safe to re-run any time. Use when someone says "set me up for Launchpad", "I just got a new machine and want to use Launchpad", "/launchpad-onboard", or any of the other launchpad-* skills fails on a prereq check.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-report/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-report
 description: File a bug report or feature request to the Launchpad team's tracker from the CLI. Use when someone reports something broken, hits an error in a launchpad command, or wishes a feature existed — e.g. "this is broken", "report a bug", "can you file that", "I wish launchpad could…", "/launchpad-bug", "/launchpad-feature". Always confirm and show exactly what you'll send before filing; never file silently.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->

package/skills/launchpad-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: launchpad-status
 description: Show whether a Launchpad app's local launchpad.yaml matches what's deployed, and read the deployed manifest. Wraps `launchpad pull` (fetch deployed YAML) and `launchpad status` (drift report). Use when someone says "is my app in sync", "what's deployed", "show drift", "/launchpad-status", "/launchpad-pull", or after `launchpad deploy` to verify the change landed.
-version: 0.38.1
+version: 0.40.0
 ---
 
 <!-- BEGIN shell-contract (managed by scripts/sync-skill-contract.sh — edit skills/_partials/shell-contract.md) -->