@minnovate/shadow-publisher 0.12.1 → 0.12.2

package/dist/claude/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "git-publisher",
   "displayName": "Git Publisher",
-  "version": "0.12.1",
+  "version": "0.12.2",
   "description": "Publish an app folder's Git history to the serverless Git publishing backend and keep it updated (\"publish my app\", \"update my app\", \"fetch the engineered version\").",
   "author": { "name": "git-publisher project" },
   "keywords": ["git", "publish", "deploy", "serverless"]

package/dist/publisher.cjs

@@ -119,6 +119,12 @@ var ERROR_CODES = [
   "ACCESS_CONFLICT",
   // publications (begin / finalize / status)
   "PUBLICATION_NOT_FOUND",
+  // A publication of files whose files are the base's already (ADR-0030).
+  "NOTHING_CHANGED",
+  // A commit the files route was asked for that the repository's refs do not reach (ADR-0030).
+  "COMMIT_NOT_FOUND",
+  // A path the files route was asked for that is not a file of that commit (ADR-0030).
+  "PATH_NOT_FOUND",
   "PUBLICATION_CONFLICT",
   "PUBLICATION_EXPIRED",
   "UPLOAD_MISSING",
@@ -161,6 +167,9 @@ var HTTP_STATUS_FOR_CODE = {
   REPOSITORY_ARCHIVED: 409,
   ACCESS_CONFLICT: 412,
   PUBLICATION_NOT_FOUND: 404,
+  NOTHING_CHANGED: 409,
+  COMMIT_NOT_FOUND: 404,
+  PATH_NOT_FOUND: 404,
   PUBLICATION_CONFLICT: 409,
   PUBLICATION_EXPIRED: 410,
   UPLOAD_MISSING: 409,
@@ -2479,6 +2488,18 @@ function object(shape, params) {
 function extend2(schema, shape) {
   return extend(schema, shape);
 }
+var ZodMiniUnion = /* @__PURE__ */ $constructor("ZodMiniUnion", (inst, def) => {
+  $ZodUnion.init(inst, def);
+  ZodMiniType.init(inst, def);
+});
+// @__NO_SIDE_EFFECTS__
+function union(options, params) {
+  return new ZodMiniUnion({
+    type: "union",
+    options,
+    ...normalizeParams(params)
+  });
+}
 var ZodMiniDiscriminatedUnion = /* @__PURE__ */ $constructor("ZodMiniDiscriminatedUnion", (inst, def) => {
   $ZodDiscriminatedUnion.init(inst, def);
   ZodMiniType.init(inst, def);
@@ -2666,7 +2687,14 @@ var LimitsSchema = object({
    * Named `maxRepositoriesPerPrincipal` before 0.9.0, when it counted a creator's repositories.
    * Defaulted so an older server reads as the default, not a failure.
    */
-  maxRepositoriesPerOrganisation: _default(positiveInt(), 25)
+  maxRepositoriesPerOrganisation: _default(positiveInt(), 25),
+  // ---- a publication of files (ADR-0030) ----
+  /** the UTF-8 bytes of the files one file publication writes; the commit builder is invoked with them, and Lambda takes 6 MB */
+  maxFilePublicationBytes: _default(positiveInt(), 4 * 1024 * 1024),
+  /** the paths one file publication writes and removes, together */
+  maxFilePublicationPaths: _default(positiveInt(), 1e3),
+  /** the largest file `GET …/files` shows as text, one at a time or in a listing; a larger one is `too-large` */
+  maxShownFileBytes: _default(positiveInt(), 512 * 1024)
 });
 var DEFAULT_LIMITS = {
   maxPackBytes: 256 * 1024 * 1024,
@@ -2684,7 +2712,10 @@ var DEFAULT_LIMITS = {
   maxProcessMemoryBytes: 2 * 1024 * 1024 * 1024,
   maxTemporaryBytes: 3 * 512 * 1024 * 1024,
   gitTimeoutMs: 3e5,
-  maxRepositoriesPerOrganisation: 25
+  maxRepositoriesPerOrganisation: 25,
+  maxFilePublicationBytes: 4 * 1024 * 1024,
+  maxFilePublicationPaths: 1e3,
+  maxShownFileBytes: 512 * 1024
 };
 
 // ../protocol/src/storage-schema.ts
@@ -2850,6 +2881,11 @@ var PublicationRequestRecord = object({
   baseGeneration: Generation,
   refUpdates: array(RefUpdate).check(_minLength(1)),
   pack: nullable(PackClaim),
+  /**
+   * A publication of FILES (ADR-0030): the staged file set this service makes the commit from, in
+   * the worker, in the delivery that validates it. Its one ref update names no new commit until then.
+   */
+  files: _default(nullable(PackClaim), null),
   client: nullable(ClientInfo),
   principal: PrincipalId,
   receivedAt: IsoDate,
@@ -3026,6 +3062,63 @@ var BeginPublicationResponse = object({
   upload: nullable(UploadInstructions)
 });
 var PublicationStatusResponse = object({ publication: PublicationSummary });
+var FilePath = string2().check(_minLength(1), _maxLength(1024));
+var FilePublicationRequest = object({
+  publicationId: PublicationId,
+  /** the ref to move; the repository's head ref when left out */
+  ref: optional(RefName),
+  /** the commit the files go on top of: the ref's current target, or null for a ref that does not exist yet */
+  base: nullable(Oid),
+  /** path → the file's whole content, as UTF-8 text */
+  files: record(FilePath, string2()),
+  replace: _default(boolean2(), false),
+  delete: _default(array(FilePath), []),
+  message: string2().check(_minLength(1), _maxLength(4e3)),
+  client: _default(nullable(ClientInfo), null)
+});
+var FilePublicationResponse = object({ publication: PublicationSummary, ref: RefName, commit: nullable(Oid) });
+var StagedFileSet = object({
+  files: record(FilePath, string2()),
+  replace: boolean2(),
+  delete: array(FilePath),
+  message: string2()
+});
+var RepositoryFilesResponse = object({
+  ref: RefName,
+  /** the ref's current target: the base a publication of files goes on */
+  head: nullable(Oid),
+  /** the commit these files are: `head`, or the one asked for */
+  commit: nullable(Oid),
+  files: record(FilePath, string2()),
+  unreadable: array(FilePath),
+  tooLarge: boolean2()
+});
+var FileShown = _enum(["text", "binary", "too-large"]);
+var RepositoryFileListResponse = object({
+  commit: nullable(Oid),
+  entries: array(
+    object({
+      path: FilePath,
+      /** bytes; null for a submodule */
+      bytes: nullable(int()),
+      kind: _enum(["file", "symlink", "submodule"]),
+      /** null for a symlink or a submodule */
+      shown: nullable(FileShown)
+    })
+  )
+});
+var RepositoryFileResponse = object({ path: FilePath, bytes: int(), shown: FileShown, text: nullable(string2()) });
+var FileReadJob = object({
+  repoId: RepoId,
+  at: nullable(Oid),
+  read: union([object({ kind: literal("files") }), object({ kind: literal("list") }), object({ kind: literal("file"), path: FilePath })])
+});
+var FileReadResult = union([
+  object({ kind: literal("files"), answer: RepositoryFilesResponse }),
+  object({ kind: literal("list"), answer: RepositoryFileListResponse }),
+  object({ kind: literal("file"), answer: RepositoryFileResponse }),
+  object({ kind: literal("refused"), code: _enum(ERROR_CODES), message: string2() })
+]);
 var DownloadDescriptor = object({
   url: url(),
   sha256: Sha256Hex,
@@ -3867,14 +3960,14 @@ async function resolveRevs(dir, revs, opts = {}) {
   const out = revs.map(
     (r) => r.startsWith("-") ? null : r.includes("\0") ? new PublisherError("INVALID_REQUEST", "NUL in git argument") : null
   );
-  const ask3 = revs.flatMap((r, i) => out[i] === null && !r.startsWith("-") ? [i] : []);
-  if (ask3.length === 0) {
+  const ask2 = revs.flatMap((r, i) => out[i] === null && !r.startsWith("-") ? [i] : []);
+  if (ask2.length === 0) {
     return out;
   }
-  const { stdout } = await runGit(["cat-file", "--batch-check=%(objectname)", "-Z"], { cwd: dir, input: ask3.map((i) => revs[i]).join("\0") + "\0", ...opts });
+  const { stdout } = await runGit(["cat-file", "--batch-check=%(objectname)", "-Z"], { cwd: dir, input: ask2.map((i) => revs[i]).join("\0") + "\0", ...opts });
   const records = stdout.toString("utf8").split("\0");
   const misses = [];
-  for (const [j, i] of ask3.entries()) {
+  for (const [j, i] of ask2.entries()) {
     const record2 = records[j] ?? "";
     if (record2 && !/ (missing|ambiguous)$/.test(record2)) {
       out[i] = record2;
@@ -5043,26 +5136,27 @@ async function updateEntry(url2, change) {
   await writeCredentials(file);
 }
 
-// ../client/src/portal-refusal.ts
-function portalRefusalCode(body) {
-  if (!isRecord(body)) {
-    return null;
-  }
-  const error2 = body["error"];
-  if (typeof error2 === "string") {
-    return error2 === "" ? null : error2;
-  }
-  if (!isRecord(error2)) {
-    return null;
-  }
-  const { code, message } = error2;
-  return typeof code === "string" && code !== "" && typeof message === "string" ? code : null;
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
 // ../client/src/portal-request.ts
+var PortalSession = class {
+  constructor(credential) {
+    this.credential = credential;
+  }
+  credential;
+  #refreshed = false;
+  async ask(url2, body) {
+    const { token, refresh } = this.credential;
+    for (; ; ) {
+      const answer2 = await askPortal(this.credential.fetch ?? fetch, url2, await token(), body);
+      if (answer2.status === 401 && !this.#refreshed && refresh !== void 0) {
+        this.#refreshed = true;
+        if (await refresh()) {
+          continue;
+        }
+      }
+      return answer2;
+    }
+  }
+};
 async function askPortal(fetchImpl, url2, token, body) {
   try {
     const res = await fetchImpl(url2, {
@@ -5081,10 +5175,26 @@ async function askPortal(fetchImpl, url2, token, body) {
     return { status: 0, body: null };
   }
 }
-function isRecord2(value) {
+function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// ../client/src/portal-refusal.ts
+function portalRefusalCode(body) {
+  if (!isRecord(body)) {
+    return null;
+  }
+  const error2 = body["error"];
+  if (typeof error2 === "string") {
+    return error2 === "" ? null : error2;
+  }
+  if (!isRecord(error2)) {
+    return null;
+  }
+  const { code, message } = error2;
+  return typeof code === "string" && code !== "" && typeof message === "string" ? code : null;
+}
+
 // ../client/src/application.ts
 var APPLICATION_CREATION = "application-creation";
 var ATTEMPTS = 3;
@@ -5093,19 +5203,12 @@ var REFUSALS = {
   "repository-conflict": "REPOSITORY_CONFLICT"
 };
 async function createApplication(input, opts) {
-  const fetchImpl = opts.fetch ?? fetch;
   const url2 = `${input.portal.replace(/\/+$/, "")}/api/v1/terminal/applications`;
   const body = { creationId: input.creationId ?? newCreationId(), name: input.name, defaultBranch: input.defaultBranch ?? "main" };
-  let refreshed = false;
+  const portal = new PortalSession(opts);
   let lastOutage = "";
   for (let attempt = 0; attempt < ATTEMPTS; ) {
-    const answer2 = await askPortal(fetchImpl, url2, await opts.token(), body);
-    if (answer2.status === 401 && !refreshed && opts.refresh !== void 0) {
-      refreshed = true;
-      if (await opts.refresh()) {
-        continue;
-      }
-    }
+    const answer2 = await portal.ask(url2, body);
     if (answer2.status === 200 || answer2.status === 201) {
       return read(answer2.body, answer2.status === 201);
     }
@@ -5131,9 +5234,9 @@ async function createApplication(input, opts) {
   throw new PublisherError("UNAVAILABLE", `could not make the application: ${lastOutage}; run init again`, { retryable: true });
 }
 function read(body, created) {
-  const application = isRecord2(body) ? body["application"] : void 0;
-  const repository = RepositoryInfo.safeParse(isRecord2(body) ? body["repository"] : void 0);
-  if (!isRecord2(application) || typeof application["appId"] !== "string" || !repository.success) {
+  const application = isRecord(body) ? body["application"] : void 0;
+  const repository = RepositoryInfo.safeParse(isRecord(body) ? body["repository"] : void 0);
+  if (!isRecord(application) || typeof application["appId"] !== "string" || !repository.success) {
     throw new PublisherError("UNAVAILABLE", "the portal answered with an application this version cannot read");
   }
   return { appId: application["appId"], created, repository: repository.data };
@@ -5271,7 +5374,7 @@ var RUN_STAGES = ["received", "running", "deploying", "live"];
 var STAGE_WORDS = { received: "received", running: "checked", deploying: "going live", live: "live" };
 var STATES = ["pending", "in-progress", "done", "failed", "skipped"];
 function readStages(run2) {
-  if (!isRecord3(run2)) {
+  if (!isRecord(run2)) {
     return { malformed: "a run that is not an object" };
   }
   if (!Object.hasOwn(run2, "stages")) {
@@ -5284,7 +5387,7 @@ function readStages(run2) {
   const out = [];
   for (const [index, entry] of stages.entries()) {
     const stage = RUN_STAGES[index];
-    if (!isRecord3(entry) || entry["stage"] !== stage) {
+    if (!isRecord(entry) || entry["stage"] !== stage) {
       return { malformed: `stage ${index + 1} is not ${stage}` };
     }
     const state = entry["state"];
@@ -5317,7 +5420,7 @@ function ending(stages) {
 var POLL_INTERVAL_MS = 5e3;
 var FOLLOW_TIMEOUT_MS = 15 * 6e4;
 async function followRun(input, opts) {
-  const fetchImpl = opts.fetch ?? fetch;
+  const portal = new PortalSession(opts);
   const sleep2 = opts.sleep ?? sleep;
   const now = opts.now ?? Date.now;
   const interval2 = opts.intervalMs ?? POLL_INTERVAL_MS;
@@ -5327,16 +5430,9 @@ async function followRun(input, opts) {
   const seen = /* @__PURE__ */ new Map();
   let last = null;
   let lastError = null;
-  let refreshed = false;
   let answered = false;
   for (; ; ) {
-    const answer2 = await ask(fetchImpl, url2, await opts.token());
-    if (answer2.status === 401 && !refreshed && opts.refresh !== void 0) {
-      refreshed = true;
-      if (await opts.refresh()) {
-        continue;
-      }
-    }
+    const answer2 = await portal.ask(url2, void 0);
     if (answer2.status === 401) {
       return { kind: "unauthorized" };
     }
@@ -5369,12 +5465,12 @@ async function followRun(input, opts) {
           opts.onStage?.(entry);
           moved = true;
         }
-        if (isRecord3(run2.run) && run2.run["status"] === "awaiting-approval") {
+        if (isRecord(run2.run) && run2.run["status"] === "awaiting-approval") {
           return { kind: "waiting", stages: read2.stages };
         }
         const end = ending(read2.stages);
         if (end !== null) {
-          const runId = isRecord3(run2.run) && typeof run2.run["runId"] === "string" ? run2.run["runId"] : null;
+          const runId = isRecord(run2.run) && typeof run2.run["runId"] === "string" ? run2.run["runId"] : null;
           return { kind: "settled", ending: end, failedAt: read2.stages.find((s) => s.state === "failed")?.word ?? null, stages: read2.stages, runId };
         }
         if (opts.untilChange === true && moved && answered) {
@@ -5393,7 +5489,7 @@ async function followRun(input, opts) {
   }
 }
 function soleRun(body) {
-  if (!isRecord3(body) || !Array.isArray(body["runs"])) {
+  if (!isRecord(body) || !Array.isArray(body["runs"])) {
     return { detail: "an answer with no list of runs" };
   }
   const runs = body["runs"];
@@ -5402,23 +5498,6 @@ function soleRun(body) {
   }
   return { run: runs[0] ?? null };
 }
-async function ask(fetchImpl, url2, token) {
-  try {
-    const res = await fetchImpl(url2, { headers: { authorization: `Bearer ${token}`, accept: "application/json" }, signal: AbortSignal.timeout(3e4) });
-    const text = await res.text();
-    let body = null;
-    try {
-      body = text ? JSON.parse(text) : null;
-    } catch {
-      if (res.status === 200) {
-        return { status: 200, body: void 0 };
-      }
-    }
-    return { status: res.status, body };
-  } catch {
-    return { status: 0, body: null };
-  }
-}
 function portalForEndpoint(endpoint) {
   let url2;
   try {
@@ -5450,9 +5529,6 @@ async function confirmPortal(portal, endpoint, fetchImpl = fetch) {
     return null;
   }
 }
-function isRecord3(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 
 // ../client/src/preparation.ts
 var PREPARATION = "preparation";
@@ -5466,38 +5542,28 @@ function answerPreparation(input, opts) {
   return call(input, opts, { id: input.id, revision: input.revision, action: "answers", answers: input.answers });
 }
 async function call(input, opts, body) {
-  const fetchImpl = opts.fetch ?? fetch;
   const url2 = `${input.portal.replace(/\/+$/, "")}/api/v1/terminal/repositories/${encodeURIComponent(input.repoId)}/preparation`;
-  let refreshed = false;
-  for (; ; ) {
-    const answer2 = await askPortal(fetchImpl, url2, await opts.token(), body);
-    if (answer2.status === 401 && !refreshed && opts.refresh !== void 0) {
-      refreshed = true;
-      if (await opts.refresh()) {
-        continue;
-      }
-    }
-    if (answer2.status === 401) {
-      return { kind: "unauthorized" };
-    }
-    if (answer2.status === 403) {
-      return { kind: "forbidden" };
-    }
-    if (answer2.status === 409) {
-      return { kind: "moved-on" };
-    }
-    if (answer2.status === 404) {
-      return portalRefusalCode(answer2.body) === "no-such-application" ? { kind: "no-application" } : { kind: "unavailable", detail: "the portal does not serve this address" };
-    }
-    if (answer2.status === 200) {
-      const view = readView(answer2.body);
-      return "detail" in view ? { kind: "malformed", detail: view.detail } : { kind: "view", view };
-    }
-    return { kind: "unavailable", detail: answer2.status === 0 ? "the portal could not be reached" : `the portal answered ${answer2.status}` };
+  const answer2 = await new PortalSession(opts).ask(url2, body);
+  if (answer2.status === 401) {
+    return { kind: "unauthorized" };
   }
+  if (answer2.status === 403) {
+    return { kind: "forbidden" };
+  }
+  if (answer2.status === 409) {
+    return { kind: "moved-on" };
+  }
+  if (answer2.status === 404) {
+    return portalRefusalCode(answer2.body) === "no-such-application" ? { kind: "no-application" } : { kind: "unavailable", detail: "the portal does not serve this address" };
+  }
+  if (answer2.status === 200) {
+    const view = readView(answer2.body);
+    return "detail" in view ? { kind: "malformed", detail: view.detail } : { kind: "view", view };
+  }
+  return { kind: "unavailable", detail: answer2.status === 0 ? "the portal could not be reached" : `the portal answered ${answer2.status}` };
 }
 function readView(body) {
-  if (!isRecord2(body)) {
+  if (!isRecord(body)) {
     return { detail: "an answer that is not a preparation" };
   }
   const { id, revision, status: status2, message, questions, publication } = body;
@@ -5518,12 +5584,12 @@ function readView(body) {
   }
   const read2 = [];
   for (const q of questions) {
-    if (!isRecord2(q) || typeof q["id"] !== "string" || typeof q["text"] !== "string" || !Array.isArray(q["options"]) || q["options"].length === 0) {
+    if (!isRecord(q) || typeof q["id"] !== "string" || typeof q["text"] !== "string" || !Array.isArray(q["options"]) || q["options"].length === 0) {
       return { detail: "a question that cannot be answered" };
     }
     const options = [];
     for (const o of q["options"]) {
-      if (!isRecord2(o) || typeof o["value"] !== "string" || typeof o["label"] !== "string") {
+      if (!isRecord(o) || typeof o["value"] !== "string" || typeof o["label"] !== "string") {
         return { detail: "a question with an unreadable option" };
       }
       options.push({ value: o["value"], label: o["label"] });
@@ -5531,7 +5597,7 @@ function readView(body) {
     read2.push({ id: q["id"], text: q["text"], options });
   }
   let pub = null;
-  if (isRecord2(publication) && typeof publication["status"] === "string" && typeof publication["message"] === "string") {
+  if (isRecord(publication) && typeof publication["status"] === "string" && typeof publication["message"] === "string") {
     pub = { status: publication["status"], message: publication["message"], ...typeof publication["url"] === "string" ? { url: publication["url"] } : {} };
   }
   return { id, revision, status: status2, message, questions: read2, publication: pub, findings: readFindings(body["findings"]) };
@@ -5546,7 +5612,7 @@ function readFindings(value) {
     if (out.length === MAX_FINDINGS) {
       break;
     }
-    if (!isRecord2(f)) {
+    if (!isRecord(f)) {
       continue;
     }
     const kind = text(f["kind"]);
@@ -5572,36 +5638,26 @@ function readFindings(value) {
 // ../client/src/creator-tools.ts
 var CREATOR_TOOLS = "creator-tools";
 async function runCreatorTool(input, opts) {
-  const fetchImpl = opts.fetch ?? fetch;
   const url2 = `${input.portal.replace(/\/+$/, "")}/api/v1/terminal/tools/${encodeURIComponent(input.tool)}`;
-  let refreshed = false;
-  for (; ; ) {
-    const answer2 = await askPortal(fetchImpl, url2, await opts.token(), input.args);
-    if (answer2.status === 401 && !refreshed && opts.refresh !== void 0) {
-      refreshed = true;
-      if (await opts.refresh()) {
-        continue;
-      }
-    }
-    if (answer2.status === 401) {
-      return { kind: "unauthorized" };
-    }
-    if (answer2.status === 403) {
-      return { kind: "forbidden" };
-    }
-    if (answer2.status === 404) {
-      return { kind: "unavailable", detail: "the portal does not serve this tool" };
-    }
-    if (answer2.status !== 200) {
-      return { kind: "unavailable", detail: answer2.status === 0 ? "the portal could not be reached" : `the portal answered ${answer2.status}` };
-    }
-    const body = answer2.body;
-    if (!isRecord2(body) || typeof body["say"] !== "string" || typeof body["next"] !== "string") {
-      return { kind: "malformed", detail: "an answer with no say and next" };
-    }
-    const { say, next, isError, ...fields } = body;
-    return { kind: "answer", answer: { say, next, isError: isError === true, fields } };
+  const answer2 = await new PortalSession(opts).ask(url2, input.args);
+  if (answer2.status === 401) {
+    return { kind: "unauthorized" };
+  }
+  if (answer2.status === 403) {
+    return { kind: "forbidden" };
   }
+  if (answer2.status === 404) {
+    return { kind: "unavailable", detail: "the portal does not serve this tool" };
+  }
+  if (answer2.status !== 200) {
+    return { kind: "unavailable", detail: answer2.status === 0 ? "the portal could not be reached" : `the portal answered ${answer2.status}` };
+  }
+  const body = answer2.body;
+  if (!isRecord(body) || typeof body["say"] !== "string" || typeof body["next"] !== "string") {
+    return { kind: "malformed", detail: "an answer with no say and next" };
+  }
+  const { say, next, isError, ...fields } = body;
+  return { kind: "answer", answer: { say, next, isError: isError === true, fields } };
 }
 
 // ../client/src/onboard.ts
@@ -6874,6 +6930,28 @@ async function discoverEndpoint(portal, fetchImpl = fetch) {
   return endpoint;
 }
 
+// src/portal.ts
+var confirmed = /* @__PURE__ */ new Map();
+async function confirmedPortal(endpoint, opts = {}) {
+  const derived = portalForEndpoint(endpoint);
+  if (derived === null) {
+    return { kind: "none" };
+  }
+  const asked = opts.fetch === void 0 ? confirmed.get(endpoint) ?? confirmPortal(derived, endpoint) : confirmPortal(derived, endpoint, opts.fetch);
+  if (opts.fetch === void 0) {
+    confirmed.set(endpoint, asked);
+  }
+  const config2 = await asked;
+  return config2 === null ? { kind: "unconfirmed", portal: derived } : { kind: "confirmed", portal: derived, terminal: config2.terminal };
+}
+async function portalFor(endpoint, route, opts = {}) {
+  const at = await confirmedPortal(endpoint, opts);
+  if (at.kind !== "confirmed") {
+    return { kind: "no-portal" };
+  }
+  return at.terminal.includes(route) ? { kind: "served", portal: at.portal } : { kind: "no-route", portal: at.portal };
+}
+
 // src/progress.ts
 var SAYS = {
   received: { doing: "Shadow is picking up your changes", done: "Shadow has your changes", still: "still picking up your changes" },
@@ -6974,22 +7052,21 @@ function stageReporter(io) {
 
 // src/follow.ts
 async function followPublication(p, endpoint, o, opts) {
-  const derived = portalForEndpoint(endpoint);
-  const confirmed2 = derived === null ? null : await confirmPortal(derived, endpoint, opts.fetch);
-  const portal = confirmed2 === null ? null : derived;
+  const confirmed2 = await confirmedPortal(endpoint, opts);
+  const portal = confirmed2.kind === "confirmed" ? confirmed2.portal : null;
   const elsewhere = (reason) => ({ kind: "unavailable", reason, portal, hint: inPortal(portal, "Published.", "Follow it") });
-  if (portal === null || confirmed2 === null) {
+  if (portal === null || confirmed2.kind !== "confirmed") {
     return elsewhere("no-portal");
   }
   if (!confirmed2.terminal.includes(RUN_PROGRESS)) {
     const noRoute = { kind: "unavailable", reason: "no-route" };
     return { ...noRoute, portal, hint: progressHint(noRoute, portal) };
   }
-  const refs = Object.entries(o.refs ?? {});
-  if (refs.length !== 1) {
+  const moved = publishedRef(o);
+  if (moved === null) {
     return elsewhere("several-refs");
   }
-  const [ref, commit] = refs[0];
+  const { ref, commit } = moved;
   opts.log("Following it to live: received -> checked -> going live -> live. Ctrl-C stops watching; the publication is saved and carries on without you.");
   const outcome2 = await p.followRun(
     { portal, repoId: o.repoId, publicationId: o.publicationId, ref, commit },
@@ -7010,6 +7087,14 @@ async function followPublication(p, endpoint, o, opts) {
   }
   return { ...outcome2, portal, hint: progressHint(outcome2, portal, answerable), ...next === void 0 ? {} : { next } };
 }
+function publishedRef(o) {
+  const refs = Object.entries(o.refs ?? {});
+  if (refs.length !== 1) {
+    return null;
+  }
+  const [ref, commit] = refs[0];
+  return { ref, commit };
+}
 async function failedChecks(p, portal, repoId, outcome2, served) {
   if (!served || outcome2.kind !== "settled" || outcome2.ending !== "failed" || outcome2.runId === null) {
     return null;
@@ -7109,7 +7194,7 @@ function resolveChoice(answer2, names) {
   }
   return names.find((n) => n.toLowerCase() === a.toLowerCase()) ?? null;
 }
-async function ask2(question2) {
+async function ask(question2) {
   const rl = (0, import_promises11.createInterface)({ input: process.stdin, output: process.stderr });
   try {
     return await rl.question(question2);
@@ -7127,7 +7212,7 @@ ${purpose}
   names.forEach((n, i) => process.stderr.write(`  ${i + 1}) ${n}
 `));
   for (let attempt = 0; attempt < 3; attempt++) {
-    const answer2 = await ask2(`
+    const answer2 = await ask(`
 Which one? [1-${names.length}, or a name] `);
     if (answer2 === null) {
       return null;
@@ -7147,7 +7232,7 @@ Name this connection, so you never have to type ${endpoint} again.
 (for example: prod, dev, staging)
 `);
   for (let attempt = 0; attempt < 3; attempt++) {
-    const answer2 = await ask2(suggested ? `
+    const answer2 = await ask(suggested ? `
 Profile name [${suggested}]: ` : `
 Profile name: `);
     if (answer2 === null) {
@@ -7580,12 +7665,12 @@ var skills = {
 
 // src/init.ts
 async function repositoryForInit(p, endpoint, name, opts = {}) {
-  const portal = portalForEndpoint(endpoint);
-  if (portal === null) {
+  const confirmed2 = await confirmedPortal(endpoint, opts);
+  if (confirmed2.kind === "none") {
     return { repoId: (await p.createRepository({ name, grants: [] })).repoId, appId: null };
   }
-  const confirmed2 = await confirmPortal(portal, endpoint, opts.fetch);
-  if (confirmed2 === null) {
+  const { portal } = confirmed2;
+  if (confirmed2.kind === "unconfirmed") {
     throw new PublisherError("UNAVAILABLE", `could not confirm that ${portal} publishes to ${endpoint}; run init again`, { retryable: true });
   }
   if (!confirmed2.terminal.includes(APPLICATION_CREATION)) {
@@ -7745,24 +7830,6 @@ function folderFor(name) {
   return slug2 === "" ? "app" : slug2;
 }
 
-// src/portal.ts
-var confirmed = /* @__PURE__ */ new Map();
-async function portalFor(endpoint, route, opts = {}) {
-  const derived = portalForEndpoint(endpoint);
-  if (derived === null) {
-    return { kind: "no-portal" };
-  }
-  const asked = opts.fetch === void 0 ? confirmed.get(endpoint) ?? confirmPortal(derived, endpoint) : confirmPortal(derived, endpoint, opts.fetch);
-  if (opts.fetch === void 0) {
-    confirmed.set(endpoint, asked);
-  }
-  const config2 = await asked;
-  if (config2 === null) {
-    return { kind: "no-portal" };
-  }
-  return config2.terminal.includes(route) ? { kind: "served", portal: derived } : { kind: "no-route", portal: derived };
-}
-
 // src/question.ts
 async function questionAt(p, endpoint, repoId, opts = {}) {
   const at = await portalAt(endpoint, opts);
@@ -8043,11 +8110,11 @@ async function answerSuggestion(inv, p, endpoint, repoId, o) {
   if (id === void 0 || repoId === void 0 || o === null || o.state !== "accepted" || o.publicationId === null) {
     return null;
   }
-  const ref = "refs/heads/main";
-  const commit = o.refs?.[ref];
-  if (commit === void 0) {
+  const moved = publishedRef(o);
+  if (moved === null) {
     return null;
   }
+  const { ref, commit } = moved;
   return printed(
     await creatorTool(p, endpoint, "resolve_suggestion", { app: repoId, suggestion: id, status: "done", publication: { publicationId: o.publicationId, ref, commit } })
   );
@@ -8163,6 +8230,9 @@ var EXIT_CODE = {
   REPOSITORY_ARCHIVED: 1,
   ACCESS_CONFLICT: 1,
   PUBLICATION_NOT_FOUND: 1,
+  NOTHING_CHANGED: 1,
+  COMMIT_NOT_FOUND: 1,
+  PATH_NOT_FOUND: 1,
   PUBLICATION_CONFLICT: 1,
   PUBLICATION_EXPIRED: 1,
   UPLOAD_MISSING: 1,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minnovate/shadow-publisher",
-  "version": "0.12.1",
+  "version": "0.12.2",
   "description": "publisher: publish an app's Git history to the serverless Git backend",
   "license": "Apache-2.0",
   "type": "module",