@pushto/cli 0.2.1 → 0.4.6

package/dist/lib/env-parse.js

@@ -0,0 +1,91 @@
+/**
+ * Parse a .env file's content into a key/value record.
+ *
+ * Every surface that accepts a .env file speaks through this parser:
+ * `pushto deploy` (auto-import on every deploy), `pushto env push`, and the
+ * dashboard's import box + raw editor. Pre-fix the dashboard hand-rolled its
+ * own parse and the two drifted — `export KEY=value` lines (copied from a
+ * .bashrc) were rejected in the dashboard, and inline comments were stored
+ * INTO the value (`PORT=3000 # default port` saved a value of
+ * `3000 # default port`).
+ *
+ * This file exists twice, byte-identical: apps/cli/src/lib/env-parse.ts and
+ * apps/web/lib/env-parse.ts. The web app can't import from apps/cli, and the
+ * published CLI deliberately carries no workspace deps — a vitest pin
+ * (apps/web/lib/__tests__/env-parse.test.ts) keeps the copies in sync
+ * instead. Edit one, copy to the other, or the pin fails.
+ *
+ * Supports:
+ * - bare assignments:        KEY=value
+ * - `export` prefix:         export KEY=value     ← copied from .bashrc
+ * - quoted values:           KEY="value with spaces"  KEY='single quoted'
+ * - inline trailing comment: PORT=3000 # default port (only when value is unquoted)
+ * - blank lines + #-comments
+ *
+ * Does NOT support (and pushto's server-side validator would reject):
+ * - multi-line quoted values
+ * - escape sequences inside double quotes (treated literally)
+ */
+/**
+ * Full parse: valid pairs plus a per-line skip list with reasons, so
+ * consumers can tell the user WHICH lines didn't make it and why instead
+ * of importing silently-fewer vars than the file holds.
+ */
+export const parseEnvContent = (content) => {
+    const vars = {};
+    const skipped = [];
+    const lines = content.split('\n');
+    for (let i = 0; i < lines.length; i++) {
+        let trimmed = lines[i].trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        // Strip the bash-export prefix that people copy from their shell or
+        // .bashrc (`export DATABASE_URL=postgres://...`). Pre-fix this parsed
+        // as key=`export DATABASE_URL` which the server rejects on the
+        // [A-Z_] validator — DATABASE_URL silently never made it remote
+        // despite the success message claiming X vars imported.
+        if (trimmed.startsWith('export ')) {
+            trimmed = trimmed.slice(7).trim();
+        }
+        const eqIdx = trimmed.indexOf('=');
+        if (eqIdx === -1) {
+            skipped.push({ key: `line ${i + 1}`, reason: 'no `=` separator' });
+            continue;
+        }
+        const key = trimmed.slice(0, eqIdx).trim();
+        let value = trimmed.slice(eqIdx + 1).trim();
+        // Strip inline comments AFTER the value (only when not inside quotes).
+        // Common pattern: `PORT=3000 # default port`. The space-before-hash
+        // requirement avoids eating fragments of values that legitimately
+        // contain # (e.g. URLs with fragments, color codes like #ff0000 in
+        // some configs).
+        if (!value.startsWith('"') && !value.startsWith("'")) {
+            const hashIdx = value.indexOf('#');
+            if (hashIdx > 0 && /\s/.test(value[hashIdx - 1] ?? '')) {
+                value = value.slice(0, hashIdx).trim();
+            }
+        }
+        // Strip surrounding quotes (matched pair only; a lone quote stays).
+        if (value.length >= 2 &&
+            ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'")))) {
+            value = value.slice(1, -1);
+        }
+        if (!key) {
+            skipped.push({ key: `line ${i + 1}`, reason: 'missing key before `=`' });
+            continue;
+        }
+        if (!value) {
+            skipped.push({ key, reason: 'empty value' });
+            continue;
+        }
+        vars[key] = value;
+    }
+    return { vars, skipped };
+};
+/**
+ * Record-only view for callers that don't surface skip reasons.
+ * Same parse, skips dropped.
+ */
+export const parseEnvFile = (content) => parseEnvContent(content).vars;
+//# sourceMappingURL=env-parse.js.map

package/dist/lib/env-parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-parse.js","sourceRoot":"","sources":["../../src/lib/env-parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AASH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAkB,EAAE;IACjE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,oEAAoE;QACpE,sEAAsE;QACtE,+DAA+D;QAC/D,gEAAgE;QAChE,wDAAwD;QACxD,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE5C,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,iBAAiB;QACjB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACjD,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAA0B,EAAE,CACtE,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC"}

package/dist/lib/errors.d.ts

@@ -0,0 +1,111 @@
+import type { PushtoError, PushtoErrorFix, PushtoErrorStage } from '@pushto/shared/errors';
+/**
+ * Exit bands. A caller that reads only $? still behaves correctly, because
+ * the band alone says what to do next.
+ */
+export declare const EXIT: {
+    readonly OK: 0;
+    /** reserved for genuinely unclassified failures — never reachable from a known code */
+    readonly UNCLASSIFIED: 1;
+    readonly USAGE: 2;
+    readonly AUTH: 10;
+    readonly NOT_FOUND: 20;
+    readonly INVALID_INPUT: 30;
+    readonly BUILD_FAILED: 40;
+    readonly QUOTA: 50;
+    readonly UPSTREAM: 60;
+};
+/**
+ * The closed registry. Adding a code here is the ONLY way to add one, which
+ * is what stops a call site from inventing an exit number under time
+ * pressure — the failure mode that produced 112 identical exit(1)s.
+ */
+export declare const CODES: {
+    readonly NOT_AUTHENTICATED: {
+        readonly band: 10;
+        readonly retryable: false;
+    };
+    readonly SESSION_EXPIRED: {
+        readonly band: 10;
+        readonly retryable: false;
+    };
+    readonly NO_PROJECT: {
+        readonly band: 20;
+        readonly retryable: false;
+    };
+    readonly PROJECT_NOT_FOUND: {
+        readonly band: 20;
+        readonly retryable: false;
+    };
+    readonly NO_DEPLOYMENT: {
+        readonly band: 20;
+        readonly retryable: false;
+    };
+    readonly BAD_USAGE: {
+        readonly band: 2;
+        readonly retryable: false;
+    };
+    readonly MISSING_ENTRYPOINT: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly NO_FILES: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly ARTIFACT_TOO_LARGE: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly INVALID_ENV_KEY: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly DB_ALREADY_EXISTS: {
+        readonly band: 30;
+        readonly retryable: false;
+    };
+    readonly BUILD_FAILED: {
+        readonly band: 40;
+        readonly retryable: false;
+    };
+    readonly CONTAINER_BOOT_FAILED: {
+        readonly band: 40;
+        readonly retryable: false;
+    };
+    readonly PAID_FEATURE: {
+        readonly band: 50;
+        readonly retryable: false;
+    };
+    readonly QUOTA_EXCEEDED: {
+        readonly band: 50;
+        readonly retryable: false;
+    };
+    readonly NETWORK: {
+        readonly band: 60;
+        readonly retryable: true;
+    };
+    readonly SERVER_ERROR: {
+        readonly band: 60;
+        readonly retryable: true;
+    };
+    readonly DB_PROVISION_FAILED: {
+        readonly band: 60;
+        readonly retryable: true;
+    };
+};
+export type PushtoErrorCode = keyof typeof CODES;
+export declare const exitCodeFor: (code: PushtoErrorCode) => number;
+export declare const isRetryable: (code: PushtoErrorCode) => boolean;
+/**
+ * Build an error carrying the retryable bit derived from its code, so a call
+ * site can never disagree with the registry about whether a retry is sane.
+ * Optional keys are omitted rather than set to undefined, so JSON.stringify
+ * produces a clean payload.
+ */
+export declare const buildError: (code: PushtoErrorCode, human: string, extra?: {
+    fix?: PushtoErrorFix;
+    stage?: PushtoErrorStage;
+    details?: Record<string, unknown>;
+}) => PushtoError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/lib/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE3F;;;GAGG;AACH,eAAO,MAAM,IAAI;;IAEf,uFAAuF;;;;;;;;;CAS/E,CAAC;AAOX;;;;GAIG;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuB2B,CAAC;AAE9C,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,KAAK,CAAC;AAEjD,eAAO,MAAM,WAAW,GAAI,MAAM,eAAe,KAAG,MAA0B,CAAC;AAE/E,eAAO,MAAM,WAAW,GAAI,MAAM,eAAe,KAAG,OAAgC,CAAC;AAErF;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GACrB,MAAM,eAAe,EACrB,OAAO,MAAM,EACb,QAAQ;IAAE,GAAG,CAAC,EAAE,cAAc,CAAC;IAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAC5F,WAMF,CAAC"}

package/dist/lib/errors.js

@@ -0,0 +1,64 @@
+/**
+ * Exit bands. A caller that reads only $? still behaves correctly, because
+ * the band alone says what to do next.
+ */
+export const EXIT = {
+    OK: 0,
+    /** reserved for genuinely unclassified failures — never reachable from a known code */
+    UNCLASSIFIED: 1,
+    USAGE: 2,
+    AUTH: 10,
+    NOT_FOUND: 20,
+    INVALID_INPUT: 30,
+    BUILD_FAILED: 40,
+    QUOTA: 50,
+    UPSTREAM: 60,
+};
+/**
+ * The closed registry. Adding a code here is the ONLY way to add one, which
+ * is what stops a call site from inventing an exit number under time
+ * pressure — the failure mode that produced 112 identical exit(1)s.
+ */
+export const CODES = {
+    NOT_AUTHENTICATED: { band: EXIT.AUTH, retryable: false },
+    SESSION_EXPIRED: { band: EXIT.AUTH, retryable: false },
+    NO_PROJECT: { band: EXIT.NOT_FOUND, retryable: false },
+    PROJECT_NOT_FOUND: { band: EXIT.NOT_FOUND, retryable: false },
+    NO_DEPLOYMENT: { band: EXIT.NOT_FOUND, retryable: false },
+    BAD_USAGE: { band: EXIT.USAGE, retryable: false },
+    MISSING_ENTRYPOINT: { band: EXIT.INVALID_INPUT, retryable: false },
+    NO_FILES: { band: EXIT.INVALID_INPUT, retryable: false },
+    ARTIFACT_TOO_LARGE: { band: EXIT.INVALID_INPUT, retryable: false },
+    INVALID_ENV_KEY: { band: EXIT.INVALID_INPUT, retryable: false },
+    // The request was well-formed but wrong for the current state: the project
+    // already has a live database. Retrying identically cannot succeed, and the
+    // caller's move is to use the existing one, so this sits with invalid input
+    // rather than in the upstream/retryable band.
+    DB_ALREADY_EXISTS: { band: EXIT.INVALID_INPUT, retryable: false },
+    BUILD_FAILED: { band: EXIT.BUILD_FAILED, retryable: false },
+    CONTAINER_BOOT_FAILED: { band: EXIT.BUILD_FAILED, retryable: false },
+    PAID_FEATURE: { band: EXIT.QUOTA, retryable: false },
+    QUOTA_EXCEEDED: { band: EXIT.QUOTA, retryable: false },
+    NETWORK: { band: EXIT.UPSTREAM, retryable: true },
+    SERVER_ERROR: { band: EXIT.UPSTREAM, retryable: true },
+    DB_PROVISION_FAILED: { band: EXIT.UPSTREAM, retryable: true },
+};
+export const exitCodeFor = (code) => CODES[code].band;
+export const isRetryable = (code) => CODES[code].retryable;
+/**
+ * Build an error carrying the retryable bit derived from its code, so a call
+ * site can never disagree with the registry about whether a retry is sane.
+ * Optional keys are omitted rather than set to undefined, so JSON.stringify
+ * produces a clean payload.
+ */
+export const buildError = (code, human, extra) => {
+    const err = { code, human, retryable: isRetryable(code) };
+    if (extra?.fix)
+        err.fix = extra.fix;
+    if (extra?.stage)
+        err.stage = extra.stage;
+    if (extra?.details)
+        err.details = extra.details;
+    return err;
+};
+//# sourceMappingURL=errors.js.map

package/dist/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,EAAE,EAAE,CAAC;IACL,uFAAuF;IACvF,YAAY,EAAE,CAAC;IACf,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,EAAE;IACR,SAAS,EAAE,EAAE;IACb,aAAa,EAAE,EAAE;IACjB,YAAY,EAAE,EAAE;IAChB,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;CACJ,CAAC;AAOX;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;IACxD,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;IACtD,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE;IACtD,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7D,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE;IACzD,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACjD,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAClE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACxD,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAClE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,8CAA8C;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;IACjE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IAC3D,qBAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;IACpE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACpD,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACtD,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;IACjD,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;IACtD,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;CAClB,CAAC;AAI9C,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAqB,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;AAE/E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAqB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,IAAqB,EACrB,KAAa,EACb,KAA6F,EAChF,EAAE;IACf,MAAM,GAAG,GAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IACvE,IAAI,KAAK,EAAE,GAAG;QAAE,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACpC,IAAI,KAAK,EAAE,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1C,IAAI,KAAK,EAAE,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC"}

package/dist/lib/file-walker.d.ts

@@ -0,0 +1,23 @@
+import { type Ignore } from 'ignore';
+export declare const ALWAYS_IGNORE: string[];
+export declare const loadIgnoreFilter: (rootDir: string) => Ignore;
+export interface WalkedFile {
+    /** Absolute filesystem path. */
+    fullPath: string;
+    /** Path relative to rootDir, with forward-slash separators (zip-archive style). */
+    archivePath: string;
+    /** File size in bytes. */
+    sizeBytes: number;
+}
+/**
+ * Walk a project directory using the same ignore semantics deploy.ts uses
+ * to build the deploy zip. Skips symlinks (traversal protection) and
+ * caps depth at 20.
+ *
+ * Both deploy.ts (zip the matched files) and doctor.ts (preview the
+ * matched files: count, total size, biggest) call this. If the two ever
+ * disagreed, doctor's "looks fine" would mismatch deploy's "exceeds limit"
+ * — frustrating to debug. One source = one truth.
+ */
+export declare const walkProject: (rootDir: string) => WalkedFile[];
+//# sourceMappingURL=file-walker.d.ts.map

package/dist/lib/file-walker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-walker.d.ts","sourceRoot":"","sources":["../../src/lib/file-walker.ts"],"names":[],"mappings":"AAEA,OAAe,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAY7C,eAAO,MAAM,aAAa,UA0BzB,CAAC;AAWF,eAAO,MAAM,gBAAgB,GAAI,SAAS,MAAM,KAAG,MAclD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,UAAU,EAyCvD,CAAC"}

package/dist/lib/file-walker.js

@@ -0,0 +1,114 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import ignore from 'ignore';
+// Always-exclude footguns: things that should never be deployed regardless of
+// what the user's gitignore says. Catches secrets, pushto-internal files, and
+// universally non-deployable build/cache artifacts even if the user forgot
+// to gitignore them. Patterns without a slash match at any directory level
+// per gitignore semantics — so `.venv` here also catches `sdks/python/.venv`
+// (the chartmuse-engine case that had us shipping a 76MB zip).
+//
+// Conservative: only includes things that are NEVER the deployable artifact.
+// `dist`, `build`, `out` are intentionally NOT here — for static sites those
+// ARE what gets deployed.
+export const ALWAYS_IGNORE = [
+    // pushto-internal + secrets
+    '.git',
+    '.pushto',
+    '.env',
+    '.env.local',
+    '.env.*.local',
+    '.DS_Store',
+    // Node
+    'node_modules',
+    '.next',
+    '.vercel',
+    '.turbo',
+    // Python — venvs (~hundreds of MB), bytecode (regenerated on import),
+    // and test/type-check caches. None of these are ever deployed.
+    '.venv',
+    'venv',
+    '__pycache__',
+    '*.pyc',
+    '.pytest_cache',
+    '.mypy_cache',
+    '.ruff_cache',
+    // Rust / Java / generic build dirs — multi-GB build output. Source-only
+    // deploys; if the user wants to ship a prebuilt binary, they put it
+    // somewhere other than `target/`.
+    'target',
+];
+// Build an ignore filter that combines ALWAYS_IGNORE with the project's own
+// .gitignore and an optional .pushtoignore. Both files use gitignore syntax
+// (negations, glob patterns, dir-only `foo/` markers).
+//
+// This is what unblocks non-Node projects: every Rust project has `target/`
+// in .gitignore, every Python project has `__pycache__/` and `.venv/`, every
+// Go project has `bin/`. Without reading gitignore, the zipper walked into
+// those and either hit the 500MB cap or ground to a halt on tens of
+// thousands of intermediate files.
+export const loadIgnoreFilter = (rootDir) => {
+    const ig = ignore().add(ALWAYS_IGNORE);
+    const gitignorePath = path.join(rootDir, '.gitignore');
+    if (fs.existsSync(gitignorePath)) {
+        ig.add(fs.readFileSync(gitignorePath, 'utf-8'));
+    }
+    const pushtoignorePath = path.join(rootDir, '.pushtoignore');
+    if (fs.existsSync(pushtoignorePath)) {
+        ig.add(fs.readFileSync(pushtoignorePath, 'utf-8'));
+    }
+    return ig;
+};
+/**
+ * Walk a project directory using the same ignore semantics deploy.ts uses
+ * to build the deploy zip. Skips symlinks (traversal protection) and
+ * caps depth at 20.
+ *
+ * Both deploy.ts (zip the matched files) and doctor.ts (preview the
+ * matched files: count, total size, biggest) call this. If the two ever
+ * disagreed, doctor's "looks fine" would mismatch deploy's "exceeds limit"
+ * — frustrating to debug. One source = one truth.
+ */
+export const walkProject = (rootDir) => {
+    const ig = loadIgnoreFilter(rootDir);
+    const files = [];
+    const MAX_DEPTH = 20;
+    const recurse = (dirPath, prefix, depth) => {
+        if (depth > MAX_DEPTH)
+            return;
+        let entries;
+        try {
+            entries = fs.readdirSync(dirPath, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (entry.isSymbolicLink())
+                continue;
+            const archivePath = prefix ? `${prefix}/${entry.name}` : entry.name;
+            // Gitignore syntax: directory-only patterns (`target/`) match only when
+            // the test path ends in a slash. Always append `/` for directories so
+            // both file and dir patterns resolve correctly.
+            const testPath = entry.isDirectory() ? `${archivePath}/` : archivePath;
+            if (ig.ignores(testPath))
+                continue;
+            const fullPath = path.join(dirPath, entry.name);
+            if (entry.isFile()) {
+                try {
+                    const stat = fs.statSync(fullPath);
+                    files.push({ fullPath, archivePath, sizeBytes: stat.size });
+                }
+                catch {
+                    // skip unreadable files
+                }
+            }
+            else if (entry.isDirectory()) {
+                recurse(fullPath, archivePath, depth + 1);
+            }
+        }
+    };
+    recurse(rootDir, '', 0);
+    return files;
+};
+//# sourceMappingURL=file-walker.js.map

package/dist/lib/file-walker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-walker.js","sourceRoot":"","sources":["../../src/lib/file-walker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAuB,MAAM,QAAQ,CAAC;AAE7C,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,+DAA+D;AAC/D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,0BAA0B;AAC1B,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,4BAA4B;IAC5B,MAAM;IACN,SAAS;IACT,MAAM;IACN,YAAY;IACZ,cAAc;IACd,WAAW;IACX,OAAO;IACP,cAAc;IACd,OAAO;IACP,SAAS;IACT,QAAQ;IACR,sEAAsE;IACtE,+DAA+D;IAC/D,OAAO;IACP,MAAM;IACN,aAAa;IACb,OAAO;IACP,eAAe;IACf,aAAa;IACb,aAAa;IACb,wEAAwE;IACxE,oEAAoE;IACpE,kCAAkC;IAClC,QAAQ;CACT,CAAC;AAEF,4EAA4E;AAC5E,4EAA4E;AAC5E,uDAAuD;AACvD,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,oEAAoE;AACpE,mCAAmC;AACnC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAU,EAAE;IAC1D,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAEvC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAWF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAgB,EAAE;IAC3D,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,EAAE,CAAC;IAErB,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,KAAa,EAAQ,EAAE;QACvE,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO;QAC9B,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YAErC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YACpE,wEAAwE;YACxE,sEAAsE;YACtE,gDAAgD;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;YACvE,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEhD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBAAC,MAAM,CAAC;oBACP,wBAAwB;gBAC1B,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC,CAAC"}

package/dist/lib/interactive.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The single source of truth for whether a command may block on a human.
+ *
+ * No command reads process.stdin.isTTY itself — a guard in
+ * apps/web/scripts/guard-cli-interactive.mjs fails the build if one does.
+ * That centralisation is the whole point: the deploy hang existed because
+ * one call site made this decision privately and got it wrong.
+ */
+export declare const canPrompt: (flags?: {
+    json?: boolean;
+    yes?: boolean;
+}) => boolean;
+//# sourceMappingURL=interactive.d.ts.map

package/dist/lib/interactive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactive.d.ts","sourceRoot":"","sources":["../../src/lib/interactive.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,eAAO,MAAM,SAAS,GAAI,QAAQ;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,KAAG,OAIrE,CAAC"}

package/dist/lib/interactive.js

@@ -0,0 +1,24 @@
+/**
+ * The single source of truth for whether a command may block on a human.
+ *
+ * No command reads process.stdin.isTTY itself — a guard in
+ * apps/web/scripts/guard-cli-interactive.mjs fails the build if one does.
+ * That centralisation is the whole point: the deploy hang existed because
+ * one call site made this decision privately and got it wrong.
+ */
+/** "", "0" and "false" all mean not-set, matching shell convention. */
+const envFlagSet = (name) => {
+    const raw = process.env[name];
+    if (!raw)
+        return false;
+    const v = raw.toLowerCase();
+    return v !== '0' && v !== 'false';
+};
+export const canPrompt = (flags) => {
+    if (flags?.json || flags?.yes)
+        return false;
+    if (envFlagSet('CI') || envFlagSet('PUSHTO_NONINTERACTIVE'))
+        return false;
+    return Boolean(process.stdin.isTTY) && Boolean(process.stdout.isTTY);
+};
+//# sourceMappingURL=interactive.js.map

package/dist/lib/interactive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactive.js","sourceRoot":"","sources":["../../src/lib/interactive.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,uEAAuE;AACvE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAyC,EAAW,EAAE;IAC9E,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,GAAG;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,uBAAuB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1E,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC,CAAC"}

package/dist/lib/output.d.ts

@@ -0,0 +1,24 @@
+import type { PushtoError } from '@pushto/shared/errors';
+import { buildError, type PushtoErrorCode } from './errors.js';
+export interface OutputOpts {
+    json?: boolean;
+}
+/**
+ * Under --json, stdout carries exactly one JSON object and nothing else, so
+ * `pushto deploy --json | jq` works unfiltered. Everything a human would
+ * enjoy — spinners, colour, progress — goes to stderr instead.
+ *
+ * lib/api.ts already wrote its session-expired notice to stderr to keep user
+ * pipes clean; this module finishes that discipline for the whole spine.
+ */
+/** Human-only progress. Never stdout; in json mode it still goes to stderr. */
+export declare const progress: (line: string, opts: OutputOpts) => void;
+/** ora writes to stdout by default. In json mode that would corrupt the payload. */
+export declare const spinnerStream: (opts: OutputOpts) => NodeJS.WriteStream;
+export declare const emitOk: (payload: Record<string, unknown> & {
+    human?: string;
+}, opts: OutputOpts) => void;
+export declare const emitErr: (err: PushtoError, opts: OutputOpts) => void;
+/** Render the error and exit on the band its code derives. Never returns. */
+export declare const fail: (code: PushtoErrorCode, human: string, opts: OutputOpts, extra?: Parameters<typeof buildError>[2]) => never;
+//# sourceMappingURL=output.d.ts.map

package/dist/lib/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAe,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;GAOG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,EAAE,MAAM,UAAU,KAAG,IAEzD,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,aAAa,GAAI,MAAM,UAAU,KAAG,MAAM,CAAC,WACX,CAAC;AAE9C,eAAO,MAAM,MAAM,GACjB,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EACrD,MAAM,UAAU,KACf,IAOF,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,KAAK,WAAW,EAAE,MAAM,UAAU,KAAG,IA4C5D,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,IAAI,GACf,MAAM,eAAe,EACrB,OAAO,MAAM,EACb,MAAM,UAAU,EAChB,QAAQ,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,KACvC,KAGF,CAAC"}

package/dist/lib/output.js

@@ -0,0 +1,71 @@
+import chalk from 'chalk';
+import { buildError, exitCodeFor } from './errors.js';
+/**
+ * Under --json, stdout carries exactly one JSON object and nothing else, so
+ * `pushto deploy --json | jq` works unfiltered. Everything a human would
+ * enjoy — spinners, colour, progress — goes to stderr instead.
+ *
+ * lib/api.ts already wrote its session-expired notice to stderr to keep user
+ * pipes clean; this module finishes that discipline for the whole spine.
+ */
+/** Human-only progress. Never stdout; in json mode it still goes to stderr. */
+export const progress = (line, opts) => {
+    process.stderr.write(opts.json ? `${line}\n` : `${chalk.dim(line)}\n`);
+};
+/** ora writes to stdout by default. In json mode that would corrupt the payload. */
+export const spinnerStream = (opts) => opts.json ? process.stderr : process.stdout;
+export const emitOk = (payload, opts) => {
+    if (opts.json) {
+        const { human: _human, ...rest } = payload;
+        process.stdout.write(`${JSON.stringify({ ok: true, ...rest })}\n`);
+        return;
+    }
+    if (payload.human)
+        process.stdout.write(`${payload.human}\n`);
+};
+export const emitErr = (err, opts) => {
+    if (opts.json) {
+        // `prose` is a human-render hint carrying a {cmd} placeholder. Machines
+        // read label/cmd/href, so it is stripped here rather than shipped as a
+        // half-interpolated string a caller might print raw.
+        const machineFix = err.fix
+            ? {
+                label: err.fix.label,
+                ...(err.fix.cmd ? { cmd: err.fix.cmd } : {}),
+                ...(err.fix.href ? { href: err.fix.href } : {}),
+            }
+            : undefined;
+        // Keys are spread in a fixed order so the payload shape stays stable for
+        // consumers that diff or snapshot it. Optional keys are omitted, not set
+        // to undefined, because JSON.stringify would drop them inconsistently.
+        process.stdout.write(`${JSON.stringify({
+            ok: false,
+            ...(err.stage ? { stage: err.stage } : {}),
+            retryable: err.retryable,
+            ...(err.details ? { details: err.details } : {}),
+            error: { code: err.code, human: err.human, ...(machineFix ? { fix: machineFix } : {}) },
+        })}\n`);
+        return;
+    }
+    process.stderr.write(`${chalk.red(`> ${err.human}`)}\n`);
+    if (!err.fix)
+        return;
+    const target = err.fix.cmd ?? err.fix.href;
+    if (!target)
+        return;
+    // `prose` wins so hand-written copy survives the structured shape: the
+    // sentence is split on its single {cmd} placeholder and the command is
+    // highlighted in place, reproducing the original line exactly.
+    if (err.fix.prose) {
+        const [before = '', after = ''] = err.fix.prose.split('{cmd}');
+        process.stderr.write(`${chalk.dim(`  ${before}`)}${chalk.cyan(target)}${chalk.dim(after)}\n`);
+        return;
+    }
+    process.stderr.write(`${chalk.dim(`  ${err.fix.label}: `)}${chalk.cyan(target)}\n`);
+};
+/** Render the error and exit on the band its code derives. Never returns. */
+export const fail = (code, human, opts, extra) => {
+    emitErr(buildError(code, human, extra), opts);
+    process.exit(exitCodeFor(code));
+};
+//# sourceMappingURL=output.js.map

package/dist/lib/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAwB,MAAM,aAAa,CAAC;AAM5E;;;;;;;GAOG;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAgB,EAAQ,EAAE;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAgB,EAAsB,EAAE,CACpE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;AAE9C,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,OAAqD,EACrD,IAAgB,EACV,EAAE;IACR,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAgB,EAAE,IAAgB,EAAQ,EAAE;IAClE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,wEAAwE;QACxE,uEAAuE;QACvE,qDAAqD;QACrD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG;YACxB,CAAC,CAAC;gBACE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK;gBACpB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD;YACH,CAAC,CAAC,SAAS,CAAC;QACd,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC;YAChB,EAAE,EAAE,KAAK;YACT,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SACxF,CAAC,IAAI,CACP,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,GAAG;QAAE,OAAO;IAErB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,uEAAuE;IACvE,uEAAuE;IACvE,+DAA+D;IAC/D,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CACxE,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACtF,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,IAAqB,EACrB,KAAa,EACb,IAAgB,EAChB,KAAwC,EACjC,EAAE;IACT,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC,CAAC"}

package/dist/lib/prepare-artifact.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The one entry point deploy + preview share: decide whether this
+ * directory deploys as-is (source) or gets built first (artifact).
+ * Keeping it here means `pushto` and `pushto preview` cannot drift —
+ * the exact failure the spec calls out (working deploys, blank previews).
+ */
+export type ArtifactPrep = {
+    kind: 'source';
+    zipDir: string;
+} | {
+    kind: 'artifact';
+    zipDir: string;
+    framework: string;
+    typeWarnings: string | null;
+    cleanup: () => void;
+} | {
+    kind: 'failed';
+    message: string;
+    buildOutput: string;
+};
+export declare const prepareArtifact: (cwd: string, log: (line: string) => void) => Promise<ArtifactPrep>;
+//# sourceMappingURL=prepare-artifact.d.ts.map

package/dist/lib/prepare-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare-artifact.d.ts","sourceRoot":"","sources":["../../src/lib/prepare-artifact.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,GACzG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,eAAO,MAAM,eAAe,GAC1B,KAAK,MAAM,EACX,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAC1B,OAAO,CAAC,YAAY,CAsBtB,CAAC"}

package/dist/lib/prepare-artifact.js

@@ -0,0 +1,26 @@
+import { detectStaticFramework } from './detect-static-framework.js';
+import { runStaticBuild, writeArtifactMeta } from './build-runner.js';
+export const prepareArtifact = async (cwd, log) => {
+    const detection = detectStaticFramework(cwd);
+    if (!detection)
+        return { kind: 'source', zipDir: cwd };
+    const build = await runStaticBuild(cwd, detection, { log });
+    if (!build.ok)
+        return { kind: 'failed', message: build.message, buildOutput: build.buildOutput };
+    const cleanup = writeArtifactMeta(build.outputDir, {
+        framework: detection.framework,
+        spa: detection.spa,
+    });
+    // The marker must never outlive the command: registering cleanup on
+    // process exit covers every failure branch (process.exit calls
+    // included), so no call site can forget it. cleanup is idempotent.
+    process.once('exit', cleanup);
+    return {
+        kind: 'artifact',
+        zipDir: build.outputDir,
+        framework: detection.framework,
+        typeWarnings: build.typeWarnings,
+        cleanup,
+    };
+};
+//# sourceMappingURL=prepare-artifact.js.map

package/dist/lib/prepare-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare-artifact.js","sourceRoot":"","sources":["../../src/lib/prepare-artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAatE,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,GAAW,EACX,GAA2B,EACJ,EAAE;IACzB,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IAEjG,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE;QACjD,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,GAAG,EAAE,SAAS,CAAC,GAAG;KACnB,CAAC,CAAC;IACH,oEAAoE;IACpE,+DAA+D;IAC/D,mEAAmE;IACnE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,KAAK,CAAC,SAAS;QACvB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO;KACR,CAAC;AACJ,CAAC,CAAC"}