@smoothbricks/cli 0.10.7 → 0.10.8

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAOA,wBAAsB,MAAM,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAexE"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AASA,wBAAsB,MAAM,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAexE"}

package/dist/cli.js

@@ -2,7 +2,9 @@ import { Command, CommanderError } from 'commander';
 import { variants } from './generate/index.js';
 import { cliPackageVersion } from './lib/cli-package.js';
 import { findRepoRoot } from './lib/run.js';
+import { ensureChromium } from './playwright/index.js';
 import { resolvePrConflicts } from './pr/index.js';
+import { cleanupPullRequest, deployEnvironment } from './wrangler/deploy-environment.js';
 import { scaffold } from './wrangler/scaffold.js';
 export async function runCli(argv = process.argv.slice(2)) {
     const program = buildProgram();
@@ -307,7 +309,7 @@ function buildProgram() {
     });
     githubCi
         .command('nx-deploy')
-        .requiredOption('--configuration <configuration>')
+        .option('--environment <environment>', 'explicit staging, production, or prN override')
         .option('--mode <mode>', 'auto, affected, or run-many', 'run-many')
         .option('--name <name>')
         .option('--step <step>')
@@ -327,6 +329,14 @@ function buildProgram() {
             process.exitCode = exitCode;
         }
     });
+    const playwright = program.command('playwright').description('Manage Playwright browsers');
+    const playwrightEnsure = playwright.command('ensure').description('Ensure a Playwright browser is available');
+    playwrightEnsure
+        .command('chromium')
+        .description('Ensure Chromium is available for browser tests')
+        .action(async () => {
+        await ensureChromium();
+    });
     const wrangler = program.command('wrangler').description('Cloudflare wrangler project helpers');
     wrangler
         .command('scaffold <project>')
@@ -335,6 +345,18 @@ function buildProgram() {
         .action(async (project, options) => {
         scaffold(await findRepoRoot(), project, { force: options.force });
     });
+    wrangler
+        .command('deploy-environment')
+        .requiredOption('--environment <environment>', 'staging, production, or prN')
+        .action(async (options) => {
+        await deployEnvironment(process.cwd(), options.environment);
+    });
+    wrangler
+        .command('cleanup-pr')
+        .requiredOption('--pr <number>', 'pull-request number')
+        .action(async (options) => {
+        await cleanupPullRequest(process.cwd(), Number(options.pr));
+    });
     return program;
 }
 function booleanOption(value) {

package/dist/github-ci/index.d.ts

@@ -1,5 +1,21 @@
 import { type ProjectTargets } from '../nx/index.js';
+import { type EnvironmentToken } from '../wrangler/environment.js';
 import type { NxTargetRun } from './outputs.js';
+export interface GithubActionsEventPayload {
+    action?: string;
+    repository?: {
+        default_branch?: string;
+        full_name?: string;
+    };
+    pull_request?: {
+        number?: number;
+        head?: {
+            repo?: {
+                full_name?: string;
+            };
+        };
+    };
+}
 type NxSmartMode = 'auto' | 'affected' | 'run-many';
 export declare function cleanupGithubCiCache(root: string): Promise<void>;
 export declare function nxSmartArgs(target: string, mode: 'affected' | 'run-many', configuration?: string): string[];
@@ -28,12 +44,36 @@ export declare function nxRunManyArgs(run: NxTargetRun, configuration?: string):
 export declare function readGitHeadSha(root: string): Promise<string>;
 export declare function githubCiNxRunMany(root: string, options: NxRunManyOptions): Promise<void>;
 export declare function githubCiApplyOutputs(root: string, directories: string[], expectedSourceSha: string): Promise<void>;
-export declare function githubCiNxDeploy(root: string, options: {
-    configuration: string;
+export interface GithubCiNxDeployOptions {
+    environment?: string;
     mode?: NxSmartMode;
     name?: string;
     step?: string;
     verify?: boolean;
-}): Promise<void>;
+}
+export interface GithubCiNxDeployDependencies {
+    listProjects?: (root: string, target: string, mode: 'affected' | 'run-many') => Promise<string[]>;
+    runNx?: (args: string[], root: string) => Promise<number>;
+    appendSummary?: (summaryPath: string, content: string) => Promise<void>;
+    publishDeployment?: (environment: `pr${number}`, url: string) => Promise<void>;
+    setStatus?: (state: 'pending' | 'success' | 'failure') => Promise<void>;
+    processEnv?: NodeJS.ProcessEnv;
+    eventPayload?: GithubActionsEventPayload;
+}
+export declare function githubCiNxDeploy(root: string, options: GithubCiNxDeployOptions, dependencies?: GithubCiNxDeployDependencies): Promise<void>;
+export declare function resolveDeploymentEnvironment(explicit: string | undefined, environment: NodeJS.ProcessEnv, event: GithubActionsEventPayload | undefined): EnvironmentToken;
+export declare function selectEnvironmentDeployProjects(candidates: string[], loadProject: (project: string) => Promise<unknown>): Promise<string[]>;
+export interface GithubApiProcessResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export interface GithubApiProcessRunner {
+    run(args: string[], input: string, cwd: string): Promise<GithubApiProcessResult>;
+}
+export declare class NodeGithubApiProcessRunner implements GithubApiProcessRunner {
+    run(args: string[], input: string, cwd: string): Promise<GithubApiProcessResult>;
+}
+export declare function publishGithubDeployment(environment: `pr${number}`, url: string, processEnvironment: NodeJS.ProcessEnv, runner?: GithubApiProcessRunner): Promise<void>;
 export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/github-ci/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/github-ci/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,cAAc,EAAsB,MAAM,gBAAgB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAmBhD,KAAK,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAKpD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtE;AAmFD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAO3G;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACpG,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,gBAAgB,GAAG,oBAAoB,CAmD9G;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAwC/E;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAehF;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlE;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa9F;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC,CAGf;AA0CD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACrG,OAAO,CAAC,IAAI,CAAC,CA0Bf"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/github-ci/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,cAAc,EAAsB,MAAM,gBAAgB,CAAC;AACzE,OAAO,EACL,KAAK,gBAAgB,EAItB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE;QACX,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE;YACL,IAAI,CAAC,EAAE;gBACL,SAAS,CAAC,EAAE,MAAM,CAAC;aACpB,CAAC;SACH,CAAC;KACH,CAAC;CACH;AAkBD,KAAK,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAKpD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtE;AAmFD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAO3G;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACpG,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,gBAAgB,GAAG,oBAAoB,CAmD9G;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,CAwC/E;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAehF;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGlE;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa9F;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC,CAGf;AA0CD,MAAM,WAAW,uBAAuB;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClG,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,YAAY,CAAC,EAAE,yBAAyB,CAAC;CAC1C;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,uBAAuB,EAChC,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,IAAI,CAAC,CA0Ef;AAiCD,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,KAAK,EAAE,yBAAyB,GAAG,SAAS,GAC3C,gBAAgB,CAsBlB;AAiCD,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,EAAE,EACpB,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GACjD,OAAO,CAAC,MAAM,EAAE,CAAC,CAYnB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAClF;AAED,qBAAa,0BAA2B,YAAW,sBAAsB;IACvE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAmB/E;CACF;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,KAAK,MAAM,EAAE,EAC1B,GAAG,EAAE,MAAM,EACX,kBAAkB,EAAE,MAAM,CAAC,UAAU,EACrC,MAAM,GAAE,sBAAyD,GAChE,OAAO,CAAC,IAAI,CAAC,CA+Df"}

package/dist/github-ci/index.js

@@ -1,3 +1,4 @@
+import { spawn } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
 import { appendFile, mkdtemp, realpath, rename, rm } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
@@ -6,22 +7,35 @@ import typia from 'typia';
 import { parseStringArrayText } from '../lib/json.js';
 import { decode, run, runStatus } from '../lib/run.js';
 import { readProjectTargets } from '../nx/index.js';
+import { isPullRequestEnvironment, parseEnvironmentToken, pullRequestEnvironment, } from '../wrangler/environment.js';
 const parseGithubActionsEvent = (() => {
-    const _io0 = input => undefined === input.repository || "object" === typeof input.repository && null !== input.repository && false === Array.isArray(input.repository) && _io1(input.repository);
-    const _io1 = input => undefined === input.default_branch || "string" === typeof input.default_branch;
+    const _ip0 = input => undefined === input["full_name"] || "string" === typeof input["full_name"];
+    const _io0 = input => (undefined === input.action || "string" === typeof input.action) && (undefined === input.repository || "object" === typeof input.repository && null !== input.repository && false === Array.isArray(input.repository) && _io1(input.repository)) && (undefined === input.pull_request || "object" === typeof input.pull_request && null !== input.pull_request && false === Array.isArray(input.pull_request) && _io2(input.pull_request));
+    const _io1 = input => (undefined === input.default_branch || "string" === typeof input.default_branch) && _ip0(input);
+    const _io2 = input => (undefined === input.number || "number" === typeof input.number) && (undefined === input.head || "object" === typeof input.head && null !== input.head && false === Array.isArray(input.head) && _io3(input.head));
+    const _io3 = input => undefined === input.repo || "object" === typeof input.repo && null !== input.repo && false === Array.isArray(input.repo) && _io4(input.repo);
+    const _io4 = input => _ip0(input);
     const __is = input => "object" === typeof input && null !== input && false === Array.isArray(input) && _io0(input);
     return input => { input = JSON.parse(input); return __is(input) ? input : null; };
 })();
-const parseNxProjectDeployConfigurations = (() => {
+const isGithubDeployment = (() => {
+    const _io0 = input => "number" === typeof input.id;
+    return input => "object" === typeof input && null !== input && _io0(input);
+})();
+const isNxProjectDeployTarget = (() => {
+    const _ip0 = input => true;
     const _io0 = input => undefined === input.targets || "object" === typeof input.targets && null !== input.targets && false === Array.isArray(input.targets) && _io1(input.targets);
     const _io1 = input => undefined === input.deploy || "object" === typeof input.deploy && null !== input.deploy && false === Array.isArray(input.deploy) && _io2(input.deploy);
-    const _io2 = input => undefined === input.configurations || "object" === typeof input.configurations && null !== input.configurations && false === Array.isArray(input.configurations) && _io3(input.configurations);
-    const _io3 = input => Object.keys(input).every(key => {
-        const value = input[key];
-        if (undefined === value)
-            return true;
-        return true;
-    });
+    const _io2 = input => _ip0(input) && (undefined === input.options || "object" === typeof input.options && null !== input.options && false === Array.isArray(input.options) && _io3(input.options));
+    const _io3 = input => _ip0(input);
+    return input => "object" === typeof input && null !== input && false === Array.isArray(input) && _io0(input);
+})();
+const parseNxProjectDeployTarget = (() => {
+    const _ip0 = input => true;
+    const _io0 = input => undefined === input.targets || "object" === typeof input.targets && null !== input.targets && false === Array.isArray(input.targets) && _io1(input.targets);
+    const _io1 = input => undefined === input.deploy || "object" === typeof input.deploy && null !== input.deploy && false === Array.isArray(input.deploy) && _io2(input.deploy);
+    const _io2 = input => _ip0(input) && (undefined === input.options || "object" === typeof input.options && null !== input.options && false === Array.isArray(input.options) && _io3(input.options));
+    const _io3 = input => _ip0(input);
     const __is = input => "object" === typeof input && null !== input && false === Array.isArray(input) && _io0(input);
     return input => { input = JSON.parse(input); return __is(input) ? input : null; };
 })();
@@ -300,31 +314,74 @@ function commaSeparatedValues(value) {
         .map((entry) => entry.trim())
         .filter(Boolean);
 }
-export async function githubCiNxDeploy(root, options) {
-    const name = options.name ?? `Deploy ${options.configuration}`;
+export async function githubCiNxDeploy(root, options, dependencies = {}) {
+    const processEnv = dependencies.processEnv ?? process.env;
+    const eventPayload = dependencies.eventPayload ?? readGithubActionsEvent(processEnv);
+    const environment = resolveDeploymentEnvironment(options.environment, processEnv, eventPayload);
+    const name = options.name ?? 'Deploy Environment';
     const step = options.step ?? '';
-    await createGithubStatus(name, step);
+    const setStatus = dependencies.setStatus ??
+        ((state) => state === 'pending' ? createGithubStatus(name, step) : updateGithubStatus(name, state, step));
+    await setStatus('pending');
     const mode = resolveNxSmartMode(options.mode ?? 'run-many');
-    const projects = await deployProjectsWithConfiguration(root, options.configuration, mode);
+    const listProjects = dependencies.listProjects ?? listNxProjectsWithTarget;
+    const runNx = dependencies.runNx ?? ((args, commandRoot) => runStatus('nx', args, commandRoot));
+    const projects = await listProjects(root, 'deploy', mode);
     if (projects.length === 0) {
-        console.log(`No ${mode} deploy projects with configuration ${options.configuration}; skipping.`);
-        await updateGithubStatus(name, 'success', step);
+        console.log(`No ${mode} deploy projects; skipping ${environment}.`);
+        await setStatus('success');
         return;
     }
     const projectList = projects.join(',');
     const targets = options.verify === true ? ['build', 'lint', 'test', 'deploy'] : ['deploy'];
     for (const target of targets) {
-        const nxArgs = ['run-many', '-t', target, `--projects=${projectList}`, `--parallel=${NX_PARALLEL}`];
+        const nxArgs = [
+            'run-many',
+            '-t',
+            target,
+            `--projects=${projectList}`,
+            '--exclude=tag:permanent-deploy-target',
+            `--parallel=${NX_PARALLEL}`,
+        ];
         if (target === 'deploy') {
-            nxArgs.push(`--configuration=${options.configuration}`);
+            nxArgs.push(`--environment=${environment}`);
         }
-        const status = await runStatus('nx', nxArgs, root);
+        const status = await runNx(nxArgs, root);
         if (status !== 0) {
-            await updateGithubStatus(name, 'failure', step);
+            await setStatus('failure');
             throw new Error(`nx ${nxArgs.join(' ')} failed with exit code ${status}`);
         }
     }
-    await updateGithubStatus(name, 'success', step);
+    if (isPullRequestEnvironment(environment)) {
+        const url = `https://app.${environment}.conloca.com`;
+        const summaryPath = processEnv.GITHUB_STEP_SUMMARY;
+        if (summaryPath) {
+            const appendSummary = dependencies.appendSummary ?? appendFile;
+            await appendSummary(summaryPath, `## ${environment} deployment\n\n[View deployment](${url})\n`);
+        }
+        const publishDeployment = dependencies.publishDeployment ??
+            ((token, deploymentUrl) => publishGithubDeployment(token, deploymentUrl, processEnv));
+        await publishDeployment(environment, url);
+    }
+    if (environment !== 'production') {
+        const e2eProjects = await listProjects(root, 'e2e-deployed', 'run-many');
+        if (e2eProjects.length > 0) {
+            const nxArgs = [
+                'run-many',
+                '-t',
+                'e2e-deployed',
+                `--projects=${e2eProjects.join(',')}`,
+                `--parallel=${NX_PARALLEL}`,
+                `--environment=${environment}`,
+            ];
+            const status = await runNx(nxArgs, root);
+            if (status !== 0) {
+                await setStatus('failure');
+                throw new Error(`nx ${nxArgs.join(' ')} failed with exit code ${status}`);
+            }
+        }
+    }
+    await setStatus('success');
 }
 function resolveNxSmartMode(mode) {
     if (mode === 'affected' || mode === 'run-many') {
@@ -357,24 +414,152 @@ function eventDefaultBranch() {
         return undefined;
     }
 }
-async function deployProjectsWithConfiguration(root, configuration, mode) {
-    const listArgs = mode === 'affected'
-        ? ['show', 'projects', '--affected', '--withTarget', 'deploy', '--json']
-        : ['show', 'projects', '--withTarget', 'deploy', '--json'];
+export function resolveDeploymentEnvironment(explicit, environment, event) {
+    if (explicit !== undefined)
+        return parseEnvironmentToken(explicit);
+    if (environment.GITHUB_EVENT_NAME === 'pull_request') {
+        if (!event?.action || !['opened', 'reopened', 'synchronize'].includes(event.action)) {
+            throw new Error('Pull-request deployment runs only for opened, reopened, or synchronize events.');
+        }
+        const repository = event.repository?.full_name;
+        const headRepository = event.pull_request?.head?.repo?.full_name;
+        if (!repository || !headRepository || repository !== headRepository) {
+            throw new Error('Pull-request deployment is restricted to same-repository pull requests.');
+        }
+        const number = event.pull_request?.number;
+        if (number === undefined)
+            throw new Error('GitHub pull_request event is missing its PR number.');
+        return pullRequestEnvironment(number);
+    }
+    if (environment.GITHUB_EVENT_NAME === 'push' && environment.GITHUB_REF_NAME === 'private') {
+        return 'staging';
+    }
+    if (environment.GITHUB_EVENT_NAME === 'release') {
+        return 'production';
+    }
+    throw new Error('Cannot resolve a deployment environment from this GitHub event; pass --environment explicitly.');
+}
+function readGithubActionsEvent(environment) {
+    const eventPath = environment.GITHUB_EVENT_PATH;
+    if (!eventPath)
+        return undefined;
+    try {
+        return parseGithubActionsEvent(readFileSync(eventPath, 'utf8')) || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function listNxProjectsWithTarget(root, target, mode) {
+    const listArgs = ['show', 'projects'];
+    if (mode === 'affected')
+        listArgs.push('--affected');
+    listArgs.push('--withTarget', target);
+    if (target === 'deploy')
+        listArgs.push('--exclude=tag:permanent-deploy-target');
+    listArgs.push('--json');
     const result = await $ `nx ${listArgs}`.cwd(root).quiet();
-    const candidates = nxProjectList(decode(result.stdout));
-    const projects = [];
+    const candidates = nxProjectList(decode(result.stdout)).sort((left, right) => left.localeCompare(right));
+    if (target !== 'deploy')
+        return candidates;
+    return selectEnvironmentDeployProjects(candidates, async (project) => {
+        const projectResult = await $ `nx show project ${project} --json`.cwd(root).quiet();
+        const parsed = parseNxProjectDeployTarget(decode(projectResult.stdout));
+        if (!parsed)
+            throw new Error(`nx show project ${project} returned invalid JSON.`);
+        return parsed;
+    });
+}
+export async function selectEnvironmentDeployProjects(candidates, loadProject) {
+    const selected = [];
     for (const project of candidates) {
-        if (await deployTargetHasConfiguration(root, project, configuration)) {
-            projects.push(project);
+        const definition = await loadProject(project);
+        if (!isNxProjectDeployTarget(definition))
+            continue;
+        const deploy = definition.targets?.deploy;
+        const commandValue = deploy?.options?.command ?? deploy?.command;
+        if (typeof commandValue === 'string' && commandValue.includes('smoo wrangler deploy-environment')) {
+            selected.push(project);
         }
     }
-    return projects.sort((a, b) => a.localeCompare(b));
+    return selected;
+}
+export class NodeGithubApiProcessRunner {
+    run(args, input, cwd) {
+        const { promise, resolve, reject } = Promise.withResolvers();
+        const child = spawn('gh', args, { cwd, stdio: ['pipe', 'pipe', 'pipe'] });
+        let stdout = '';
+        let stderr = '';
+        child.stdout.setEncoding('utf8');
+        child.stderr.setEncoding('utf8');
+        child.stdout.on('data', (chunk) => {
+            stdout += chunk;
+        });
+        child.stderr.on('data', (chunk) => {
+            stderr += chunk;
+        });
+        child.once('error', reject);
+        child.once('close', (code) => {
+            resolve({ exitCode: code ?? -1, stdout, stderr });
+        });
+        child.stdin.end(input);
+        return promise;
+    }
 }
-async function deployTargetHasConfiguration(root, project, configuration) {
-    const result = await $ `nx show project ${project} --json`.cwd(root).quiet();
-    const parsed = parseNxProjectDeployConfigurations(decode(result.stdout));
-    return parsed?.targets?.deploy?.configurations?.[configuration] !== undefined;
+export async function publishGithubDeployment(environment, url, processEnvironment, runner = new NodeGithubApiProcessRunner()) {
+    const repository = processEnvironment.GITHUB_REPOSITORY;
+    const sha = processEnvironment.GITHUB_SHA;
+    if (!repository || !sha)
+        throw new Error('GITHUB_REPOSITORY and GITHUB_SHA are required to publish a deployment.');
+    const createBody = JSON.stringify({
+        ref: sha,
+        environment,
+        auto_merge: false,
+        required_contexts: [],
+        transient_environment: true,
+        production_environment: false,
+    });
+    const createResult = await runner.run([
+        'api',
+        '--method',
+        'POST',
+        '-H',
+        'Accept: application/vnd.github+json',
+        `/repos/${repository}/deployments`,
+        '--input',
+        '-',
+    ], createBody, process.cwd());
+    if (createResult.exitCode !== 0) {
+        throw new Error(`GitHub deployment creation failed with exit code ${createResult.exitCode}: ${createResult.stderr.trim()}`);
+    }
+    let deployment;
+    try {
+        deployment = JSON.parse(createResult.stdout);
+    }
+    catch {
+        throw new Error('GitHub returned invalid JSON while creating a deployment.');
+    }
+    if (!isGithubDeployment(deployment))
+        throw new Error('GitHub returned an invalid deployment response.');
+    const statusBody = JSON.stringify({
+        state: 'success',
+        environment,
+        environment_url: url,
+        auto_inactive: false,
+    });
+    const statusResult = await runner.run([
+        'api',
+        '--method',
+        'POST',
+        '-H',
+        'Accept: application/vnd.github+json',
+        `/repos/${repository}/deployments/${deployment.id}/statuses`,
+        '--input',
+        '-',
+    ], statusBody, process.cwd());
+    if (statusResult.exitCode !== 0) {
+        throw new Error(`GitHub deployment status failed with exit code ${statusResult.exitCode}: ${statusResult.stderr.trim()}`);
+    }
 }
 function nxProjectList(output) {
     return parseStringArrayText(output) ?? [];

package/dist/monorepo/ci-workflow.js

@@ -29,7 +29,7 @@ export function defineCiWorkflow(options) {
         { kind: CiWorkflowStepKind.ManagedFilesDispatch, name: '🔁 Dispatch managed-file drift healing' },
     ];
     if (options.deploy) {
-        steps.push({ kind: CiWorkflowStepKind.Deploy, name: '🚀 Deploy Staging' });
+        steps.push({ kind: CiWorkflowStepKind.Deploy, name: '🚀 Deploy Environment' });
     }
     steps.push({ kind: CiWorkflowStepKind.SaveNxCache, name: '💾 Save Nx cache' }, { kind: CiWorkflowStepKind.UploadTraceDbs, name: '📎 Upload trace DBs' }, { kind: CiWorkflowStepKind.SaveNixDevenv, name: '🧹 Cleanup and cache Nix/devenv' });
     return steps.map((step, index) => ({ ...step, number: index + 2 }));
@@ -51,7 +51,7 @@ permissions:
   # actions:write lets the drift step dispatch the managed-files workflow.
   actions: write
   contents: read
-  statuses: write
+${options.deploy ? '  deployments: write\n' : ''}  statuses: write
 
 defaults:
   run:
@@ -167,11 +167,15 @@ function yamlLinesForStep(step, options) {
         case CiWorkflowStepKind.Deploy:
             return [
                 `      - name: ${step.name}`,
-                '        if:',
-                "          ${{ github.event_name == 'push' && github.ref == format('refs/heads/{0}',",
-                '          github.event.repository.default_branch) }}',
+                '        if: >-',
+                '          ${{',
+                "            (github.event_name == 'pull_request' &&",
+                '              contains(fromJSON(\'["opened","reopened","synchronize"]\'), github.event.action) &&',
+                '              github.event.pull_request.head.repo.full_name == github.repository) ||',
+                "            (github.event_name == 'push' && github.ref == 'refs/heads/private')",
+                '          }}',
                 ...deployEnvLines(options),
-                `        run: smoo github-ci nx-deploy --configuration staging --mode affected --name "Deploy Staging" --step ${step.number}`,
+                `        run: smoo github-ci nx-deploy --mode run-many --name "Deploy Environment" --step ${step.number}`,
             ];
         case CiWorkflowStepKind.SaveNxCache:
             return [
@@ -220,6 +224,12 @@ function deployEnvLines(options) {
         '        env:',
         '          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}',
         '          CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}',
+        '          GITHUB_CLIENT_SECRET: ${{ secrets.GITHUB_CLIENT_SECRET }}',
+        '          GITHUB_APP_PRIVATE_KEY: ${{ secrets.GITHUB_APP_PRIVATE_KEY }}',
+        '          GITHUB_APP_PRIVATE_KEY_PEM: ${{ secrets.GITHUB_APP_PRIVATE_KEY_PEM }}',
+        '          OAUTH_STATE_SIGNING_KEY: ${{ secrets.OAUTH_STATE_SIGNING_KEY }}',
+        '          MAIL_CAPTURE_CONTROL_TOKEN: ${{ secrets.MAIL_CAPTURE_CONTROL_TOKEN }}',
+        '          TOKEN_ENCRYPTION_KEY: ${{ secrets.TOKEN_ENCRYPTION_KEY }}',
     ];
 }
 function nxSmartStep(step, target, name) {

package/dist/monorepo/managed-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"managed-files.d.ts","sourceRoot":"","sources":["../../src/monorepo/managed-files.ts"],"names":[],"mappings":"AAMA,OAAO,EAAkB,KAAK,UAAU,EAA2B,MAAM,gBAAgB,CAAC;AAM1F;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,yEAAyE,CAAC;AAU3G,sFAAsF;AACtF,iBAAS,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAIlF;AAED,uCAAuC;AACvC,eAAO,MAAM,wBAAwB,0BAAoB,CAAC;AAE1D;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;8BAE8B;AAC9B,iBAAS,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAkCxG;AAED,wCAAwC;AACxC,eAAO,MAAM,+BAA+B,iCAA2B,CAAC;AAExE;+EAC+E;AAC/E,iBAAS,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAqBtF;AAED,yCAAyC;AACzC,eAAO,MAAM,gCAAgC,kCAA4B,CAAC;AAE1E,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,GAAG,YAAY,CAAC;CACxG;AAeD,UAAU,gBAAgB;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AA4GD,eAAO,MAAM,yBAAyB;;;GAAyE,CAAC;AAIhH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAG9G;AAmGD,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAMlF;AAED,0EAA0E;AAC1E,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAY1G;AAsDD,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAIxD;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQxE;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBxE"}
+{"version":3,"file":"managed-files.d.ts","sourceRoot":"","sources":["../../src/monorepo/managed-files.ts"],"names":[],"mappings":"AAMA,OAAO,EAAkB,KAAK,UAAU,EAA2B,MAAM,gBAAgB,CAAC;AAO1F;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,yEAAyE,CAAC;AAW3G,sFAAsF;AACtF,iBAAS,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAIlF;AAED,uCAAuC;AACvC,eAAO,MAAM,wBAAwB,0BAAoB,CAAC;AAE1D;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AACvD,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;8BAE8B;AAC9B,iBAAS,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAkCxG;AAED,wCAAwC;AACxC,eAAO,MAAM,+BAA+B,iCAA2B,CAAC;AAExE;+EAC+E;AAC/E,iBAAS,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAqBtF;AAED,yCAAyC;AACzC,eAAO,MAAM,gCAAgC,kCAA4B,CAAC;AAE1E,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,GAAG,YAAY,CAAC;CACxG;AAeD,UAAU,gBAAgB;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAkHD,eAAO,MAAM,yBAAyB;;;GAAyE,CAAC;AAIhH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAG9G;AAyGD,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAMlF;AAED,0EAA0E;AAC1E,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAY1G;AA2DD,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAIxD;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQxE;AAED;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBxE"}

package/dist/monorepo/managed-files.js

@@ -5,6 +5,7 @@ import { PLATFORM_TARGET_GLOBS } from '@smoothbricks/nx-plugin/workspace-config-
 import { listReleasePackages, readPackageJson } from '../lib/workspace.js';
 import { loadNxProjects, targetNamesFromProjects } from '../nx/index.js';
 import { renderCiWorkflowYaml } from './ci-workflow.js';
+import { renderPrPreviewCleanupWorkflowYaml } from './pr-preview-cleanup-workflow.js';
 import { renderPublishWorkflowYaml } from './publish-workflow.js';
 /**
  * Repos may append their own content to a managed file below this marker —
@@ -156,6 +157,12 @@ const managedFiles = [
         source: 'ci-workflow',
         target: '.github/workflows/ci.yml',
     },
+    {
+        kind: 'generated',
+        source: 'pr-preview-cleanup-workflow',
+        target: '.github/workflows/pr-preview-cleanup.yml',
+        cloudflareDeployOnly: true,
+    },
     {
         kind: 'generated',
         source: 'publish-workflow',
@@ -208,6 +215,9 @@ function applyManagedFile(root, file, mode, context) {
     if (file.releasePackagesOnly === true && !context.hasReleasePackages && !context.hasProductionDeployTargets) {
         return { target: file.target, action: 'skipped' };
     }
+    if (file.cloudflareDeployOnly === true && context.stagingDeployProvider !== 'cloudflare') {
+        return { target: file.target, action: 'skipped' };
+    }
     const target = resolve(root, file.target);
     const content = getManagedContent(file, context);
     if (existsSync(target)) {
@@ -257,6 +267,9 @@ function getManagedContent(file, context) {
                 runsOn: context.ciRunsOn,
             });
         }
+        if (file.source === 'pr-preview-cleanup-workflow') {
+            return renderPrPreviewCleanupWorkflowYaml({ runsOn: context.ciRunsOn });
+        }
         throw new Error(`Unknown generated managed file source ${file.source}`);
     }
     const sourceRoot = file.kind === 'raw' ? 'managed/raw' : 'managed/templates';
@@ -319,11 +332,16 @@ function deployTargetInfoFromTargets(targets, configuration) {
     if (!deploy) {
         return { exists: false };
     }
+    const baseCommandValue = deploy.options?.command ?? deploy.command;
+    const baseCommand = typeof baseCommandValue === 'string' ? baseCommandValue : '';
+    if (baseCommand.includes('smoo wrangler deploy-environment')) {
+        return { exists: true, provider: 'cloudflare' };
+    }
     const config = deploy.configurations?.[configuration];
     if (!config) {
         return { exists: false };
     }
-    const commandValue = config.command ?? config.options?.command ?? deploy.options?.command ?? deploy.command;
+    const commandValue = config.command ?? config.options?.command ?? baseCommand;
     const command = typeof commandValue === 'string' ? commandValue : '';
     return { exists: true, provider: command.includes('wrangler ') ? 'cloudflare' : undefined };
 }

package/dist/monorepo/pr-preview-cleanup-workflow.d.ts

@@ -0,0 +1,5 @@
+export interface PrPreviewCleanupWorkflowOptions {
+    runsOn?: string | string[];
+}
+export declare function renderPrPreviewCleanupWorkflowYaml(options?: PrPreviewCleanupWorkflowOptions): string;
+//# sourceMappingURL=pr-preview-cleanup-workflow.d.ts.map

package/dist/monorepo/pr-preview-cleanup-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-preview-cleanup-workflow.d.ts","sourceRoot":"","sources":["../../src/monorepo/pr-preview-cleanup-workflow.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,+BAA+B;IAC9C,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC5B;AAED,wBAAgB,kCAAkC,CAAC,OAAO,GAAE,+BAAoC,GAAG,MAAM,CAmCxG"}

package/dist/monorepo/pr-preview-cleanup-workflow.js

@@ -0,0 +1,38 @@
+/* biome-ignore-all lint/suspicious/noTemplateCurlyInString: GitHub Actions expressions are emitted literally. */
+import { renderRunsOnLine } from './github-runs-on.js';
+export function renderPrPreviewCleanupWorkflowYaml(options = {}) {
+    return `name: PR Preview Cleanup
+
+on:
+  pull_request:
+    types: [closed]
+
+permissions:
+  contents: read
+
+jobs:
+  cleanup:
+    name: Cleanup PR environment
+    if: github.event.pull_request.head.repo.full_name == github.repository
+${renderRunsOnLine(options.runsOn)}
+    timeout-minutes: 15
+    defaults:
+      run:
+        working-directory: tooling/direnv
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6.0.2
+        with:
+          filter: blob:none
+          fetch-depth: 1
+
+      - name: Setup Nix/devenv
+        uses: ./.github/actions/setup-devenv
+
+      - name: Cleanup PR environment
+        env:
+          CLOUDFLARE_API_TOKEN: \${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: \${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+        run: smoo wrangler cleanup-pr --pr \${{ github.event.pull_request.number }}
+`;
+}

package/dist/monorepo/publish-workflow.js

@@ -380,7 +380,7 @@ function deployProductionStep(step, options) {
         "          ${{ steps.version.outputs.mode != 'none' && inputs.deploy_environment == 'production' && inputs.dry_run !=",
         "          'true' }}",
         ...deployEnvLines(options),
-        '        run: smoo github-ci nx-deploy --configuration production --mode run-many --verify --name "Deploy Production"',
+        '        run: smoo github-ci nx-deploy --environment production --mode run-many --verify --name "Deploy Production"',
     ];
 }
 function deployEnvLines(options) {
@@ -606,7 +606,7 @@ function renderFinalLinuxPublishSteps(options) {
     }
     lines.push('', `      # Step ${stepNumber++}`, '      - name: 🍎 Apply verified macOS outputs', `        if: ${mode} != 'none'`, '        run:', `          smoo github-ci apply-outputs --source-sha "${githubExpression('github.sha')}"`, `          "${githubExpression('runner.temp')}/publish-artifacts/publish-macos-outputs-${githubExpression('github.run_id')}/current"`, '', `      # Step ${stepNumber++}`, `      - name: ✅ Validate restored release (${githubExpression(mode)})`, `        if: ${mode} != 'none'`, '        run: smoo monorepo validate', '', '      # --- Release ------------------------------------------------------------', '', `      # Step ${stepNumber++}`, `      - name: 📦 Publish release (${githubExpression(mode)})`, '        # smoo packs with Bun, then publishes tarballs with npm. Existing', '        # packages must already exist on npm and use trusted publishing/OIDC.', '        # Missing package names are bootstrapped locally before trust setup.', `        run: smoo release publish --bump "${githubExpression('inputs.bump')}" --dry-run "${githubExpression('inputs.dry_run')}"`);
     if (options.deploy === true) {
-        lines.push('', `      # Step ${stepNumber++}`, '      - name: 🚀 Deploy production', '        if:', "          ${{ needs.linux-release-candidate.outputs.mode != 'none' && inputs.deploy_environment == 'production' &&", "          inputs.dry_run != 'true' }}", ...deployEnvLines(options), '        run: smoo github-ci nx-deploy --configuration production --mode run-many --verify --name "Deploy Production"');
+        lines.push('', `      # Step ${stepNumber++}`, '      - name: 🚀 Deploy production', '        if:', "          ${{ needs.linux-release-candidate.outputs.mode != 'none' && inputs.deploy_environment == 'production' &&", "          inputs.dry_run != 'true' }}", ...deployEnvLines(options), '        run: smoo github-ci nx-deploy --environment production --mode run-many --verify --name "Deploy Production"');
     }
     lines.push('', '      # --- Cleanup ------------------------------------------------------------', '', `      # Step ${stepNumber}`, '      - name: 🧹 Cleanup and cache Nix/devenv', '        # success() is default; always() still saves GH Nix cache after a red job.', '        if: always()', '        uses: ./.github/actions/save-nix-devenv', '        with:', `          nix-cache-hit: ${githubExpression('steps.setup.outputs.nix-cache-hit')}`, `          devenv-cache-hit: ${githubExpression('steps.setup.outputs.devenv-cache-hit')}`);
     return lines.join('\n').trimEnd();

package/dist/monorepo/tool-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-validation.d.ts","sourceRoot":"","sources":["../../src/monorepo/tool-validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,WAAW,EAAyB,MAAM,qBAAqB,CAAC;AAU9E,MAAM,WAAW,UAAU;IACzB,sBAAsB,EAAE,OAAO,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AAgDD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAStE;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtG;AAqCD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAkBlF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAY/D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CA0B7D;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAyBvG;AAyBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAoB/E;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAWhF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAqB3D;AAsED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAQxE"}
+{"version":3,"file":"tool-validation.d.ts","sourceRoot":"","sources":["../../src/monorepo/tool-validation.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,WAAW,EAAyB,MAAM,qBAAqB,CAAC;AAU9E,MAAM,WAAW,UAAU;IACzB,sBAAsB,EAAE,OAAO,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC;CACpB;AA4DD,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAStE;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtG;AAqCD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAkBlF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAY/D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAiC7D;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAyBvG;AAyBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,CAoB/E;AAED,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,MAAM,CAWhF;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA6B3D;AAoID,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAQxE"}