@styleflow.app/flowpress-deploy 1.0.0-beta.0 → 1.0.0-beta.2

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 1.0.0-beta.2 — 2026-10-14
+
+- Automatic debounced editorial builds and public asset validation/history.
+- Use public taxonomy hooks for scheduled builds and export portable link, asset-history and Worker validation tools.
+- [Canonical integration report](https://github.com/StyleFlow-App/styleflow-docs/blob/main/dev/rapporti/2026-10-14-consolidamento-tessari.md).
+
+
+## 1.0.0-beta.1
+
+- Added the automatically selected `flowpress-deploy` Core queue provider.
+- Added revision-safe queue, deployed state and batch snapshot tables.
+- Added fingerprint deduplication, WPML post grouping, URI history and safe
+  success/failure/stale-batch handling.
+- Added non-destructive migration from the Core database queue.
+- Added end-of-request enqueue, manual editor actions and the expanded
+  **Strumenti → FlowPress Deploy** operations screen.
+- Added complete internal documentation and PHP queue contract tests.
+
 ## 1.0.0-beta.0
 
 - Adopted the FlowPress WordPress Core v1 Composer contract.

package/README.md

@@ -1,17 +1,6 @@
 # FlowPress Deploy
 
-Installable npm/Composer feature pack for safe Cloudflare Pages and Workers
-build orchestration. CMS partial builds require a successful compatible
-baseline; code and manual triggers remain full builds.
+Official npm/Composer integration for FlowPress.
 
-The public API validates paths and `_routes.json`, merges partial artifacts
-without traversal or case collisions, regenerates sitemaps, selects Pages for
-static targets and Workers for dev, requires `ASTRO_KEY` for protected batches,
-and acknowledges the CMS queue only after deploy and smoke test. Failed
-batches are released for retry.
-
-## WordPress Core v1
-
-The `1.0.0-beta.0` line requires FlowPress WordPress Core v1. It does not
-provide a v0.x compatibility constraint or adapter; canary applications pin
-the selected Core prerelease exactly.
+- [Canonical guide](https://github.com/StyleFlow-App/styleflow-docs/blob/main/wiki/flowpress-routing-deploy.md)
+- [Release and verification report](https://github.com/StyleFlow-App/styleflow-docs/blob/main/dev/rapporti/2026-10-14-consolidamento-tessari.md)

package/composer.json

@@ -1,6 +1,6 @@
 {
   "name": "flowpress/deploy",
-  "description": "WordPress capability registration for FlowPress deploy.",
+  "description": "Revision-safe editorial build queue and deploy capability for FlowPress.",
   "type": "wordpress-muplugin",
   "license": "proprietary",
   "require": {

package/dist/frontend-assets.d.ts

@@ -0,0 +1,2 @@
+export function retainFrontendAssets(output: any, baselineDirectories: any): Promise<number>;
+//# sourceMappingURL=frontend-assets.d.ts.map

package/dist/frontend-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-assets.d.ts","sourceRoot":"","sources":["../src/frontend-assets.js"],"names":[],"mappings":"AAUA,6FA4BC"}

package/dist/frontend-assets.js

@@ -0,0 +1,44 @@
+import { copyFile, mkdir, readFile, writeFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { frontendFiles } from "./frontend-links.js";
+const manifestName = ".flowpress-asset-generations.json";
+const clientDirectory = output => existsSync(resolve(output, "client")) ? resolve(output, "client") : output;
+// Keep three distinct sets of immutable assets so pages opened before a deploy
+// can still load their styles, scripts and deferred imports. Never retain HTML.
+export async function retainFrontendAssets(output, baselineDirectories) {
+    const client = clientDirectory(output);
+    const current = (await frontendFiles(client)).filter(path => path.startsWith("/_astro/")).sort();
+    const generations = [current];
+    const sources = new Map();
+    for (const baseline of baselineDirectories.filter(existsSync)) {
+        const baselineClient = clientDirectory(baseline);
+        const previousFiles = (await frontendFiles(baselineClient)).filter(path => path.startsWith("/_astro/"));
+        for (const path of previousFiles)
+            if (!sources.has(path))
+                sources.set(path, resolve(baselineClient, path.slice(1)));
+        const manifest = await readFile(resolve(baseline, manifestName), "utf8").then(JSON.parse).catch(() => null);
+        for (const generation of manifest?.generations ?? [previousFiles.sort()]) {
+            if (!generations.some(existing => JSON.stringify(existing) === JSON.stringify(generation)))
+                generations.push(generation);
+        }
+    }
+    const retained = generations.slice(0, 3);
+    let copied = 0;
+    for (const path of new Set(retained.flat())) {
+        if (!/^\/_astro\/[A-Za-z0-9_./@-]+$/.test(path) || path.split("/").some(part => part === ".." || part === "."))
+            throw new Error(`Invalid retained asset: ${path}`);
+        const destination = resolve(client, path.slice(1));
+        if (existsSync(destination))
+            continue;
+        const source = sources.get(path);
+        if (!source)
+            throw new Error(`Baseline is missing retained asset ${path}`);
+        await mkdir(dirname(destination), { recursive: true });
+        await copyFile(source, destination);
+        copied++;
+    }
+    await writeFile(resolve(output, manifestName), `${JSON.stringify({ generations: retained }, null, 2)}\n`);
+    return copied;
+}
+//# sourceMappingURL=frontend-assets.js.map

package/dist/frontend-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-assets.js","sourceRoot":"","sources":["../src/frontend-assets.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,YAAY,GAAG,mCAAmC,CAAC;AACzD,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAE7G,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAM,EAAE,mBAAmB;IACpE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,CAAC,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACxG,KAAK,MAAM,IAAI,IAAI,aAAa;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5G,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3H,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACnK,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/frontend-links.d.ts

@@ -0,0 +1,14 @@
+export function frontendFiles(directory: any): Promise<any[]>;
+export function htmlReferences(html: any): any[];
+export function inspectFrontendLinks(directory: any, { origins, workerPatterns }?: {
+    origins?: never[] | undefined;
+    workerPatterns?: never[] | undefined;
+}): Promise<{
+    paths: string[];
+    broken: {
+        source: any;
+        path: string;
+    }[];
+    pages: number;
+}>;
+//# sourceMappingURL=frontend-links.d.ts.map

package/dist/frontend-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-links.d.ts","sourceRoot":"","sources":["../src/frontend-links.js"],"names":[],"mappings":"AAIA,8DAWC;AAED,iDAWC;AAED;;;;;;;;;;GAwCC"}

package/dist/frontend-links.js

@@ -0,0 +1,82 @@
+import { readFile, readdir } from "node:fs/promises";
+import { relative, resolve, sep } from "node:path";
+import { invokesWorkerFirst } from "./worker-assets.js";
+export async function frontendFiles(directory) {
+    const files = [];
+    async function visit(current) {
+        for (const entry of await readdir(current, { withFileTypes: true })) {
+            const absolute = resolve(current, entry.name);
+            if (entry.isDirectory())
+                await visit(absolute);
+            if (entry.isFile())
+                files.push(`/${relative(directory, absolute).split(sep).join("/")}`);
+        }
+    }
+    await visit(directory);
+    return files;
+}
+export function htmlReferences(html) {
+    const references = [];
+    for (const tag of html.matchAll(/<(?:a|link|script|img|source|video|audio|iframe|form)\b[^>]*>/gi)) {
+        for (const attribute of tag[0].matchAll(/\s(href|src|poster|action|srcset)\s*=\s*(?:"([^"]*)"|'([^']*)')/gi)) {
+            const value = (attribute[2] ?? attribute[3]).replaceAll("&amp;", "&");
+            if (attribute[1].toLowerCase() === "srcset") {
+                if (!value.startsWith("data:"))
+                    references.push(...value.split(",").map(item => item.trim().split(/\s+/)[0]));
+            }
+            else
+                references.push(value);
+        }
+    }
+    return references;
+}
+export async function inspectFrontendLinks(directory, { origins = [], workerPatterns = [] } = {}) {
+    const files = await frontendFiles(directory);
+    const existing = new Set(files);
+    const redirectsText = await readFile(resolve(directory, "_redirects"), "utf8").catch(() => "");
+    const redirects = new Map(redirectsText.split("\n").filter(line => line.trim() && !line.startsWith("#")).map(line => {
+        const [source, target] = line.trim().split(/\s+/);
+        return [source, target];
+    }));
+    const origin = origins[0] || "https://frontend.test";
+    const localOrigins = new Set([origin, ...origins]);
+    const paths = new Set(["/"]);
+    for (const file of files.filter(file => file.startsWith("/_astro/")))
+        paths.add(file);
+    const broken = [];
+    const hasRoute = path => existing.has(path) || existing.has(`${path.replace(/\/$/, "")}/index.html`) || existing.has(`${path}.html`) || invokesWorkerFirst(workerPatterns, path);
+    function resolves(path, seen = new Set()) {
+        if (seen.has(path))
+            return false;
+        seen.add(path);
+        if (redirects.has(path)) {
+            const target = new URL(redirects.get(path), origin);
+            return !localOrigins.has(target.origin) || resolves(decodeURIComponent(target.pathname), seen);
+        }
+        return hasRoute(path);
+    }
+    for (const file of files.filter(file => file.endsWith(".html") && file !== "/404.html")) {
+        const route = file.replace(/index\.html$/, "").replace(/\.html$/, "");
+        paths.add(route || "/");
+        for (const reference of htmlReferences(await readFile(resolve(directory, file.slice(1)), "utf8"))) {
+            if (!reference || reference.startsWith("#"))
+                continue;
+            const url = new URL(reference, `${origin}${route}`);
+            if (!["https:", "http:"].includes(url.protocol) || !localOrigins.has(url.origin))
+                continue;
+            const path = decodeURIComponent(url.pathname);
+            if (!resolves(path))
+                broken.push({ source: file, path });
+            else if (!invokesWorkerFirst(workerPatterns, path))
+                paths.add(path);
+        }
+    }
+    for (const [source] of redirects) {
+        if (!resolves(source))
+            broken.push({ source: "_redirects", path: source });
+        else
+            paths.add(source);
+    }
+    return { paths: [...paths].sort(), broken, pages: files.filter(file => file.endsWith(".html") && file !== "/404.html").length };
+}
+//# sourceMappingURL=frontend-links.js.map

package/dist/frontend-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-links.js","sourceRoot":"","sources":["../src/frontend-links.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAS;IAC3C,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,KAAK,UAAU,KAAK,CAAC,OAAO;QAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI;IACjC,MAAM,UAAU,GAAG,EAAE,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,iEAAiE,CAAC,EAAE,CAAC;QACnG,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC,EAAE,CAAC;YAC7G,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtE,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChH,CAAC;;gBAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAS,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,cAAc,GAAG,EAAE,EAAE,GAAG,EAAE;IAC9F,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAClH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,uBAAuB,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACjL,SAAS,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,EAAE;QACtC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QACxF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACtE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC3F,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;iBACpD,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;;YACtE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;AAClI,CAAC"}

package/dist/worker-assets.d.ts

@@ -0,0 +1,5 @@
+/** Match Wrangler's selective Worker-first patterns, including exclusions. */
+export function invokesWorkerFirst(patterns: any, pathname: any): boolean;
+export function validateWorkerAssets(config: any, staticPaths: any, reservedAreaEnabled?: boolean): void;
+export function assertFreeRuntimeRelease(target: any, env: any): void;
+//# sourceMappingURL=worker-assets.d.ts.map

package/dist/worker-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-assets.d.ts","sourceRoot":"","sources":["../src/worker-assets.js"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAMC;AAED,yGAYC;AAED,sEAIC"}

package/dist/worker-assets.js

@@ -0,0 +1,35 @@
+/** Match Wrangler's selective Worker-first patterns, including exclusions. */
+export function invokesWorkerFirst(patterns, pathname) {
+    const match = pattern => new RegExp(`^${pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replaceAll("*", ".*")}$`).test(pathname);
+    if (patterns === true)
+        return true;
+    if (!Array.isArray(patterns))
+        return false;
+    return patterns.some(pattern => !pattern.startsWith("!") && match(pattern))
+        && !patterns.some(pattern => pattern.startsWith("!") && match(pattern.slice(1)));
+}
+export function validateWorkerAssets(config, staticPaths, reservedAreaEnabled = false) {
+    const patterns = config.assets?.run_worker_first;
+    if (config.assets?.binding !== "ASSETS" || !config.main)
+        throw new Error("Worker must have an ASSETS binding and compiled entrypoint");
+    if (reservedAreaEnabled && (patterns === true || patterns?.includes("/*")))
+        throw new Error("Public assets must bypass the Worker");
+    for (const path of (reservedAreaEnabled ? ["/area-riservata/", "/area-riservata/example/", "/api/flowpress/reserved-area/login", "/api/flowpress/reserved-area/logout"] : [])) {
+        if (!invokesWorkerFirst(patterns, path))
+            throw new Error(`Protected runtime route missing: ${path}`);
+    }
+    for (const path of staticPaths) {
+        if (path.startsWith("/area-riservata/") || path.startsWith("/api/flowpress/reserved-area/"))
+            throw new Error(`Private static asset forbidden: ${path}`);
+        if (reservedAreaEnabled && invokesWorkerFirst(patterns, path))
+            throw new Error(`Static asset invokes Worker: ${path}`);
+    }
+    if (reservedAreaEnabled && (config.kv_namespaces?.length || config.images))
+        throw new Error("Free runtime must not provision session KV or Images bindings");
+}
+export function assertFreeRuntimeRelease(target, env) {
+    if (target.environmentName === "production" && target.projectType === "workers" && env.FLOWPRESS_RESERVED_AREA_ENABLED === "true" && env.CF_FREE_RUNTIME_VERIFIED !== "true") {
+        throw new Error("Production Workers release is gated: validate staging CPU (p95 < 8 ms, p99 < 10 ms, no exceededCpu), then set CF_FREE_RUNTIME_VERIFIED=true in the production environment.");
+    }
+}
+//# sourceMappingURL=worker-assets.js.map

package/dist/worker-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-assets.js","sourceRoot":"","sources":["../src/worker-assets.js"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,QAAQ,EAAE,QAAQ;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/H,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;WACtE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,KAAK;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACvI,IAAI,mBAAmB,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACpI,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,oCAAoC,EAAE,qCAAqC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9K,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QACxJ,IAAI,mBAAmB,IAAI,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AAC/J,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAM,EAAE,GAAG;IAClD,IAAI,MAAM,CAAC,eAAe,KAAK,YAAY,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,+BAA+B,KAAK,MAAM,IAAI,GAAG,CAAC,wBAAwB,KAAK,MAAM,EAAE,CAAC;QAC7K,MAAM,IAAI,KAAK,CAAC,4KAA4K,CAAC,CAAC;IAChM,CAAC;AACH,CAAC"}

package/docs/README.md

@@ -0,0 +1,16 @@
+# FlowPress Deploy: documentazione
+
+FlowPress Deploy collega le modifiche editoriali di WordPress ai workflow di
+build senza salvare token o contenuti nella propria coda.
+
+## Pagine
+
+| Argomento | Documento |
+| --- | --- |
+| Modello e responsabilità | [Architettura](architecture.md) |
+| Variabili richieste | [Configurazione](configuration.md) |
+| Deduplica, URI e revisioni | [Queue WordPress](wordpress-queue.md) |
+| Payload e callback | [Frontend e workflow](frontend-workflow.md) |
+| Uso quotidiano | [Operazioni](operations.md) |
+| Callback mancanti e retry | [Recovery](recovery.md) |
+| Diagnostica | [Troubleshooting](troubleshooting.md) |

package/docs/activities/2026-07-30-2339-initial-pack.md

@@ -0,0 +1,9 @@
+# Release iniziale deploy pack
+
+- Obiettivo: estrarre build full/partial, baseline e guardie Cloudflare.
+- Modifiche: package npm, MU-plugin Composer, test e workflow OIDC.
+- Verifiche: typecheck, 7 test, npm pack, Composer validate e PHP lint positivi.
+- Hardening pre-release: merge sicuro full/partial, sitemap, target
+  Pages/Workers, guardia `ASTRO_KEY` e lifecycle ack/release della queue.
+- Workflow tag idempotente per il bootstrap della prima pubblicazione npm.
+- Release prevista: `0.1.0-beta.0`; resta da configurare il Trusted Publisher npm.

package/docs/activities/2026-08-24-1745-wordpress-core-v1.md

@@ -0,0 +1,40 @@
+# Deploy su WordPress Core v1
+
+## Esito
+
+Preparata la major prerelease `1.0.0-beta.0` npm/Composer con dipendenza
+limitata a `flowpress/wordpress-core ^1.0.0@beta` e senza adapter v0.x. Il
+consumer canary mantiene il pin Core esatto.
+
+## Scope
+
+La logica Deploy non cambia. Versione package, Composer contract, lockfile,
+changelog e documentazione vengono pubblicati dallo stesso tag.
+
+## Verifiche
+
+| Gate | Esito |
+|---|---|
+| `npm ci && npm run release:check` | OK; 7/7 test e pack 9 file |
+| `npm audit` | OK; 0 vulnerabilita' dopo aggiornamento lockfile `nanoid` |
+| `composer validate --strict --no-check-publish` | OK |
+| PHP lint | OK |
+| `git diff --check` | OK |
+
+## Pubblicazione verificata
+
+- PR v1 unita su `main`; merge e `gitHead` npm:
+  `24e0033d78566890263249e56da3c15449e80897`.
+- Workflow Publish `32747502576`: verde con trusted publishing e provenance.
+- npm: `@styleflow.app/flowpress-deploy@1.0.0-beta.0`, dist-tag `next`;
+  integrity, shasum, tarball e firma presenti. `latest` resta sulla linea
+  precedente.
+- Repman: `flowpress/deploy@v1.0.0-beta.0`, sincronizzato dallo stesso tag e
+  con requisito `flowpress/wordpress-core ^1.0.0@beta`.
+- Canary DMO: installazione npm/Composer da registry, manifest coerente e gate
+  completo verde.
+
+## Rollback
+
+La linea `0.1.0-beta.0` resta immutabile. I consumer v1 usano pin esatti e non
+spostano `latest`.

package/docs/activities/2026-08-26-0926-revision-safe-queue.md

@@ -0,0 +1,41 @@
+# FlowPress Deploy: revision-safe editorial queue
+
+- Data: 2026-08-26 09:26 Europe/Rome
+- Repository: `StyleFlow-App/flowpress-deploy`
+- Versione prevista: `1.0.0-beta.1`
+
+## Obiettivo
+
+Rendere Deploy proprietario della queue editoriale tramite il provider Core,
+senza cambiare Core e senza assumere configurazioni Bagful/Cloudflare.
+
+## Modifiche
+
+- Provider automatico, schema queue/state/batch e migrazione Core non
+  distruttiva.
+- Fingerprint, URI history, WPML grouping, snapshot e ack revision-safe.
+- Enqueue a fine richiesta, azioni manuali, UI operativa e GitHub test.
+- Documentazione completa in `docs/` e inclusione nel pacchetto npm.
+
+## Verifiche
+
+- `php tests/php/queue-provider-test.php`: superato.
+- `find . -name '*.php' ... php -l`: superato.
+- `git diff --check`: superato.
+- `composer validate --strict`: superato.
+- `npm run release:check`: superato (typecheck, 7 test Vitest, test PHP,
+  pack dry-run con `docs/` e `includes/`).
+
+## Verifica manuale
+
+La verifica integrata in WordPress DMO sarà registrata nel report DMO; nessun
+dispatch o deploy remoto è autorizzato in questo task.
+
+## Commit suggerito
+
+`feat: add revision-safe editorial build queue`
+
+## Rischi e follow-up
+
+Il rollout richiede configurazione remota dei token e un test editoriale
+controllato prima di abilitare la pubblicazione production.

package/docs/activities/README.md

@@ -0,0 +1,5 @@
+# Indice attività
+
+- [2026-08-26-0926-revision-safe-queue.md](2026-08-26-0926-revision-safe-queue.md)
+- [2026-08-24-1745-wordpress-core-v1.md](2026-08-24-1745-wordpress-core-v1.md)
+- [2026-07-30-2339-initial-pack.md](2026-07-30-2339-initial-pack.md)

package/docs/architecture.md

@@ -0,0 +1,19 @@
+# Architettura
+
+## Perché
+
+Core espone il contratto di dispatch e callback; Deploy possiede lo stato
+editoriale necessario a non perdere aggiornamenti concorrenti.
+
+## Come funziona
+
+1. Il plugin registra il provider `flowpress-deploy` e lo seleziona.
+2. Gli hook Core inoltrano post, termini e modifiche globali al provider.
+3. Gli update vengono materializzati a `shutdown`, dopo meta e tassonomie.
+4. Le tabelle `flowpress_deploy_queue`, `flowpress_deploy_state` e
+   `flowpress_deploy_batches` conservano rispettivamente lavoro, ultimo stato
+   distribuito e snapshot immutabile del batch.
+5. Core effettua repository dispatch e callback usando il wire contract
+   pubblico. Deploy applica l’ack alla sola revisione fotografata.
+
+La coda conserva hash SHA-256 e URI, non il contenuto completo o credenziali.

package/docs/configuration.md

@@ -0,0 +1,19 @@
+# Configurazione
+
+## Perché
+
+Target e credenziali sono configurazione di ambiente e non devono finire nel
+database WordPress.
+
+## Come fare
+
+1. Definire `SF_STATIC_TARGETS_JSON`, per esempio `['production']` in JSON
+   valido.
+2. Definire `GITHUB_REPOSITORY_SLUG=organizzazione/repository`.
+3. Definire `CMS_GITHUB_DISPATCH_TOKEN` con il minimo accesso necessario al
+   repository.
+4. Definire `CMS_BUILD_CALLBACK_TOKEN` sia nel backend sia nel workflow.
+5. Aprire **Strumenti → FlowPress Deploy**: lo stato indica soltanto presenza
+   o assenza dei token, mai il loro valore.
+
+⚠️ Un target deve corrispondere esattamente a quello gestito dal workflow.

package/docs/frontend-workflow.md

@@ -0,0 +1,23 @@
+# Frontend e workflow
+
+## Wire contract
+
+Il repository dispatch riceve:
+
+```json
+{
+  "batchId": "uuid",
+  "target": "production",
+  "mode": "partial",
+  "paths": ["/pagina/"],
+  "deletedPaths": ["/vecchio-slug/"],
+  "queueIds": [12]
+}
+```
+
+Il workflow deve chiamare `POST /flowpress/v1/build-complete` con bearer token
+e body `{"batchId":"uuid","status":"success"}` soltanto dopo build, deploy
+e smoke test. In ogni altro caso invia `failure`.
+
+⚠️ L’assenza del callback non equivale a successo: il batch resta in-flight e
+sarà rilasciato dal recovery.

package/docs/operations.md

@@ -0,0 +1,15 @@
+# Operazioni
+
+## Come fare
+
+1. Aprire **Strumenti → FlowPress Deploy**.
+2. Verificare repository, token, righe pending, URI e batch in-flight.
+3. Espandere **Payload preview** prima dell’invio.
+4. Usare **Pubblica queue** per la modalità prevista.
+5. Usare **Force full** soltanto quando baseline o codice richiedono una build
+   completa; il browser chiede conferma.
+6. Per forzare un singolo contenuto usare **Aggiungi alla build queue** nella
+   schermata o nella lista di post/termini.
+
+Il pulsante **Test GitHub** verifica autenticazione e accesso al repository,
+senza inviare un deployment.

package/docs/recovery.md

@@ -0,0 +1,16 @@
+# Recovery
+
+## Callback failure
+
+1. Il callback `failure` libera il batch.
+2. Le righe tornano pending mantenendo l’ultima revisione editoriale.
+3. Correggere la causa nel workflow e ripubblicare la queue.
+
+## Callback mancante
+
+1. Il cron orario cerca batch in-flight più vecchi di sei ore.
+2. Il batch viene rilasciato come failure.
+3. Il limite è modificabile con `flowpress_deploy_stale_batch_hours`.
+
+⚠️ Non cancellare manualmente righe delle tre tabelle: si perderebbe la
+corrispondenza fra stato distribuito e snapshot. Usare callback/retry.

package/docs/troubleshooting.md

@@ -0,0 +1,22 @@
+# Troubleshooting
+
+## Queue vuota
+
+Controllare `SF_STATIC_TARGETS_JSON`, tipo di contenuto instradabile e che il
+salvataggio non sia autosave/revisione. Un salvataggio identico è correttamente
+deduplicato.
+
+## URI vecchio non eliminato
+
+Controllare `previous_uris` nella pagina Deploy e che il workflow consumi
+`deletedPaths`.
+
+## Batch sempre in-flight
+
+Verificare token callback e log del workflow. Attendere il recovery oppure
+inviare esplicitamente `failure` per il `batchId` corretto.
+
+## GitHub rifiuta il test
+
+Verificare slug repository, scadenza e permessi del token. La pagina non mostra
+né registra il segreto.

package/docs/wordpress-queue.md

@@ -0,0 +1,22 @@
+# Queue WordPress
+
+## Perché
+
+Salvataggi ripetuti, traduzioni e cambi slug non devono produrre build inutili
+o lasciare file vecchi online.
+
+## Come funziona
+
+1. Autosave e revisioni sono esclusi da Core.
+2. Deploy raggruppa per post/term ID; con WPML usa il translation group.
+3. Il fingerprint include contenuto, meta non volatili e tassonomie. Il filtro
+   `flowpress_deploy_volatile_meta_keys` aggiunge esclusioni.
+4. `flowpress_deploy_fingerprint_fields`, `flowpress_deploy_group_key` e
+   `flowpress_deploy_canonical_uris` permettono estensioni senza patch.
+5. `previous_uris` resta ancorato allo stato distribuito: uno slug change
+   produce il nuovo path e inserisce quello vecchio in `deletedPaths`.
+6. Una modifica durante un batch incrementa la revisione. Il callback completa
+   lo snapshot, ma rimette la revisione nuova in pending.
+
+La prima installazione importa le righe Core senza cancellarle; ogni vecchio
+batch in-flight viene importato come pending per un retry sicuro.

package/flowpress-deploy.php

@@ -1,21 +1,50 @@
 <?php
 /**
  * Plugin Name: FlowPress Deploy
- * Description: Installable deployment capability for FlowPress.
- * Version: 0.1.0-beta.0
+ * Description: Revision-safe editorial build queue and deployment capability for FlowPress.
+ * Version: 1.0.0-beta.2
  */
 
 if (! defined('ABSPATH')) {
     exit;
 }
 
+define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.2');
+define('FLOWPRESS_DEPLOY_FILE', __FILE__);
+
+require_once __DIR__ . '/includes/queue-provider.php';
+require_once __DIR__ . '/includes/manual-queue.php';
+require_once __DIR__ . '/includes/admin.php';
+require_once __DIR__ . '/includes/automatic-build.php';
+
+add_action('muplugins_loaded', static function (): void {
+    if (! function_exists('flowpress_register_build_queue_provider')) {
+        return;
+    }
+    flowpress_register_build_queue_provider('flowpress-deploy', [
+        'enqueue' => 'flowpress_deploy_collect_change',
+        'payload' => 'flowpress_deploy_build_payload',
+        'markDispatched' => 'flowpress_deploy_mark_dispatched',
+        'complete' => 'flowpress_deploy_complete_batch',
+        'pendingCount' => 'flowpress_deploy_pending_count',
+    ]);
+}, 110);
+
+add_filter('flowpress_build_queue_provider', static fn (): string => 'flowpress-deploy', 100);
+
 add_action('muplugins_loaded', static function (): void {
     if (! function_exists('flowpress_register_feature')) {
         return;
     }
     flowpress_register_feature('deploy', [
-        'version' => '0.1.0-beta.0',
-        'capabilities' => ['full-build', 'partial-build', 'build-callback'],
+        'version' => FLOWPRESS_DEPLOY_VERSION,
+        'capabilities' => [
+            'full-build',
+            'partial-build',
+            'build-callback',
+            'revision-safe-queue',
+            'manual-enqueue',
+        ],
         'config' => [
             'targets' => function_exists('flowpress_static_targets')
                 ? flowpress_static_targets()