@styleflow.app/flowpress-deploy 1.0.0-beta.1 → 1.0.0-beta.11

package/dist/ops/static-config.js

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+// Turns the static Astro build's Cloudflare-style `_redirects` and `_headers`
+// into Caddy directives, plus the /media and /app/uploads proxies that the
+// Pages Functions used to provide. Output: <dist>/.container/routes.caddy.
+//
+//   APP_ENV=production node FlowPress Deploy apps/web/dist-production
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+function quote(value) {
+    if (/["\s{}]/.test(value) && !/^"[^"]*"$/.test(value)) {
+        return `"${value.replaceAll('"', '\\"')}"`;
+    }
+    return value;
+}
+// FlowPress routing only emits exact paths (see validateRedirects), so every
+// line is "source target status". Both slash variants of a source redirect.
+export function redirectsToCaddy(text) {
+    const lines = [];
+    let index = 0;
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const [source, target, status = "301", ...rest] = line.split(/\s+/);
+        if (rest.length || !source?.startsWith("/") || !target) {
+            throw new Error(`Unsupported _redirects line: ${line}`);
+        }
+        if (/[*:]/.test(source)) {
+            throw new Error(`Splats and placeholders are not supported: ${line}`);
+        }
+        if (!["301", "302", "307", "308"].includes(status)) {
+            throw new Error(`Unsupported redirect status: ${line}`);
+        }
+        const variants = source === "/"
+            ? ["/"]
+            : [source.replace(/\/+$/, ""), `${source.replace(/\/+$/, "")}/`];
+        index += 1;
+        lines.push(`@redirect${index} path ${variants.map(quote).join(" ")}`);
+        lines.push(`redir @redirect${index} ${quote(target)} ${status}`);
+    }
+    return lines;
+}
+export function headersToCaddy(text) {
+    const lines = [];
+    let pattern = null;
+    for (const raw of text.split(/\r?\n/)) {
+        if (!raw.trim() || raw.trim().startsWith("#"))
+            continue;
+        if (!/^\s/.test(raw)) {
+            pattern = raw.trim();
+            if (!pattern.startsWith("/"))
+                throw new Error(`Unsupported _headers pattern: ${pattern}`);
+            continue;
+        }
+        if (!pattern)
+            throw new Error(`Header without a path pattern: ${raw.trim()}`);
+        const separator = raw.indexOf(":");
+        if (separator < 0)
+            throw new Error(`Unsupported _headers line: ${raw.trim()}`);
+        const name = raw.slice(0, separator).trim();
+        const value = raw.slice(separator + 1).trim();
+        const matcher = pattern === "/*" ? "*" : pattern;
+        lines.push(`header ${matcher} ${name} ${quote(value)}`);
+    }
+    return lines;
+}
+export function proxiesToCaddy({ media, backend }) {
+    const lines = [];
+    const mediaUrl = new URL(media);
+    const mediaBase = mediaUrl.pathname.replace(/\/+$/, "");
+    lines.push("@flowpress_media path_regexp flowpress_media ^/media(/.+\\.[a-zA-Z0-9]{1,8})$");
+    lines.push("handle @flowpress_media {");
+    lines.push(`\trewrite * ${mediaBase}{http.regexp.flowpress_media.1}`);
+    lines.push(`\treverse_proxy ${mediaUrl.origin} {`);
+    lines.push("\t\theader_up Host {upstream_hostport}");
+    lines.push("\t}");
+    lines.push("}");
+    const backendUrl = new URL(backend);
+    lines.push("handle /app/uploads/* {");
+    lines.push(`\treverse_proxy ${backendUrl.origin} {`);
+    lines.push("\t\theader_up Host {upstream_hostport}");
+    lines.push("\t}");
+    lines.push("}");
+    return lines;
+}
+export function buildRoutesCaddy({ redirects = "", headers = "", media, backend }) {
+    return [
+        "# Generated by FlowPress Deploy. Do not edit.",
+        ...redirectsToCaddy(redirects),
+        ...headersToCaddy(headers),
+        ...proxiesToCaddy({ media, backend }),
+        "",
+    ].join("\n");
+}
+//# sourceMappingURL=static-config.js.map

package/dist/ops/static-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-config.js","sourceRoot":"","sources":["../../src/ops/static-config.js"],"names":[],"mappings":";AACA,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AAEtE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,KAAK,CAAC,KAAK;IAClB,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,IAAI;IACnC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG;YAC7B,CAAC,CAAC,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACnE,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACxD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE;IAC/C,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,iCAAiC,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;IAC/E,OAAO;QACL,+CAA+C;QAC/C,GAAG,gBAAgB,CAAC,SAAS,CAAC;QAC9B,GAAG,cAAc,CAAC,OAAO,CAAC;QAC1B,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/worker-assets.d.ts

@@ -0,0 +1,5 @@
+/** Match Wrangler's selective Worker-first patterns, including exclusions. */
+export function invokesWorkerFirst(patterns: any, pathname: any): boolean;
+export function validateWorkerAssets(config: any, staticPaths: any, reservedAreaEnabled?: boolean): void;
+export function assertFreeRuntimeRelease(target: any, env: any): void;
+//# sourceMappingURL=worker-assets.d.ts.map

package/dist/worker-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-assets.d.ts","sourceRoot":"","sources":["../src/worker-assets.js"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAMC;AAED,yGAYC;AAED,sEAIC"}

package/dist/worker-assets.js

@@ -0,0 +1,35 @@
+/** Match Wrangler's selective Worker-first patterns, including exclusions. */
+export function invokesWorkerFirst(patterns, pathname) {
+    const match = pattern => new RegExp(`^${pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replaceAll("*", ".*")}$`).test(pathname);
+    if (patterns === true)
+        return true;
+    if (!Array.isArray(patterns))
+        return false;
+    return patterns.some(pattern => !pattern.startsWith("!") && match(pattern))
+        && !patterns.some(pattern => pattern.startsWith("!") && match(pattern.slice(1)));
+}
+export function validateWorkerAssets(config, staticPaths, reservedAreaEnabled = false) {
+    const patterns = config.assets?.run_worker_first;
+    if (config.assets?.binding !== "ASSETS" || !config.main)
+        throw new Error("Worker must have an ASSETS binding and compiled entrypoint");
+    if (reservedAreaEnabled && (patterns === true || patterns?.includes("/*")))
+        throw new Error("Public assets must bypass the Worker");
+    for (const path of (reservedAreaEnabled ? ["/area-riservata/", "/area-riservata/example/", "/api/flowpress/reserved-area/login", "/api/flowpress/reserved-area/logout"] : [])) {
+        if (!invokesWorkerFirst(patterns, path))
+            throw new Error(`Protected runtime route missing: ${path}`);
+    }
+    for (const path of staticPaths) {
+        if (path.startsWith("/area-riservata/") || path.startsWith("/api/flowpress/reserved-area/"))
+            throw new Error(`Private static asset forbidden: ${path}`);
+        if (reservedAreaEnabled && invokesWorkerFirst(patterns, path))
+            throw new Error(`Static asset invokes Worker: ${path}`);
+    }
+    if (reservedAreaEnabled && (config.kv_namespaces?.length || config.images))
+        throw new Error("Free runtime must not provision session KV or Images bindings");
+}
+export function assertFreeRuntimeRelease(target, env) {
+    if (target.environmentName === "production" && target.projectType === "workers" && env.FLOWPRESS_RESERVED_AREA_ENABLED === "true" && env.CF_FREE_RUNTIME_VERIFIED !== "true") {
+        throw new Error("Production Workers release is gated: validate staging CPU (p95 < 8 ms, p99 < 10 ms, no exceededCpu), then set CF_FREE_RUNTIME_VERIFIED=true in the production environment.");
+    }
+}
+//# sourceMappingURL=worker-assets.js.map

package/dist/worker-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-assets.js","sourceRoot":"","sources":["../src/worker-assets.js"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,QAAQ,EAAE,QAAQ;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/H,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;WACtE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,KAAK;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACvI,IAAI,mBAAmB,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACpI,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,oCAAoC,EAAE,qCAAqC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9K,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QACxJ,IAAI,mBAAmB,IAAI,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AAC/J,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAM,EAAE,GAAG;IAClD,IAAI,MAAM,CAAC,eAAe,KAAK,YAAY,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,+BAA+B,KAAK,MAAM,IAAI,GAAG,CAAC,wBAAwB,KAAK,MAAM,EAAE,CAAC;QAC7K,MAAM,IAAI,KAAK,CAAC,4KAA4K,CAAC,CAAC;IAChM,CAAC;AACH,CAAC"}

package/flowpress-deploy.php

@@ -2,19 +2,20 @@
 /**
  * Plugin Name: FlowPress Deploy
  * Description: Revision-safe editorial build queue and deployment capability for FlowPress.
- * Version: 1.0.0-beta.1
+ * Version: 1.0.0-beta.5
  */
 
 if (! defined('ABSPATH')) {
     exit;
 }
 
-define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.1');
+define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.5');
 define('FLOWPRESS_DEPLOY_FILE', __FILE__);
 
 require_once __DIR__ . '/includes/queue-provider.php';
 require_once __DIR__ . '/includes/manual-queue.php';
 require_once __DIR__ . '/includes/admin.php';
+require_once __DIR__ . '/includes/automatic-build.php';
 
 add_action('muplugins_loaded', static function (): void {
     if (! function_exists('flowpress_register_build_queue_provider')) {

package/includes/automatic-build.php

@@ -0,0 +1,98 @@
+<?php
+
+declare(strict_types=1);
+defined('ABSPATH') || exit;
+
+/** Debounce editorial changes; local fixtures never dispatch remote builds. */
+function flowpress_deploy_schedule_public_build(int $delay = 60): void
+{
+    if (! in_array(flowpress_env('APP_ENV'), ['staging', 'production'], true)
+        || flowpress_env('CMS_GITHUB_DISPATCH_TOKEN') === ''
+        || flowpress_env('GITHUB_REPOSITORY_SLUG') === ''
+        || wp_next_scheduled('flowpress_deploy_dispatch_public_builds')) {
+        return;
+    }
+    wp_schedule_single_event(time() + $delay, 'flowpress_deploy_dispatch_public_builds');
+}
+
+function flowpress_deploy_dispatch_public_builds(): void
+{
+    if (! function_exists('flowpress_deploy_pending_count')) return;
+    global $wpdb;
+    foreach (flowpress_static_targets() as $target) {
+        if (flowpress_deploy_pending_count($target) === 0) continue;
+        $active = (int) $wpdb->get_var($wpdb->prepare(
+            'SELECT COUNT(*) FROM ' . flowpress_deploy_queue_table() . ' WHERE target = %s AND batch_id IS NOT NULL', $target
+        ));
+        if ($active > 0) {
+            flowpress_deploy_schedule_public_build();
+            continue;
+        }
+        $result = flowpress_dispatch_build($target, true);
+        $failed = is_wp_error($result);
+        update_option('flowpress_deploy_build_dispatch_status', ['failed' => $failed, 'time' => time()], false);
+        if ($failed) {
+            error_log('FlowPress build dispatch failed: ' . $result->get_error_code());
+            flowpress_deploy_schedule_public_build(300);
+        }
+    }
+}
+add_action('flowpress_deploy_dispatch_public_builds', 'flowpress_deploy_dispatch_public_builds');
+
+add_action('save_post', static function (int $id, WP_Post $post): void {
+    if (! wp_is_post_revision($id) && ! wp_is_post_autosave($id)
+        && in_array($post->post_type, array_merge(array_values(get_post_types(['public' => true])), ['wp_template', 'wp_template_part', 'wp_navigation', 'wp_block']), true)) {
+        flowpress_deploy_schedule_public_build();
+    }
+}, 40, 2);
+add_action('before_delete_post', static function (int $id, WP_Post $post): void {
+    if (in_array($post->post_type, array_merge(array_values(get_post_types(['public' => true])), ['wp_template', 'wp_template_part', 'wp_navigation', 'wp_block']), true)) flowpress_deploy_schedule_public_build();
+}, 40, 2);
+/** Public taxonomy edits can withdraw routes or change shared archive queries. */
+function flowpress_deploy_taxonomy_affects_public_build(string $taxonomy): bool
+{
+    $object = get_taxonomy($taxonomy);
+    return $object && (bool) apply_filters('flowpress_deploy_taxonomy_affects_public_build', $object->public, $taxonomy);
+}
+
+/** Term-only changes bypass save_post, including a public-to-private transition. */
+add_action('set_object_terms', static function (int $id, $terms, $tt_ids, string $taxonomy, bool $append, $old_tt_ids): void {
+    $post = get_post($id);
+    if (! $post instanceof WP_Post || $post->post_status !== 'publish'
+        || ! (get_post_type_object($post->post_type)->public ?? false)) return;
+    $current = array_map('intval', (array) $tt_ids);
+    $previous = array_map('intval', (array) $old_tt_ids);
+    sort($current); sort($previous);
+    if (! $append && $current === $previous) return;
+    // Hidden visibility/recipient taxonomies also affect public artifacts.
+    // A global descriptor avoids placing private titles or URLs in the queue.
+    flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+    flowpress_deploy_schedule_public_build();
+}, 40, 6);
+foreach (['created_term', 'edited_term', 'pre_delete_term'] as $hook) {
+    $callback = $hook === 'pre_delete_term'
+        ? static function (int $id, string $taxonomy): void {
+            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) {
+                flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+                flowpress_deploy_schedule_public_build();
+            }
+        }
+        : static function (int $id, int $tt_id, string $taxonomy): void {
+            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) {
+                flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+                flowpress_deploy_schedule_public_build();
+            }
+        };
+    add_action($hook, $callback, 40, $hook === 'pre_delete_term' ? 2 : 3);
+}
+
+add_action('admin_notices', static function (): void {
+    $status = get_option('flowpress_deploy_build_dispatch_status', []);
+    if (! empty($status['failed']) && current_user_can('edit_others_posts')) {
+        echo '<div class="notice notice-warning"><p>Avvio automatico della build non riuscito. Controlla la connessione GitHub in <a href="'
+            . esc_url(admin_url('tools.php?page=flowpress-builds')) . '">FlowPress Deploy</a>. Le modifiche pubbliche attendono il deploy riuscito.</p></div>';
+    }
+});
+
+add_action('flowpress_build_change_enqueued', 'flowpress_deploy_schedule_public_build');
+add_action('save_post_wp_block', static function():void { flowpress_deploy_schedule_public_build(); });

package/includes/queue-provider.php

@@ -318,6 +318,8 @@ function flowpress_deploy_collect_change(
     string $operation = 'update',
     bool $force_full = false
 ): void {
+    if (function_exists('flowpress_deploy_schedule_public_build')) flowpress_deploy_schedule_public_build();
+
     if ($operation === 'delete') {
         flowpress_deploy_enqueue_change($resource_type, $resource_id, $uri, 'delete', $force_full);
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@styleflow.app/flowpress-deploy",
-  "version": "1.0.0-beta.1",
+  "version": "1.0.0-beta.11",
   "description": "Safe full and partial deployment primitives for FlowPress.",
   "type": "module",
   "license": "UNLICENSED",
@@ -16,22 +16,65 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./frontend": {
+      "import": "./dist/frontend-links.js",
+      "types": "./dist/frontend-links.d.ts"
+    },
+    "./assets": {
+      "import": "./dist/frontend-assets.js",
+      "types": "./dist/frontend-assets.d.ts"
+    },
+    "./worker-assets": {
+      "import": "./dist/worker-assets.js",
+      "types": "./dist/worker-assets.d.ts"
+    },
+    "./ops/environment": {
+      "import": "./dist/ops/environment.js",
+      "types": "./dist/ops/environment.d.ts"
+    },
+    "./ops": {
+      "import": "./dist/ops/config.js",
+      "types": "./dist/ops/config.d.ts"
     }
   },
-  "files": ["dist", "includes", "docs", "flowpress-deploy.php", "composer.json", "README.md", "CHANGELOG.md"],
+  "files": [
+    "dist",
+    "includes",
+    "docs",
+    "flowpress-deploy.php",
+    "composer.json",
+    "README.md",
+    "CHANGELOG.md",
+    "containers",
+    "schema"
+  ],
   "scripts": {
     "build": "tsc -b",
     "typecheck": "tsc -b --pretty false",
-    "test": "vitest run && php tests/php/queue-provider-test.php",
-    "release:check": "npm run typecheck && npm test && npm pack --dry-run",
+    "test": "vitest run tests/deploy.test.ts && node --test tests/*-regressions.mjs && php tests/php/queue-provider-test.php && node --test tests/ops-*.test.mjs",
+    "release:check": "npm run typecheck && npm test && npm run test:ops:database && npm run test:ops:caddy && npm pack --dry-run",
     "release:publish:next": "npm publish --access public --tag next",
-    "prepublishOnly": "npm run typecheck && npm test"
+    "prepublishOnly": "npm run typecheck && npm test",
+    "test:ops": "node --test tests/ops-*.test.mjs",
+    "test:ops:database": "node tests/ops-database-integration.mjs",
+    "test:ops:caddy": "node tests/ops-caddy-integration.mjs"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",
     "typescript": "^5.9.3",
     "vitest": "^3.2.4"
   },
-  "engines": {"node": ">=22.0.0"},
-  "packageManager": "npm@10.9.3"
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "packageManager": "npm@10.9.3",
+  "dependencies": {
+    "dotenv": "17.4.2",
+    "dotenv-expand": "12.0.3",
+    "yaml": "2.9.1"
+  },
+  "bin": {
+    "flowpress-ops": "./dist/ops/cli.js"
+  }
 }

package/schema/deployment.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "FlowPress deployment manifest",
+  "type": "object",
+  "required": ["schemaVersion", "platform", "profile", "database", "media", "environments"],
+  "properties": {
+    "schemaVersion": { "const": 1 },
+    "platform": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
+    "profile": { "enum": ["backend", "static", "headless-static", "headless-ssr"] },
+    "database": { "const": "shared" },
+    "media": { "enum": ["local", "s3"] },
+    "registryProject": { "type": "string" },
+    "sources": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "required": ["ssh", "user", "path"],
+        "properties": { "ssh": { "type": "string" }, "user": { "type": "string" }, "path": { "type": "string", "pattern": "^/" } },
+        "additionalProperties": false
+      }
+    },
+    "environments": {
+      "type": "object",
+      "propertyNames": { "enum": ["local", "staging", "production", "preview"] },
+      "additionalProperties": {
+        "type": "object",
+        "required": ["publish"],
+        "properties": {
+          "publish": { "type": "array", "uniqueItems": true, "items": { "enum": ["cms", "web-static", "web-ssr"] } },
+          "profile": { "enum": ["backend", "static", "headless-static", "headless-ssr"] },
+          "frontendUrl": { "type": "string", "format": "uri" },
+          "backendUrl": { "type": "string", "format": "uri" },
+          "graphqlUrl": { "type": "string", "format": "uri" },
+          "mediaUrl": { "type": "string", "format": "uri" },
+          "backend": { "enum": ["local", "staging", "production"] },
+          "aliases": { "type": "array", "items": { "type": "string", "format": "uri" } },
+          "mode": { "const": "on-demand" },
+          "mail": { "enum": ["disabled", "capture", "smtp"] }
+        },
+        "additionalProperties": false
+      }
+    }
+  },
+  "additionalProperties": false
+}