@styleflow.app/flowpress-deploy 1.0.0-beta.1 → 1.0.0-beta.3

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 1.0.0-beta.3 — 2026-10-14
+
+- Queue complete builds for term-only changes to published content, including withdrawal after a visibility change. Keep unchanged assignments idle and avoid private data in the queue.
+- Verified public → private → public on disposable WordPress with all outbound HTTP intercepted.
+- [Canonical integration report](https://github.com/StyleFlow-App/styleflow-docs/blob/main/dev/rapporti/2026-10-14-consolidamento-tessari.md).
+
+## 1.0.0-beta.2 — 2026-10-14
+
+- Automatic debounced editorial builds and public asset validation/history.
+- Use public taxonomy hooks for scheduled builds and export portable link, asset-history and Worker validation tools.
+- [Canonical integration report](https://github.com/StyleFlow-App/styleflow-docs/blob/main/dev/rapporti/2026-10-14-consolidamento-tessari.md).
+
+
 ## 1.0.0-beta.1
 
 - Added the automatically selected `flowpress-deploy` Core queue provider.

package/README.md

@@ -1,34 +1,6 @@
 # FlowPress Deploy
 
-Installable npm/Composer feature pack for revision-safe editorial queues and
-safe full/partial build orchestration. WordPress owns a durable queue per
-frontend target; frontend workflows keep the existing `batchId`, `target`,
-`mode`, `paths` and `deletedPaths` wire contract.
+Official npm/Composer integration for FlowPress.
 
-The public API validates paths and `_routes.json`, merges partial artifacts
-without traversal or case collisions, regenerates sitemaps, selects Pages for
-static targets and Workers for dev, requires `ASTRO_KEY` for protected batches,
-and acknowledges the CMS queue only after deploy and smoke test. Failed
-batches are released for retry.
-
-## WordPress queue
-
-When the Composer package is installed, Deploy automatically becomes the
-FlowPress Core queue provider. It fingerprints content at the end of the
-request, groups WPML translations, keeps current and previous URIs and stores
-a revision snapshot for every dispatched batch. A callback acknowledges only
-the dispatched revision; concurrent editorial changes remain pending.
-
-Editors can use **Aggiungi alla build queue** from edit screens and list rows.
-Administrators operate the queue in **Strumenti → FlowPress Deploy**.
-
-## Documentation
-
-Start with [docs/README.md](docs/README.md). It links configuration, queue
-semantics, frontend integration, operations, recovery and troubleshooting.
-
-## WordPress Core v1
-
-The `1.0.0-beta.x` line requires FlowPress WordPress Core v1. It does not
-provide a v0.x compatibility constraint or adapter; canary applications pin
-the selected Core prerelease exactly.
+- [Canonical guide](https://github.com/StyleFlow-App/styleflow-docs/blob/main/wiki/flowpress-routing-deploy.md)
+- [Release and verification report](https://github.com/StyleFlow-App/styleflow-docs/blob/main/dev/rapporti/2026-10-14-consolidamento-tessari.md)

package/dist/frontend-assets.d.ts

@@ -0,0 +1,2 @@
+export function retainFrontendAssets(output: any, baselineDirectories: any): Promise<number>;
+//# sourceMappingURL=frontend-assets.d.ts.map

package/dist/frontend-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-assets.d.ts","sourceRoot":"","sources":["../src/frontend-assets.js"],"names":[],"mappings":"AAUA,6FA4BC"}

package/dist/frontend-assets.js

@@ -0,0 +1,44 @@
+import { copyFile, mkdir, readFile, writeFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { frontendFiles } from "./frontend-links.js";
+const manifestName = ".flowpress-asset-generations.json";
+const clientDirectory = output => existsSync(resolve(output, "client")) ? resolve(output, "client") : output;
+// Keep three distinct sets of immutable assets so pages opened before a deploy
+// can still load their styles, scripts and deferred imports. Never retain HTML.
+export async function retainFrontendAssets(output, baselineDirectories) {
+    const client = clientDirectory(output);
+    const current = (await frontendFiles(client)).filter(path => path.startsWith("/_astro/")).sort();
+    const generations = [current];
+    const sources = new Map();
+    for (const baseline of baselineDirectories.filter(existsSync)) {
+        const baselineClient = clientDirectory(baseline);
+        const previousFiles = (await frontendFiles(baselineClient)).filter(path => path.startsWith("/_astro/"));
+        for (const path of previousFiles)
+            if (!sources.has(path))
+                sources.set(path, resolve(baselineClient, path.slice(1)));
+        const manifest = await readFile(resolve(baseline, manifestName), "utf8").then(JSON.parse).catch(() => null);
+        for (const generation of manifest?.generations ?? [previousFiles.sort()]) {
+            if (!generations.some(existing => JSON.stringify(existing) === JSON.stringify(generation)))
+                generations.push(generation);
+        }
+    }
+    const retained = generations.slice(0, 3);
+    let copied = 0;
+    for (const path of new Set(retained.flat())) {
+        if (!/^\/_astro\/[A-Za-z0-9_./@-]+$/.test(path) || path.split("/").some(part => part === ".." || part === "."))
+            throw new Error(`Invalid retained asset: ${path}`);
+        const destination = resolve(client, path.slice(1));
+        if (existsSync(destination))
+            continue;
+        const source = sources.get(path);
+        if (!source)
+            throw new Error(`Baseline is missing retained asset ${path}`);
+        await mkdir(dirname(destination), { recursive: true });
+        await copyFile(source, destination);
+        copied++;
+    }
+    await writeFile(resolve(output, manifestName), `${JSON.stringify({ generations: retained }, null, 2)}\n`);
+    return copied;
+}
+//# sourceMappingURL=frontend-assets.js.map

package/dist/frontend-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-assets.js","sourceRoot":"","sources":["../src/frontend-assets.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,YAAY,GAAG,mCAAmC,CAAC;AACzD,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAE7G,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAM,EAAE,mBAAmB;IACpE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1B,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,cAAc,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,CAAC,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACxG,KAAK,MAAM,IAAI,IAAI,aAAa;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5G,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAAE,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3H,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACnK,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/frontend-links.d.ts

@@ -0,0 +1,14 @@
+export function frontendFiles(directory: any): Promise<any[]>;
+export function htmlReferences(html: any): any[];
+export function inspectFrontendLinks(directory: any, { origins, workerPatterns }?: {
+    origins?: never[] | undefined;
+    workerPatterns?: never[] | undefined;
+}): Promise<{
+    paths: string[];
+    broken: {
+        source: any;
+        path: string;
+    }[];
+    pages: number;
+}>;
+//# sourceMappingURL=frontend-links.d.ts.map

package/dist/frontend-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-links.d.ts","sourceRoot":"","sources":["../src/frontend-links.js"],"names":[],"mappings":"AAIA,8DAWC;AAED,iDAWC;AAED;;;;;;;;;;GAwCC"}

package/dist/frontend-links.js

@@ -0,0 +1,82 @@
+import { readFile, readdir } from "node:fs/promises";
+import { relative, resolve, sep } from "node:path";
+import { invokesWorkerFirst } from "./worker-assets.js";
+export async function frontendFiles(directory) {
+    const files = [];
+    async function visit(current) {
+        for (const entry of await readdir(current, { withFileTypes: true })) {
+            const absolute = resolve(current, entry.name);
+            if (entry.isDirectory())
+                await visit(absolute);
+            if (entry.isFile())
+                files.push(`/${relative(directory, absolute).split(sep).join("/")}`);
+        }
+    }
+    await visit(directory);
+    return files;
+}
+export function htmlReferences(html) {
+    const references = [];
+    for (const tag of html.matchAll(/<(?:a|link|script|img|source|video|audio|iframe|form)\b[^>]*>/gi)) {
+        for (const attribute of tag[0].matchAll(/\s(href|src|poster|action|srcset)\s*=\s*(?:"([^"]*)"|'([^']*)')/gi)) {
+            const value = (attribute[2] ?? attribute[3]).replaceAll("&amp;", "&");
+            if (attribute[1].toLowerCase() === "srcset") {
+                if (!value.startsWith("data:"))
+                    references.push(...value.split(",").map(item => item.trim().split(/\s+/)[0]));
+            }
+            else
+                references.push(value);
+        }
+    }
+    return references;
+}
+export async function inspectFrontendLinks(directory, { origins = [], workerPatterns = [] } = {}) {
+    const files = await frontendFiles(directory);
+    const existing = new Set(files);
+    const redirectsText = await readFile(resolve(directory, "_redirects"), "utf8").catch(() => "");
+    const redirects = new Map(redirectsText.split("\n").filter(line => line.trim() && !line.startsWith("#")).map(line => {
+        const [source, target] = line.trim().split(/\s+/);
+        return [source, target];
+    }));
+    const origin = origins[0] || "https://frontend.test";
+    const localOrigins = new Set([origin, ...origins]);
+    const paths = new Set(["/"]);
+    for (const file of files.filter(file => file.startsWith("/_astro/")))
+        paths.add(file);
+    const broken = [];
+    const hasRoute = path => existing.has(path) || existing.has(`${path.replace(/\/$/, "")}/index.html`) || existing.has(`${path}.html`) || invokesWorkerFirst(workerPatterns, path);
+    function resolves(path, seen = new Set()) {
+        if (seen.has(path))
+            return false;
+        seen.add(path);
+        if (redirects.has(path)) {
+            const target = new URL(redirects.get(path), origin);
+            return !localOrigins.has(target.origin) || resolves(decodeURIComponent(target.pathname), seen);
+        }
+        return hasRoute(path);
+    }
+    for (const file of files.filter(file => file.endsWith(".html") && file !== "/404.html")) {
+        const route = file.replace(/index\.html$/, "").replace(/\.html$/, "");
+        paths.add(route || "/");
+        for (const reference of htmlReferences(await readFile(resolve(directory, file.slice(1)), "utf8"))) {
+            if (!reference || reference.startsWith("#"))
+                continue;
+            const url = new URL(reference, `${origin}${route}`);
+            if (!["https:", "http:"].includes(url.protocol) || !localOrigins.has(url.origin))
+                continue;
+            const path = decodeURIComponent(url.pathname);
+            if (!resolves(path))
+                broken.push({ source: file, path });
+            else if (!invokesWorkerFirst(workerPatterns, path))
+                paths.add(path);
+        }
+    }
+    for (const [source] of redirects) {
+        if (!resolves(source))
+            broken.push({ source: "_redirects", path: source });
+        else
+            paths.add(source);
+    }
+    return { paths: [...paths].sort(), broken, pages: files.filter(file => file.endsWith(".html") && file !== "/404.html").length };
+}
+//# sourceMappingURL=frontend-links.js.map

package/dist/frontend-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-links.js","sourceRoot":"","sources":["../src/frontend-links.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAS;IAC3C,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,KAAK,UAAU,KAAK,CAAC,OAAO;QAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,KAAK,CAAC,MAAM,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI;IACjC,MAAM,UAAU,GAAG,EAAE,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,iEAAiE,CAAC,EAAE,CAAC;QACnG,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC,EAAE,CAAC;YAC7G,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACtE,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChH,CAAC;;gBAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAS,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,cAAc,GAAG,EAAE,EAAE,GAAG,EAAE;IAC9F,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAClH,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,uBAAuB,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACjL,SAAS,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,EAAE;QACtC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QACxF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACtE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;QACxB,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC3F,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;iBACpD,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;;YACtE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;AAClI,CAAC"}

package/dist/worker-assets.d.ts

@@ -0,0 +1,5 @@
+/** Match Wrangler's selective Worker-first patterns, including exclusions. */
+export function invokesWorkerFirst(patterns: any, pathname: any): boolean;
+export function validateWorkerAssets(config: any, staticPaths: any, reservedAreaEnabled?: boolean): void;
+export function assertFreeRuntimeRelease(target: any, env: any): void;
+//# sourceMappingURL=worker-assets.d.ts.map

package/dist/worker-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-assets.d.ts","sourceRoot":"","sources":["../src/worker-assets.js"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAMC;AAED,yGAYC;AAED,sEAIC"}

package/dist/worker-assets.js

@@ -0,0 +1,35 @@
+/** Match Wrangler's selective Worker-first patterns, including exclusions. */
+export function invokesWorkerFirst(patterns, pathname) {
+    const match = pattern => new RegExp(`^${pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replaceAll("*", ".*")}$`).test(pathname);
+    if (patterns === true)
+        return true;
+    if (!Array.isArray(patterns))
+        return false;
+    return patterns.some(pattern => !pattern.startsWith("!") && match(pattern))
+        && !patterns.some(pattern => pattern.startsWith("!") && match(pattern.slice(1)));
+}
+export function validateWorkerAssets(config, staticPaths, reservedAreaEnabled = false) {
+    const patterns = config.assets?.run_worker_first;
+    if (config.assets?.binding !== "ASSETS" || !config.main)
+        throw new Error("Worker must have an ASSETS binding and compiled entrypoint");
+    if (reservedAreaEnabled && (patterns === true || patterns?.includes("/*")))
+        throw new Error("Public assets must bypass the Worker");
+    for (const path of (reservedAreaEnabled ? ["/area-riservata/", "/area-riservata/example/", "/api/flowpress/reserved-area/login", "/api/flowpress/reserved-area/logout"] : [])) {
+        if (!invokesWorkerFirst(patterns, path))
+            throw new Error(`Protected runtime route missing: ${path}`);
+    }
+    for (const path of staticPaths) {
+        if (path.startsWith("/area-riservata/") || path.startsWith("/api/flowpress/reserved-area/"))
+            throw new Error(`Private static asset forbidden: ${path}`);
+        if (reservedAreaEnabled && invokesWorkerFirst(patterns, path))
+            throw new Error(`Static asset invokes Worker: ${path}`);
+    }
+    if (reservedAreaEnabled && (config.kv_namespaces?.length || config.images))
+        throw new Error("Free runtime must not provision session KV or Images bindings");
+}
+export function assertFreeRuntimeRelease(target, env) {
+    if (target.environmentName === "production" && target.projectType === "workers" && env.FLOWPRESS_RESERVED_AREA_ENABLED === "true" && env.CF_FREE_RUNTIME_VERIFIED !== "true") {
+        throw new Error("Production Workers release is gated: validate staging CPU (p95 < 8 ms, p99 < 10 ms, no exceededCpu), then set CF_FREE_RUNTIME_VERIFIED=true in the production environment.");
+    }
+}
+//# sourceMappingURL=worker-assets.js.map

package/dist/worker-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-assets.js","sourceRoot":"","sources":["../src/worker-assets.js"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,QAAQ,EAAE,QAAQ;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/H,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;WACtE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,KAAK;IACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACvI,IAAI,mBAAmB,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACpI,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,0BAA0B,EAAE,oCAAoC,EAAE,qCAAqC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9K,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QACxJ,IAAI,mBAAmB,IAAI,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AAC/J,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAM,EAAE,GAAG;IAClD,IAAI,MAAM,CAAC,eAAe,KAAK,YAAY,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,CAAC,+BAA+B,KAAK,MAAM,IAAI,GAAG,CAAC,wBAAwB,KAAK,MAAM,EAAE,CAAC;QAC7K,MAAM,IAAI,KAAK,CAAC,4KAA4K,CAAC,CAAC;IAChM,CAAC;AACH,CAAC"}

package/flowpress-deploy.php

@@ -2,19 +2,20 @@
 /**
  * Plugin Name: FlowPress Deploy
  * Description: Revision-safe editorial build queue and deployment capability for FlowPress.
- * Version: 1.0.0-beta.1
+ * Version: 1.0.0-beta.3
  */
 
 if (! defined('ABSPATH')) {
     exit;
 }
 
-define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.1');
+define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.3');
 define('FLOWPRESS_DEPLOY_FILE', __FILE__);
 
 require_once __DIR__ . '/includes/queue-provider.php';
 require_once __DIR__ . '/includes/manual-queue.php';
 require_once __DIR__ . '/includes/admin.php';
+require_once __DIR__ . '/includes/automatic-build.php';
 
 add_action('muplugins_loaded', static function (): void {
     if (! function_exists('flowpress_register_build_queue_provider')) {

package/includes/automatic-build.php

@@ -0,0 +1,98 @@
+<?php
+
+declare(strict_types=1);
+defined('ABSPATH') || exit;
+
+/** Debounce editorial changes; local fixtures never dispatch remote builds. */
+function flowpress_deploy_schedule_public_build(int $delay = 60): void
+{
+    if (! in_array(flowpress_env('APP_ENV'), ['staging', 'production'], true)
+        || flowpress_env('CMS_GITHUB_DISPATCH_TOKEN') === ''
+        || flowpress_env('GITHUB_REPOSITORY_SLUG') === ''
+        || wp_next_scheduled('flowpress_deploy_dispatch_public_builds')) {
+        return;
+    }
+    wp_schedule_single_event(time() + $delay, 'flowpress_deploy_dispatch_public_builds');
+}
+
+function flowpress_deploy_dispatch_public_builds(): void
+{
+    if (! function_exists('flowpress_deploy_pending_count')) return;
+    global $wpdb;
+    foreach (flowpress_static_targets() as $target) {
+        if (flowpress_deploy_pending_count($target) === 0) continue;
+        $active = (int) $wpdb->get_var($wpdb->prepare(
+            'SELECT COUNT(*) FROM ' . flowpress_deploy_queue_table() . ' WHERE target = %s AND batch_id IS NOT NULL', $target
+        ));
+        if ($active > 0) {
+            flowpress_deploy_schedule_public_build();
+            continue;
+        }
+        $result = flowpress_dispatch_build($target, true);
+        $failed = is_wp_error($result);
+        update_option('flowpress_deploy_build_dispatch_status', ['failed' => $failed, 'time' => time()], false);
+        if ($failed) {
+            error_log('FlowPress build dispatch failed: ' . $result->get_error_code());
+            flowpress_deploy_schedule_public_build(300);
+        }
+    }
+}
+add_action('flowpress_deploy_dispatch_public_builds', 'flowpress_deploy_dispatch_public_builds');
+
+add_action('save_post', static function (int $id, WP_Post $post): void {
+    if (! wp_is_post_revision($id) && ! wp_is_post_autosave($id)
+        && in_array($post->post_type, array_merge(array_values(get_post_types(['public' => true])), ['wp_template', 'wp_template_part', 'wp_navigation', 'wp_block']), true)) {
+        flowpress_deploy_schedule_public_build();
+    }
+}, 40, 2);
+add_action('before_delete_post', static function (int $id, WP_Post $post): void {
+    if (in_array($post->post_type, array_merge(array_values(get_post_types(['public' => true])), ['wp_template', 'wp_template_part', 'wp_navigation', 'wp_block']), true)) flowpress_deploy_schedule_public_build();
+}, 40, 2);
+/** Public taxonomy edits can withdraw routes or change shared archive queries. */
+function flowpress_deploy_taxonomy_affects_public_build(string $taxonomy): bool
+{
+    $object = get_taxonomy($taxonomy);
+    return $object && (bool) apply_filters('flowpress_deploy_taxonomy_affects_public_build', $object->public, $taxonomy);
+}
+
+/** Term-only changes bypass save_post, including a public-to-private transition. */
+add_action('set_object_terms', static function (int $id, $terms, $tt_ids, string $taxonomy, bool $append, $old_tt_ids): void {
+    $post = get_post($id);
+    if (! $post instanceof WP_Post || $post->post_status !== 'publish'
+        || ! (get_post_type_object($post->post_type)->public ?? false)) return;
+    $current = array_map('intval', (array) $tt_ids);
+    $previous = array_map('intval', (array) $old_tt_ids);
+    sort($current); sort($previous);
+    if (! $append && $current === $previous) return;
+    // Hidden visibility/recipient taxonomies also affect public artifacts.
+    // A global descriptor avoids placing private titles or URLs in the queue.
+    flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+    flowpress_deploy_schedule_public_build();
+}, 40, 6);
+foreach (['created_term', 'edited_term', 'pre_delete_term'] as $hook) {
+    $callback = $hook === 'pre_delete_term'
+        ? static function (int $id, string $taxonomy): void {
+            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) {
+                flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+                flowpress_deploy_schedule_public_build();
+            }
+        }
+        : static function (int $id, int $tt_id, string $taxonomy): void {
+            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) {
+                flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+                flowpress_deploy_schedule_public_build();
+            }
+        };
+    add_action($hook, $callback, 40, $hook === 'pre_delete_term' ? 2 : 3);
+}
+
+add_action('admin_notices', static function (): void {
+    $status = get_option('flowpress_deploy_build_dispatch_status', []);
+    if (! empty($status['failed']) && current_user_can('edit_others_posts')) {
+        echo '<div class="notice notice-warning"><p>Avvio automatico della build non riuscito. Controlla la connessione GitHub in <a href="'
+            . esc_url(admin_url('tools.php?page=flowpress-builds')) . '">FlowPress Deploy</a>. Le modifiche pubbliche attendono il deploy riuscito.</p></div>';
+    }
+});
+
+add_action('flowpress_build_change_enqueued', 'flowpress_deploy_schedule_public_build');
+add_action('save_post_wp_block', static function():void { flowpress_deploy_schedule_public_build(); });

package/includes/queue-provider.php

@@ -318,6 +318,8 @@ function flowpress_deploy_collect_change(
     string $operation = 'update',
     bool $force_full = false
 ): void {
+    if (function_exists('flowpress_deploy_schedule_public_build')) flowpress_deploy_schedule_public_build();
+
     if ($operation === 'delete') {
         flowpress_deploy_enqueue_change($resource_type, $resource_id, $uri, 'delete', $force_full);
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@styleflow.app/flowpress-deploy",
-  "version": "1.0.0-beta.1",
+  "version": "1.0.0-beta.3",
   "description": "Safe full and partial deployment primitives for FlowPress.",
   "type": "module",
   "license": "UNLICENSED",
@@ -16,13 +16,33 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./frontend": {
+      "import": "./dist/frontend-links.js",
+      "types": "./dist/frontend-links.d.ts"
+    },
+    "./assets": {
+      "import": "./dist/frontend-assets.js",
+      "types": "./dist/frontend-assets.d.ts"
+    },
+    "./worker-assets": {
+      "import": "./dist/worker-assets.js",
+      "types": "./dist/worker-assets.d.ts"
     }
   },
-  "files": ["dist", "includes", "docs", "flowpress-deploy.php", "composer.json", "README.md", "CHANGELOG.md"],
+  "files": [
+    "dist",
+    "includes",
+    "docs",
+    "flowpress-deploy.php",
+    "composer.json",
+    "README.md",
+    "CHANGELOG.md"
+  ],
   "scripts": {
     "build": "tsc -b",
     "typecheck": "tsc -b --pretty false",
-    "test": "vitest run && php tests/php/queue-provider-test.php",
+    "test": "vitest run && node --test tests/*-regressions.mjs && php tests/php/queue-provider-test.php",
     "release:check": "npm run typecheck && npm test && npm pack --dry-run",
     "release:publish:next": "npm publish --access public --tag next",
     "prepublishOnly": "npm run typecheck && npm test"
@@ -32,6 +52,8 @@
     "typescript": "^5.9.3",
     "vitest": "^3.2.4"
   },
-  "engines": {"node": ">=22.0.0"},
+  "engines": {
+    "node": ">=22.0.0"
+  },
   "packageManager": "npm@10.9.3"
 }