@styleflow.app/flowpress-deploy 1.0.0-beta.2 → 1.0.0-beta.21

package/dist/ops/release.js

@@ -0,0 +1,79 @@
+import { readFileSync } from "node:fs";
+import { allowedComponents, loadState } from "./config.js";
+import { build } from "./build.js";
+import { deploy, deployedRelease } from "./deploy.js";
+import { capture } from "./process.js";
+import { acknowledgeBatch, validateBuildRequest } from "./editorial.js";
+export function changedComponents(paths, available) {
+    if (!paths.length)
+        return [];
+    const relevant = paths.filter(path => !/^(docs\/|README|CHANGELOG)|\.md$/.test(path));
+    if (!relevant.length)
+        return [];
+    const cms = relevant.some(path => /^apps\/cms\//.test(path));
+    const web = relevant.some(path => /^apps\/web\//.test(path));
+    const shared = relevant.some(path => !/^apps\/(cms|web)\//.test(path));
+    return available.filter(component => shared || (component === "cms" ? cms : web));
+}
+export async function editorialCommit(root, manifest, payload) {
+    const request = validateBuildRequest(payload);
+    allowedComponents(manifest, request.target, ["web-static"]);
+    const app = loadState(root, request.target).apps?.["web-static"];
+    if (!app?.url)
+        throw new Error("No deployed static frontend for this editorial target.");
+    const res = await fetch(app.url + app.health + "?editorial=" + Date.now(), { redirect: "error", signal: AbortSignal.timeout(10000) });
+    const data = await res.json();
+    if (!res.ok || data.status !== "ok" || !/^[a-f0-9]{40}$/.test(data.release || "") || data.backendTarget !== request.target)
+        throw new Error("Editorial target is not a healthy static frontend using this backend.");
+    return { request, sha: data.release };
+}
+export async function release(root, manifest, name, { component, sha, buildId, editorial = false } = {}) {
+    let selected = allowedComponents(manifest, name, component ? [component] : []);
+    const revision = sha || capture("git", ["rev-parse", "HEAD"], { cwd: root });
+    let request;
+    if (editorial) {
+        const event = JSON.parse(readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+        const live = await editorialCommit(root, manifest, event.client_payload);
+        if (live.request.target !== name || live.sha !== revision)
+            throw new Error("Editorial build must check out the exact deployed commit.");
+        request = live.request;
+        selected = ["web-static"];
+    }
+    else if (process.env.GITHUB_EVENT_NAME === "push" && process.env.GITHUB_EVENT_PATH) {
+        const event = JSON.parse(readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+        if (/^[a-f0-9]{40}$/.test(event.before || "") && !/^0+$/.test(event.before)) {
+            try {
+                selected = changedComponents(capture("git", ["diff", "--name-only", event.before, revision], { cwd: root }).split("\n").filter(Boolean), selected);
+            }
+            catch { /* shallow checkout: safely build all allowed components */ }
+        }
+    }
+    const results = [];
+    try {
+        for (const item of selected) {
+            if (name === "production" && item === "cms") {
+                const verified = await deployedRelease(root, "staging", "cms");
+                if (!verified || verified.sha !== revision)
+                    throw new Error("Production CMS must promote the staging image for this SHA.");
+                results.push(await deploy(root, manifest, name, item, { release: { ...verified, environment: "production" } }));
+            }
+            else {
+                await build(root, manifest, name, item, { sha: revision, buildId, push: true });
+                results.push(await deploy(root, manifest, name, item));
+            }
+        }
+        if (request)
+            await acknowledgeBatch({ request, backend: manifest.environments[name].backendUrl, token: process.env.CMS_BUILD_CALLBACK_TOKEN, status: "success" });
+    }
+    catch (error) {
+        if (request) {
+            try {
+                await acknowledgeBatch({ request, backend: manifest.environments[name].backendUrl, token: process.env.CMS_BUILD_CALLBACK_TOKEN, status: "failure" });
+            }
+            catch { /* original failure remains authoritative; batch is retained */ }
+        }
+        throw error;
+    }
+    return { environment: name, components: selected, results };
+}
+//# sourceMappingURL=release.js.map

package/dist/ops/release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.js","sourceRoot":"","sources":["../../src/ops/release.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAExE,MAAM,UAAU,iBAAiB,CAAC,KAAK,EAAE,SAAS;IAChD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO;IAC3D,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,CAAC,GAAG,EAAE,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtI,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACrN,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACxC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,EAAE;IACrG,IAAI,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,OAAO,CAAC;IACZ,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACxI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,QAAQ,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9E,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC;gBAAC,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;QACnO,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC/D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;gBAC3H,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;YAClH,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChF,OAAO,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpK,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;QACzO,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC"}

package/dist/ops/s3.d.ts

@@ -0,0 +1,8 @@
+export function s3Put(bucket: any, key: any, file: any): void;
+export function s3Get(bucket: any, key: any, file: any): void;
+export function s3List(bucket: any, prefix: any, request?: (url: any) => any): {
+    key: any;
+    modified: any;
+    size: number;
+}[];
+//# sourceMappingURL=s3.d.ts.map

package/dist/ops/s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.d.ts","sourceRoot":"","sources":["../../src/ops/s3.js"],"names":[],"mappings":"AAQA,8DAEC;AAED,8DAGC;AAID,4DAAkD,QAAG;;;;IAkBpD"}

package/dist/ops/s3.js

@@ -0,0 +1,38 @@
+import { chmodSync } from "node:fs";
+import { capture } from "./process.js";
+function curl(bucket, args) {
+    return capture("curl", ["-K", "-", "--fail-with-body", "--max-time", "60", "-sS", "--aws-sigv4", "aws:amz:" + (bucket.region || "auto") + ":s3", ...args], {
+        input: `user = "${bucket.user}"\n`,
+    });
+}
+export function s3Put(bucket, key, file) {
+    curl(bucket, ["-T", file, `${bucket.endpoint}/${bucket.bucket}/${key}`]);
+}
+export function s3Get(bucket, key, file) {
+    curl(bucket, ["-o", file, `${bucket.endpoint}/${bucket.bucket}/${key}`]);
+    chmodSync(file, 0o600); // backups contain personal data and password hashes
+}
+const decodeXml = (value) => value.replaceAll("&amp;", "&").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&quot;", '"').replaceAll("&apos;", "'");
+export function s3List(bucket, prefix, request = (url) => curl(bucket, [url])) {
+    const objects = [];
+    const tokens = new Set();
+    let token;
+    do {
+        const query = new URLSearchParams({ "list-type": "2", prefix });
+        if (token)
+            query.set("continuation-token", token);
+        const xml = request(`${bucket.endpoint}/${bucket.bucket}?${query}`);
+        const field = (source, name) => decodeXml(source.match(new RegExp(`<${name}>([^<]*)</${name}>`))?.[1] ?? "");
+        objects.push(...[...xml.matchAll(/<Contents>(.*?)<\/Contents>/gs)].map(([, block]) => ({
+            key: field(block, "Key"), modified: field(block, "LastModified"), size: Number(field(block, "Size")),
+        })));
+        if (field(xml, "IsTruncated") !== "true")
+            break;
+        token = field(xml, "NextContinuationToken");
+        if (!token || tokens.has(token))
+            throw new Error("S3 returned an invalid pagination token.");
+        tokens.add(token);
+    } while (token);
+    return objects;
+}
+//# sourceMappingURL=s3.js.map

package/dist/ops/s3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3.js","sourceRoot":"","sources":["../../src/ops/s3.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI;IACxB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE;QACzJ,KAAK,EAAE,WAAW,MAAM,CAAC,IAAI,KAAK;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACzE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,oDAAoD;AAC9E,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAEhK,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,IAAI,KAAK,CAAC;IACV,GAAG,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,aAAa,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7G,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACrF,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;SACrG,CAAC,CAAC,CAAC,CAAC;QACL,IAAI,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,KAAK,MAAM;YAAE,MAAM;QAChD,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,QAAQ,KAAK,EAAE;IAChB,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/ops/static-config.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+export function redirectsToCaddy(text: any): string[];
+export function headersToCaddy(text: any): string[];
+export function proxiesToCaddy({ media, backend }: {
+    media: any;
+    backend: any;
+}): string[];
+export function buildRoutesCaddy({ redirects, headers, media, backend }: {
+    redirects?: string | undefined;
+    headers?: string | undefined;
+    media: any;
+    backend: any;
+}): string;
+//# sourceMappingURL=static-config.d.ts.map

package/dist/ops/static-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-config.d.ts","sourceRoot":"","sources":["../../src/ops/static-config.js"],"names":[],"mappings":";AAoBA,sDAwBC;AAED,oDAmBC;AAED;;;aAkBC;AAED;;;;;WAQC"}

package/dist/ops/static-config.js

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+// Turns the static Astro build's Cloudflare-style `_redirects` and `_headers`
+// into Caddy directives, plus the /media and /app/uploads proxies that the
+// Pages Functions used to provide. Output: <dist>/.container/routes.caddy.
+//
+//   APP_ENV=production node FlowPress Deploy apps/web/dist-production
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+function quote(value) {
+    if (/["\s{}]/.test(value) && !/^"[^"]*"$/.test(value)) {
+        return `"${value.replaceAll('"', '\\"')}"`;
+    }
+    return value;
+}
+// FlowPress routing only emits exact paths (see validateRedirects), so every
+// line is "source target status". Both slash variants of a source redirect.
+export function redirectsToCaddy(text) {
+    const lines = [];
+    let index = 0;
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const [source, target, status = "301", ...rest] = line.split(/\s+/);
+        if (rest.length || !source?.startsWith("/") || !target) {
+            throw new Error(`Unsupported _redirects line: ${line}`);
+        }
+        if (/[*:]/.test(source)) {
+            throw new Error(`Splats and placeholders are not supported: ${line}`);
+        }
+        if (!["301", "302", "307", "308"].includes(status)) {
+            throw new Error(`Unsupported redirect status: ${line}`);
+        }
+        const variants = source === "/"
+            ? ["/"]
+            : [source.replace(/\/+$/, ""), `${source.replace(/\/+$/, "")}/`];
+        index += 1;
+        lines.push(`@redirect${index} path ${variants.map(quote).join(" ")}`);
+        lines.push(`redir @redirect${index} ${quote(target)} ${status}`);
+    }
+    return lines;
+}
+export function headersToCaddy(text) {
+    const lines = [];
+    let pattern = null;
+    for (const raw of text.split(/\r?\n/)) {
+        if (!raw.trim() || raw.trim().startsWith("#"))
+            continue;
+        if (!/^\s/.test(raw)) {
+            pattern = raw.trim();
+            if (!pattern.startsWith("/"))
+                throw new Error(`Unsupported _headers pattern: ${pattern}`);
+            continue;
+        }
+        if (!pattern)
+            throw new Error(`Header without a path pattern: ${raw.trim()}`);
+        const separator = raw.indexOf(":");
+        if (separator < 0)
+            throw new Error(`Unsupported _headers line: ${raw.trim()}`);
+        const name = raw.slice(0, separator).trim();
+        const value = raw.slice(separator + 1).trim();
+        const matcher = pattern === "/*" ? "*" : pattern;
+        lines.push(`header ${matcher} ${name} ${quote(value)}`);
+    }
+    return lines;
+}
+export function proxiesToCaddy({ media, backend }) {
+    const lines = [];
+    const mediaUrl = new URL(media);
+    const mediaBase = mediaUrl.pathname.replace(/\/+$/, "");
+    lines.push("@flowpress_media path_regexp flowpress_media ^/media(/.+\\.[a-zA-Z0-9]{1,8})$");
+    lines.push("handle @flowpress_media {");
+    lines.push(`\trewrite * ${mediaBase}{http.regexp.flowpress_media.1}`);
+    lines.push(`\treverse_proxy ${mediaUrl.origin} {`);
+    lines.push("\t\theader_up Host {upstream_hostport}");
+    lines.push("\t}");
+    lines.push("}");
+    const backendUrl = new URL(backend);
+    lines.push("handle /app/uploads/* {");
+    lines.push(`\treverse_proxy ${backendUrl.origin} {`);
+    lines.push("\t\theader_up Host {upstream_hostport}");
+    lines.push("\t}");
+    lines.push("}");
+    return lines;
+}
+export function buildRoutesCaddy({ redirects = "", headers = "", media, backend }) {
+    return [
+        "# Generated by FlowPress Deploy. Do not edit.",
+        ...redirectsToCaddy(redirects),
+        ...headersToCaddy(headers),
+        ...proxiesToCaddy({ media, backend }),
+        "",
+    ].join("\n");
+}
+//# sourceMappingURL=static-config.js.map

package/dist/ops/static-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-config.js","sourceRoot":"","sources":["../../src/ops/static-config.js"],"names":[],"mappings":";AACA,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AAEtE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,SAAS,KAAK,CAAC,KAAK;IAClB,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,IAAI;IACnC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,GAAG;YAC7B,CAAC,CAAC,CAAC,GAAG,CAAC;YACP,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACnE,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI;IACjC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACxD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE;IAC/C,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC5F,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,eAAe,SAAS,iCAAiC,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACnD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;IAC/E,OAAO;QACL,+CAA+C;QAC/C,GAAG,gBAAgB,CAAC,SAAS,CAAC;QAC9B,GAAG,cAAc,CAAC,OAAO,CAAC;QAC1B,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/flowpress-deploy.php

@@ -2,14 +2,14 @@
 /**
  * Plugin Name: FlowPress Deploy
  * Description: Revision-safe editorial build queue and deployment capability for FlowPress.
- * Version: 1.0.0-beta.2
+ * Version: 1.0.0-beta.5
  */
 
 if (! defined('ABSPATH')) {
     exit;
 }
 
-define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.2');
+define('FLOWPRESS_DEPLOY_VERSION', '1.0.0-beta.5');
 define('FLOWPRESS_DEPLOY_FILE', __FILE__);
 
 require_once __DIR__ . '/includes/queue-provider.php';

package/includes/automatic-build.php

@@ -55,16 +55,33 @@ function flowpress_deploy_taxonomy_affects_public_build(string $taxonomy): bool
     return $object && (bool) apply_filters('flowpress_deploy_taxonomy_affects_public_build', $object->public, $taxonomy);
 }
 
-add_action('set_object_terms', static function (int $id, $terms, $tt_ids, string $taxonomy): void {
-    if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) flowpress_deploy_schedule_public_build();
-}, 40, 4);
+/** Term-only changes bypass save_post, including a public-to-private transition. */
+add_action('set_object_terms', static function (int $id, $terms, $tt_ids, string $taxonomy, bool $append, $old_tt_ids): void {
+    $post = get_post($id);
+    if (! $post instanceof WP_Post || $post->post_status !== 'publish'
+        || ! (get_post_type_object($post->post_type)->public ?? false)) return;
+    $current = array_map('intval', (array) $tt_ids);
+    $previous = array_map('intval', (array) $old_tt_ids);
+    sort($current); sort($previous);
+    if (! $append && $current === $previous) return;
+    // Hidden visibility/recipient taxonomies also affect public artifacts.
+    // A global descriptor avoids placing private titles or URLs in the queue.
+    flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+    flowpress_deploy_schedule_public_build();
+}, 40, 6);
 foreach (['created_term', 'edited_term', 'pre_delete_term'] as $hook) {
     $callback = $hook === 'pre_delete_term'
         ? static function (int $id, string $taxonomy): void {
-            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) flowpress_deploy_schedule_public_build();
+            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) {
+                flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+                flowpress_deploy_schedule_public_build();
+            }
         }
         : static function (int $id, int $tt_id, string $taxonomy): void {
-            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) flowpress_deploy_schedule_public_build();
+            if (flowpress_deploy_taxonomy_affects_public_build($taxonomy)) {
+                flowpress_enqueue_build_change('global', 0, '/', 'update', true);
+                flowpress_deploy_schedule_public_build();
+            }
         };
     add_action($hook, $callback, 40, $hook === 'pre_delete_term' ? 2 : 3);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@styleflow.app/flowpress-deploy",
-  "version": "1.0.0-beta.2",
+  "version": "1.0.0-beta.21",
   "description": "Safe full and partial deployment primitives for FlowPress.",
   "type": "module",
   "license": "UNLICENSED",
@@ -28,6 +28,26 @@
     "./worker-assets": {
       "import": "./dist/worker-assets.js",
       "types": "./dist/worker-assets.d.ts"
+    },
+    "./ops/environment": {
+      "import": "./dist/ops/environment.js",
+      "types": "./dist/ops/environment.d.ts"
+    },
+    "./ops": {
+      "import": "./dist/ops/config.js",
+      "types": "./dist/ops/config.d.ts"
+    },
+    "./node-fetch": {
+      "import": "./dist/node-fetch.js",
+      "types": "./dist/node-fetch.d.ts"
+    },
+    "./ops/environment-files": {
+      "import": "./dist/ops/environment-files.js",
+      "types": "./dist/ops/environment-files.d.ts"
+    },
+    "./development": {
+      "import": "./dist/development.js",
+      "types": "./dist/development.d.ts"
     }
   },
   "files": [
@@ -37,15 +57,21 @@
     "flowpress-deploy.php",
     "composer.json",
     "README.md",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "containers",
+    "schema"
   ],
   "scripts": {
     "build": "tsc -b",
     "typecheck": "tsc -b --pretty false",
-    "test": "vitest run && node --test tests/*-regressions.mjs && php tests/php/queue-provider-test.php",
-    "release:check": "npm run typecheck && npm test && npm pack --dry-run",
+    "test": "vitest run tests/deploy.test.ts && node --test tests/*-regressions.mjs && php tests/php/queue-provider-test.php && node --test tests/ops-*.test.mjs",
+    "release:check": "npm run typecheck && npm test && npm run test:ops:database && npm run test:ops:caddy && npm run test:ops:sanitizer && node tests/ops-local-apache-integration.mjs && npm pack --dry-run",
     "release:publish:next": "npm publish --access public --tag next",
-    "prepublishOnly": "npm run typecheck && npm test"
+    "prepublishOnly": "npm run typecheck && npm test",
+    "test:ops": "node --test tests/ops-*.test.mjs",
+    "test:ops:database": "node tests/ops-database-integration.mjs",
+    "test:ops:caddy": "node tests/ops-caddy-integration.mjs",
+    "test:ops:sanitizer": "node tests/ops-sanitizer-integration.mjs"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",
@@ -55,5 +81,13 @@
   "engines": {
     "node": ">=22.0.0"
   },
-  "packageManager": "npm@10.9.3"
+  "packageManager": "npm@10.9.3",
+  "dependencies": {
+    "dotenv": "17.4.2",
+    "dotenv-expand": "12.0.3",
+    "yaml": "2.9.1"
+  },
+  "bin": {
+    "flowpress-ops": "./dist/ops/cli.js"
+  }
 }

package/schema/deployment.schema.json

@@ -0,0 +1,185 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "title": "FlowPress deployment manifest",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "platform",
+    "profile",
+    "database",
+    "media",
+    "environments"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": 1
+    },
+    "platform": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "profile": {
+      "enum": [
+        "backend",
+        "static",
+        "headless-static",
+        "headless-ssr"
+      ]
+    },
+    "database": {
+      "const": "shared"
+    },
+    "media": {
+      "enum": [
+        "local",
+        "s3"
+      ]
+    },
+    "registryProject": {
+      "type": "string"
+    },
+    "sources": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "ssh",
+          "user",
+          "path"
+        ],
+        "properties": {
+          "ssh": {
+            "type": "string"
+          },
+          "user": {
+            "type": "string"
+          },
+          "path": {
+            "type": "string",
+            "pattern": "^/"
+          }
+        },
+        "additionalProperties": false
+      }
+    },
+    "environments": {
+      "type": "object",
+      "propertyNames": {
+        "enum": [
+          "local",
+          "staging",
+          "production",
+          "preview"
+        ]
+      },
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "publish"
+        ],
+        "properties": {
+          "publish": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": {
+              "enum": [
+                "cms",
+                "web-static",
+                "web-ssr"
+              ]
+            }
+          },
+          "profile": {
+            "enum": [
+              "backend",
+              "static",
+              "headless-static",
+              "headless-ssr"
+            ]
+          },
+          "frontendUrl": {
+            "type": "string",
+            "format": "uri"
+          },
+          "backendUrl": {
+            "type": "string",
+            "format": "uri"
+          },
+          "graphqlUrl": {
+            "type": "string",
+            "format": "uri"
+          },
+          "mediaUrl": {
+            "type": "string",
+            "format": "uri"
+          },
+          "backend": {
+            "enum": [
+              "local",
+              "staging",
+              "production"
+            ]
+          },
+          "aliases": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "format": "uri"
+            }
+          },
+          "mode": {
+            "const": "on-demand"
+          },
+          "mail": {
+            "enum": [
+              "disabled",
+              "capture",
+              "smtp"
+            ]
+          },
+          "backendAliases": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "format": "uri"
+            }
+          }
+        },
+        "additionalProperties": false
+      }
+    },
+    "development": {
+      "type": "object",
+      "properties": {
+        "ports": {
+          "type": "object",
+          "properties": {
+            "web": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 65535
+            },
+            "cms": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 65535
+            },
+            "https": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 65535
+            },
+            "database": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 65535
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}