@styleflow.app/flowpress-deploy 1.0.0-beta.3 → 1.0.0-beta.31

package/dist/ops/data.js

@@ -0,0 +1,165 @@
+import { sharedMediaImport, withoutMediaCredentials } from "./media-config.js";
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve, dirname } from "node:path";
+import { createHash } from "node:crypto";
+import { allowedComponents, ensureSecrets, identity, loadState, readEnv, readJson, saveState, targetConfig, writeJson } from "./config.js";
+import { manifestEnvironment } from "./environment.js";
+import { containers } from "./build.js";
+import { capture, containerFor, run, shellQuote, sleep, ssh, sshFile } from "./process.js";
+import { sqlIdentifier } from "./provision.js";
+export function safeArchiveEntries(entries) {
+    if (!entries.length || entries.some(path => path.startsWith("/") || path.includes("\\") || path.split("/").includes("..")))
+        throw new Error("Unsafe or empty uploads archive.");
+    if (entries.some(path => /(?:^|\/)wp-migrate-db(?:\/|$)|\.(?:sql(?:\.gz)?|env|bak)$/i.test(path)))
+        throw new Error("Uploads archive contains private backup material.");
+}
+export async function pullSource(root, manifest, sourceName) {
+    const source = manifest.sources?.[sourceName];
+    if (!source || !/^[a-zA-Z0-9_.@-]+$/.test(source.ssh || "") || !/^[a-z_][a-z0-9_-]*$/.test(source.user || "") || !source.path?.startsWith("/") || source.path.includes("\n"))
+        throw new Error("Configure a read-only source with ssh, user and absolute CMS path.");
+    const directory = join(root, ".local/flowpress", "source-" + sourceName + "-" + Date.now());
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const wp = "runuser -u " + shellQuote(source.user) + " -- wp --path=" + shellQuote(source.path + "/web/wp") + " --skip-plugins --skip-themes";
+    const dump = join(directory, "source.sql");
+    await sshFile(source, wp + " db export - --single-transaction --skip-lock-tables --quiet", { output: dump });
+    const archive = join(directory, "uploads.tar");
+    const excludes = ["./wp-migrate-db", "*.sql", "*.sql.gz", "*.env", "*.bak"].map(value => " --exclude=" + shellQuote(value)).join("");
+    await sshFile(source, "tar -C " + shellQuote(source.path + "/web/app/uploads") + excludes + " -cf - .", { output: archive });
+    safeArchiveEntries(capture("tar", ["-tf", archive]).split("\n").filter(Boolean));
+    const meta = { source: sourceName, createdAt: new Date().toISOString(), dump, archive,
+        sha256: createHash("sha256").update(readFileSync(dump)).digest("hex") };
+    writeJson(join(directory, "snapshot.json"), meta, 0o600);
+    return meta;
+}
+function mysql(container, password, args, input = "") {
+    if (!/^[a-zA-Z0-9_-]+$/.test(container) || /[\r\n]/.test(password))
+        throw new Error("Invalid database container credentials.");
+    return capture("docker", ["exec", "-i", container, "sh", "-c",
+        'read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb -uroot --batch ' + args.map(shellQuote).join(" ")], { input: password + "\n" + input });
+}
+function dumpCopy(container, password, database) {
+    return capture("docker", ["exec", "-i", container, "sh", "-c",
+        'read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb-dump -uroot --single-transaction --skip-lock-tables --skip-add-locks --skip-comments --no-tablespaces ' + sqlIdentifier(database)], { input: password + "\n", maxBuffer: 256 * 1024 * 1024 });
+}
+export async function prepareData(root, manifest, name, { file, image, source = "production" }) {
+    allowedComponents(manifest, name, ["cms"]);
+    if (name === "production")
+        throw new Error("Data preparation for production is not supported by this migration command.");
+    if (!file || !existsSync(file))
+        throw new Error("A source dump is required.");
+    const project = identity(root);
+    const values = ensureSecrets(root, name, project.slug);
+    const preserveCloudMedia = sharedMediaImport(manifest, name, source, target => manifestEnvironment(root, target, {}));
+    const env = { ...withoutMediaCredentials(manifestEnvironment(root, name, {})), FLOWPRESS_MEDIA_STORAGE: "local", FLOWPRESS_MEDIA_IMPORT_PRESERVE: String(preserveCloudMedia), DB_HOST: "127.0.0.1:3306", DB_NAME: values.DB_NAME, DB_USER: values.DB_USER, DB_PASSWORD: values.DB_PASSWORD, DB_PREFIX: values.DB_PREFIX };
+    // The source prefix belongs to the SQL snapshot, not to an environment credential.
+    const original = readFileSync(file, "utf8");
+    const match = original.match(/CREATE TABLE (?:IF NOT EXISTS )?\x60([a-zA-Z0-9_]+)options\x60/);
+    if (!match)
+        throw new Error("Cannot identify the WordPress table prefix in the snapshot.");
+    env.DB_PREFIX = match[1];
+    values.DB_PREFIX = match[1];
+    const secretsPath = join(root, ".secrets", name + ".env");
+    writeFileSync(secretsPath, Object.entries(values).map(([key, value]) => key + "=" + JSON.stringify(value)).join("\n") + "\n", { mode: 0o600 });
+    const release = readJson(join(root, ".local/flowpress", "release-" + name + "-cms.json"));
+    const cmsImage = image || (release && release.repository + ":" + release.tag);
+    if (!cmsImage)
+        throw new Error("Build the CMS image before preparing data.");
+    const directory = join(root, ".local/flowpress", "prepared-" + name + "-" + Date.now());
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const envFile = join(directory, "cms.env");
+    writeFileSync(envFile, Object.entries(env).filter(([, value]) => typeof value === "string").map(([key, value]) => key + "=" + value).join("\n") + "\n", { mode: 0o600 });
+    const database = "flowpress-transform-" + process.pid;
+    const password = randomBytes(32).toString("hex");
+    run("docker", ["run", "--rm", "-d", "--name", database, "--network", "none", "-e", "MARIADB_ROOT_PASSWORD=" + password, "mariadb:11.4"], { stdio: "ignore" });
+    try {
+        let ready = false;
+        for (let attempt = 0; attempt < 60; attempt++) {
+            try {
+                capture("docker", ["exec", database, "healthcheck.sh", "--connect", "--innodb_initialized"]);
+                ready = true;
+                break;
+            }
+            catch {
+                await sleep(2000);
+            }
+        }
+        if (!ready)
+            throw new Error("Disposable database did not start.");
+        const account = "CREATE DATABASE " + sqlIdentifier(values.DB_NAME) + ";\nCREATE USER '" + sqlIdentifier(values.DB_USER) + "'@'127.0.0.1' IDENTIFIED BY '" + values.DB_PASSWORD + "';\nGRANT ALL ON " + values.DB_NAME + ".* TO '" + values.DB_USER + "'@'127.0.0.1';\n";
+        mysql(database, password, [], account);
+        mysql(database, password, [values.DB_NAME], original);
+        const wp = args => capture("docker", ["run", "--rm", "--network", "container:" + database, "--env-file", envFile,
+            "-v", join(containers, "cms") + ":/tmp/flowpress-sanitizers:ro", cmsImage, "wp", ...args], { maxBuffer: 256 * 1024 * 1024 });
+        const sourceTarget = targetConfig(manifest, source);
+        const replacements = [
+            [sourceTarget.backendUrl, env.BACKEND_URL],
+            ...(sourceTarget.backendAliases || []).map(from => [from, env.BACKEND_URL]),
+            [sourceTarget.frontendUrl, env.SITE_URL],
+            ...(sourceTarget.aliases || []).map(from => [from, env.SITE_URL]),
+            ...(!preserveCloudMedia ? [[sourceTarget.mediaUrl, env.BACKEND_URL + "/app/uploads"]] : []),
+        ].filter(([from, to]) => from && to && from !== to).sort((a, b) => b[0].length - a[0].length);
+        for (const [from, to] of replacements)
+            wp(["search-replace", from, to, "--all-tables-with-prefix", "--precise", "--quiet"]);
+        const output = wp(["eval-file", "/tmp/flowpress-sanitizers/sanitize.php"]);
+        const counts = JSON.parse(output.split("\n").findLast(line => line.startsWith("{")));
+        const transformed = join(directory, "staging.sql");
+        writeFileSync(transformed, dumpCopy(database, password, values.DB_NAME) + "\n", { mode: 0o600 });
+        writeJson(join(directory, "prepared.json"), { environment: name, source, preparedAt: new Date().toISOString(), prefix: env.DB_PREFIX, counts, file: transformed }, 0o600);
+        return { file: transformed, counts, prefix: env.DB_PREFIX };
+    }
+    finally {
+        run("docker", ["rm", "-fv", database], { stdio: "ignore" });
+    }
+}
+export async function pushData(root, manifest, name, file) {
+    allowedComponents(manifest, name, ["cms"]);
+    if (name === "production")
+        throw new Error("Production imports require a separate reviewed procedure.");
+    const state = loadState(root, name);
+    if (state.seededAt)
+        throw new Error("This database was already seeded. Refusing an implicit overwrite.");
+    const values = readEnv(join(root, ".secrets", name + ".env"));
+    if (!values.DB_PASSWORD || state.database?.name !== values.DB_NAME)
+        throw new Error("Database binding mismatch.");
+    const pool = sqlIdentifier(values.DB_NAME), user = sqlIdentifier(values.DB_USER);
+    const program = 'read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb --batch -u' + user + " " + pool;
+    const existing = ssh(state.platform, "docker exec -i " + state.platform.poolUuid + " sh -c " + shellQuote(program), { input: values.DB_PASSWORD + "\nSELECT COUNT(*) FROM information_schema.tables WHERE table_schema=DATABASE();\n" });
+    if (existing.trim() !== "COUNT(*)\n0" && existing.trim() !== "0")
+        throw new Error("Refusing to import into a nonempty database.");
+    const sql = readFileSync(resolve(file), "utf8");
+    if (/^\s*(?:CREATE|DROP)\s+(?:DATABASE|USER)\b/im.test(sql) || /^\s*USE\s+/im.test(sql))
+        throw new Error("The import must contain only the prepared schema, without database/user operations.");
+    ssh(state.platform, "docker exec -i " + state.platform.poolUuid + " sh -c " + shellQuote(program), { input: values.DB_PASSWORD + "\n" + sql, maxBuffer: 256 * 1024 * 1024 });
+    state.seededAt = new Date().toISOString();
+    saveState(root, name, state);
+    return { environment: name, imported: true, database: pool };
+}
+export async function pushUploads(root, manifest, name, archive) {
+    allowedComponents(manifest, name, ["cms"]);
+    const state = loadState(root, name);
+    const app = state.apps?.cms;
+    if (!app?.uuid)
+        throw new Error("CMS must be provisioned first.");
+    safeArchiveEntries(capture("tar", ["-tf", archive]).split("\n").filter(Boolean));
+    const listing = capture("tar", ["-tvf", archive]);
+    if (listing.split("\n").some(line => /^[lhbcps]/.test(line)))
+        throw new Error("Uploads archive contains links or special files.");
+    const container = containerFor(state.platform, app.uuid);
+    await sshFile(state.platform, "docker exec -i " + shellQuote(container) + " tar -C /srv/cms/web/app/uploads -xf -", { input: archive });
+    return { environment: name, uploadsCopied: true };
+}
+export async function cleanIntegrations(root, manifest, name) {
+    allowedComponents(manifest, name, ["cms"]);
+    if (name === "production")
+        throw new Error("Integration cleanup is restricted to non-production clones.");
+    const state = loadState(root, name), app = state.apps?.cms;
+    if (!app?.uuid)
+        throw new Error("CMS not provisioned.");
+    const container = containerFor(state.platform, app.uuid);
+    const script = readFileSync(join(containers, "cms/sanitize-integrations.php"), "utf8").replace(/^<\?php\s*/, "");
+    // This program contains no credentials. Only option names and counts are returned.
+    const output = ssh(state.platform, "docker exec " + shellQuote(container) + " wp eval " + shellQuote(script));
+    return { environment: name, output };
+}
+//# sourceMappingURL=data.js.map

package/dist/ops/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../src/ops/data.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3I,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAAC,OAAO;IACxC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAChL,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AAC1K,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU;IACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpQ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,GAAG,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,+BAA+B,CAAC;IAC9I,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,8DAA8D,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,CAAC,iBAAiB,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrI,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,kBAAkB,CAAC,GAAG,QAAQ,GAAG,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7H,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO;QACnF,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1E,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,GAAG,EAAE;IAClD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/H,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI;QAC3D,mEAAmE,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;AAC/I,CAAC;AACD,SAAS,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ;IAC7C,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI;QAC3D,0JAA0J,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AACrP,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE;IAC5F,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC1H,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACtH,MAAM,GAAG,GAAG,EAAE,GAAG,uBAAuB,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,uBAAuB,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1T,mFAAmF;IACnF,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC3F,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;IAC1D,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,UAAU,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACxF,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzK,MAAM,QAAQ,GAAG,sBAAsB,GAAG,OAAO,CAAC,GAAG,CAAC;IACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,GAAG,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9J,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC;gBAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QACzJ,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,+BAA+B,GAAG,MAAM,CAAC,WAAW,GAAG,mBAAmB,GAAG,MAAM,CAAC,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC;QACxQ,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,GAAG,QAAQ,EAAE,YAAY,EAAE,OAAO;YAC9G,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,+BAA+B,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QAC/H,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG;YACnB,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC;YAC1C,GAAG,CAAC,YAAY,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;YAC3E,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC;YACxC,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjE,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,YAAY;YAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,0BAA0B,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5H,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,wCAAwC,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnD,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1K,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI;IACvD,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,8DAA8D,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;IACnG,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,GAAG,mFAAmF,EAAE,CAAC,CAAC;IACzO,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,aAAa,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClI,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,6CAA6C,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IAChM,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,GAAG,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAC7K,KAAK,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC/D,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO;IAC7D,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAClE,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAClI,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,wCAAwC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACxI,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;IAC1D,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjH,mFAAmF;IACnF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9G,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC"}

package/dist/ops/deploy.d.ts

@@ -0,0 +1,38 @@
+export function assertRelease(release: any, app: any, name: any, component: any): void;
+export function waitHealth(app: any, release: any, { fetchImpl, attempts, delay }?: {
+    fetchImpl?: typeof fetch | undefined;
+    attempts?: number | undefined;
+    delay?: number | undefined;
+}): Promise<any>;
+export function waitDeployment(api: any, id: any): Promise<void>;
+export function registryRelease(app: any, name: any, component: any, alias: any, operator: any): Promise<{
+    component: any;
+    environment: any;
+    repository: any;
+    tag: string;
+    sha: any;
+    digest: string;
+    buildId: any;
+    pushed: boolean;
+} | null>;
+export function deployedRelease(root: any, name: any, component: any): Promise<{
+    component: any;
+    environment: any;
+    repository: any;
+    tag: string;
+    sha: any;
+    digest: string;
+    buildId: any;
+    pushed: boolean;
+} | null>;
+export function deploy(root: any, manifest: any, name: any, component: any, { rollback, release: supplied }?: {
+    rollback?: boolean | undefined;
+}): Promise<{
+    component: any;
+    environment: any;
+    release: any;
+    digest: any;
+    url: any;
+    rollback: boolean;
+}>;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/ops/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/ops/deploy.js"],"names":[],"mappings":"AAOA,uFAIC;AACD;;;;iBAiBC;AACD,iEASC;AACD;;;;;;;;;UAMC;AACD;;;;;;;;;UAIC;AAaD;;;;;;;;;GA0CC"}

package/dist/ops/deploy.js

@@ -0,0 +1,127 @@
+import { join } from "node:path";
+import { allowedComponents, loadState, operatorEnvironment, readJson, releaseTag, saveState } from "./config.js";
+import { existingDigest, imageMetadata } from "./registry.js";
+import { coolifyClient } from "./coolify.js";
+import { inspectDigest, registryLogin } from "./build.js";
+import { run, sleep } from "./process.js";
+export function assertRelease(release, app, name, component) {
+    if (!release || release.environment !== name || release.component !== component || release.repository !== app.repository
+        || !/^[a-f0-9]{40}$/.test(release.sha || "") || !/^sha256:[a-f0-9]{64}$/.test(release.digest || "")
+        || !/^[a-zA-Z0-9_.-]+$/.test(release.tag || ""))
+        throw new Error("Invalid or mismatched immutable release record.");
+}
+export async function waitHealth(app, release, { fetchImpl = fetch, attempts = 60, delay = 3000 } = {}) {
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        try {
+            const res = await fetchImpl(app.url + app.health + "?release=" + Date.now(), { signal: AbortSignal.timeout(10000), redirect: "error", headers: { "cache-control": "no-cache" } });
+            const data = await res.json();
+            if (res.ok && data.status === "ok" && data.release === release.sha && (!release.environment || data.environment === release.environment) && (!release.buildId || data.buildId === release.buildId)) {
+                if (app.health === "/healthz.php") {
+                    const graphql = await fetchImpl(app.url + "/index.php?graphql", { method: "POST", redirect: "error", signal: AbortSignal.timeout(10000), headers: { "content-type": "application/json" }, body: JSON.stringify({ query: "{ __typename }" }) });
+                    const schema = await graphql.json();
+                    if (!graphql.ok || !schema.data?.__typename || schema.errors?.length)
+                        throw new Error("WordPress GraphQL runtime is not ready.");
+                }
+                return data;
+            }
+        }
+        catch { /* rolling replacement is expected to fail briefly */ }
+        if (attempt + 1 < attempts)
+            await sleep(delay);
+    }
+    throw new Error("Release health verification failed for " + app.name + ".");
+}
+export async function waitDeployment(api, id) {
+    if (!id)
+        throw new Error("Coolify returned no deployment ID.");
+    for (let attempt = 0; attempt < 240; attempt++) {
+        const result = await api("GET", "/deployments/" + id);
+        if (result.status === "finished")
+            return;
+        if (["failed", "cancelled", "cancelled-by-user"].includes(result.status))
+            throw new Error("Coolify deployment " + result.status + ".");
+        await sleep(5000);
+    }
+    throw new Error("Coolify deployment timeout.");
+}
+export async function registryRelease(app, name, component, alias, operator) {
+    const metadata = await imageMetadata(app.repository + ":" + alias, operator);
+    if (!metadata)
+        return null;
+    const tag = releaseTag(component, name, metadata.sha, metadata.buildId);
+    if (await existingDigest(app.repository + ":" + tag, operator) !== metadata.digest)
+        throw new Error("Release alias differs from its immutable tag.");
+    return { component, environment: name, repository: app.repository, tag, sha: metadata.sha, digest: metadata.digest, buildId: component === "cms" ? undefined : metadata.buildId, pushed: true };
+}
+export async function deployedRelease(root, name, component) {
+    const state = loadState(root, name), app = state.apps?.[component];
+    if (!app?.uuid)
+        throw new Error("Component not provisioned.");
+    return registryRelease(app, name, component, name, operatorEnvironment(root));
+}
+function retain(app, alias, release) {
+    run("docker", ["buildx", "imagetools", "create", "--prefer-index=false", "--tag", app.repository + ":" + alias, release.repository + "@" + release.digest]);
+    if (inspectDigest(app.repository + ":" + alias) !== release.digest)
+        throw new Error("Retained image digest mismatch.");
+}
+async function launch(api, app, release, name) {
+    retain(app, name, release);
+    const response = await api("POST", "/deploy?uuid=" + app.uuid + "&force=false");
+    const deployment = (response.deployments || [response]).find(item => item.deployment_uuid);
+    await waitDeployment(api, deployment?.deployment_uuid);
+    return waitHealth(app, release);
+}
+export async function deploy(root, manifest, name, component, { rollback = false, release: supplied } = {}) {
+    allowedComponents(manifest, name, [component]);
+    const state = loadState(root, name);
+    const app = state.apps?.[component];
+    if (!app?.uuid)
+        throw new Error("Provision this component first.");
+    const operator = operatorEnvironment(root);
+    registryLogin(state.platform, operator);
+    const record = supplied || (rollback ? await registryRelease(app, name, component, name + "-previous", operator) : readJson(join(root, ".local/flowpress", "release-" + name + "-" + component + ".json")));
+    assertRelease(record, app, name, component);
+    if (name === "production" && component === "cms" && !rollback) {
+        const staging = loadState(root, "staging").apps?.cms;
+        const verified = staging && await registryRelease(staging, "staging", "cms", "staging", operator);
+        if (!verified || verified.sha !== record.sha || verified.digest !== record.digest)
+            throw new Error("Production must promote the exact CMS image verified on staging.");
+        await waitHealth(staging, verified);
+    }
+    if (inspectDigest(record.repository + ":" + record.tag) !== record.digest)
+        throw new Error("Registry digest changed; deployment refused.");
+    const api = coolifyClient(state.platform.coolifyUrl, operator.COOLIFY_TOKEN);
+    const configured = await api("GET", "/applications/" + app.uuid);
+    if (configured.docker_registry_image_name !== app.repository)
+        throw new Error("Application repository drift; review provisioning before deployment.");
+    if (configured.docker_registry_image_tag !== name)
+        throw new Error("Run operator provisioning to configure the managed environment tag.");
+    let previous = await registryRelease(app, name, component, name, operator);
+    if (previous) {
+        try {
+            await waitHealth(app, previous, { attempts: 1 });
+        }
+        catch {
+            previous = await registryRelease(app, name, component, name + "-previous", operator);
+        }
+    }
+    if (previous && previous.digest !== record.digest)
+        retain(app, name + "-previous", previous);
+    try {
+        await launch(api, app, record, name);
+    }
+    catch (error) {
+        if (previous && previous.digest !== record.digest) {
+            await launch(api, app, previous, name);
+            throw new Error(error.message + " Previous image restored; database was not rolled back.");
+        }
+        throw error;
+    }
+    if (previous && previous.digest !== record.digest)
+        app.previous = previous;
+    app.current = record;
+    app.deployedAt = new Date().toISOString();
+    saveState(root, name, state);
+    return { component, environment: name, release: record.sha, digest: record.digest, url: app.url, rollback };
+}
+//# sourceMappingURL=deploy.js.map

package/dist/ops/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/ops/deploy.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,UAAU,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;WACnH,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;WAChG,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACxH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,QAAQ,GAAG,EAAE,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE;IACpG,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAClL,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnM,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC/O,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;oBACpC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBACnI,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QACjE,IAAI,OAAO,GAAG,CAAC,GAAG,QAAQ;YAAE,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAC9E,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAG,EAAE,EAAE;IAC1C,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO;QACzC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACvI,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ;IACzE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,MAAM,cAAc,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,GAAG,GAAG,EAAE,QAAQ,CAAC,KAAK,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrJ,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAClM,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS;IACzD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9D,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AACD,SAAS,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO;IACjC,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,GAAG,GAAG,GAAG,KAAK,EAAE,OAAO,CAAC,UAAU,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5J,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACzH,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI;IAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,eAAe,GAAG,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3F,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE;IACxG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,UAAU,GAAG,IAAI,GAAG,GAAG,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5M,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,YAAY,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC;QACrD,MAAM,QAAQ,GAAG,OAAO,IAAI,MAAM,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACvK,MAAM,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC3I,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,0BAA0B,KAAK,GAAG,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACtJ,IAAI,UAAU,CAAC,yBAAyB,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAC1I,IAAI,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3E,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACzD,MAAM,CAAC;YAAC,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC,CAAC;QAAC,CAAC;IACjG,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,EAAE,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC,CAAC;IAE7F,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,yDAAyD,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3E,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAE7B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC9G,CAAC"}

package/dist/ops/editorial.d.ts

@@ -0,0 +1,23 @@
+export function validateBuildRequest(payload: any): {
+    target: any;
+    batchId: any;
+    mode: any;
+    paths: string[];
+    deletedPaths: string[];
+};
+export function validateBuildId(value: any): any;
+export function purgeFiles(site: any, routes: any, assets?: any[]): string[];
+export function purgeFrontendFiles({ files, token, zone, fetchImpl }: {
+    files: any;
+    token: any;
+    zone: any;
+    fetchImpl?: typeof fetch | undefined;
+}): Promise<void>;
+export function acknowledgeBatch({ request, backend, token, status, fetchImpl }: {
+    request: any;
+    backend: any;
+    token: any;
+    status: any;
+    fetchImpl?: typeof fetch | undefined;
+}): Promise<any>;
+//# sourceMappingURL=editorial.d.ts.map

package/dist/ops/editorial.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editorial.d.ts","sourceRoot":"","sources":["../../src/ops/editorial.js"],"names":[],"mappings":"AAEA;;;;;;EAUC;AAED,iDAIC;AAED,6EAgBC;AAED;;;;;kBAWC;AAED;;;;;;iBAkBC"}

package/dist/ops/editorial.js

@@ -0,0 +1,79 @@
+import { normalizeDeployPath } from "@styleflow.app/flowpress-deploy";
+export function validateBuildRequest(payload) {
+    if (!payload || !["staging", "production"].includes(payload.target))
+        throw new Error("Invalid editorial target.");
+    if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i.test(payload.batchId || ""))
+        throw new Error("Invalid editorial batchId.");
+    if (!["full", "partial"].includes(payload.mode))
+        throw new Error("Invalid editorial build mode.");
+    const paths = (key) => {
+        const values = payload[key] ?? [];
+        if (!Array.isArray(values) || values.length > 1000 || values.some((value) => typeof value !== "string" || value.length > 2048))
+            throw new Error(`Invalid editorial ${key}.`);
+        return [...new Set(values.map(normalizeDeployPath))];
+    };
+    return { target: payload.target, batchId: payload.batchId, mode: payload.mode, paths: paths("paths"), deletedPaths: paths("deletedPaths") };
+}
+export function validateBuildId(value) {
+    // Leave room for the environment and full SHA within the OCI tag limit (128).
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(value || ""))
+        throw new Error("Invalid frontend build ID.");
+    return value;
+}
+export function purgeFiles(site, routes, assets = []) {
+    const origin = new URL(site).origin;
+    const paths = new Set(["/", "/robots.txt", "/sitemap_index.xml", "/healthz.json", "/404.html"]);
+    for (const route of routes) {
+        const path = normalizeDeployPath(route);
+        paths.add(path);
+        if (path !== "/" && !path.split("/").at(-1)?.includes(".")) {
+            paths.add(path.replace(/\/+$/, ""));
+            paths.add(`${path.replace(/\/+$/, "")}/`);
+        }
+    }
+    for (const asset of assets) {
+        if (typeof asset !== "string" || !/^\/_astro\/[A-Za-z0-9_./@-]+$/.test(asset) || asset.split("/").some(part => [".", ".."].includes(part)))
+            throw new Error("Invalid frontend asset purge path.");
+        paths.add(asset);
+    }
+    return [...paths].map((path) => new URL(path, origin).href);
+}
+export async function purgeFrontendFiles({ files, token, zone, fetchImpl = fetch }) {
+    if (!token || !/^[a-f0-9]{32}$/i.test(zone || ""))
+        throw new Error("Missing purge-only Cloudflare token or CLOUDFLARE_ZONE_ID.");
+    for (let offset = 0; offset < files.length; offset += 30) {
+        const response = await fetchImpl(`https://api.cloudflare.com/client/v4/zones/${zone}/purge_cache`, {
+            method: "POST", signal: AbortSignal.timeout(30_000), redirect: "error",
+            headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
+            body: JSON.stringify({ files: files.slice(offset, offset + 30) }),
+        });
+        const data = await response.json();
+        if (!response.ok || !data.success)
+            throw new Error(`Cloudflare URL purge failed (${response.status}).`);
+    }
+}
+export async function acknowledgeBatch({ request, backend, token, status, fetchImpl = fetch }) {
+    validateBuildRequest(request);
+    if (!["success", "failure"].includes(status) || !token)
+        throw new Error("Missing callback token or invalid callback status.");
+    const url = new URL("/wp-json/flowpress/v1/build-complete", backend);
+    let last;
+    for (let attempt = 0; attempt < 3; attempt++) {
+        try {
+            const response = await fetchImpl(url, {
+                method: "POST", redirect: "error", signal: AbortSignal.timeout(15_000),
+                headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
+                body: JSON.stringify({ batchId: request.batchId, status }),
+            });
+            const body = await response.json();
+            if (!response.ok || body.ok !== true)
+                throw new Error(`CMS callback failed (${response.status}).`);
+            return body;
+        }
+        catch (error) {
+            last = error;
+        }
+    }
+    throw last;
+}
+//# sourceMappingURL=editorial.js.map

package/dist/ops/editorial.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editorial.js","sourceRoot":"","sources":["../../src/ops/editorial.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,MAAM,UAAU,oBAAoB,CAAC,OAAO;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAClH,IAAI,CAAC,4EAA4E,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7J,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC;QAC7K,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;AAC9I,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAK;IACnC,8EAA8E;IAC9E,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,EAAE;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IAChG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACpC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,GAAG,KAAK,EAAE;IAChF,IAAI,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACjI,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,8CAA8C,IAAI,cAAc,EAAE;YACjG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO;YACtE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAG,KAAK,EAAE;IAC3F,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,sCAAsC,EAAE,OAAO,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC;IACT,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;YACnG,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC;QAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,CAAC;AACb,CAAC"}

package/dist/ops/environment-files.d.ts

@@ -0,0 +1,9 @@
+export function synchronizeEnvironmentFiles(root: any, { apply, localSecrets, manifest }?: {
+    apply?: boolean | undefined;
+    localSecrets?: boolean | undefined;
+    manifest?: any;
+}): {
+    changed: string[];
+    applied: boolean;
+};
+//# sourceMappingURL=environment-files.d.ts.map

package/dist/ops/environment-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-files.d.ts","sourceRoot":"","sources":["../../src/ops/environment-files.js"],"names":[],"mappings":"AAuBA;;;;;;;EAiFC"}