@styleflow.app/flowpress-deploy 1.0.0-beta.3 → 1.0.0-beta.4

package/dist/ops/data.js

@@ -0,0 +1,145 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve, dirname } from "node:path";
+import { createHash } from "node:crypto";
+import { allowedComponents, ensureSecrets, identity, loadState, readEnv, readJson, saveState, targetConfig, writeJson } from "./config.js";
+import { manifestEnvironment } from "./environment.js";
+import { containers } from "./build.js";
+import { capture, containerFor, run, shellQuote, sleep, ssh, sshFile } from "./process.js";
+import { sqlIdentifier } from "./provision.js";
+export function safeArchiveEntries(entries) {
+    if (!entries.length || entries.some(path => path.startsWith("/") || path.includes("\\") || path.split("/").includes("..")))
+        throw new Error("Unsafe or empty uploads archive.");
+}
+export async function pullSource(root, manifest, sourceName) {
+    const source = manifest.sources?.[sourceName];
+    if (!source || !/^[a-zA-Z0-9_.@-]+$/.test(source.ssh || "") || !/^[a-z_][a-z0-9_-]*$/.test(source.user || "") || !source.path?.startsWith("/") || source.path.includes("\n"))
+        throw new Error("Configure a read-only source with ssh, user and absolute CMS path.");
+    const directory = join(root, ".local/flowpress", "source-" + sourceName + "-" + Date.now());
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const wp = "runuser -u " + shellQuote(source.user) + " -- wp --path=" + shellQuote(source.path + "/web/wp") + " --skip-plugins --skip-themes";
+    const dump = join(directory, "source.sql");
+    await sshFile(source, wp + " db export - --single-transaction --skip-lock-tables --quiet", { output: dump });
+    const archive = join(directory, "uploads.tar");
+    await sshFile(source, "tar -C " + shellQuote(source.path + "/web/app/uploads") + " -cf - .", { output: archive });
+    safeArchiveEntries(capture("tar", ["-tf", archive]).split("\n").filter(Boolean));
+    const meta = { source: sourceName, createdAt: new Date().toISOString(), dump, archive,
+        sha256: createHash("sha256").update(readFileSync(dump)).digest("hex") };
+    writeJson(join(directory, "snapshot.json"), meta, 0o600);
+    return meta;
+}
+function mysql(container, password, args, input = "") {
+    if (!/^[a-zA-Z0-9_-]+$/.test(container) || /[\r\n]/.test(password))
+        throw new Error("Invalid database container credentials.");
+    return capture("docker", ["exec", "-i", container, "sh", "-c",
+        'read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb -uroot --batch ' + args.map(shellQuote).join(" ")], { input: password + "\n" + input });
+}
+function dumpCopy(container, password, database) {
+    return capture("docker", ["exec", "-i", container, "sh", "-c",
+        'read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb-dump -uroot --single-transaction --skip-lock-tables --skip-add-locks --skip-comments --no-tablespaces ' + sqlIdentifier(database)], { input: password + "\n", maxBuffer: 256 * 1024 * 1024 });
+}
+export async function prepareData(root, manifest, name, { file, image, source = "production" }) {
+    allowedComponents(manifest, name, ["cms"]);
+    if (name === "production")
+        throw new Error("Data preparation for production is not supported by this migration command.");
+    if (!file || !existsSync(file))
+        throw new Error("A source dump is required.");
+    const project = identity(root);
+    const values = ensureSecrets(root, name, project.slug);
+    const env = { ...manifestEnvironment(root, name, {}), DB_HOST: "127.0.0.1:3306", DB_NAME: values.DB_NAME, DB_USER: values.DB_USER, DB_PASSWORD: values.DB_PASSWORD, DB_PREFIX: values.DB_PREFIX };
+    // The source prefix belongs to the SQL snapshot, not to an environment credential.
+    const original = readFileSync(file, "utf8");
+    const match = original.match(/CREATE TABLE (?:IF NOT EXISTS )?\x60([a-zA-Z0-9_]+)options\x60/);
+    if (!match)
+        throw new Error("Cannot identify the WordPress table prefix in the snapshot.");
+    env.DB_PREFIX = match[1];
+    values.DB_PREFIX = match[1];
+    const secretsPath = join(root, ".secrets", name + ".env");
+    writeFileSync(secretsPath, Object.entries(values).map(([key, value]) => key + "=" + JSON.stringify(value)).join("\n") + "\n", { mode: 0o600 });
+    const release = readJson(join(root, ".local/flowpress", "release-" + name + "-cms.json"));
+    const cmsImage = image || (release && release.repository + ":" + release.tag);
+    if (!cmsImage)
+        throw new Error("Build the CMS image before preparing data.");
+    const directory = join(root, ".local/flowpress", "prepared-" + name + "-" + Date.now());
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const envFile = join(directory, "cms.env");
+    writeFileSync(envFile, Object.entries(env).filter(([, value]) => typeof value === "string").map(([key, value]) => key + "=" + value).join("\n") + "\n", { mode: 0o600 });
+    const database = "flowpress-transform-" + process.pid;
+    const password = randomBytes(32).toString("hex");
+    run("docker", ["run", "--rm", "-d", "--name", database, "--network", "none", "--env-file", envFile, "-e", "MARIADB_ROOT_PASSWORD=" + password, "mariadb:11.4"], { stdio: "ignore" });
+    try {
+        let ready = false;
+        for (let attempt = 0; attempt < 60; attempt++) {
+            try {
+                mysql(database, password, [], "SELECT 1;");
+                ready = true;
+                break;
+            }
+            catch {
+                await sleep(2000);
+            }
+        }
+        if (!ready)
+            throw new Error("Disposable database did not start.");
+        const account = "CREATE DATABASE " + sqlIdentifier(values.DB_NAME) + ";\nCREATE USER '" + sqlIdentifier(values.DB_USER) + "'@'127.0.0.1' IDENTIFIED BY '" + values.DB_PASSWORD + "';\nGRANT ALL ON " + values.DB_NAME + ".* TO '" + values.DB_USER + "'@'127.0.0.1';\n";
+        mysql(database, password, [], account);
+        mysql(database, password, [values.DB_NAME], original);
+        const wp = args => capture("docker", ["run", "--rm", "--network", "container:" + database, "--env-file", envFile,
+            "-v", join(containers, "cms/sanitize.php") + ":/tmp/flowpress-sanitize.php:ro", cmsImage, "wp", ...args], { maxBuffer: 256 * 1024 * 1024 });
+        const sourceTarget = targetConfig(manifest, source);
+        const replacements = [
+            [sourceTarget.backendUrl, env.BACKEND_URL],
+            [sourceTarget.frontendUrl, env.SITE_URL],
+            [sourceTarget.mediaUrl, env.BACKEND_URL + "/app/uploads"],
+        ].filter(([from, to]) => from && to && from !== to).sort((a, b) => b[0].length - a[0].length);
+        for (const [from, to] of replacements)
+            wp(["search-replace", from, to, "--all-tables-with-prefix", "--precise", "--quiet"]);
+        const output = wp(["eval-file", "/tmp/flowpress-sanitize.php"]);
+        const counts = JSON.parse(output.split("\n").findLast(line => line.startsWith("{")));
+        const transformed = join(directory, "staging.sql");
+        writeFileSync(transformed, dumpCopy(database, password, values.DB_NAME) + "\n", { mode: 0o600 });
+        writeJson(join(directory, "prepared.json"), { environment: name, source, preparedAt: new Date().toISOString(), prefix: env.DB_PREFIX, counts, file: transformed }, 0o600);
+        return { file: transformed, counts, prefix: env.DB_PREFIX };
+    }
+    finally {
+        run("docker", ["rm", "-f", database], { stdio: "ignore" });
+    }
+}
+export async function pushData(root, manifest, name, file) {
+    allowedComponents(manifest, name, ["cms"]);
+    if (name === "production")
+        throw new Error("Production imports require a separate reviewed procedure.");
+    const state = loadState(root, name);
+    if (state.seededAt)
+        throw new Error("This database was already seeded. Refusing an implicit overwrite.");
+    const values = readEnv(join(root, ".secrets", name + ".env"));
+    if (!values.DB_PASSWORD || state.database?.name !== values.DB_NAME)
+        throw new Error("Database binding mismatch.");
+    const pool = sqlIdentifier(values.DB_NAME), user = sqlIdentifier(values.DB_USER);
+    const program = 'read -r MYSQL_PWD; export MYSQL_PWD; exec mariadb --batch -u' + user + " " + pool;
+    const existing = ssh(state.platform, "docker exec -i " + state.platform.poolUuid + " sh -c " + shellQuote(program), { input: values.DB_PASSWORD + "\nSELECT COUNT(*) FROM information_schema.tables WHERE table_schema=DATABASE();\n" });
+    if (existing.trim() !== "COUNT(*)\n0" && existing.trim() !== "0")
+        throw new Error("Refusing to import into a nonempty database.");
+    const sql = readFileSync(resolve(file), "utf8");
+    if (/^\s*(?:CREATE|DROP)\s+(?:DATABASE|USER)\b/im.test(sql) || /^\s*USE\s+/im.test(sql))
+        throw new Error("The import must contain only the prepared schema, without database/user operations.");
+    ssh(state.platform, "docker exec -i " + state.platform.poolUuid + " sh -c " + shellQuote(program), { input: values.DB_PASSWORD + "\n" + sql, maxBuffer: 256 * 1024 * 1024 });
+    state.seededAt = new Date().toISOString();
+    saveState(root, name, state);
+    return { environment: name, imported: true, database: pool };
+}
+export async function pushUploads(root, manifest, name, archive) {
+    allowedComponents(manifest, name, ["cms"]);
+    const state = loadState(root, name);
+    const app = state.apps?.cms;
+    if (!app?.uuid)
+        throw new Error("CMS must be provisioned first.");
+    safeArchiveEntries(capture("tar", ["-tf", archive]).split("\n").filter(Boolean));
+    const listing = capture("tar", ["-tvf", archive]);
+    if (listing.split("\n").some(line => /^[lhbcps]/.test(line)))
+        throw new Error("Uploads archive contains links or special files.");
+    const container = containerFor(state.platform, app.uuid);
+    await sshFile(state.platform, "docker exec -i " + shellQuote(container) + " tar -C /srv/cms/web/app/uploads -xf -", { input: archive });
+    return { environment: name, uploadsCopied: true };
+}
+//# sourceMappingURL=data.js.map

package/dist/ops/data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.js","sourceRoot":"","sources":["../../src/ops/data.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3I,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAAC,OAAO;IACxC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AAClL,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU;IACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpQ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,SAAS,GAAG,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,+BAA+B,CAAC;IAC9I,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,8DAA8D,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC/C,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,kBAAkB,CAAC,GAAG,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAClH,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO;QACnF,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1E,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,GAAG,EAAE;IAClD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/H,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI;QAC3D,mEAAmE,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC;AAC/I,CAAC;AACD,SAAS,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ;IAC7C,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI;QAC3D,0JAA0J,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AACrP,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE;IAC5F,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC1H,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAClM,mFAAmF;IACnF,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC/F,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC3F,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;IAC1D,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/I,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,UAAU,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,WAAW,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACxF,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3C,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzK,MAAM,QAAQ,GAAG,sBAAsB,GAAG,OAAO,CAAC,GAAG,CAAC;IACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,GAAG,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrL,IAAI,CAAC;QACH,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC;gBAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,+BAA+B,GAAG,MAAM,CAAC,WAAW,GAAG,mBAAmB,GAAG,MAAM,CAAC,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC;QACxQ,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,GAAG,QAAQ,EAAE,YAAY,EAAE,OAAO;YAC9G,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,GAAG,iCAAiC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9I,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG;YACnB,CAAC,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC;YAC1C,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC;YACxC,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,GAAG,cAAc,CAAC;SAC1D,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,YAAY;YAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,0BAA0B,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5H,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnD,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1K,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI;IACvD,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACzG,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,8DAA8D,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;IACnG,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,GAAG,mFAAmF,EAAE,CAAC,CAAC;IACzO,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,aAAa,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClI,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,6CAA6C,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IAChM,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,GAAG,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAC7K,KAAK,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC/D,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO;IAC7D,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAClE,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAClI,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,wCAAwC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACxI,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC"}

package/dist/ops/deploy.d.ts

@@ -0,0 +1,18 @@
+export function assertRelease(release: any, app: any, name: any, component: any): void;
+export function waitHealth(app: any, release: any, { fetchImpl, attempts, delay }?: {
+    fetchImpl?: typeof fetch | undefined;
+    attempts?: number | undefined;
+    delay?: number | undefined;
+}): Promise<any>;
+export function waitDeployment(api: any, id: any): Promise<void>;
+export function deploy(root: any, manifest: any, name: any, component: any, { rollback, release: supplied }?: {
+    rollback?: boolean | undefined;
+}): Promise<{
+    component: any;
+    environment: any;
+    release: any;
+    digest: any;
+    url: any;
+    rollback: boolean;
+}>;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/ops/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/ops/deploy.js"],"names":[],"mappings":"AAOA,uFAIC;AACD;;;;iBAUC;AACD,iEASC;AAQD;;;;;;;;;GAsCC"}

package/dist/ops/deploy.js

@@ -0,0 +1,92 @@
+import { join } from "node:path";
+import { allowedComponents, loadState, operatorEnvironment, readJson, saveState } from "./config.js";
+import { manifestEnvironment } from "./environment.js";
+import { coolifyClient } from "./coolify.js";
+import { inspectDigest, registryLogin } from "./build.js";
+import { sleep } from "./process.js";
+export function assertRelease(release, app, name, component) {
+    if (!release || release.environment !== name || release.component !== component || release.repository !== app.repository
+        || !/^[a-f0-9]{40}$/.test(release.sha || "") || !/^sha256:[a-f0-9]{64}$/.test(release.digest || "")
+        || !/^[a-zA-Z0-9_.-]+$/.test(release.tag || ""))
+        throw new Error("Invalid or mismatched immutable release record.");
+}
+export async function waitHealth(app, release, { fetchImpl = fetch, attempts = 60, delay = 3000 } = {}) {
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        try {
+            const res = await fetchImpl(app.url + app.health + "?release=" + Date.now(), { signal: AbortSignal.timeout(10000), redirect: "error", headers: { "cache-control": "no-cache" } });
+            const data = await res.json();
+            if (res.ok && data.status === "ok" && data.release === release.sha && (!release.buildId || data.buildId === release.buildId))
+                return data;
+        }
+        catch { /* rolling replacement is expected to fail briefly */ }
+        if (attempt + 1 < attempts)
+            await sleep(delay);
+    }
+    throw new Error("Release health verification failed for " + app.name + ".");
+}
+export async function waitDeployment(api, id) {
+    if (!id)
+        throw new Error("Coolify returned no deployment ID.");
+    for (let attempt = 0; attempt < 240; attempt++) {
+        const result = await api("GET", "/deployments/" + id);
+        if (result.status === "finished")
+            return;
+        if (["failed", "cancelled", "cancelled-by-user"].includes(result.status))
+            throw new Error("Coolify deployment " + result.status + ".");
+        await sleep(5000);
+    }
+    throw new Error("Coolify deployment timeout.");
+}
+async function launch(api, app, release) {
+    await api("PATCH", "/applications/" + app.uuid, { docker_registry_image_name: app.repository, docker_registry_image_tag: release.tag });
+    const response = await api("POST", "/deploy?uuid=" + app.uuid + "&force=false");
+    const deployment = (response.deployments || [response]).find(item => item.deployment_uuid);
+    await waitDeployment(api, deployment?.deployment_uuid);
+    return waitHealth(app, release);
+}
+export async function deploy(root, manifest, name, component, { rollback = false, release: supplied } = {}) {
+    allowedComponents(manifest, name, [component]);
+    const state = loadState(root, name);
+    const app = state.apps?.[component];
+    if (!app?.uuid)
+        throw new Error("Provision this component first.");
+    const record = supplied || (rollback ? app.previous : readJson(join(root, ".local/flowpress", "release-" + name + "-" + component + ".json")));
+    assertRelease(record, app, name, component);
+    if (name === "production" && component === "cms" && !rollback) {
+        const verified = loadState(root, "staging").apps?.cms;
+        if (!verified?.current || verified.current.sha !== record.sha || verified.current.digest !== record.digest)
+            throw new Error("Production must promote the exact CMS image verified on staging.");
+        await waitHealth(verified, record);
+    }
+    const operator = operatorEnvironment(root);
+    registryLogin(state.platform, operator);
+    if (inspectDigest(record.repository + ":" + record.tag) !== record.digest)
+        throw new Error("Registry digest changed; deployment refused.");
+    const api = coolifyClient(state.platform.coolifyUrl, operator.COOLIFY_TOKEN);
+    const configured = await api("GET", "/applications/" + app.uuid);
+    if (configured.docker_registry_image_name !== app.repository)
+        throw new Error("Application repository drift; review provisioning before deployment.");
+    const previous = app.current;
+    if (component !== "cms") {
+        const env = manifestEnvironment(root, name);
+        const keys = ["APP_ENV", "SITE_URL", "BACKEND_URL", "BACKEND_GRAPHQL_URL", "FLOWPRESS_MEDIA", "FLOWPRESS_COMPOSITION_MODE", "FRONTEND_BACKEND_TARGET", "PROJECT_NAME", "PROJECT_SLUG", "ASTRO_OUTPUT_MODE"];
+        await api("PATCH", "/applications/" + app.uuid + "/envs/bulk", { data: keys.map(key => ({ key, value: String(env[key] || ""), is_runtime: true, is_buildtime: false, is_preview: false, is_literal: true })).concat([{ key: "RELEASE_SHA", value: record.sha, is_runtime: true, is_buildtime: false, is_preview: false, is_literal: true }]) });
+    }
+    try {
+        await launch(api, app, record);
+    }
+    catch (error) {
+        if (previous && previous.digest !== record.digest) {
+            await launch(api, app, previous);
+            throw new Error(error.message + " Previous image restored; database was not rolled back.");
+        }
+        throw error;
+    }
+    if (previous && previous.digest !== record.digest)
+        app.previous = previous;
+    app.current = record;
+    app.deployedAt = new Date().toISOString();
+    saveState(root, name, state);
+    return { component, environment: name, release: record.sha, digest: record.digest, url: app.url, rollback };
+}
+//# sourceMappingURL=deploy.js.map

package/dist/ops/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/ops/deploy.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,mBAAmB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,MAAM,UAAU,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;WACnH,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;WAChG,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACxH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,SAAS,GAAG,KAAK,EAAE,QAAQ,GAAG,EAAE,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE;IACpG,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAClL,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5I,CAAC;QAAC,MAAM,CAAC,CAAC,qDAAqD,CAAC,CAAC;QACjE,IAAI,OAAO,GAAG,CAAC,GAAG,QAAQ;YAAE,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;AAC9E,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAG,EAAE,EAAE;IAC1C,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO;QACzC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACvI,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO;IACrC,MAAM,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,0BAA0B,EAAE,GAAG,CAAC,UAAU,EAAE,yBAAyB,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxI,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,eAAe,GAAG,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3F,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE;IACxG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,UAAU,GAAG,IAAI,GAAG,GAAG,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/I,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,YAAY,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAChM,MAAM,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC3I,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,UAAU,CAAC,0BAA0B,KAAK,GAAG,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACtJ,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;QAC5M,MAAM,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,GAAG,CAAC,IAAI,GAAG,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClV,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,yDAAyD,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3E,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC9G,CAAC"}

package/dist/ops/editorial.d.ts

@@ -0,0 +1,23 @@
+export function validateBuildRequest(payload: any): {
+    target: any;
+    batchId: any;
+    mode: any;
+    paths: string[];
+    deletedPaths: string[];
+};
+export function validateBuildId(value: any): any;
+export function purgeFiles(site: any, routes: any, assets?: any[]): string[];
+export function purgeFrontendFiles({ files, token, zone, fetchImpl }: {
+    files: any;
+    token: any;
+    zone: any;
+    fetchImpl?: typeof fetch | undefined;
+}): Promise<void>;
+export function acknowledgeBatch({ request, backend, token, status, fetchImpl }: {
+    request: any;
+    backend: any;
+    token: any;
+    status: any;
+    fetchImpl?: typeof fetch | undefined;
+}): Promise<any>;
+//# sourceMappingURL=editorial.d.ts.map

package/dist/ops/editorial.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editorial.d.ts","sourceRoot":"","sources":["../../src/ops/editorial.js"],"names":[],"mappings":"AAEA;;;;;;EAUC;AAED,iDAIC;AAED,6EAgBC;AAED;;;;;kBAWC;AAED;;;;;;iBAkBC"}

package/dist/ops/editorial.js

@@ -0,0 +1,79 @@
+import { normalizeDeployPath } from "@styleflow.app/flowpress-deploy";
+export function validateBuildRequest(payload) {
+    if (!payload || !["staging", "production"].includes(payload.target))
+        throw new Error("Invalid editorial target.");
+    if (!/^[a-f0-9]{8}-[a-f0-9]{4}-[1-5][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/i.test(payload.batchId || ""))
+        throw new Error("Invalid editorial batchId.");
+    if (!["full", "partial"].includes(payload.mode))
+        throw new Error("Invalid editorial build mode.");
+    const paths = (key) => {
+        const values = payload[key] ?? [];
+        if (!Array.isArray(values) || values.length > 1000 || values.some((value) => typeof value !== "string" || value.length > 2048))
+            throw new Error(`Invalid editorial ${key}.`);
+        return [...new Set(values.map(normalizeDeployPath))];
+    };
+    return { target: payload.target, batchId: payload.batchId, mode: payload.mode, paths: paths("paths"), deletedPaths: paths("deletedPaths") };
+}
+export function validateBuildId(value) {
+    // Leave room for the environment and full SHA within the OCI tag limit (128).
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(value || ""))
+        throw new Error("Invalid frontend build ID.");
+    return value;
+}
+export function purgeFiles(site, routes, assets = []) {
+    const origin = new URL(site).origin;
+    const paths = new Set(["/", "/robots.txt", "/sitemap_index.xml", "/healthz.json", "/404.html"]);
+    for (const route of routes) {
+        const path = normalizeDeployPath(route);
+        paths.add(path);
+        if (path !== "/" && !path.split("/").at(-1)?.includes(".")) {
+            paths.add(path.replace(/\/+$/, ""));
+            paths.add(`${path.replace(/\/+$/, "")}/`);
+        }
+    }
+    for (const asset of assets) {
+        if (typeof asset !== "string" || !/^\/_astro\/[A-Za-z0-9_./@-]+$/.test(asset) || asset.split("/").some(part => [".", ".."].includes(part)))
+            throw new Error("Invalid frontend asset purge path.");
+        paths.add(asset);
+    }
+    return [...paths].map((path) => new URL(path, origin).href);
+}
+export async function purgeFrontendFiles({ files, token, zone, fetchImpl = fetch }) {
+    if (!token || !/^[a-f0-9]{32}$/i.test(zone || ""))
+        throw new Error("Missing purge-only Cloudflare token or CLOUDFLARE_ZONE_ID.");
+    for (let offset = 0; offset < files.length; offset += 30) {
+        const response = await fetchImpl(`https://api.cloudflare.com/client/v4/zones/${zone}/purge_cache`, {
+            method: "POST", signal: AbortSignal.timeout(30_000), redirect: "error",
+            headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
+            body: JSON.stringify({ files: files.slice(offset, offset + 30) }),
+        });
+        const data = await response.json();
+        if (!response.ok || !data.success)
+            throw new Error(`Cloudflare URL purge failed (${response.status}).`);
+    }
+}
+export async function acknowledgeBatch({ request, backend, token, status, fetchImpl = fetch }) {
+    validateBuildRequest(request);
+    if (!["success", "failure"].includes(status) || !token)
+        throw new Error("Missing callback token or invalid callback status.");
+    const url = new URL("/wp-json/flowpress/v1/build-complete", backend);
+    let last;
+    for (let attempt = 0; attempt < 3; attempt++) {
+        try {
+            const response = await fetchImpl(url, {
+                method: "POST", redirect: "error", signal: AbortSignal.timeout(15_000),
+                headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
+                body: JSON.stringify({ batchId: request.batchId, status }),
+            });
+            const body = await response.json();
+            if (!response.ok || body.ok !== true)
+                throw new Error(`CMS callback failed (${response.status}).`);
+            return body;
+        }
+        catch (error) {
+            last = error;
+        }
+    }
+    throw last;
+}
+//# sourceMappingURL=editorial.js.map

package/dist/ops/editorial.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editorial.js","sourceRoot":"","sources":["../../src/ops/editorial.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,MAAM,UAAU,oBAAoB,CAAC,OAAO;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAClH,IAAI,CAAC,4EAA4E,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7J,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC;QAC7K,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;AAC9I,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAK;IACnC,8EAA8E;IAC9E,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,EAAE;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IAChG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACpC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAClM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,GAAG,KAAK,EAAE;IAChF,IAAI,CAAC,KAAK,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACjI,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,8CAA8C,IAAI,cAAc,EAAE;YACjG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO;YACtE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAG,KAAK,EAAE;IAC3F,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,sCAAsC,EAAE,OAAO,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC;IACT,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBACpC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;gBACtE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;YACnG,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC;QAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,CAAC;AACb,CAAC"}

package/dist/ops/environment.d.ts

@@ -0,0 +1,29 @@
+export function required(env: any, key: any): string;
+export function requiredUrl(env: any, key: any): string;
+export function json(env: any, key: any, fallback: any): any;
+export function port(env: any, key: any): number;
+export function shellEnvironment(env: any): {
+    [k: string]: any;
+};
+export function siteOrigins(env: any): string[];
+export function siteHostnames(env: any): string[];
+export function resolveMediaUrl(env: any): string;
+export function localizeFrontendUrl(value: any, env: any): any;
+export function manifestEnvironment(root: any, name: any, inherited?: {}): import("dotenv-expand").DotenvParseOutput | undefined;
+export function loadEnvironment(name?: string, root?: string, inherited?: NodeJS.ProcessEnv): import("dotenv-expand").DotenvParseOutput | undefined;
+export function resolveFrontendEnvironment(env: any, loadTargetEnvironment?: (target: any) => import("dotenv-expand").DotenvParseOutput | undefined): any;
+export function loadFrontendEnvironment(): any;
+export function cmsEnvironment(root: any, name: any): {
+    DB_HOST: string;
+    DISABLE_WP_CRON: string;
+    FORCE_SSL_ADMIN: string;
+    DISALLOW_FILE_MODS: string;
+};
+export const repoRoot: string;
+export namespace frontendBackendTargets {
+    let local: string[];
+    let staging: string[];
+    let preview: string[];
+    let production: string[];
+}
+//# sourceMappingURL=environment.d.ts.map

package/dist/ops/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/ops/environment.js"],"names":[],"mappings":"AAMA,qDAIC;AACD,wDAMC;AACD,6DAIC;AACD,iDAIC;AACD;;EAA0I;AAC1I,gDAOC;AACD,kDAAqG;AACrG,kDAIC;AACD,+DAKC;AACD,iIAyCC;AACD,oJAGC;AACD,8EAAwE,WAAM,iEAe7E;AACD,+CAAmG;AACnG;;;;;EAWC;AAvHD,8BAAoG"}

package/dist/ops/environment.js

@@ -0,0 +1,159 @@
+import { join } from "node:path";
+import { expand } from "dotenv-expand";
+import { projectRoot, readEnv, readManifest, targetConfig, loadState, saltKeys } from "./config.js";
+export const repoRoot = (() => { try {
+    return projectRoot();
+}
+catch {
+    return process.cwd();
+} })();
+export const frontendBackendTargets = { local: ["local", "staging", "production"], staging: ["staging", "production"], preview: ["production", "staging"], production: ["production"] };
+export function required(env, key) {
+    const value = String(env[key] ?? "").trim();
+    if (!value)
+        throw new Error("Missing required environment variable " + key + ".");
+    return value;
+}
+export function requiredUrl(env, key) {
+    const value = required(env, key);
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error(key + " must be an absolute HTTP(S) URL.");
+    }
+    if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash)
+        throw new Error("Invalid " + key + ".");
+    return value;
+}
+export function json(env, key, fallback) {
+    const value = String(env[key] ?? "").trim();
+    if (!value)
+        return fallback;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        throw new Error(key + " must contain valid JSON.");
+    }
+}
+export function port(env, key) {
+    const value = Number(required(env, key));
+    if (!Number.isInteger(value) || value < 1 || value > 65535)
+        throw new Error("Invalid TCP port: " + key);
+    return value;
+}
+export function shellEnvironment(env) { return Object.fromEntries(Object.entries(env).filter(([, value]) => typeof value === "string")); }
+export function siteOrigins(env) {
+    const values = [requiredUrl(env, "SITE_URL"), ...json(env, "SITE_ALIASES_JSON", [])];
+    return [...new Set(values.map(value => {
+            const url = new URL(value);
+            if (!["https:", "http:"].includes(url.protocol) || url.username || url.password || url.pathname !== "/" || url.search || url.hash)
+                throw new Error("Site URLs must be origins.");
+            return url.origin;
+        }))];
+}
+export function siteHostnames(env) { return siteOrigins(env).map(value => new URL(value).hostname); }
+export function resolveMediaUrl(env) {
+    const value = requiredUrl(env, String(env.FLOWPRESS_MEDIA ?? "").trim() ? "FLOWPRESS_MEDIA" : "BACKEND_URL");
+    if (new URL(value).search)
+        throw new Error("Media URL cannot contain a query.");
+    return value.replace(/\/+$/, "");
+}
+export function localizeFrontendUrl(value, env) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return value;
+    }
+    return json(env, "FRONTEND_BACKEND_TARGET_ORIGINS_JSON", []).includes(url.origin)
+        ? new URL(url.pathname + url.search + url.hash, requiredUrl(env, "SITE_URL")).href : value;
+}
+export function manifestEnvironment(root, name, inherited = {}) {
+    const manifest = readManifest(root);
+    const target = targetConfig(manifest, name);
+    const source = manifest.environments[target.backend || name] || target;
+    const existing = {
+        ...readEnv(join(root, name === "local" ? ".env.example" : ".env." + name + ".example")),
+        ...readEnv(join(root, name === "local" ? ".env" : ".env." + name)),
+        ...readEnv(join(root, ".secrets", name + ".env")),
+    };
+    const profile = target.profile || manifest.profile;
+    const backend = target.backendUrl || source.backendUrl;
+    const frontend = target.frontendUrl || existing.SITE_URL || backend;
+    const values = {
+        ...existing,
+        ...inherited,
+        APP_ENV: name,
+        ASTRO_OUTPUT_MODE: name === "local" || name === "preview" || profile === "headless-ssr" ? "server" : "static",
+        SITE_URL: frontend,
+        BACKEND_URL: backend,
+        BACKEND_GRAPHQL_URL: source.graphqlUrl || backend + "/index.php?graphql",
+        WP_HOME: backend,
+        WP_SITEURL: backend + "/wp",
+        WP_ENV: name === "local" ? "development" : "production",
+        FLOWPRESS_RUNTIME_POLICY: "container",
+        FLOWPRESS_MEDIA_STORAGE: manifest.media,
+        FLOWPRESS_MEDIA: manifest.media === "local" ? "" : (source.mediaUrl || ""),
+        SF_STATIC_TARGETS_JSON: target.publish.includes("web-static") ? JSON.stringify([name]) : "[]",
+        CMS_GITHUB_DISPATCH_TOKEN: target.publish.includes("web-static") ? (existing.CMS_GITHUB_DISPATCH_TOKEN || "") : "",
+        FLOWPRESS_MAIL_MODE: name === "production" ? (target.mail || "disabled") : (target.mail === "capture" ? "capture" : "disabled"),
+        FRONTEND_BACKEND_TARGET: inherited.FRONTEND_BACKEND_TARGET || target.backend || name,
+        SF_DIST_DIR: inherited.SF_DIST_DIR || "apps/web/dist-" + name,
+    };
+    if (!values.PROJECT_NAME)
+        values.PROJECT_NAME = manifest.project || readEnv(join(root, ".env.example")).PROJECT_NAME;
+    if (!values.PROJECT_SLUG)
+        values.PROJECT_SLUG = values.PROJECT_NAME;
+    const frontends = Object.entries(manifest.environments).filter(([, item]) => item.frontendUrl).map(([id, item]) => ({ id, url: item.frontendUrl, aliases: item.aliases || [], indexing: id === "production" ? "index" : "noindex" }));
+    values.FLOWPRESS_FRONTENDS_JSON = JSON.stringify(frontends);
+    values.FLOWPRESS_FRONTEND_VIEW_ID = name === "preview" ? "preview" : name;
+    values.FLOWPRESS_FRONTEND_REDIRECT_ID = name === "preview" ? "preview" : name;
+    values.SITE_ALIASES_JSON = JSON.stringify(target.aliases || []);
+    // Expansion is limited to this environment. The local file never supplies remote secrets.
+    return expand({ parsed: shellEnvironment(values), processEnv: {} }).parsed;
+}
+export function loadEnvironment(name = "", root = repoRoot, inherited = process.env) {
+    const selected = name || inherited.APP_ENV || readEnv(join(root, ".env")).APP_ENV || "local";
+    return manifestEnvironment(root, selected, inherited);
+}
+export function resolveFrontendEnvironment(env, loadTargetEnvironment = target => manifestEnvironment(repoRoot, target)) {
+    const name = required(env, "APP_ENV");
+    const allowed = frontendBackendTargets[name];
+    const target = String(env.FRONTEND_BACKEND_TARGET || name);
+    if (!allowed?.includes(target))
+        throw new Error("Invalid frontend backend target for " + name + ": " + target);
+    if (target === name)
+        return { ...env, FLOWPRESS_MEDIA: resolveMediaUrl(env), FRONTEND_BACKEND_TARGET_ORIGINS_JSON: "[]" };
+    const source = loadTargetEnvironment(target);
+    if (source.APP_ENV !== target)
+        throw new Error("Backend environment identity mismatch.");
+    return {
+        ...env,
+        BACKEND_URL: requiredUrl(source, "BACKEND_URL"),
+        BACKEND_GRAPHQL_URL: requiredUrl(source, "BACKEND_GRAPHQL_URL"),
+        FLOWPRESS_MEDIA: resolveMediaUrl(source),
+        FRONTEND_BACKEND_TARGET_ORIGINS_JSON: JSON.stringify(siteOrigins(source)),
+    };
+}
+export function loadFrontendEnvironment() { return resolveFrontendEnvironment(loadEnvironment()); }
+export function cmsEnvironment(root, name) {
+    const values = manifestEnvironment(root, name);
+    const state = loadState(root, name);
+    if (!state.platform?.poolUuid)
+        throw new Error("Provision the shared database binding first.");
+    const keys = ["APP_ENV", "PROJECT_NAME", "PROJECT_SLUG", "SITE_URL", "SITE_ALIASES_JSON", "BACKEND_URL", "BACKEND_GRAPHQL_URL", "WP_HOME", "WP_SITEURL", "WP_ENV", "DB_NAME", "DB_USER", "DB_PASSWORD", "DB_PREFIX", ...saltKeys,
+        "FLOWPRESS_RUNTIME_POLICY", "FLOWPRESS_MEDIA_STORAGE", "FLOWPRESS_MAIL_MODE", "FLOWPRESS_MEDIA", "FLOWPRESS_COMPOSITION_MODE", "FLOWPRESS_FRONTENDS_JSON", "FLOWPRESS_FRONTEND_VIEW_ID", "FLOWPRESS_FRONTEND_REDIRECT_ID", "SF_STATIC_TARGETS_JSON", "CMS_BUILD_CALLBACK_TOKEN", "CMS_GITHUB_DISPATCH_TOKEN", "GITHUB_REPOSITORY_SLUG",
+        "FLOWPRESS_RESERVED_AREA_ENABLED", "FLOWPRESS_TRACKING_ENABLED", "FLOWPRESS_GTM_CONTAINER_ID", "FLOWPRESS_IUBENDA_SITE_ID", "FLOWPRESS_IUBENDA_COOKIE_POLICY_ID", "FLOWPRESS_IUBENDA_PRIVACY_POLICY_ID", "GOOGLE_MAPS_API_KEY", "STAGING_MAIL_TO"];
+    if (values.FLOWPRESS_MAIL_MODE === "smtp")
+        keys.push("SMTP_HOST", "SMTP_PORT", "SMTP_ENCRYPTION", "SMTP_USER", "SMTP_PASSWORD", "SMTP_FROM", "SMTP_FROM_NAME");
+    if (values.FLOWPRESS_MEDIA_STORAGE === "s3")
+        keys.push("ADVMO_CLOUDFLARE_R2_KEY", "ADVMO_CLOUDFLARE_R2_SECRET", "ADVMO_CLOUDFLARE_R2_ENDPOINT", "ADVMO_CLOUDFLARE_R2_BUCKET", "ADVMO_CLOUDFLARE_R2_DOMAIN");
+    for (const key of ["DB_NAME", "DB_USER", "DB_PASSWORD", "DB_PREFIX", ...saltKeys])
+        required(values, key);
+    return { ...Object.fromEntries(keys.filter(key => values[key] !== undefined).map(key => [key, String(values[key])])), DB_HOST: state.platform.poolUuid + ":3306", DISABLE_WP_CRON: "true", FORCE_SSL_ADMIN: "true", DISALLOW_FILE_MODS: "true" };
+}
+//# sourceMappingURL=environment.js.map