@superblocksteam/gateway 2.0.178-next.3 → 2.0.179-next.1

package/dist/capabilities/lifecycle.js

@@ -121,6 +121,10 @@ function heldSocketFor(ctx, applicationId, branch) {
     }
     return held.branch === branch ? "this_branch" : "other_branch";
 }
+/** Holds a live edit on `branch`, which makes it the caller's current branch on the server. */
+export function attachToBranch({ ctx, principal, applicationId, branch, }) {
+    return ensureLiveState(ctx, principal, applicationId, branch, hostCallDeadlineAtMs(ctx));
+}
 /**
  * `branch` is the branch the read resolved to, undefined for the default
  * branch: a socket held for any other branch cannot answer for this read.
@@ -1023,7 +1027,7 @@ async function createApplicationForPrompt(ctx, args) {
  * rather than from its arguments, so the failure is the one place a caller can
  * learn which app it actually drove.
  */
-function namingApplication(applicationId, result) {
+export function namingApplication(applicationId, result) {
     return result.kind === "error" ? { ...result, applicationId } : result;
 }
 /**
@@ -3717,8 +3721,41 @@ function notShared(applicationId, commitId) {
         pendingAction: "open_editor",
     };
 }
+/**
+ * A rollback publishes only a version that was live before and whose stored
+ * policy checks passed, the versions the editor offers to publish again.
+ */
+async function refuseNeverLive(ctx, input) {
+    let deployments;
+    try {
+        deployments = await ctx.server.listDeployments({
+            apiKey: input.apiKey,
+            applicationId: input.applicationId,
+            ...(ctx.signal ? { signal: ctx.signal } : {}),
+        });
+    }
+    catch (error) {
+        return {
+            kind: "error",
+            applicationId: input.applicationId,
+            code: "publish_failed",
+            message: error instanceof Error ? error.message : String(error),
+        };
+    }
+    if (deployments.some(({ commitId, policyChecksPassed }) => commitId === input.commitId && policyChecksPassed === true)) {
+        return undefined;
+    }
+    return {
+        kind: "error",
+        applicationId: input.applicationId,
+        code: "rollback_not_live_before",
+        message: `Commit ${input.commitId} was never live, or its policy checks did not pass, so it cannot go live again directly. Call restore_version with this commitId to restore it on the user's branch, then call publish_app with commitMessage.`,
+    };
+}
 /** The server's refusal to land a branch whose merge from main is not resolved yet. */
 const MERGE_IN_PROGRESS_REFUSAL = "has a merge in progress";
+/** The server's refusal to publish a branch that lacks main's latest changes. */
+const BEHIND_MAIN_REFUSAL = "Pull the latest changes from main before you publish";
 function landConflict(applicationId) {
     return {
         kind: "error",
@@ -3749,6 +3786,7 @@ async function landForPublish(ctx, input) {
     const land = (retryFailedMigrations) => ctx.server.landBranch({
         apiKey,
         applicationId,
+        publish: true,
         retryFailedMigrations,
         ...(ctx.signal ? { signal: ctx.signal } : {}),
         timeoutMs: Math.max(1, deadlineAtMs - nowMs(ctx)),
@@ -3783,6 +3821,14 @@ async function landForPublish(ctx, input) {
         if (message.includes(MERGE_IN_PROGRESS_REFUSAL)) {
             return landConflict(applicationId);
         }
+        if (message.includes(BEHIND_MAIN_REFUSAL)) {
+            return {
+                kind: "error",
+                applicationId,
+                code: "publish_behind_main",
+                message: 'This branch does not have the latest changes from main yet. Call pull_branch with target "main", then call publish_app again.',
+            };
+        }
         // Only the user can agree to delete data, and only the editor shows what
         // would go, so this publish never sends that agreement itself.
         if (message.includes(DESTRUCTIVE_MIGRATION_ACK_REQUIRED_MESSAGE)) {
@@ -3874,9 +3920,20 @@ async function publishResolvedApp(ctx, args) {
             message: error instanceof Error ? error.message : String(error),
         };
     }
+    if (input.publishIntent === "rollback" && requestedCommitId) {
+        const refused = await refuseNeverLive(ctx, {
+            apiKey: principal.apiKey,
+            applicationId,
+            commitId: requestedCommitId,
+        });
+        if (refused) {
+            return refused;
+        }
+    }
+    else if (
     // The server only deploys main's head, so a commit still on the user's own
     // branch has to be shared first.
-    if (userBranch &&
+    userBranch &&
         requestedCommitId &&
         userBranch.mainHead !== null &&
         requestedCommitId !== userBranch.mainHead) {
@@ -3958,6 +4015,7 @@ async function publishResolvedApp(ctx, args) {
             apiKey: principal.apiKey,
             applicationId,
             commitId,
+            ...(input.publishIntent ? { publishIntent: input.publishIntent } : {}),
             ...(ctx.signal ? { signal: ctx.signal } : {}),
             timeoutMs: Math.max(1, deadlineAtMs - nowMs(ctx)),
         });