artifactpass 0.1.9 → 0.1.10-rc.1

package/dist/cli.mjs

@@ -31988,11 +31988,11 @@ var deploymentPlan = (input) => {
   if (input.publicAuth !== void 0) {
     return [
       "verify the short-lived Cloudflare API token, selected zone, and Workers account subdomain",
-      input.productionExistingResources === true ? "verify the approved existing Worker, D1 database, R2 bucket, custom domain, and Access gate" : "reuse or create the private D1 database and R2 bucket",
+      input.productionExistingResources === true ? "verify the approved existing Worker, D1 database, R2 bucket, and Pages front door" : "reuse or create the private D1 database and R2 bucket",
       "prepare the public Worker configuration with Google and GitHub OAuth secrets",
       "apply D1 migrations and the R2 cleanup lifecycle",
-      input.productionExistingResources === true ? "deploy code and OAuth secrets atomically while retaining the Access containment gate" : "deploy the Worker and verify ArtifactPass authentication before removing the old Access gate",
-      input.productionExistingResources === true ? "verify provider starts, health, and the retained Access boundary" : "verify public sign-in, protected upload redirection, and health",
+      input.productionExistingResources === true ? "deploy code and OAuth secrets behind the existing Pages front door" : "deploy the Worker and verify ArtifactPass authentication before removing the old Access gate",
+      input.productionExistingResources === true ? "verify provider starts, health, and the ArtifactPass sign-in boundary" : "verify public sign-in, protected upload redirection, and health",
       "print the public connection command without persisting provisioning credentials"
     ];
   }
@@ -32180,10 +32180,9 @@ var approvalBinding = async (input, serviceName, dependencies) => {
     const domain2 = domains.find((candidate) => candidate.hostname === input.hostname);
     const serviceDomains = domains.filter((candidate) => candidate.service === serviceName);
     const serviceRoutes = zoneRoutes.filter((candidate) => candidate.script === serviceName);
-    const destinations = application?.destinations ?? [];
-    if (workersSubdomain?.subdomain !== input.workersSubdomain || zone.status !== "active" || input.hostname !== zone.name && !input.hostname.endsWith(`.${zone.name}`) || domain2?.service !== serviceName || database === null || bucket === null || worker === void 0 || application === void 0 || canonicalJson(destinations) !== canonicalJson(expectedDestinations(input.hostname)) || serviceDomains.length !== 1 || serviceRoutes.length !== 0 || workerSubdomain?.enabled !== false || workerSubdomain.previews_enabled !== false) {
+    if (workersSubdomain?.subdomain !== input.workersSubdomain || zone.status !== "active" || input.hostname !== zone.name && !input.hostname.endsWith(`.${zone.name}`) || domain2 !== void 0 || database === null || bucket === null || worker === void 0 || serviceDomains.length !== 0 || serviceRoutes.length !== 0 || workerSubdomain?.enabled !== false || workerSubdomain.previews_enabled !== false) {
       throw new Error(
-        "Production requires the approved existing Worker, D1, R2, custom domain, and Access application"
+        "Production requires the approved existing Worker, D1, R2, and Pages front door"
       );
     }
     const localMigrations = (await readdir(resolve3(dependencies.deploymentRoot, "migrations"))).filter((name) => name.endsWith(".sql")).sort();
@@ -32539,7 +32538,7 @@ var deployArtifactShare = async (input, dependencies) => {
       migrations_dir: resolve3(dependencies.deploymentRoot, "migrations")
     };
     template.r2_buckets[0] = { binding: "ARTIFACTS", bucket_name: serviceName };
-    template.routes = [{ pattern: input.hostname, custom_domain: true }];
+    template.routes = input.publicAuth !== void 0 && input.productionExistingResources === true ? [] : [{ pattern: input.hostname, custom_domain: true }];
     template.workers_dev = false;
     template.preview_urls = false;
     if (input.publicAuth === void 0) {
@@ -32735,7 +32734,6 @@ var deployArtifactShare = async (input, dependencies) => {
         }
       }
       if (input.productionExistingResources === true) {
-        if (organization === null) throw new Error("Cloudflare Access organization is unavailable");
         const containedUpload = await fetchAfterDeploymentPropagation(
           fetchImplementation,
           `${baseUrl}/upload`,
@@ -32743,11 +32741,8 @@ var deployArtifactShare = async (input, dependencies) => {
           sleep2,
           readinessTimeoutMilliseconds
         );
-        const location = containedUpload.headers.get("location");
-        const accessHostname = new URL(`https://${organization.auth_domain}`).hostname;
-        const retainedAccessBoundary = [302, 303, 307, 401, 403].includes(containedUpload.status) && (location === null || new URL(location, baseUrl).hostname === accessHostname);
         const retainedArtifactPassBoundary = isArtifactPassUploadRedirect(containedUpload, baseUrl);
-        if (!retainedAccessBoundary && !retainedArtifactPassBoundary) {
+        if (!retainedArtifactPassBoundary) {
           throw new Error(`Production upload boundary is not protected (${containedUpload.status})`);
         }
         return {
@@ -36178,8 +36173,20 @@ var runDoctor = async (deploymentRoot2, runner = runProcess) => {
 // package.json
 var package_default = {
   name: "artifactpass",
-  version: "0.1.9",
+  version: "0.1.10-rc.1",
   description: "Install and connect ArtifactPass for compatible AI agent systems.",
+  homepage: "https://artifactpass.com",
+  keywords: [
+    "artifact-sharing",
+    "ai-agents",
+    "mcp",
+    "model-context-protocol",
+    "temporary-file-sharing",
+    "markdown",
+    "html",
+    "pdf",
+    "cloudflare"
+  ],
   repository: {
     type: "git",
     url: "git+https://github.com/lordelogos/lordebuilds.artifact.pass.git"