hatchkit 0.1.40 → 0.1.42

package/dist/deploy/ghcr.d.ts

@@ -3,8 +3,10 @@ export interface GhcrSetupOptions {
     /** Owner/repo slug, e.g. `trebeljahr/extinction-protocol`. */
     repoSlug: string;
     /** Maximum time to wait for the first Actions push to create the
-     *  package in GHCR. Default 5 minutes — enough headroom for cold
-     *  builds without keeping the user staring at a spinner forever. */
+     *  package in GHCR. Default 10 minutes — the starter's verify + e2e
+     *  + build-server/client pipeline routinely takes 5–8 min on a cold
+     *  GHA runner, so 5 was right at the boundary and timed out
+     *  intermittently. */
     waitTimeoutMs?: number;
     /** How often to recheck whether the package exists. Default 8s —
      *  matches GHCR's typical sync delay after a push. */

package/dist/deploy/ghcr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ghcr.d.ts","sourceRoot":"","sources":["../../src/deploy/ghcr.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB;;wEAEoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;0DACsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;oBAGoB;AACpB,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,QAAQ,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE3D;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAiE/F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,gBAAgB,GAAG;IAC1B,GAAG,EAAE,UAAU,CAAC;IAChB;+DAC2D;IAC3D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;6CAEyC;IACzC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B,GACA,OAAO,CAAC,eAAe,CAAC,CA2C1B"}
+{"version":3,"file":"ghcr.d.ts","sourceRoot":"","sources":["../../src/deploy/ghcr.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;0BAIsB;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;0DACsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;oBAGoB;AACpB,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,QAAQ,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE3D;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAiE/F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,gBAAgB,GAAG;IAC1B,GAAG,EAAE,UAAU,CAAC;IAChB;+DAC2D;IAC3D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;6CAEyC;IACzC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B,GACA,OAAO,CAAC,eAAe,CAAC,CA2C1B"}

package/dist/deploy/ghcr.js

@@ -42,7 +42,7 @@ import { exec, execOk } from "../utils/exec.js";
  * the user isn't stuck if Actions failed for an unrelated reason.
  */
 export async function makeGhcrPackagePublic(options) {
-    const { repoSlug, waitTimeoutMs = 5 * 60_000, pollIntervalMs = 8_000 } = options;
+    const { repoSlug, waitTimeoutMs = 10 * 60_000, pollIntervalMs = 8_000 } = options;
     const [owner, name] = splitSlug(repoSlug);
     // Cheap upfront check — bail before the wait if `gh` can't possibly
     // succeed at the PATCH step. Saves 5 minutes of false hope.

package/dist/deploy/ghcr.js.map

@@ -1 +1 @@
-{"version":3,"file":"ghcr.js","sourceRoot":"","sources":["../../src/deploy/ghcr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAwBhD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAyB;IACnE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,CAAC,GAAG,MAAM,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACjF,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE1C,oEAAoE;IACpE,4DAA4D;IAC5D,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,iDAAiD;YACzD,QAAQ,EAAE;gBACR,oEAAoE;gBACpE,gFAAgF,IAAI,kCAAkC;gBACtH,mEAAmE;aACpE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,6DAA6D,CAAC,CAAC,KAAK,EAAE,CAAC;IACxF,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,KAAK;QACL,IAAI;QACJ,SAAS,EAAE,aAAa;QACxB,cAAc;KACf,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,mBAAmB,QAAQ,kDAAkD;YACrF,QAAQ,EAAE;gBACR,qDAAqD,QAAQ,UAAU;gBACvE,8FAA8F,IAAI,kCAAkC;gBACpI,6CAA6C;aAC9C;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CACV,yBAAyB,QAAQ,aAAa,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CAAC;IAEF,MAAM,IAAI,GAAG,GAAG,CAAC,4CAA4C,CAAC,CAAC,KAAK,EAAE,CAAC;IACvE,MAAM,OAAO,GACX,SAAS,KAAK,KAAK;QACjB,CAAC,CAAC,SAAS,KAAK,uBAAuB,IAAI,aAAa;QACxD,CAAC,CAAC,4BAA4B,IAAI,aAAa,CAAC;IACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,EAAE;QAC3F,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,SAAS,QAAQ,WAAW,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC3C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,gBAAgB,OAAO,WAAW,CAAC,CAAC,QAAQ,EAAE;QACzE,QAAQ,EAAE;YACR,0CAA0C;YAC1C,wBAAwB,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,uBAAuB,IAAI,WAAW;YAC9G,+CAA+C;YAC/C,6CAA6C;SAC9C;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OASC;IAED,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE7C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,2CAA2C;YACnD,QAAQ,EAAE;gBACR,+BAA+B;gBAC/B,sDAAsD;gBACtD,2EAA2E;gBAC3E,sCAAsC;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,4CAA4C,CAAC,CAAC,KAAK,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,8CAA8C,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7E,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YAC3C,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,SAAS;YACtB,QAAQ;YACR,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,mCAAmC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAG,GAAa,CAAC,OAAO;YAC9B,QAAQ,EAAE;gBACR,uCAAuC;gBACvC,oEAAoE,QAAQ,UAAU;gBACtF,6CAA6C;aAC9C;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E;;kCAEkC;AAClC,KAAK,UAAU,eAAe,CAAC,KAAa;IAC1C,kEAAkE;IAClE,sEAAsE;IACtE,UAAU;IACV,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAKjC;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,IAAI,GACR,SAAS,KAAK,KAAK;QACjB,CAAC,CAAC,SAAS,KAAK,uBAAuB,IAAI,EAAE;QAC7C,CAAC,CAAC,4BAA4B,IAAI,EAAE,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACxE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;kDAEkD;AAClD,KAAK,UAAU,aAAa;IAC1B,sEAAsE;IACtE,sEAAsE;IACtE,wCAAwC;IACxC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,CAAC,CAAC,CAAC,CAAC;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"ghcr.js","sourceRoot":"","sources":["../../src/deploy/ghcr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AA0BhD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAyB;IACnE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,EAAE,GAAG,MAAM,EAAE,cAAc,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAClF,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE1C,oEAAoE;IACpE,4DAA4D;IAC5D,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,iDAAiD;YACzD,QAAQ,EAAE;gBACR,oEAAoE;gBACpE,gFAAgF,IAAI,kCAAkC;gBACtH,mEAAmE;aACpE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,6DAA6D,CAAC,CAAC,KAAK,EAAE,CAAC;IACxF,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;QACzC,KAAK;QACL,IAAI;QACJ,SAAS,EAAE,aAAa;QACxB,cAAc;KACf,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACjD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,mBAAmB,QAAQ,kDAAkD;YACrF,QAAQ,EAAE;gBACR,qDAAqD,QAAQ,UAAU;gBACvE,8FAA8F,IAAI,kCAAkC;gBACpI,6CAA6C;aAC9C;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CACV,yBAAyB,QAAQ,aAAa,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1F,CAAC;IAEF,MAAM,IAAI,GAAG,GAAG,CAAC,4CAA4C,CAAC,CAAC,KAAK,EAAE,CAAC;IACvE,MAAM,OAAO,GACX,SAAS,KAAK,KAAK;QACjB,CAAC,CAAC,SAAS,KAAK,uBAAuB,IAAI,aAAa;QACxD,CAAC,CAAC,4BAA4B,IAAI,aAAa,CAAC;IACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,EAAE;QAC3F,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,SAAS,QAAQ,WAAW,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC3C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,gBAAgB,OAAO,WAAW,CAAC,CAAC,QAAQ,EAAE;QACzE,QAAQ,EAAE;YACR,0CAA0C;YAC1C,wBAAwB,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,uBAAuB,IAAI,WAAW;YAC9G,+CAA+C;YAC/C,6CAA6C;SAC9C;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OASC;IAED,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE7C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,2CAA2C;YACnD,QAAQ,EAAE;gBACR,+BAA+B;gBAC/B,sDAAsD;gBACtD,2EAA2E;gBAC3E,sCAAsC;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,4CAA4C,CAAC,CAAC,KAAK,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,8CAA8C,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7E,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC;YAC3C,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,SAAS;YACtB,QAAQ;YACR,QAAQ,EAAE,SAAS;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,mCAAmC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAG,GAAa,CAAC,OAAO;YAC9B,QAAQ,EAAE;gBACR,uCAAuC;gBACvC,oEAAoE,QAAQ,UAAU;gBACtF,6CAA6C;aAC9C;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,0EAA0E;AAE1E;;kCAEkC;AAClC,KAAK,UAAU,eAAe,CAAC,KAAa;IAC1C,kEAAkE;IAClE,sEAAsE;IACtE,UAAU;IACV,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAKjC;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,IAAI,GACR,SAAS,KAAK,KAAK;QACjB,CAAC,CAAC,SAAS,KAAK,uBAAuB,IAAI,EAAE;QAC7C,CAAC,CAAC,4BAA4B,IAAI,EAAE,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACxE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;kDAEkD;AAClD,KAAK,UAAU,aAAa;IAC1B,sEAAsE;IACtE,sEAAsE;IACtE,wCAAwC;IACxC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO,CAAC,CAAC,CAAC,CAAC;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/deploy/github.d.ts

@@ -7,7 +7,8 @@ import type { ProjectConfig } from "../prompts.js";
 export declare function setupGitHub(config: ProjectConfig, appDir: string): Promise<string | null>;
 /** Push the working branch to `origin`. Run AFTER Coolify wiring +
  *  GH Actions secrets are in place so the workflow's first run can
- *  hit the redeploy webhook successfully. Best-effort — failures
- *  print a copy-pasteable manual command rather than throwing. */
-export declare function pushInitialBranch(projectDir: string): Promise<void>;
+ *  hit the redeploy webhook successfully. Returns true on a clean
+ *  push, false otherwise — the caller uses this to gate the GHCR
+ *  visibility flip (no push = no Actions run = no image to wait for). */
+export declare function pushInitialBranch(projectDir: string): Promise<boolean>;
 //# sourceMappingURL=github.d.ts.map

package/dist/deploy/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/deploy/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;eAIe;AACf,wBAAsB,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmD/F;AAED;;;kEAGkE;AAClE,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBzE"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/deploy/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;eAIe;AACf,wBAAsB,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmD/F;AAED;;;;yEAIyE;AACzE,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAwB5E"}

package/dist/deploy/github.js

@@ -44,8 +44,9 @@ export async function setupGitHub(config, appDir) {
 }
 /** Push the working branch to `origin`. Run AFTER Coolify wiring +
  *  GH Actions secrets are in place so the workflow's first run can
- *  hit the redeploy webhook successfully. Best-effort — failures
- *  print a copy-pasteable manual command rather than throwing. */
+ *  hit the redeploy webhook successfully. Returns true on a clean
+ *  push, false otherwise — the caller uses this to gate the GHCR
+ *  visibility flip (no push = no Actions run = no image to wait for). */
 export async function pushInitialBranch(projectDir) {
     // `git symbolic-ref --short HEAD` is more reliable than rev-parse
     // for the brand-new `git init` case where HEAD points at an unborn
@@ -63,6 +64,8 @@ export async function pushInitialBranch(projectDir) {
         console.log(chalk.yellow(`  Couldn't push ${branch} to origin — push manually:\n` +
             `    cd ${projectDir}\n` +
             `    git push -u origin ${branch}`));
+        return false;
     }
+    return true;
 }
 //# sourceMappingURL=github.js.map

package/dist/deploy/github.js.map

@@ -1 +1 @@
-{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/deploy/github.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC;;;;eAIe;AACf,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAqB,EAAE,MAAc;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAE5F,WAAW;IACX,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE;QAC1B,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,0BAA0B;KACpC,CAAC,CAAC;IAEH,iBAAiB;IACjB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE;QACtD,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,iEAAiE;IACjE,6CAA6C;IAC7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAC7B,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,EAC1D,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,MAAM,CAAC,IAAI,KAAK,EAAE,CACpE,CAAC;IAEF,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,IAAI,8BAA8B,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,iFAAiF,CAClF,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QAClF,GAAG,EAAE,MAAM;KACZ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;kEAGkE;AAClE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,kEAAkE;IAClE,mEAAmE;IACnE,iDAAiD;IACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;QACrE,GAAG,EAAE,UAAU;QACf,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;QAC/D,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,WAAW,MAAM,eAAe;KAC1C,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,mBAAmB,MAAM,+BAA+B;YACtD,UAAU,UAAU,IAAI;YACxB,0BAA0B,MAAM,EAAE,CACrC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/deploy/github.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC;;;;eAIe;AACf,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAqB,EAAE,MAAc;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC,CAAC;IAE5F,WAAW;IACX,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE;QAC1B,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,0BAA0B;KACpC,CAAC,CAAC;IAEH,iBAAiB;IACjB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE;QACtD,GAAG,EAAE,MAAM;QACX,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,iEAAiE;IACjE,6CAA6C;IAC7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAC7B,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,EAC1D,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,MAAM,CAAC,IAAI,KAAK,EAAE,CACpE,CAAC;IAEF,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,IAAI,8BAA8B,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,iFAAiF,CAClF,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QAClF,GAAG,EAAE,MAAM;KACZ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;yEAIyE;AACzE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACxD,kEAAkE;IAClE,mEAAmE;IACnE,iDAAiD;IACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;QACrE,GAAG,EAAE,UAAU;QACf,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;QAC/D,GAAG,EAAE,UAAU;QACf,OAAO,EAAE,WAAW,MAAM,eAAe;KAC1C,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,mBAAmB,MAAM,+BAA+B;YACtD,UAAU,UAAU,IAAI;YACxB,0BAA0B,MAAM,EAAE,CACrC,CACF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/deploy/pages.d.ts

@@ -1,2 +1,43 @@
+/** What kind of site lives in a folder — determines the build workflow. */
+export type SiteKind = "static" | "node-build" | "docusaurus" | "jekyll";
+export interface Detected {
+    kind: SiteKind;
+    /** Folder uploaded to Pages. Relative to repo root. */
+    publishDir: string;
+    /** Package manager for node-build sites. */
+    packageManager?: "pnpm" | "npm" | "yarn" | "bun";
+    /** npm script name used for the build (usually "build"). */
+    buildScript?: string;
+    /** Working directory for the build. Empty string = repo root. */
+    workDir: string;
+}
 export declare function runPagesSetup(cwd: string): Promise<void>;
+/** Programmatic entrypoint for the create/adopt flows.
+ *
+ *  Takes already-resolved values (detected site shape, optional
+ *  custom domain) and runs the same enable / workflow / DNS / cert
+ *  pipeline as the interactive flow. Skips the pickSite + promptDomain
+ *  steps so it's safe to call from within a larger non-interactive
+ *  scaffold.
+ *
+ *  Returns the public URL the site will be served from so callers
+ *  can include it in their summary. */
+export declare function runPagesSetupProgrammatic(cwd: string, opts: {
+    detected: Detected;
+    domain: string | null;
+}): Promise<{
+    pageUrl: string;
+}>;
+interface UndoOptions {
+    dryRun: boolean;
+    yes: boolean;
+}
+/**
+ * Reverse what `hatchkit gh-pages` did: disables Pages, deletes the
+ * Cloudflare records it created, removes the workflow file, removes any
+ * CNAME files matching the registered domain. Idempotent — safe to run
+ * even if some pieces are already gone.
+ */
+export declare function runPagesUndo(cwd: string, opts: UndoOptions): Promise<void>;
+export {};
 //# sourceMappingURL=pages.d.ts.map

package/dist/deploy/pages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../src/deploy/pages.ts"],"names":[],"mappings":"AAsDA,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC9D"}
+{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../src/deploy/pages.ts"],"names":[],"mappings":"AAuBA,2EAA2E;AAC3E,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEzE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,QAAQ,CAAC;IACf,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;IACjD,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;CACjB;AA4BD,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB9D;AAED;;;;;;;;;uCASuC;AACvC,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClD,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAS9B;AA8yBD,UAAU,WAAW;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd;AAgBD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChF"}

package/dist/deploy/pages.js

@@ -1,7 +1,10 @@
-import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+import { resolve4 } from "node:dns/promises";
+import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync, } from "node:fs";
 import { join } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
 import { confirm, input, select } from "@inquirer/prompts";
 import chalk from "chalk";
+import ora from "ora";
 import { ensureDns, getDnsConfig } from "../config.js";
 import { CloudflareApi } from "../utils/cloudflare-api.js";
 import { exec } from "../utils/exec.js";
@@ -18,16 +21,47 @@ export async function runPagesSetup(cwd) {
     console.log(chalk.bold("\n  ── hatchkit gh-pages ──────────────────────────────────────\n"));
     // 1. Repo — must be a git repo with an `origin` pointing at GitHub.
     const repo = await detectRepo(cwd);
-    console.log(chalk.dim(`  Repo:  ${repo.fullName} (${repo.private ? "private" : "public"})`));
-    if (repo.private) {
-        console.log(chalk.yellow("  ⚠ Private repos need a paid GitHub plan (Pro/Team/Enterprise) for Pages.\n    Continuing anyway — will fail at API call if unsupported."));
-    }
+    printRepoHeader(repo);
     // 2. Pick a site. Auto-confirm when there's one obvious candidate;
     //    ask when zero or many. Also let the user override the detected
     //    publish folder before we commit to writing anything.
     const confirmed = await pickSite(cwd);
     // 3. Custom domain (optional).
     const domain = await promptDomain();
+    await executePagesSetup(cwd, repo, confirmed, domain);
+}
+/** Programmatic entrypoint for the create/adopt flows.
+ *
+ *  Takes already-resolved values (detected site shape, optional
+ *  custom domain) and runs the same enable / workflow / DNS / cert
+ *  pipeline as the interactive flow. Skips the pickSite + promptDomain
+ *  steps so it's safe to call from within a larger non-interactive
+ *  scaffold.
+ *
+ *  Returns the public URL the site will be served from so callers
+ *  can include it in their summary. */
+export async function runPagesSetupProgrammatic(cwd, opts) {
+    const repo = await detectRepo(cwd);
+    printRepoHeader(repo);
+    await executePagesSetup(cwd, repo, opts.detected, opts.domain);
+    return {
+        pageUrl: opts.domain
+            ? `https://${opts.domain}`
+            : `https://${repo.owner}.github.io/${repo.repo}/`,
+    };
+}
+function printRepoHeader(repo) {
+    console.log(chalk.dim(`  Repo:  ${repo.fullName} (${repo.private ? "private" : "public"})`));
+    if (repo.private) {
+        console.log(chalk.yellow("  ⚠ Private repos need a paid GitHub plan (Pro/Team/Enterprise) for Pages.\n    Continuing anyway — will fail at API call if unsupported."));
+    }
+}
+/** The shared execution pipeline used by both the interactive
+ *  `runPagesSetup` and the programmatic `runPagesSetupProgrammatic`.
+ *  Everything from "we know what to deploy and where" onwards lives
+ *  here — anything *before* that (site detection, domain prompt) is
+ *  caller-specific. */
+async function executePagesSetup(cwd, repo, confirmed, domain) {
     // 4. Enable Pages via GitHub API.
     await enablePages(repo);
     // 5. Write the workflow — unless the repo already has a Pages-deploying
@@ -36,10 +70,23 @@ export async function runPagesSetup(cwd) {
     // 6. CNAME file — only when a custom domain is chosen.
     if (domain)
         writeCnameFile(cwd, confirmed, domain);
-    // 7. Pages CNAME + DNS wiring.
+    // 7. DNS + Pages CNAME + HTTPS.
+    //
+    // Order matters: GitHub validates the cname by resolving DNS the moment
+    // we PUT it. If DNS isn't in place yet, validation fails silently, cert
+    // provisioning is never kicked off, and GitHub doesn't retry. So:
+    //   a. Wire DNS first.
+    //   b. Wait for DNS to actually resolve (only when we wrote it ourselves).
+    //   c. Then tell GitHub the cname — bouncing it first if a prior run
+    //      left it stuck without a cert.
+    //   d. Wait for the Let's Encrypt cert to be issued, then flip
+    //      `https_enforced` so http:// redirects to https://.
     if (domain) {
+        const { wired } = await configureDns(domain);
+        if (wired)
+            await waitForDnsResolves(domain);
         await setPagesCname(repo, domain);
-        await configureDns(domain);
+        await provisionHttps(repo, wired);
     }
     printSummary(repo, confirmed, domain);
 }
@@ -280,12 +327,121 @@ async function enablePages(repo) {
     throw new Error(`Couldn't enable Pages: ${res.stderr.trim() || res.stdout.trim()}`);
 }
 async function setPagesCname(repo, domain) {
+    // If the cname is already correct but no cert exists, GitHub is stuck
+    // (most often because an earlier run set the cname before DNS was live,
+    // so the validation+cert flow ran against missing DNS and never retried).
+    // Bounce the cname — clear, then re-set — to force a fresh validation
+    // pass now that DNS is in place. Idempotent on the happy path: if a cert
+    // is already issued we skip the bounce entirely.
+    const current = await getPagesInfo(repo);
+    const stuck = current?.cname === domain && !current?.https_certificate;
+    if (stuck) {
+        await exec("gh", ["api", "-X", "PUT", `repos/${repo.fullName}/pages`, "-f", "cname="], {
+            silent: true,
+            spinner: "Resetting Pages CNAME to retry cert provisioning...",
+        });
+        await sleep(2000);
+    }
     const res = await exec("gh", ["api", "-X", "PUT", `repos/${repo.fullName}/pages`, "-f", `cname=${domain}`], { silent: true, spinner: `Registering ${domain} with Pages...` });
     if (res.exitCode !== 0) {
-        // Non-fatal: DNS might not be in place yet.
+        // Non-fatal: DNS might still not be visible to GitHub yet.
         console.log(chalk.yellow(`  ⚠ Couldn't set Pages CNAME to ${domain} (${res.stderr.trim()}).\n    Set it manually in Settings → Pages once DNS resolves.`));
     }
 }
+async function getPagesInfo(repo) {
+    const res = await exec("gh", ["api", `repos/${repo.fullName}/pages`], { silent: true });
+    if (res.exitCode !== 0)
+        return null;
+    try {
+        return JSON.parse(res.stdout);
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// HTTPS provisioning
+// ---------------------------------------------------------------------------
+/**
+ * Wait for `domain` to resolve to one of GitHub's Pages IPs. Important when
+ * we just wrote DNS records via API — GitHub validates the cname by hitting
+ * authoritative DNS, and Cloudflare propagation is usually a few seconds
+ * but can briefly lag. Bounded wait; on timeout we proceed anyway.
+ */
+async function waitForDnsResolves(domain, timeoutMs = 60_000) {
+    const githubIps = new Set(GITHUB_APEX_A);
+    const spinner = ora(`Waiting for DNS for ${domain} to resolve to GitHub...`).start();
+    const start = Date.now();
+    while (Date.now() - start < timeoutMs) {
+        try {
+            const ips = await resolve4(domain);
+            if (ips.some((ip) => githubIps.has(ip))) {
+                spinner.succeed(`DNS resolves: ${domain} → ${ips[0]}`);
+                return true;
+            }
+        }
+        catch {
+            // ENOTFOUND / SERVFAIL — keep polling.
+        }
+        await sleep(3000);
+    }
+    spinner.warn(`DNS for ${domain} hasn't propagated yet — continuing anyway`);
+    return false;
+}
+/**
+ * Drive GitHub's HTTPS state machine to completion: poll until the Let's
+ * Encrypt cert is `issued`, then flip `https_enforced=true` so http://
+ * redirects to https://. Pre-existing fully-configured sites short-circuit
+ * on the first poll.
+ *
+ * If the user added DNS records manually we don't know when they'll land,
+ * so we skip the wait and print the finishing commands instead of blocking
+ * the CLI for what could be hours.
+ */
+async function provisionHttps(repo, autoDns) {
+    if (!autoDns) {
+        console.log(chalk.dim(`\n  Once your DNS records resolve, GitHub will provision an HTTPS cert (usually <5 min).`));
+        console.log(chalk.dim(`  Check:  gh api repos/${repo.fullName}/pages | jq .https_certificate`));
+        console.log(chalk.dim(`  Enforce: gh api -X PUT repos/${repo.fullName}/pages -F https_enforced=true`));
+        return;
+    }
+    const issued = await waitForCertIssued(repo);
+    if (!issued) {
+        console.log(chalk.yellow(`\n  ⚠ HTTPS cert wasn't issued within the wait window — leaving https_enforced off.`));
+        console.log(chalk.dim(`  Check:  gh api repos/${repo.fullName}/pages | jq .https_certificate`));
+        console.log(chalk.dim(`  Enforce: gh api -X PUT repos/${repo.fullName}/pages -F https_enforced=true`));
+        return;
+    }
+    const info = await getPagesInfo(repo);
+    if (info?.https_enforced) {
+        console.log(chalk.dim("  HTTPS already enforced."));
+        return;
+    }
+    const res = await exec("gh", ["api", "-X", "PUT", `repos/${repo.fullName}/pages`, "-F", "https_enforced=true"], { silent: true, spinner: "Enabling Enforce HTTPS..." });
+    if (res.exitCode !== 0) {
+        console.log(chalk.yellow(`  ⚠ Couldn't enable HTTPS enforcement: ${res.stderr.trim() || res.stdout.trim()}`));
+        console.log(chalk.dim(`    Run later: gh api -X PUT repos/${repo.fullName}/pages -F https_enforced=true`));
+    }
+}
+async function waitForCertIssued(repo, timeoutMs = 5 * 60_000) {
+    const spinner = ora("Waiting for GitHub to provision the HTTPS certificate...").start();
+    const start = Date.now();
+    let lastState = "pending";
+    while (Date.now() - start < timeoutMs) {
+        const info = await getPagesInfo(repo);
+        const state = info?.https_certificate?.state;
+        if (state)
+            lastState = state;
+        if (state === "issued" || state === "approved") {
+            spinner.succeed(`HTTPS certificate ${state}`);
+            return true;
+        }
+        spinner.text = `Waiting for HTTPS certificate (state: ${lastState})...`;
+        await sleep(15_000);
+    }
+    spinner.warn(`HTTPS cert not ready after ${Math.round(timeoutMs / 1000)}s (last: ${lastState})`);
+    return false;
+}
 // ---------------------------------------------------------------------------
 // Workflow + CNAME file
 // ---------------------------------------------------------------------------
@@ -472,22 +628,16 @@ async function configureDns(domain) {
         if (wantConfigure)
             dns = await ensureDns();
     }
-    if (!dns || dns.provider === "manual") {
+    if (!dns) {
         printManualDnsRecords(baseDomain, subdomain, target, isApex);
-        return;
+        return { wired: false };
     }
-    if (dns.provider === "cloudflare") {
-        if (!dns.apiToken) {
-            console.log(chalk.yellow("  ⚠ Cloudflare token missing from keychain."));
-            printManualDnsRecords(baseDomain, subdomain, target, isApex);
-            return;
-        }
-        await configureCloudflareDns(dns.apiToken, baseDomain, subdomain, target, isApex);
-        return;
+    if (!dns.apiToken) {
+        console.log(chalk.yellow("  ⚠ Cloudflare token missing from keychain."));
+        printManualDnsRecords(baseDomain, subdomain, target, isApex);
+        return { wired: false };
     }
-    // INWX auto-wiring isn't implemented — XML-RPC + rarely used for Pages.
-    console.log(chalk.dim("  INWX auto-configure isn't implemented for Pages — showing manual records:"));
-    printManualDnsRecords(baseDomain, subdomain, target, isApex);
+    return configureCloudflareDns(dns.apiToken, baseDomain, subdomain, target, isApex);
 }
 async function getGitHubUser() {
     const res = await exec("gh", ["api", "user", "--jq", ".login"], { silent: true });
@@ -514,7 +664,7 @@ async function configureCloudflareDns(token, baseDomain, subdomain, target, isAp
     if (!zone) {
         console.log(chalk.yellow(`  ⚠ No Cloudflare zone found for ${baseDomain}. Falling back to manual records.`));
         printManualDnsRecords(baseDomain, subdomain, target, isApex);
-        return;
+        return { wired: false };
     }
     const recordName = isApex ? baseDomain : `${subdomain}.${baseDomain}`;
     // GitHub Pages apex needs A records for all four IPs (round-robin
@@ -535,6 +685,7 @@ async function configureCloudflareDns(token, baseDomain, subdomain, target, isAp
         const line = `    ${rec.type} ${recordName} → ${rec.content} (${status})`;
         console.log(result.created || result.updated ? chalk.green(`✓ ${line.trimStart()}`) : chalk.dim(line));
     }
+    return { wired: true };
 }
 // ---------------------------------------------------------------------------
 // Summary
@@ -554,4 +705,194 @@ function printSummary(repo, d, domain) {
     }
     console.log(chalk.yellow(`\n  Next: commit & push the new workflow (and CNAME file) to ${repo.defaultBranch}.\n`));
 }
+/**
+ * Reverse what `hatchkit gh-pages` did: disables Pages, deletes the
+ * Cloudflare records it created, removes the workflow file, removes any
+ * CNAME files matching the registered domain. Idempotent — safe to run
+ * even if some pieces are already gone.
+ */
+export async function runPagesUndo(cwd, opts) {
+    console.log(chalk.bold("\n  ── hatchkit gh-pages --undo ───────────────────────────────\n"));
+    const repo = await detectRepo(cwd);
+    console.log(chalk.dim(`  Repo:  ${repo.fullName}`));
+    const plan = await buildUndoPlan(cwd, repo);
+    if (!isAnythingToUndo(plan)) {
+        console.log(chalk.dim("\n  Nothing to undo — no Pages config, workflow, or CNAME files found.\n"));
+        return;
+    }
+    printUndoPlan(plan);
+    if (opts.dryRun) {
+        console.log(chalk.dim("\n  --dry-run set, nothing changed.\n"));
+        return;
+    }
+    if (!opts.yes) {
+        const ok = await confirm({
+            message: "Proceed with the steps above?",
+            default: false,
+        });
+        if (!ok) {
+            console.log(chalk.dim("\n  Aborted — nothing changed.\n"));
+            return;
+        }
+    }
+    await executeUndo(repo, plan);
+    console.log(chalk.bold("\n  ── Done ───────────────────────────────────────────────────\n"));
+    if (plan.cname) {
+        console.log(chalk.dim(`  DNS at other providers (registrar caches, AAAA records, etc.) may need manual cleanup.\n`));
+    }
+}
+async function buildUndoPlan(cwd, repo) {
+    const info = await getPagesInfo(repo);
+    const cname = info?.cname ?? null;
+    // Workflow: only the one we write. Hand-written Pages workflows
+    // (e.g. docs.yml) belong to the user — don't touch them.
+    const wfPath = join(cwd, ".github", "workflows", WORKFLOW_FILENAME);
+    const workflowPath = existsSync(wfPath) ? wfPath : null;
+    // CNAME files: scan the spots `writeCnameFile` could have written.
+    // Only flag files whose content matches the registered cname so we
+    // never delete a CNAME the user wrote for some other purpose.
+    const cnamePaths = cname ? findCnameFiles(cwd, cname) : [];
+    // Cloudflare records: present only if a cname was registered AND
+    // we have a Cloudflare token AND the zone is in this account.
+    const cloudflare = { available: false, records: [] };
+    if (cname) {
+        const dns = await getDnsConfig();
+        if (dns?.apiToken) {
+            const { baseDomain, subdomain } = parseDomain(cname);
+            const recordName = subdomain === "" ? baseDomain : `${subdomain}.${baseDomain}`;
+            const api = new CloudflareApi({ token: dns.apiToken });
+            const zone = await api.getZoneByName(baseDomain);
+            if (zone) {
+                const ghUser = await getGitHubUser().catch(() => "");
+                const target = ghUser ? `${ghUser}.github.io` : "";
+                const all = await api.findRecordsByName(zone.id, recordName);
+                // Only delete records that match what hatchkit could plausibly
+                // have written: A records pointing at GitHub's Pages IPs, or a
+                // CNAME pointing at <user>.github.io. Anything else stays.
+                const records = all.filter((r) => (r.type === "A" && GITHUB_APEX_A.includes(r.content)) ||
+                    (r.type === "CNAME" && target && r.content === target));
+                cloudflare.available = true;
+                cloudflare.zoneId = zone.id;
+                cloudflare.baseDomain = baseDomain;
+                cloudflare.records = records.map((r) => ({
+                    id: r.id,
+                    type: r.type,
+                    name: r.name,
+                    content: r.content,
+                }));
+            }
+        }
+    }
+    return {
+        pagesEnabled: info !== null,
+        cname,
+        workflowPath,
+        cnamePaths,
+        cloudflare,
+    };
+}
+function isAnythingToUndo(plan) {
+    return (plan.pagesEnabled ||
+        plan.workflowPath !== null ||
+        plan.cnamePaths.length > 0 ||
+        plan.cloudflare.records.length > 0);
+}
+function printUndoPlan(plan) {
+    console.log(chalk.bold("\n  Will undo:\n"));
+    if (plan.pagesEnabled) {
+        const suffix = plan.cname ? ` (cname: ${plan.cname})` : "";
+        console.log(chalk.yellow(`    • Disable GitHub Pages${suffix}`));
+    }
+    for (const rec of plan.cloudflare.records) {
+        console.log(chalk.yellow(`    • Delete Cloudflare ${rec.type} ${rec.name} → ${rec.content}`));
+    }
+    if (plan.workflowPath) {
+        console.log(chalk.yellow(`    • Delete ${relPath(plan.workflowPath)}`));
+    }
+    for (const p of plan.cnamePaths) {
+        console.log(chalk.yellow(`    • Delete ${relPath(p)}`));
+    }
+    if (plan.cname && !plan.cloudflare.available) {
+        console.log(chalk.dim(`\n  (Cloudflare records for ${plan.cname} can't be auto-deleted — no token / zone not in this account.\n   Remove them manually at your DNS provider.)`));
+    }
+}
+async function executeUndo(repo, plan) {
+    if (plan.pagesEnabled) {
+        const res = await exec("gh", ["api", "-X", "DELETE", `repos/${repo.fullName}/pages`], {
+            silent: true,
+            spinner: "Disabling GitHub Pages...",
+        });
+        if (res.exitCode !== 0) {
+            console.log(chalk.yellow(`  ⚠ Couldn't disable Pages: ${res.stderr.trim() || res.stdout.trim()}`));
+        }
+    }
+    if (plan.cloudflare.records.length > 0 && plan.cloudflare.zoneId) {
+        const dns = await getDnsConfig();
+        if (dns?.apiToken) {
+            const api = new CloudflareApi({ token: dns.apiToken });
+            for (const rec of plan.cloudflare.records) {
+                const result = await api.deleteRecord(plan.cloudflare.zoneId, rec.id);
+                const tag = result === "deleted" ? chalk.green("✓") : chalk.dim("—");
+                console.log(`  ${tag} Cloudflare ${rec.type} ${rec.name} → ${rec.content} (${result})`);
+            }
+        }
+    }
+    if (plan.workflowPath) {
+        try {
+            unlinkSync(plan.workflowPath);
+            console.log(chalk.green(`  ✓ Removed ${relPath(plan.workflowPath)}`));
+        }
+        catch (err) {
+            console.log(chalk.yellow(`  ⚠ Couldn't remove ${relPath(plan.workflowPath)}: ${err.message}`));
+        }
+    }
+    for (const p of plan.cnamePaths) {
+        try {
+            unlinkSync(p);
+            console.log(chalk.green(`  ✓ Removed ${relPath(p)}`));
+        }
+        catch (err) {
+            console.log(chalk.yellow(`  ⚠ Couldn't remove ${relPath(p)}: ${err.message}`));
+        }
+    }
+}
+/**
+ * Look for `CNAME` files in the places `writeCnameFile` could have put
+ * one, in the current working dir and each candidate scan dir. Only
+ * returns files whose content matches `expected` (trimmed, case-insensitive)
+ * so we never delete an unrelated CNAME file.
+ */
+function findCnameFiles(cwd, expected) {
+    const target = expected.trim().toLowerCase();
+    const out = [];
+    const seen = new Set();
+    const bases = ["", ...SCAN_DIRS.filter((d) => d !== "")];
+    for (const base of bases) {
+        const baseAbs = base ? join(cwd, base) : cwd;
+        if (base && !existsSync(baseAbs))
+            continue;
+        for (const sub of ["", "public", "static"]) {
+            const subAbs = sub ? join(baseAbs, sub) : baseAbs;
+            const candidate = join(subAbs, "CNAME");
+            if (seen.has(candidate))
+                continue;
+            seen.add(candidate);
+            if (!existsSync(candidate))
+                continue;
+            try {
+                const content = readFileSync(candidate, "utf8").trim().toLowerCase();
+                if (content === target)
+                    out.push(candidate);
+            }
+            catch {
+                // unreadable — skip
+            }
+        }
+    }
+    return out;
+}
+function relPath(p) {
+    const cwd = process.cwd();
+    return p.startsWith(cwd) ? p.slice(cwd.length + 1) : p;
+}
 //# sourceMappingURL=pages.js.map