layero 0.8.1 → 0.8.3

package/README.md

@@ -208,4 +208,4 @@ always excluded: `node_modules`, `.git`, `dist`, `build`, `.next`, `.env*`,
 
 - Website: https://layero.ru
 - Docs: https://docs.layero.ru
-- Issues: https://github.com/layero/layero/issues
+- Support: https://docs.layero.ru/contacts/

package/dist/commands/deploy.js

@@ -196,6 +196,13 @@ async function packAndUpload(api, cwd, project, prebuiltDir) {
         sha256: pack.sha256,
         ...(prebuiltDir ? { prebuilt_dir: prebuiltDir } : {}),
     });
+    // A gitignored lockfile is force-included so the build can do a frozen
+    // install; warn (to stderr, off the --json stdout stream) that the ignore
+    // rule was overridden for it.
+    if (pack.forcedLockfiles?.length) {
+        process.stderr.write(chalk.yellow(`! including gitignored lockfile(s) so the build uses a frozen install: ` +
+            `${pack.forcedLockfiles.join(", ")}\n`));
+    }
     const init = await api.initUpload(project.id);
     emit({ event: "uploading" });
     await uploadArchive(init, pack.archivePath);
@@ -219,21 +226,44 @@ const PREBUILT_AUTO_DIRS = [
 async function resolvePrebuiltDir(cwd, raw) {
     if (raw === undefined || raw === false)
         return null;
+    let dir = null;
     if (typeof raw === "string" && raw.length > 0) {
-        return raw;
+        dir = raw;
     }
-    // No explicit dir — pick the first existing common output directory.
-    for (const candidate of PREBUILT_AUTO_DIRS) {
-        try {
-            const stat = await fs.stat(path.join(cwd, candidate));
-            if (stat.isDirectory())
-                return candidate;
+    else {
+        // No explicit dir — pick the first existing common output directory.
+        for (const candidate of PREBUILT_AUTO_DIRS) {
+            try {
+                const stat = await fs.stat(path.join(cwd, candidate));
+                if (stat.isDirectory()) {
+                    dir = candidate;
+                    break;
+                }
+            }
+            catch {
+                // try next
+            }
         }
-        catch {
-            // try next
+        if (dir === null) {
+            throw new LayeroError("prebuilt_no_dir", "could not auto-detect a built artifact directory", `pass it explicitly: --prebuilt ./dist  (tried: ${PREBUILT_AUTO_DIRS.join(", ")})`);
         }
     }
-    throw new LayeroError("prebuilt_no_dir", "could not auto-detect a built artifact directory", `pass it explicitly: --prebuilt ./dist  (tried: ${PREBUILT_AUTO_DIRS.join(", ")})`);
+    // Servability check (mirrors the builder-side gate, 2026-07-01 audit): a
+    // prebuilt dir with no index.html at its root isn't a servable site — the
+    // apex "/" would 404. Fail fast here, before packing + uploading, instead of
+    // the deploy going "ready" but broken.
+    let hasIndex = false;
+    try {
+        const entries = await fs.readdir(path.join(cwd, dir));
+        hasIndex = entries.some((e) => e.toLowerCase() === "index.html");
+    }
+    catch {
+        hasIndex = false;
+    }
+    if (!hasIndex) {
+        throw new LayeroError("prebuilt_no_index", `'${dir}' has no index.html — nothing to serve`, `point --prebuilt at the folder that contains your built index.html (e.g. --prebuilt ./dist)`);
+    }
+    return dir;
 }
 // Resolve the framework / build / output config to send to completeSetup.
 // Precedence: explicit CLI args > .layero/project.json > auto-detect.
@@ -424,30 +454,36 @@ export async function deployCmd(opts) {
         const dashboardUrl = projectUrl(cliCfg.apiUrl, project.id);
         const apexUrl = `https://${project.apex_hostname}`;
         const probe = await resolveReachability(api, deploy.environment_id);
-        // Public site URL — honour the preview-first contract the dashboard uses
-        // (probe states B/C): until the CDN apex is verified live (`cdn_ready`),
-        // the reachable address is the off-CDN preview domain. A fresh apex
-        // 404/000s for ~10-15min while CDN propagates, and for runtime apps the
-        // preview domain is the *permanent* address (the CDN apex can't serve
-        // POST/WebSocket). So only surface the canonical apex once it's warm;
-        // before that, hand back the preview. `edge_ready` / `edge_eta_seconds`
-        // below tell the caller the apex is on its way.
-        const cdnWarm = probe?.cdn_ready === true;
-        const liveUrl = cdnWarm
+        // Публичный адрес сайта.
+        //
+        // Раньше здесь стоял гейт `cdn_ready`: пока YC CDN не подтвердил апекс,
+        // отдавали off-CDN превью, потому что свежий апекс 10-15 минут отвечал
+        // 404, а runtime-приложения на апексе вообще не принимали POST (CDN резал
+        // не-GET). После EDGE-02 CDN перед пользовательскими зонами нет: апекс
+        // валиден с момента создания проекта (wildcard-запись + wildcard-серт), а
+        // `cdn_ready` бекенд отдаёт false НАВСЕГДА — строки в `cdn_hostnames` у
+        // новых проектов не появляется вовсе.
+        //
+        // Из-за этого условие не выполнялось никогда, и после успешной публикации
+        // CLI выдавал ссылку на дашборд вместо адреса сайта. Проверено вживую
+        // 2026-07-26: `layero deploy` вернул `url: https://app.layero.ru/projects/…`.
+        //
+        // Апекс — адрес по умолчанию; превью остаётся для деплоя ветки, которую
+        // не промоутили: там апекс ведёт на другую сборку.
+        const liveUrl = promoted || !opts.branch
             ? probe?.canonical_url ?? apexUrl
-            : probe?.preview_url ??
-                probe?.canonical_url ??
-                (promoted || !opts.branch ? apexUrl : dashboardUrl);
+            : probe?.preview_url ?? probe?.canonical_url ?? apexUrl;
         emit({
             event: "ready",
             url: liveUrl,
             deploy_id: deploy.id,
             preview_url: probe?.preview_url ?? undefined,
             dashboard_url: dashboardUrl,
-            edge_ready: probe ? probe.cdn_ready : undefined,
-            edge_eta_seconds: probe && !probe.cdn_ready && probe.cdn_eta_seconds != null
-                ? probe.cdn_eta_seconds
-                : undefined,
+            // `available` от пробы, а НЕ `cdn_ready`: последний после EDGE-02
+            // остаётся false навсегда, и потребитель JSON-вывода ждал бы события,
+            // которого не будет. ETA пропагации убран по той же причине —
+            // распространять больше нечего.
+            edge_ready: probe ? probe.available : undefined,
         });
     }
     finally {

package/dist/pack.js

@@ -41,11 +41,26 @@ async function readIgnoreFile(filePath) {
         throw err;
     }
 }
+// Lockfiles the server needs for a frozen/reproducible install. A gitignored
+// (or .layeroignore'd) lockfile would otherwise be dropped from the upload →
+// the builder falls back to a non-frozen install (re-resolves deps). Force them
+// back in with negation patterns applied AFTER the ignore layers. They live at
+// repo root, so no ignored parent dir can block the re-include.
+const FORCE_INCLUDE_LOCKFILES = [
+    "bun.lockb",
+    "bun.lock",
+    "package-lock.json",
+    "yarn.lock",
+    "pnpm-lock.yaml",
+    "npm-shrinkwrap.json",
+];
 async function buildIgnore(cwd) {
     const ig = ignore();
     ig.add(DEFAULT_IGNORE);
     ig.add(await readIgnoreFile(path.join(cwd, ".gitignore")));
     ig.add(await readIgnoreFile(path.join(cwd, ".layeroignore")));
+    // Negations last so they win over any ignore rule above.
+    ig.add(FORCE_INCLUDE_LOCKFILES.map((f) => `!/${f}`));
     return ig;
 }
 async function walk(cwd, ig) {
@@ -80,6 +95,30 @@ async function sha256OfFile(p) {
     }
     return hash.digest("hex");
 }
+/** Lockfiles present on disk that WOULD have been dropped by the ignore rules
+ * if not force-included. Built from the same ignore layers minus the lockfile
+ * negations, so it reflects exactly what the user's .gitignore/.layeroignore
+ * would have excluded. */
+async function detectForcedLockfiles(cwd) {
+    const probe = ignore();
+    probe.add(DEFAULT_IGNORE);
+    probe.add(await readIgnoreFile(path.join(cwd, ".gitignore")));
+    probe.add(await readIgnoreFile(path.join(cwd, ".layeroignore")));
+    const forced = [];
+    for (const lf of FORCE_INCLUDE_LOCKFILES) {
+        if (!probe.ignores(lf))
+            continue; // not ignored → nothing forced
+        try {
+            const st = await fs.stat(path.join(cwd, lf));
+            if (st.isFile())
+                forced.push(lf);
+        }
+        catch {
+            // absent on disk — nothing to force-include
+        }
+    }
+    return forced;
+}
 /** Pack only the contents of an already-built artifact directory.
  *
  * Used by `layero deploy --prebuilt`. We deliberately bypass DEFAULT_IGNORE
@@ -139,6 +178,7 @@ export async function packCwd(cwd, projectName) {
         throw new Error("no files to upload after applying .gitignore/.layeroignore — " +
             "check that you're in the right directory");
     }
+    const forcedLockfiles = await detectForcedLockfiles(cwd);
     const stamp = Date.now();
     const safeName = projectName.replace(/[^a-zA-Z0-9._-]/g, "_");
     const archivePath = path.join(tmpdir(), `layero-${safeName}-${stamp}.tgz`);
@@ -159,5 +199,11 @@ export async function packCwd(cwd, projectName) {
             "Add large directories to .layeroignore.");
     }
     const sha256 = await sha256OfFile(archivePath);
-    return { archivePath, sha256, size: stat.size, fileCount: files.length };
+    return {
+        archivePath,
+        sha256,
+        size: stat.size,
+        fileCount: files.length,
+        ...(forcedLockfiles.length ? { forcedLockfiles } : {}),
+    };
 }

package/package.json

@@ -1,17 +1,12 @@
 {
   "name": "layero",
-  "version": "0.8.1",
+  "version": "0.8.3",
   "description": "Layero CLI — publish a local site with one command. No git, no GitHub, agent-friendly (Cursor, Claude Code).",
   "license": "MIT",
   "type": "module",
   "homepage": "https://layero.ru",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/LayeroInfra/core.git",
-    "directory": "cli"
-  },
   "bugs": {
-    "url": "https://github.com/LayeroInfra/core/issues"
+    "url": "https://docs.layero.ru/contacts/"
   },
   "keywords": [
     "layero",