veryfront 0.1.1047 → 0.1.1049

package/esm/cli/commands/deploy/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EAAE,KAAK,SAAS,EAA0C,MAAM,wBAAwB,CAAC;AAMhG;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;IAO5B,oDAAoD;;GAGvD,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;IALzB,oDAAoD;;GAKO,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;IAfxB,oDAAoD;;GAsBtD,CAAC;AAEH;;GAEG;AACH,UAAU,WAAW;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAYD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAmB7B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAwDzE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/command.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EAAE,KAAK,SAAS,EAA0C,MAAM,wBAAwB,CAAC;AAchG;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;IAO5B,oDAAoD;;GAGvD,CAAC;AAEF,eAAO,MAAM,gBAAgB;;;;;;IALzB,oDAAoD;;GAKO,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AAEhF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;IAfxB,oDAAoD;;GAsBtD,CAAC;AAEH;;GAEG;AACH,UAAU,qBAAqB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;KACrB,GAAG,IAAI,CAAC;CACV;AAED,UAAU,WAAW;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC3C;AAED;;GAEG;AACH,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAaD,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,wBAAwB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,qBAAqB;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,6BAA6B;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAqDD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,aAAa,GAAG,SAAS,EACvC,QAAQ,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7C,SAAS,EAAE,MAAM,GAChB,IAAI,CAMN;AAmCD;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAmB7B;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,0EAErE;AAED,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,OAAO,CAAC,CAKlB;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,UAAU,CAAC,CASrB;AAMD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,yBAAyB,CAAC,CA2BpC;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CAoEjC;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAmBvD;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAqHzE"}

package/esm/cli/commands/deploy/command.js

@@ -6,6 +6,7 @@
  *
  * @module cli/commands/deploy
  */
+import * as dntShim from "../../../_dnt.shims.js";
 import { defineSchema, lazySchema } from "../../../src/schemas/index.js";
 import { cwd } from "../../../src/platform/index.js";
 import { createApiClient, resolveConfigWithAuth } from "../../shared/config.js";
@@ -13,6 +14,7 @@ import { CommonArgs, createArgParser } from "../../shared/args.js";
 import { confirmPrompt, logInfo, logSuccess } from "../../utils/index.js";
 import { createNoopSpinner, createSpinner, muted } from "../../ui/index.js";
 import { isJsonMode, streamJsonLine } from "../../shared/json-output.js";
+import { computeSourceDigest, getProjectTarget, normalizeControlPlane, readPushReceipt, resolveGitSource, validatePushReceipt, } from "../../shared/deployment-provenance.js";
 /**
  * Schema factory for deploy command arguments
  */
@@ -37,6 +39,66 @@ export const parseDeployArgs = createArgParser(DeployArgsSchema, {
     force: CommonArgs.force,
     quiet: CommonArgs.quiet,
 });
+function referenceId(value) {
+    return typeof value === "string" ? value : value?.id;
+}
+function normalizeEnvironment(environment) {
+    const projectId = environment.project_id ?? environment.projectId ??
+        referenceId(environment.project);
+    return projectId ? { ...environment, project_id: projectId } : environment;
+}
+function normalizeRelease(release) {
+    const projectId = release.project_id ?? release.projectId ?? referenceId(release.project);
+    return projectId ? { ...release, project_id: projectId } : release;
+}
+function normalizeDeployment(deployment) {
+    const releaseId = deployment.release_id ?? referenceId(deployment.release);
+    const environmentId = deployment.environment_id ?? referenceId(deployment.environment);
+    if (!releaseId || !environmentId) {
+        throw new Error(`Deployment ${deployment.id} response is missing release or environment IDs`);
+    }
+    return {
+        id: deployment.id,
+        release_id: releaseId,
+        environment_id: environmentId,
+    };
+}
+export function assertProjectOwnership(resourceType, resource, projectId) {
+    if (resource.project_id && resource.project_id !== projectId) {
+        throw new Error(`${resourceType} ${resource.id} does not belong to resolved project ${projectId}`);
+    }
+}
+function getReleaseFileContent(file) {
+    const content = typeof file.content === "string" ? file.content : undefined;
+    let legacyBody;
+    if (typeof file.data === "string") {
+        let envelope;
+        try {
+            envelope = JSON.parse(file.data);
+        }
+        catch {
+            throw new Error(`Release file ${file.path} has invalid version data`);
+        }
+        if (typeof envelope !== "object" || envelope === null || Array.isArray(envelope)) {
+            throw new Error(`Release file ${file.path} has invalid version data`);
+        }
+        const record = envelope;
+        if (typeof record.body !== "string") {
+            throw new Error(`Release file ${file.path} version data has no body`);
+        }
+        if (typeof record.path === "string" && record.path !== file.path) {
+            throw new Error(`Release file ${file.path} version data references ${record.path}`);
+        }
+        legacyBody = record.body;
+    }
+    if (content !== undefined && legacyBody !== undefined && content !== legacyBody) {
+        throw new Error(`Release file ${file.path} has conflicting content fields`);
+    }
+    const value = content ?? legacyBody;
+    if (value === undefined)
+        throw new Error(`Release file ${file.path} has no content`);
+    return value;
+}
 /**
  * Get environment by name (with pagination support)
  */
@@ -49,30 +111,145 @@ export async function getEnvironmentByName(client, projectSlug, name) {
         const response = await client.get(`/projects/${projectSlug}/environments`, params);
         const found = response.data.find((e) => e.name === name);
         if (found)
-            return found;
+            return normalizeEnvironment(found);
         cursor = response.page_info?.next;
     } while (cursor);
     return null;
 }
+export function getProject(client, projectReference) {
+    return getProjectTarget(client, projectReference);
+}
+export async function getRelease(client, projectReference, releaseId) {
+    const release = await client.get(`/projects/${projectReference}/releases/${releaseId}`);
+    return normalizeRelease(release);
+}
+export async function getDeployment(client, projectReference, deploymentId) {
+    const deployment = await client.get(`/projects/${projectReference}/deployments/${deploymentId}`);
+    return normalizeDeployment(deployment);
+}
+export async function getReleaseSourceDigest(client, projectReference, releaseId) {
+    const files = [];
+    let cursor;
+    do {
+        const params = { limit: "100" };
+        if (cursor)
+            params.cursor = cursor;
+        const response = await client.get(`/projects/${projectReference}/releases/${releaseId}/versions`, params);
+        files.push(...response.data);
+        cursor = response.page_info?.next;
+    } while (cursor);
+    return computeSourceDigest(files.map((file) => ({
+        path: file.path,
+        content: getReleaseFileContent(file),
+    })));
+}
 /**
  * Create a new release
  */
-export function createRelease(client, projectSlug, options) {
+export async function createRelease(client, projectSlug, options) {
     const body = {};
     if (options?.name)
         body.name = options.name;
     if (options?.branch)
         body.branch_reference = options.branch;
-    return client.post(`/projects/${projectSlug}/releases`, body);
+    return normalizeRelease(await client.post(`/projects/${projectSlug}/releases`, body));
 }
 /**
  * Create a new deployment
  */
-export function createDeployment(client, projectSlug, releaseId, environmentId) {
-    return client.post(`/projects/${projectSlug}/deployments`, {
+export async function createDeployment(client, projectSlug, releaseId, environmentId) {
+    const deployment = await client.post(`/projects/${projectSlug}/deployments`, {
         release_id: releaseId,
         environment_id: environmentId,
     });
+    return normalizeDeployment(deployment);
+}
+function wait(ms) {
+    return new Promise((resolve) => dntShim.setTimeout(resolve, ms));
+}
+export async function verifyReleaseSource(client, projectReference, expected) {
+    const release = await getRelease(client, projectReference, expected.releaseId);
+    if (release.id !== expected.releaseId) {
+        throw new Error(`Release read-back returned ${release.id}; expected ${expected.releaseId}`);
+    }
+    assertProjectOwnership("Release", release, expected.projectId);
+    if (expected.releaseName && release.name !== expected.releaseName) {
+        throw new Error(`Release ${expected.releaseId} no longer matches the created release name`);
+    }
+    if (!release.version) {
+        throw new Error(`Release ${expected.releaseId} has no version`);
+    }
+    const sourceDigest = await getReleaseSourceDigest(client, projectReference, expected.releaseId);
+    if (sourceDigest !== expected.sourceDigest) {
+        throw new Error(`Release ${expected.releaseId} source does not match pushed commit ${expected.commitSha}`);
+    }
+    return {
+        projectId: expected.projectId,
+        releaseId: expected.releaseId,
+        releaseVersion: release.version,
+        commitSha: expected.commitSha,
+        sourceDigest,
+    };
+}
+export async function verifyDeployment(client, projectReference, expected, options = {}) {
+    const deployment = await getDeployment(client, projectReference, expected.deploymentId);
+    if (deployment.id !== expected.deploymentId || deployment.release_id !== expected.releaseId ||
+        deployment.environment_id !== expected.environmentId) {
+        throw new Error(`Deployment ${expected.deploymentId} does not reference release ${expected.releaseId} and environment ${expected.environmentId}`);
+    }
+    const verifiedRelease = options.verifiedRelease ?? await verifyReleaseSource(client, projectReference, expected);
+    if (verifiedRelease.projectId !== expected.projectId ||
+        verifiedRelease.releaseId !== expected.releaseId ||
+        verifiedRelease.commitSha !== expected.commitSha ||
+        verifiedRelease.sourceDigest !== expected.sourceDigest) {
+        throw new Error(`Verified release source does not match deployment ${expected.deploymentId}`);
+    }
+    const attempts = Math.max(1, options.attempts ?? 20);
+    const delayMs = Math.max(0, options.delayMs ?? 500);
+    let observedEnvironment = null;
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        observedEnvironment = await getEnvironmentByName(client, projectReference, expected.environmentName);
+        if (observedEnvironment) {
+            assertProjectOwnership("Environment", observedEnvironment, expected.projectId);
+        }
+        if (observedEnvironment?.id === expected.environmentId &&
+            observedEnvironment.deployment?.id === expected.deploymentId &&
+            observedEnvironment.deployment.release?.id === expected.releaseId) {
+            return {
+                projectId: expected.projectId,
+                projectSlug: expected.projectSlug,
+                environmentId: expected.environmentId,
+                environmentName: expected.environmentName,
+                releaseId: expected.releaseId,
+                releaseVersion: verifiedRelease.releaseVersion,
+                deploymentId: expected.deploymentId,
+                commitSha: expected.commitSha,
+                sourceDigest: verifiedRelease.sourceDigest,
+            };
+        }
+        if (attempt < attempts - 1 && delayMs > 0)
+            await wait(delayMs);
+    }
+    const observedDeploymentId = observedEnvironment?.deployment?.id ?? "none";
+    const observedReleaseId = observedEnvironment?.deployment?.release?.id ?? "none";
+    throw new Error(`Deployment verification failed: environment "${expected.environmentName}" still points to deployment ${observedDeploymentId} / release ${observedReleaseId}; expected deployment ${expected.deploymentId} / release ${expected.releaseId}`);
+}
+export async function resolvePushedSource(input) {
+    const receipt = await readPushReceipt(input.projectDir);
+    if (!receipt) {
+        throw new Error(`No verified push found for branch "${input.branch}". Run veryfront push --branch ${input.branch} before deploying.`);
+    }
+    const gitSource = await resolveGitSource(input.projectDir);
+    const commitSha = validatePushReceipt(receipt, {
+        controlPlane: input.controlPlane,
+        projectId: input.projectId,
+        projectSlug: input.projectSlug,
+        branch: input.branch,
+        commitSha: gitSource.commitSha,
+        clean: gitSource.clean,
+        requireClean: input.requireClean,
+    });
+    return { commitSha, sourceDigest: receipt.sourceDigest };
 }
 /**
  * Create a release and deploy to an environment
@@ -82,21 +259,46 @@ export async function deployCommand(options) {
     if (isJsonMode()) {
         return deployCommandJson(options);
     }
+    const projectDir = cwd();
     let spinner = quiet ? createNoopSpinner() : createSpinner("Resolving configuration...");
-    const config = await resolveConfigWithAuth(cwd());
+    const config = await resolveConfigWithAuth(projectDir);
     const client = createApiClient(config);
+    spinner.update("Resolving project...");
+    const project = await getProject(client, config.projectSlug);
     spinner.update(`Looking up environment "${env}"...`);
-    const environment = await getEnvironmentByName(client, config.projectSlug, env);
+    const environment = await getEnvironmentByName(client, project.id, env);
     if (!environment) {
         spinner.stop();
         throw new Error(`Environment "${env}" not found`);
     }
-    spinner.stop();
+    try {
+        assertProjectOwnership("Environment", environment, project.id);
+    }
+    catch (error) {
+        spinner.stop();
+        throw error;
+    }
     if (dryRun) {
+        spinner.stop();
         if (!quiet)
             logInfo(`Would create release from "${branch}" and deploy to "${env}"`);
         return;
     }
+    spinner.update("Verifying pushed source...");
+    let source;
+    try {
+        source = await resolvePushedSource({
+            projectDir,
+            controlPlane: config.apiUrl,
+            projectId: project.id,
+            projectSlug: project.slug,
+            branch,
+            requireClean: env === "production",
+        });
+    }
+    finally {
+        spinner.stop();
+    }
     if (!force) {
         const confirmed = await confirmPrompt(`Create release from "${branch}" and deploy to "${env}"?`, true);
         if (!confirmed) {
@@ -105,15 +307,51 @@ export async function deployCommand(options) {
         }
     }
     spinner = quiet ? createNoopSpinner() : createSpinner(`Creating release from "${branch}"...`);
-    const release = await createRelease(client, config.projectSlug, { name: releaseName, branch });
-    spinner.update(`Deploying ${release.version} to ${env}...`);
-    await createDeployment(client, config.projectSlug, release.id, environment.id);
-    spinner.stop();
+    let release;
+    let deployment;
+    let verification;
+    try {
+        release = await createRelease(client, project.id, { name: releaseName, branch });
+        if (!release.version)
+            throw new Error(`Release ${release.id} has no version`);
+        spinner.update(`Verifying ${release.version} source...`);
+        const verifiedRelease = await verifyReleaseSource(client, project.id, {
+            projectId: project.id,
+            releaseId: release.id,
+            releaseName: release.name,
+            commitSha: source.commitSha,
+            sourceDigest: source.sourceDigest,
+        });
+        spinner.update(`Deploying ${release.version} to ${env}...`);
+        deployment = await createDeployment(client, project.id, release.id, environment.id);
+        spinner.update(`Verifying ${env} deployment...`);
+        verification = await verifyDeployment(client, project.id, {
+            projectId: project.id,
+            projectSlug: project.slug,
+            environmentId: environment.id,
+            environmentName: env,
+            releaseId: release.id,
+            releaseName: release.name,
+            deploymentId: deployment.id,
+            commitSha: source.commitSha,
+            sourceDigest: source.sourceDigest,
+        }, { verifiedRelease });
+        spinner.stop();
+    }
+    catch (error) {
+        spinner.stop();
+        throw error;
+    }
     if (quiet)
         return;
-    logSuccess(`Deployed ${release.version} to ${env}`);
-    logInfo(`  Release: ${release.name} (${release.version})`);
-    logInfo(`  Environment: ${env}`);
+    logSuccess(`Deployed ${verification.releaseVersion} to ${env}`);
+    logInfo(`  Project: ${verification.projectSlug} (${verification.projectId})`);
+    logInfo(`  Environment: ${env} (${verification.environmentId})`);
+    logInfo(`  Release: ${release.name} (${verification.releaseVersion}, ${verification.releaseId})`);
+    logInfo(`  Deployment: ${verification.deploymentId}`);
+    logInfo(`  Commit: ${verification.commitSha}`);
+    logInfo(`  Source digest: ${verification.sourceDigest}`);
+    logInfo(`  Control plane: ${normalizeControlPlane(config.apiUrl)}`);
     const { getPostDeployTips } = await import("../../help/tips.js");
     console.log(getPostDeployTips());
 }
@@ -133,11 +371,13 @@ async function deployCommandJson(options) {
             return;
         }
         streamJsonLine({ type: "step", name: "resolve-config", status: "started" });
-        const config = await resolveConfigWithAuth(cwd());
+        const projectDir = cwd();
+        const config = await resolveConfigWithAuth(projectDir);
         const client = createApiClient(config);
         streamJsonLine({ type: "step", name: "resolve-config", status: "completed" });
-        streamJsonLine({ type: "step", name: "resolve-environment", status: "started" });
-        const environment = await getEnvironmentByName(client, config.projectSlug, env);
+        streamJsonLine({ type: "step", name: "resolve-target", status: "started" });
+        const project = await getProject(client, config.projectSlug);
+        const environment = await getEnvironmentByName(client, project.id, env);
         if (!environment) {
             streamJsonLine({
                 type: "result",
@@ -148,30 +388,84 @@ async function deployCommandJson(options) {
             exit(1);
             return;
         }
-        streamJsonLine({ type: "step", name: "resolve-environment", status: "completed" });
+        assertProjectOwnership("Environment", environment, project.id);
+        streamJsonLine({ type: "step", name: "resolve-target", status: "completed" });
         if (dryRun) {
             streamJsonLine({
                 type: "result",
                 success: true,
-                data: { dryRun: true, branch, environment: env },
+                data: {
+                    dryRun: true,
+                    branch,
+                    projectId: project.id,
+                    projectSlug: project.slug,
+                    environment: env,
+                    environmentId: environment.id,
+                    controlPlane: normalizeControlPlane(config.apiUrl),
+                },
             });
             return;
         }
+        streamJsonLine({ type: "step", name: "verify-source", status: "started" });
+        const source = await resolvePushedSource({
+            projectDir,
+            controlPlane: config.apiUrl,
+            projectId: project.id,
+            projectSlug: project.slug,
+            branch,
+            requireClean: env === "production",
+        });
+        streamJsonLine({ type: "step", name: "verify-source", status: "completed" });
         streamJsonLine({ type: "step", name: "create-release", status: "started" });
-        const release = await createRelease(client, config.projectSlug, {
+        const release = await createRelease(client, project.id, {
             name: releaseName,
             branch,
         });
+        if (!release.version)
+            throw new Error(`Release ${release.id} has no version`);
         streamJsonLine({ type: "step", name: "create-release", status: "completed" });
+        streamJsonLine({ type: "step", name: "verify-release-source", status: "started" });
+        const verifiedRelease = await verifyReleaseSource(client, project.id, {
+            projectId: project.id,
+            releaseId: release.id,
+            releaseName: release.name,
+            commitSha: source.commitSha,
+            sourceDigest: source.sourceDigest,
+        });
+        streamJsonLine({ type: "step", name: "verify-release-source", status: "completed" });
         streamJsonLine({ type: "step", name: "deploy", status: "started" });
-        await createDeployment(client, config.projectSlug, release.id, environment.id);
+        const deployment = await createDeployment(client, project.id, release.id, environment.id);
         streamJsonLine({ type: "step", name: "deploy", status: "completed" });
+        streamJsonLine({ type: "step", name: "verify-deployment", status: "started" });
+        const verification = await verifyDeployment(client, project.id, {
+            projectId: project.id,
+            projectSlug: project.slug,
+            environmentId: environment.id,
+            environmentName: env,
+            releaseId: release.id,
+            releaseName: release.name,
+            deploymentId: deployment.id,
+            commitSha: source.commitSha,
+            sourceDigest: source.sourceDigest,
+        }, { verifiedRelease });
+        streamJsonLine({ type: "step", name: "verify-deployment", status: "completed" });
         streamJsonLine({
             type: "result",
             success: true,
             data: {
-                release: { id: release.id, name: release.name, version: release.version },
+                projectId: verification.projectId,
+                projectSlug: verification.projectSlug,
+                release: {
+                    id: verification.releaseId,
+                    name: release.name,
+                    version: verification.releaseVersion,
+                },
                 environment: env,
+                environmentId: verification.environmentId,
+                deploymentId: verification.deploymentId,
+                commitSha: verification.commitSha,
+                sourceDigest: verification.sourceDigest,
+                controlPlane: normalizeControlPlane(config.apiUrl),
                 branch,
             },
         });

package/esm/cli/commands/deploy/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * Deploy command - Create and deploy releases
  */
-export { createDeployment, createRelease, DeployArgsSchema, deployCommand, getEnvironmentByName, parseDeployArgs, } from "./command.js";
-export type { DeployOptions } from "./command.js";
+export { assertProjectOwnership, createDeployment, createRelease, DeployArgsSchema, deployCommand, getDeployment, getEnvironmentByName, getProject, getRelease, getReleaseSourceDigest, parseDeployArgs, resolvePushedSource, verifyDeployment, verifyReleaseSource, } from "./command.js";
+export type { DeploymentVerification, DeployOptions, ReleaseSourceVerification, } from "./command.js";
 export { handleDeployCommand } from "./handler.js";
 //# sourceMappingURL=index.d.ts.map

package/esm/cli/commands/deploy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/deploy/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,sBAAsB,EACtB,aAAa,EACb,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/esm/cli/commands/deploy/index.js

@@ -1,5 +1,5 @@
 /**
  * Deploy command - Create and deploy releases
  */
-export { createDeployment, createRelease, DeployArgsSchema, deployCommand, getEnvironmentByName, parseDeployArgs, } from "./command.js";
+export { assertProjectOwnership, createDeployment, createRelease, DeployArgsSchema, deployCommand, getDeployment, getEnvironmentByName, getProject, getRelease, getReleaseSourceDigest, parseDeployArgs, resolvePushedSource, verifyDeployment, verifyReleaseSource, } from "./command.js";
 export { handleDeployCommand } from "./handler.js";

package/esm/cli/commands/dev/command.d.ts

@@ -4,6 +4,7 @@ export interface DevOptions {
     port: number;
     projectDir: string;
     hmr?: boolean;
+    open?: boolean;
     /** Demo mode: don't exit process on shutdown, resolve done promise instead */
     demoMode?: boolean;
 }

package/esm/cli/commands/dev/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/command.ts"],"names":[],"mappings":"AAsBA,OAAO,EACL,KAAK,YAAY,EAIlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAI9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE3C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,wBAAsB,cAAc,CAClC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CAQvE;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAqSzE"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/command.ts"],"names":[],"mappings":"AAsBA,OAAO,EACL,KAAK,YAAY,EAIlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAI9E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE3C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAQD,wBAAsB,cAAc,CAClC,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CAQvE;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8SzE"}

package/esm/cli/commands/dev/command.js

@@ -38,7 +38,7 @@ export async function preloadDevAuth(apiToken) {
 }
 export function devCommand(options) {
     return withSpan("cli.command.dev", async () => {
-        const { port, projectDir, hmr = true, demoMode = false } = options;
+        const { port, projectDir, hmr = true, open = false, demoMode = false } = options;
         let doneResolve;
         const done = new Promise((resolve) => {
             doneResolve = resolve;
@@ -207,6 +207,14 @@ export function devCommand(options) {
             console.log(`  ${dim("Press")} ${brand("s")} ${dim("to see your projects")}`);
         }
         console.log();
+        if (open) {
+            try {
+                await openBrowser(serverUrl);
+            }
+            catch {
+                console.log(`  ${dim("Could not open browser automatically.")}`);
+            }
+        }
         if (!demoMode) {
             keyboardHandler = createKeyboardHandler({
                 onOpen: () => void openBrowser(serverUrl),
@@ -277,5 +285,6 @@ export function devCommand(options) {
         "cli.port": options.port,
         "cli.projectDir": options.projectDir,
         "cli.hmr": options.hmr ?? true,
+        "cli.open": options.open ?? false,
     });
 }

package/esm/cli/commands/dev/handler.d.ts

@@ -6,6 +6,8 @@ export declare const parseDevArgs: (args: ParsedArgs) => import("../../shared/ar
     port: import("../../../src/internal-agents/schema.js").Schema<number>;
     project: import("../../../src/internal-agents/schema.js").Schema<string | undefined>;
     hmr: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    noHmr: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    open: import("../../../src/internal-agents/schema.js").Schema<boolean>;
     debug: import("../../../src/internal-agents/schema.js").Schema<boolean>;
 }>>;
 export declare function handleDevCommand(args: ParsedArgs): Promise<void>;

package/esm/cli/commands/dev/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/handler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAaxD,eAAO,MAAM,YAAY;;;;;GAKvB,CAAC;AAwBH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBtE"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dev/handler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAexD,eAAO,MAAM,YAAY;;;;;;;GAOvB,CAAC;AAwBH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtE"}

package/esm/cli/commands/dev/handler.js

@@ -13,6 +13,8 @@ const getDevArgsSchema = defineSchema((v) => v.object({
     port: v.number().default(DEFAULT_DEV_SERVER_PORT),
     project: v.string().optional(),
     hmr: v.boolean().default(true),
+    noHmr: v.boolean().default(false),
+    open: v.boolean().default(false),
     debug: v.boolean().default(false),
 }));
 const DevArgsSchema = lazySchema(getDevArgsSchema);
@@ -20,6 +22,8 @@ export const parseDevArgs = createArgParser(DevArgsSchema, {
     port: { keys: ["port", "p"], type: "number" },
     project: { keys: ["project"], type: "string" },
     hmr: { keys: ["hmr"], type: "boolean" },
+    noHmr: { keys: ["no-hmr"], type: "boolean" },
+    open: { keys: ["open"], type: "boolean" },
     debug: { keys: ["debug", "d"], type: "boolean" },
 });
 async function resolveProjectDir(projectArg) {
@@ -52,7 +56,8 @@ export async function handleDevCommand(args) {
     const { done } = await devCommand({
         port: opts.port,
         projectDir,
-        hmr: opts.hmr,
+        hmr: opts.hmr && !opts.noHmr,
+        open: opts.open,
     });
     // Block until the dev server shuts down.
     // Without this, main.ts reaches exitProcess(0) and terminates immediately.

package/esm/cli/commands/doctor/command-help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/doctor/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAYxB,CAAC"}
+{"version":3,"file":"command-help.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/doctor/command-help.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,eAAO,MAAM,UAAU,EAAE,WAgBxB,CAAC"}

package/esm/cli/commands/doctor/command-help.js

@@ -4,10 +4,14 @@ export const doctorHelp = {
     description: "Check system requirements and project health",
     usage: "veryfront doctor [options]",
     options: [
+        {
+            flag: "-p, --port <number>",
+            description: "Port used by the development server",
+        },
         {
             flag: "-s, --strict",
             description: "Treat warnings as errors",
         },
     ],
-    examples: ["veryfront doctor", "veryfront doctor --strict"],
+    examples: ["veryfront doctor", "veryfront doctor --port 4321", "veryfront doctor --strict"],
 };

package/esm/cli/commands/doctor/handler.d.ts

@@ -4,6 +4,7 @@
 import type { ParsedArgs } from "../../shared/types.js";
 export declare const parseDoctorArgs: (args: ParsedArgs) => import("../../shared/args.js").SafeParseResult<import("../../../src/extensions/schema/schema-validator.js").InferShape<{
     strict: import("../../../src/internal-agents/schema.js").Schema<boolean>;
+    port: import("../../../src/internal-agents/schema.js").Schema<number | undefined>;
 }>>;
 export declare function handleDoctorCommand(args: ParsedArgs): Promise<void>;
 //# sourceMappingURL=handler.d.ts.map

package/esm/cli/commands/doctor/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/doctor/handler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAUxD,eAAO,MAAM,eAAe;;GAE1B,CAAC;AAEH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzE"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/doctor/handler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAWxD,eAAO,MAAM,eAAe;;;GAG1B,CAAC;AAEH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzE"}

package/esm/cli/commands/doctor/handler.js

@@ -8,10 +8,12 @@ import { showLogo } from "../../utils/index.js";
 import { createArgParser, parseArgsOrThrow } from "../../shared/args.js";
 const getDoctorArgsSchema = defineSchema((v) => v.object({
     strict: v.boolean().default(false),
+    port: v.number().optional(),
 }));
 const DoctorArgsSchema = lazySchema(getDoctorArgsSchema);
 export const parseDoctorArgs = createArgParser(DoctorArgsSchema, {
     strict: { keys: ["strict", "s"], type: "boolean" },
+    port: { keys: ["port", "p"], type: "number" },
 });
 export async function handleDoctorCommand(args) {
     showLogo();

package/esm/cli/commands/doctor/index.d.ts

@@ -1,4 +1,11 @@
+import type { DiagnosticResult } from "./types.js";
+export declare function resolveDoctorPort(projectDir: string, explicitPort?: number): Promise<number>;
+export declare function reportDoctorResults(results: DiagnosticResult[], opts: {
+    port: number;
+    strict?: boolean;
+}): Promise<void>;
 export declare function doctorCommand(projectDir: string, opts?: {
     strict?: boolean;
+    port?: number;
 }): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/esm/cli/commands/doctor/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/doctor/index.ts"],"names":[],"mappings":"AA0BA,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9B,OAAO,CAAC,IAAI,CAAC,CA2Df"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/doctor/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAgBnD,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,CAUjB;AAoBD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,IAAI,EAAE;IACJ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GACA,OAAO,CAAC,IAAI,CAAC,CA+Ef;AAED,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7C,OAAO,CAAC,IAAI,CAAC,CAkBf"}