fix(deploy): sync rooms Prisma types and harden checkout against stale host files

next build failed on host-local rooms.ts using Prisma without import while tsc incremental passed; force non-incremental typecheck and verify src matches HEAD.

Co-authored-by: Cursor <[email protected]>

.gitea/workflows/deploy.yaml

@@ -37,8 +37,7 @@ jobs:
           DEPLOY_GROUP="$(id -gn)"
 
           # CRITICAL: last deploy chowns the tree to www-data. Reclaim ownership
-          # BEFORE git reset, otherwise stale sources (e.g. old nitro editor with
-          # a removed Json type) can survive and break typecheck.
+          # BEFORE git reset, otherwise stale sources can survive and break builds.
           sudo chown -R "${DEPLOY_USER}:${DEPLOY_GROUP}" /var/www/atom-nexst/
 
           # CRITICAL: Prevent Git permission blocks caused by the www-data ownership change
@@ -49,26 +48,36 @@ jobs:
 
           # 3. Fetch and update code
           git fetch origin --prune
+          # Clear bits that can pin host-local stale copies over origin/main.
+          git ls-files -v | awk '/^[a-zS]/ {print substr($0,3)}' | while IFS= read -r f; do
+            [ -n "$f" ] || continue
+            git update-index --no-skip-worktree --no-assume-unchanged -- "$f" 2>/dev/null || true
+          done
           git reset --hard origin/main
           # Drop stray untracked sources left on the host (keep secrets/env).
           git clean -fd -e .env -e .env.local -e .env.production -e .env*.local -- src
-          # Force-refresh sources after reclaiming ownership (belt-and-suspenders).
           git checkout -f HEAD -- src
 
+          # Working tree under src/ must match HEAD exactly (catches sticky host edits).
+          if ! git diff --exit-code -- src >/dev/null; then
+            echo "ERROR: src/ still differs from HEAD after reset/checkout:" >&2
+            git diff --stat -- src >&2 || true
+            git checkout -f HEAD -- src
+            git diff --exit-code -- src
+          fi
+
+          # Drop incremental TS caches that can hide real type errors.
+          rm -f tsconfig.tsbuildinfo .tsbuildinfo
+          find . -maxdepth 3 -name '*.tsbuildinfo' -delete 2>/dev/null || true
+
           # Preserve .next/cache so Next.js can reuse its incremental build cache.
-          rm -rf .output dist
+          rm -rf .output dist .next/types .next/dev
 
           # Release tag for Sentry / logs (short git sha)
           export APP_VERSION="$(git rev-parse --short HEAD)"
           export NEXT_PUBLIC_APP_VERSION="${APP_VERSION}"
           echo "APP_VERSION=${APP_VERSION}"
 
-          # Fail fast if a host-local stale copy still has the removed Json type.
-          if grep -nE ':\s*Json\b|Json\s*\|' src/app/admin/import/furni/nitro-editor-dialog.tsx; then
-            echo "ERROR: nitro-editor-dialog.tsx still contains a Json type after checkout" >&2
-            exit 1
-          fi
-
           # 4. Install — onlyBuiltDependencies comes from pnpm-workspace.yaml
           # (do not set a PNPM only-built-deps env override here).
           pnpm install --frozen-lockfile
@@ -83,8 +92,6 @@ jobs:
 
           # 7. Next.js Build
           # Skip env refine during compile/page-data; runtime still validates via env.ts.
-          # Drop stale generated types that can diverge from source after incremental builds.
-          rm -rf .next/types .next/dev
           export SKIP_ENV_VALIDATION=1
           pnpm build