fix(deploy): reclaim www-data ownership before git reset

Stale host sources survived reset when files were owned by www-data, leaving an old nitro editor with a removed Json type that failed typecheck.

Co-authored-by: Cursor <[email protected]>

src/app/admin/import/furni/nitro-editor-dialog.tsx

@@ -39,6 +39,7 @@ interface NitroEditorDialogProps {
 	onOpenChange: (open: boolean) => void;
 }
 
+/** Nested metadata patch helpers (no ambient Json type — keep this file typecheck-clean). */
 function updateNested(
 	obj: Record<string, unknown>,
 	path: string,

src/lib/deploy-workflow-contract.test.ts

@@ -15,6 +15,16 @@ describe("production deploy workflow", () => {
 		expect(workflow).toContain("SKIP_ENV_VALIDATION=1");
 	});
 
+	it("reclaims ownership before git reset so www-data files can be overwritten", () => {
+		expect(workflow).toContain('sudo chown -R "${DEPLOY_USER}:${DEPLOY_GROUP}"');
+		const reclaimAt = workflow.indexOf(
+			'sudo chown -R "${DEPLOY_USER}:${DEPLOY_GROUP}"',
+		);
+		const resetAt = workflow.indexOf("git reset --hard origin/main");
+		expect(reclaimAt).toBeGreaterThan(-1);
+		expect(resetAt).toBeGreaterThan(reclaimAt);
+	});
+
 	it("does not override onlyBuiltDependencies (uses pnpm-workspace.yaml)", () => {
 		expect(workflow).not.toContain("PNPM_CONFIG_ONLY_BUILT_DEPENDENCIES");
 	});