@clef-sh/core 0.1.14 → 0.1.15-beta.106

package/dist/tx/transaction-manager.d.ts

@@ -0,0 +1,66 @@
+import { GitIntegration } from "../git/integration";
+/**
+ * Options for a single transactional mutation.
+ */
+export interface TransactionOptions {
+    /** Human-readable commit message. Required. */
+    description: string;
+    /**
+     * Paths the mutation will touch (relative to repoRoot).
+     * Used for `git add` and to scope rollback's `git clean`.
+     * Be precise — anything outside this list is not protected by the transaction.
+     */
+    paths: string[];
+    /**
+     * The work itself. Write files via `write-file-atomic` and update the
+     * manifest via the existing helpers. May throw — that triggers rollback.
+     */
+    mutate: () => Promise<void>;
+    /** Auto-commit on success. Default: true */
+    commit?: boolean;
+    /** Allow running with a dirty working tree. Default: false */
+    allowDirty?: boolean;
+    /** Skip the pre-commit hook (`git commit --no-verify`). Default: false */
+    noVerify?: boolean;
+}
+/**
+ * Result of a successful transaction.
+ */
+export interface TransactionResult {
+    /** SHA of the commit created, or null if `commit: false` was passed */
+    sha: string | null;
+    /** Paths included in the commit */
+    paths: string[];
+    /** True if the working tree was already dirty when the transaction started */
+    startedDirty: boolean;
+}
+/**
+ * Wraps mutations to the matrix in a transactional commit:
+ *   1. Acquire a single-writer lock on .clef/.lock
+ *   2. Validate the working tree (clean, in a git repo, not mid-rebase, etc.)
+ *   3. Run the mutation
+ *   4. git add the declared paths and git commit
+ *   5. On any failure between steps 3 and 4: git reset --hard to the
+ *      pre-mutation HEAD, git clean -fd the declared paths, rethrow.
+ *
+ * Each transaction creates exactly one git commit. Each commit can be
+ * reverted with `git revert <sha>`.
+ */
+export declare class TransactionManager {
+    private readonly git;
+    constructor(git: GitIntegration);
+    run(repoRoot: string, opts: TransactionOptions): Promise<TransactionResult>;
+    /**
+     * Restore the working tree to the pre-mutation state.
+     *
+     * If the transaction started with a clean tree, we can `git reset --hard`
+     * to the pre-mutation SHA without losing any work.
+     *
+     * If the transaction started dirty (allowDirty was set), we cannot safely
+     * reset because that would discard the user's pre-existing uncommitted
+     * changes. In that case, we throw a rollback error and tell the user to
+     * inspect manually.
+     */
+    private rollback;
+}
+//# sourceMappingURL=transaction-manager.d.ts.map

package/dist/tx/transaction-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-manager.d.ts","sourceRoot":"","sources":["../../src/tx/transaction-manager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOpD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,mCAAmC;IACnC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;CACvB;AAeD;;;;;;;;;;;GAWG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,cAAc;IAE1C,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAuIjF;;;;;;;;;;OAUG;YACW,QAAQ;CAqCvB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clef-sh/core",
-  "version": "0.1.14",
+  "version": "0.1.15-beta.106",
   "description": "Core library for Clef — git-native secrets management",
   "repository": {
     "type": "git",
@@ -33,11 +33,15 @@
   },
   "dependencies": {
     "age-encryption": "^0.3.0",
+    "proper-lockfile": "^4.1.2",
+    "write-file-atomic": "^7.0.0",
     "yaml": "^2.8.3"
   },
   "devDependencies": {
     "@types/jest": "^29.5.0",
     "@types/node": "^20.11.0",
+    "@types/proper-lockfile": "^4.1.4",
+    "@types/write-file-atomic": "^4.0.3",
     "esbuild": "^0.27.4",
     "jest": "^29.7.0",
     "ts-jest": "^29.1.0",