@everystack/server 0.4.33 → 0.4.34

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `@everystack/server` are documented here.
 
 Format based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.4.34] - 2026-09-27
+
+### Added
+
+- apply state prerequisites atomically
+
+### Fixed
+
+- govern state prerequisites
+
 ## [0.4.33] - 2026-09-24
 
 ### BREAKING CHANGES

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everystack/server",
-  "version": "0.4.33",
+  "version": "0.4.34",
   "description": "Server runtime primitives for Lambda — event adapters, routing, SSR, image processing",
   "license": "AGPL-3.0-only",
   "author": "Scalable Technology, Inc. <licensing@scalable.technology>",
@@ -187,8 +187,8 @@
     "sst": "4.13.1",
     "ts-jest": "29.4.9",
     "typescript": "5.9.3",
-    "@everystack/auth": "0.4.6",
-    "@everystack/cli": "0.4.93"
+    "@everystack/cli": "0.4.98",
+    "@everystack/auth": "0.4.8"
   },
   "scripts": {
     "test": "jest",

package/src/plugin.ts

@@ -1242,7 +1242,7 @@ export function dbPlugin(options: DbPluginOptions): Plugin {
     // direct --database-url path runs, only here the connection never leaves the
     // Lambda. A destructive plan snapshots first (db:backup), in order.
     actions['db:apply'] = async (payload, ctx) => {
-      const { plan, contractVersion, actor, gitRef, dirty, descentVerdict, descentAttested, authorityVerdict, stage, snapshotRef } =
+      const { plan, contractVersion, actor, gitRef, dirty, stateOnly, descentVerdict, descentAttested, authorityVerdict, stage, snapshotRef } =
         (payload ?? {}) as {
           plan?: any;
           /** The CLI's db:apply wire-contract version. Checked for EXACT equality against this
@@ -1253,11 +1253,12 @@ export function dbPlugin(options: DbPluginOptions): Plugin {
           /** The CLI applied from a dirty worktree — recorded on the schema_log witness so a
            *  later descent ignores this row's git_ref. */
           dirty?: boolean;
+          stateOnly?: boolean;
           descentVerdict?: { ok: boolean; reason?: string };
           /** What the CLI's descent step decided, to record in the schema_log outcome
-           *  (`applied — <note>`): a honoured --attest-lineage-lost waiver, or a PROVEN DRIFT
-           *  origin (`descent: drift-origin proven (never-declared | hand-edited since … | applied
-           *  from a DIRTY worktree at …)`) — the
+           *  (`applied — <note>`): a honoured --attest-lineage-lost waiver, or a DRIFT
+           *  origin (`descent: drift-origin never-declared (…) | hand-edited since … | applied
+           *  from a DIRTY worktree at …`) — the
            *  record that makes this row the origin every later apply descends from. */
           descentAttested?: string;
           authorityVerdict?: { ok: boolean; reason?: string };
@@ -1297,6 +1298,11 @@ export function dbPlugin(options: DbPluginOptions): Plugin {
         const result: any = await opsDb.execute(sql.raw(query));
         return Array.isArray(result) ? result : result?.rows ?? [];
       };
+      const transaction = async <T>(work: (transactionRunner: (query: string) => Promise<any[]>) => Promise<T>): Promise<T> =>
+        opsDb.transaction(async (tx: any) => work(async (query: string) => {
+          const result: any = await tx.execute(sql.raw(query));
+          return Array.isArray(result) ? result : result?.rows ?? [];
+        }));
       // The fingerprint endpoints this apply gates on are multi-statement reads, so they
       // run as ONE session on this container's operator connection. Server-side that was
       // always one connection; saying so in the type is what stops a future caller from
@@ -1315,9 +1321,11 @@ export function dbPlugin(options: DbPluginOptions): Plugin {
         // in order, atomic with the lock. Authority/snapshot stay conditional (destructive-only, and
         // the stage lane refuses destructive outright, so they never light up on this lane).
         const applyOptions: StageApplyOptions = {
+          transaction,
           actor: actor ?? null,
           gitRef: gitRef ?? null,
           dirty: dirty === true,
+          stateOnly: stateOnly === true,
           checkDescent: async () => (descentVerdict.ok ? { ok: true as const } : { ok: false as const, reason: descentVerdict.reason ?? 'descent refused' }),
           // The CLI's descent record (a honoured waiver, or a proven-drift origin) lands in the
           // schema_log outcome; the witness query matches `applied%`, so the row stays a witness.